Writing.
6 entriesResearch, CTF writeups, and technical notes.
Racing the Redirect: How HTTP 204 Preserved an XSS Sink
Digits In, GHOST Out
A Unicode-aware digit check followed by a byte cast lets dnsjava accept an X.25 address that serializes as different ASCII text.
About this blog
What I publish here: web security research, CTF writeups, and technical notes.
1nfin1ty — 0xL4ugh CTF v5
The complete 1nfin1ty writeup: browser error pages, encoding behavior, Firefox internals, and IndexedDB storage.
EnD — Sekai CTF 2026
The complete EnD writeup: HTTP response splitting, admin access, and a Chromium Range response side channel.
No articles found.
Try another category or search term.