**tl;dr**
\+ meta redirect to attacker website, using the html injection in the paaad.
\+ leak the unique subdomain with csp violation.
\+ Another meta redirect csrf with the leaked subdomain to make the note
public.
``First pad``
```html
```
``https://attacker.com/attacker.html``
```html
TEST
```
``Second pad``
```html
```
Original writeup (http://blog.bi0s.in/2023/10/16/Web/paaad-
Hack.luCTF20232023/).