葉東逸 Kazma

Professional Roles

  • Intern @ CyCraft (May. 2024 - Present)
  • Intern @ Telecom Techonology Center (Feb. 2024 - Present)
  • Taiwan Security Club (TSC) - Founder (Sep. 2023 - Present)
  • National Cheng Kung University Cybersecurity Technology Front (NCKUCTF) - Founder/President (Sep. 2023 - Present)
  • B33F 50UP CTF Team - Co-founder/Pwner/Reverser(Sep. 2023 - Present)
  • AIS3 Camp 2024 - Teaching Assistant
  • AIS3 Junior Camp 2024 - Teaching Assistant
  • Computer Campus Network Society (CCNS) - Vice President (Sep. 2023 - Present)
  • Electrical Engineering Club - President (Sep. 2018 - Jun. 2019)

Educational Background

  • National Cheng Kung University, Bachelor’s degree in Industrial and Information Management (Sep. 2021 - Present)
  • National Tainan First Senior High School (Sep. 2017 - Jun. 2020)

Work Experience

Intern, CyCraft (May. 2024 - Present)
  • Coming soon
Chief Organizer, Taiwan Security Club Capture The Flag (Sep. 2023 - Feb. 2024)
  • Initiated and led the ‘Taiwan Security Club’, uniting cybersecurity groups from 13 universities, demonstrating strong leadership and collaboration skills. Successfully spearheaded the ‘TSCCTF’ cybersecurity contest, tailored for beginners, showcasing project management and event coordination abilities.
  • FB Post
  • FB Post
Backend Developer/Teaching assistant, Ministry of Education-ISIP (Jan. 2023 - Dec. 2023)

Linux, PVE, Cryptography, Reverse engineering, Forensics, Binary Exploitation, Web Exploitation

  • Enhanced cybersecurity education for high school teachers and students by improving awareness of key principles and collaborating in the design of engaging course materials, while also managing CTF challenges and the competition website, contributing to the event’s success through effective technical support and event coordination.
Co-fouder/Software Engineer, Member Corporation (Nov. 2021 - July. 2022)

Python, SQL, Golang, GitHub, HackMD, Slack

  • Played a key role in a ten-member startup team, developing an integrated marketing platform and driving progress through outstanding collaboration and teamwork in a fast-paced environment; also secured a NT$40,000 grant from the prestigious 2022 National Cheng Kung University Dream Project, contributing actively to the development of innovative solutions.

Specialized Training

  • Taiwan Holy High 8th Mentor System, under the mentorship of Allen Own (DEVCORE CEO) (Sep. 2023 - Present)
  • Advanced Information Security Summer School (AIS3) - Web Security (Jul. 24, 2023 - Jul. 30, 2023)
    • chosen by pre-exam
    • Project Topic: Reproduction of Moodle SSRF Vulnerability CVE 2023-35133
    • IG Post
  • Tainan City Government’s 2023 Cybersecurity Talent Cultivation Program (Jul. 20, 2023)
  • 1st NCKU Critical Infrastructure Information Security
    • Basic （Jul. 2022 - Aug. 2022）
    • Advanced (Jan. 2023 - Feb. 2023)
    • Project Research - Petrochemical Cybersecurity (Jul. 2023 - Aug. 2023)

Competitive Achievements

  • The 54th National Skills Competition, final 4th (Jul. 17, 2024)
  • HITCON CTF 2024 Quals, Global 24th / Taiwan 1st (Jul. 14 2024)
  • Google CTF 2024, 49th (Jun. 21, 2024)
  • 2024 HACKTHEON SEJONG, Global 29th / Taiwan 1st (Apr. 27, 2024)
  • The 54th National Skills Competition, southern district 3rd (Mar. 29, 2024)
  • Cyber Guardian Grand Challenge, 5th (Dec. 15, 2023)
  • TCAT Finals, 1st (Nov. 23, 2023)
  • AEGIS Finals, 9th (Nov. 2, 2023)
  • Balsn CTF 2023, 3rd (Taiwan) / 21st (Global)
  • Tainan City Government’s 2023 Cybersecurity Attack and Defense Drill Competition, 4th (Jul. 20, 2023)
  • picoCTF 2023, rk.156/6923 (Mar. 15, 2023)
  • My First CTF 2023, 10th (May. 13, 2023)

