Carving a PNG plus ZIP plus PDF polyglot to reassemble a three-part flag
Beating an event-handler blocklist and a strict CSP with an onfocus payload and a top-level navigation leak
Bypassing a no-lowercase no-symbol bash jail with tilde-plus and question-mark globs to run the flag script
