Solutions and write-ups from security-based competitions also known as Capture The Flag competition

💥 java web xss injection (html,javascript,css,sql)

Javascript helper library to assist in injecting scripts, styles and html from userscripts.

Pesticide is a Chrome extension designed to help you visualize the layout and structure of any webpage by outlining every HTML element. It’s a powerful tool for debugging CSS and understanding how elements are nested on the page.

A simple extension that allows users to view custom css on GitHub profiles.

🎁 Babel plugin to parses CSS with PostCSS and injecting into JavaScript

CSSINJ is a tool that exploits CSS injection vulnerabilities to exfiltrate sensitive information from web applications. This tool is designed for security professionals to assess the security posture of web applications by demonstrating how CSS can be used to extract data covertly.

YAML configurable web dashboard viewer written in Go

Proof that you can inject secretly custom css as a part of HTTP header

A Chrome extension that injects CSS to improve the Rensselaer Polytechnic Institute Student Information System's awful website.

a custom Chrome Extension with a new Youtube UI, Video Downloader, Icon changer and more

全网通用浏览器壁纸油猴脚本，带 UI 设置面板，支持实时模糊、透明度调节及深色模式适配。

一个简单的 Chrome/Edge 扩展，用于折叠 Gemini 的长代码块并添加回到底部按钮。

A challenge by Frontend Mentor.

Simple CSS injection generator. Pass in a dictionary of characters and generate CSS that checks for the presence of said characters on the page

this readme allows you to display any content you want as soon as the readme is loaded

A distraction-free "Focus Mode" for Google Gemini that hides the sidebar and chat to maximize the Canvas/Code workspace.