Beating an event-handler blocklist and a strict CSP with an onfocus payload and a top-level navigation leak
Five git forensics challenges on one repo: hidden commit messages, odd authorship, mistagged releases, deleted blobs, and replace refs
Bypassing a no-lowercase no-symbol bash jail with tilde-plus and question-mark globs to run the flag script
