This repository has been archived by the owner on Jul 4, 2023. It is now read-only.

Older Challenges and Write Ups

Jump to bottom

jacobsoo edited this page Dec 16, 2014 · 23 revisions

Older Challenges & Write-Ups

The following list is meant to provide links to all past XSS challenges and the respective write-ups. Some of them are already closed but still allow to play with the code, others might be down already and already offer a write-up. Please let us know if one of the links here is down.

@filedescriptor's Challenges and Puzzles

Mario and Krzysztof Kotowicz's "So you think you can dance?"

http://kotowicz.net/java/java.html

@steike's "alert(1) to win"

ZDResearch XSS challenge

https://zdresearch.com/zdresearch-xss1-challenge-writeup/

Gareth's Hackvertor XSS Challenges

http://challenge.hackvertor.co.uk/?challenge

Soroush Dallili's XSS Challenge series

https://soroush.secproject.com/blog/2012/04/secproject-web-appsec-challenge-series-1/

Google XSS Challenge

XSS Challenge by Krzysztof Kotowicz

http://kotowicz.net/shoutbox/shoutbox.php

Blacklist WAF Bypass Challenge 1

https://hack.me/101575/bypass-blacklist-based-waf-challenge.html

Blacklist WAF Bypass Challenge 2

@avlidienbrunn XSS challenge 1

@avlidienbrunn XSS challenge 2

http://avlidienbrunn.se/xsschallenge2

Cure53 Easter Challenge '13

Cure53 Cookie Challenge

Cure53 Xmas Challenge 2010

http://heideri.ch/xmas2

Mario's XSSMe Challenge

Roman's crazy hard XSS Challenge Number 1

http://xss-shafigullin-pro.appspot.com/s01

Roman's crazy hard XSS Challenge Number 2

http://xss-shafigullin-pro.appspot.com/s02.html

mala's jQuery-related XSS challenge

http://ma.la/xssq/q.cgi

@webtonull XSSMas Challenge

@webtonull XSS Challenge

http://research.insecurelabs.org/helmet.js/

Cure53 Singapore-Training Challenge

https://github.com/cure53/xss-challenge-wiki/wiki/Cure53-Singapore-Training-Challenge

And even more challenges...