Thanh Hải Huỳnh
@thanhhihunh
I uncover critical web and AI security flaws to harden real-world systems.
VietnamWhat I'm looking for
I've independently uncovered and responsibly disclosed 25 vulnerabilities, including 9 Critical findings, in the Saigon University portal ecosystem serving more than 103,000 students.
My research exposed unauthenticated IDOR chains, account-takeover risks from plaintext credentials in URL parameters, session-token leakage, CORS misconfigurations, and write vulnerabilities affecting student records. I build Python automation for exploit validation and produce structured reports aligned with CVE conventions.
Alongside security research, I developed enterprise features at J&V Solutions using C# and ASP.NET, working through production sprints, code reviews, SVN, and REST API back-end flows. I'm applying web attack knowledge to AI security topics including prompt injection, retrieval poisoning, RAG data leakage, and guardrail bypass.
Experience
Work history, roles, and key accomplishments
Independent Security Researcher
Saigon University Portal
Jan 2025 - Present (1 year 8 months)
Discovered and responsibly disclosed 25 vulnerabilities (9 Critical) across a university portal ecosystem, including IDOR, broken authentication, and CORS misconfigurations. Built Python automation for exploit validation and produced structured technical reports following CVE conventions.
Software Developer (Part-time)
J&V Solutions
Oct 2025 - Jul 2026 (9 months)
Developed and maintained enterprise features using C# and ASP.NET, shipping across multiple production sprints. Collaborated in a team environment using SVN for version control, participating in code reviews and sprint planning.
Education
Degrees, certifications, and relevant coursework
Saigon University
Bachelor of Information Technology, Information Technology
2023 -
Pursuing a Bachelor of Information Technology with an expected graduation in 2026. Recipient of an Academic Scholarship in 2025.
PortSwigger Web Security Academy
Web Application Security Labs, Web Application Security
Completed Web Application Security Labs in 2026.
CyberJutsu Academy
Web Penetration Testing, Web Penetration Testing
2025 - 2025
Completed Web Penetration Testing training in 2025.
Tech stack
Software and tools used professionally
Availability
Location
VietnamAuthorized to work in
Skills
Interested in hiring Thanh Hải?
You can contact Thanh Hải and 90k+ other talented remote workers on Himalayas.
Message Thanh HảiGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
