Highly accomplished Penetration Tester and Security Researcher with hands-on expertise in Active Directory exploitation, web application security, ICS/OT research, and IoT hardware hacking. Recognized as a "Pro Hacker" on HackTheBox (#2 in Nigeria) and a top 6% performer on TryHackMe, I specialize in identifying critical vulnerabilities and developing robust remediation strategies. My mission is to fortify digital infrastructures, document comprehensive kill chains, and empower organizations to effectively mitigate cyber threats.
Work
AI-Driven Network Anomaly Detection for Healthcare IoT
|
Lead Researcher
Remote, ,
→
Summary
As Lead Researcher, I am developing a real-time threat monitoring system for IoT medical devices and hospital networks.
Highlights
Developing a real-time threat monitoring system designed to detect anomalies in IoT medical devices, EHRs, and hospital networks, specifically targeting ransomware and data breaches.
Leading the research and implementation of AI-driven techniques to enhance the security posture and resilience of critical healthcare infrastructure.
Ubuntu Bridge Initiative
|
Cybersecurity Intern
Remote, ,
→
Summary
As a Cybersecurity Intern, I led incident response efforts and vulnerability remediation, enhancing the security posture for a fintech organization.
Highlights
Reconstructed a complex 4-stage attacker kill chain for a fintech breach, identifying initial access via SQLi/SSRF, persistence through sudoers/shell profile backdoors, exfiltration, and C2 beaconing, ultimately exposing an insider threat.
Delivered a comprehensive, board-ready remediation package, including a risk register, regulatory breach notification, and a 30/60/90-day roadmap, ensuring confirmed-vs-exposed data control mapping.
Exploited an AWS IAM privilege-escalation path (unrestricted iam:PassRole → Lambda execution) in a cloud attack-path assessment, remediating it with a scoped iam:PassedToService condition while preserving authorized workflows.
HackerOne / BugCrowd / YesWeHack
|
Security Researcher
Remote, ,
→
Summary
As a Security Researcher, I actively hunted and disclosed web application vulnerabilities, earning recognition in program hall of fames.
Highlights
Identified and reported critical web application vulnerabilities, specializing in authentication flaws, IDOR, and API security across multiple platforms.
Achieved consistent recognition in program hall of fames for disclosed findings, demonstrating high impact in vulnerability discovery and reporting.
Covenant University
|
Security Engineer Apprentice
Ota, Ogun State, Nigeria
→
Summary
As a Security Engineer Apprentice, I conducted authorized penetration tests and developed Python automation for security audit workflows.
Highlights
Performed authorized penetration tests against university infrastructure, identifying vulnerabilities and ensuring compliance with NIST and ISO 27001 standards.
Developed Python automation scripts to streamline security audit workflows, significantly improving efficiency and consistency in vulnerability assessments.
Volunteer
Cybersecurity/Networking Lead
|
Google Developers Group (GDG) University Chapter
→
As Cybersecurity/Networking Lead, I developed and maintained a weekly cybersecurity quiz platform for university students, fostering community engagement and skill development.
Highlights
Built and maintained `gdg-cyber-quiz.web.app`, a weekly cybersecurity quiz platform that integrates multiple-choice questions and hands-on practical challenges.
Facilitated skill development and knowledge sharing for group members, enhancing their understanding of cybersecurity concepts and practical application.
Education
Covenant University
Ota, Ogun State, Nigeria
→
B.Sc.Computer ScienceGrade: SECOND CLASS UPPER
Awards
Pro Hacker
HackTheBox
Recognized as #2 in Nigeria and 6th in Season 11 with team RanswomWeare on HackTheBox.
Top 6% Ranking
TryHackMe
Achieved top 6% ranking among participants on the TryHackMe platform.
Cyber Apocalypse CTF 2026 - 103rd Place
Cyber Apocalypse CTF
Secured 103rd position out of 6,734 participants in the Cyber Apocalypse CTF 2026.
Program Hall of Fame Acknowledgment
HackerOne / BugCrowd / YesWeHack
Acknowledged in program hall of fame for consistently disclosed security findings across multiple bug bounty platforms.
Authored 20+ technical write-ups in under two months spanning Active Directory attacks, web application vulnerabilities, and ICS/OT research, including the two-part VulnBank pentest series and CVE-2026-54121 (Certighost) research.
sh4q Python — Safety-First Reconnaissance Control Plane
→
Summary
Designing a scope-enforced reconnaissance orchestrator with scoped DNS/HTTP resolution, redirect and DNS-rebinding validation, request-budget limiting, and an event-sourced SQLite evidence store with tool-version provenance.
Building a local-first, explainable monitor that flags protocol-valid-but-unsafe commands against a simulated water treatment plant and advises a human operator, backed by a tamper-evident hash-chained event store.
VulnBank Pentest Series | Burp Suite, OWASP WSTG/API Top 10
→
Summary
Ran a full black-box pentest of a vulnerable fintech app, chaining SQLi auth bypass, JWT forgery, BOLA, and negative-amount transfer theft into full account and financial compromise; 8 findings (4 critical) published with PoCs and remediations.
HTB Pro Labs & Fortresses | Active Directory, Cloud, Web
→
Summary
Completed Pro Lab Puppet and Fortresses Context and Akerva. Pwned Hard-rated machines (Pirate, Logging, TombWatcher) chaining Pre2k, gMSA abuse, RBCD, SPN jacking, and ADCS ESC15.
Built a custom PCB (ESP32, CC1101, GPS) for deauth detection, BLE scanning, and evil-portal deployment; built a Pico HID device for credential harvesting; and developed a post-exploitation tool extracting PSReadline history over SMB with Pass-the-Hash support.