[Back to 2022] Zabbix Auto registration host metadata injection
TL;DR This is an old bug which I discovered in the beginning of last year. I waited so long for zabbix handling, so I decided write this blog to share an eas...
Posts by Category
Bug analysis
[Back to 2020] ESPHome leak authentication key
TL;DR Hi all, This is my first blog actually. I found this one in 2020 but I just report to HomeAssistant and public market and no CVE reg
[1day to 0day] Netatalk from Pwn2own 2021 to 0x00 cent in 2022
TL;DR Hi all, This is my first blog in this page. Actually this is my second blog, but first one is missed on the previous website. I will push it again in t...
web3 security
[Smartcontract security] Digiverse(DIGI) has a potential backdoor
TL;DR I started learning about smart contract and web3 security for more than years. But it has no big progress. Therefore I deciced write down some thing ab...
tool
[Play with lua] Understand lua bytecode and fix luadec decompiler
TL;DR Lua is often used for web service cgi in some kind of embedded devices. Most are version 5.1 and are modified. There are old tools but they are not sta...
program language
[Play with lua] Understand lua bytecode and fix luadec decompiler
TL;DR Lua is often used for web service cgi in some kind of embedded devices. Most are version 5.1 and are modified. There are old tools but they are not sta...