Tag: ctf

All the articles with the tag "ctf".

• Solving YesWeHack Dojo #49 — How Two Dashes and a Dash-R Broke a Secret Manager

  23 Mar, 2026

  A detailed walkthrough of how I solved YesWeHack's Dojo #49 Secret Manager challenge by chaining two glob injection tricks — a recursive copy flag and a grep option terminator — to exfiltrate secrets from a protected directory in a single HTTP request

• Solving Intigriti's May 2024 XSS Challenge — PhpSpreadsheet Formula Injection to XSS

  15 Jun, 2024

  A detailed walkthrough of how I solved Intigriti's May 2024 XSS challenge by exploiting a 2nd-order formula injection vulnerability in PhpSpreadsheet's calculateFormula() to achieve Cross-Site Scripting

• Solving Intigriti's April 2024 XSS Challenge — postMessage, Race Conditions, and a Sneaky iframe Sandbox

  1 May, 2024

  A walkthrough of how I solved Intigriti's April 2024 monthly XSS challenge — hardcoded creds in the DOM, an iframe sandbox misconfiguration, and a postMessage handler with no origin check that turned into a clean XSS

• Big IAM Challenge - Wiz CTF Challenge

  8 Jun, 2023

  IAM Challenge from Wiz where we will be given an IAM rules and need to identify misconfiguration and exploit it to get a flag