V8 exploit - Revisiting oob-v8 *CTF2019
Recently, I start to maintain a repo related to 'web-pwn' in the github, which refer to the exploitation of memory-related vulnerabilities within essential web components like browsers, JavaScript runtimes, PHP runtimes, and others.
Read morehack.lu 2023 Writeup
This writeup contains an interesting mXSS challenge, named awesome-note-2, from the hack.lu this year.
Read morep4CTF teaser 2023 Writeup
I also participated in the p4 ctf last weekend. I managed to solve two AI-related challenges, reminding me of the materials that I was doing during my undergraduate studies. There is also an interesting blind pwn challenge about fmt and uninitialized read vulnerability.
Read moreidekCTF 2022 Writeup
idek2022 has provided several challenges with good quality. The sprintf challenge is a "wired" format string challenge in which I have summarized 3 different impressive approaches. Check them out!
Read moreRealWorld CTF 2023 Writeup
Another writeup for the ReadWorld 2023 CTF. Here are the baby-level and normal-level challenges, but they are actually not easy at all.
Read more