Sign in Subscribe
Kevin Chen

Kevin Chen

資安研究者，專注 Web／雲端滲透測試、CTF 與 Bug Bounty，獲 TWCERT/CC Bug Bounty 名人堂，曾於 Dcard、研華、IEI、台電等回報漏洞。在 肉's Lab 分享靶機實戰、漏洞研究與程式筆記。
03
Jul

Broken Crystals Field Notes 4: MCP Attack — Full Kill Chain from Unauthenticated Guest to admin Privilege-Escalation RCE

7 min read
03
Jul

Broken Crystals 實戰筆記 4：MCP 攻擊實戰——從未認證訪客到 admin 提權 RCE 的完整 kill chain

9 min read
03
Jul

Broken Crystals Field Notes 3: eval SSJI to root RCE, and an XXE That Reads Files but Can't Do SSRF

5 min read
03
Jul

Broken Crystals 實戰筆記 3：eval SSJI 拿 RCE，與讀得到檔卻打不動SSRF的XXE

6 min read
03
Jul

Broken Crystals Field Notes 2: From a Single Query Parameter to a Root Reverse Shell

5 min read