Charles Fol
Reverse at Synacktiv
Paris, Ile-de-France
Summary
🤩
RockstarCharles Fol is a seasoned security engineer and reverse engineer based in Paris with eight years of hands-on experience in vulnerability research and exploit development. He has driven tooling and vulnerability fixes at Lexfo and Ambionics Security and now focuses on advanced reverse engineering at Synacktiv. An active open-source contributor, Charles has improved widely used projects such as pwndbg—enhancing hexdump, plist, and error handling—and contributed gadget-chain fixes to the notable PHPGGC library, highlighting deep expertise in PHP deserialization and GDB tooling. Colleagues know him for meticulous bug fixes that improve correctness and usability, and for bridging low-level exploitation techniques with practical defensive insights.
8 years of coding experience
9 years of employment as a software developer
Github Skills (14)
pwd10
debugging10
gdb10
debug10
php10
exploit10
vulnerability-research10
python10
dbg10
reverse-engineering9
codeigniter9
monolog9
lldb8
ctf7
Programming languages (7)
Github contributions (5)
ambionics/phpggc
Sep 2017 - Dec 2022
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:25 reviews, 146 commits, 118 PRs in 5 years 4 months
Contributions summary:Charles contributed to the PHPGGC library, which provides payloads for PHP's `unserialize()` function. Their commits primarily focused on fixing versions and merging branches related to different gadget chains, specifically for Monolog and CodeIgniter4. The contributions involved modifying existing code to ensure compatibility with different versions of the targeted libraries, showcasing a focus on exploit development and vulnerability research.
unserializephpprogrammaticallypayloads
pwndbg/pwndbg
Jul 2024 - Sep 2024
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
Role in this project:Security Engineer
Security EngineerContributions:2 reviews, 5 PRs, 7 comments in 1 month
Contributions summary:Charles primarily focused on enhancing the `pwndbg` debugging tool, particularly its `hexdump` and `plist` commands. Their contributions involved fixing bugs related to offset calculations, and data display within the `hexdump` command, enhancing its correctness. They also added new features to `plist` like `--offset` and `--count` to increase flexibility. Additionally, the user addressed error handling and made improvements to the history function.
pythonctfengineeringdisassemblerpeda
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.