Added XSS payloads

nemesida-waf · May 24, 2023 · ba1fe2b · ba1fe2b
1 parent f1bb873
commit ba1fe2b
Show file tree

Hide file tree

Showing 4 changed files with 43 additions and 0 deletions.
diff --git a/payload/XSS/307.json b/payload/XSS/307.json
@@ -7,6 +7,7 @@
       "USER-AGENT": "\"><BODy onbeforescriptexecute=\"x1='cookie';c=')';b='a';location='jav'+b+'script:con'+'fir\u006d('+'document'+'.'+x1+c\">",
       "REFERER": "\"><BODy onbeforescriptexecute=\"x1='cookie';c=')';b='a';location='jav'+b+'script:con'+'fir\u006d('+'document'+'.'+x1+c\">",
       "HEADER": "\"><BODy onbeforescriptexecute=\"x1='cookie';c=')';b='a';location='jav'+b+'script:con'+'fir\u006d('+'document'+'.'+x1+c\">",
+      "ENCODE": "Base64 UTF-16",
       "BLOCKED": true
     }
   ]

diff --git a/payload/XSS/308.json b/payload/XSS/308.json
@@ -0,0 +1,14 @@
+{
+  "payload": [
+    {
+      "ARGS": "<--<img/src=%20onerror=confirm``>%20--!>",
+      "BODY": "<--<img/src=%20onerror=confirm``>%20--!>",
+      "COOKIE": "<--<img/src=%20onerror=confirm``>%20--!>",
+      "USER-AGENT": "<--<img/src=%20onerror=confirm``>%20--!>",
+      "REFERER": "<--<img/src=%20onerror=confirm``>%20--!>",
+      "HEADER": "<--<img/src=%20onerror=confirm``>%20--!>",
+      "ENCODE": "Base64 UTF-16",
+      "BLOCKED": true
+    }
+  ]
+}
diff --git a/payload/XSS/309.json b/payload/XSS/309.json
@@ -0,0 +1,14 @@
+{
+  "payload": [
+    {
+      "ARGS": "<iframe src=java&Tab;sc&Tab;ript:al&Tab;ert()></iframe>",
+      "BODY": "<iframe src=java&Tab;sc&Tab;ript:al&Tab;ert()></iframe>",
+      "COOKIE": "<iframe src=java&Tab;sc&Tab;ript:al&Tab;ert()></iframe>",
+      "USER-AGENT": "<iframe src=java&Tab;sc&Tab;ript:al&Tab;ert()></iframe>",
+      "REFERER": "<iframe src=java&Tab;sc&Tab;ript:al&Tab;ert()></iframe>",
+      "HEADER": "<iframe src=java&Tab;sc&Tab;ript:al&Tab;ert()></iframe>",
+      "ENCODE": "Base64 UTF-16",
+      "BLOCKED": true
+    }
+  ]
+}
diff --git a/payload/XSS/310.json b/payload/XSS/310.json
@@ -0,0 +1,14 @@
+{
+  "payload": [
+    {
+      "ARGS": "<sVg/onLy=1 onLoaD=confirm(1)//",
+      "BODY": "<sVg/onLy=1 onLoaD=confirm(1)//",
+      "COOKIE": "<sVg/onLy=1 onLoaD=confirm(1)//",
+      "USER-AGENT": "<sVg/onLy=1 onLoaD=confirm(1)//",
+      "REFERER": "<sVg/onLy=1 onLoaD=confirm(1)//",
+      "HEADER": "<sVg/onLy=1 onLoaD=confirm(1)//",
+      "ENCODE": "Base64 UTF-16",
+      "BLOCKED": true
+    }
+  ]
+}