消息来源频道

🐱MiaoTony's Box | 困困困 zzz

@MiaoTonyChannel

频道1,658 位成员公开可见0 人在线

Meow~ Welcome to MiaoTony's Box. 这里是 MiaoTony 的个人频道。 Blog: https://miaotony.xyz Contact me with @meow_portal_bot . Personal Message => block Have a nice day~ 神秘用户可能会被 remove 误删请联系上面的 bot

成员规模1,658 位成员

在线情况0 人在线

消息总数9,531 条消息

浏览量总数270,628 次浏览

频道详情频道地址

2021/08/19 18:19

#今天又看了啥 #GitHub #CTF #XSS #security
can you hack this screenshot service?? - CSCG 2021
https://www.youtube.com/watch?v=FCjMoPpOPYI
Source Code & Exp: https://github.com/LiveOverflow/ctf-screenshotter
> A CTF web challenge about making screenshots. It is inspired by a bug found in real life. The challenge was created by @LiveOverflow for https://cscg.de/.
一个挺有意思的 XSS 题目，借助了 chrome debugger，还需要精心构造好时机触发 payload，Repo 里还有 dockerfile 来复现。