0 | Hacking Labhttps://hacking.kaist.ac.kr/publication-type/0/0Wowchemy (https://wowchemy.com)en-usThu, 01 Oct 2026 00:00:00 +0000https://hacking.kaist.ac.kr/images/icon_hu0b7a4cb9992c9ac0e91bd28ffd38dd00_9727_512x512_fill_lanczos_center_2.png0https://hacking.kaist.ac.kr/publication-type/0/Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair (to appear)https://hacking.kaist.ac.kr/publication/choi-prism/Thu, 01 Oct 2026 00:00:00 +0000https://hacking.kaist.ac.kr/publication/choi-prism/QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation (to appear)https://hacking.kaist.ac.kr/publication/oh-queryhouse/Tue, 01 Sep 2026 00:00:00 +0000https://hacking.kaist.ac.kr/publication/oh-queryhouse/CTFusion: A CTF-based Benchmark for LLM Agent Evaluationhttps://hacking.kaist.ac.kr/publication/lee-ctfusion/Wed, 01 Jul 2026 00:00:00 +0000https://hacking.kaist.ac.kr/publication/lee-ctfusion/Function-Level Fuzzing for RTOS Kernels with RTConhttps://hacking.kaist.ac.kr/publication/lee-rtcontutorial/Fri, 01 May 2026 00:00:00 +0000https://hacking.kaist.ac.kr/publication/lee-rtcontutorial/RTCon: Context-Adaptive Function-Level Fuzzing for RTOS Kernelshttps://hacking.kaist.ac.kr/publication/lee-rtcon/Sun, 01 Feb 2026 00:00:00 +0000https://hacking.kaist.ac.kr/publication/lee-rtcon/OTABase: Enhancing Over-the-Air Testing to Detect Memory Crashes in Cellular Basebandshttps://hacking.kaist.ac.kr/publication/park-otabase/Mon, 01 Dec 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/park-otabase/Bridging the Gap between Real-World and Formal Binary Lifting through Filtered-Simulationhttps://hacking.kaist.ac.kr/publication/park-fible/Wed, 01 Oct 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/park-fible/CROSS-X: Generalized and Stable Cross-Cache Attack on the Linux Kernelhttps://hacking.kaist.ac.kr/publication/kim-crossx/Wed, 01 Oct 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/kim-crossx/Windows plays Jenga: Uncovering Design Weaknesses in Windows File System Securityhttps://hacking.kaist.ac.kr/publication/kim-jenga/Wed, 01 Oct 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/kim-jenga/ATLANTIS: AI-driven Threat Localization, Analysis, and Triage Intelligence Systemhttps://hacking.kaist.ac.kr/publication/kim-atlantis/Mon, 01 Sep 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/kim-atlantis/LLFuzz: An Over-the-Air Dynamic Testing Framework for Cellular Baseband Lower Layershttps://hacking.kaist.ac.kr/publication/hoang-llfuzz/Fri, 01 Aug 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/hoang-llfuzz/Too Much of a Good Thing: (In-)Security of Mandatory Security Software for Financial Services in South Koreahttps://hacking.kaist.ac.kr/publication/yun-ksa/Fri, 01 Aug 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/yun-ksa/Automated Attack Synthesis for Constant Product Market Makershttps://hacking.kaist.ac.kr/publication/han-cpmm/Sun, 01 Jun 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/han-cpmm/FirmState: Bringing Cellular Protocol States to Shannon Baseband Emulationhttps://hacking.kaist.ac.kr/publication/jeong-firmstate/Sun, 01 Jun 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/jeong-firmstate/RGFuzz: Rule-Guided Fuzzer for WebAssembly Runtimeshttps://hacking.kaist.ac.kr/publication/park-rgfuzz/Thu, 01 May 2025 00:00:00 +0000https://hacking.kaist.ac.kr/publication/park-rgfuzz/From the Vulnerability to the Victory: A Chrome Renderer 1-Day Exploit’s Journey to v8CTF Gloryhttps://hacking.kaist.ac.kr/publication/lee-v-8-ctf/Wed, 01 May 2024 00:00:00 +0000https://hacking.kaist.ac.kr/publication/lee-v-8-ctf/One shot, Triple kill: Pwning all three Google kernelCTF instances with a single 1-day Linux vulnerabilityhttps://hacking.kaist.ac.kr/publication/kim-kernel-ctf/Wed, 01 Nov 2023 00:00:00 +0000https://hacking.kaist.ac.kr/publication/kim-kernel-ctf/BaseComp: A Comparative