xxx.com/param[]=a
xxx.com/param=|perl
xxx.com/param=../../../../../../etc/passwd
xxx.com/param='"`#;--
xxx.com/param=<script>alert(1)</script>
xxx.com/.env
xxx.com/page../index.py