From 2300aed2ac6da94c0e74757bb233a0e4d3d93da1 Mon Sep 17 00:00:00 2001
From: Marco <33866739+mlgzackfly@users.noreply.github.com>
Date: Wed, 25 Mar 2026 15:33:43 +0800
Subject: [PATCH 1/4] docs: update Marco's page

---
 src/member/2024/Marco.tsx | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/src/member/2024/Marco.tsx b/src/member/2024/Marco.tsx
index 9f09652..9562a2a 100644
--- a/src/member/2024/Marco.tsx
+++ b/src/member/2024/Marco.tsx
@@ -185,6 +185,24 @@ export const MarcoMemberPage = () => {
     const conferences: MemberArticleType[] = []
     const techConfs: MemberArticleType[] = []
     const zeroday: MemberZeroDayType[] = [
+    {
+        id: (
+            <div>
+                <a href="https://zeroday.hitcon.org/vulnerability/ZD-2026-00409">ZD-2026-00409</a>
+            </div>
+        ),
+        title: "某單位 API JWT 簽名密鑰可猜測，可偽造 Token 繞過所有 API 端點認證",
+        datetime: "2026.03.25"
+    },
+    {
+        id: (
+            <div>
+                <a href="https://zeroday.hitcon.org/vulnerability/ZD-2026-00407">ZD-2026-00407</a>
+            </div>
+        ),
+        title: "某單位 Kibana 監控平台未經授權公開暴露，洩漏 2.3 億筆數據",
+        datetime: "2026.03.25"
+    },
     {
         id: (
             <div>

From ff5af6efb4c6a95ee9d65d286cc1a3f9c475ab93 Mon Sep 17 00:00:00 2001
From: Marco <33866739+mlgzackfly@users.noreply.github.com>
Date: Tue, 7 Apr 2026 17:53:49 +0800
Subject: [PATCH 2/4] docs: upadte Marco's page
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

新增 CPTS 證照
---
 src/member/2024/Marco.tsx | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/member/2024/Marco.tsx b/src/member/2024/Marco.tsx
index 9562a2a..bd1b228 100644
--- a/src/member/2024/Marco.tsx
+++ b/src/member/2024/Marco.tsx
@@ -9,6 +9,10 @@ export const MarcoMemberPage = () => {
     <p> 在我的 <a href="https://blog.mlgzackfly.tw" target="_blank" rel="noopener noreferrer">部落格</a> 中，有一些證照回顧以及靶機的解題過程，可以來看看。</p>
     </div>
     const certificates: MemberCertificateType[] = [
+        {
+            title: "HTB Certified Penetration Testing Specialist (CPTS)",
+            datetime: "2026.04.07"
+        },
         {
             title: "HTB Certified Junior Cybersecurity Associate (HTB CJCA)",
             datetime: "2026.03.10"

From 9e11557023cb37d1208510c631495164da0c96fb Mon Sep 17 00:00:00 2001
From: Marco <33866739+mlgzackfly@users.noreply.github.com>
Date: Tue, 7 Apr 2026 23:51:31 +0800
Subject: [PATCH 3/4] docs: update Marco's page
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 修改簡介
- 新增 ZeroDay
---
 src/member/2024/Marco.tsx | 33 +++++++++++++++++++++++++++++++--
 1 file changed, 31 insertions(+), 2 deletions(-)

diff --git a/src/member/2024/Marco.tsx b/src/member/2024/Marco.tsx
index bd1b228..1aeabb1 100644
--- a/src/member/2024/Marco.tsx
+++ b/src/member/2024/Marco.tsx
@@ -4,7 +4,9 @@ import { MemberArticleType, MemberCertificateType, MemberInternType, MemberParti
 
