---
# System prepended metadata

title: XSS-game Google
tags: [mini-lab]

---

# Level 1: Hello, world of XSS
![image](https://hackmd.io/_uploads/H12sZ4Gkyl.png)

Search: `<script>alert(1)</script>`

# Level 2: Persistence is key
![image](https://hackmd.io/_uploads/ryWPmVGyJx.png)
`><img src=x onerror=alert(1)>`
# Level 3: That sinking Feeling…
![image](https://hackmd.io/_uploads/rkd14EMy1e.png)
When user choose one tab image.
![image](https://hackmd.io/_uploads/ry0UjBfyJe.png)
Add more script tags to alert()

# Level 4: Context matters
![image](https://hackmd.io/_uploads/BkYrJ8fy1x.png)

# Level 5: Breaking protocol 
![image](https://hackmd.io/_uploads/S1HxgUMJJg.png)
![image](https://hackmd.io/_uploads/SkigxIz1Jg.png)

# Level 6: Follow the Rabbit
![image](https://hackmd.io/_uploads/H1Lf4UGkkx.png)

![image](https://hackmd.io/_uploads/HJ874IMJkl.png)
