Intigriti March 2026 XSS Challenge: Full Writeup
DOM Clobbering + JSONP Callback Injection via DOMPurify Misconfiguration
Apr 13, 20268 min read30
Search for a command to run...
Articles tagged with #ctf-writeup
DOM Clobbering + JSONP Callback Injection via DOMPurify Misconfiguration
Introduction During Bugcrowd CTF at Black Hat USA 2025, I tackled a web challenge involving SecureFile Solutions, a document management system with a hidden Local File Inclusion (LFI) vulnerability in its index.php. This journey involved exploiting t...
In this Capture The Flag (CTF) challenge, we were given access to two main targets: an SSH server running on a GoTTY shell and a NAS interface that allowed file uploads. My initial analysis revealed two key pieces of information. First, the SSH serve...
