Rachid GHODBANE

Rachid Ghodbane

Security & Software Engineer

Systems & Network Security • Vuln Searcher • DevSecOps • Data Analyst

Rachid Ghodbane

Offensive Security and Red Team oriented engineer focused on penetration testing, system exploitation, and attack surface analysis. I develop security tools and simulate real-world attack scenarios to identify and understand vulnerabilities across systems and web applications. Feel free to reach me for more Information or professional opportunity.

Projects

Academic and personal projects built throughout my studies and free time.

WienerForge – RSA Key Recovery Tool
Python Cryptography RSA PyCryptodome Number Theory Continued Fractions Mathematics
WienerForge RSA Attack Tool

Cryptographic research tool implementing Wiener's attack against vulnerable RSA keys using continued fractions and number theory techniques.

  • Implementation of Wiener's attack for recovering weak RSA private exponents.
  • Continued fraction analysis and convergent computation.
  • Automated private key reconstruction from public RSA parameters.
  • Built with PyCryptodome and advanced mathematical algorithms.
WebPwn – Web Pentest Framework
Python HTTP XSS SQLi LFI Crawling JSON/HTML
Web Pentest Framework

Modular web penetration testing framework designed to automate reconnaissance, vulnerability detection and reporting.

  • Automated crawling and attack surface discovery (endpoints & parameters).
  • Detection of common web vulnerabilities (XSS, SQL injection, LFI).
  • Basic exploitation modules with Proof-of-Concept generation.
  • Structured reporting system (JSON/HTML).
Word2Vec – From Scratch
Python NLP Machine Learning Word2Vec NumPy Word Embeddings Skip-gram
Word2Vec From Scratch

Educational yet faithful implementation of Word2Vec (Skip-gram with Negative Sampling) in pure NumPy, with hand-derived gradients and manual stochastic gradient descent.

  • Skip-gram architecture with Negative Sampling implemented entirely from scratch.
  • Manual gradient derivation and SGD training, without any deep learning framework.
  • Word similarity, vector analogies (king − man + woman) and 2D PCA visualization.
  • Built with pure NumPy and documented in a full academic LaTeX report.
SOC Brute Force Detection Lab (Wazuh / Sysmon)
Wazuh Sysmon Windows Kali Linux Elastic Stack SIEM RDP SSH MITRE ATT&CK Incident Response
SOC Brute Force Detection Lab

Design and deployment of a SOC lab for detecting and analyzing brute-force attacks in a Windows environment.

  • Deployment of Wazuh and Sysmon for centralized security log collection and monitoring.
  • Simulation of RDP/SSH brute-force attacks from a Kali Linux machine.
  • Analysis of authentication logs, alerts, and attacker behavior.
  • Creation of Wazuh/Sigma detection rules for brute-force attack identification.
  • Investigation using timelines, IOC extraction, and MITRE ATT&CK mapping.
  • Development of Kibana dashboards for security monitoring and alert visualization.
  • Incident response reporting with containment and remediation recommendations.
Secure Enterprise Network Infrastructure (DSI / SOC)
Cisco Packet Tracer VLAN OSPF ACL NAT/PAT DMZ DHCP DNS Syslog SOC
Infrastructure réseau sécurisée entreprise

Full design and simulation of a realistic enterprise network infrastructure for a headquarters, integrating a multi-zone architecture (user LAN, datacenter, DMZ and SOC).

  • Advanced network segmentation via VLANs with inter-VLAN routing at Layer 3 and dynamic routing with OSPF.
  • Critical network services deployment: DHCP, DNS and web server with centralised resource management.
  • Security hardening via ACLs for inter-segment access control, NAT/PAT for Internet connectivity, and DMZ isolation.
  • SOC supervision environment with centralised log collection via Syslog for network event monitoring and detection.
PhantomC2 – Distributed Command & Control Simulation
Python Networking HTTP JSON Distributed Systems CLI
PhantomC2 Simulation

Lightweight distributed system simulating command and control architecture for educational purposes in a controlled environment.

  • Client-server architecture with multiple agent management.
  • Task distribution and result collection over structured JSON communication.
  • Interactive CLI interface for session handling and monitoring.
  • Focus on distributed systems design and network communication patterns.
Wiki_Esc – Privilege Escalation Enumeration Tool
Python Linux Enumeration Privilege Escalation Security
Wiki Esc Tool

Python-based tool designed to assist in privilege escalation enumeration during security assessments.

  • Automated enumeration of system configurations and potential privilege escalation vectors.
  • Detection of common misconfigurations (SUID binaries, permissions, services).
  • Structured output highlighting potential attack paths.
  • Inspired by real-world pentesting methodologies and enumeration techniques.
Arduino Projects
C Arduino Electronics
Arduino

Collection of Arduino programming projects with various electronic components.

