1022: Secure Notes

Writeup for the Intigriti October 2022 challenge 💥

Name	Authors	Category
Intigriti October Challenge (2022)	0xGodson	XSS, CSRF, Markup Injection, Prototype Pollution, Cookie Tossing

Video Walkthrough

Challenge Description

Find a way to execute arbitrary javascript on the iFramed page and win Intigriti swag.

Useful Resources

• XSS cheatsheet

• CSRF

• Markup injection

• Prototype pollution

• Cookie tossing