Sectalk Sydney Ninja Night CTF #18 Writeup May 12, 2026 Chaining XSS, cookie exfiltration, and SSTI to capture three flags at a CTF night #security #ctf 3 min read