Post Archive

3 XSS Vulnerabilities discovered in SolidJS

Write up of 3 XSS vulnerabilities I found in SolidJS with 2 CVEs

Universal LLM Instruction Leak

A blog about a (nearly) universal prompt which leaks LLM instructions

LA CTF 2025 web/antisocial-media Writeup

A detailed write up of the CTF challenge antisocial-media from LA CTF 2025

x3CTF blogdog(web) Write up

A detailed write up of the CTF challenge blogdog from x3CTF 2025

DOMPurify 3.2.3 Bypass (Non-Default Config)

A write up of a bypass in DOMPurify 3.2.3 I found (CVE-2025-26791)

HKCERT CTF 2024 Qualifiers - JSPyaml Write up

A detailed write up of the CTF challenge JSPyaml from HKCERT CTF 2024 Qualifiers