Analysis for Integrity Protection in Cellular Baseband Softwarehttps://hacking.kaist.ac.kr/publication/kim-basecomp/Tue, 01 Aug 2023 00:00:00 +0000https://hacking.kaist.ac.kr/publication/kim-basecomp/QueryX: Symbolic Query on Decompiled Code for Finding Bugs in COTS Binarieshttps://hacking.kaist.ac.kr/publication/han-queryx/Mon, 01 May 2023 00:00:00 +0000https://hacking.kaist.ac.kr/publication/han-queryx/Fuzzing@Home: Distributed Fuzzing on Untrusted Heterogeneous Clientshttps://hacking.kaist.ac.kr/publication/jang-fuzzcoin/Sat, 01 Oct 2022 00:00:00 +0000https://hacking.kaist.ac.kr/publication/jang-fuzzcoin/DoLTEst: In-depth Downlink Negative Testing Framework for LTE Deviceshttps://hacking.kaist.ac.kr/publication/park-doltest/Mon, 01 Aug 2022 00:00:00 +0000https://hacking.kaist.ac.kr/publication/park-doltest/HardsHeap: A Universal and Extensible Framework for Evaluating Secure Allocatorshttps://hacking.kaist.ac.kr/publication/yun-hardsheap/Mon, 01 Nov 2021 00:00:00 +0000https://hacking.kaist.ac.kr/publication/yun-hardsheap/Preventing Use-After-Free Attacks with Fast Forward Allocationhttps://hacking.kaist.ac.kr/publication/wickman-ffmalloc/Sun, 01 Aug 2021 00:00:00 +0000https://hacking.kaist.ac.kr/publication/wickman-ffmalloc/Analyzing Qualcomm Hexagon Emulators via Differential Testinghttps://hacking.kaist.ac.kr/publication/jung-hexagon/Tue, 01 Jun 2021 00:00:00 +0000https://hacking.kaist.ac.kr/publication/jung-hexagon/BaseSpec: Comparative Analysis of Baseband Software and Cellular Specifications for L3 Protocolshttps://hacking.kaist.ac.kr/publication/kim-basespec/Mon, 01 Feb 2021 00:00:00 +0000https://hacking.kaist.ac.kr/publication/kim-basespec/Automatic Techniques to Systematically Discover New Heap Exploitation Primitiveshttps://hacking.kaist.ac.kr/publication/yun-archeap/Sat, 01 Aug 2020 00:00:00 +0000https://hacking.kaist.ac.kr/publication/yun-archeap/Compromising the macOS kernel through Safari by chaining six vulnerabilitieshttps://hacking.kaist.ac.kr/publication/jin-pwn-2-own-2020-safari/Sat, 01 Aug 2020 00:00:00 +0000https://hacking.kaist.ac.kr/publication/jin-pwn-2-own-2020-safari/Fuzzing JavaScript Engines with Aspect-preserving Mutationhttps://hacking.kaist.ac.kr/publication/park-die/Fri, 01 May 2020 00:00:00 +0000https://hacking.kaist.ac.kr/publication/park-die/REPT: Reverse Debugging of Failures in Deployed Softwarehttps://hacking.kaist.ac.kr/publication/cui-rept/Mon, 01 Oct 2018 00:00:00 +0000https://hacking.kaist.ac.kr/publication/cui-rept/QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzinghttps://hacking.kaist.ac.kr/publication/yun-qsym/Wed, 01 Aug 2018 00:00:00 +0000https://hacking.kaist.ac.kr/publication/yun-qsym/AVPASS: Leaking and Bypassing Antivirus Detection Model Automaticallyhttps://hacking.kaist.ac.kr/publication/jung-avpass/Sat, 01 Jul 2017 00:00:00 +0000https://hacking.kaist.ac.kr/publication/jung-avpass/CAB-Fuzz: Practical Concolic Testing Techniques for COTS Operating Systemshttps://hacking.kaist.ac.kr/publication/kim-cab-fuzz/Sat, 01 Jul 2017 00:00:00 +0000https://hacking.kaist.ac.kr/publication/kim-cab-fuzz/APISan: Sanitizing API Usages through Semantic Cross-checkinghttps://hacking.kaist.ac.kr/publication/yun-apisan/Mon, 01 Aug 2016 00:00:00 +0000https://hacking.kaist.ac.kr/publication/yun-apisan/HDFI: Hardware-Assisted Data-Fow Isolationhttps://hacking.kaist.ac.kr/publication/song-hdfi/Sun, 01 May 2016 00:00:00 +0000https://hacking.kaist.ac.kr/publication/song-hdfi/Analyzing Security of Korean USIM-based PKI Certificate Servicehttps://hacking.kaist.ac.kr/publication/park-pki/Fri, 01 Aug 2014 00:00:00 +0000https://hacking.kaist.ac.kr/publication/park-pki/Kargus: A Highly-scalable Software-based Intrusion Detection Systemhttps://hacking.kaist.ac.kr/publication/jamshed-kargus/Mon, 01 Oct 2012 00:00:00 +0000https://hacking.kaist.ac.kr/publication/jamshed-kargus/