Zhi Zhou Senior Security Engineer, Alipay

Zhi Zhou (twitter: @CodeColorist) is a senior security engineer currently working at AntFinancial LightYear Security Labs, who mainly focuses on product security across different platforms and also passionate to real world pwn games. He has been acknowledged by Microsoft, Apple, Adobe and VMWare for reporting security issues. His talk “Many Birds, One Stone: Exploiting a Single SQLite Vulnerability Across Multiple Software” on BlackHat US ‘17 may be one of the earliest research on practical SQLite (WebSQL) exploits that affects most popular browsers and mobile devices, and inspired the recent Magellan exploit for Chrome. He’s also the author of open source iOS app pentesting tool Passionfruit (https://github.com/chaitin/passionfruit), which has over 1k stars on GitHub now.


Related Sessions

View full schedule