Diplomas#
École 2600
Master's Degree - Expert in Data, Network & System Security
- Only available through work-study programs.
- I conduct motivation and technical interviews for new admissions.
- Master's level (5 years of higher education - RNCP38951).
- SecNumEdu label (Ref. 25-012).
- CTF: academic team.
EFREI Paris
Bachelor's Degree - Cybersecurity & Ethical Hacking
- Graduated with High Honors ("Très bien").
- 3rd year work-study.
- Active member of the WEI student association.
- CTF.
3iL Engineering School
Bachelor's Degree - Network & Systems Architect
- Double degree with EFREI Paris (Cybersecurity & Ethical Hacking).
- Graduated with High Honors ("Très bien").
List of all the challenges, labs, boxes, etc., that I have completed, as well as conferences and trainings I have attended:
HackTheBox#
Insane
Hard
Medium
Easy
Very Easy
Some images do not link to the HTB result pages as they are boxes/Sherlocks only available on the HackTheBox Enterprise platform (which does not allow for shareable links).
DFIR / SOC54
Malware Analysis3
Cloud3
Threat Intelligence3
Box#
Linux13
Windows3
HackTheBox Academy#
HackTheBox CTF#
2025#
2024#
Academic CTF team#
Active member in:
- 2024:
- Country place: 5
- Overall rating place: 168 with 214,913 pts
- 2025:
- Country place 9
- Overall rating place: 300 with 191,739 pts
https://ctftime.org/team/200877
RootMe#
Root-Me
Jaybird1291
Score
3455
pts
Rank
#2917
Solved
150/ 608
Progress
24.7%
Compromises
0
CategoriesUpdated 2026-05-24
Forensic
39 / 48
Deleted file
Validated · 5 pts
Capture this
Validated · 15 pts
Command & Control - level 2
Validated · 15 pts
MasterKee
Validated · 15 pts
Oh My Grub
Validated · 15 pts
Docker layers
Validated · 20 pts
ICMP exfiltration
Validated · 20 pts
Windows - LDAP User KerbeRoastable
Validated · 20 pts
Windows - NTDS Secret extraction
Validated · 20 pts
Logs analysis - web attack
Validated · 25 pts
Heist of the century
Not validated · 25 pts
Command & Control - level 5
Validated · 25 pts
Supply chain attack - Docker
Validated · 25 pts
Find the cat
Validated · 25 pts
Ugly Duckling
Validated · 25 pts
Windows - LDAP User ASRepRoastable
Validated · 25 pts
Active Directory - GPO
Validated · 30 pts
Command & Control - level 3
Validated · 30 pts
DNS exfiltration
Validated · 30 pts
Open My Vault
Validated · 30 pts
Trusted
Validated · 30 pts
Web3 - Put on your mask - Step 1
Validated · 30 pts
C2 Mythic
Validated · 35 pts
Command & Control - level 4
Validated · 35 pts
Job interview
Validated · 35 pts
Homemade keylogger
Validated · 35 pts
macOS - Keychain
Validated · 35 pts
Malicious Word macro
Validated · 35 pts
Ransomware Android
Validated · 35 pts
Supply chain attack - Python
Validated · 35 pts
Air-gap exfiltration
Validated · 40 pts
iOS - Introduction
Validated · 40 pts
The Artist
Validated · 40 pts
Multi-devices
Validated · 45 pts
Command & Control - level 6
Validated · 50 pts
Find me
Validated · 50 pts
Rootkit - Cold case
Validated · 50 pts
Second job interview
Validated · 50 pts
Web3 - Put on your mask - Step 2
Validated · 50 pts
Find me again
Validated · 55 pts
Find me back
Not validated · 55 pts
Find me on Android
Not validated · 55 pts
