how to inject javascript without using script tags? [closed]

Question

I cant use the script tags It alerts when I do , which is only useful for testing. It filters them out:

    script > *
    SCRIPT > SCRIPT
    sCriPt > sCriPt

so, i try to use capital script tags but it turns to:

    *CRIPT>alert(1)</SCRIPT>

I have tried using multiple tags.

How can I inject regular javascript with this? Oh, and I cant use quotes.

Answer 1

Just so you know, there is an XSS Cheat Sheet you can refer to.