HTB Web Challenge Writeup

The challenge involved bypassing a strict CSP using a DOM Clobbering technique followed by Prototype Pollution to leak the admin session cookies.