Cross-Site Scripting (XSS)

Esta página agrega los recursos para practicar Cross-Site Scripting (XSS) de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

Recursos curados

Fuente	Enlace
HackTricks	https://book.hacktricks.wiki/en/pentesting-web/xss-cross-site-scripting/index.html
PortSwigger	https://portswigger.net/web-security/cross-site-scripting

Máquinas HTB que practican Cross-Site Scripting (XSS) (13)

Máquina	SO	Dificultad
Anubis	Windows	INSANE
Bankrobber	Windows	INSANE
Book	Linux	MEDIUM
CrossFit	Linux	INSANE
EarlyAccess	Linux	HARD
Holiday	Linux	HARD
Nightmare	Linux	INSANE
OverGraph	Linux	HARD
Quick	Linux	HARD
RedCross	Linux	MEDIUM
Schooled	Linux	MEDIUM
SecNotes	Windows	MEDIUM
Stacked	Linux	INSANE

Labs PortSwigger que practican Cross-Site Scripting (XSS) (36)

Lab	Dificultad	Topic	Oficial
DOM XSS in document.write sink using source location.search	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in innerHTML sink using source location.search	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in jQuery anchor href attribute sink using location.search source	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in jQuery selector sink using a hashchange event	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Exploiting DOM clobbering to enable XSS	APPRENTICE	DOM-based Vulnerabilities	Abrir
Reflected XSS in a JavaScript URL with some characters blocked	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into a JavaScript string with angle brackets HTML encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into attribute with angle brackets HTML-encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into HTML context with nothing encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS protected by CSP, with CSP bypass	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS with event handlers and href attributes blocked	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Stored XSS into anchor href attribute with double quotes HTML-encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Stored XSS into HTML context with nothing encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
DOM XSS in document.write sink using source location.search inside a select element	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
DOM XSS using web messages	PRACTITIONER	DOM-based Vulnerabilities	Abrir
DOM XSS using web messages and a JavaScript URL	PRACTITIONER	DOM-based Vulnerabilities	Abrir
DOM XSS using web messages and JSON.parse	PRACTITIONER	DOM-based Vulnerabilities	Abrir
DOM XSS via an alternative prototype pollution vector	PRACTITIONER	Prototype Pollution	Abrir
DOM XSS via client-side prototype pollution	PRACTITIONER	Prototype Pollution	Abrir
Exploiting clickjacking vulnerability to trigger DOM-based XSS	PRACTITIONER	Clickjacking	Abrir
Exploiting cross-site scripting to capture passwords	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Exploiting cross-site scripting to steal cookies	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Exploiting HTTP request smuggling to deliver reflected XSS	PRACTITIONER	HTTP Request Smuggling	Abrir
Exploiting XSS to bypass CSRF defenses	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected DOM XSS	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS in canonical link tag	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into a JavaScript string with single quote and backslash escaped	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into HTML context with all tags blocked except custom ones	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into HTML context with most tags and attributes blocked	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS protected by very strict CSP, with dangling markup attack	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS with some SVG markup allowed	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Stored DOM XSS	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir

Rooms TryHackMe que practican Cross-Site Scripting (XSS) (10)

Room	Dificultad	Tipo	Acceso	Oficial
25 Days of Cyber Security	EASY	Walkthrough	🟢 Free	Abrir
Advent of Cyber 2 [2020]	EASY	Walkthrough	🟢 Free	Abrir
Custom Tooling Using Python	EASY	Walkthrough	🟢 Free	Abrir
Intro to Cross-site Scripting	EASY	Walkthrough	🔵 VIP	Abrir
Learn Rust	EASY	Walkthrough	🟢 Free	Abrir
OWASP Juice Shop	EASY	Walkthrough	🟢 Free	Abrir
Web Application Basics	EASY	Walkthrough	🟢 Free	Abrir
XSS	EASY	Walkthrough	🟢 Free	Abrir
XSS - Merry XSSMas	EASY	Walkthrough	🟢 Free	Abrir
NahamStore	MEDIUM	Challenge	🟢 Free	Abrir

Skills relacionadas

← Volver al glosario completo Última actualización: 2026-05-09

​Cross-Site Scripting (XSS)

​Recursos curados

​Máquinas HTB que practican Cross-Site Scripting (XSS) (13)

​Labs PortSwigger que practican Cross-Site Scripting (XSS) (36)

​Rooms TryHackMe que practican Cross-Site Scripting (XSS) (10)

​Skills relacionadas