CTF challenges & writeups

Challenge	CTF	Weight	Category	Has
arclbroth #null-byte-injection	LA 2025	–	Web	files wu 1
mavs_fan #xss-cookie-httponly-bypass	LA 2025	–	Web	files wu 1
purell #xss-sanitizer-bypass	LA 2025	–	Web	files wu 1
ctf_wiki #csp-img-exfiltration	LA 2024	–	Web	files wu 1
la_housing_portal #sql-injection	LA 2024	–	Web	files wu 3
new_housing_portal #dom-xss	LA 2024	–	Web	files wu 2
pogn #client-side-trust	LA 2024	–	Web	files wu 1
california-state-police #csp-bypass-navigation	LA 2023	–	Web	files wu 2
hptla #xss-event-handler	LA 2023	–	Web	files wu 2
metaverse #xss-csrf-chain	LA 2023	–	Web	files wu 3
uuid-hell #uuid-prediction	LA 2023	–	Web	files wu 2
zero-trust #aes-gcm-nonce-reuse	LA 2023	–	Web	files wu 1
flaglang	LA 2024	–	Web	files wu 3
ad_note	LA 2026	–	Web	files
ad_note_revenge	LA 2026	–	Web	files
append_note	LA 2026	–	Web	files
blogler	LA 2026	–	Web	files
bobles_and_narnes	LA 2026	–	Web	files
clawcha	LA 2026	–	Web	files
extend_note	LA 2026	–	Web	files
glotq	LA 2026	–	Web	files
job_board	LA 2026	–	Web	files
lactf_invoice_generator	LA 2026	–	Web	files
narnes_and_bobles	LA 2026	–	Web	files
single_trust	LA 2026	–	Web	files
antisocial_media	LA 2025	–	Web	files
cache_it_to_win_iti	LA 2025	–	Web	files
chessbased	LA 2025	–	Web	files
gigachessbased	LA 2025	–	Web	files
old_site	LA 2025	–	Web	files
plinko	LA 2025	–	Web	files
whack_a_mole	LA 2025	–	Web	files
whats_my_number	LA 2025	–	Web	files
biscuit_of_totality	LA 2024	–	Web	files
jason_web_token	LA 2024	–	Web	files
penguin_login	LA 2024	–	Web	files
quickstyle	LA 2024	–	Web	files
85_reasons_why	LA 2023	–	Web	files
queue-up	LA 2023	–	Web	files

Challenges