Zhong's Blog
2024
- Format String Vulnerability: What is under the hood of printf?
- New OAuth Phishing Threat: Exploiting Vulnerabilities in SaaS Integration Platforms
- Shadow Linking: The Persistence Vector of SaaS Identity Threat
- Offensive SaaS Security - Exfiltrating Cleartext Credentials via LogonUserW Hooking
- LACTF 2024-Writeup
- OSCP Cheat Sheet (Updating)
- Insomni'hack CTF 2024-Writeup
2023
- Compiler Optimization Strategies and Implementation
- CSAW CTF 2023-Writeup
- PatriotCTF 2023-Writeup