You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Lafa F.LF

Lafa F.

Cybersecurity researcher CSPN CC IoT blockchain

€700/day
Paris, FR
3-7 years

Average response time: 1 hour

About Lafa

Specialized in Cybersecurity, I have competencies in Secure Development (Python, C), Pentesting, System Administration/Hardening and Blockchain development (Solidity).

On my cyber journey I had the opportunity to build experience in multiple languages and systems, working with little enterprises and big companies. I have an interest on new technologies, I used to worked on Blockchain and IoT pentest, such as Solidity development or Bluetooth fuzzing. I also have an experience in professional development in Python languages for API or vulnerability testing, and in system management and hardening, I had to configure secure systems and perform administrative tasks.


Skills :
DEVELOPMENT:
- Python (very experienced)
- Shell
- Langage C (very experienced)
- ASM x86 x64 /
- HTML / CSS
- PowerShell
- Javascript
- Solidity
- Go
TOOLS :
- Ghidra / IDA / r2
- Wireshark
- Frida
- Pwn (pwntools, ROPgadget)
- FastAPI
- PDF (didierstevens, peepdf ...)
- QEMU
- gdb (peda, gef, angr, lldb)
- Git
- Podman / Docker
PROTOCOLS :
- TCP Suite
- U2F
- DHCP
- RF (GSM- DCS, RFID, NFC, Bluetooth)
- DVRIP and ip camera protocols
- Experience in protocol reversing...
- Hardware communication protocols
SYSTEMS :
- APT based, Debian, Ubuntu, Kali
- Gentoo / Arch Linux
- Windows
MISC :
- OSINT
- Red Teaming
- Algebra / Analysis
- Jupyter
- RISC-V ( experienced )


  • French

    Native or bilingual

  • English

    Native or bilingual

Can work on-site
Paris (up to 50km)

Experience

  • CESTI
    Security Evaluator
    DIGITAL AND IT
    September 2023 - Today (2 years and 9 months)
    Evaluation of IoT devices, mainly firewall and network ciphers. IPsec and IKEv2 expertise in consistency with ANSSI IPsec DR requirements. CSPN and Common Criteria standards.
  • Thales
    Software security evaluator
    DEFENSE AND MILITARY
    October 2022 - August 2023 (11 months)
    Security evaluation, mainly based on Common Criteria standard. Testing of ECUs, IP cameras and android based systems. Research on RISC-V instruction fuzzing.
  • Ecole 2600
    API developer
    EDUCATION AND E-LEARNING
    January 2022 - Today (4 years and 5 months)
    Development of a python API (fastAPI) to sustain the development of a CMS.
    Development of a python API to work with a reverse engineering tool.

Recommendations

Be the first to recommend Lafa

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • RNCP 7 Expert de la sécurité des données, des réseaux et des systèmes
    Ecole 2600
    2024

Skill set

Categories