guest@sondt:~$ whoami

sondt / Thai Son Dinh

security researcher · bug hunter · ctf player

I hunt real bugs in real targets, break down IoT firmware, write reproducible research, and keep my CTF brain sharp with RE & Pwn.

• bug hunting — clear reports with versions, impact, logs, payloads
• iot security — firmware trees, web handlers, command wrappers
• ctf player — model the binary, find the primitive, exact offsets

• firmware mapping — extract images, init scripts, web roots
• embedded web — auth boundaries, templates, upload flows
• reverse engineering — function clusters, parsers, state machines

linuxpythoncburpghidraidabinwalkpwndbgfirmwareiot webrop

• show artifact, target version, surface first
• separate observed facts from guesses
• keep commands, offsets, payloads exact
• explain impact without hype
• small reproducible samples > long explanations