All Writeups

Comprehensive collection of CTF challenges, solutions, and insights.


Filter by tag:

WHAMazon! Web 3 - The Review Queue

Exploiting a stored XSS vulnerability in a seller product submission form via an unsanitized image field to steal an admin review token.