Zeus Bot
Not validated · 60 pts
Invocation
Not validated · 65 pts
Try again
Not validated · 70 pts
The Lost Case - Mobile Investigation
Not validated · 80 pts
Remote Support
Not validated · 90 pts
Try again 2
Not validated · 110 pts
Network
34 / 35
FTP - authentication
Validated · 5 pts
TELNET - authentication
Validated · 5 pts
ETHERNET - frame
Validated · 10 pts
Kerberos - Authentication
Validated · 10 pts
NTLM - Authentication
Validated · 10 pts
Twitter authentication
Validated · 15 pts
Bluetooth - Unknown file
Validated · 15 pts
CISCO - password
Validated · 15 pts
DNS - zone transfert
Validated · 15 pts
IP - Time To Live
Validated · 15 pts
LDAP - null bind
Validated · 15 pts
OSPF - Authentication
Validated · 15 pts
POP - APOP
Validated · 15 pts
RF - AM Transmission
Validated · 15 pts
Data extraction
Validated · 20 pts
RF - FM Transmission
Validated · 20 pts
RF - Key Fixed Code
Validated · 20 pts
SIP - authentication
Validated · 20 pts
ETHERNET - Patched transmission
Validated · 25 pts
Global System Traffic for Mobile communication
Validated · 25 pts
HTTP - DNS Rebinding
Validated · 30 pts
SSL - HTTP exchange
Validated · 30 pts
Netfilter - common mistakes
Validated · 35 pts
SNMP - Authentification
Validated · 35 pts
Wired Equivalent Privacy
Validated · 35 pts
ICMP payload
Validated · 40 pts
Analog video
Validated · 40 pts
ARP Spoofing - Active listening
Validated · 45 pts
XMPP - authentication
Validated · 45 pts
RF - Satellite transmission
Validated · 50 pts
WPA2 - Enterprise
Validated · 50 pts
ARP Spoofing - The man in the middle
Validated · 55 pts
RF - L Band
Validated · 55 pts
RIPv1 - no authentication
Not validated · 55 pts
WPA3 - SAE
Validated · 90 pts
Steganography
22 / 24
EXIF - Metadata
Validated · 5 pts
Dot and next line
Validated · 10 pts
Steganomobile
Validated · 10 pts
Twitter Secret Messages
Validated · 10 pts
TXT - George and Alfred
Validated · 10 pts
WAV - Noise analysis
Validated · 10 pts
Poem from Space
Validated · 15 pts
Yellow dots
Validated · 15 pts
EXIF - Thumbnail
Validated · 20 pts
Mimic - Dummy sight
Validated · 20 pts
WAV - Spectral analysis
Validated · 20 pts
APNG - Just A PNG
Validated · 25 pts
Crypt-art
Validated · 25 pts
ELF x64 - Duality
Validated · 25 pts
PDF - Embedded
Validated · 25 pts
Genius ID
Validated · 30 pts
Kitty spy
Validated · 30 pts
PNG - Least Significant Bit
Validated · 30 pts
PNG - Pixel Indicator Technique
Validated · 30 pts
PNG - Pixel Value Differencing
Validated · 30 pts
Angecryption
Not validated · 35 pts
Base Jumper
Validated · 35 pts
Hide and seek
Not validated · 40 pts
PNG - EMD
Validated · 45 pts
Web - Server
20 / 97
HTML - Source code
Validated · 5 pts
HTTP - IP restriction bypass
Validated · 10 pts
HTTP - Open redirect
Validated · 10 pts
HTTP - User-agent
Validated · 10 pts
Weak password
Validated · 10 pts
PHP - Command injection
Validated · 10 pts
API - Broken Access
Validated · 15 pts
Backup file
Validated · 15 pts
HTTP - Directory indexing
Validated · 15 pts
HTTP - Headers
Validated · 15 pts
HTTP - POST
Validated · 15 pts
HTTP - Improper redirect
Validated · 15 pts
HTTP - Verb tampering
Validated · 15 pts
Install files
Validated · 15 pts
