Basic XSS Bypasses
Alert
My friends, everyone and their grandmother knows about alert. Please stop using it from now on. Almost all of my labs filter it and so does almost anything in the wild.
For example, this will not work
https://hackxpert.com/labs/RXSS/GET/11.php?fname=<img+src%3Dx+onerror%3Dalert()>
But this will