A selection of academic, security & CTF work - most reports are in French.
Surveyed low-level threats (UEFI bootkits, Rowhammer/Spectre, fault injection, DMA/JTAG, side channels) from x86/x64 to embedded ARM/RISC-V, compared hardware defenses (Secure Boot, TPM 2.0, TrustZone, RISC-V PMP, Secure Elements) with a critical look at TPM 2.0 (TPM-FAIL, CVE-2023-1017, bus interception, TOCTOU), and proposed a hybrid Secure Element + enclave architecture for constrained embedded systems.
Exploited vulnerable Set-UID binaries via stack-based buffer overflows and environment-variable attacks, and examined the stack-protection mechanisms meant to stop them (SEED labs).
Built threat-detection rules, custom dashboards, and security analytics on the IBM QRadar SIEM platform, as part of an academic SOC project.
Deployed a multi-level honeypot infrastructure on the T-Pot platform (Dionaea, Cowrie, Pentbox) and analyzed real-world attacks - EternalBlue exploitation and SSH brute-force campaigns - through Kibana dashboards. Built a high-interaction SSH honeypot with auditd/rsyslog logging for threat intelligence.
Deployed a 3-tier application (Nginx, Flask, MySQL) meshed with Istio - HTTP/HTTPS gateway, URI-based VirtualService routing, persistent volume - and secured the cluster: strict mTLS between services, HTTPS ingress, least-privilege RBAC, Kubernetes secrets with no hard-coded credentials, hardened images (Docker Scout), Kiali validation.
Configured and tested IPsec VPN tunnels, covering key exchange, encryption, and the tunnel/transport security architecture; documented in a technical presentation.
Step-by-step write-ups of machine compromises - enumeration, exploitation, and privilege escalation to root - plus ongoing offensive & defensive training on HTB Academy.
Undergraduate projects in C and Java: data-structure & algorithm implementations, low-level systems and network programming, and web fundamentals.