Technical Posts Nodejs Brotli UAF March 29, 2026 Flatt Security XSS Challenge - Writeup November 29, 2024 R3CTF - r3gallery Writeup June 28, 2024 LakeCTF Finals 2023 - Phishing Writeup May 20, 2024 Lamenote January 11, 2024 SekaiCTF-23 August 29, 2023 Achievements Pwn2Own Berlin 2026 - OpenAI Codex RCE CVEs OpenVSX - Improper Authorization in /user/namespace/{namespace}/details with smaury & zi0Black CVE-2025-1007 Squid - Information Disclosure in Error handling CVE-2025-62168 Outline - Stored XSS Via Comment Mentions CVE-2026-43887 OpenAI Codex - Remote Code Execution CVE-2026-19592 Google Chrome for iOS - Policy Bypass CVE-2026-13795 Recap Posts My previous year in infosec (part 2) December 30, 2024 My last year in infosec December 31, 2023