Oluwapelumi (@RootHawk_) header
Oluwapelumi (@RootHawk_) profile picture

Chapter Lead @APIsecUNigeria | Dr @ireteeh ‘s mentee | A Marine Engineer | Multimedia | Cybersecurity | AppSec | PenTester | Ethical hacker | Red teamer

Joined May 2020
Photo by Oluwapelumi (@RootHawk_)Photo by Oluwapelumi (@RootHawk_)Photo by Oluwapelumi (@RootHawk_)Photo by Oluwapelumi (@RootHawk_)Photo by Oluwapelumi (@RootHawk_)Photo by Oluwapelumi (@RootHawk_)Photo by Oluwapelumi (@RootHawk_)Photo by Oluwapelumi (@RootHawk_)Photo by Oluwapelumi (@RootHawk_)
Oluwapelumi retweeted
Come and test your knowledge of API Security!
🏆 API Security Quiz starts TODAY. Mon 2nd – Fri 6th Nov · 6PM WAT Quiz link on our Discord (QR on the flyer). How well do you know API security? Tag someone you can beat 👇 @ireteeh @_DeejustDee @segoslavia #APISEC #APISecurity
1
2
83
Oluwapelumi retweeted
I just scored 93/100 on the @apisecunigeria API Security Quiz! Grade - 🔐 Security Researcher Think you can beat me?
2
2
10
229
🏆 API Security Quiz starts TODAY. Mon 2nd – Fri 6th Nov · 6PM WAT Quiz link on our Discord (QR on the flyer). How well do you know API security? Tag someone you can beat 👇 @ireteeh @_DeejustDee @segoslavia #APISEC #APISecurity
3
2
7
294
This week, we're exploring Reconnaissance in Bug Bounty with @Olamdeen , AppSec Engineer & Bug Bounty Hunter. Tuesday, 3 Nov 2026 7–8 PM WAT APIsec University Nigeria Discord Learn how to map attack surfaces and identify potential targets. Join us! 🔥 @ireteeh @segoslavia
8
1
13
600
Mentee Spotlight @__Zaayn_ ✨ Joining the mentorship programme changed how Bolu approached her job search. She received practical coaching on how to approach interviews, communicate her experience, and present herself effectively. She applied what she learned in her subsequent interviews, went into them with a new level of confidence and preparation, and secured a job after the next few interviews she attended. The programme also helped Bolu grow beyond the technical side of cybersecurity. The public-speaking sessions strengthened her communication skills, while the presentations and project defenses improved her ability to clearly explain ideas and present her work. One of her most valuable experiences was being appointed Co-lead for a cross-domain joint project. The experience strengthened her leadership and collaboration skills while broadening her understanding of the different areas that make up the cybersecurity landscape. By the end of the programme, Bolu had become more effective in her work, more comfortable collaborating with teammates, and more knowledgeable about cybersecurity beyond her immediate area of expertise. Her standout moments were the public-speaking sessions, debates, and the projects she worked on. Each experience challenged her in a different way and contributed to her growth both professionally and personally. Overall, the mentorship programme gave Bolu practical experiences and skills that she continues to apply in her career. I am proud of you Bolu 💪
7
18
1
121
7,398
Oluwapelumi retweeted
Excited to share that I’ve officially earned my Certified API Security Analyst (CASA) certification from @apisecu Another milestone achieved in my cybersecurity journey. Thank you @RootHawk_ Thank you @APIsecUNigeria @ireteeh #APISecurity #CASA #Cybersecurity
21
6
1
83
1,803
Thank you for you honest feedback, we are still on the lookout for or feedbacks from developers and engineers building a software product that needs their codes needs to be audited. Your feedback for @offshield_ai will be appropriated. Click here to try it out: ide.offshield.tech
🤖 Made with AI
tested his out btw , works like a charm , somehow it was able to import all the code from a folder to the web in seconds , that's quite impressive, and to scan a large codebase, that's some good token management, found over 8 non critical issues with this
1
3
6
400
Excited to share a major milestone on the OffShield AI journey! Over the past few weeks, I’ve been architecting and building OffShield AI (@offshield_ai ) transforming it from a local IDE security extension into a fully functional, cloud-backed SaaS security platform. Building modern developer tools requires a balance of low-latency client performance and centralized cloud control. Here is a look at the hybrid architecture we just pushed live: Cloud Gateway & Source of Truth: Powered by a Node.js/Express backend deployed seamlessly on Vercel, handling secure API endpoints for server-side operations. Remote License Verification: Implemented robust cloud-backed license validation (/api/v1/verify) integrated with VS Code secure storage to protect commercial distributions. Dynamic Over-The-Air (OTA) Rule Synchronization: Instead of forcing users to reinstall the extension every time a new threat signature emerges, OffShield dynamically pulls down the latest SAST rules (/api/v1/rules) straight from the cloud with local offline caching for resilience. Real-Time AppSec at the Edge: The extension scans code locally on the client side (catching hardcoded secrets, SQL injections, command execution hazards, and more) while providing instant AI-assisted auto-remediation quick-fixes right in the editor. Seeing the .vsix package successfully compile, verify against the cloud backend, and light up the editor with real-time vulnerability diagnostics has been an incredible ride. A massive shoutout to everyone building in the AppSec and developer-tooling space. We are just getting started! @GammsApp
5
4
3
37
1,666
#TechnicalTuesdays recap. Emmanuel Bakare, A Senior DevOps Engineer, ran a live demo on dylib injection via process environment variables: how macOS loads libraries, what an environment can change, and how protections like SIP push back. @ireteeh #APISEC #TechnicalTuesdays
2
7
168
Dear Hiring Managers 👇🏾 Hire a Cybersecurity Intern Hire a Cybersecurity Intern Hire a Cybersecurity Intern Give someone a chance 💪
36
152
15
571
17,676
🔐 Tonight, 7PM WAT. #TechnicalTuesdays: Dylib Injection via Process Environment Variables with Emmanuel Bakare, Senior DevOps Engineer. Does your app trust its environment too much? Come find out. Joining? Drop a 🔐 @ireteeh @_DeejustDee @cyberjeremiah @segoslavia #APISEC
🍎 Tomorrow on #TechnicalTuesda Dylib Injection via Process Environment Variables, with Emmanuel Bakare, Senior DevOps Engineer. How process environments shape what code runs, and how to defend against it. 🗓️Tue, Oct 20 ⏲️7-8PM WAT 📍Our Discord @_DeejustDee @ireteeh #APISEC
2
1
4
245
Congratulations my guy!!!!
Thank my mentorrr Balancing marine engineering with cybersecurity is a lot, but dedication, commitment, and passion keep me going. Even when we sail out of network range, I still show up. Thank you Dr. You made this! A moving man!! @ireteeh @Cyberhijabitech @OnijeC
1
1
5
330
Mentee Spotlight @RootHawk_ ✨ When Jonathan began his cybersecurity journey, he was learning in different directions without a clear path. That changed when he joined my mentorship program as the 50th and final mentee selected. Despite being disqualified at the second interview stage, I saw his potential and gave him a second chance that helped shape his career. During the program, Jonathan took on three leadership roles, leading the initial group, becoming the Ethical Hacking track lead, and later leading his final project team. He gained hands-on cybersecurity experience, strengthened his collaboration and communication skills, and celebrated a major milestone when his team won a CTF competition. He also built LinkGuard, a Slack bot that checks links for potential threats, which was deployed across the mentorship community. His growth continued beyond the program through APIsec University, where he progressed from Trial Ambassador to Ambassador, became the lead of the first official APIsec University Nigeria chapter, and later took on global community roles as a Community Moderator and Central Chapters Coordinator. Jonathan has since hosted API security technical sessions, conducted web and mobile API penetration testing, and collaborated with CybariK to organize the first APIsec University Nigeria and CybariK on-site event, attracting over 100 attendees. He continues to build practical cybersecurity solutions, including BurpHub, a Burp Suite activity tracker designed to help security practitioners monitor usage and maintain consistent learning and testing streaks. For Jonathan, the mentorship offered more than technical knowledge. It provided structure, practical experience, leadership opportunities, confidence, and a valuable professional network. From receiving a second chance to leading teams, winning competitions, building security tools, and coordinating a global community, Jonathan’s journey shows what is possible when opportunity meets consistency and determination. His standout moments are leading, building, competing, and most importantly, learning by contributing.
26
39
3
239
5,247
Behind every opportunity that changes a life, there are people who give their time, energy, and commitment to make it possible ❤️ Today, I want to spotlight the amazing team that supported this year’s mentorship application and selection process. From planning and coordination to application reviews, interviews, and final selections, each of you played a valuable role in supporting this process. I’m grateful for your dedication, patience, and willingness to go the extra mile. Because of your contribution, another cohort of aspiring cybersecurity professionals now have an opportunity to learn, grow, build confidence, and take meaningful steps towards their goals. Today, this spotlight is for YOU @AyobamiTo @NaphisaYakubu @lady_sheraz @An_gelos_07 @Ololademiasake_ @adow_bea ✨ “Alone we can do so little, together we can do so much” 💪
11
21
1
86
5,753
🎙️ Tonight, 7PM WAT. AMA with Jennifer Baca, Cybersecurity Risk Leader, on our Discord. Got a question? Comment now and we’ll ask it live. Tag someone who should be there 👇 @ireteeh @_DeejustDee @TemitopeSobulo @segoslavia @ce3nerd @akintunero #APISEC #AMA
🎙️ AMA alert. Ask Jennifer Baca, Cybersecurity Risk Leader, anything. 🗓️ Thu, Oct 15 · 7-8PM WAT 📍 Our Discord Drop your question below and we’ll put it to her live 👇 @ireteeh @_DeejustDee @segoslavia @akintunero @ce3nerd @TemitopeSobulo #APISEC #AMA
1
5
1
7
702
Tonight’s #TechnicalTuesdays was hands-on. @Olamdeen took our members through API testing with Burp Suite: Repeater workflows, JWT checks, and how bug hunters catch blind XSS. Next up: AMA with Jennifer Baca, Thursday 7PM WAT on Discord. 🎙️ @_DeejustDee @ce3nerd @segoslavia
1
1
4
148
Tonight. 7PM WAT. Discord. API Testing with BurpSuite, with @Olamdeen (Hun33er). Install Burp Community Edition beforehand and follow along live. Joining? Drop a 🔧 @ireteeh @segoslavia @_DeejustDee @apisecu @ce3nerd @Sisinerd #TechnicalTuesdays #APISEC
Burp Suite, properly. 🔧 #TechnicalTuesdays: API Testing with BurpSuite 🎙️Anchor: Olamdeen (Hun33er) - AppSec Engineer, Bug Bounty Hunter. 🗓️ Tue, Oct 13, 2026 🕕7:00 PM (WAT) 📍 Our Discord What's your biggest struggle with API testing? Reply 👇 #APIsecUNigeria #BurpSuite
2
5
1
16
1,101
Oluwapelumi retweeted
Locked in yesterday night with my bosses @RootHawk_ and @confirmedHOD, thank you for making the long night worthwhile.
3
2
20
375
“take a picture of your credit card and drop it in chat”
To buy stuff, you can just take a picture of your credit card, drop it in the chat and Grok @Bot will scour the Internet for the best deal on the item you want and order it
Readers added context they thought people might want to know
xAI explicitly warns users not to include personal information in prompts, yet credit card photos may contain such information. Grok Bot's terms state that user data and credentials may be stored in its cloud environment and require human review for financial transactions. x.ai/legal/privacy-… x.ai/legal/grok-bot…
32
69
5
842
62,154
Oluwapelumi retweeted
I GOT INNNN! Say hello to the latest mentee of @ireteeh Thank you so much ma’am, this means so much to me. Super excited for the journey ahead 🥂
37
8
2
142
2,902