OSCP+
OffSec Certified Professional+
Verify credential OSCP+ (opens in a new tab)Security
- IoT thermostat security audit 3+ critical vulnerabilities
IoT thermostat security audit
Finished
Hardware, mobile app and cloud audit of a real IoT ecosystem.
3+ critical vulnerabilities
- Wargame: attack and defense with a DMZ Active Directory and Wazuh SIEM
Wargame: attack and defense with a DMZ
Finished
Attack and hardening of Windows and Linux hosts on a DMZ network.
Active Directory and Wazuh SIEM
- Metadata analyzer PDF · DOCX · images (In progress)
Metadata analyzer
In progress
Analyzes, wipes and edits metadata in PDF, Word and image files, and flags anomalies with AI.
PDF · DOCX · images
- Process dump tool with WinAPI By PID, by name or over the network
Process dump tool with WinAPI
Finished
Process memory dumping on Windows with WinAPI, also over the network.
By PID, by name or over the network
- CTFs: forensics and web pentesting HTB · Proving Grounds · writeups
CTFs: forensics and web pentesting
Finished
CTF challenges on Hack The Box, Proving Grounds and more, with the occasional writeup.
HTB · Proving Grounds · writeups
- See all
Apps
- GeoAlarm: alert when you arrive GPS alarm (Published on the App Store)
GeoAlarm: alert when you arrive
Published on the App Store
Sounds an alarm when you reach your destination.
GPS alarm
- RootJar: personal finance for iOS Private and automatic (In progress)
RootJar: personal finance for iOS
In progress
The classic budget jar: automatic with Apple Pay, without handing your bank data to anyone.
Private and automatic
- GaragePad: garage remotes on CarPlay Flipper remotes from your car (In progress)
GaragePad: garage remotes on CarPlay
In progress
Open your garage doors from the car’s screen with your Flipper Zero remotes.
Flipper remotes from your car
- See apps
Writeups
- UpDown: Hack The Box machine Linux · Medium · LFI and SUID
UpDown: Hack The Box machine
Finished
LFI, Git abuse and SUID escalation.
Linux · Medium · LFI and SUID
- Broker: Hack The Box machine Linux · Easy · ActiveMQ
Broker: Hack The Box machine
Finished
ActiveMQ, RCE and privilege escalation.
Linux · Easy · ActiveMQ
- Builder: Hack The Box machine Linux · Medium · Jenkins
Builder: Hack The Box machine
Finished
Jenkins and CVE-2024-23897.
Linux · Medium · Jenkins
- All writeups
About me
Software Engineering graduate specialized in Cybersecurity (U-TAD, GPA 8.3/10). I focus on offensive and defensive operations, hardening and security automation across Windows, Linux, Active Directory and Cloud. Before that, I was a high-performance alpine skier.
Read moreExperience
Security Architecture Analyst
Deloitte · Sept 2026 – Present
Risk assessment, hardening and cloud security.
Software Engineering Intern
Capgemini · Oct 2025 – Apr 2026
Refactoring of a production enterprise system.
Certifications
OSCP
Offensive Security Certified Professional
Verify credential OSCP (opens in a new tab)OffSec, September 2026. Also: Appian Certified Associate Developer, March 2026.
See certificationsWriteups
Hack The Box machines solved step by step: enumeration, exploitation and privilege escalation.
Read the writeupsContact
If you have a cybersecurity, development or AI project, get in touch.
Contact page