落日歸山海，與你話清風。
CVE-2017-13028: TCPdump
2026-03-02
Out-of-bounds Read via a BOOTP packet (Bootstrap Protocol).
368 words
|
2 minutes
Fuzz two legacy CVEs in libexif
2026-02-24
Find & Patch two legacy CVEs in libexif library.
3267 words
|
16 minutes
Write-ups: Pwnable.tw
2026-02-06
Write-ups for pwnable.tw binary exploitation series.
737 words
|
4 minutes
Write-ups: System Security (Microarchitecture Exploitation) series
2026-01-30
Write-ups for pwn.college microarchitecture exploitation series.
4029 words
|
20 minutes
Intel Control-flow Enforcement Technology Bypass
2026-01-26
硬件防护并不终结利用，只是改变了路径。
1159 words
|
6 minutes
Write-ups: 0xL4ugh CTF v5
2026-01-24
Write-ups for 0xL4ugh CTF v5 pwn aspect.
1942 words
|
10 minutes