Hyunsoo Cha

CTFer | Researcher | DEFCON CTF 2019-2024 Finalist | Aleph Infinite

Lead @ENKI_official_X Research Team

Tweets are my own

[ENKI WhiteHat @ENKI_official_X]

[1/2]
CVE-2026-32223: heap overflow in usbprint.sys (IOCTL 0x220064).

Malformed USB descriptor, Named Pipe spray + Ghost Chunk for kernel leak, forged IRP, SYSTEM.

Writeup: https://t.co/EMSyWCPsVL

#CVE_2026_32223 #WindowsKernel #LPE #vulnresearch

[CyKor @CyKorKU]

We’re excited to welcome Enki Whitehat (@ENKI_official_X ) as a sponsor of CyKor CTF (@cykorctf)!
we’re grateful for your partnership in taking this year’s competition to the next level. 🚀

ENKI Whitehat is a leading South Korean offensive security company specializing in pentesting, threat intelligence, and vulnerability research.

Renowned for their technical excellence, they hold a staggering record of 24 CTF championships and over 100 disclosed vulnerabilities.

Beyond services, they empower the industry through ‘OFFen’ (ASM/PTaaS) and their ‘CAMP’ training platform. Experience top-tier offensive security capabilities with ENKI Whitehat. 🚀

[ENKI WhiteHat @ENKI_official_X]

Curious how the Codegate 2025 FullChain was meant to be pwned? From RCE to SBX to LPE... the path to SYSTEM is now public. Official write-up is live! #pwn #CTF #Codegate #RCE #SBX #LPE

https://t.co/9p7wUFCjnI

[ENKI WhiteHat @ENKI_official_X]

Our research team wrote an article with a detailed analysis of Safari RCE (CVE-2023-37450). Check it out! https://t.co/x2EjkBkMVV…

#safari #rce #cve202337450 #enki #whitehat

[CODEGATE @CODEGATE_KR]

Codegate CTF 2024 Preliminary will start soon!🚀🚀🚀

💰💰💰 Total Prizes (for Final) : 71M KRW (approx. $51k)

CTFTime: https://t.co/3LJFvKyHVm

Duration: 2024.06.01 10:00 - 2024.06.01 10:00 (UTC+9)

Official Website: https://t.co/T72Doz9wRO

Discord: https://t.co/x3MyigI4Ii

[c2w2m2 @c2w2m2]

We HypeBoy topped Plaid CTF 2024! 👑

@_Reinose_en @justlikebono @munsiwoo @real_as3617 @mhibio_ptw @howdays1 @stanzz @soo_sudo @n1net4il @1nteger_c @c2w2m2 @pr0cf51 @cmy981224 @csapp3e ironore15 G0RiYa

Thanks to the great support from dakuo & hellsonic

[Hyunsoo Cha @soo_sudo]

#BHMEA23

[Hyunsoo Cha @soo_sudo]

@lolzareverser @ShuntIsReal @rajxnull @offsectraining @jinmo123 @c2w2m2 Yes, getting a job is very important, but it's not everything. Why do CTF? In the past, I did ctf just for fun. nowadays, it's for personal growth.

[Hyunsoo Cha @soo_sudo]

@lolzareverser @ShuntIsReal @rajxnull @offsectraining @jinmo123 @c2w2m2 Is getting a job is everything? To correct one thing, I did not complete the BoB program. I started CTF in my early teens. It's far from thinking about having a job. Many hackers around me aren't doing CTF just because of money or jobs.

[Hyunsoo Cha @soo_sudo]

@lolzareverser @ShuntIsReal @rajxnull @offsectraining @jinmo123 @c2w2m2 So I never really resonated with the idea that OSCP is overrated, but after reading your post, I can see why ppl would say that. In fact, @c2w2m2 and I used to work at the same company (neither of us had a certification like OSCP) and we worked full-time even while in college.

[Hyunsoo Cha @soo_sudo]

@lolzareverser @ShuntIsReal @rajxnull @offsectraining @jinmo123 @c2w2m2 Do you really think so?

When hiring offensive security researchers in Korea, the biggest criteria is CTF / bugbounty / CVE achievements.

Except for a few large corporations and accounting firms, OSCP is not required.

[c2w2m2 @c2w2m2]

데프콘 본선을 4위로 마무리했습니다.
14명의 한국인이 모여 만든 낭만은 내년에도 계속됩니다. 😆

HypeBoy got 4th place in #DEFCON 🥳
Keep your eyes on 14 koreans :)))

https://t.co/pJa4cjGHHQ

[Hyunsoo Cha @soo_sudo]

I'm uncertain about being an organizer next year. But if i do, I'll ensure to engage with the teams involved prior to making any public announcements

[Hyunsoo Cha @soo_sudo]

2 years ago, a similar anti-cheating mechanism was applied in a domestic CTF. (of course, unlike codegate, there were many challenges for beginners and there were limit of team size (<=4)), and a total of 22 teams were caught cheating on 6 challenges. (obvious cheating)

[Hyunsoo Cha @soo_sudo]

However, unlike that case, what I was overlooked in this case is that it may not be "obvious cheating". It is certain that to be disqualified by the rules, but there may be a "victim" to it.

[Hyunsoo Cha @soo_sudo]

FYI : The total prize money for the final round has been increased. totally 86 million KRW (approx. $65,000 worth)

[Hyunsoo Cha @soo_sudo]

Codegate CTF 2023 Preliminary is coming. 🚀🚀🚀🚀🚀🚀

Here are the details:

Duration: 2023.06.17 10:00 - 2023.06.18 10:00 (UTC+9)

Official website: https://t.co/EKuhSM4aPH

Discord: https://t.co/f2rxTYImJf

[Hyunsoo Cha @soo_sudo]

@CrazymanArmy hypeboy :), our team name comes from a popular k-pop song.

[c2w2m2 @c2w2m2]

all team member:

@_Reinose_en @justlikebono @munsiwoo @real_as3617 @mhibio_ptw @howdays1 @haven4someone @stanzz @soo_sudo @n1net4il @1nteger_c @c2w2m2 ironore15 G0RiYa

only 14 korean teammates XD

[Hyunsoo Cha @soo_sudo]

@c2w2m2 https://t.co/bqSogxElHV