# Home

## Home

- [Zeyu's Infosec Blog](https://infosec.zeyu2001.com/master.md): 👋 This is where I write about information security!
- [DEF CON 31 CTF && Midnight Sun CTF Finals 2023](https://infosec.zeyu2001.com/2023/def-con-31-ctf-and-and-midnight-sun-ctf-finals-2023.md): My first hacker summer camp experience 🏖️
- [From XS-Leaks to SS-Leaks Using object](https://infosec.zeyu2001.com/2023/from-xs-leaks-to-ss-leaks.md): Using nested objects, lazy loading and responsive images to leak data
- [Regular Expressions Are Hard](https://infosec.zeyu2001.com/2023/regular-expressions-are-hard.md): How to avoid common pitfalls.
- [ReadiumJS Cloud Reader — Everybody Gets an XSS!](https://infosec.zeyu2001.com/2023/readiumjs-cloud-reader-everybody-gets-an-xss.md): Stumbling upon an XSS paradise.
- [HTTP Request Smuggling in the Multiverse of Parsing Flaws](https://infosec.zeyu2001.com/2022/http-request-smuggling-in-the-multiverse-of-parsing-flaws.md): Nowadays, novel HTTP request smuggling techniques rely on subtle deviations from the HTTP standard. Here, I discuss some of my recent findings and novel techniques.
- [Hosting a CTF — SEETF 2022 Organizational and Infrastructure Review](https://infosec.zeyu2001.com/2022/hosting-a-ctf-seetf-2022-organizational-and-infrastructure-review.md): My experience in hosting a CTF, and lessons learnt.