Rachid Ghodbane
Security & Red Team Engineer
Offensive Security • Vuln Searcher • Penetration Testing • Systems & Network
RG
Offensive Security and Red Team oriented engineer focused on penetration testing, system exploitation, and attack surface analysis. I develop security tools and simulate real-world attack scenarios to identify and understand vulnerabilities across systems and web applications.
Projects
Academic and personal projects built throughout my studies and free time.
Full design and simulation of a realistic enterprise network infrastructure for a headquarters, integrating a multi-zone architecture (user LAN, datacenter, DMZ and SOC).
- Advanced network segmentation via VLANs with inter-VLAN routing at Layer 3 and dynamic routing with OSPF.
- Critical network services deployment: DHCP, DNS and web server with centralised resource management.
- Security hardening via ACLs for inter-segment access control, NAT/PAT for Internet connectivity, and DMZ isolation.
- SOC supervision environment with centralised log collection via Syslog for network event monitoring and detection.
Modular web penetration testing framework designed to automate reconnaissance, vulnerability detection and reporting.
- Automated crawling and attack surface discovery (endpoints & parameters).
- Detection of common web vulnerabilities (XSS, SQL injection, LFI).
- Basic exploitation modules with Proof-of-Concept generation.
- Structured reporting system (JSON/HTML).
Lightweight distributed system simulating command and control architecture for educational purposes in a controlled environment.
- Client-server architecture with multiple agent management.
- Task distribution and result collection over structured JSON communication.
- Interactive CLI interface for session handling and monitoring.
- Focus on distributed systems design and network communication patterns.
Python-based tool designed to assist in privilege escalation enumeration during security assessments.
- Automated enumeration of system configurations and potential privilege escalation vectors.
- Detection of common misconfigurations (SUID binaries, permissions, services).
- Structured output highlighting potential attack paths.
- Inspired by real-world pentesting methodologies and enumeration techniques.
Secure password manager with a locally encrypted vault and an advanced web interface.
- Local encrypted vault using AES-256 with Argon2/PBKDF2 key derivation.
- Advanced features including password generation and secure storage.
- Web interface powered by FastAPI.
Collection of Arduino programming projects with various electronic components.
- Traffic light simulation with sequencing and synchronisation.
- 7-segment display driven by infrared remote control.
- Orientation-aware solar panel simulation based on ambient light level.
- Fan speed regulator that adapts to room temperature.
Implementation of a real-time monitoring system using IPC (shared memory, message queues, semaphores) for synchronization and data stream processing.
- Inter-process communication and synchronisation via System V IPC (shared memory, semaphores, message queues).
- Real-time monitoring dashboard of the store's state.
- Process lifecycle managed with Fork/POSIX primitives.
Mobile penetration-testing environment based on Kali NetHunter Pro on a rooted OnePlus 6T.
- Setup via ADB/Fastboot, Magisk root, NetHunter chroot and KeX Desktop.
- OTG support for USB network adapters (Wi-Fi & Ethernet).
- Wireless auditing, network tools and log collection — following legal and ethical best practices.
Complete HTTP server implementation in C handling GET/POST requests, static files and multithreading.
- Raw socket programming with full HTTP header and status-code management.
- Multithreaded request handling for concurrent connections.
- Persistent connection support.
In development — Deep learning model for analysing and diagnosing electrocardiograms with high accuracy.
- Detection of various cardiac pathologies from ECG signals.
- Model built with TensorFlow/Keras on annotated ECG datasets.
- Data preprocessing pipeline with NumPy and Pandas.
Web platform for real-time collaborative text document editing, built on a Java MVC architecture deployed on Tomcat with a MySQL backend.
- Real-time multi-user editing via a custom WebSocket protocol (content updates, cursor positions, chat messages, save requests) with automatic reconnection using exponential backoff.
- Granular permission system: owner / read / write roles, three access modes (public, link-based, private) and optional password protection per document.
- Version history with full restoration, integrated per-document chat with scroll, and a Ctrl+S / Cmd+S keyboard shortcut for manual saves.
- Admin dashboard for user and document management; JDBC DAO layer (UserDAO, DocumentDAO, PermissionDAO) with SHA-256 password hashing.
In development — Real-time multiplayer browser game where one player is infected and must tag everyone else before the timer runs out; survivors win by lasting one minute.
- Real-time game engine over WebSocket (port 8897) with a lightweight embedded Java HTTP server serving static assets from the JAR (port 8080).
- QR code lobby system: players scan a code to join the session and use their smartphone as a wireless controller.
- Tournament mode for organised multi-round play across groups of players.
- Admin dashboard with a dedicated REST API for session management, player banning and server monitoring.
Compiler for the CPYRR procedural language with an integrated virtual machine.
- Full pipeline: lexical analysis, syntax parsing, semantic analysis and intermediate code generation.
- Modular architecture with symbol tables, overloading management, shadowing and an explicit execution stack.
- AST built with the child/sibling (Fils/Frère) structure.
Turn-based strategy game in Java inspired by the Lord of the Rings universe.
- Player commands a team of heroes (Human, Dwarf, Elf, Hobbit) against an AI-controlled monster army (Troll, Orc, Goblin).
- AI pathfinding powered by Dijkstra's algorithm; full Swing graphical interface.
- Game state persistence via Java serialisation.
Artificial intelligence for the Reversi board game, built in C with advanced search algorithms.
- MinMax algorithm with alpha-beta pruning for optimal decision-making.
- Sophisticated heuristics for position evaluation.
- Configurable search depth for adjustable difficulty.
Design and implementation of a complete database for hospital management.
- Manages patients, medical staff, appointments, treatments and medical records.
- Advanced permission system with triggers and stored procedures.
