当前位置:网站首页>XSS unexpected event
XSS unexpected event
2022-07-06 14:07:00 【Unknown white hat】
1. FSCommand() ( When an attacker needs to be embedded Flash This event can be used when executing in an object )
2. onAbort() ( When the user stops loading the picture )
3. onActivate() ( When the object is activated )
4. onAfterPrint() ( Triggered after the user prints or performs print preview )
5. onAfterUpdate() ( Triggered by the data object after updating data from the data source object )
6. onBeforeActivate() ( Fires before the object is set to the active element )
7. onBeforeCopy() ( The attacker executes the attack code before copying the selected part to the clipboard - An attacker can execute execCommand("Copy") Function trigger )
8. onBeforeCut() ( The attacker executes attack code before cutting the selected part to the clipboard )
9. onBeforeDeactivate() ( Triggered before the active element of the current object changes )
10. onBeforeEditFocus() ( Triggered when an object containing editable elements becomes active or when an editable object is selected )
11. onBeforePaste() ( Before the user is induced to paste or use execCommand("Paste") Function trigger )
12. onBeforePrint() ( Users need to be induced to print or attackers can use it print() or execCommand("Print") function ).
13. onBeforeUnload() ( Users need to be induced to close the browser - Unless you execute... From the parent window , Otherwise, the attacker cannot close the current window )
14. onBeforeUpdate() ( Triggered by the data object before updating data from the data source object )
15. onBegin() ( When the element cycle begins, it is determined by onbegin The event immediately triggers )
16. onBlur() ( Triggered when another window pops up and the current window loses focus )
17. onBounce() ( When marquee Object's behavior Property is set to “alternate” And when the scrolling content of the caption reaches one side of the window )
18. onCellChange() ( Triggered when the data of the data provider changes )
19. onChange() (select,text, or TEXTAREA Triggered when the field loses focus and the value changes )
20. onClick() ( Click in the form to trigger )
21. onContextMenu() ( The user needs to right-click the attack area )
22. onControlSelect() ( Triggered when the user creates a control selection on an object )
23. onCopy() ( Users need to copy something or use execCommand("Copy") Trigger on command )
24. onCut() ( Users need to cut something or use execCommand("Cut") Trigger on command )
25. onDataAvailable() ( The user needs to modify the data in the element , Or similar functions provided by attackers )
26. onDataSetChanged() ( Triggered when the data set is changed due to the change of data source object )
27. onDataSetComplete() ( Triggered when all data in the data source object is available )
28. onDblClick() ( The user double clicks a form element or link )
29. onDeactivate() ( Triggered when the active element is converted from the current object to another object in the parent document )
30. onDrag() ( Triggers when an element is being dragged )
31. onDragEnd() ( Triggered when the user finishes dragging the element )
32. onDragLeave() ( Triggered when the user drags the element away from the drop target )
33. onDragEnter() ( The user drags the object to the legal drag target )
34. onDragOver() ( The user drags the object across the legal drag target )
35. onDragDrop() ( The user will an object ( Such as files ) Drag to browser window )
36. onDragStart() ( Triggered when the user starts dragging elements )
37. onDrop() ( Triggered when the drag element is placed in the target area )
38. onEnded() ( In the video / Audio (audio/video) Trigger at the end of playback )
39. onError() ( Error loading document or image )
40. onErrorUpdate() ( Trigger on the data binding object when an error is encountered in updating related data from the data source object )
41. onFilterChange() ( Trigger when the filter completes the state change )
42. onFinish() ( When marquee When scrolling is complete, an attacker can execute an attack )
43. onFocus() ( When the window gains focus, an attacker can execute attack code )
44. onFocusIn() ( Triggered before the element is about to be set to focus )
45. onFocusOut() ( An attacker can trigger attack code when the window loses focus )
46. onHashChange() ( When the anchor part changes, the attack code is triggered )
47. onHelp() ( An attacker can press... When the user activates the current form F1 Trigger attack code )
48. onInput() ( stay <input> or <textarea> Triggered when the value of an element changes )
49. onKeyDown() ( Triggered when the user presses a key )
50. onKeyPress() ( Triggered when a keyboard key is pressed and a key is released )
51. onKeyUp() ( Triggered when the user releases a key )
52. onLayoutComplete() ( Triggered when the user finishes printing or print preview )
53. onLoad() ( The attacker triggers the attack code after the window is loaded )
54. onLoseCapture() ( Can be releaseCapture() Methods the trigger )
55. onMediaComplete() ( When a streaming media file is used , This event can be triggered before the file is played )
56. onMediaError() ( When the user opens a page containing media files in the browser , Event triggered when a problem occurs )
57. onMessage() ( The event is triggered when the page receives a message )
58. onMouseDown() ( The attacker needs to make the user click on an image to trigger an event )
59. onMouseEnter() ( Triggered when the cursor moves to an object or area )
