0000m
depth
I test web, API, Active Directory, cloud and mobile environments, turn attack paths into clear evidence, and help teams fix the risks that matter — ethically and methodically.
Hi, I'm Rasaq.
I'm Rasaq Abdulwahab Ayomide — a.k.a. 0xC4LM4Y / Calm Ay. An Industrial Chemistry undergraduate at the University of Lagos, fully building my career in cybersecurity through certifications, CTFs, labs, internships, hackathons, and real security projects.
My work sits at the intersection of offensive and defensive security. I study how attacks work, how systems get exploited, and how to stop them — from web and API pentesting to Active Directory red teaming, cloud security, and mobile/AppSec.
I don't collect certificates to look busy. I build evidence — GitHub repos, vulnerability reports, security tools, and lab writeups that prove I can actually do the work.
Download resumeWhere I've been working
- Completed the full Ethical Hacking Track — all 10 stages passed, top score 96/100.
- Foundations, applied cryptography, web app security, incident response, and governance & risk.
- Applied ISC2 Code of Ethics, NIST SP 800-63B / 800-92, and MITRE ATT&CK across deliverables.
- Performed offensive assessments across web, API, and application attack surfaces in a large financial-services environment.
- Exploited and documented vulnerabilities, translating findings into clear, actionable remediation.
- Emerged from the Squad Hackathon 3.0 pipeline — top 9 of 1,600+ teams — into hands-on offensive work.
- Monitored network security and identified misconfigurations within production systems at scale.
- Gained exposure to security operations across water treatment, bottling, and plant network segments.
- Mentored a full cohort through Cisco fundamentals and ISC² CC preparation.
- Led sessions on ethical hacking, tooling, and the security mindset.
Things I've built and broken
Offensive research, pentest reports, and security tooling — each one shipped with evidence.
Proof of work
Hands-on certifications and training — earned by doing, not just testing.
Notes I keep coming back to
Walkthroughs and reports on Active Directory, web & API, cloud, mobile, and blue-team detection.
Tools I reach for
Small, fast, client-side utilities — nothing leaves your browser.
Operations
Recipe
load a PNG, then encode or decode.