Cross-Site Scripting (XSS)

Recursos cross-platform para Cross-Site Scripting (XSS): máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

Esta página agrega los recursos para practicar Cross-Site Scripting (XSS) de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

Cobertura: 59 retos en 3 plataformas — 13 HackTheBox · 36 PortSwigger · 10 TryHackMe. 13 con writeup en español, 21 con writeup en vídeo.

​

Por dónde empezar

Ordenado por dificultad real. A igual nivel, primero el lab aislado, después la room guiada y por último la máquina completa.

1. PortSwigger — DOM XSS in document.write sink using source location.search (Apprentice) · 🇬🇧
2. PortSwigger — DOM XSS in innerHTML sink using source location.search (Apprentice) · 🇬🇧
3. PortSwigger — DOM XSS in jQuery anchor href attribute sink using location.search source (Apprentice) · 🇬🇧 📹
4. PortSwigger — DOM XSS in jQuery selector sink using a hashchange event (Apprentice) · 🇬🇧
5. PortSwigger — Exploiting DOM clobbering to enable XSS (Apprentice) · 🇬🇧
6. PortSwigger — Reflected XSS in a JavaScript URL with some characters blocked (Apprentice) · 🇬🇧

​

Recursos curados

Fuente	Enlace
HackTricks	https://book.hacktricks.wiki/en/pentesting-web/xss-cross-site-scripting/index.html
PortSwigger	https://portswigger.net/web-security/cross-site-scripting

​

Máquinas HTB que practican Cross-Site Scripting (XSS) (13)

Máquina	SO	Dificultad	Writeup
Anubis	Windows	INSANE	🇪🇸 🇬🇧 📹
Bankrobber	Windows	INSANE	🇪🇸 🇬🇧 📹
Book	Linux	MEDIUM	🇪🇸 🇬🇧 📹
CrossFit	Linux	INSANE	🇪🇸 🇬🇧 📹
EarlyAccess	Linux	HARD	🇪🇸 🇬🇧 📹
Holiday	Linux	HARD	🇪🇸 🇬🇧 📹
Nightmare	Linux	INSANE	🇪🇸 🇬🇧 📹
OverGraph	Linux	HARD	🇪🇸 🇬🇧 📹
Quick	Linux	HARD	🇪🇸 🇬🇧 📹
RedCross	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Schooled	Linux	MEDIUM	🇪🇸 🇬🇧 📹
SecNotes	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Stacked	Linux	INSANE	🇪🇸 🇬🇧 📹

​

Labs PortSwigger que practican Cross-Site Scripting (XSS) (36)

Lab	Dificultad	Topic	Oficial
DOM XSS in document.write sink using source location.search	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in innerHTML sink using source location.search	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in jQuery anchor href attribute sink using location.search source	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in jQuery selector sink using a hashchange event	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Exploiting DOM clobbering to enable XSS	APPRENTICE	DOM-based Vulnerabilities	Abrir
Reflected XSS in a JavaScript URL with some characters blocked	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into a JavaScript string with angle brackets HTML encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into attribute with angle brackets HTML-encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into HTML context with nothing encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS protected by CSP, with CSP bypass	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Reflected XSS with event handlers and href attributes blocked	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Stored XSS into anchor href attribute with double quotes HTML-encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
Stored XSS into HTML context with nothing encoded	APPRENTICE	Cross-Site Scripting (XSS)	Abrir
DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
DOM XSS in document.write sink using source location.search inside a select element	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
DOM XSS using web messages	PRACTITIONER	DOM-based Vulnerabilities	Abrir
DOM XSS using web messages and a JavaScript URL	PRACTITIONER	DOM-based Vulnerabilities	Abrir
DOM XSS using web messages and JSON.parse	PRACTITIONER	DOM-based Vulnerabilities	Abrir
DOM XSS via an alternative prototype pollution vector	PRACTITIONER	Prototype Pollution	Abrir
DOM XSS via client-side prototype pollution	PRACTITIONER	Prototype Pollution	Abrir
Exploiting clickjacking vulnerability to trigger DOM-based XSS	PRACTITIONER	Clickjacking	Abrir
Exploiting cross-site scripting to capture passwords	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Exploiting cross-site scripting to steal cookies	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Exploiting HTTP request smuggling to deliver reflected XSS	PRACTITIONER	HTTP Request Smuggling	Abrir
Exploiting XSS to bypass CSRF defenses	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected DOM XSS	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS in canonical link tag	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into a JavaScript string with single quote and backslash escaped	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into HTML context with all tags blocked except custom ones	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS into HTML context with most tags and attributes blocked	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS protected by very strict CSP, with dangling markup attack	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Reflected XSS with some SVG markup allowed	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Stored DOM XSS	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir
Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped	PRACTITIONER	Cross-Site Scripting (XSS)	Abrir

​

Rooms TryHackMe que practican Cross-Site Scripting (XSS) (10)

Room	Dificultad	Tipo	Acceso	Oficial
25 Days of Cyber Security	EASY	Walkthrough	🟢 Free	Abrir
Advent of Cyber 2 [2020]	EASY	Walkthrough	🟢 Free	Abrir
Custom Tooling Using Python	EASY	Walkthrough	🟢 Free	Abrir
Intro to Cross-site Scripting	EASY	Walkthrough	🔵 VIP	Abrir
Learn Rust	EASY	Walkthrough	🟢 Free	Abrir
OWASP Juice Shop	EASY	Walkthrough	🟢 Free	Abrir
Web Application Basics	EASY	Walkthrough	🟢 Free	Abrir
XSS	EASY	Walkthrough	🟢 Free	Abrir
XSS - Merry XSSMas	EASY	Walkthrough	🟢 Free	Abrir
NahamStore	MEDIUM	Challenge	🟢 Free	Abrir

​

Skills relacionadas

• /skills/sqli
• /skills/ssrf

---

← Volver al glosario completo

Última actualización: 2026-08-17