Masamune Blog

Skip to main content

Framed-XSS write-up (SECCON CTF 14 Quals)

Framed-XSS write-up (SECCON CTF 14 Quals)

Dec 25, 2025

Framed-XSS detailed write-up

Web Exploitation CTF

Web challenges write-up (Cykor CTF 2025)

Private: Web challenges write-up (Cykor CTF 2025)

Dec 10, 2025

This post is private.

ASEAN openCTF 2025 - Qualification Writeup

ASEAN openCTF 2025 - Qualification Writeup

Sep 23, 2025

ASEAN openCTF 2025 detail writeup

Some research stuffs with Operational Technology (OT) Security

Some research stuffs with Operational Technology (OT) Security

Jun 9, 2025

Popping Bugs in PLCs

CVE-2025-27610: Local file inclusion

CVE-2025-27610: Local file inclusion

May 20, 2025

CVE-2025-27610: Local file inclusion

Research CVE Bug Bounty

Analysis CVE-2024-32002 (Git)

Analysis CVE-2024-32002 (Git)

Dec 15, 2024

CVE-2024-32002: Git Remote Code Execution

ISITDTU CTF 2024 - Writeup Web Challenges

ISITDTU CTF 2024 - Writeup Web Challenges

Oct 30, 2024

Writeup for web challenges in ISITDTU CTF 2024

Web Exploitation CTF

Analysis CVE-2022-1471 (SnakeYaml)

Analysis CVE-2022-1471 (SnakeYaml)

Sep 17, 2024

CVE-2022-1471: SnakeYaml Deserialization

Analysis CVE-2024-4367 (PDF.js)

Analysis CVE-2024-4367 (PDF.js)

Sep 4, 2024

CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js

Web Exploitation Research CVE

CyberSpace CTF 2024 - Writeup Web Challenges

CyberSpace CTF 2024 - Writeup Web Challenges

Sep 3, 2024

Writeup for web challenges in CyberSpace CTF 2024

Web Exploitation CTF