60. onMouseLeave() ( The attacker needs to move the user's cursor to an image or table and then move it to trigger an event )
61. onMouseMove() ( The attacker needs to let the user move the cursor to a picture or table )
62. onMouseOut() ( The attacker needs to move the user's cursor to an image or table and then move it to trigger an event )
63. onMouseOver() ( Move the cursor to an object or area )
64. onMouseUp() ( The attacker needs to make the user click on an image )
65. onMouseWheel() ( Attackers need to let users use their mouse wheel )
66. onMove() ( Triggered when a user or attacker moves a page )
67. onMoveEnd() ( Triggered when the user or attacker moves the page )
68. onMoveStart() ( Triggered when a user or attacker starts moving a page )
69. onOffline() ( Triggered when the browser switches from online mode to offline mode )
70. onOnline() ( Triggered when the browser switches from offline mode to online mode )
71. onOutOfSync() ( Triggered when the element is out of sync with the current timeline )
72. onPaste() ( Users can paste or attackers can use execCommand("Paste") Function triggers )
73. onPause() ( Triggered when video or audio pauses )
74. onPopState() ( Browse history in the window (history object ) Trigger when a change occurs )
75. onProgress() ( An attacker can be in a FLASH Event triggered when loading )
76. onPropertyChange() ( Triggered when the user or attacker needs to change the attribute of the element )
77. onReadyStateChange() ( Every time readyState Automatically called when the property changes )
78. onRedo() ( Triggered when the user returns to the previous page )
79. onRepeat() ( Event is triggered when the playback is repeated )
80. onReset() ( Triggered when a user or attacker resets the form )
81. onResize() ( When the user changes the window size , An attacker can automatically trigger... In this way :<SCRIPT>self.resizeTo(500,400);</SCRIPT>)
82. onResizeEnd() ( Trigger when the user completes changing the size of the form )
83. onResizeStart() ( Trigger when the user starts to change the size of the form )
84. onResume() ( Triggered when the element continues to play )
85. onReverse() ( Trigger when the element is played back )
86. onRowsEnter() ( The user or attacker needs to change a row in the data source )
87. onRowExit() ( Triggered when a user or attacker changes a row in the data source and exits )
88. onRowDelete() ( The user or attacker needs to delete a row in the data source )
89. onRowInserted() (user or attacker would needto insert a row in a data source)
90. onScroll() ( Users need to scroll or attackers use scrollBy() function )
91. onSeek() ( Triggered when the user performs a lookup operation on an element )
92. onSelect() ( The user needs to select some text - An attacker can trigger... In this way : window.document.execCommand("SelectAll");)
93. onSelectionChange() ( Triggered when the user selects a text change - An attacker can trigger... In this way : window.document.execCommand("SelectAll");)
94. onSelectStart() ( Triggered when the user starts selecting text - An attacker can trigger... In this way : window.document.execCommand("SelectAll");)
95. onStart() ( stay marquee Triggered when the object starts a loop )
96. onStop() ( Triggered when the user presses the stop button or leaves the page )
97. onStorage() ( When Web Storage Trigger on update )
98. onSyncRestored() ( Triggered when the element is back in sync with its timeline )
99. onSubmit() ( Require users or attackers to submit forms )
100.onTimeError() ( Triggered when the user or attacker sets the time attribute incorrectly )
101.onTrackChange() ( Triggered when a user or attacker changes a song in the playlist )
102.onUndo() ( Triggered when the user returns to the previous browsing record page )
103.onUnload() ( Triggered when the user clicks any link or presses the back button or the attacker forces a click )
104.onURLFlip() ( When an advanced streaming format (ASF) file , By a HTML+TIME( Multimedia extension based on time interaction ) When the media tag is playing , Can be triggered at ASF Attack script embedded in the file )
105.seekSegmentTime() ( This is a method that can locate a specific point in an element within a certain time period , And can play from this point . This paragraph contains a repeating timeline , And include the use of AUTOREVERSE Property to play backwards .)
边栏推荐
猜你喜欢
Renforcer les dossiers de base de l'apprentissage
扑克牌游戏程序——人机对抗
Record once, modify password logic vulnerability actual combat
UGUI—Text
Yugu p1012 spelling +p1019 word Solitaire (string)
Intensive literature reading series (I): Courier routing and assignment for food delivery service using reinforcement learning
小程序web抓包-fiddler
攻防世界MISC练习区(SimpleRAR、base64stego、功夫再高也怕菜刀)
HackMyvm靶机系列(7)-Tron
内网渗透之内网信息收集(五)
随机推荐
实验八 异常处理
简单理解ES6的Promise
HackMyvm靶机系列(7)-Tron
记一次edu,SQL注入实战
强化学习基础记录
1. First knowledge of C language (1)
Hackmyvm target series (6) -videoclub
7-6 矩阵的局部极小值(PTA程序设计)
sqqyw(淡然点图标系统)漏洞复现和74cms漏洞复现
7-8 7104 Joseph problem (PTA program design)
Canvas foundation 2 - arc - draw arc
SRC mining ideas and methods
浅谈漏洞发现思路
"Gold, silver and four" job hopping needs to be cautious. Can an article solve the interview?
Renforcer les dossiers de base de l'apprentissage
SRC挖掘思路及方法
1143_ SiCp learning notes_ Tree recursion
7-11 机工士姆斯塔迪奥(PTA程序设计)
It's never too late to start. The tramp transformation programmer has an annual salary of more than 700000 yuan
2. First knowledge of C language (2)