https://silverpoision.github.io/A minimal, responsive and feature-rich Jekyll theme for technical writing. 2025-11-16T17:20:26+05:30 Piyush Sarraf https://silverpoision.github.io/ Jekyll © 2025 Piyush Sarraf /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2025-05-14T05:05:00+05:30 2025-05-18T10:33:46+05:30 https://silverpoision.github.io/posts/intigriti-challenge-solution0525/ piyush

I thoroughly enjoyed tackling this month’s CTF challenge hosted by @Intigriti and skillfully crafted by @joaxcar. It took me about six hours to solve from start to finish. Let’s dive right in — 🔍 Here’s the code we needed to exploit with an XSS: // utils function safeURL(url){ let normalizedURL = new URL(url, location) return normalizedURL.origin === location.origin } function addDynamicSc...

2025-04-01T11:47:00+05:30 2025-05-18T10:33:46+05:30 https://silverpoision.github.io/posts/intigriti-challenge-solution0325/ piyush

Wow! What a ride this challenge turned out to be. Crafted by the talented @0x999 and hosted by @Intigriti, this was no ordinary challenge—it was a full-blown roller-coaster ride. Out of everyone who attempted it, only 16 managed to solve it within the time limit. Very few challenges see such a low number of solves. To put things in perspective, here’s a graph created by my friend @Jorian that h...

2025-01-12T11:47:00+05:30 2025-05-18T10:33:46+05:30 https://silverpoision.github.io/posts/intigriti-challenge-solution0125/ piyush

This was truly an incredible challenge organized by @0xGodson_ and hosted by @Intigriti. A big shout out to them for putting together such interesting XSS challenges for us every month. It took me nearly 5 hours to crack the challenge. Here’s the code related to the challenge. function XSS() { return decodeURIComponent(window.location.search).includes('<') || decodeURIComponent(window....