Intigriti's March 2022 XSS Challenge

---

March 28, 2022

---

---

Belgian ethical hacking platform Intigriti hosted a new monthly XSS (cross site scripting) challenge in March 2022.

• I uploaded a PDF containing my writeup that can be read below or downloaded and viewed here: PDF


• I also created a few POC videos. For both Firefox and Chrome the CSRF attack automated and via a button:
  Chrome automated
  Chrome with button click
  Firefox automated
  Firefox with button click
  
  Chrome bypassing the token not set issue


• Here the CSRF exploit HTML pages (both hit the browsers popup blocker unfortunatly. The button one could maybe be optimized to not hit the popup blocker):
  Automated CSRF
  CSRF with button click

Embedded writeup PDF: