Cross-Site Scripting (XSS)

That previous attack only affects yourself but we will look at one that could affect others. You might also be asking what is the point in the alert - is it really going to bother people? In practice, attacks by someone malicious will involve more than alert('XSS') but it is a nice visible way to test and if you can execute an alert attack then you have found a major bug in the site.

Challenge 3

So for the next challenge with XSS you will need to make the same attack, however to add a bit of extra challenge you won't be able to enter text into the input box. See if you can figure it out. If you are stuck, try entering a value if 10 for a hint.

<script>alert('XSS')</script>

Your Rating: no value submitted

Once you enter the XSS attack <script>alert('XSS')</script>, a link to the next challenge will appear here


Created by Richard Adams :: View challenge list