Qwesi Vybez

Conducted end-to-end manual penetration testing across web applications and APIs, including reconnaissance through post-exploitation reporting aligned to OWASP Top 10 standards. Identified and demonstrated high-impact vulnerabilities such as SQL injection, XSS, IDOR/BOLA, mass assignment privilege escalation, race conditions, NoSQL injection, and authentication bypass.

Conduct end-to-end penetration testing engagements in enterprise-simulation environments, mirroring real-world attack scenarios against web applications and APIs.
• Manually executed SQL Injection and Cross-Site Scripting (XSS) attacks without tool assistance, demonstrating ability to simulate attacks as required in manual ethical hacking assessments.
• Performed full penetration testing lifecyc

Manage logistics for the prospective students program, including enrollment, scheduling, and resource allocation.

Troubleshoot and resolve technical issues faced by students in their lab and during Classes

Supported cybersecurity training environments and lab-based ethical hacking cohorts. Contributed to hands-on lab troubleshooting and operational readiness of security training programs.

• Supported cybersecurity training environments and lab-based ethical hacking cohorts. • Contributed to foundational cybersecurity education, hands-on lab troubleshooting, and operational readiness of security training programs.

• Delivered cybersecurity awareness training on phishing, password security, social engineering, and cyber hygiene to students and staff.
• Translated technical security risks (authentication threats, social engineering) into practical, real-world safety guidance for non-technical audiences, mirroring the SME knowledge-sharing responsibilities of an ethical hacker role.

Performed full penetration testing on a structured web application environment, identifying vulnerabilities including authentication bypass, mass assignment privilege escalation, IDOR, race condition exploitation, and NoSQL injection. Produced a report with exploitation evidence, risk ratings, and remediation strategy.

Built RESTful APIs with authentication, role-based access control (RBAC), and secure data handling. Implemented a secure voting system enforcing transactional integrity and developed an AI-based job recommendation backend with secure authentication layers.

Delivered cybersecurity awareness training for students and staff, focusing on practical guidance for phishing, password security, social engineering, and cyber hygiene.

Pursuing a BSc in Computer Science at Palm University College (Jul 2023–Jul 2027).