> For the complete documentation index, see [llms.txt](https://ctf.zeyu2001.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ctf.zeyu2001.com/2023.md).

# 2023

- [DEF CON CTF 2023 Qualifiers](https://ctf.zeyu2001.com/2023/def-con-ctf-2023-qualifiers.md)
- [hxp CTF](https://ctf.zeyu2001.com/2023/hxp-ctf.md)
- [true\_web\_assembly](https://ctf.zeyu2001.com/2023/hxp-ctf/true_web_assembly.md): From XSS to RCE in AsmBB v2.9.1
- [HackTM CTF Qualifiers](https://ctf.zeyu2001.com/2023/hacktm-ctf-qualifiers.md)
- [Crocodilu](https://ctf.zeyu2001.com/2023/hacktm-ctf-qualifiers/crocodilu.md): CSP bypass through unsupported www.youtube.com JSONP endpoint
- [secrets](https://ctf.zeyu2001.com/2023/hacktm-ctf-qualifiers/secrets.md): XS leak through cross-origin redirects — intended and unintended
- [Hades](https://ctf.zeyu2001.com/2023/hacktm-ctf-qualifiers/hades.md): jQuery-facilitated XSS