CrewCTF 2025 on SpiizN's Bloghttps://blog.spiizn.xyz/ctf/crewctf2025/Recent content in CrewCTF 2025 on SpiizN's BlogHugoenTue, 23 Sep 2025 00:00:00 +0200CrewCTF 2025 - Love Noteshttps://blog.spiizn.xyz/writeups/crewctf-2025-love-notes/Tue, 23 Sep 2025 00:00:00 +0200https://blog.spiizn.xyz/writeups/crewctf-2025-love-notes/TL;DR: Stored XSS bypassing the CSP via a raw HTTP response endpoint, chained with a meta-refresh redirect to hijack the admin bot