About Insight Labs

Security research notes on CTF write-ups, reverse engineering, web and hardware security. Insight Labs began as a bilingual Chinese and English research blog covering CTF write-ups, reverse engineering, web security and kernel exploitation.

What this edition is

Every older note has been rewritten in new words, checked against what is known today and given a short list of takeaways. Original screenshots, author credits and comments are not republished. Where a note was first written in Chinese, the rewritten English version ends with a short Chinese summary.

From 2025 the archive also covers hardware and device security: debug interfaces on circuit boards, IoT hardening and physical connectors as an attack surface.

Who runs it

The site is run by its current editor. It is not run by, and does not speak for, the people who wrote the original posts. See Contributors for how credits are handled.

Corrections

This site does not take messages or submissions. Notes are reviewed and updated by the editors from time to time.