Skills

System Hacking

AI - LLM

- LLM-Powered Automated Windows Fuzzing Harness Generation

- Fine-tuning Large Language Models for Recovering Cache Files

Web Hacking

Malware Analysis

C

python

Experience

H3XOR

• 2018.07 — 2019.07

Republic of Korea Army Special Forces

Cert Team • 2020.07 — 2022.01

KITRI Best Of the Best(BOB) 11th

Vulnerability Analysis • 2022.07 — 2023.03

Ai-Ver.se Labs

Senior Researcher • 2023.02 — Present

Projects

UEFI Exploitation Fuzzer Project

• 2022.07 — 2022.12

UEFI Security Trends Paper CISC-W`22
CVE-2023-27471(SA-2023036)
CVE-2023-30738(SVE-2023-0437)
Project Summary GitBook

Node.JS Vulneraiblity Analysis

• 2023.04 — 2023.09

Re-BoB 대상 - 한국정보기술연구원장상
ReDoS 취약점 탐지 도구의동향 분석 및 개선을 통한 취약점 분석 연구 - 학회 우수논문상 CISC-W`23
프로토타입 오염 패턴 조사를 통한 Node.js 패키지 취약점 분석 연구 CISC-W`23
CVE-2023-45827 CVE-2024-23339 CVE-2024-27088 ...

CTF

• 2018 — Present

Codegate Junior 2018 Finals
Insomni'hack 2018 35th place in H3XOR
BOB Attack & Defence CTF 1st in 888
BYU CTF 2023 2nd place in Budaejjigae
etc..

Bugbounty

• 2018 — Present

Samsung SDS(FindTheGap)| Birty mail - FVE-2024-5b89-188, FVE-2024-5b89-64, FVE-2024-5b89-127
I*** Stored XSS 제보

강의

• 2023 — 2023

정보보호 제품군 실습 강의 - MITRE ATT&CK TTP별 주요 위협 행위 시뮬레이션 및 행위 이벤트 식별 및 해석