DUY LE THANH

+848989-83830 · duy.lethanh@hcmut.edu.vn · thenduy.com

DEVELOPER
I am a proficient Business Operations Manager with a strong focus on achieving outcomes, possessing
notable expertise in media management and assuming leadership responsibilities. I have demonstrated
exceptional leadership capabilities while overseeing and directing media operations in North America and the
APAC region. I have a proven track record of enhancing team performance, fostering customer loyalty, and
cultivating collaborative alliances with internal and external stakeholders.

PERSONAL PROJECT
AIO HCMUT TOOLS | aio.thenduy.com Feb 2024
Python, Flask, RegEx, JavaScript
Developed a website to assist students at Ho Chi Minh University of Technology (HCMUT) in finding
and re-attending specific classes. The tool allows students to locate teacher's classes for re-studying
missed or difficult material and provides easy access to teacher contact information

Main Functions:
Data Scraping: Utilized Python to scrape data from the school's Course Registration page by using
RegEx and compare it with the Moodle (LMS) page.
Teacher Information: Scraped and displayed teacher information, including contact details, to
facilitate easy access for students.
Hosting and Filtering: Hosted the static frontend on GitHub. Implemented Flask-based APIs within
Vercel serverless functions for filtering class information.

Booking Platform March 2023

Developed a comprehensive Vehicle Booking Platform that automates the creation of new customer
accounts to leverage promotional vouchers for new users. Captured requests from various
applications using MITM (Man-in-the-Middle) techniques and utilized this data to automate account
creation through a Python-based system. Additionally, a robust website was built to manage bookings,
user registration, login, and automatic top-up functionality.

Main Functions:
Automation: Captured requests using MITM techniques and developed a Python system to
efficiently automate the creation of new customer accounts, enabling users to access new
customer vouchers.
Web Development:
Built a PHP-based website for booking management, including user registration, login, and
automatic top-up features.
Implemented a system to deduct the appropriate amount from user accounts for each order.
Created a page for tracking the status of food orders, including the latitude and longitude of
drivers.
Developed a page for displaying food items, arrival addresses, and other relevant details.
Admin Dashboard: Created an admin interface for comprehensive control over user profiles,
including options to ban, delete, or modify user credits. Managed the operational status of various
services through the platform.
Free LLM API | ai.thenduy.com Aug 2024 - Present
Python, Flask, MongoDB, Selenium, OpenAI API

Developed a tool that exploits weak security in websites offering free access to large language models
(LLMs) such as ChatGPT and Claude. The project aimed to provide a RESTful API with responses
similar to those from OpenAI.

Main Functions:

API Development: Utilized Flask to handle API calls and ensure smooth interaction with the LLMs.
Account Creation and Management:
Employed MongoDB to manage user accounts and handle cookies required by certain websites.
Developed tools for mass account creation to bypass daily usage limitations.
Integrated Selenium and OpenCV to solve captchas on websites like TikTok, enhancing
automation capabilities.
Security Bypass: Decrypted various website hashes and encryption methods to access and utilize
their APIs effectively.
Debugging and Logging: Implemented a comprehensive logging system to facilitate easy
debugging and monitoring of the API's performance.

OCR-AI | ocr.thenduy.com Jun 2024

Developed a website that allows users to upload PDF documents and images for Optical Character
Recognition (OCR) processing. The system splits the files into individual pages and sends them to
OpenAI/Google AI for text extraction. The solution is built to be scalable and user-friendly, with a
streamlined workflow for efficient text recognition.

Main Functions:
File Processing and AI Integration:
Developed functionality to receive files from users, split them into individual pages, and send
them to OpenAI/Google AI for text extraction.
Frontend and Backend Development:
Built an intuitive user interface using Streamlit.
Created a FastAPI backend to handle API calls and manage the processing workflow.
Task and Data Management:
Incorporated Redis for efficient task handling and status tracking.
Used MongoDB for managing API keys and storing OCR results.
Deployment:
Utilized Docker for containerization to ensure consistent and efficient deployment across
different environments.
Moodle Notification System | Github Aug 2024 - Present
Python, Flask, MongoDB, Discord API, Docker, Hugging Face

Developed a robust and automated notification system for Moodle courses, ensuring real-time updates
on course changes, additions, and removals. The system leverages Python, Flask, and concurrent
programming to deliver timely notifications and integrates Single Sign-On (SSO) authentication,
MongoDB for data storage, and webhooks for seamless notifications.
Main Functions:
Automated Course Monitoring: Continuously monitors Moodle courses for changes, ensuring
users are always up-to-date.
Concurrent Data Processing: Efficiently handles multiple course data retrieval and processing
tasks simultaneously using concurrent programming.
Flask Web Application: Provides a lightweight web application for basic interaction and status
monitoring.
MongoDB Integration: Ensures persistent storage and easy retrieval of historical data.
Docker Deployment: Utilized Docker for deployment on Hugging Face, allowing users without VPS
to access the system easily.