  • Traffic light simulation with sequencing and synchronisation.
  • 7-segment display driven by infrared remote control.
  • Orientation-aware solar panel simulation based on ambient light level.
  • Fan speed regulator that adapts to room temperature.
OpenGL 3D – Farmer Simulation Game
C OpenGL 3D AI Pathfinding Graphics
Farmer Simulation OpenGL 3D

3D survival and farming simulation developed in C using OpenGL, where the player manages resources, animals and hostile entities in a dynamic environment. This project was carried out as part of an academic course in Image Synthesis and Animation (computer graphics & rendering systems).

  • Custom OpenGL rendering pipeline with camera, projection and transformation handling.
  • AI pathfinding using Dijkstra algorithm for entity navigation in a graph-based world.
  • Real-time lighting system including day/night cycle and visibility adaptation.
  • Vector-based physics and collision handling for movement and interactions.
Kali NetHunter Pro – OnePlus 6T
OnePlus 6T Android / Magisk Kali NetHunter Pro ADB & Fastboot NetHunter KeX USB OTG
Kali NetHunter Pro sur OnePlus 6T

Mobile penetration-testing environment based on Kali NetHunter Pro on a rooted OnePlus 6T.

  • Setup via ADB/Fastboot, Magisk root, NetHunter chroot and KeX Desktop.
  • OTG support for USB network adapters (Wi-Fi & Ethernet).
  • Wireless auditing, network tools and log collection — following legal and ethical best practices.
Distributed system for monitoring and real-time stream management for industrial infrastructure
C System V IPC UNIX POSIX SHM SEM MSG Fork
Simulation Flux/Monitoring magasin

Implementation of a real-time monitoring system using IPC (shared memory, message queues, semaphores) for synchronization and data stream processing.

  • Inter-process communication and synchronisation via System V IPC (shared memory, semaphores, message queues).
  • Real-time monitoring dashboard of the store's state.
  • Process lifecycle managed with Fork/POSIX primitives.
Encrypted Password Manager
Python AES-256 Argon2/PBKDF2 FastAPI
Encrypted Password Manager

Secure password manager with a locally encrypted vault and an advanced web interface.

  • Local encrypted vault using AES-256 with Argon2/PBKDF2 key derivation.
  • Advanced features including password generation and secure storage.
  • Web interface powered by FastAPI.
HTTP Server from Scratch
C Sockets Threads HTTP Protocol
Serveur HTTP

Complete HTTP server implementation in C handling GET/POST requests, static files and multithreading.

  • Raw socket programming with full HTTP header and status-code management.
  • Multithreaded request handling for concurrent connections.
  • Persistent connection support.
AI ECG Diagnostic
Python TensorFlow Keras NumPy Pandas
IA ECG

In development — Deep learning model for analysing and diagnosing electrocardiograms with high accuracy.

  • Detection of various cardiac pathologies from ECG signals.
  • Model built with TensorFlow/Keras on annotated ECG datasets.
  • Data preprocessing pipeline with NumPy and Pandas.
CollabDocs — Real-Time Collaborative Editor
Java WebSocket Servlet MVC JSP / JSTL MySQL Maven Tomcat JavaScript
CollabDocs

Web platform for real-time collaborative text document editing, built on a Java MVC architecture deployed on Tomcat with a MySQL backend.

  • Real-time multi-user editing via a custom WebSocket protocol (content updates, cursor positions, chat messages, save requests) with automatic reconnection using exponential backoff.
  • Granular permission system: owner / read / write roles, three access modes (public, link-based, private) and optional password protection per document.
  • Version history with full restoration, integrated per-document chat with scroll, and a Ctrl+S / Cmd+S keyboard shortcut for manual saves.
  • Admin dashboard for user and document management; JDBC DAO layer (UserDAO, DocumentDAO, PermissionDAO) with SHA-256 password hashing.
Survive One — Real-Time Multiplayer Game
Java WebSocket HTTP Server JavaScript CSS Admin API QR Code
Survive One

Real-time multiplayer browser game where one player is infected and must tag everyone else before the timer runs out; survivors win by lasting one minute.

  • Real-time game engine over WebSocket (port 8897) with a lightweight embedded Java HTTP server serving static assets from the JAR (port 8080).
  • QR code lobby system: players scan a code to join the session and use their smartphone as a wireless controller.
  • Tournament mode for organised multi-round play across groups of players.
  • Admin dashboard with a dedicated REST API for session management, player banning and server monitoring.
CPYRR Compiler & Virtual Machine
C Lexical Analysis Syntax Parsing AST (Fils/Frère) Symbol Tables Virtual Machine Code Generation Hash Tables
Compilateur CPYRR

Compiler for the CPYRR procedural language with an integrated virtual machine.

