diff --git a/README.md b/README.md
index 086a170..c66f977 100644
--- a/README.md
+++ b/README.md
@@ -39,6 +39,9 @@ Check out my [repos](https://github.com/qazbnm456) 🐾 or say *hi* on my [Twitt
     - [Leaking](#tool-leaking)
     - [Detecting](#tool-detecting)
 - [Blog](#blog)
+- [Practice](#practice)
+    - [AWS](#practice-aws)
+    - [XSS](#practice-xss)
 - [Miscellaneous](#miscellaneous)
 
 ## Resource
@@ -164,6 +167,19 @@ Check out my [repos](https://github.com/qazbnm456) 🐾 or say *hi* on my [Twitt
 
 * [Dnslogger](https://wiki.skullsecurity.org/index.php?title=Dnslogger) - Dns Logger by [@iagox86](https://github.com/iagox86).
 
+## Practice
+
+<a name="practice-aws"></a>
+### AWS
+
+* [FLAWS](http://flaws.cloud/) - Amazon AWS CTF challenge, written by [@0xdabbad00](https://twitter.com/0xdabbad00).
+
+<a name="practice-xss"></a>
+### XSS
+
+* [alert(1) to win](https://alf.nu/alert1) - A series of XSS challenges, written by [@steike](https://twitter.com/steike).
+* [prompt(1) to win](http://prompt.ml/) - A complex 16-Level XSS Challenge held in summer 2014 (+4 Hidden Levels), written by [@cure53](https://github.com/cure53).
+
 ## Blog
 
 * [Orange](http://blog.orange.tw/) - This is Orange Speaking :)