Kim Thanh Xuân — Systems · Security

I build systems to understand what happens beneath the abstraction — how software executes, where assumptions break, and how those systems can be reasoned about more precisely. Lately I have been working on systems programming, compiler engineering, security research, and low-level development. If you’re interested to see what I’m currently building, please visit my GitHub profile.

Projects

A selection of independent systems, compiler infrastructure, and research projects I am actively building:

NAUX

An experimental programming language, compiler, runtime, and native-code laboratory implemented in Rust. Covers the entire pipeline from .nx source code to AST lowering, bytecode VM, Stack IR, SSA construction, CFG analysis, proof-gated optimization rewrites, and typed trace JIT / x86-64 machine code generation.

C3 Research Private

Counterfactual Claim-Carrying Compilation: an incubating research framework in Rust exploring whether a compiler can emit an independently checkable, typed artifact proving that a transformation produced an observed performance difference while preserving program semantics. Implements verifier gates, bounded x86-64 residency dataflow checks, and byte-bound Rocq certificates.

VoidPhantom Phát triển nội bộ

A Windows OS internals research platform written in Rust. Explores low-level process architecture (PEB/LDR traversal, thread suspension, section mapping), direct and indirect x64 syscall resolution from ntdll.dll, Vectored Exception Handling (VEH), memory encryption at rest (XTEA block cipher), and Windows telemetry / ETW & AMSI inspection mechanisms.

Linux

I am a Linux user and enthusiast. I use Linux as my daily operating environment and primary engineering platform. Working close to POSIX interfaces, standard Unix utilities, process management, and the kernel boundary is what sparked my interest in systems programming.

As I became more invested in low-level engineering, I also started appreciating the command line. Right now I can’t imagine working without a terminal, tmux, Git, GDB, and proper tab completion.

My Linux experience helps me deeply understand system calls, virtual memory, file descriptors, signals, and executable formats (ELF).

Experience & Milestones

Independent Systems Engineering 2024 — Present

Independent research and development across compiler construction (NAUX, C3), systems security tooling, reverse engineering, and low-level systems programming in C and Rust.

Security Research & Analysis 2024 — Present

Vulnerability research, binary analysis, network protocol auditing, and systems security experimentation through controlled lab setups and CTF challenges.