Hi there 👋

Trails

• Security Specialist, hacomono 🇯🇵 2025 ~
• Chief Information Security Officer, AKUODIGITAL Japan 🇯🇵 2023 , 2years
• Senior Security Engineer, GREE 🇯🇵 2012, 10years and 7months
• Application Security Lead, LINE 🇯🇵 2008, 3 years and 10months
• Co-founder, PanicSecurity 🇰🇷 (PS ScanW3B, web application vulnerability scanner ) 2004
• Security Engineer (Windows Developer), Webzen 🇰🇷 2003, 1 year and 5months
• Security Consultant, Securesoft 🇰🇷 1 year
• Security Consultant, HackersLab 🇰🇷 (The first security consulting firm in Korea) 2002, 2years and 2months
• Association Founder, IGRUS, Inha Group of Research for UNIX Secruity (2000)
• Association Co-founder, KHDP, Koean Hacking Document Project (1999) with Wongyeo Jeong, Jiman Ham

Favorites

• AWS IAM, GaurdDuty, CloudWatch, WAF, SecurityHub, Inspector, Cognito, ...
• Blockchain stuffs : solidity, truffle, geth, react, nodejs, remix, ...
• Progamming Languages : x86/64 asm, C/C++, C#, Python, PHP, Java, Ruby, Typescript, Delphi, QML, Yacc&Lex...
• Analysis tools : IDA Pro, IDA plugins, gdb, frida, ollydbg, WindDbg, ZAP, Burp, Burp extensions ...
• Develope Platforms : Rails, Nextjs, golang, Laravel, Fuelphp, Codeigniter, CakePHP, Django, Node.js, Symfony, Silex, ...
• Operating systems : Android, iOS, Windows, Linux, Mac OSX, Raspberry Pi, Arduino ...
• Old Operation systems : Solaris, Digital Unix, AIX, Minix, WinCE, i-Mode, KVM, Windows NT, ...

CTFs

• 2002 Host, KOF(King of Fighters) 2001 ctf, HackersLab, Taiwan
• 2001 Host, 2st KOF(King of Fighters) ctf, HackersLab, Korea
• 2001 2nd Winner, World Information Security Olymfair, KAIST, Korea

Bug Huntings(CVE)

• CVE-2001-1093 "Buffer overflow in msgchk in Digital UNIX 4.0G and earlier"
• CVE-2001-1092 "Msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line"
• CVE-2000-0998 "Format string vulnerability in top program allows local attackers to gain root privileges"
• CVE-1999-0691 "Digital Unix CDE dtaction -user overflow vulnerability proof of concept code"

Bug Bounties

• Lists are here https://github.com/truefinder/none-cve-vulnerabilities
• bugbounty.jp 11 reports (Not running now)

Game Security

• ヘブンバーンズレッド, まおりゅう, SINoALICE -シノアリス-, 戦姫絶唱シンフォギアXD UNLIMITED, アサルトリリィ Last Bullet, ...
• 消滅都市, アナザーエデン 時空を超える猫, ダンまち〜メモリア・フレーゼ〜, ソウルアームズ, 追憶の青, ...
• 釣り★スタ, ハコニワ, モンスタープラネット, 踊り子クリノッペ, 海賊王国コロンブス, 探検ドリランド, 聖戦ケルベロス, ...
• LINE Bubble, LINE Pokopang, LINE PokoPoko, LINE Pop, LINE GundamWars, ...
• TERA, Specil Force, Dragon Nest, ELSEWORD, パチスロDX, パチンコDX, ななぱち, チョコットランド, アラド戦記, ...

Security developement

• pii_in_google_drive "SpreadsheetからGoogle driveのリンクを読み込み、それをOpenAIで個人情報有無を検知"
• cognito_api_hack "cognitoを使用した認証基盤を検証するためのツール"
• mxHero_google_drive_anyonewithlink_alert "mxHeroを採択してる会社の添付ファイルの公開状態を検知"
• notion_public_page_search "社内notionで公開されたページを検知"
• google_drive_anywonwithLink_search "社内の公開されたファイルを検知"
• tonbi "ソースコード静的解析、脆弱性検知ツール"
• apk-decompile "Androidアプリ 解析ツール"
• dochizame "Android 動的アプリ改ざんツール"
• webterm "WebサーバーリアルタイムShell, ぺネトレーションツール"
• garuda "World first OSS wifi IDS シグナル攻撃検知ツール"

Speaker

• 2021 Gree TechConference(🇯🇵) https://techcon.gree.jp/2021/
  • "TONBI, vulnerabilitiy scanner for various MVC-model server frameworks"
• 2016 SECUINSIDE(🇰🇷) http://secuinside.com/2017/archive.html
  • "About oauth zero-day vulneribilities on Koeran SNS giants"
• 2015 GREE Mini Tech Talk(🇯🇵) https://labs.gree.jp/blog/2015/01/13430/
  • "Android game application vulnerailiies in wild"
• 2013 HITCON(🇹🇼) https://hitcon.org/2013/agenda/
  • "Spears and shields on online game"
• 2012 AVTOKYO(🇯🇵) https://ja.avtokyo.org/avtokyo2012/speakers
  • "Smartphone online game vulnerabilities"
• 2002 CONCERT(🇰🇷)
  • "Format String Attack"
• 2000 CONCERT(🇰🇷)
  • "UNIX network vulnerabilities"

Online publications

• 2002 "Heap overflow - feee/malloc, double free corruption" https://github.com/truefinder/truefinder/blob/main/documents/heap_overflow_free_malloc_double_free_corruption.txt
• 2001 "Format string attack on alpha(64bits) system" https://github.com/truefinder/truefinder/blob/main/documents/format_string_attack_on_alpha_system.txt
• 2001 "Ptrace and controlling the child process" https://github.com/truefinder/truefinder/blob/main/documents/ptrace_and_controlling_the_child_process.txt
• 2001 "Format string attack - concept and general exploit" https://github.com/truefinder/truefinder/blob/main/documents/format_string_attack_concept_and_general_exploit