About

About

Hey, I’m ZennisKayy 👋

Final-year Information Security student at HCMC University of Science (HCMUS). I spend most of my time breaking things apart to understand how they work — binaries, protocols, cryptosystems, you name it.

This blog is where I document what I learn, explore what interests me, and occasionally rant about that one challenge that kept me up until 12 AM.


🧠 What I’m Into

My main interests orbit around the lower layers of computing — the stuff that most people would rather not think about:

  • Reverse Engineering — Stripping binaries down to their logic. Whether it’s a crackme, a packed executable, or a malware sample, I enjoy the process of reconstructing intent from assembly.
  • Cryptography — From classical ciphers to modern constructions. I find broken crypto implementations in CTFs particularly satisfying to exploit.
  • Pwn / Binary Exploitation — Stack and heap exploitation, format strings, ROP chains. Still learning, but getting there.
  • Malware Analysis — Currently diving deeper into this space. Static and dynamic analysis, understanding APT tooling, and figuring out what malware is actually doing under the hood.
  • CTF Competitions — Where most of the above gets put to the test under time pressure.

🛠️ Tools & Skills

CategoryTools / Skills
Disassembly / DecompilationIDA Pro, Ghidra, Binary Ninja
Dynamic Analysisx64dbg, WinDbg, Frida
Malware AnalysisFLARE-VM, Cutter, PEiD, pestudio
ScriptingPython, IDAPython, Ghidra Script
Exploitationpwndbg, pwntools, GDB
CryptographySageMath, CyberChef, custom scripts
DFIR / DetectionYARA, Wireshark, Sysinternals Suite

🚩 CTF

I play CTF with N3tw0rkGhosts — primarily focusing on Reverse Engineering, Crypto, and Pwn categories.

CTF is where theory meets practice. It’s frustrating, humbling, and occasionally euphoric — I wouldn’t trade it for anything.


📝 About This Blog

This isn’t a tutorial site or a polished knowledge base. It’s a personal learning log — written the way I think, with the detail level I wish I had when I was first learning.

Posts here typically cover:

  • Malware analysis write-ups and technique breakdowns
  • CTF challenge solutions (rev, crypto, pwn)
  • Tool development (scripts, automation, IDA/Ghidra plugins)
  • Deep-dives into techniques I find interesting enough to document properly

If something here helped you, that’s great. If you spot something wrong, feel free to reach out — I’d rather be corrected than confidently wrong.


📬 Contact


“The best way to understand something is to take it apart.”