Filtered View

Tag: #xss

7 posts

Web Sekaictf2026

Filtered Reality

Full-chain CTF writeup for a WordPress and Puppeteer bot challenge involving nonce leakage, DOM clobbering, CSP nonce recovery, RCE, and SHA-256 length extension.

#writeup#wordpress#xss#csp
hard 11 min read
Web HTB

Novacore

#writeup#xss#sqli#rce
6 min read
Web HTB

OmniWatch

#writeup#xss#sqli#lfi
7 min read
Web HTB

Streamcoin

#writeup#xss#jwt#request-smuggling
4 min read
Web TFCCTF2024

Sagigram+

#writeup#xss#csp#file-upload
2 min read
Web Googlectf2024

GRAND PRIX HEAVEN

#writeup#xss#csp#file-upload
2 min read
Web Corctf2024

corctf-challenge-dev

#writeup#xss#rce#lfi
3 min read