Security Researcher. HTTP Smuggling, Web Security, CTF.

Security researcher focused on HTTP protocol-level vulnerabilities, web application security, and CTF competitions.

Research Interests

  • HTTP Request Smuggling and desynchronization attacks
  • Web cache poisoning
  • Local File Inclusion (LFI) via PHP filter chains
  • DOM-based vulnerabilities
  • Timing side-channel attacks on web applications

Published Work

  • HTTP Smuggling Lab - testing environment for smuggling vulnerabilities
  • Novel PHP filter chain optimization for LFI exploitation
  • HTTP/2 timeless timing attack research

CTF

Active CTF player. Notable competitions:

  • 36C3 CTF (hxp)
  • ISITDTU CTF
  • Red Hat Cup CTF (China)
  • Various other web-focused CTFs

Contact

  • GitHub: ZeddYu