Port Harcourt · Open to opportunities

I take systems apart, then build ones that hold.

Security researcher and software engineer. I reverse-engineer real malware and apps, publish the evidence, and build AI and on-chain products on Solana and Sui with the same threat-model discipline.

Focus
Security · Web3 · AI
Domains
Reverse engineering · On-chain · Products
Background
B.Tech Cybersecurity, FUTO
Portrait of Kennedy Azeru — Software engineer and security researcher
Status

Available for roles

Currently

Sui agent treasuries, AI gateways & cloud-native backends

8
Shipped projects
Solana · Sui
On-chain Web3
RAG / LLM
Production AI
3
Published RE reports
Security research

I take malware apart — and publish the whole record

B.Tech Cybersecurity (FUTO). Three investigations of real specimens — timeline, mechanism, detection — published live with source, IOCs and YARA rules. No CTFs, no toy binaries. NGL and Grindr are analysed from their publicly distributed apps; claims stay limited to what the code shows.

malware.kennedyazeru.space Live Open ↗
Glossary
VB6
the 1998 Windows runtime it was built on.
Replicator
a worm that self-copies with no command server.
Creation-time preservation
keeping a file’s original timestamp while rewriting it.
Incident report · VB6 replicator

Every Executable Was a Copy

92EXEs replaced
11sInfection window
6 yrsQuiet persistence
malware.kennedyazeru.space/ngl Live Open ↗
Glossary
APK
the Android package; 64.2 MB torn down here.
Native libraries
compiled C/C++ modules — NGL ships none.
Firing slot
a scheduled timer in the decompiled code that triggers one message.
RE dossier · Android app

Manufactured Longing

64.2 MBAPK torn down
59.3 MBDecompiled JS
24Firing slots
malware.kennedyazeru.space/grindr Live Open ↗
Glossary
Ad SDK
an ad library that shares your device identifiers.
Telemetry
device fields shipped off the handset.
Behavioural score
a label like “Reply likely” on a profile.
RE dossier · Dating & ad-tech

The Hidden Passengers

13Ad & tracking SDKs
129Telemetry fields
37Permissions
Capabilities

Depth across the full product surface

High-throughput APIs, typed frontends, production AI, and Sui Move protocols that respect latency, cost, and security.

shield

Security research & engineering

Malware analysis and reverse engineering with published IOCs and YARA rules, plus OAuth/JWT, secure API design, secret sanitization before LLM calls, and capability-based ownership on Sui.

token

Web3 · Solana & Sui

Rust/Anchor programs on Solana, Sui Move contracts, programmable agent treasuries, on-chain spend policies, wallet auth via Mysten dapp-kit, PTBs, and hybrid dApps.

account_tree

AI × on-chain settlement

Gateways that settle LLM spend on-chain (SEAL / Otter): non-custodial caps, velocity pause, multi-provider routing, and agent SDKs.

psychology

AI & LLM systems

RAG pipelines, embedding search, Groq/Llama inference, multi-provider routing, and real-time AI workflows with citation and safety controls.

database

Backend architecture

Go services with Gin & GORM, Node/TS gateways, REST APIs, microservices patterns, PostgreSQL, and Firebase for durable, high-throughput backends.

layers

Fullstack product UI

Next.js 15+, React 19, TypeScript, and Tailwind — responsive PWAs, wallets, and dashboards with production-grade UX and type safety.

Selected work

Case studies worth opening

Full project index →
Social dApp

DSpace

SuiPod Chat — hybrid decentralized collab: wallet identity, on-chain pods, Firebase realtime messaging, and in-chat SUI transfers.

ReactSui dapp-kitFirebase
AI · CAD

Cgen

Natural language → validated STEP/STL CAD files. Groq specs, Pydantic guardrails, deterministic CadQuery geometry.

PythonGroqCadQuery
SaaS · Attendance

Present

Geo + face-verified lecture attendance. Next.js and Firebase with on-device recognition — faces never leave the browser.

