iiinova — where your digital self keeps evolving

Zeyu (Zayne)

@zeyu2001.bsky.social

• CS @ Cambridge • CTFs with Water Paddler / Blue Water • Security at Electrovolt / Cure53 • DEFCON 31-32 finalist • Also on Twitter and infosec.exchange

Posts Replies Media

Zeyu (Zayne) @zeyu2001.bsky.social · 02/04/2025

My slides from a talk I did at Cambridge about Static Program Analysis. I go into how data flow analysis (like taint propagation in CodeQL) works from first principles — should be digestible with some first-year university maths knowledge zeyu2001.github.io/cam-ib-tech-...

zeyu2001.github.io

021

Zeyu (Zayne) @zeyu2001.bsky.social · 16/03/2024

First onsite CTF in the UK! cheriPI @ pwnEd

010

Zeyu (Zayne) @zeyu2001.bsky.social · 13/11/2023

Kind of strange flying 15 hours to get to Taiwan, when my home is only 4 hours away. Anyway I'm here for HITCON!

010

Zeyu (Zayne) @zeyu2001.bsky.social · 29/08/2023

I will never be 21 and whining about CTF infrastructure from a luxury suite in Vegas with my teammates again. Earlier this month, I participated in the DEF CON 31 CTF and Midnight Sun CTF. This post serves as proof that I touched grass along the way. infosec.zeyu2001.com/2023/def-con...

infosec.zeyu2001.com

DEF CON 31 CTF && Midnight Sun CTF Finals 2023

My first hacker summer camp experience 🏖️

010

Zeyu (Zayne) @zeyu2001.bsky.social · 10/08/2023

done with my first linecon!

010

Zeyu (Zayne) @zeyu2001.bsky.social · 03/08/2023

Will be in LA on 6-7, Vegas 8-14, Munich 15-18, Stockholm 19-20. Let me know if you'd like to meet up!

000

Zeyu (Zayne) @zeyu2001.bsky.social · 02/08/2023

Many cross-site leak (XS-Leak) attacks are limited by SameSite cookies, and the ones that make use of top-level navigations aren't stealthy enough. What if we could weaponise HTML injection (where XSS is blocked by CSP) to leak data? Here's my small research rabbit hole from a few weekends ago...

infosec.zeyu2001.com

From XS-Leaks to SS-Leaks Using object

Using nested objects, lazy loading and responsive images to leak data

030