Hey!
I'm Sean, otherwise known as ensy or nsysean, a programmer and CTF player from Hong Kong. Learn more about me.
Featured Posts
3 XSS Vulnerabilities discovered in SolidJS
A write up of some XSS vulnerabilities I found in SolidJS
Read Post
Universal LLM Instruction Leak
A blog about a (nearly) universal prompt which leaks LLM instructions
Read Post
DOMPurify 3.2.3 Bypass (Non-Default Config)
A write up of a bypass in DOMPurify 3.2.3 I found (CVE-2025-26791)
Read Post