wasaaap

Wasaaap

Challenge Description

I have made a chat application with my new AI assistant. He is sooooo faaaaaasttt...

Short Writeup

• Overflow in editMsg() function
• Use of overflow to write into the template html in the wasm memory
• Hence allowing html injection
• Csp bypass to get script execution

Flag

icc{wasaap!!_ain7_wa5p_ffaa44aastt}

Tested by

Web

Author

-