how to inject javascript without using script tags?

javascript, xss

Solution

Just so you know, there is an XSS Cheat Sheet you can refer to.

Problem

I cant use the script tags It alerts when I do , which is only useful for testing. It filters them out: ``` script > * SCRIPT > SCRIPT sCriPt > sCriPt ``` so, i try to use capital script tags but it turns to: ``` *CRIPT>alert(1)</SCRIPT> ``` I have tried using multiple tags. How can I inject regular javascript with this? Oh, and I cant use quotes.

Original source