DongJun Kim

Security Researcher · Windows Kernel & Browser

I'm a security researcher at Enki WhiteHat specializing in Windows kernel vulnerability research and exploitation. I focus on discovering privilege-escalation bugs in kernel drivers, system services, and COM/RPC internals through static analysis and fuzzing, with additional research on Chromium browser security. I've been recognized as a Microsoft MSRC Most Valuable Researcher (2025, Global Top 100), with 30+ CVEs disclosed. Starting Fall 2026, I'll be pursuing my M.S. in Computer Science at UIUC.

Work

2024 — now

Security Researcher

Enki WhiteHat

Windows kernel vulnerability research and exploit development.

2021 — 2022

Best of the Best 10th — Vulnerability Analysis Track

KITRI

Selected as a Top 10 finalist.

Education

Fall 2026

M.S. in Computer Science

University of Illinois Urbana-Champaign (UIUC)

Papers

arXiv 2026

SEC-bench Pro: Can Language Models Solve Long-Horizon Software Security Tasks?

Hwiwon Lee, Jiawei Liu, DongJun Kim, Ziqi Zhang, Chunqiu Steven Xia, Lingming Zhang

A benchmark that challenges modern coding agents with long-horizon security tasks in critical, high-complexity software systems (at million-line scale), including vulnerabilities with over $1 million in cumulative bug bounties. Adopted by OpenAI for evaluating their recent GPT-5.5-Cyber.

arXiv GitHub Leaderboard