[Pwn2own] [Back to 2023] It still hid from me
TL;DR 2023 is not the first time for trying with Pwn2own contest. But it hid from by someways. I targeted SOHO Smashup category and TPLink is the cheapest ro...
Posts by Year
2026
2024
[Play with lua] Understand lua bytecode and fix luadec decompiler
TL;DR Lua is often used for web service cgi in some kind of embedded devices. Most are version 5.1 and are modified. There are old tools but they are not sta...
[Smartcontract security] Digiverse(DIGI) has a potential backdoor
TL;DR I started learning about smart contract and web3 security for more than years. But it has no big progress. Therefore I deciced write down some thing ab...
2023
[Back to 2022] Zabbix Auto registration host metadata injection
TL;DR This is an old bug which I discovered in the beginning of last year. I waited so long for zabbix handling, so I decided write this blog to share an eas...
2022
[Back to 2020] ESPHome leak authentication key
TL;DR Hi all, This is my first blog actually. I found this one in 2020 but I just report to HomeAssistant and public market and no CVE reg
[1day to 0day] Netatalk from Pwn2own 2021 to 0x00 cent in 2022
TL;DR Hi all, This is my first blog in this page. Actually this is my second blog, but first one is missed on the previous website. I will push it again in t...