AIS3 Pre-Exam 2026 完整解題地圖：整理 Pwn、Web、Reverse、Crypto 與 Misc 題目，並依系列順序連結每篇詳細 Writeup。
I'm Suzu. I break systems down to first principles.
OpenBMC and firmware security, vulnerability research, binary exploitation, and CTF writeups—backed by labs, code, and reproducible evidence.
Featured
See all postsA practical and slide-backed walkthrough of OpenBMC architecture, attack surface, D-Bus, and a QEMU lab setup.
CVE-2024-2961 主要是 glibc 的 iconv 函式，在進行字元轉換時，因為呼叫 Escape Sequence 到輸出時沒有檢查邊界問題，因此可以造成 OOB Write，後續也利用這個 Off by one 來打達成 PHP 的 LFI to RCE 漏洞。
Latest Writing
Writing ArchiveA pwn writeup for blooockchain, covering raw SHA-256 digests, strncat, an OOB leak, and saved RIP overwrite.
A crypto writeup for EasyFAULT, recovering the hidden RSA structure with lattice-style analysis.
A crypto writeup for EasyJWT, focusing on JWT signing, verification, and token forgery.