Overview I found this in a private Intigriti program, and for the write-up I will call the target example.com. I was just doing my usual sweep in QA, poking every endpoint to understand the flow. ...

Overview This is the story of how I tackled the Intigriti 0126 challenge, a wild ride through XS-Leaks, port fuzzing, and a final showdown with the dreaded alert() dialog. If you’re here for a dry...

Last week, I participated in the QIANGWANG INTERNATIONAL QUALIFIER CTF and focused on the web challenges. In this writeup, I’ll walk through my solution for the “SmallCode” task. Overview This PH...

Overview This challenge contains a small Flask web app called gradebook with the following structure: gradebook/ └── app/ ├── app.py ├── Dockerfile ├── requirements.txt ├── static/ │ └── s...

Overview It is a web application called The Cake Warehouse. It consists of two main services: a Node.js server and an nginx server. The application serves multiple HTML pages representing differen...