$ cat writeup.md…
$ cat writeup.md…
CACTF2026
Task: Node.js/Express messaging app with stored XSS via unescaped EJS and CSP allowing www.googleapis.com. Solution: Host malicious JS on Google Cloud Storage to bypass CSP, exfiltrate admin's flag message via same-origin fetch and message relay.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar