PinnedArk@arkark_Dec 26, 2025Cross-Site ETag Length Leak blog.arkark.dev/2025/12/26/eta… I just posted the author writeup for impossible-leak in SECCON CTF 14 Quals. As far as I know, this is a new XS-Leak technique! The ETag header can become a side channel :)blog.arkark.devCross-Site ETag Length Leak | XS-Spin BlogA novel XS-Leak technique that turns ETag length differences into a cross-site oracle via 431 errors and History API.49935444K
Ark@arkark_Aug 15github.com/jailctf/challe… この出題形式のpyjailに続編が来ると思わなかった。コラッツ数列🤔challenges-2026/collatz/handout/main.py at master · jailctf/challenges-2026From github.com6990