XSSy  Home  All Labs  Timeline  Blog  Rules  Login

Rules

Keep it safe for work and civil. Absolutely no hate speech or sexual/graphic media.

Report rule violations or unsafe behaviour.

No personal or confidential data. This is a test environment, treat it as such.

No warranty. The security of the site and data is not guaranteed. Hacking challenges are likely to be targeted by hackers. The site may be withdrawn at any time, and any content may be removed.

No attacking the site itself. Obviously, attacking the labs is permitted, but other parts of the site are off limits.

Automated scanners may be used with care. Configure tools to scan for XSS flaws only, and throttle to 5 requests per second.

Use spoiler tags. In off-site discussions, protect any solutions with spoiler tags.

Labs are for XSS purposes only.