2026:
Keynote: A Year of Hacking with LLMs: A Practitioner's Reflections — Offbyone
Breaking Android's Last Recovery Boundary: From Malicious APK Resources to Zero-Click MMS PDoS — Blackhat Europe
Breaking NTFS at Scale: From an Unmapped Attack Surface to SYSTEM— OffensiveCon Tokyo
Breaking the Old Playbook: LLM-Augmented Offense Security Research — Security Analyst Summit(SAS)
2025:
Token Injection: Crashing LLM Inference With Special Tokens — Blackhat Europe
Diving into Windows HTTP: Unveiling Hidden Preauth Vulnerabilities in Windows HTTP Services — Blackhat USA
One Bug to Rule Them All: Stably Exploiting a Preauth RCE Vulnerability on Windows Server 2025 — Blackhat Aisa
Token Injection: How to attack LLM infrastructre with special tokens — PHTalks Sao Paulo
Heisting The Office: Revisiting Microsoft Office's File Parser Security — Security Analyst Summit(SAS)
2024:
Diving into Spooler: Discovering LPE and RCE Vulnerabilities in Windows Printer Driver — Blackhat Europe
Enhancing Automatic Vulnerability Discovery for Windows RPC/COM in New Way — Blackhat Europe
The Mutant and Monitor in Space: Automated Discovery of Windows RPC/COM Vulnerabilitie — Security Analyst Summit(SAS)
Escaping the Sandbox (Chrome and Adobe Pdf Reader) on Windows — Zer0con
2023:
Exploiting preauth RCE and Sandbox escape vulnerabilities in EXSi — Typhooncon
OLE object are still dangerous today — Exploiting Microsoft Office — POC
Detecting Union Type Confusion in Component Object Model — Usenix Security
Attacks on vSphere — KCON
Django-Simple-Captcha — JumpServer Preauth RCE — Mosec BaijiuCon
Trends of Cybersecurity: APT vs GPT — Campus Talk
2022:
COMRACE: Detecting Data Race Vulnerabilities in COM Objects — Usenix Security
Exploit Exchange in New Ways — Zer0con
Exploiting Errors in Windows Error Reporting Service in 2022 — POC
2021:
Diving in to Spooler: Discovering LPE and RCE Vulnerabilities in Windows Printer — Blackhat USA
Exploiting Windows COM/WinRT Services — Blackhat USA
Don't Dare to Exploit - An Attack Surface Tour of SharePoint Server — DEFCON
Exploiting Microsoft Sharepoint — Zer0con
Security Analysis on dBFT Protocol of NEO — Financial Cryptography
2019:
All roads lead to Rome Many ways to double spend your cryptocurrency — Zer0con
Security Risks in Zero Knowledge Proof Cryptocurrencies — PacSec
Danger of using fully homomorphic encryption, a look at microsoft seal — CanSecWest Opcde
Many way to double spend your cryptocurrency — NEO Devcon
使用全同态加密构造数据安全方案的安全风险 — GIAC 全球互联网架构大会
零知识证明在区块链应用中的安全和隐私问题 — CCF 区块链开发者大会
2018:
A novel journey of blockchain security — Real World CTF
Security Risks in Blockchains — P.O.D New BlockTrend
Some Mining Related Attacks — Monero village, Defcon26
EOS Node Remote Code Execution Vulnerability — EOS devcon
ALL YOUR NODES ARE BELONG TO US:The Story of an EOS Chain RCE Bug — HITCON
Some Security Risks for DLT — ITU-SG17
一次新奇的区块链漏洞之旅 — 360 Openday
几种挖矿攻击及相关缓解措施 — InfoQ
BCH重启Op-code背后的安全故事 — BCH meetup