Writing
Security notes, source reviews and lab write-ups. Historical articles retain their original dates.
PHP2Shell: I rebuilt PHP 8.3.35 and 8.3.36 to see what changed in two CVSS 9.2 RCEs
Two critical PHP runtime RCEs (CVE-2026-109618, CVE-2026-109619): root cause, the fix, and a defender-first remediation and detection guide, built from a from-source reproduction.
EnglishThe ARTEX Campaign: Evidence, Attribution, and Runtime Authority
An evidence-led analysis of the Korean finance disclosure: what agent artifacts can establish, what defenders should measure, and where runtime authority belongs.
EnglishSecurity Boundaries, 2018–2026: What Changed and What Repeated
A technical retrospective connecting speculative execution, identity, dependency trust and agent authorization through the boundaries each system assumes.
English · Editorial draftAn Authorized Security Assessment: From Scope to a Verified Fix
A complete assessment workflow using a synthetic document service: scope, trust boundaries, test controls, evidence, remediation and retesting.
English · Editorial draftActive Directory Assessment Through Attack-Path Evidence
A read-only approach to assessing identity control paths, Kerberos evidence, delegation, and certificate enrollment without overstating what configuration proves.
English · Editorial draftAgent Authorization Must Survive the Trip from Intent to Execution
A synthetic document-export workflow shows why task grants, resource-bound approvals, and execution-time state checks belong outside the model.
English · Editorial draftEgress Validation: Proving Policy and Telemetry Agree
Design bounded DNS and HTTPS canary tests that separate reachability, identity authorization, policy enforcement, and logging coverage.
English · Editorial draftEvaluating Tenant Boundaries in an MCP and RAG Assistant
A proposed experiment separates retrieval isolation, tool consent, context provenance, and observed side effects instead of treating a refusal as proof of security.
English · Editorial draftPersistence Investigation: Reconstructing What Survived and Why
Connect Windows and Linux startup configuration to execution evidence, provenance, and a defensible recovery decision.
English · Editorial draftFrom Source to Sink to Policy: A Practical Audit Workflow with Semgrep, CodeQL, and ZAP
A practical multi-language audit method that connects static data flow, authorization invariants, local HTTP evidence, and reproducible retesting.
English · Editorial draftCVE-2026-22729: When a Vector Search Filter Becomes an Authorization Boundary
A source review of Spring AI’s JSONPath filter injection, the converter patch, and a proposed validation plan for tenant isolation.
English · Editorial draftDomain Fronting: Names, Layers and Visibility
Separating DNS names, TLS names and HTTP routing to explain what each network observer can see.
ChineseRedis Access Control: Lab Notes and Hardening
A historical local-lab study followed by network, command and service-account hardening considerations.
ChineseFastJson Deserialization: From Property Assignment to Call Chains
Following type resolution, property setters and JNDI-related prerequisites in a historical lab.
ChineseFile Upload Security: Validation and Parser Differences
Examining content checks, extensions, naming rules and multipart parsing across upload paths.
ChineseError-Based SQL Injection: Three Mechanisms Explained
Examining overflow and XML errors, subquery aliases and version-dependent behavior.
ChineseAuditing KKCMS: Following Input to Security-Sensitive Operations
Tracing parameters through uploads, login and administrative forms to explain SQL injection, XSS and CSRF.
ChineseSQL Injection Defenses and Filtering Boundaries
Comparing escaping, type conversion, filtering and prepared statements through historical examples.
ChineseCVE-2020-5902: F5 BIG-IP Analysis Notes
An archived review of advisory details, validation paths, affected versions and mitigations.
ChineseSQL Injection: Types, Syntax and Constraints
Study notes on conversions, query structure, character sets, blind inference and database metadata.
ChineseFile Parsing and Server Configuration Boundaries
Comparing historical Apache, PHP, FastCGI and IIS behavior at the boundary between uploaded data and execution.
ChineseCBC Bit Flipping and Padding Oracles
Working through XOR, intermediate values and the conditions behind two cryptographic attack patterns.
Chinese5Space CTF 2020: Reading Web Exploit Chains
Tracing parameters, encodings and magic methods through PHP, Java and Laravel challenges.
ChineseSSRF and Gopher: Request Boundaries and Protocol Composition
Following server-side requests through attributed practice cases and internal-service interactions.
ChinesePHP Stream Wrappers and File Inclusion
Comparing wrappers, filters and configuration-dependent behavior through local examples.
ChineseXXE: XML, DTDs and Out-of-Band Validation
Explaining entity resolution, nested references and observable behavior in historical exercises.
ChineseHash Length Extension: Padding, State and Verification
A walkthrough of padding, byte order and chaining state, with a PHP verification exercise.
ChineseWireshark: From Packet Capture to Protocol Analysis
Capture placement, filters, conversation statistics and a closer reading of ARP, IP and TCP.
ChineseXCTF Web: Source Code, State and Combined Weaknesses
Challenge notes on files, serialization, account state and uploads, with failed hypotheses and source attribution.
ChineseMemory Forensics: Volatility and USB Keyboard Traces
Historical notes on volatile evidence, process and network artifacts, and USB keyboard data.
ChinesePHP Function Security: Comparison, Execution and Serialization
Following weak comparisons and input handling into execution and serialization behavior in older PHP environments.
ChineseISCC 2019 MISC: Encoding, Steganography and Reconstruction
Five challenge notes covering encodings, image fragments, keyboard traces and Python-assisted analysis.
ChineseXSS Practice: Following Output Context
Tracing input into HTML, attributes and JavaScript through historical Wooyun training exercises.
ChineseWPSEC 2019 Web: Source Analysis and Challenge Notes
Working through variable handling, comparisons, regular expressions and uploads, including an unfinished investigation.
ChineseSQL Injection: Response Signals and Query Context
Comparing response channels and explaining how input changes numeric, string and search queries.
ChineseSQLi-Labs 21–40: Filtering, Encoding and Second-Order Injection
Historical exercises on cookies, comment filters, character sets and changing input contexts.
ChineseNo matching articles.
Try another keyword or browse all writing.