Hacking Lab

We are building systems for security and studying security for systems!

If you are interested in hacking with us, feel free to fill this form!

News

[09/16/2026] QueryHouse wins the Best Paper Award Runner-up at ESORICS ‘26!
[09/09/2026] PatchIsland is accepted to ACSAC ‘26!
[08/29/2026] MTEscape is accepted to CCS ‘26!
[08/09/2026] Team 0x4b52 wins 2nd place at DEF CON CTF 34 Finals!
[07/24/2026] Four members of our lab are named Microsoft MSRC 2026 Most Valuable Researchers!
[07/10/2026] Prism is accepted to RAID ‘26!
[06/12/2026] QueryHouse is accepted to ESORICS ‘26!
[05/30/2026] “Should Opt-Out Depend on Where You Live? Comparing Mobile Privacy Choices Across Jurisdictions” accepted to HotPETS ‘26
[05/22/2026] CTFusion is accepted to the Agents in the Wild workshop at ICML ‘26!
[12/05/2025] RTCon is accepted to NDSS ‘26
[09/03/2025] OTABase is accepted to ACSAC ‘25!
[08/21/2025] Two papers got accepted to CCS ‘25
[08/09/2025] Team Atlanta wins AIxCC!
[05/30/2025] LLFuzz is accepted to USENIX Security ‘25!
[04/28/2025] FirmState is accepted to WiSec ‘25!
[03/31/2025] CPMM-Exploiter is accepted to ISSTA ‘25!
[12/30/2024] Security analysis of mandatory security software in South Korea is accepted to USENIX Security ‘25!
[12/19/2024] FIBLE is accepted to OOPSLA ‘25!
[09/10/2024] RGFuzz is accepted to IEEE S&P ‘25!
[08/11/2024] Team Atlanta proceeds to the AIxCC final!
[03/22/2024] Seunghyun won Pwn2Own 2024 by exploiting Google Chrome and Microsoft Edge ($145K)!
[01/25/2024] $10K Bug Bounty from Google v8CTF (V8/CVE-2023-6702).
[10/25/2023] We got 2nd place in cyber security challenge 2023!
[10/04/2023] $67K Bug Bounty from Google kernelCTF (Linux/CVE-2023-3390).
[07/17/2023] QSYM got a Frontiers of Science Award from ICSB!
[06/06/2023] BaseComp is accepted to Usenix Security'23!
[01/19/2023] $7K Bug Bounty from Google (V8/CVE-2023-0696).
[11/11/2022] QueryX is accepted to IEEE S&P'23!
[11/04/2022] ScaleTrust is accepted to ToN'22!
[06/11/2022] FuzzCoin is accepted to RAID'22!
[09/04/2021] DoLTEst is conditionally accepted to Usenix Security'22!
[07/21/2021] HardsHeap is conditionally accepted to CCS'21!

Recent Publications

Wonyoung Kim, Seunggi Min, Minjae Gwon, Haein Lee, Dowoo Baik, Hyeon Heo, Minjae Lee, Min Woo Baek, Yonghwi Jin, Younggi Park, Yunjae Choi, Taesoo Kim, Sangdon Park, Insu Yun (2026). PatchIsland: Orchestration of LLM Agents for Continuous Vulnerability Repair (to appear). Proceedings of the 42nd Annual Computer Security Applications Conference (ACSAC).

Kyeongmin Kim, Insu Yun (2026). MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear). Proceedings of the 33rd ACM Conference on Computer and Communications Security (CCS).

Yunjae Choi, Min Woo Baek, Insu Yun (2026). Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair (to appear). Proceedings of the 2026 International Symposium on Research in Attacks, Intrusions and Defenses (RAID).

Seoyeon Oh, Juhyun Song, Jaemin Park, Kwanghee Lee, Minae Hyeon, Minji Kim, Sehyuk Ka, Gwangwun Jung, Brian Pak, Insu Yun (2026). QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation. Proceedings of the 31st European Symposium on Research in Computer Security (ESORICS). Best Paper Award Runner-up.

Slides Paper

Dongjun Lee, Ga-eun Bae, Insu Yun (2026). CTFusion: A CTF-based Benchmark for LLM Agent Evaluation. Proceedings of the Second Workshop on Agents in the Wild: Safety, Security, and Beyond (ICML AIWILD).

Paper

See all publications

Contact

insuyun@kaist.ac.kr
Room 819, N1, Korea Advanced Institute of Science and Technology (KAIST), Daejeon, South Korea
kaist-hacking