- Full entity-relationship design (ERD) with normalised schema.
Reimplementation of the classic Tetris in C with modern features and visual effects.
- Custom game modes and an advanced scoring system.
- Save/load functionality and innovative visual effects via SDL2.
- Clean algorithmic design for piece movement, collision and line clearing.
An x86-64 assembly program that performs syntactic analysis of parentheses in a string (with customizable pairs of parentheses).
Automated Twitter and Telegram bot that publishes quotes on a schedule.
- Dual-platform integration via Twitter API and Telegram API.
- Built-in scheduling system for timed automated posts.
- State persistence with Pickle and randomised quote selection with NumPy.
Data compression tool in C based on Huffman coding, with a graphical SDL2 interface.
- Builds a binary frequency tree and generates optimal prefix codes to minimise file size.
- Full encode/decode pipeline with file I/O.
- Graphical interface built with SDL2 for visualising the compression process.
Technical Reports
In-depth technical analyses, research, and engineering documentation
View Report
Compiler & Virtual Machine Design
Full compilation pipeline for the CPYRR language — lexical analysis, AST construction, semantic passes, code generation and stack-based VM execution.
View Report
AI Model for Reversi
Implementation and optimization of an artificial intelligence model for the Reversi board game — algorithms, heuristics and performance evaluation.
View Report
Lord of the Rings Strategy Wargame
Object-oriented design and implementation of a turn-based strategy game inspired by the Lord of the Rings universe — class hierarchy, game engine and AI opponents.
View Report
x86_64 Parenthesis Parser
Low-level implementation of a syntactic parenthesis analyzer in x86_64 assembly — stack mechanics, register management and parsing logic.
View Report
Hospital Database
Design and implementation of a complete database for hospital management.
View Report
Combinational Circuits & 7-Segment Display
Design and analysis of combinational logic circuits with a focus on 7-segment display encoding — truth tables, Karnaugh maps and gate-level implementation.
Skills
Languages, tools, systems and domains I work with.
Cybersecurity & Networking
Cryptography
AES-256, Argon2, RSA
WireShark
Network analysis
Networking
TCP/IP, routing, sockets
Security
Pentest, hardening, audits
Kali Linux
Pentesting environment
PackeTracer
Network Simulation
Hashcat
Password Cracking
Metasploit
Exploit Development
OSINT
Information Gathering
Systems & DevOps
Linux
System administration
Windows
System administration
Bash
Automation, system scripting
PowerShell
System Automation
Maven
Dependency Management
SSH / Servers
Remote administration
Arduino
Electronics, Enbedded Systems
Programming Languages
C
Systems, compilers, sockets, IPC
Python
AI, ML, automation, APIs
Java
OOP, Swing, Web apps, algorithms
x86_64 ASM
Low-level programming
MySQL
DB design, triggers, procedures
HTML5
Frontend development
CSS3
Responsive Design, Flexbox/Grid, Animations, UI Styling
Jacascript
DOM, Event Handling, APIs, Async Programming
PHP
Backend, MVC, Server-side
Prolog
Logic Programming, Rule Based Systems
Frameworks
TensorFlow
Machine Learing, Models
NumPy
Numerical Computing
Symfony
BackEnd Framework
OpenGL
Graphics Rendering, 3D
PHP MyAdmin
Database Admin, MySQL
Telegram API
Bots & automation
Twitter API
Automation (Tweepy)
Education
Academic background and training.
Oteria Cybersecurity School, Paris, France
- Advanced network security and architecture design
- Cyber defense strategies and incident response
- Secure systems engineering and infrastructure hardening
- Applied cryptography and offensive/defensive security concepts
ANSSI (French National Cybersecurity Agency)
- Cybersecurity awareness and digital hygiene
- Protection against phishing and social engineering attacks
- Understanding of common cyber threats and best practices
Cisco
- Networking fundamentals (TCP/IP, routing, switching)
- Cybersecurity principles and threat analysis
- Network troubleshooting and infrastructure basics
- Endpoint security and introductory SOC concepts
University Jean Monnet, Saint-Étienne, France
- Systems Programming (Python – C – OCaml – Java – SQL – PHP – JavaScript – HTML5 – CSS3 – x86_64 Assembly – Bash)
- Databases, Compilation Theory
- Advanced Algorithms, Multiprocess Programming, Operating Systems
Experience
Professional roles in IT and engineering.
Coming soon...
- Administration of network and system infrastructure
- Implementation of security policies and access controls
- Equipment supervision and real-time monitoring
AMS Solidarité
- Backend development : donation management API and administration interface.
- Integration of a payment module and management of a relational database.
SCC France
- Level 1 & 2 technical support for end users
- Deployment and configuration of workstations and servers
Freelance
- Provided tutoring in programming languages including C, Python, Java, and web development.
- Taught core concepts in algorithms, data structures, and software development fundamentals.
- Supported students through practical exercises and technical problem-solving.
Personal
Beyond the keyboard, I’m an active person who enjoys physical challenges and hands-on work. I train regularly at the gym and practice wrestling, where I placed 3rd in the 2025 FFSU regional championship (-77kg). I also enjoy hiking, mountain biking, and horse riding.
Before transitioning into tech during university, I worked in the construction industry as a team leader, developing strong skills in management, coordination, and problem-solving.
I’m also curious by nature, enjoy reading, car mechanics, and like any developer, I run on a lot of coffee ^^'
Mountain biking — trail session
DIY workshop — hands-on mechanical project
Wrestling — sparring session
Wrestling — training session
Wrestling — technique drilling
Horse riding — outdoor session
Horse riding — training & control practice
Reading — focus & learning mindset
Coffee break — thinking & coding sessions