#xss CTF challenges

40 CTF challenges using xss from 26 CTFs (2021–2025), 40 with writeups. Mostly Web (95%).

Web · 38 Pwn · 1 Misc · 1

Often combined with

#csp-bypass 9 #web 8 #cookie-theft 5 #prototype-pollution 2 #trusted-types 2 #dompurify-bypass 2 #csrf 2 #dom-clobbering 1 #nodejs 1 #unicode-normalization 1 #sql-injection 1 #regexp-input-leak 1 #rust 1 #use-after-free 1 #wasm 1

Challenges

Filter and sort these in the challenge browser →