Breaking and building since my early teens — web security, network exploration. Four years in regulated finance (wealth management, LCB-FT compliance, business management). Full-time back on technical security since late 2025: active CTF practice, open-source investigative tooling, deepening methodology. Financial flows, risk frameworks, and OSINT — bridged.
CTF Solo team: Fear the Weasel
Trace Labs' equivalent of a Black Badge — awarded to the submission judged most valuable by the coach team and Trace Labs Leadership. Solo, 37th / 123, under CTF alias Fear the Weasel.
| Dates | Événement | Équipe | Résultat | Organisateur |
|---|---|---|---|---|
| 06/06/2026 | Trace Labs Global Search Party | Solo | 37e / 123 · 🏅 MVO | Trace Labs |
| 22/05 – 29/05/2026 | Medileak 3 | Solo | 32e / 486 · 955 pts | Medileak |
| 08/05 – 15/05/2026 | Bleuet de France V5 | Solo | 36e / 220 · 100% des flags | AEGE |
| 2025–2026 | OSINT Industries CTF | Solo | Rang 19 / 2300 | OSINT Industries |
| 2025–2026 | Osintopia | Solo | Top 8% | Osintopia |
| Repo | Description |
|---|---|
usertrail |
OSINT username recon across 29 European & French platforms |
sanctioncheck |
CLI screening tool for international sanctions lists (EU, UN, OFAC, DGT) |
dorkator |
OSINT dork generator — 84 curated dorks, batch opener, HTML/MD/JSON reports |
corprecon |
French corporate mandate mapping (SIRENE, BODACC, Pappers) |
sec-notes |
OSINT/CTF writeups, methodology notes, playbooks |
OSINT · Financial Investigation (FININT) · Threat Intelligence
Core · Python · Linux · Maltego · Shodan · Spiderfoot · Recon-ng · Sherlock · Wireshark
Learning · Splunk · Wazuh · MITRE ATT&CK · Malware analysis
| Certification | Émetteur | Date |
|---|---|---|
| Most Valuable Operative (MVO) | Trace Labs | Juin 2026 |
| Trace Labs OSINT Educational Series | Trace Labs / CanCred | Avril 2026 |
| EBIOS Risk Manager — introduction | Club EBIOS / ANSSI | Avril 2026 |
| AMF (91/95) | AMF | — |
- OSINT Industries CTF — Rank 19 / 2300
- Osintopia — Top 8%
- Root-Me · TryHackMe · HackTheBox · LetsDefend
OSINT investigation starts with a clear methodology before touching any tool. Structured collection → validation → enrichment workflow, documented in Obsidian, published on sec-notes.
Financial background feeds directly into FININT: reading corporate structures, tracing beneficial ownership, cross-referencing sanctions lists — four years of professional practice under LCB-FT compliance.
Contact · Available on request · @twux-sec