ScholarMatch | hocbongsv.online Aug 2024

ScholarMatch is a web application designed to help Vietnamese students search for available
scholarships. The platform provides a comprehensive system where students can register, log in, and
update their profiles with relevant information such as name, GPA, and certifications. The application
leverages both PHP and Python to analyze student data and match them with suitable scholarships
using advanced AI models.
Main Functions:

Frontend:
Responsive Design: Ensures a seamless user experience across devices.
Scholarship Data Display: Dynamic pages for searching and filtering scholarships. Displays AI-
analyzed data and personalized recommendations.
User Management: Registration, login, and profile updates.
Backend:
AI Integration with Multithreading:
PHP backend calls Python microservices.
Python microservices utilize multithreading to efficiently process and analyze user data.
Data is sent to OpenAI's GPT-4o-mini model for analysis.
Recommendations and insights are generated and database is updated with the results.
Database Management: MySQL manages user and scholarship data securely.

Discord Bot Sep 2020

Developed a versatile Discord bot designed to manage Spotify family plan invitations and handle key-
based access, providing users with various utility commands. The bot also includes a web API for
external interactions and automates processes for key management and country changes.

Main Functions:

Spotify Family Plan Management: Facilitated the exchange of keys for Spotify family plan
invitations, allowing users to manage their access efficiently.
Discord Bot Commands: Implemented various commands for key management, stock checking,
and user interactions.
 Discord Bot Commands: Implemented various commands for key management, stock checking,
and user interactions.
Web API: Developed a RESTful API to enable external interactions with the bot, including endpoints
for stock checking and key redemption.
Automation: Automated key management and country change processes for Spotify accounts.
Logging and Monitoring: Integrated logging and monitoring features to track bot activities and user
interactions.

DATA SCRAPER

Point Crawler | Github Mar 2024

Developed a robust web scraping and data extraction tool to gather and analyze student performance
data from multiple educational competitions, including the Ho Chi Minh City Gifted Student
Competition and the National High School Exam.

Main Functions:

Implemented advanced web scraping techniques to extract student scores and performance
metrics from competition websites.
Engineered a proxy rotation system to bypass website limitations and ensure comprehensive data
collection.
Designed and executed data cleaning and normalization processes to prepare extracted
information for analysis.

ETHICAL HACKING & VULNERABILITY RESEARCH

Kỳ thi Đánh giá năng lực ĐHQG TPHCM Sep 2023

The vulnerability was identified as a result of a flaw in the [Kỳ thi Đánh giá năng lực ĐHQG TPHCM]
system, allowing users to access the personal data of other participants. The issue involved a lack of
proper authorization checks, enabling unintended access to confidential information.

Report: https://github.com/KenKout/DGNL

Học trực tuyến - Hệ thống giáo dục HOCMAI Feb 2024

Identified a security flaw allowing free access to paid online educational resources on Hocmai, a
prominent Vietnamese e- learning platform.

Demo: https://hocmai.vercel.app/{id}

Happie.vn - Thư viện khóa học làm bánh Feb 2024

Exploited a vulnerability granting unauthorized access to paid baking course content on Happie.vn,
showcasing expertise in web application security assessment.

Demo: https://happievn.vercel.app/{id}
Moodle Feb 2024

Successfully accessed a Moodle course despite not having the necessary permissions, highlighting
potential privacy concerns and the need for enhanced security measures

STUDY4 Feb 2024

Bypassed access restrictions on STUDY4, enabling free access to educational resources and
demonstrating an understanding of platform security configurations.

chuvanbien.vn Jan 2023

Identified a security flaw granting unauthorized access to premium physics learning materials,
underscoring the importance of robust access control mechanisms.

ngoaingu24h.vn | vted.vn Jan 2023

Uncovered a vulnerability allowing large-scale account takeovers due to an unprotected API exposing
usernames. Found that many Vietnamese users had weak passwords, often using their username as
their password. This highlights the urgent need for stronger authentication measures.

EDUCATION

Ho Chi Minh City University of Technology - VNU-HCMC Aug 2023 - Present

Major in Computer Science and Engineering

ADDITIONAL INFORMATION

Technical Skills:
Programming Languages: Python, PHP
Web Development: HTML, CSS, JavaScript, CodeIgniter 4, Flask
Databases: MySQL, MongoDB
Web Scraping & Automation: Selenium, Requests, Regex
API Integration: OpenAI API, REST APIs
Containerization: Docker
System Administration: Home Datacenter Setup & Management
Languages: English
Certifications: IELTS 6.5
Awards/Activities:
3rd Place, FlagUp Innovation Challenge (ScholarMatch): Awarded for developing a scholarship
matching platform that leverages AI to connect students with relevant opportunities.