CTF DOM-based XSS Challenge This is a simple CTF challenge demonstrating DOM-based XSS. How to play Open index.html in your browser. The goal is to steal the flag stored in localStorage. Use the input field to inject a script that reads localStorage.getItem('flag') and displays it.