gnosis@kim:~ # cat about_me/README.md
# About me
Experience, papers, awards, talks, contact, and detailed project stories.
Detailed project stories## Profile
I am a vulnerability researcher working across software / firmware / hardware. I discover vulnerabilities, investigate their root causes and impact, and develop exploits to validate them in real environments.
I currently research zero-day vulnerabilities and offensive automation at Out of Bounds. At Pwn2Own Ireland 2026, I successfully exploited Philips Hue Bridge Pro as part of Out of Bounds. I contributed to the discovery of 18 CVEs in smart devices and worked as a Red Team intern at AUTOCRYPT’s Vehicle Threat Research Lab. At AutoHack 2025, I received the COSS Council Chair Award.
I am also interested in using AI agents to automate security research. My work includes Automated Exploit Generation and Automated Post-Exploitation, which automates follow-up attacks after initial access.
#Vulnerability_Research#Zero-Day_Research#Reverse_Engineering#Binary_Exploitation#Exploit_Development#Automated_Exploit_Generation#Automated_Post-Exploitation#Agentic_AI
## Experience
Out of Bounds · Vulnerability Research
Researcher
- Zero-day vulnerability analysis and exploit development across software / firmware / hardware
- Research on Automated Exploit Generation and Automated Post-Exploitation
#Vulnerability_Research#Reverse_Engineering#Exploit_Development#Automated_Exploit_Generation#Automated_Post-Exploitation
AUTOCRYPT · Vehicle Threat Research Lab
Red Team Intern
- Automotive security threat analysis and penetration testing
- Offensive security research targeting vehicle systems
#Automotive_Security#Penetration_Testing#Red_Team
CYAI Lab (Sejong University) · Cybersecurity AI Lab
Undergraduate Researcher
- Conducting research on AI-driven security automation focusing on LLM and autonomous agents
- Designed Agentic AI-based ExploitAgent architecture and experiment pipelines
- Paper presentation at KSII Autumn Conference (Best Paper Award)
- Participating in regular seminars analyzing recent APT attack and defense trends
- Personal research MuCamp2: LLM-based APT attack scenario variant generation experiments
#AI_for_Security#Agentic_AI#LLM#Exploit_Automation#APT_Analysis
Whitehat School 3rd Cohort · Security Training Program
Trainee
- Completed advanced Offensive Security training
- Hands-on vulnerability analysis and exploit development
#Offensive_Security#Training#Exploit_Development
## Portfolio
I analyze the causes of vulnerabilities across software / firmware / hardware and reproduce them on real systems to validate exploitability. My work uses reverse engineering and binary analysis, and also explores automation from vulnerability discovery and exploit generation to post-exploitation.
### Key Achievements
#### Pwn2Own Ireland 2026 / Win
- Successfully demonstrated a Philips Hue Bridge Pro exploit in the Smart Home category
- Competed as part of Out of Bounds
- Validated exploitability using five vulnerabilities
- Awarded $12,000 and 2.5 Master of Pwn points
#### Vulnerability Analysis & Exploit Development
- Attack-surface analysis and vulnerability validation across software / firmware / hardware
- Vulnerability reproduction and exploitability validation on real systems
- Hands-on analysis of CAN bus and UDS protocols in automotive networks
#### Firmware & Hardware Analysis
- Comprehensive security analysis of an IoT smart doorbell, contributing to 18 CVE discoveries
- Combined firmware analysis with hardware interfaces including UART and JTAG
- Research on automating fault-injection experiments through AUTOGLITCH
#### Automated Exploit Generation
- Researched Agentic AI-based ExploitAgent architecture and autonomous behavior generation
- Used SCOUT to reconstruct exploitability chains from firmware evidence
- Connected vulnerability findings to reproducible exploit validation
#### Research Outcomes & Publications
- Published two IEEE Access papers as first author and co-author
- Received two Best Paper Awards at KSII conferences
- Contributed to 18 CVE discoveries through smart-device vulnerability research
#### Automated Post-Exploitation
- Research on automating post-exploitation actions after initial access, including privilege escalation and lateral movement
- Designed workflows where specialized agents use prior attack results to select the next step
- Integrated security tools to execute the selected attack steps
### Self-Developed Tools
- SCOUT - AEG-First Firmware-to-Exploit Evidence Engine
- Terminator - Autonomous Security Agent System
### Core Competencies
#Vulnerability_research#Reverse_engineering#Automated_Exploit_Generation#Automated_Post-Exploitation
Explore the background, role, results and lessons behind each project.
#cat about_me/stories.md## Publications
[Journal]
Multi-Strategy RAG with ATT&CK STIX Metadata-Enriched Embeddings for Technique Extraction
Jimin Lee, KeunHo Kim, Kwonmoo You, Changhee Choi
IEEE Access
[Journal][First Author]
MuCamp2: Generating Validated Cyber Campaign Variants via Constrained LLMs for Group Attribution
KeunHo Kim, Jimin Lee, Insup Lee, Insung Han, Jungsik Lee, Shinwoo Shim, Changhee Choi
IEEE Access (SCIE)
#open doi:10.1109/ACCESS.2026.3700808#open paper#open doi#open code
[Conference][Best Paper Award]
Agentic AI-based Anomaly Behavior Detection Method
Minjun Kim, Jaejun Byun, KeunHo Kim, Sanghoon Cho, Jimin Lee, Insung Han, Sungjin Park, Taehoon Kim, Changhee Choi
KSII Spring Conference 2026
[Conference]
LLM-based Security Log Reduction Technique
Jaejun Byun, Minjun Kim, KeunHo Kim, Sanghoon Cho, Jimin Lee, Insung Han, Sungjin Park, Taehoon Kim, Changhee Choi
KSII Spring Conference 2026
[Conference][Best Paper Award]
Architecture Design and Autonomous Behavior Generation of Agentic AI-based ExploitAgent
Sanghun Jo, KeunHo Kim, Changhee Choi
KSII Autumn Conference 2025 (Defense IT Research Society)
## Speaking & Community
### Talks & Lectures
You Are Not Thinking At All [featured]
Sejong University Security Club Joint Seminar (SSG, S!, NSbit, Cyberpunk)
SCOUT Project Presentation [featured]
Incognito Conference
### Community
SSG (Sejong Security Group)
President
SSG (Sejong Security Group)
Projects Department Director
SSG
Embedded Vulnerability Analysis Project Mentor
SSG
Systems Hacking Lecturer & Mentor
SSG
Operations / Treasurer
## Certified
### Awards
Pwn2Own Ireland 2026 / Win
Zero Day Initiative
Competed in the Smart Home category as part of Out of Bounds. We successfully demonstrated a Philips Hue Bridge Pro exploit using five vulnerabilities. Our entry earned $12,000 and 2.5 Master of Pwn points.
SPACE WAR @ ARIES (AI) CTF All Solved 7th Place
HSPACE
AutoHack 2025 COSS Council Chair Award
Kookmin University Future Automotive Division
## Contact
Feel free to reach out for security research collaboration, speaking, or opportunities.