<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Zonkor — Security research</title><description>Web security research, CTF writeups, and technical notes by Zonkor.</description><link>https://zeyadzonkorany.github.io/</link><language>en</language><item><title>About this blog</title><link>https://zeyadzonkorany.github.io/writing/a-place-for-the-details/</link><guid isPermaLink="true">https://zeyadzonkorany.github.io/writing/a-place-for-the-details/</guid><description>What I publish here: web security research, CTF writeups, and technical notes.</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate><category>journal</category><category>introduction</category></item><item><title>1nfin1ty — 0xL4ugh CTF v5</title><link>https://zeyadzonkorany.github.io/writing/1nfin1ty/</link><guid isPermaLink="true">https://zeyadzonkorany.github.io/writing/1nfin1ty/</guid><description>The complete 1nfin1ty writeup: browser error pages, encoding behavior, Firefox internals, and IndexedDB storage.</description><pubDate>Mon, 29 Jun 2026 00:00:00 GMT</pubDate><category>web</category><category>browsers</category><category>encoding</category><category>dompurify</category><category>firefox</category></item><item><title>EnD — Sekai CTF 2026</title><link>https://zeyadzonkorany.github.io/writing/end/</link><guid isPermaLink="true">https://zeyadzonkorany.github.io/writing/end/</guid><description>The complete EnD writeup: HTTP response splitting, admin access, and a Chromium Range response side channel.</description><pubDate>Mon, 29 Jun 2026 00:00:00 GMT</pubDate><category>web</category><category>http</category><category>nodejs</category><category>chromium</category><category>service-workers</category></item></channel></rss>