Bug-bounty

Published on
February 22, 2024
Intigriti Valentines challenge 0224 writeup
writeup XSS bug-bounty CTF cookie-manipulation JWT
Achieving sensitive data leak via XSS
Published on
January 14, 2024
Intigriti challenge 0124 writeup
writeup prototype-pollution XSS bug-bounty CTF DOM-clobbering
Achieving arbitrary javascript execution via prototype pollution
Published on
December 20, 2023
Intigriti challenge 1223 writeup
writeup regex penetration-testing bug-bounty ReDoS RCE CTF
Exposing the hidden flag via catastrophic backtracking in the regex expression
Published on
November 6, 2023
Intigriti challenge 1023 writeup
writeup xss penetration-testing bug-bounty LFI RFI CTF
Exposing the hidden flag via improper sanitization of HTML and Chrome developer protocol
Published on
September 28, 2023
Intigriti challenge 0923 writeup
writeup sqli penetration-testing bug-bounty CTF
Exposing the hidden flag via improper handling of query parameters and blacklisting