webhard
Tetris
spbctf
Task: Enable line_mode for your user on a tetris fan site with admin bot. Solution: SVG XSS combined with cookie tossing to bypass CSRF protection and SameSite=Lax cookies.
$ ls tags/ techniques/
svg_xsscookie_tossingcsrf_bypass_via_cookie_prioritysamesite_lax_bypass
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]