0822: Business Card Generator

Writeup for the Intigriti August 2022 challenge 💥

Name	Authors	Category
Intigriti August Challenge (2022)	BrunoModificatio + huli	XSS, CSP, CSRF, DOM Clobbering

Video Walkthrough

Challenge Description

Find a way to execute arbitrary javascript on the iFramed page and win Intigriti swag.

Useful Resources

• XSS cheatsheet

• CSRF

• Fuzzing for XSS via nested parsers condition

• Angular CSP bypass

• UNI CTF 2021: A Complex Web Exploit Chain & a 0day to Bypass an Impossible CSP

Community Writeups

1. brunomodificato (challenge creator)

2. huli (challenge creator)