  • Full pipeline: lexical analysis, syntax parsing, semantic analysis and intermediate code generation.
  • Modular architecture with symbol tables, overloading management, shadowing and an explicit execution stack.
  • AST built with the child/sibling (Fils/Frère) structure.
Wargame
Java POO Swing GUI Dijkstra AI Serialisation
Wargame java

Turn-based strategy game in Java inspired by the Lord of the Rings universe.

  • Player commands a team of heroes (Human, Dwarf, Elf, Hobbit) against an AI-controlled monster army (Troll, Orc, Goblin).
  • AI pathfinding powered by Dijkstra's algorithm; full Swing graphical interface.
  • Game state persistence via Java serialisation.
Reversi AI
C MinMax Alpha-Beta Game Theory
IA Reversi

Artificial intelligence for the Reversi board game, built in C with advanced search algorithms.

  • MinMax algorithm with alpha-beta pruning for optimal decision-making.
  • Sophisticated heuristics for position evaluation.
  • Configurable search depth for adjustable difficulty.
Hospital Database
MySQL Triggers Stored Procedures ERD
DB Hospitalière

Design and implementation of a complete database for hospital management.

  • Manages patients, medical staff, appointments, treatments and medical records.
  • Advanced permission system with triggers and stored procedures.
  • Full entity-relationship design (ERD) with normalised schema.
Tetris Revisited
C SDL2 Game Design Algorithms
Tetris

Reimplementation of the classic Tetris in C with modern features and visual effects.

  • Custom game modes and an advanced scoring system.
  • Save/load functionality and innovative visual effects via SDL2.
  • Clean algorithmic design for piece movement, collision and line clearing.
Parenthesis Syntax Analyzer
ASM x86_64
Tetris

An x86-64 assembly program that performs syntactic analysis of parentheses in a string (with customizable pairs of parentheses).

Twitter & Telegram Bot
Python Twitter API Telegram API Pickle Schedule NumPy
Bot Twitter

Automated Twitter and Telegram bot that publishes quotes on a schedule.

  • Dual-platform integration via Twitter API and Telegram API.
  • Built-in scheduling system for timed automated posts.
  • State persistence with Pickle and randomised quote selection with NumPy.
Huffman Compression
C Data Structures Binary Trees Optimisation SDL2
Compression Huffman

Data compression tool in C based on Huffman coding, with a graphical SDL2 interface.

  • Builds a binary frequency tree and generates optimal prefix codes to minimise file size.
  • Full encode/decode pipeline with file I/O.
  • Graphical interface built with SDL2 for visualising the compression process.

Technical Reports

In-depth technical analyses, research, and engineering documentation

Word2Vec From Scratch
View Report
Word2Vec — Implementation & Theory From Scratch
Academic report on the theoretical foundations of Word2Vec, covering the Skip-gram model with Negative Sampling, the manual derivation of its gradients, and a pure-NumPy implementation.
CollabDocs
View Report
CollabDocs — Real-Time Collaborative Editor
Web platform for real-time collaborative text document editing, built on a Java MVC architecture deployed on Tomcat with a MySQL backend.
Cisco previview
View Report
Secure Enterprise Network Infrastructure (DSI / SOC)
Full design and simulation of a realistic enterprise network infrastructure for a headquarters, integrating a multi-zone architecture (user LAN, datacenter, DMZ and SOC).
Compiler VM Design
View Report
Compiler & Virtual Machine Design
Full compilation pipeline for the CPYRR language — lexical analysis, AST construction, semantic passes, code generation and stack-based VM execution.
Reversi AI
View Report
AI Model for Reversi
Implementation and optimization of an artificial intelligence model for the Reversi board game — algorithms, heuristics and performance evaluation.
Wargame LoTR
View Report
Lord of the Rings Strategy Wargame
Object-oriented design and implementation of a turn-based strategy game inspired by the Lord of the Rings universe — class hierarchy, game engine and AI opponents.
x86_64 Parser
View Report
x86_64 Parenthesis Parser
Low-level implementation of a syntactic parenthesis analyzer in x86_64 assembly — stack mechanics, register management and parsing logic.
7-segment Display
View Report
Hospital Database
Design and implementation of a complete database for hospital management.
7-segment Display
View Report
Combinational Circuits & 7-Segment Display
Design and analysis of combinational logic circuits with a focus on 7-segment display encoding — truth tables, Karnaugh maps and gate-level implementation.

Skills

Languages, tools, systems and domains I work with.

