Daubresse Nicolas
Consultant Cyber Sécurité at Wavestone
Nanterre, Île-de-France, France
Summary
👤
Senior🎓
Top SchoolDaubresse Nicolas is a seasoned cyber security consultant with 10 years of experience at Wavestone, specializing in active intrusion testing (Active Directory, Red Team, web and mobile) and incident response for CERT-W. He combines hands-on offensive skills with tool development in Python, PowerShell and C#, and contributes to notable open-source post-exploitation projects—having authored modules for SILENTTRINITY that detect privilege escalation vectors like AlwaysInstallElevated and modifiable service binaries. Trained at Télécom ParisTech and EURECOM in information security, he leads audits, red/purple team engagements and system configuration reviews while driving R&D and training initiatives. Based in Nanterre, he brings a practitioner’s eye for exploitation mechanics and pragmatic defenses, often surfacing subtle attack paths that standard scans miss.
10 years of coding experience
Baccalauréat, Scientifique SVT, Mention Bien, Baccalauréat, Scientifique SVT, Mention Bien at Lycée Saint Paul de LensLycée Faidherbe (prépa)Ingénieur à Télécom ParisTech et Diplôme d'Eurecom, Sécurité informatique, Ingénieur à Télécom ParisTech et Diplôme d'Eurecom, Sécurité informatique at École Télécom ParisTechMaster of Science (M.Sc.), Sécurité informatique, Master of Science (M.Sc.), Sécurité informatique at EURECOM
French, English, Chinese
Github Skills (10)
net10
asp-net10
exp10
dotnet10
csharp10
pos10
security-scan10
security-txt10
privilege-escalation10
security10
Programming languages (3)
Github contributions (5)
byt3bl33d3r/SILENTTRINITY
Aug 2019 - Sep 2019
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
Role in this project:
Security Engineer
Security EngineerContributions:24 commits, 8 PRs in 12 days
Contributions summary:Daubresse contributed multiple modules designed to identify and exploit potential privilege escalation vulnerabilities. The modules, written in Boo, focused on detecting weaknesses related to AlwaysInstallElevated registry keys, Group Policy Preferences (GPP) passwords, McAfee SiteList.xml files, modifiable registry autoruns, modifiable service binaries, modifiable service registry keys, modifiable services, and modifiable folders in the %PATH%. The user also created a module to identify special privileges of the current user and find unattended install files.
pythondlrred-teamsc-sharps-net
Daudau/daf
Nov 2015 - Apr 2016
Contributions:3 PRs, 14 pushes, 6 branches in 5 months
diskpythonanalysis-framework
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.