I am a security researcher with a particular appeal for application security. With a background in offensive security I am at my happiest when breaking through all kinds of things.
Application Security Researcher, SonarSource
Aug, 2022 - Present
Researching and specifying security rules to feed the SAST engines of Sonar products.
Research the security of languages and framework to identify their weak spots and attack surface.
Design rules detection logics and track results precision.
Develop tools and proof of concepts to illustrate vulnerabilities.
Security expert, Synacktiv
Sep, 2015 - Jul, 20226 years 10 months
Penetration tester and offensive security auditor position. I was assigned a variety of missions and goals from simple web application intrusions to complex crypto protocols auditing. Other typical missions included adversary simulation, OS hardening assessment, and white-box vulnerability research. I also designed and gave training about web security and RedTeaming in Linux environment.
Pentest team research and development lead.
Offensive security tooling.
Applied cryptography specialist.
ANJ audit go-to guy.
Independent contractor, Rouen University
Jan, 2016 - Jan, 20204 years
Web application security course for last year Master degree students.
Security analyst intern, Intrinsec
Mar, 2015 - Sep, 20156 months
Security analyst inside Intrinsec CERT. Research and development around malware analysis and threat intelligence.
Honeypot development, deployment, and data analysis.
Malware analysis.
Pentesting
Vulnerability research
that kind of thing (but not that much reversing / binary exploitation)
Whitebox audit
SAST
CI/CD
IAC
all
Research mindset
Curiosity
Tenacity
Publication
Reporting
Team working
Popularization
Information System Security, Master, University of Rouen
Sep, 2013 - Sep, 2015
Cryptography
Web Security
Binary exploitation
etc
Computer Sciences, Bachelor, University of Rouen
Sep, 2010 - Sep, 2013
Web development
Algorithms
etc
CVE-2022-31813: Forwarding addresses is hard,
Published on: Mar 30, 2022
Write-up about CVE-2022-31813, which exploits hop-by-hop headers handling in mod_proxy. Presentation of theoretical and real world impacts.
elFinder: The story of a repwning,
Published on: Mar 30, 2022
Write-up about CVE-2020-26960 which bypasses a previous path traversal patch.
Is it post quantum time yet?,
Published on: Sep 08, 2021
High level overview of post-quantum cryptography focusing on transition mechanisms.
Kubernetes namespaces isolation - what it is, what it isn't, life, universe and everything,
Published on: Mar 27, 2021
Presentation of kubernetes namespaces isolation, its limits, and some attack scenarios.
Don't fear the bark, ts_rewrite to dodge the mark,
Published on: Nov 30, 2020
Bypassing F5 Big IP WAF SQL injection protection using the full text search feature of PostreSQL.
Pwning an outdated Kibana with not so sad vulnerabilities,
Published on: Dec 12, 2019
Writeup about combining a LFI and a prototype pollution vulnerabilities to achieve remote code execution on Kibana.
Attaquer un réseau Windows avec Responder, MISC Magazine
Published on: Apr 22, 2016
A short introduction on exploiting the multicast and broadcast name resolution mechanisms to start compromising a Windows Active Directory domain.
AppSeco and Juliet C# (lightning talk), Hexacon 2023
Published on: undefined
A lightning talk about the Juliet C# project and its use for SAST engine benchmarking.
Code Obfuscation 10**2+(2*a+3)%2, JSecIN'18
Published on: undefined
An introduction talk to code obfuscation focusing on classical technics like CFG flattening or array indexing.
CVE-2022-31813,
Published on: undefined
X-Forwarded-* header creation bypass through hop-by-hop in Apache HTTPD.
CVE-2022-26960,
Published on: undefined
Directory traversal in std42 elFinder through 2.1.60.
Livebox 3 - Weak password reset procedure,
Published on: undefined
Password reset vulnerability on the Livebox 3 device from Orange.
CVE-2019-1591,
Published on: undefined
Cisco Nexus 9000 Series Shell Escape Vulnerability
CVE-2019-1588,
Published on: undefined
Cisco Nexus 9000 Series Arbitrary File Read Vulnerability
CYBONET – PineApp Mail Secure 5.1: Multiple vulnerabilities,
Published on: undefined
Code execution, SQL injection, unrestricted upload and restricted shell escape in PineApp Mail Secure email filtering software.
Hobbies
Sports