Olivier Vigneresse

A project that started with a penetration testing and vulnerability assessment exercise on an order processing website, which led to improvements in two phases.

During the first phase, I analyzed the configuration and source code. I then produced the report for required configuration changes, such as on Apache headers, the encryption, and the php.ini file. I also assisted during the shared-screen implementation.

As the application was carrying so much technical debt, I redeveloped the application from PHP 5 with no framework to PHP 8/Laravel during the second phase. I then tested and deployed it on the Amazon EC2 instance. I also provided documentation and training for easy maintenance of underlying infrastructure, e.g., how to keep Linux, Apache, and MySQL up to date.

A web application for a streaming company for managing the technical content of its contracts with its business customers and resellers. Each contract contained a spreadsheet with dozens to over 100 articles, which they managed via a spreadsheet and email. This was all replaced by a PHP-based web application.

A European video-on-demand website got hacked; one of its content licensors found a watermarked video on the dark web, which could be traced back to the website.

After reviewing and analyzing the platform logs, the issue was traced to poor security design decisions, which I remedied immediately. After further auditing the platform, I also found other potential security holes. For which, I delivered a comprehensive report on the issues within a few weeks, with recommendations.