All Categories - "><img/src="/%ff/"/onerror=alert(/blog.xss.am/)>"<

All Categories

CTF

Express notes - "OFFZONE" express file upload challenge

Delicious and Point - "OFFZONE" prototype pollution challenge

BabyPython - "1 CAT COMPANY CTF" crypto and deserialization challenge

OrangeSite - "1 CAT COMPANY CTF" spring xxe challenge

Challenges

From Intigriti challenge to a Vue.js script gadget

Intigriti's February XSS Challenge Writeup

Intigriti's December XSS Challenge Writeup

CVE

Leaking Jupyter instance auth token chaining CVE-2023-39968, CVE-2024-22421 and a chromium bug