Donghyeon Jeong
Cybersecurity Researcher
Seoul, KR
About
Security researcher focused on offensive security and red teaming. I research security vulnerabilities and contribute to their remediation, and I'm keenly interested in building tools for vulnerability analysis as well as in bug bounty work. I'm also actively researching AI technologies to enable AI-driven vulnerability assessment.
Experience
ROKA - GOC/GCC
Jan 2025 – July 2026Cyber Operations Solider · Yongin, KR
- Conducted security vulnerability assessments of web services within the internal network
- Built and deployed a simulated phishing email training system environment
- Responsible for delivering hands-on CTF-based cybersecurity training to enhance the Republic of Korea Army's cyber defense capabilities
- Conducted security vulnerability assessments of IoT and embedded devices, including IP cameras and network printers
- Conducted reverse engineering and analysis of malware samples to identify Indicators of Compromise (IOC)
AUTOCRYPT
June 2021 – Dec 2024Security Researcher, Redteam · Seoul, KR
Vehicle ECU Vulnerability Analysis & Penetration testing
- Conducted security vulnerability assessments and penetration testing of Jaguar Land Rover's in-vehicle infotainment (IVI) systems
- Conducted security vulnerability assessments and penetration testing of Volkswagen's in-vehicle infotainment (IVI) systems
- Conducted security vulnerability assessments and penetration testing of LG Electronics (LGE) VCM and TCUA automotive telematics control units
- Conducted security vulnerability assessments and penetration testing of Mercedes-Benz automotive instrument cluster control units
- Evaluated diagnostic communication security requirements and vulnerabilities of Hyundai Mobis automotive headlamp control units
- Conducted penetration testing of HL Klemove's ADAS DRV2 autonomous driving controller and supported European automotive cybersecurity certification audits
- Conducted security vulnerability assessments and penetration testing of GIT's automotive diagnostic software
Developed an automated security vulnerability assessment system for automotive systems
- Developed and validated automated security vulnerability assessment test cases for key automotive attack surfaces, including fuzzing and security requirements verification
Security Vulnerability Research and Presentations
- Conducted research on performing USB fuzzing against production vehicles; presented at the DEFCON 31 Car Hacking Village
- Participated in the 2021 Cybersecurity Challenge, Automotive Hacking & Defense category (vulnerability research and exploit development; assisted in implementing an IDS intrusion detection system)
Vulnerability Disclosure
Out-of-bounds (OOB) write vulnerability in the dnsmasq
May 2026dnsmasq <= 2.9.2rel2
Out-of-bounds (OOB) write vulnerability in the dnsmasq
May 2026dnsmasq <= 2.9.2rel2
Denial of Service in Chevrolet Vehicle Infortainment System
Aug 2023Vehicle Infortainment System Version: 2021.03.26(build)
Denial of Service in Renault Vehicle Infortainment System
Aug 2023Vehicle Infortainment System Version: 283C35202R/283C35519R
Heap buffer overflow in xbmc
Feb 2023Software Version: 19.5
Talks
DEFCON 31, Car Hacking Village
▶ WatchCTF Awards
Vicone x Blockharbor Cybersecurity Automotive CTF Finals
Oct 20243rd placeTeamJJJJJ
DEFCON 32 Car Hacking Village CTF Participant
Aug 20244rd placeTeamAUTOCRYPT
Blockharbor Cybersecurity Automotive CTF Participant
Sep ~ Oct 20239rd placeIndividualdhjisgod
DEFCON 31 Car Hacking Village CTF Participant
Aug 20235rd placeTeamAUTOCRYPT
DEFCON 30 Car Hacking Village CTF Participant
Aug 20225rd placeTeamAUTOCRYPT
Cybersecurity Challenge - Automotive Hacking & Defense Participant
Jun ~ Nov 20211st placeTeamAUTOCRYPT
The 2nd KOSPO Web Service Security Competition Participant
Sep, 2021Honorable MentionTeam고점에사람있어요
The 3rd Y-CTF Vulnerability Analaysis & Penetration Testing Competition
Nov 20181st placeTeam김봉혁의 빠루교실
Education
Completed the 9th Best of the Best (BoB) Cybersecurity Training Program at KITRI
2020.07 ~ 2021.03Security Development Track
Yeungnam University College
2018 - 2022Cybersecurity department
Skills
Security Skils
- Red Teaming
- Penetration Testing
- Vulnerability Research
- Web Hacking
- System Hacking(IoT/Embedded)
- Reverse Engineering
- Malware Analysis & Detection
Languages & Available Tools
- Python
- C/C++
- gdb
- Burp Suite
- x64dbg
- IDA/Ghidra
- dnSpy
- Fronted-Web
- Backend-Web
- AWS
- Docker
- GIT
- AI/MCP