guest@sondt:~$ whoami
sondt / Thai Son Dinh
security researcher · bug hunter · ctf player
I hunt real bugs in real targets, break down IoT firmware, write reproducible research, and keep my CTF brain sharp with RE & Pwn.
about
- bug hunting — clear reports with versions, impact, logs, payloads
- iot security — firmware trees, web handlers, command wrappers
- ctf player — model the binary, find the primitive, exact offsets
research
- firmware mapping — extract images, init scripts, web roots
- embedded web — auth boundaries, templates, upload flows
- reverse engineering — function clusters, parsers, state machines
toolkit
principles
- show artifact, target version, surface first
- separate observed facts from guesses
- keep commands, offsets, payloads exact
- explain impact without hype
- small reproducible samples > long explanations