Nguyen Hoang Thanh Phong

I am an Information Security student at FPT University, currently focused on developing my skills in Penetration Testing and Red Teaming.

My primary area of interest is Web Application Security, where I build practical experience through hands-on labs and platforms such as PortSwigger Web Security Academy, Hack The Box, and TryHackMe. My current areas of study include SQL Injection, Cross-Site Scripting (XSS), CSRF, SSRF, Authentication & Authorization vulnerabilities, IDOR, and other common web exploitation techniques.

Beyond web penetration testing, I am expanding my knowledge of Network Security, Linux, Active Directory, Vulnerability Assessment, and Security Tooling, while developing practical skills in vulnerability analysis, exploitation, and professional security reporting.

My current goal is to become a professional Penetration Tester, gradually advancing toward Red Team Operations and contributing to security assessments that help organizations identify, understand, and improve their resilience against real-world threats.