Filtered View

Tag: #csp

5 posts

Web Sekaictf2026

Filtered Reality

Full-chain CTF writeup for a WordPress and Puppeteer bot challenge involving nonce leakage, DOM clobbering, CSP nonce recovery, RCE, and SHA-256 length extension.

#writeup#wordpress#xss#csp
hard 11 min read
Web HTB

Novacore

#writeup#xss#sqli#rce
6 min read
Web TFCCTF2024

Sagigram+

#writeup#xss#csp#file-upload
2 min read
Web Googlectf2024

GRAND PRIX HEAVEN

#writeup#xss#csp#file-upload
2 min read
Web Corctf2024

corctf-challenge-dev

#writeup#xss#rce#lfi
3 min read