<?xml version="1.0" encoding="utf-8"?>
<document>
  <get>$_env,$_get,$_post,$_request,$_request[cmd,$_server,$_session,${ifs},()},)limit,*(|(objectclass=|||,../cmd,../wp-,.htaccess,.php/admin,/etc/,/frameset,/var/lib/php,127.0.0.1:,4294967296,:;};,;!--=,;echo,alert(,=alert(,@@datadir,@@hostname,@eval,@replace(,[link=http://,_46esab,_start_,allow_url_,auto_prepend_file,auto_prepend_file,base64_,call_user_func(,cmd.exe,disable_functions,document.,echo$,error_reporting(,eval(,expect://[,file_get_contents(,fsockopen,get[cmd,globals[,hex_ent,http/1.,http_cmd,iframesrc=,inurl:,javascript:alert(,ki9xsevsrs8q,location.replace(,md5(,mosconfig_,mysql_query,ob_start,onerror=alert(,onload=,open_basedir,passthru(,php/login,php://,php_self,php_uname,phpinfo(,preg_replace,print@@variable,prompt(,query_string,replace(,rush=,safe_mode,set-cookie,set_magic_quotes_runtime,sha1(,sha2(,shell_exec(,socket_create,sp_password,string.fromcharcode,stripos(,strpos(,substr(,system(,unhex(,usr/bin/perl,wget,window.location,xmlrpc_decode,xp_cmdshell,}catch(e,}if(,vbscript</get>
  <post>eval(,allow_url_,)*cmd,=cmd|,@eval,concat(,shell_exec(,string.fromcharcode,/etc/passwd,get[cmd,passthru(,cpowershelliex,/c powershell.exe,onmouseover</post>
  <bad_ua>${jndi:ldap://,${jndi:rmi://,${jndi:ldaps://,${jndi:dns://,${print,.chr(,:;};,base64_,document.location,eval(,exec(,getconfig(,jdatabasedrivermysql,onerror,passthru,phpinfo(,popen(,shell_exec,system(,usr/bin/perl,wpscan,prism,xkeyscore</bad_ua>
  <good_ua>2checkout,alexa,android,apple,argotic,authorize,bing,braintree,chrome,duckduckbot,facebookexternalhit,go-http-client,google,healthcarentsickcare,hetrixtools,hexometer,ia_archiver,iabot,ipn,isitdownrightnow,lynx,midori,mastodon,mozilla,msn.com,netcraftssl,netsurf,opera,paypal,pinterest,reeder,safari,safedns,site24x7 tools,stripe,tumblr,twingly,twitter,updown,w3m,whatsapp,windows,windows nt,wordpress,wp.com,w3.org,zoominfobot</good_ua>
</document>