Skip to content
View Khanh1916's full-sized avatar
🏠
Working from home
🏠
Working from home

Achievements

Achievement: Pull Shark

Achievements

Achievement: Pull Shark

Block or report Khanh1916

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Khanh1916/README.md

Hi, I'm Nguyen Nam Khanh

a.k.a. Cao Thanh Lam · @Khanh1916
Cybersecurity researcher

Email Facebook

About me

I work on both sides of security, and on keeping data private while learning from it:

  • Offensive security: web and database exploitation, pentest walkthroughs, and intentionally vulnerable CTF labs.
  • Defensive security: system hardening, CIS-style compliance checks, and configuration drift detection across Linux, Windows, Cisco, and Juniper.
  • Privacy-preserving ML: federated learning, differential privacy, and secure aggregation for IoT intrusion detection.
  • Backend in Go: secure REST APIs and web apps with authentication, authorization, and rate limiting.

Tech stack

Languages
Go Python Bash PowerShell PHP SQL

Infrastructure & DevSecOps
Linux Docker Kubernetes GitHub Actions

Databases
PostgreSQL MySQL Oracle

Machine learning
PyTorch TensorFlow Flower Opacus scikit-learn pandas NumPy

Featured projects

Project What it is Stack
oracle-sec-lab Intentionally vulnerable Oracle-backed university portal with 3 CTF challenges (SQL injection, logic flaw, supply-chain poisoning). Runs on a VM, Docker Compose, or Kubernetes. PHP · Oracle · Docker
secbaseline 131 CIS-style hardening controls, compliance reports, and drift detection for Linux, Windows, Cisco, and Juniper in one Go CLI. Go · Bash · PowerShell
PP-FedData Privacy-preserving synthetic data for federated intrusion detection on IoT/MQTT gateways, using differential privacy and secure aggregation. Python · PyTorch · Flower
FedGAGAN-Reproduction Independent reproduction of FedGAGAN: federated learning with a GA-optimized WGAN-GP for IoT IDS data augmentation. Python · TensorFlow
greenlight Movie catalog REST API with token authentication, permissions, filtering, and rate limiting. Go · PostgreSQL
snippetbox Secure code-snippet sharing web app with user accounts, sessions, and server-rendered pages. Go · MySQL

Support my work

If my labs or tools helped you learn or build something, you can support me. Thank you!

  • International: GitHub Sponsors is preferred. Ko-fi also works if you'd rather pay by card or PayPal without a GitHub account.
  • Vietnam: MoMo is preferred.

GitHub Sponsors Ko-fi MoMo

Pinned Loading

  1. oracle-sec-lab oracle-sec-lab Public

    An intentionally vulnerable Oracle-backed university portal for database security education, penetration testing practice, and CTF challenges.

    PHP 1

  2. PP-FedData PP-FedData Public

    Privacy-preserving synthetic data for federated learning: IoT/MQTT gateways build a synthetic dataset under differential privacy and secure aggregation (Flower SecAgg+) to train an intrusion-detect…

    Python 2

  3. secbaseline secbaseline Public

    Security hardening checks, compliance reports and drift detection for Linux, Windows, Cisco and Juniper. 131 CIS-style controls, one Go CLI, offline network audits, fleet dashboard.

    Shell

  4. greenlight greenlight Public

    A Go and PostgreSQL REST API for movie catalog management, with token authentication, permissions, filtering, and rate limiting.

    Go 2

  5. snippetbox snippetbox Public

    A secure Go and MySQL web app for creating and sharing code snippets, with user accounts, sessions, and server-rendered pages.

    Go

  6. FedGAGAN-Reproduction FedGAGAN-Reproduction Public

    Independent reproduction of FedGAGAN (Horizontal FL + GA-optimized WGAN-GP for IoT IDS data augmentation).

    Python 1