Mcsky's blog
About Achievements

piano - UAF in QuickJS @ HKCERT 2025 Quals

---------------------------------

Exploiting a custom CTF patch in QuickJS to achieve RCE(and a flag)

inline8 - type-confusion in a small Js engine @ DCTF

---------------------------------

Finding and exploiting a type-confusion in the jsish javascript engine used in the inline8 challenge at DCTF Finals 2025.

Cryptohack - Let's Decrypt Again

---------------------------------

Using discrete logarithms to forge signatures by crafting custom decryption exponents.

Meet tobi: a CLI tool designed to ease your CTF life

---------------------------------

Organize your CTF workflow with tobi by letting it handle your workspace setup!

luma-assembly writeup

---------------------------------

Reversing and exploiting a custom assembly instruction set at UNBreakable 2024 Finals

UNbreakable 2024 strground Writeup

---------------------------------

Interesting heap exploitation trick to bypass incorrect fastbin index🤔

2026 © Mcsky's blog
GitHub icon Twitter icon