Vulnerable Web Application

Start Page
HTTP and HTML Security
HTML Tampering
Authentication Flaws
CSRF
Cross-Site Access (CORS)
PostMessage
Cross-site scripting (XSS)
Server-side
Client-side
Injection
SQL Injection
XPath Injection

Shopping Cart

Bypass the XSS Challenge. Execute alert(document.location).