Final-year Information Security student at FPT University (Ho Chi Minh City). I build and run secure cloud products and security tooling, with a focus on application security and cloud security.
| Project | What it is |
|---|---|
| ITCS: Is This Code Safe? · demo | Static analyzer that flags malware-like behavior in Python packages without running them: evidence-carrying IR, bounded data-flow tracking and an in-browser Transformer. |
| GuardScript · write-up | Serverless script-licensing and protection platform from my AWS First Cloud AI Journey 2026 internship: signed and encrypted loader protocols, RBAC, replay protection. Now running on Cloudflare. |
| BMH Cloud | Multi-tenant Linux sandboxes with a browser terminal, behavior-based abuse detection and edge WAF rules. |
| @bmhien/bot · docs | Typed Telegram Bot SDK published on npm. |
| Iris Discord AI | Multi-provider AI Discord bot; AI-triggered moderation is permission-checked so a prompt cannot escalate privileges. |
Python · TypeScript / Node.js · AWS (Lambda, DynamoDB, S3, CloudFront, IAM) · Cloudflare (Workers, D1, R2, WAF) · Burp Suite · Nmap · PyTorch
Playing with hunt3r_b0un1y, #42 in Vietnam on CTFtime (2025).