2022

SSRF and Account Takeover via XSS in ERPNext
Details of Amelia < 1.0.49 Sensitive Information Disclosure Vulnerability
Sensitive Data Disclosure in WordPress Plugin Amelia < 1.0.49
LINE CTF 2022 Notes
Common Mistakes When Using Numbers in JavaScript
TSJ CTF 2022 - web/Nim Notes Notes
SUSCTF 2022 Writeup
Counting all data types in JavaScript
Intigriti 0222 XSS Challenge Author Writeup
Understanding the Execution Environment (Runtime) in JavaScript
Various JS and Front-end Tips I Learned from DiceCTF 2022
Story of critical security flaws I found in Glints
Trying out new features with Chrome Origin Trials
Your JavaScript Knowledge Might Be Wrong
SQL injection in action: Speeding up under restrictions
The Art of Turning Same Site into Same Origin!
Understanding JavaScript from its history
How a flawed password reset mechanism can lead to account takeover vulnerabilities? Matters as an example

2021

Understanding the Log4j and Log4Shell Vulnerabilities through Surveillance Cameras
CPSA (CREST Practitioner Security Analyst) Exam Experience