NiNi's Den

About

About Me

TingYu Chen, aka terrynini38514, major in Cyber Security, member of Balsn, love CTF and everything about computer science.

Interests

  • Reverse Engineering
  • Binary Exploitation
  • Fuzzer Development
  • Red Team
  • Cryptography

Honors

Contest

Pwn2Own Toronto 2022, Master of Pwn Dec 9th, 2022

International CTF

Play in Balsn

DEFCON 28 CTF Finals, 3rd place (HITCON⚔Balsn) Online, Aug. 2020
DEFCON 27 CTF Finals, 2nd place (HITCON⚔BFKinesiS) Las Vegas, USA, Aug. 2019
DEFCON 26 CTF Finals, 12th place (BFS) Las Vegas, USA, Aug. 2018

Solo

Flare-on 8 Finisher #96 (#1 in Taiwan) Online, 2021-11-29 11:21
Flare-on 7 Finisher #177 (#2 in Taiwan) Online, 2020-10-21 10:16
Flare-on 6 Finisher #290 (#8 in Taiwan) Online, 2019-09-27 06:05
Reversing.kr Finisher #26 Online, 2018-08-04 19:58

Play in DoubleSigma

DefCamp CTF Finals, 5th place Bucharest, Romania, Nov. 2018
HITCON CTF Finals, 12th place Taipei, Taiwan, Nov. 2017

Domestic CTF

AEGIS Finals, 6th place (Virtual Fox) Nangang, Taiwan, Nov. 2020
金盾獎 Finals, 嶄露頭角獎 (ankleboy&banana) Taipei, Taiwan, Nov. 2020
AEGIS Finals, 3rd place (DoubleSigma) Taipei, Taiwan, Sep. 2019
金盾獎 Finals, 1st place (curl kaibro.tw |sh) Taipei, Taiwan, Nov. 2019
AIS3 EOF Finals, 1st place (DoubeSigma) Taipei, Taiwan, Jan. 2019
金盾獎 Finals, 鋒芒畢露獎 (DoubleSigma) Taipei, Taiwan, Oct. 2018
AEGIS Finals, 6th place Taipei, Taiwan, Oct. 2018
AIS3 Finals, 3rd place Taipei, Taiwan, Oct. 2018
AIS3 EOF Finals, 1st place (DoubleSigma_Ethereum) Taipei, Taiwan, Feb. 2018
NTC/NCTU/NTUST 程式安全 Final CTF, 1st place Online, Dec. 2017
金盾獎 Finals, 潛力無窮獎 (DoubleSigma) Taipei, Taiwan, Dec. 2017
金盾獎 Finalist (AHQ) Taipei, Taiwan, Nov. 2016

Portfolio

Vulnerability Reports

CVE-2023-32154 - RCE, pre-auth WAN RCE of MikroTik RouterOS
CVE-2022-46308 - BAC, able to update/remove all users
CVE-2022-46307 - BAC, able to control door remotely
CVE-2021-3648 (duplicated QQ) - nm-new, CWE-835 Infinite Loop
ZD-2021-00727
ZD-2020-00737
ZD-2020-00342

Contributions

radareorg/radare2 - Fix zignature mask from `zj` is differ from `z` (#17180)
AFLplusplus/AFLplusplus - remove redundant unsetenv (#947)

Certifications

Offensive Security Certified Professional (OSCP) Feb. 2021 - PRESENT
JLPT N3 Mar. 2021 - PRESENT

Presentation

AIS3 2019: Firmware security analysis Jul. 30, 2019
ISIP Summer Camp: 逆向工程 Jul. 22, 2020
ISIP Summer Camp: 逆向工程 Jul. 16-17, 2019
ISIP Winter Camp: PWN-別pwn那裡 Dec. 16, 2018
ISIP Winter Camp: 逆向工程-逆逆!忍術!沒有F5之術 Dec. 15, 2018
臺灣好厲駭培訓課程: Attack&Defence 經驗分享 Aug. 25, 2018
ISIP Summer Camp: 逆向工程/PWN Jul. 19, 2018
ISIP Summer Camp: 逆向工程 Jul. 18, 2018
ISIP Winter Camp: 從程式 debug+reverse 到 PWN 搶旗大賽 Jan. 31, 2018

Educations

M. S., Graduate Degree Program of Cyber Security, NYCU Sep. 2019 - Jul. 2021
Bachelor of Science, in Computer Science, NCU Sep. 2015 - Jun. 2019
National Wu-Ling Senior High School Aug. 2012 - Jun. 2015

Experience

Security Researcher, DEVCORE May. 2022 - PRESENT
Information Technology Intern, Mediatek Jul. 2019 - Aug. 2019
Part-time MIS, Health Center, NCU Jan. 2016 - Jun. 2019
Part-time MIS, Network Systems Division, Computer Center, NCU Jan. 2016 - Jun. 2017