Nginx - Alias Misconfiguration
Not validated · 15 pts
Nginx - Root Location Misconfiguration
Not validated · 15 pts
API - Mass Assignment
Not validated · 20 pts
CRLF
Validated · 20 pts
File upload - Double extensions
Validated · 20 pts
File upload - MIME type
Validated · 20 pts
Flask - Unsecure session
Not validated · 20 pts
GraphQL - Introspection
Not validated · 20 pts
HTTP - Cookies
Validated · 20 pts
Insecure Code Management
Validated · 20 pts
JWT - Introduction
Not validated · 20 pts
XSS - Server Side
Not validated · 20 pts
Directory traversal
Not validated · 25 pts
File upload - Null byte
Not validated · 25 pts
JWT - Revoked token
Not validated · 25 pts
JWT - Weak secret
Not validated · 25 pts
JWT - Unsecure File Signature
Not validated · 25 pts
PHP - assert()
Not validated · 25 pts
PHP - Apache configuration
Not validated · 25 pts
PHP - Filters
Not validated · 25 pts
PHP - register globals
Not validated · 25 pts
PHP - Remote Xdebug
Not validated · 25 pts
Python - Server-side Template Injection Introduction
Not validated · 25 pts
File upload - ZIP
Not validated · 30 pts
Flask - Development server
Not validated · 30 pts
GraphQL - Injection
Not validated · 30 pts
Command injection - Filter bypass
Not validated · 30 pts
Java - Server-side Template Injection
Not validated · 30 pts
JWT - Public key
Not validated · 30 pts
JWT - Header Injection
Not validated · 30 pts
Local File Inclusion
Not validated · 30 pts
Local File Inclusion - Double encoding
Not validated · 30 pts
Nginx - SSRF Misconfiguration
Not validated · 30 pts
Node - Eval
Not validated · 30 pts
PHP - Loose Comparison
Not validated · 30 pts
PHP - preg_replace()
Not validated · 30 pts
PHP - type juggling
Not validated · 30 pts
Remote File Inclusion
Not validated · 30 pts
Ruby on Rails - ransack
Not validated · 30 pts
SQL injection - Authentication
Validated · 30 pts
SQL injection - Authentication - GBK
Not validated · 30 pts
SQL injection - String
Not validated · 30 pts
XSLT - Code execution
Not validated · 30 pts
Elixir - EEx
Not validated · 35 pts
JWT - Unsecure Key Handling
Not validated · 35 pts
LDAP injection - Authentication
Not validated · 35 pts
Node - Serialize
Not validated · 35 pts
NoSQL injection - Authentication
Not validated · 35 pts
PHP - Path Truncation
Not validated · 35 pts
PHP - Serialization
Not validated · 35 pts
SQL injection - Numeric
Not validated · 35 pts
SQL Injection - Routed
Not validated · 35 pts
SQL Truncation
Not validated · 35 pts
XML External Entity
Not validated · 35 pts
XPath injection - Authentication
Not validated · 35 pts
Yaml - Deserialization
Not validated · 35 pts
API - Broken Access 2
Not validated · 40 pts
GraphQL - Backend injection
Not validated · 40 pts
GraphQL - Mutation
Not validated · 40 pts
Java - Spring Boot
Not validated · 40 pts
Local File Inclusion - Wrappers
Not validated · 40 pts
PHP - Eval
Not validated · 40 pts
PHP - Eval - Advanced filters bypass
Not validated · 40 pts
SQL injection - Error
Not validated · 40 pts
SQL injection - Insert
Not validated · 40 pts
SQL injection - File reading
Not validated · 40 pts
XPath injection - String
Not validated · 40 pts
File upload - Polyglot
