More Categories

// SECURITY PORTFOLIO

Multiflora_Rose

Cybersecurity / CTF / Research

A personal space for security research, CTF writeups, and technical notes about understanding how systems work.

View Posts GitHub CTFtime

Focus: Security
Output: Posts
Language: EN / 繁中
Identity: halliana

// RESEARCH

Recent posts

View all posts →

Pwn·2026-09-13

K17 CTF 2026 Writeups: ihyh, not json, and huge binary 2

Three K17 pwn writeups covering FILE-structure abuse, a recursive parser stack pivot, and constrained format-string ROP.

Web·2026-08-31

COMPFEST CTF 2026 Writeup: Egg

A WordPress 7.0 pre-auth RCE chain, from a WAF bypass and SQL injection to a temporary admin and command execution.

Web·2026-08-23

BrunnerCTF 2026 Writeup: Technical Debt

Chaining SAML signature wrapping, ASP.NET MVC mass assignment, and Mono BinaryFormatter deserialization into RCE.

$ ./achievements.sh

Selected CTF results

View all achievements →

$ ./best-result.sh

Best 2026 result

#1

PolyU FYP CTF 2026

2026 · Team: Ghostcat

Writeup contest: 2nd

#1

Hack for a Change 2026 May: UN SDG 1

2026 · Team: hello world has been taken

#1

PolyU FYP CTF 2026

2026 · Team: Ghostcat

Writeup contest: 2nd

#1

Hack for a Change 2026 May: UN SDG 1

2026 · Team: hello world has been taken

#2

FooBar CTF 2026

2026 · Team: hello world has been taken

#4

2025 · Team: hello world has been taken

#6

PolyU x NuttyShell Cybersecurity CTF 2026

2026 · Team: hello world has been taken

Writeup contest: 3rd

#6

Sieberrsec CTF 7.0

2026 · Team: hello world has been taken

// ABOUT

Multiflora_Rose

Security research, CTF writeups, and notes written with a preference for clear evidence and reproducible reasoning. Team leader of hello world has been taken.

Read about Multiflora_Rose →