<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Write-Up on Giuseppe D&#39;Andrea</title>
    <link>https://giuseppedandrea.it/categories/write-up/</link>
    <description>Recent content in Write-Up on Giuseppe D&#39;Andrea</description>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Tue, 24 Mar 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://giuseppedandrea.it/categories/write-up/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Intigriti Challenge 0326 - Write-Up</title>
      <link>https://giuseppedandrea.it/posts/intigriti-challenge-0326/</link>
      <pubDate>Tue, 24 Mar 2026 00:00:00 +0000</pubDate>
      <guid>https://giuseppedandrea.it/posts/intigriti-challenge-0326/</guid>
      <description>&lt;h2 id=&#34;introduction&#34;&gt;&#xA;  Introduction&#xA;  &lt;a class=&#34;heading-link&#34; href=&#34;#introduction&#34;&gt;&#xA;    &lt;i class=&#34;fa-solid fa-link&#34; aria-hidden=&#34;true&#34; title=&#34;Link to heading&#34;&gt;&lt;/i&gt;&#xA;    &lt;span class=&#34;sr-only&#34;&gt;Link to heading&lt;/span&gt;&#xA;  &lt;/a&gt;&#xA;&lt;/h2&gt;&#xA;&lt;p&gt;Hi folks! This write-up documents my solution to &lt;a href=&#34;https://challenge-0326.intigriti.io/&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;Intigriti&amp;rsquo;s March 2026 Challenge&lt;/a&gt; created by &lt;a href=&#34;https://x.com/KulinduKodi&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;Kulindu&lt;/a&gt;. The goal was to find a hidden flag (in the format &lt;code&gt;INTIGRITI{.*}&lt;/code&gt;) by exploiting a chain of client-side vulnerabilities in a fictional threat intelligence portal called &amp;ldquo;Secure Search Portal&amp;rdquo;.&lt;/p&gt;&#xA;&lt;p&gt;This was a really fun and creative challenge! Let&amp;rsquo;s dive into the solution!&lt;/p&gt;&#xA;&lt;div class=&#34;notice warning&#34;&gt;&#xA;  &lt;div class=&#34;notice-title&#34;&gt;&#xA;    &lt;i class=&#34;fa-solid fa-exclamation-triangle&#34; aria-hidden=&#34;true&#34;&gt;&lt;/i&gt;Warning&#xA;  &lt;/div&gt;&#xA;  &lt;div class=&#34;notice-content&#34;&gt;&lt;strong&gt;Spoiler Alert!&lt;/strong&gt; This write-up contains the complete solution with detailed exploitation steps. If you want to attempt the challenge yourself first, stop reading now and head over to the &lt;a href=&#34;https://challenge-0326.intigriti.io/&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;challenge page&lt;/a&gt;!&lt;/div&gt;&#xA;&lt;/div&gt;&#xA;&#xA;&lt;h2 id=&#34;source-code-analysis&#34;&gt;&#xA;  Source code analysis&#xA;  &lt;a class=&#34;heading-link&#34; href=&#34;#source-code-analysis&#34;&gt;&#xA;    &lt;i class=&#34;fa-solid fa-link&#34; aria-hidden=&#34;true&#34; title=&#34;Link to heading&#34;&gt;&lt;/i&gt;&#xA;    &lt;span class=&#34;sr-only&#34;&gt;Link to heading&lt;/span&gt;&#xA;  &lt;/a&gt;&#xA;&lt;/h2&gt;&#xA;&lt;p&gt;The challenge presents a &amp;ldquo;Secure Search Portal&amp;rdquo;, a search interface that reflects user input back onto the page and allows users to report URLs to an admin.&lt;/p&gt;</description>
    </item>
    <item>
      <title>Intigriti SantaCloud Challenge - Write-Up</title>
      <link>https://giuseppedandrea.it/posts/intigriti-challenge-santacloud/</link>
      <pubDate>Sat, 03 Jan 2026 00:00:00 +0000</pubDate>
      <guid>https://giuseppedandrea.it/posts/intigriti-challenge-santacloud/</guid>
      <description>&lt;h2 id=&#34;introduction&#34;&gt;&#xA;  Introduction&#xA;  &lt;a class=&#34;heading-link&#34; href=&#34;#introduction&#34;&gt;&#xA;    &lt;i class=&#34;fa-solid fa-link&#34; aria-hidden=&#34;true&#34; title=&#34;Link to heading&#34;&gt;&lt;/i&gt;&#xA;    &lt;span class=&#34;sr-only&#34;&gt;Link to heading&lt;/span&gt;&#xA;  &lt;/a&gt;&#xA;&lt;/h2&gt;&#xA;&lt;p&gt;Hi folks! This write-up documents my solution to &lt;a href=&#34;https://santacloud.intigriti.io/&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;Intigriti&amp;rsquo;s SantaCloud Challenge&lt;/a&gt; created by &lt;a href=&#34;https://x.com/intigriti&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;Intigriti&lt;/a&gt;. The goal was to compromise and retrieve a hidden flag from the &amp;ldquo;SantaCloud&amp;rdquo; portal, a supply chain management system to access inventory management, track distribution, and coordinate logistics.&lt;/p&gt;&#xA;&lt;p&gt;The challenge was relatively straightforward and didn&amp;rsquo;t require sophisticated exploitation techniques. Instead, it rewarded thorough but standard reconnaissance. Despite its simplicity, it was a fun and satisfying solve.&lt;/p&gt;</description>
    </item>
    <item>
      <title>Intigriti Challenge 1125 - Write-Up</title>
      <link>https://giuseppedandrea.it/posts/intigriti-challenge-1125/</link>
      <pubDate>Tue, 25 Nov 2025 00:00:00 +0000</pubDate>
      <guid>https://giuseppedandrea.it/posts/intigriti-challenge-1125/</guid>
      <description>&lt;h2 id=&#34;introduction&#34;&gt;&#xA;  Introduction&#xA;  &lt;a class=&#34;heading-link&#34; href=&#34;#introduction&#34;&gt;&#xA;    &lt;i class=&#34;fa-solid fa-link&#34; aria-hidden=&#34;true&#34; title=&#34;Link to heading&#34;&gt;&lt;/i&gt;&#xA;    &lt;span class=&#34;sr-only&#34;&gt;Link to heading&lt;/span&gt;&#xA;  &lt;/a&gt;&#xA;&lt;/h2&gt;&#xA;&lt;p&gt;Hi folks! This write-up documents my solution to &lt;a href=&#34;https://challenge-1125.intigriti.io/&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;Intigriti&amp;rsquo;s November 2025 Challenge&lt;/a&gt; created by &lt;a href=&#34;https://x.com/intigriti&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;Intigriti&lt;/a&gt;. The goal was to find a hidden flag (in the format &lt;code&gt;INTIGRITI{.*}&lt;/code&gt;) by exploiting a Remote Code Execution (RCE) vulnerability in a fictional e-commerce platform called &amp;ldquo;AquaCommerce!&amp;rdquo;.&lt;/p&gt;&#xA;&lt;p&gt;This marks my first attempt at an Intigriti challenge, and I have to say that it was a really fun (and &amp;ldquo;easy&amp;rdquo;) one! Let&amp;rsquo;s dive into the solution!&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
