Security-focused developer and software engineering student at VNU-UET (Hanoi), interested in web application vulnerabilities, binary exploitation and offensive tooling.
🔎 Open to internship opportunities in penetration testing and C++ / systems roles.
- Studying for BSCP and working through PortSwigger Web Security Academy
- Red teaming, offensive tooling, web application exploitation
- Building automation and exploitation tools
- Binary exploitation, and studying C++ internals through CppCon talks
- CTF: web, pwn and misc challenges on pwn.college and others, just for the fun of cracking puzzles
- Competitive programming: Codeforces, VNOI, CSES, MarisaOJ, Project Euler
- CompTIA A+ Core 1: studied via Udemy for hardware knowledge, not gonna take exam
- CompTIA Security+ 🔄 in progress: Udemy course only, not gonna take exam
- BSCP (Burp Suite Certified Practitioner) 🔄 practice finished, just need free time to take exam
- CPTS (Certified Penetration Testing Specialist)
- CCNA (Cisco Certified Network Associate)
Maybe later
- CompTIA A+ Core 2, Network+, Pentest+ (probably not needed)
- OSCP, OSWE, OSEP (if budget allows)
Starting with web-focused certifications before moving into full-scope penetration testing. Long-term goal: master Active Directory attacks and reach OSEP-level proficiency in evasion and pivoting.
