Web & API Security
Vulnerability discovery, application security testing, API security, authentication, authorization, injection, and exploit development.
01
About
Security researcher and offensive security engineer focused on vulnerability discovery, exploit development, reverse engineering, and real-world attack chains across web applications, APIs, mobile, Active Directory, cloud environments, and native binaries.
02
Research
Discovered CVEs.
Selected vulnerability research and publicly disclosed CVEs.
| CVE | Year | Vendor | Vulnerability | Severity | Advisory |
|---|---|---|---|---|---|
| CVE-2025-64488 | 2025 | SuiteCRM | Authenticated SQL Injection | High | GitHub |
| CVE-2025-11135 | 2025 | PMTicket | Authentication Bypass | Crit | MITRE |
| CVE-2025-7886 | 2025 | PMTicket | SQL Injection | Medium | MITRE |
| CVE-2024-10195 | 2024 | Tecno 4G Router | SQL Injection | Medium | MITRE |
| CVE-2023-6304 | 2023 | Tecno 4G Router | Authenticated Remote Code Execution | Crit | MITRE |
03
SKILLS
What I work on.
Active Directory
Kerberos attacks, delegation abuse, credential attacks, privilege escalation, lateral movement, and domain compromise.
Mobile Security
Android application analysis, reverse engineering, IPC and intent abuse, runtime instrumentation, and mobile exploit development.
Cloud Security
AWS, Azure, and GCP security assessment, identity abuse, privilege escalation, and cloud attack-path analysis.
Binary Exploitation
Memory corruption, heap exploitation, ROP, format strings and exploit development.
Reverse Engineering
Static and dynamic analysis, patch diffing, vulnerability discovery, binary analysis, and exploit research.
04
AWARDS
Achievements & Awards.
Selected results from CTFs and cybersecurity competitions..
#1
Cyberranges Global Leaderboard
2026
#1
CyberCon KE Finals CTF
2022
#1
CyberCon KE Preliminaries CTF
2022
#2
Africa BattleCTF, Individual
2024
#2
SheHacks Inter-University CTF
2023
#2
SheHacks Inter-University CTF
2022
#3
Blacks in Cyber @ DEF CON 24
2024
#16
DEF CON 29 Red Team CTF (Global)
2021
#6
AfricaHackon CTF
2021
05
Certifications
Certifications
CRTE
CRTO
CRTA
MCRTA
CEH
Security+
ERTL - SUMMUS
ERTL - MAILSERVICE