Posts

All the articles I've posted.

• OpenShell: Ripgrep Command Injection in OpenCode Web UI

  27 Apr, 2026

  OpenShell: Ripgrep Command Injection in OpenCode Web UI

• Attack Surface Analysis of Cursor

  22 Jan, 2026

  Cursor 攻击面分析

• Attack Surface Analysis of Claude Code

  1 Jan, 2026

  Claude Code 攻击面分析

• Exploring MCP Security Risks

  30 Dec, 2025

  MCP 安全风险初探

• Breaking Raft Consensus in Go: N1SAML Writeup for N1CTF 2025

  2 Nov, 2025

  Breaking Raft Consensus in Go: N1SAML Writeup for N1CTF 2025

• Hacking GraalVM Espresso: Abusing Continuation API to Make ROP-Like Attack

  23 Aug, 2025

  Hacking GraalVM Espresso: Abusing Continuation API to Make ROP-Like Attack