From hunting flaws to building applications — a selection of my work.
Explore the projects graph
A 3-person CTF — fully compromising a vulnerable VM up to root through at least two distinct paths, with no starting hint at all.

Exploiting a series of vulnerable SUID binaries on Linux — reverse engineering, buffer overflows and control-flow hijacking for privilege escalation.

A Linux exploitation CTF — a chain of vulnerabilities (SUID scripts, cron jobs, race conditions, format strings) exploited for privilege escalation, level after level.

Building a Kubernetes infrastructure from scratch with K3s, Vagrant and Argo CD — automated provisioning and continuous deployment in GitOps.

A C reimplementation of the Unix nm utility — full parsing of the ELF binary format to list an object's symbols, just like the real command.

A full web application built around a real-time Pong game — SPA, backend, authentication and real-time communication, with security considered by design.

A process manager in Python (supervisor-style) — starting, monitoring and automatically restarting processes driven by a YAML configuration file.

My ongoing offensive practice — bug bounty (including a flaw rewarded by the Google VRP), CTF platforms and training on Hack The Box and TryHackMe.

A personal-motivation web app (Django + Vue) running in production on Google Cloud — a full-stack project designed and deployed end to end.

The site you're reading — built with VitePress, Vue and Tailwind CSS, with a custom theme and a graph visualisation of projects and their technologies.