Hyunsoo Cha

[1/2] CVE-2026-32223: heap overflow in usbprint.sys (IOCTL 0x220064). Malformed USB descriptor, Named Pipe spray + Ghost Chunk for kernel leak, forged IRP, SYSTEM. Writeup: enki.co.kr/en/media-cente… #CVE_2026_32223 #WindowsKernel #LPE #vulnresearch

We’re excited to welcome Enki Whitehat (@ENKI_official_X ) as a sponsor of CyKor CTF (@cykorctf)! we’re grateful for your partnership in taking this year’s competition to the next level. 🚀 ENKI Whitehat is a leading South Korean offensive security company specializing in pentesting, threat intelligence, and vulnerability research. Renowned for their technical excellence, they hold a staggering record of 24 CTF championships and over 100 disclosed vulnerabilities. Beyond services, they empower the industry through ‘OFFen’ (ASM/PTaaS) and their ‘CAMP’ training platform. Experience top-tier offensive security capabilities with ENKI Whitehat. 🚀

Curious how the Codegate 2025 FullChain was meant to be pwned? From RCE to SBX to LPE... the path to SYSTEM is now public. Official write-up is live! #pwn #CTF #Codegate #RCE #SBX #LPE enki.co.kr/en/media-cente…

Our research team wrote an article with a detailed analysis of Safari RCE (CVE-2023-37450). Check it out! @enki-techblog/ios-16-5-1-safari-rce-analysis-cve-2023-37450-89bb8583bebc" target="_blank" rel="nofollow noopener">medium.com/@enki-techblog…… #safari #rce #cve202337450 #enki #whitehat

Codegate CTF 2024 Preliminary will start soon!🚀🚀🚀 💰💰💰 Total Prizes (for Final) : 71M KRW (approx. $51k) CTFTime: ctftime.org/event/2346 Duration: 2024.06.01 10:00 - 2024.06.01 10:00 (UTC+9) Official Website: ctf.codegate.org Discord: discord.gg/Ukakxb8Gn8

We HypeBoy topped Plaid CTF 2024! 👑 @_Reinose_en @justlikebono @munsiwoo @real_as3617 @mhibio_ptw @howdays1 @stanzz @soo_sudo @n1net4il @1nteger_c @c2w2m2 @pr0cf51 @cmy981224 @csapp3e ironore15 G0RiYa Thanks to the great support from dakuo & hellsonic

@lolzareverser @ShuntIsReal @rajxnull @offsectraining @jinmo123 @c2w2m2 Yes, getting a job is very important, but it's not everything. Why do CTF? In the past, I did ctf just for fun. nowadays, it's for personal growth.

@lolzareverser @ShuntIsReal @rajxnull @offsectraining @jinmo123 @c2w2m2 Is getting a job is everything? To correct one thing, I did not complete the BoB program. I started CTF in my early teens. It's far from thinking about having a job. Many hackers around me aren't doing CTF just because of money or jobs.

@soo_sudo @ShuntIsReal @rajxnull @offsectraining @jinmo123 @c2w2m2 Great, thats why Korea players are ahead in CTF and have the best players because your companies require ctf/bounty/CVE , here in middle-east OSCP is widely required. congrats for building the strognest capabilities by the BoB (best of the best) program.

@lolzareverser @ShuntIsReal @rajxnull @offsectraining @jinmo123 @c2w2m2 So I never really resonated with the idea that OSCP is overrated, but after reading your post, I can see why ppl would say that. In fact, @c2w2m2 and I used to work at the same company (neither of us had a certification like OSCP) and we worked full-time even while in college.

@lolzareverser @ShuntIsReal @rajxnull @offsectraining @jinmo123 @c2w2m2 Do you really think so? When hiring offensive security researchers in Korea, the biggest criteria is CTF / bugbounty / CVE achievements. Except for a few large corporations and accounting firms, OSCP is not required.

데프콘 본선을 4위로 마무리했습니다. 14명의 한국인이 모여 만든 낭만은 내년에도 계속됩니다. 😆 HypeBoy got 4th place in #DEFCON 🥳 Keep your eyes on 14 koreans :))) youtu.be/11cta61wi0g

I'm uncertain about being an organizer next year. But if i do, I'll ensure to engage with the teams involved prior to making any public announcements

However, unlike that case, what I was overlooked in this case is that it may not be "obvious cheating". It is certain that to be disqualified by the rules, but there may be a "victim" to it.

2 years ago, a similar anti-cheating mechanism was applied in a domestic CTF. (of course, unlike codegate, there were many challenges for beginners and there were limit of team size (<=4)), and a total of 22 teams were caught cheating on 6 challenges. (obvious cheating)

FYI : The total prize money for the final round has been increased. totally 86 million KRW (approx. $65,000 worth)

Codegate CTF 2023 Preliminary is coming. 🚀🚀🚀🚀🚀🚀 Here are the details: Duration: 2023.06.17 10:00 - 2023.06.18 10:00 (UTC+9) Official website: codegate2023.org Discord: discord.gg/8GdTSKshHm

@CrazymanArmy hypeboy :), our team name comes from a popular k-pop song.

Oh sorry i forget HypeBug HypeBug is also a signel team i think but it only 15 ppl so strong :D

all team member: @_Reinose_en @justlikebono @munsiwoo @real_as3617 @mhibio_ptw @howdays1 @haven4someone @stanzz @soo_sudo @n1net4il @1nteger_c @c2w2m2 ironore15 G0RiYa only 14 korean teammates XD

@c2w2m2 youtube.com/watch?v=11cta6…

Cause I know what you like boy~ You’re my chemical HypeBoy XD