Cybersecurity reports
Thirteen pentest and CTF reports written as part of my studies, on legal training platforms. Each report follows a complete methodology: reconnaissance, enumeration, exploitation, privilege escalation, then remediation recommendations. The reports themselves are written in French.
VulnHub 5 machines compromised
-
SQL injection on Joomla 3.4.3 (CVE-2015-7297), credential extraction, pivoting between users and privilege escalation to root.
-
CTF fully solved, 8 flags out of 8: service enumeration, anonymous FTP, steganography and remote shells.
-
Compromise of a WordPress site, then system privilege escalation through misconfigured permissions.
-
Web enumeration, exploitation of an insecure file upload and privilege escalation through a kernel vulnerability (CVE-2017-16995).
-
Complete chain from an SQL injection to system access, with an analysis of remediations (prepared statements, modern hashing).
TryHackMe 7 modules completed
-
Scan types, NSE scripts and firewall evasion techniques.
-
Integrating security into the DevOps cycle and CI/CD pipelines.
-
Intercepting, analysing and manipulating web application traffic.
-
Getting started with the exploitation framework: modules, payloads and post-exploitation.
-
Python programming basics applied to writing security tools.
-
Software development life cycle and integrating security at every stage.
-
Automating the detection and exploitation of SQL injections.
Root-Me 10 challenges, 5 categories
-
Ten challenges solved in App-Script, App-System, Cracking, Programming and Realist (PATH hijacking, buffer overflow, TCP network programming, OCR). Public profile.