Dong-Yi (Kazma) Ye

Present Engagements

  • Cybersecurity Researcher @ CyCraft Technology (Jul. 2025 – Present)
  • Founder / Leader / Reverser – B33F 50UP CTF Team (Sep. 2023 – Present)
  • Founder – Taiwan Security Club (TSC) (Sep. 2023 – Present)

Previous Engagements

  • Intern @ CyCraft Technology (May. 2024 – Jun. 2025)
  • Intern @ Telecom Technology Center (Feb. 2024 – Jun. 2024)
  • President – NCKUCTF (National Cheng Kung University Cybersecurity Technology Front) (Sep. 2023 – Jun. 2024)
  • Teaching Assistant – AIS3 Camp 2024
  • Teaching Assistant – AIS3 Junior Camp 2024
  • Vice President – Computer Campus Network Society (CCNS) (Sep. 2023 – Jun. 2024)
  • President – Electrical Engineering Club (Sep. 2018 – Jun. 2019)

Educational Background

  • National Cheng Kung University, Bachelor’s degree in Industrial and Information Management (Sep. 2021 - Present)
  • National Tainan First Senior High School (Sep. 2017 - Jun. 2020)

Work Experience

Intern, CyCraft Technology (May. 2024 - Jun. 2025)
  • Researched attack techniques targeting Entra ID and Microsoft 365
  • Developed a tool to scan and identify potential vulnerabilities in Entra ID deployments of publicly listed companies in Taiwan
  • Conducted penetration testing on a specific company’s product and prepared a comprehensive security report
Chief Organizer, Taiwan Security Club Capture The Flag (Sep. 2023 - Feb. 2024)
  • Initiated and led the ‘Taiwan Security Club’, uniting cybersecurity groups from 13 universities, demonstrating strong leadership and collaboration skills. Successfully spearheaded the ‘TSCCTF’ cybersecurity contest, tailored for beginners, showcasing project management and event coordination abilities.
  • FB Post
  • FB Post
Backend Developer/Teaching assistant, Ministry of Education-ISIP (Jan. 2023 - Dec. 2023)

Linux, PVE, Basic CTF

  • Enhanced cybersecurity education for high school teachers and students by improving awareness of key principles and collaborating in the design of engaging course materials, while also managing CTF challenges and the competition website, contributing to the event’s success through effective technical support and event coordination.
Co-fouder/Software Engineer, Member Corporation (Nov. 2021 - July. 2022)

Python, SQL, Golang, GitHub, HackMD, Slack

  • Played a key role in a ten-member startup team, developing an integrated marketing platform and driving progress through outstanding collaboration and teamwork in a fast-paced environment; also secured a NT$40,000 grant from the prestigious 2022 National Cheng Kung University Dream Project, contributing actively to the development of innovative solutions.

Specialized Training

  • Taiwan Holy High 9th Mentor System, under the mentorship of Professor Chun-Ying Huang (Sep. 2024 - Jul. 2025)
  • Taiwan Holy High 8th Mentor System, under the mentorship of Allen Own (DEVCORE CEO) (Sep. 2023 - Jul. 2024)
  • Advanced Information Security Summer School (AIS3) - Web Security (Jul. 24, 2023 - Jul. 30, 2023)
    • chosen by pre-exam
    • Project Topic: Reproduction of Moodle SSRF Vulnerability CVE 2023-35133
    • IG Post
  • Tainan City Government’s 2023 Cybersecurity Talent Cultivation Program (Jul. 20, 2023)
  • 1st NCKU Critical Infrastructure Information Security
    • Basic （Jul. 2022 - Aug. 2022）
    • Advanced (Jan. 2023 - Feb. 2023)
    • Project Research - Petrochemical Cybersecurity (Jul. 2023 - Aug. 2023)

Competitive Achievements

  • Cybersecurity, WorldSkills Taiwan 2025, 3rd place (Jul. 19, 2025)
  • Security, iThome ironman competition 2024, 1st place (Feb. 15, 2025)
  • AIS3 EOF CTF 2025, 1st place (Feb. 7-8, 2025)
  • Cybersecurity, WorldSkills Taiwan 2024, 4th place (Jul. 17, 2024)
  • HITCON CTF 2024 Quals, Global 24th / Taiwan 1st (Jul. 14 2024)
  • Google CTF 2024, 49th (Jun. 21, 2024)
  • 2024 HACKTHEON SEJONG, Global 29th / Taiwan 1st (Apr. 27, 2024)
  • The 54th National Skills Competition, southern district 3rd (Mar. 29, 2024)
  • Cyber Guardian Grand Challenge, 5th (Dec. 15, 2023)
  • TCAT Finals, 1st (Nov. 23, 2023)
  • AEGIS Finals, 9th (Nov. 2, 2023)
  • Balsn CTF 2023, 3rd (Taiwan) / 21st (Global)
  • Tainan City Government’s 2023 Cybersecurity Attack and Defense Drill Competition, 4th (Jul. 20, 2023)
  • picoCTF 2023, rk.156/6923 (Mar. 15, 2023)
  • My First CTF 2023, 10th (May. 13, 2023)

