MinhCyber

Trịnh Quang Minh

Information Security Student — Web Pentesting & AI Security Research

Web exploitationCTFAI-assisted pentesting

Second-year Information Security student in UIT's Talent Program, focused on web application penetration testing. I train through CTFs and HackTheBox, research AI-assisted pentesting, and build offensive tooling in Python.

HTB · Senior Web Pen TesterpicoCTF 2025 · 3rd Place

Academic

GPA 8.66/10 · Honors UIT

Certification

HTB Senior Web Pen Tester

CTF

🥉 picoCTF 2025 (nội bộ UIT)

English

IELTS 7.0

Experience

  1. Researcher — AI Web PentestingUniversity of Information Technology (UIT) · 09/2025 – Present

    • Building an LLM agent harness for automated web pentesting (RAG + tool-calling).
    • Designed the data layer that stores and retrieves attack context and findings.
  2. Network Security Project — HTTP Request SmugglingUniversity of Information Technology (UIT) · 04/2026 – 06/2026

    • Reimplemented the HDHunter approach: gray-box differential testing to detect request smuggling across proxies.
    • Compared response bodies by SHA-256 hash instead of length.
    • Classified coverage-fingerprint collisions by root cause (structural vs numeric-value divergence).
  3. Research Intern — AI PentestingUIT – InSecLab · 06/2025 – 10/2025

    • Helped design an AI-based pentesting system with multi-node scanning.
    • Built the UI for driving the scanning tools.

Technical Skills

A comprehensive overview of my technical expertise in cybersecurity and development.

Web Security

SQL Injection
White-box Code Review
HTTP Request Smuggling

Security Tools

Burp Suite
ffuf
Docker

Programming

Python
JavaScript

Achievements & Badges

HACKTHEBOX · Completed

HTB Academy — Senior Web Penetration Tester

HACKTHEBOX · In Progress

HTB Academy — Web Penetration Tester

OTHER · UIT internal round

3rd place — picoCTF 2025 — 3rd Place (Team)

British Council / IDP

IELTS Academic 7.0 (Reading 8.0, Listening 8.0)

Get In Touch

Interested in collaborating or have questions? Feel free to reach out through any of these channels.

Send me an email

The best way to reach me for professional inquiries

tqminhhcm@gmail.com