4 ms·

A 16-Level XSS Challenge, held in summer 2014 (plus one hidden level)

• christianmann 12y ago
  Is there a link to the puzzles without the solutions?
  • jaredmcdonald 12y ago
    http://prompt.ml/ http://prompt.ml/ Looks like it's not responding though.
  • bdpuk 12y ago
    http://kcal.pw/ http://kcal.pw/ Gets you to the same challenges.
• pxndx 12y ago
  On level 4, it is assumed that the attacker owns a domain name. Given solutions use 2 unicode characters for the domain name, totalling 6 bytes. The actual shortest domain name in use is 'uz' (http://uz/ http://uz/) which is a registrar for .uz, Uzbekistan's ccTLD, making the answer shorter by 4 bytes.
  • deleted 12y ago
    [deleted]