Google's XSS Challenge

TheDigitalDev

This is a fun challenge I stumbled upon, meant to educate web designers in the dangers of XSS(Cross-Site Scripting) attacks, which allow a remote user to execute javascript code, which can do nasty things in the wrong hands

https://xss-game.appspot.com/

I've gotten up to level 4, still working on it >.>

Last edited by TheDigitalDev (Dec. 14, 2015 10:49:03)

sectest33

http://www.goodsite.com
Got You
Got You
Got You
Got You
[td=width='*'

onmouseover='javascript:alert(String.fromCharCode(88,83,83))']Got You
http://www.good.com? onmousemove=javascript:alert(String.fromCharCode(88,83,83));//

Last edited by sectest33 (Sept. 20, 2016 18:09:36)

sectest33

test

Last edited by sectest33 (Sept. 20, 2016 18:11:46)

ateesdalejr

TheDigitalDev wrote:
This is a fun challenge I stumbled upon, meant to educate web designers in the dangers of XSS(Cross-Site Scripting) attacks, which allow a remote user to execute javascript code, which can do nasty things in the wrong hands

https://xss-game.appspot.com/

I've gotten up to level 4, still working on it >.>

I beat level one! I'm surprised I even got it.
I injected the script in the search query.
It seems it won't let me advance to the next level though

Spoilers for level one below:
</html>

Last edited by ateesdalejr (Sept. 20, 2016 18:24:42)

XSS-ATTACK · Google's XSS Challenge 1 *Last edited by XSS-ATTACK (Dec. 2, 2020 20:59:57)*

1

Last edited by XSS-ATTACK (Dec. 2, 2020 20:59:57)

Discuss Scratch