Git Product home page Git Product logo

fsclassroom's Introduction

Seunghyun Lee (a.k.a. "Xion")

Interests

  • System Security
  • Binary Analysis
  • Computer Architecture
  • Vulnerability Research & Exploitation

Affiliation

  • Ph.D. Student @ Carnegie Mellon University, Computer Science
  • B.S. @ KAIST (2018.02. ~ 2024.02.), CS&EE double major
  • Member of KAIST GoN (2018.03. ~)
    • Former leader of KAIST GoN (2020.03. ~ 2021.02.)
  • Member of zer0pts (2022.03. ~)
  • KAIST CERT Student Senior Member (2018.08. ~ 2021.02.)

Vulnerability Disclosures & Rewards

πŸ§‘β€πŸ’»
  • CVE-2024-6779: Out of bounds memory access in V8 in Google Chrome
  • b/346197738 (1-day): Google v8CTF exploit
  • CVE-2024-6100: Type confusion in V8 in Google Chrome (TyphoonPWN 2024)
  • CVE-2024-40789: Out of bounds memory access in WebKit
  • CVE-2024-3914: Use after free in V8 in Google Chrome (Pwn2Own Vancouver 2024)
  • CVE-2024-2886: Use after free in WebCodecs in Google Chrome (Pwn2Own Vancouver 2024)
  • CVE-2023-3390 (1-day): Google kernelCTF exploit in all LTS/COS/Mitigation instances, with Dongok Kim
  • CVE-2024-27934: Use after free in Deno to ACE
  • CVE-2024-27933: Permission prompt bypass in Deno to ACE
  • CVE-2023-29199, 30547, 37466, 37903: Sandbox escape in vm2
    • CVE-2023-35926, GHSA-22rr-f3p8-5gf8: Directus, Backstage affected by vm2 sandbox escape
  • CVE-2022-35951: Heap overflow in Redis XAUTOCLAIM to RCE
  • CVE-2022-35977: OOM DoS in Redis via single parameter-controlled SETRANGE / SORT(_RO)

Awards and Honors

πŸ…
  • Security Competition / CTFs
    • 2023
      • Challenge author of zer0pts CTF 2023
      • 1st Place, CODEGATE CTF 2023 University Div. as KAIST GoN
      • 1st Place, Cyber Conflict Exercise 2023 (Overall Championship) as The Goose
      • 1st Place, DEFCON 31 CTF as MMM
    • 2022
      • Organized 2022 Spring / Fall GoN Open Qual CTF
      • 2nd Place, Cyber Conflict Exercise 2022 General Div. as The Goose
      • 1st Place, WACON 2022 as The Goose
      • 2nd Place, zer0pts CTF 2022 as Super HexaGoN
    • 2021
      • 1st Place, Whitehat Contest Korea 2021 Military Div. as γ…‘γ…‘γ…‘λ³Έμ„ μ§„μΆœμ»€νŠΈλΌμΈγ…‘γ…‘γ…‘
      • 2nd Place, LINE CTF 2021 as KimchiSushi
      • 2nd Place, zer0pts CTF 2021 as K-Students
    • 2020
      • Challenge author of CODEGATE CTF 2020
      • 1st Place, Cyber Operations Challenge 2020 General Div. as KAIST GoN
      • 1st Place, SECCON 2020 OnlineCTF as HangulSarang
      • 1st Place, TokyoWesterns CTF 6th 2020 as D0G$
    • 2019
      • Finalist, DEFCON 27 CTF as KaisHack GoN
      • 2nd Place, Cyber Operations Challenge 2019 as GoN
      • 3rd Place, CODEGATE CTF 2019 University Div. as KAIST GoN
    • 2018
      • Participation Award, 2018 National Cryptography Contest II-A Div.
  • Academic Awards / Scholarship
    • Doctoral Research Fellowship, KFAS (Fall 2024 -)
    • KAIST Presidential Fellowship, KAIST (Spring 2020 - Fall 2023)
    • Presidential Science Scholarship, KOSAF (Spring 2020 - Fall 2023)
    • Department Honors Scholarship, School of Computing, KAIST (Spring 2020)
    • Honor Student Program, KAIST (Spring 2020)
    • National Scholarship for Science and Engineering, KOSAF (Spring 2018 - Fall 2019)
    • Dean's List
      • Spring 2023, Fall 2020, Spring 2020, Fall 2019, College of Engineering, KAIST
      • Fall 2018, Spring 2018, School of Freshman, KAIST

Invited Talks

πŸ—£οΈ

fsclassroom's People

Contributors

bonjune avatar heartpattern avatar leesh3288 avatar sangkilc avatar

Watchers

 avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.