Meritz Capital
Cybersecurity Team, Associate
SECURITY RESEARCHERSeoul, KR
Hello, I’m
Donghyeon
Jeong.
Offensive Security & Red Teaming
I am a security researcher specializing in offensive security and red teaming. I focus on vulnerability research, patch contributions, vulnerability analysis tool development, and bug bounties. Furthermore, I am actively researching technologies related to LLM-based vulnerability assessment and automated agents.
Experience
Ground Operations Command
Cyber Operations Specialist
Internal Network Web Service Security Vulnerability Assessment
- [REDACTED]
Development and Deployment of Automated Real-World Phishing Simulation Training Systems
- Development of an Automated Phishing Simulation System Utilizing the Open-Source Gophish (Python-Based) and Execution of Phishing Training Based on Real-World Scenarios
Cybersecurity Capacity Building Training
- Development of Training Materials and Conduct of Cybersecurity Training for Members on CTF Problem-Solving Approaches and Resolution Processes in Web Hacking, System Hacking, and Reverse Engineering Using CTF Education Platforms
Security Vulnerability Assessment of IoT Embedded Devices
- Establishment of Security Evaluation Criteria and Vulnerability Analysis for Network Printers and IP Camera Devices, Identifying High-Risk Vulnerabilities Such as DoS and Remote Function Control
Malware Infection Sample Reverse Engineering and Identification of Indicators of Compromise
- Reverse Engineering and Identification of Indicators of Compromise for Major External Inbound Malware Samples, Including Miners, Cryptojacking, Worms, Keyloggers, and Adware
AUTOCRYPT
Security Researcher, Redteam
Vehicle ECU Vulnerability Analysis and Penetration Testing
- Conducted black-box penetration testing on core vehicle controllers of domestic and global automotive manufacturers—such as infotainment systems, clusters, and autonomous driving controllers—identifying multiple high-risk vulnerabilities including DoS and integrity violations.
Development of Automated Automotive Security Vulnerability Assessment Tools
- Design of Python-Based Automated Test Case Scenarios for Automotive Security Vulnerability Assessment, Code Development, and Functional Validation
Research on Latest Automotive Security Vulnerabilities
- DEFCON 31 Research Presentation on Practical USB Fuzzing in Real Vehicles and the Process of Discovering Vulnerabilities in Global Automotive Brands
AUTOCRYPT
Security Researcher, Redteam(Internship)
Automotive Attack and Security Technology Research and Development
- Identification of Core Security Vulnerabilities in Automotive Grade Linux (AGL) In-Vehicle Infotainment Systems, Design of Attack Scenarios, Exploit Development, and Development of a Python-Based Attack Detection System
Vulnerability Disclosure
6 research results
RESPONSIBLE DISCLOSUREMay 2026
Out-of-bounds (OOB) write vulnerability in the dnsmasq
dnsmasq <= 2.9.2rel2
RESPONSIBLE DISCLOSUREMay 2026
Out-of-bounds (OOB) write vulnerability in the dnsmasq
dnsmasq <= 2.9.2rel2
CVE-2023-39076Aug 2023
Denial of Service in Chevrolet Automotive
Vehicle Infortainment System Version: 2021.03.26(build)
CVE-2023-39075Aug 2023
Denial of Service in Renault Automotive
Vehicle Infortainment System Version: 283C35202R/283C35519R
CVE-2023-23082Feb 2023
Heap buffer overflow in xbmc
Software Version: 19.5
RESPONSIBLE DISCLOSUREDec 2022
Denial of Service in BMW Automotive
BMW MGU
Talks
DEFCON 31, Car Hacking VillageAug 2023
How to USB fuzzing in vehicles to discover the real world vulnerability
WatchCTF Awards
Vicone x Blockharbor Cybersecurity Automotive CTF Finals
TeamJJJJJ
DEFCON 32 Car Hacking Village CTF Participant
TeamAUTOCRYPT
Blockharbor Cybersecurity Automotive CTF Participant
Individualdhjisgod
DEFCON 31 Car Hacking Village CTF Participant
TeamAUTOCRYPT
DEFCON 30 Car Hacking Village CTF Participant
TeamAUTOCRYPT
Cybersecurity Challenge - Automotive Hacking & Defense Participant
TeamAUTOCRYPT
The 2nd KOSPO Web Service Security Competition Participant
Team고점에사람있어요
The 3rd Y-CTF Vulnerability Analaysis & Penetration Testing Competition
Team김봉혁의 빠루교실
Education
Best of the Best 9th Information Security Training Program
Completed Security Development Track
Yeungnam University College
Completed Cybersecurity department