Another Another CSP | justCTF 2024 | writeup
0 net
Another Another CSP | justCTF 2024 | writeup · GitHub Skip to content --> Search Gists Search Gists Sign in Sign up You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert {{ message }} Instantly share code, notes, and snippets. terjanq / README.md Last active October 26, 2025 03:03 Show Gist options Download ZIP Star 7 ( 7 ) You must be signed in to star a gist Fork 0 ( 0 ) You must be signed in to fork a gist Embed Select an option Embed Embed this gist in your website. Share Copy sharable link for this gist. Clone via HTTPS Clone using the web URL. No results found Learn more about clone URLs Clone this repository at <script src="https://gist.github.com/terjanq/3e866293610aa6c5629df4353e5d87d9.js"></script> Save terjanq/3e866293610aa6c5629df4353e5d87d9 to your computer and use it in GitHub Desktop. Embed Select an option Embed Embed this gist in your website. Share Copy sharable link for this gist. Clone via HTTPS Clone using the web URL. No results found Learn more about clone URLs Clone this repository at <script src="https://gist.github.com/terjanq/3e866293610aa6c5629df4353e5d87d9.js"></script> Save terjanq/3e866293610aa6c5629df4353e5d87d9 to your computer and use it in GitHub Desktop. Download ZIP Another Another CSP | justCTF 2024 | writeup Raw README.md Another Another CSP by @terjanq Background This year I created a copycat challenge of another-csp from DiceCTF Quals 2024. It was only solved by 1 team, DiceGang . Although the challenge looked almost identical, the solutions should be strictly different. The intended solution of the original challenge was to leak one bit of information per admin visit based on crashing the browser renderer process with malicious CSS. (The below snippet was crashing the browser, but currently it's fixed)