Osezua | Penetration Tester — Web, Mobile & API

Open to pentest roles & engagements

Penetration Tester — Web · Mobile · API

I break into systems so attackers can't. Hands-on findings, reproducible proofs, fixes that hold.

Web Mobile API Android

Writeups published

Certifications

Domains: web · mobile · API

Android

Core specialty

Featured Work

Web Critical

Defeated a financial app's BVN/NIN face-match gate by rewriting a single API response — deep dive into the trust-boundary failure and the fix.

Read writeup →

Mobile RCE

Dismantled Android apps through RCE exploits — command injection in CyclicScanner, from discovery to impact.

Read writeup →

Mobile RCE

Dismantled Android apps through RCE exploits — command injection in CyclicScanner, from discovery to impact.

Read writeup →

All writeups →

CMPen Android

The SecOps Group

API Security

APISec University

Certified in Cybersecurity

ISC2

Credly Verified

Credly

Web Pentesting

Burp Suite Pro, Postman, sqlmap, ffuf, Nuclei

OWASP Top 10 coverage, authentication bypasses, and business-logic flaws across modern web stacks.

Mobile Pentesting

Frida, Objection, Jadx, MobSF, Apktool

Android assessments: reverse engineering, insecure storage, intents, and weak crypto in production apps.

API & Cloud

REST, GraphQL, AWS, Azure, GitHub Actions

API abuse, BOLA/BFLA patterns, and CI/CD misconfigurations that leak secrets or widen blast radius.

Open to penetration testing roles, engagements, and security research collaborations. The fastest way to reach me is email.

Recruiters: CV and verified credentials are on LinkedIn. A one-line brief of scope and timeline gets a faster reply.