How to Make a Cookie Sandwich

This post is a draft. Last updated: September 2026.

• won 1st out of 375 teams at CubeCTF 2025 with UofTCTF
• was one of only 3 teams to solve seekdeep
• chained Chrome bfcache to XSS with the cookie sandwich technique to extract an HttpOnly session cookie