Security Researcher · Lagos, Nigeria
┌──(root㉿iamjoshuanicholas)-[~]
└─# whoami
handle : iamjoshuanicholas
location : Lagos, Nigeria
focus : DarkINT · Attack Surface Management · Cyber Threat Intelligence
stack : Python · Bash · JavaScript · HTML
status : authorizedVisibility is an illusion.
Targeting complex corporate perimeters, cloud infrastructure exposure, and deep asset reconnaissance. I expose critical architectural gaps before threat actors leverage them.
Disciplines
- Firebase & Cloud Misconfiguration Testing
- OSINT & Reconnaissance — Shodan, Sherlock, Maigret
- Web Application Penetration Testing
- Network Scanning & Port Analysis — Nmap, Metasploit
- Vulnerability Disclosure & Report Writing
- GEOINT & Geospatial Analysis — QGIS, Google Earth Pro
CRITICAL · CVSS 9.8 · Disclosed
Unauthenticated access to the entire Firestore database of a crypto platform with 200,000+ registered users. No authentication. No restrictions. Full exposure.
Findings
- Unrestricted read/write on production Firestore instance
- Full user PII in plaintext — emails, UIDs, account balances
- Complete transaction history publicly accessible
- Active balance overflow vector identified
- KYC documents at risk ahead of April 2026 platform launch
- Networking & Web Fundamentals — TryHackMe
- Web Application Hacking — PortSwigger Academy
- Bug Bounty Methodology
- eJPT Certification
