I recently discovered a way to leak domains/subdomains from cross-origin requests in Chrome, and I thought it would be cool to create a chall before publishing a blog post about it
Chall: challenge-01.babelo.xyz
Source: blog.babelo.xyz/ch-01.zip
DM me if you managed to get the flag