CONNECTED TLSv1.3 · HTTP/1.1 info.jun4n.com 200 OK
$
GET /junan HTTP/1.1 Host: info.jun4n.com Accept: application/offer, text/collaboration Accept-Language: en, ko
HTTP/1.1 200 OK Server: Seoul, Korea Content-Type: application/resume+json

Hey — I'm junan, also jun4n.

>GET/experience 200 OK
< X-Total-Count: 6
2025.02 — present
Theori
Researcher · Security Assessment (Frontier Squad)
2024.07 — 2025.02
Theori
Junior Researcher · Security Assessment (Frontier Squad)
2024.05 — 2024.07
Theori
Intern Researcher · Security Assessment
2022.07 — 2023.03
BoB 11th (Best of the Best)
Vulnerability Analysis track — Korea's flagship security talent program
2023.03 — 2023.07
Dream Academy 2nd
Blockchain security & threat-modeling intensive
2019.03 — 2025.03
Sejong University
B.S. Computer Science & Engineering
>GET/disclosures 200 OK
< Content-Type: application/vnd.bugbounty+json < X-Note: targets & severity only — details withheld < X-Sort: severity desc
Cisco Meraki Critical ×2Medium 2026
Okta Critical 2025
Dopex Critical ×2 2023
Epic Games High 2026
Airbnb Medium ×2 2025
23andMe Medium 2025
validator.js CVE CVE-2025-56200 · 2025
KVE Medium KVE-2023-0043 · 2023
AWS Access Portal Low 2025
Binance Low 2025
Naver Low 2024
>GET/ctf 200 OK
< X-Total-Count: 7
20251st LINE CTF 2025Team TheDuck
20241st Dreamhack Web Hackingsolo — junan
20233rd Dreamhack BISC CTF 2023solo — junan
20234th Dreamhack X-Mas CTF 2023Team 핵폭탄과유도탄들
2024Finalist Hacktheon Sejong 2024Team 바쿠쌉꿀빠
202413th ISITDTU CTF 2024 QualsTeam The Duck
202426th LINE CTF 2024solo
>POST/ctf/challenges 201 Created
< Location: /ctf/challenges/lord-of-xss
2025Author .hack Invitational 2025 — FinalAuthored the web challenge “Lord Of XSS”.
>GET/projects 200 OK
WPA2 / WPA3 · Team netduck

Wi-Fi Protocol Attack Research

BoB 11th project

Researched client–router deauthentication under WPA2-PMF and WPA3, and used it to build cracking, evil-twin, and downgrade attacks against protected networks.

github.com/netduck/duck-tools
DeFi · Team ChainHunters

On-Chain Options Protocol Threat Modeling

Dream Academy project · presented at CodeEngn Conference 19

Studied an on-chain options protocol end to end and modeled the threats it exposes — the economic and settlement risks that live between the contract and the market.

CodeEngn 2023 talk — DeFi options protocol
>GET/consulting 451 Unavailable For Legal Reasons
< Link: <urn:nda>; rel="blocked-by"

Enterprise engagements delivered under NDA — fully redacted.

[REDACTED]xxxxxxxxxxxxxxxxxxxxxxxx
[REDACTED]xxxxxxxxxxxxxx
[REDACTED]xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
[REDACTED]xxxxxxxxxxxxxxxxxx
[REDACTED]xxxxxxxxxxxxxxxxxxxxxxxx
[REDACTED]xxxxxxxxxxx