_profiler/
admin/
database/
dbredirect?redirect=https%3a%2f%2foast.me%2f
debug/
guest/
rest/
session/
set_profiling?profile=0&collectors=<script>alert(document.domain)</