All Posts - "><img/src="/%ff/"/onerror=alert(/blog.xss.am/)>"<

All Posts

2023

Leaking Jupyter instance auth token chaining CVE-2023-39968, CVE-2024-22421 and a chromium bug 30-08

2022

Express notes - "OFFZONE" express file upload challenge 28-08

Delicious and Point - "OFFZONE" prototype pollution challenge 27-08

2021

OrangeSite - "1 CAT COMPANY CTF" spring xxe challenge 28-11

BabyPython - "1 CAT COMPANY CTF" crypto and deserialization challenge 28-11

From Intigriti challenge to a Vue.js script gadget 22-11

Intigriti's February XSS Challenge Writeup 22-02

2020

Intigriti's December XSS Challenge Writeup 14-12