Complete Record

Archive

From vulnerability analysis and code auditing to offensive engineering and personal reflections. All 75 public articles, ordered by publication date.

2026

09-23

A Note on Jev and Laya's Non-Generative Decision Mechanisms

Technical Notes

09-18

Beyond the Pixel: Dissecting the Attack Surface of Shared Native Image Pipelines in Modern Web Frameworks

Security Research

09-02

After Transformer, What Exactly Is AI Improving?

Technical Notes

08-27

Twenty Years of Java Security: Reading the Trend Through Two Decades of Black Hat Talks

Security Research

08-04

When Security Research Enters the AI Era

Life

2025

12-08

React2Shell Analysis

Security Research

2024

10-28

Behind the Design of ByteCTF's Guess Cookie Challenge

CTF

10-28

Common Tricks for Auditing Spring Applications

Technical Notes

2023

03-01

MyBatis: From SQL Injection to OGNL Injection

Security Research

2022

04-16

Analyzing Spring Framework RCE from the Ground Up

Security Research

03-06

From SSRF to RCE: Analyzing the Spring Cloud Gateway RCE Vulnerability

Security Research

03-06

Vulnerability Analysis of fastjson 1.2.68 and Earlier

Security Research

2021

12-29

A Discussion of Configuration-File RCE

Technical Notes

12-13

A Discussion of Limited RCE in log4j 1.x and Logback

Security Research

12-11

Analysis of the log4j2 JNDI Injection Vulnerability

Security Research

11-20

Analyzing Thymeleaf SSTI and Bypassing the Latest Fix

Security Research

11-13

Java Code Auditing for Beginners 06: File Inclusion Vulnerabilities and Real-World Cases

Code Auditing

09-28

JVM Bytecode Notes: The Class File Structure

Technical Notes

07-15

My New Book: Java Code Auditing for Beginners

Life

06-30

Understanding the Native JDK 8u20 Deserialization Vulnerability Through a Case Study

Security Research

06-25

The Fundamentals of JEP 290

Security Research

06-13

A Study of the Deserialization Process

Security Research

06-13

Follow My WeChat Official Account

Security Research

06-13

A Study of the Serialization Process

Security Research

06-10

Notes on the Object Serialization Stream Protocol

Technical Notes

06-10

Notes on the JDK 7u21 Deserialization Vulnerability

Security Research

05-31

WeEngine CMS: From SQL Injection to RCE

Code Auditing

2020

11-18

Analyzing Remote Code Execution in Qishi CMS

Code Auditing

10-19

Notes on PHP's register_argc_argv Configuration

Security Research

10-15

Getting a Shell from a Low-Privilege FastAdmin Admin Account

Code Auditing

09-20

Analyzing a Front-End Shell Upload Vulnerability in the Latest FastAdmin

Code Auditing

07-15

Java Code Auditing for Beginners 05: RCE Vulnerabilities and Real-World Cases

Code Auditing

07-01

T-Star University Challenge Writeup

CTF

06-25

Front-End Injection Vulnerability in the Latest SeaCMS

Code Auditing

06-12

Java Code Auditing Fundamentals: The Java Reflection Mechanism

Code Auditing

04-15

Security Issues Caused by Delimiters

Security Research

01-22

Java Code Auditing for Beginners 04: SSRF Vulnerabilities and Real-World Cases

Code Auditing

01-11

CVE-2019-2729 Exploit Script

Security Research

01-05

Analyzing the 800,000-Character RCE in maccms v8

Code Auditing

2019

12-25

First Impressions of the XRAY Vulnerability Scanner

Technical Notes

12-21

Research on SQL Injection in phpMyAdmin's Designer Feature (CVE-2019-18622)

Security Research

12-18

Java Code Auditing for Beginners 03: XSS Vulnerabilities and Real-World Cases

Code Auditing

12-03

Java Code Auditing for Beginners 02: SQL Injection and Real-World Cases

Code Auditing

12-01

Getting Started with Industrial Control System Security

Security Research

11-27

A Brief Look at Prepared Statements in Java

Security Research

11-18

Java Code Auditing for Beginners 01: Preparing for an Audit

Code Auditing

11-14

Spring Study Notes: IoC

Programming and Algorithms

11-01

Understanding PHP Session Deserialization Vulnerabilities

Security Research

10-28

Understanding the S7COMM and Modbus Industrial Protocols

Security Research

10-21

2019 Industrial Information Security Competition Recap

CTF

08-29

Running a Discourse Community Locally

Technical Notes

08-23

SUCTF Web Challenge Reproduction Notes

CTF

08-21

Notes on Problems Installing a Cracked AWVS for Linux on CentOS 7

Technical Notes

08-21

Selected Writeups from NISC CTF 2019

CTF

08-01

Solving a Covert-Channel Data Analysis Challenge from an ICS CTF

CTF

07-06

Writeup for a CTF Challenge Based on the MMS Industrial Protocol

CTF

06-27

A Technical Discussion Prompted by PHP's filter_var()

Security Research

06-24

Reflections on PHP Security Calendar 2017

Security Research

06-21

Fixing Problems After Migrating Typecho

Technical Notes

06-16

Paper Notes: REDQUEEN — Fuzzing with Input-to-State Correspondence

Research

05-30

Paper Notes: CollAFL — Path-Sensitive Fuzzing

Research

05-06

Paper Notes: Coverage-Based Greybox Fuzzing as a Markov Chain

Research

04-26

Code Auditing in Theory and Practice: SQL, Part 1

Code Auditing

04-26

Finding a CSRF Vulnerability in a CMS

Code Auditing

2018

07-22

Fixing Microsoft VBScript Runtime Error '800a0009': Subscript Out of Range '[number: 1]'

Technical Notes

01-05

Study Notes on Support Vector Machines

Technical Notes

2017

12-15

Selected WEB Solutions from Shiyanbar

CTF

12-07

A Form-Based PoC for Posting JSON Data in a CSRF Attack

Technical Notes

12-07

Testing Slow HTTP Denial-of-Service Attacks with slowhttptest

Technical Notes

12-07

Auditing ZZCMS v8.1

Code Auditing

12-03

Selected Web Writeups from the 10th National Information Security Competition

CTF

12-03

Selected GCTF Web Writeups

CTF

12-03

Analyzing and Fixing a Basic-Authentication Phishing Vulnerability in Discuz! 3.2

Security Research

12-03

CVE-2017-9603 Analysis

Security Research

12-03

A Comprehensive Audit of AppCms

Code Auditing