Kyeongmin Kim

KAIST Hacking Lab | previous CTF Player @CykorKU | DEFCON Finalist 32, 34 | Microsoft MVR '26 | Pwn2Own Ireland '26 | Hexacon '26 | POC '26

[Kyeongmin Kim @hareh4ru]

Sad that the after party got cancelled, but had a great time at Hexacon and in Paris! Huge thanks to everyone who enjoyed my talk!

The detailed paper and exploit code will be released in November at ACM CCS 2026!

[Hexacon @hexacon_fr]

MTEscape: Bypassing ARM's Asynchronous MTE with General Memory Corruption Vulnerabilities by Kyeongmin Kim (@hareh4ru)

[Kyeongmin Kim @hareh4ru]

Didn’t expect to run the exploit inside a Faraday cage (it’s so cool btw)

[TrendAI Zero Day Initiative @thezdi]

Direct connection - NOT needed for Kyeongmin Kim (@hareh4ru) of KAIST Hacking Lab who remotely breached the Samsung Galaxy S26 with 1 unique bug and 2 collision winning $8.5k and 3.5 Master of Pwn points #Pwn2Own

[Kyeongmin Kim @hareh4ru]

GGWP! Huge thanks to all of my teammates, and a special thank you to KISA and ENKI for supporting our participation in the tournament!

[Insu Yun @insu_yun]

My last CTF has come to an end.

I’m very proud that our team, 0x4b52, finished in second place at DEF CON CTF.

On the final day, I was a little upset—not only as a CTF player, but also as a professor. As a professor, I always want to tell my students that we should try to live and compete with integrity. As a CTF player, I deeply respect a community where each of us voluntarily chooses to uphold the spirit of the game. I believe we should hack systems, not the rules.

Of course, I understand that not everyone may see things the same way. And to be fair, I probably didn’t think this way myself when I was younger. Maybe I’ve just gotten a little older and come to believe that this is the way things should be.

Anyway, a huge thank you to BBB for organizing this competition. It is impossible to imagine how much time, effort, and volunteer work it takes to make an event like this possible. If I came across as too aggressive during the game, I’m really sorry. As a team leader, every single tick felt incredibly precious to me.

Congratulations to Blue Water. They definitely outperformed us. Some of the team members are my old friends. I really want to congratulate them.

Most of all, I’m grateful to my teammates and students. It was truly a pleasure playing together.

I had a great time. Thank you, everyone.

[Kyeongmin Kim @hareh4ru]

Recognized as a 2026 Microsoft Most Valuable Researcher (MVR)! Notably, I ranked 5th on the Q2 Windows leaderboard.

I’m grateful to Prof. @insu_yun for his guidance and support. I’d also like to thank @msftsecresponse for its continued engagement with security researchers.

[Kyeongmin Kim @hareh4ru]

@farazsth98 @movx64 @ptrYudai @yellowday60 Hope to see you in Seoul again:)

[CyKor @CyKorKU]

📢 CyKor CTF (@cykorctf) Announcement

CyKor is pleased to host the upcoming CyKor CTF with great prizes!
• 1st Place: $ 3,000
• 2nd Place: $ 1,500
• 3rd Place: $ 500
The event will be held for 24 hours, from 2025.12.06 01:00 (UTC+0) !
🔗 CTF Link: https://t.co/QPHKJyZ3u2

[Kyeongmin Kim @hareh4ru]

@rajxnull Do both the kernel and userland operate in synchronous mode? If so, I’m curious how performance was maintained.

[gss1 @gosasu1]

see you in august #Cold_Fusion

[Kyeongmin Kim @hareh4ru]

Ranked 4th in HITCON 2023 with 프로그램털모찌 ! ☺️

[Kyeongmin Kim @hareh4ru]

@grhkm21 After reading articles about it, I guess that 400K means the temperature where supercondutor property disappears. Still a big news!

[zer0pts @zer0pts]

Thank you for playing zer0pts CTF 2023!!!!
Congratulations to the top 3 teams:
🥇 Balsn (@balsnctf)
🥈 CyKor
🥉 TeamItaly (@CyberTeamItaly)