A web application project vulnerable to XSS attacks, created for educational purposes. Users can attempt to perform the most common XSS and brute-force attacks. The main purpose of the app is to raise awareness about XSS and brute-force attack principles. Additionally, app provides user login and registration functionality. To see the application in action (video) you can use the link at the bottom of the file.
Each section in the app is dedicated to a specific type of attack. Sections allow users to conduct attacks and also contain instructions on how to carry them out.
- Reflected XSS
- Stored XSS
- DOM-based XSS
- Brute Force Attack
Link to the demo video: https://www.dropbox.com/scl/fi/k2wqwprgzppwvlzo70d32/XSS-vulnerable-app_demo.mp4?rlkey=wxr0ymg72jk8w4dmfff8z82p1&st=9938momo&dl=0
Link to the presentation: https://docs.google.com/presentation/d/1t4eAdO7WbdEG1nmoUypSLJ53ITi2OUUPsaMD5yrYEhI/edit#slide=id.p
Information on how to set up the project (in polish): instruction