Intigriti Challenge 0326 - Write-Up

Tue, 24 Mar 2026 00:00:00 +0000

Introduction Link to heading

Hi folks! This write-up documents my solution to Intigriti’s March 2026 Challenge created by Kulindu. The goal was to find a hidden flag (in the format INTIGRITI{.*}) by exploiting a chain of client-side vulnerabilities in a fictional threat intelligence portal called “Secure Search Portal”.

This was a really fun and creative challenge! Let’s dive into the solution!

Warning

Spoiler Alert! This write-up contains the complete solution with detailed exploitation steps. If you want to attempt the challenge yourself first, stop reading now and head over to the challenge page!

Source code analysis Link to heading

The challenge presents a “Secure Search Portal”, a search interface that reflects user input back onto the page and allows users to report URLs to an admin.

Content Security Policy on Giuseppe D'Andrea

Intigriti Challenge 0326 - Write-Up

Introduction Link to heading

Source code analysis Link to heading