Learn the basics of XSS attacks.
3 challengesLearn how to launch XSS attacks when injecting into HTML attributes.
3 challengesLearn how to launch XSS attacks when adding a URL for website links.
2 challengesLearn how to launch XSS attacks while evading filters and defenses.
2 challengesLearn how to create XSS exploits using event handlers.
3 challengesLearn how XSS attacks work when injecting directly into JavaScript.
4 challengesLearn to execute XSS attacks in any context with just one payload.
1 challengesLearn how to create real, malicious XSS exploits.
3 challengesLearn how to bulletproof your code against dangerous inputs with proper escaping.
3 challengesLearn how to safely let users add their own HTML tags without introducing XSS vulnerabilities.
2 challengesLearn how to stop XSS vulnerabilities before they're released.
3 challengesLearn how to automatically stop XSS attacks with Content Security Policy and Subresource Integrity.
3 challengesLearn what threats still exist even after implementing a Content Security Policy.
2 challengesLess than the price of one XSS bounty!
In-depth and hands-on XSS training The most accurate and complete XSS training course available Constant updates on the latest attacks and defenses
UPGRADE MY SKILLS UPGRADE MY TEAM