Peter Aboderin - Backend Engineer | ContraWork by Peter Aboderin
Peter Aboderin

Peter Aboderin

Async Python backends, data extraction & system audits.

New to Contra

Peter is ready for their next project!

Lagos, Nigeria

WorkPostsAbout

Lagos, Nigeria

I audit infrastructure before attackers do. Most security tools are either bloated enterprise suites that cost ten grand a year or one-off Python scripts that fall over on anything modern. I built AetherScan to sit in the middle — a lightweight, async security auditor that crawls your application, maps the attack surface, and actively tests every input with real payloads. What it does: Web spidering — Crawls your site up to N levels deep, maps every link, form, and parameter automatically Active scanning — Fires 100+ payloads across 8 categories: SQL injection, XSS, path traversal, command injection, NoSQL, LDAP, XML injection Smart analysis — Detects SQL errors, reflected XSS, stack traces, and timing anomalies. No blind guessing Risk scoring — Every finding gets a severity level based on actual evidence, not CVSS voodoo Unified JSON reports — One structured file with metadata, sitemap, findings, and risk breakdown Tested live: Table TargetResultscanme.nmap.orgPort 22 (SSH) + Port 80 open, banner extractedhttpbin.org2 pages crawled, 1 form found, 9 XSS reflections detected Repo: https://github.com/mercury-systems/aetherscan Typical engagements: Pre-deployment security audits for web applications API endpoint hardening assessments Continuous security monitoring for DevOps pipelines Replacing manual pentest checklists with automated scanning Important: I only perform security testing against systems you own or have explicit written permission to test. No gray-hat shit. What I need from you: A target URL and a description of what you're worried about — exposed inputs, injection points, or general hardening. I'll return a sample audit report in 24 hours — structured JSON, no cost, no commitment.
0
6
I extract structured data from HTML: metadata, JSON-LD, tables, and specific elements via CSS selectors. Tested live: 10 quotes extracted from quotes.toscrape.com (http://quotes.toscrape.com) via .quote selector. 57 links from Python docs. Batch mode processes 50 URLs concurrently. Repo: https://github.com/mercury-systems/universal-extraction-engine Typical work: e-commerce product data, news article parsing, real estate listings, DeFi documentation. Send me one URL and what you need extracted. Sample JSON in 24h, free.
0
22
I build API ingestion pipelines that survive when the downstream fails. Most pipelines I audit look fine in the demo and die in production. A 500 error from a third-party API at 2 AM shouldn't mean your entire batch job disappears with no trace. But that's exactly what happens when your system has no retry logic, no circuit breaker, and no dead letter queue. This pipeline handles it differently. POST a list of URLs, get a job ID back immediately. Processing runs in the background — your API never blocks. If a downstream returns 429 or 500, it retries 3 times with jittered exponential backoff. If a domain fails 5 times in 2 minutes, the circuit breaker opens and stops the bleeding. Every failure is stored with the URL, error, and status code. Nothing gets lost. Tested live against httpbin.org (http://httpbin.org): working endpoints return 200 in ~1s with zero retries. Failing endpoints get 3 retries, then surrender gracefully with full error capture. FastAPI + httpx + SQLite. Dockerized. CI-tested across Python 3.10–3.13. Typical work: e-commerce price monitoring, DeFi/CEX price feeds, news aggregation, any data flow that needs to survive unreliable APIs. Send me one unreliable API endpoint and what you need extracted. I'll return a sample pipeline architecture in 24 hours — no cost, no commitment.
0
29
I build scrapers that don't break when the target fights back. Most scraping projects die the same way: script works locally, gets blocked in production, and suddenly you're burning through proxies with nothing to show for it. I've been there. So I built an engine that handles the anti-bot layer automatically. The approach is simple: a fast light tier for normal sites, and a stealth browser tier that kicks in when Cloudflare, DataDome, or PerimeterX shows up. No manual switching. No CAPTCHA farms. The engine detects the challenge, escalates, clears it, and vaults the session so the next request doesn't have to start over. Proof it works — tested live on my own hardware: Google Search results: 33KB extracted via stealth browser, zero blocks Hacker News: 34KB pulled in under 6 seconds on the light tier Cloudflare's own diagnostic endpoint: 200 OK, challenge bypassed The system is containerized, CI-tested, and built to run headless in production. I use it for my own data pipelines and I'm now taking on select client projects. Typical engagements: Competitor price monitoring across e-commerce catalogs Real-time job board or real estate listing aggregation SEO rank tracking at scale Any structured data feed behind a WAF What I need from you: 3 target URLs and a note on what data you need extracted. I'll return a sample dataset within 24 hours — no cost, no commitment. If the quality checks out, we discuss scope and pricing. Not currently taking Facebook, LinkedIn, or Instagram scraping projects.
1
0
68