securityMB

Lost In Transliteration - Google CTF 2025 challenge writeup

Setup

The challenge is written in C#. In the beginning of Program.cs we can find the following line:

Encoding.RegisterProvider(CodePagesEncodingProvider.Instance);

securityMB

Yesterday I posted a little quiz on Twitter about HTML parsing.

The question was: what element is going to be the parent of the final <s> in the following snippet of HTML:

<div><table><svg><foreignObject><select><table><s>

The final answers are:

securityMB

CSS Scrollbar attack

Image we have the following code:

<script>
var TOKEN="abcdef";
</script>