logon Writeup PicoCTF
A writeup for the picoCTF easy web challenge named logon.
Koussay Dhifi
Reflected XSS with Event Handlers and href Attributes Blocked
A PortSwigger XSS lab writeup about reflected XSS with event handlers and href attributes blocked.
Insp3ct0r Writeup PicoCTF
A writeup for the PicoCTF easy web challenge named Insp3ct0r.
get aHEAD Writeup PicoCTF
A picoCTF web challenge writeup about using a HEAD request to retrieve the flag from HTTP response headers.
dont-use-client-side Writeup PicoCTF
A picoCTF web challenge writeup about recovering a client-side checked password from JavaScript source code.
Reflected XSS in a JavaScript URL with Some Characters Blocked
A PortSwigger XSS lab writeup about reflected XSS in a JavaScript URL with some characters blocked.
n0s4n1ty 1 Writeup PicoCTF
A writeup for the picoCTF easy web challenge named n0s4n1ty 1.
Scavenger Hunt Writeup PicoCTF
A writeup for the picoCTF easy web challenge named Scavenger Hunt.
Reflected XSS Protected by Very Strict CSP with Dangling Markup Attack
A PortSwigger XSS lab writeup about bypassing a strict CSP by using dangling markup and form hijacking.
Reflected XSS Protected by CSP with CSP Bypass
A PortSwigger XSS lab writeup about bypassing CSP by injecting a directive through a user-controlled report-uri value.