HackMe – XSS/CSRF Challenges

In plain words

HackMe is a collection of security challenges focused on teaching cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. Users practice hacking a friend's online MMORPG game by exploiting these vulnerabilities. The project is designed for people interested in learning web security concepts through hands-on challenges. It is hosted on GitHub and provides a practical environment for understanding common web application attacks.

written from the facts on this page · September 2026

• 
  File Upload Hacking Challenges2016 · github.com · ▲36

  Hack your friend's online MMORPG game - specific focus, php file upload scripts - breakthenet/HackMe-File-Upload-Challenges

• 
  SQL Injection Challenge2016 · github.com · ▲34

  Pen test your "friend's" online MMORPG game - specific focus, sql injection opportunities - breakthenet/HackMe-SQL-Injection-Challenges

• 
  hack.css2016 · hackcss.com · ▲174

  The CSS framework for hackers

• 
  Hacking slot machines with a buttonhole camera and brute-force search2018 · github.com · ▲421
• CH
  Code.hackmit.org – Software for Hackathons2016 · code.hackmit.org · ▲140
• 
  Hackr.io2015 · hackr.io · ▲368

  Product Hunt for Online Programming Courses & Tutorials

• 
  SimCity, but with Permits▲911

  A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.

  Life & fun · 1d ago · permit.petercai.com

• IV
  I've been paying for a rural Tanzanian's education for 10 years▲778

  Life & fun · 14d ago · tanzaniaeducationproject.org

• 
  Bigwords.page – Turn any screen into a sign. The URL is the app▲728

  Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.

  Life & fun · 15d ago · bigwords.page

• 
  Guitoro, a virtual guitar you strum with your keyboard▲573

  Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.

  Life & fun · 8d ago · guitoro.com

• 
  See *almost* any carriers phone settings▲432

  Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.

  Life & fun · 12d ago · carrierexplode.com

• 
  The whole Solar System and every tracked satellite, live in the browser▲407

  Life & fun · 22d ago · space.bl2.net

• 
  Good Email Copy▲1,984

  Email copy from great companies.

  Growth · 2016 · goodemailcopy.com

• 
  Tesla Model 3▲1,311

  The mass market electric car by Tesla is here ⚡️🚘

  Life & fun · 2016 · tesla.com

• 
  Kite▲867

  Internet-connected programming

  Dev tools · 2016 · kite.com

• 
  Project Infinite by Dropbox▲859

  Access all the files on Dropbox without having to sync

  Work · 2016 · blog.dropbox.com

• 
  Api.ai for Facebook Messenger▲852

  The easiest way to build an FB bot. No coding required!

  Dev tools · 2016

• 
  I made an interactive Bootstrap 4 cheat sheet▲847

  Quickly find your Bootstrap classes on this interactive Bootstrap cheat sheet. It includes code samples and live preview of elements.

  Dev tools · 2016 · hackerthemes.com