🐀
0 pts earned
RatXSS Dojo
🧩 Dojos
🖧 AD Network — Dojos
RatBAC Dojo
RatXSS Dojo
A single-app XSS training range with ~40 levels: every reflection/DOM/stored context, filter & WAF bypasses (scheme/parens/quotes/space/handler strips, half-encoding, double-decode, length caps, tag blocklists, recursive tokens), and advanced sinks (mutation XSS, postMessage, prototype-pollution, Trusted-Types bypass, CSP+JSONP, AngularJS CSTI, SVG, service-worker persistence). Pop alert(document.domain) in every context, then push one to real impact.