한국디지털미디어고등학교
해킹방어과
Introduction
Hi, I’m Jinwan Park, a security researcher and engineer.
I focus on web2 security, vulnerability research, penetration testing, and automated/agentic vulnerability discovery.
Lately I’ve been working on ...
Education
2024 – 현재
Experience
2025 – 2025
Penetration testing
Penetration tester
- Mobile Telecommunications companyInternal sensitive information exposure
- Global domain of a major companySensitive file exposure, function restriction bypass
Projects
2026 – Present
Aegis
AI agents · Web Application Security · Naver Bugbounty
An AI workflow that audits web applications and generates security reports. Used in the Naver Bugbounty program, it found 20+ vulns and placed 1st in the Naver Bugbounty Hall of Fame.
Bug bounty & CVE
Bug bounty
Sep 2026
NBB-2026-0606
Naver · Logical Flaw Bugs · High
Sep 2026
NBB-2026-0600
Naver · File Download · High
Sep 2026
NBB-2026-0535
Naver · Business logic · High
Jun 2026
NBB-2026-0267
Naver · SSRF · Medium
Jun 2026
NBB-2026-0238
Naver · Authentication Bypass · High
2026
XSS
NBB-2026-0682, NBB-2026-0607, NBB-2026-0784,NBB-2026-0402, NBB-2026-0367, NBB-2026-0365, NBB-2026-0337, NBB-2026-0254, NBB-2026-0241, NBB-2026-0240, NBB-2026-0229, NBB-2026-0228, NBB-2026-0220, NBB-2026-0218, NBB-2026-0217, NBB-2026-0216, NBB-2026-0212
May 2026
KV-2026-277
Kakao · Stored XSS · Medium
2024 – 2025
Dreamhack · goorm
Patchday
Dreamhack: XS-Search #866 · DoS #869, #804, #787, #786. goorm: IDOR #691 · Business logic #705.
Achievements
2025
Midnight Flag CTF 결승 · 1위
hypersonic
2025.11
ROKA CTF · 2위
대한민국 육군 · 청소년부
2025.11
LG U+ 서큐리티 해커톤 · 2위
LG U+ · 일반부
2025.09
CCE(사이버 공격 방어 대회) · 1위
국가정보원 · 청소년부
2025.08
Hackquest · 3위
KAIST
2025.05
사이버보안 장학생
(재)미래기술연구소
2024.11
ROKA CTF · 2위
대한민국 육군 · 청소년부
2024.11
BISC CTF · 4위
BoB 총동문회