Not validated · 45 pts
NodeJS - Prototype Pollution Bypass
Not validated · 45 pts
NoSQL injection - Blind
Not validated · 45 pts
SQL injection - Time based
Not validated · 45 pts
Java - Custom gadget deserialization
Not validated · 50 pts
NodeJS - vm escape
Not validated · 50 pts
Server Side Request Forgery
Not validated · 50 pts
SQL injection - Blind
Not validated · 50 pts
LDAP injection - Blind
Not validated · 55 pts
PHP - Unserialize overflow
Not validated · 55 pts
PHP - Unserialize Pop Chain
Not validated · 55 pts
SQL Injection - Second Order
Not validated · 55 pts
Python - dotenv
Not validated · 70 pts
Python - Blind SSTI Filters Bypass
Not validated · 75 pts
XPath injection - Blind
Not validated · 75 pts
SQL injection - Filter bypass
Not validated · 80 pts
Web - Client
13 / 42
HTML - disabled buttons
Validated · 5 pts
Javascript - Authentication
Validated · 5 pts
Javascript - Source
Validated · 5 pts
Javascript - Authentication 2
Validated · 10 pts
Javascript - Obfuscation 1
Validated · 10 pts
Javascript - Obfuscation 2
Validated · 10 pts
Javascript - Native code
Validated · 15 pts
Javascript - Webpack
Validated · 15 pts
Javascript - Obfuscation 3
Validated · 30 pts
XSS - Stored 1
Validated · 30 pts
AST - Deobfuscation
Not validated · 35 pts
CSP Bypass - Inline code
Not validated · 35 pts
CSP Bypass - Nonce 2
Not validated · 35 pts
CSRF - 0 protection
Validated · 35 pts
Web Socket - 0 protection
Not validated · 35 pts
XSS DOM Based - Introduction
Not validated · 35 pts
Flash - Authentication
Not validated · 40 pts
XSS DOM Based - AngularJS
Not validated · 40 pts
XSS DOM Based - Eval
Not validated · 40 pts
CSP Bypass - Dangling markup
Not validated · 45 pts
CSP Bypass - JSONP
Not validated · 45 pts
CSRF - token bypass
Not validated · 45 pts
XSS - Reflected
Not validated · 45 pts
CSP Bypass - Dangling markup 2
Not validated · 50 pts
CSP Bypass - Nonce
Not validated · 50 pts
CSS - Exfiltration
Not validated · 50 pts
Javascript - Obfuscation 4
Validated · 50 pts
Relative Path Overwrite
Not validated · 50 pts
XSS - Stored 2
Validated · 50 pts
XSS DOM Based - Filters Bypass
Not validated · 50 pts
Self XSS - DOM Secrets
Not validated · 55 pts
CSPT - The Ruler
Not validated · 60 pts
DOM Clobbering
Not validated · 60 pts
Javascript - Obfuscation 6
Not validated · 60 pts
Self XSS - Race Condition
Not validated · 60 pts
Browser - bfcache / disk cache
Not validated · 65 pts
HTTP Response Splitting
Not validated · 70 pts
Javascript - Obfuscation 5
Not validated · 70 pts
XS Leaks
Not validated · 75 pts
XSS - Stored - filter bypass
Not validated · 80 pts
XSS - DOM Based
Not validated · 85 pts
Same Origin Method Execution
Not validated · 90 pts
Cracking
13 / 70
ELF x86 - 0 protection
Validated · 5 pts
ELF x86 - Basic
Validated · 5 pts
PE x86 - 0 protection
Validated · 5 pts
ELF C++ - 0 protection
Validated · 10 pts
Godot - 0 protection
Validated · 10 pts
PE DotNet - 0 protection
Validated · 10 pts
APK - Introduction
Validated · 15 pts
ELF MIPS - Basic Crackme
Validated · 15 pts
ELF x64 - Golang basic
Validated · 15 pts
ELF x86 - Fake Instructions
Validated · 15 pts
ELF x86 - Ptrace
Validated · 15 pts
Godot - Bytecode
