Hanqing Zhao

School of Computer Science
College of Computing
Georgia Institute of Technology
Atlanta, GA
Email: hanqing(at)gatech.edu

Please follow my twitter for latest technical stuff: @hankein95

Research Interests

• System Security, Operating System, Defensive Research, and Offensive Research
  

Academic/Industrial Experience

• 2019 - Present: Georgia Institute of Technology
• 2016-2019: Senior Security Researcher of Chaitin Security Research Lab (Mentor: Dr. Kun Yang)
  
• Member of Tea Deliverers CTF Team
  
• Member of b1o0p CTF Team
  

Research Papers (2019-Present)

1. KRace: Data Race Fuzzing for Kernel File Systems [Paper]
   Meng Xu, Sanidhya Kashyap, Hanqing Zhao, and Taesoo Kim
   In Proceedings of the 41st IEEE Symposium on Security and Privacy (Oakland'20),
   San Francisco, CA, May 2020.
2. Fuzzing IPC with Knowledge Inference
   Kun Yang, Hanqing Zhao, Chao Zhang, Jianwei Zhuge and Haixin Duan
   In The 38th International Symposium on Reliable Distributed Systems (SRDS'19),
   Lyon, France, Oct 2019.
3. Breaking Turtles All the Way Down: An Exploitation Chain to Break out of VMware ESXi [Paper]
   Hanqing Zhao, Yanyu Zhang, Kun Yang, and Taesoo Kim
   In Proceedings of the 13th USENIX Workshop on Offensive Technologies (WOOT'19),
   Santa Clara, CA, August 2019.

Awards

• 2017 30,000 CNY, China Cyber Security Scholarship by CIDF (China Internet Development Foundation)
• 2016 30,000 CNY, China Cyber Security Scholarship by CIDF (China Internet Development Foundation)
• 2017 2nd place & Hall of Fame w/ Lei Sun, GeekPwn HongKong
• 2017 Rooting Huawei Smart Phone w/ Chensheng Yu, GeekPwn Shanghai
• 2016 1st place & Hall of Fame w/ Kun Yang, GeekPwn Macau

Reported Bugs

• CVE-2019-8619: Safari/Webkit Sandbox Escape
• CVE-2019-8628: Safari/Webkit Sandbox Escape
• CVE-2019-8562: Safari/Webkit Sandbox Escape
• CVE-2018-4449: macOS local privilege escalation/ sandbox escape
• CVE-2018-4450: macOS local privilege escalation/ sandbox escape
• CVE-2017-3882: Remote code execution of Cisco Router

Talks & Presentations

1. The Great Escape of ESXi: Breaking Out of a Sandboxed Virtual Machine [Video, Slides]
   In The 36th Chaos Communication Congress (36C3),
   Dec, 2019, Leipzig, Germany.
2. Breaking Turtles All the Way Down: An Exploitation Chain to Break out of VMware ESXi
   In VMware Headquarters,
   Aug, 2019, Palo Alto, CA.

Links

• Real World CTF: Hack the Real

Amigos

• Chensheng Yu, an awesome and seasoned pwnable guy