Intigriti's February 2026 CTF Challenge

---

February 23, 2026

---

---

Belgian ethical hacking platform Intigriti hosted a new CTF (Capture The Flag) challenge in February 2026.

• I uploaded a PDF containing my writeup that can be read below or downloaded here: PDF
• The challenge source code can be found here: ZIP

The challenge was build around a Self XSS with CSP bypass that could be converted in a Blind XSS to target the admin of the web application. The Blind XSS could be used to ex-filtrate the admin cookie.

Embedded writeup PDF: