Building internal tools for enterprise, by day.
Breaking things (with permission) and writing about it, by night.
- 🛠️ Software Engineer, Port Harcourt, NG
- 🎓 BSc Software Engineering, Babcock University
- 🔐 CEH & MCRTA certified
- ✍️ I write security research on Medium's InfoSec Write-ups
- 🧪 Home lab: VMware + Kali Linux, used for offensive-security tool development
- 📚 Currently targeting the MACSec (MSc Cybersecurity) program at UNB Fredericton — Fall 2027
- 💬 Ask me about Next.js internal tooling, ticketing/RBAC systems, or binary exploitation primitives
Offensive Security & Research
- HeapSentinel — heap exploitation primitive detector for Linux binaries; combines Frida dynamic analysis and angr static analysis, 88.9% F1 on how2heap benchmarks
- ShellForge — constraint-aware shellcode generator (C99/Python) targeting x86-64, x86-32, ARM Thumb, and MIPS BE
- LOLBins Toolkit — Living-off-the-Land post-exploitation toolkit (in progress)
- Shroud — geo-aware secure Electron browser with Tor/residential proxy hybrid routing and WebRTC leak prevention
- VaultChain — Sovereign ID Framework using Hyperledger Fabric for blockchain identity verification
Enterprise Systems
- GenHears — full-stack complaint & CSAT management system across QSR, IC, Cinema, and Hotel business units; 4-tier RBAC, dynamic public forms, sentiment analysis
- ICB (Internal Complaints Board) — internal service request & ticketing system with priority queues, state machines, and email notifications
- Ask HR — RAG-based HR document assistant with verbatim excerpt retrieval
Portfolio · LinkedIn · Twitter/X · Medium · mailto:toluwanimioderinde@gmail.com