Orange Innovation  ·  Data Privacy & Innovation Team  ·  Châtillon, Paris

Signature Scanner + VirusTotal

Two-layer threat detection engine: local signature/hash matching + live VirusTotal cloud intelligence. Detects, flags, and reports malicious files — mimicking core production AV logic.

Python VirusTotal API Malware Analysis Threat Detection

Honeypot & MITRE ATT&CK Mapping

Ubuntu-based SOC lab: Wazuh SIEM for centralised logging, Cowrie SSH honeypot for attacker trapping, and auditd for endpoint monitoring. Custom detection rules + attack simulations mapped to MITRE ATT&CK.

Wazuh MITRE ATT&CK Ubuntu SOC

SIEM/XDR Detection Engineering

SOC simulation detecting real-world attacks: database exfiltration, credential theft, insider enumeration. Custom rules, active response, and full incident timelines documented.

Wazuh SIEM/XDR Incident Response

Kernel-Level Attack Research

Mapping eBPF abuse for stealth, persistence & privilege escalation across Linux, containers & cloud-native. Building attack taxonomy: rootkit behaviours, verifier-bypass CVEs, and CAP_BPF/CAP_PERFMON hardening defences.

eBPF Kubernetes CVE Research Cloud Security

Solved 10 Docker-based security challenges. Built a DVWA container environment, ran structured penetration tests, and documented all findings professionally.

Docker DVWA Kali Linux Penetration Testing

Full-scope VA: port/service enumeration, OS discovery, vulnerability scanning across networking layers, and web server assessment with severity-rated documentation.

Nmap Port Scanning Kali Linux Networking

Identified & exploited IDOR, XSS → JWT token theft, and API flaws. Methodology: passive recon, credential analysis, privilege escalation — full OWASP Top 10 coverage.

XSS IDOR JWT OWASP Top 10

Documenting TryHackMe room solutions & cybersecurity walkthroughs — methodology, tools, and key takeaways for the community.

TryHackMe CTF Write-Ups Medium

Linux Privilege Escalation SUID Exploitation TryHackMe

Billing system vulnerability room. Covers service enumeration, SUID binary privilege escalation, and flag extraction through system misconfigurations on a realistic Linux target.

Digital Forensics Insider Threat Log Analysis TryHackMe

Insider threat simulation. Bash history, cron job, and log analysis to reconstruct a full attacker timeline from artefacts left on a compromised Linux system.

Web Exploitation Command Injection Enumeration TryHackMe

Web exploitation room. Directory & source-code enumeration, command injection via web panel, and chained privilege escalation to retrieve all 3 hidden flags.

OSINT Geolocation Metadata Analysis TryHackMe

OSINT investigation room. Reverse image search, metadata extraction, and geolocation to piece together a narrative and uncover hidden details across public sources.

EPITA — École Pour l'Informatique et les Techniques Avancées  ·  Paris, France

Sri Manakula Vinayagar Engineering College  ·  Puducherry, India