🧪 Event Handler XSS Lab by SudoHopeX

Practice bypassing filters using HTML event handlers. Trigger alert(document.domain) or alert(window.origin) to unlock the next level.

Select Level:

🔰 Level 1 – Basic Event Handler Injection

🎯 Level 2 – Less Common Events

🧩 Level 3 – Filtered Events

🛡️ Level 4 – WAF Bypass

Bypass basic WAF that strips all on* attributes using creative techniques.