$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: DocuNest stores sanitized article HTML and lets an administrator review it, while page code trusts a global editor configuration object. Solution: duplicate anchors clobbered that object and turned a cid URL into an innerHTML onerror breakout that exfiltrated the admin cookie.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar