Rachid GHODBANE

Rachid Ghodbane

Security & Red Team Engineer

Offensive Security • Vuln Searcher • Penetration Testing • Systems & Network

Rachid Ghodbane

Offensive Security and Red Team oriented engineer focused on penetration testing, system exploitation, and attack surface analysis. I develop security tools and simulate real-world attack scenarios to identify and understand vulnerabilities across systems and web applications.

Projects

Academic and personal projects built throughout my studies and free time.

Secure Enterprise Network Infrastructure (DSI / SOC)
Cisco Packet Tracer VLAN OSPF ACL NAT/PAT DMZ DHCP DNS Syslog SOC
Infrastructure réseau sécurisée entreprise

Full design and simulation of a realistic enterprise network infrastructure for a headquarters, integrating a multi-zone architecture (user LAN, datacenter, DMZ and SOC).

  • Advanced network segmentation via VLANs with inter-VLAN routing at Layer 3 and dynamic routing with OSPF.
  • Critical network services deployment: DHCP, DNS and web server with centralised resource management.
  • Security hardening via ACLs for inter-segment access control, NAT/PAT for Internet connectivity, and DMZ isolation.
  • SOC supervision environment with centralised log collection via Syslog for network event monitoring and detection.
RedScope – Web Pentest Framework
Python HTTP XSS SQLi LFI Crawling JSON/HTML
RedScope Web Pentest Framework

Modular web penetration testing framework designed to automate reconnaissance, vulnerability detection and reporting.

  • Automated crawling and attack surface discovery (endpoints & parameters).
  • Detection of common web vulnerabilities (XSS, SQL injection, LFI).
  • Basic exploitation modules with Proof-of-Concept generation.
  • Structured reporting system (JSON/HTML).
ShadowC2 – Distributed Command & Control Simulation
Python Networking HTTP JSON Distributed Systems CLI
ShadowC2 Simulation

Lightweight distributed system simulating command and control architecture for educational purposes in a controlled environment.

  • Client-server architecture with multiple agent management.
  • Task distribution and result collection over structured JSON communication.
  • Interactive CLI interface for session handling and monitoring.
  • Focus on distributed systems design and network communication patterns.
Wiki_Esc – Privilege Escalation Enumeration Tool
Python Linux Enumeration Privilege Escalation Security
Wiki Esc Tool

Python-based tool designed to assist in privilege escalation enumeration during security assessments.

  • Automated enumeration of system configurations and potential privilege escalation vectors.
  • Detection of common misconfigurations (SUID binaries, permissions, services).
  • Structured output highlighting potential attack paths.
  • Inspired by real-world pentesting methodologies and enumeration techniques.
Encrypted Password Manager
Python AES-256 Argon2/PBKDF2 FastAPI
Encrypted Password Manager

Secure password manager with a locally encrypted vault and an advanced web interface.

  • Local encrypted vault using AES-256 with Argon2/PBKDF2 key derivation.
  • Advanced features including password generation and secure storage.
  • Web interface powered by FastAPI.
Arduino Projects
C Arduino Electronics
Arduino

Collection of Arduino programming projects with various electronic components.

  • Traffic light simulation with sequencing and synchronisation.
  • 7-segment display driven by infrared remote control.
  • Orientation-aware solar panel simulation based on ambient light level.
  • Fan speed regulator that adapts to room temperature.
Distributed system for monitoring and real-time stream management for industrial infrastructure
C System V IPC UNIX POSIX SHM SEM MSG Fork
Simulation Flux/Monitoring magasin

Implementation of a real-time monitoring system using IPC (shared memory, message queues, semaphores) for synchronization and data stream processing.

  • Inter-process communication and synchronisation via System V IPC (shared memory, semaphores, message queues).
  • Real-time monitoring dashboard of the store's state.
  • Process lifecycle managed with Fork/POSIX primitives.
Kali NetHunter Pro – OnePlus 6T
OnePlus 6T Android / Magisk Kali NetHunter Pro ADB & Fastboot NetHunter KeX USB OTG
Kali NetHunter Pro sur OnePlus 6T

Mobile penetration-testing environment based on Kali NetHunter Pro on a rooted OnePlus 6T.

  • Setup via ADB/Fastboot, Magisk root, NetHunter chroot and KeX Desktop.
  • OTG support for USB network adapters (Wi-Fi & Ethernet).
  • Wireless auditing, network tools and log collection — following legal and ethical best practices.
HTTP Server from Scratch
C Sockets Threads HTTP Protocol
Serveur HTTP

Complete HTTP server implementation in C handling GET/POST requests, static files and multithreading.

  • Raw socket programming with full HTTP header and status-code management.
  • Multithreaded request handling for concurrent connections.
  • Persistent connection support.
AI ECG Diagnostic
Python TensorFlow Keras NumPy Pandas
IA ECG

In development — Deep learning model for analysing and diagnosing electrocardiograms with high accuracy.

  • Detection of various cardiac pathologies from ECG signals.
  • Model built with TensorFlow/Keras on annotated ECG datasets.
  • Data preprocessing pipeline with NumPy and Pandas.
CollabDocs — Real-Time Collaborative Editor
Java WebSocket Servlet MVC JSP / JSTL MySQL Maven Tomcat JavaScript
CollabDocs

Web platform for real-time collaborative text document editing, built on a Java MVC architecture deployed on Tomcat with a MySQL backend.

  • Real-time multi-user editing via a custom WebSocket protocol (content updates, cursor positions, chat messages, save requests) with automatic reconnection using exponential backoff.
  • Granular permission system: owner / read / write roles, three access modes (public, link-based, private) and optional password protection per document.
  • Version history with full restoration, integrated per-document chat with scroll, and a Ctrl+S / Cmd+S keyboard shortcut for manual saves.
  • Admin dashboard for user and document management; JDBC DAO layer (UserDAO, DocumentDAO, PermissionDAO) with SHA-256 password hashing.
Survive One — Real-Time Multiplayer Game
Java WebSocket HTTP Server JavaScript CSS Admin API QR Code
Survive One

In development — Real-time multiplayer browser game where one player is infected and must tag everyone else before the timer runs out; survivors win by lasting one minute.

  • Real-time game engine over WebSocket (port 8897) with a lightweight embedded Java HTTP server serving static assets from the JAR (port 8080).
  • QR code lobby system: players scan a code to join the session and use their smartphone as a wireless controller.
  • Tournament mode for organised multi-round play across groups of players.
  • Admin dashboard with a dedicated REST API for session management, player banning and server monitoring.
CPYRR Compiler & Virtual Machine
C Lexical Analysis Syntax Parsing AST (Fils/Frère) Symbol Tables Virtual Machine Code Generation Hash Tables
Compilateur CPYRR

Compiler for the CPYRR procedural language with an integrated virtual machine.

  • Full pipeline: lexical analysis, syntax parsing, semantic analysis and intermediate code generation.
  • Modular architecture with symbol tables, overloading management, shadowing and an explicit execution stack.
  • AST built with the child/sibling (Fils/Frère) structure.
Wargame
Java POO Swing GUI Dijkstra AI Serialisation
Wargame java

Turn-based strategy game in Java inspired by the Lord of the Rings universe.

  • Player commands a team of heroes (Human, Dwarf, Elf, Hobbit) against an AI-controlled monster army (Troll, Orc, Goblin).
  • AI pathfinding powered by Dijkstra's algorithm; full Swing graphical interface.
  • Game state persistence via Java serialisation.
Reversi AI
C MinMax Alpha-Beta Game Theory
IA Reversi

Artificial intelligence for the Reversi board game, built in C with advanced search algorithms.

  • MinMax algorithm with alpha-beta pruning for optimal decision-making.
  • Sophisticated heuristics for position evaluation.
  • Configurable search depth for adjustable difficulty.
Hospital Database
MySQL Triggers Stored Procedures ERD
DB Hospitalière

Design and implementation of a complete database for hospital management.

  • Manages patients, medical staff, appointments, treatments and medical records.
  • Advanced permission system with triggers and stored procedures.
  • Full entity-relationship design (ERD) with normalised schema.
Tetris Revisited
C SDL2 Game Design Algorithms
Tetris

Reimplementation of the classic Tetris in C with modern features and visual effects.

  • Custom game modes and an advanced scoring system.
  • Save/load functionality and innovative visual effects via SDL2.
  • Clean algorithmic design for piece movement, collision and line clearing.
Parenthesis Syntax Analyzer
ASM x86_64
Tetris

An x86-64 assembly program that performs syntactic analysis of parentheses in a string (with customizable pairs of parentheses).

Twitter & Telegram Bot
Python Twitter API Telegram API Pickle Schedule NumPy
Bot Twitter

Automated Twitter and Telegram bot that publishes quotes on a schedule.

  • Dual-platform integration via Twitter API and Telegram API.
  • Built-in scheduling system for timed automated posts.
  • State persistence with Pickle and randomised quote selection with NumPy.
Huffman Compression
C Data Structures Binary Trees Optimisation SDL2
Compression Huffman

Data compression tool in C based on Huffman coding, with a graphical SDL2 interface.

  • Builds a binary frequency tree and generates optimal prefix codes to minimise file size.
  • Full encode/decode pipeline with file I/O.
  • Graphical interface built with SDL2 for visualising the compression process.

Technical Reports

In-depth technical analyses, research, and engineering documentation

Compiler VM Design
View Report
Compiler & Virtual Machine Design
Full compilation pipeline for the CPYRR language — lexical analysis, AST construction, semantic passes, code generation and stack-based VM execution.
Reversi AI
View Report
AI Model for Reversi
Implementation and optimization of an artificial intelligence model for the Reversi board game — algorithms, heuristics and performance evaluation.
Wargame LoTR
View Report
Lord of the Rings Strategy Wargame
Object-oriented design and implementation of a turn-based strategy game inspired by the Lord of the Rings universe — class hierarchy, game engine and AI opponents.
x86_64 Parser
View Report
x86_64 Parenthesis Parser
Low-level implementation of a syntactic parenthesis analyzer in x86_64 assembly — stack mechanics, register management and parsing logic.
7-segment Display
View Report
Hospital Database
Design and implementation of a complete database for hospital management.
7-segment Display
View Report
Combinational Circuits & 7-Segment Display
Design and analysis of combinational logic circuits with a focus on 7-segment display encoding — truth tables, Karnaugh maps and gate-level implementation.

Skills

Languages, tools, systems and domains I work with.

Cybersecurity & Networking

crypt
Cryptography
AES-256, Argon2, RSA
wireshark
WireShark
Network analysis
internet
Networking
TCP/IP, routing, sockets
hacker
Security
Pentest, hardening, audits
kali
Kali Linux
Pentesting environment
openvpn
OpenVPN
Secure tunneling
tor
Tor
Network Anonymity
ptracer
PackeTracer
Network Simulation
burp
Burpsuite
Web Pentesting
hasgcat
Hashcat
Password Cracking
nmap
Nmap
Network Scanning
zap
OWASP ZAP
Web Scanning
mtsp
Metasploit
Exploit Development
nmap
OSINT
Information Gathering

Systems & DevOps

linux
Linux
System administration
windows
Windows
System administration
shell
Bash
Automation, system scripting
docker
Docker
Containers
proxmox
Proxmox
Virtualization
Gitlab
Gitlab
CI
shell
PowerShell
System Automation
nginx
Nginx
Web server
maven
Maven
Dependency Management
server
SSH / Servers
Remote administration
shell
LaTeX
Technical Writing
arduino
Arduino
Electronics, Enbedded Systems

Programming Languages

C
C
Systems, compilers, sockets, IPC
Python
Python
AI, ML, automation, APIs
Java
Java
OOP, Swing, Web apps, algorithms
cpu
x86_64 ASM
Low-level programming
mysql
MySQL
DB design, triggers, procedures
html5
HTML5
Frontend development
css3
CSS3
Responsive Design, Flexbox/Grid, Animations, UI Styling
js
Jacascript
DOM, Event Handling, APIs, Async Programming
php
PHP
Backend, MVC, Server-side
prolog
Prolog
Logic Programming, Rule Based Systems

Frameworks

TensorFlow
TensorFlow
Machine Learing, Models
Keras
Keras
Deep Learning, CNN
Numpy
NumPy
Numerical Computing
Pandas
Pandas
Data Analysis
FastAPI
FastAPI
REST APIs, Async
Symfony
Symfony
BackEnd Framework
opengl
OpenGL
Graphics Rendering, 3D
sdl2
SDL2
Game Dev, Rendering
phpmyadmin
PHP MyAdmin
Database Admin, MySQL
telegram
Telegram API
Bots & automation
Twitter API
Automation (Tweepy)

Education

Academic background and training.

Master's Degree — Computer Science (Cybersecurity & Networks) 2026 — 2028

Oteria Cybersecurity School, Paris, France

  • Advanced network security and architecture design
  • Cyber defense strategies and incident response
  • Secure systems engineering and infrastructure hardening
  • Applied cryptography and offensive/defensive security concepts
MOOC Certification — SECNUM Academy January 2026

ANSSI (French National Cybersecurity Agency)

  • Cybersecurity awareness and digital hygiene
  • Protection against phishing and social engineering attacks
  • Understanding of common cyber threats and best practices
CCST Certification — Cybersecurity Analyst & Network Technician 2025

Cisco

  • Networking fundamentals (TCP/IP, routing, switching)
  • Cybersecurity principles and threat analysis
  • Network troubleshooting and infrastructure basics
  • Endpoint security and introductory SOC concepts
Bachelor's Degree — Computer Science 2023 — 2026

University Jean Monnet, Saint-Étienne, France

  • Systems Programming (Python – C – OCaml – Java – SQL – PHP – JavaScript – HTML5 – CSS3 – x86_64 Assembly – Bash)
  • Databases, Compilation Theory
  • Advanced Algorithms, Multiprocess Programming, Operating Systems

Experience

Professional roles in IT and engineering.

Systems & Network Technician — Apprenticeship 2026 — 2028

Coming soon...

  • Administration of network and system infrastructure
  • Implementation of security policies and access controls
  • Equipment supervision and real-time monitoring
BackEnd Developer - PHP Symfony May 2026 — Jun. 2026

AMS Solidarité

  • Backend development : donation management API and administration interface.
  • Integration of a payment module and management of a relational database.
IT Support & System Administration Jun. 2025 — Aug. 2025

SCC France

  • Level 1 & 2 technical support for end users
  • Deployment and configuration of workstations and servers
Programming Instructor (C, Python, Java & Web Development) 2023 — 2025

Freelance

  • Provided tutoring in programming languages including C, Python, Java, and web development.
  • Taught core concepts in algorithms, data structures, and software development fundamentals.
  • Supported students through practical exercises and technical problem-solving.

Personal

Beyond the keyboard, I’m an active person who enjoys physical challenges and hands-on work. I train regularly at the gym and practice wrestling, where I placed 3rd in the 2025 FFSU regional championship (-77kg). I also enjoy hiking, mountain biking, and horse riding. Before transitioning into tech during university, I worked in the construction industry as a team leader, developing strong skills in management, coordination, and problem-solving. I’m also curious by nature, enjoy reading, car mechanics, and like any developer, I run on a lot of coffee ^^'

VTT 1

Mountain biking — trail session

Workshop 1

DIY workshop — hands-on mechanical project

Wrestling 3

Wrestling — sparring session

Wrestling 1

Wrestling — training session

Wrestling 2

Wrestling — technique drilling

Horse riding 1

Horse riding — outdoor session

Horse riding 2

Horse riding — training & control practice

Reading

Reading — focus & learning mindset

Coffee

Coffee break — thinking & coding sessions