Javascript for Hackers (aka XSS)

When we are talking javascript for hackers, the first thing that comes to mind is XSS, but there are plenty more.

This is a great course put out by HackerOne to teach you the basics of not being a script kiddy: https://www.hacker101.com/sessions/javascript_for_hackers

Or you can script learning javascript and just fake it every time. That's what I do.

Some XSS Challenges:

1. https://portswigger.net/web-security/cross-site-scripting/reflected/lab-html-context-nothing-encoded
2. https://portswigger.net/web-security/cross-site-scripting/stored/lab-html-context-nothing-encoded
3. https://portswigger.net/web-security/cross-site-scripting/contexts/lab-javascript-string-angle-brackets-html-encoded

Submit anything you struggled with!