Pwn2win 2021 Small Talk: Write-Up

Sat, May 29, 2021

From a race condition in postMessage to prototype pollution. In this writeup, I will explain how to abuse a wrong fix in the shvl library to achive XSS using Popper.js and solve the “Small talk” challenge in Pwn2Win 2021.

Pwn2win 2020 Watchers: Write-Up

Wed, Jun 3, 2020

Hi folks, this is a write up for my challenge in this year’s Pwn2Win edition, the environment docker is available at pwn2win repository, hope you enjoy!