A collection of all monthly Intigriti XSS challenges that I made writeups of. Learn a lot about Web and Cross-Site Scripting vulnerabilities

Post thumbnail
WebSQL InjectionXSSEncoding

Intigriti July XSS Challenge (0722)

A Cross-Site Scripting challenge where you need to do 2 nested SQL Injections to finally place your payload, and bypass CSP using googleapis.com

Post thumbnail
WebXSSFilter Bypass

Intigriti May XSS Challenge (0522)

A Prototype Pollution challenge with a CVE in a jQuery plugin. Bypass a filter by setting our own options to get XSS

Post thumbnail

Intigriti October XSS Challenge (1021)

An XSS challenge by Intigriti where you manipulate the DOM to fix JavaScript syntax and execute your code