Bazingaa A lame and deliberately vulnerable PHP app called Bazingaa (couple of PHP pages actually) to demonstrate Exploitation of XSS on a Login Page. To understand this in more depth please have a look at this blog post -