2024

1. IrisCTF
   • web:
     • lamenote: 'XS leak' using CSP restriction and history.length.
2. Akasec
   • web:
     • HackerNickname: JacksonInject, curl globbing and Java Class Instance of org.springframework.context.support.FileSystemXmlApplicationContext.
3. GreyCTF
   • web
     • CSS exfiltration
4. OpenECSC
   • web (all): writeup
5. JustCTF
   • web (backslash): nginx njs and proxy pass.
   • web (PocketBase): ¿mutation? XSS.

2023

1. NahamCon
   • pwn:
     • pwn_weird_cookie: Custom Canary Exfiltration and ret2libc.
2. ProjectSekai
   • rev:
     • AzusawaGachaWorld: Proxying the connections from the binary (game) to the endpoint.
   • web:
     • ScannerService: Bypass for Command Injection in Nmap params.
     • Frog-WAF: SSTI in Java (buildConstraintViolationWithTemplate). Character Bypass using [] and getSize().
     • GolfJail: WebRTC CSP Bypass and XSS.
3. Random
   • web:
     • Mizu's chall: DOM Clobbering.