A Rust toolkit for static analysis of suspicious files (email, PDF, Office) - format parsing, YARA-X scanning, obfuscation heuristics and MITRE ATT&CK mapping, no execution of the analyzed file.

ESGI M2 annual project (pair): full chain from antenna to decoded telemetry (RTL-SDR/HackRF, orbital tracking, Doppler correction, CCSDS/LRPT decoding) plus a clear-vs-protected traffic security analysis. State of the art and requirements delivered, implementation under way.

Production server hardening: SSH, LUKS, home-grown PKI/mTLS, systemd sandboxing and nftables. systemd-analyze security score raised from 9.6 to 2.6.

Five Wazuh/TheHive incident investigations (SSH brute force, backdoor account, obfuscated PowerShell, malware drop) with full kill-chain reconstruction.

OpenLDAP/SSSD, a Kerberos realm and LemonLDAP::NG as an identity provider, integrated across multiple web services (basic/LDAP/Kerberos-GSSAPI/SAML).

Group project (3): from linguistic theory to practice - Unicode homoglyph analyzer and a Rust string-obfuscation demo against static analysis.

Web penetration test on a deliberately vulnerable e-commerce training target, presented as an oral defense with slide deck.

Bootable mini-OS in Rust (pair project): FAT32 driver, SLAB allocator, paging, multi-core scheduler, built and run under QEMU.

Full AES-CBC implementation in pure NASM assembly, no libc, direct Linux syscalls for file I/O.

Full forensic exam on a compromised Windows 10 host (pair project): RAM/disk acquisition, Volatility analysis, file recovery with TestDisk/PhotoRec.

Scapy-based packet capture, signature detection engine (SQLi/XSS), NLP-assisted analysis, PDF/graph reporting. Poetry-managed, unit-tested.

Full open-source infrastructure PoC: Proxmox VE on encrypted LVM, pfSense firewall, LXC containers for AdGuard Home, Passbolt and Firefly III.

Wazuh master/worker cluster with over 150 custom detection rules, coupled with Suricata IDS and an OpenSearch dashboard.

Full public key infrastructure built with OpenSSL: root CA, real client/server certificates issued in PKCS#12 format.

Exam project (trio): Mifare Classic card cloning and HackRF/RTL-SDR signal capture/demodulation with GNU Radio Companion.

Flask platform for controlled, internal phishing simulations (pair project): fake login/MFA pages, click tracking, admin statistics dashboard.

Solidity/Foundry smart contracts: custom ERC20 token, on-chain marketplace, token-weighted voting contract.

Python automation of a fake access point (hostapd, dnsmasq, iptables NAT) with real WPA handshake captures in a controlled environment.

Group annual project plus a solo metamorphic module: AES file encryption CLI and source-rewriting evasion technique, strictly educational scope.

Suricata deployment with custom detection rules (brute force, SQLi, XSS, shellcode), validated by replaying real EternalBlue traffic.