submissions received
102
average payout
N/A
accepted submissions
N/A
total payouts
N/A
Description
Come play our monthly CTF!
Bounties
This is a responsible disclosure program without bounties.
Assets
In scope
Rules:
This challenge runs from 18/05/2026 12:00 PM until 25/05/2026, 11:59 PM UTC.
- Out of all correct submissions, we will draw seven winners on Wednesday 27/05/2026:
- First blood
- Three randomly drawn correct submissions
- Three best write-ups
- Every winner gets a €50 swag voucher for our swag shop
- First blood receives a €100 swag voucher!
- The winners will be announced on our X profile.
- For every 100 likes, we'll add a tip to announcement post.
- Join our Discord to discuss the challenge!
The solution:
- Should leverage a XSS vulnerability on the challenge page.
- Shouldn't be self-XSS or related to MiTM attacks.
- Should work in the latest version of Google Chrome.
- Should include:
- The payload(s) used
- Steps to solve (short description / bullet points)
- Should be reported on the Intigriti platform.
Get started:
- Test your payloads on the challenge page & let's pop that alert!
Out of scope
N/A
Severity assessment
This program follows Intigriti's triage standards based on the proof of concept.
FAQ
N/A
All aboard!
Please log in or sign up on the platform
For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.
It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.
Program specifics
Overall stats
Last 90 day response times
avg. time first response
< 4 hours
Activity
5/20
created a submission
5/20
created a submission
5/20
created a submission
5/20
created a submission
5/20
created a submission
5/20
created a submission
5/20
created a submission
5/20
created a submission
5/20
created a submission
5/20
created a submission