Response

URL: https://stc-owasp-juice-dnebatcgf2ddf4cr.uksouth-01.azurewebsites.net/api/Challenges/?name=DOM%20XSS

Status code: 200

Request Headers

Accept: application/json, text/plain, */*
User-Agent: axios/1.10.0
Accept-Encoding: gzip, compress, deflate, br

Response Headers

content-length: 778
connection: close
content-type: application/json; charset=utf-8
date: Fri, 04 Jul 2025 12:58:42 GMT
access-control-allow-origin: *
etag: W/"30a-n9rzQBknaHTlxRUJC5TUVDFgXoQ"
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
feature-policy: payment 'self'
x-recruiting: /#/jobs

Response Body

{
    "status": "success",
    "data": [
        {
            "id": 19,
            "key": "localXssChallenge",
            "name": "DOM XSS",
            "category": "XSS",
            "tags": "Tutorial,Good for Demos,With Coding Challenge",
            "description": "Perform a <i>DOM</i> XSS attack with <code>&lt;iframe src=\"javascript:alert(`xss`)\"&gt;</code>.",
            "difficulty": 1,
            "hint": "Look for an input field where its content appears in the HTML when its form is submitted.",
            "hintUrl": "https://pwning.owasp-juice.shop/companion-guide/latest/part2/xss.html#_perform_a_dom_xss_attack",
            "mitigationUrl": "https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html",
            "solved": true,
            "disabledEnv": null,
            "tutorialOrder": 2,
            "codingChallengeStatus": 0,
            "hasCodingChallenge": true,
            "createdAt": "2025-06-30T07:25:07.854Z",
            "updatedAt": "2025-07-01T12:48:15.855Z"
        }
    ]
}