Next.jsFirebaseMediaPipe
Fraud detection

Asguard

Real-time transaction fraud pipeline combining rule-based scoring with AI risk assessment. Flags high-risk events and generates natural-language summaries at sub-second latency.

Rule scoringAI risk
Enterprise RAG

Azeru

Document intelligence that ingests PDFs into chunked, embedded knowledge bases. Semantic retrieval powers citation-backed answers for knowledge-heavy workflows.

RAGEmbeddings
Real estate SaaS

Hauser

Property marketplace for the Nigerian market with role-aware onboarding, dynamic listings, real-time Firestore sync, and click analytics for premium tiers.

FirestoreMarketplace
Verification

Vouch

Point your phone at a pack: NAFDAC/PPB registry verdicts with vision-AI reads, hazard alerts and community reports.

JavaScriptVision AI
Enterprise

Absolute Energy

Corporate website for an oil & gas enterprise client — company profile, service lines and enquiry capture.

Corporate siteResponsive
Experience

Professional timeline

Security Researcher

Self-directed · malware.kennedyazeru.space

  • Published three investigations of real specimens — a VB6 replicator, NGL and Grindr’s ad-tech stack — covering timeline, mechanism and detection.
  • Released source, IOCs and YARA rules for the replicator report on GitHub.

Web3 Builder

Solana & Sui · Superteam Nigeria community

  • Builds on Solana with Rust/Anchor and on Sui with Move; shipped DSpace, a hybrid dApp with on-chain pods and in-chat SUI transfers.
  • Active in the Superteam Nigeria ecosystem through hackathon and bounty work.

Fullstack Developer Intern

Dmiebi IT Ventures

  • Architected Go backend services and REST APIs for high-throughput data operations.
  • Shipped TypeScript web apps with cloud-native architecture and real-time data sync.
  • Implemented OAuth/JWT authentication and AI features via external LLM APIs.

B.Tech in Cybersecurity

Federal University of Technology, Owerri (FUTO)

  • Secure system design, ethical hacking foundations, and defensive engineering — grounding product work in threat models and least-privilege defaults.
Stack snapshot

Tools I use in production

Backend

  • Go (Gin, GORM)
  • Node.js
  • REST / microservices
  • PostgreSQL · Firebase

Frontend

  • Next.js 15+
  • React 19
  • TypeScript
  • Tailwind CSS

AI

  • RAG & embeddings
  • Groq / Llama 3–4
  • Semantic search
  • Multi-provider LLM APIs

Web3 · Solana & Sui

  • Rust · Anchor (Solana)
  • Move smart contracts
  • Mysten dapp-kit · PTBs
  • Agent treasuries · x402 · wallet auth

Ops & security

  • Docker · CI/CD
  • OAuth / JWT
  • API hardening
  • Malware analysis · YARA
  • Reverse engineering
  • Solidity · Storj
Full technology map
Beyond the code

Hobbies & interests

Security research lives in its own section above. The other habit that sharpens what I ship: making expensive tooling free.

sync

Free-alternative tinkerer

I port paid and proprietary tooling to open, free equivalents — agent workflows from Claude Code to OpenCode, the Cyber Strike security harness ported to OpenCode, and Koe’s native MCP server built as a free alternative to ElevenLabs, because paying for API access should never be the entry ticket.

Services & pricing

Hire me for production builds — fixed scope, fixed price

Simple sites from ₦50k (≈ $35) · Backend APIs from ₦150k (≈ $100) · Fullstack apps from ₦200k (≈ $135) · AI/RAG from ₦300k (≈ $200) · Web3 dApps (Solana & Sui) from ₦500k (≈ $335). Scoped in writing, shipped with docs and handover.

Contact

Let’s talk about the next role

Open to fullstack, backend, AI, and Web3 roles. Happy to walk through architecture on Asguard, Cgen, Present, Vouch, or any system in the portfolio.