Cybersecurity Master's student at ESGI seeking an apprenticeship opportunity in cybersecurity. Expertise in secure development, penetration testing, digital forensics, and both offensive and defensive security techniques.
Learn MoreFrench Ethical Hacker, cybersecurity student, System & Network Administrator based in Paris, France. My expertise spans from user support to offensive security with a strong background in both Linux and Windows environments.
Currently pursuing a Master's degree in Cybersecurity, I balance academic knowledge with hands-on experience in SOC analysis, incident response, digital forensics, and penetration testing.
My core competencies include:
I regularly participate in CTF competitions to sharpen my skills and share my knowledge through write-ups and blog posts. My approach to cybersecurity combines technical expertise with continuous learning and proactive threat intelligence.
Contact MeSpecialized in digital forensics with practical experience in memory dump analysis, disk imaging, and incident response procedures. Proficient in the complete forensic methodology from preservation to reporting.
Understanding of digital forensics market: is très cher ...
Recent successful exploitation of critical vulnerabilities across various platforms, demonstrating practical penetration testing skills and vulnerability research capabilities.
NTLM hash leak via malicious ZIP file exploitation. Successfully captured and cracked NTLMv2 hashes using Responder and John the Ripper.
Remote Code Execution in RoundCube webmail. Gained initial access and extracted encrypted MySQL sessions with 3DES decryption.
Below utility privilege escalation via symbolic link attack on log files. Achieved root access through /etc/passwd manipulation.
Advanced Active Directory attack technique using certificate-based authentication to compromise service accounts and escalate privileges.
Developed fork bomb implementations in both Bash and C language for system resource exhaustion and denial of service testing.
Windows and Linux system hardening based on CIS benchmarks and ANSSI GNU/Linux security recommendations. NGINX/Apache2 server security configuration.
Experience in deploying and securing various infrastructure components:
Active participant in Capture The Flag competitions and cybersecurity training platforms. Currently focusing on HackTheBox Season 8 with multiple successful machine completions.
Active on Season 8 machines
Regular participation
Challenge solving
Binary exploitation expertise
Annual competition
Buffer overflow exploitation with precise offset calculations and stack canary bypass techniques.
Custom x86-64 shellcode development with syscall mastery and constraint circumvention.
Heap exploitation techniques including use-after-free vulnerabilities and malloc/free manipulation.
Advanced chroot escape techniques and sandbox containment bypass through filesystem manipulation.
Advanced binary analysis, reverse engineering, and exploit development with constraint solving.
Expert use of pwntools, GDB debugging, and Python automation for exploit development.
Sophisticated ransomware with EDR and AntiVirus bypass capabilities developed for research and educational purposes.
Development of an Assembly program for encryption/decryption with IV and secret key generation for AES CBC mode (128, 192, and 256 bits).
Complete 3-tier PKI infrastructure with automated deployment script. Includes Root CA, Intermediate CA, and end certificates with CIS-compliant NGINX HTTPS configuration.
Encryption/decryption program that incorporates a computer worm, supporting AES CBC mode with 128, 192, and 256-bit keys, including key and IV generation.
Advanced DuckyScript coding and sophisticated payloads for security research and penetration testing scenarios.
Deployment of Debian 12 server with GLPI web application, including data migration from old server and GLPI updates.
Deployment of Debian (Arch Linux etc...) with LVM and encrypted partition for enhanced security.
IDS/IPS deployment with Suricata on Debian server to monitor network traffic. Built with specific security rules and custom signatures.
Deployment of Wazuh Server cluster with agents (Dashboard, Manager, Master). Complete SIEM solution for security monitoring.
Design and implementation of various shellcode techniques for systems research and security analysis.
Development of polymorphic code techniques and analysis methodologies for security research.
Tool focusing on finding hash (ciphertext) and their plaintext format for digital investigation purposes.
To see my public projects and contributions, check out my profiles:
Expert in System-Network Architectures and Computer Security - 2024-2026
Software and Network Project Manager - 2023-2024
Computer Science specializing in NLP and Turkish Language - 2020-2023
September 2025 - Now
January 2025 - April 2025
2023 - December 2024
Paris, since 2023
Paris, since 2020
Since 2019
2017-2018
I regularly share my discoveries, analyses, and CTF challenge solutions. As a cybersecurity enthusiast and participant in platforms like TryHackMe, HackTheBox, RootMe, and 404CTF, I document my learning journey and technical findings:
Complete walkthrough of the Fluffy machine featuring CVE-2025-24071 exploitation, Shadow Credentials attack, and ESC16 ADCS privilege escalation.
Read MoreTechnical analysis of RoundCube CVE-2025-49113 exploitation, 3DES session decryption, and Below privilege escalation vulnerability.
Read MoreComplete 13-step incident response procedure for ransomware attacks, including memory analysis with Volatility and evidence preservation techniques.
Read MoreBuilding a complete 3-tier PKI infrastructure with automated deployment script and CIS-compliant NGINX HTTPS configuration for enterprise security.
Read MoreDeep dive into modern AD exploitation including Kerberoasting, NTLM relay attacks, Shadow Credentials, and Resource-Based Constrained Delegation.
Read MoreDetailed walkthrough of the reverse engineering challenges from the 404CTF 2025 competition, including assembly analysis and obfuscation techniques.
Read MoreHave a question or interested in collaborating on a project? Feel free to reach out. I'm always open to discussing cybersecurity challenges, CTF competitions, digital forensics, or potential opportunities.
Email: mustapha.hilaloglu@gmail.com
Location: Paris, Île-De-France
LinkedIn: linkedin.com/in/Mustapha-hilaloglu
GitHub: github.com/Gordibus