Duy Phan
Researcher at Dataflow Security
Italy
Summary
👤
Senior🎓
Top SchoolDuy Phan is a vulnerability researcher with a decade of experience focused on Windows kernel local privilege escalation and broader firmware and IoT bug hunting. Currently at Dataflow Security, he specializes in exploiting Windows kernel flaws and developing tailored fuzzers to uncover hard-to-find vulnerabilities. Previously at STARLabs he combined custom fuzzing, reverse engineering, and exploit development to surface bugs across diverse software and embedded devices. Based in Italy, he holds a BE in Computer Engineering and completed a cybersecurity internship at Nanyang Technological University. His public work, including tooling and proof-of-concept code on GitHub, reflects a pragmatic researcher who bridges automated discovery with hands-on exploit craft. An understated strength is his ability to adapt fuzzing approaches to niche targets, turning noisy test results into actionable vulnerability findings.
10 years of coding experience
5 years of employment as a software developer
Internship, Cyber Security Labs, Internship, Cyber Security Labs at Nanyang Technological UniversityBachelor of Engineering - BE, Computer Engineering, Bachelor of Engineering - BE, Computer Engineering at University of Information Technology
Github Skills (137)
security10
static-analysis10
unix10
capstone10
unicorn10
x86-6410
glibc10
sparc10
powerpc10
s390x10
cpu10
radare210
x8610
libc10
pdf10
Programming languages (12)
Github contributions (5)
zuypt/hihi-fuzzer
Oct 2018 - Jun 2022
Contributions:20 commits, 1 branch in 3 years 8 months
zuypt/blib
May 2020 - Feb 2022
Modular fuzzing library
Contributions:46 commits, 1 PR, 36 pushes in 1 year 9 months
securitymodularfuzzing
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.