HACKR.GG
00 — Overview

Cross-Site Scripting (XSS)

Learn how attackers inject malicious scripts into websites and how to find them yourself.

Beginner·60 min·17 tasks
// By the end of this module
Understand how the browser executes injected JavaScript
Identify and exploit reflected XSS in URL parameters and form inputs
Bypass common client-side filters and basic HTML encoding
Steal cookies and explain why XSS leads to account takeover