paris/i-0b15957f6074fd500
by SadServersMore by SadServers
nt-Type: application/x-www-form-urlencoded' --data-urlencode 'password=" or 1=1'Access denied!admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localnt-Type: application/x-www-form-urlencoded' --data-urlencode 'password=" or "1"=Access denied!admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localnt-Type: application/x-www-form-urlencoded' --data-urlencode 'password=^Cor "1"=admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localhost:5000' \ --header 'Content-Type: application/x-www-form-urlencoded' \ --data-urlencode 'password='\'' or '\''1'\''='\''1' admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localhost:5000' \al--header 'Content-Type: application/x-www-form-urlencoded' \ --data-urlencode 'password=' admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'localhost:5000' \al--form 'password="admin"' Access denied!admin@i-09f0e7c74e34fbdd9:~$ curl --location --request POST 'locald="admin"'
monaco/i-09f0e7c74e34fbdd9 05:55
by SadServersCOMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME gotty 546 admin 6u IPv6 10655 0t0 TCP *:http-alt (LISTEN) gotty 546 admin 7u IPv6 11010 0t0 TCP ip-172-31-39-38.us-east-2.co-172-31-16-109.us-east-2.compute.internal:40862 (ESTABLISHED) sadagent 547 admin 7u IPv6 10631 0t0 TCP *:6767 (LISTEN) admin@i-0ec94a674eea95352:~$ nc localhost:5000 & [1] 899 admin@i-0ec94a674eea95352:~$ nc: missing port number nc -lvvp localhost:5000 nc: getaddrinfo: Servname not supported for ai_socktype [1]+ Exit 1 nc localhost:5000 admin@i-0ec94a674eea95352:~$ fg bash: fg: current: no such job admin@i-0ec94a674eea95352:~$ nc localhost 5000
paris/i-0ec94a674eea95352 04:22
by SadServers83714-0000000000000001-00060590bd3fe579.journal (8.0M). Deleted archived journal /var/log/journal/ec26942be8219bc22967aa0256120fca/user-ff2e79d2-00000000000006c2-000605912b0e0381.journal (8.0M). Vacuuming done, freed 16.0M of archived journals from /var/log/journal/ec26942beadmin@i-0ef717ab6ee2a91b3:~$ dh -f bash: dh: command not found admin@i-0ef717ab6ee2a91b3:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 6.0G 1.3G 83% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0ef717ab6ee2a91b3:~$ df -h
kihei/i-0ef717ab6ee2a91b3 02:02
by SadServers> GET / HTTP/1.1 > Host: localhost:5000 > Accept: */* > User-Agent: Firefix > * Mark bundle as not supporting multiuse < HTTP/1.1 200 OK < Server: Werkzeug/2.3.7 Python/3.9.2 < Date: Fri, 20 Oct 2023 18:27:19 GMT < Content-Type: text/html; charset=utf-8 < Content-Length: 35 < Connection: close < * Closing connection 0 Welcome! Password is FDZPmh5AX3oiJtadmin@i-09dc8f23dc5f45423:~$