- VB6
- the 1998 Windows runtime it was built on.
- Replicator
- a worm that self-copies with no command server.
- Creation-time preservation
- keeping a file’s original timestamp while rewriting it.
I take systems apart, then build ones that hold.
Security researcher and software engineer. I reverse-engineer real malware and apps, publish the evidence, and build AI and on-chain products on Solana and Sui with the same threat-model discipline.
Available for roles
Sui agent treasuries, AI gateways & cloud-native backends
I take malware apart — and publish the whole record
B.Tech Cybersecurity (FUTO). Three investigations of real specimens — timeline, mechanism, detection — published live with source, IOCs and YARA rules. No CTFs, no toy binaries. NGL and Grindr are analysed from their publicly distributed apps; claims stay limited to what the code shows.
- APK
- the Android package; 64.2 MB torn down here.
- Native libraries
- compiled C/C++ modules — NGL ships none.
- Firing slot
- a scheduled timer in the decompiled code that triggers one message.
Manufactured Longing
- Ad SDK
- an ad library that shares your device identifiers.
- Telemetry
- device fields shipped off the handset.
- Behavioural score
- a label like “Reply likely” on a profile.
The Hidden Passengers
Depth across the full product surface
High-throughput APIs, typed frontends, production AI, and Sui Move protocols that respect latency, cost, and security.
Security research & engineering
Malware analysis and reverse engineering with published IOCs and YARA rules, plus OAuth/JWT, secure API design, secret sanitization before LLM calls, and capability-based ownership on Sui.
Web3 · Solana & Sui
Rust/Anchor programs on Solana, Sui Move contracts, programmable agent treasuries, on-chain spend policies, wallet auth via Mysten dapp-kit, PTBs, and hybrid dApps.
AI × on-chain settlement
Gateways that settle LLM spend on-chain (SEAL / Otter): non-custodial caps, velocity pause, multi-provider routing, and agent SDKs.
AI & LLM systems
RAG pipelines, embedding search, Groq/Llama inference, multi-provider routing, and real-time AI workflows with citation and safety controls.
Backend architecture
Go services with Gin & GORM, Node/TS gateways, REST APIs, microservices patterns, PostgreSQL, and Firebase for durable, high-throughput backends.
Fullstack product UI
Next.js 15+, React 19, TypeScript, and Tailwind — responsive PWAs, wallets, and dashboards with production-grade UX and type safety.
Case studies worth opening
DSpace
SuiPod Chat — hybrid decentralized collab: wallet identity, on-chain pods, Firebase realtime messaging, and in-chat SUI transfers.
Cgen
Natural language → validated STEP/STL CAD files. Groq specs, Pydantic guardrails, deterministic CadQuery geometry.
Present
Geo + face-verified lecture attendance. Next.js and Firebase with on-device recognition — faces never leave the browser.
Asguard
Real-time transaction fraud pipeline combining rule-based scoring with AI risk assessment. Flags high-risk events and generates natural-language summaries at sub-second latency.
Azeru
Document intelligence that ingests PDFs into chunked, embedded knowledge bases. Semantic retrieval powers citation-backed answers for knowledge-heavy workflows.
Hauser
Property marketplace for the Nigerian market with role-aware onboarding, dynamic listings, real-time Firestore sync, and click analytics for premium tiers.
Vouch
Point your phone at a pack: NAFDAC/PPB registry verdicts with vision-AI reads, hazard alerts and community reports.
Absolute Energy
Corporate website for an oil & gas enterprise client — company profile, service lines and enquiry capture.
Professional timeline
Security Researcher
Self-directed · malware.kennedyazeru.space
- Published three investigations of real specimens — a VB6 replicator, NGL and Grindr’s ad-tech stack — covering timeline, mechanism and detection.
- Released source, IOCs and YARA rules for the replicator report on GitHub.
Web3 Builder
Solana & Sui · Superteam Nigeria community
- Builds on Solana with Rust/Anchor and on Sui with Move; shipped DSpace, a hybrid dApp with on-chain pods and in-chat SUI transfers.
- Active in the Superteam Nigeria ecosystem through hackathon and bounty work.
Fullstack Developer Intern
Dmiebi IT Ventures
- Architected Go backend services and REST APIs for high-throughput data operations.
- Shipped TypeScript web apps with cloud-native architecture and real-time data sync.
- Implemented OAuth/JWT authentication and AI features via external LLM APIs.
B.Tech in Cybersecurity
Federal University of Technology, Owerri (FUTO)
- Secure system design, ethical hacking foundations, and defensive engineering — grounding product work in threat models and least-privilege defaults.
Tools I use in production
Backend
- Go (Gin, GORM)
- Node.js
- REST / microservices
- PostgreSQL · Firebase
Frontend
- Next.js 15+
- React 19
- TypeScript
- Tailwind CSS
AI
- RAG & embeddings
- Groq / Llama 3–4
- Semantic search
- Multi-provider LLM APIs
Web3 · Solana & Sui
- Rust · Anchor (Solana)
- Move smart contracts
- Mysten dapp-kit · PTBs
- Agent treasuries · x402 · wallet auth
Ops & security
- Docker · CI/CD
- OAuth / JWT
- API hardening
- Malware analysis · YARA
- Reverse engineering
- Solidity · Storj
Hobbies & interests
Security research lives in its own section above. The other habit that sharpens what I ship: making expensive tooling free.
Free-alternative tinkerer
I port paid and proprietary tooling to open, free equivalents — agent workflows from Claude Code to OpenCode, the Cyber Strike security harness ported to OpenCode, and Koe’s native MCP server built as a free alternative to ElevenLabs, because paying for API access should never be the entry ticket.
Let’s talk about the next role
Open to fullstack, backend, AI, and Web3 roles. Happy to walk through architecture on Asguard, Cgen, Present, Vouch, or any system in the portfolio.