 export const MarcoMemberPage = () => {
     const bio = <div className="d-flex flex-column gap-3">
-    <p>黃昱翔專注於資訊安全工程與攻防實務，具備紅隊與攻擊手角色之實戰經驗，熟悉完整攻擊鏈流程與攻防情境推演。累積多場 CTF 競賽與實戰型攻防演練經驗，技術能力涵蓋 Web 與 Mobile 應用程式安全、OSINT 情資分析、系統層級弱點利用、存取控制繞過與橫向移動等關鍵攻擊面，並於多項具代表性之資安競賽中取得可驗證之成果。長期投入軟體弱點分析與責任式揭露，曾於 HITCON ZeroDay 平台揭露多起高風險與高影響力漏洞，展現成熟的弱點挖掘與風險判斷能力。 - chatGPT</p>
+    <p> HTB CPTS | HTB CWES | HTB CJCA | PWPA | eJPTv2 </p>
+    <p>具備實戰導向之滲透測試與紅隊攻擊能力，專注於 Web 與 API 攻擊面，擅長識別存取控制缺陷、認證繞過及敏感資料外洩風險。累計揭露 40+ 項漏洞（含 CVE），多起案例成功取得高敏感資料（涵蓋醫療、商業與個資），影響規模達數萬至數億筆資料。</p>
+    <p>具備從弱點發掘至攻擊鏈建構之完整能力（Initial Access → Privilege Escalation → Data Exfiltration），能模擬真實攻擊者行為並驗證實際影響，將技術弱點轉化為具體風險情境與修補建議。 - chatGPT</p>
     <p>更多資料在 <a href="https://www.mlgzackfly.tw" target="_blank" rel="noopener noreferrer">個人網站</a></p>
     <p> 在我的 <a href="https://blog.mlgzackfly.tw" target="_blank" rel="noopener noreferrer">部落格</a> 中，有一些證照回顧以及靶機的解題過程，可以來看看。</p>
     </div>
@@ -189,6 +191,33 @@ export const MarcoMemberPage = () => {
     const conferences: MemberArticleType[] = []
     const techConfs: MemberArticleType[] = []
     const zeroday: MemberZeroDayType[] = [
+    {
+        id: (
+            <div>
+                <a href="https://zeroday.hitcon.org/vulnerability/ZD-2026-00491">ZD-2026-00491</a>
+            </div>
+        ),
+        title: "某單位 商品目錄頁面 keyword 參數反射型 XSS 漏洞",
+        datetime: "2026.03.25"
+    },
+    {
+        id: (
+            <div>
+                <a href="https://zeroday.hitcon.org/vulnerability/ZD-2026-00490">ZD-2026-00490</a>
+            </div>
+        ),
+        title: "某單位 結帳流程備註（remark）欄位儲存型跨站腳本攻擊（Stored XSS）",
+        datetime: "2026.03.25"
+    },
+    {
+        id: (
+            <div>
+                <a href="https://zeroday.hitcon.org/vulnerability/ZD-2026-00489">ZD-2026-00489</a>
+            </div>
+        ),
+        title: "某單位 會員資料維護頁面 nickname /name 欄位儲存型跨站腳本攻擊（Stored XSS）",
+        datetime: "2026.03.25"
+    },
     {
         id: (
             <div>
@@ -276,7 +305,7 @@ export const MarcoMemberPage = () => {
                 <a href="https://zeroday.hitcon.org/vulnerability/ZD-2026-00325">ZD-2026-00325</a>
             </div>
         ),
-        title: "某單位 未簽章 Cookie 身份驗證導致任意帳號接管（IDOR）",
+        title: "情趣用品界第一把交椅 E大 未簽章 Cookie 身份驗證導致任意帳號接管（IDOR）",
         datetime: "2026.03.13"
     },
     {

From 1fa494b78b02f2f75cf7e0872e1b09fba6c80bce Mon Sep 17 00:00:00 2001
From: Marco <33866739+mlgzackfly@users.noreply.github.com>
Date: Tue, 7 Apr 2026 23:52:24 +0800
Subject: [PATCH 4/4] docs: update Marco's page
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

修正 ZeroDay 日期
---
 src/member/2024/Marco.tsx | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/member/2024/Marco.tsx b/src/member/2024/Marco.tsx
index 1aeabb1..f3468bd 100644
--- a/src/member/2024/Marco.tsx
+++ b/src/member/2024/Marco.tsx
@@ -198,7 +198,7 @@ export const MarcoMemberPage = () => {
             </div>
         ),
         title: "某單位 商品目錄頁面 keyword 參數反射型 XSS 漏洞",
-        datetime: "2026.03.25"
+        datetime: "2026.04.07"
     },
     {
         id: (
@@ -207,7 +207,7 @@ export const MarcoMemberPage = () => {
             </div>
         ),
         title: "某單位 結帳流程備註（remark）欄位儲存型跨站腳本攻擊（Stored XSS）",
-        datetime: "2026.03.25"
+        datetime: "2026.04.07"
     },
     {
         id: (
@@ -216,7 +216,7 @@ export const MarcoMemberPage = () => {
             </div>
         ),
         title: "某單位 會員資料維護頁面 nickname /name 欄位儲存型跨站腳本攻擊（Stored XSS）",
-        datetime: "2026.03.25"
+        datetime: "2026.04.07"
     },
     {
         id: (