.text:00401000 start entry point
Portrait of Adem Kefi
Download CV

; aka blackkader

Adem Kefi

"ICT Engineer // Reverse Engineer // Mobile Pentester"

I'm a Network & Telecom engineering student at INSAT who spends most of my free time pulling binaries apart to see how they tick. That curiosity turned into competing in CTFs, authoring my own reverse engineering and mobile security challenges, and teaching both at Securinets INSAT.

.text:00401500 sub_experience xref: start

  1. FL1TZ Cybersecurity Team

    Reverse Engineering and Mobile Player / Author

    Sept 2024 – Current

    • Qualified for CSAW CTF, ranked 10th
    • Qualified for ASCWG, top 5%
    • Qualified for OLYMPIC CTF, top 10%

  2. Securinets INSAT

    Technical Team Member & RE/Mobile Instructor

    Sept 2025 – Current

    • Ran 15+ workshops on reverse engineering (static & dynamic analysis)
    • Ran workshops on mobile security (APK reversing, pentesting)
.text:00401680 sub_education xref: start

  1. INSAT — National Institute of Applied Science and Technology

    Network and Telecommunication Engineering

    2023 – Current

  2. Mahmoud Messadi High School, Nabeul

    Computer Science

    2019 – 2023

.text:00401800 sub_projects xref: sub_experience, sub_education

#01

AI-Powered WAF

; Team project

Trust Engine (UEBA): dual-layer IP/user risk scoring, Redis sync

Part of a team-built AI web application firewall. I built the Trust Engine in Go: it gives every visitor, by IP and by logged-in user, a trust score from 0 to 10 and tells the firewall how strict to be (allow, allow with extra checks, challenge, block or ban). Eight detectors feed the score (recon, brute force, DDoS, scraping, session oddities, evasion, vulnerability probing, account abuse), plus country and proxy/VPN checks. For users, the score is smoothed over time with EWMA so recent behaviour counts more, and scores are shared with the proxy through Redis. I also wrote the identity middleware and the unit tests.

  • Go
  • Redis
  • UEBA
  • EWMA

▸ open repository

.text:00401B00 sub_writeups xref: sub_projects

Reverse Engineering

Letmethink

A password-checking Go binary that unpacks itself in memory and validates your input inside a custom VM bytecode interpreter.

Reverse Engineering

Obfer

Reverse engineering a stripped anti-debug ELF crackme through a chained ROT13/ROT20/XOR/AES/ChaCha20 obfuscation pipeline.

Mobile Security

DynamicIntro

Using Frida to hook an Android activity method and swap its argument at runtime to satisfy a hardcoded string check.

▸ view all writeups