Category
Web
8 posts
Exploiting DOM Clobbering and Using Trigram CSS Leak to Expose Nonce: Freedom Notes - Cyber Jawara National 2025 Quals Writeup
Make your notes has freedom, a freedom from sanitizerIn this challenge, we will exploit two vulnerabilities to gain XSS. The first is DOM Clobbering in the sanitize function in the index.html file, wh...
Bypassing null Origin in 4xx Status Code Using Iframe | disconnection-revenge Writeup | AlpacaHack Round 7 (Web)
Unfortunately, I solved this challenge only 30 minutes after the CTF ended. Here is my write-up about the challenge.This is a fixed challenge of disconnection.In this challenge, we are given source co...
Tot Musica (Web) Unitended Solution - Cyber Jawara International
Someone just recently making a new website, find the full name of the author.Please solve it in locally first!BOT: http://152.42.183.87:8182/Submit the Flag With This Format: CJ{[a-z0-9\s]}http://152....
Exploiting Race Condition To Gain Infinity Wealth - m0leCon CTF 2023 - goldinospizza2
In the m0leCon CTF 2023, I participated with team TCP1P and successfully solved several web challenges.In this article, I will provide a write-up about an intriguing challenge named "goldinospizza2."...
Exploiting the Latest Render Engine in Node (EJS) - SEETF 2023 - Express JavaScript Write-up
During SEETF 2023, I participated as a member of the TCP1P team and successfully solved several web challenges.In this article, I will provide a write-up for a specific challenge called "Express JavaS...
Wiki World
Can you alpha test out our newest note-taking website? (If you find anything, please report it to us using nc cha.hackpack.club 8702)Also unrelatedly, our website admin is really fond of the wiki-wor...
X Et Et
solver.py index.htmlThere are several steps to achieve RCE:Those are the steps required to work on this challenge. For the rest, you can refer to the solve script above to see the execution flow.After...