Tools, technologies, and methodologies I use to identify, assess, and document security vulnerabilities.
Practical demonstrations of security assessment skills on intentionally vulnerable applications and platforms.
OWASP
API security assessment of the Completely Ridiculous API (crAPI) vulnerable application. Explored REST API vulnerabilities including broken authentication, excessive data exposure, mass assignment, and security misconfiguration.
Hack The Box
Active penetration testing practice on Hack The Box platform machines. Each machine involves systematic reconnaissance, service enumeration, vulnerability identification, exploitation, and privilege escalation in controlled environments.
OWASP
Systematic security testing of the OWASP Juice Shop vulnerable application. Focused on authentication bypass, injection attacks, client-side security, and business logic vulnerabilities using both manual and automated techniques.
Custom Lab
A comprehensive security assessment of an intentionally vulnerable banking web application. Conducted full reconnaissance, vulnerability identification, exploitation, and documented findings with remediation guidance.
Technical documentation of practical labs, CTFs, and penetration-testing exercises.
Comprehensive walkthrough of the Cap machine on Hack The Box, demonstrating network enumeration, service analysis, traffic capture analysis, and Linux privilege escalation techniques.
Documentation of common Linux privilege escalation vectors including SUID binaries, cron jobs, PATH manipulation, and kernel exploits discovered during CTF challenges.
Detailed walkthrough of identifying and exploiting SQL injection vulnerabilities in login forms and search functions, leading to authentication bypass and unauthorized data access.
Methodology for discovering hidden directories, files, and endpoints using wordlists and automated tools. Includes analysis of discovered endpoints for vulnerability assessment.
Professional credentials and structured learning programs that validate my cybersecurity knowledge.
APIsec University
May 2026
Verify CredentialAfricaHackon
July 2025 – March 2026
Verify CredentialGoogle / Coursera
2023
Verify CredentialI am currently open to Junior Penetration Tester, Security Analyst, and related entry-level cybersecurity roles.