A collection of small demos of web security concepts.
You may start a server by either running the start-php-server.sh (requires php to be installed) or start-python-server.sh (for CGI server)
To try out XSS, you may visit http://127.0.0.1:8000/xss/form.html in your web browser after starting a server