Suphawith Phusanbai

A self-taught penetration tester who likes to hunt bugs alone!

Hunting vulnerabilities in Fortune 500 companies and gaming softwares.

About Me

I focus on desktop application security, Windows vulnerability research, and reverse engineering. I usually perform penetration testing for Tier 1 banks in Thailand, with additional hands-on experience in AI and agentic penetration testing. I also enjoy adversary simulation and developing custom malware for red team operations! I also enjoy weight lifting!

Curiosity drives everything I do. I usually start with questioning the issue, making an assumption, finding the root cause, articulating attack possibilities, and then exploiting it. The least favorite thing for me is doing repetitive tasks such as compliance pentesting checklists.

Penetration TestingCVE ResearchBug BountyOpen Source
GitBook Blog

Read My Security Research Blog

From vulnerability discovery to exploitation — practical write-ups based on real-world targets.

Corporation & Government

Open Source Software

These are OSS maintainers I reported vulnerabilities to and communicated with through GitHub issues and email.

Public Advisories & Exploits

Achievements

Women Thailand Cyber Top Talent 2024 Creator

Web App Category (Junior & Open Challenge Labs)

Lab Creator