Not validated · 15 pts
WASM - Introduction
Not validated · 15 pts
APK - Flutter Debug
Not validated · 20 pts
ELF ARM - Basic Crackme
Validated · 20 pts
ELF x64 - Basic KeygenMe
Not validated · 20 pts
Unity3D Save handling
Not validated · 20 pts
Godot - Mono
Not validated · 20 pts
PE DotNet - Basic Anti-Debug
Not validated · 20 pts
PE DotNet - Basic Crackme
Not validated · 20 pts
PYC - ByteCode
Not validated · 20 pts
Basic ? crackme
Not validated · 25 pts
ELF x86 - No software breakpoints
Not validated · 25 pts
Lua - Bytecode
Not validated · 25 pts
MachO x64 - keygenme or not
Not validated · 25 pts
ELF ARM - crackme 1337
Validated · 30 pts
ELF x86 - CrackPass
Not validated · 30 pts
ELF x86 - ExploitMe
Not validated · 30 pts
ELF x86 - Random Crackme
Not validated · 30 pts
GB - Basic GameBoy crackme
Not validated · 30 pts
PDF - Javascript
Not validated · 30 pts
PE x86 - Xor Madness
Not validated · 30 pts
Powershell DeObfuscation
Not validated · 30 pts
ELF ARM - Crypted
Not validated · 35 pts
ELF x64 - Crackme automating
Not validated · 35 pts
EVM - Bytecode
Not validated · 35 pts
Godot - 3D model
Not validated · 35 pts
NRO ARM - Switch homebrew
Not validated · 35 pts
PE x86 - SEHVEH
Not validated · 35 pts
APK - Anti-debug
Not validated · 40 pts
APK - Insomni’Droid
Not validated · 40 pts
ELF x64 - Rust backdoor
Not validated · 40 pts
ELF x64 - Rust Crackme
Not validated · 40 pts
PE x64 - UEFI Secure Boot
Not validated · 40 pts
APK - Root My Droid
Not validated · 45 pts
ELF x64 - Nanomites - Introduction
Not validated · 45 pts
ELF x86 - Anti-debug
Not validated · 45 pts
PE DotNet - KeygenMe
Not validated · 45 pts
PE x64 - Tables in shambles
Not validated · 45 pts
PE x86 - AutoPE
Not validated · 45 pts
PYC - Self Modifying (Byte)Code
Not validated · 45 pts
PYC - Snakeygen
Not validated · 45 pts
ELF x86 - KeygenMe
Not validated · 50 pts
HackerMan
Not validated · 50 pts
Unity - Mono - Basic Game Hacking
Not validated · 50 pts
WASM - Find the NPC
Not validated · 50 pts
PE DotNet - Memory Protect
Not validated · 55 pts
Bash - VM
Not validated · 60 pts
ELF x64 - KeyGenMe
Not validated · 60 pts
ELF x64 - Anti-debug and equations
Not validated · 65 pts
Unity - IL2CPP - Basic Game Hacking
Not validated · 65 pts
ELF x64 - Nanomites
Not validated · 70 pts
ELF x86 - Packed
Not validated · 70 pts
PE x86 - RunPE
Not validated · 75 pts
PE32+ - KeygenMe
Not validated · 85 pts
ELF x86 - VM
Not validated · 90 pts
ELF x64 - Hidden Control Flow
Not validated · 100 pts
Ringgit
Not validated · 110 pts
Voracious Nanomites
Not validated · 110 pts
White-Box Cryptography #2
Not validated · 130 pts
Cyberdefenders#
Threat Hunting1
Network Forensics14
Endpoint Forensics2
Threat Intel6
Cloud Forensics1
TryHackMe#
92 rooms completed
Courses and training completed#
2026
2025
Objective by the Sea v8.0
iOS Threat Hunting & Malware Analysis Scholarship OpenAI & Addigy
Jonathan Levin
macOS & *OS Internals, 2nd Ed.
Objective for the We v3.0
How to Use LLMs to Detect macOS Malware
Patrick Wardle
The Art of Mac Malware
FOR585
Smartphone Forensic Analysis In-Depth
13Cubed
Investigating Windows Endpoint
13Cubed
Investigating Windows Memory