↓Skip to main content

write-ups

Intigrity December XSS Challenge
·1353 words·7 mins
write-ups ctf xss

Using hashchange events to control a vulnerable page and escalate an otherwise mostly harmless DOM XSS.
BugPoC Wacky XSS Challenge
·1883 words·9 mins
write-ups ctf xss dom clobbering

Bypassing CSP and SRI with HTML injection and DOM Clobbering.