Yassine Season 06 · Global
#632/ 7 797
Hack The Box Season 6 global ranking
Cybersecurity Engineer
Yassine SABIR Securing complex systems.
Junior cybersecurity engineer passionate about ethical hacking and securing IT and industrial systems.
Key Strengths
Offensive Cybersecurity
Web, system, and network penetration testing (Linux & Windows), vulnerability exploitation, enumeration, and privilege escalation.
Defensive & Forensic Cybersecurity
Digital evidence analysis, industrial controller investigations, intrusion detection, logging, and event correlation.
Networks & Systems
Design of secure multi-DMZ infrastructures, firewall, VPN, DNS, and LDAP configuration, and network monitoring.
Analysis, Crypto & Automation
Static/dynamic analysis, reverse engineering, secure cryptography design, and tooling scripts (Python, Bash, C, Java, PHP, Go, PowerShell).
2024 · France
#12in France
Hack The Box 2024 national ranking with 100+ rooted machines
01. Profile
Building resilience through cyber expertise
Cybersecurity engineer trained at Grenoble INP ESISAR and ENSIAS, focused on offensive security, digital forensics and resilient infrastructure.
I combine applied research, penetration testing and hands-on CTF practice to turn complex technical findings into concrete remediation plans.
ys4b@portfolio:~ interactive
YS4B@Portfolio:~ $ cat aboutMe.txt
Hey there 👋 I'm Yassine, a cybersecurity engineer passionate about understanding and securing complex systems. I specialize in offensive security, vulnerability assessment and defensive hardening. I combine academic research with hands-on experience on Hack The Box and CTF competitions.
02. Skills
Core technical domains
From attack simulation to forensic investigation and infrastructure hardening.
Offensive Cybersecurity
Web, system and network penetration testing, exploitation, enumeration and privilege escalation.
Defensive & Forensic Cybersecurity
Digital evidence analysis, industrial controller investigations, intrusion detection and event correlation.
Networks & Systems
Secure multi-DMZ infrastructures, firewalls, VPN, DNS, LDAP and network monitoring.
Analysis & Reverse Engineering
Static and dynamic analysis, binary reverse engineering and protocol research.
Cryptography
Secure encryption methods and deep understanding of SSH, TLS and related protocols.
Programming & Automation
Python, Bash, C, Java, PHP, Go and PowerShell automation.
Hack The Box
Ranking snapshot
Offensive skills measured in real conditions on the reference platforms.
YS4B
Hack The Box · Security profile
Current Rank
Pro Hacker
View profile
Published writeup coverage
Breakdown of the documented reports by domain, target OS and difficulty.
picoCTF
Challenge breakdown
158 challenges solved across exploitation, cryptography, reverse engineering and forensics.
picoCTFPractice platform
03. Experience
Professional journey
Applied research, penetration testing and secure product development.
-
Mar → AugResearch · Forensics
Research Intern in Forensic Analysis – EDF Lab Paris-Saclay
Forensic methods tailored to industrial PLCs.
- In-depth PLC analysis to identify critical investigation data.
- Forensic extraction preserving data integrity and controller operation.
- Python tooling for automated artefact extraction and analysis.
Technologies: Wireshark, Binwalk, Python
-
Jan → JunPentest
Pentester – ESISAR / SODIMAS
Cybersecurity assessment of connected elevator infrastructure.
- Penetration tests on embedded systems, networks and web platforms.
- Critical vulnerabilities across hardware, network and application layers.
- Risk analysis and viable attack paths.
- Technical reports and remediation recommendations.
Technologies: Nmap, Metasploit, Burp Suite, SQLmap, Hydra, FFUF, Bash, Python
-
AugWeb development
Web Developer Intern – Groupe OCP
Web portal for internship management.
- Internal portal covering the full intern management workflow.
- Automated generation of official documents and certificates.
Technologies: PHP, HTML, CSS, MySQL, TCPDF
04. Projects
Selected research & builds
Security engineering projects spanning infrastructure, protocol research and software.
01
Secure Multi-DMZ Infrastructure
Designed a segmented architecture hosting identity, network and observability services.
- Goal
- Firewalling, identity, logging and supervision
- Stack / tools
- Iptables, OpenLDAP, OpenVPN, DNS, ELK
02
Terrapin Attack Reproduction
Recreated CVE-2023-48795 against SSH and validated detection requirements.
- Goal
- Model downgrade vectors and mitigations
- Stack / tools
- Python, SSH, Wireshark
03
Mobile Malware Reverse Engineering
Static and dynamic analysis of obfuscated Android malware.
- Goal
- Expose malicious behaviour and payload delivery
- Stack / tools
- JADX, Frida, MobSF, ADB
04
SWAP-DCT Steganography
Text embedding in JPEG images using DCT coefficient swapping.
- Goal
- Imperceptible and robust data hiding
- Stack / tools
- Python, NumPy, OpenCV
05
Secure Active Directory Infrastructure
Complete Active Directory domain with centralised identity and policy management.
- Goal
- Secure enterprise authentication and administration
- Stack / tools
- AD DS, DHCP, DNS, LDAP, GPO, PowerShell
06
Best Wi-Fi Repeater in a SPAN Network
Android application recommending the optimal access point.
- Goal
- Optimise connection sharing using performance metrics
- Stack / tools
- Java, Android Studio, Android SDK, Wi-Fi APIs
05. Education
Academic path
Double engineering degree
Grenoble INP ESISAR
Computer Science, Networks & Cybersecurity
Engineering degree
ENSIAS
Information Systems Security
Preparatory classes
CPGE Moulay Abdellah
MPSI / MP
06. Writeups
Latest walkthroughs
Structured reports covering exploitation, DFIR, SOC and malware-analysis challenges.
Scroll to spin the sphere, click a machine to open its report.
WingData
A structured Linux penetration-testing walkthrough covering enumeration, exploitation and privilege escalation.
Open writeup
07. Achievements
Competitive highlights
Hack The Box — Season 6
Platinum-tier season finish, ranked 632 out of 7,797.
Hack The Box — Season 5
Ruby-tier season finish, ranked 1,408 out of 7,825.
TryHackMe — Advent of Cyber 2022
Completed the track covering exploitation and post-exploitation techniques.
Languages
Communication strengths
Arabic
Native fluency across personal and professional contexts.
French
Full professional proficiency with daily use in engineering programs.
English
Advanced level validated by TOEIC 850/990 and international teamwork.
Contact
Start the conversation
Have a cybersecurity opportunity, research project or technical challenge? Let’s talk.
Email
LocationParis, France — Remote friendly
Private contact options
Proton Mail
Write to sabir.yassine@proton.me. From another Proton Mail account the message is end-to-end encrypted automatically. From other providers it is only encrypted in transit (TLS) — use the OpenPGP option for end-to-end protection.
Email sabir.yassine@proton.meOpenPGP
Download my public key and encrypt your message locally with any OpenPGP client before sending it. Downloading the key does not encrypt anything by itself.
Checking public key…
- Fingerprint
- Identity
- Algorithm
- Created
- Source
For strong protection against key substitution, confirm this fingerprint through an independent channel (e.g. in person or on a profile you trust). HTTPS alone cannot prove the key is mine.