# niteCTF 2022

Nice Christmas CTF with some relatively interesting XS-Leak web challenges.

Sidenote: someone registered all the top teams, so I technically beat all of them.

<figure><img src="https://3167364547-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX1bWRlBzHpEPe1TYDD%2Fuploads%2FHozl3RJPbvMeQHxxu1pk%2Fimage.png?alt=media&#x26;token=711100e1-0b61-4c3e-9be8-ef076f785ea1" alt=""><figcaption></figcaption></figure>

| Challenge                                                                             | Category | Solves |
| ------------------------------------------------------------------------------------- | -------- | ------ |
| [Undocumented js-api](https://ctf.zeyu2001.com/2022/nitectf-2022/undocumented-js-api) | Web      | 10     |
| [js-api](https://ctf.zeyu2001.com/2022/nitectf-2022/js-api)                           | Web      | 5      |

The solutions for both challenges involve creating a GitHub Pages site, so here's my exploit repository :smile:

{% embed url="<https://github.com/zeyu2001/nitectf-jsapi>" %}