I am a fourth-year student from Academy of Cryptography Techniques.
With a love of computer security researching, my goal is to be a Computer Security Researcher, a Bug Hunter.
With a love of computer security researching, my goal is to be a Computer Security Researcher, a Bug Hunter.
Penetration Testing
VNPT (Vietnam Posts and Telecommunications)
January 2017
to September 2017
Part-time
Ha Noi
Vietnam
- Working at VNPT Security operation Center (SoC) as pentester.
- Perform security testing for mobile applications/ system/ websites in VNPT (include 63 provinces in Vietnam), Vinaphone, VNPT Software, VNPT Technology, VNPost ...
- Perform security testing for system/ websites of some provinces in Vietnam.
Penetration Testing
PwC
Since December 2017
Internship
Hanoi
Vietnam
- Working at PwC Vietnam CyberSecurity as pentester
Bugs finding
Finding bugs in web application
Since 2015
- [FPT Shop] Found a logic bug in payment function which let user buy product with any money he wants (less than, or more than original price!)
- [Adtima - Mobile ads platform] Found bugs in web application framework which often used for ads campaign.
- [VinaGame] Found multi critical vulnerabilities: through these vulnerabilities allow compromise all servers in VNG 's network
- [BKAV] Found 1 vulnerability lead to compromise all servers in BKAV 's network
- [KeeperSecurity] Found 1 XSS vulnerability in their website
- Bugs finding in some commercial websites (Chinabuye.com, Gobuu.com, Wd.cm ...)
References
More infomation
Since 2015
- PwC Hackaday Writeup: http://tinyurl.com/yccmc6pm
- NightSt0rm CTF Writeup: http://tinyurl.com/y8jwbwkl
- SV ATTT 2016 Writeup: http://tinyurl.com/yajy3mz6 , http://tinyurl.com/y7olnopj
- FPT Shop logic bug: http://tinyurl.com/y77wqrjp
- Bkav vulnerability: https://nightst0rm.net/2018/01/bang-khuang-minh-ta-lac-troi-giua-troi/
- VNPT SoC Leader: quannn@vnpt.vn (Nguyen Ngoc Quan)
- PwC VN CyberSecurity deputy manager: le.cong.phu@pwc.com (Le Cong Phu)
-
Good knowledge in attacking Web Application
Good
-
Understand about web hacking methods like: XSS, SQL Injection, SSTI, LFI, SSRF,
Good
-
Can use many of hacking tools like: Burpsuite, metasploit, Acunetix, sqlmap, ...
Good
- Learning about Reverse Engineering
-
Can build script/program in these languages: Java, PHP, Python, C
Good
- Using Linux as main Operating System (Linux Mint)
-
Basic knowledge in Microsoft Word, MS Excel, MS Powerpoint
Notions
