Hi there, I’m Frank Wu
Founder of Nebula Security, follow us on Twitter: @nebusecurity
Currently playing with Linux kernel / Android / PHP / V8.
🎓️ CS Master at UCR, advised by Prof. Zhiyun Qian.
🏫 CS Bachelor at SUSTech. In Teecert Lab, advised by Prof. Yinqian Zhang.
Graduate with honors (🏅Outstanding Graduate; 🏅Distinguished UG Thesis).
Interested about Automation & Reverse & Pwn, also a former Web player.
Hacking with r3kapig and S1uM4i for fun.
Co-founder and former leader of COMPASS CTF team in COMPASS Lab.
Selected Publications
Full list on Google Scholar
- [BlackHat USA’26] Burning Tears of PHP’s Memory Hardening
Yifan Wu, Xiaochuan Yu, Zhiyun Qian
[BH Slides] [Source Code] [Presentation Video TBA] - [USENIX Security’26] Melting the Flesh of PHP’s Memory Hardening
Frank Wu, Xiaochuan Yu, Zhiyun Qian
[Paper PDF] [Source Code] - [ESORICS’24] SAEG: Stateful Automatic Exploit Generation
Yifan Wu, Yinshuai Li, Hong Zhu, Yinqian Zhang
[Paper PDF] [SAEG Source Code] [Presentation Video]
Competition Awards
[2025] 16th Flare-on 12
[2025] 5th DEFCON 33 Finals (RePokemonedCollections)
Teaching Experiences
- [2023 Fall] CS315: Computer Security (TA, 🏅Outstanding Teaching Assistant),
Some course materials designed by me (more about it):- Buffer Overflow: Lecture | Lab instruction | Lab attachments
- Return-to-libc: Lecture | Lab instruction | Lab attachments
- Fuzzing & Symbolic Execution: Lecture | Lab instruction | Lab attachments
- [2022 Spring] CS102A: Introduction to Computer Programming A (TA)
- [2020 Spring] CS102A: Introduction to Computer Programming A (TA)