Nguyen Dinh Hai
haind@ptit:~$ whoami Nguyen Dinh Hai (HaiND) haind@ptit:~$ cat role.txt Cybersecurity Teaching Assistant @ PTIT haind@ptit:~$ cat focus.txt reverse engineering · malware analysis · forensics threat hunting · web security · vulnerability research haind@ptit:~$ ./play --ctf --team PTIT [+] M*CTF 2025 ............. champion [+] CSCV 2025 .............. 2nd prize [+] Flare-On 11 12 13 ...... finisher x3 haind@ptit:~$
Whoami
I'm Hai. I mostly do reverse engineering and malware analysis, plus some digital forensics and web bug hunting. This blog is where I keep my notes.
Right now I'm a cybersecurity teaching assistant at PTIT (Posts and Telecommunications Institute of Technology). I help with security courses, some research, and training students for CTFs. Before that I was at BlueCyber for about three years, first as an intern doing RE and malware analysis, then full time on threat hunting and incident response.
In my free time I look for bugs in WordPress plugins and report them through Wordfence and Patchstack. I also play CTF with the PTIT team, usually reversing and forensics.
Vuln research
I find bugs in WordPress plugins, web applications and open-source projects, and report them through bug bounty programs such as Wordfence and Patchstack or other coordinated disclosure channels. So far that's 225 CVEs. Top 5 by CVSS below, the full list is in the CVE archive, and the advisories are listed on my CIRCL vulnerability-lookup credits.
Honors
Start reading
$ cd reverse-engineering/Reverse EngineeringMy RE series: assembly, file formats, languages, unpacking, anti-debug, Frida. $ cd malware-analysis/Malware analysisWrite-ups on malware samples and a threat hunting lab. $ cat ctf-journey.logCTF journeyPosts about the CTFs I've played. $ ls -la archives/ArchivesEvery post, by date.