Blog-Cyber-Security/profile.html at main · thewindghost/Blog-Cyber-Security · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
<!DOCTYPE html>
<html lang="en">
   <head>
      <meta charset="UTF-8" />
      <link rel="icon" href="/images/favicon.ico" />
      <title>The Wind Ghost Profile</title>
      <link rel="stylesheet" href="/style/profile.css" />
   </head>
   <body>
      <canvas id="bg-canvas"></canvas>
      <!--Header-->
      <header class="header">
         <nav class="nav">
            <a href="/">Back Home</a>
            <a href="/profile.html">Profile</a>
            <a href="/images/cv-longtruong.pdf" target="_blank">Resume</a>
            <a href="mailto:longbinhquoitay8@gmail.com">Contact</a>
            <a href="https://www.linkedin.com/in/thewindghost" target="_blank">LinkedIn</a>
            <a href="https://github.com/thewindghost" target="_blank">GitHub</a>
         </nav>
      </header>
      <!--Main Layout-->
      <main class="main-container">
         <!--Sidebar Left: Avatar + Info-->
         <aside class="sidebar">
            <img src="/images/avatar.jpg" alt="Avatar" class="avatar">
            <h2>The Wind Ghost</h2>
            <p class="role">Security Researcher  Bug Bounty Hunter</p>
            <p class="details">
               Focus: XSS, Logic Bug Flaws, SSRF, HHI<br>
               Started Bug Bounty: 20/04/2024<br>
               CVE-2025-23001 &bull; CVE-2025-29419<br>
               Young Security Research
            </p>
         </aside>
         <!--Main Content-->
         <section class="content">
            <h1>Overview and Achievements</h1>
            <p>I am a <strong>Young Researcher</strong> passionate about bug bounty and have achieved <strong>First CVE</strong> at the age of 18.</p>
            <p>I focus on manual exploitation and like high logic vulnerabilities. I used to be a member of <a href="https://codetoanbug.com">CodeToanBug</a> and contributed to building labs about web exploitation.</p>
            <p>I pursue a deep bug bounty approach that is less susceptible to automation tools. I also regularly report HTML Injection, JWT Confusion, and security configuration errors such as host header injection leading to password reset
               poisoning.
            </p>
            <p><strong> Bug Bounty I Have: </strong></p>
            <p>
               - Cache Poisoning Variant With SSRF-Induced<br>
               - Host Header Injection Reset Password Poisoning - Advance Technical<br>
               - Open Redirect Variant With SSRF-Induced<br>
               - Forced File Download<br>
               - Idor Username Login-Admin<br>
               - Session Token In Url<br>
               - Timing Attack(Open Source - Java)<br>
               - XSS Steal Cookie + XSS Low-Risk<br>
               - HTML Injection + Iframe Injection<br>
               - Unauthenticated Cache Purging<br>
               - External Service Interaction
            </p>
            <p><strong>Corporate Projects And Personal Projects</strong></p>
            <p>
               - <strong>Corporate Project Pentest<br></strong>
                  + File Upload Attack Impact Remote-Code-Execution, XSS, Open Redirect<br>
                  + Information Disclosure Old-Version Have POC Remote-Code-Execution Exploit Success<br>
                  + XSS Steal Cookie<br>
                  + XSS Via Prototype Pollution<br>
                  + Open Redirect Impact Leak Session Token In Url<br>
               - <strong>Personal Projects<br></strong>
                  + <a href="https://github.com/thewindghost/web-vulnerability">Server-Side Exploit - Vulnerabilities Web</a><br>
                  + <a href="https://github.com/thewindghost/Full_server_side">Vulnerabilities Labs CTF</a><br>
                  + Security Researcher Blog Automate article posting with auto-converted md files to html (Finished But Need Waiting For Published)
            </p>
            <p>Goal: On a journey to master cybersecurity and contribute to the growth of the Vietnamese infosec community.
            </p>
         </section>
      </main>
      <!--Footer-->
      <footer class="footer">
         <p>© 2025 <a href="https://github.com/thewindghost">TheWindGhost</a> <img src="https://upload.wikimedia.org/wikipedia/commons/2/21/Flag_of_Vietnam.svg" alt="🇻🇳" width="30" height="25" style="vertical-align: middle;" />. All rights reserved.</p>
         <p>Focused on Bug Bounty, CVEs & Cybersecurity Research.</p>
      </footer>
      <!-- Script for background animation from CodePen -->
      <script src="/script/components-index.js"></script>
      <script src="/script/script-profile.js"></script>
   </body>
</html>