Woobeen Cho (shable)

Security Researcher

About Me / Summary

[To be added]

Dongseo University
B.S. in Information Security
Expected Graduation: Feb 2027

Black-Box Web Penetration Testing & PTES-Based Attack Chain Analysis
Mar 2026 – Jun 2026

Performed PTES-based black-box penetration testing to analyze XSS, IDOR, command injection, and SQL injection.
Built and validated an attack chain from administrator account compromise to privilege escalation and internal service access.

OWASP WebGoat Vulnerability Analysis
Apr 2026 – May 2026

Analyzed and reproduced major web vulnerabilities including SQL injection, XSS, XXE, JWT flaws, and path traversal.
Validated exploitation and bypass techniques through HTTP request/response analysis and documented mitigations.

Two-Factor Authentication System for Web Login Security
Apr 2025 – Jun 2025

Implemented TOTP/HOTP-based two-factor authentication with QR code-based OTP enrollment in a Flask login system.
Added password hashing, OTP failure limits, and email-based OTP reset functionality.

KISIA Industry-Demand-Based White Hat Hacker Training Program
Trainee, Jul 2026 – Present

RubiyaLab CTF Team
Member, Apr 2026 – Present
Dino Subgroup, Aug 2026 – Present

CNSL, Dongseo University
Vice President, Mar 2026 – Present

Red Raccoon Mentoring Program, 3rd Cohort
Mentee, Jan 2026 – Mar 2026

FindTheGap — 4 Vulnerability Reports
FVE-2025-612a-73711, FVE-2025-612a-73759, FVE-2025-612a-73761, FVE-2025-612a-73784

Grand Prize — 2025 Bug Bounty Busan
KISA President’s Award, Dec 23, 2025

3rd Place — K.knock · D-Alpha · CAUtion Joint Club CTF
Team 김민규그는감히전설이라고할수있다, Jul 26, 2026

Encouragement Award — KISA CyberX: Cybersecurity Practical Training & CTF Challenge
Team 최윤정조, Oct 13, 2025

Black Hat MEA CTF 2026
6th Place in Qualifiers, Advanced to Finals, Team RubiyaLab Dino, Sep 2026

KISIA CTF 2026
Finals, Team 쉬었음 청년들, Aug 2026

HACKSIUM BUSAN 2026
Advanced to Finals, Team 팀명정하다토큰다씀, Aug 2026

Linux Master Level 2, Oct 2025