About Me
Software engineer current working on security development, strong interested in:
- low-level stuffs
- exploit
- program analysis
- embedded device
- custom Android ROM
Highlights
- 2022.10, USTC Hackergame 2022 rank 77/2747, write up: https://lyq.blogd.club/2022/10/28/hackergame-2022-wp/
- 2022.02, Report two command injection vulnerabilities of JDCloud wireless router to the JD Security Response Center.
- 2022.01, Report a RCE vulnerablity(
HIGH RISK!!) of JDCloud wireless router to the JD Security Response Center. (nickname: orioos, rank 6) - 2021.12, Report two vulnerabilities to the Alibaba Security Response Center. (nickname: orioos, rank 9)
- 2021.08, Report a vulnerability to the Alibaba Security Response Center. (nickname: orioos, rank 28)
Current Skills
- C, C++ with STL, Objective-C
- Scripting language: bash、Python
- Assembler lanaguage: x86
- Reserve engineering
- Multi-threaded and network programming
- Development tools: ida，Burp Suite，Git，GCC，Clang，GDB，XCode，Visual Studio，Visual Studio Code，Docker，qemu
- Operation system: Professional user of Linux, macOS and Windows
Github
Work Experiences
- 2021.05 - Now: Sangfor Technologies, Senior Software Engineer, NanJing.
- 2020.07 - 2020.09: Trend Micro, RD Intern, NanJing.