winters
Security researcher.
記事
Ruby class pollution research - Rotate Chains Abusing ruby class pollution via a new method called rotate chains to get SQLI and then exploiting a 1-gadget ruby deserialization gadget to get RCE.
JavaScrypto - SECCON CTF24 Using prototype pollution to get XSS bypassing AES protections and gaining impact via localstorage partitioning