3MTT Cohort 3 Cybersecurity Fellow | Lagos, Nigeria
Building security tools, investigating vulnerabilities, and documenting practical security research across web applications, with additional work in smart contracts.
syco@karma:~$ cat about.txt
Name : MR SYCO
Location : Lagos, Nigeria
Track : 3MTT Cohort 3 Cybersecurity — Ethical Hacking & Cloud Security
Focus : Web App Security | Security Automation | Bug Bounty
Exploring : Smart Contract Security | Stellar / Soroban
Platforms : Immunefi · Cantina · HackerOne · Bugcrowd
Background : B.Sc. International Relations | Former NAMA Intern
GitHub : @Sycosmile
X : @MrSyco09
- Practising web application security, including injection, authentication, access control, and business-logic testing.
- Building Python tools for reconnaissance, CTF workflows, and bug-bounty triage.
- Exploring smart contract security, including Stellar/Soroban.
- Writing proof-of-concepts and improving the clarity and reproducibility of security reports.
- Documenting my 3MTT Cohort 3 learning journey.
Open to: junior security roles, responsible security research, bug-bounty collaboration, and mentorship.
Security-focused work first. Sentinel Review and Stellar Security Gate are my own projects, published under my second GitHub account, Stackgirl01.
| Project | What it does | Stack | Status |
|---|---|---|---|
| TG-Threat-Monitor | Monitors public Telegram channels for CVEs, malware hashes, IPs, domains, and other IOCs, with VirusTotal enrichment and HTML reporting. | Python · Telethon · SQLite | v1.0.0 |
| subrecon | Reconnaissance pipeline for passive subdomain enumeration, active DNS brute-forcing, and HTTP liveness checks. Use only on systems you own or are authorized to test. | Python | v1.0.0 |
| Sentinel Review | GitHub Action that sends pull-request diffs to Claude for security analysis and posts inline review comments. | TypeScript · Claude API | Published |
| Stellar Security Gate | GitHub Action for checking Soroban smart contracts for potential security issues in CI. | TypeScript · Soroban | Published |
| Bug-bounty-ai | Experimental bug-bounty workflow project for reconnaissance, web/API testing support, AI-assisted planning, and structured reporting. See the repository for implemented capabilities and limitations. | Python | Active development |
| CTFMATE | CLI tool for tracking CTF challenges, flags, and notes. | Python · Click · Rich | Active development |
| BugBot | Claude-powered reference assistant for bug-bounty and penetration-testing workflows, built as a Claude artifact. | React · Anthropic API | Reference tool |
| DaemonBot | Telegram bot for multi-chain crypto monitoring, including RugCheck integration, PNL/scan cards, and contract-address detection across supported networks. | Python · Groq · Redis | Active development |
| GIT KING Bot | Multi-user Telegram bot for GitHub repository workflows, including issues, pull requests, deployments, and repository watching. | Python · SQLite · Railway | Active development |
| NET-OS | Network-monitoring simulation with live metrics, anomaly detection, and a strategy engine exposed through FastAPI and a dashboard. | Python · FastAPI · SQLite | Active development |
More projects and experiments are available in my repositories.
| Project | Contribution | Recognition |
|---|---|---|
| Cougr | Merged PR #346: a turn-based web client for Cougr's turn-based contract template. React + TypeScript (Vite) app that connects to the Freighter wallet, rejects non-Testnet wallets, reads game state from Soroban RPC, and signs moves with the connected wallet. Includes tests and a CI workflow. | Selected for the XERJ Corpus Hub, where AI coding agents retrieve it as a worked reference. |
Reconnaissance & OSINT
Nmap · theHarvester · Shodan · Amass
Web Application Security
Burp Suite · SQLMap · Nuclei · Metasploit
Smart Contracts — learning and hands-on projects
Solidity · Rust / Soroban · Hardhat · Foundry
Programming & Environment
Python · Bash · JavaScript · TypeScript · Kali Linux
My 3MTT Cohort 3 notes, covering Linux and networking fundamentals through attacks, defense, and security frameworks, are in cybersec-learning-notes.
“The quieter you become, the more you are able to hear.” — Kali Linux motto