How can I execute XSS by bypassing filters for "=","<script" and "javascript" ?

How can I execute XSS by bypassing filters for "=","<script" and "javascript" ? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: How can I execute XSS by bypassing filters for "=","<script" and "javascript" ? (/showthread.php?tid=4932872)

How can I execute XSS by bypassing filters for "=","<script" and "javascript" ? - mr.cracker - Aug 2, 2015

I want to execute XSS.
but WAF filters ==>
Code:

Code 
<script, javascript, =

my search terms are => p1=sachin&p2=dravid
output :
Code:

Code 
<input type="text" value="sachin"/>

<input type="text" value="dravid"/>

if I give <script, javascript,= it suddenly redirect to Default Error page!

Below code doesn't give any error,
Code:

Code 
<<!--mm-->script>alert(1);</script>

But in browser it doesn't execute as a <script> tag.

i can use any other charcters except <script, javascript, = .
I can inject HTML tagslike,
Code:

Code 
"><marquee><H1>HACKED<H1><marquee>[b]<!--[/b]

But I wanna execute XSS.
Without above filtered terms how can I bypass the WAF ?

* - Yoshikage Kira - Aug 2, 2015

try this:
"><body onload=alert(1)><marquee><!--
edit:
if it censors =, not sure if there is a solution lol..

* - mr.cracker - Aug 2, 2015

(Aug 2, 2015 11:05 AM)Grеed Wrote: try this:
"><body onload=alert(1)><marquee><!--
edit:
if it censors =, not sure if there is a solution lol..

It filters "=, <script, javascript" .
All other characters are allowed!
Then too can't we bypass it !?