Writeups for my challenges in
#SECCON
CTF 2023 Finals!
- cgi-2023: XS-Leak with CSP error reports by SRI checks.
- LemonMD: Breaking Islands Architecture of Fresh.
- DOMLeakify: New CSS injection on style **attributes**.
and 2 challs.
Writeups for my challenges in
#SECCON
CTF 2023 Quals!
- hidden-note: XS-Leak with an algorithm-based oracle abusing an unstable sort (pdqsort) in Go.
- deno-ppjail: A prototype pollution gadget in IteratorClose defined in ECMAScript.
and 4 challs.
Writeups for my challenges in
#SECCON
CTF! There are two 1-solved web challenges:
In denobox, tricky prototype pollution and import maps are used to bypass Deno sandbox. In spanote, I came up with a XSS technique abusing cache behavior in Google Chrome.
Thank you for playing
#SECCON
CTF 2023 Finals! I created babywaf, cgi-2023, LemonMD, DOMLeakify, and whitespace.js.
If you see the challenges, you can download them here (currently, only distribution files):
My solvers for web challs in LA CTF 2024.
- quickstyle: Abusing disk cache in Google Chrome.
- biscuit-of-totality: Cookie bombing with a de Bruijn sequence.
Thank you for playing
#SECCON
CTF 2021! I created web tasks: SaaS1 , SaaS 2, Cookie Spinner, and x-note. I'm looking forward to your writeups. / 初めての作問でした!感想待ってます
Thank you for playing SECCON CTF 2022 Quals! I wrote 9 challenges:
web: skipinx, easylfi, bffcalc, piyosay, denobox, spanote
misc: latexipy, txtchecker, noiseccon
I hope you enjoyed it and I'm looking forward to your witreups.
感想待ってます〜〜〜
In the past, I created a challenge with 1000 GET parameters (not PHP):
Such a parameter limit is probably for DoS protection, but ironically it is sometimes(?) abused as a bypass technique. Interestingly, it's CSP bypass in
@pilvar222
's challenge!
🧵[1/9] Time to publish the solution to this challenge! The goal of this challenge was to find an XSS while avoiding it being blocked by the CSP sent by the PHP header() function. Let's dive into it!