0l4bs Cross-site scripting labs Logo

0l4bs Cross-site scripting labs

0
Free
Visit Website

List of Challenges: ~ Chall 1 | URL ~ Chall 2 | Form ~ Chall 3 | User-Agent ~ Chall 4 | Referrer ~ Chall 5 | Cookie ~ Chall 6 | LocalStorage ~ Chall 7 | Login Page ~ Chall 8 | File Upload ~ Chall 9 | Base64 Encoding ~ Chall 10 | Removes Alert ~ Chall 11 | Removes Script ~ Chall 12 | Preg_replace ~ Chall 13 | HTML Entities ~ Chall 14 | Regex Filter #1 ~ Chall 15 | Regex Filter #2 ~ Chall 16 | Regex Filter #3 ~ Chall 17 | HTML Entities + URL Encode ~ Chall 18 | HTML Entities #2 (Special Character) ~ Chall 19 | HTML Entities #3 (Input Value) ~ Chall 20 | HTML Entities #4 (Input Value + Capitalizes) Screenshot: Instalation: Run your web server (XAMPP / LAMPP) Clone the repository and put the files in the /htdocs/xss-labs You can access http://localhost:8080/xss-labs Happy Hacking ^_^ Run this image: To run this image you need docker installed. Just run the command: docker run --name web-ctf -d -it -p 80:80 hightechsec/xsslabs Deploy Manually Docker image: Clone this repo (git clone https://github.com/tegal1337/0l4bs) Then run docker build -t "xsslabs" . and wait until it's done If the build is clear, run this command

FEATURES

ALTERNATIVES

Backslash Security is an application security platform that uses reachability analysis to enhance SAST and SCA, prioritize vulnerabilities, and provide remediation guidance.

An application security platform that combines API discovery, multiple security testing methodologies, and continuous monitoring to protect modern applications throughout their development lifecycle.

A fake Django admin login screen to detect and notify admins of attempted unauthorized access

Apiiro ASPM Platform is an application security solution that provides code-to-runtime visibility, risk assessment, and remediation capabilities to help organizations manage and reduce security risks across their application portfolio.

Insider is a source code analysis tool focusing on OWASP Top 10 vulnerabilities with easy integration into DevOps pipelines.

Hackazon is a free, vulnerable test site with an online storefront to train and test IT security professionals on various vulnerabilities like SQL Injection and cross-site scripting.

StepSecurity is a platform that enhances GitHub Actions security by providing network egress control, risk discovery, action replacement, and security best practices orchestration.

A Java API for searching and downloading Android applications from Google Play with additional check-in features for generating ANDROID-ID.