Disclosed Vulnerabilities#
CVSS 8.1 (High)
On SwitchBot Hub Mini, I found a BLE path that enters legacy DFU mode without authentication. This path allows unintended firmware to be installed.
Work Experience#
HEXALABS by CROCUS
2026.04 ~ NowSecurity Researcher
OO Unit under the Ministry of National Defense
2024.09 ~ 2026.03OO Analysis · Sergeant
LIG D&A
2024.07Cyber Electronic Warfare Development Division Intern
LG Electronics
2024.01 ~ 2024.02Home Entertainment Division · TV Security & Compliance Team Intern
Education#
B.S. Candidate in Smart Security, Korea University
2021 ~ 2027GPA: 4.16/4.5
CyKor
2022 ~ 2023Korea University Hacking Club
Honors and Awards#
Whitehat Contest, 3rd Place
2025Team: 우리에게천재일우의기회가왔다
Full Tuition Scholarship for Top-Ranked Admission
2021Division of Smart Security, Korea University
Skills#
- Web/API penetration testing: Access control vulnerability analysis, including IDOR
- Firmware reverse engineering: Assembly and binary analysis, BLE/GATT and UART communication analysis, OTA path and server validation
- Security tool development: C, Python, JavaScript; fuzzer implementation
- Security analysis tools: Burp Suite, IDA, Ghidra, Binwalk, UART/SPI, and hardware architecture analysis
Languages#
- Korean: Native
- English: Intermediate (TOEIC 945, OPIc IH)
- Japanese: Fluent (JLPT N1, 141 points)