From Self-XSS to PII leakage via WAF bypass, CSRF login and window.opener abuse
·2310 words·11 mins
XSS
A CTF-Style XSS Chain in the Wild: DOM Clobbering, Gadgets, and CSP Bypass
·1365 words·7 mins
Intigriti's August 2024 (Defcon) Challenge
·1992 words·10 mins
SekaiCTF 2023: Golf Jail (Web)
·1508 words·8 mins
How I met JavaScript Reflect (thanks to playing CTF)
·1346 words·7 mins