Primary Mark
Use the symbol alone in compact surfaces such as favicons, footer entries, and small UI access points.
Sumin Joo
Finding vulnerabilities, building safer systems with AI.
Security research from an attacker-centric perspective. Focused on fuzzing and binary analysis, building a safer world together with AI.
xmin@portfolio:~
Welcome to xmin's portfolio terminal.
Type help for available commands. Press Ctrl+L to clear.
~/portfolio $
Desktop
try: whoami, ls, cat zdi-25-1055, nmap
About Me
Security research from an attacker-centric perspective. Focused on fuzzing and binary analysis, building a safer world together with AI.
Baekseok Univ. Info. Security 3.6/4.5
| NGMS 17th Lab Leader | HUB 16th President | WHS 3rd Cohort
0-Day
ZDI-25-1055
10
Papers
10
Awards
15
Projects
Skills
Security
Fuzzing-based 0-day research, vulnerability analysis, and security solution integration
Fuzzing0-DayPenteraSentinelOne
AI
Deep Learning Ensemble Project Experience and RAG Chatbot Company Internship Experience
Deep LearningRAGLLMKcBERT
Dev
Python/TypeScript backend + React front full stack experience, Vibe coding using AI
PythonTypeScriptReactFlaskNode.js
Experience
Career
2026.1 - 2026.2 
Veluga Corp. Intern
Veluga Corp
RAG-based AI chatbot enhancement, product QA, manual renewal
2025.10 
Microsoft 0-Day Vulnerability Disclosure (ZDI-25-1055)
Critical ZDI (Zero Day Initiative)
Analyzed and reported a NULL pointer dereference DoS in Windows 10 mfmp4srcsnk.dll during MP4/MOV metadata handling via ZDI.
Vendor Microsoft Type Null Deref Impact DoS ID ZDI-CAN-27835
2025.7 - 2026.7 
NGMS Next-Gen Convergence Security Lab Leader
NGMS Lab
Posting a KCI paper, managing security projects, researching Pentera/SentinelOne security solutions, etc
2025.6 - 2025.7 
Ministry of Employment Work Experience
Ministry of Employment and Labor, Hissemico Corp.
Developed an intranet-based secure messaging system using Flask and React
2025.3 - 2025.9 
WhiteHat School 3rd Cohort
KITRI
2025.1 - 2025.12 
HUB Information Security Club 16th President
HUB
Led the only information security club on campus — managed members, projects, and study sessions
Activities
2026.6 
Google, BKL
2026.5 
Veluga
2025.12 
Escare Pentera Seminar Escare
2024.11 
NCS Education Content Monitoring NCS
Awards
2025.12
Smart IT Competition Bronze Award (2025)
2025.12
JAVA Programming Competition Bronze Award
2025.11
Ministry of Employment Project Excellence Award
2025.11
Local Branding Ideathon Silver Award
2025.11
Anseo Policy Challenge Encouragement Award
2024.12
Smart IT Competition Bronze Award (2024)
2024.10
Startup Idea Competition Grand Prize
2023.09
Military: Outstanding Instructor x2, K15 Manual Commendation
2023.08
2023.08
Certifications
2025.09
WhiteHat School 3th
2024.08
Facilitator Training Course
2024.10
Military Character Development Supporters
Papers
KCI 사물인터넷융복합논문지
International ICIoTC
01
Proposal of an algorithm to prevent drone GPS spoofing attacks using hash tree
02
Proposed Blockchain-Based SSL/TLS API Security Algorithm to Respond to APT Attacks
03
A Proposal for a Blockchain-Based Software Integrity Verification System to Strengthen Supply Chain Security
04
Schema of an Active Security System Based on NIDS and NIPS for Smart Home loT Network Security
05
Building an automatic abusive language detection system using a deep learning ensemble model
General Conference 종합학술대회
01
A Secure Web System Proposal Using Flask on Intranet
02
Design of a RAG-Based Chatbot to Mitigate Job Mismatching
03
SLAT-Based Hypervisor Variant Policy Layer
Projects
Security 5
퍼징을 활용한 소프트웨어 취약점 분석
LeadWindows software fuzzing with WinAFL/WinDbg and vulnerability disclosure through KISA.
WinAFLWinDbgFuzzingKISAWHS-3
probe
LeadExploit-guided Linux kernel fuzzer built on syzkaller with eBPF runtime monitoring and AI analysis.
SyzkallerLinux KerneleBPFFuzzingAI
HUB Zero-Day Research
LeadZero-day research project that operated Windows software fuzzing and disclosure workflows across the club and lab.
FuzzingWinAFL0-DayDisclosureHUB
JK-SecuOne
LeadSecurity compliance dashboard that extracts SentinelOne/Pentera reports with OCR and maps findings to ISMS-P controls.
ISMS-PPenteraSentinelOneFastAPIOCR
서버털이범
Lead ServerRed TeamBlue Team
AI 6
교차로 우회전 단속 시스템
YOLOv8x-based right-turn pedestrian safety and enforcement assistance system.
YOLOv8xFlaskNgrokComputer VisionLiving Lab
NoBullyZone
KcBERT/KcELECTRA-based cyberbullying detection and warning solution for online communities.
KcBERTKcELECTRANLPCyberbullying
sumone
Telegram bot for orchestrating Claude Code, Codex, and Gemini CLI from a phone.
TelegramBotClaude CodeCodexGemini
taskmesh
Discord-centered multi-agent orchestration service for routing Claude Code, Codex, and Gemini.
DiscordTask MgmtMulti-AgentTypeScriptOrchestration
Veriscope
LeadAI-powered reliability evaluation system for online news and information using multi-dimensional analysis.
NLPNLIEnsembleFlaskKotlin
천안 인사이트(대시보드)
ReactFastAPICloudflarePostgreSQLNLPDashboardKcELECTRABERTopicKeyBERTQwen2.5
Dev 4
웹 포트폴리오 제작
Personal portfolio and editing system built with Astro, Directus, and PostgreSQL.
AstroDirectusPostgreSQLCloudflare
개인 블로그 플랫폼 제작
It'sMyBlog
work_experience
LeadInternal real-time corporate messenger built with Flask, React, and Socket.IO.
FlaskReactSocket.IOMySQLMessenger
QR코드 생성기
QR CodeFreeQR custom
Contact
Get in Touch
Feel free to reach out if you'd like to work together.
Good Topics
I am interested in vulnerability research, fuzzing, AI security automation, and internal security tooling.
Helpful Context
A short note with the goal, timeline, and current blocker helps me understand the work quickly.
Brand Identity
XMIN BI
xmin.sh
The xmin mark identifies a personal brand around security research and automation tools. It uses a sharp compact symbol, terminal-inspired typography, and restrained teal accents.
Horizontal Mark
Use the horizontal mark for decks, thumbnails, and share images where there is enough space.
Usage Notes
- Keep clear space around the logo equal to at least one symbol width.
- Prefer transparent PNG/SVG assets, then choose white or black variants based on background contrast.
- Do not stretch the mark or add heavy shadows, gradients, or decorative effects.
Visual Tone
Keep the brand close to CLI, security research, and minimal system UI.