* DOM Clobbering to Redirect to another page
* Increasing Content using SQL Injection giving the same column multiple times
* Connection-Pool XS-Leaks to measure the time for the page to load
* Leak the flag character by character using the above techniques

Original writeup (https://blog.bi0s.in/2024/02/29/Web/KuttyNotes-bi0sCTF2024/).