Skip to content

Latest commit

 

History

History
138 lines (75 loc) · 2.78 KB

ret2basic.md

File metadata and controls

138 lines (75 loc) · 2.78 KB
timezone
Asia/Shanghai

ret2basic.eth

  1. 自我介绍

Security Engineer Intern @zksecurity. I do ZK + Solidity for work, red teaming + game hacking for hobby.

  1. 你认为你会完成本次残酷学习吗?

Can't say no.

Notes

2024.08.29

I have done Ethernaut and DamnVulnerableDeFi before (writeup).

Plan:

  1. Solve the last 2 challs from onlyPwner
  2. Solve paradigm ctf 2023 locally
  3. Solve curta locally: https://github.com/fiveoutofnine/tardis

Today:

2024.08.30

  1. Wrote a PoC for Solidity assembly related bug during work
  2. Wrapped up eWPT exam (web hacking)

2024.08.31

  1. Investigated a ECDSA signature related issue during work
  2. Worked on Taichi private audit

2024.09.01

  1. Wrapped up Taichi private audit

2024.09.02

  1. Solved onlyPwner Diversion

2024.09.03

  1. Solved onlyPwner SEAL911

2024.09.04

  1. Investigated an issue with calling external function within the same contract with this keyword, such as this.functionCall(). I found that the msg.sender during this call with be address(this), not the EOA address who initiated the tx.
  2. Investigated an issue with using offset to access a portion of calldata in solidity assembly block.

2024.09.05

  1. Investigated a super-duper complex reentrancy issue during work

2024.09.06

  1. Wrapped up onlyPwner. Now I solved all challs.

2024.09.07

  1. Built a Claude 3.5 prompt bot for web3 ctf.
  2. Half way into DamnVulnerableDefi Curvy Puppet.

2024.09.08

  1. Solved a Milotruck chall: Gnosis Unsafe.

2024.09.09

  1. Solved a Milotruck chall: Meta Staking.

2024.09.10

  1. Solved Tornado crash from blaz ctf 2023.

2024.09.11

  1. Investigated a solidity language bug <0.8.15 https://soliditylang.org/blog/2022/08/08/calldata-tuple-reencoding-head-overflow-bug/
  2. Tried decompile sui move bytecode into C/Python with claude 3.5.

2024.09.12

  1. Review taichi audit group client PR.
  2. Tested claude 3.5 diagram drawing capabilities. Tomorrow I will let it try to manipulate raw calldata.

2024.09.13

  1. Solved Greyhats Dollar from Milotruck challs.
  2. Solved Escrow from Milotruck challs.

2024.09.14

  1. Building knowledge base for the bot

2024.09.15

  1. Building knowledge base for the bot

2024.09.16

  1. Learning cairo

2024.09.17

  1. Building cursor rules for blaz ctf

2024.09.18

  1. Researching prompt engineering

2024.09.19

  1. Researching prompt engineering

2024.09.20

  1. Wrote a minecraft-like browser game with three.js

2024.09.21

  1. play blaz

2024.09.22

  1. play blaz