Fourth-year undergraduate student at Nanjing University of Posts and Telecommunications (NJUPT)

Focus on Web Security (mostly Java application security), Red Team Pentest and Cloud Security

CTF player atX1cT34m,Nu1L Team andStraw Hat

Blog:exp10it.io

Email:i@exp10it.io

My CVE List:SECURITY.md

PinnedLoading

1. JNDIMapJNDIMapPublic

   A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-version JDK restrictions

   Java 526 38

2. pivot-rspivot-rsPublic

   pivot-rs is a lightweight port-forwarding and socks proxy tool written in Rust 🦀

   Rust 50 3

3. hacking-espressohacking-espressoPublic

   Hacking GraalVM Espresso - Abusing Continuation API to Make ROP-like Attack

   Java 37 6

4. presentationspresentationsPublic

   My presentation slides

   18 1