Solutions and write-ups from security-based competitions also known as Capture The Flag competition

💥 java web xss injection (html,javascript,css,sql)

Javascript helper library to assist in injecting scripts, styles and html from userscripts.

A simple extension that allows users to view custom css on GitHub profiles.

Pesticide is a Chrome extension designed to help you visualize the layout and structure of any webpage by outlining every HTML element. It’s a powerful tool for debugging CSS and understanding how elements are nested on the page.

🎁 Babel plugin to parses CSS with PostCSS and injecting into JavaScript

CSSINJ is a tool that exploits CSS injection vulnerabilities to exfiltrate sensitive information from web applications. This tool is designed for security professionals to assess the security posture of web applications by demonstrating how CSS can be used to extract data covertly.

YAML configurable web dashboard viewer written in Go

Proof that you can inject secretly custom css as a part of HTTP header

A Chrome extension that injects CSS to improve the Rensselaer Polytechnic Institute Student Information System's awful website.

a custom Chrome Extension with a new Youtube UI, Video Downloader, Icon changer and more

A challenge by Frontend Mentor.

this readme allows you to display any content you want as soon as the readme is loaded

Simple CSS injection generator. Pass in a dictionary of characters and generate CSS that checks for the presence of said characters on the page