Lecturing Experience

  • B33F H4CK1NG: 「Ignore This Title and Meow: Exposing Systemic Vulnerabilities of LLMs through two Prompt Hacking Competitions in HITCON CMT」(Aug. 28, 2024)
  • 資安從零開始(元智資安營)：「Re:從零開始的 Linux 生活」(Jul. 27, 2024)
  • B33F H4CK1NG: 「柯柏洛斯丁之術」 (May. 29, 2024)
  • NCKUCTF: 「資安禁術 - 逆向工程夢遊仙境」 (Mar. 18, 2024)
  • NCKUCTF: 「資安禁術 - 逆向工程地獄試煉」 (Mar. 25, 2024)
  • B33F H4CK1NG: 「分分鐘拿下逆向 CTF」 (Apr. 30, 2024)

Public Speaking Experience

  • Cycraft Intern Presentaion: 「神の目：Entra ID 的情報狩獵之術」（Sep. 14, 2024）
  • HITCON CMT LIGHTNING TALK:「Genki damaSpirit Bomb - TSCCTF 2025」(Aug. 25, 2024)
  • CTF 種子培訓工作坊（臺北場）：「五檔的尼卡：無人能擋的帽子戲法」(Nov. 16, 2024)
  • AIS3 Club:「五檔的尼卡：無人能擋的帽子戲法」(Aug. 21, 2024)
  • COSCUP:「五檔的尼卡：無人能擋的帽子戲法」(Jul. 10, 2024)
  • CTF 種子培訓工作坊（臺中場）：「五檔的尼卡：無人能擋的帽子戲法」(Jul. 10, 2024)
  • TSCCTF:「影分身の術的影響力」 (Feb. 2, 2024)
  • SITCON LIGHTNING TALK:「五分鐘の影響術」 (Mar. 9, 2024)

My CTF Challenges

YZUIMSC 2024

Challenge Category Difficulty Description
Mr. Penguin linux baby The simplest Linux command challenge.
Linux Trainee linux baby Use Linux commands to print printable strings in a binary file.
Linux Commaster linux easy Use Linux commands to find the file you need in a complex file structure.
Dynamike linux medium Just find the flag. XD

NICS 2024

Challenge Category Difficulty Description
Sorcerer Supreme pwn easy Learn the basics of out-of-bounds array reading.
First Bread pwn medium Your first real pwn challenge.
Kazdle rev easy Requires patience to read and understand the code.
Chosen0 rev easy Discover the secret in a binary file using Linux commands.
Chosen1 rev medium Use gdb to dynamically analyze a binary file.

AIS3 Pre-exam / My-First-CTF 2024

Challenge Category Difficulty Description
Mathter pwn baby Return to two wins by passing specific arguments
Inception pwn medium Fastbin attack with double free to RCE
火拳のエース rev easy Flag checker suitable for solving with angr

Community Involvement

  • HITCON CMT 2024 - Attendee (Aug. 23, 2024)
  • COSCUP - Speaker (Aug. 3, 2024)
  • Craftcon - Staff (Jul. 12 2024)
  • 2024 成大 Google 學生開發者論壇 - Staff (Jun. 6, 2024)
  • Cybersec - Attendee (May. 15, 2024)
  • DEVCORE CONFERENCE 2024 - Attendee (Mar. 16, 2024)
  • SITCON 2024 - Attendee (Mar. 9, 2024)
  • HITCON CMT 2023 - Attendee (Aug. 18, 2024 - Aug. 19, 2024)

Other Special Experience

  • Participate in the TVBS show Battle ATM (Jul. 9, 2024)
  • DEVCORE afternoon tea (May. 24, 2024)