Zeddy

bbbirds.org @defcon/116167144953907997" target="_blank" rel="nofollow noopener">defcon.social/@defcon/116167…

@Satoooon1024 Cool. That's a rly interesting KOH challenge.👍

@ZeddYu_Lu The overview is described in this article. #Web-Parser-Purgatory" target="_blank" rel="nofollow noopener">nanimokangaeteinai.hateblo.jp/entry/2026/03/… The sources will be published (maybe) 1 or more months later

SECCONお疲れ様でした。Parser PurgatoryというParser Differentialをたくさん見つけてもらうKing of the Hillチャレンジを作りました。耐えるための準備が足りず予想の通り99%がAIに破壊されましたが、想定を超えるスコアを出すチームもあり、何とか競技になっていたので良かったです

Is there any news abt the new DEFCON CTF org? @0rganizers Will you be the new organizers?😉

@S1r1u5_ Cool. totally automated agents like openclaw?

many say its a dope ui.

Ended up 6th at #0CTF! 🚩 Not bad for only ~7 people this time. Thanks to my teammates for the huge effort! 💪 Congrats to the top 3: r3kapig, NeSE, and mhackeroni. well played! Want to join the fun in 2026? We're looking for new members! Hit us up if you're interested. #CTF

@0x1337cafe @ankursundara So I still wanna know how does Cpython exactly ensure it should be taken as zip or plain text Python code?🤔

I wrote about my favorite CTF challenge that I've written so far with @ankursundara : farlow.dev/2025/12/07/get…

@S1r1u5_ And even no very officical document abt how to implement it. So I'm highly skeptical of its popularity among frontend developers. I asked some ppl around. None of them used that. ¯\_(ツ)_/¯

now that the reac2shell forced CTFers to look into flight protocol and RSC, there is a high chance of few more bugs coming out of it with similar impact. its a pretty complex protocol for developers to implement, and complexity is a perfect breeding ground for weird state machines.

HITCON 🍊 challenges are so cool. I feel like 🍊 is back👊

🥈 Thrilled to nab 2nd as Blue Water, teamed up with @perfect_blue at DEFCON CTF Final 33! 🙌 Congrats to @mmm_ctf_team for their 4th straight 1st 💪 We’re gunning for the crown next year! Join our crew to make it happen! DM us or drop us an email! 🚀 #DEFCON #CTF

My teammates really did a good job in DEF CON CTF Final. For the axis, the only web, I’m rly curious if no teams really patched the vuln perfectly? Since the SQLi is obvious, however, it seems we could exploit the SQLi to the end of CTF. 🤔 Also, any other vulns?#DEFCONCTF

@dreyand_ @_smile_hacker_ Oh glad you like it😆//I could not afford my previous domain so I use GitHub page now.

@_smile_hacker_ credits to @ZeddYu_Lu for his great depth of research!

goated article, even 5 years(?) later web.archive.org/web/2022071406…

@terjanq Seems only in Switzerland?🤔

And me! (: If we know each other feel free to DM me with any questions

I expect to graduate this summer, but while job hunting in HK and SG lately, I’ve been exhausted by the endless rounds of comprehensive assessments. Why isn’t there a unified platform or system to eliminate these repetitive tests and reduce candidates’ fatigue?🥲🥲🥲

@orange_8361 @BlackHatEvents Pure web: web assembly😆

Thanks @BlackHatEvents for the #BHUSA acceptance! It's pure web hacking research this time! 🔥 However, I'm still not sure if I can enter the US or not. In advance, I reapplied for the VISA and had the interview in March. Two months have passed, and my case is still under review. I really want to be back on stage. Is there any effort or help I can try? 😫

@chybeta Teaching me is not that difficult, sir.

It is a difficult thing to teach other people RCE =.=

@orange_8361 @BlackHatEvents Let me guess. it is related to the latest httpd cve 😉

Just submitted my ✨ new research to Black Hat USA #BHUSA, and it's all about Web Security this time! Hoping the US will approve my VISA this year, giving me the chance to back to the stage again! :/ @BlackHatEvents

@4uuu_Nya The Disneyland of ChengDu

想问问大伙，有没有成都的岗推推

The xz package, starting from version 5.6.0 to 5.6.1, was found to contain a backdoor. The impact of this vulnerability affected Kali between March 26th to March 29th. If you updated your Kali installation on or after March 26th, it is crucial to apply the latest updates today.

@bestswngs could u teach me, master swing?

这周一个同学和我一起学习了下 CVE-2024-21762 这个漏洞，感觉整体利用起来还是蛮有意思的。🧐