Engineer by day. Researcher by night. Lately I've been more involved in building security controls into software products and the infrastructure that powers them. I've developed a growing interest in research at the intersection of AI/ML and privacy, and would welcome opportunities in this domain.
Tools · Certifications · Talks · Hack Wednesday · Projects · Writing · Activity · Contact
- API Security Certified Professional (ASCP), APIsec University
- Practical Junior Penetration Tester (PJPT), TCM Security
- Practical Help Desk Associate (PHDA), TCM Security
- Certified in Cybersecurity (CC), ISC2
- Through the Hacker's Lens - 2024 Learnings and 2025 Cybersecurity Vision
Discussed top vulnerabilities identified in 2024 IT infrastructures, exploitation methods, remediation, and predictions for offensive security trends in 2025. - Unmasking Cyber Threats: An Offensive Security Approach for Nigerian Businesses
Demonstrated and explained how limit overrun race condition can be exploited in web applications in the fintech space in Nigeria.
A live-stream series on CyberPlural's YouTube channel.
Season 2: API testing with the PortSwigger Web Security Academy
Season 1: Web LLM attacks (5 episodes)
- rke2-homelab-blueprint
Production-hardened RKE2 Kubernetes for homelabs: CIS hardening, automated TLS, Rancher, Longhorn, MetalLB and Prometheus/Grafana. - Pentest-Resources-Cheat-Sheets
A curated index of pentest and red-team cheat sheets, write-ups, tools and techniques. - Python3-Pentesting-tools
Small Python 3 pentesting tools from FreeCodeCamp's "Python for Penetration Testing" course. - Telstra-Cybersecurity-Virtual-Experience
A Python firewall rule that blocks requests exploiting Spring4Shell (CVE-2022-22965).
- Proving Impact Without Full Takeover: A Short XSS Story, January 2026
- Leveraging AlwaysInstallElevated for Windows Privilege Escalation, February 2025, on CyberPlural
- Security Groups vs NACLs in AWS: Key Differences Explained, February 2025, on Medium
- Active Directory Explained: Fine-Tuning Controls for Privileged Accounts, December 2024
- Active Directory Explained, Part 3: Kerberos Authentication Protocol, May 2024, on CyberPlural
Earlier posts (8)
- IoT Meets Cloud: The Perfect Partnership, January 2025, on Medium
- Steganography: Hiding Messages in Plain Sight, November 2023, on Medium
- Social Engineering, Part 2: Recognising and Defending Against Common Phishing Attacks, October 2023, on CySED
- Social Engineering, Part 1: The Sneaky Tactics Targeting Everyday People, October 2023, on CySED
- OSI Model: Understanding ISO's Conceptual Framework for Networking, August 2023, on Medium
- Hack Your Way into Cybersecurity: Mastering the Basics with Free Resources and Courses, August 2023, on Medium
- Mastering Active Directory: Building Your Lab Environment, Part 2, July 2023, on Medium
- Mastering Active Directory: Building Your Lab Environment, Part 1, July 2023, on Medium
Full archive on my blog and Medium.
LinkedIn ·
X (Twitter) ·
Blog