Technical Talks & Presentations

  • RomHack 2025 — Rome, Italy: “Sign Here to Bypass: From macOS Intune PRT Cookie Theft to Entra ID Persistence” (Sep. 27, 2025)
  • DEF CON 33 - Las Vegas, United States: “Original Sin of SSO: macOS PRT Cookie Theft & Entra ID Persistence via Device Forgery” (Aug. 9, 2025)
  • CraftCon Taiwan 2025 — Taipei, Taiwan: “Breaking Down macOS Intune SSO: PRT Cookies Theft and Platform Comparison” (Jul. 4, 2025)
  • TROOPERS25 — Heidelberg, Germany: “Breaking Down macOS Intune SSO: PRT Cookies Theft and Platform Comparison” (Jun. 26, 2025)
  • Cycraft Intern Presentaion: 「神の目：Entra ID 的情報狩獵之術」（Sep. 14, 2024）
  • HITCON CMT LIGHTNING TALK:「Genki damaSpirit Bomb - TSCCTF 2025」(Aug. 25, 2024)
  • CTF 種子培訓工作坊（臺北場）：「五檔的尼卡：無人能擋的帽子戲法」(Nov. 16, 2024)
  • AIS3 Club:「五檔的尼卡：無人能擋的帽子戲法」(Aug. 21, 2024)
  • COSCUP:「五檔的尼卡：無人能擋的帽子戲法」(Jul. 10, 2024)
  • CTF 種子培訓工作坊（臺中場）：「五檔的尼卡：無人能擋的帽子戲法」(Jul. 10, 2024)
  • TSCCTF:「影分身の術的影響力」 (Feb. 2, 2024)
  • SITCON LIGHTNING TALK:「五分鐘の影響術」 (Mar. 9, 2024)

Lecturing Experience

  • SCIST S5: 「愛與 Exploit，這就是 Pwn 超人！」(Apr. 26, 2025)
  • SCIST S5: 「🔥來自火精靈的挑戰書：從 Flare-On 出發的 Windows 逆向課程」(Apr. 12, 2025)
  • 東吳大學：「駭客🥷，不只是電影裡的角色」(Apr. 11, 2025)
  • iThome:「Flipper Zero 宇宙最強攻略：30 分鐘帶你從入門到入坑」（Mar. 29, 2025）
  • SCIST S5:「我獨自逆向：Reverse」（Mar. 1, 2025）
  • SCIST S5: 「絶対強者の殿堂へ：Linux 領域展開！」（Oct. 19, 2024）
  • B33F H4CK1NG: 「Ignore This Title and Meow: Exposing Systemic Vulnerabilities of LLMs through two Prompt Hacking Competitions in HITCON CMT」(Aug. 28, 2024)
  • 資安從零開始(元智資安營)：「Re:從零開始的 Linux 生活」(Jul. 27, 2024)
  • B33F H4CK1NG: 「柯柏洛斯丁之術」 (May. 29, 2024)
  • NCKUCTF: 「資安禁術 - 逆向工程夢遊仙境」 (Mar. 18, 2024)
  • NCKUCTF: 「資安禁術 - 逆向工程地獄試煉」 (Mar. 25, 2024)
  • B33F H4CK1NG: 「分分鐘拿下逆向 CTF」 (Apr. 30, 2024)

My CTF Challenges

YZUIMSC 2024

Challenge Category Difficulty Description
Mr. Penguin linux baby The simplest Linux command challenge.
Linux Trainee linux baby Use Linux commands to print printable strings in a binary file.
Linux Commaster linux easy Use Linux commands to find the file you need in a complex file structure.
Dynamike linux medium Just find the flag. XD

NICS 2024

Challenge Category Difficulty Description
Sorcerer Supreme pwn easy Learn the basics of out-of-bounds array reading.
First Bread pwn medium Your first real pwn challenge.
Kazdle rev easy Requires patience to read and understand the code.
Chosen0 rev easy Discover the secret in a binary file using Linux commands.
Chosen1 rev medium Use gdb to dynamically analyze a binary file.

AIS3 Pre-exam / My-First-CTF 2024

Challenge Category Difficulty Description
Mathter pwn baby Return to two wins by passing specific arguments
Inception pwn medium Fastbin attack with double free to RCE
火拳のエース rev easy Flag checker suitable for solving with angr

Community Involvement

  • HITCON CMT 2024 - Attendee (Aug. 23, 2024)
  • COSCUP - Speaker (Aug. 3, 2024)
  • Craftcon - Staff (Jul. 12 2024)
  • 2024 成大 Google 學生開發者論壇 - Staff (Jun. 6, 2024)
  • Cybersec - Attendee (May. 15, 2024)
  • DEVCORE CONFERENCE 2024 - Attendee (Mar. 16, 2024)
  • SITCON 2024 - Attendee (Mar. 9, 2024)
  • HITCON CMT 2023 - Attendee (Aug. 18, 2024 - Aug. 19, 2024)

Other Special Experience

  • Participate in the TVBS show Battle ATM (Jul. 9, 2024)
  • DEVCORE afternoon tea (May. 24, 2024)