About this site

This is a XSS injection game inspired by alert(1) to win.


Call prompt(1) to win. You should make it without user interaction. After completing each level, your payload will be pending for verification and then tested in:

While most levels have all browser solutions, some may not. It is guaranteed that each level has solutions for at least two browsers.
Last but not least, payloads take fewer characters rock.


Contact me via twitter @filedescriptor