Trần Hoàng Phúc Quân

Trần Hoàng Phúc Quân

Offensive Security Trainee @ Viettel Digital Talent 2026
Final-year Software Engineering Student — HCMUTE
Email • GitHub • LinkedIn • Blog
I am a final-year Software Engineering student at Ho Chi Minh City University of Technology and Engineering (HCMUTE) and an Offensive Security Trainee at Viettel Digital Talent 2026. My primary research focuses on Vulnerability Research, Exploit Development, Cloud & Kubernetes Security, and Red Team Operations. I specialize in modeling complex attack paths across Web, Mobile, Cloud, and AI environments to discover original vulnerabilities and construct defense-oriented security controls.
2 CVEs
CVE-2026-61794 & 61795 (Capsule)
Top 1%
Global Rank on TryHackMe
Top 30
Vietnam CTFTime Rank (HISC)
70%
PortSwigger Academy Completed

Vulnerability Research & Disclosures

Capsule Open-Source Vulnerabilities Research

2026
Responsible Vulnerability Disclosure
  • CVE-2026-61794 & CVE-2026-61795: Discovered and disclosed original security vulnerabilities in the open-source Capsule project.
  • GHSA-68cj-mvg9-rgm2: Published Security Advisory, awaiting formal CVE ID assignment.

Work Experience & Training

Cyber Security Intern

May 2026 — Present
Viettel Digital Talent 2026 | Viettel Group, Vietnam
  • Underwent intensive training in offensive security, reconnaissance, vulnerability scanning, web penetration testing, privilege escalation, post-exploitation, purple teaming, mobile security, cloud security, and AI security.
  • Researched Kubernetes attack vectors and privilege escalation chains (from initial workload foothold to full cluster-admin takeover via RBAC, ServiceAccounts, Secrets, and privileged pods).
  • Authored structured technical reports, vulnerability research blog posts, and reusable security manifests.

Security Club Member

Jan 2026 — Present
HISC (Information Security Club) — HCMUTE
  • Secured 1st place in the club's internal CTF qualification round.
  • Competed in international CTF competitions; achieved Top 30 ranking in Vietnam on CTFTime (ID: 398066).
  • Won a Consolation Prize at NET CHALLENGE 2026 as part of team Eren_SanBangTatCa (Faculty of Computer Networks & Communications, UIT).

Freelance Software Tester

Mar 2025 — Oct 2025
Test IO | Remote
  • Performed exploratory testing on web and mobile applications to identify functional, security, and logical vulnerabilities.
  • Reproduced bugs and submitted structured reports with clear reproduction steps and PoC evidence.

Featured Security Projects

Kubernetes Privilege Escalation Research Lab

May 2026 — Jul 2026
Tech Stack: Kubernetes, kubeadm, Docker, Linux, Falco, MITRE ATT&CK
  • Designed a controlled multi-namespace Kubernetes lab modeling a full compromise chain from web RCE to cluster-admin escalation and node takeover.
  • Demonstrated offensive techniques including RBAC abuse, Secret theft, ServiceAccount impersonation, privileged pod & hostPath abuse, and container escape.
  • Mapped offensive findings to defensive controls via Falco runtime detection, K8s audit logging, and Pod Security Admission policies.

AI-Assisted Static Application Security Testing (SAST) Tool

Dec 2025 — Apr 2026
Tech Stack: Python, Tree-sitter (AST), Google Gemini API, Docker
  • Developed a SAST tool to detect OWASP Top 10 vulnerabilities across Python, JavaScript, Java, and PHP using AST Parsing (Tree-sitter).
  • Implemented source-to-sink taint tracking and cross-file function call analysis for Python data flow tracing.
  • Integrated Google Gemini API to assist in reviewing findings and generating remediation suggestions.

Certifications & Technical Skills

Industry Certifications

2025 — 2026
  • Certified Cybersecurity Educator Professional — Red Team Leaders (Apr 2026)
  • Google Cybersecurity Professional Certificate — Google/Coursera (Credential ID: HJS6ZHF49I9E) (Apr 2026)
  • TOEIC 645 (Listening & Reading) — IIG Vietnam (Nov 2025)

Technical Core Competencies

Skills
  • Offensive Security: Web Pentesting, Mobile Pentesting, K8s & Cloud Security, Windows & Linux PrivEsc, Active Directory.
  • Security Tools: Burp Suite, Nmap, ffuf, SQLMap, Metasploit, John the Ripper, Falco.
  • Programming Languages: Python (Automation & Exploits), JavaScript, Java, Bash, C++.

Education

Bachelor of Software Engineering

Sep 2023 — Sep 2027
Ho Chi Minh City University of Technology and Engineering (HCMUTE) | GPA: 3.2 / 4.0

Relevant Coursework: Operating Systems, Computer Networks, Computer Architecture, Web Development, Object-Oriented Programming.