Kin =]
HKer, InfoSec enthusiast currently into Computer Forensics, Wireless Attack, Web Security, GNU/Linux, and Open source. Also hunting CVEs :D
Aspiring to become a professional Red Team operator. INTP-T (MBTI)
CTF TeamICEDTEACTF TeamICEDTEAA Taiwan based CTF team that I am part ofHeapUnderFlowCTF TeamHeapUnderFlowMy current Hong Kong based CTF team
Challenge CreatorNHNC CTFChallenge CreatorNHNC CTFI created challenges and helped with the design side for No Hack No CTF.THJCC CTFChallenge CreatorTHJCC CTFA Taiwai CTF event where I also contributed challenge-related work.
HackingTryHackMePractice PlatformTryHackMeUsed for rooms, labs, and certification tracks.HackTheBoxPractice PlatformHackTheBoxUsed for labs, boxes, and web exploitation practice.CryptoHackPractice PlatformCryptoHackA platform I use for learning and practicing cryptography.
CreatorUmmItOSMy ProjectUmmItOSMy own Arch-based distribution and personal Linux experiment.
CommunityHKPUGCommunityHong Kong Python User GroupI join HKPUG activities and occasionally give talks there.
CandidateOSCPOffensive SecurityOSCPOffensive Security Certified Professional - Advanced penetration testing certification.CWESHackTheBoxCWESCertified Web Exploitation Specialist - Advanced web application security certification.CJCAHackTheBoxCJCACertified Junior Cybersecurity Associate - Entry-level cybersecurity fundamentals.PT1TryHackMePT1Junior Penetration Tester - Foundational penetration testing skills certification.
I’ve been self-taught since I was a kid. Right now I'm studying InfoSec in Hong Kong, and the stuff I keep coming back to is red teaming, reverse engineering, and web hacking. I started taking this seriously around middle school. HTML, CSS, JavaScript first, then C#, VB.NET, a few others. I don't really touch those anymore. Lately it's web hacking and red team work.
I'm a huge GNU/Linux enthusiast. I've tried at least 20 different distros over the years. My main system is Arch Linux, seven years and counting. Yes, I'm still a student with over seven years of experience. I started back in secondary school. Right now I'm running my own Arch-based distribution called UmmItOS, named after my internet nickname. XD
I used to be a Windows user, but I'm now 100% on GNU/Linux. I only touch Windows when I'm attacking Active Directory. Lots of stories from the journey ... this is just a small part :D
GPG Key
Sponsor
Support my work — coffee fuels more CTF writeups, OSS, and zero-day hunting.
Contributions
3,885 contributions in the last year
Skills
This is my skill :D
Timeline
No Hack No CTF
Challenge Creator & Web Designer
gitgit & Crackme challenges creator, website designer.
Hong Kong Python User Group (HKPUG)
Member and Occasional talker :)
Join the Hong Kong Python community and occasionally give talks there.
Zero-Day Hunting
Randomly hunting zero-day vulnerabilities
I do it for fun and learning purposes, no public disclosures yet.
Competition Experience
Only the best runs are listed — I play other CTFs casually too, just not at full effort.
DEF CON CTF Qualifiers 2026
PolyU CTF 2026
HITCON CTF 2025
HKCERT CTF 2025
| Competition | Date | Team | Division | Placement | Pts / Solves |
|---|---|---|---|---|---|
| DEF CON CTF Qualifiers 2026 | May 22–24, 2026 | IB2XD | — | 26/686 | 4,852 |
| PolyU CTF 2026 | Mar 6–8, 2026 | HeapUnderFlow | Sub-degree | 3/20 | 11,427 / 36 Global: 20/179 |
| HITCON CTF 2025 | Aug 22–24, 2025 | ICEDTEA | — | 29/717 | Taiwan Top 4 |
| HKCERT CTF 2025 | Dec 19–21, 2025 | HeapUnderFlow | Open | 29/597 | — |










