[go: up one dir, main page]
avatar

Qi Wang

Ph.D. Student
Tsinghua University
qi-wang23 (at) mails.tsinghua.edu.cn

About Me

Hi! I’m Qi Wang, also known as Eki. I’m a PhD student at the Institute for Network Sciences and Cyberspace, Tsinghua University. I conduct my research in the Network and Information Security Lab (NISL), under the supervision of Prof. JianJun Chen. My work primarily focuses on Web security and network protocol security. By identifying vulnerabilities and designing secure protocol solutions, I aim to help build a more robust and resilient internet infrastructure.

In addition to my academic research, I’m an active Capture the Flag (CTF) player. I currently serve as captain of Tsinghua University’s CTF team Redbud , and a former member of Dubhe. My main strengths in CTF competitions lie in Web and Misc challenges.

Research Interests

News

Publications
  1. Rethinking Isolation in RPKI: Cross-Publication-Origin Attacks on RPKI Validation
    Qi Wang, Jianjun Chen, Taofei Guo, Minghao Zhang, Yuheng Zhang, Jingcheng Yang
    33th ACM Conference on Computer and Communications Security
    To be appeared.

  2. NDSS'26
    Token Time Bomb: Evaluating JWT Implementations for Vulnerability Discovery
    Jingcheng Yang, Enze Wang, Jianjun Chen, Qi Wang, Yuheng Zhang, Haixin Duan, Wei Xie, Baosheng Wang
    2026 Network and Distributed System Security (NDSS) Symposium
    PDF Code BibTeX

  3. NDSS'26
    SIPConfusion: Exploiting SIP Semantic Ambiguities for Caller ID and SMS Spoofing
    Qi Wang, Jianjun Chen, Jingcheng Yang, Jiahe Zhang, Yaru Yang, Haixin Duan
    2026 Network and Distributed System Security (NDSS) Symposium
    PDF Code BibTeX

  4. USENIX Security'25
    My ZIP isn't your ZIP: Identifying and Exploiting Semantic Gaps Between ZIP Parsers
    Yufan You, Jianjun Chen, Qi Wang, Haixin Duan
    34th USENIX Security Symposium, 2025
    PDF Code BibTeX Distinguished Paper Awards

  5. NDSS'25
    Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange
    Pinji Chen, Jianjun Chen, Mingming Zhang, Qi Wang, Yiming Zhang, Mingwei Xu, Haixin Duan
    2025 Network and Distributed System Security Symposium
    PDF BibTeX Presented at BlackHat USA 2025[link]

  6. CCS'24
    Inbox Invasion: Exploiting MIME Ambiguities to Evade Email Attachment Detectors
    Jiahe Zhang, Jianjun Chen, Qi Wang, Hangyu Zhang, Chuhan Wang, Jianwei Zhuge, Haixin Duan
    31th ACM Conference on Computer and Communications Security
    PDF Code BibTeX Presented at BlackHat ASIA 2025[link]

  7. S&P'24
    Break the Wall from bottom: Automated Discovery of Protocol-Level Evasion Vulnerabilities in Web Application Firewalls
    Qi Wang, Jianjun Chen, Zheyu Jiang, Run Guo, Ximeng Liu, Chao Zhang, Haixin Duan
    2024 IEEE Symposium on Security and Privacy
    PDF Code BibTeX Presented at BlackHat USA 2024[link]

Rewards

  • [Aug. 2026] Got 🥇 at Defcon 34 Final with 「BlueWater」
  • [Dec. 2025] Got NDSS FellowShip at NDSS 2026
  • [Dec. 2025] Got 5th 🏅 at Blackhat MEA Final with 「Redbud」
  • [Aug. 2025] Got Distinguished Paper Awards at USENIX Security '25
  • [Feb. 2025] Got 🥈 at Aliyun CTF 2025 with 「Redbud」
  • [Dec. 2024] Got 🥇 at TSGCTF 2024 with 「blue-lotus」
  • [Nov. 2024] Got 🥈 at Byte AI Security Competition with 「一般通过」
  • [Oct. 2024] Got 🥇 at Geekcon DAF with 「Redbud」
  • [Jun. 2024] Got 🥈 at XCTF-Final with 「Redbud」
  • [Dec. 2023] Got 🥈 at TCTF2022 Rising Star Final with 「Redbud」
  • [May 2023] Got 🥈 at D^3CTF 2023 with 「满分冰美式」
  • [Dec. 2022] Got 🥇 at 5th "Qiangwang" (cyberspace power) International Elite Challenge on Cyber Mimic Defense with 「Dubhe」
  • [Sep. 2022] Got 🥇 at 6th "Blue Hat Cup" National College Students' Cyber Security Skills Competition with 「一般通过」
  • [Oct. 2021] Got 🥇 at XCTF-SCTF2021 with 「Dubhe」
  • [Sep. 2021] Got 🥈 at TCTF2021 Rising Star with 「emmmm」

Services

Teaching Assistant
  • Web Security (Course No. 84120252). Fall 2024
Head of Club
  • Tsinghua University Cyber Security Technology Association. 2025-Present

Education


京ICP备2025131516号
© 2019-2025 Eki. All Rights Reserved.