About

Background

I’m a security researcher based in China, working across both offense and defense: web application vulnerability research and CVE-credited disclosure on the offensive side, and blue-team defensive engineering — including participation in China’s national 护网 (HuWang) cybersecurity exercises — on the defensive side. My background includes vulnerability disclosure work through vendor Security Response Centers (Kuaishou SRC, JD SRC), CVE-credited findings in open-source projects, and tool development for exploit verification, malware analysis, and CTF workflows. I work as a Security Development Engineer at Chaitin Tech (长亭科技).

Research Focus

• Web application security (authorization flaws, business logic vulnerabilities, SSRF)
• Deserialization and RCE chain research
• Blue-team defense: malware analysis, sandboxing, EDR/behavioral detection, YARA/Suricata rule development
• Vulnerability disclosure coordination (CNA/vendor SRC workflows)
• Security tooling for exploit verification and CTF operations

Experience

• [Year–Year] — Security Development Engineer — Chaitin Tech (长亭科技), China — blue-team defense engineering, including participation in 护网 (HuWang) national security exercises

Education

• [Degree], [Field of study] — [University name], China, [Year–Year]

Affiliations

• TimelineSec (member, team 2) — bug bounty / CTF team

Nothing here yet.