🚀🚀🚀
I hold the position of Senior Officer Information Security in VietNam, concurrently engaged as an Indie Security Researcher at YangYang.
- 👨🎓 Master of Science (M.SC.) in Information Security, Vietnam National University HCMC - University of Information Technology, 2025.
- 🔭 Research and propose innovative AI-based approaches to enhance application security.
- 🌱 I am also learning more security certifications to improve my level.
- 🥅 Goals: Contribute more to Open Source projects.
- 🏰 Orgz: Join YangYang Organization on Github.
- ⚡ Fun fact: 🐳🐳🐳🐳
💬 Quick reply in telegram.
- Github Sponsor
https://github.com/sponsors/yazgx97 - Paypal Address
https://paypal.me/yazgx97
| eLearnSecurity | Offensive Security | The SecOps Grouup | APIsec University | CyberWarFare Labs | AWS |
|---|---|---|---|---|---|
| eJPT | OSCP | CAP | API Penetration Testing | Multi-Cloud Red Teaming Analyst | AWS Certified Cloud Practitioner Certification |
| eWPT | CNSP | API Security for PCI Compliance | |||
| eMAPT | CCSP-AWS | ||||
| eCPPTv2 | CAPen |
| ID | CVSS Vector | Score | Product |
|---|---|---|---|
| CVE-2020-25528 | - | - | Cutephp |
| CVE-2021-3863 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 Medium | Snipe-IT |
| CVE-2021-3879 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N | 5.4 Medium | Snipe-IT |
| CVE-2021-3945 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 Medium | Django-Helpdesk |
| CVE-2021-3950 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N | 5.4 Medium | Django-Helpdesk |
| CVE-2021-3985 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H | 9.0 Critical | Kimai2 |
| CVE-2021-3994 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H | 9.6 Critical | Django-Helpdesk |
| CVE-2021-40232 | - | - | Pluck-CMS |
| CVE-2021-40233 | - | - | Typi-CMS |
| CVE-2021-40234 | - | - | Typi-CMS |
| CVE-2022-0539 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N | 5.4 Medium | Beanstalk_Console |
| CVE-2022-0894 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N | 5.4 Medium | Pimcore |
| CVE-2022-28378 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | 6.1 Medium | CraftCMS |
Phuc Le-Thanh, Tuan Le-Anh, and Quan Le-Trung. 2023. Research and Development of a Smart Solution for Runtime Web Application Self-Protection. In Proceedings of the 12th International Symposium on Information and Communication Technology (SOICT '23). Association for Computing Machinery, New York, NY, USA, 304–311. https://doi.org/10.1145/3628797.3628901
- Yang Code Review — AI-Powered Secure Code Review for GitHub Actions
- A Deep Dive into GenAI System Architecture: From Clients to LLM Inference
- Security by Design: Embedding Data Protection into LLM and GenAI Applications
- MLSECOPS: Secure your Large Language Model (LLM) applications
- DevSecOps: A journey to protect your applications
- Frida iOS Hook | Advance Usage | Memory Dump - Radare2 - Iaito
- Jailbreak | How to downgrade from iOS 15.6.1 to iOS 14.6 with sunst0rm
- Frida Intercept API | Technical | How to Intercept Encrypted APIs on The Application | Part 2
- Frida Intercept API | Technical | How to Intercept Encrypted APIs on The Application | Part 1
- Frida iOS Hook | Basic Usage | App Static - Bypass Jailbreak - Bypass SSL - Intercept URL + Crypto