- Name : GangMin Kim
- Nick : Hc0wl
- 2026 Google kernelCTF Winner (ID: exp440)
- 2025 Vulnability Research Club (Project Team: VMBreakers)
- 2025 Pwn2Own Berlin VirtualBox Winner – BoB Project PM (Project Team: Prison Break)
- 2024 KITRI BOB 13th 취약점 분석 트랙 (Top 30)
- 2024 Synology SRM 취약점 분석 (Project Team: Only Hack in Cave)
Synology - Only Hack in Cave
- CVE-2024-53279 : Cross-site Scripting
- CVE-2024-53280 : Cross-site Scripting
- CVE-2024-53281 : Cross-site Scripting
- CVE-2024-53282 : Cross-site Scripting
- CVE-2024-53283 : Cross-site Scripting
- CVE-2024-53284 : Cross-site Scripting
- CVE-2024-53285 : Cross-site Scripting
- CVE-2024-53286 : Command Injection
- CVE-2024-53287 : Cross-site Scripting
- CVE-2024-53288 : Cross-site Scripting
- CVE-2025-10466 : Cross-site Scripting
VirtualBox – Prison Break
- CVE-2025-53024 : Remote Code Execution
- CVE-2025-61759 : Uninitialized Memory
VirtualBox – VMBreakers
- CVE-2025-62588 : Remote Code Execution
- CVE-2025-62589 : Remote Code Execution
- CVE-2025-62590 : Remote Code Execution
- CVE-2025-62591 : Out-Of-Bounds read
- CVE-2025-62641 : Remote Code Execution
- CVE-2026-21955 : Remote Code Execution
- CVE-2026-21956 : Remote Code Execution
- CVE-2026-21984 : Remote Code Execution
Linux Kernel
- CVE-2025-71130 : NULL Pointer Dereference
- CVE-2026-23074 : Use After Free
- CVE-2026-23204 : Out-of-bounds Read
- Email : km.kim1503@gmail.com
- Twitters(x.com): @Hc0wl
- LinkedIn: 김강민