You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Christophe B.CB

Christophe B.

Pentest web | Internal Pentest | Penetration Testing

€750/day
10 projects
Nice, FR
15+ years

Average response time: 2 hours

Freelancer profile translated to English.
Back to original language

About Christophe

------] Certifications

- BSCP : Burp Suite Certified Practitioner
- CRTO: Certified Red Team Operator
- CRTE : Certified Red Team Expert
- CRTP: Certified Red Team Professional
- PACSP : Certified AWS Cloud Security Professional (AWS Red Team)
- CARTP : Certified Azure Red Team Professional
- PNTP: Practical Network Penetration Tester
- Lead Implementor ISO 27001
- Risk Manager ISO 27005

------] Miscellaneous Information

- Former Root-Me staff member: administration, challenge creation, user support and assistance, ...

- Guru level on HackTheBox

------] Presentation

Passionate about everything related to IT security, I have been working in this field for over 20 years.

Throughout my professional career, I have developed a sense of autonomy and good interpersonal skills.
I am also described as a diligent, motivated person, passionate about this profession.

With my technical experience, particularly in security and intrusion scenarios, I am looking for pentest / penetration testing missions.

My preferred areas: Web Pentest (Frontend/Backend, API) Internal Pentest (Windows / Active Directory)

I remain at your disposal for any further information.
  • French

    Native or bilingual

  • English

    Conversational

Can work on-site
Nice (up to 50km)

Experience

  • Achilles Advanced Systems
    Malt logoOn Malt
    Web Pentester - Web
    March 2025 - March 2025 (1 month)
    Web Application Penetration Testing:

    - Blackbox penetration testing on cybersource middleware application

    A01 Broken Access Control.
    A02 Cryptographic Failures.
    A03 Injection.
    A04 Insecure Design.
    A05 Security Misconfiguration.
    A06 Vulnerable and Outdated Components.
    A07 Identification and Authentication Failures.
    A08 Software and Data Integrity Failures.
    A09 : Security Logging and Monitoring Failures
    A10 : Server-Side Request Forgery (SSRF)

    - Report with test methodology and result
    Vulnerability Exploitation Penetration Testing API Pentest OWASP Offensive Security Penetration testing Pentest Web Pentest
  • Achilles Advanced Systems
    Malt logoOn Malt
    Web Pentest
    September 2024 - September 2024 (1 month)
    Web Application Penetration Testing:
    - Blackbox penetration testing on cybersource middleware application
    - Report with test methodology and result

    Network Penetration Testing :
    - Penetration testing in the CDE network
    - Report with test methodology and result

    Discovery scan on Segmentation Network:
    - Penetration testing from platform and tools network to CDE network
    - Report with test methodology and result
    Penetration Testing API Pentest OWASP Penetration testing Web Pentest
  • Toutenpixel
    Malt logoOn Malt
    Pententer
    September 2023 - September 2023
    Web Application Penetration Testing:
    - Injection
    - Authentication bypass
    - Cross-Site Scripting
    - Access control violation
    - Security misconfiguration
    - Sensitive data exposure
    - Insufficient attack protection
    - Cross-Site Request Forgery (CSRF)
    - Using components with known vulnerabilities
    - Insecure APIs
    Penetration Testing OWASP Penetration testing Web Pentest

Reviews

5.0

Out of 9 ratings

C

Christophe

Achilles Advanced Systems

Reviewed on 5/19/2025

This is not our first mission with Christophe, and as always, the collaboration has been smooth and effective.
C

Christophe

Achilles Advanced Systems

Reviewed on 4/19/2024

We regularly work with Christophe for our PCI-DSS certification process. As usual, our expectations are fully met thanks to his expertise and professionalism.

Recommendations

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • Professional License - Administration and Security of Systems and Networks
    Université Paris-Sud
    2018

Certifications

  • ISO 27001 Lead Implementor
    LSTI
    2009
    CISO ISO 27001
  • ISO 27005 - Risk Manager
    LSTI
    2010
    Risk Analysis

Skill set

Categories