# Level 1: Hello, world of XSS ![image](https://hackmd.io/_uploads/H12sZ4Gkyl.png) Search: `<script>alert(1)</script>` # Level 2: Persistence is key ![image](https://hackmd.io/_uploads/ryWPmVGyJx.png) `><img src=x onerror=alert(1)>` # Level 3: That sinking Feeling… ![image](https://hackmd.io/_uploads/rkd14EMy1e.png) When user choose one tab image. ![image](https://hackmd.io/_uploads/ry0UjBfyJe.png) Add more script tags to alert() # Level 4: Context matters ![image](https://hackmd.io/_uploads/BkYrJ8fy1x.png) # Level 5: Breaking protocol ![image](https://hackmd.io/_uploads/S1HxgUMJJg.png) ![image](https://hackmd.io/_uploads/SkigxIz1Jg.png) # Level 6: Follow the Rabbit ![image](https://hackmd.io/_uploads/H1Lf4UGkkx.png) ![image](https://hackmd.io/_uploads/HJ874IMJkl.png)