ARCHIVES / CHRONOLOGY

Post archive

Browse research and practice by year and month.

55posts3years16months

2026

17 entries

10 month

1 post
  1. WebSocket: From Handshake to Message ReplayWeb

09 month

3 posts
  1. Learning RASP: From Java Agents to OpenRASP SQL Injection Detection and BypassesRASP
  2. CyberGym: Beyond the LeaderboardAI
  3. Threat ModelAI

08 month

1 post
  1. WeChat Miniapp Auditing: From Package Extraction to Agent-Based AnalysisWeChat Mini Programs

07 month

2 posts
  1. CNVD-2026-20654: LG NAS Remote Command Injection AnalysisCNVD
  2. oh-my-vul 1.0: An Evidence-First Vulnerability Research Workbenchoh-my-vul

03 month

1 post
  1. Claude Code Agent Teams: Multi-Agent Code Security AuditingClaude Code

02 month

7 posts
  1. Reading Go net/http Source Code and Security-Relevant DetailsGo
  2. Wiz Cloud Hunting Games WalkthroughCTF
  3. Kubernetes Goat Lab: From Secret Leakage to Container EscapeKubernetes
  4. Redis and Lua Scripts (Part 2)redis
  5. Redis and Caching Fundamentals: Data Structures, Persistence, and Security Notesredis
  6. HNUCTF 2026 Operations NotesCTF
  7. PsiTransfer DoS Vulnerability Analysis and Reproductionpsitransfer

01 month

2 posts
  1. n8n Expression Injection RCE: CVE-2025-68613 Analysis and Reproductionn8n
  2. OpenCode Vulnerability Reproduction: CVE-2026-22812 AnalysisOpenCode

2025

34 entries

12 month

3 posts
  1. CodeQL Basics: Database Creation and Common QueriesCodeQL
  2. Deploying and Studying a DEX Contract on an Ethereum TestnetBlockchain
  3. LLM Attacks and Hackergame: Notes on GCG and Adversarial LearningLLM

10 month

1 post
  1. Spring Learning and Code AnalysisSpring

09 month

6 posts
  1. Practical Workflow Building with Dify and CozeDify
  2. P2P and BitTorrent Protocol Study Notesp2p
  3. NTLM Protocol and Common Attack TechniquesNTLM
  4. SSJI / Server-Side Injection Study NotesSSJI
  5. CSP Bypass Techniques and CTF Challenge AnalysisCSP
  6. Learning Web Cache Mechanisms and Cache Poisoning AttacksNginx

08 month

9 posts
  1. HTB CTF Writeups and NotesHTB
  2. HTB CTF Try Out Write-upHTB
  3. Claude Code Usage Notes: CLI Agent Workflow in PracticeClaude Code
  4. MCP Security Use Cases and Common RisksMCP
  5. OWASP Juice Shop Lab Walkthrough and Vulnerability ExercisesSecurity Lab
  6. Jenkins Credential Decryption and Sensitive Information Retrieval in Practicejenkins
  7. MCP Learning and Practice: Protocol, Tools, and Integration NotesAnthropic
  8. Pass the Hash Attack: Principles and Defensive MeasuresLateral Movement
  9. Chunqiu Cloud Realm Tsclient and Cobalt Strike Study NotesChunqiu Cloud Realm

07 month

6 posts
  1. Chunqiu Cloud Brute4Road Lab WalkthroughChunqiu Cloud
  2. HTTP Response Splitting: Principles and Exploitation AnalysisHTTP
  3. Go Template SSTI: Principles, Exploitation, and DefenseGo
  4. HTTP Request Smuggling (CL·TE / TE·CL): Principles and DetectionHTTP
  5. XPath Injection: Principles, Exploitation, and DefenseXPath
  6. Python Security for Beginners, Lesson 1: SSTI and DeserializationPython

06 month

6 posts
  1. OpenHarmony CTF: ezAPP and SERVER Write-upHAP
  2. Chunqiu Cloud Realm Initial Challenge WalkthroughIntranet Penetration
  3. Object Storage Bucket Security Issues and CTF PatternsCloud Security
  4. Vite Arbitrary File Read Vulnerability Analysis (CVE-2025-30208 and Others)CVE-2025-30208
  5. CVE-2024-1561 Reproduction and Analysis NotesCVE-2024-1561
  6. Godzilla Webshell Traffic Analysis and Attributionwebshell

05 month

3 posts
  1. Webpack Front-End Penetration Testing: Sourcemaps and Exposed APIsWebpack
  2. Windows Incident Response: Investigating Logs, Processes, and PersistenceWindows
  3. 2025 Xuanyuan Cup Web WriteupCTF

2024

4 entries

06 month

1 post
  1. TCP/IP Core Protocol Study Notes (TryHackMe)TCP

01 month

3 posts
  1. AntSword Webshell Traffic Analysis and Incident TracingWebshell
  2. L3HCTF best_profile: Nginx Caching and Flask ProxyFixCTF
  3. Getting Started with the Metasploit Framework: Notes on Three TryHackMe RoomsMetasploit

SEARCH / QUICK FIND

Search English content

Try searching