Cybersecurity & Networking

crypt
Cryptography
AES-256, Argon2, RSA
wireshark
WireShark
Network analysis
internet
Networking
TCP/IP, routing, sockets
hacker
Security
Pentest, hardening, audits
kali
Kali Linux
Pentesting environment
openvpn
OpenVPN
Secure tunneling
tor
Tor
Network Anonymity
Ghidra
Ghidra
Binary Analysis, Reverse Engineering
ptracer
PackeTracer
Network Simulation
burp
Burpsuite
Web Pentesting
hasgcat
Hashcat
Password Cracking
nmap
Nmap
Network Scanning
zap
OWASP ZAP
Web Scanning
mtsp
Metasploit
Exploit Development
nmap
OSINT
Information Gathering

Systems & DevOps

linux
Linux
System administration
windows
Windows
System administration
shell
Bash
Automation, system scripting
docker
Docker
Containers
proxmox
Proxmox
Virtualization
Gitlab
Gitlab
CI
shell
PowerShell
System Automation
nginx
Nginx
Web server
maven
Maven
Dependency Management
server
SSH / Servers
Remote administration
shell
LaTeX
Technical Writing
arduino
Arduino
Electronics, Enbedded Systems

Programming Languages

C
C
Systems, compilers, sockets, IPC
Python
Python
AI, ML, automation, APIs
Java
Java
OOP, Swing, Web apps, algorithms
cpu
x86_64 ASM
Low-level programming
mysql
MySQL
DB design, triggers, procedures
html5
HTML5
Frontend development
css3
CSS3
Responsive Design, Flexbox/Grid, Animations, UI Styling
js
Jacascript
DOM, Event Handling, APIs, Async Programming
php
PHP
Backend, MVC, Server-side
prolog
Prolog
Logic Programming, Rule Based Systems

Frameworks

TensorFlow
TensorFlow
Machine Learing, Models
Keras
Keras
Deep Learning, CNN
Numpy
NumPy
Numerical Computing
Pandas
Pandas
Data Analysis
FastAPI
FastAPI
REST APIs, Async
Symfony
Symfony
BackEnd Framework
opengl
OpenGL
Graphics Rendering, 3D
sdl2
SDL2
Game Dev, Rendering
phpmyadmin
PHP MyAdmin
Database Admin, MySQL
telegram
Telegram API
Bots & automation
Twitter API
Automation (Tweepy)

Education

Academic background and training.

Master's Degree — Computer Science (Cybersecurity & Networks) 2026 — 2028

Oteria Cybersecurity School, Paris, France

  • Advanced network security and architecture design
  • Cyber defense strategies and incident response
  • Secure systems engineering and infrastructure hardening
  • Applied cryptography and offensive/defensive security concepts
CCST Certification — Cybersecurity Analyst & Network Technician 2025

Cisco Network Academy

  • Networking fundamentals (TCP/IP, routing, switching)
  • Cybersecurity principles and threat analysis
  • Network troubleshooting and infrastructure basics
  • Endpoint security and introductory SOC concepts
Bachelor's Degree — Computer Science 2023 — 2026

University Jean Monnet, Saint-Étienne, France

  • Systems Programming (Python – C – OCaml – Java – SQL – PHP – JavaScript – HTML5 – CSS3 – x86_64 Assembly – Bash)
  • Databases, Compilation Theory
  • Advanced Algorithms, Multiprocess Programming, Operating Systems

Experience

Professional roles in IT and engineering.

Security Engineer — Apprenticeship 2026 — 2028

Coming soon...

BackEnd Developer - PHP Symfony April 2026 — Jun. 2026

AMS Paris

  • Backend development : API & application security. Donation management and administration interface.
  • Integration of a payment module and database management.
  • Securing endpoints (authentication, access control).
  • Vulnerability prevention (OWASP) and protection of sensitive data.
Programming Instructor (C, Python, Java & Web Development) 2025 — 2026

University Jean Monnet, Saint Etienne

  • Provided tutoring in programming languages including C, Python, Java, and web development.
  • Taught core concepts in algorithms, data structures, and software development fundamentals.
  • Supported students through practical exercises and technical problem-solving.
IT Support Technician N1/N2 Jun. 2024 — Jul. 2024

SCC France, Paris

  • Diagnosed and resolved hardware, software and network incidents for end users.
  • Deployed, installed and configured servers, workstations and IT infrastructure components.
  • Managed and monitored support tickets while ensuring timely incident resolution.
  • Performed user account administration, access management and workstation maintenance.
  • Provided technical assistance and troubleshooting for Windows-based environments.
  • Participated in infrastructure deployment and operational support activities.