Archives - Huli's blog

2023

Dec 03

A Bunch of Web and XSS Challenges

Nov 27

Exploring Various SSR (Server-side rendering) from a Historical Perspective

Nov 13

Analysis of CVE-2023-46729: URL Rewrite Vulnerability in Sentry Next.js SDK

Sep 23

HITCON CTF 2023 and SECCON CTF 2023 Writeup

Sep 11

TIL:img src also supports mp4 (Safari only)

Sep 02

corCTF 2023 & Sekai CTF 2023 Writeup

Aug 29

Math jail - Intigriti 0823 XSS Challenge Author Writeup

Jul 28

GoogleCTF + zer0ptsCTF + ImaginaryCTF 2023 Writeup

Jun 22

EJS Vulnerabilities in CTF

Jun 20

Updating Blog with chatGPT

Jun 12

ReDoS: Attacks using regexp

Apr 27

Android App Reverse Engineering Part 4: Dynamic Analysis with Frida

Apr 27

Android App Reverse Engineering Part 3: Monitoring App Packets

Apr 27

Android App Reverse Engineering Part 2: Modifying Smali Code

Apr 27

Android App Reverse Engineering Part 1: Decompiling and Rebuilding APKs

Apr 14

Preparation Experience for Japan's FE and SG Exams for Zero-Day Japanese Beginners

Mar 27

LINE CTF 2023 Notes

Mar 26

DiceCTF 2023 Notes

Jan 23

Intigriti 0123 Challenge Writeup - Second Order MongoDB JS Injection

Jan 10

Is it meaningful to encrypt passwords when calling APIs on the website frontend?