Open to opportunities

Daniel Min Thu

@danielminthu

Message

Penetration tester and offensive security researcher focused on enterprise compromise.

Cambodia

Message

What I'm looking for

I seek hands-on offensive security roles focused on AD and web application compromise, working in collaborative, learning-focused teams where I can do full-chain red teaming and produce actionable, business-oriented reports.

I am a dedicated penetration tester and offensive security researcher who transitioned into security through intense self-study and hands-on labs, validated by CPTS, PT1, and eJPT certifications. I specialize in Active Directory exploitation, web application testing, and full-chain attack simulations with extensive practical experience across HTB, TryHackMe, OffSec Labs, VulnLab, and PortSwigger.

My practical achievements include executing full AD attack chains from unauthenticated foothold to Domain Admin using Kerberoasting, AS-REP Roasting, ACL abuse, Pass-the-Hash, and DCSync, completing the HTB Penetration Tester path multiple times, and compromising 250+ targets while producing 750,000+ words of technical content. I pair deep technical exploitation skills (BloodHound, Impacket, Mimikatz, CrackMapExec) with strong report-writing ability to deliver commercial-grade remediation roadmaps that CISOs act on.

I bring a methodical, risk-based testing methodology (PTES, MITRE ATT&CK, CVSS) and a track record of measurable outcomes from prior marketing and client-facing roles, enabling clear communication, scoping, and stakeholder management across engagements.

Experience

Work history, roles, and key accomplishments

Current

Penetration Tester

Current

Independent / Personal Projects

Feb 2024 - Present (2 years 1 month)

Self-taught offensive security practitioner who completed HTB CPTS (90/100) and executed 250+ compromised targets across AD and web attack simulations, producing commercial-grade pentest reports and published exploitation walkthroughs.

Kerberoasting AS REP Roasting BloodHound Impacket Mimikatz Burp suite Web Application Testing Report Writing

Digital Marketing Specialist

Novalink

Oct 2023 - Sep 2024 (11 months)

Managed data-driven digital campaigns end-to-end and produced executive-level reports that informed business decisions and improved campaign performance, applying structured analysis to security prioritisation.

Campaign Management Data Analysis A B Testing Reporting SEO Google Analytics Content Strategy

Social Media Specialist

Cross Singapore International Preschool

Jan 2023 - Nov 2023 (10 months)

Delivered social media campaigns on contract against defined KPIs, improving engagement and refining measurement-driven workflows used later in security reconnaissance and reporting.

Social Media Management Content Creation KPI Tracking Community Engagement Analytics Campaign Planning

Sales & Marketing Manager

Training Ground Myanmar

Jun 2019 - Apr 2020 (10 months)

Drove 13.9% revenue growth and 122% membership increase through targeted strategy and team coordination, leading cross-functional teams and client relationships relevant to scoping and stakeholder communication in security engagements.

Revenue Growth Team Leadership Client Management Sales Strategy Stakeholder Engagement