howesion

I once discovered a smart contract fake recharge vulnerability through penetration testing, which helped the company avoid losses of more than 330,000 US dollars.Holding the 0day vulnerability of an AI product under Baidu, the CTF of Hacker101 has obtained 74 points, can write free killing horses, and various POCs. Proficient in penetration tools such as burpsuite and sqlmap, familiar with APP reverse framework Frida, shelling, decryption , has done a security test on the payment interface, is good at Owasp vulnerabilities, has rich experience in emergency response and traceability and evidence collection, and has participated in the technical investigation of the public security network black industry case and achieved success. With more than one year of experience in the web 3 industry, he can effectively improve the security risks of CEX. In addition, smart contract scenarios such as Defi, public chain, and NFT have also been involved.

Expected job: Penetration testing (web/Android/iOS/API/smart-contract). Intranet penetration. Red and blue confrontation. Exchange Security Audit. Blockchain smart contract audit. Telecommuting.