Hello! I’m Dat2Phit, a final-year IT student at HCMUS, majoring in Software Engineering — though I’m way more into web security. I’m also the president of the Computer Security Club - University of Science, VNU-HCM.

My main focus is web exploitation. I actively participate in CTF competitions with DeadSec and my club’s team, blackpinker.

I primarily train on DreamHack, the challenges there are super fun and creative. You can check out my profile here.

Right now, I’m part of Unit 515 at OPSWAT, a team of researchers and pentesters.

CVEs

• CVE-2024-53900 (9.1 Critical): Mongoose (Technical Blog)
• CVE-2025-23061 (9.0 Critical): Mongoose
• CVE-2025-0465 (7.3 High): AquilaCMS
• CVE-2025-2875 (7.5 High): Schneider Electric (Wall of thanks)
• CVE-2025-3112 (6.5 Medium): Schneider Electric
• CVE-2025-3116 (6.5 Medium): Schneider Electric
• CVE-2025-3117 (5.4 Medium): Schneider Electric
• CVE-2025-3898 (6.5 Medium): Schneider Electric
• CVE-2025-3899 (5.4 Medium): Schneider Electric
• CVE-2025-3905 (5.4 Medium): Schneider Electric

Achievements

1^st place as blackpinker in Wannagame Championship 2024

2^nd place (Vietnamese) as blackpinker in ISITDTU CTF 2024 qual

3^rd place as HCMUS.Veritas in ASCIS 2024 Final (Jeo)

3^rd place (Vietnamese) as blackpinker in TetCTF 2024

3^rd place (Vietnamese) as blackpinker in Wannagame Championship 2023

3^rd place as HCMUS.darknstormy in ASCIS qualification 2023

2^nd place as !bl4ckp1nk3r in HCMUS-CTF 2023

7^th place as blackpinker in 1337UP LIVE CTF

3^rd place in Cookie Arena CTF Season 2

2^nd place as HCMUSLastHope in Wannagame Championship 2022

---