Intigriti's August 2024 CTF Challenge

---

August 15, 2024

---

---

Belgian ethical hacking platform Intigriti hosted a new monthly CTF (Capture the flag) challenge in August 2024.

• I uploaded a PDF containing my writeup that can be read below or downloaded here: PDF
• The challenge source code can be found here: ZIP

The challenge was build around a safe note taking application that contained an open redirect which was chained to a path traversal leading to a blind XSS. This could be abused to exfiltrate the web application admin web cookies.

Embedded writeup PDF: